last executing test programs: 2.432257354s ago: executing program 4 (id=7443): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, 0x0, 0x0) 2.288658256s ago: executing program 4 (id=7447): r0 = gettid() rt_tgsigqueueinfo(r0, r0, 0x40, &(0x7f0000000000)={0x6, 0x9729, 0x80}) 2.173001167s ago: executing program 4 (id=7449): syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e395292024042c011e710102030109022d000100001000090485000342e6440209050b02000486b20609050f"], 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x84, 0x0, 0x0) 1.622836846s ago: executing program 1 (id=7457): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000240)={0x2080000a}) 1.506870186s ago: executing program 1 (id=7458): syz_mount_image$squashfs(&(0x7f0000000940), &(0x7f0000000040)='./file1\x00', 0x2000000, &(0x7f00000002c0)=ANY=[], 0x1, 0x182, &(0x7f0000000980)="$eJzskL9OKkEUxr/ZXfbCLW4uya1oILlGsVCWRY2x0RJ7H0ACKxIX/7AkAqFYYgyFhbH0CXgNE19AC0Os6UwoqKwMZmbOLsMzOL/mmz/f+eacOQ2ugl8Avmb9Kg4gMPEHr4zBApBl8mxqSH0gfSO9l4IX8h3S+Q1pJuj2ziq+77VyezmkFwdz9jmXALEn2B8YmIqo8axf5YtjANxlA6gBH2kAqsd8t8RDMgnIWMA/McQ89nAH36wBKLSbl4Wg29toNCt1r+6du25px9lynG2bRjlp+J5jQ6SJchoFXNcB8P9KKS0kANyS5zfdRzClNbpnaq2t/GH+P5YwkIrXUQbDU1wbvWMCOMIqkgCuQ7Y4HcsUS45UBoNJm6Kl9CddSXGxWb3wa0MwsKhsBCvOKE4woALfcydIxDel3TBqdUi6QlomHSnfyMnayweWSLijXT6MWmwVubGTjPI7lXa75drx6m8IJYi/+mgsD/dsQKPRaDQajUaj0Wh+Ot8BAAD//+TyeDQ=") llistxattr(&(0x7f0000000100)='./file1\x00', 0x0, 0x2) 1.400179745s ago: executing program 1 (id=7459): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000240)=@ethtool_gstrings={0x1b, 0x7}}) 1.242852459s ago: executing program 1 (id=7462): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x0, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x8000001, 0x40000180, &(0x7f0000000180), 0x1, 0x4000007}) 1.190324314s ago: executing program 1 (id=7465): r0 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000100)={0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980912, 0x8, '\x00', @ptr=0xfffffffffffeffff}}) 1.095537563s ago: executing program 0 (id=7469): r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000002500)="d0", 0x1, 0x4004810, &(0x7f00000025c0)={0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0x16}}, 0x1c) 1.01488729s ago: executing program 1 (id=7471): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 994.130992ms ago: executing program 0 (id=7473): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x20081, 0x0) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000080)='trylock m', 0x9}], 0x1, 0x8, 0x4001) 971.576683ms ago: executing program 0 (id=7474): r0 = syz_open_dev$dri(&(0x7f0000000300), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0xfffffffffffffffe, 0xe, 0x1f}) 902.51193ms ago: executing program 0 (id=7476): r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="c9f4ef4b", 0x4, 0xffffffffffffffff) keyctl$search(0xa, r0, &(0x7f00000002c0)='trusted\x00', &(0x7f0000000300)={'syz', 0x2}, 0x0) 874.387742ms ago: executing program 0 (id=7478): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800b00010067656e65766500003800028014000700fe8000000000000000000000000000160500090001000000050009000000000005000c000000000008000200640101091400030067656e65766531000000"], 0x7c}}, 0x2000000) 807.984278ms ago: executing program 0 (id=7480): syz_usb_connect(0x2, 0x2d, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102238109021b0001000000000904000001098b7500090583170038"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x101000) 770.342202ms ago: executing program 2 (id=7482): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f0000000240)="c112"}, 0x20) 746.529024ms ago: executing program 2 (id=7483): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0xa, 0x0, 0x0, 0x0, 0x180, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5, 0x0, 0x804, 0x0, 0x0, 0x7, 0x4, 0x0, 0x1}) 670.595641ms ago: executing program 3 (id=7485): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b, 0x402}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5, 0xb, 0x1}, @IFLA_MACSEC_REPLAY_PROTECT={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048084) 670.1412ms ago: executing program 3 (id=7486): setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)="c609a4", 0x3) bpf$MAP_CREATE(0xb00000000000014, &(0x7f0000000000)=ANY=[], 0x48) 599.146547ms ago: executing program 3 (id=7487): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000740)={0x32, @multicast1, 0x4e21, 0x0, 'ovf\x00', 0x0, 0xe00e, 0x79}, 0x2c) 598.983267ms ago: executing program 3 (id=7488): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000100)={0x6, 0x3}) 572.269169ms ago: executing program 2 (id=7489): mkdir(&(0x7f0000000300)='./bus\x00', 0x1d8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x200400, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, '.'}}]}) 525.457453ms ago: executing program 3 (id=7490): syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000300)='./file3\x00', 0x0, &(0x7f0000001040)=ANY=[], 0x1, 0xadc, &(0x7f0000001900)="$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") open(&(0x7f00000003c0)='./file2\x00', 0x430dc882a8a7f17, 0xc) 450.84999ms ago: executing program 2 (id=7491): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000180)={0x8, 0xa, 0x202, 0x17558e07, 0x7ffffffe, 0xffffffff, 0xffdffff8, 0x7}, 0x20) 439.649011ms ago: executing program 2 (id=7492): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000240)='./bus\x00', 0x1800840, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x1, 0x360, &(0x7f0000000900)="$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") open(&(0x7f0000000000)='./file1\x00', 0x47a7e, 0x1c0) 158.298256ms ago: executing program 4 (id=7493): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 58.834095ms ago: executing program 4 (id=7494): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x20, 0x28, 0xb, 0x0, 0x0, {0x7}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}]}, 0x20}}, 0x0) 58.590385ms ago: executing program 4 (id=7495): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) 29.361118ms ago: executing program 3 (id=7504): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f00000002c0)=@ethtool_cmd={0x3a, 0xfffffffd, 0x0, 0xd, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x40000045}}) 0s ago: executing program 2 (id=7496): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000bc0)={{0x0, 0x1}, {0xe}, 0x2, 0xbf00bf00, 0x2e}) kernel console output (not intermixed with test programs): 2-1: config 0 descriptor?? [ 426.568869][T12383] usb 1-1: config 0 descriptor?? [ 426.582311][T15715] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 426.624093][T12383] appledisplay 1-1:0.0: Could not find int-in endpoint [ 426.638053][T12383] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 426.776155][T15749] loop4: detected capacity change from 0 to 32768 [ 426.808026][T15749] XFS: attr2 mount option is deprecated. [ 426.822170][ T4228] usbtouchscreen 2-1:0.214: Failed to read FW rev: -71 [ 426.829175][ T4228] usbtouchscreen: probe of 2-1:0.214 failed with error -71 [ 426.862040][T15283] gspca_vc032x: reg_w err -71 [ 426.866779][T15283] vc032x: probe of 4-1:0.0 failed with error -71 [ 426.908225][T15283] usb 4-1: USB disconnect, device number 21 [ 426.914497][ T4228] usb 2-1: USB disconnect, device number 21 [ 426.926876][ T21] usb 1-1: USB disconnect, device number 30 [ 426.949954][T15749] XFS (loop4): Mounting V5 Filesystem [ 427.035996][T15749] XFS (loop4): Ending clean mount [ 427.052692][T15749] XFS (loop4): Quotacheck needed: Please wait. [ 427.115390][T15749] XFS (loop4): Quotacheck: Done. [ 427.373467][T15782] loop1: detected capacity change from 0 to 8 [ 427.394074][ T4178] udevd[4178]: incorrect cramfs checksum on /dev/loop1 [ 427.401652][T15782] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 427.426768][T15782] cramfs: Error -3 while decompressing! [ 427.461626][T15782] cramfs: ffffffff964020a8(26)->ffff888072c60000(4096) [ 427.472397][T15782] cramfs: Error -3 while decompressing! [ 427.481061][T15782] cramfs: ffffffff964020c2(26)->ffff888058519000(4096) [ 427.488477][T15782] cramfs: Error -3 while decompressing! [ 427.494455][T15782] cramfs: ffffffff964020a8(26)->ffff888072c60000(4096) [ 427.514405][ T26] audit: type=1800 audit(1771518986.367:14): pid=15782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5451" name="file2" dev="loop1" ino=348 res=0 errno=0 [ 427.999301][ T4197] XFS (loop4): Unmounting Filesystem [ 427.999650][T15786] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 428.088063][T15806] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5456'. [ 428.330798][T15822] SET target dimension over the limit! [ 428.507632][T15832] loop3: detected capacity change from 0 to 1024 [ 428.597636][T15832] EXT4-fs (loop3): inline encryption not supported [ 428.629693][T15832] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e814c01c, mo2=0003] [ 428.646283][T15832] System zones: 0-1, 3-36 [ 428.686441][T15832] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,delalloc,usrjquota=,debug,nodioread_nolock,bsddf,grpquota,inlinecrypt,,errors=continue. Quota mode: writeback. [ 428.811714][T15828] loop2: detected capacity change from 0 to 32768 [ 429.031517][T15860] loop3: detected capacity change from 0 to 512 [ 429.122633][T15860] EXT4-fs (loop3): Test dummy encryption mode enabled [ 429.133873][T15860] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 429.208689][T15860] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 429.257432][T15860] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=continue,usrquota,prjquota,usrquota,resuid=0x000000000000ee00,usrjquota=min_batch_time=0x00000000ffffffff,nodiscard,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 429.400216][T15860] EXT4-fs (loop3): Test dummy encryption mode enabled [ 429.454174][T15860] EXT4-fs (loop3): re-mounted. Opts: jqfmt=vfsold,errors=continue,usrquota,prjquota,usrquota,resuid=0x000000000000ee00,usrjquota=min_batch_time=0x00000000ffffffff,nodiscard,test_dummy_encryption,. Quota mode: writeback. [ 429.527565][T15875] netlink: 'syz.1.5493': attribute type 1 has an invalid length. [ 430.145094][T15915] netlink: 'syz.4.5514': attribute type 32 has an invalid length. [ 430.184080][T15910] loop1: detected capacity change from 0 to 4096 [ 430.242287][T15283] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 430.262262][T15922] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5516'. [ 430.543099][T15941] netlink: 'syz.4.5526': attribute type 21 has an invalid length. [ 430.632256][T15283] usb 4-1: config index 0 descriptor too short (expected 26, got 18) [ 430.726466][T15950] loop4: detected capacity change from 0 to 2048 [ 430.765785][T15950] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 430.815372][T15283] usb 4-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=b7.de [ 430.850960][T15283] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.862100][T15283] usb 4-1: Product: syz [ 430.866312][T15283] usb 4-1: Manufacturer: syz [ 430.876195][T15958] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 430.901615][T15283] usb 4-1: SerialNumber: syz [ 430.950896][T15960] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 430.972999][T15283] usb 4-1: config 0 descriptor?? [ 430.994631][T15957] loop2: detected capacity change from 0 to 4096 [ 431.034772][T15283] ttusb_dec_send_command: command bulk message failed: error -22 [ 431.059555][T15957] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 431.071830][T15283] ttusb-dec: probe of 4-1:0.0 failed with error -22 [ 431.267166][T15283] usb 4-1: USB disconnect, device number 22 [ 431.285744][ T4193] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22. [ 431.295237][ T4193] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 431.325658][ T4193] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22. [ 431.425443][T15983] overlayfs: missing 'lowerdir' [ 431.498641][T15986] loop2: detected capacity change from 0 to 1024 [ 431.504661][T15992] loop4: detected capacity change from 0 to 64 [ 431.728513][T16002] loop1: detected capacity change from 0 to 1024 [ 431.881118][ T154] hfsplus: b-tree write err: -5, ino 4 [ 432.354584][T16042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5576'. [ 432.363967][T16044] cgroup: name respecified [ 432.406194][T16042] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 432.451489][T16042] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 432.502395][T16042] device bridge1 entered promiscuous mode [ 432.551255][T16056] netlink: 'syz.4.5584': attribute type 7 has an invalid length. [ 432.599890][T16056] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5584'. [ 432.637886][T16061] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.5586'. [ 432.676796][T16061] bridge_slave_1: default FDB implementation only supports local addresses [ 432.807976][T16067] loop4: detected capacity change from 0 to 4096 [ 432.838180][T16074] netlink: 11 bytes leftover after parsing attributes in process `syz.0.5592'. [ 432.864423][T16067] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 432.888633][T16067] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 432.934561][T16067] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 432.952031][ T4228] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 432.960857][T16067] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 432.974585][T16067] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 432.999797][T16017] XFS (loop3): Mounting V5 Filesystem [ 433.072888][T16067] ntfs: volume version 3.1. [ 433.106756][ T4191] XFS (loop3): Metadata CRC error detected at xfs_agi_read_verify+0x192/0x250, xfs_agi block 0x2 [ 433.121478][T16067] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 433.123338][ T4191] XFS (loop3): Unmount and run xfs_repair [ 433.148189][ T4191] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 433.166728][ T4191] 00000000: 58 41 47 49 00 00 00 01 00 00 00 00 00 00 20 00 XAGI.......... . [ 433.181936][ T4191] 00000010: 00 00 00 40 00 00 00 03 00 00 00 01 00 00 00 37 ...