last executing test programs: 28.391670839s ago: executing program 4 (id=9799): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x54, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x18, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0xff0c, @local}}}]}, @CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3b}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) 28.333843699s ago: executing program 4 (id=9801): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000740)={0x0, 0x0, 0x1, 0x81, 0xfffffff9}) setfsuid(0xee00) 28.277660189s ago: executing program 4 (id=9802): rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) futex(&(0x7f0000000240)=0x2, 0x10b, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) 28.197276462s ago: executing program 4 (id=9803): syz_mount_image$cramfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00e5496ddf42b572a11a00801680"], 0xfe, 0x148, &(0x7f0000000540)="$eJzsz79LAnEYBvDnulP7of0gAwsyoaEjkc6TamrQSBK6hMKlSaiTAqVIKMci2tpaHSShSfwXLGsxFKL+iRa3oDW+3lFck3vPZznued/34W5jraMiBMiwrB8XTk7NYtE8CO2kjeTuR6MRF7kbwKBjbu0/xIFD8VSA7iUg4icfPHZdXrx344AKIDEC5I7ypgZrd1hkfiuL2pk6DzSnrEx3ZuITzJidzShAYuynz8jlXFgQfRO/fZ8ASuVwvfay3W6lIov3szKuU+G5ScmZB80bPTld9QZkZMznOyR68/elVuR1qF5767SNrbTh6cR0fSWmRTVt2Wf/HZRN7xmw96fPjUBQyQBXEnDbm3UfJXHTrHylC6OrFfv64lwOAVKpvJ8NuKpZ//gAZBUS+uHqa4uIiIiIiIiIiIiIiIiIiP6L7wAAAP//dRlcow==") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 27.919607159s ago: executing program 4 (id=9806): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1838000000000000000000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 27.274389517s ago: executing program 4 (id=9812): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2208810, &(0x7f0000000080), 0xfe, 0x572, &(0x7f0000000b40)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4) 27.005466542s ago: executing program 32 (id=9812): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2208810, &(0x7f0000000080), 0xfe, 0x572, &(0x7f0000000b40)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4) 2.006876314s ago: executing program 1 (id=10236): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, '\x14\xe2\xc3\x11\xe2\xcb\x86\xc8-Hs\xc6\xafm\xdc{\xde max (1023) [ 499.780297][T23254] loop3: detected capacity change from 0 to 2048 [ 499.858499][T23254] Alternate GPT is invalid, using primary GPT. [ 499.877534][T23254] loop3: p1 p2 p3 [ 499.964592][T23268] nfs4: Bad value for 'source' [ 500.152069][ T4355] udevd[4355]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 500.166148][T17274] udevd[17274]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 500.181026][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 500.893749][T23306] netlink: 'syz.1.8820': attribute type 3 has an invalid length. [ 500.928728][T23306] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8820'. [ 501.049850][T23260] loop0: detected capacity change from 0 to 32768 [ 501.114648][T23312] xt_ecn: cannot match TCP bits for non-tcp packets [ 501.227130][T17274] udevd[17274]: inotify_add_watch(7, /dev/nbd4p4, 10) failed: No such file or directory [ 501.257820][T23260] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 501.305637][T23286] loop2: detected capacity change from 0 to 32768 [ 501.328563][T23319] netlink: 'syz.4.8826': attribute type 5 has an invalid length. [ 501.377396][T23260] JBD2: Ignoring recovery information on journal [ 501.444377][T23288] loop3: detected capacity change from 0 to 32768 [ 501.472248][T23286] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.8811 (23286) [ 501.538764][T23260] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 501.597721][T23286] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 501.610365][T23288] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 501.619939][T23286] BTRFS info (device loop2): using free space tree [ 501.646415][T23286] BTRFS info (device loop2): has skinny extents [ 501.732344][T23288] JBD2: Ignoring recovery information on journal [ 501.785559][ T4196] ocfs2: Unmounting device (7,0) on (node local) [ 501.831161][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.961284][T23288] JBD2: Unrecognised features on journal [ 502.004667][T23288] (syz.3.8810,23288,1):ocfs2_journal_load:1105 ERROR: Failed to load journal! [ 502.007534][T11010] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 502.024681][T23288] (syz.3.8810,23288,1):ocfs2_check_volume:2437 ERROR: ocfs2 journal load failed! -22 [ 502.039674][T23288] (syz.3.8810,23288,1):ocfs2_check_volume:2493 ERROR: status = -22 [ 502.050724][T23288] (syz.3.8810,23288,1):ocfs2_mount_volume:1824 ERROR: status = -22 [ 502.138614][T23286] BTRFS info (device loop2): enabling ssd optimizations [ 502.157725][T23288] (syz.3.8810,23288,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 502.307350][T11010] usb 5-1: Using ep0 maxpacket: 32 [ 502.409076][T23288] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 502.460758][T11010] usb 5-1: config 15 has an invalid interface number: 78 but max is 1 [ 502.479377][T11010] usb 5-1: config 15 has an invalid interface number: 2 but max is 1 [ 502.532728][T11010] usb 5-1: config 15 has no interface number 0 [ 502.577426][T11010] usb 5-1: config 15 has no interface number 1 [ 502.597146][T11010] usb 5-1: config 15 interface 78 has no altsetting 0 [ 502.635370][T11010] usb 5-1: config 15 interface 2 has no altsetting 0 [ 502.760160][T23389] netlink: 'syz.0.8852': attribute type 10 has an invalid length. [ 502.786058][T23390] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8851'. [ 502.800441][T23389] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8852'. [ 502.807667][T23390] netlink: 'syz.1.8851': attribute type 1 has an invalid length. [ 502.823267][T23389] device virt_wifi0 entered promiscuous mode [ 502.832653][T23389] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 502.847582][T11010] usb 5-1: New USB device found, idVendor=413c, idProduct=81cf, bcdDevice=d4.09 [ 502.869851][T11010] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.897155][T23392] loop3: detected capacity change from 0 to 64 [ 502.905769][T11010] usb 5-1: Product: syz [ 502.929750][T23392] hfs: dir_umask requires a value [ 502.947839][T11010] usb 5-1: Manufacturer: syz [ 502.953268][T11010] usb 5-1: SerialNumber: syz [ 502.979019][T23392] hfs: unable to parse mount options [ 503.091974][T23399] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 503.254267][T23403] binder: 23401:23403 ioctl c018620c 200000000240 returned -1 [ 503.404935][T11010] usb 5-1: selecting invalid altsetting 0 [ 503.418544][T11010] usb 5-1: Could not set interface, error -22 [ 503.424838][T23413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8863'. [ 503.445307][T11010] usb 5-1: USB disconnect, device number 35 [ 503.547630][T23415] loop1: detected capacity change from 0 to 64 [ 503.577945][T23419] (syz.2.8844,23419,1):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 503.591915][T23419] (syz.2.8844,23419,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 503.729508][T23415] hfs: unable to load iocharset "Sp—" [ 503.741056][T23415] hfs: unable to parse mount options [ 504.100106][T23448] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8879'. [ 504.221299][T23456] netlink: 340 bytes leftover after parsing attributes in process `syz.0.8883'. [ 504.257719][T23460] xt_TPROXY: Can be used only with -p tcp or -p udp [ 504.279085][T23464] loop3: detected capacity change from 0 to 16 [ 504.306253][T23456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8883'. [ 504.349687][T23464] erofs: (device loop3): mounted with root inode @ nid 36. [ 504.670153][T23488] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8899'. [ 504.714121][T23488] netlink: 112 bytes leftover after parsing attributes in process `syz.3.8899'. [ 504.863206][T23499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8905'. [ 505.162328][T23510] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 505.748798][T23537] netlink: 'syz.0.8923': attribute type 15 has an invalid length. [ 505.982584][T23490] loop1: detected capacity change from 0 to 40427 [ 505.990397][T23553] netlink: 'syz.2.8931': attribute type 6 has an invalid length. [ 506.073229][T23490] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 506.085031][T23558] kAFS: unable to lookup cell '@mTsyz0' [ 506.092334][T23490] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 506.118444][T23490] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x6 [ 506.153924][ T25] audit: type=1326 audit(1776077129.055:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23556 comm="syz.2.8934" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcaf4c8f819 code=0x0 [ 506.177137][T23563] netlink: 'syz.3.8937': attribute type 10 has an invalid length. [ 506.188310][T11010] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 506.194468][T23563] __nla_validate_parse: 1 callbacks suppressed [ 506.194484][T23563] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8937'. [ 506.218759][T23490] F2FS-fs (loop1): invalid crc value [ 506.247474][ T25] audit: type=1326 audit(1776077129.105:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23556 comm="syz.2.8934" exe="/root/syz-executor" sig=31 arch=c000003e syscall=436 compat=0 ip=0x7fcaf4c8f819 code=0x0 [ 506.276736][T23563] netlink: 'syz.3.8937': attribute type 10 has an invalid length. [ 506.304842][T23490] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 506.335028][T23563] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8937'. [ 506.557817][T11010] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 506.582760][T23490] F2FS-fs (loop1): Start checkpoint disabled! [ 506.595858][T11010] usb 1-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 506.669939][T11010] usb 1-1: config 2 interface 0 has no altsetting 0 [ 506.687453][T23490] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 506.703742][T23490] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 506.837731][T11010] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 506.866341][T11010] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.899208][T11010] usb 1-1: Product: syz [ 506.904746][T11010] usb 1-1: Manufacturer: syz [ 506.937301][T11010] usb 1-1: SerialNumber: syz [ 506.956844][T23578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8943'. [ 507.244271][T23571] loop3: detected capacity change from 0 to 32768 [ 507.295445][T11010] usb 1-1: USB disconnect, device number 41 [ 507.337462][ T5167] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 507.737461][ T5167] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 507.769016][ T5167] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 507.779828][T22466] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 507.810222][ T5167] usb 5-1: config 220 interface 0 has no altsetting 0 [ 507.832688][T23595] loop3: detected capacity change from 0 to 1024 [ 507.882154][T23595] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 507.952845][T23595] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 507.974773][T23595] EXT4-fs (loop3): orphan cleanup on readonly fs [ 507.987671][ T5167] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 508.007394][ T5167] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.019178][ T5167] usb 5-1: Product: syz [ 508.023769][ T5167] usb 5-1: Manufacturer: syz [ 508.029374][ T5167] usb 5-1: SerialNumber: syz [ 508.040599][T23595] EXT4-fs error (device loop3): ext4_read_inode_bitmap:168: comm syz.3.8951: Inode bitmap for bg 0 marked uninitialized [ 508.044813][T23602] tmpfs: Bad value for 'mpol' [ 508.065480][T23595] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 508.127972][T23595] EXT4-fs (loop3): ext4_remount: Checksum for group 0 failed (32298!