last executing test programs: 4.095099632s ago: executing program 0 (id=10312): r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./bus\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0xc4089434, &(0x7f0000000080)={0x1, 0x5}) 2.479686356s ago: executing program 0 (id=10345): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0e0000000400"}) 2.187422983s ago: executing program 1 (id=10348): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001a00010025bd7000fbdbdf250a8010fffd01fe0700060000080010000200000008000300", @ANYRESDEC=r0], 0x2c}}, 0x24000080) 2.082284879s ago: executing program 1 (id=10349): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="640000000206010200000000000000000000fdff140007800800134001a576ea08000640000000010500010006000000050005000a00000005000400000000000900020073797a310000000016000300686173683a6e65742c706f7274"], 0x64}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 1.89332337s ago: executing program 3 (id=10351): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x41480}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x0) 1.88763465s ago: executing program 1 (id=10362): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x3c}}, 0x0) 1.790819015s ago: executing program 1 (id=10354): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0x304000, 0xc00, 0x0, 0x3}, 0x1c) 1.685525052s ago: executing program 1 (id=10355): r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="51d80ab5"], 0x8) 1.511883662s ago: executing program 1 (id=10359): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a"], 0x0) 1.511093402s ago: executing program 3 (id=10360): r0 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x20000) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x2) 1.37229381s ago: executing program 3 (id=10364): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x70b78, 0x823}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback={0xfec0ffffffffffff}}]}}}]}, 0x5c}}, 0x24000800) 1.291946804s ago: executing program 3 (id=10366): r0 = socket(0x29, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r0, 0x89e2, &(0x7f0000001540)) 1.240867698s ago: executing program 0 (id=10368): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001e40)=@newtaction={0x18, 0x58, 0x284f, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 1.20954091s ago: executing program 3 (id=10369): syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x8800, &(0x7f0000000280)=ANY=[@ANYBLOB='nodiscard,quota,iocharset=cp950,grpquota,quota,noquota,nointegrity\x00uid=', @ANYRESHEX, @ANYRES64=0x0, @ANYRESDEC, @ANYBLOB="bf6a8bfcf00ce3cc70200921", @ANYRESHEX=0x0, @ANYRES16, @ANYBLOB="9147cc793b6478f744f2a2065adfc7d7a4fb8a18f1419229f397faafbfa9c2bee47232b76b82d72aee7cbde57a5309b7a22f030c7bb682dc1d2d4da251141d181a23c8b6fd69ee8a6028a96990674111bebbe92a56ed06272dd6afa08b2c206f63fdae4076b6da9cbb30a723d7b6bbb11766cd23034a6aa8b89335391190ffd5258703341c0ceb6ba6786b120d35b36be76da926be42d7a831719d5f55e8325b8b6dc2e586feeeed4400e47ea86540856c15f94368f2ed8b3506dfb57d4908c99f5f6e28dfa8a4205fc615f23b1c32bd07397f8cb277cecc0c647c21e8e2413b76", @ANYRES16, @ANYRESOCT], 0x1, 0x617a, &(0x7f0000000580)="$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") lchown(&(0x7f0000000040)='./file1\x00', 0xee01, 0xee01) 1.130356644s ago: executing program 0 (id=10371): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@ipv4_delroute={0x2c, 0x18, 0xa01, 0x0, 0xffffffff, {0x2, 0x10, 0x0, 0x10, 0x0, 0x0, 0xfe, 0x8}, [@RTA_GATEWAY={0x8, 0x5, @empty}, @RTA_PREFSRC={0x11, 0x7, @empty}]}, 0x2c}}, 0x4040058) 1.02963112s ago: executing program 2 (id=10373): r0 = socket(0x2b, 0x80801, 0x1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000440)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 1.001603761s ago: executing program 0 (id=10374): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$watch_queue(0x0, 0x80) 901.867087ms ago: executing program 0 (id=10375): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x5, 0x4, 0x4, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x17, &(0x7f0000000880)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x76}}, {{0x6, 0x0, 0x2, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llu, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2, 0x1}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 885.494478ms ago: executing program 2 (id=10377): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020603000000000000000000ffea000005000100070000000900020073797a300000000014000780080012401b0000000800084000000000050005000000001005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) 780.434054ms ago: executing program 4 (id=10378): r0 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x0, 0x7, 0x8fc0, 0x880f}) 779.728434ms ago: executing program 2 (id=10379): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000005c0)={0xe0, 0x10, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xa9, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce2d715f2d2d290a9423debbb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}, @nested={0x14, 0x0, 0x0, 0x1, [@typed={0xd, 0x0, 0x0, 0x0, @binary="c606f93f6b8199f926"}]}]}, 