last executing test programs: 9m57.062771513s ago: executing program 3 (id=8448): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x10000, 0x0, 0xcb6}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_TC={0x5, 0x6, 0x6}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) 9m56.92772603s ago: executing program 3 (id=8451): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x6, 0x1, 0x0, 0x4, 0x3}, 0x1c) 9m56.855594614s ago: executing program 3 (id=8454): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) recvmmsg(r0, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0}, 0x80}], 0x1, 0x32000, 0x0) 9m56.810194886s ago: executing program 3 (id=8455): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000100)='./bus\x00', 0x804c00, &(0x7f0000000ac0)=ANY=[@ANYBLOB="6465636f6d706f73652c63726561746f723df3fffff72c6e6c733d69736f383835392d31352c706172743d3078303030303030303030303030303000002c756d61736b3d30303030303030303030303030303030303136303637362c63726561746f723d6c2d7d912c706172743d307830303030d5f73030303030303030303030382c6e6f626172726965722c6e6c733d6d6163726f6d616e69616e"], 0xff, 0x6da, &(0x7f0000000b80)="$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") mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000002c0), 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) 9m56.612722306s ago: executing program 3 (id=8457): r0 = socket(0x200000000000011, 0xa, 0xc) bind$packet(r0, 0x0, 0x0) 9m55.819382848s ago: executing program 3 (id=8462): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000700001002abd7000fbdbdf25070000000ad8"], 0x18}, 0x1, 0x0, 0x0, 0x8c4}, 0x0) 9m55.695061134s ago: executing program 32 (id=8462): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000700001002abd7000fbdbdf25070000000ad8"], 0x18}, 0x1, 0x0, 0x0, 0x8c4}, 0x0) 3.308168688s ago: executing program 0 (id=22532): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="340000002e0003050000000000000000200000f8ffffffffffffff0008000000", @ANYRES32, @ANYBLOB="0c000f"], 0x34}], 0x1}, 0x0) 3.101508679s ago: executing program 0 (id=22537): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x170bd2a, 0x25dfdbfc, {0x1c, 0x0, 0x0, 0x0, 0x0, 0xa}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000881}, 0x0) 2.950454667s ago: executing program 0 (id=22541): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x1, 0x0, 0xfd97}) 2.87269966s ago: executing program 0 (id=22544): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000180)=[{&(0x7f0000000300)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a80016002000034004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0x12b}], 0x1}, 0x0) 2.571683386s ago: executing program 0 (id=22550): syz_mount_image$xfs(&(0x7f0000000200), &(0x7f0000000100)='./file1\x00', 0x8000, &(0x7f0000000040), 0x4, 0x9836, &(0x7f0000009b80)="$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") lsetxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000700)={{}, {0x1, 0x2}, [], {0x4, 0x4}, [], {0x10, 0x6}, {0x20, 0x3}}, 0x24, 0x3) 1.839342824s ago: executing program 2 (id=22567): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) 1.780240327s ago: executing program 2 (id=22568): r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x7ffffffe, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) 1.646234554s ago: executing program 2 (id=22571): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380100000001010400000001141a00000200ffff0800074000000001240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c000280050001000000000024000e800c00028005000100930000001400018008000100ac1414bb080002006401010208000340000000008400068014000500ff020000000000000000000000000001080002007f0000010800020000000000080001"], 0x138}}, 0x0) 1.390518658s ago: executing program 2 (id=22576): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb0}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.240078195s ago: executing program 2 (id=22580): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0x1d, r0, 0x0, 0x0) 1.162867419s ago: executing program 0 (id=22581): syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000a40)={[{@pquota}, {@sysvgroups}, {@nolargeio}, {@grpid}, {@nogrpid}, {@noalign}, {@inode64}, {@attr2}]}, 0x1, 0x97ee, &(0x7f0000012f40)="$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") quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0xee00, 0x8cffffff00000000) 1.071413724s ago: executing program 2 (id=22584): sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000340)='./file1\x00', 0x0, &(0x7f0000000200)={[{@rescue={'rescue', 0x3d, 'ignoresuperflags'}}, {@subvol={'subvol', 0x3d, '/dev/audio#\x00'}}]}, 0xff, 0x50d4, &(0x7f00000051c0)="$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") 959.76816ms ago: executing program 4 (id=22585): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xe, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x300}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x63}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 866.116725ms ago: executing program 4 (id=22588): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)={0x18, 0x37, 0x301, 0x270bd24, 0x25dfdbf9, {0x5}, [@generic="12"]}, 0x18}}, 0x0) 756.44931ms ago: executing program 1 (id=22589): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)={0x14, 0x3, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x840c0}, 0x400040c0) 755.73971ms ago: executing program 4 (id=22590): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a010200000000000000000100fffd0900010073797a30000000000900030073797a300200000074000000060a010400000000000000000100000008000b400000000038000480340001800a0001006d617463680000002400028008000300e4edf2b708000240000000000e000100636f6e6e6c6162656c0000000900010073797a300000000014000580"], 0xe8}, 0x1, 0x0, 0x0, 0x20000010}, 0x50) 694.643213ms ago: executing program 5 (id=22591): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) 694.149993ms ago: executing program 1 (id=22592): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0xe000003, 0x0, 0x0, 0x1, 0x4000005}) 519.750253ms ago: executing program 1 (id=22593): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_MASK={0x4}]}, 0x1c}}, 0x0) 519.588193ms ago: executing program 5 (id=22594): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000500)={'filter\x00', 0x7, 0x4, 0x3e0, 0x100, 0x1e8, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x20, 'ERROR\x00', 0x0, "143f1eb01740dab84e99766c534e74b46eb7f8197066c46abc861251a2f9"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x5}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x39}, @broadcast, 0x0, 0xff000000, 0x9, 0xf, {@mac=@local, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0x0, 0xff]}}, 0xe06, 0x0, 0xe0, 0x8, 0x0, 0xd, 'pim6reg1\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x0, 0x1a1}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private=0xa010100, @loopback, 0xf}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) 509.065363ms ago: executing program 4 (id=22595): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, 0x0) 474.921775ms ago: executing program 1 (id=22596): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x89b0, &(0x7f0000000040)="582e4d7d3d82d005a451d2653a") 440.869607ms ago: executing program 5 (id=22597): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@empty, 0x1100, 0x3c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 397.363169ms ago: executing program 4 (id=22598): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0x1, 0x7fe2, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000740), 0x80000002, r0}, 0x38) 273.688655ms ago: executing program 5 (id=22599): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pidfd_send_signal(r0, 0x0, &(0x7f0000000300)={0x0, 0x1, 0xfffffffa}, 0x0) 172.170251ms ago: executing program 1 (id=22600): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) write(r0, &(0x7f0000000000)="2590bc8650fb94eeaa901b5d39e1", 0xe) 126.616423ms ago: executing program 5 (id=22601): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000001380)={&(0x7f0000000080)={0xa, 0x4e23, 0x7, @remote}, 0x1c, &(0x7f00000012c0)=[{&(0x7f0000000100)="6754dd2e8c49465822846b81cdbc98d35c07a310d586b439f68efbba5bc068d01b5634650e9442a00d64a871d8807e", 0x2f}, {&(0x7f0000000140)="adfe8b9405cde3db5afeac4083d5c7da0d3cd09f4821015e2726fff029f6c6a6cd2113801743b019b067f72099d94619856d968f2add4d349dfbc088ca24bc890da9ae04931f84c6272dcce088", 0x4d}, {&(0x7f00000001c0)="3d512cef9f84027479a5e648b4354f18c541f722df949ae38e8bc2828a3b1d967d434c8a1f24acdf7470d4d16e998d64fd230168c84ad5c3d723724fd693efb7b46662569e8ef7cb178cc35074efe06ee3938e8f7e478e888a955f5bb3127f9e2979c355c0756d98ca80790ed82108696baf586a0627c92c3776767457e7fe074a4c89c66d684b4688ec464d494628c0001aa9bbf593e49e49d0434997593e406bea0ccdff0097b19ee61f7058a70b1d8a336e900e84e4f2239998f75cbd66dea3a511a1113ba52f58", 0xc9}, {&(0x7f00000002c0)="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", 0x44a}], 0x4, &(0x7f0000001340)=[@dontfrag={{0x14, 0x29, 0x3e, 0x1}}], 0x18}, 0x89) 27.095368ms ago: executing program 1 (id=22602): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f01}, @TCA_CTINFO_ZONE={0x0, 0x4, 0xc}, @TCA_CTINFO_ZONE={0xfffffffffffffd47, 0x4, 0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) 1.499749ms ago: executing program 4 (id=22603): r0 = syz_socket_connect_nvme_tcp() close(r0) 0s ago: executing program 5 (id=22604): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) kernel console output (not intermixed with test programs): or: No usable UNC path provided in device string! [ 1305.389876][ T6072] usb 6-1: New USB device found, idVendor=069a, idProduct=0001, bcdDevice=51.c5 [ 1305.411178][ T6072] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.419329][ T6072] usb 6-1: Product: syz [ 1305.477870][ T6072] usb 6-1: Manufacturer: syz [ 1305.496029][T15398] netlink: 228 bytes leftover after parsing attributes in process `syz.1.19866'. [ 1305.499656][ T6072] usb 6-1: SerialNumber: syz [ 1305.626989][ T6072] pwc: Askey VC010 type 1 USB webcam detected. [ 1305.881003][ T6072] pwc: send_video_command error -71 [ 1305.886267][ T6072] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1305.907707][ T6072] Philips webcam: probe of 6-1:76.0 failed with error -71 [ 1305.966527][ T6072] usb 6-1: USB disconnect, device number 45 [ 1306.044143][T15429] xt_TCPMSS: Only works on TCP SYN packets [ 1306.099863][T15434] lo speed is unknown, defaulting to 1000 [ 1306.133842][T15434] virt_wifi0 speed is unknown, defaulting to 1000 [ 1306.768120][ T6072] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1306.871011][T15483] loop5: detected capacity change from 0 to 512 [ 1306.927447][T15487] lo speed is unknown, defaulting to 1000 [ 1306.934420][T15487] virt_wifi0 speed is unknown, defaulting to 1000 [ 1307.016361][T15483] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,. Quota mode: writeback. [ 1307.025593][ T6072] usb 2-1: Using ep0 maxpacket: 16 [ 1307.174872][ T6072] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1307.368127][ T6072] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 1307.392437][ T6072] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.433692][ T6072] usb 2-1: Product: syz [ 1307.438143][ T6072] usb 2-1: Manufacturer: syz [ 1307.449572][ T6072] usb 2-1: SerialNumber: syz [ 1307.471215][ T6072] usb 2-1: config 0 descriptor?? [ 1307.571373][ T6072] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1307.644828][ T6256] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1307.736888][ T6072] usb 2-1: USB disconnect, device number 71 [ 1307.751843][ T9354] usb 2-1: Failed to submit usb control message: -71 [ 1307.762309][ T9354] usb 2-1: unable to send the bmi data to the device: -71 [ 1307.769477][ T9354] usb 2-1: unable to get target info from device [ 1307.794473][ T9354] usb 2-1: could not get target info (-71) [ 1307.816183][ T9354] usb 2-1: could not probe fw (-71) [ 1308.072667][ T6256] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 1308.091964][ T6256] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1308.105292][T15541] lo speed is unknown, defaulting to 1000 [ 1308.112152][T15541] virt_wifi0 speed is unknown, defaulting to 1000 [ 1308.116380][ T6256] usb 6-1: config 0 has no interface number 0 [ 1308.150078][ T6256] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1308.168590][ T6256] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1308.361154][ T6256] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1308.370465][ T6072] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1308.382639][ T6256] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.390768][ T6256] usb 6-1: Product: syz [ 1308.427662][ T6256] usb 6-1: Manufacturer: syz [ 1308.432324][ T6256] usb 6-1: SerialNumber: syz [ 1308.459146][ T6256] usb 6-1: config 0 descriptor?? [ 1308.465357][T15556] netlink: 'syz.4.19936': attribute type 1 has an invalid length. [ 1308.628443][ T6072] usb 1-1: Using ep0 maxpacket: 8 [ 1308.756822][ T6072] usb 1-1: config 0 has an invalid interface number: 33 but max is 1 [ 1308.788735][ T6072] usb 1-1: config 0 has no interface number 1 [ 1308.794904][ T6072] usb 1-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 1308.838383][ T6072] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247 [ 1308.881733][T15579] tmpfs: Bad value for 'mpol' [ 1308.970753][ T6256] usbtouchscreen: probe of 6-1:0.117 failed with error -71 [ 1309.002603][ T6256] usb 6-1: USB disconnect, device number 46 [ 1309.034710][ T6072] usb 1-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 1309.059804][ T6072] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.087923][ T6072] usb 1-1: Product: syz [ 1309.097926][ T6072] usb 1-1: Manufacturer: syz [ 1309.124704][ T6072] usb 1-1: SerialNumber: syz [ 1309.149339][ T6072] usb 1-1: config 0 descriptor?? [ 1309.227455][ T6072] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 1309.432844][T15610] netlink: 132 bytes leftover after parsing attributes in process `syz.2.19963'. [ 1309.445295][ T6072] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 1309.452777][ T2425] pvrusb2: Invalid read control endpoint [ 1309.459200][ T2425] usb 1-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 1309.504435][ T2425] usb 1-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 1309.519341][ T6072] usb 1-1: USB disconnect, device number 92 [ 1309.567122][T15612] netlink: 'syz.1.19964': attribute type 1 has an invalid length. [ 1309.625522][T15612] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.19964'. [ 1310.148500][T15645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19978'. [ 1310.418989][T15658] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1310.563422][ T6256] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1310.852068][ T6256] usb 2-1: Using ep0 maxpacket: 16 [ 1311.065801][T14112] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1311.151548][ T6256] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1311.160798][ T6256] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1311.190625][ T6256] usb 2-1: Product: syz [ 1311.203590][ T6256] usb 2-1: Manufacturer: syz [ 1311.214817][ T6256] usb 2-1: SerialNumber: syz [ 1311.224886][ T6256] usb 2-1: config 0 descriptor?? [ 1311.280726][ T6256] ums-onetouch 2-1:0.0: USB Mass Storage device detected [ 1311.353928][T15698] netlink: 'syz.2.20003': attribute type 4 has an invalid length. [ 1311.354969][T14112] usb 6-1: Using ep0 maxpacket: 8 [ 1311.366810][T15698] netlink: 17 bytes leftover after parsing attributes in process `syz.2.20003'. [ 1311.509556][ T4257] usb 2-1: USB disconnect, device number 72 [ 1311.555325][T14112] usb 6-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1311.572902][T14112] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1311.583896][T15666] loop4: detected capacity change from 0 to 32768 [ 1311.621181][T14112] usb 6-1: config 0 descriptor?? [ 1311.814606][T15666] XFS (loop4): Mounting V5 Filesystem [ 1311.942430][T14112] usb 6-1: string descriptor 0 read error: -71 [ 1311.948836][T14112] uvcvideo 6-1:0.0: Found multiple Units with ID 1 [ 1311.954832][T15666] XFS (loop4): Ending clean mount [ 1311.975703][T14112] usb 6-1: Found UVC 0.00 device (2833:0201) [ 1312.005913][T14112] usb 6-1: No valid video chain found. [ 1312.045885][T14112] usb 6-1: USB disconnect, device number 47 [ 1312.182958][ T4190] XFS (loop4): Unmounting Filesystem [ 1312.552622][ T26] audit: type=1107 audit(1492.461:54): pid=15754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='P' [ 1312.710525][T15763] autofs4:pid:15763:autofs_fill_super: called with bogus options [ 1313.270254][T15803] xt_hashlimit: max too large, truncated to 1048576 [ 1313.296559][T15805] loop2: detected capacity change from 0 to 256 [ 1313.329056][T15804] loop4: detected capacity change from 0 to 2048 [ 1313.407194][T15804] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1313.519338][T15814] cgroup: name respecified [ 1313.767327][T15831] loop4: detected capacity change from 0 to 256 [ 1313.877389][T15835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20066'. [ 1313.991436][ T6416] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1314.112213][T15849] netlink: 'syz.2.20075': attribute type 4 has an invalid length. [ 1314.127683][T15849] netlink: 152 bytes leftover after