=35945) [ 508.217668][T22466] usb 2-1: unable to get BOS descriptor or descriptor too short [ 508.347966][T22466] usb 2-1: config 66 has an invalid interface number: 168 but max is 0 [ 508.377005][T22466] usb 2-1: config 66 has an invalid descriptor of length 30, skipping remainder of the config [ 508.397313][T22466] usb 2-1: config 66 has no interface number 0 [ 508.406336][T22466] usb 2-1: config 66 interface 168 altsetting 131 has 0 endpoint descriptors, different from the interface descriptor's value: 20 [ 508.428515][ T5167] usb 5-1: USB disconnect, device number 36 [ 508.446451][T22466] usb 2-1: config 66 interface 168 has no altsetting 0 [ 508.641533][T22466] usb 2-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 508.662661][T22466] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.691140][T22466] usb 2-1: Product: syz [ 508.706374][T22466] usb 2-1: Manufacturer: syz [ 508.736222][T22466] usb 2-1: SerialNumber: syz [ 508.903798][T23627] netlink: 236 bytes leftover after parsing attributes in process `syz.0.8966'. [ 508.929569][T23628] tmpfs: Bad value for 'mpol' [ 509.090921][T22466] usb 2-1: USB disconnect, device number 29 [ 509.115576][T23634] netlink: 'syz.0.8969': attribute type 1 has an invalid length. [ 509.220252][T23641] tmpfs: Bad value for 'mpol' [ 509.561421][T23655] loop0: detected capacity change from 0 to 1024 [ 509.868235][ T155] hfsplus: b-tree write err: -5, ino 25 [ 509.874381][ T155] hfsplus: b-tree write err: -5, ino 4 [ 509.887426][ T155] hfsplus: b-tree write err: -5, ino 2 [ 509.932619][ T155] hfsplus: b-tree write err: -5, ino 17 [ 510.032892][T23679] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8991'. [ 510.137587][T22466] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 510.158243][T23677] loop1: detected capacity change from 0 to 4096 [ 510.198981][T23677] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 510.209898][T23683] loop0: detected capacity change from 0 to 512 [ 510.243886][T23677] ntfs: (device loop1): check_mft_mirror(): $MFTMirr location mismatch. Run chkdsk. [ 510.276067][T23677] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 510.364631][T23677] ntfs: volume version 3.1. [ 510.423877][T23687] loop4: detected capacity change from 0 to 4096 [ 510.440497][T23683] EXT4-fs (loop0): Ignoring removed bh option [ 510.525295][T23683] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 510.555711][T23683] ext4 filesystem being mounted at /1870/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 510.557609][T22466] usb 4-1: config index 0 descriptor too short (expected 29, got 18) [ 510.620078][T22466] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 510.636378][T23698] loop1: detected capacity change from 0 to 8 [ 510.644594][T22466] usb 4-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 510.665658][T22466] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.677694][T23687] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 510.718318][T23698] SQUASHFS error: Unable to read directory block [629:0] [ 510.719998][T22466] usb 4-1: config 0 descriptor?? [ 510.758243][T23687] ntfs3: loop4: Failed to load $MFT. [ 510.826917][ T8864] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 510.852948][T23704] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.087525][T22466] usb 4-1: string descriptor 0 read error: -71 [ 511.094938][T22466] ldusb 4-1:0.0: Interrupt in endpoint not found [ 511.108427][ T8864] usb 3-1: Using ep0 maxpacket: 16 [ 511.120598][T22466] usb 4-1: USB disconnect, device number 32 [ 511.278662][ T8864] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 511.537863][ T8864] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 511.587855][ T8864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.617337][ T8864] usb 3-1: Product: syz [ 511.633301][ T8864] usb 3-1: Manufacturer: syz [ 511.656697][ T8864] usb 3-1: SerialNumber: syz [ 511.720020][ T8864] usb 3-1: config 0 descriptor?? [ 511.744554][T23741] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.9018'. [ 511.768558][ T8864] mcba_usb 3-1:0.0: Can't find endpoints [ 511.869397][T23746] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9021'. [ 512.008681][ T8864] usb 3-1: USB disconnect, device number 38 [ 512.042528][T23754] netlink: 'syz.3.9025': attribute type 6 has an invalid length. [ 512.065948][T23754] netlink: 168 bytes leftover after parsing attributes in process `syz.3.9025'. [ 512.260820][T23767] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9031'. [ 512.324171][T23772] loop3: detected capacity change from 0 to 64 [ 512.647537][T22466] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 512.953366][T23796] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.9045'. [ 512.976207][T23796] openvswitch: netlink: ct_state flags 00030000 unsupported [ 513.034077][T22466] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 513.066646][T22466] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 513.076713][T23801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9047'. [ 513.095209][T22466] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.158201][T23770] loop1: detected capacity change from 0 to 32768 [ 513.169862][T22466] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 513.243508][T23809] loop2: detected capacity change from 0 to 128 [ 513.301269][T23770] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 scanned by syz.1.9033 (23770) [ 513.385275][T23770] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 513.407514][T23770] BTRFS info (device loop1): enabling ssd optimizations [ 513.414948][T23770] BTRFS info (device loop1): not using ssd optimizations [ 513.436015][T23770] BTRFS info (device loop1): turning off barriers [ 513.445655][T23770] BTRFS info (device loop1): use no compression [ 513.460861][T23770] BTRFS info (device loop1): using free space tree [ 513.477181][T23770] BTRFS info (device loop1): has skinny extents [ 513.501660][T23822] openvswitch: netlink: Message has 4 unknown bytes. [ 513.636046][T23837] loop2: detected capacity change from 0 to 512 [ 513.679421][T23837] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 513.779042][T23837] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 513.860350][T23837] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.9061: bad orphan inode 4 [ 513.929667][T23837] EXT4-fs (loop2): Remounting filesystem read-only [ 513.981966][T23837] EXT4-fs (loop2): 1 orphan inode deleted [ 514.038480][T23837] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=ignore,errors=remount-ro,noload,data_err=ignore,usrjquota="init_itable=0x0000000000000601,init_itable=0x0000000000000100,max_dir_size_kb=0x0000000000000007,. Quota mode: writeback. [ 514.275501][T22466] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 514.517590][T22466] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 514.526131][T22466] stv0680 5-1:4.0: last error: 86, command = 0x3 [ 514.544947][T22466] usb 5-1: USB disconnect, device number 37 [ 514.627372][T23863] comedi comedi2: dt2815: I/O port conflict (0xfffffffffffffffd,2) [ 514.879135][T23877] netlink: 'syz.2.9070': attribute type 3 has an invalid length. [ 514.908335][T23877] netlink: 766 bytes leftover after parsing attributes in process `syz.2.9070'. [ 514.997116][T23879] autofs4:pid:23879:validate_dev_ioctl: invalid path supplied for cmd(0xc018937d) [ 515.017598][T23875] loop0: detected capacity change from 0 to 4096 [ 515.068580][T23875] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 515.221037][T23875] ntfs: (device loop0): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 515.256854][T23896] loop3: detected capacity change from 0 to 1024 [ 515.264480][T23875] ntfs: (device loop0): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 515.309094][T23897] loop1: detected capacity change from 0 to 2048 [ 515.326460][T23875] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 515.346190][T23875] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 515.440125][T23897] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 515.498132][T23875] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 515.526912][T11466] hfsplus: b-tree write err: -5, ino 25 [ 515.547355][T23875] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 515.547607][T11466] hfsplus: b-tree write err: -5, ino 4 [ 515.569591][ C0] vkms_vblank_simulate: vblank timer overrun [ 515.656758][T23875] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 515.694600][T11466] hfsplus: b-tree write err: -5, ino 2 [ 515.713411][T23875] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 515.815785][T23875] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 515.904870][T23875] ntfs: volume version 3.1. [ 515.957508][ T8868] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 516.211842][T23919] netlink: 'syz.1.9096': attribute type 1 has an invalid length. [ 516.377710][ T8868] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 516.399893][ T8868] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 516.431795][ T8868] usb 3-1: config 220 has no interface number 2 [ 516.447720][ T8868] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 516.464016][T23925] loop0: detected capacity change from 0 to 1024 [ 516.480693][ T8868] usb 3-1: config 220 interface 0 has no altsetting 0 [ 516.504331][T23925] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 516.512837][ T8868] usb 3-1: config 220 interface 76 has no altsetting 0 [ 516.544625][ T8868] usb 3-1: config 220 interface 1 has no altsetting 0 [ 516.595720][T23925] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 2: comm syz.0.9097: lblock 2 mapped to illegal pblock 2 (length 1) [ 516.614593][T23909] loop4: detected capacity change from 0 to 32768 [ 516.642037][T23925] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 48: comm syz.0.9097: lblock 0 mapped to illegal pblock 48 (length 1) [ 516.679569][T23925] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.9097: Failed to acquire dquot type 0 [ 516.706926][T23925] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 516.734052][T23909] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 516.745795][T23925] EXT4-fs error (device loop0): ext4_evict_inode:282: inode #11: comm syz.0.9097: mark_inode_dirty error [ 516.767714][ T8868] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 516.787941][T23925] EXT4-fs warning (device loop0): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 516.801165][ T8868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.821996][T23915] loop3: detected capacity change from 0 to 32768 [ 516.830963][T23909] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 516.850914][ T8868] usb 3-1: Product: syz [ 516.860865][T23925] EXT4-fs (loop0): 1 orphan inode deleted [ 516.867160][T23925] EXT4-fs (loop0): mounted filesystem without journal. Opts: nomblk_io_submit,noblock_validity,delalloc,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 516.871014][ T8868] usb 3-1: Manufacturer: syz [ 516.892128][T23909] (syz.4.9092,23909,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=0, inode=970662608961, rec_len=0, name_len=0 [ 516.911987][T23915] XFS: attr2 mount option is deprecated. [ 516.916379][ C0] vkms_vblank_simulate: vblank timer overrun [ 516.916773][T23909] (syz.4.9092,23909,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 516.941165][T23909] (syz.4.9092,23909,0):ocfs2_mknod:298 ERROR: status = -2 [ 516.958102][T23909] (syz.4.9092,23909,0):ocfs2_mknod:502 ERROR: status = -2 [ 516.975086][T23909] (syz.4.9092,23909,0):ocfs2_create:676 ERROR: status = -2 [ 517.072763][ T8868] usb 3-1: SerialNumber: syz [ 517.110703][ T4310] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 517.136324][T23915] XFS (loop3): Mounting V5 Filesystem [ 517.146517][ T4191] ocfs2: Unmounting device (7,4) on (node local) [ 517.181791][ T4310] EXT4-fs error (device loop0): ext4_release_dquot:6270: comm kworker/u4:7: Failed to release dquot type 0 [ 517.238452][T23915] XFS (loop3): Ending clean mount [ 517.296483][ T4196] EXT4-fs error (device loop0): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 517.315699][T23915] XFS (loop3): Quotacheck needed: Please wait. [ 517.327820][ T4196] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 517.368942][ T4196] EXT4-fs error (device loop0): ext4_quota_off:6540: inode #3: comm syz-executor: mark_inode_dirty error [ 517.487959][T23915] XFS (loop3): Quotacheck: Done. [ 517.566169][T23946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9105'. [ 517.567708][ T8868] usb 3-1: selecting invalid altsetting 0 [ 517.613523][ T8868] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 517.644765][ T8868] usb 3-1: No valid video chain found. [ 517.683623][ T4192] XFS (loop3): Unmounting Filesystem [ 517.723802][T23936] loop1: detected capacity change from 0 to 32768 [ 517.771152][ T8868] usb 3-1: selecting invalid altsetting 0 [ 517.777788][ T8868] usbtest: probe of 3-1:220.1 failed with error -22 [ 517.828409][ T8868] usb 3-1: USB disconnect, device number 39 [ 517.995666][T23936] XFS (loop1): Mounting V5 Filesystem [ 518.187132][T23936] XFS (loop1): Ending clean mount [ 518.192949][ T5167] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 518.212863][T23936] XFS (loop1): Quotacheck needed: Please wait. [ 518.383510][T23973] netlink: 'syz.2.9115': attribute type 16 has an invalid length. [ 518.424483][T23936] XFS (loop1): Quotacheck: Done. [ 518.448007][ T5167] usb 5-1: Using ep0 maxpacket: 16 [ 518.448250][T23973] netlink: 'syz.2.9115': attribute type 3 has an invalid length. [ 518.528235][T23973] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9115'. [ 518.567679][ T5167] usb 5-1: config 0 has no interfaces? [ 518.574965][ T4185] XFS (loop1): Unmounting Filesystem [ 518.684898][T23978] xt_cgroup: xt_cgroup: no path or classid specified [ 518.738126][ T5167] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 518.752649][ T5167] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.772765][ T5167] usb 5-1: Product: syz [ 518.783068][ T5167] usb 5-1: Manufacturer: syz [ 518.807797][ T5167] usb 5-1: SerialNumber: syz [ 518.832291][ T5167] r8152-cfgselector 5-1: config 0 descriptor?? [ 519.127972][ T5167] usbip-host 5-1: 5-1 is not in match_busid table... skip! [ 519.159455][T23999] netlink: 244 bytes leftover after parsing attributes in process `syz.0.9127'. [ 519.223289][T24002] rdma_rxe: rxe_register_device failed with error -23 [ 519.277649][T24002] rdma_rxe: failed to add lo [ 519.297616][T24004] loop2: detected capacity change from 0 to 64 [ 519.340285][ T5167] usb 5-1: USB disconnect, device number 38 [ 519.401853][T24008] loop3: detected capacity change from 0 to 128 [ 519.481714][T24008] attempt to access beyond end of device [ 519.481714][T24008] loop3: rw=0, want=6491538, limit=128 [ 519.517441][T24008] Buffer I/O error on dev loop3, logical block 3245768, async page read [ 519.666693][ T4192] sysv_free_block: flc_count > flc_size [ 519.707522][ T4192] sysv_free_block: flc_count > flc_size [ 519.719732][ T4192] sysv_free_block: flc_count > flc_size [ 519.736850][ T4192] sysv_free_block: flc_count > flc_size [ 519.755972][ T4192] sysv_free_block: flc_count > flc_size [ 519.802264][ T4192] sysv_free_block: flc_count > flc_size [ 519.840576][ T4192] sysv_free_block: flc_count > flc_size [ 519.887642][ T4192] sysv_free_block: flc_count > flc_size [ 519.893714][ T4192] sysv_free_block: flc_count > flc_size [ 519.924158][ T4192] sysv_free_block: flc_count > flc_size [ 519.944752][ T4192] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 520.311740][T24051] netlink: 'syz.0.9153': attribute type 3 has an invalid length. [ 520.388703][T24056] netlink: 'syz.1.9155': attribute type 21 has an invalid length. [ 520.464573][T24056] IPv6: NLM_F_CREATE should be specified when creating new route [ 520.526042][ T25] kauditd_printk_skb: 15 callbacks suppressed [ 520.526060][ T25] audit: type=1326 audit(1776077143.425:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24065 comm="syz.3.9160" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3c3334f819 code=0x0 [ 520.560377][T24064] netlink: 'syz.4.9159': attribute type 2 has an invalid length. [ 520.672801][T24075] device netdevsim0 entered promiscuous mode [ 520.930183][T24096] kAFS: unable to lookup cell '/,' [ 520.969221][T24100] loop3: detected capacity change from 0 to 64 [ 521.051997][T24109] trusted_key: encrypted_key: keylen parameter is missing [ 521.067544][T24105] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 521.075339][T24105] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 521.123315][T24105] vhci_hcd vhci_hcd.0: Device attached [ 521.249465][T24120] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.9187'. [ 521.357679][ T8879] vhci_hcd: vhci_device speed not set [ 521.437445][ T8879] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 521.466526][T24134] xt_CT: You must specify a L4 protocol and not use inversions on it [ 521.680269][T24108] vhci_hcd: connection reset by peer [ 521.686856][T11466] vhci_hcd: stop threads [ 521.697320][T11466] vhci_hcd: release socket [ 521.716551][T11466] vhci_hcd: disconnect device [ 522.026562][T24173] loop3: detected capacity change from 0 to 512 [ 522.107429][T24173] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 522.257142][T24173] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 522.329870][T24173] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.9213: bg 0: block 248: padding at end of block bitmap is not set [ 522.359210][T24173] Quota error (device loop3): write_blk: dquota write failed [ 522.375935][T24198] netlink: 'syz.4.9223': attribute type 12 has an invalid length. [ 522.406255][T24198] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9223'. [ 522.418318][T24173] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 522.437552][T24173] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.9213: Failed to acquire dquot type 1 [ 522.502992][T24173] EXT4-fs (loop3): 1 truncate cleaned up [ 522.536145][T24173] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,discard,user_xattr,,errors=continue. Quota mode: writeback. [ 522.779180][T11743] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 522.884052][T24218] xt_socket: unknown flags 0x48 [ 522.905174][ T4248] Quota error (device loop3): remove_tree: Getting block too big (0 >= 6) [ 522.987222][ T4248] EXT4-fs error (device loop3): ext4_release_dquot:6270: comm kworker/u4:6: Failed to release dquot type 1 [ 523.067948][T11743] usb 1-1: Using ep0 maxpacket: 32 [ 523.207708][T11743] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 523.276679][T11743] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 523.318659][T11743] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 523.373180][T11743] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.391600][T24230] loop3: detected capacity change from 0 to 1024 [ 523.429782][T11743] usb 1-1: config 0 descriptor?? [ 523.488439][T24236] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.9241'. [ 523.521988][T11743] hub 1-1:0.0: USB hub found [ 523.574204][T24230] Quota error (device loop3): find_tree_dqentry: Getting block too big (64 >= 6) [ 523.621859][T24236] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 523.667792][T24230] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 523.728218][T24230] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.9238: Failed to acquire dquot type 0 [ 523.747669][T11743] hub 1-1:0.0: config failed, hub has too many ports! (err -19) [ 523.757777][T24230] EXT4-fs error (device loop3): mb_free_blocks:1874: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 523.799131][T24230] EXT4-fs (loop3): 1 truncate cleaned up [ 523.805969][T24230] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 523.876128][T24230] Quota error (device loop3): find_tree_dqentry: Getting block too big (64 >= 6) [ 523.898080][T24230] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 523.919124][T24230] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.9238: Failed to acquire dquot type 0 [ 523.969111][ T5167] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 524.069187][T11743] usbhid 1-1:0.0: can't add hid device: -71 [ 524.086702][T11743] usbhid: probe of 1-1:0.0 failed with error -71 [ 524.158015][T11743] usb 1-1: USB disconnect, device number 42 [ 524.237426][ T5167] usb 5-1: Using ep0 maxpacket: 32 [ 524.308362][T24247] loop2: detected capacity change from 0 to 32768 [ 524.321243][T24220] loop1: detected capacity change from 0 to 40427 [ 524.357546][ T5167] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 524.372514][ T5167] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 524.382414][ T5167] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 524.392798][T24220] F2FS-fs (loop1): invalid crc value [ 524.406631][T24247] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.9246 (24247) [ 524.424211][ T5167] usb 5-1: config 1 has no interface number 0 [ 524.433944][T24220] F2FS-fs (loop1): Found nat_bits in checkpoint [ 524.441765][ T5167] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 524.441803][ T5167] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 524.468369][ T5167] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 524.494701][ T5167] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.555076][T24247] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 524.579578][ T5167] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 524.588609][T24247] BTRFS info (device loop2): force zlib compression, level 3 [ 524.589513][T24220] F2FS-fs (loop1): Start checkpoint disabled! [ 524.596930][T24247] BTRFS info (device loop2): turning on flush-on-commit [ 524.596996][T24247] BTRFS info (device loop2): max_inline at 4096 [ 524.624675][T24247] BTRFS info (device loop2): using free space tree [ 524.633168][T24247] BTRFS info (device loop2): has skinny extents [ 524.664914][T24220] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 524.672145][T24257] loop0: detected capacity change from 0 to 512 [ 524.677349][T11010] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 524.747963][T24257] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.9250: inode has both inline data and extents flags [ 524.784362][T24257] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.9250: couldn't read orphan inode 15 (err -117) [ 524.799850][ T5167] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 524.834659][T24257] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 524.997145][T24247] BTRFS info (device loop2): enabling ssd optimizations [ 525.117699][T11010] usb 4-1: unable to get BOS descriptor or descriptor too short [ 525.130561][ T5167] usb 5-1: USB disconnect, device number 39 [ 525.139467][ T5167] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 525.167581][T11010] usb 4-1: not running at top speed; connect to a high speed hub [ 525.257832][T11010] usb 4-1: config 5 has an invalid interface number: 174 but max is 0 [ 525.278664][T11010] usb 4-1: config 5 has no interface number 0 [ 525.287170][T11010] usb 4-1: config 5 interface 174 has no altsetting 0 [ 525.312056][T24247] BTRFS info (device loop2): balance: start -d -m -s [ 525.326598][T24247] BTRFS info (device loop2): relocating block group 6881280 flags data|metadata [ 525.351741][ T154] BTRFS info (device loop2): space_info 5 has 602112 free, is not full [ 525.361887][ T154] BTRFS info (device loop2): space_info total=3276800, used=61440, pinned=0, reserved=8192, may_use=978944, readonly=1626112 zone_unusable=0 [ 525.377009][ T154] BTRFS info (device loop2): global_block_rsv: size 851968 reserved 851968 [ 525.387714][ T154] BTRFS info (device loop2): trans_block_rsv: size 0 reserved 0 [ 525.396811][ T154] BTRFS info (device loop2): chunk_block_rsv: size 0 reserved 0 [ 525.405339][ T154] BTRFS info (device loop2): delayed_block_rsv: size 0 reserved 0 [ 525.414267][ T154] BTRFS info (device loop2): delayed_refs_rsv: size 262144 reserved 126976 [ 525.444153][T24247] BTRFS info (device loop2): balance: canceled [ 525.507656][T11010] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db59, bcdDevice=57.ec [ 525.535930][T11010] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.560211][T11010] usb 4-1: Product: syz [ 525.565394][T11010] usb 4-1: Manufacturer: syz [ 525.577870][T11010] usb 4-1: SerialNumber: syz [ 525.597994][T22466] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 525.785996][T24297] loop4: detected capacity change from 0 to 1024 [ 525.877669][T22466] usb 2-1: Using ep0 maxpacket: 32 [ 525.902858][T24297] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 525.913420][T11010] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual Digital 2' in warm state. [ 525.930997][T24297] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 526.023478][T11010] dvb-usb: bulk message failed: -71 (2/0) [ 526.054414][T22466] usb 2-1: unable to get BOS descriptor or descriptor too short [ 526.074486][T11010] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 526.090515][T11010] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 2 error while loading driver (-19) [ 526.135506][T11010] dvb_usb_cxusb: probe of 4-1:5.174 failed with error -22 [ 526.143950][T22466] usb 2-1: config 1 has an invalid interface number: 255 but max is 2 [ 526.161445][T22466] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 526.176806][T11010] usb 4-1: USB disconnect, device number 33 [ 526.183825][T22466] usb 2-1: config 1 has no interface number 2 [ 526.199345][T22466] usb 2-1: config 1 interface 255 has no altsetting 0 [ 526.222151][T24307] loop0: detected capacity change from 0 to 256 [ 526.263886][T24297] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #11: comm syz.4.9260: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 526.407602][T22466] usb 2-1: New USB device found, idVendor=0582, idProduct=0009, bcdDevice= 0.40 [ 526.410927][T24310] loop2: detected capacity change from 0 to 64 [ 526.432159][T24297] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.9260: couldn't read orphan inode 11 (err -117) [ 526.457372][T22466] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.473351][T22466] usb 2-1: Product: syz [ 526.478651][T22466] usb 2-1: Manufacturer: syz [ 526.507362][T22466] usb 2-1: SerialNumber: syz [ 526.544252][T24297] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,bsdgroups,mblk_io_submit,jqfmt=vfsv0,discard,usrjquota=,grpquota,quota,,errors=continue. Quota mode: writeback. [ 526.657887][ T8879] vhci_hcd: vhci_device speed not set [ 526.840190][T24320] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 526.878620][T22466] usb 2-1: USB disconnect, device number 30 [ 526.992522][T24328] loop4: detected capacity change from 0 to 164 [ 527.020400][T24320] FAT-fs (loop7): unable to read boot sector [ 527.083343][T24328] Unsupported NM flag settings (240) [ 527.168369][ T4355] udevd[4355]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 527.276810][T24343] loop0: detected capacity change from 0 to 512 [ 527.292234][T24344] device bond4 entered promiscuous mode [ 527.303994][T24344] 8021q: adding VLAN 0 to HW filter on device bond4 [ 527.370900][T24343] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 527.425214][T24343] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.9281: invalid indirect mapped block 1023410176 (level 0) [ 527.479537][T24343] EXT4-fs error (device loop0): mb_free_blocks:1874: group 0, inode 11: block 237:freeing already freed block (bit 236); block bitmap corrupt. [ 527.557594][T24343] EXT4-fs (loop0): 1 truncate cleaned up [ 527.563910][T24343] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 527.806566][T24373] xt_TCPMSS: Only works on TCP SYN packets [ 527.913993][T24376] loop3: detected capacity change from 0 to 4096 [ 527.942621][T24384] usb usb9: usbfs: process 24384 (syz.1.9300) did not claim interface 0 before use [ 527.965164][T24386] netlink: 'syz.4.9302': attribute type 1 has an invalid length. [ 527.983965][T24386] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.9302'. [ 527.998483][T24386] netlink: 'syz.4.9302': attribute type 1 has an invalid length. [ 528.046975][T24391] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 528.715580][T24440] loop0: detected capacity change from 0 to 2048 [ 528.832190][T24450] netlink: 124 bytes leftover after parsing attributes in process `syz.4.9333'. [ 528.835094][T24452] loop2: detected capacity change from 0 to 128 [ 528.888107][T24440] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 528.954394][T24461] device netdevsim0 entered promiscuous mode [ 528.959016][T24440] ext4 filesystem being mounted at /1957/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 528.981529][T24461] team0: Port device netdevsim0 removed [ 528.992664][T24461] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 529.036636][T24452] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 529.107405][T24452] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 529.341685][T24484] loop2: detected capacity change from 0 to 256 [ 529.480593][T24484] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 529.627646][T11010] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 529.967848][T11010] usb 2-1: not running at top speed; connect to a high speed hub [ 530.057656][T11010] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 530.091530][T11010] usb 2-1: config 1 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 530.147396][T11010] usb 2-1: config 1 interface 0 has no altsetting 0 [ 530.316515][T24538] tmpfs: Bad value for 'mpol' [ 530.327851][T11010] usb 2-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 530.347508][T11010] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.357667][ T8868] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 530.366928][T11010] usb 2-1: Product: syz [ 530.386762][T11010] usb 2-1: Manufacturer: syz [ 530.401323][T11010] usb 2-1: SerialNumber: syz [ 530.731331][T11010] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input40 [ 530.753030][T24552] netlink: 'syz.4.9381': attribute type 1 has an invalid length. [ 530.827678][ T3547] bcm5974 2-1:1.0: could not read from device [ 530.837765][ T8868] usb 4-1: unable to get BOS descriptor or descriptor too short [ 530.846337][T11010] usb 2-1: USB disconnect, device number 31 [ 530.886707][T24552] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.9381'. [ 530.957684][ T8868] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 530.966430][T24552] netlink: 'syz.4.9381': attribute type 1 has an invalid length. [ 530.994759][ T8868] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 531.077950][ T8868] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 531.100431][T24514] loop2: detected capacity change from 0 to 32768 [ 531.179783][T24514] [ 531.179783][T24514] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 531.179783][T24514] [ 531.266208][T24514] ERROR: (device loop2): ea_get: invalid ea.flag [ 531.266208][T24514] [ 531.317666][ T8868] usb 4-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 531.328972][T24514] ERROR: (device loop2): remounting filesystem as read-only [ 531.346416][ T8868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.433238][ T8868] usb 4-1: Product: syz [ 531.459032][ T8868] usb 4-1: Manufacturer: syz [ 531.489031][ T8868] usb 4-1: SerialNumber: syz [ 531.868350][ T8868] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 531.938135][ T8868] snd-usb-audio: probe of 4-1:1.1 failed with error -22 [ 532.092492][ T8868] snd-usb-audio: probe of 4-1:1.2 failed with error -22 [ 532.139023][ T8868] usb 4-1: USB disconnect, device number 34 [ 532.156121][T24599] cifs: Unknown parameter 'no'‘a£Nð[G¶zob,erèèµ;%j¸¼ [ 532.156121][T24599] ‡üzæ,€@q¬Ú÷ôÐåéJ#³"ŽÚh/.W1ȱ¨nNCº"†CÙ׈¡E)Ð8+€î¶á÷' [ 532.553245][ T5872] udevd[5872]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 532.712156][T24617] loop1: detected capacity change from 0 to 4096 [ 532.792772][T24617] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 532.843265][T24617] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 532.913534][T24617] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 532.947560][T24617] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 533.058206][T24617] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 533.128575][T24617] ntfs: volume version 3.1. [ 533.159014][T24617] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 533.223558][T24617] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 533.241644][T24648] loop3: detected capacity change from 0 to 128 [ 533.285944][T24617] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 533.325608][T24617] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 533.333369][T24648] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 533.349395][T24617] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 533.368576][T24655] loop0: detected capacity change from 0 to 256 [ 533.396952][T24648] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 535.536531][T24779] tmpfs: Bad value for 'mpol' [ 535.640659][T24777] loop4: detected capacity change from 0 to 4096 [ 535.706193][T24793] loop0: detected capacity change from 0 to 16 [ 535.760140][T24798] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9505'. [ 535.777717][T24798] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9505'. [ 535.813041][T24801] netlink: 'syz.2.9506': attribute type 2 has an invalid length. [ 535.870870][T24777] ntfs: volume version 3.1. [ 536.004644][T24803] loop1: detected capacity change from 0 to 4096 [ 536.017713][T11010] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 536.052397][T24803] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 536.136620][T24813] loop4: detected capacity change from 0 to 2048 [ 536.153993][T24803] ntfs3: loop1: failed to convert "c46c" to cp1255 [ 536.219339][T24813] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 536.267351][ T5169] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 536.307760][T11010] usb 4-1: Using ep0 maxpacket: 8 [ 536.330699][T24819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9514'. [ 536.427561][T11010] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 536.464933][T11010] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 536.481566][T11010] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.487487][T24819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9514'. [ 536.492246][T11010] usb 4-1: config 0 descriptor?? [ 536.540127][T11010] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 536.653391][ T5169] usb 3-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 536.837584][ T5169] usb 3-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 536.847208][ T5169] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.886092][ T5169] usb 3-1: Product: syz [ 536.891562][ T5169] usb 3-1: Manufacturer: syz [ 536.896474][ T5169] usb 3-1: SerialNumber: syz [ 536.959810][ T5169] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 537.007717][T11010] gspca_vc032x: reg_w err -71 [ 537.015054][T11010] vc032x: probe of 4-1:0.0 failed with error -71 [ 537.023454][ T5169] dvb-usb: bulk message failed: -22 (3/0) [ 537.057544][T11010] usb 4-1: USB disconnect, device number 35 [ 537.084249][ T5169] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 537.155877][ T5169] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 error while loading driver (-19) [ 537.197968][ T5169] dvb_usb_umt_010: probe of 3-1:54.0 failed with error -22 [ 537.244173][ T5169] usb 3-1: USB disconnect, device number 40 [ 537.313707][T24847] bridge0 speed is unknown, defaulting to 1000 [ 537.795983][T24841] loop1: detected capacity change from 0 to 32768 [ 537.836727][T24866] netlink: 'syz.3.9537': attribute type 30 has an invalid length. [ 537.955979][T24841] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 537.998269][T24841] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 538.033316][T24877] loop4: detected capacity change from 0 to 1764 [ 538.041318][T24875] netlink: 'syz.0.9541': attribute type 3 has an invalid length. [ 538.139839][T24841] (syz.1.9525,24841,1):ocfs2_read_blocks:239 ERROR: status = -12 [ 538.191110][ C0] vkms_vblank_simulate: vblank timer overrun [ 538.196585][T24841] (syz.1.9525,24841,1):ocfs2_xattr_block_find:2835 ERROR: status = -12 [ 538.234958][T24877] loop4: detected capacity change from 0 to 512 [ 538.339410][ T4185] ocfs2: Unmounting device (7,1) on (node local) [ 538.349530][T24895] program syz.3.9550 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 538.390865][ C0] vkms_vblank_simulate: vblank timer overrun [ 538.669269][T24894] loop2: detected capacity change from 0 to 8192 [ 538.927514][T24915] loop3: detected capacity change from 0 to 1024 [ 539.621296][T24949] loop1: detected capacity change from 0 to 2048 [ 539.726808][T24957] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9581'. [ 539.882834][T24963] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9584'. [ 539.974537][T24949] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 540.034790][T24949] attempt to access beyond end of device [ 540.034790][T24949] loop1: rw=524288, want=33554432, limit=2048 [ 540.047691][T24965] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 540.105102][T24949] attempt to access beyond end of device [ 540.105102][T24949] loop1: rw=0, want=9437256, limit=2048 [ 540.165101][T24949] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=0) [ 540.540777][T24941] syz.2.9575 (24941): drop_caches: 2 [ 540.563601][T24984] erofs: (device loop0): mounted with root inode @ nid 36. [ 540.662819][T24984] erofs: (device loop0): z_erofs_extent_lookback: unknown type 3 @ lcn 0 of nid 89 [ 540.728196][T24984] erofs: (device loop0): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 540.783093][T24984] erofs: (device loop0): z_erofs_extent_lookback: unknown type 3 @ lcn 0 of nid 89 [ 540.857476][T24984] erofs: (device loop0): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 540.915855][T24984] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 4095 of nid 89 [ 540.981788][T24984] erofs: (device loop0): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 541.038069][T24984] attempt to access beyond end of device [ 541.038069][T24984] loop0: rw=524288, want=1072, limit=16 [ 541.097056][T24984] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 4095 of nid 89 [ 541.153745][T24984] erofs: (device loop0): z_erofs_readpage: failed to read, err [-95] [ 541.183446][T25018] syz.3.9611 uses old SIOCAX25GETINFO [ 541.191857][ T25] kauditd_printk_skb: 12 callbacks suppressed [ 541.191873][ T25] audit: type=1800 audit(1776077164.095:27): pid=24984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.9595" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 541.236936][T25020] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9612'. [ 541.567453][ T8879] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 541.592348][T25039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9621'. [ 541.606758][T25040] xt_hashlimit: size too large, truncated to 1048576 [ 541.699776][T25028] set_capacity_and_notify: 1 callbacks suppressed [ 541.699794][T25028] loop3: detected capacity change from 0 to 8192 [ 541.836283][T25028] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 541.857439][ T8879] usb 2-1: Using ep0 maxpacket: 32 [ 541.884300][T25050] netlink: 'syz.4.9626': attribute type 12 has an invalid length. [ 541.948135][T25028] REISERFS (device loop3): using ordered data mode [ 541.955536][T25028] reiserfs: using flush barriers [ 541.957537][T25052] loop4: detected capacity change from 0 to 4096 [ 541.997609][ T8879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7 [ 542.057396][ T8879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024 [ 542.067664][T25053] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 542.098448][T25028] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 542.177974][T25052] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=4096, inode=0, rec_len=0, name_len=0 [ 542.270705][T25028] REISERFS (device loop3): checking transaction log (loop3) [ 542.338796][T25028] REISERFS (device loop3): Using r5 hash to sort names [ 542.357714][ T8879] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 542.376984][T25052] Remounting filesystem read-only [ 542.403955][ T8879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.415864][T25028] REISERFS (device loop3): using 3.5.x disk format [ 542.464817][T25028] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 542.475832][ T8879] usb 2-1: Product: syz [ 542.506081][ T8879] usb 2-1: Manufacturer: syz [ 542.546730][ T8879] usb 2-1: SerialNumber: syz [ 542.629931][ T8879] usb 2-1: config 0 descriptor?? [ 542.748071][ T8879] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 542.923492][ T5167] usb 2-1: USB disconnect, device number 32 [ 542.927597][ T154] usb 2-1: Failed to submit usb control message: -71 [ 542.961900][ T154] usb 2-1: unable to send the bmi data to the device: -71 [ 542.988235][ T154] usb 2-1: unable to get target info from device [ 542.995823][ T154] usb 2-1: could not get target info (-71) [ 543.084646][ T154] usb 2-1: could not probe fw (-71) [ 543.098840][T25076] openvswitch: netlink: Actions may not be safe on all matching packets [ 543.542279][T25045] loop0: detected capacity change from 0 to 32768 [ 543.598902][T25089] loop1: detected capacity change from 0 to 8 [ 543.669977][T25045] JBD2: Ignoring recovery information on journal [ 543.786452][T25098] netlink: 'syz.2.9647': attribute type 1 has an invalid length. [ 543.825881][T25045] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 543.997144][T25045] (syz.0.9624,25045,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry too close to end - offset=32, inode=17057, rec_len=280, name_len=10 [ 544.084042][T25045] (syz.0.9624,25045,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 544.131825][T25045] (syz.0.9624,25045,1):ocfs2_mknod:298 ERROR: status = -2 [ 544.208094][T25045] (syz.0.9624,25045,1):ocfs2_mknod:502 ERROR: status = -2 [ 544.209106][T25118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9657'. [ 544.216646][T25045] (syz.0.9624,25045,1):ocfs2_create:676 ERROR: status = -2 [ 544.431377][ T4196] ocfs2: Unmounting device (7,0) on (node local) [ 544.462958][T25129] loop3: detected capacity change from 0 to 1024 [ 544.604900][T25129] hfsplus: invalid file type 0177777 for inode 2 [ 544.657446][T25129] hfsplus: failed to load root directory [ 544.949080][T25153] loop0: detected capacity change from 0 to 256 [ 544.963349][T25151] loop2: detected capacity change from 0 to 1024 [ 544.968624][T25155] device bridge_slave_1 left promiscuous mode [ 544.977575][ T8879] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 545.025792][T25155] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.033461][T25153] FAT-fs (loop0): Directory bread(block 64) failed [ 545.057399][T25153] FAT-fs (loop0): Directory bread(block 65) failed [ 545.065241][T25155] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 545.071269][T25153] FAT-fs (loop0): Directory bread(block 66) failed [ 545.102152][T25151] EXT4-fs (loop2): inline encryption not supported [ 545.135237][T25153] FAT-fs (loop0): Directory bread(block 67) failed [ 545.167095][T25153] FAT-fs (loop0): Directory bread(block 68) failed [ 545.187534][T25153] FAT-fs (loop0): Directory bread(block 69) failed [ 545.210114][T25151] EXT4-fs error (device loop2): ext4_free_blocks:6232: comm syz.2.9674: Freeing blocks not in datazone - block = 0, count = 4096 [ 545.234744][T25153] FAT-fs (loop0): Directory bread(block 70) failed [ 545.250262][T25163] loop4: detected capacity change from 0 to 2048 [ 545.267672][ T8879] usb 4-1: Using ep0 maxpacket: 16 [ 545.291318][T25153] FAT-fs (loop0): Directory bread(block 71) failed [ 545.329869][T25153] FAT-fs (loop0): Directory bread(block 72) failed [ 545.345813][T25163] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 545.345889][T25151] EXT4-fs (loop2): Remounting filesystem read-only [ 545.387960][T25153] FAT-fs (loop0): Directory bread(block 73) failed [ 545.412472][T25171] netlink: 'syz.1.9682': attribute type 21 has an invalid length. [ 545.414573][ T8879] usb 4-1: config 0 has an invalid descriptor of length 141, skipping remainder of the config [ 545.467486][T25151] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.9674: Invalid inode bitmap blk 0 in block_group 0 [ 545.481948][ T8879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 33216, setting to 1024 [ 545.537703][T25173] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9683'. [ 545.546318][T25151] EXT4-fs (loop2): Remounting filesystem read-only [ 545.555222][T25151] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 545.572520][ T8879] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 545.583028][T25175] ieee802154 phy1 wpan1: encryption failed: -22 [ 545.615020][ T8879] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 545.638499][T25151] EXT4-fs (loop2): Remounting filesystem read-only [ 545.646635][T25151] EXT4-fs (loop2): 1 orphan inode deleted [ 545.693554][T25151] EXT4-fs (loop2): mounted filesystem without journal. Opts: €; noblock_validity,nolazytime,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,inlinecrypt,errors=remount-ro,. Quota mode: writeback. [ 545.728138][ T8879] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 545.744010][ T8879] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 545.745894][T25177] loop4: detected capacity change from 0 to 1024 [ 545.755214][ T8879] usb 4-1: Manufacturer: syz [ 545.812060][ T8879] usb 4-1: config 0 descriptor?? [ 545.857949][T25129] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 545.866002][T25177] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 545.881232][T25151] EXT4-fs error (device loop2): __ext4_get_inode_loc:4327: comm syz.2.9674: Invalid inode table block 0 in block_group 0 [ 545.958122][T25151] EXT4-fs (loop2): Remounting filesystem read-only [ 546.131987][T25188] CIFS mount error: No usable UNC path provided in device string! [ 546.131987][T25188] [ 546.186163][T25188] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 546.253210][ T5167] usb 4-1: USB disconnect, device number 36 [ 546.373297][T25191] loop4: detected capacity change from 0 to 8192 [ 546.474992][T25191] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 546.494761][T25191] REISERFS (device loop4): using ordered data mode [ 546.502783][T25191] reiserfs: using flush barriers [ 546.511029][T25191] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 546.530775][T25191] REISERFS (device loop4): checking transaction log (loop4) [ 546.548827][T25191] REISERFS (device loop4): Using r5 hash to sort names [ 546.556964][T25191] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 546.752036][T25215] xt_bpf: check failed: parse error [ 547.808378][T25286] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 547.866837][T25285] netlink: 'syz.3.9738': attribute type 21 has an invalid length. [ 547.898019][T25285] netlink: 100 bytes leftover after parsing attributes in process `syz.3.9738'. [ 548.323551][T25300] loop4: detected capacity change from 0 to 128 [ 548.478805][T25300] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 548.491842][T25262] loop2: detected capacity change from 0 to 32768 [ 548.508766][T25300] ext4 filesystem being mounted at /2059/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 548.554772][T25300] EXT4-fs warning (device loop4): ext4_group_extend:1823: can't shrink FS - resize aborted [ 548.675035][T25262] [ 548.675035][T25262] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 548.675035][T25262] [ 548.683672][T25280] loop0: detected capacity change from 0 to 32768 [ 548.728892][T25262] jfs_lookup: dtSearch returned -5 [ 548.818675][T25280] JBD2: Unknown checksum type [ 548.837686][T25280] (syz.0.9735,25280,1):ocfs2_journal_wipe:1154 ERROR: status = -22 [ 548.875557][ T4189] [ 548.875557][ T4189] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 548.875557][ T4189] [ 548.920650][T25322] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.9756'. [ 548.930565][T25322] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 548.937508][T25280] (syz.0.9735,25280,1):ocfs2_check_volume:2424 ERROR: status = -22 [ 548.975225][ T4189] [ 548.975225][ T4189] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 548.975225][ T4189] [ 549.018134][T25280] (syz.0.9735,25280,1):ocfs2_check_volume:2493 ERROR: status = -22 [ 549.081962][T25280] (syz.0.9735,25280,1):ocfs2_mount_volume:1824 ERROR: status = -22 [ 549.293303][T25280] (syz.0.9735,25280,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 549.439541][T25280] exFAT-fs (loop0): invalid boot record signature [ 549.488842][T25280] exFAT-fs (loop0): failed to read boot sector [ 549.512692][T25280] exFAT-fs (loop0): failed to recognize exfat type [ 549.576446][T25342] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 550.057616][T25370] netlink: 'syz.4.9778': attribute type 2 has an invalid length. [ 550.074465][T25370] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 550.136909][T25373] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9781'. [ 550.157333][T25373] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9781'. [ 550.247666][ T4271] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 550.358053][ T8879] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 550.540364][T25395] erofs: (device nullb0): erofs_read_superblock: cannot find valid erofs superblock [ 550.657788][ T4271] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 550.668109][T25405] netlink: 'syz.3.9796': attribute type 1 has an invalid length. [ 550.670658][ T8879] usb 1-1: Using ep0 maxpacket: 32 [ 550.687545][ T8868] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 550.712431][ T4271] usb 2-1: config 0 interface 0 has no altsetting 0 [ 550.727656][T25405] netlink: 'syz.3.9796': attribute type 3 has an invalid length. [ 550.752861][T25405] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9796'. [ 550.867699][ T8879] usb 1-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 550.927858][ T4271] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 550.942869][ T4271] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.953038][ T4271] usb 2-1: Product: syz [ 550.958092][ T4271] usb 2-1: Manufacturer: syz [ 550.964444][ T4271] usb 2-1: SerialNumber: syz [ 550.982499][ T4271] usb 2-1: config 0 descriptor?? [ 551.015926][T25419] loop4: detected capacity change from 0 to 16 [ 551.029884][ T4271] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 551.049886][ T4271] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 551.080133][ T8879] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 551.097862][ T4271] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 551.108242][ T8868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 551.119306][ T8879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.129145][ T8868] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 551.135063][T25419] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 551.144073][ T4271] usb 2-1: media controller created [ 551.156084][ T8879] usb 1-1: Product: syz [ 551.162498][ T8868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 551.175123][T25423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9805'. [ 551.187565][ T8879] usb 1-1: Manufacturer: syz [ 551.193078][ T8879] usb 1-1: SerialNumber: syz [ 551.203660][T17274] udevd[17274]: incorrect cramfs checksum on /dev/loop4 [ 551.208884][ T8868] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 551.223787][ T4271] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 551.243668][ T8879] usb 1-1: config 0 descriptor?? [ 551.258093][ T8868] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 551.267193][T17274] udevd[17274]: incorrect cramfs checksum on /dev/loop4 [ 551.287094][ T8868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.303481][ T8879] usb 1-1: bad CDC descriptors [ 551.309193][ T8879] usb 1-1: unsupported MDLM descriptors [ 551.345154][ T8868] usb 3-1: config 0 descriptor?? [ 551.386755][ T4271] DVB: Unable to find symbol tda10046_attach() [ 551.403875][ T4271] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 551.421941][ T4271] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 551.457825][T25428] autofs4:pid:25428:autofs_fill_super: called with bogus options [ 551.531969][T25430] xt_hashlimit: max too large, truncated to 1048576 [ 551.540908][ T8879] usb 1-1: USB disconnect, device number 43 [ 551.577921][T25430] xt_limit: Overflow, try lower: 0/0 [ 551.632965][ T8868] hdpvr 3-1:0.0: firmware version 0x0 dated [ 551.644253][ T8868] hdpvr 3-1:0.0: untested firmware, the driver might not work. [ 551.727371][ T4271] dvb_usb_m920x: probe of 2-1:0.0 failed with error -71 [ 551.747725][ T4271] usb 2-1: USB disconnect, device number 33 [ 551.775059][T25432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9810'. [ 551.837554][ T8868] hdpvr 3-1:0.0: device init failed [ 551.843227][ T8868] hdpvr: probe of 3-1:0.0 failed with error -12 [ 551.930640][ T8868] usb 3-1: USB disconnect, device number 41 [ 552.716290][T25465] fuse: Bad value for 'group_id' [ 552.821497][T25459] bridge0 speed is unknown, defaulting to 1000 [ 553.381493][T25459] chnl_net:caif_netlink_parms(): no params data found [ 553.573161][T25511] loop1: detected capacity change from 0 to 512 [ 553.593815][T25457] loop3: detected capacity change from 0 to 32768 [ 553.735895][T25457] XFS (loop3): Mounting V5 Filesystem [ 553.757091][T25530] overlayfs: bad mount option "redirect_dir=on:/" [ 553.868866][T25511] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 553.881951][T25511] ext4 filesystem being mounted at /1801/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 554.045590][T25457] XFS (loop3): Ending clean mount [ 554.060300][T25459] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.095045][T25459] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.167144][T25459] device bridge_slave_0 entered promiscuous mode [ 554.225313][T25459] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.263394][T25459] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.278211][T25459] device bridge_slave_1 entered promiscuous mode [ 554.288949][ T4192] XFS (loop3): Unmounting Filesystem [ 554.538406][T25552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9855'. [ 554.557868][T25556] loop2: detected capacity change from 0 to 64 [ 554.633959][T25459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 554.696833][T25556] hfs: unable to open catalog tree [ 554.707410][ T5169] Bluetooth: hci2: command 0x0409 tx timeout [ 554.736347][T25556] hfs: can't find a HFS filesystem on dev loop2 [ 554.896508][T25459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 554.987573][T25573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9863'. [ 555.038018][T25573] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9863'. [ 555.104067][T25580] loop2: detected capacity change from 0 to 256 [ 555.125968][T25459] team0: Port device team_slave_0 added [ 555.180087][T25459] team0: Port device team_slave_1 added [ 555.195309][T25584] loop1: detected capacity change from 0 to 256 [ 555.364040][T25588] (unnamed net_device) (uninitialized): option lp_interval: invalid value (18446744073709551613) [ 555.427631][T25588] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 555.477488][T25459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 555.485791][T25459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 555.651921][T25459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 555.682422][T25602] loop3: detected capacity change from 0 to 512 [ 555.686728][T25459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 555.737427][T25459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 555.809774][T25602] EXT4-fs (loop3): mounted filesystem without journal. Opts: nolazytime,,errors=continue. Quota mode: writeback. [ 555.853738][T25602] ext4 filesystem being mounted at /1930/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 555.864539][T25459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 555.902090][T25594] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9871'. [ 555.946328][T25602] Quota error (device loop3): find_tree_dqentry: Getting block too big (67108869 >= 6) [ 555.977958][T25594] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9871'. [ 556.017978][T25602] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 556.057503][T25602] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.9875: Failed to acquire dquot type 0 [ 556.177592][ T5169] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 556.246832][T25459] device hsr_slave_0 entered promiscuous mode [ 556.338436][T25459] device hsr_slave_1 entered promiscuous mode [ 556.384702][T25459] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 556.416105][T25459] Cannot create hsr debugfs directory [ 556.597517][ T5169] usb 2-1: unable to get BOS descriptor or descriptor too short [ 556.648579][ T5169] usb 2-1: not running at top speed; connect to a high speed hub [ 556.758504][ T5169] usb 2-1: config 2 has an invalid interface number: 226 but max is 1 [ 556.767539][ T5169] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 556.827667][ T5169] usb 2-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 556.886233][ T5169] usb 2-1: config 2 has no interface number 0 [ 556.900456][T25658] xt_CT: You must specify a L4 protocol and not use inversions on it [ 556.927348][ T5169] usb 2-1: config 2 interface 226 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 556.971453][ T5169] usb 2-1: config 2 interface 226 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 557.034525][ T5169] usb 2-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 557.082101][ T5167] Bluetooth: hci2: command 0x041b tx timeout [ 557.115147][T25459] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 557.204594][T25459] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 557.215340][T25673] netlink: 'syz.3.9902': attribute type 1 has an invalid length. [ 557.237638][ T5169] usb 2-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 557.258476][ T5169] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.266886][ T5169] usb 2-1: Product: syz [ 557.276201][T25459] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 557.306038][T25679] x_tables: ip_tables: osf match: only valid for protocol 6 [ 557.331129][T25459] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 557.337734][ T5169] usb 2-1: Manufacturer: syz [ 557.344073][ T5169] usb 2-1: SerialNumber: syz [ 557.757633][ T5169] usb 2-1: USB disconnect, device number 34 [ 557.796757][T25459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 557.948384][T11466] device hsr_slave_0 left promiscuous mode [ 557.977804][T11466] device hsr_slave_1 left promiscuous mode [ 557.996067][T11466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 558.018757][T11466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 558.033058][T11466] device bridge_slave_1 left promiscuous mode [ 558.051474][T11466] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.081287][T11466] device bridge_slave_0 left promiscuous mode [ 558.097488][T11743] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 558.097588][T11466] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.148847][T11466] bond4 (unregistering): Released all slaves [ 558.311425][T11466] bond3 (unregistering): Released all slaves [ 558.347606][T11743] usb 4-1: Using ep0 maxpacket: 16 [ 558.374927][T25718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9920'. [ 558.451045][T11466] bond2 (unregistering): Released all slaves [ 558.488428][T25720] loop1: detected capacity change from 0 to 512 [ 558.488799][T11743] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 558.503774][T11466] bond1 (unregistering): Released all slaves [ 558.547342][T11743] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 255, changing to 11 [ 558.556322][T25720] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 558.596624][T11743] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 57872, setting to 1024 [ 558.622931][T25726] loop0: detected capacity change from 0 to 1024 [ 558.632934][T11743] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 558.728525][T25726] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 558.776969][T25720] EXT4-fs (loop1): 1 truncate cleaned up [ 558.783826][T11743] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 558.806898][T25720] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,minixdf,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 558.839513][T25726] EXT4-fs error (device loop0): ext4_get_journal_inode:5185: inode #32: comm syz.0.9925: iget: special inode unallocated [ 558.856096][T11743] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 558.897296][T11743] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 558.902719][T25726] EXT4-fs (loop0): no journal found [ 558.921414][T11743] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.924918][T25726] EXT4-fs (loop0): can't get journal size [ 558.940785][T25726] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,jqfmt=vfsv0,nobarrier,. Quota mode: none. [ 558.961246][T11743] usb 4-1: config 0 descriptor?? [ 559.123767][ T5167] Bluetooth: hci2: command 0x040f tx timeout [ 559.297595][T11743] rc_core: IR keymap rc-hauppauge not found [ 559.304704][T11743] Registered IR keymap rc-empty [ 559.331603][T25751] misc userio: The device must be registered before sending interrupts [ 559.348279][T11743] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 559.398441][T11743] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 559.454621][T11743] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 559.528957][T11743] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input42 [ 559.565798][T11743] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 559.579113][ C1] mceusb 4-1:0.0: Error: urb status = -75 [ 559.585574][T11466] team0 (unregistering): Port device team_slave_1 removed [ 559.612767][T11466] team0 (unregistering): Port device team_slave_0 removed [ 559.637782][T11743] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 559.666534][T25759] loop2: detected capacity change from 0 to 4096 [ 559.678115][T11743] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 559.689616][T11466] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 559.722914][T11743] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 559.762384][T11466] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 559.777683][T11743] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 559.784499][T25759] ntfs: volume version 3.1. [ 559.817561][T11743] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 559.857615][T11743] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 559.907585][T11743] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 559.946120][T11466] bond0 (unregistering): Released all slaves [ 559.959610][T11743] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 560.017577][T11743] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 560.088853][T11743] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 560.101818][T11743] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 560.171964][T11743] usb 4-1: USB disconnect, device number 37 [ 560.250914][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 560.278064][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 560.370026][T25459] 8021q: adding VLAN 0 to HW filter on device team0 [ 560.413365][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 560.494105][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 560.559453][ T4310] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.567295][ T4310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 560.614973][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 560.676934][T25790] binfmt_misc: register: failed to install interpreter file ./file1 [ 560.733207][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 560.775190][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 560.836215][ T4310] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.844691][ T4310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 560.918335][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 560.981018][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 561.028745][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 561.065545][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 561.164971][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 561.187443][T22466] Bluetooth: hci2: command 0x0419 tx timeout [ 561.213472][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 561.258375][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 561.305044][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 561.348228][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 561.360118][T25819] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 561.407668][T25819] overlayfs: missing 'lowerdir' [ 561.456725][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 561.488111][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 