@...........7 [ 433.198897][T16067] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 433.199123][ T4191] 00000020: 00 00 18 00 ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 433.210542][ T4228] usb 2-1: Using ep0 maxpacket: 16 [ 433.238779][ T4191] 00000030: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 433.246684][T16067] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 433.253356][ T4191] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 433.278274][T16067] ntfs: (device loop4): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt. [ 433.278500][ T4191] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 433.288938][T16067] ntfs: (device loop4): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 433.297867][ T4191] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 433.321006][ T4191] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 433.330571][T16017] XFS (loop3): metadata I/O error in "xfs_read_agi+0x231/0x530" at daddr 0x2 len 1 error 74 [ 433.352061][T16017] XFS (loop3): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -117, agno 0 [ 433.380376][T16017] XFS (loop3): Failed to read root inode 0x1800, error 117 [ 433.396875][ T4228] usb 2-1: config 0 has an invalid interface number: 216 but max is 0 [ 433.412049][ T21] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 433.427353][ T4228] usb 2-1: config 0 has no interface number 0 [ 433.435814][T16103] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 433.453239][ T4228] usb 2-1: config 0 interface 216 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16 [ 433.463252][ T4228] usb 2-1: config 0 interface 216 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 433.474866][ T4228] usb 2-1: config 0 interface 216 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 433.652266][ T4228] usb 2-1: New USB device found, idVendor=c877, idProduct=d477, bcdDevice=ca.74 [ 433.680643][ T4228] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.690243][ T4228] usb 2-1: Product: syz [ 433.704860][ T4228] usb 2-1: Manufacturer: syz [ 433.722482][ T4228] usb 2-1: SerialNumber: syz [ 433.743986][ T4228] usb 2-1: config 0 descriptor?? [ 433.762277][T16063] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 433.782211][T16063] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 433.792345][ T21] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 433.811738][ T21] usb 3-1: config 0 has no interface number 0 [ 433.818929][ T21] usb 3-1: config 0 interface 41 has no altsetting 0 [ 433.826779][ T4228] usb-storage 2-1:0.216: USB Mass Storage device detected [ 433.867276][ T4228] scsi host1: usb-storage 2-1:0.216 [ 433.916612][T16133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5616'. [ 434.002231][ T21] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 434.022760][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.030782][ T21] usb 3-1: Product: syz [ 434.043713][ T4191] usb 2-1: USB disconnect, device number 22 [ 434.044843][ T21] usb 3-1: Manufacturer: syz [ 434.054478][ T21] usb 3-1: SerialNumber: syz [ 434.071182][ T21] usb 3-1: config 0 descriptor?? [ 434.173842][T16141] set_capacity_and_notify: 1 callbacks suppressed [ 434.173856][T16141] loop3: detected capacity change from 0 to 4096 [ 434.428266][T16161] misc userio: No port type given on /dev/userio [ 434.467333][T16165] netlink: 328 bytes leftover after parsing attributes in process `syz.0.5632'. [ 434.505565][T16167] netlink: 'syz.4.5633': attribute type 1 has an invalid length. [ 434.538251][T16171] loop3: detected capacity change from 0 to 1024 [ 434.546063][T16167] netlink: 212908 bytes leftover after parsing attributes in process `syz.4.5633'. [ 434.567178][ T21] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 434.580384][ T21] CoreChips: probe of 3-1:0.41 failed with error -71 [ 434.623827][ T21] usb 3-1: USB disconnect, device number 24 [ 434.672934][ T154] hfsplus: b-tree write err: -5, ino 4 [ 434.706914][T16175] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5637'. [ 434.738323][T16177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge4: link becomes ready [ 435.154439][T16208] overlayfs: unrecognized mount option "\" or missing value [ 435.175134][T16211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5654'. [ 435.310321][T16220] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 435.425495][T16231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5664'. [ 435.691987][ T13] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 435.811493][T16262] binder: 16261:16262 ioctl c0046209 e0ffff00000000 returned -22 [ 435.920954][T16271] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5683'. [ 436.105017][ T13] usb 2-1: config 4 has an invalid interface number: 186 but max is 0 [ 436.115581][ T13] usb 2-1: config 4 has no interface number 0 [ 436.121738][ T13] usb 2-1: config 4 interface 186 has no altsetting 0 [ 436.129775][ T13] usb 2-1: New USB device found, idVendor=0c26, idProduct=0020, bcdDevice=a6.ad [ 436.145431][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.240189][T16293] xt_CT: You must specify a L4 protocol and not use inversions on it [ 436.439613][T16314] xt_CT: You must specify a L4 protocol and not use inversions on it [ 436.492243][ T13] usb 2-1: string descriptor 0 read error: -71 [ 436.528287][ T13] usb 2-1: USB disconnect, device number 23 [ 436.608239][T16326] loop3: detected capacity change from 0 to 1764 [ 436.941376][T16344] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 437.020794][T16348] tmpfs: Bad value for 'mpol' [ 437.067194][T12383] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 437.342362][T16378] loop1: detected capacity change from 0 to 256 [ 437.392165][T12381] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 437.401105][T16378] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xecc0b056, utbl_chksum : 0xe619d30d) [ 437.445165][T16378] exFAT-fs (loop1): invalid start cluster (4278190088) [ 437.492287][T12383] usb 4-1: config 0 interface 0 altsetting 60 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 437.506089][T12383] usb 4-1: config 0 interface 0 altsetting 60 endpoint 0xD has invalid maxpacket 65278, setting to 1024 [ 437.517902][T12383] usb 4-1: config 0 interface 0 altsetting 60 bulk endpoint 0xD has invalid maxpacket 1024 [ 437.528064][T12383] usb 4-1: config 0 interface 0 has no altsetting 0 [ 437.535229][T12383] usb 4-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=ae.ad [ 437.544314][T12383] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.558656][T12383] usb 4-1: config 0 descriptor?? [ 437.592486][T16326] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 437.812214][T12381] usb 3-1: config index 0 descriptor too short (expected 26, got 18) [ 437.852158][T12383] usb 4-1: string descriptor 0 read error: -71 [ 437.858658][T12383] usb 4-1: ucan: probing device on interface #0 [ 437.865113][T12383] usb 4-1: ucan: invalid endpoint configuration [ 437.871362][T12383] usb 4-1: ucan: probe failed; try to update the device firmware [ 437.881994][T12383] usb 4-1: USB disconnect, device number 23 [ 438.012182][T12381] usb 3-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=b7.de [ 438.021330][T12381] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.029520][T12381] usb 3-1: Product: syz [ 438.034021][T12381] usb 3-1: Manufacturer: syz [ 438.038621][T12381] usb 3-1: SerialNumber: syz [ 438.045303][T12381] usb 3-1: config 0 descriptor?? [ 438.085157][T12381] ttusb_dec_send_command: command bulk message failed: error -22 [ 438.093178][T12381] ttusb-dec: probe of 3-1:0.0 failed with error -22 [ 438.294656][T12381] usb 3-1: USB disconnect, device number 25 [ 438.474221][T16399] netlink: 'syz.4.5744': attribute type 1 has an invalid length. [ 438.531263][T16398] device wireguard0 entered promiscuous mode [ 438.608497][T16412] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5751'. [ 438.618327][T16412] netlink: 31 bytes leftover after parsing attributes in process `syz.0.5751'. [ 438.628625][T16412] netlink: 'syz.0.5751': attribute type 3 has an invalid length. [ 438.636605][T16412] netlink: 'syz.0.5751': attribute type 2 has an invalid length. [ 438.645031][T16412] netlink: 31 bytes leftover after parsing attributes in process `syz.0.5751'. [ 438.789638][T16425] loop1: detected capacity change from 0 to 256 [ 438.854558][T16430] loop3: detected capacity change from 0 to 164 [ 438.879264][T16425] FAT-fs (loop1): Directory bread(block 64) failed [ 438.897159][T16425] FAT-fs (loop1): Directory bread(block 65) failed [ 438.922187][T16425] FAT-fs (loop1): Directory bread(block 66) failed [ 438.932360][T16425] FAT-fs (loop1): Directory bread(block 67) failed [ 438.939021][T16425] FAT-fs (loop1): Directory bread(block 68) failed [ 438.966202][ T5429] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 438.983122][T16425] FAT-fs (loop1): Directory bread(block 69) failed [ 438.995799][T16437] netlink: 'syz.2.5760': attribute type 1 has an invalid length. [ 439.015309][T16425] FAT-fs (loop1): Directory bread(block 70) failed [ 439.021877][T16425] FAT-fs (loop1): Directory bread(block 71) failed [ 439.021949][T16437] netlink: 'syz.2.5760': attribute type 2 has an invalid length. [ 439.052216][T16425] FAT-fs (loop1): Directory bread(block 72) failed [ 439.061161][T16425] FAT-fs (loop1): Directory bread(block 73) failed [ 439.251991][ T5429] usb 5-1: Using ep0 maxpacket: 8 [ 439.343357][T16460] loop2: detected capacity change from 0 to 164 [ 439.357181][T16459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5772'. [ 439.382227][ T5429] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.466694][T16460] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 439.482315][ T5429] usb 5-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=61.da [ 439.492748][ T5429] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 439.517633][T16475] loop1: detected capacity change from 0 to 8 [ 439.530723][ T5429] usb 5-1: Manufacturer: syz [ 439.549682][ T5429] usb 5-1: config 0 descriptor?? [ 439.562670][T16475] SQUASHFS error: Unable to read inode 0xa7 [ 439.615129][ T5429] appledisplay 5-1:0.0: Could not find int-in endpoint [ 439.633240][ T5429] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 439.823839][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.872244][ T13] usb 5-1: USB disconnect, device number 25 [ 440.037271][ T5429] usb 2-1: new low-speed USB device number 24 using dummy_hcd [ 440.282460][T16512] netlink: 'syz.3.5798': attribute type 21 has an invalid length. [ 440.307292][T16512] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5798'. [ 440.333609][T16496] loop2: detected capacity change from 0 to 32768 [ 440.423151][T16496] __jfs_setxattr: xattr_size = 75, new_size = 12821 [ 440.442194][ T5429] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 is Bulk; changing to Interrupt [ 440.458224][T16517] xt_hashlimit: max too large, truncated to 1048576 [ 440.469903][ T5429] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 440.494644][T16517] xt_hashlimit: overflow, rate too high: 0 [ 440.503601][ T5429] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.556844][T16488] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 440.710284][T16531] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 440.852238][ T5429] usb 2-1: string descriptor 0 read error: -71 [ 440.865393][ T5429] hub 2-1:32.0: USB hub found [ 440.937248][ T5429] hub 2-1:32.0: config failed, can't read hub descriptor (err -22) [ 440.962203][T15283] usb 5-1: new low-speed USB device number 26 using dummy_hcd [ 441.013720][ T5429] usb 2-1: USB disconnect, device number 24 [ 441.337373][T15283] usb 5-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 441.357938][T15283] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 4 [ 441.411540][T15283] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 441.448032][T15283] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.712326][T16600] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5836'. [ 441.760419][T16602] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5837'. [ 441.772309][T15283] usb 5-1: string descriptor 0 read error: -71 [ 441.802237][T16602] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 441.882183][T15283] usb 5-1: USB disconnect, device number 26 [ 441.923888][T16611] netlink: 212912 bytes leftover after parsing attributes in process `syz.2.5839'. [ 441.953146][T16611] openvswitch: netlink: IP tunnel dst address not specified [ 442.127058][T16624] mac80211_hwsim hwsim4 »»»»»»: renamed from wlan0 [ 442.157306][T16618] loop3: detected capacity change from 0 to 8192 [ 442.168136][T16625] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5845'. [ 442.178651][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 442.232725][T16618] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 442.257610][T16589] loop1: detected capacity change from 0 to 32768 [ 442.268834][T16618] REISERFS (device loop3): using ordered data mode [ 442.292936][T16618] reiserfs: using flush barriers [ 442.325930][T16618] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 442.441185][T16618] REISERFS (device loop3): checking transaction log (loop3) [ 442.491182][T16618] REISERFS (device loop3): Using r5 hash to sort names [ 442.522008][T16648] xt_TPROXY: Can be used only with -p tcp or -p udp [ 442.554446][T16589] XFS (loop1): Mounting V5 Filesystem [ 442.560838][T16618] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 442.669932][T16618] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 442.771264][T16589] XFS (loop1): Ending clean mount [ 442.949248][ T4187] XFS (loop1): Unmounting Filesystem [ 443.166591][T16686] netlink: 'syz.3.5861': attribute type 28 has an invalid length. [ 443.577170][T16672] loop2: detected capacity change from 0 to 32768 [ 443.577309][T16712] netlink: 'syz.4.5879': attribute type 10 has an invalid length. [ 443.613950][T16712] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5879'. [ 443.643691][T16712] device team0 entered promiscuous mode [ 443.649692][T16712] device team_slave_0 entered promiscuous mode [ 443.668757][T16712] device team_slave_1 entered promiscuous mode [ 443.693229][T16712] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 443.765452][T16672] XFS (loop2): Mounting V5 Filesystem [ 443.802476][T16732] loop1: detected capacity change from 0 to 1024 [ 443.993078][T16672] XFS (loop2): Ending clean mount [ 444.044132][ T9] hfsplus: b-tree write err: -5, ino 4 [ 444.069948][ T4193] XFS (loop2): Unmounting Filesystem [ 444.166568][T16751] loop1: detected capacity change from 0 to 64 [ 444.206393][T16756] kAFS: unable to lookup cell '' [ 444.231863][T16758] binder: 16757:16758 ioctl c018620c 200000000080 returned -22 [ 444.548509][T16774] loop3: detected capacity change from 0 to 8 [ 444.600863][T16778] loop4: detected capacity change from 0 to 64 [ 444.696091][T16774] cramfs: empty filesystem [ 444.700938][ T4178] udevd[4178]: incorrect cramfs checksum on /dev/loop3 [ 444.749295][T16786] AppArmor: change_hat: Invalid input '0x000000000000' [ 444.807103][T16788] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 445.055630][T16796] loop1: detected capacity change from 0 to 4096 [ 445.094820][T16805] netlink: 288 bytes leftover after parsing attributes in process `syz.3.5921'. [ 445.114684][T16796] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 445.245730][T16796] ntfs3: loop1: failed to convert "c46c" to cp860 [ 445.351115][T16819] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5926'. [ 445.392873][T16819] openvswitch: netlink: Key type 541 is out of range max 29 [ 445.419025][T16824] mac80211_hwsim hwsim9 »»»»»»: renamed from wlan0 [ 445.487714][T16829] netlink: 'syz.3.5933': attribute type 3 has an invalid length. [ 445.536237][T16829] netlink: 'syz.3.5933': attribute type 3 has an invalid length. [ 445.657348][T16842] delete_channel: no stack [ 445.705678][T16846] misc userio: No port type given on /dev/userio [ 446.192216][T16876] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5956'. [ 446.616582][T16859] loop4: detected capacity change from 0 to 32768 [ 446.690328][T16859] __jfs_setxattr: xattr_size = 75, new_size = 12821 [ 446.691272][T16862] loop2: detected capacity change from 0 to 32768 [ 447.080442][T16911] loop4: detected capacity change from 0 to 8192 [ 447.187187][T16911] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 447.226837][T16911] REISERFS (device loop4): using ordered data mode [ 447.234085][T16911] reiserfs: using flush barriers [ 447.281950][T16911] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 447.305350][T16933] xt_CT: You must specify a L4 protocol and not use inversions on it [ 447.405434][T16943] comedi comedi0: Minor 47 could not be opened [ 447.444545][T16911] REISERFS (device loop4): checking transaction log (loop4) [ 447.523168][T16911] REISERFS (device loop4): Using r5 hash to sort names [ 447.530527][T16911] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 447.621748][T16911] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 447.898863][T16975] loop3: detected capacity change from 0 to 64 [ 447.946961][T16981] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6006'. [ 448.211488][T16999] loop3: detected capacity change from 0 to 8 [ 448.228429][T16999] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 448.236752][ T4178] udevd[4178]: incorrect cramfs checksum on /dev/loop3 [ 448.265994][T16999] cramfs: bad data blocksize 4294934200 [ 448.293375][T16999] cramfs: bad data blocksize 4294934200 [ 448.296954][ T4178] udevd[4178]: incorrect cramfs checksum on /dev/loop3 [ 448.311393][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 448.311405][ T26] audit: type=1800 audit(1771519007.157:15): pid=16999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6015" name="file1" dev="loop3" ino=33092 res=0 errno=0 [ 448.355629][ T4178] udevd[4178]: incorrect cramfs checksum on /dev/loop3 [ 448.368443][T16998] loop2: detected capacity change from 0 to 8192 [ 448.460757][T16998] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 448.477920][T17003] loop1: detected capacity change from 0 to 4096 [ 448.487556][T16998] REISERFS (device loop2): using ordered data mode [ 448.494440][T15283] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 448.498701][T17010] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 448.502720][T16998] reiserfs: using flush barriers [ 448.525881][T16998] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 448.544134][T16998] REISERFS (device loop2): checking transaction log (loop2) [ 448.561553][T16998] REISERFS (device loop2): Using r5 hash to sort names [ 448.574844][T16998] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 448.591032][T16998] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 448.686373][T17003] ntfs: volume version 3.1. [ 448.719221][T17003] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 448.755696][T17003] ntfs: (device loop1): load_and_init_quota(): Failed to find inode number for $Quota. [ 448.766767][T17003] ntfs: (device loop1): load_system_files(): Failed to load $Quota. Mounting read-only. Run chkdsk. [ 448.787529][T17003] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 448.801935][T15283] usb 1-1: Using ep0 maxpacket: 16 [ 448.808783][T17003] ntfs: (device loop1): load_and_init_usnjrnl(): Failed to find inode number for $UsnJrnl. [ 448.826335][T17003] ntfs: (device loop1): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 448.942255][T15283] usb 1-1: config 0 has an invalid descriptor of length 141, skipping remainder of the config [ 448.958945][T15283] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 33216, setting to 1024 [ 448.986237][T15283] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 448.986804][T17018] netlink: 2 bytes leftover after parsing attributes in process `syz.3.6024'. [ 449.001946][T15283] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 449.015534][T17014] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 449.151015][T17014] ntfs3: loop2: failed to convert "c46c" to cp860 [ 449.161100][T17020] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 449.163630][T15283] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 449.243662][T15283] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 449.282317][T15283] usb 1-1: Manufacturer: syz [ 449.340456][T15283] usb 1-1: config 0 descriptor?? [ 449.382350][T16991] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 449.636819][T12381] usb 1-1: USB disconnect, device number 31 [ 449.852454][T17064] set_capacity_and_notify: 3 callbacks suppressed [ 449.852470][T17064] loop4: detected capacity change from 0 to 128 [ 449.881632][T17063] device wireguard0 entered promiscuous mode [ 449.955329][T17075] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6052'. [ 450.151959][T12381] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 450.422003][T12381] usb 2-1: Using ep0 maxpacket: 8 [ 450.542405][T12381] usb 2-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=db.e6 [ 450.551465][T12381] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.561186][T12381] usb 2-1: config 0 descriptor?? [ 450.603382][T12381] pcwd_usb: The device isn't a Human Interface Device [ 450.805337][T12381] usb 2-1: USB disconnect, device number 25 [ 451.481781][T17110] netlink: 'syz.2.6065': attribute type 21 has an invalid length. [ 451.509226][T17110] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6065'. [ 451.510377][T17104] loop1: detected capacity change from 0 to 8192 [ 451.559850][T17110] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6065'. [ 451.571225][T17104] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 451.582311][T17104] REISERFS (device loop1): using ordered data mode [ 451.588848][T17104] reiserfs: using flush barriers [ 451.610570][T17104] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 451.641440][T17104] REISERFS (device loop1): checking transaction log (loop1) [ 451.662829][T17104] REISERFS (device loop1): Using r5 hash to sort names [ 451.673926][T17104] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 451.751144][T17104] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 451.944349][T17123] loop2: detected capacity change from 0 to 512 [ 451.950947][T17101] loop4: detected capacity change from 0 to 32768 [ 451.970063][T17125] netlink: 'syz.0.6074': attribute type 6 has an invalid length. [ 451.991468][T17125] netlink: 168 bytes leftover after parsing attributes in process `syz.0.6074'. [ 452.041453][T17129] ERROR: device name not specified. [ 452.181631][T17123] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback. [ 452.196455][T17123] ext4 filesystem being mounted at /1116/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 452.204727][T17101] XFS (loop4): Mounting V5 Filesystem [ 452.432577][T17101] XFS (loop4): Ending clean mount [ 452.620245][ T4197] XFS (loop4): Unmounting Filesystem [ 453.157140][T17205] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6110'. [ 453.315896][T17218] loop3: detected capacity change from 0 to 512 [ 453.383106][T17218] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 453.422215][T17218] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 453.440517][T17218] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 453.485029][T17218] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 453.534183][T17218] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 453.543237][T17218] EXT4-fs (loop3): orphan cleanup on readonly fs [ 453.567135][T17218] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.6116: bg 0: block 34: padding at end of block bitmap is not set [ 453.621169][T17218] Quota error (device loop3): write_blk: dquota write failed [ 453.673073][T17237] 8021q: adding VLAN 0 to HW filter on device bond4 [ 453.683853][T17218] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 453.694079][T17218] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.6116: Failed to acquire dquot type 1 [ 453.731429][T17218] EXT4-fs (loop3): 1 truncate cleaned up [ 453.750675][T17218] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,barrier,,errors=continue. Quota mode: writeback. [ 453.809943][T17250] netlink: 'syz.1.6131': attribute type 1 has an invalid length. [ 454.005138][T17263] openvswitch: netlink: Actions may not be safe on all matching packets [ 454.181740][T17280] loop4: detected capacity change from 0 to 128 [ 454.360312][T17292] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.6151'. [ 454.482684][T17292] syz.4.6151 (17292) used greatest stack depth: 18512 bytes left [ 454.852739][T17324] loop4: detected capacity change from 0 to 64 [ 455.021814][T17334] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6173'. [ 455.059365][T17336] netlink: 'syz.2.6174': attribute type 21 has an invalid length. [ 455.073448][T17336] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6174'. [ 455.384599][T17352] loop1: detected capacity change from 0 to 256 [ 455.806403][T17381] loop4: detected capacity change from 0 to 512 [ 455.856654][T17381] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 455.890254][T17381] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 455.949945][T17381] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 455.984064][T17390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6199'. [ 456.019796][T17381] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 456.092128][T17381] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 456.170815][T17381] EXT4-fs (loop4): orphan cleanup on readonly fs [ 456.277287][T17381] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.6195: bg 0: block 34: padding at end of block bitmap is not set [ 456.325307][T17381] Quota error (device loop4): write_blk: dquota write failed [ 456.348559][T17381] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 456.399620][T17381] EXT4-fs error (device loop4): ext4_acquire_dquot:6234: comm syz.4.6195: Failed to acquire dquot type 1 [ 456.443054][T17381] EXT4-fs (loop4): 1 truncate cleaned up [ 456.477955][T17381] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,barrier,,errors=continue. Quota mode: writeback. [ 456.759422][T17436] loop3: detected capacity change from 0 to 256 [ 456.850427][T17446] loop1: detected capacity change from 0 to 16 [ 456.896248][T17446] erofs: (device loop1): mounted with root inode @ nid 36. [ 456.898095][T17436] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 456.969140][T17457] netlink: 'syz.0.6232': attribute type 3 has an invalid length. [ 457.160399][T17436] befs: Unrecognized mount option "umask=00000000000000000000005" or missing value [ 457.215603][T17436] befs: (nullb0): cannot parse mount options [ 457.224374][T17472] device xfrm0 entered promiscuous mode [ 457.490189][T17488] loop4: detected capacity change from 0 to 128 [ 457.492156][T17485] kernel profiling enabled (shift: 7) [ 457.501387][T17490] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.6249'. [ 458.025915][T17506] loop3: detected capacity change from 0 to 4096 [ 458.058776][T17518] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6264'. [ 458.113386][T17522] loop1: detected capacity change from 0 to 64 [ 458.142903][T17506] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 458.168231][T17525] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.6266'. [ 458.232950][T17506] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 458.296291][T17506] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 458.354832][T17506] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 458.441229][T17506] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 458.523583][T17506] ntfs: volume version 3.1. [ 458.556483][T17506] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 458.630080][T17506] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 458.690127][T17506] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 458.718191][T17506] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 458.747523][T17506] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 458.790407][T17562] bridge8: the hash_elasticity option has been deprecated and is always 16 [ 458.806120][T17506] ntfs: (device loop3): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute name is placed after the attribute value. [ 458.807172][T17565] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.6285'. [ 458.859684][T17506] ntfs: (device loop3): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 458.904212][T17506] ntfs: (device loop3): load_and_init_quota(): Failed to load $Quota/$Q index. [ 458.958254][T17506] ntfs: (device loop3): load_system_files(): Failed to load $Quota. Will not be able to remount read-write. Run chkdsk. [ 458.978998][T17506] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 458.991233][ T21] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 459.008460][T17506] ntfs: (device loop3): ntfs_lookup(): ntfs_lookup_ino_by_name() failed with error code 5. [ 459.266910][T17591] netlink: set zone limit has 8 unknown bytes [ 459.413183][T17601] ieee802154 phy1 wpan1: encryption failed: -90 [ 459.432249][ T21] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 459.440622][ T21] usb 2-1: config 0 has no interface number 0 [ 459.463691][ T21] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 12336, setting to 64 [ 459.632182][ T21] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 459.652550][ T21] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 459.679274][ T21] usb 2-1: Product: syz [ 459.699760][ T21] usb 2-1: SerialNumber: syz [ 459.712933][ T21] usb 2-1: config 0 descriptor?? [ 459.773883][ T21] cm109 2-1:0.8: invalid payload size 64, expected 4 [ 459.787881][ T21] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input29 [ 460.200751][ T21] usb 2-1: USB disconnect, device number 26 [ 460.207230][ C1] cm109 2-1:0.8: cm109_urb_irq_callback: urb status -71 [ 460.207295][ C1] cm109 2-1:0.8: cm109_urb_irq_callback: usb_submit_urb (urb_ctl) failed -19 [ 460.670724][ T21] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 460.805817][T17638] netlink: 'syz.1.6323': attribute type 2 has an invalid length. [ 460.821626][T17640] loop4: detected capacity change from 0 to 512 [ 460.831704][T17638] netlink: 'syz.1.6323': attribute type 3 has an invalid length. [ 460.840945][T17643] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.6321'. [ 460.896566][T17640] EXT4-fs (loop4): Test dummy encryption mode enabled [ 460.947328][T17640] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 460.987654][T17640] EXT4-fs (loop4): SIPHASH is not a valid default hash value [ 461.292613][T17669] loop2: detected capacity change from 0 to 512 [ 461.416970][T17669] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 461.416970][T17669] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 461.416970][T17669] [ 461.502330][T17669] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 461.554642][T17669] EXT4-fs (loop2): 1 truncate cleaned up [ 461.580053][T17669] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,resuid=0x000000000000ee01,nouser_xattr,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 461.619456][T17691] netlink: 'syz.1.6349': attribute type 5 has an invalid length. [ 461.671990][T12383] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 461.807456][T17704] xt_TCPMSS: Only works on TCP SYN packets [ 461.932789][T17712] netlink: 'syz.0.6358': attribute type 21 has an invalid length. [ 462.016972][T17712] IPv6: NLM_F_CREATE should be specified when creating new route [ 462.052201][T12383] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 462.067587][T12383] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.114715][T12383] usb 5-1: config 0 descriptor?? [ 462.132437][T17722] (unnamed net_device) (uninitialized): peer notification delay (315) is not a multiple of miimon (100), value rounded to 300 ms [ 462.165076][T12383] gspca_main: spca508-2.14.0 probing 8086:0110 [ 462.361615][T17741] loop1: detected capacity change from 0 to 2048 [ 462.413620][T17746] delete_channel: no stack [ 462.447368][T17741] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 462.467624][T17741] NILFS (loop1): unrecognized mount option "ÿÿ" [ 462.515294][T17755] binder: 17754:17755 ioctl c00c620f 0 returned -14 [ 462.522704][T17741] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 462.538053][T17757] netlink: 'syz.0.6381': attribute type 2 has an invalid length. [ 462.598809][T17760] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 462.612283][T12383] gspca_spca508: reg_read err -71 [ 462.632176][T12383] gspca_spca508: reg_read err -71 [ 462.672214][T12383] gspca_spca508: reg_read err -71 [ 462.692599][T12383] gspca_spca508: reg_read err -71 [ 462.719160][T12383] gspca_spca508: reg write: error -71 [ 462.738256][T12383] spca508: probe of 5-1:0.0 failed with error -71 [ 462.768436][T12383] usb 5-1: USB disconnect, device number 27 [ 462.905789][T17779] xt_hashlimit: overflow, try lower: 3/0 [ 462.906134][T17782] netlink: 'syz.2.6393': attribute type 1 has an invalid length. [ 462.920004][T17782] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6393'. [ 463.172911][ T21] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 463.444052][T17816] loop4: detected capacity change from 0 to 128 [ 463.472325][ T21] usb 