last executing test programs: 2m57.642645459s ago: executing program 3 (id=918): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x0, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0011000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000004560100008e0100006f776e657200000000000000000000000000000000000000db21b519bf83d1fb180000000000", @ANYRES32=r0, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"]}, 0x296) 2m57.588682971s ago: executing program 3 (id=919): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) 2m57.396267583s ago: executing program 3 (id=920): syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000108117980800000000000109022400010000000009040000020308000009210000010122290a09058103"], 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0xe, 0x0) 2m55.516362445s ago: executing program 3 (id=951): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x4040, &(0x7f00000015c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYRES64=0x0, @ANYRES32=0x0, @ANYBLOB="cdf7c0c4ada580d5d36bd90806b670b73bb5112f75ca483652cf9b8a22555c3af34a84c5747ac51aa890ca205a0f27d7dde81ad3a01f21810b6de2d56be05416c54e1c6e8459e1643b129327581f7716b38db3d3f3bbeb6d1b846a2aad654e17ff850a1f82ac738387d9c3009d18eb2a78258fcc4ac4eb6a12a5650e10ebf077d9ab33f24de7cbffe0", @ANYRESHEX], 0x2, 0xc33, &(0x7f0000001780)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={[{@metacopy_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 2m55.119986032s ago: executing program 3 (id=961): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x1, 0xa, 0x401}, 0x14}}, 0x0) 2m54.300298955s ago: executing program 3 (id=979): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_STD(r0, 0xc0285629, &(0x7f0000000080)=0xff) 2m54.176402577s ago: executing program 32 (id=979): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_STD(r0, 0xc0285629, &(0x7f0000000080)=0xff) 2.660248206s ago: executing program 2 (id=4199): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, 0x0, 0x0) 2.605705917s ago: executing program 2 (id=4200): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="2400000001040108000000000000000002000009060006400005000005000100"], 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x0) 2.442870289s ago: executing program 2 (id=4202): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') copy_file_range(r0, 0x0, r0, &(0x7f0000000180)=0xfffffffffffff470, 0x0, 0x0) 2.38726393s ago: executing program 2 (id=4203): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010003f6fdd140402090b975f601020301090224000201005004090400f700c873b808090504105802030d580904"], &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 2.005505807s ago: executing program 1 (id=4208): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, &(0x7f0000004b40)) 1.953764327s ago: executing program 1 (id=4210): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000240)={0x0, 0x0, "6386fa66717e0aff1de532af2cb403d7bbd04558880256a3"}) 1.79196865s ago: executing program 1 (id=4213): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)={0x2, 0x400000000000003, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0x100000}, @sadb_address={0x5, 0x6, 0xff, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x1, 0x8}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}}, @sadb_address={0x5, 0x7, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7ff}}, @sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd27}]}, 0xe8}}, 0x0) 1.697271882s ago: executing program 4 (id=4214): r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000240)={{}, {}, [], {}, [{}]}, 0xc, 0x0) 1.581209214s ago: executing program 4 (id=4215): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000001940)={0x0, @null, @bpq0, 0x0, 'syz0\x00', @default, 0x0, 0x100000, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @bcast, @null, @bcast, @default]}) 1.504599285s ago: executing program 1 (id=4216): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400010076657468305f746f5f6873720000000008000240000000005c000000160a0101000b000000000000010000000900020073797a30400000000900010073797a300000000030000380"], 0xfc}, 0x1, 0x0, 0x0, 0x804}, 0x40000) 1.432748326s ago: executing program 4 (id=4218): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x6, 0x0, 0x7ffffffc}]}) acct(0x0) 1.396345327s ago: executing program 5 (id=4219): r0 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00') preadv(r0, &(0x7f0000000780)=[{&(0x7f0000000000)=""/65, 0x41}], 0x1, 0x91, 0x0) 1.379739037s ago: executing program 4 (id=4220): r0 = syz_open_procfs(0x0, &(0x7f0000000680)='net/ipv6_route\x00') pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x1135) 1.367722427s ago: executing program 1 (id=4221): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x1010006, &(0x7f0000000400)=ANY=[@ANYBLOB="71756f74612c6e6f696e746567726974792c6572726f72733d72656d6f756e742d726f2c696f636861727365743d6370313235352c6e6f71756f74612c696e746567726974792c696f636861727365743d69736f383835392d352c646973636172642c00000100000000003078303030303030303030303030303030322c00"], 0x1, 0x6255, &(0x7f0000001840)="$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") open(&(0x7f0000000000)='./file0\x00', 0x143042, 0xfe) 1.294602608s ago: executing program 4 (id=4222): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xc3) 1.260104409s ago: executing program 5 (id=4223): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000180)) 1.138343331s ago: executing program 4 (id=4224): syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c4504b1023398a71226c014a93010902240001070000000904f70002ed49400009050b00000000e200090509d6"], 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) 1.138091131s ago: executing program 5 (id=4225): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) copy_file_range(r0, &(0x7f0000000000)=0x8, r0, 0x0, 0x4, 0x0) 1.067143852s ago: executing program 5 (id=4227): r0 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ff8000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) 1.010893783s ago: executing program 5 (id=4228): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x4788, 0x8}, 0x80, &(0x7f0000000080)=[{&(0x7f00000006c0)='\'', 0x1}], 0x1}, 0x0) 948.283934ms ago: executing program 0 (id=4229): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000003b0007010000000000000000036c0000040000000c0001800600060086dd0000"], 0x24}}, 0x800) 920.607364ms ago: executing program 0 (id=4230): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c0, 0x210, 0x9403, 0x3002, 0x210, 0x2c0, 0x2f0, 0x3d8, 0x3d8, 0x2f0, 0x3d8, 0x3, 0x0, {[{{@ipv6={@private2, @remote, [0xffffff00, 0x0, 0xffffffff], [0xffffffff, 0xffffff00, 0xffffffff], 'macvlan1\x00', 'wg2\x00', {}, {0xa4c8dd0ffa9b1578}, 0x73, 0x9, 0x4, 0x48}, 0x0, 0x1c8, 0x210, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x80, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x0, 0x2}, {0x4, 0x5, 0x5}, {0x3, 0x4}, 0xbf, 0xb}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x47b) 891.751175ms ago: executing program 5 (id=4231): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000280)={0x20, 0xe, 0x5, "e885ae650f"}, 0x0, 0x0}) 827.894126ms ago: executing program 0 (id=4232): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000000003185000000a800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) 736.310798ms ago: executing program 0 (id=4233): r0 = socket$inet(0x2, 0x2, 0x1) getsockopt$inet_buf(r0, 0x0, 0xe, 0x0, &(0x7f00000001c0)) 709.736698ms ago: executing program 0 (id=4234): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002840)=ANY=[@ANYBLOB="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"], 0x1558}}, 0x0) 692.852199ms ago: executing program 0 (id=4235): epoll_create1(0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000018dfde1035121000822953050a010902120001000000000904"], 0x0) 612.47701ms ago: executing program 1 (id=4236): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$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") quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000340)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000380)={0x6, 0x7, 0x0, 0x7}) 53.893859ms ago: executing program 2 (id=4237): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@v={0x93, 0x0, 0xa0, 0x0, @generic}) 0s ago: executing program 2 (id=4238): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv_slave_0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @dev}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x6}]}]}, 0x4c}}, 0x0) kernel console output (not intermixed with test programs): ck_validity,,errors=continue. Quota mode: writeback. [ 201.597352][ C0] vkms_vblank_simulate: vblank timer overrun [ 201.672429][T10564] EXT4-fs error (device loop5): ext4_append:79: inode #2: comm syz.5.2715: Logical block already allocated [ 201.684454][T10576] loop4: detected capacity change from 0 to 512 [ 201.776850][ T7] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 201.814161][T10576] EXT4-fs (loop4): Ignoring removed orlov option [ 201.859240][T10576] EXT4-fs (loop4): orphan cleanup on readonly fs [ 201.915707][T10576] EXT4-fs error (device loop4): ext4_find_extent:929: inode #4: comm syz.4.2719: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 202.046939][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 202.053910][T10576] EXT4-fs (loop4): Remounting filesystem read-only [ 202.054096][T10576] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=-117 [ 202.054182][T10576] EXT4-fs warning (device loop4): ext4_enable_quotas:6456: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 202.054208][T10576] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 202.054225][T10576] EXT4-fs (loop4): mounted filesystem without journal. Opts: orlov,errors=remount-ro,. Quota mode: writeback. [ 202.178086][ T7] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 202.178143][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.178163][ T7] usb 3-1: config 0 has no interface number 0 [ 202.246523][T10595] loop5: detected capacity change from 0 to 256 [ 202.356970][ T7] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 202.357006][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.357026][ T7] usb 3-1: Product: syz [ 202.357042][ T7] usb 3-1: Manufacturer: syz [ 202.357057][ T7] usb 3-1: SerialNumber: syz [ 202.364375][ T7] usb 3-1: config 0 descriptor?? [ 202.371131][T10595] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 202.399004][ T7] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 202.399043][ T7] usb 3-1: No valid video chain found. [ 202.417131][T10587] loop0: detected capacity change from 0 to 32768 [ 202.592462][T10587] XFS (loop0): Mounting V5 Filesystem [ 202.658375][ T1108] usb 3-1: USB disconnect, device number 15 [ 202.734123][T10587] XFS (loop0): Ending clean mount [ 202.746834][ T5477] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 202.761720][T10613] loop1: detected capacity change from 0 to 512 [ 202.838238][ T4176] XFS (loop0): Unmounting Filesystem [ 202.861204][T10613] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 202.868304][T10619] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2736'. [ 202.946329][T10613] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 202.998298][T10613] EXT4-fs (loop1): 1 truncate cleaned up [ 203.004007][T10613] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,usrjquota="data=ordered,noload,noinit_itable,grpjquota="init_itable,jqfmt=vfsold,noblock_validity,,errors=continue. Quota mode: writeback. [ 203.006678][ T5477] usb 5-1: Using ep0 maxpacket: 8 [ 203.058874][T10613] EXT4-fs error (device loop1): ext4_append:79: inode #2: comm syz.1.2733: Logical block already allocated [ 203.122785][ T26] audit: type=1400 audit(1750249536.095:10): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name=22 pid=10622 comm="syz.5.2748" [ 203.177065][ T5477] usb 5-1: config 2 has an invalid interface number: 31 but max is 0 [ 203.185231][ T5477] usb 5-1: config 2 has no interface number 0 [ 203.197599][ T5477] usb 5-1: config 2 interface 31 has no altsetting 0 [ 203.279661][T10629] loop2: detected capacity change from 0 to 512 [ 203.323994][T10629] EXT4-fs (loop2): Ignoring removed orlov option [ 203.362665][T10629] EXT4-fs (loop2): orphan cleanup on readonly fs [ 203.403824][T10636] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2742'. [ 203.413192][T10636] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2742'. [ 203.419686][T10629] EXT4-fs error (device loop2): ext4_find_extent:929: inode #4: comm syz.2.2739: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 203.441367][ T5477] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 203.451505][T10638] No such timeout policy "syz1" [ 203.483199][ T5477] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.516083][ T5477] usb 5-1: Product: syz [ 203.521132][T10642] loop1: detected capacity change from 0 to 256 [ 203.535386][ T5477] usb 5-1: Manufacturer: syz [ 203.540438][ T5477] usb 5-1: SerialNumber: syz [ 203.545181][T10629] EXT4-fs (loop2): Remounting filesystem read-only [ 203.554945][T10629] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=-117 [ 203.572634][ T5474] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 203.595417][T10629] EXT4-fs warning (device loop2): ext4_enable_quotas:6456: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 203.617263][T10629] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 203.623962][T10629] EXT4-fs (loop2): mounted filesystem without journal. Opts: orlov,errors=remount-ro,. Quota mode: writeback. [ 203.826872][ T1108] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 203.885877][ T5474] usb 6-1: Using ep0 maxpacket: 16 [ 203.944958][T10658] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2754'. [ 204.021332][ T5474] usb 6-1: config 0 has an invalid interface number: 240 but max is 1 [ 204.036700][ T5474] usb 6-1: config 0 has an invalid interface number: 130 but max is 1 [ 204.057323][ T5474] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.068641][ T5474] usb 6-1: config 0 has no interface number 0 [ 204.074945][ T5474] usb 6-1: config 0 has no interface number 1 [ 204.091784][ T5474] usb 6-1: config 0 interface 240 altsetting 4 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 204.116574][ T5474] usb 6-1: config 0 interface 130 altsetting 16 has an invalid endpoint with address 0x0, skipping [ 204.129066][ T5474] usb 6-1: config 0 interface 130 altsetting 16 bulk endpoint 0x3 has invalid maxpacket 1023 [ 204.139646][T10665] delete_channel: no stack [ 204.156956][ T5474] usb 6-1: config 0 interface 130 altsetting 16 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 204.179154][ T5474] usb 6-1: config 0 interface 130 altsetting 16 has an invalid endpoint with address 0x0, skipping [ 204.190274][ T5474] usb 6-1: config 0 interface 130 altsetting 16 has a duplicate endpoint with address 0x3, skipping [ 204.200699][ T1108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 204.201208][ T5474] usb 6-1: config 0 interface 130 altsetting 16 has 6 endpoint descriptors, different from the interface descriptor's value: 15 [ 204.220197][ T1108] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 204.225149][ T5474] usb 6-1: config 0 interface 240 has no altsetting 0 [ 204.241000][ T5474] usb 6-1: config 0 interface 130 has no altsetting 0 [ 204.241491][ T1108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 204.288121][ T1108] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 204.296996][ T5477] ch9200: probe of 5-1:2.31 failed with error -22 [ 204.302887][ T1108] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 204.322638][ T5477] usb 5-1: USB disconnect, device number 17 [ 204.341033][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.373030][ T1108] usb 1-1: config 0 descriptor?? [ 204.396860][ T5462] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 204.457004][ T5474] usb 6-1: New USB device found, idVendor=0df6, idProduct=006c, bcdDevice=c9.48 [ 204.476441][ T5474] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.493088][ T5474] usb 6-1: Product: syz [ 204.497955][ T5474] usb 6-1: Manufacturer: syz [ 204.506915][ T5474] usb 6-1: SerialNumber: syz [ 204.519417][ T5474] usb 6-1: config 0 descriptor?? [ 204.568010][T10682] syz.2.2766 (10682): /proc/10681/oom_adj is deprecated, please use /proc/10681/oom_score_adj instead. [ 204.588136][ T5474] r8712u: register rtl8712_netdev_ops to netdev_ops [ 204.594734][ T5474] usb 6-1: r8712u: USB_SPEED_HIGH with 1 endpoints [ 204.637050][ T1108] hdpvr 1-1:0.0: firmware version 0x7b dated îårDž&k.0H`Ú]hŽ¥ù4_Ïu©V!í°ßš?