561.527975][T25459] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 561.553515][T25821] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 562.083687][T25070] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 562.118885][T25070] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 562.185883][T25459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 562.306145][T25800] loop1: detected capacity change from 0 to 32768 [ 562.392657][T25800] JBD2: Ignoring recovery information on journal [ 562.650747][T25800] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 562.989035][ T4185] ocfs2: Unmounting device (7,1) on (node local) [ 563.235965][T25896] netlink: 'syz.2.9989': attribute type 2 has an invalid length. [ 563.249034][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 563.271085][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.302202][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 563.432934][T25070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 563.478253][T25070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 563.556943][T25459] device veth0_vlan entered promiscuous mode [ 563.579495][T25911] netlink: 'syz.2.9995': attribute type 3 has an invalid length. [ 563.605039][T25911] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 563.679384][T25070] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 563.724017][T25070] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 563.783439][T25459] device veth1_vlan entered promiscuous mode [ 563.950081][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 563.985625][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 564.046919][T25459] device veth0_macvtap entered promiscuous mode [ 564.110145][T25459] device veth1_macvtap entered promiscuous mode [ 564.226164][T25459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 564.247098][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 564.270914][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 564.315356][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 564.365281][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 564.423024][T25459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.460378][T25459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.538714][T25459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 564.546631][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 564.565779][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 564.595325][T25459] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.657597][T25459] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.667083][T25459] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.721343][T25459] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.741646][T25956] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10012'. [ 564.993605][ T4310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.038567][ T4310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.081098][T25966] usb usb7: usbfs: process 25966 (syz.0.10016) did not claim interface 0 before use [ 565.102413][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 565.160282][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.177828][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.258667][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 565.624675][T25987] sctp: [Deprecated]: syz.1.10025 (pid 25987) Use of int in max_burst socket option. [ 565.624675][T25987] Use struct sctp_assoc_value instead [ 565.672962][T25920] syz.3.9998 (25920): drop_caches: 2 [ 565.829418][T25994] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9815'. [ 565.877684][T25994] netlink: 356 bytes leftover after parsing attributes in process `syz.5.9815'. [ 565.984215][T26003] netlink: 'syz.0.10030': attribute type 20 has an invalid length. [ 566.055239][T26010] tipc: Can't bind to reserved service type 1 [ 566.220271][T26014] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 566.367608][ T8879] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 566.408998][T26029] exfat: Deprecated parameter 'debug' [ 566.417140][T26029] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 566.477794][T26029] exFAT-fs (loop5): unable to read boot sector [ 566.505143][T26029] exFAT-fs (loop5): failed to read boot sector [ 566.511720][T26034] netlink: 200 bytes leftover after parsing attributes in process `syz.2.10044'. [ 566.570049][T26029] exFAT-fs (loop5): failed to recognize exfat type [ 566.787562][T26049] netlink: 132 bytes leftover after parsing attributes in process `syz.5.10050'. [ 566.837559][ T8879] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 566.858777][ T8879] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 566.899237][T26045] loop0: detected capacity change from 0 to 4096 [ 566.916272][ T8879] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 566.964238][T26057] loop1: detected capacity change from 0 to 8 [ 566.967395][ T8879] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.046243][ T8879] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.207071][T26057] unable to read fragment index table [ 567.247862][ T8879] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 567.267732][ T8879] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 567.317629][ T8879] usb 4-1: Product: syz [ 567.345168][ T8879] usb 4-1: Manufacturer: syz [ 567.448753][ T8879] cdc_wdm 4-1:1.0: skipping garbage [ 567.455314][ T8879] cdc_wdm 4-1:1.0: skipping garbage [ 567.536861][ T8879] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 567.548043][T26076] comedi comedi4: bad chanlist[0]=0xfffffc01 chan=64513 range length=2 [ 567.588433][ T8879] cdc_wdm 4-1:1.0: Unknown control protocol [ 567.663477][ T8879] usb 4-1: USB disconnect, device number 38 [ 567.843947][T26087] loop2: detected capacity change from 0 to 1024 [ 567.857673][ T8868] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 567.948353][T26090] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10066'. [ 568.007546][T26090] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10066'. [ 568.054201][T26087] hfsplus: invalid xattr key length: 0 [ 568.095385][T26092] loop5: detected capacity change from 0 to 1024 [ 568.257722][ T8868] usb 1-1: config 0 has an invalid interface number: 120 but max is 0 [ 568.283076][ T8868] usb 1-1: config 0 has no interface number 0 [ 568.337377][ T8868] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 568.386475][ T8868] usb 1-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 568.415155][ T8868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.480433][ T3051] hfsplus: b-tree write err: -5, ino 25 [ 568.487047][ T3051] hfsplus: b-tree write err: -5, ino 4 [ 568.489326][ T8868] usb 1-1: config 0 descriptor?? [ 568.521167][ T3051] hfsplus: b-tree write err: -5, ino 2 [ 568.609566][ T8868] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.120/input/input44 [ 568.903596][ T1334] usb 1-1: USB disconnect, device number 44 [ 569.494023][T26159] loop5: detected capacity change from 0 to 256 [ 569.522062][ T8879] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 569.547606][ T8879] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 569.609780][T26159] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d) [ 569.630042][ T8868] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 569.966295][T26180] block device autoloading is deprecated and will be removed. [ 570.054972][T26179] loop1: detected capacity change from 0 to 4096 [ 570.138383][ T8868] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 570.261130][T26190] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 570.342865][T26127] loop2: detected capacity change from 0 to 32768 [ 570.477880][ T8879] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 570.546930][T26127] XFS (loop2): Mounting V5 Filesystem [ 570.706349][T26220] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 570.800717][T26223] ubi31: attaching mtd0 [ 570.924496][T26223] ubi31: scanning is finished [ 570.951452][T26223] ubi31: empty MTD device detected [ 571.055615][T26127] XFS (loop2): Ending clean mount [ 571.292245][T26223] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 571.368450][T26223] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 571.373783][T26238] loop5: detected capacity change from 0 to 4096 [ 571.405440][T26223] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 571.461963][T26223] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 571.485666][T26223] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 571.524662][T26223] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 571.585603][T26223] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1405359085 [ 571.629600][ T4189] XFS (loop2): Unmounting Filesystem [ 571.659162][T26223] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 571.742101][T26240] ubi31: background thread "ubi_bgt31d" started, PID 26240 [ 572.029763][T26253] loop0: detected capacity change from 0 to 2048 [ 572.102571][T26234] syz.1.10119 (26234): drop_caches: 2 [ 572.169095][T26253] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 572.372585][T26262] loop1: detected capacity change from 0 to 512 [ 572.503194][T26262] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 572.503194][T26262] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 572.503194][T26262] [ 572.648115][T26262] EXT4-fs (loop1): mounted filesystem without journal. Opts: nouser_xattr,usrjquota=,,errors=continue. Quota mode: writeback. [ 572.668426][T26262] ext4 filesystem being mounted at /1862/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 572.735077][T26283] loop5: detected capacity change from 0 to 256 [ 572.755400][T26284] netlink: 'syz.0.10141': attribute type 3 has an invalid length. [ 572.837658][ T1334] usb 4-1: new low-speed USB device number 39 using dummy_hcd [ 572.839771][T26283] FAT-fs (loop5): Directory bread(block 64) failed [ 572.877770][T26283] FAT-fs (loop5): Directory bread(block 65) failed [ 572.915649][T26283] FAT-fs (loop5): Directory bread(block 66) failed [ 572.921639][T26289] loop0: detected capacity change from 0 to 256 [ 572.937521][T26283] FAT-fs (loop5): Directory bread(block 67) failed [ 572.944901][T26283] FAT-fs (loop5): Directory bread(block 68) failed [ 573.057514][T26283] FAT-fs (loop5): Directory bread(block 69) failed [ 573.068838][T26289] FAT-fs (loop0): Directory bread(block 64) failed [ 573.077549][T26283] FAT-fs (loop5): Directory bread(block 70) failed [ 573.087495][T26289] FAT-fs (loop0): Directory bread(block 65) failed [ 573.095054][T26289] FAT-fs (loop0): Directory bread(block 66) failed [ 573.118442][T26283] FAT-fs (loop5): Directory bread(block 71) failed [ 573.157425][T26289] FAT-fs (loop0): Directory bread(block 67) failed [ 573.158911][T26283] FAT-fs (loop5): Directory bread(block 72) failed [ 573.164537][T26289] FAT-fs (loop0): Directory bread(block 68) failed [ 573.184753][T26283] FAT-fs (loop5): Directory bread(block 73) failed [ 573.197631][ T1334] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 573.216311][T26289] FAT-fs (loop0): Directory bread(block 69) failed [ 573.234241][T26289] FAT-fs (loop0): Directory bread(block 70) failed [ 573.245769][ T1334] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 573.288818][ T1334] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 573.304223][T26289] FAT-fs (loop0): Directory bread(block 71) failed [ 573.320405][ T1334] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 573.347911][T26289] FAT-fs (loop0): Directory bread(block 72) failed [ 573.355728][T26299] netlink: 'syz.2.10148': attribute type 32 has an invalid length. [ 573.367378][ T1334] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 573.371807][T26289] FAT-fs (loop0): Directory bread(block 73) failed [ 573.383539][ T1334] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.438764][ T1334] hub 4-1:1.0: bad descriptor, ignoring hub [ 573.446401][ T1334] hub: probe of 4-1:1.0 failed with error -5 [ 573.485184][ T1334] cdc_wdm 4-1:1.0: skipping garbage [ 573.502298][T26303] loop1: detected capacity change from 0 to 256 [ 573.506796][ T1334] cdc_wdm 4-1:1.0: invalid descriptor buffer length [ 573.547477][T26305] netlink: 48 bytes leftover after parsing attributes in process `syz.2.10151'. [ 573.556071][ T1334] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 573.585879][T26305] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10151'. [ 573.596594][T26305] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10151'. [ 573.606888][T26305] netlink: 'syz.2.10151': attribute type 8 has an invalid length. [ 573.773768][T26307] x_tables: duplicate entry at hook 2 [ 573.798429][ T1334] usb 4-1: USB disconnect, device number 39 [ 573.923085][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 573.980786][T26318] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 