parsing attributes in process `syz.2.20075'. [ 1314.284456][T15853] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1314.294331][ T6416] usb 6-1: Using ep0 maxpacket: 16 [ 1314.465704][ T6416] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 1314.474207][ T6416] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1314.490908][T15865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20083'. [ 1314.509382][ T6416] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1314.519141][T15865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20083'. [ 1314.551002][T15871] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.20085'. [ 1314.700785][ T6416] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1314.729681][ T6416] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1314.783636][ T6416] usb 6-1: Product: syz [ 1314.814039][ T6416] usb 6-1: Manufacturer: syz [ 1314.831570][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1314.844329][ T6416] usb 6-1: SerialNumber: syz [ 1314.889296][ T6416] usb 6-1: config 0 descriptor?? [ 1315.241286][T15897] lo speed is unknown, defaulting to 1000 [ 1315.281317][T15897] virt_wifi0 speed is unknown, defaulting to 1000 [ 1315.635627][T15920] loop1: detected capacity change from 0 to 16 [ 1315.712672][T15920] erofs: (device loop1): mounted with root inode @ nid 36. [ 1315.728765][T15927] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1315.847764][T15931] netlink: 40 bytes leftover after parsing attributes in process `syz.2.20116'. [ 1315.919578][T15931] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 1315.947412][T15935] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1316.508738][T15957] xt_CT: No such helper "snmp_trap" [ 1316.816113][T15974] sctp: [Deprecated]: syz.1.20136 (pid 15974) Use of int in max_burst socket option. [ 1316.816113][T15974] Use struct sctp_assoc_value instead [ 1316.916314][ T4257] usb 6-1: USB disconnect, device number 48 [ 1317.145220][T15985] usb usb9: usbfs: process 15985 (syz.2.20141) did not claim interface 8 before use [ 1317.174706][T15968] loop4: detected capacity change from 0 to 32768 [ 1317.206645][T15968] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1317.272005][T15968] BTRFS info (device loop4): using free space tree [ 1317.292173][T15968] BTRFS info (device loop4): has skinny extents [ 1317.362753][ T4257] usb 6-1: new full-speed USB device number 49 using dummy_hcd [ 1317.512281][T15968] BTRFS info (device loop4): enabling ssd optimizations [ 1317.683380][ T6256] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1317.747523][ T4257] usb 6-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 1317.929687][ T4257] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 1317.939252][ T4257] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.950469][ T6256] usb 2-1: Using ep0 maxpacket: 16 [ 1317.960457][ T4257] usb 6-1: Product: syz [ 1317.967688][ T4257] usb 6-1: Manufacturer: syz [ 1317.978224][ T4257] usb 6-1: SerialNumber: syz [ 1318.079841][ T6256] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1318.098252][ T6256] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1318.108876][ T6256] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1318.136340][ T6256] usb 2-1: config 0 descriptor?? [ 1318.178232][ T6256] usbhid 2-1:0.0: fixing wrong optional hid class descriptors count [ 1318.303367][ T4257] usb 6-1: Cannot retrieve CPort count: -71 [ 1318.309511][ T4257] usb 6-1: Cannot retrieve CPort count: -71 [ 1318.323809][ T4257] es2_ap_driver: probe of 6-1:246.0 failed with error -71 [ 1318.334019][ T4257] usb 6-1: USB disconnect, device number 49 [ 1318.485134][ T6256] usbhid 2-1:0.0: can't add hid device: -71 [ 1318.491206][ T6256] usbhid: probe of 2-1:0.0 failed with error -71 [ 1318.544716][ T6256] usb 2-1: USB disconnect, device number 73 [ 1319.199860][T16048] netlink: 16 bytes leftover after parsing attributes in process `syz.5.20162'. [ 1319.687353][T16072] cgroup: No subsys list or none specified [ 1319.786794][T16074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20174'. [ 1319.842469][T16079] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1320.222823][T16103] ipt_CLUSTERIP: unknown mode 3918972798 [ 1320.282799][T16105] netlink: 1020 bytes leftover after parsing attributes in process `syz.4.20188'. [ 1320.387957][ T4230] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1320.488882][T16111] openvswitch: netlink: Geneve opt len 3 is not a multiple of 4. [ 1320.560724][T16117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20194'. [ 1320.621536][T16119] netlink: 16 bytes leftover after parsing attributes in process `syz.4.20195'. [ 1320.655394][ T4230] usb 6-1: Using ep0 maxpacket: 8 [ 1320.790703][ T4230] usb 6-1: config 0 has an invalid interface number: 33 but max is 1 [ 1320.801324][ T4230] usb 6-1: config 0 has no interface number 1 [ 1320.819305][ T4230] usb 6-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 1320.846283][ T4230] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247 [ 1320.914640][T16129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20200'. [ 1321.029805][ T4230] usb 6-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 1321.040092][ T6256] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1321.063215][ T4230] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.071318][ T4230] usb 6-1: Product: syz [ 1321.097785][ T4230] usb 6-1: Manufacturer: syz [ 1321.102468][ T4230] usb 6-1: SerialNumber: syz [ 1321.115162][ T4230] usb 6-1: config 0 descriptor?? [ 1321.123677][T16139] loop2: detected capacity change from 0 to 256 [ 1321.170882][ T4230] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 1321.255512][T16139] FAT-fs (loop2): Directory bread(block 64) failed [ 1321.262240][T16139] FAT-fs (loop2): Directory bread(block 65) failed [ 1321.280941][T16139] FAT-fs (loop2): Directory bread(block 66) failed [ 1321.293620][T16139] FAT-fs (loop2): Directory bread(block 67) failed [ 1321.314134][T16139] FAT-fs (loop2): Directory bread(block 68) failed [ 1321.335915][T16139] FAT-fs (loop2): Directory bread(block 69) failed [ 1321.361538][T16139] FAT-fs (loop2): Directory bread(block 70) failed [ 1321.385624][T16139] FAT-fs (loop2): Directory bread(block 71) failed [ 1321.406885][ T4230] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 1321.425879][T16139] FAT-fs (loop2): Directory bread(block 72) failed [ 1321.432544][T16139] FAT-fs (loop2): Directory bread(block 73) failed [ 1321.439480][ T6256] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 1321.456008][ T4230] usb 6-1: USB disconnect, device number 50 [ 1321.475500][ T6256] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1321.486378][ T4230] pvrusb2: Device being rendered inoperable [ 1321.522239][ T4230] pvrusb2: Device being rendered inoperable [ 1321.536163][ T6256] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1321.713765][ T6256] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1321.734384][ T6256] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1321.763158][ T6256] usb 5-1: Product: syz [ 1321.778276][ T6256] usb 5-1: Manufacturer: syz [ 1321.782958][ T6256] usb 5-1: SerialNumber: syz [ 1321.804109][ T6256] usb 5-1: config 0 descriptor?? [ 1321.853276][ T6256] hub 5-1:0.0: bad descriptor, ignoring hub [ 1321.859251][ T6256] hub: probe of 5-1:0.0 failed with error -5 [ 1321.873373][ T6256] usb 5-1: selecting invalid altsetting 0 [ 1322.073600][T16165] tmpfs: Bad value for 'mpol' [ 1322.195092][ T6256] usb 5-1: USB disconnect, device number 76 [ 1322.226030][T16174] netlink: 'syz.5.20221': attribute type 3 has an invalid length. [ 1322.542204][T16190] CIFS mount error: No usable UNC path provided in device string! [ 1322.542204][T16190] [ 1322.582682][T16190] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1322.804800][T16206] SET target dimension over the limit! [ 1322.819877][T16207] netlink: 'syz.5.20237': attribute type 8 has an invalid length. [ 1322.839810][T16207] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.20237'. [ 1323.262351][T16234] netlink: 16 bytes leftover after parsing attributes in process `syz.2.20250'. [ 1323.409242][T14114] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1323.648915][T16258] loop1: detected capacity change from 0 to 256 [ 1323.760790][T16258] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 1323.906695][T14114] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 1323.924595][T14114] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1323.946087][T14114] usb 6-1: config 0 has no interface number 0 [ 1323.981024][T14114] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1323.996685][T14114] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1324.172469][ T6256] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1324.183300][T14114] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1324.211701][T14114] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1324.224285][T14114] usb 6-1: Product: syz [ 1324.228663][T14114] usb 6-1: Manufacturer: syz [ 1324.233419][T14114] usb 6-1: SerialNumber: syz [ 1324.261849][T14114] usb 6-1: config 0 descriptor?? [ 1324.273694][T16288] xt_TCPMSS: Only works on TCP SYN packets [ 1324.377715][T16292] loop4: detected capacity change from 0 to 512 [ 1324.439850][ T6256] usb 3-1: Using ep0 maxpacket: 32 [ 1324.475971][T16292] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nobarrier,stripe=0x0000000000000042,,errors=continue. Quota mode: writeback. [ 1324.578630][ T6256] usb 3-1: config 2 has an invalid interface number: 105 but max is 0 [ 1324.596314][ T6256] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1324.607798][ T6256] usb 3-1: config 2 has no interface number 0 [ 1324.619864][ T6256] usb 3-1: too many endpoints for config 2 interface 105 altsetting 118: 101, using maximum allowed: 30 [ 1324.642206][ T6256] usb 3-1: config 2 interface 105 altsetting 118 has 0 endpoint descriptors, different from the interface descriptor's value: 101 [ 1324.663026][ T6256] usb 3-1: config 2 interface 105 has no altsetting 0 [ 1324.733359][T16309] netlink: 60 bytes leftover after parsing attributes in process `syz.4.20284'. [ 1324.835506][ T6256] usb 3-1: New USB device found, idVendor=22b8, idProduct=2d97, bcdDevice=51.64 [ 1324.856109][ T6256] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1324.877499][ T6256] usb 3-1: Product: syz [ 1324.890024][ T6256] usb 3-1: Manufacturer: syz [ 1324.894689][ T6256] usb 3-1: SerialNumber: syz [ 1324.905367][T16317] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20290'. [ 1324.933625][ T4257] usb 6-1: USB disconnect, device number 51 [ 1325.026584][T16325] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1325.214110][ T4257] usb 3-1: USB disconnect, device number 62 [ 1325.548696][T16354] loop4: detected capacity change from 0 to 64 [ 1326.039817][T16380] netlink: 72 bytes leftover after parsing attributes in process `syz.2.20319'. [ 1326.298302][T16399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20327'. [ 1326.424107][T16405] device bond4 entered promiscuous mode [ 1326.445862][T16405] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1326.491533][T16414] befs: (loop2): No write support. Marking filesystem read-only [ 1326.574937][T16414] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1326.651638][T16414] befs: (loop2): unable to read superblock [ 1327.167408][T16456] CIFS mount error: No usable UNC path provided in device string! [ 1327.167408][T16456] [ 1327.230776][T16456] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1327.461378][T16473] netlink: 'syz.2.20354': attribute type 3 has an invalid length. [ 1327.513536][T16473] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.20354'. [ 1327.681229][T16484] loop5: detected capacity change from 0 to 128 [ 1327.692455][T16427] loop4: detected capacity change from 0 to 32768 [ 1327.811123][T16492] netlink: 40 bytes leftover after parsing attributes in process `syz.2.20361'. [ 1327.822016][T16427] (syz.4.20339,16427,1):ocfs2_init_local_system_inodes:493 ERROR: status=-22, sysfile=7, slot=1 [ 1327.848274][T16492] netlink: 40 bytes leftover after parsing attributes in process `syz.2.20361'. [ 1327.869167][T16427] (syz.4.20339,16427,1):ocfs2_init_local_system_inodes:502 ERROR: status = -22 [ 1327.924897][T16427] (syz.4.20339,16427,0):ocfs2_mount_volume:1818 ERROR: status = -22 [ 1327.968581][T16427] (syz.4.20339,16427,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 1328.062590][T16427] ufs: You didn't specify the type of your ufs filesystem [ 1328.062590][T16427] [ 1328.062590][T16427] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1328.062590][T16427] [ 1328.062590][T16427] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1328.155868][T16503] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1328.280536][T16427] ufs: ufs_fill_super(): bad magic number [ 1328.449267][T16518] netlink: 'syz.5.20374': attribute type 5 has an invalid length. [ 1328.617815][T16518] device ip6erspan0 entered promiscuous mode [ 1329.079023][T16554] netlink: 'syz.5.20390': attribute type 2 has an invalid length. [ 1329.098827][T16554] netlink: 132 bytes leftover after parsing attributes in process `syz.5.20390'. [ 1329.330426][T16572] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20399'. [ 1329.504813][T16584] tmpfs: Bad value for 'mpol' [ 1329.643896][T16596] netlink: 'syz.2.20411': attribute type 2 has an invalid length. [ 1329.669600][T16598] netlink: 232 bytes leftover after parsing attributes in process `syz.4.20412'. [ 1329.791037][T16608] netlink: 'syz.2.20417': attribute type 4 has an invalid length. [ 1329.811165][T16608] netlink: 'syz.2.20417': attribute type 10 has an invalid length. [ 1329.828409][T16608] netlink: 152 bytes leftover after parsing attributes in process `syz.2.20417'. [ 1329.839249][T16610] libceph: resolve '0.0' (ret=-3): failed [ 1329.886253][T16608] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1330.022964][T16622] loop5: detected capacity change from 0 to 512 [ 1330.154016][T16622] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 1330.177715][T16640] netlink: 'syz.2.20431': attribute type 3 has an invalid length. [ 1330.314321][T16649] netlink: 36 bytes leftover after parsing attributes in process `syz.2.20436'. [ 1330.345469][T16649] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1330.550922][T16663] netlink: 344 bytes leftover after parsing attributes in process `syz.4.20443'. [ 1330.664726][T16669] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1330.699401][T16676] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (2049) [ 1330.822474][T16682] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1331.200341][ T26] audit: type=1800 audit(1509.906:55): pid=16687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.0.20454" name="/newroot/4027/bus" dev="tmpfs" ino=20553 res=0 errno=0 [ 1331.282113][T16710] netlink: 24 bytes leftover after parsing attributes in process `syz.1.20464'. [ 1331.291253][T16710] netlink: 212 bytes leftover after parsing attributes in process `syz.1.20464'. [ 1331.323196][T16706] loop4: detected capacity change from 0 to 4096 [ 1331.411387][T16706] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1331.598349][T16706] ntfs: (device loop4): parse_options(): NLS character set cp9251 not found. Using previous one macturkish. [ 1331.696117][T16706] ntfs: volume version 3.1. [ 1331.724203][T16706] ntfs: (device loop4): ntfs_index_lookup(): Corrupt index. Aborting lookup. [ 1331.741437][T16706] ntfs: (device loop4): ntfs_mark_quotas_out_of_date(): Lookup of quota defaults entry failed. [ 1331.762899][T16735] netlink: 'syz.2.20476': attribute type 27 has an invalid length. [ 1331.804845][T16706] ntfs: (device loop4): load_system_files(): Failed to mark quotas out of date. Mounting read-only. Run chkdsk. [ 1331.807370][T16735] C: renamed from team_slave_0 [ 1332.335306][T16761] netlink: 40 bytes leftover after parsing attributes in process `syz.4.20489'. [ 1332.737987][T16784] bond0: Error: Cannot enslave bond to itself. [ 1333.046644][T16785] /dev/loop0: Can't open blockdev [ 1333.202690][T16809] trusted_key: encrypted_key: master key parameter is missing [ 1333.270276][ T4257] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1333.655166][ T4257] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1333.683363][ T4257] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1333.804900][ T4257] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1333.814009][ T4257] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1333.846470][ T4257] usb 3-1: SerialNumber: syz [ 1334.160437][ T4257] usb 3-1: 0:2 : does not exist [ 1334.200511][ T4257] usb 3-1: USB disconnect, device number 63 [ 1334.348304][T16869] cgroup: none used incorrectly [ 1334.447617][ T4806] udevd[4806]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1334.499634][ T4226] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1334.615410][T16881] openvswitch: netlink: Actions may not be safe on all matching packets [ 1334.766909][ T4226] usb 5-1: Using ep0 maxpacket: 32 [ 1334.900105][ T4226] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1334.924377][T16899] JFS: discard option not supported on device [ 1334.932035][ T4226] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1334.975676][T16899] Mount