ì‹ç<é7±’ [ 204.677048][ T1108] hdpvr 1-1:0.0: untested firmware, the driver might not work. [ 204.797205][ T5462] usb 2-1: config 0 has an invalid interface number: 114 but max is 0 [ 204.811527][T10693] dlm: dev_write: no op 0 0 [ 204.816917][ T5474] usb 6-1: r8712u: Boot from EFUSE: Autoload Failed [ 204.823696][ T5474] usb 6-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 204.831298][ T5462] usb 2-1: config 0 has no interface number 0 [ 204.855053][ T5474] usb 6-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 204.856997][ T1108] hdpvr 1-1:0.0: device init failed [ 204.877480][ T1108] hdpvr: probe of 1-1:0.0 failed with error -12 [ 204.897248][ T1108] usb 1-1: USB disconnect, device number 12 [ 204.919186][ T5474] r8712u: register rtl8712_netdev_ops to netdev_ops [ 204.930322][ T5474] usb 6-1: r8712u: USB_SPEED_HIGH with 3 endpoints [ 205.016452][ T5474] usb 6-1: r8712u: Boot from EFUSE: Autoload Failed [ 205.033564][ T5474] usb 6-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 205.041729][ T5462] usb 2-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=13.67 [ 205.059618][ T5462] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.069105][ T5474] usb 6-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 205.077150][ T5462] usb 2-1: Product: syz [ 205.083406][ T5462] usb 2-1: Manufacturer: syz [ 205.104785][ T5474] usb 6-1: USB disconnect, device number 8 [ 205.114497][ T5462] usb 2-1: SerialNumber: syz [ 205.137838][ T5462] usb 2-1: config 0 descriptor?? [ 205.417697][ T5462] cdc_subset: probe of 2-1:0.114 failed with error -22 [ 205.472878][T10726] loop2: detected capacity change from 0 to 512 [ 205.514804][T10724] loop4: detected capacity change from 0 to 4096 [ 205.658917][ T5474] usb 2-1: USB disconnect, device number 16 [ 205.667835][T10728] loop5: detected capacity change from 0 to 4096 [ 205.675497][T10726] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,abort,errors=remount-ro,. Quota mode: writeback. [ 205.694917][T10724] ntfs3: loop4: mft corrupted [ 205.704877][T10726] ext4 filesystem being mounted at /573/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.721752][T10728] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 205.848259][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 205.860269][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 205.875174][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 205.885505][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 205.895393][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 205.905013][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 205.914307][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 205.924476][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 205.935554][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 205.949034][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 205.965598][T10728] ntfs3: loop5: failed to convert "c46c" to macgaelic [ 206.006832][ T4160] Bluetooth: hci0: command 0x0401 tx timeout [ 206.187848][T10739] loop4: detected capacity change from 0 to 22 [ 206.270826][T10739] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 206.307450][T10739] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 206.350543][T10747] loop0: detected capacity change from 0 to 1024 [ 206.351369][T10739] MTD: Couldn't look up './file0': -13 [ 206.394780][T10739] ./file0: Can't open blockdev [ 206.659427][T10763] loop2: detected capacity change from 0 to 128 [ 206.750137][T10763] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 206.761100][T10763] ext4 filesystem being mounted at /576/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 206.805739][T10763] EXT4-fs error (device loop2): ext4_validate_inode_bitmap:106: comm syz.2.2806: Corrupt inode bitmap - block_group = 0, inode_bitmap = 19 [ 206.919977][T10779] netlink: 'syz.4.2811': attribute type 1 has an invalid length. [ 206.986804][T10779] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.2811'. [ 207.006376][T10777] loop1: detected capacity change from 0 to 4096 [ 207.336397][T10791] loop2: detected capacity change from 0 to 4096 [ 207.408209][T10791] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00 [ 207.444671][T10791] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00 [ 207.526756][T10791] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00 [ 207.534653][T10791] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00 [ 207.613299][T10791] ntfs3: loop2: try to read out of volume at offset 0x3fffffc1c00 [ 207.672426][T10791] ntfs3: loop2: try to read out of volume at offset 0x3fffffc2c00 [ 207.726180][T10791] ntfs3: loop2: try to read out of volume at offset 0x3fffffc4c00 [ 207.762140][T10791] ntfs3: loop2: try to read out of volume at offset 0x3fffffc8c00 [ 207.831257][T10791] ntfs3: loop2: try to read out of volume at offset 0x3fffffd0c00 [ 207.875638][T10826] device wg1 entered promiscuous mode [ 207.888014][T10791] ntfs3: loop2: try to read out of volume at offset 0x3fffffe0c00 [ 208.316398][T10848] netlink: 'syz.0.2844': attribute type 2 has an invalid length. [ 208.328245][T10843] VFS: could not find a valid V7 on nullb0. [ 208.533231][ T4160] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 208.716874][ T1108] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 208.870347][ T5469] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 208.947123][ T4160] usb 5-1: unable to get BOS descriptor or descriptor too short [ 208.976773][ T1108] usb 6-1: Using ep0 maxpacket: 8 [ 209.046977][ T4160] usb 5-1: config 2 has an invalid interface number: 24 but max is 0 [ 209.065436][ T4160] usb 5-1: config 2 has no interface number 0 [ 209.072076][ T4160] usb 5-1: config 2 interface 24 altsetting 16 has an invalid endpoint with address 0x0, skipping [ 209.093137][ T4160] usb 5-1: config 2 interface 24 has no altsetting 0 [ 209.100498][ T1108] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 209.242540][T10885] loop2: detected capacity change from 0 to 32768 [ 209.245766][T10883] loop0: detected capacity change from 0 to 32768 [ 209.266285][T10885] (syz.2.2863,10885,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 209.280329][ T1108] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 209.289835][ T4160] usb 5-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=23.12 [ 209.307617][ T5469] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 209.313359][T10883] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.2862 (10883) [ 209.325500][T10885] (syz.2.2863,10885,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 209.331733][ T4160] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.354031][ T1108] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 209.362283][ T1108] usb 6-1: Product: syz [ 209.367479][ T1108] usb 6-1: Manufacturer: syz [ 209.376496][ T5469] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 209.377085][ T1108] usb 6-1: SerialNumber: syz [ 209.396420][ T5469] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.397584][ T4160] usb 5-1: Product: syz [ 209.426223][ T4160] usb 5-1: Manufacturer: syz [ 209.431431][ T4160] usb 5-1: SerialNumber: syz [ 209.437899][T10885] JBD2: Ignoring recovery information on journal [ 209.466356][T10883] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 209.479951][T10883] BTRFS info (device loop0): force zlib compression, level 3 [ 209.487774][T10883] BTRFS info (device loop0): force clearing of disk cache [ 209.495266][T10883] BTRFS info (device loop0): setting nodatasum [ 209.501697][T10883] BTRFS info (device loop0): allowing degraded mounts [ 209.508686][T10883] BTRFS info (device loop0): enabling disk space caching [ 209.516113][T10883] BTRFS info (device loop0): disk space caching is enabled [ 209.523696][T10883] BTRFS info (device loop0): has skinny extents [ 209.532766][T10885] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 209.676864][ T1108] usb 6-1: palm_os_3_probe - error -71 getting connection information [ 209.697455][ T1108] visor: probe of 6-1:1.0 failed with error -71 [ 209.702521][ T5469] usb 2-1: string descriptor 0 read error: -71 [ 209.708724][ T1108] usb 6-1: USB disconnect, device number 9 [ 209.725115][ T5469] hub 2-1:32.0: USB hub found [ 209.744445][T10885] (syz.2.2863,10885,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0x5b86c303. Applying ECC. [ 209.764768][T10885] (syz.2.2863,10885,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x4bf4182b [ 209.787323][ T4160] gl620a: probe of 5-1:2.24 failed with error -22 [ 209.794368][T10885] (syz.2.2863,10885,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 209.798300][ T4160] usb 5-1: USB disconnect, device number 18 [ 209.837004][ T5469] hub 2-1:32.0: config failed, can't read hub descriptor (err -22) [ 209.855879][T10885] (syz.2.2863,10885,1):ocfs2_quota_read:201 ERROR: status = -5 [ 209.863627][T10883] BTRFS info (device loop0): clearing free space tree [ 209.864429][T10883] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 209.876875][T10885] Quota error (device loop2): find_block_dqentry: Can't read quota tree block 6 [ 209.893469][T10885] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 209.906998][T10883] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 209.956037][T10885] (syz.2.2863,10885,0):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 209.990202][T10885] (syz.2.2863,10885,0):ocfs2_mknod:314 ERROR: status = -5 [ 209.998516][ T5469] usb 2-1: USB disconnect, device number 17 [ 210.018541][T10885] (syz.2.2863,10885,1):ocfs2_mknod:502 ERROR: status = -5 [ 210.026123][T10885] (syz.2.2863,10885,1):ocfs2_create:676 ERROR: status = -5 [ 210.053587][T10883] BTRFS error (device loop0): balance: invalid convert data profile raid5 [ 210.099139][ T4172] ocfs2: Unmounting device (7,2) on (node local) [ 210.736045][T10930] loop4: detected capacity change from 0 to 64 [ 210.857981][ T13] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 210.967727][T10947] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2883'. [ 210.987348][T10947] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2883'. [ 210.996415][T10947] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2883'. [ 211.016886][ T1108] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 211.066815][ T4246] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 211.166918][ T13] usb 2-1: Using ep0 maxpacket: 16 [ 211.219108][T10957] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 211.267086][ T1108] usb 3-1: Using ep0 maxpacket: 32 [ 211.307268][ T13] usb 2-1: config 0 has an invalid interface number: 240 but max is 1 [ 211.324137][ T13] usb 2-1: config 0 has an invalid interface number: 130 but max is 1 [ 211.346794][ T4246] usb 1-1: Using ep0 maxpacket: 8 [ 211.355247][ T13] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.396833][ T1108] usb 3-1: config 2 has an invalid interface number: 7 but max is 0 [ 211.397066][ T13] usb 2-1: config 0 has no interface number 0 [ 211.404875][ T1108] usb 3-1: config 2 has no interface number 0 [ 211.456228][ T13] usb 2-1: config 0 has no interface number 1 [ 211.478647][ T13] usb 2-1: config 0 interface 240 altsetting 4 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 211.506904][ T4246] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.529004][ T13] usb 2-1: config 0 interface 130 altsetting 16 has an invalid endpoint with address 0x0, skipping [ 211.561828][ T13] usb 2-1: config 0 interface 130 altsetting 16 bulk endpoint 0x3 has invalid maxpacket 1023 [ 211.571442][ T1108] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=ec.00 [ 211.573436][ T13] usb 2-1: config 0 interface 130 altsetting 16 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 211.592135][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.593429][ T13] usb 2-1: config 0 interface 130 altsetting 16 has an invalid endpoint with address 0x0, skipping [ 211.616844][ T1108] usb 3-1: Product: syz [ 211.622041][ T1108] usb 3-1: Manufacturer: syz [ 211.642232][ T1108] usb 3-1: SerialNumber: syz [ 211.644871][ T13] usb 2-1: config 0 interface 130 altsetting 16 has a duplicate endpoint with address 0x3, skipping [ 211.669614][ T13] usb 2-1: config 0 interface 130 altsetting 16 has 6 endpoint descriptors, different from the interface descriptor's value: 15 [ 211.692836][ T1108] rtl8150 3-1:2.7: couldn't find required endpoints [ 211.718067][ T1108] rtl8150: probe of 3-1:2.7 failed with error -5 [ 211.724352][ T13] usb 2-1: config 0 interface 240 has no altsetting 0 [ 211.731778][ T4246] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 211.761063][ T4246] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.772928][ T13] usb 2-1: config 0 interface 130 has no altsetting 0 [ 211.792016][ T4246] usb 1-1: Product: syz [ 211.796228][ T4246] usb 1-1: Manufacturer: syz [ 211.811072][ T4246] usb 1-1: SerialNumber: syz [ 211.858397][ T4246] usb 1-1: bad CDC descriptors [ 211.932620][ T4246] usb 3-1: USB disconnect, device number 16 [ 211.976878][ T13] usb 2-1: New USB device found, idVendor=0df6, idProduct=006c, bcdDevice=c9.48 [ 212.000718][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.010952][ T13] usb 2-1: Product: syz [ 212.015165][ T13] usb 2-1: Manufacturer: syz [ 212.020810][ T13] usb 2-1: SerialNumber: syz [ 212.050436][ T13] usb 2-1: config 0 descriptor?? [ 212.088044][ T4215] usb 1-1: USB disconnect, device number 13 [ 212.119310][ T13] r8712u: register rtl8712_netdev_ops to netdev_ops [ 212.125966][ T13] usb 2-1: r8712u: USB_SPEED_HIGH with 1 endpoints [ 212.273569][T11004] xt_CT: No such helper "snmp_trap" [ 212.357123][ T13] usb 2-1: r8712u: Boot from EFUSE: Autoload Failed [ 212.364031][ T13] usb 2-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 212.386411][ T13] usb 2-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 212.449281][ T13] r8712u: register rtl8712_netdev_ops to netdev_ops [ 212.464152][T11017] ipt_REJECT: ECHOREPLY no longer supported. [ 212.470564][ T13] usb 2-1: r8712u: USB_SPEED_HIGH with 3 endpoints [ 212.556981][ T13] usb 2-1: r8712u: Boot from EFUSE: Autoload Failed [ 212.563745][ T13] usb 2-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 212.596800][ T13] usb 2-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 212.648559][ T13] usb 2-1: USB disconnect, device number 18 [ 212.703661][T11019] loop4: detected capacity change from 0 to 4096 [ 212.790699][T11019] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 212.956915][ T5475] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 213.172441][ T1108] usb 3-1: new low-speed USB device number 17 using dummy_hcd [ 213.217177][ T5475] usb 1-1: Using ep0 maxpacket: 32 [ 213.336879][ T5475] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.377157][ T5475] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.537025][ T1108] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 213.557070][ T5475] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 213.565369][ T1108] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 213.580522][ T5475] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 213.588286][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.625369][ T5475] usb 1-1: Product: syz [ 213.643594][ T5475] usb 1-1: Manufacturer: syz [ 213.718237][ T5475] hub 1-1:4.0: USB hub found [ 213.890511][T11085] loop4: detected capacity change from 0 to 128 [ 213.913406][ T1108] usb 3-1: string descriptor 0 read error: -71 [ 213.925149][ T1108] hub 3-1:32.0: USB hub found [ 213.937268][ T5475] hub 1-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 213.997622][ T1108] hub 3-1:32.0: config failed, can't read hub descriptor (err -22) [ 214.097477][ T1108] usb 3-1: USB disconnect, device number 17 [ 214.277173][ T4215] usb 1-1: USB disconnect, device number 14 [ 214.331340][ T5674] udevd[5674]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 214.446877][T11113] netlink: 'syz.1.2966': attribute type 21 has an invalid length. [ 214.605803][T11123] loop1: detected capacity change from 0 to 512 [ 214.646417][T11126] loop4: detected capacity change from 0 to 512 [ 214.733855][T11123] EXT4-fs (loop1): Ignoring removed oldalloc option [ 214.762485][T11123] EXT4-fs (loop1): Test dummy encryption mode enabled [ 214.790703][T11123] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 214.797470][T11126] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 214.800224][T11123] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 214.816385][T11123] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 214.859341][T11126] ext4 filesystem being mounted at /627/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.895918][T11123] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.2970: inode #13: comm syz.1.2970: iget: illegal inode # [ 214.975260][T11149] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2979'. [ 214.985044][T11149] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2979'. [ 214.995517][T11123] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.2970: couldn't read orphan inode 13 (err -117) [ 215.016592][T11123] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,oldalloc,noblock_validity,test_dummy_encryption=v1,mblk_io_submit,mblk_io_submit,max_dir_size_kb=0x000000000000222a,delalloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 215.083471][T11123] EXT4-fs error (device loop1): ext4_resize_begin:61: comm syz.1.2970: resize_inode disabled but reserved GDT blocks non-zero [ 215.256944][ T1108] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 215.375849][T11158] tipc: Can't bind to reserved service type 1 [ 215.520479][T11167] loop2: detected capacity change from 0 to 8 [ 215.528013][ T1108] usb 1-1: Using ep0 maxpacket: 16 [ 215.648389][ T1108] usb 1-1: config 64 has an invalid interface number: 176 but max is 0 [ 215.668284][ T1108] usb 1-1: config 64 has no interface number 0 [ 215.701032][ T1108] usb 1-1: config 64 interface 176 has no altsetting 0 [ 215.706027][T11174] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 215.825500][T11177] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 215.864318][T11177] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 215.877029][ T1108] usb 1-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=14.8d [ 215.906980][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.915033][ T1108] usb 1-1: Product: syz [ 215.945200][ T1108] usb 1-1: Manufacturer: syz [ 215.972609][ T1108] usb 1-1: SerialNumber: syz [ 216.056468][T11188] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (2049) [ 216.199571][T11196] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3002'. [ 216.281070][T11200] loop4: detected capacity change from 0 to 128 [ 216.331123][ T1108] usb 1-1: USB disconnect, device number 15 [ 216.398324][T11165] loop5: detected capacity change from 0 to 32768 [ 216.460556][T11165] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz.5.2985 (11165) [ 216.461405][T11206] loop2: detected capacity change from 0 to 1024 [ 216.536562][T11165] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 216.574869][T11165] BTRFS info (device loop5): force zlib compression, level 3 [ 216.595543][T11206] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,nodiscard,block_validity,noquota,,errors=continue. Quota mode: none. [ 216.603183][T11165] BTRFS info (device loop5): force clearing of disk cache [ 216.627081][T11165] BTRFS info (device loop5): setting nodatasum [ 216.633304][T11165] BTRFS info (device loop5): allowing degraded mounts [ 216.699857][T11165] BTRFS info (device loop5): enabling disk space caching [ 216.707998][T11165] BTRFS info (device loop5): disk space caching is enabled [ 216.715231][T11165] BTRFS info (device loop5): has skinny extents [ 216.726036][T11206] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 38: comm syz.2.3007: bad entry in directory: directory entry overrun - offset=6144, inode=0, rec_len=63744, size=1024 fake=0 [ 216.848313][T11226] loop0: detected capacity change from 0 to 512 [ 216.897566][T11226] EXT4-fs (loop0): Ignoring removed oldalloc option [ 216.916234][T11226] EXT4-fs (loop0): Ignoring removed nobh option [ 217.009503][T11226] EXT4-fs (loop0): mounted filesystem without journal. Opts: oldalloc,resgid=0x0000000000000000,errors=remount-ro,nobh,delalloc,. Quota mode: writeback. [ 217.072343][T11245] xt_cluster: you have exceeded the maximum number of cluster nodes (127 > 32) [ 217.126845][T11226] ext4 filesystem being mounted at /594/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.192955][T11257] loop2: detected capacity change from 0 to 128 [ 217.194944][T11165] BTRFS info (device loop5): clearing free space tree [ 217.216839][T11165] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 217.263168][T11165] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 217.267826][T11257] befs: (loop2): invalid magic header [ 217.370000][T11257] overlayfs: unrecognized mount option "verity=on" or missing value [ 217.508738][T11165] BTRFS error (device loop5): balance: invalid convert data profile raid5 [ 217.929628][T11284] netlink: 1476 bytes leftover after parsing attributes in process `syz.2.3034'. [ 218.228212][T11298] loop2: detected capacity change from 0 to 1764 [ 218.492498][T11311] xt_CONNSECMARK: invalid mode: 0 [ 218.928052][T11333] loop1: detected capacity change from 0 to 1024 [ 218.967997][T11340] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.056060][T11333] EXT4-fs (loop1): #clusters per group too big: 24576 [ 219.135890][T11346] loop5: detected capacity change from 0 to 512 [ 219.288193][T11346] EXT4-fs (loop5): Ignoring removed oldalloc option [ 219.300051][T11356] loop0: detected capacity change from 0 to 256 [ 219.316740][T11346] EXT4-fs (loop5): Ignoring removed nobh option [ 219.326966][T11304] loop4: detected capacity change from 0 to 32768 [ 219.373177][T11356] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 219.403810][T11304] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.3039 (11304) [ 219.428649][T11346] EXT4-fs (loop5): mounted filesystem without journal. Opts: oldalloc,resgid=0x0000000000000000,errors=remount-ro,nobh,delalloc,. Quota mode: writeback. [ 219.467478][T11346] ext4 filesystem being mounted at /395/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.486108][T11304] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 219.503875][T11304] BTRFS info (device loop4): force zlib compression, level 3 [ 219.527380][T11304] BTRFS info (device loop4): force clearing of disk cache [ 219.534576][T11304] BTRFS info (device loop4): setting nodatasum [ 219.551161][ T26] audit: type=1800 audit(1750249552.525:11): pid=11356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3060" name="file1" dev="loop0" ino=1048646 res=0 errno=0 [ 219.614505][T11304] BTRFS info (device loop4): allowing degraded mounts [ 219.635157][T11304] BTRFS info (device loop4): enabling disk space caching [ 219.643167][T11304] BTRFS info (device loop4): disk space caching is enabled [ 219.662861][T11304] BTRFS info (device loop4): has skinny extents [ 219.787492][T11384] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3070'. [ 219.830083][T11388] (unnamed net_device) (uninitialized): option lp_interval: invalid value (18446744073709551615) [ 219.857546][T11388] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 219.861636][T11391] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3075'. [ 219.877297][T11391] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3075'. [ 220.140441][T11304] BTRFS info (device loop4): clearing free space tree [ 220.183815][T11406] delete_channel: no stack [ 220.217968][T11304] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 220.228106][T11406] delete_channel: no stack [ 220.276986][T11304] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 220.289587][T11422] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3083'. [ 220.316856][T11422] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3083'. [ 220.332948][T11422] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3083'. [ 220.428044][T11304] BTRFS error (device loop4): balance: invalid convert data profile raid5 [ 220.684125][T11437] [U]  [ 220.754439][T11446] loop2: detected capacity change from 0 to 128 [ 220.855138][T11446] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv0,,errors=continue. Quota mode: none. [ 220.896845][T11446] ext4 filesystem being mounted at /630/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.083044][T11446] EXT4-fs warning (device loop2): ext4_group_extend:1823: can't shrink FS - resize aborted [ 221.542360][ T4214] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 221.967008][ T4214] usb 1-1: config 0 has an invalid interface number: 90 but max is 0 [ 221.995485][ T4214] usb 1-1: config 0 has no interface number 0 [ 222.002074][ T4214] usb 1-1: config 0 interface 90 altsetting 0 endpoint 0x85 has invalid maxpacket 512, setting to 64 [ 222.176015][T11506] netlink: 372 bytes leftover after parsing attributes in process `syz.1.3122'. [ 222.207251][ T4214] usb 1-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=3a.fa [ 222.217552][T11506] netlink: 'syz.1.3122': attribute type 3 has an invalid length. [ 222.228917][ T4214] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.237223][T11508] loop5: detected capacity change from 0 to 2048 [ 222.243762][T11506] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3122'. [ 222.246920][ T4214] usb 1-1: Product: syz [ 222.274160][ T4214] usb 1-1: Manufacturer: syz [ 222.299719][ T4214] usb 1-1: SerialNumber: syz [ 222.320940][ T4214] usb 1-1: config 0 descriptor?? [ 222.330744][T11508] NILFS error (device loop5): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 222.343929][T11509] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 222.346988][T11463] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 222.402662][T11481] loop2: detected capacity change from 0 to 32768 [ 222.416142][T11508] Remounting filesystem read-only [ 222.499629][T11515] netlink: 'syz.1.3125': attribute type 9 has an invalid length. [ 222.530544][T11481] XFS (loop2): Mounting V5 Filesystem [ 222.699576][T11481] XFS (loop2): Ending clean mount [ 222.727208][ T4214] powermate: Expected payload of 3--6 bytes, found 64 bytes! [ 222.735877][ T4214] input: Griffin PowerMate as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.90/input/input25 [ 222.843675][T11496] loop4: detected capacity change from 0 to 32768 [ 222.917119][T11537] xt_l2tp: missing protocol rule (udp|l2tpip) [ 222.960650][T11496] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 222.994926][ T4172] XFS (loop2): Unmounting Filesystem [ 223.045994][ T4160] usb 1-1: USB disconnect, device number 16 [ 223.053068][ C0] powermate: config urb returned -71 [ 223.058488][ C0] powermate: usb_submit_urb(config) failed [ 223.058589][ C0] powermate 1-1:0.90: powermate_irq - usb_submit_urb failed with result: -19 [ 223.078341][T11496] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 223.205617][T11496] ocfs2: Unmounting device (7,4) on (node local) [ 223.274805][T11545] loop1: detected capacity change from 0 to 512 [ 223.378289][T11545] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 223.393361][T11545] ext4 filesystem being mounted at /603/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 223.441871][T11545] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #2: block 18: comm syz.1.3136: lblock 23 mapped to illegal pblock 18 (length 1) [ 223.513371][T11550] loop2: detected capacity change from 0 to 2048 [ 223.605953][T11550] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 223.639233][T11550] UDF-fs: incorrect filename length (10) [ 223.768481][T11558] loop4: detected capacity change from 0 to 8 [ 224.065999][T11576] delete_channel: no stack [ 224.071252][T11565] loop1: detected capacity change from 0 to 4096 [ 224.113005][T11565] ntfs3: loop1: try to read out of volume at offset 0x3fffffc0c00 [ 224.126906][T11565] ntfs3: loop1: try to read out of volume at offset 0x3fffffc0c00 [ 224.145025][T11565] ntfs3: loop1: try to read out of volume at offset 0x3fffffc0c00 [ 224.182030][T11565] ntfs3: loop1: try to read out of volume at offset 0x3fffffc0c00 [ 224.226148][T11565] ntfs3: loop1: try to read out of volume at offset 0x3fffffc1c00 [ 224.247033][ T4215] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 224.287117][T11565] ntfs3: loop1: try to read out of volume at offset 0x3fffffc2c00 [ 224.311711][T11565] ntfs3: loop1: try to read out of volume at offset 0x3fffffc4c00 [ 224.362666][T11565] ntfs3: loop1: try to read out of volume at offset 0x3fffffc8c00 [ 224.398001][T11565] ntfs3: loop1: try to read out of volume at offset 0x3fffffd0c00 [ 224.426876][T11565] ntfs3: loop1: try to read out of volume at offset 0x3fffffe0c00 [ 224.707159][ T4215] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.736616][ T4215] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 224.776771][ T4215] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 224.792308][ T4215] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 224.840189][ T4215] usb 3-1: New USB device found, idVendor=abcd, idProduct=00ee, bcdDevice= 0.00 [ 224.876863][ T4215] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.913637][ T4215] usb 3-1: config 0 descriptor?? [ 224.944075][T11607] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3164'. [ 224.979722][ T4215] usb 3-1: MIDIStreaming interface descriptor not found [ 225.232949][ T7585] usb 3-1: USB disconnect, device number 18 [ 225.260768][T11588] loop4: detected capacity change from 0 to 32768 [ 225.491861][T11588] XFS (loop4): Mounting V5 Filesystem [ 225.663402][T11588] XFS (loop4): Ending clean mount [ 225.692671][T11588] XFS (loop4): Quotacheck needed: Please wait. [ 225.839535][T11588] XFS (loop4): Quotacheck: Done. [ 225.997187][T11658] loop5: detected capacity change from 0 to 256 [ 226.048533][ T4169] XFS (loop4): Unmounting Filesystem [ 226.074401][T11658] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 226.103468][T11617] loop1: detected capacity change from 0 to 32768 [ 226.168289][T11658] exFAT-fs (loop5): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 226.214276][T11617] ea_get: invalid extended attribute [ 226.235625][T11658] exFAT-fs (loop5): Filesystem has been set read-only [ 226.250633][T11664] netlink: 'syz.0.3188': attribute type 30 has an invalid length. [ 226.473605][ T150] block nbd1: Attempted send on invalid socket [ 226.480634][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 226.495662][T11676] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3194'. [ 226.529714][T11674] hpfs: hpfs_map_sector(): read error [ 226.676802][ T4214] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 226.825116][ T7585] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 226.869272][T11683] loop1: detected capacity change from 0 to 4096 [ 226.923990][T11683] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 226.961862][T11683] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 227.007998][T11683] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 227.045307][T11683] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 227.091304][T11683] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 227.107441][ T7585] usb 1-1: Using ep0 maxpacket: 32 [ 227.126125][T11683] ntfs: volume version 3.1. [ 227.145601][T11683] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 227.194201][T11683] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 227.232155][T11683] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 227.276496][T11683] ntfs: (device loop1): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt. [ 227.287581][ T7585] usb 1-1: config 4 has an invalid interface number: 128 but max is 0 [ 227.303696][ T7585] usb 1-1: config 4 has no interface number 0 [ 227.310841][ T7585] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.335624][T11683] ntfs: (device loop1): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 227.350362][ T7585] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.374009][ T7585] usb 1-1: New USB device found, idVendor=016d, idProduct=c314, bcdDevice= 0.00 [ 227.384257][ T7585] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.413602][ T4214] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 227.432258][ T4214] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.443690][ T4214] usb 3-1: Product: syz [ 227.452274][ T4214] usb 3-1: Manufacturer: syz [ 227.466839][ T4214] usb 3-1: SerialNumber: syz [ 227.494845][ T7585] hub 1-1:4.128: USB hub found [ 227.508195][ T4214] usb 3-1: config 0 descriptor?? [ 227.570126][ T4214] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 227.587994][T11714] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3212'. [ 227.688286][ T7585] hub 1-1:4.128: 2 ports detected [ 227.693411][ T7585] hub 1-1:4.128: Using single TT (err -22) [ 227.927174][ T7585] hub 1-1:4.128: hub_hub_status failed (err = -71) [ 227.937003][ T7585] hub 1-1:4.128: config failed, can't get hub status (err -71) [ 228.002680][ T7585] usb 1-1: USB disconnect, device number 17 [ 228.016946][ T4214] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 228.026564][ T4214] sq905c 3-1:0.0: Reading version command failed [ 228.054774][ T4214] sq905c: probe of 3-1:0.0 failed with error -71 [ 228.078599][ T4214] usb 3-1: USB disconnect, device number 19 [ 228.275312][T11747] loop4: detected capacity change from 0 to 512 [ 228.360819][T11747] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 228.381183][T11747] ext4 filesystem being mounted at /674/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.481649][T11724] loop5: detected capacity change from 0 to 32768 [ 228.692583][T11724] XFS (loop5): Mounting V5 Filesystem [ 228.781303][T11724] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 228.810649][T11724] XFS (loop5): Starting recovery (logdev: internal) [ 228.817011][T11781] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.3236'. [ 228.862067][T11786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3237'. [ 228.889676][T11724] XFS (loop5): Ending recovery (logdev: internal) [ 228.956600][T11786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3237'. [ 228.965765][T11786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3237'. [ 229.045010][T11786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3237'. [ 229.068461][ T6462] XFS (loop5): Unmounting Filesystem [ 229.083879][T11786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3237'. [ 229.156949][T11786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3237'. [ 229.196808][T11786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3237'. [ 229.267444][T11786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3237'. [ 229.958446][T11830] netlink: 'syz.1.3260': attribute type 21 has an invalid length. [ 229.986122][T11794] loop4: detected