0xe0}], 0x1}, 0x40040) 627.981053ms ago: executing program 4 (id=10380): r0 = socket(0x10, 0x3, 0xf) write(r0, &(0x7f0000000040)="effd00001000ff00fd4344c007110000f3050a00dbfd010000000001ffdf00", 0xfe00) 585.832605ms ago: executing program 4 (id=10381): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="aefdda", 0x3}], 0x1) 539.903258ms ago: executing program 2 (id=10382): r0 = openat$sequencer(0xffffff9c, &(0x7f00000000c0), 0x101003, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@v={0x93, 0xa, 0xec27e7ef4bc7323b, 0x4d, @generic=0x7}) 506.67965ms ago: executing program 4 (id=10383): syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x1080c, &(0x7f0000000440)=ANY=[@ANYRES64=0x0, @ANYRES8, @ANYRESOCT, @ANYBLOB="d1794da8c0ccda034276e28a25c45c8e1eb8b595a37ffdfe7d2a8c3972a6931d2cbb0d8dc920bbde15d8790d46ccb3a5f36ff412236251d86334f17545ccae88", @ANYRES32, @ANYRES32, @ANYRESOCT=0x0, @ANYRES8, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRES32=0x0], 0x1, 0xa7a, &(0x7f0000000980)="$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") rename(&(0x7f0000000000)='./file0/file1\x00', &(0x7f0000000100)='./file1\x00') 404.871176ms ago: executing program 2 (id=10384): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x200000, &(0x7f00000000c0)=ANY=[], 0xbe, 0x1c0, &(0x7f0000000500)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 197.932818ms ago: executing program 4 (id=10385): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 173.720539ms ago: executing program 2 (id=10386): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x50, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4801, 0x531d}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x10}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 47.921417ms ago: executing program 4 (id=10387): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x41480}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x0) 0s ago: executing program 3 (id=10388): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, 0x0) kernel console output (not intermixed with test programs): ee_branches:1030: inode #13: comm syz.0.7839: invalid indirect mapped block 256 (level 1) [ 748.988269][T21127] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7841'. [ 749.052210][T13941] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 749.069496][T21124] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.7839: invalid indirect mapped block 2683928664 (level 1) [ 749.200766][T21124] EXT4-fs (loop0): 1 truncate cleaned up [ 749.233839][T21124] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,dioread_lock,nobh,nojournal_checksum,acl,usrjquota=.grpquota,nodiscard,jqfmt=vfsv0,noload,,,errors=continue. Quota mode: writeback. [ 749.346160][T13941] usb 2-1: Using ep0 maxpacket: 8 [ 749.362937][T21124] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #2: block 13: comm syz.0.7839: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 749.681084][T13941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 749.693077][T13941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 749.703391][T13941] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 749.714528][T13941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 749.726079][T13941] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 749.736139][T13941] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 749.774369][T13941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.814672][T13941] usb 2-1: config 0 descriptor?? [ 749.830442][T21140] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 749.836389][T21104] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 749.971577][T13941] usb 5-1: USB disconnect, device number 65 [ 750.037238][T21147] loop0: detected capacity change from 0 to 1024 [ 750.358794][T13935] usb 2-1: USB disconnect, device number 61 [ 750.382888][T21161] loop3: detected capacity change from 0 to 512 [ 750.431390][T21161] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 750.431390][T21161] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 750.431390][T21161] [ 750.458704][T21161] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.7857: inode #262144: comm syz.3.7857: iget: illegal inode # [ 750.472906][T21161] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.7857: error while reading EA inode 262144 err=-117 [ 750.486422][T21161] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2806: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 750.500084][T21161] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.7857: inode #262144: comm syz.3.7857: iget: illegal inode # [ 750.516887][T21161] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.7857: error while reading EA inode 262144 err=-117 [ 750.580299][T21161] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.7857: inode #1: comm syz.3.7857: iget: illegal inode # [ 750.656956][T21161] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.7857: error while reading EA inode 1 err=-117 [ 750.713657][T21161] EXT4-fs (loop3): 1 orphan inode deleted [ 