4-1: Using ep0 maxpacket: 16 [ 463.483729][T17818] netlink: 'syz.2.6411': attribute type 1 has an invalid length. [ 463.491784][T17818] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.6411'. [ 463.512085][T17818] netlink: 'syz.2.6411': attribute type 1 has an invalid length. [ 463.531609][T17816] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 463.542446][T12381] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 463.585472][T17816] ext4 filesystem being mounted at /1126/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 463.622084][ T21] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 463.642022][ T21] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping [ 463.661998][ T21] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 463.724512][T17821] loop2: detected capacity change from 0 to 8 [ 463.862084][ T21] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 463.871146][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.891977][ T21] usb 4-1: Product: syz [ 463.896154][ T21] usb 4-1: Manufacturer: syz [ 463.900720][ T21] usb 4-1: SerialNumber: syz [ 463.902286][T12381] usb 1-1: config 0 has an invalid interface number: 17 but max is 1 [ 463.921083][T12381] usb 1-1: config 0 has an invalid interface number: 135 but max is 1 [ 463.930116][T12381] usb 1-1: config 0 has no interface number 0 [ 463.930511][ T21] usb 4-1: config 0 descriptor?? [ 463.940760][T12381] usb 1-1: config 0 has no interface number 1 [ 463.959438][T12381] usb 1-1: config 0 interface 17 has no altsetting 0 [ 463.966462][T12381] usb 1-1: config 0 interface 135 has no altsetting 0 [ 463.985170][ T21] appledisplay 4-1:0.0: Could not find int-in endpoint [ 464.009491][ T21] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 464.164566][T12381] usb 1-1: New USB device found, idVendor=413c, idProduct=81cf, bcdDevice=1b.39 [ 464.191854][T12381] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.214377][T12381] usb 1-1: Product: syz [ 464.219454][T12381] usb 1-1: Manufacturer: syz [ 464.224615][T12381] usb 1-1: SerialNumber: syz [ 464.238285][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 464.238298][ T26] audit: type=1400 audit(1771519023.087:17): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=17832 comm="syz.4.6417" [ 464.245570][T12381] usb 1-1: config 0 descriptor?? [ 464.549105][T17851] netlink: 'syz.1.6427': attribute type 1 has an invalid length. [ 464.573715][T17851] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6427'. [ 464.578458][T12381] usb 1-1: USB disconnect, device number 32 [ 464.700506][T17855] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6429'. [ 464.777393][T17861] SET target dimension over the limit! [ 465.136787][ T26] audit: type=1400 audit(1771519023.987:18): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=17874 comm="syz.0.6439" [ 465.192114][T12381] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 465.441950][T12381] usb 2-1: Using ep0 maxpacket: 8 [ 465.626171][T17909] netlink: 'syz.4.6456': attribute type 1 has an invalid length. [ 465.672121][T17909] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.6456'. [ 465.722708][T12381] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03 [ 465.736543][T12381] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.759080][T12381] usb 2-1: Product: syz [ 465.769164][T12381] usb 2-1: Manufacturer: syz [ 465.779427][T12381] usb 2-1: SerialNumber: syz [ 465.792953][T12381] usb 2-1: config 0 descriptor?? [ 465.834221][T17927] loop4: detected capacity change from 0 to 512 [ 465.859732][T12381] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 465.875053][T12381] dvb-usb: bulk message failed: -22 (2/0) [ 465.878393][ T21] usb 4-1: USB disconnect, device number 24 [ 465.884706][T12381] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 465.923064][T17927] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 465.923064][T17927] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 465.923064][T17927] [ 465.962381][T12381] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 465.995193][T12381] usb 2-1: media controller created [ 466.000303][T17927] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 466.042475][T12381] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 466.077627][T17927] EXT4-fs (loop4): 1 truncate cleaned up [ 466.084627][T17927] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,resuid=0x000000000000ee01,nouser_xattr,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 466.177042][T12381] dvb-usb: bulk message failed: -22 (1/0) [ 466.191727][T12381] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 466.273447][T12381] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input30 [ 466.318467][T12381] dvb-usb: schedule remote query interval to 50 msecs. [ 466.325091][T17956] netlink: 748 bytes leftover after parsing attributes in process `syz.4.6478'. [ 466.347013][T12381] dvb-usb: bulk message failed: -22 (2/0) [ 466.360227][T12381] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 466.428185][T12381] usb 2-1: USB disconnect, device number 27 [ 466.514692][T12381] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 467.017849][T18007] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 467.360246][T18034] sctp: [Deprecated]: syz.0.6517 (pid 18034) Use of int in max_burst socket option. [ 467.360246][T18034] Use struct sctp_assoc_value instead [ 467.368710][T18037] netlink: 'syz.2.6519': attribute type 4 has an invalid length. [ 467.413015][T18037] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6519'. [ 467.503011][T17981] loop3: detected capacity change from 0 to 32768 [ 467.651782][T17981] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 467.697422][T17981] OCFS2: ERROR (device loop3): int ocfs2_reserve_suballoc_bits(struct ocfs2_super *, struct ocfs2_alloc_context *, int, u32, u64 *, int): Invalid chain allocator 73 [ 467.716841][T17981] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 467.728153][T17981] OCFS2: File system is now read-only. [ 467.734461][T17981] (syz.3.6487,17981,0):ocfs2_reserve_suballoc_bits:850 ERROR: status = -30 [ 467.743547][T17981] (syz.3.6487,17981,0):ocfs2_reserve_new_metadata_blocks:990 ERROR: status = -30 [ 467.755403][T17981] (syz.3.6487,17981,0):ocfs2_reserve_new_metadata_blocks:1013 ERROR: status = -30 [ 467.786293][T17981] (syz.3.6487,17981,1):ocfs2_mknod:350 ERROR: status = -30 [ 467.845315][T17981] (syz.3.6487,17981,1):ocfs2_mknod:502 ERROR: status = -30 [ 467.845386][T18070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6534'. [ 467.929690][T18076] loop4: detected capacity change from 0 to 64 [ 467.934477][T17981] (syz.3.6487,17981,1):ocfs2_create:676 ERROR: status = -30 [ 467.941232][T18077] netlink: 'syz.2.6538': attribute type 10 has an invalid length. [ 467.966627][T18079] netlink: 100 bytes leftover after parsing attributes in process `syz.0.6539'. [ 468.048318][ T4186] ocfs2: Unmounting device (7,3) on (node local) [ 468.102209][T12383] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 468.352022][T12383] usb 2-1: Using ep0 maxpacket: 32 [ 468.472190][T12383] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.503028][T12383] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.633255][T12383] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 468.644865][T12383] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 468.673260][T12383] usb 2-1: Product: syz [ 468.687188][T12383] usb 2-1: Manufacturer: syz [ 468.697674][T18120] netlink: 'syz.0.6559': attribute type 10 has an invalid length. [ 468.733224][T12383] hub 2-1:4.0: USB hub found [ 468.739945][T18120] team0: Port device ÿÿÿÿÿÿ added [ 468.746946][T18122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6560'. [ 468.925459][T18138] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6568'. [ 468.937930][T18138] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6568'. [ 468.952126][T12383] hub 2-1:4.0: 2 ports detected [ 469.042149][ T7381] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 469.172288][T12383] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 469.179269][T12383] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 469.218248][T12383] usb 2-1: USB disconnect, device number 28 [ 469.280723][T12381] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 469.469411][T18167] loop3: detected capacity change from 0 to 512 [ 469.485072][T18167] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 469.509876][T18167] EXT4-fs (loop3): mounted filesystem without journal. Opts: nomblk_io_submit,inode_readahead_blks=0x0000000000000800,discard,,errors=continue. Quota mode: writeback. [ 469.526928][T18167] ext4 filesystem being mounted at /1275/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 469.552060][ T4174] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 469.586744][ T7381] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 469.596168][ T7381] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.604907][ T7381] usb 3-1: Product: syz [ 469.609065][ T7381] usb 3-1: Manufacturer: syz [ 469.613955][ T7381] usb 3-1: SerialNumber: syz [ 469.620335][ T7381] usb 3-1: config 0 descriptor?? [ 469.642447][T12381] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 469.650747][T12381] usb 1-1: config 0 has no interface number 0 [ 469.668593][ T7381] ch341 3-1:0.0: ch341-uart converter detected [ 469.687889][T12381] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 12336, setting to 64 [ 469.822066][ T4174] usb 5-1: Using ep0 maxpacket: 16 [ 469.834359][T12381] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 469.848157][T18186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6590'. [ 469.851650][T12381] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 469.859082][T18186] netlink: 312 bytes leftover after parsing attributes in process `syz.3.6590'. [ 469.871837][T12381] usb 1-1: Product: syz [ 469.878668][T12381] usb 1-1: SerialNumber: syz [ 469.888787][ T7381] usb 3-1: short control message received (0 < 2) [ 469.896184][T18186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6590'. [ 469.912171][ T7381] usb 3-1: failed to receive control message: -5 [ 469.920496][T12381] usb 1-1: config 0 descriptor?? [ 469.926701][ T7381] ch341-uart: probe of ttyUSB0 failed with error -5 [ 469.973615][T12381] cm109 1-1:0.8: invalid payload size 64, expected 4 [ 469.987568][ T4174] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 469.999833][T12381] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input31 [ 470.006405][ T4174] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 470.058707][T18194] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6594'. [ 470.069510][T18196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6595'. [ 470.083320][T18194] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6594'. [ 470.095164][ T21] usb 3-1: USB disconnect, device number 26 [ 470.121638][ T21] ch341 3-1:0.0: device disconnected [ 470.232438][ T4174] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 470.255119][ T4174] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.285481][ T4174] usb 5-1: Product: syz [ 470.289676][ T4174] usb 5-1: Manufacturer: syz [ 470.300231][T18208] loop1: detected capacity change from 0 to 256 [ 470.305533][ T4174] usb 5-1: SerialNumber: syz [ 470.436639][ T13] usb 1-1: USB disconnect, device number 33 [ 470.453375][ T13] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 470.487009][T18218] loop1: detected capacity change from 0 to 64 [ 470.674988][T18232] netlink: 'syz.3.6614': attribute type 3 has an invalid length. [ 470.701359][T18236] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6612'. [ 470.833877][ T4174] usb 5-1: cannot find UAC_HEADER [ 470.869306][ T4174] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 470.891560][T18246] loop1: detected capacity change from 0 to 256 [ 470.895655][ T4174] usb 5-1: USB disconnect, device number 28 [ 470.916898][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 470.992256][ T21] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 471.113345][T18258] loop1: detected capacity change from 0 to 64 [ 471.196546][T18262] netlink: 'syz.3.6628': attribute type 10 has an invalid length. [ 471.208026][T18262] team0: Port device ÿÿÿÿÿÿ added [ 471.307814][T18268] loop3: detected capacity change from 0 to 256 [ 471.314256][ T21] usb 3-1: Using ep0 maxpacket: 32 [ 471.319813][T15283] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 471.430652][T18268] FAT-fs (loop3): Directory bread(block 64) failed [ 471.442288][T18268] FAT-fs (loop3): Directory bread(block 65) failed [ 471.459889][T18268] FAT-fs (loop3): Directory bread(block 66) failed [ 471.473432][ T21] usb 3-1: config 0 has an invalid interface number: 126 but max is 0 [ 471.477550][T18268] FAT-fs (loop3): Directory bread(block 67) failed [ 471.484581][ T21] usb 3-1: config 0 has no interface number 0 [ 471.512291][ T21] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 471.524434][T18268] FAT-fs (loop3): Directory bread(block 68) failed [ 471.527259][ T21] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 471.531399][T18268] FAT-fs (loop3): Directory bread(block 69) failed [ 471.542981][ T21] usb 3-1: config 0 interface 126 has no altsetting 0 [ 471.548214][T18279] netlink: 'syz.1.6635': attribute type 1 has an invalid length. [ 471.563210][T18268] FAT-fs (loop3): Directory bread(block 70) failed [ 471.569738][T18268] FAT-fs (loop3): Directory bread(block 71) failed [ 471.576878][T18268] FAT-fs (loop3): Directory bread(block 72) failed [ 471.588725][T18268] FAT-fs (loop3): Directory bread(block 73) failed [ 471.702472][ T4228] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 471.747534][ T21] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 471.762593][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.772569][T15283] usb 1-1: unable to get BOS descriptor or descriptor too short [ 471.783393][ T21] usb 3-1: Product: syz [ 471.811788][ T21] usb 3-1: Manufacturer: syz [ 471.817040][ T21] usb 3-1: SerialNumber: syz [ 471.834217][ T21] usb 3-1: config 0 descriptor?? [ 471.848155][T18293] erofs: (device nullb0): erofs_read_superblock: cannot find valid erofs superblock [ 471.862392][T18234] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 471.869537][T15283] usb 1-1: config 129 has an invalid interface number: 135 but max is 0 [ 471.879906][T18234] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 471.888699][T15283] usb 1-1: config 129 has an invalid interface number: 5 but max is 0 [ 471.899703][T15283] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 471.917891][T15283] usb 1-1: config 129 has no interface number 0 [ 471.924960][T15283] usb 1-1: config 129 has no interface number 1 [ 471.932189][T15283] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 471.957765][T15283] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 471.971067][T15283] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 472.004505][T15283] usb 1-1: config 129 interface 135 has no altsetting 0 [ 472.020058][T15283] usb 1-1: config 129 interface 5 has no altsetting 0 [ 472.031396][T18301] netlink: 'syz.3.6647': attribute type 10 has an invalid length. [ 472.144830][ T4228] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 472.174603][ T4228] usb 5-1: config 0 has no interface number 0 [ 472.180735][ T4228] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 12336, setting to 64 [ 472.207483][ T21] ir_usb 3-1:0.126: IR Dongle converter detected [ 472.232519][ T21] usb 3-1: IRDA class descriptor not found, device not bound [ 472.265516][ T21] usb 3-1: USB disconnect, device number 27 [ 472.322287][T15283] usb 1-1: string descriptor 0 read error: -22 [ 472.328562][T15283] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 