capacity change from 0 to 32768 [ 230.003132][T11830] netlink: 'syz.1.3260': attribute type 4 has an invalid length. [ 230.059512][T11794] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.3242 (11794) [ 230.102043][T11794] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 230.137379][T11794] BTRFS info (device loop4): force zlib compression, level 3 [ 230.175868][T11794] BTRFS info (device loop4): force clearing of disk cache [ 230.194708][T11794] BTRFS info (device loop4): setting nodatasum [ 230.215006][T11794] BTRFS info (device loop4): allowing degraded mounts [ 230.240614][T11794] BTRFS info (device loop4): enabling disk space caching [ 230.284151][T11794] BTRFS info (device loop4): disk space caching is enabled [ 230.334328][T11794] BTRFS info (device loop4): has skinny extents [ 230.618039][T11794] BTRFS info (device loop4): clearing free space tree [ 230.625021][T11794] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 230.647001][T11794] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 230.927630][T11794] BTRFS info (device loop4): balance: start -sconvert=raid0,soft,usage=34359738372,usage=4..8,devid=0,vrange=7..0 [ 231.002919][T11907] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 231.064396][T11794] BTRFS info (device loop4): balance: ended with status: 0 [ 231.422410][T11924] loop2: detected capacity change from 0 to 512 [ 231.706875][T11924] EXT4-fs error (device loop2): mb_free_blocks:1865: group 0, inode 16: block 41:freeing already freed block (bit 41); block bitmap corrupt. [ 231.735380][T11892] loop5: detected capacity change from 0 to 32768 [ 231.774873][T11924] EXT4-fs (loop2): Remounting filesystem read-only [ 231.787262][T11892] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop5 scanned by syz.5.3281 (11892) [ 231.833790][T11939] loop0: detected capacity change from 0 to 256 [ 231.857558][T11924] EXT4-fs error (device loop2): ext4_do_update_inode:5203: inode #16: comm syz.2.3298: corrupted inode contents [ 231.859548][T11937] netlink: 'syz.1.3303': attribute type 6 has an invalid length. [ 231.887184][T11939] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 231.908036][T11924] EXT4-fs (loop2): Remounting filesystem read-only [ 231.937803][T11924] EXT4-fs error (device loop2): ext4_dirty_inode:6039: inode #16: comm syz.2.3298: mark_inode_dirty error [ 232.014909][T11924] EXT4-fs (loop2): Remounting filesystem read-only [ 232.050839][T11892] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 232.070082][T11892] BTRFS info (device loop5): enabling ssd optimizations [ 232.090269][T11924] EXT4-fs error (device loop2): ext4_do_update_inode:5203: inode #16: comm syz.2.3298: corrupted inode contents [ 232.113391][T11892] BTRFS info (device loop5): not using ssd optimizations [ 232.137495][T11892] BTRFS info (device loop5): metadata ratio 3 [ 232.148735][T11892] BTRFS info (device loop5): turning off barriers [ 232.155324][T11892] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8) [ 232.206528][T11924] EXT4-fs (loop2): Remounting filesystem read-only [ 232.233519][T11924] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #16: comm syz.2.3298: mark_inode_dirty error [ 232.253989][T11892] BTRFS info (device loop5): use lzo compression, level 0 [ 232.295441][T11924] EXT4-fs (loop2): Remounting filesystem read-only [ 232.337267][T11892] BTRFS info (device loop5): using free space tree [ 232.343943][T11892] BTRFS info (device loop5): has skinny extents [ 232.344358][T11924] EXT4-fs error (device loop2): ext4_do_update_inode:5203: inode #16: comm syz.2.3298: corrupted inode contents [ 232.423578][T11924] EXT4-fs (loop2): Remounting filesystem read-only [ 232.436996][T11924] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #16: comm syz.2.3298: mark_inode_dirty error [ 232.478857][T11924] EXT4-fs (loop2): Remounting filesystem read-only [ 232.513518][T11958] loop4: detected capacity change from 0 to 4096 [ 232.521388][T11924] EXT4-fs error (device loop2): ext4_do_update_inode:5203: inode #16: comm syz.2.3298: corrupted inode contents [ 232.541433][T11958] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 232.554798][T11924] EXT4-fs (loop2): Remounting filesystem read-only [ 232.561777][T11924] EXT4-fs error (device loop2): ext4_truncate:4273: inode #16: comm syz.2.3298: mark_inode_dirty error [ 232.601540][T11924] EXT4-fs (loop2): Remounting filesystem read-only [ 232.609363][T11924] EXT4-fs error (device loop2): ext4_evict_inode:293: comm syz.2.3298: couldn't truncate inode 16 (err -117) [ 232.624957][T11924] EXT4-fs (loop2): Remounting filesystem read-only [ 232.632008][T11924] EXT4-fs (loop2): 1 orphan inode deleted [ 232.638849][T11924] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,grpquota,lazytime,stripe=0x0000000000008000,resgid=0x0000000000000000,sysvgroups,noauto_da_alloc,usrquota,. Quota mode: writeback. [ 232.676957][ T4215] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 232.738118][T11924] ext4 filesystem being mounted at /658/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.971202][T11985] __nla_validate_parse: 52 callbacks suppressed [ 232.971221][T11985] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3317'. [ 232.977088][ T4215] usb 1-1: Using ep0 maxpacket: 16 [ 233.222250][T11993] loop1: detected capacity change from 0 to 764 [ 233.376402][T11993] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 233.385229][ T4215] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 233.395168][ T4215] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.410115][ T4215] usb 1-1: Product: syz [ 233.414420][ T4215] usb 1-1: Manufacturer: syz [ 233.422097][ T4215] usb 1-1: SerialNumber: syz [ 233.460034][ T4215] usb 1-1: config 0 descriptor?? [ 233.509153][ T4215] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 233.746103][T12007] netlink: 'syz.4.3329': attribute type 2 has an invalid length. [ 233.826945][T12011] loop5: detected capacity change from 0 to 64 [ 233.844934][T12015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3330'. [ 233.899375][ T4160] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 233.926983][ T4215] usb 1-1: clie_3_5_startup: get interface number failed: -71 [ 233.956841][ T4215] visor: probe of 1-1:0.0 failed with error -71 [ 233.997585][ T4215] usb 1-1: USB disconnect, device number 18 [ 234.063478][T12021] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3335'. [ 234.088775][T12021] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3335'. [ 234.139506][T12021] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3335'. [ 234.178830][ T4160] usb 3-1: Using ep0 maxpacket: 8 [ 234.336984][ T4160] usb 3-1: unable to get BOS descriptor or descriptor too short [ 234.431957][ T4160] usb 3-1: config 1 has an invalid interface number: 96 but max is 0 [ 234.461169][ T4160] usb 3-1: config 1 has an invalid interface descriptor of length 2, skipping [ 234.491975][ T4160] usb 3-1: config 1 has no interface number 0 [ 234.511178][ T4160] usb 3-1: config 1 interface 96 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 234.544907][ T4160] usb 3-1: config 1 interface 96 has no altsetting 0 [ 234.550697][T12017] loop4: detected capacity change from 0 to 32768 [ 234.679376][T12017] ERROR: (device loop4): dbAlloc: unable to allocate blocks [ 234.679376][T12017] [ 234.727028][ T4160] usb 3-1: New USB device found, idVendor=19d2, idProduct=1097, bcdDevice=12.87 [ 234.745344][ T4160] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.782546][ T4160] usb 3-1: Product: syz [ 234.790356][ T4160] usb 3-1: Manufacturer: syz [ 234.803443][ T4160] usb 3-1: SerialNumber: syz [ 234.837815][ T4213] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 235.076884][ T4213] usb 1-1: Using ep0 maxpacket: 16 [ 235.133683][ T4160] usb 3-1: USB disconnect, device number 20 [ 235.146930][T11306] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 235.199490][ T4213] usb 1-1: config 150 has an invalid interface number: 234 but max is 0 [ 235.226958][ T4213] usb 1-1: config 150 has no interface number 0 [ 235.238884][ T4213] usb 1-1: config 150 interface 234 has no altsetting 0 [ 235.353549][T12077] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3362'. [ 235.396919][ T4213] usb 1-1: New USB device found, idVendor=0e66, idProduct=0016, bcdDevice=ad.88 [ 235.406064][ T4213] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.416735][T11306] usb 2-1: Using ep0 maxpacket: 32 [ 235.449034][T12081] xt_l2tp: unknown flags: 3b [ 235.454991][ T4213] usb 1-1: Product: syz [ 235.465266][ T4213] usb 1-1: Manufacturer: syz [ 235.472858][ T4213] usb 1-1: SerialNumber: syz [ 235.539688][T12087] loop4: detected capacity change from 0 to 256 [ 235.562134][T12089] netlink: 'syz.5.3368': attribute type 1 has an invalid length. [ 235.570040][T12089] netlink: 244 bytes leftover after parsing attributes in process `syz.5.3368'. [ 235.586901][T11306] usb 2-1: unable to get BOS descriptor or descriptor too short [ 235.666851][T11306] usb 2-1: config 129 has an invalid interface number: 249 but max is 0 [ 235.697383][T11306] usb 2-1: config 129 has no interface number 0 [ 235.703759][T11306] usb 2-1: config 129 interface 249 altsetting 247 bulk endpoint 0x81 has invalid maxpacket 32 [ 235.739964][T12095] netlink: 'syz.5.3371': attribute type 10 has an invalid length. [ 235.744847][T11306] usb 2-1: config 129 interface 249 altsetting 247 endpoint 0xA has invalid wMaxPacketSize 0 [ 235.767764][ T4213] r8712u: register rtl8712_netdev_ops to netdev_ops [ 235.781050][ T4213] usb 1-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 235.790419][T11306] usb 2-1: config 129 interface 249 has no altsetting 0 [ 235.831042][ T4213] usb 1-1: r8712u: Boot from EFUSE: Autoload Failed [ 235.841919][ T4213] usb 1-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 235.865547][ T4213] usb 1-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 235.893707][ T4213] usb 1-1: USB disconnect, device number 19 [ 235.929418][T12095] team0: Device veth0_vlan failed to register rx_handler [ 235.957136][T11306] usb 2-1: New USB device found, idVendor=0424, idProduct=9908, bcdDevice=2e.38 [ 235.974686][T11306] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.000584][T11306] usb 2-1: Product: syz [ 236.004831][T11306] usb 2-1: Manufacturer: syz [ 236.014169][T11306] usb 2-1: SerialNumber: syz [ 236.045695][T12105] loop2: detected capacity change from 0 to 1024 [ 236.057313][T12057] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 236.102479][T12107] loop4: detected capacity change from 0 to 64 [ 236.130113][T12105] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 236.143165][T12105] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 236.153580][T12105] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 236.225753][T12105] EXT4-fs (loop2): mounted filesystem without journal. Opts: data_err=ignore,sysvgroups,resuid=0x0000000000000000,errors=continue,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 236.300631][T12057] udc-core: couldn't find an available UDC or it's busy [ 236.371963][T12057] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 236.507550][T11306] smsc95xx v2.0.0 [ 236.527094][T11306] smsc95xx 2-1:129.249 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 236.587334][T11306] smsc95xx: probe of 2-1:129.249 failed with error -71 [ 236.656239][T11306] usb 2-1: USB disconnect, device number 19 [ 236.966841][ T4213] Bluetooth: hci3: command 0x0406 tx timeout [ 237.064802][T12115] loop5: detected capacity change from 0 to 32768 [ 237.172766][T12147] loop0: detected capacity change from 0 to 4096 [ 237.257729][T12115] XFS (loop5): Mounting V5 Filesystem [ 237.388017][T12115] XFS (loop5): Ending clean mount [ 237.424608][T12176] loop4: detected capacity change from 0 to 1024 [ 237.596482][ T6462] XFS (loop5): Unmounting Filesystem [ 237.927036][ T5463] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 237.991451][T12199] ALSA: mixer_oss: invalid OSS volume '' [ 238.023454][T12199] ALSA: mixer_oss: invalid OSS volume 'Ü?ü×Ó%‰$ U¥!¾ÿ=À,>Qw¦½e~«v×ù' [ 238.070028][T12199] ALSA: mixer_oss: invalid OSS volume '¹…~X›;èÐo«Ö…­ŸãB@§%hq¤az8' [ 238.096742][ T4213] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 238.110517][T12199] ALSA: mixer_oss: invalid OSS volume 'B”ñ7ëD`^ÑV›®()(zÍP«ä÷|‘—? l' [ 238.124776][T12208] device gre0 entered promiscuous mode [ 238.132315][T12199] ALSA: mixer_oss: invalid OSS volume 'Ò0»'r' [ 238.145909][T12199] ALSA: mixer_oss: invalid OSS volume '½ºÏÇ_µÑ}\ÜCbÒs°RDp’=OpŽ™‘ûSZà”ü' [ 238.174806][T12199] ALSA: mixer_oss: invalid OSS volume '£Ùm5‹àõ"Ú›g+çòæ½y' [ 238.206901][T12199] ALSA: mixer_oss: invalid OSS volume 'VÀÇt[´\h A2O:õÁ‹³L±âí' [ 238.226814][ T5463] usb 3-1: Using ep0 maxpacket: 32 [ 238.238980][T12199] ALSA: mixer_oss: invalid OSS volume '…@¢íÈ•ûN+ºû­¸©á™%.§ås_ö¶Ê' [ 238.258535][T12199] ALSA: mixer_oss: invalid OSS volume '&õ' [ 238.264551][T12199] ALSA: mixer_oss: invalid OSS volume '­EºIŽ²]a¸Çg³LKèŸRmrð¥ÝN{ûšk' [ 238.334149][T12199] ALSA: mixer_oss: invalid OSS volume 'àH}+S<1›œüˆ“b|Ÿá&èznF%ŸþíìE' [ 238.350367][T12199] ALSA: mixer_oss: invalid OSS volume '±Îßûl2/>ŠX‚‰¾«?Ë' [ 238.367492][ T5463] usb 3-1: config 4 has an invalid interface number: 128 but max is 0 [ 238.381167][ T5463] usb 3-1: config 4 has no interface number 0 [ 238.388033][T12199] ALSA: mixer_oss: invalid OSS volume '1gE' [ 238.399087][ T5463] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.420826][ T5463] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.451448][ T5463] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 238.470608][ T4213] usb 2-1: config index 0 descriptor too short (expected 29, got 18) [ 238.470779][ T5463] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.491857][ T4213] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 238.513690][ T4213] usb 2-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 238.542004][ T4213] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.561100][ T5463] hub 3-1:4.128: USB hub found [ 238.571353][ T4213] usb 2-1: config 0 descriptor?? [ 238.777052][ T5463] hub 3-1:4.128: 2 ports detected [ 238.783036][ T5463] hub 3-1:4.128: Using single TT (err -22) [ 238.813788][T12240] loop4: detected capacity change from 0 to 256 [ 238.856953][ T4213] usb 2-1: string descriptor 0 read error: -71 [ 238.872926][ T4213] ldusb 2-1:0.0: Interrupt in endpoint not found [ 238.917234][ T4213] usb 2-1: USB disconnect, device number 20 [ 239.006970][ T5463] hub 3-1:4.128: hub_hub_status failed (err = -71) [ 239.023838][ T5463] hub 3-1:4.128: config failed, can't get hub status (err -71) [ 239.125517][ T5463] usb 3-1: USB disconnect, device number 21 [ 239.354833][T12268] loop4: detected capacity change from 0 to 164 [ 239.455482][T12271] mmap: syz.1.3451 (12271) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 239.876738][ T5463] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 239.903027][T12298] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3464'. [ 239.950625][T12302] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3467'. [ 239.990824][T12302] net_ratelimit: 990 callbacks suppressed [ 239.990842][T12302] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 240.056324][T12302] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 240.156869][ T5463] usb 1-1: Using ep0 maxpacket: 32 [ 240.288582][ T5463] usb 1-1: config 0 has an invalid interface number: 9 but max is 0 [ 240.320901][ T5463] usb 1-1: config 0 has no interface number 0 [ 240.506991][ T5463] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 240.532370][ T5463] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.589119][ T5463] usb 1-1: Product: syz [ 240.593401][ T5463] usb 1-1: Manufacturer: syz [ 240.607115][ T5463] usb 1-1: SerialNumber: syz [ 240.628668][ T5463] usb 1-1: config 0 descriptor?? [ 240.679113][ T5463] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 240.875947][T12349] loop5: detected capacity change from 0 to 512 [ 240.936347][T12349] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 241.013040][T12349] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 241.096844][ T5463] gspca_topro: reg_w err -71 [ 241.110087][T12349] EXT4-fs (loop5): 1 truncate cleaned up [ 241.137205][ T5463] gspca_topro: Sensor soi763a [ 241.143744][T12349] EXT4-fs (loop5): mounted filesystem without journal. Opts: noinit_itable,block_validity,sysvgroups,,errors=continue. Quota mode: writeback. [ 241.153682][ T5463] usb 1-1: USB disconnect, device number 20 [ 241.553496][T12374] x_tables: unsorted entry at hook 1 [ 242.386767][T11306] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 242.639622][T11306] usb 2-1: Using ep0 maxpacket: 8 [ 242.704286][T12436] loop0: detected capacity change from 0 to 64 [ 242.759796][T11306] usb 2-1: config 0 has an invalid interface number: 176 but max is 0 [ 242.781388][T11306] usb 2-1: config 0 has no interface number 0 [ 242.957069][T11306] usb 2-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=43.f5 [ 242.999353][T11306] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.016762][T11306] usb 2-1: Product: syz [ 243.031213][T11306] usb 2-1: Manufacturer: syz [ 243.037924][T12447] netlink: 'syz.5.3536': attribute type 3 has an invalid length. [ 243.055956][T11306] usb 2-1: SerialNumber: syz [ 243.074826][T11306] usb 2-1: config 0 descriptor?? [ 243.080034][T12447] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3536'. [ 243.368380][T11306] empeg 2-1:0.176: empeg converter detected [ 243.375191][T11306] usb 2-1: active config #0 != 1 ?? [ 243.405051][T11306] usb 2-1: USB disconnect, device number 21 [ 243.425764][T12463] loop5: detected capacity change from 0 to 16 [ 243.478940][T12463] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 243.633226][T12471] ieee802154 phy0 wpan0: encryption failed: -22 [ 243.783152][ T4215] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 243.816225][T12476] loop4: detected capacity change from 0 to 256 [ 243.953008][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 243.953022][ T26] audit: type=1800 audit(1750249576.925:12): pid=12476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3549" name="file0" dev="loop4" ino=1048650 res=0 errno=0 [ 244.236825][ T4215] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 244.268642][ T4215] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 255, setting to 64 [ 244.311509][ T4215] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 244.356685][ T4215] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.387476][ T4215] usb 1-1: config 0 descriptor?? [ 244.437079][T12466] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 244.696872][ T4215] ath6kl: Failed to submit usb control message: -71 [ 244.706763][ T4215] ath6kl: unable to send the bmi data to the device: -71 [ 244.731604][ T4215] ath6kl: Unable to send get target info: -71 [ 244.771285][ T4215] ath6kl: Failed to init ath6kl core: -71 [ 244.796804][ T4160] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 244.837612][ T4215] ath6kl_usb: probe of 1-1:0.0 failed with error -71 [ 244.875104][ T4215] usb 1-1: USB disconnect, device number 21 [ 244.997156][T12528] UBIFS error (pid: 12528): cannot open "(null)", error -22 [ 245.036771][ T4160] usb 3-1: Using ep0 maxpacket: 8 [ 245.214880][T12538] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 245.269963][T12537] loop1: detected capacity change from 0 to 2048 [ 245.332773][T12537] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=2362, location=2362 [ 245.367314][ T4160] usb 3-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 245.386768][ T4160] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.392031][T12537] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 245.408132][T12537] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 245.437490][ T4160] usb 3-1: Product: syz [ 245.441717][ T4160] usb 3-1: Manufacturer: syz [ 245.487387][ T4160] usb 3-1: SerialNumber: syz [ 245.494895][T12537] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 245.765532][T12554] openvswitch: netlink: Message has 4 unknown bytes. [ 245.804948][ T4160] mxuport 3-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 245.837973][ T4160] mxuport 3-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 245.872390][T12556] overlayfs: missing 'workdir' [ 245.880971][ T4160] mxuport: probe of 3-1:254.0 failed with error -71 [ 245.926496][ T4160] usb 3-1: USB disconnect, device number 22 [ 246.072352][T12560] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 246.097891][T12560] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 246.114895][T12560] overlayfs: missing 'lowerdir' [ 246.552865][T12564] cgroup: No subsys list or none specified [ 246.649933][T12550] loop0: detected capacity change from 0 to 32768 [ 246.676495][T12548] loop5: detected capacity change from 0 to 32768 [ 246.714792][T12550] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.3583 (12550) [ 246.766700][T12550] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 246.816246][T12550] BTRFS info (device loop0): using free space tree [ 246.857520][T12550] BTRFS info (device loop0): has skinny extents [ 246.972722][T12548] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 246.982995][T12548] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 247.082130][T12586] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 247.147945][T12548] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 247.190708][ T4212] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 247.234252][ T4212] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 247.371790][ T4212] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 137ms [ 247.391785][ T4212] gfs2: fsid=syz:syz.0: jid=0: Done [ 247.403238][T12548] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 247.542600][T12550] BTRFS info (device loop0): enabling ssd optimizations [ 247.653688][T12622] loop2: detected capacity change from 0 to 256 [ 247.914076][T12626] netlink: 'syz.1.3614': attribute type 3 has an invalid length. [ 247.956180][T12626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3614'. [ 248.712712][T12606] loop4: detected capacity change from 0 to 32768 [ 248.745475][T12634] device veth0_macvtap left promiscuous mode [ 248.789201][T12645] loop2: detected capacity change from 0 to 512 [ 248.835994][T12606] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.3606 (12606) [ 248.912057][T12645] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 248.932869][T12606] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 248.936882][T12645] ext4 filesystem being mounted at /712/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.995234][T12606] BTRFS info (device loop4): force zlib compression, level 3 [ 249.003493][T12606] BTRFS info (device loop4): force clearing of disk cache [ 249.010861][T12606] BTRFS info (device loop4): setting nodatasum [ 249.017257][T12606] BTRFS info (device loop4): use zlib compression, level 3 [ 249.024676][T12606] BTRFS info (device loop4): allowing degraded mounts [ 249.031690][T12606] BTRFS info (device loop4): enabling disk space caching [ 249.038870][T12606] BTRFS info (device loop4): disk space caching is enabled [ 249.046316][T12606] BTRFS info (device loop4): has skinny extents [ 249.265622][T12666] netlink: 6 bytes leftover after parsing attributes in process `syz.5.3628'. [ 249.271258][T12672] loop2: detected capacity change from 0 to 1024 [ 249.310794][T12666] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 249.328936][T12666] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 249.511427][T12691] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3635'. [ 249.521593][T12606] BTRFS info (device loop4): enabling ssd optimizations [ 249.534736][T12606] BTRFS info (device loop4): clearing free space tree [ 249.564988][T12606] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 249.664064][T12606] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 250.454597][T12727] netlink: 'syz.5.3653': attribute type 3 has an invalid length. [ 251.254348][T12761] loop5: detected capacity change from 0 to 64 [ 251.506361][T12775] device veth0_macvtap left promiscuous mode [ 251.658482][T12782] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3677'. [ 251.857693][T12788] device vlan0 entered promiscuous mode [ 251.872860][T12784] loop1: detected capacity change from 0 to 4096 [ 251.944441][T12784] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 252.113145][T12749] loop4: detected capacity change from 0 to 32768 [ 252.143619][T12784] ntfs3: loop1: failed to convert "c46c" to iso8859-6 [ 252.168062][T12784] ntfs3: loop1: failed to convert "0030" to iso8859-6 [ 252.205598][T12749] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.3660 (12749) [ 252.230468][T12784] ntfs3: loop1: failed to convert "0031" to iso8859-6 [ 252.251367][T12784] ntfs3: loop1: failed to convert "0032" to iso8859-6 [ 252.268964][T12749] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 252.322407][T12749] BTRFS info (device loop4): using free space tree [ 252.357363][T12749] BTRFS info (device loop4): has skinny extents [ 252.487020][T12813] loop5: detected capacity change from 0 to 64 [ 252.697205][T12749] BTRFS info (device loop4): enabling ssd optimizations [ 252.826950][ T5476] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 252.840610][T12839] netlink: 220 bytes leftover after parsing attributes in process `syz.5.3696'. [ 252.966960][T12845] loop5: detected capacity change from 0 to 256 [ 252.986124][ T5674] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop4 scanned by udevd (5674) [ 253.055884][T12845] FAT-fs (loop5): bogus sectors per cluster 0 [ 253.077964][T12845] FAT-fs (loop5): Can't find a valid FAT filesystem [ 253.086964][ T5476] usb 2-1: Using ep0 maxpacket: 16 [ 253.238969][ T5476] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 253.258690][ T5476] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 253.303942][ T5476] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 253.526948][ T5476] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 253.536142][ T5476] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.561248][T12854] loop5: detected capacity change from 0 to 4096 [ 253.567934][ T5476] usb 2-1: Product: syz [ 253.572124][ T5476] usb 2-1: Manufacturer: syz [ 253.582270][ T5476] usb 2-1: SerialNumber: syz [ 253.660622][T12861] loop2: detected capacity change from 0 to 256 [ 253.675694][T12854] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 253.685194][T12860] loop4: detected capacity change from 0 to 16 [ 253.762633][T12860] erofs: (device loop4): mounted with root inode @ nid 36. [ 253.806383][T12843] loop0: detected capacity change from 0 to 40427 [ 253.825683][T12860] erofs: (device loop4): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 253.865852][T12860] erofs: (device loop4): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 253.892813][T12843] F2FS-fs (loop0): invalid crc value [ 253.918242][T12843] F2FS-fs (loop0): Found nat_bits in checkpoint [ 253.927343][ T26] audit: type=1800 audit(1750249586.905:13): pid=12860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3697" name="file3" dev="loop4" ino=89 res=0 errno=0 [ 253.947523][ T5476] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 254.017471][T12843] F2FS-fs (loop0): Start checkpoint disabled! [ 254.112233][ T5476] usb 2-1: USB disconnect, device number 22 [ 254.146449][ T4186] udevd[4186]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 254.166947][T12843] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 254.397304][T12873] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3713'. [ 254.441638][T12875] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3714'. [ 254.535788][T12880] netlink: 'syz.1.3716': attribute type 2 has an invalid length. [ 254.577173][T12880] netlink: 'syz.1.3716': attribute type 1 has an invalid length. [ 254.755488][T12885] 8021q: adding VLAN 0 to HW filter on device bond4 [ 254.876878][ T4213] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 254.879205][T12864] loop2: detected capacity change from 0 to 32768 [ 255.010555][T12900] loop4: detected capacity change from 0 to 64 [ 255.116822][ T4213] usb 6-1: Using ep0 maxpacket: 8 [ 255.156955][ T4213] usb 6-1: too many configurations: 173, using maximum allowed: 8 [ 255.312785][T12918] loop4: detected capacity change from 0 to 512 [ 255.369929][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.376325][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.436034][T12918] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 255.552869][T12918] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 255.577385][T12918] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 255.624901][T12918] EXT4-fs (loop4): 1 truncate cleaned up [ 255.685623][T12918] EXT4-fs (loop4): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000002e,nombcache,quota,quota,,errors=continue. Quota mode: writeback. [ 255.857930][T12930] loop2: detected capacity change from 0 to 4096 [ 255.927777][T12930] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 255.972770][T12934] loop4: detected capacity change from 0 to 256 [ 255.978011][ T4213] usb 6-1: New USB device found, idVendor=0c45, idProduct=613b, bcdDevice=c4.6d [ 255.983868][T12930] ntfs: (device loop2): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 255.991253][ T4213] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=66 [ 256.005943][ T4213] usb 6-1: Product: syz [ 256.032527][ T4213] usb 6-1: Manufacturer: syz [ 256.038100][T12930] ntfs: (device loop2): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 256.046352][ T4213] usb 6-1: SerialNumber: syz [ 256.052261][T12922] loop0: detected capacity change from 0 to 32768 [ 256.095810][ T4213] usb 6-1: config 0 descriptor?? [ 256.133036][T12930] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 256.151113][T12930] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 256.175100][T12930] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 256.184395][T12930] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 256.237695][T12930] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 256.282250][T12930] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 256.303483][T12922] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 256.341223][T12939] loop4: detected capacity change from 0 to 1024 [ 256.348858][T12930] ntfs: volume version 3.1. [ 256.418959][ T4213] gspca_main: 0c45:613b too many config [ 256.447012][T12939] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c018, mo2=0002] [ 256.466995][ T4213] usb 6-1: USB disconnect, device number 10 [ 256.516525][T12939] System zones: 0-1, 3-36 [ 256.522514][T12939] EXT4-fs (loop4): orphan cleanup on readonly fs [ 256.532765][T12939] EXT4-fs warning (device loop4): ext4_enable_quotas:6456: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 256.582345][T12939] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 256.590070][T12939] EXT4-fs error (device loop4): __ext4_iget:4893: inode #12: block 13: comm syz.4.3740: invalid block [ 256.627186][T12939] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.3740: couldn't read orphan inode 12 (err -117) [ 256.663494][T12939] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 256.728208][T12939] kAFS: No cell specified [ 256.758680][ T4176] ocfs2: Unmounting device (7,0) on (node local) [ 256.945458][T12952] loop4: detected capacity change from 0 to 2048 [ 257.006596][T12956] loop1: detected capacity change from 0 to 1024 [ 257.058400][T12952] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 257.132934][T12960] netlink: 'syz.0.3745': attribute type 6 has an invalid length. [ 257.162975][T12956] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 257.249766][T12956] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,norecovery,resgid=0x0000000000000000,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,grpid,auto_da_alloc=0x0000000000000343,grpid,barrier=0x0000000000000007,nombcache,. Quota mode: none. [ 257.616813][T12979] xt_CT: No such helper "snmp" [ 257.808580][T12989] loop1: detected capacity change from 0 to 2048 [ 257.885416][T12989] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 257.971828][T13003] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 257.972111][T12989] attempt to access beyond end of device [ 257.972111][T12989] loop1: rw=524288, want=33554432, limit=2048 [ 258.164676][T13015] netdevsim netdevsim4: Direct firmware load for ..€ failed with error -2 [ 258.209582][T13021] loop5: detected capacity change from 0 to 256 [ 258.230176][T13015] netdevsim netdevsim4: Falling back to sysfs fallback for: ..