JFS Failure: -22 [ 1334.980197][T16899] jfs_mount failed w/return code = -22 [ 1335.008981][T16903] netlink: 8 bytes leftover after parsing attributes in process `syz.5.20560'. [ 1335.119976][ T4226] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 1335.138108][ T4226] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1335.159875][ T4226] usb 5-1: Product: syz [ 1335.179729][ T4226] usb 5-1: Manufacturer: syz [ 1335.202345][ T4226] usb 5-1: SerialNumber: syz [ 1335.223031][ T4226] usb 5-1: config 0 descriptor?? [ 1335.250259][T16910] No such timeout policy "syz1" [ 1335.337978][T16919] program syz.5.20568 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1335.359656][T16921] netlink: 'syz.1.20569': attribute type 10 has an invalid length. [ 1335.515738][ T4226] snd-usb-6fire 5-1:0.0: unknown device firmware state received from device: [ 1335.524646][ T4226] f0 e4 3d a7 d3 60 4f fe [ 1335.569630][ T4226] snd-usb-6fire: probe of 5-1:0.0 failed with error -5 [ 1335.733307][ T6256] usb 5-1: USB disconnect, device number 77 [ 1335.742401][T16945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20579'. [ 1335.996279][ T4226] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1336.252901][ T4226] usb 6-1: Using ep0 maxpacket: 16 [ 1336.381257][ T4226] usb 6-1: config index 0 descriptor too short (expected 51443, got 18) [ 1336.520481][ T6256] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1336.563122][ T4226] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1336.578659][ T4226] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.603683][ T4226] usb 6-1: Product: syz [ 1336.608643][ T4226] usb 6-1: Manufacturer: syz [ 1336.613284][ T4226] usb 6-1: SerialNumber: syz [ 1336.627393][ T4226] r8152-cfgselector 6-1: config 0 descriptor?? [ 1336.710151][T16995] ptrace attach of "./syz-executor exec"[4190] was attempted by "./syz-executor exec"[16995] [ 1336.790636][ T6256] usb 3-1: Using ep0 maxpacket: 16 [ 1336.865498][T14114] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1336.915818][ T6256] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1336.927042][ T6256] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1336.936736][ T6256] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 1336.947038][ T6256] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1337.083025][T17013] netlink: 'syz.4.20615': attribute type 21 has an invalid length. [ 1337.091602][T17013] netlink: 'syz.4.20615': attribute type 6 has an invalid length. [ 1337.099666][T17013] netlink: 132 bytes leftover after parsing attributes in process `syz.4.20615'. [ 1337.129580][ T4226] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1337.140444][ T6256] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 1337.152788][T17015] loop4: detected capacity change from 0 to 512 [ 1337.160936][ T4226] r8152-cfgselector 6-1: USB disconnect, device number 52 [ 1337.168721][ T6256] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.172759][T14114] usb 2-1: Using ep0 maxpacket: 16 [ 1337.193825][ T6256] usb 3-1: Product: syz [ 1337.198052][ T6256] usb 3-1: Manufacturer: syz [ 1337.217892][ T6256] usb 3-1: SerialNumber: syz [ 1337.225338][ T6256] usb 3-1: config 0 descriptor?? [ 1337.231816][T17015] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1337.263005][T17015] fs-verity (loop4, inode 15): Unrecognized descriptor size: 0 bytes [ 1337.291529][ T6256] port100 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 1337.323000][T14114] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 1337.331327][T14114] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1337.342573][T14114] usb 2-1: config 1 has no interface number 0 [ 1337.369155][T14114] usb 2-1: config 1 interface 105 altsetting 2 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1337.380593][T14114] usb 2-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1337.394126][T14114] usb 2-1: config 1 interface 105 has no altsetting 0 [ 1337.514291][T14107] usb 3-1: USB disconnect, device number 64 [ 1337.590198][T14114] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1337.605327][T14114] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1337.613777][T14114] usb 2-1: Product: syz [ 1337.617981][T14114] usb 2-1: Manufacturer: syz [ 1337.623055][T14114] usb 2-1: SerialNumber: syz [ 1337.765759][T17036] netlink: 'syz.4.20625': attribute type 1 has an invalid length. [ 1337.784682][T17038] netlink: 4 bytes leftover after parsing attributes in process `syz.5.20626'. [ 1337.870698][T17042] IPVS: Error connecting to the multicast addr [ 1337.932007][T14114] aqc111: probe of 2-1:1.105 failed with error -22 [ 1338.012669][T17048] loop4: detected capacity change from 0 to 1024 [ 1338.173803][ T4226] usb 2-1: USB disconnect, device number 74 [ 1338.279900][T17060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20637'. [ 1338.463415][T17072] netlink: 132 bytes leftover after parsing attributes in process `syz.2.20643'. [ 1338.614578][T17081] netlink: 'syz.4.20647': attribute type 21 has an invalid length. [ 1338.635851][T17081] netlink: 100 bytes leftover after parsing attributes in process `syz.4.20647'. [ 1338.799854][T17095] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.20652'. [ 1338.823873][T17096] device wlan0 entered promiscuous mode [ 1338.835328][T17095] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1338.976796][T17105] loop4: detected capacity change from 0 to 128 [ 1339.562932][T17137] loop4: detected capacity change from 0 to 4096 [ 1339.600849][T17147] netlink: 'syz.1.20679': attribute type 1 has an invalid length. [ 1339.668690][T17137] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 1339.721413][T17137] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1339.989256][T17164]  (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1340.168737][T17174] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 1340.186235][T17174] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1340.331216][T17182] netlink: 'syz.1.20695': attribute type 3 has an invalid length. [ 1340.359550][T17178] loop4: detected capacity change from 0 to 4096 [ 1340.434798][T17190] netlink: 'syz.5.20699': attribute type 1 has an invalid length. [ 1340.492000][T17178] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1340.522987][T17195] netlink: 'syz.1.20700': attribute type 10 has an invalid length. [ 1340.543704][T17178] ntfs3: loop4: Failed to load $Extend. [ 1340.608025][T17195] device veth1_vlan left promiscuous mode [ 1340.636092][T17195] team0: Device veth1_vlan failed to register rx_handler [ 1340.862390][T17209] loop1: detected capacity change from 0 to 64 [ 1340.909111][T17209] hfs: dir_umask requires a value [ 1340.917920][T17209] hfs: unable to parse mount options [ 1341.295935][T17225] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1341.324340][ T4226] usb 6-1: new full-speed USB device number 53 using dummy_hcd [ 1341.493962][T17235] loop1: detected capacity change from 0 to 8 [ 1341.716286][ T4226] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1341.744123][ T4226] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1341.777723][ T4226] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1341.799990][T17254] raw_sendmsg: syz.2.20729 forgot to set AF_INET. Fix it! [ 1341.808922][ T4226] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1341.824178][T17256] program syz.4.20730 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1341.887924][ T4226] hub 6-1:4.0: USB hub found [ 1342.128796][ T4226] hub 6-1:4.0: 4 ports detected [ 1342.135125][ T4226] usb 6-1: selecting invalid altsetting 1 [ 1342.155558][ T4226] hub 6-1:4.0: Using single TT (err -22) [ 1342.186289][ T4226] hub 6-1:4.0: insufficient power available to use all downstream ports [ 1342.247629][T17282] netlink: 'syz.2.20743': attribute type 1 has an invalid length. [ 1342.289697][T17282] netlink: 'syz.2.20743': attribute type 1 has an invalid length. [ 1342.301938][T17284] netlink: 'syz.1.20744': attribute type 5 has an invalid length. [ 1342.320036][T17282] netlink: 'syz.2.20743': attribute type 1 has an invalid length. [ 1342.346562][ T4226] hub 6-1:4.0: hub_hub_status failed (err = -71) [ 1342.357141][ T4226] hub 6-1:4.0: config failed, can't get hub status (err -71) [ 1342.421879][ T4226] usb 6-1: USB disconnect, device number 53 [ 1342.646208][T17294] loop1: detected capacity change from 0 to 4096 [ 1342.709012][T17294] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1342.870922][T17310] netlink: 'syz.2.20756': attribute type 10 has an invalid length. [ 1342.915858][T17310] device veth1_vlan left promiscuous mode [ 1343.061187][T17310] team0: Device veth1_vlan failed to register rx_handler [ 1343.157125][T17286] loop4: detected capacity change from 0 to 32768 [ 1343.264395][T17324] xt_socket: unknown flags 0x48 [ 1343.457057][T17332] netlink: 36 bytes leftover after parsing attributes in process `syz.2.20768'. [ 1343.580837][T17338] netlink: 'syz.2.20771': attribute type 10 has an invalid length. [ 1343.608808][T17338] device xfrm0 entered promiscuous mode [ 1343.630530][T17338] team0: Device xfrm0 is of different type [ 1344.131869][T17337] netlink: 'syz.5.20770': attribute type 10 has an invalid length. [ 1344.142240][T17337] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1344.624356][T17376] netlink: 8 bytes leftover after parsing attributes in process `syz.5.20789'. [ 1344.879441][T17397] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1344.932119][T17402] netlink: 52 bytes leftover after parsing attributes in process `syz.4.20801'. [ 1345.036166][T17409] ieee802154 phy1 wpan1: encryption failed: -22 [ 1345.297315][T17428] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2880) [ 1345.329295][T17428] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 1345.485039][T17436] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1345.499512][T17438] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1345.564423][ T6080] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1345.842329][ T6080] usb 3-1: Using ep0 maxpacket: 8 [ 1345.898580][T17460] netlink: 'syz.4.20830': attribute type 21 has an invalid length. [ 1345.970917][ T6080] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 256, setting to 64 [ 1346.002643][ T6080] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1346.043846][ T6080] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1346.227386][ T6080] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1346.252297][ T6080] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1346.263610][T17482] netlink: 'syz.5.20840': attribute type 20 has an invalid length. [ 1346.277834][ T6080] usb 3-1: Product: syz [ 1346.285770][ T6080] usb 3-1: Manufacturer: syz [ 1346.300843][ T6080] usb 3-1: SerialNumber: syz [ 1346.319678][ T6080] usb 3-1: config 0 descriptor?? [ 1346.380368][ T6080] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 1346.414404][T17492] netlink: 'syz.1.20843': attribute type 3 has an invalid length. [ 1346.604084][ T6080] snd_usb_toneport 3-1:0.0: cannot get proper max packet size [ 1346.611696][ T6080] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 1346.661194][ T6080] snd_usb_toneport: probe of 3-1:0.0 failed with error -22 [ 1346.837189][ T6080] usb 3-1: USB disconnect, device number 65 [ 1346.866565][T17525] netlink: 128 bytes leftover after parsing attributes in process `syz.5.20861'. [ 1346.908528][T17525] netlink: 3 bytes leftover after parsing attributes in process `syz.5.20861'. [ 1347.166914][T17544] ax25_connect(): syz.4.20870 uses autobind, please contact jreuter@yaina.de [ 1347.896157][T17607] dlm: dev_write: no op 0 74000000000000 [ 1348.028662][T17616] device bridge10 entered promiscuous mode [ 1348.165707][T17627] validate_nla: 5 callbacks suppressed [ 1348.165726][T17627] netlink: 'syz.2.20911': attribute type 21 has an invalid length. [ 1348.228392][T17627] netlink: 'syz.2.20911': attribute type 1 has an invalid length. [ 1348.383144][T17643] netlink: 'syz.5.20919': attribute type 4 has an invalid length. [ 1348.432145][T17643] netlink: 152 bytes leftover after parsing attributes in process `syz.5.20919'. [ 1348.502780][T17643] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1348.584876][T17653] netlink: 16 bytes leftover after parsing attributes in process `syz.2.20924'. [ 1348.626132][T17653] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1348.761352][T17667] loop2: detected capacity change from 0 to 256 [ 1348.819781][T17667] exFAT-fs (loop2): bogus data start sector [ 1348.837433][T17667] exFAT-fs (loop2): failed to read boot sector [ 1348.846981][T17667] exFAT-fs (loop2): failed to recognize exfat type [ 1348.876923][T17675] loop1: detected capacity change from 0 to 1024 [ 1349.174800][T17685] loop1: detected capacity change from 0 to 1024 [ 1349.315296][T17685] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 2: comm syz.1.20936: lblock 2 mapped to illegal pblock 2 (length 1) [ 1349.381453][T17685] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 1349.389628][T17685] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 48: comm syz.1.20936: lblock 0 mapped to illegal pblock 48 (length 1) [ 1349.515428][T17685] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 1349.607538][T17685] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.20936: Failed to acquire dquot type 0 [ 1349.616943][T17711] ALSA: mixer_oss: invalid OSS volume 'w' [ 1349.642778][T17685] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 1349.654033][T17685] EXT4-fs error (device loop1): ext4_evict_inode:284: inode #11: comm syz.1.20936: mark_inode_dirty error [ 1349.666539][T17685] EXT4-fs warning (device loop1): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 1349.677319][T17685] EXT4-fs (loop1): 1 orphan inode deleted [ 1349.683772][T17685] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 1349.706137][ C1] vkms_vblank_simulate: vblank timer overrun [ 1349.723598][ T144] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 1349.787285][ T144] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 1349.821315][ T144] EXT4-fs error (device loop1): ext4_release_dquot:6272: comm kworker/u4:1: Failed to release dquot type 0 [ 1349.895609][ T144] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 2: comm kworker/u4:1: lblock 2 mapped to illegal pblock 2 (length 1) [ 1349.915532][ T6256] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1349.944010][ T144] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 1349.960027][ T144] EXT4-fs error (device loop1): ext4_write_dquot:6216: comm kworker/u4:1: Failed to commit dquot type 0 [ 1350.043391][ T144] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync! [ 1350.087843][ T4193] EXT4-fs error (device loop1): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1350.147068][ T4193] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 1350.202520][ T4193] EXT4-fs error (device loop1): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 1350.311243][ T6256] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1350.353780][ T6256] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1350.409795][ T6256] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1350.512686][ T6256] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1350.561350][T17746] QAT: failed to copy from user cfg_data. [ 1350.710487][T17748] loop1: detected capacity change from 0 to 512 [ 1350.864835][T17742] infiniband syz1: set down [ 1350.893261][T17742] infiniband syz1: added ipvlan0 [ 1350.913116][T17748] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1350.987775][T17762] netlink: 'syz.5.20973': attribute type 30 has an invalid length. [ 1351.017587][T17742] RDS/IB: syz1: added [ 1351.021775][T17742] smc: adding ib device syz1 with port count 1 [ 1351.164867][T17766] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.20976'. [ 1351.183681][T17742] smc: ib device syz1 port 1 has pnetid [ 1351.356778][T17773] netlink: 4 bytes leftover after parsing attributes in process `syz.5.20978'. [ 1351.733032][ T6256] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 1351.773882][T17792] netlink: 'syz.1.20988': attribute type 2 has an invalid length. [ 1351.791692][T17792] netlink: 'syz.1.20988': attribute type 1 has an invalid length. [ 1351.849770][T17796] netlink: 'syz.0.20990': attribute type 1 has an invalid length. [ 1351.884892][T17796] netlink: 232 bytes leftover after parsing attributes in process `syz.0.20990'. [ 1351.971989][ T6256] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1351.991208][ T6256] stv0680 5-1:4.0: last error: 249, command = 0xaf [ 1352.019814][ T6256] usb 5-1: USB disconnect, device number 78 [ 1352.127654][T17808] netlink: 16 bytes leftover after parsing attributes in process `syz.1.20996'. [ 1352.156530][T17808] netlink: 16 bytes leftover after parsing attributes in process `syz.1.20996'. [ 1352.199678][T17808] netlink: 5 bytes leftover after parsing attributes in process `syz.1.20996'. [ 1352.438503][ T4226] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1352.656611][T17833] vivid-001: ================= START STATUS ================= [ 1352.690683][T17833] vivid-001: Enable Output Cropping: true [ 1352.710145][T17833] vivid-001: Enable Output Composing: true [ 1352.738423][T17833] vivid-001: Enable Output Scaler: true [ 1352.747404][T17833] vivid-001: Tx RGB Quantization Range: Automatic [ 1352.755153][T17833] vivid-001: Transmit Mode: HDMI [ 1352.760636][T17833] vivid-001: Display Present: true inactive [ 1352.766858][T17833] vivid-001: Hotplug Present: 0x00000001 [ 1352.773058][T17833] vivid-001: RxSense Present: 0x00000001 [ 1352.778999][T17833] vivid-001: EDID Present: 0x00000001 [ 1352.784920][T17833] vivid-001: ================== END STATUS ================== [ 1352.880474][ T4226] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1352.993209][ T4226] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1353.014597][ T4226] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1353.215199][ T4226] usb 6-1: New USB device found, idVendor=041e, idProduct=3263, bcdDevice= 0.40 [ 1353.237004][ T4226] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.272299][ T4226] usb 6-1: Product: syz [ 1353.277921][ T4226] usb 6-1: Manufacturer: syz [ 1353.282578][ T4226] usb 6-1: SerialNumber: syz [ 1353.285111][T17862] x_tables: duplicate entry at hook 3 [ 1353.577507][T17876] netlink: 256 bytes leftover after parsing attributes in process `syz.2.21030'. [ 1353.733657][ T4226] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 1353.743124][T17884] netlink: 'syz.0.21033': attribute type 8 has an invalid length. [ 1353.763348][ T4226] usb 6-1: USB disconnect, device number 54 [ 1353.831375][T17890] comedi: No check for data length of config insn id 33554458 is implemented [ 1353.866046][T17890] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 1353.882786][T17894] netlink: 28 bytes leftover after parsing attributes in process `syz.4.21039'. [ 1353.902793][T17890] comedi: Assuming n=15 is correct [ 1353.908323][T17894] netlink: 28 bytes leftover after parsing attributes in process `syz.4.21039'. [ 1354.021408][ T4806] udevd[4806]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1354.179561][T17916] netlink: zone id is out of range [ 1354.189556][T17916] netlink: zone id is out of range [ 1354.287917][T17930] loop1: detected capacity change from 0 to 24 [ 1354.336713][T17930] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1354.391913][T17936] xt_nfacct: accounting object `syz1' does not exist [ 1354.443151][T17930] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1354.696312][T17952] netlink: 196 bytes leftover after parsing attributes in process `syz.2.21069'. [ 1354.823477][T17961] netlink: 'syz.1.21072': attribute type 2 has an invalid length. [ 1355.164689][ T6416] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1355.574085][T17984] loop5: detected capacity change from 0 to 4096 [ 1355.581795][ T6416] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1355.612716][ T6416] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1355.722862][T17984] ntfs: (device loop5): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 1355.750313][T17984] ntfs: (device loop5): ntfs_read_locked_inode(): $DATA attribute is missing. [ 1355.782898][T17984] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 1355.829193][T17984] ntfs: (device loop5): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1355.843088][ T6416] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1355.891656][ T6416] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.917946][ T6416] usb 3-1: Product: syz [ 1355.922259][ T6416] usb 3-1: Manufacturer: syz [ 1355.963919][ T6416] usb 3-1: SerialNumber: syz [ 1355.981628][T17984] ntfs: volume version 3.1. [ 1355.994390][ T6416] usb 3-1: config 0 descriptor?? [ 1356.065562][ T6416] usb 3-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress 07 [ 1356.275573][T18020] netlink: 'syz.5.21100': attribute type 21 has an invalid length. [ 1356.548712][ T6416] usb 3-1: USB disconnect, device number 66 [ 1356.971386][T14107] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 1357.113360][T18069] __nla_validate_parse: 4 callbacks suppressed [ 1357.113376][T18069] netlink: 184 bytes leftover after parsing attributes in process `syz.5.21126'. [ 1357.325779][T18082] netlink: 'syz.2.21132': attribute type 13 has an invalid length. [ 1357.348102][T18082] gretap0: refused to change device tx_queue_len [ 1357.365426][T18082] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1357.393658][T18084] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 1357.463403][T14107] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1357.527321][T14107] usb 2-1: not running at top speed; connect to a high speed hub [ 1357.628406][T18098] nfs: Deprecated parameter 'nointr' [ 1357.680753][T14107] usb 2-1: config 1 has an invalid interface number: 181 but max is 0 [ 1357.702282][T14107] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1357.735450][T18106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21143'. [ 1357.744561][T14107] usb 2-1: config 1 has no interface number 0 [ 1357.762174][T14107] usb 2-1: config 1 interface 181 altsetting 5 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 1357.783728][T14107] usb 2-1: config 1 interface 181 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 1357.827063][T14107] usb 2-1: config 1 interface 181 altsetting 5 endpoint 0xD has invalid wMaxPacketSize 0 [ 1357.883949][T18113] loop2: detected capacity change from 0 to 512 [ 1357.896277][T14107] usb 2-1: config 1 interface 181 altsetting 5 has 6 endpoint descriptors, different from the interface descriptor's value: 14 [ 1357.931880][T14107] usb 2-1: config 1 interface 181 has no altsetting 0 [ 1358.037767][T18127] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (8) [ 1358.088330][T18113] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #3: comm syz.2.21147: corrupted inode contents [ 1358.158029][T14107] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0018, bcdDevice=58.e1 [ 1358.171033][T14107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1358.200632][T14107] usb 2-1: Product: syz [ 1358.204870][T14107] usb 2-1: Manufacturer: syz [ 1358.211453][T18113] EXT4-fs error (device loop2): ext4_dirty_inode:6077: inode #3: comm syz.2.21147: mark_inode_dirty error [ 1358.231422][T14107] usb 2-1: SerialNumber: syz [ 1358.241627][T18113] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #3: comm syz.2.21147: corrupted inode contents [ 1358.303520][T18113] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #3: comm syz.2.21147: mark_inode_dirty error [ 1358.326000][T18113] Quota error (device loop2): write_blk: dquota write failed [ 1358.335226][T18113] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1358.353677][T18113] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.21147: Failed to acquire dquot type 0 [ 1358.377906][T18113] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #16: comm syz.2.21147: corrupted inode contents [ 1358.421088][T18113] EXT4-fs error (device loop2): ext4_dirty_inode:6077: inode #16: comm syz.2.21147: mark_inode_dirty error [ 1358.474957][T18145] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.21160'. [ 1358.491799][T18113] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #16: comm syz.2.21147: corrupted inode contents [ 1358.526076][T18113] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #16: comm syz.2.21147: mark_inode_dirty error [ 1358.569812][T18113] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #16: comm syz.2.21147: corrupted inode contents [ 1358.584563][T18113] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 1358.595110][T18113] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #16: comm syz.2.21147: corrupted inode contents [ 1358.618331][T14107] kvaser_usb 2-1:1.181: Cannot get usb endpoint(s) [ 1358.632419][T14107] usb 2-1: USB disconnect, device number 75 [ 1358.644425][T18113] EXT4-fs error (device loop2): ext4_truncate:4286: inode #16: comm syz.2.21147: mark_inode_dirty error [ 1358.689941][T18113] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 1358.730935][T18113] EXT4-fs (loop2): 1 truncate cleaned up [ 1358.741144][T18113] EXT4-fs (loop2): mounted filesystem without journal. Opts: resuid=0x0000000000000000,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 1359.237340][T18184] netlink: 8 bytes leftover after parsing attributes in process `syz.5.21177'. [ 1359.251810][T18187] UBIFS error (pid: 18187): cannot open "(null)", error -22 [ 1359.447863][T18202] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1359.542934][T18200] device bond5 entered promiscuous mode [ 1359.549169][T18200] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1359.608221][T18211] loop5: detected capacity change from 0 to 512 [ 1359.694198][T18211] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #11: comm syz.5.21191: unexpected EA_INODE flag [ 1359.708825][T18211] EXT4-fs (loop5): Remounting filesystem read-only [ 1359.715445][T18211] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.21191: couldn't read orphan inode 11 (err -117) [ 1359.733087][T18223] netlink: 'syz.2.21199': attribute type 6 has an invalid length. [ 1359.741414][T18223] netlink: 140 bytes leftover after parsing attributes in process `syz.2.21199'. [ 1359.771817][T18211] EXT4-fs (loop5): Remounting filesystem read-only [ 1359.800823][T18211] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,errors=remount-ro,debug_want_extra_isize=0x000000000000005a,init_itable,resgid=0x0000000000000000,acl,init_itable=0x0000000000000003,. Quota mode: none. [ 1360.272099][T18254] netlink: 44 bytes leftover after parsing attributes in process `syz.4.21213'. [ 1360.322431][T18256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21215'. [ 1360.358231][T18256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21215'. [ 1360.403004][T18256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21215'. [ 1360.661388][T18230] loop2: detected capacity change from 0 to 32768 [ 1360.899228][T18230] XFS (loop2): Mounting V5 Filesystem [ 1361.063147][T18230] XFS (loop2): Ending clean mount [ 1361.098149][T18315] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 1361.132536][T18316] netlink: 328 bytes leftover after parsing attributes in process `syz.5.21237'. [ 1361.166053][ T4185] XFS (loop2): Unmounting Filesystem [ 1361.825815][T18336] device bond5 entered promiscuous mode [ 1361.868373][T18336] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1362.641683][T18393] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1362.689240][T18393] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1362.701566][T18400] loop1: detected capacity change from 0 to 256 [ 1362.750991][T18393] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1362.840363][T18400] FAT-fs (loop1): Directory bread(block 64) failed [ 1362.851125][T18400] FAT-fs (loop1): Directory bread(block 65) failed [ 1362.857951][T18400] FAT-fs (loop1): Directory bread(block 66) failed [ 1362.887960][T18400] FAT-fs (loop1): Directory bread(block 67) failed [ 1362.935239][T18400] FAT-fs (loop1): Directory bread(block 68) failed [ 1362.958751][T18400] FAT-fs (loop1): Directory bread(block 69) failed [ 1362.981684][T18400] FAT-fs (loop1): Directory bread(block 70) failed [ 1363.008902][T18414] __nla_validate_parse: 3 callbacks suppressed [ 1363.008922][T18414] netlink: 44 bytes leftover after parsing attributes in process `syz.5.21287'. [ 1363.044600][T18400] FAT-fs (loop1): Directory bread(block 71) failed [ 1363.080324][T18400] FAT-fs (loop1): Directory bread(block 72) failed [ 1363.114050][T18400] FAT-fs (loop1): Directory bread(block 73) failed [ 1363.140599][T18417] netlink: 'syz.2.21289': attribute type 1 has an invalid length. [ 1363.384257][T18429] netlink: 'syz.2.21297': attribute type 1 has an invalid length. [ 1363.436542][T18429] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.21297'. [ 1363.594465][T18439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21299'. [ 1363.664258][T18439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21299'. [ 1363.698902][T18439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21299'. [ 1363.731897][T18452] tmpfs: Unknown parameter 'noswap' [ 1363.752430][T18439] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1363.901595][T18465] netlink: 'syz.2.21312': attribute type 32 has an invalid length. [ 1364.123402][T18480] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1364.287192][T18494] netlink: 'syz.2.21326': attribute type 13 has an invalid length. [ 1364.306878][T18493] netlink: 16 bytes leftover after parsing attributes in process `syz.4.21327'. [ 1364.508965][T18506] loop4: detected capacity change from 0 to 256 [ 1364.532075][T18503] device bond4 entered promiscuous mode [ 1364.551971][T18503] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1364.591311][T18506] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbc404fdd, utbl_chksum : 0xe619d30d) [ 1364.664536][T18515] netlink: 'syz.0.21337': attribute type 19 has an invalid length. [ 1364.699365][T18506] exFAT-fs (loop4): error, found bogus dentry(8) beyond unused empty group(7) (start_clu : 5, cur_clu : 5) [ 1364.700694][T18515] netlink: 5 bytes leftover after parsing attributes in process `syz.0.21337'. [ 1364.775449][T14107] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1364.984473][T18537] netlink: 8 bytes leftover after parsing attributes in process `syz.5.21347'. [ 1365.350869][T18556] tmpfs: Bad value for 'mpol' [ 1365.417162][T14107] usb 2-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 1365.426257][T14107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1365.448894][T14107] usb 2-1: Product: syz [ 1365.453163][T14107] usb 2-1: Manufacturer: syz [ 1365.490353][T14107] usb 2-1: SerialNumber: syz [ 1365.512564][T14107] usb 2-1: config 0 descriptor?? [ 1365.561480][T18568] rdma_rxe: rxe_register_device failed with error -23 [ 1365.584719][T18568] rdma_rxe: failed to add lo [ 1365.805921][T14107] peak_usb 2-1:0.0: PEAK-System PCAN-USB FD v67 fw v57.0.0 (1 channels) [ 1365.940133][T18592] netlink: 'syz.0.21377': attribute type 2 has an invalid length. [ 1365.994349][ T4226] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1366.054029][T14107] peak_usb 2-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 1366.061078][T18598] loop5: detected capacity change from 0 to 256 [ 1366.093904][T14107] peak_usb 2-1:0.0: unable to tell PCAN-USB FD driver is loaded (err -71) [ 1366.169950][T14107] peak_usb: probe of 2-1:0.0 failed with error -71 [ 1366.201004][T18598] FAT-fs (loop5): Directory bread(block 64) failed [ 1366.214386][T18598] FAT-fs (loop5): Directory bread(block 65) failed [ 1366.229512][T18598] FAT-fs (loop5): Directory bread(block 66) failed [ 1366.236376][T14107] usb 2-1: USB disconnect, device number 76 [ 1366.249515][T18598] FAT-fs (loop5): Directory bread(block 67) failed [ 1366.260382][T18598] FAT-fs (loop5): Directory bread(block 68) failed [ 1366.282923][T18598] FAT-fs (loop5): Directory bread(block 69) failed [ 1366.311437][T18598] FAT-fs (loop5): Directory bread(block 70) failed [ 1366.336779][T18598] FAT-fs (loop5): Directory bread(block 71) failed [ 1366.374439][T18598] FAT-fs (loop5): Directory bread(block 72) failed [ 1366.381613][T18598] FAT-fs (loop5): Directory bread(block 73) failed [ 1366.388294][ T4226] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 1366.406486][ T4226] usb 3-1: config 0 has no interface number 0 [ 1366.419801][T18609] netlink: 12 bytes leftover after parsing attributes in process `syz.4.21384'. [ 1366.429497][ T4226] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1366.452027][ T4226] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1366.480547][ T4226] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1366.501720][ T4226] usb 3-1: config 0 descriptor?? [ 1366.553285][ T4226] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.120/input/input90 [ 1366.810699][ T6080] usb 3-1: USB disconnect, device number 67 [ 1366.963328][T18633] rdma_rxe: rxe_register_device failed with error -23 [ 1367.073965][T18633] rdma_rxe: failed to add lo [ 1367.230340][T18649] vivid-001: ================= START STATUS ================= [ 1367.275062][T18649] vivid-001: Generate PTS: true [ 1367.298622][T18649] vivid-001: Generate SCR: true [ 1367.303897][T18649] tpg source WxH: 720x576 (R'G'B) [ 1367.324493][T18649] tpg field: 8 [ 1367.327942][T18649] tpg crop: 720x576@0x0 [ 1367.342530][T18649] tpg compose: 512x576@0x0 [ 1367.347382][T18649] tpg colorspace: 1 [ 1367.351242][T18649] tpg transfer function: 3/0 [ 1367.379437][T18649] tpg quantization: 0/0 [ 1367.392112][T18649] tpg RGB range: 0/2 [ 1367.423988][T18649] vivid-001: ================== END STATUS ================== [ 1367.512384][T18662] netlink: 28 bytes leftover after parsing attributes in process `syz.4.21410'. [ 1367.900530][T18694] netlink: 'syz.4.21425': attribute type 5 has an invalid length. [ 1367.983724][T18699] ieee802154 phy1 wpan1: encryption failed: -90 [ 1368.236818][T18722] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1368.686419][T18752] __nla_validate_parse: 19 callbacks suppressed [ 1368.686441][T18752] netlink: 288 bytes leftover after parsing attributes in process `syz.1.21455'. [ 1368.939322][ T26] audit: type=1326 audit(1545.208:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18765 comm="syz.2.21462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3f565819 code=0x7ffc0000 [ 1368.961343][ C0] vkms_vblank_simulate: vblank timer overrun [ 1369.023539][ T26] audit: type=1326 audit(1545.208:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18765 comm="syz.2.21462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3f565819 code=0x7ffc0000 [ 1369.116667][ T26] audit: type=1326 audit(1545.237:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18765 comm="syz.2.21462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7f4c3f565819 code=0x7ffc0000 [ 1369.208225][ T26] audit: type=1326 audit(1545.237:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18765 comm="syz.2.21462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3f565819 code=0x7ffc0000 [ 1369.298532][ T26] audit: type=1326 audit(1545.237:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18765 comm="syz.2.21462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3f565819 code=0x7ffc0000 [ 1369.336914][T18794] netlink: 'syz.0.21476': attribute type 4 has an invalid length. [ 1369.383094][ T26] audit: type=1326 audit(1545.208:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18765 comm="syz.2.21462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3f565819 code=0x7ffc0000 [ 1369.428383][T18800] libceph: resolve '0' (ret=-3): failed [ 1369.456647][ T26] audit: type=1326 audit(1545.237:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18765 comm="syz.2.21462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4c3f565819 code=0x7ffc0000 [ 1369.554144][ T26] audit: type=1326 audit(1545.237:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18765 comm="syz.2.21462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4c3f565819 code=0x7ffc0000 [ 1369.661125][T18814] netlink: 4 bytes leftover after parsing attributes in process `syz.5.21484'. [ 1369.982705][T18824] netlink: 'syz.0.21491': attribute type 9 has an invalid length. [ 1370.283819][T18836] netlink: 224 bytes leftover after parsing attributes in process `syz.1.21497'. [ 1370.550938][T18791] loop2: detected capacity change from 0 to 32768 [ 1370.634610][T18791] XFS: attr2 mount option is deprecated. [ 1370.757260][T18791] XFS (loop2): Mounting V5 Filesystem [ 1370.959735][T18791] XFS (loop2): Ending clean mount [ 1371.019612][T18889] netlink: 'syz.1.21519': attribute type 1 has an invalid length. [ 1371.027537][T18889] netlink: 244 bytes leftover after parsing attributes in process `syz.1.21519'. [ 1371.077043][ T4185] XFS (loop2): Unmounting Filesystem [ 1371.115716][T18891] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1371.413046][T18903] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1371.487154][T18907] loop5: detected capacity change from 0 to 1024 [ 1371.493655][T18903] overlayfs: missing 'lowerdir' [ 1371.690182][T18915] netlink: 'syz.4.21533': attribute type 41 has an invalid length. [ 1371.747132][T18921] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21534'. [ 1371.759184][T18907] EXT4-fs error (device loop5): ext4_map_blocks:741: inode #3: block 1: comm syz.5.21528: lblock 1 mapped to illegal pblock 1 (length 1) [ 1371.782040][T18907] Quota error (device loop5): write_blk: dquota write failed [ 1371.790277][T18907] Quota error (device loop5): find_free_dqentry: Can't write quota data block 1 [ 1371.800096][T18907] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.21528: Failed to acquire dquot type 0 [ 1371.820557][T18907] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #3: block 1: comm syz.5.21528: lblock 1 mapped to illegal pblock 1 (length 1) [ 1371.883679][T18907] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.21528: Failed to acquire dquot type 0 [ 1371.917151][T18907] EXT4-fs error (device loop5): ext4_free_blocks:6231: comm syz.5.21528: Freeing blocks not in datazone - block = 0, count = 4096 [ 1371.976404][T18930] netlink: 'syz.2.21522': attribute type 13 has an invalid length. [ 1372.013644][T18907] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #3: block 1: comm syz.5.21528: lblock 1 mapped to illegal pblock 1 (length 1) [ 1372.074925][T18907] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.21528: Failed to acquire dquot type 0 [ 1372.120294][T18937] xt_TCPMSS: Only works on TCP SYN packets [ 1372.159200][T18907] EXT4-fs (loop5): 1 orphan inode deleted [ 1372.171026][T18907] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_dev=0x000000000000ffff,nombcache,data_err=ignore,grpid,nodiscard,stripe=0x0000000000000001,data_err=ignore,,errors=continue. Quota mode: writeback. [ 1372.295577][T18907] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #3: block 1: comm syz.5.21528: lblock 1 mapped to illegal pblock 1 (length 1) [ 1372.376557][T18907] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.21528: Failed to acquire dquot type 0 [ 1373.017200][T18999] loop5: detected capacity change from 0 to 256 [ 1373.154539][T18999] FAT-fs (loop5): Directory bread(block 64) failed [ 1373.164462][T18999] FAT-fs (loop5): Directory bread(block 65) failed [ 1373.199790][T18999] FAT-fs (loop5): Directory bread(block 66) failed [ 1373.206723][T18999] FAT-fs (loop5): Directory bread(block 67) failed [ 1373.234256][T19010] netlink: 'syz.0.21578': attribute type 21 has an invalid length. [ 1373.242883][T18999] FAT-fs (loop5): Directory bread(block 68) failed [ 1373.260451][T18999] FAT-fs (loop5): Directory bread(block 69) failed [ 1373.274484][T19010] netlink: 128 bytes leftover after parsing attributes in process `syz.0.21578'. [ 1373.295915][T18999] FAT-fs (loop5): Directory bread(block 70) failed [ 1373.302617][T18999] FAT-fs (loop5): Directory bread(block 71) failed [ 1373.313857][T19010] netlink: 'syz.0.21578': attribute type 5 has an invalid length. [ 1373.338611][T19010] netlink: 3 bytes leftover after parsing attributes in process `syz.0.21578'. [ 1373.347772][T18999] FAT-fs (loop5): Directory bread(block 72) failed [ 1373.371073][T18999] FAT-fs (loop5): Directory bread(block 73) failed [ 1373.440687][T19019] netlink: 16 bytes leftover after parsing attributes in process `syz.1.21581'. [ 1373.489684][T19019] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1373.688868][T19033] xt_ecn: cannot match TCP bits for non-tcp packets [ 1374.236748][T19070] loop1: detected capacity change from 0 to 512 [ 1374.365215][T19070] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.21606: bg 0: block 255: padding at end of block bitmap is not set [ 1374.472871][T19070] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 1374.512852][T19070] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.21606: invalid indirect mapped block 1 (level 1) [ 1374.570479][T19088] netlink: 'syz.2.21614': attribute type 1 has an invalid length. [ 1374.585922][T19070] EXT4-fs (loop1): 1 truncate cleaned up [ 1374.602900][T19070] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1374.713940][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 1374.713967][ T26] audit: type=1400 audit(1550.606:64): apparmor="DENIED" operation="change_onexec" info="label not found" error=-22 profile="unconfined" name="&" pid=19095 comm="syz.0.21618" [ 1375.038997][ T2425] pvrusb2: request_firmware fatal error with code=-110 [ 1375.045961][ T2425] pvrusb2: Failure uploading firmware1 [ 1375.076029][ T2425] pvrusb2: Device initialization was not successful. [ 1375.102531][ T2425] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1375.145338][ T2425] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1375.180608][ T6072] pvrusb2: Device being rendered inoperable [ 1375.191280][ T6072] pvrusb2: Device being rendered inoperable [ 1375.336037][T19130] tmpfs: Unknown parameter 'no' [ 1375.380532][ T4226] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1375.652109][ T4226] usb 3-1: Using ep0 maxpacket: 32 [ 1375.777377][ T4226] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1375.798501][ T4226] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1375.826180][ T4226] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1375.847210][ T4226] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1375.885695][T19152] netlink: 'syz.5.21645': attribute type 10 has an invalid length. [ 1375.933710][T19152] team0: Device ipvlan1 failed to register rx_handler [ 1375.965799][T19156] netlink: 'syz.4.21647': attribute type 1 has an invalid length. [ 1376.043748][ T4226] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1376.063748][ T4226] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 1376.096995][ T4226] usb 3-1: Product: syz [ 1376.101510][ T4226] usb 3-1: Manufacturer: syz [ 1376.117686][ T4226] usb 3-1: SerialNumber: syz [ 1376.144457][ T4226] usb 3-1: config 0 descriptor?? [ 1376.195405][ T4226] usb 3-1: no audio or video endpoints found [ 1376.410901][ T4226] usb 3-1: USB disconnect, device number 68 [ 1376.522001][T19185] Invalid ELF header magic: != ELF [ 1376.770383][T14114] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1376.905197][T19214] netlink: 20 bytes leftover after parsing attributes in process `syz.5.21675'. [ 1377.316037][T19237] loop2: detected capacity change from 0 to 4096 [ 1377.335991][T19237] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 1377.433558][T14114] usb 1-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e [ 1377.454556][T14107] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1377.464472][T19237] ntfs3: loop2: Failed to load $Extend. [ 1377.470912][T14114] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1377.518578][T14114] usb 1-1: Product: syz [ 1377.527105][T14114] usb 1-1: Manufacturer: syz [ 1377.539887][T14114] usb 1-1: SerialNumber: syz [ 1377.567345][T14114] usb 1-1: config 0 descriptor?? [ 1377.640175][T14114] hub 1-1:0.0: bad descriptor, ignoring hub [ 1377.646298][T14114] hub: probe of 1-1:0.0 failed with error -5 [ 1377.686276][T14114] usbsevseg 1-1:0.0: USB 7 Segment device now attached [ 1377.723929][T19253] netlink: 'syz.2.21694': attribute type 3 has an invalid length. [ 1377.818945][T19260] netlink: 'syz.5.21698': attribute type 2 has an invalid length. [ 1377.843977][T19260] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1377.965704][T19270] sctp: [Deprecated]: syz.2.21703 (pid 19270) Use of int in max_burst socket option. [ 1377.965704][T19270] Use struct sctp_assoc_value instead [ 1377.989690][ T4226] usb 1-1: USB disconnect, device number 93 [ 1378.017747][ T4226] usbsevseg 1-1:0.0: USB 7 Segment now disconnected [ 1378.053425][T14107] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1378.071504][T14107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1378.100274][T14107] usb 2-1: Product: syz [ 1378.115404][T14107] usb 2-1: Manufacturer: syz [ 1378.126703][T14107] usb 2-1: SerialNumber: syz [ 1378.160405][T19278] loop5: detected capacity change from 0 to 1024 [ 1378.193107][T14107] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1378.319939][ T8157] hfsplus: b-tree write err: -5, ino 25 [ 1378.328745][ T8157] hfsplus: b-tree write err: -5, ino 4 [ 1378.344020][ T8157] hfsplus: b-tree write err: -5, ino 2 [ 1378.361350][ T8157] hfsplus: b-tree write err: -5, ino 22 [ 1378.433506][T19292] xt_bpf: check failed: parse error [ 1378.549885][T19297] loop5: detected capacity change from 0 to 136 [ 1378.646557][ T4226] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1378.983393][T14107] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1379.036818][ T4226] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 1379.058151][ T6080] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1379.068147][T19328] cgroup: subsys name conflicts with all [ 1379.077494][ T4226] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1379.109252][ T4226] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1379.240011][ T4226] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1379.260020][ T4226] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1379.290926][ T4226] usb 3-1: SerialNumber: syz [ 1379.309992][ T26] audit: type=1400 audit(1554.909:65): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A21D01A0B978D2F2F262D2A83D1 pid=19339 comm="syz.0.21738" [ 1379.315681][ T6080] usb 5-1: Using ep0 maxpacket: 16 [ 1379.329504][ C0] vkms_vblank_simulate: vblank timer overrun [ 1379.441188][T14114] usb 2-1: USB disconnect, device number 77 [ 1379.498788][T19348] netlink: 'syz.5.21742': attribute type 2 has an invalid length. [ 1379.507509][ T6080] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1379.529116][ T6080] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1379.570575][T19350] netlink: 1244 bytes leftover after parsing attributes in process `syz.5.21743'. [ 1379.626359][ T4226] usbtest 3-1:1.0: couldn't get endpoints, -22 [ 1379.632614][ T4226] usbtest: probe of 3-1:1.0 failed with error -22 [ 1379.668389][ T4226] usb 3-1: USB disconnect, device number 69 [ 1379.721124][ T6080] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 1379.736998][ T6080] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1379.747139][ T6080] usb 5-1: Product: syz [ 1379.751441][ T6080] usb 5-1: Manufacturer: syz [ 1379.756582][ T6080] usb 5-1: SerialNumber: syz [ 1379.875558][T19356] loop5: detected capacity change from 0 to 4096 [ 1379.929318][T19356] ntfs: (device loop5): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1379.948272][T19356] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1379.965236][T19356] ntfs: (device loop5): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1379.987667][T19356] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1380.027933][T19356] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1380.061225][T19356] ntfs: volume version 3.1. [ 1380.068604][ T6080] usb 5-1: unit 2 not found! [ 1380.081050][ T6080] usb 5-1: unit 8 not found! [ 1380.091934][T19356] ntfs: (device loop5): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1380.108530][ T6080] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 1380.127981][T19356] ntfs: (device loop5): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1380.157546][ T6080] usb 5-1: unit 2 not found! [ 1380.183983][T19356] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1380.194602][ T6080] usb 5-1: unit 8 not found! [ 1380.234799][T19356] ntfs: (device loop5): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1380.280521][T19356] ntfs: (device loop5): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 1380.299562][ T6080] snd-usb-audio: probe of 5-1:1.1 failed with error -22 [ 1380.341226][T14107] usb 2-1: Service connection timeout for: 256 [ 1380.355171][ T6080] usb 5-1: USB disconnect, device number 79 [ 1380.361378][T14107] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1380.373435][T19356] ntfs: (device loop5): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute name is placed after the attribute value. [ 1380.415862][T19356] ntfs: (device loop5): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 1380.436236][T14107] ath9k_htc: Failed to initialize the device [ 1380.471021][T14114] usb 2-1: ath9k_htc: USB layer deinitialized [ 1380.483641][T19356] ntfs: (device loop5): load_and_init_quota(): Failed to load $Quota/$Q index. [ 1380.514751][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1380.522805][T19356] ntfs: (device loop5): load_system_files(): Failed to load $Quota. Will not be able to remount read-write. Run chkdsk. [ 1380.615766][ T4433] udevd[4433]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1380.632777][T19356] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1380.878733][T19393] netlink: 'syz.0.21762': attribute type 1 has an invalid length. [ 1380.928877][T14114] usb 2-1: new low-speed USB device number 78 using dummy_hcd [ 1381.334533][T19419] loop4: detected capacity change from 0 to 1024 [ 1381.356973][T14114] usb 2-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 1381.366603][T14114] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 29399, setting to 8 [ 1381.395541][T14114] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1381.415580][T19419] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 1381.419038][T14114] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1381.483310][T19419] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 2: comm syz.4.21775: lblock 2 mapped to illegal pblock 2 (length 1) [ 1381.557172][T19372] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1381.588567][T19419] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 48: comm syz.4.21775: lblock 0 mapped to illegal pblock 48 (length 1) [ 1381.613608][T19419] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.21775: Failed to acquire dquot type 0 [ 1381.630309][T19434] IPv6: sit3: Disabled Multicast RS [ 1381.635662][T19419] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 1381.677994][T19419] EXT4-fs error (device loop4): ext4_evict_inode:284: inode #11: comm syz.4.21775: mark_inode_dirty error [ 1381.702026][ T6416] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1381.709609][T19419] EXT4-fs warning (device loop4): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 1381.709703][T19419] EXT4-fs (loop4): 1 orphan inode deleted [ 1381.709725][T19419] EXT4-fs (loop4): mounted filesystem without journal. Opts: nomblk_io_submit,noblock_validity,delalloc,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 1381.763176][ T431] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 1381.791961][ T431] EXT4-fs error (device