573.998051][T26318] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 574.455124][T26348] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 574.479275][T26347] libceph: resolve '0' (ret=-3): failed [ 574.494869][T26340] loop3: detected capacity change from 0 to 4096 [ 574.614380][T26340] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 574.646504][T26340] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 574.724190][T26340] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 574.761756][T26340] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 574.804844][T26368] loop0: detected capacity change from 0 to 128 [ 574.822279][T26340] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 574.880712][T26340] ntfs: volume version 3.1. [ 574.899579][T26368] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 574.909636][T26340] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 574.927916][T26340] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 574.928396][T26368] ext4 filesystem being mounted at /2142/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 575.061121][T26378] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10185'. [ 575.074886][T26340] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 575.165532][T26340] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 575.188111][T26368] EXT4-fs (loop0): Can't set test_dummy_encryption on remount [ 575.281406][T26340] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 576.001928][T26422] loop2: detected capacity change from 0 to 512 [ 576.078433][T26422] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 576.126238][T26422] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 576.126238][T26422] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 576.126238][T26422] [ 576.187490][T26422] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 576.305986][T26422] [EXT4 FS bs=4096, gc=1, bpg=256, ipg=32, mo=88428018, mo2=0000] [ 576.331302][T26422] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #12: comm syz.2.10203: iget: bad i_size value: -562949953417216 [ 576.367632][T26422] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.10203: couldn't read orphan inode 12 (err -117) [ 576.383054][T26445] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 576.394903][T26422] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,noblock_validity,debug,barrier=0x0000000000000003,grpjquota=./file0,acl,journal_ioprio=0x0000000000000001,nouser_xattr,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 576.466238][T26445] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 576.508783][T26422] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz.2.10203: deleted inode referenced: 12 [ 576.556663][T26451] device ip6gretap2 entered promiscuous mode [ 576.968467][T26476] loop3: detected capacity change from 0 to 8 [ 577.089185][ T264] block nbd0: Attempted send on invalid socket [ 577.096079][ T264] blk_update_request: I/O error, dev nbd0, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 577.109295][T26484] REISERFS warning (device nbd0): sh-2006 read_super_block: bread failed (dev nbd0, block 2, size 4096) [ 577.150745][T26489] loop2: detected capacity change from 0 to 8 [ 577.172148][T26476] SQUASHFS error: xz decompression failed, data probably corrupt [ 577.179813][ T150] block nbd0: Attempted send on invalid socket [ 577.188460][ T150] blk_update_request: I/O error, dev nbd0, sector 128 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 577.204039][T26484] REISERFS warning (device nbd0): sh-2006 read_super_block: bread failed (dev nbd0, block 16, size 4096) [ 577.222947][T26484] REISERFS warning (device nbd0): sh-2021 reiserfs_fill_super: can not find reiserfs on nbd0 [ 577.236613][T26476] SQUASHFS error: Failed to read block 0xa8: -5 [ 577.273860][T26476] SQUASHFS error: xz decompression failed, data probably corrupt [ 577.309043][T26476] SQUASHFS error: Failed to read block 0xa8: -5 [ 577.618679][T26510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10244'. [ 577.750574][T26516] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 577.922179][T26529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10252'. [ 578.166885][T26548] loop5: detected capacity change from 0 to 256 [ 578.197722][ T8879] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 578.299125][T26548] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 578.457358][ T8879] usb 2-1: Using ep0 maxpacket: 16 [ 578.597882][ T8879] usb 2-1: config 0 has no interfaces? [ 578.725907][T26571] loop2: detected capacity change from 0 to 2048 [ 578.788745][ T8879] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 578.831042][ T8879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.837668][T26579] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 578.871654][ T8879] usb 2-1: Product: syz [ 578.878189][ T8879] usb 2-1: Manufacturer: syz [ 578.905156][ T8879] usb 2-1: SerialNumber: syz [ 578.940798][ T8879] r8152-cfgselector 2-1: config 0 descriptor?? [ 578.955270][T26571] NILFS (loop2): error -2 truncating bmap (ino=16) [ 579.198888][T26579] ------------[ cut here ]------------ [ 579.206126][T26579] WARNING: CPU: 0 PID: 26579 at fs/nilfs2/dat.c:200 nilfs_dat_commit_end+0x5ac/0x6b0 [ 579.217340][T26579] Modules linked in: [ 579.221637][T26579] CPU: 0 PID: 26579 Comm: segctord Not tainted syzkaller #0 [ 579.229787][T26579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 579.241505][T26579] RIP: 0010:nilfs_dat_commit_end+0x5ac/0x6b0 [ 579.249172][T26579] Code: 8b 34 24 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b8 54 03 00 e8 73 5a 6a fe e8 7e b6 f1 fd e9 b8 fc ff ff e8 64 5a 6a fe <0f> 0b e9 16 fc ff ff e8 58 5a 6a fe e8 63 b6 f1 fd e9 74 fe ff ff [ 579.272297][T26579] RSP: 0018:ffffc90003dc7390 EFLAGS: 00010293 [ 579.278470][ T8879] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 579.279674][T26579] RAX: ffffffff830ec6ac RBX: ffff8880280951a0 RCX: ffff88807af20000 [ 579.297510][T26579] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 00000000003f0002 [ 579.306385][T26579] RBP: 0000000000000003 R08: ffff888074589d9f R09: 1ffff1100e8b13b3 [ 579.315140][T26579] R10: dffffc0000000000 R11: ffffed100e8b13b4 R12: ffff88807af21788 [ 579.324718][T26579] R13: ffff888075efb9e0 R14: 00000000003f0002 R15: ffff88802101e9b0 [ 579.334092][T26579] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 579.344521][T26579] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 579.353491][T26579] CR2: 00007fecf8aab6b8 CR3: 00000000728d6000 CR4: 00000000003506f0 [ 579.363010][T26579] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 579.372221][T26579] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 579.381174][T26579] Call Trace: [ 579.386143][T26579] [ 579.389359][T26579] nilfs_dat_commit_update+0x24/0x40 [ 579.395581][T26579] nilfs_btree_commit_update_v+0x93/0x410 [ 579.402379][T26579] nilfs_btree_propagate+0x95a/0xcf0 [ 579.409214][T26579] nilfs_bmap_propagate+0x70/0x120 [ 579.414821][T26579] nilfs_segctor_apply_buffers+0x15d/0x320 [ 579.420854][T26579] ? nilfs_collect_file_data+0xc0/0xc0 [ 579.427832][T26579] nilfs_segctor_scan_file+0x7af/0x9d0 [ 579.434230][T26579] ? trace_nilfs2_collection_stage_transition+0x1a0/0x1a0 [ 579.442545][T26579] ? nilfs_segbuf_extend_segsum+0x25d/0x360 [ 579.448840][T26579] ? rcu_is_watching+0x11/0xa0 [ 579.454004][T26579] nilfs_segctor_do_construct+0x1c26/0x6ca0 [ 579.461766][T26579] ? verify_lock_unused+0x140/0x140 [ 579.468662][T26579] ? nilfs_transaction_unlock+0x220/0x220 [ 579.474913][T26579] ? nilfs_bmap_test_and_clear_dirty+0x4c/0x70 [ 579.483441][T26579] ? clear_nonspinnable+0x60/0x60 [ 579.490051][T26579] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 579.496328][T26579] ? __lock_acquire+0x7d10/0x7d10 [ 579.503137][T26579] ? __rwlock_init+0x140/0x140 [ 579.511328][T26579] ? do_raw_spin_unlock+0x11d/0x230 [ 579.517537][T26579] ? _raw_spin_unlock+0x24/0x40 [ 579.523612][T26579] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 579.527425][ T8879] usb 2-1: USB disconnect, device number 35 [ 579.530141][T26579] nilfs_segctor_construct+0x17b/0x690 [ 579.544263][T26579] nilfs_segctor_thread+0x523/0x1180 [ 579.550212][T26579] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 579.556671][T26579] ? nilfs_iput_work_func+0x70/0x70 [ 579.562646][T26579] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 579.569766][T26579] ? _raw_spin_unlock+0x40/0x40 [ 579.575045][T26579] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 579.581530][T26579] ? init_wait_entry+0xd0/0xd0 [ 579.586879][T26579] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 579.593810][T26579] ? __kthread_parkme+0x157/0x1b0 [ 579.600041][T26579] kthread+0x436/0x520 [ 579.604428][T26579] ? nilfs_iput_work_func+0x70/0x70 [ 579.610097][T26579] ? kthread_blkcg+0xd0/0xd0 [ 579.615144][T26579] ret_from_fork+0x1f/0x30 [ 579.619940][T26579] [ 579.623097][T26579] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 579.631863][T26579] CPU: 0 PID: 26579 Comm: segctord Not tainted syzkaller #0 [ 579.639798][T26579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 579.651487][T26579] Call Trace: [ 579.655745][T26579] [ 579.659032][T26579] dump_stack_lvl+0x188/0x250 [ 579.664745][T26579] ? show_regs_print_info+0x20/0x20 [ 579.670638][T26579] ? load_image+0x400/0x400 [ 579.675650][T26579] panic+0x2e5/0x810 [ 579.679731][T26579] ? bpf_jit_dump+0xd0/0xd0 [ 579.685078][T26579] ? ret_from_fork+0x1f/0x30 [ 579.690086][T26579] ? nilfs_dat_commit_end+0x5ac/0x6b0 [ 579.696035][T26579] __warn+0x248/0x2b0 [ 579.700444][T26579] ? nilfs_dat_commit_end+0x5ac/0x6b0 [ 579.706761][T26579] report_bug+0x1b7/0x2e0 [ 579.711925][T26579] handle_bug+0x3a/0x70 [ 579.716482][T26579] exc_invalid_op+0x16/0x40 [ 579.722402][T26579] asm_exc_invalid_op+0x16/0x20 [ 579.728130][T26579] RIP: 0010:nilfs_dat_commit_end+0x5ac/0x6b0 [ 579.734810][T26579] Code: 8b 34 24 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b8 54 03 00 e8 73 5a 6a fe e8 7e b6 f1 fd e9 b8 fc ff ff e8 64 5a 6a fe <0f> 0b e9 16 fc ff ff e8 58 5a 6a fe e8 63 b6 f1 fd e9 74 fe ff ff [ 579.757859][T26579] RSP: 0018:ffffc90003dc7390 EFLAGS: 00010293 [ 579.765317][T26579] RAX: ffffffff830ec6ac RBX: ffff8880280951a0 RCX: ffff88807af20000 [ 579.774488][T26579] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 00000000003f0002 [ 579.783658][T26579] RBP: 0000000000000003 R08: ffff888074589d9f R09: 1ffff1100e8b13b3 [ 579.792622][T26579] R10: dffffc0000000000 R11: ffffed100e8b13b4 R12: ffff88807af21788 [ 579.801375][T26579] R13: ffff888075efb9e0 R14: 00000000003f0002 R15: ffff88802101e9b0 [ 579.809918][T26579] ? nilfs_dat_commit_end+0x5ac/0x6b0 [ 579.815794][T26579] nilfs_dat_commit_update+0x24/0x40 [ 579.821964][T26579] nilfs_btree_commit_update_v+0x93/0x410 [ 579.828090][T26579] nilfs_btree_propagate+0x95a/0xcf0 [ 579.833536][T26579] nilfs_bmap_propagate+0x70/0x120 [ 579.839314][T26579] nilfs_segctor_apply_buffers+0x15d/0x320 [ 579.845794][T26579] ? nilfs_collect_file_data+0xc0/0xc0 [ 579.852033][T26579] nilfs_segctor_scan_file+0x7af/0x9d0 [ 579.858083][T26579] ? trace_nilfs2_collection_stage_transition+0x1a0/0x1a0 [ 579.865528][T26579] ? nilfs_segbuf_extend_segsum+0x25d/0x360 [ 579.871913][T26579] ? rcu_is_watching+0x11/0xa0 [ 579.876892][T26579] nilfs_segctor_do_construct+0x1c26/0x6ca0 [ 579.883262][T26579] ? verify_lock_unused+0x140/0x140 [ 579.888835][T26579] ? nilfs_transaction_unlock+0x220/0x220 [ 579.895421][T26579] ? nilfs_bmap_test_and_clear_dirty+0x4c/0x70 [ 579.901993][T26579] ? clear_nonspinnable+0x60/0x60 [ 579.907252][T26579] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 579.913103][T26579] ? __lock_acquire+0x7d10/0x7d10 [ 579.918443][T26579] ? __rwlock_init+0x140/0x140 [ 579.923514][T26579] ? do_raw_spin_unlock+0x11d/0x230 [ 579.928954][T26579] ? _raw_spin_unlock+0x24/0x40 [ 579.933936][T26579] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 579.939626][T26579] nilfs_segctor_construct+0x17b/0x690 [ 579.945854][T26579] nilfs_segctor_thread+0x523/0x1180 [ 579.951412][T26579] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 579.958478][T26579] ? nilfs_iput_work_func+0x70/0x70 [ 579.964338][T26579] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 579.971671][T26579] ? _raw_spin_unlock+0x40/0x40 [ 579.977496][T26579] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 579.984910][T26579] ? init_wait_entry+0xd0/0xd0 [ 579.990274][T26579] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 579.997294][T26579] ? __kthread_parkme+0x157/0x1b0 [ 580.003867][T26579] kthread+0x436/0x520 [ 580.008272][T26579] ? nilfs_iput_work_func+0x70/0x70 [ 580.013885][T26579] ? kthread_blkcg+0xd0/0xd0 [ 580.019083][T26579] ret_from_fork+0x1f/0x30 [ 580.023908][T26579] [ 580.028035][T26579] Kernel Offset: disabled [ 580.033774][T26579] Rebooting in 86400 seconds..