750.734874][T21161] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000004c,journal_ioprio=0x0000000000000001,lazytime,nouser_xattr,init_itable=0x0000000000001000,,errors=continue. Quota mode: none. [ 750.864681][T21186] capability: warning: `syz.0.7870' uses 32-bit capabilities (legacy support in use) [ 750.890991][T21188] comedi comedi0: das16m1: I/O port conflict (0xfe,16) [ 751.131440][T21202] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 751.169672][T21202] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 751.186278][T21208] x_tables: ip_tables: osf match: only valid for protocol 6 [ 751.211955][T21202] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 751.220819][T21202] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 751.286637][T21202] device geneve2 entered promiscuous mode [ 751.320791][T21202] IPv6: ADDRCONF(NETDEV_CHANGE): geneve2: link becomes ready [ 751.338439][T21202] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 751.338516][T21202] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 751.338549][T21202] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 751.338580][T21202] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 751.940596][T21233] syz.1.7892 (21233) used greatest stack depth: 18512 bytes left [ 752.034343][T21240] loop0: detected capacity change from 0 to 4096 [ 752.056557][T21248] deleting an unspecified loop device is not supported. [ 752.112117][T21240] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 752.188757][T21255] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7902'. [ 752.203501][T21256] netlink: 14 bytes leftover after parsing attributes in process `syz.4.7903'. [ 753.225920][T21312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7932'. [ 753.294519][T21312] openvswitch: netlink: Actions may not be safe on all matching packets [ 753.528436][T21333] Sensor A: ================= START STATUS ================= [ 753.573386][T21333] Sensor A: Test Pattern: 75% Colorbar [ 753.584807][T21333] Sensor A: Show Information: All [ 753.589958][T21333] Sensor A: Vertical Flip: false [ 753.616908][T21333] Sensor A: Horizontal Flip: false [ 753.622249][T21333] Sensor A: Brightness: 128 [ 753.658602][T21333] Sensor A: Contrast: 128 [ 753.665949][T21333] Sensor A: Hue: 0 [ 753.669872][T21333] Sensor A: Saturation: 128 [ 753.687587][T21333] Sensor A: ================== END STATUS ================== [ 754.071266][ T7199] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 754.088168][T21372] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7961'. [ 754.258232][ T4369] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 754.356809][T21386] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 754.434554][T21386] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 754.485206][ T7199] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 754.493612][T21386] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 754.503132][T21386] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 754.511167][ T7199] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.536058][ T4369] usb 1-1: Using ep0 maxpacket: 32 [ 754.572525][ T7199] usb 4-1: config 0 descriptor?? [ 754.589803][T21386] device geneve2 entered promiscuous mode [ 754.627682][ T7199] cp210x 4-1:0.0: cp210x converter detected [ 754.640155][T21386] IPv6: ADDRCONF(NETDEV_CHANGE): geneve2: link becomes ready [ 754.677441][ T4369] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 754.688879][T21386] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 754.705273][ T4369] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 754.727891][ T4369] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 754.735146][T21386] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 754.749007][ T4369] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.772705][ T4369] usb 1-1: config 0 descriptor?? [ 754.781950][T21386] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 754.803176][T21386] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 754.847320][ T4369] hub 1-1:0.0: USB hub found [ 754.876497][ T7199] usb 4-1: cp210x converter now attached to ttyUSB0 [ 755.081445][ T4369] hub 1-1:0.0: 1 port detected [ 755.097321][ T7] usb 4-1: USB disconnect, device number 25 [ 755.136781][ T7] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 755.161439][ T7] cp210x 4-1:0.0: device disconnected [ 755.317377][ T4369] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 755.323820][ T4369] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 755.455667][ T4369] usbhid 1-1:0.0: can't add hid device: -71 [ 755.461763][ T4369] usbhid: probe of 1-1:0.0 failed with error -71 [ 755.520142][ T4369] usb 1-1: USB disconnect, device number 49 [ 756.148643][T21450] loop0: detected capacity change from 0 to 16 [ 756.234792][T21448] loop2: detected capacity change from 0 to 4096 [ 756.284464][T21450] erofs: (device loop0): mounted with root inode @ nid 36. [ 756.315843][T21448] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 756.639531][T21468] netlink: 332 bytes leftover after parsing attributes in process `syz.0.8009'. [ 756.673525][T21473] netlink: 'syz.4.8011': attribute type 1 has an invalid length. [ 