loop4): ext4_release_dquot:6272: comm kworker/u4:3: Failed to release dquot type 0 [ 1381.859132][T14114] usb 2-1: string descriptor 0 read error: -71 [ 1381.887690][T14114] usb 2-1: USB disconnect, device number 78 [ 1381.958033][T23561] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 1381.982413][T23561] EXT4-fs error (device loop4): ext4_release_dquot:6272: comm kworker/u4:6: Failed to release dquot type 0 [ 1381.997427][ T4190] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1382.018053][ T4190] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 1382.040985][ T4190] EXT4-fs error (device loop4): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 1382.117831][ T6080] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 1382.187970][ T4806] udevd[4806]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1382.223734][ T6416] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1382.250652][T19448] device ip6gretap0 entered promiscuous mode [ 1382.329947][ T6416] usb 6-1: config 4 has an invalid interface number: 57 but max is 0 [ 1382.338708][ T6416] usb 6-1: config 4 has no interface number 0 [ 1382.350751][ T6416] usb 6-1: config 4 interface 57 has no altsetting 0 [ 1382.574456][T19466] netlink: 'syz.4.21797': attribute type 10 has an invalid length. [ 1382.576300][ T6416] usb 6-1: New USB device found, idVendor=061d, idProduct=c120, bcdDevice=5a.ce [ 1382.587656][ T6080] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1382.612848][ T6416] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1382.621883][ T6416] usb 6-1: Product: syz [ 1382.626117][ T6416] usb 6-1: Manufacturer: syz [ 1382.631079][ T6416] usb 6-1: SerialNumber: syz [ 1382.658340][T19466] team0: Device ipvlan1 failed to register rx_handler [ 1382.661408][ T6080] usb 3-1: not running at top speed; connect to a high speed hub [ 1382.767767][ T6080] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 4 [ 1382.778126][T19468] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21798'. [ 1382.785920][ T6080] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 4 [ 1382.972063][ T6416] quatech2 6-1:4.57: Quatech 2nd gen USB to Serial Driver converter detected [ 1382.992711][ T6416] usb 6-1: qt2_attach - failed to power on unit: -71 [ 1382.999578][ T6416] quatech2: probe of 6-1:4.57 failed with error -71 [ 1383.051500][ T6416] usb 6-1: USB disconnect, device number 55 [ 1383.088646][ T6080] usb 3-1: string descriptor 0 read error: -22 [ 1383.099153][ T6080] usb 3-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 1383.151645][ T6080] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1383.388922][T19505] netlink: 40 bytes leftover after parsing attributes in process `syz.1.21812'. [ 1383.678922][ T150] block nbd5: Attempted send on invalid socket [ 1383.685297][ T150] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1383.708611][T19523] hpfs: hpfs_map_sector(): read error [ 1383.776265][ T6080] usb 3-1: USB disconnect, device number 70 [ 1383.890565][ T6416] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1384.041147][T19546] netlink: 'syz.0.21829': attribute type 13 has an invalid length. [ 1384.157522][ T6416] usb 5-1: Using ep0 maxpacket: 32 [ 1384.213498][T19557] netlink: 24 bytes leftover after parsing attributes in process `syz.5.21834'. [ 1384.300066][ T6416] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1384.323784][T19563] smb3: Bad value for 'uid' [ 1384.500006][ T6416] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1384.515106][ T6416] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.546999][ T6416] usb 5-1: Product: syz [ 1384.561778][ T6416] usb 5-1: Manufacturer: syz [ 1384.584289][ T6416] usb 5-1: SerialNumber: syz [ 1384.629011][ T6416] usb 5-1: config 0 descriptor?? [ 1384.682492][ T6416] usb 5-1: bad CDC descriptors [ 1384.687733][ T6416] usb 5-1: unsupported MDLM descriptors [ 1384.708874][T19586] loop1: detected capacity change from 0 to 512 [ 1384.810933][T19586] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 1384.898860][ T6416] usb 5-1: USB disconnect, device number 80 [ 1385.077602][T19603] netlink: 'syz.1.21850': attribute type 3 has an invalid length. [ 1385.138650][T19599] loop2: detected capacity change from 0 to 8192 [ 1385.427760][T19614] loop1: detected capacity change from 0 to 4096 [ 1385.460385][T19622] SET target dimension over the limit! [ 1385.528475][T19614] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 1385.661072][T19632] loop5: detected capacity change from 0 to 512 [ 1385.697090][ T6416] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1385.770234][T19637] xt_TCPMSS: Only works on TCP SYN packets [ 1385.900621][T19632] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1385.939495][T19643] netlink: zone id is out of range [ 1385.978646][T19643] netlink: zone id is out of range [ 1386.002815][T19632] EXT4-fs error (device loop5): ext4_empty_dir:3136: inode #12: comm syz.5.21863: invalid size [ 1386.016583][T19643] netlink: zone id is out of range [ 1386.061321][T19643] netlink: zone id is out of range [ 1386.065427][T19653] bond0: option use_carrier: invalid value (255) [ 1386.073134][T19643] netlink: zone id is out of range [ 1386.073147][T19643] netlink: zone id is out of range [ 1386.073157][T19643] netlink: del zone limit has 4 unknown bytes [ 1386.297456][T19659] loop1: detected capacity change from 0 to 4096 [ 1386.364854][ T6416] usb 1-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 1386.381050][ T6416] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1386.400196][ T6416] usb 1-1: Product: syz [ 1386.411020][ T6416] usb 1-1: Manufacturer: syz [ 1386.435449][T19659] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 1386.455934][ T6416] usb 1-1: SerialNumber: syz [ 1386.463226][T19669] netlink: 20 bytes leftover after parsing attributes in process `syz.4.21881'. [ 1386.548374][T19659] ntfs3: loop1: failed to convert "c46c" to iso8859-1 [ 1386.725118][T19682] netlink: 16 bytes leftover after parsing attributes in process `syz.2.21896'. [ 1386.766015][T19682] netlink: 16 bytes leftover after parsing attributes in process `syz.2.21896'. [ 1386.907621][ T6416] snd-usb-audio: probe of 1-1:1.0 failed with error -71 [ 1386.939604][ T6416] usb 1-1: USB disconnect, device number 94 [ 1386.998940][T19688] loop1: detected capacity change from 0 to 4096 [ 1387.038279][T19688] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 1387.102828][T19688] ntfs3: loop1: failed to convert "c46c" to macroman [ 1387.232780][T19703] netlink: 48 bytes leftover after parsing attributes in process `syz.5.21899'. [ 1387.300711][T14112] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 1387.521115][T19718] libceph: resolve '0..' (ret=-3): failed [ 1387.739137][T14112] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1387.762423][T14112] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1387.974340][T14112] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1387.993401][T14112] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1388.011050][T14112] usb 3-1: Product: syz [ 1388.020128][T14112] usb 3-1: Manufacturer: syz [ 1388.040759][T14112] usb 3-1: SerialNumber: syz [ 1388.148813][T19712] loop4: detected capacity change from 0 to 40427 [ 1388.174185][T19712] F2FS-fs (loop4): invalid crc value [ 1388.189110][T19712] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1388.275918][T19712] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1388.295652][T19755] loop1: detected capacity change from 0 to 512 [ 1388.330850][T19712] F2FS-fs (loop4): switch extent_cache option is not allowed [ 1388.354341][T19755] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1388.375396][ T4226] usb 6-1: new full-speed USB device number 56 using dummy_hcd [ 1388.394766][T19755] __quota_error: 5 callbacks suppressed [ 1388.394784][T19755] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1388.443312][T19755] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1388.502608][T19755] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.21921: Failed to acquire dquot type 1 [ 1388.532067][T19755] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1388.546903][T19755] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1388.599134][T19755] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.21921: Failed to acquire dquot type 1 [ 1388.611175][T14112] usb 3-1: 0:2 : does not exist [ 1388.621124][T19755] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.21921: bg 0: block 248: padding at end of block bitmap is not set [ 1388.650392][T19755] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 1388.665832][T19755] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1388.681541][T19755] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1388.695157][T14112] usb 3-1: USB disconnect, device number 71 [ 1388.703586][T19755] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.21921: Failed to acquire dquot type 1 [ 1388.743177][T19755] EXT4-fs (loop1): 1 orphan inode deleted [ 1388.754688][T19755] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1388.786683][ T4226] usb 6-1: config 128 interface 0 has no altsetting 0 [ 1388.793539][ T4226] usb 6-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 1388.807707][T19755] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz.1.21921: deleted inode referenced: 12 [ 1388.851230][ T4226] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1388.977106][ T4806] udevd[4806]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1389.032170][T19770] netlink: 'syz.1.21928': attribute type 10 has an invalid length. [ 1389.069393][T19770] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1389.139409][ T4226] comedi comedi5: could not set alternate setting 3 in high speed [ 1389.147297][ T4226] usbduxsigma 6-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 1389.200131][ T4226] usbduxsigma: probe of 6-1:128.0 failed with error -71 [ 1389.231689][ T4226] usb 6-1: USB disconnect, device number 56 [ 1389.294210][T19784] netlink: 'syz.1.21935': attribute type 1 has an invalid length. [ 1389.328391][T19784] netlink: 'syz.1.21935': attribute type 3 has an invalid length. [ 1389.363235][T19784] netlink: 224 bytes leftover after parsing attributes in process `syz.1.21935'. [ 1389.566851][ T6256] usb 5-1: new low-speed USB device number 81 using dummy_hcd [ 1389.731904][T19808] netlink: ct family unspecified [ 1389.736954][T19808] openvswitch: netlink: Actions may not be safe on all matching packets [ 1389.888302][T19818] 9pnet: p9_fd_create_unix (19818): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1389.917134][ C0] vkms_vblank_simulate: vblank timer overrun [ 1389.951999][ T6256] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1389.966333][T19812] loop5: detected capacity change from 0 to 4096 [ 1389.987124][ T6256] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1390.025156][ T6256] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1390.041033][ T6256] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1390.054433][ T6256] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1390.075766][ T6256] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1390.094877][T19812] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 1390.188228][ T6256] hub 5-1:1.0: bad descriptor, ignoring hub [ 1390.194532][ T6256] hub: probe of 5-1:1.0 failed with error -5 [ 1390.216978][ T6256] cdc_wdm 5-1:1.0: skipping garbage [ 1390.240390][ T6256] cdc_wdm 5-1:1.0: invalid descriptor buffer length [ 1390.253447][T19832] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 1390.259468][ T6256] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 1390.350334][T19838] netlink: 'syz.0.21959': attribute type 46 has an invalid length. [ 1390.374700][T19838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21959'. [ 1390.556058][T19849] device syz_tun entered promiscuous mode [ 1390.583243][ T6256] usb 5-1: USB disconnect, device number 81 [ 1390.620391][T19853] loop5: detected capacity change from 0 to 16 [ 1390.677752][T19853] erofs: (device loop5): mounted with root inode @ nid 36. [ 1390.729456][T19853] erofs: (device loop5): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 83 [ 1390.748176][T19853] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 1391.168966][T19885] netlink: 20 bytes leftover after parsing attributes in process `syz.5.21983'. [ 1391.980006][T19957] loop5: detected capacity change from 0 to 16 [ 1392.057793][T19957] erofs: (device loop5): mounted with root inode @ nid 36. [ 1392.074115][T19963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22022'. [ 1392.102044][T19957] erofs: (device loop5): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 1392.141360][T19957] erofs: (device loop5): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 1392.175578][T19957] erofs: (device loop5): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 1392.214465][T19957] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 1392.229015][ T26] audit: type=1800 audit(1566.994:66): pid=19957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.22016" name="file3" dev="loop5" ino=89 res=0 errno=0 [ 1392.311870][ T26] audit: type=1400 audit(1567.069:67): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="#(%#{//(@\)//&@},['%%&\#*" pid=19974 comm="syz.2.22026" [ 1392.409891][T19985] netlink: 24 bytes leftover after parsing attributes in process `syz.1.22031'. [ 1392.560353][T19992] delete_channel: no stack [ 1392.661740][T19999] loop1: detected capacity change from 0 to 1024 [ 1392.744252][T20005] loop5: detected capacity change from 0 to 1024 [ 1392.760599][T19999] EXT4-fs (loop1): Ignoring removed nobh option [ 1392.847480][T19999] EXT4-fs (loop1): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,delalloc,resgid=0x0000000000000000,nobh,,errors=continue. Quota mode: none. [ 1392.871224][T20013] netlink: 84 bytes leftover after parsing attributes in process `syz.4.22045'. [ 1392.947117][ T144] hfsplus: b-tree write err: -5, ino 25 [ 1392.952907][ T144] hfsplus: b-tree write err: -5, ino 4 [ 1392.985323][ T144] hfsplus: b-tree write err: -5, ino 2 [ 1393.017378][ T144] hfsplus: b-tree write err: -5, ino 26 [ 1393.072550][T20023] ieee802154 phy1 wpan1: encryption failed: -22 [ 1393.246135][T20039] netlink: 'syz.4.22057': attribute type 1 has an invalid length. [ 1393.389291][T20052] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22064'. [ 1393.426268][T20052] netlink: 'syz.0.22064': attribute type 1 has an invalid length. [ 1393.458458][T20052] netlink: 92 bytes leftover after parsing attributes in process `syz.0.22064'. [ 1393.884948][T20088] netlink: 16 bytes leftover after parsing attributes in process `syz.1.22083'. [ 1393.928823][T20088] netlink: 16 bytes leftover after parsing attributes in process `syz.1.22083'. [ 1393.981113][T20094] netlink: 'syz.2.22085': attribute type 27 has an invalid length. [ 1394.198273][T20091] loop5: detected capacity change from 0 to 4096 [ 1394.246435][T20107] xt_l2tp: invalid flags combination: 0 [ 1394.252309][T20091] ntfs: (device loop5): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1394.313453][T20091] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1394.367529][T20091] ntfs: (device loop5): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1394.409675][T20091] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1394.463410][T20091] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1394.526143][T20091] ntfs: volume version 3.1. [ 1394.546930][T20091] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1394.602213][T20091] ntfs: (device loop5): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1394.677116][T20091] ntfs: (device loop5): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 1394.715869][T20131] __nla_validate_parse: 3 callbacks suppressed [ 1394.715887][T20131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22102'. [ 1394.742230][T20091] ntfs: (device loop5): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt. [ 1394.763294][T20091] ntfs: (device loop5): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 1394.793767][T20131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22102'. [ 1394.978559][T20141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22108'. [ 1395.113694][T20149] netlink: 36 bytes leftover after parsing attributes in process `syz.4.22110'. [ 1396.522410][T20226] tc_dump_action: action bad kind [ 1396.527943][T20227] netlink: 'syz.2.22143': attribute type 2 has an invalid length. [ 1396.607904][T20229] loop4: detected capacity change from 0 to 2048 [ 1396.654779][T20227] netlink: 'syz.2.22143': attribute type 1 has an invalid length. [ 1396.732170][T20238] loop1: detected capacity change from 0 to 512 [ 1396.804600][T20238] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1396.824873][T20229] NILFS (loop4): invalid segment: Inconsistency found [ 1396.869593][T20229] NILFS (loop4): trying rollback from an earlier position [ 1396.885831][T20251] usb usb8: usbfs: process 20251 (syz.0.22153) did not claim interface 32 before use [ 1396.920421][T20238] EXT4-fs (loop1): 1 truncate cleaned up [ 1396.938773][T20238] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,user_xattr,. Quota mode: none. [ 1397.018438][T20229] NILFS (loop4): recovery complete [ 1397.033058][T20258] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 