472.350896][T15283] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.359382][ T4228] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 472.378256][ T4228] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 472.403555][ T4228] usb 5-1: Product: syz [ 472.407744][ T4228] usb 5-1: SerialNumber: syz [ 472.414846][ T4228] usb 5-1: config 0 descriptor?? [ 472.446941][T15283] usb 1-1: MIDIStreaming interface descriptor not found [ 472.474591][ T4228] cm109 5-1:0.8: invalid payload size 64, expected 4 [ 472.491017][ T4228] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input32 [ 472.632576][ T7381] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 472.649016][T15283] usb 1-1: USB disconnect, device number 34 [ 472.760003][T18334] tmpfs: Bad value for 'mpol' [ 472.872048][ T7381] usb 2-1: Using ep0 maxpacket: 8 [ 472.953732][ T21] usb 5-1: USB disconnect, device number 29 [ 472.974332][ T21] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 472.992389][ T7381] usb 2-1: config 7 interface 0 has no altsetting 0 [ 473.152153][ T7381] usb 2-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=58.70 [ 473.161257][ T7381] usb 2-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3 [ 473.169456][ T7381] usb 2-1: Product: syz [ 473.173684][ T7381] usb 2-1: Manufacturer: syz [ 473.185688][ T7381] usb 2-1: SerialNumber: syz [ 473.243774][T18341] netlink: 'syz.0.6663': attribute type 10 has an invalid length. [ 473.476373][ T7381] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 473.562102][ T7381] pwc: Failed to set LED on/off time (-71) [ 473.583004][ T7381] pwc: send_video_command error -71 [ 473.588685][ T7381] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 473.604165][ T7381] Philips webcam: probe of 2-1:7.0 failed with error -71 [ 473.613408][ T7381] usb 2-1: USB disconnect, device number 29 [ 473.690097][T18372] tmpfs: Bad value for 'mpol' [ 473.771778][T18378] loop4: detected capacity change from 0 to 1024 [ 473.856012][T18378] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,nodiscard,user_xattr,,errors=continue. Quota mode: none. [ 473.881618][T18378] EXT4-fs error (device loop4): ext4_get_first_dir_block:3619: inode #11: comm syz.4.6683: directory missing '..' [ 474.047136][T18395] netlink: 'syz.4.6687': attribute type 10 has an invalid length. [ 474.047208][T18397] comedi comedi0: fl512: I/O port conflict (0x3,16) [ 474.184468][T18406] __nla_validate_parse: 5 callbacks suppressed [ 474.184483][T18406] netlink: 448 bytes leftover after parsing attributes in process `syz.3.6694'. [ 474.484248][T18426] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6706'. [ 474.484502][T18420] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6703'. [ 474.495544][T18427] device wg1 entered promiscuous mode [ 474.518103][T18426] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6706'. [ 474.646353][T18433] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6709'. [ 474.685948][T18440] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 474.713110][T18441] xt_CT: You must specify a L4 protocol and not use inversions on it [ 474.894489][T18454] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6719'. [ 474.930529][T18454] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 475.118183][T18479] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6732'. [ 475.210729][T18485] SET target dimension over the limit! [ 475.243762][T18487] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 475.282056][ T21] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 475.449242][T18504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6743'. [ 475.546558][T18512] netlink: zone id is out of range [ 475.552254][ T21] usb 2-1: Using ep0 maxpacket: 8 [ 475.565595][T18512] netlink: set zone limit has 8 unknown bytes [ 475.679413][T18523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6752'. [ 475.688822][ T21] usb 2-1: config 0 has an invalid interface number: 176 but max is 0 [ 475.700838][ T21] usb 2-1: config 0 has no interface number 0 [ 475.726772][ T26] audit: type=1400 audit(1771519034.577:19): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=18526 comm="syz.2.6755" [ 475.746069][ T21] usb 2-1: config 0 interface 176 altsetting 56 bulk endpoint 0x8 has invalid maxpacket 32 [ 475.776594][ T21] usb 2-1: config 0 interface 176 altsetting 56 endpoint 0x7 has invalid maxpacket 16416, setting to 1024 [ 475.821988][ T21] usb 2-1: config 0 interface 176 altsetting 56 bulk endpoint 0x7 has invalid maxpacket 1024 [ 475.854921][ T21] usb 2-1: config 0 interface 176 has no altsetting 0 [ 475.915752][T18542] loop2: detected capacity change from 0 to 256 [ 475.951356][T18542] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 475.982679][T18542] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 476.012970][ T26] audit: type=1326 audit(1771519034.867:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18547 comm="syz.3.6766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15acfe629 code=0x7ffc0000 [ 476.035255][ C1] vkms_vblank_simulate: vblank timer overrun [ 476.049355][T18542] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 476.072676][ T26] audit: type=1326 audit(1771519034.867:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18547 comm="syz.3.6766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15acfe629 code=0x7ffc0000 [ 476.095509][ T21] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=68.dc [ 476.126568][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.144286][ T21] usb 2-1: Product: syz [ 476.148634][ T21] usb 2-1: Manufacturer: syz [ 476.153827][ T21] usb 2-1: SerialNumber: syz [ 476.158802][ T26] audit: type=1326 audit(1771519034.897:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18547 comm="syz.3.6766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7fc15acfe629 code=0x7ffc0000 [ 476.208652][ T21] usb 2-1: config 0 descriptor?? [ 476.217165][T18556] loop3: detected capacity change from 0 to 512 [ 476.221385][ T26] audit: type=1326 audit(1771519034.897:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18547 comm="syz.3.6766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15acfe629 code=0x7ffc0000 [ 476.246635][T18466] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 476.260210][T18559] openvswitch: netlink: Geneve opt len 3 is not a multiple of 4. [ 476.269723][T18466] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 476.277475][ T26] audit: type=1326 audit(1771519034.897:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18547 comm="syz.3.6766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15acfe629 code=0x7ffc0000 [ 476.292638][T18556] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 476.347761][T18556] EXT4-fs (loop3): mount failed [ 476.458606][T18571] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 476.469894][T18571] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 476.480171][T18575] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6778'. [ 476.613859][T18580] netlink: 'syz.2.6782': attribute type 46 has an invalid length. [ 476.640214][T18585] netlink: 'syz.3.6783': attribute type 1 has an invalid length. [ 476.703521][ T21] usb 2-1: probing VID:PID(0424:012C) [ 476.722868][ T21] usb 2-1: vub300 testing BULK OUT EndPoint(0) 08 [ 476.742384][ T21] usb 2-1: vub300 testing BULK OUT EndPoint(1) 07 [ 476.766956][ T21] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 476.788222][ T21] vub300: probe of 2-1:0.176 failed with error -22 [ 476.820437][ T21] usb 2-1: USB disconnect, device number 30 [ 477.002131][T12381] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 477.076526][T18616] loop2: detected capacity change from 0 to 64 [ 477.168051][T18625] loop4: detected capacity change from 0 to 128 [ 477.206243][T18627] loop3: detected capacity change from 0 to 512 [ 477.252184][T18627] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 477.252184][T18627] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 477.252184][T18627] [ 477.261832][T18625] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 477.318957][T18625] FAT-fs (loop4): Filesystem has been set read-only [ 477.328577][T18625] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 477.338828][T18625] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 477.369371][T18627] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,errors=remount-ro,nouser_xattr,nobarrier,. Quota mode: writeback. [ 477.383602][T12381] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 477.394384][T15283] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 477.400143][T18627] ext4 filesystem being mounted at /1349/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 477.435239][T18627] EXT4-fs error (device loop3): ext4_get_verity_descriptor_location:338: inode #15: comm syz.3.6805: verity file corrupted; can't find descriptor [ 477.492563][T18627] EXT4-fs (loop3): Remounting filesystem read-only [ 477.516691][T18627] fs-verity (loop3, inode 15): Error -117 getting verity descriptor size [ 477.552152][T12381] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 477.564935][T12381] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.590272][T12381] usb 1-1: Product: syz [ 477.594720][T12381] usb 1-1: Manufacturer: syz [ 477.599776][T12381] usb 1-1: SerialNumber: syz [ 477.614893][T12381] usb 1-1: config 0 descriptor?? [ 477.652706][T12381] hub 1-1:0.0: bad descriptor, ignoring hub [ 477.669305][T12381] hub: probe of 1-1:0.0 failed with error -5 [ 477.702790][T18648] netlink: 'syz.2.6813': attribute type 10 has an invalid length. [ 477.722352][T18648] device team0 entered promiscuous mode [ 477.727923][T18648] device team_slave_0 entered promiscuous mode [ 477.744506][T18648] device team_slave_1 entered promiscuous mode [ 477.756919][T18648] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 477.853668][T18658] usb usb8: usbfs: process 18658 (syz.2.6817) did not claim interface 0 before use [ 477.892307][T15283] usb 2-1: unable to get BOS descriptor or descriptor too short [ 477.936518][T15283] usb 2-1: not running at top speed; connect to a high speed hub [ 477.973990][T12381] usb 1-1: USB disconnect, device number 35 [ 478.053284][T15283] usb 2-1: config 9 has an invalid interface number: 198 but max is 0 [ 478.065683][T15283] usb 2-1: config 9 has no interface number 0 [ 478.071824][T15283] usb 2-1: config 9 interface 198 has no altsetting 0 [ 478.251953][T18680] loop4: detected capacity change from 0 to 8192 [ 478.280249][T18680] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 478.292102][T15283] usb 2-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=6f.2b [ 478.301160][T15283] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.315667][T18680] REISERFS (device loop4): using ordered data mode [ 478.325557][T15283] usb 2-1: Product: syz [ 478.329892][T18680] reiserfs: using flush barriers [ 478.338452][T15283] usb 2-1: Manufacturer: syz [ 478.343433][T15283] usb 2-1: SerialNumber: syz [ 478.347727][T18680] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 478.502145][T18680] REISERFS (device loop4): checking transaction log (loop4) [ 478.687574][T18680] REISERFS (device loop4): Using tea hash to sort names [ 478.699833][T18680] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 478.703611][T15283] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 478.724428][T18701] xt_bpf: check failed: parse error [ 478.729793][T18680] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 478.738616][T15283] dvb-usb: bulk message failed: -22 (3/0) [ 478.805914][T15283] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 478.840614][T15283] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 error while loading driver (-19) [ 478.893979][T15283] dvb_usb_umt_010: probe of 2-1:9.198 failed with error -22 [ 478.930225][T15283] usb 2-1: USB disconnect, device number 31 [ 479.424009][T18719] loop3: detected capacity change from 0 to 4096 [ 479.455137][T18739] loop4: detected capacity change from 0 to 4096 [ 479.502393][T12381] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 479.541500][T18739] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 479.563959][T18719] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 479.620946][T18739] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 479.707072][T18739] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 479.730284][T18739] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 479.769301][T18739] ntfs: volume version 3.1. [ 479.872184][T12381] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 479.892662][T12381] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 479.992240][T12381] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 480.050601][T12381] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 480.068467][T12381] usb 2-1: SerialNumber: syz [ 480.164410][T12381] usb 2-1: 0:2 : does not exist [ 480.198263][T18776] __nla_validate_parse: 2 callbacks suppressed [ 480.198279][T18776] netlink: 207496 bytes leftover after parsing attributes in process `syz.0.6875'. [ 480.332154][ T7381] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 480.601386][ T13] usb 2-1: USB disconnect, device number 32 [ 480.645287][T18770] loop4: detected capacity change from 0 to 32768 [ 480.781077][T18804] netlink: 'syz.0.6889': attribute type 10 has an invalid length. [ 480.840428][T18804] batman_adv: batadv0: Adding interface: netdevsim0 [ 480.852271][ T7381] usb 4-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e [ 480.865891][T18804] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.887949][ T7381] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.899784][T18804] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 480.930108][ T7381] usb 4-1: Product: syz [ 480.935084][ T7381] usb 4-1: Manufacturer: syz [ 480.946561][ T7381] usb 4-1: SerialNumber: syz [ 480.984108][ T7381] usb 4-1: config 0 descriptor?? [ 481.042809][ T7381] hub 4-1:0.0: bad descriptor, ignoring hub [ 481.048757][ T7381] hub: probe of 4-1:0.0 failed with error -5 [ 481.094835][ T7381] usbsevseg 4-1:0.0: USB 7 Segment device now attached [ 481.232103][T18824] netlink: 'syz.0.6899': attribute type 10 has an invalid length. [ 481.239946][T18824] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6899'. [ 481.300083][T18824] device team0 entered promiscuous mode [ 481.308896][T18826] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6900'. [ 481.335551][T18824] device team_slave_0 entered promiscuous mode [ 481.345470][T18826] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 481.347761][T18824] device team_slave_1 entered promiscuous mode [ 481.360432][T18824] device dummy0 entered promiscuous mode [ 481.372013][T18824] device ÿÿÿÿÿÿ entered promiscuous mode [ 481.378625][T18824] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.392405][T18824] bridge0: port 3(team0) entered blocking state [ 481.399679][T18824] bridge0: port 3(team0) entered disabled state [ 481.402478][ T7381] usb 4-1: USB disconnect, device number 25 [ 481.438849][ T7381] usbsevseg 4-1:0.0: USB 7 Segment now disconnected [ 481.533824][T18832] loop1: detected capacity change from 0 to 512 [ 481.652050][T18832] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 481.714034][T18832] EXT4-fs (loop1): mount failed [ 481.811419][T18816] loop4: detected capacity change from 0 to 32768 [ 481.990382][T18816] XFS (loop4): Mounting V5 Filesystem [ 482.111698][T18872] netlink: 'syz.3.6917': attribute type 10 has an invalid length. [ 482.134098][T18872] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6917'. [ 482.157440][T18872] device team0 entered promiscuous mode [ 482.202080][ T7381] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 482.218530][T18872] device team_slave_0 entered promiscuous mode [ 482.228707][T18816] XFS (loop4): Ending clean mount [ 482.230623][T18872] device team_slave_1 entered promiscuous mode [ 482.250134][T18872] device wlan1 entered promiscuous mode [ 482.279146][T18872] device ÿÿÿÿÿÿ entered promiscuous mode [ 482.290908][ T4197] XFS (loop4): Unmounting Filesystem [ 482.291646][T18872] bridge0: port 3(team0) entered blocking state [ 482.339418][T18872] bridge0: port 3(team0) entered disabled state [ 482.662344][ T7381] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 482.671455][ T7381] usb 2-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 482.684941][ T7381] usb 2-1: Manufacturer: syz [ 482.708802][ T7381] usb 2-1: config 0 descriptor?? [ 482.716029][T18906] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6935'. [ 482.725499][T18906] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6935'. [ 482.729942][T18908] loop4: detected capacity change from 0 to 1024 [ 482.763083][ T7381] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 482.769605][T18910] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6937'. [ 482.778000][ T7381] usb 2-1: Detected FT-X [ 482.780041][ T21] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 482.842154][ T13] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 482.868427][T18916] netlink: 'syz.4.6940': attribute type 10 has an invalid length. [ 482.882806][T18916] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6940'. [ 482.893285][T18916] bridge0: port 4(team0) entered blocking state [ 482.899778][T18916] bridge0: port 4(team0) entered disabled state [ 482.909459][T18916] bridge0: port 4(team0) entered blocking state [ 482.915800][T18916] bridge0: port 4(team0) entered forwarding state [ 482.976627][T18852] loop1: detected capacity change from 0 to 256 [ 483.048315][T18930] loop4: detected capacity change from 0 to 512 [ 483.049126][T18929] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6945'. [ 483.081519][T18852] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 483.081763][T18929] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6945'. [ 483.103300][ T21] usb 4-1: Using ep0 maxpacket: 8 [ 483.132275][ T7381] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 483.141434][T18930] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 483.141434][T18930] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 483.141434][T18930] [ 483.172230][ T7381] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 483.212267][ T7381] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 483.220903][ T7381] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 483.241832][T18930] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,errors=remount-ro,nouser_xattr,nobarrier,. Quota mode: writeback. [ 483.272059][ T13] usb 3-1: unable to get BOS descriptor or descriptor too short [ 483.276589][T18930] ext4 filesystem being mounted at /1236/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 483.305563][ T7381] usb 2-1: USB disconnect, device number 33 [ 483.324920][T18930] EXT4-fs error (device loop4): ext4_get_verity_descriptor_location:338: inode #15: comm syz.4.6946: verity file corrupted; can't find descriptor [ 483.346507][T18930] EXT4-fs (loop4): Remounting filesystem read-only [ 483.355158][T18930] fs-verity (loop4, inode 15): Error -117 getting verity descriptor size [ 483.369081][ T7381] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 483.387178][ T13] usb 3-1: config 129 has an invalid interface number: 135 but max is 0 [ 483.396525][ T13] usb 3-1: config 129 has an invalid interface number: 5 but max is 0 [ 483.410166][ T7381] ftdi_sio 2-1:0.0: device disconnected [ 483.419627][ T13] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 483.430013][ T13] usb 3-1: config 129 has no interface number 0 [ 483.432296][ T21] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03 [ 483.448012][ T13] usb 3-1: config 129 has no interface number 1 [ 483.455378][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.459049][ T13] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 483.464715][T18943] netlink: 'syz.0.6953': attribute type 3 has an invalid length. [ 483.483462][ T13] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 483.485020][ T21] usb 4-1: Product: syz [ 483.499756][ T21] usb 4-1: Manufacturer: syz [ 483.500440][ T13] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 483.515049][ T21] usb 4-1: SerialNumber: syz [ 483.546071][ T21] usb 4-1: config 0 descriptor?? [ 483.550884][ T13] usb 3-1: config 129 interface 135 has no altsetting 0 [ 483.567522][ T13] usb 3-1: config 129 interface 5 has no altsetting 0 [ 483.603222][ T21] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 483.613044][ T21] dvb-usb: bulk message failed: -22 (2/0) [ 483.618764][ T21] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 483.647787][T18948] netlink: 'syz.4.6955': attribute type 1 has an invalid length. [ 483.652191][ T21] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 483.672216][ T21] usb 4-1: media controller created [ 483.707781][T18953] netlink: 'syz.1.6954': attribute type 10 has an invalid length. [ 483.732837][T18955] loop4: detected capacity change from 0 to 8 [ 483.742608][ T21] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 483.749559][T18953] device team0 entered promiscuous mode [ 483.769581][T18955] SQUASHFS error: zlib decompression failed, data probably corrupt [ 483.781700][T18953] device team_slave_0 entered promiscuous mode [ 483.788967][T18955] SQUASHFS error: Failed to read block 0x9b: -5 [ 483.794992][T18953] device team_slave_1 entered promiscuous mode [ 483.797841][ T21] dvb-usb: bulk message failed: -22 (1/0) [ 483.807272][T18955] SQUASHFS error: Unable to read metadata cache entry [99] [ 483.815332][ T21] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 483.817002][T18953] bridge0: port 3(team0) entered blocking state [ 483.829171][T18955] SQUASHFS error: Unable to read inode 0x127 [ 483.832791][ T13] usb 3-1: string descriptor 0 read error: -22 [ 483.845953][ T13] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 483.855593][T18953] bridge0: port 3(team0) entered disabled state [ 483.862452][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.863683][T18953] bridge0: port 3(team0) entered blocking state [ 483.876726][T18953] bridge0: port 3(team0) entered forwarding state [ 483.903208][ T21] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input33 [ 483.916800][ T21] dvb-usb: schedule remote query interval to 50 msecs. [ 483.923797][ T21] dvb-usb: bulk message failed: -22 (2/0) [ 483.927974][ T13] usb 3-1: MIDIStreaming interface descriptor not found [ 483.937089][ T21] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 484.048929][ T21] usb 4-1: USB disconnect, device number 26 [ 484.193698][ T21] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 484.292061][T18971] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 484.312034][ T4191] usb 3-1: USB disconnect, device number 28 [ 484.588896][T18988] sock: sock_timestamping_bind_phc: sock not bind to device [ 484.721403][T18969] loop1: detected capacity change from 0 to 32768 [ 484.798021][T18969] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.6963 (18969) [ 484.815947][T18993] loop3: detected capacity change from 0 to 8192 [ 484.855366][T18969] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 484.858638][T18993] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 484.873636][T18969] BTRFS info (device loop1): using free space tree [ 484.892415][T18969] BTRFS info (device loop1): has skinny extents [ 484.907822][T18993] REISERFS (device loop3): using ordered data mode [ 484.915074][T18993] reiserfs: using flush barriers [ 484.946680][T18993] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 484.965348][T18993] REISERFS (device loop3): checking transaction log (loop3) [ 485.021350][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 485.021364][ T26] audit: type=1800 audit(1771519043.867:25): pid=18996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.4.6977" name="/newroot/1246/bus" dev="tmpfs" ino=6361 res=0 errno=0 [ 485.158558][T19023] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 485.159767][T19022] loop4: detected capacity change from 0 to 256 [ 485.236984][T18969] BTRFS info (device loop1): enabling ssd optimizations [ 485.308126][T19022] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 485.347172][T18993] REISERFS (device loop3): Using tea hash to sort names [ 485.364847][T19029] __nla_validate_parse: 2 callbacks suppressed [ 485.364863][T19029] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6981'. [ 485.382050][T19029] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6981'. [ 485.385898][T19022] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 485.410310][T18993] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 485.439683][T19022] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 485.456896][T18993] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 485.514389][T19032] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6984'. [ 486.305002][T19089] netlink: 'syz.3.6988': attribute type 10 has an invalid length. [ 486.338761][T19077] loop2: detected capacity change from 0 to 8192 [ 486.340847][T19092] Cannot find set identified by id 4 to match [ 486.365842][T19089] device netdevsim0 left promiscuous mode [ 486.391718][T19077] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 486.407135][T19089] batman_adv: batadv0: Adding interface: netdevsim0 [ 486.414991][T19077] REISERFS (device loop2): using ordered data mode [ 486.421501][T19077] reiserfs: using flush barriers [ 486.467207][T19077] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 486.493150][T19089] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.498278][T19103] tmpfs: Bad value for 'mpol' [ 486.592317][T19077] REISERFS (device loop2): checking transaction log (loop2) [ 486.641545][T19089] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 486.681358][T19112] usb usb8: usbfs: process 19112 (syz.1.7017) did not claim interface 0 before use [ 486.877876][T19077] REISERFS (device loop2): Using tea hash to sort names [ 486.891656][T19077] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 486.938503][T19077] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 487.220666][ T4227] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 487.320731][T19156] netlink: 'syz.2.7034': attribute type 10 has an invalid length. [ 487.341080][T19156] device netdevsim0 left promiscuous mode [ 487.354345][T19156] batman_adv: batadv0: Adding interface: netdevsim0 [ 487.367824][T19156] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1038) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.401446][T19156] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 487.525280][ T4227] usb 2-1: too many configurations: 129, using maximum allowed: 8 [ 487.613463][ T4227] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 487.624693][ T4227] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 14336, setting to 64 [ 487.722849][ T4227] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 487.733947][ T4227] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 14336, setting to 64 [ 487.772073][T19040] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 487.822421][ T4227] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 487.833511][ T4227] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 14336, setting to 64 [ 487.922087][ T4227] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 487.933142][ T4227] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 14336, setting to 64 [ 488.012081][T19040] usb 1-1: Using ep0 maxpacket: 8 [ 488.022155][ T4227] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 488.033483][ T4227] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 14336, setting to 64 [ 488.122150][ T4227] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 488.133176][ T4227] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 14336, setting to 64 [ 488.222430][ T4227] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 488.233469][ T4227] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 14336, setting to 64 [ 488.302094][T19040] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03 [ 488.311148][T19040] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.319240][T19040] usb 1-1: Product: syz [ 488.323552][ T4227] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 488.334543][T19040] usb 1-1: Manufacturer: syz [ 488.339139][T19040] usb 1-1: SerialNumber: syz [ 488.343828][ T4227] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 14336, setting to 64 [ 488.356497][T19040] usb 1-1: config 0 descriptor?? [ 488.395921][T19040] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 488.405529][T19040] dvb-usb: bulk message failed: -22 (2/0) [ 488.411256][T19040] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 488.432128][T19040] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 488.441768][T19040] usb 1-1: media controller created [ 488.456774][T19040] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 488.475492][T19040] dvb-usb: bulk message failed: -22 (1/0) [ 488.481231][T19040] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 488.522108][ T4227] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 488.531158][ T4227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 488.543126][T19040] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input34 [ 488.554368][ T4227] usb 2-1: Product: syz [ 488.558523][ T4227] usb 2-1: Manufacturer: syz [ 488.565075][ T4227] usb 2-1: SerialNumber: syz [ 488.565642][T19040] dvb-usb: schedule remote query interval to 50 msecs. [ 488.578112][T19040] dvb-usb: bulk message failed: -22 (2/0) [ 488.584830][T19040] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 488.584863][ T4227] usb 2-1: config 0 descriptor?? [ 488.633533][ T4228] dvb-usb: bulk message failed: -22 (1/0) [ 488.640324][ T4228] dvb-usb: error while querying for an remote control event. [ 488.649218][ T4227] hub 2-1:0.0: Invalid hub with more than one config or interface [ 488.657920][ T4227] hub: probe of 2-1:0.0 failed with error -22 [ 488.665934][ T4227] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input35 [ 488.711976][ T4227] dvb-usb: bulk message failed: -22 (1/0) [ 488.717840][ T4227] dvb-usb: error while querying for an remote control event. [ 488.792198][ T4227] dvb-usb: bulk message failed: -22 (1/0) [ 488.798100][ T4227] dvb-usb: error while querying for an remote control event. [ 488.862069][ T4227] dvb-usb: bulk message failed: -22 (1/0) [ 488.867807][ T4227] dvb-usb: error while querying for an remote control event. [ 488.882783][ T4227] usb 2-1: USB disconnect, device number 34 [ 488.922352][ T13] usb 1-1: USB disconnect, device number 36 [ 488.946016][ T13] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 489.420251][T19175] program syz.2.7046 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 489.420904][T19177] loop3: detected capacity change from 0 to 256 [ 489.503682][T19183] netlink: 108 bytes leftover after parsing attributes in process `syz.4.7051'. [ 489.662274][T19172] loop1: detected capacity change from 0 to 8192 [ 489.740513][T19172] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 489.823694][T19172] REISERFS (device loop1): using ordered data mode [ 489.830227][T19172] reiserfs: using flush barriers [ 489.849225][T19172] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 489.892484][T19172] REISERFS (device loop1): checking transaction log (loop1) [ 489.920860][T19208] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7063'. [ 490.118264][T19172] REISERFS (device loop1): Using tea hash to sort names [ 490.157949][T19172] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 490.202470][T19224] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 