€ [ 258.243855][T12989] NILFS (loop1): DAT doesn't have a block to manage vblocknr = 16777227 [ 258.271252][T12989] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=16) [ 258.300377][T12989] Remounting filesystem read-only [ 258.305590][T12989] NILFS (loop1): error -5 truncating bmap (ino=16) [ 258.547154][ T4170] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 258.893750][T13049] loop2: detected capacity change from 0 to 512 [ 258.935171][T13053] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3793'. [ 258.971491][T13049] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 259.113857][T13049] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,acl,mblk_io_submit,sysvgroups,,errors=continue. Quota mode: writeback. [ 259.168078][T13049] ext4 filesystem being mounted at /757/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.357667][T13082] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3805'. [ 259.386602][T13085] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3808'. [ 259.397627][T13082] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3805'. [ 259.407578][T13082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3805'. [ 259.431221][T13085] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3808'. [ 259.478785][T13085] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3808'. [ 259.518790][T13085] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3808'. [ 259.586836][ T4213] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 259.684060][T13091] loop4: detected capacity change from 0 to 4096 [ 259.784897][T13091] ntfs3: loop4: try to read out of volume at offset 0x3fffffc0c00 [ 259.809204][T13105] loop5: detected capacity change from 0 to 1024 [ 259.812915][T13107] loop1: detected capacity change from 0 to 256 [ 259.821034][T13091] ntfs3: loop4: try to read out of volume at offset 0x3fffffc0c00 [ 259.836815][ T4213] usb 1-1: Using ep0 maxpacket: 32 [ 259.842276][T13091] ntfs3: loop4: try to read out of volume at offset 0x3fffffc0c00 [ 259.854511][T13109] loop2: detected capacity change from 0 to 256 [ 259.854745][T13091] ntfs3: loop4: try to read out of volume at offset 0x3fffffc0c00 [ 259.887082][T13091] ntfs3: loop4: try to read out of volume at offset 0x3fffffc1c00 [ 259.895282][T13091] ntfs3: loop4: try to read out of volume at offset 0x3fffffc2c00 [ 259.957008][ T4213] usb 1-1: config 0 has an invalid interface number: 191 but max is 0 [ 259.965230][ T4213] usb 1-1: config 0 has no interface number 0 [ 259.968903][T13109] FAT-fs (loop2): Directory bread(block 64) failed [ 259.978735][T13091] ntfs3: loop4: try to read out of volume at offset 0x3fffffc4c00 [ 259.986606][T13091] ntfs3: loop4: try to read out of volume at offset 0x3fffffc8c00 [ 259.991765][T13107] FAT-fs (loop1): Directory bread(block 64) failed [ 259.991956][ T4213] usb 1-1: config 0 interface 191 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 260.016842][T13091] ntfs3: loop4: try to read out of volume at offset 0x3fffffd0c00 [ 260.016886][T13091] ntfs3: loop4: try to read out of volume at offset 0x3fffffe0c00 [ 260.017674][T13107] FAT-fs (loop1): Directory bread(block 65) failed [ 260.045904][T13109] FAT-fs (loop2): Directory bread(block 65) failed [ 260.055226][ T4213] usb 1-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 260.076065][T13107] FAT-fs (loop1): Directory bread(block 66) failed [ 260.086053][T13107] FAT-fs (loop1): Directory bread(block 67) failed [ 260.098663][T13107] FAT-fs (loop1): Directory bread(block 68) failed [ 260.106884][T13109] FAT-fs (loop2): Directory bread(block 66) failed [ 260.113485][T13109] FAT-fs (loop2): Directory bread(block 67) failed [ 260.117412][T13107] FAT-fs (loop1): Directory bread(block 69) failed [ 260.173949][T13107] FAT-fs (loop1): Directory bread(block 70) failed [ 260.199268][T13109] FAT-fs (loop2): Directory bread(block 68) failed [ 260.212055][T13107] FAT-fs (loop1): Directory bread(block 71) failed [ 260.232655][T13109] FAT-fs (loop2): Directory bread(block 69) failed [ 260.237028][ T4213] usb 1-1: New USB device found, idVendor=04fc, idProduct=0204, bcdDevice=67.67 [ 260.263306][T13107] FAT-fs (loop1): Directory bread(block 72) failed [ 260.272886][ T4213] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.286920][T13107] FAT-fs (loop1): Directory bread(block 73) failed [ 260.297607][T13109] FAT-fs (loop2): Directory bread(block 70) failed [ 260.304196][T13109] FAT-fs (loop2): Directory bread(block 71) failed [ 260.304206][ T4213] usb 1-1: Product: syz [ 260.304224][ T4213] usb 1-1: Manufacturer: syz [ 260.359004][ T4213] usb 1-1: SerialNumber: syz [ 260.382885][ T4213] usb 1-1: config 0 descriptor?? [ 260.383542][T13109] FAT-fs (loop2): Directory bread(block 72) failed [ 260.396796][T13117] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3822'. [ 260.416343][T13116] loop5: detected capacity change from 0 to 1024 [ 260.433448][T13109] FAT-fs (loop2): Directory bread(block 73) failed [ 260.468778][ T4213] spcp8x5 1-1:0.191: SPCP8x5 converter detected [ 260.485886][ T4213] usb 1-1: SPCP8x5 converter now attached to ttyUSB0 [ 260.505964][T13117] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3822'. [ 260.719286][T13119] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3824'. [ 260.765550][T13119] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3824'. [ 260.795466][T13119] netlink: 'syz.4.3824': attribute type 3 has an invalid length. [ 260.800206][T13121] xt_cluster: node mask cannot exceed total number of nodes [ 260.826825][T13119] netlink: 11 bytes leftover after parsing attributes in process `syz.4.3824'. [ 260.935995][ T4213] usb 1-1: USB disconnect, device number 22 [ 260.987106][ T4213] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 261.007569][ T4213] spcp8x5 1-1:0.191: device disconnected [ 261.345844][T13136] loop5: detected capacity change from 0 to 8192 [ 261.438382][T13136] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 261.446747][ T5468] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 261.454447][T13150] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3839'. [ 261.609221][T13136] REISERFS (device loop5): using ordered data mode [ 261.619084][T13136] reiserfs: using flush barriers [ 261.636913][T13136] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 261.717789][T13136] REISERFS (device loop5): checking transaction log (loop5) [ 261.730084][ T5468] usb 5-1: Using ep0 maxpacket: 16 [ 261.751331][T13136] REISERFS (device loop5): Using tea hash to sort names [ 261.786270][T13136] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 261.936949][ T5468] usb 5-1: unable to get BOS descriptor or descriptor too short [ 262.027142][ T5468] usb 5-1: config 255 has an invalid interface number: 190 but max is 1 [ 262.035545][ T5468] usb 5-1: config 255 has an invalid interface number: 137 but max is 1 [ 262.064798][ T5468] usb 5-1: config 255 has no interface number 0 [ 262.084470][ T5468] usb 5-1: config 255 has no interface number 1 [ 262.107272][ T5468] usb 5-1: config 255 interface 190 has no altsetting 0 [ 262.136728][ T5468] usb 5-1: config 255 interface 137 has no altsetting 0 [ 262.320085][ T5468] usb 5-1: New USB device found, idVendor=0602, idProduct=1001, bcdDevice=e9.04 [ 262.356085][ T5468] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.373145][T13189] loop2: detected capacity change from 0 to 164 [ 262.379841][ T5468] usb 5-1: Product: syz [ 262.384020][ T5468] usb 5-1: Manufacturer: syz [ 262.406775][ T5468] usb 5-1: SerialNumber: syz [ 262.473332][T13192] loop5: detected capacity change from 0 to 64 [ 262.515740][T13189] Unable to read rock-ridge attributes [ 262.554428][T13189] Unable to read rock-ridge attributes [ 262.599031][T13189] attempt to access beyond end of device [ 262.599031][T13189] loop2: rw=524288, want=263332, limit=164 [ 262.633180][T13189] attempt to access beyond end of device [ 262.633180][T13189] loop2: rw=0, want=263332, limit=164 [ 262.671969][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 262.671985][ T26] audit: type=1800 audit(1750249595.645:14): pid=13189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3857" name="file0" dev="loop2" ino=1862 res=0 errno=0 [ 262.761183][T13201] loop5: detected capacity change from 0 to 512 [ 262.797221][ T5468] usb 5-1: USB disconnect, device number 19 [ 262.908437][ T5472] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 262.918632][T13201] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 262.944850][T13201] ext4 filesystem being mounted at /578/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.024285][T13201] EXT4-fs error (device loop5): ext4_xattr_block_get:546: inode #15: comm syz.5.3863: corrupted xattr block 33 [ 263.327174][ T5472] usb 2-1: config 7 interface 0 has no altsetting 0 [ 263.364170][T13232] loop4: detected capacity change from 0 to 512 [ 263.411877][T13235] loop5: detected capacity change from 0 to 256 [ 263.457159][ T5468] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 263.517375][T13232] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,errors=continue,abort,bsdgroups,,errors=continue. Quota mode: writeback. [ 263.565319][T13232] ext4 filesystem being mounted at /785/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.628698][ T5472] usb 2-1: string descriptor 0 read error: -22 [ 263.635003][ T5472] usb 2-1: New USB device found, idVendor=0ace, idProduct=13a1, bcdDevice= 4.44 [ 263.676079][ T5472] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.737728][ T5472] usb 2-1: dvb_usb_v2: found a 'ZyDAS ZD1301 reference design' in warm state [ 263.768793][ T5472] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 263.790342][ T5472] dvbdev: DVB: registering new adapter (ZyDAS ZD1301 reference design) [ 263.810071][ T5472] usb 2-1: media controller created [ 263.822393][T13247] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 263.865278][ T5472] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 263.936997][ T5468] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 263.963991][ T5468] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 264.017285][ T5468] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 264.046857][ T5468] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 264.267055][ T5468] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 264.282454][T13262] netlink: 'syz.4.3891': attribute type 2 has an invalid length. [ 264.290117][ T5468] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.297700][T11306] usb 2-1: USB disconnect, device number 23 [ 264.312701][ T5468] usb 1-1: Product: syz [ 264.317187][ T5468] usb 1-1: Manufacturer: syz [ 264.322073][ T5468] usb 1-1: SerialNumber: syz [ 264.337202][ T5468] usb 1-1: config 0 descriptor?? [ 264.393631][ T5468] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 264.416464][T13239] loop2: detected capacity change from 0 to 40427 [ 264.468360][T13239] F2FS-fs (loop2): Found nat_bits in checkpoint [ 264.592045][T13255] loop5: detected capacity change from 0 to 32768 [ 264.648706][ T5468] ums-isd200: probe of 1-1:0.0 failed with error -22 [ 264.668100][T13239] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 264.692186][T13255] ERROR: (device loop5): diAllocBit: iag inconsistent [ 264.692186][T13255] [ 264.700186][T13239] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 264.730936][T13255] ERROR: (device loop5): remounting filesystem as read-only [ 264.778538][T13255] ialloc: diAlloc returned -5! [ 264.885623][ T5468] usb 1-1: USB disconnect, device number 23 [ 265.229241][T13285] loop5: detected capacity change from 0 to 1024 [ 265.537531][T13300] loop0: detected capacity change from 0 to 256 [ 265.654301][T13300] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 265.732867][T13306] loop2: detected capacity change from 0 to 4096 [ 265.754256][T13314] netlink: 1 bytes leftover after parsing attributes in process `syz.5.3914'. [ 265.797212][T13306] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 265.853421][T13306] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 265.901888][T13306] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 265.962719][ T5468] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 265.978474][T13306] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 266.025753][T13321] netlink: 'syz.5.3919': attribute type 15 has an invalid length. [ 266.026580][T13306] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 266.051895][T13321] netlink: 25 bytes leftover after parsing attributes in process `syz.5.3919'. [ 266.103304][T13306] ntfs: volume version 3.1. [ 266.141422][T13306] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 266.160729][T13327] netlink: 'syz.1.3920': attribute type 1 has an invalid length. [ 266.189276][T13328] loop0: detected capacity change from 0 to 512 [ 266.225144][T13306] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 266.270245][T13306] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 266.330192][T13328] EXT4-fs (loop0): orphan cleanup on readonly fs [ 266.368313][T13328] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.3921: bg 0: block 248: padding at end of block bitmap is not set [ 266.379743][T13306] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 266.413516][T13328] EXT4-fs error (device loop0): ext4_acquire_dquot:6204: comm syz.0.3921: Failed to acquire dquot type 1 [ 266.426890][ T5468] usb 5-1: config 0 has an invalid interface number: 107 but max is 0 [ 266.435109][ T5468] usb 5-1: config 0 has no interface number 0 [ 266.441670][ T5468] usb 5-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 266.453888][ T5468] usb 5-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 266.497743][T13328] EXT4-fs (loop0): 1 truncate cleaned up [ 266.538313][T13328] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 266.631030][T13328] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback. [ 266.639662][ T5468] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 266.662829][ T5468] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 266.672681][ T5468] usb 5-1: Product: syz [ 266.678534][ T5472] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 266.702358][ T5468] usb 5-1: Manufacturer: syz [ 266.716706][ T5468] usb 5-1: SerialNumber: syz [ 266.727428][ T5468] usb 5-1: config 0 descriptor?? [ 266.778028][ T5468] keyspan 5-1:0.107: Keyspan 4 port adapter converter detected [ 266.796134][ T5468] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 81 [ 266.806063][T13350] loop2: detected capacity change from 0 to 64 [ 266.841862][ T5468] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 1 [ 266.853684][ T5468] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 266.863508][ T5468] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 2 [ 266.911549][ T5468] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 266.936402][ T5468] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 4 [ 266.946533][ T5468] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 266.972021][ T5468] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 6 [ 266.987871][ T5468] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 267.007473][ T5468] usb 5-1: USB disconnect, device number 20 [ 267.032433][ T5468] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 267.043534][ T5468] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 267.055133][ T5468] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 267.067109][ T5468] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 267.077687][ T5468] keyspan 5-1:0.107: device disconnected [ 267.137211][ T5472] usb 6-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 267.146293][ T5472] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.179670][ T5472] usb 6-1: config 0 descriptor?? [ 267.239145][ T5472] pwc: Creative Labs Webcam 5 detected. [ 267.367014][ T5476] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 267.447200][ T5472] pwc: Failed to set LED on/off time (-71) [ 267.466856][ T5472] pwc: send_video_command error -71 [ 267.472903][ T5472] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 267.483512][T13364] loop2: detected capacity change from 0 to 4096 [ 267.490881][ T5472] Philips webcam: probe of 6-1:0.0 failed with error -71 [ 267.510150][ T5472] usb 6-1: USB disconnect, device number 11 [ 267.561448][T13366] loop1: detected capacity change from 0 to 4096 [ 267.613015][T13364] ntfs: volume version 3.1. [ 267.654579][T13371] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 267.686812][ T5476] usb 1-1: Using ep0 maxpacket: 32 [ 267.822305][ T5476] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.862228][ T5476] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.892118][T13375] device syz_tun entered promiscuous mode [ 267.898096][ T5476] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 267.936697][ T5476] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.019387][ T5476] hub 1-1:4.0: USB hub found [ 268.126903][ T4213] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 268.236822][ T5476] hub 1-1:4.0: config failed, can't read hub descriptor (err -90) [ 268.349310][T13389] netlink: 'syz.2.3950': attribute type 1 has an invalid length. [ 268.381118][ T4213] usb 2-1: Using ep0 maxpacket: 16 [ 268.403653][T13370] loop4: detected capacity change from 0 to 32768 [ 268.496871][ T4213] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 268.504985][ T4213] usb 2-1: config 0 has no interface number 0 [ 268.526706][ T4213] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 268.536556][ T4213] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 268.556712][ T4213] usb 2-1: config 0 interface 41 has no altsetting 0 [ 268.567438][ T5476] usb 1-1: USB disconnect, device number 24 [ 268.636845][T11306] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 268.716803][ T4213] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 268.725868][ T4213] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.746682][ T4213] usb 2-1: Product: syz [ 268.750875][ T4213] usb 2-1: Manufacturer: syz [ 268.755460][ T4213] usb 2-1: SerialNumber: syz [ 268.778323][ T4213] usb 2-1: config 0 descriptor?? [ 268.797271][T13373] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 268.804675][T13373] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 269.012133][T13370] jfs_strtoUCS: char2uni returned -22. [ 269.023557][T13370] charset = cp949, char = 0xd4 [ 269.048896][T13373] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 269.076957][T13373] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 269.170483][T11306] usb 6-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 269.188540][T11306] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.206786][T11306] usb 6-1: Product: syz [ 269.217716][T11306] usb 6-1: Manufacturer: syz [ 269.237961][T11306] usb 6-1: SerialNumber: syz [ 269.264720][T11306] usb 6-1: config 0 descriptor?? [ 269.309249][T11306] usb 6-1: Waiting for MOTU Microbook II to boot up... [ 269.316846][ T4213] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 269.336757][T11306] usb 6-1: failed setting the sample rate for Motu MicroBook II: -22 [ 269.346262][T11306] snd-usb-audio: probe of 6-1:0.0 failed with error -22 [ 269.354069][ T4213] CoreChips: probe of 2-1:0.41 failed with error -71 [ 269.414238][ T4213] usb 2-1: USB disconnect, device number 24 [ 269.525163][T11306] usb 6-1: USB disconnect, device number 12 [ 269.655405][T13417] xt_NFQUEUE: number of total queues is 0 [ 269.905444][T13431] RDS: rds_bind could not find a transport for ae0c:91e3:ccfb:11d2:0:5efe:150.125.240.108, load rds_tcp or rds_rdma? [ 270.327065][ T5472] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 270.618050][ T5472] usb 1-1: Using ep0 maxpacket: 32 [ 270.627929][T13433] loop1: detected capacity change from 0 to 32768 [ 270.640368][T13433] XFS: ikeep mount option is deprecated. [ 270.650203][T13433] XFS: noikeep mount option is deprecated. [ 270.746985][ T5472] usb 1-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 270.762028][ T5472] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.794910][T13433] XFS (loop1): Mounting V5 Filesystem [ 270.798012][ T5472] usb 1-1: config 0 descriptor?? [ 270.857988][ T5472] rndis_host: probe of 1-1:0.0 failed with error -22 [ 270.866575][ T5476] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 270.920298][T13433] XFS (loop1): Ending clean mount [ 270.929593][T13433] XFS (loop1): Quotacheck needed: Please wait. [ 271.015223][T13462] loop4: detected capacity change from 0 to 32768 [ 271.049326][T13433] XFS (loop1): Quotacheck: Done. [ 271.076476][T13488] Cannot find set identified by id 65534 to match [ 271.089973][T11306] usb 1-1: USB disconnect, device number 25 [ 271.099171][ T5674] loop4: p1 p2 p3 < p5 > [ 271.138730][ T5674] loop4: p1 size 242222080 extends beyond EOD, truncated [ 271.166986][ T5476] usb 3-1: Using ep0 maxpacket: 8 [ 271.197226][ T4170] XFS (loop1): Unmounting Filesystem [ 271.216560][T13462] loop4: p1 p2 p3 < p5 > [ 271.232640][T13462] loop4: p1 size 242222080 extends beyond EOD, truncated [ 271.326988][ T5476] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 271.337926][ T5476] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 271.555353][ T5476] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 271.570976][ T5476] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.586941][ T5476] usb 3-1: Product: syz [ 271.596798][ T5476] usb 3-1: Manufacturer: syz [ 271.601589][ T5476] usb 3-1: SerialNumber: syz [ 271.622621][ T5476] usb 3-1: config 0 descriptor?? [ 271.883385][T13512] loop0: detected capacity change from 0 to 64 [ 271.995457][T13512] Bad inode number on dev loop0: 6 is out of range [ 272.143672][T13521] netlink: 'syz.5.4009': attribute type 1 has an invalid length. [ 272.154866][ T4160] usb 3-1: USB disconnect, device number 23 [ 272.210986][T13523] Cannot find del_set index 3 as target [ 272.219693][T13521] netlink: 'syz.5.4009': attribute type 2 has an invalid length. [ 272.236281][T13521] netlink: 'syz.5.4009': attribute type 1 has an invalid length. [ 272.436462][T13531] 8021q: adding VLAN 0 to HW filter on device bond1 [ 272.450506][T13540] loop0: detected capacity change from 0 to 256 [ 272.632353][T13540] FAT-fs (loop0): Directory bread(block 64) failed [ 272.644840][ T4316] udevd[4316]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 272.644948][ T4163] udevd[4163]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 272.680970][ T4186] udevd[4186]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 272.690654][T13540] FAT-fs (loop0): Directory bread(block 65) failed [ 272.710443][ T5674] udevd[5674]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 272.737147][T13540] FAT-fs (loop0): Directory bread(block 66) failed [ 272.743846][T13540] FAT-fs (loop0): Directory bread(block 67) failed [ 272.750525][T13554] loop2: detected capacity change from 0 to 64 [ 272.804665][T13540] FAT-fs (loop0): Directory bread(block 68) failed [ 272.815240][T13540] FAT-fs (loop0): Directory bread(block 69) failed [ 272.841289][T13540] FAT-fs (loop0): Directory bread(block 70) failed [ 272.886855][T13540] FAT-fs (loop0): Directory bread(block 71) failed [ 272.893666][T13540] FAT-fs (loop0): Directory bread(block 72) failed [ 272.911106][T13540] FAT-fs (loop0): Directory bread(block 73) failed [ 272.917803][ T4316] udevd[4316]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 272.931085][ T5674] udevd[5674]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 272.944408][ T4186] udevd[4186]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 273.001161][ T4163] udevd[4163]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 273.119551][T13572] netlink: 'syz.5.4033': attribute type 1 has an invalid length. [ 273.143444][T13572] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4033'. [ 273.165201][T13575] loop2: detected capacity change from 0 to 164 [ 273.166043][T13577] xt_TCPMSS: Only works on TCP SYN packets [ 273.296000][T13584] tmpfs: Bad value for 'size' [ 273.449687][T13596] netlink: 'syz.0.4046': attribute type 10 has an invalid length. [ 273.449715][T13596] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4046'. [ 273.528222][T13596] device geneve0 entered promiscuous mode [ 273.530010][T13596] team0: Port device geneve0 added [ 273.546936][ T5476] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 273.568028][T13600] binfmt_misc: register: failed to install interpreter file ./file0 [ 273.816864][ T5468] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 273.838906][T13611] loop4: detected capacity change from 0 to 512 [ 273.906003][T13611] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 273.967078][ T5476] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 273.994105][ T5476] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 274.004116][T13611] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 274.046243][ T5476] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 274.060646][T13611] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 274.086818][ T5468] usb 3-1: Using ep0 maxpacket: 32 [ 274.122862][T13611] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 274.144566][T13611] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 274.167014][T13611] EXT4-fs (loop4): failed to initialize system zone (-117) [ 274.182694][T13611] EXT4-fs (loop4): mount failed [ 274.253922][T13623] loop5: detected capacity change from 0 to 128 [ 274.267195][ T5468] usb 3-1: config 4 has an invalid interface number: 161 but max is 0 [ 274.300654][ T5468] usb 3-1: config 4 has an invalid interface number: 62 but max is 0 [ 274.309487][ T5476] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 274.323839][ T5476] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.333743][ T5468] usb 3-1: config 4 descriptor has 1 excess byte, ignoring [ 274.341328][ T5476] usb 2-1: Product: syz [ 274.345812][ T5468] usb 3-1: config 4 has 2 interfaces, different from the descriptor's value: 1 [ 274.361493][ T5476] usb 2-1: Manufacturer: syz [ 274.391945][ T5476] usb 2-1: SerialNumber: syz [ 274.415513][ T5468] usb 3-1: config 4 has no interface number 0 [ 274.432532][ T5468] usb 3-1: config 4 has no interface number 1 [ 274.450052][ T5468] usb 3-1: config 4 interface 161 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 274.466158][T13627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4061'. [ 274.467404][ T5468] usb 3-1: too many endpoints for config 4 interface 62 altsetting 67: 144, using maximum allowed: 30 [ 274.496373][ T5476] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 274.507278][ T5476] cdc_ncm 2-1:1.0: bind() failure [ 274.524141][ T5468] usb 3-1: config 4 interface 62 altsetting 67 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 274.529001][T13627] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4061'. [ 274.539624][ T5468] usb 3-1: config 4 interface 62 has no altsetting 0 [ 274.683230][T13631] loop4: detected capacity change from 0 to 256 [ 274.711295][T11306] usb 2-1: USB disconnect, device number 25 [ 274.747120][ T5468] usb 3-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=aa.71 [ 274.756250][ T5468] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.818372][ T5468] usb 3-1: Product: syz [ 274.822594][ T5468] usb 3-1: Manufacturer: syz [ 274.850191][T13639] netlink: 'syz.5.4066': attribute type 32 has an invalid length. [ 274.858353][ T5468] usb 3-1: SerialNumber: syz [ 275.226349][T13662] loop0: detected capacity change from 0 to 4096 [ 275.342685][ T5468] usb 3-1: USB disconnect, device number 24 [ 275.391118][T13672] tmpfs: Bad value for 'mpol' [ 275.392557][T13671] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 275.806250][ T5674] udevd[5674]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:4.161/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 275.813062][T13684] loop5: detected capacity change from 0 to 4096 [ 275.840508][T13694] netlink: 'syz.0.4092': attribute type 4 has an invalid length. [ 275.886913][T13694] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4092'. [ 275.901527][T13684] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512) [ 276.001390][T13694] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 276.130353][T13702] netlink: 'syz.2.4096': attribute type 1 has an invalid length. [ 276.179884][T13702] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.4096'. [ 276.246781][T13702] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4096'. [ 276.379382][T13716] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4100'. [ 276.579386][T13721] openvswitch: netlink: Actions may not be safe on all matching packets [ 276.581574][T13722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4105'. [ 276.590269][T13714] loop2: detected capacity change from 0 to 4096 [ 276.780255][T13726] Timeout policy `syz0' can only be used by L3 protocol number 21 [ 276.843154][T13714] ntfs3: loop2: try to read out of volume at offset 0x3fffffc7000 [ 276.978214][T13734] loop1: detected capacity change from 0 to 256 [ 277.146963][ T5468] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 277.436991][ T5468] usb 1-1: Using ep0 maxpacket: 8 [ 277.475601][T13763] AppArmor: change_hat: Invalid input '°' [ 277.582270][T13771] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4130'. [ 277.637201][T11306] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 277.767284][ T5468] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55 [ 277.783384][ T5468] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.812285][ T5468] usb 1-1: Product: syz [ 277.816507][ T5468] usb 1-1: Manufacturer: syz [ 277.836745][ T5468] usb 1-1: SerialNumber: syz [ 277.845418][ T5468] usb 1-1: config 0 descriptor?? [ 278.014233][T11306] usb 6-1: config 0 has an invalid descriptor of length 248, skipping remainder of the config [ 278.043845][T11306] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 278.150633][T13804] netlink: 'syz.4.4147': attribute type 10 has an invalid length. [ 278.167913][ T5468] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 278.184904][ T5468] dvb_usb_af9015: probe of 1-1:0.0 failed with error -22 [ 278.207285][T11306] usb 6-1: New USB device found, idVendor=2184, idProduct=001c, bcdDevice=e3.03 [ 278.211309][ T5468] usb 1-1: USB disconnect, device number 26 [ 278.229211][T13804] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 278.239561][T11306] usb 6-1: New USB device strings: Mfr=1, Product=22, SerialNumber=3 [ 278.276566][T11306] usb 6-1: Product: syz [ 278.312363][T11306] usb 6-1: Manufacturer: syz [ 278.332873][T11306] usb 6-1: SerialNumber: syz [ 278.340436][T11306] usb 6-1: config 0 descriptor?? [ 278.378041][T11306] cdc_acm 6-1:0.0: skipping garbage [ 278.446549][T13812] loop2: detected capacity change from 0 to 4096 [ 278.524325][T13822] netlink: 'syz.4.4156': attribute type 3 has an invalid length. [ 278.625112][T11306] usb 6-1: USB disconnect, device number 13 [ 278.635159][T13829] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 278.651919][T13812] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=32, inode=11, rec_len=129, name_len=6 [ 278.742978][T13812] Remounting filesystem read-only [ 278.800959][T13833] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 279.162029][T13839] loop1: detected capacity change from 0 to 4096 [ 279.263135][T13839] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 279.350028][T13855] netlink: 'syz.2.4172': attribute type 79 has an invalid length. [ 279.463822][T13826] loop4: detected capacity change from 0 to 32768 [ 279.563173][T13862] loop2: detected capacity change from 0 to 64 [ 279.569703][T13826] (syz.4.4158,13826,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 279.597924][ T4228] ntfs3: loop1: ino=1b, Internal error [ 279.614730][ T4228] ntfs3: loop1: ntfs3_write_inode r=1b failed, -22. [ 279.623264][T13826] (syz.4.4158,13826,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 279.667138][ T4228] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 279.738324][T13826] JBD2: Ignoring recovery information on journal [ 279.869963][T13826] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 280.005228][T13879] loop0: detected capacity change from 0 to 256 [ 280.076950][T13883] loop2: detected capacity change from 0 to 1024 [ 280.118978][ T4169] ocfs2: Unmounting device (7,4) on (node local) [ 280.131073][T13879] FAT-fs (loop0): Directory bread(block 64) failed [ 280.160497][T13879] FAT-fs (loop0): Directory bread(block 65) failed [ 280.188150][T13879] FAT-fs (loop0): Directory bread(block 66) failed [ 280.194873][T13879] FAT-fs (loop0): Directory bread(block 67) failed [ 280.206755][T11306] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 280.245218][T13879] FAT-fs (loop0): Directory bread(block 68) failed [ 280.254992][T13879] FAT-fs (loop0): Directory bread(block 69) failed [ 280.267141][T13879] FAT-fs (loop0): Directory bread(block 70) failed [ 280.279394][T13879] FAT-fs (loop0): Directory bread(block 71) failed [ 280.318032][T13879] FAT-fs (loop0): Directory bread(block 72) failed [ 280.354176][T13879] FAT-fs (loop0): Directory bread(block 73) failed [ 280.466818][T11306] usb 2-1: Using ep0 maxpacket: 8 [ 280.587320][T11306] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 280.605882][T11306] usb 2-1: config 0 has no interface number 0 [ 280.646985][T13896] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4192'. [ 280.667032][T13896] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4192'. [ 280.686575][T13896] netlink: 35 bytes leftover after parsing attributes in process `syz.2.4192'. [ 280.743411][T13896] netlink: 'syz.2.4192': attribute type 3 has an invalid length. [ 280.772199][T13896] netlink: 'syz.2.4192': attribute type 2 has an invalid length. [ 280.780754][T11306] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 280.801694][T11306] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.823193][T11306] usb 2-1: Product: syz [ 280.828578][T11306] usb 2-1: Manufacturer: syz [ 280.833315][T11306] usb 2-1: SerialNumber: syz [ 280.853349][T11306] usb 2-1: config 0 descriptor?? [ 280.901783][T11306] usb 2-1: selecting invalid altsetting 1 [ 280.926042][T11306] dvb_ttusb_budget: ttusb_init_controller: error [ 280.963578][T11306] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 281.102858][T13911] netlink: 'syz.4.4198': attribute type 2 has an invalid length. [ 281.122497][T11306] DVB: Unable to find symbol stv0299_attach() [ 281.223723][T11306] DVB: Unable to find symbol tda8083_attach() [ 281.231208][T11306] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 281.268824][ T1108] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 281.277316][T11306] usb 2-1: USB disconnect, device number 26 [ 281.321092][T13894] loop5: detected capacity change from 0 to 32768 [ 281.381646][T13924] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4204'. [ 281.391033][T13924] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4204'. [ 281.424645][T13894] XFS (loop5): Mounting V5 Filesystem [ 281.461520][T13924] device gretap2 entered promiscuous mode [ 281.518633][T13894] XFS (loop5): Ending clean mount [ 281.633145][ T6462] XFS (loop5): Unmounting Filesystem [ 281.636734][ T2353] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 281.667051][ T1108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 281.682798][ T1108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 281.697401][ T1108] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 281.736796][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.791878][ T1108] usb 1-1: config 0 descriptor?? [ 282.093206][ T1108] usb 1-1: USB disconnect, device number 27 [ 282.127025][ T2353] usb 3-1: unable to get BOS descriptor or descriptor too short [ 282.221741][ T2353] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 282.257310][T13961] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4216'. [ 282.259509][ T2353] usb 3-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 282.306997][ T2353] usb 3-1: config 1 interface 0 has no altsetting 1 [ 282.533354][ T2353] usb 3-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 282.556164][ T2353] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.593650][ T2353] usb 3-1: Product: syz [ 282.600868][ T2353] usb 3-1: Manufacturer: syz [ 282.605476][ T2353] usb 3-1: SerialNumber: syz [ 282.694828][ T2353] smsusb:smsusb_probe: board id=8, interface number 0 [ 282.781716][T13987] openvswitch: netlink: Missing key (keys=40, expected=100) [ 282.846804][ T4160] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 282.860461][T13990] Cannot find del_set index 4 as target [ 282.920620][ T2353] smsusb:smsusb_probe: Device initialized with return code -19 [ 282.970301][T13969] loop1: detected capacity change from 0 to 32768 [ 283.096850][ T4160] usb 5-1: Using ep0 maxpacket: 16 [ 283.134652][ T5476] usb 3-1: USB disconnect, device number 25 [ 283.140969][ T5468] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 283.216877][ T4160] usb 5-1: config 7 has an invalid interface number: 247 but max is 0 [ 283.232356][ T4160] usb 5-1: config 7 has no interface number 0 [ 283.252381][ T4160] usb 5-1: config 7 interface 247 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 283.281766][ T4160] usb 5-1: config 7 interface 247 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 283.306776][ T4160] usb 5-1: config 7 interface 247 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 0 [ 283.326885][ T2353] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 283.447274][T14002] loop1: detected capacity change from 0 to 32768 [ 283.490514][ T4160] usb 5-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=6c.22 [ 283.502879][ T4160] usb 5-1: New USB device strings: Mfr=1, Product=74, SerialNumber=147 [ 283.510683][T14002] (syz.1.4236,14002,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 283.516913][ T4160] usb 5-1: Product: syz [ 283.525893][ T5468] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 283.533793][ T4160] usb 5-1: Manufacturer: syz [ 283.543157][ T4160] usb 5-1: SerialNumber: syz [ 283.552312][ T5468] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.554168][T14002] (syz.1.4236,14002,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 283.588683][ T5468] usb 6-1: config 0 descriptor?? [ 283.596477][T14002] JBD2: Ignoring recovery information on journal [ 283.607554][ T2353] usb 1-1: Using ep0 maxpacket: 16 [ 283.633256][ T5468] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 283.656824][ T4160] ni6501 5-1:7.247: driver 'ni6501' failed to auto-configure device. [ 283.734701][T14002] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 283.762625][T14010] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 283.800927][T14002] [ 283.803309][T14002] ====================================================== [ 283.810345][T14002] WARNING: possible circular locking dependency detected [ 283.817645][T14002] 5.15.185-syzkaller #0 Not tainted [ 283.822895][T14002] ------------------------------------------------------ [ 283.829929][T14002] syz.1.4236/14002 is trying to acquire lock: [ 283.836014][T14002] ffff88805e0ca650 (sb_internal#4){.+.+}-{0:0}, at: ocfs2_write_info+0x117/0x350 [ 283.845195][T14002] [ 283.845195][T14002] but task is already holding lock: [ 283.852574][T14002] ffff88805edd0660 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_lock_global_qf+0x1e5/0x270 [ 283.863431][T14002] [ 283.863431][T14002] which lock already depends on the new lock. [ 283.863431][T14002] [ 283.873813][T14002] [ 283.873813][T14002] the existing dependency chain (in reverse order) is: [ 283.882857][T14002] [ 283.882857][T14002] -> #6 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 283.891820][T14002] down_write+0x38/0x60 [ 283.896485][T14002] ocfs2_lock_global_qf+0x1e5/0x270 [ 283.902187][T14002] ocfs2_acquire_dquot+0x29d/0xaf0 [ 283.907810][T14002] dqget+0x778/0xeb0 [ 283.912237][T14002] __dquot_initialize+0x3b6/0xcb0 [ 283.917764][T14002] ocfs2_get_init_inode+0x138/0x1b0 [ 283.923486][T14002] ocfs2_mknod+0x8aa/0x22b0 [ 283.928496][T14002] ocfs2_create+0x192/0x410 [ 283.933494][T14002] path_openat+0x11e1/0x2f30 [ 283.938590][T14002] do_filp_open+0x1b3/0x3e0 [ 283.943689][T14002] do_sys_openat2+0x142/0x4a0 [ 283.948882][T14002] __x64_sys_openat+0x135/0x160 [ 283.954244][T14002] do_syscall_64+0x4c/0xa0 [ 283.959261][T14002] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 283.965668][T14002] [ 283.965668][T14002] -> #5 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}: [ 283.976249][T14002] down_write+0x38/0x60 [ 283.981003][T14002] ocfs2_lock_global_qf+0x1c7/0x270 [ 283.986737][T14002] ocfs2_acquire_dquot+0x29d/0xaf0 [ 283.992396][T14002] dqget+0x778/0xeb0 [ 283.996816][T14002] __dquot_initialize+0x3b6/0xcb0 [ 284.002344][T14002] ocfs2_get_init_inode+0x138/0x1b0 [ 284.008062][T14002] ocfs2_mknod+0x8aa/0x22b0 [ 284.013103][T14002] ocfs2_create+0x192/0x410 [ 284.018112][T14002] path_openat+0x11e1/0x2f30 [ 284.023224][T14002] do_filp_open+0x1b3/0x3e0 [ 284.028227][T14002] do_sys_openat2+0x142/0x4a0 [ 284.033413][T14002] __x64_sys_openat+0x135/0x160 [ 284.038800][T14002] do_syscall_64+0x4c/0xa0 [ 284.043720][T14002] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 284.050122][T14002] [ 284.050122][T14002] -> #4 (&dquot->dq_lock){+.+.}-{3:3}: [ 284.057856][T14002] __mutex_lock_common+0x1eb/0x2390 [ 284.063589][T14002] mutex_lock_nested+0x17/0x20 [ 284.068856][T14002] dquot_commit+0x5a/0x410 [ 284.073862][T14002] ext4_write_dquot+0x1f0/0x360 [ 284.079213][T14002] mark_all_dquot_dirty+0x1e3/0x400 [ 284.084935][T14002] __dquot_free_space+0x7ca/0xb90 [ 284.090488][T14002] ext4_free_blocks+0x1af5/0x2480 [ 284.096013][T14002] ext4_ext_remove_space+0x1eaa/0x4390 [ 284.101977][T14002] ext4_ext_truncate+0x192/0x240 [ 284.107004][ T5468] gp8psk: usb in 137 operation failed. [ 284.107416][T14002] ext4_truncate+0x9f1/0x10d0 [ 284.112976][ T2353] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82 [ 284.118068][T14002] ext4_evict_inode+0xb43/0x1080 [ 284.118095][T14002] evict+0x485/0x870 [ 284.118108][T14002] ext4_orphan_cleanup+0xaa9/0x12e0 [ 284.118125][T14002] ext4_fill_super+0x9288/0x9a00 [ 284.129416][ T5468] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 284.132599][T14002] mount_bdev+0x287/0x3c0 [ 284.141091][ T5468] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 284.142827][T14002] legacy_get_tree+0xe6/0x180 [ 284.148586][ T2353] usb 1-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10 [ 284.158768][T14002] vfs_get_tree+0x88/0x270 [ 284.158793][T14002] do_new_mount+0x24a/0xa40 [ 284.158810][T14002] __se_sys_mount+0x2d6/0x3c0 [ 284.158826][T14002] do_syscall_64+0x4c/0xa0 [ 284.158842][T14002] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 284.158862][T14002] [ 284.158862][T14002] -> #3 (&ei->i_data_sem){++++}-{3:3}: [ 284.158892][T14002] down_write+0x38/0x60 [ 284.158908][T14002] ext4_truncate+0x96d/0x10d0 [ 284.158926][T14002] ext4_setattr+0xffe/0x19e0 [ 284.158942][T14002] notify_change+0xbcd/0xee0 [ 284.158956][T14002] do_truncate+0x197/0x220 [ 284.158975][T14002] do_sys_ftruncate+0x31b/0x3d0 [ 284.158993][T14002] do_syscall_64+0x4c/0xa0 [ 284.159008][T14002] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 284.159028][T14002] [ 284.159028][T14002] -> #2 (jbd2_handle){++++}-{0:0}: [ 284.159053][T14002] start_this_handle+0x1338/0x15a0 [ 284.159070][T14002] jbd2__journal_start+0x2b7/0x5a0 [ 284.159086][T14002] jbd2_journal_start+0x26/0x30 [ 284.165959][T12857] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 284.172843][T14002] ocfs2_start_trans+0x374/0x6c0 [ 284.172866][T14002] ocfs2_shutdown_local_alloc+0x1fd/0xa10 [ 284.172883][T14002] ocfs2_dismount_volume+0x1de/0x880 [ 284.185923][ T5468] usb 6-1: USB disconnect, device number 14 [ 284.186213][T14002] generic_shutdown_super+0x130/0x300 [ 284.197937][ T2353] usb 1-1: Product: syz [ 284.201356][T14002] kill_block_super+0x7c/0xe0 [ 284.206492][ T2353] usb 1-1: Manufacturer: syz [ 284.212697][T14002] deactivate_locked_super+0x93/0xf0 [ 284.212724][T14002] cleanup_mnt+0x418/0x4d0 [ 284.212742][T14002] task_work_run+0x125/0x1a0 [ 284.212766][T14002] exit_to_user_mode_loop+0x10f/0x130 [ 284.212785][T14002] exit_to_user_mode_prepare+0xb1/0x140 [ 284.212801][T14002] syscall_exit_to_user_mode+0x16/0x40 [ 284.212820][T14002] do_syscall_64+0x58/0xa0 [ 284.212835][T14002] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 284.212857][T14002] [ 284.212857][T14002] -> #1 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 284.212890][T14002] down_read+0x44/0x2e0 [ 284.212906][T14002] ocfs2_start_trans+0x368/0x6c0 [ 284.212922][T14002] ocfs2_shutdown_local_alloc+0x1fd/0xa10 [ 284.212938][T14002] ocfs2_dismount_volume+0x1de/0x880 [ 284.212954][T14002] generic_shutdown_super+0x130/0x300 [ 284.212972][T14002] kill_block_super+0x7c/0xe0 [ 284.212990][T14002] deactivate_locked_super+0x93/0xf0 [ 284.213008][T14002] cleanup_mnt+0x418/0x4d0 [ 284.213024][T14002] task_work_run+0x125/0x1a0 [ 284.213040][T14002] exit_to_user_mode_loop+0x10f/0x130 [ 284.213059][T14002] exit_to_user_mode_prepare+0xb1/0x140 [ 284.213077][T14002] syscall_exit_to_user_mode+0x16/0x40 [ 284.213095][T14002] do_syscall_64+0x58/0xa0 [ 284.213108][T14002] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 284.226181][ T2353] usb 1-1: SerialNumber: syz [ 284.230616][T14002] [ 284.230616][T14002] -> #0 (sb_internal#4){.+.+}-{0:0}: [ 284.230653][T14002] __lock_acquire+0x2c33/0x7c60 [ 284.242239][ T2353] usb 1-1: config 0 descriptor?? [ 284.245890][T14002] lock_acquire+0x197/0x3f0 [ 284.311745][ T2353] usb 1-1: selecting invalid altsetting 1 [ 284.328846][ T2353] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 284.332899][T14002] ocfs2_start_trans+0x269/0x6c0 [ 284.341680][ T5674] udevd[5674]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 284.343282][T14002] ocfs2_write_info+0x117/0x350 [ 284.536012][T14002] dquot_set_dqinfo+0x459/0x6c0 [ 284.541417][T14002] quota_setinfo+0x2a4/0x2b0 [ 284.546556][T14002] __se_sys_quotactl+0x295/0x6c0 [ 284.552225][T14002] do_syscall_64+0x4c/0xa0 [ 284.557199][T14002] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 284.558343][T12857] usb 3-1: Using ep0 maxpacket: 8 [ 284.564547][T14002] [ 284.564547][T14002] other info that might help us debug this: [ 284.564547][T14002] [ 284.564558][T14002] Chain exists of: [ 284.564558][T14002] sb_internal#4 --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5 --> &ocfs2_quota_ip_alloc_sem_key [ 284.564558][T14002] [ 284.564609][T14002] Possible unsafe locking scenario: [ 284.564609][T14002] [ 284.564614][T14002] CPU0 CPU1 [ 284.564618][T14002] ---- ---- [ 284.564623][T14002] lock(&ocfs2_quota_ip_alloc_sem_key); [ 284.602585][ T5468] usb 1-1: USB disconnect, device number 28 [ 284.604548][T14002] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5); [ 284.604578][T14002] lock(&ocfs2_quota_ip_alloc_sem_key); [ 284.604592][T14002] lock(sb_internal#4); [ 284.649266][T14002] [ 284.649266][T14002] *** DEADLOCK *** [ 284.649266][T14002] [ 284.656039][T14014] loop5: detected capacity change from 0 to 4096 [ 284.657609][T14002] 3 locks held by syz.1.4236/14002: [ 284.657623][T14002] #0: ffff88805e0ca0e0 (&type->s_umount_key#89){++++}-{3:3}, at: user_get_super+0x118/0x240 [ 284.657685][T14002] #1: ffff88805edd09c8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{3:3}, at: ocfs2_lock_global_qf+0x1c7/0x270 [ 284.657741][T14002] #2: ffff88805edd0660 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_lock_global_qf+0x1e5/0x270 [ 284.657788][T14002] [ 284.657788][T14002] stack backtrace: [ 284.657794][T14002] CPU: 1 PID: 14002 Comm: syz.1.4236 Not tainted 5.15.185-syzkaller #0 [ 284.657820][T14002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 284.657830][T14002] Call Trace: [ 284.657838][T14002] [ 284.657846][T14002] dump_stack_lvl+0x168/0x230 [ 284.657863][T14002] ? load_image+0x3b0/0x3b0 [ 284.657881][T14002] ? show_regs_print_info+0x20/0x20 [ 284.657900][T14002] ? print_circular_bug+0x12b/0x1a0 [ 284.657919][T14002] check_noncircular+0x274/0x310 [ 284.657937][T14002] ? add_chain_block+0x940/0x940 [ 284.657952][T14002] ? lockdep_lock+0xdc/0x1e0 [ 284.657972][T14002] ? lockdep_unlock+0x134/0x2d0 [ 284.657990][T14002] ? mark_lock+0x94/0x320 [ 284.778199][T14002] ? mark_lock+0x94/0x320 [ 284.782627][T14002] __lock_acquire+0x2c33/0x7c60 [ 284.787573][T14002] ? verify_lock_unused+0x140/0x140 [ 284.792786][T14002] ? verify_lock_unused+0x140/0x140 [ 284.798080][T14002] ? ocfs2_inode_lock_full_nested+0xcb3/0x1b20 [ 284.804237][T14002] lock_acquire+0x197/0x3f0 [ 284.808740][T14002] ? ocfs2_write_info+0x117/0x350 [ 284.813760][T14002] ? __might_sleep+0xf0/0xf0 [ 284.818343][T14002] ? do_raw_spin_lock+0x11d/0x280 [ 284.823359][T14002] ? read_lock_is_recursive+0x10/0x10 [ 284.828728][T14002] ? __rwlock_init+0x140/0x140 [ 284.833502][T14002] ? __rwlock_init+0x140/0x140 [ 284.838303][T14002] ? do_raw_spin_unlock+0x11d/0x230 [ 284.843542][T14002] ocfs2_start_trans+0x269/0x6c0 [ 284.848583][T14002] ? ocfs2_write_info+0x117/0x350 [ 284.853609][T14002] ? down_write+0x44/0x60 [ 284.857949][T14002] ? ocfs2_recovery_exit+0x50/0x50 [ 284.863058][T14002] ocfs2_write_info+0x117/0x350 [ 284.867913][T14002] ? ocfs2_mark_dquot_dirty+0xb80/0xb80 [ 284.873456][T14002] ? __rwlock_init+0x140/0x140 [ 284.878222][T14002] ? do_raw_spin_unlock+0x11d/0x230 [ 284.883418][T14002] dquot_set_dqinfo+0x459/0x6c0 [ 284.888301][T14002] quota_setinfo+0x2a4/0x2b0 [ 284.892975][T14002] ? quota_getinfo+0x270/0x270 [ 284.897736][T14002] ? bpf_lsm_capable+0x5/0x10 [ 284.902411][T14002] ? bpf_lsm_quotactl+0x5/0x10 [ 284.907172][T14002] ? security_quotactl+0x85/0xb0 [ 284.912109][T14002] ? do_quotactl+0x5ad/0x710 [ 284.916697][T14002] __se_sys_quotactl+0x295/0x6c0 [ 284.921632][T14002] ? __x64_sys_quotactl+0xa0/0xa0 [ 284.926651][T14002] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 284.932629][T14002] ? lock_chain_count+0x20/0x20 [ 284.937479][T14002] ? vtime_user_exit+0x2dc/0x400 [ 284.942501][T14002] ? lockdep_hardirqs_on+0x94/0x140 [ 284.947694][T14002] do_syscall_64+0x4c/0xa0 [ 284.952116][T14002] ? clear_bhb_loop+0x30/0x80 [ 284.956785][T14002] ? clear_bhb_loop+0x30/0x80 [ 284.961553][T14002] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 284.967460][T14002] RIP: 0033:0x7fcff52fe929 [ 284.971971][T14002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.991767][T14002] RSP: 002b:00007fcff3166038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 285.000181][T14002] RAX: ffffffffffffffda RBX: 00007fcff5525fa0 RCX: 00007fcff52fe929 [ 285.008153][T14002] RDX: 0000000000000000 RSI: 0000200000000340 RDI: ffffffff80000601 [ 285.016124][T14002] RBP: 00007fcff5380b39 R08: 0000000000000000 R09: 0000000000000000 [ 285.024093][T14002] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000000 [ 285.032150][T14002] R13: 0000000000000000 R14: 00007fcff5525fa0 R15: 00007fff63cdf6b8 [ 285.040129][T14002] [ 285.067828][T14014] __ntfs_error: 17 callbacks suppressed [ 285.067858][T14014] ntfs: (device loop5): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 285.074464][ T4170] ocfs2: Unmounting device (7,1) on (node local) [ 285.092489][T12857] usb 3-1: config 1 interface 0 altsetting 111 endpoint 0x81 has an invalid bInterval 247, changing to 11 [ 285.104328][T12857] usb 3-1: config 1 interface 0 has no altsetting 0 [ 285.111440][T14014] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 285.125905][T14014] ntfs: (device loop5): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 285.145172][T14014] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 285.160597][T14014] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 285.164447][ T4160] usb 5-1: USB disconnect, device number 21 [ 285.196109][T14014] ntfs: volume version 3.1. [ 285.204217][T14014] ntfs: (device loop5): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 285.218379][T14014] ntfs: (device loop5): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 285.233586][T14014] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 285.253583][T14014] ntfs: (device loop5): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 285.267841][T14014] ntfs: (device loop5): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 285.298414][T12857] usb 3-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice= 0.40 [ 285.307666][T12857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.315990][T12857] usb 3-1: Product: syz [ 285.321910][T12857] usb 3-1: Manufacturer: syz [ 285.326840][T12857] usb 3-1: SerialNumber: syz [ 285.658023][T12857] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input26 [ 285.696825][ T3532] bcm5974 3-1:1.0: could not read from device [ 285.703016][ T3532] bcm5974: mode switch failed [ 285.714258][T12857] usb 3-1: USB disconnect, device number 26 [ 285.721395][ T3532] bcm5974 3-1:1.0: could not read from device [ 285.729398][ T3532] bcm5974: mode switch failed [ 285.734598][ T3532] bcm5974 3-1:1.0: could not read from device [ 285.741632][ T3532] bcm5974: mode switch failed