1397.104392][T20260] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1397.561038][T20285] loop2: detected capacity change from 0 to 256 [ 1397.570054][T20290] netlink: 'syz.4.22165': attribute type 3 has an invalid length. [ 1397.649685][T20285] exfat: Deprecated parameter 'utf8' [ 1397.655130][T20285] exfat: Deprecated parameter 'utf8' [ 1397.739122][T20285] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1398.248934][T20330] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.22184'. [ 1398.692301][T20355] ceph: No path or : separator in source [ 1398.709419][T20352] overlayfs: missing 'lowerdir' [ 1398.784372][T20357] netlink: 16 bytes leftover after parsing attributes in process `syz.0.22198'. [ 1398.810341][T20357] netlink: 60 bytes leftover after parsing attributes in process `syz.0.22198'. [ 1399.144863][T20319] loop1: detected capacity change from 0 to 40427 [ 1399.151614][T14112] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1399.239295][T20319] F2FS-fs (loop1): invalid crc value [ 1399.259308][T20319] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1399.309106][T20383] comedi comedi4: bad chanlist[0]=0x00006c7f chan=27775 range length=2 [ 1399.321903][T20384] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1399.445009][T14112] usb 6-1: Using ep0 maxpacket: 32 [ 1399.457849][T20389] netlink: 'syz.4.22212': attribute type 10 has an invalid length. [ 1399.487407][T20319] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1399.514580][T20389] team0: Port device bridge0 added [ 1399.588362][T20319] F2FS-fs (loop1): switch extent_cache option is not allowed [ 1399.605317][T14112] usb 6-1: config 15 has an invalid interface number: 78 but max is 1 [ 1399.620895][T14112] usb 6-1: config 15 has an invalid interface number: 2 but max is 1 [ 1399.643693][T14112] usb 6-1: config 15 has no interface number 0 [ 1399.664670][T14112] usb 6-1: config 15 has no interface number 1 [ 1399.678317][T14112] usb 6-1: config 15 interface 78 has no altsetting 0 [ 1399.685650][T14112] usb 6-1: config 15 interface 2 has no altsetting 0 [ 1399.888420][T14112] usb 6-1: New USB device found, idVendor=413c, idProduct=81cf, bcdDevice=d4.09 [ 1399.906175][T14112] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1399.923855][T14112] usb 6-1: Product: syz [ 1399.941556][T14112] usb 6-1: Manufacturer: syz [ 1399.951190][T14112] usb 6-1: SerialNumber: syz [ 1400.173960][T20418] loop4: detected capacity change from 0 to 512 [ 1400.201831][T20420] loop2: detected capacity change from 0 to 512 [ 1400.273718][T20420] EXT4-fs (loop2): Ignoring removed nobh option [ 1400.326194][T20418] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1400.331984][T20420] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,grpquota,,errors=continue. Quota mode: writeback. [ 1400.385916][ T6416] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1400.394989][T14112] usb 6-1: selecting invalid altsetting 0 [ 1400.415311][T14112] usb 6-1: Could not set interface, error -22 [ 1400.460098][T14112] usb 6-1: USB disconnect, device number 57 [ 1400.478293][T20428] xt_TCPMSS: Only works on TCP SYN packets [ 1400.548632][ C0] vkms_vblank_simulate: vblank timer overrun [ 1400.579061][T20432] netlink: 128 bytes leftover after parsing attributes in process `syz.0.22231'. [ 1400.599227][T20432] net_ratelimit: 1 callbacks suppressed [ 1400.599243][T20432] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1400.636871][T20420] EXT4-fs error (device loop2): ext4_add_entry:2486: inode #12: comm syz.2.22227: Directory hole found for htree leaf block 0 [ 1400.674470][ T6416] usb 2-1: Using ep0 maxpacket: 8 [ 1400.888514][ T6416] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1400.940537][T20449] netlink: 28 bytes leftover after parsing attributes in process `syz.4.22239'. [ 1400.949996][T20449] netlink: 28 bytes leftover after parsing attributes in process `syz.4.22239'. [ 1400.984709][ T6416] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 1401.005884][ T6416] usb 2-1: config 4 has an invalid descriptor of length 255, skipping remainder of the config [ 1401.027480][ T6416] usb 2-1: config 4 has no interface number 0 [ 1401.059567][T14114] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1401.220044][ T6416] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 1401.237169][ T6416] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1401.250339][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 1401.250357][ T26] audit: type=1400 audit(1575.431:68): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=20462 comm="syz.4.22246" [ 1401.276944][T20466] loop2: detected capacity change from 0 to 256 [ 1401.288061][ T6416] usb 2-1: Product: syz [ 1401.292277][ T6416] usb 2-1: Manufacturer: syz [ 1401.298665][ T6416] usb 2-1: SerialNumber: syz [ 1401.348017][T14114] usb 1-1: Using ep0 maxpacket: 16 [ 1401.374207][T20466] FAT-fs (loop2): Directory bread(block 64) failed [ 1401.389770][T20466] FAT-fs (loop2): Directory bread(block 65) failed [ 1401.406177][T20466] FAT-fs (loop2): Directory bread(block 66) failed [ 1401.431952][T20466] FAT-fs (loop2): Directory bread(block 67) failed [ 1401.455026][T20466] FAT-fs (loop2): Directory bread(block 68) failed [ 1401.478492][T20466] FAT-fs (loop2): Directory bread(block 69) failed [ 1401.497682][T14114] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1401.498699][T20466] FAT-fs (loop2): Directory bread(block 70) failed [ 1401.525351][T14114] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1401.558683][T14114] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1401.569377][T20466] FAT-fs (loop2): Directory bread(block 71) failed [ 1401.590850][T20466] FAT-fs (loop2): Directory bread(block 72) failed [ 1401.597686][T14114] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1401.614103][T20466] FAT-fs (loop2): Directory bread(block 73) failed [ 1401.641364][T14114] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1401.754589][T14114] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1401.775777][T14114] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1401.801311][ T6416] uvcvideo 2-1:4.147: Found multiple Units with ID 6 [ 1401.829725][T14114] usb 1-1: SerialNumber: syz [ 1401.844978][T20485] loop5: detected capacity change from 0 to 512 [ 1401.858228][T20487] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1401.913850][T20485] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1401.936050][ T6416] usb 2-1: Found UVC 0.02 device syz (04f2:b746) [ 1401.945707][ T6416] usb 2-1: No valid video chain found. [ 1401.977849][T20485] EXT4-fs (loop5): 1 truncate cleaned up [ 1401.985931][T20485] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,user_xattr,. Quota mode: none. [ 1402.012307][ T6416] usb 2-1: USB disconnect, device number 79 [ 1402.322846][T20506] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1402.379100][ T6416] usb 1-1: USB disconnect, device number 95 [ 1402.956062][T14112] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1403.272431][T14112] usb 2-1: Using ep0 maxpacket: 32 [ 1403.391221][T20579] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1403.429689][T14112] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 26, changing to 7 [ 1403.499116][T20582] ipt_CLUSTERIP: Please specify destination IP [ 1403.631599][T20592] netlink: 76 bytes leftover after parsing attributes in process `syz.4.22308'. [ 1403.667911][T14112] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 1403.694233][T14112] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1403.710563][T14112] usb 2-1: Product: syz [ 1403.720522][T14112] usb 2-1: Manufacturer: syz [ 1403.746402][T14112] usb 2-1: SerialNumber: syz [ 1403.986945][T20614] x_tables: duplicate underflow at hook 3 [ 1404.000949][T20617] netlink: 4 bytes leftover after parsing attributes in process `syz.5.22321'. [ 1404.117179][T14112] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 1404.187355][T14112] usb 2-1: USB disconnect, device number 80 [ 1404.416709][T20631] loop4: detected capacity change from 0 to 4096 [ 1404.468930][T20631] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1404.537185][T20631] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 1404.616496][T20631] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1404.640658][T20631] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1404.716425][T20631] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1404.758880][T20631] ntfs: volume version 3.1. [ 1404.787022][T20631] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1404.840938][T20631] ntfs: (device loop4): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1404.879124][T20620] loop2: detected capacity change from 0 to 32768 [ 1404.905740][T20631] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1404.926092][T20631] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1405.000138][T20620] [ 1405.000138][T20620] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1405.000138][T20620] [ 1405.207269][T14112] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1405.300530][ T4185] [ 1405.300530][ T4185] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1405.300530][ T4185] [ 1405.396667][ T4185] [ 1405.396667][ T4185] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1405.396667][ T4185] [ 1405.485520][T14112] usb 6-1: Using ep0 maxpacket: 32 [ 1405.624429][T14112] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 1405.655856][T14112] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1405.693388][T14112] usb 6-1: config 0 has no interface number 0 [ 1405.724188][T14112] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 1405.744832][T14112] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1405.756301][T14112] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1405.782543][T20682] netlink: 156 bytes leftover after parsing attributes in process `syz.2.22341'. [ 1405.794133][T14112] usb 6-1: config 0 interface 85 altsetting 7 has 6 endpoint descriptors, different from the interface descriptor's value: 7 [ 1405.821469][T14112] usb 6-1: config 0 interface 85 has no altsetting 0 [ 1405.912647][T20689] overlayfs: empty lowerdir [ 1406.041530][T14112] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1406.050666][T14112] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1406.094596][T14112] usb 6-1: Product: syz [ 1406.098849][T14112] usb 6-1: Manufacturer: syz [ 1406.103469][T14112] usb 6-1: SerialNumber: syz [ 1406.170004][T14112] usb 6-1: config 0 descriptor?? [ 1406.272983][T20705] xt_CT: No such helper "snmp_trap" [ 1406.436981][T14112] appletouch 6-1:0.85: Failed to read mode from device. [ 1406.447493][T14112] appletouch: probe of 6-1:0.85 failed with error -5 [ 1406.526172][T20725] netlink: 20 bytes leftover after parsing attributes in process `syz.1.22374'. [ 1406.527490][T20727] (syz.2.22373,20727,1):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 1406.554596][T20725] netlink: 16 bytes leftover after parsing attributes in process `syz.1.22374'. [ 1406.568919][T14112] usb 6-1: USB disconnect, device number 58 [ 1406.578263][T20727] (syz.2.22373,20727,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 1407.160089][T20767] netlink: 'syz.5.22394': attribute type 5 has an invalid length. [ 1407.183486][T20767] netlink: 'syz.5.22394': attribute type 11 has an invalid length. [ 1407.304805][T20776] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1407.366925][T14112] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1407.487075][T20782] loop4: detected capacity change from 0 to 4096 [ 1407.568701][T20782] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 1407.642233][T20782] ntfs3: loop4: Failed to load $Extend. [ 1407.666147][T14112] usb 2-1: Using ep0 maxpacket: 16 [ 1407.783803][ T6256] usb 6-1: new full-speed USB device number 59 using dummy_hcd [ 1407.858950][T14112] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1407.877505][T14112] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1407.919616][T14112] usb 2-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.00 [ 1407.965647][T14112] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1407.987681][T14112] usb 2-1: config 0 descriptor?? [ 1408.032913][T14112] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input94 [ 1408.222245][ T6256] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1408.254292][ T3546] bcm5974 2-1:0.0: could not read from device [ 1408.265657][T14112] usb 2-1: USB disconnect, device number 81 [ 1408.275604][ T6256] usb 6-1: not running at top speed; connect to a high speed hub [ 1408.361206][ T6256] usb 6-1: config 3 has an invalid interface number: 36 but max is 0 [ 1408.375673][ T6256] usb 6-1: config 3 has no interface number 0 [ 1408.390505][ T6256] usb 6-1: config 3 interface 36 has no altsetting 0 [ 1408.575187][ T6256] usb 6-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice=31.fc [ 1408.591233][ T6256] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1408.596275][T14114] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1408.610877][ T6256] usb 6-1: Product: syz [ 1408.615128][ T6256] usb 6-1: Manufacturer: syz [ 1408.628166][ T6256] usb 6-1: SerialNumber: syz [ 1408.695751][T20847] netdevsim netdevsim0: Direct firmware load for ÿÿ failed with error -2 [ 1408.711833][T20847] netdevsim netdevsim0: Falling back to sysfs fallback for: ÿÿ [ 1408.839799][T20855] netlink: 'syz.1.22437': attribute type 5 has an invalid length. [ 1408.908505][T14114] usb 3-1: Using ep0 maxpacket: 16 [ 1409.026571][ T6256] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:3.36/input/input95 [ 1409.045592][T14114] usb 3-1: config 253 has an invalid interface number: 184 but max is 0 [ 1409.054036][T14114] usb 3-1: config 253 has no interface number 0 [ 1409.076544][ T6256] usb 6-1: USB disconnect, device number 59 [ 1409.081881][T14114] usb 3-1: config 253 interface 184 has no altsetting 0 [ 1409.098641][ T3546] bcm5974 6-1:3.36: could not read from device [ 1409.108927][T20870] netlink: 100 bytes leftover after parsing attributes in process `syz.1.22444'. [ 1409.119237][T20870] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 1409.301830][T14114] usb 3-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 1409.325414][T14114] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1409.355326][T14114] usb 3-1: Product: syz [ 1409.359560][T14114] usb 3-1: Manufacturer: syz [ 1409.364185][T14114] usb 3-1: SerialNumber: syz [ 1409.417358][T20884] netlink: 'syz.1.22451': attribute type 3 has an invalid length. [ 1409.453937][T14114] go7007: probe of 3-1:253.184 failed with error -12 [ 1409.672569][T14114] usb 3-1: USB disconnect, device number 72 [ 1410.262681][T20931] netlink: 16 bytes leftover after parsing attributes in process `syz.4.22474'. [ 1410.433432][T20941] loop2: detected capacity change from 0 to 128 [ 1410.596718][T20941] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 1410.644323][T20941] FAT-fs (loop2): Filesystem has been set read-only [ 1410.689322][T20950] loop5: detected capacity change from 0 to 512 [ 1410.743523][T20950] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1410.779000][T20950] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 1410.799940][T20950] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1410.806346][T20950] EXT4-fs error (device loop5): ext4_orphan_get:1432: comm syz.5.22482: bad orphan inode 267 [ 1410.831515][T20950] EXT4-fs (loop5): Remounting filesystem read-only [ 1410.838106][T20950] EXT4-fs (loop5): mounted filesystem without journal. Opts: resuid=0x0000000000000000,noblock_validity,discard,errors=remount-ro,inode_readahead_blks=0x0000000000080000. Quota mode: none. [ 1410.867721][T20950] EXT4-fs warning (device loop5): dx_probe:893: inode #2: comm syz.5.22482: dx entry: limit 0 != root limit 125 [ 1410.890463][T20950] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.22482: Corrupt directory, running e2fsck is recommended [ 1410.957816][T20912] loop1: detected capacity change from 0 to 32768 [ 1411.008611][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 1411.008628][ T26] audit: type=1107 audit(1584.561:69): pid=20960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1411.074026][T20912] XFS: attr2 mount option is deprecated. [ 1411.111675][T20912] XFS (loop1): Mounting V5 Filesystem [ 1411.120068][T20965] loop5: detected capacity change from 0 to 256 [ 1411.268195][T20965] FAT-fs (loop5): Directory bread(block 64) failed [ 1411.294896][T20978] loop2: detected capacity change from 0 to 4096 [ 1411.308781][T20912] XFS (loop1): Ending clean mount [ 1411.324165][T20912] XFS (loop1): Quotacheck needed: Please wait. [ 1411.339593][T20965] FAT-fs (loop5): Directory bread(block 65) failed [ 1411.346886][T20965] FAT-fs (loop5): Directory bread(block 66) failed [ 1411.353766][T20965] FAT-fs (loop5): Directory bread(block 67) failed [ 1411.365367][T20965] FAT-fs (loop5): Directory bread(block 68) failed [ 1411.375903][T20965] FAT-fs (loop5): Directory bread(block 69) failed [ 1411.382712][T20965] FAT-fs (loop5): Directory bread(block 70) failed [ 1411.404391][T20965] FAT-fs (loop5): Directory bread(block 71) failed [ 1411.412378][T20965] FAT-fs (loop5): Directory bread(block 72) failed [ 1411.420054][T20965] FAT-fs (loop5): Directory bread(block 