490.229118][T19172] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 490.570211][T19251] loop2: detected capacity change from 0 to 512 [ 490.681547][T19251] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 490.717128][T19251] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 490.742000][T19251] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 490.789159][T19259] loop3: detected capacity change from 0 to 4096 [ 490.796556][T19251] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 490.823689][T19251] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 490.831624][T19251] EXT4-fs (loop2): failed to initialize system zone (-117) [ 490.840191][T19251] EXT4-fs (loop2): mount failed [ 490.887152][T19259] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 490.933240][ T13] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 490.984829][T19274] netlink: 'syz.4.7094': attribute type 11 has an invalid length. [ 490.993361][T19274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7094'. [ 491.091102][T19280] ieee802154 phy1 wpan1: encryption failed: -22 [ 491.203229][T19288] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7101'. [ 491.232730][T19290] device ip6gretap1 entered promiscuous mode [ 491.287263][ T13] usb 1-1: Using ep0 maxpacket: 32 [ 491.302131][ T4227] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 491.412269][ T13] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 491.552045][ T4227] usb 5-1: Using ep0 maxpacket: 32 [ 491.569181][T19312] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7113'. [ 491.578486][T19312] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7113'. [ 491.597792][ T4228] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 491.632565][ T13] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 491.641639][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.666811][ T13] usb 1-1: Product: syz [ 491.671121][ T13] usb 1-1: Manufacturer: syz [ 491.676056][ T4227] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 491.676618][ T13] usb 1-1: SerialNumber: syz [ 491.692285][ T4227] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 491.711983][ T4227] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 491.721817][ T13] usb 1-1: config 0 descriptor?? [ 491.730442][ T4227] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 491.745472][T19316] loop2: detected capacity change from 0 to 128 [ 491.773948][ T13] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 491.827132][T19316] ADFS-fs (loop2): error: can't find an ADFS filesystem on dev loop2. [ 491.912232][ T4227] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 491.943092][ T4227] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.951118][ T4227] usb 5-1: Product: syz [ 491.965826][ T4227] usb 5-1: Manufacturer: syz [ 491.975943][ T4227] usb 5-1: SerialNumber: syz [ 491.995677][ T4228] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 492.011988][ T4228] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 492.023100][ T4227] usb 5-1: config 0 descriptor?? [ 492.035974][ T4228] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 492.059280][ T4228] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 492.071573][ T4227] usb 5-1: no audio or video endpoints found [ 492.098159][ T4228] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.190860][T19337] loop1: detected capacity change from 0 to 1764 [ 492.207331][ T4228] snd-usb-audio: probe of 4-1:27.0 failed with error -2 [ 492.222367][ T13] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 492.229438][ T13] gspca_pac7302: probe of 1-1:0.0 failed with error -71 [ 492.240294][ T13] usb 1-1: USB disconnect, device number 37 [ 492.275825][ T4228] usb 5-1: USB disconnect, device number 30 [ 492.276072][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 492.294926][T19337] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 492.406848][ T4191] usb 4-1: USB disconnect, device number 27 [ 492.452164][T19040] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 492.628533][T19356] xt_connbytes: Forcing CT accounting to be enabled [ 492.902350][T19040] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 492.922033][T19040] usb 3-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 492.946672][T19040] usb 3-1: Manufacturer: syz [ 492.963235][T19040] usb 3-1: config 0 descriptor?? [ 493.003236][T19040] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 493.011358][T19040] usb 3-1: Detected FT-X [ 493.219191][T19338] loop2: detected capacity change from 0 to 256 [ 493.308254][T19338] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 493.402258][T19040] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 493.422162][T19040] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 493.461065][T19040] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 493.481312][T19040] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 493.517554][T19040] usb 3-1: USB disconnect, device number 29 [ 493.572361][T19427] Zero length message leads to an empty skb [ 493.629048][T19040] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 493.677750][T19040] ftdi_sio 3-1:0.0: device disconnected [ 493.727406][T19439] netlink: 'syz.4.7174': attribute type 10 has an invalid length. [ 493.736854][T19439] device syz_tun entered promiscuous mode [ 493.790278][T19439] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 493.977347][T19452] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 494.203216][T19468] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7189'. [ 494.276402][T19473] loop2: detected capacity change from 0 to 256 [ 494.320847][T19433] loop1: detected capacity change from 0 to 32768 [ 494.420827][T19433] XFS (loop1): Mounting V5 Filesystem [ 494.622321][T19040] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 494.674596][T19433] XFS (loop1): Ending clean mount [ 494.679919][T19505] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7204'. [ 494.690992][T19498] loop4: detected capacity change from 0 to 4096 [ 494.715204][T19498] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 494.775666][ T4187] XFS (loop1): Unmounting Filesystem [ 494.818490][T19498] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 494.992596][T19040] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 495.021833][T19040] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.045273][T19040] usb 4-1: config 0 descriptor?? [ 495.332042][T19040] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 495.341227][T19541] netlink: 'syz.1.7206': attribute type 10 has an invalid length. [ 495.368655][T19040] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 495.432036][T19040] [drm:udl_init] *ERROR* Selecting channel failed [ 495.479460][T19040] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 495.484443][T19552] loop4: detected capacity change from 0 to 256 [ 495.509436][T19040] [drm] Initialized udl on minor 2 [ 495.542038][T19040] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 495.559159][T19040] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 495.578814][T19563] netlink: 'syz.2.7232': attribute type 3 has an invalid length. [ 495.612199][T19040] usb 4-1: USB disconnect, device number 28 [ 495.614094][T19552] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 495.621456][T19047] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 495.672924][T19047] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 495.688271][T19552] exFAT-fs (loop4): error, invalid access to FAT free cluster (entry 0x00000008) [ 495.700591][T19047] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 495.712004][T19552] exFAT-fs (loop4): Filesystem has been set read-only [ 495.764903][T19571] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.7235'. [ 495.888293][T19579] netlink: 144 bytes leftover after parsing attributes in process `syz.3.7240'. [ 495.965103][T19587] loop2: detected capacity change from 0 to 256 [ 496.028476][T19587] MINIX-fs: mounting file system with errors, running fsck is recommended [ 496.231853][T19603] 9pnet: p9_fd_create_unix (19603): problem connecting socket: ./file0: -111 [ 496.447318][T19617] loop1: detected capacity change from 0 to 8 [ 496.558493][T19617] SQUASHFS error: lzo decompression failed, data probably corrupt [ 496.592317][T19617] SQUASHFS error: Failed to read block 0x1c0: -5 [ 496.598672][T19617] SQUASHFS error: Unable to read metadata cache entry [1be] [ 496.772006][T19040] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 496.806559][T19639] MTD: Attempt to mount non-MTD device "./file0" [ 496.822505][T19639] ./file0: Can't open blockdev [ 497.022124][T19040] usb 4-1: Using ep0 maxpacket: 16 [ 497.142206][T19040] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 497.151209][T19040] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 497.193467][T19040] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 497.219390][T19675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7286'. [ 497.238743][T19040] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 497.286119][T19040] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 497.320848][T19040] usb 4-1: config 1 interface 0 has no altsetting 0 [ 497.340942][T19040] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 497.388302][T19040] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.394741][T19691] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7294'. [ 497.436421][T19691] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7294'. [ 497.443561][T19040] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 497.446991][T19691] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7294'. [ 497.499718][T19691] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7294'. [ 497.507116][T19696] loop1: detected capacity change from 0 to 512 [ 497.587897][T19696] EXT4-fs (loop1): Ignoring removed oldalloc option [ 497.654049][T19704] netlink: 'syz.4.7299': attribute type 13 has an invalid length. [ 497.662520][T19040] scsi host1: usb-storage 4-1:1.0 [ 497.682894][T19696] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,block_validity,grpid,oldalloc,,errors=continue. Quota mode: writeback. [ 497.722455][T19696] ext4 filesystem being mounted at /1328/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 497.848418][T19718] netlink: 'syz.4.7305': attribute type 1 has an invalid length. [ 497.860582][T19040] usb 4-1: USB disconnect, device number 29 [ 497.909718][T19718] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7305'. [ 497.926089][T19722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7307'. [ 497.929183][T19718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7305'. [ 498.103474][T19736] loop1: detected capacity change from 0 to 8 [ 498.251854][T19746] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.7318'. [ 498.421106][T19756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7323'. [ 498.537206][T19763] loop3: detected capacity change from 0 to 1764 [ 498.626900][T19763] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 498.652262][ T4227] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 498.659074][T19770] 9pnet: p9_fd_create_unix (19770): problem connecting socket: ./file0: -111 [ 498.694777][T19744] loop2: detected capacity change from 0 to 32768 [ 498.747688][T19744] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 scanned by syz.2.7317 (19744) [ 498.804047][T19776] loop1: detected capacity change from 0 to 8 [ 498.846241][T19744] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 498.874856][T19744] BTRFS info (device loop2): enabling ssd optimizations [ 498.907441][T19744] BTRFS info (device loop2): not using ssd optimizations [ 498.915920][ T4227] usb 1-1: Using ep0 maxpacket: 32 [ 498.924060][T19776] SQUASHFS error: Failed to read block 0x6de: -5 [ 498.952989][T19776] SQUASHFS error: Unable to read metadata cache entry [6dc] [ 498.956390][T19744] BTRFS info (device loop2): turning off barriers [ 498.983796][T19785] loop3: detected capacity change from 0 to 256 [ 498.998902][T19776] SQUASHFS error: Failed to read block 0x63a: -5 [ 499.006256][T19744] BTRFS info (device loop2): using free space tree [ 499.006359][T19784] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway [ 499.023374][T19744] BTRFS info (device loop2): has skinny extents [ 499.036349][T19776] SQUASHFS error: Unable to read metadata cache entry [638] [ 499.037723][ T4227] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 499.044583][T19776] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 499.081998][ T4227] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 499.096199][T19785] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 499.219224][T19785] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000008) [ 499.228769][ T4227] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 499.231050][T19785] exFAT-fs (loop3): Filesystem has been set read-only [ 499.238125][ T4227] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 499.254700][ T4227] usb 1-1: Product: syz [ 499.260523][ T4227] usb 1-1: Manufacturer: syz [ 499.331113][T19805] netlink: 'syz.4.7338': attribute type 1 has an invalid length. [ 499.343925][ T4227] hub 1-1:4.0: USB hub found [ 499.388412][T19744] BTRFS warning (device loop2): can't clear the mixed_groups,compress_lzo,big_metadata,extended_iref,raid56,skinny_metadata,no_holes,raid1c34,incompat:12,incompat:13,incompat:15,incompat:16,incompat:18,incompat:23,incompat:25,incompat:30,incompat:31,incompat:32,incompat:33,incompat:36,incompat:37,incompat:39,incompat:41,incompat:43,incompat:46,incompat:48,incompat:49,incompat:50,incompat:54,incompat:60,incompat:62,incompat:63 feature bits while mounted [ 499.572475][ T4227] hub 1-1:4.0: 8 ports detected [ 499.596124][ T4227] hub 1-1:4.0: insufficient power available to use all downstream ports [ 499.817215][ T4227] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 499.823822][ T4227] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 499.890584][ T4227] usb 1-1: USB disconnect, device number 38 [ 500.020765][T19818] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,usrquota,minixdf,nombcache,,errors=continue. Quota mode: writeback. [ 500.040793][T19818] ext4 filesystem being mounted at /1416/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 500.076081][T19818] EXT4-fs error (device loop3): ext4_empty_dir:3145: inode #12: block 32: comm syz.3.7344: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 500.133404][T19818] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz.3.7344: directory missing '.' [ 500.224847][T19838] set_capacity_and_notify: 2 callbacks suppressed [ 500.224863][T19838] loop2: detected capacity change from 0 to 256 [ 500.274246][T19838] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 500.329701][T19838] exFAT-fs (loop2): error, invalid access to FAT free cluster (entry 0x00000008) [ 500.351172][T19838] exFAT-fs (loop2): Filesystem has been set read-only [ 500.480067][T19850] netlink: 'syz.2.7357': attribute type 21 has an invalid length. [ 500.512151][T19850] netlink: 'syz.2.7357': attribute type 4 has an invalid length. [ 501.263751][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.552145][T12381] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 501.656856][T19944] device ~ÿ entered promiscuous mode [ 501.949614][T19924] loop4: detected capacity change from 0 to 32768 [ 501.956689][T12381] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 501.982732][T19961] IPVS: lc: FWM 3 0x00000003 - no destination available [ 501.989817][ C1] IPVS: lc: FWM 3 0x00000003 - no destination available [ 502.009374][T12381] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.038748][T12381] usb 2-1: config 0 descriptor?? [ 502.213422][T19924] XFS (loop4): Mounting V5 Filesystem [ 502.448100][T19924] XFS (loop4): Ending clean mount [ 502.532346][T12381] hackrf 2-1:0.0: usb_control_msg() failed -71 request 0f [ 502.549730][T12381] hackrf 2-1:0.0: Could not detect board [ 502.570012][T12381] hackrf: probe of 2-1:0.0 failed with error -71 [ 502.607551][T12381] usb 2-1: USB disconnect, device number 35 [ 502.652873][ T4197] XFS (loop4): Unmounting Filesystem [ 502.809363][ T7381] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 502.970624][T20024] loop3: detected capacity change from 0 to 1024 [ 503.102199][ T7381] usb 3-1: Using ep0 maxpacket: 16 [ 503.137810][T20032] __nla_validate_parse: 8 callbacks suppressed [ 503.137826][T20032] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7437'. [ 503.142044][ T13] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 503.242296][ T7381] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 503.251029][ T7381] usb 3-1: config 0 has no interface number 0 [ 503.261161][ T7381] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 503.272553][ T7381] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 503.329046][T20044] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 503.343211][T20044] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 503.413708][ T7381] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 503.423111][ T7381] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 503.431829][ T7381] usb 3-1: Product: syz [ 503.444946][ T7381] usb 3-1: SerialNumber: syz [ 503.464517][ T7381] usb 3-1: config 0 descriptor?? [ 503.503897][ T7381] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 503.522259][ T7381] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input36 [ 503.556097][ T13] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 503.577034][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.595813][ T13] usb 1-1: config 0 descriptor?? [ 503.742102][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 503.780667][T20037] loop3: detected capacity change from 0 to 32768 [ 503.820610][T20066] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7451'. [ 503.847481][T20037] XFS (loop3): Mounting V5 Filesystem [ 503.922964][T20037] XFS (loop3): Ending clean mount [ 503.932081][ T13] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 503.940726][ T13] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 503.949342][T20076] netlink: 'syz.1.7453': attribute type 28 has an invalid length. [ 503.954195][T19071] usb 3-1: USB disconnect, device number 30 [ 503.962007][ T7381] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 503.980348][ T13] [drm:udl_init] *ERROR* Selecting channel failed [ 503.980577][T20076] netlink: 'syz.1.7453': attribute type 29 has an invalid length. [ 504.006197][ T13] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 504.017452][T19071] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 504.018439][ T13] [drm] Initialized udl on minor 2 [ 504.033851][T20076] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7453'. [ 504.043883][ T4186] XFS (loop3): Unmounting Filesystem [ 504.052792][ T13] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 504.070027][ T13] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 504.119143][ T13] usb 1-1: USB disconnect, device number 39 [ 504.139604][ T4191] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 504.158819][ T4191] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 504.173768][ T4191] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 504.242518][ T7381] usb 5-1: Using ep0 maxpacket: 32 [ 504.285414][T20084] loop1: detected capacity change from 0 to 8 [ 504.372411][ T7381] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 504.380620][ T7381] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 504.414614][ T7381] usb 5-1: config 0 has no interface number 0 [ 504.421134][ T7381] usb 5-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 504.431821][ T7381] usb 5-1: config 0 interface 133 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 504.443726][ T7381] usb 5-1: config 0 interface 133 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 504.682360][ T7381] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 504.701533][ T7381] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.753113][ T7381] usb 5-1: Product: syz [ 504.757314][ T7381] usb 5-1: Manufacturer: syz [ 504.791772][ T7381] usb 5-1: SerialNumber: syz [ 504.794016][T20111] loop2: detected capacity change from 0 to 128 [ 504.806990][ T7381] usb 5-1: config 0 descriptor?? [ 504.852480][T20059] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 504.905317][T20120] netlink: 'syz.3.7475': attribute type 1 has an invalid length. [ 504.930164][T20120] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7475'. [ 505.095257][T19071] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 505.199536][T20144] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20001 [ 505.245232][ T7381] usb 5-1: probing VID:PID(0424:012C) [ 505.256953][ T7381] usb 5-1: vub300 testing BULK OUT EndPoint(0) 0B [ 505.263805][T12383] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 505.280503][T20148] overlayfs: workdir and upperdir must be separate subtrees [ 505.281234][ T7381] usb 5-1: vub300 testing UNKNOWN EndPoint(1) 0F [ 505.312148][ T7381] usb 5-1: vub300 ignoring EndPoint(1) 0F [ 505.322089][ T7381] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 505.348718][T20150] loop3: detected capacity change from 0 to 2048 [ 505.357713][ T7381] vub300: probe of 5-1:0.133 failed with error -22 [ 505.375381][ T7381] usb 5-1: USB disconnect, device number 31 [ 505.392191][T20154] loop2: detected capacity change from 0 to 256 [ 505.472210][T19071] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 505.475229][T20155] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 505.483276][T20154] FAT-fs (loop2): Directory bread(block 64) failed [ 505.521365][ T26] audit: type=1800 audit(1771519064.367:26): pid=20150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7490" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 505.522018][T19071] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.555584][T20154] FAT-fs (loop2): Directory bread(block 65) failed [ 505.562565][T20154] FAT-fs (loop2): Directory bread(block 66) failed [ 505.569172][T20154] FAT-fs (loop2): Directory bread(block 67) failed [ 505.578505][T19071] usb 2-1: config 0 descriptor?? [ 505.585159][T20154] FAT-fs (loop2): Directory bread(block 68) failed [ 505.592429][T20154] FAT-fs (loop2): Directory bread(block 69) failed [ 505.594989][T12383] usb 1-1: too many configurations: 129, using maximum allowed: 8 [ 505.599075][T20154] FAT-fs (loop2): Directory bread(block 70) failed [ 505.614163][T20154] FAT-fs (loop2): Directory bread(block 71) failed [ 505.635592][T20154] FAT-fs (loop2): Directory bread(block 72) failed [ 505.637531][T20150] NILFS (loop3): error -2 truncating bmap (ino=16) [ 505.642865][T20154] FAT-fs (loop2): Directory bread(block 73) failed [ 505.722313][T12383] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 505.727903][T20159] netlink: 'syz.4.7494': attribute type 1 has an invalid length. [ 505.751928][T12383] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 14336, setting to 64 [ 505.770645][ T26] audit: type=1800 audit(1771519064.617:27): pid=20154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7492" name="file1" dev="loop2" ino=1048632 res=0 errno=0 [ 505.798181][T20155] ------------[ cut here ]------------ [ 505.804156][T20155] WARNING: CPU: 0 PID: 20155 at fs/nilfs2/dat.c:200 nilfs_dat_commit_end+0x5ac/0x6b0 [ 505.813887][T20155] Modules linked in: [ 505.817790][T20155] CPU: 0 PID: 20155 Comm: segctord Not tainted syzkaller #0 [ 505.825307][T20155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 505.835425][T20155] RIP: 0010:nilfs_dat_commit_end+0x5ac/0x6b0 [ 505.841412][T20155] Code: 8b 34 24 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b8 54 03 00 e8 d3 63 6a fe e8 ae be f1 fd e9 b8 fc ff ff e8 c4 63 6a fe <0f> 0b e9 16 fc ff ff e8 b8 63 6a fe e8 93 be f1 fd e9 74 fe ff ff [ 505.861075][T20155] RSP: 0018:ffffc90003967390 EFLAGS: 00010293 [ 505.867190][T20155] RAX: ffffffff830ebe7c RBX: ffff8880794131a0 RCX: ffff88807ba31dc0 [ 505.875261][T20155] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 00000000003f0002 [ 505.882170][T19071] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 505.883400][T20155] RBP: 0000000000000003 R08: ffff88807542dcb7 R09: 1ffff1100ea85b96 [ 505.892001][T19071] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 505.899916][T20155] R10: dffffc0000000000 R11: ffffed100ea85b97 R12: ffff88807ba33548 [ 505.915650][T20155] R13: ffff888025d3b9e0 R14: 00000000003f0002 R15: ffff8880608a6230 [ 505.923649][T20155] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 505.925877][T19071] [drm:udl_init] *ERROR* Selecting channel failed [ 505.932594][T20155] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 505.932611][T20155] CR2: 00007f5f17ad3000 CR3: 0000000065775000 CR4: 00000000003506f0 [ 505.932627][T20155] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 505.932639][T20155] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 505.932651][T20155] Call Trace: [ 505.932659][T20155] [ 505.932673][T20155] nilfs_dat_commit_update+0x24/0x40 [ 505.932697][T20155] nilfs_btree_commit_update_v+0x93/0x410 [ 505.932720][T20155] nilfs_btree_propagate+0x95a/0xcf0 [ 505.951804][T19071] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 505.953705][T20155] nilfs_bmap_propagate+0x70/0x120 [ 505.953736][T20155] nilfs_segctor_apply_buffers+0x15d/0x320 [ 505.953759][T20155] ? nilfs_collect_file_data+0xc0/0xc0 [ 505.953781][T20155] nilfs_segctor_scan_file+0x7af/0x9d0 [ 505.953806][T20155] ? trace_nilfs2_collection_stage_transition+0x1a0/0x1a0 [ 505.953839][T20155] ? nilfs_segbuf_extend_segsum+0x25d/0x360 [ 505.966762][T19071] [drm] Initialized udl on minor 2 [ 505.969774][T20155] ? rcu_is_watching+0x11/0xa0 [ 505.992109][T19071] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 505.992344][T20155] nilfs_segctor_do_construct+0x1c26/0x6ca0 [ 506.000576][T19071] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 506.004922][T20155] ? verify_lock_unused+0x140/0x140 [ 506.004962][T20155] ? nilfs_transaction_unlock+0x220/0x220 [ 506.004983][T20155] ? nilfs_bmap_test_and_clear_dirty+0x4c/0x70 [ 506.005017][T20155] ? clear_nonspinnable+0x60/0x60 [ 506.005037][T20155] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 506.005059][T20155] ? __lock_acquire+0x7d10/0x7d10 [ 506.005079][T20155] ? __rwlock_init+0x140/0x140 [ 506.005099][T20155] ? do_raw_spin_unlock+0x11d/0x230 [ 506.005117][T20155] ? _raw_spin_unlock+0x24/0x40 [ 506.005134][T20155] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 506.057187][T19071] usb 2-1: USB disconnect, device number 36 [ 506.059337][T20155] nilfs_segctor_construct+0x17b/0x690 [ 506.059375][T20155] nilfs_segctor_thread+0x523/0x1180 [ 506.091268][T19050] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 506.093525][T20155] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 506.093549][T20155] ? nilfs_iput_work_func+0x70/0x70 [ 506.093571][T20155] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 506.093589][T20155] ? _raw_spin_unlock+0x40/0x40 [ 506.093603][T20155] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 506.093620][T20155] ? init_wait_entry+0xd0/0xd0 [ 506.093641][T20155] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 506.093660][T20155] ? __kthread_parkme+0x157/0x1b0 [ 506.093683][T20155] kthread+0x436/0x520 [ 506.109669][T19050] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 506.113512][T20155] ? nilfs_iput_work_func+0x70/0x70 [ 506.113537][T20155] ? kthread_blkcg+0xd0/0xd0 [ 506.113556][T20155] ret_from_fork+0x1f/0x30 [ 506.113586][T20155] [ 506.113608][T20155] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 506.113619][T20155] CPU: 0 PID: 20155 Comm: segctord Not tainted syzkaller #0 [ 506.113635][T20155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 506.113645][T20155] Call Trace: [ 506.113650][T20155] [ 506.113657][T20155] dump_stack_lvl+0x188/0x250 [ 506.113680][T20155] ? show_regs_print_info+0x20/0x20 [ 506.138260][T19050] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 506.144022][T20155] ? load_image+0x400/0x400 [ 506.144057][T20155] panic+0x2e5/0x810 [ 506.144078][T20155] ? bpf_jit_dump+0xd0/0xd0 [ 506.144110][T20155] ? ret_from_fork+0x1f/0x30 [ 506.144130][T20155] ? nilfs_dat_commit_end+0x5ac/0x6b0 [ 506.144148][T20155] __warn+0x248/0x2b0 [ 506.144166][T20155] ? nilfs_dat_commit_end+0x5ac/0x6b0 [ 506.144184][T20155] report_bug+0x1b7/0x2e0 [ 506.144207][T20155] handle_bug+0x3a/0x70 [ 506.144223][T20155] exc_invalid_op+0x16/0x40 [ 506.144239][T20155] asm_exc_invalid_op+0x16/0x20 [ 506.144255][T20155] RIP: 0010:nilfs_dat_commit_end+0x5ac/0x6b0 [ 506.319589][T20155] Code: 8b 34 24 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b8 54 03 00 e8 d3 63 6a fe e8 ae be f1 fd e9 b8 fc ff ff e8 c4 63 6a fe <0f> 0b e9 16 fc ff ff e8 b8 63 6a fe e8 93 be f1 fd e9 74 fe ff ff [ 506.339175][T20155] RSP: 0018:ffffc90003967390 EFLAGS: 00010293 [ 506.345226][T20155] RAX: ffffffff830ebe7c RBX: ffff8880794131a0 RCX: ffff88807ba31dc0 [ 506.353182][T20155] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 00000000003f0002 [ 506.361147][T20155] RBP: 0000000000000003 R08: ffff88807542dcb7 R09: 1ffff1100ea85b96 [ 506.369101][T20155] R10: dffffc0000000000 R11: ffffed100ea85b97 R12: ffff88807ba33548 [ 506.377054][T20155] R13: ffff888025d3b9e0 R14: 00000000003f0002 R15: ffff8880608a6230 [ 506.385024][T20155] ? nilfs_dat_commit_end+0x5ac/0x6b0 [ 506.390415][T20155] nilfs_dat_commit_update+0x24/0x40 [ 506.395694][T20155] nilfs_btree_commit_update_v+0x93/0x410 [ 506.401428][T20155] nilfs_btree_propagate+0x95a/0xcf0 [ 506.406727][T20155] nilfs_bmap_propagate+0x70/0x120 [ 506.411848][T20155] nilfs_segctor_apply_buffers+0x15d/0x320 [ 506.417654][T20155] ? nilfs_collect_file_data+0xc0/0xc0 [ 506.423102][T20155] nilfs_segctor_scan_file+0x7af/0x9d0 [ 506.428549][T20155] ? trace_nilfs2_collection_stage_transition+0x1a0/0x1a0 [ 506.435665][T20155] ? nilfs_segbuf_extend_segsum+0x25d/0x360 [ 506.441554][T20155] ? rcu_is_watching+0x11/0xa0 [ 506.446302][T20155] nilfs_segctor_do_construct+0x1c26/0x6ca0 [ 506.452225][T20155] ? verify_lock_unused+0x140/0x140 [ 506.457428][T20155] ? nilfs_transaction_unlock+0x220/0x220 [ 506.463135][T20155] ? nilfs_bmap_test_and_clear_dirty+0x4c/0x70 [ 506.469302][T20155] ? clear_nonspinnable+0x60/0x60 [ 506.474328][T20155] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 506.479812][T20155] ? __lock_acquire+0x7d10/0x7d10 [ 506.484831][T20155] ? __rwlock_init+0x140/0x140 [ 506.489581][T20155] ? do_raw_spin_unlock+0x11d/0x230 [ 506.494769][T20155] ? _raw_spin_unlock+0x24/0x40 [ 506.499615][T20155] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 506.505058][T20155] nilfs_segctor_construct+0x17b/0x690 [ 506.510513][T20155] nilfs_segctor_thread+0x523/0x1180 [ 506.515820][T20155] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 506.521713][T20155] ? nilfs_iput_work_func+0x70/0x70 [ 506.526914][T20155] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 506.532810][T20155] ? _raw_spin_unlock+0x40/0x40 [ 506.537664][T20155] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 506.543560][T20155] ? init_wait_entry+0xd0/0xd0 [ 506.548332][T20155] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 506.554232][T20155] ? __kthread_parkme+0x157/0x1b0 [ 506.559257][T20155] kthread+0x436/0x520 [ 506.563316][T20155] ? nilfs_iput_work_func+0x70/0x70 [ 506.568513][T20155] ? kthread_blkcg+0xd0/0xd0 [ 506.573102][T20155] ret_from_fork+0x1f/0x30 [ 506.577524][T20155] [ 506.580832][T20155] Kernel Offset: disabled [ 506.585486][T20155] Rebooting in 86400 seconds..