73) failed [ 1411.532732][T20978] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 1411.547708][T20912] XFS (loop1): Quotacheck: Done. [ 1411.632510][ C0] vkms_vblank_simulate: vblank timer overrun [ 1411.771364][ T8157] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22. [ 1411.778263][ T4185] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 1411.793574][ T4193] XFS (loop1): Unmounting Filesystem [ 1411.806974][ T4185] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1411.898399][ T4185] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 1411.922412][T20995] device bridge11 entered promiscuous mode [ 1411.929272][ T8157] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22. [ 1411.953916][ T4185] ntfs3: loop2: ntfs_evict_inode r=3 failed, -22. [ 1413.014154][T14114] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1413.043991][T14114] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1413.075890][T20997] loop4: detected capacity change from 0 to 32768 [ 1413.098467][T17654] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1413.129101][T17654] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1413.130467][T20997] XFS (loop4): sunit and swidth must be specified together [ 1413.330849][T21061] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22532'. [ 1413.428426][T17654] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1413.570668][T21075] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1413.611422][T21075] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1413.756378][T21085] netlink: 'syz.0.22544': attribute type 28 has an invalid length. [ 1413.790793][T21085] netlink: 'syz.0.22544': attribute type 3 has an invalid length. [ 1413.834881][T21085] netlink: 132 bytes leftover after parsing attributes in process `syz.0.22544'. [ 1413.922101][T21092] netlink: 4 bytes leftover after parsing attributes in process `syz.5.22548'. [ 1413.938617][T21087] xt_CT: No such helper "netbios-ns" [ 1414.104287][T21100] loop5: detected capacity change from 0 to 256 [ 1414.681533][T21081] loop1: detected capacity change from 0 to 32768 [ 1414.745501][T21126] netlink: 'syz.4.22565': attribute type 1 has an invalid length. [ 1414.808739][T21081] [ 1414.808739][T21081] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1414.808739][T21081] [ 1414.961762][T21136] netlink: 36 bytes leftover after parsing attributes in process `syz.2.22571'. [ 1414.994471][T21136] netlink: 84 bytes leftover after parsing attributes in process `syz.2.22571'. [ 1415.073332][ T4193] [ 1415.073332][ T4193] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1415.073332][ T4193] [ 1415.125310][ T4193] [ 1415.125310][ T4193] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1415.125310][ T4193] [ 1415.458129][T21158] netlink: 209772 bytes leftover after parsing attributes in process `syz.4.22582'. [ 1415.513908][T21158] openvswitch: netlink: Message has 80 unknown bytes. [ 1415.678600][T21169] netlink: 24 bytes leftover after parsing attributes in process `syz.1.22587'. [ 1415.863818][T21177] blk_update_request: I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1415.916702][T21178] netlink: 16 bytes leftover after parsing attributes in process `syz.4.22590'. [ 1415.938488][T21177] FAT-fs (loop11): unable to read boot sector [ 1416.182627][T21192] mip6: mip6_destopt_init_state: spi is not 0: 1114112 [ 1416.396422][T21162] loop2: detected capacity change from 0 to 32768 [ 1416.521832][T21203] netlink: 16 bytes leftover after parsing attributes in process `syz.1.22602'. [ 1416.537542][T21162] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.22584 (21162) [ 1416.553181][T21203] netlink: 16 bytes leftover after parsing attributes in process `syz.1.22602'. [ 1416.652525][T21162] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 1416.676160][T21207] [ 1416.678548][T21207] ====================================================== [ 1416.685589][T21207] WARNING: possible circular locking dependency detected [ 1416.692641][T21207] syzkaller #0 Not tainted [ 1416.697081][T21207] ------------------------------------------------------ [ 1416.704226][T21207] syz.5.22604/21207 is trying to acquire lock: [ 1416.710422][T21207] ffff88807aba4c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 1416.721521][T21207] [ 1416.721521][T21207] but task is already holding lock: [ 1416.728912][T21207] ffffffff8d6c5de8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x18b/0x560 [ 1416.738614][T21207] [ 1416.738614][T21207] which lock already depends on the new lock. [ 1416.738614][T21207] [ 1416.749045][T21207] [ 1416.749045][T21207] the existing dependency chain (in reverse order) is: [ 1416.758173][T21207] [ 1416.758173][T21207] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 1416.766212][T21207] __mutex_lock_common+0x1e3/0x2400 [ 1416.771984][T21207] mutex_lock_nested+0x17/0x20 [ 1416.777306][T21207] rfkill_register+0x33/0x980 [ 1416.782622][T21207] hci_register_dev+0x452/0x970 [ 1416.788035][T21207] vhci_create_device+0x32c/0x5c0 [ 1416.793623][T21207] vhci_write+0x391/0x450 [ 1416.795973][T21162] BTRFS info (device loop2): unrecognized rescue option 'ignoresuperflags' [ 1416.798519][T21207] vfs_write+0x745/0xd60 [ 1416.811893][T21207] ksys_write+0x152/0x260 [ 1416.816783][T21207] do_syscall_64+0x4c/0xa0 [ 1416.821758][T21207] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1416.828214][T21207] [ 1416.828214][T21207] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 1416.835721][T21162] BTRFS error (device loop2): unrecognized rescue value ignoresuperflags [ 1416.836077][T21207] __mutex_lock_common+0x1e3/0x2400 [ 1416.850229][T21207] mutex_lock_nested+0x17/0x20 [ 1416.855557][T21207] vhci_send_frame+0x88/0x100 [ 1416.860801][T21207] hci_send_frame+0x1a9/0x2e0 [ 1416.866156][T21207] hci_tx_work+0x9f9/0x1710 [ 1416.871229][T21207] process_one_work+0x85f/0x1010 [ 1416.876731][T21207] worker_thread+0xaa6/0x1290 [ 1416.881961][T21207] kthread+0x436/0x520 [ 1416.886571][T21207] ret_from_fork+0x1f/0x30 [ 1416.891617][T21207] [ 1416.891617][T21207] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 1416.900850][T21207] __flush_work+0x116/0x210 [ 1416.905897][T21207] hci_dev_do_open+0xc58/0x1270 [ 1416.911392][T21207] hci_power_on+0x1c1/0x610 [ 1416.916542][T21207] process_one_work+0x85f/0x1010 [ 1416.922024][T21207] worker_thread+0xaa6/0x1290 [ 1416.927244][T21207] kthread+0x436/0x520 [ 1416.931851][T21207] ret_from_fork+0x1f/0x30 [ 1416.936802][T21207] [ 1416.936802][T21207] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 1416.944460][T21207] __mutex_lock_common+0x1e3/0x2400 [ 1416.950209][T21207] mutex_lock_nested+0x17/0x20 [ 1416.955521][T21207] bg_scan_update+0x44/0x3b0 [ 1416.960833][T21207] process_one_work+0x85f/0x1010 [ 1416.966310][T21207] worker_thread+0xaa6/0x1290 [ 1416.971526][T21207] kthread+0x436/0x520 [ 1416.976128][T21207] ret_from_fork+0x1f/0x30 [ 1416.981080][T21207] [ 1416.981080][T21207] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 1416.990908][T21207] __lock_acquire+0x2c42/0x7d10 [ 1416.996306][T21207] lock_acquire+0x19e/0x400 [ 1417.001349][T21207] __flush_work+0x116/0x210 [ 1417.006394][T21207] __cancel_work_timer+0x3f4/0x560 [ 1417.012044][T21207] hci_request_cancel_all+0xcc/0x300 [ 1417.017874][T21207] hci_dev_do_close+0x4e/0x1030 [ 1417.023267][T21207] hci_rfkill_set_block+0x10a/0x190 [ 1417.029008][T21207] rfkill_set_block+0x1c9/0x3d0 [ 1417.034399][T21207] rfkill_fop_write+0x452/0x560 [ 1417.039791][T21207] vfs_write+0x30b/0xd60 [ 1417.044653][T21207] ksys_write+0x152/0x260 [ 1417.049518][T21207] do_syscall_64+0x4c/0xa0 [ 1417.054471][T21207] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1417.060906][T21207] [ 1417.060906][T21207] other info that might help us debug this: [ 1417.060906][T21207] [ 1417.071232][T21207] Chain exists of: [ 1417.071232][T21207] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 1417.071232][T21207] [ 1417.086974][T21207] Possible unsafe locking scenario: [ 1417.086974][T21207] [ 1417.094454][T21207] CPU0 CPU1 [ 1417.099827][T21207] ---- ---- [ 1417.105198][T21207] lock(rfkill_global_mutex); [ 1417.109983][T21207] lock(&data->open_mutex); [ 1417.117109][T21207] lock(rfkill_global_mutex); [ 1417.124405][T21207] lock((work_completion)(&hdev->bg_scan_update)); [ 1417.131037][T21207] [ 1417.131037][T21207] *** DEADLOCK *** [ 1417.131037][T21207] [ 1417.139214][T21207] 1 lock held by syz.5.22604/21207: [ 1417.144431][T21207] #0: ffffffff8d6c5de8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x18b/0x560 [ 1417.154546][T21207] [ 1417.154546][T21207] stack backtrace: [ 1417.160441][T21207] CPU: 1 PID: 21207 Comm: syz.5.22604 Not tainted syzkaller #0 [ 1417.167997][T21207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1417.178160][T21207] Call Trace: [ 1417.181455][T21207] [ 1417.184402][T21207] dump_stack_lvl+0x188/0x250 [ 1417.189093][T21207] ? load_image+0x400/0x400 [ 1417.193660][T21207] ? show_regs_print_info+0x20/0x20 [ 1417.198894][T21207] ? print_circular_bug+0x12b/0x1a0 [ 1417.204113][T21207] check_noncircular+0x296/0x330 [ 1417.209162][T21207] ? add_chain_block+0x940/0x940 [ 1417.214127][T21207] ? lockdep_lock+0xf1/0x1f0 [ 1417.218736][T21207] ? __lock_acquire+0x12e8/0x7d10 [ 1417.223779][T21207] ? mark_lock+0x94/0x320 [ 1417.228124][T21207] ? _find_first_zero_bit+0xce/0xf0 [ 1417.233340][T21207] __lock_acquire+0x2c42/0x7d10 [ 1417.238230][T21207] ? verify_lock_unused+0x140/0x140 [ 1417.243448][T21207] ? mark_lock+0x94/0x320 [ 1417.247797][T21207] lock_acquire+0x19e/0x400 [ 1417.252314][T21207] ? __flush_work+0xfa/0x210 [ 1417.257008][T21207] ? __lock_acquire+0x7d10/0x7d10 [ 1417.262052][T21207] ? read_lock_is_recursive+0x10/0x10 [ 1417.267451][T21207] ? start_flush_work+0x776/0x820 [ 1417.272496][T21207] __flush_work+0x116/0x210 [ 1417.277015][T21207] ? __flush_work+0xfa/0x210 [ 1417.281617][T21207] ? flush_work+0x20/0x20 [ 1417.285958][T21207] ? try_to_grab_pending+0xfa/0x7f0 [ 1417.291172][T21207] ? mark_lock+0x94/0x320 [ 1417.295523][T21207] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1417.301528][T21207] ? lock_chain_count+0x20/0x20 [ 1417.306393][T21207] ? mark_lock+0x94/0x320 [ 1417.310741][T21207] ? __cancel_work_timer+0x36a/0x560 [ 1417.316038][T21207] __cancel_work_timer+0x3f4/0x560 [ 1417.321165][T21207] ? cancel_work_sync+0x20/0x20 [ 1417.326034][T21207] ? __cancel_work+0x1f9/0x2e0 [ 1417.330811][T21207] ? lockdep_hardirqs_on+0x94/0x140 [ 1417.336032][T21207] ? __cancel_work+0x27b/0x2e0 [ 1417.340811][T21207] ? cancel_work+0x20/0x20 [ 1417.345250][T21207] ? lock_chain_count+0x20/0x20 [ 1417.350143][T21207] hci_request_cancel_all+0xcc/0x300 [ 1417.355451][T21207] hci_dev_do_close+0x4e/0x1030 [ 1417.360321][T21207] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1417.366256][T21207] ? _raw_spin_unlock+0x40/0x40 [ 1417.371296][T21207] hci_rfkill_set_block+0x10a/0x190 [ 1417.376523][T21207] ? rcu_lock_release+0x20/0x20 [ 1417.381391][T21207] rfkill_set_block+0x1c9/0x3d0 [ 1417.386275][T21207] rfkill_fop_write+0x452/0x560 [ 1417.391156][T21207] ? rfkill_fop_read+0x520/0x520 [ 1417.396203][T21207] ? common_file_perm+0x140/0x1c0 [ 1417.401247][T21207] ? fsnotify_perm+0x5d/0x560 [ 1417.405939][T21207] ? security_file_permission+0x75/0xa0 [ 1417.411507][T21207] ? rfkill_fop_read+0x520/0x520 [ 1417.416463][T21207] vfs_write+0x30b/0xd60 [ 1417.420723][T21207] ? file_end_write+0x250/0x250 [ 1417.425596][T21207] ? __fget_files+0x40f/0x480 [ 1417.430296][T21207] ? __fdget_pos+0x1e2/0x370 [ 1417.434898][T21207] ? ksys_write+0x71/0x260 [ 1417.439330][T21207] ksys_write+0x152/0x260 [ 1417.443684][T21207] ? __ia32_sys_read+0x80/0x80 [ 1417.448465][T21207] ? lockdep_hardirqs_on+0x94/0x140 [ 1417.453685][T21207] do_syscall_64+0x4c/0xa0 [ 1417.458119][T21207] ? clear_bhb_loop+0x30/0x80 [ 1417.462997][T21207] ? clear_bhb_loop+0x30/0x80 [ 1417.467697][T21207] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1417.473618][T21207] RIP: 0033:0x7f5a95ab5819 [ 1417.478047][T21207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1417.497814][T21207] RSP: 002b:00007f5a93d0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 SYZFAIL: failed to send rpc fd=3 want=216 sent=0 n=-1 (errno 32: Broken pipe) [ 1417.506256][T21207] RAX: ffffffffffffffda RBX: 00007f5a95d2efa0 RCX: 00007f5a95ab5819 [ 1417.514247][T21207] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 1417.522242][T21207] RBP: 00007f5a95b4bc91 R08: 0000000000000000 R09: 0000000000000000 [ 1417.530238][T21207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1417.538228][T21207] R13: 00007f5a95d2f038 R14: 00007f5a95d2efa0 R15: 00007ffd3d524f98 [ 1417.546235][T21207] [ 1417.584159][T21162] BTRFS error (device loop2): open_ctree failed: -22 [ 1417.610847][ T4806] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by udevd (4806) [ 1417.629889][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1418.058869][T21161] bond0: (slave syz_tun): Releasing backup interface [ 1418.141056][ T9354] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 35410 - 0 [ 1418.153076][ T9354] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 50773 - 0 [ 1418.209652][ T9354] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 35410 - 0 [ 1418.220670][ T9354] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 50773 - 0 [ 1418.287230][ T9354] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 35410 - 0 [ 1418.298260][ T9354] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 50773 - 0 [ 1418.326844][ T9354] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 35410 - 0 [ 1418.337529][ T9354] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 50773 - 0 [ 1419.505803][ T9354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1419.515317][ T9354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1419.526821][ T9354] device bridge_slave_1 left promiscuous mode [ 1419.533468][ T9354] bridge0: port 2(bridge_slave_1) entered disabled state [ 1419.552887][ T9354] bond4 (unregistering): Released all slaves [ 1419.563944][ T9354] bond3 (unregistering): Released all slaves [ 1419.662878][ T9354] bond2 (unregistering): Released all slaves [ 1419.718087][ T9354] bond1 (unregistering): Released all slaves [ 1419.989709][ T9354] team0 (unregistering): Port device team_slave_1 removed [ 1420.002542][ T9354] team0 (unregistering): Port device team_slave_0 removed [ 1420.015535][ T9354] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1420.027907][ T9354] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1420.079516][ T9354] bond0 (unregistering): Released all slaves [ 1421.405811][ T9354] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1421.470561][ T9354] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1421.533934][ T9354] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1421.590769][ T9354] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1421.790517][ T9354] batman_adv: batadv0: Removing interface: netdevsim0 [ 1424.652283][ T9354] bond0: (slave wlan1): Releasing backup interface [ 1425.996201][ T9354] device hsr_slave_1 left promiscuous mode [ 1426.003589][ T9354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1426.011612][ T9354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1426.019222][ T9354] device batadv0 left promiscuous mode [ 1426.027637][ T9354] bridge0: port 3(batadv0) entered disabled state [ 1426.035351][ T9354] device bridge_slave_1 left promiscuous mode [ 1426.041565][ T9354] bridge0: port 2(bridge_slave_1) entered disabled state [ 1426.052898][ T9354] device bridge_slave_0 left promiscuous mode [ 1426.059139][ T9354] bridge0: port 1(bridge_slave_0) entered disabled state [ 1426.079162][ T9354] device hsr_slave_0 left promiscuous mode [ 1426.085516][ T9354] device hsr_slave_1 left promiscuous mode [ 1426.094692][ T9354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1426.102805][ T9354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1426.112542][ T9354] bridge0: port 3(bond0) entered disabled state [ 1426.131643][ T9354] device hsr_slave_0 left promiscuous mode [ 1426.137899][ T9354] device hsr_slave_1 left promiscuous mode [ 1426.144472][ T9354] device veth0_to_bridge left promiscuous mode [ 1426.153607][ T9354] bridge0: port 3(veth0_to_bridge) entered disabled state [ 1426.162495][ T9354] device bridge_slave_1 left promiscuous mode [ 1426.168709][ T9354] bridge0: port 2(bridge_slave_1) entered disabled state [ 1426.179315][ T9354] bridge0: port 1(bridge_slave_0) entered disabled state [ 1426.196732][ T9354] device hsr_slave_0 left promiscuous mode [ 1426.203034][ T9354] device hsr_slave_1 left promiscuous mode [ 1426.209778][ T9354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1426.217816][ T9354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1426.226076][ T9354] device bridge_slave_1 left promiscuous mode [ 1426.232290][ T9354] bridge0: port 2(bridge_slave_1) entered disabled state [ 1426.240770][ T9354] device bridge_slave_0 left promiscuous mode [ 1426.247101][ T9354] bridge0: port 1(bridge_slave_0) entered disabled state [ 1426.293867][ T9354] bond4 (unregistering): Released all slaves [ 1426.339593][ T9354] bond3 (unregistering): Released all slaves [ 1426.580129][ T9354] bond2 (unregistering): Released all slaves [ 1426.589744][ T9354] bond1 (unregistering): Released all slaves