757.084368][T21496] netlink: 'syz.2.8021': attribute type 28 has an invalid length. [ 757.286574][T21506] kernel read not supported for file / œ7³ÏüâW)ës“§Ç!Qöì¥fsõl{T‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 21506 comm: syz.4.8028) [ 757.362004][ T26] audit: type=1800 audit(2000000021.169:42): pid=21506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.8028" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=83807 res=0 errno=0 [ 757.748491][ T26] audit: type=1800 audit(2000000021.524:43): pid=21532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8039" name="SYSV798dd81c" dev="hugetlbfs" ino=0 res=0 errno=0 [ 758.523543][T13941] Bluetooth: hci4: command 0x0405 tx timeout [ 758.683782][ T7199] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 759.090318][ T7199] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 759.100533][ T7199] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 759.120536][ T7199] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 759.173682][T21611] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 759.195492][ T7199] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.233599][ T7199] usb 3-1: config 0 descriptor?? [ 759.316674][T21618] device bridge1 entered promiscuous mode [ 759.601661][T21636] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8091'. [ 759.763533][ T7199] Bluetooth: Can't get version to change to load ram patch err [ 759.770412][T21648] loop0: detected capacity change from 0 to 512 [ 759.771154][ T7199] Bluetooth: Loading patch file failed [ 759.816910][ T7199] ath3k: probe of 3-1:0.0 failed with error -71 [ 759.845763][T21648] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 759.862089][ T7199] usb 3-1: USB disconnect, device number 53 [ 759.924487][T21648] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.8097: invalid block [ 759.948715][T21648] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.8097: invalid indirect mapped block 4294967295 (level 1) [ 759.972026][T21648] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.8097: invalid indirect mapped block 4294967295 (level 1) [ 759.990192][T21648] EXT4-fs (loop0): 2 truncates cleaned up [ 759.996006][T21648] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,init_itable=0x0000000000000007,dioread_nolock,auto_da_alloc=0x000000007fffffff,,errors=continue. Quota mode: writeback. [ 760.230226][T21674] netlink: 'syz.4.8110': attribute type 5 has an invalid length. [ 760.314011][T21674] device  entered promiscuous mode [ 760.329499][ C0] sd 0:0:1:0: tag#1715 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 760.339601][ C0] sd 0:0:1:0: tag#1715 CDB: opcode=0x2 [ 760.345184][ C0] sd 0:0:1:0: tag#1715 CDB[00]: 02 4f 35 6d 46 cb 6f 41 1b fa 91 fc e1 37 8a 59 [ 760.354334][ C0] sd 0:0:1:0: tag#1715 CDB[10]: 2a a0 42 c5 04 41 9d ac 89 0e e5 10 22 9a 75 90 [ 760.363450][ C0] sd 0:0:1:0: tag#1715 CDB[20]: 47 [ 760.596859][T21678] loop3: detected capacity change from 0 to 8192 [ 760.735772][T21692] loop0: detected capacity change from 0 to 512 [ 760.922188][T21692] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,auto_da_alloc=0x0000000000000007,noauto_da_alloc,. Quota mode: writeback. [ 760.926245][T21703] loop2: detected capacity change from 0 to 512 [ 760.989895][T21692] ext4 filesystem being mounted at /1576/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 761.021561][T21703] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 761.072173][T21692] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present [ 761.139932][T21692] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 761.150072][T21692] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.8117: Failed to acquire dquot type 0 [ 761.170083][T21692] EXT4-fs (loop0): Remounting filesystem read-only [ 761.844673][T21743] netlink: 'syz.2.8141': attribute type 1 has an invalid length. [ 761.952084][T21747] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8143'. [ 762.019131][T21747] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8143'. [ 762.339882][ T7] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 762.626052][T21779] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 762.746207][ T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 762.767817][ T7] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 762.858502][ T7] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 762.878714][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 762.904550][ T7] usb 3-1: SerialNumber: syz [ 763.139621][T21794] loop3: detected capacity change from 0 to 4096 [ 763.229890][ T7] usb 3-1: 0:2 : does not exist [ 763.284107][ T7] usb 3-1: USB disconnect, device number 54 [ 763.576244][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 763.962193][T21816] loop0: detected capacity change from 0 to 1024 [ 764.018621][T21820] loop2: detected capacity change from 0 to 128 [ 764.110318][T21820] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 764.150986][T21820] ext4 filesystem being mounted at /1645/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 764.167339][T21820] EXT4-fs warning (device loop2): verify_group_input:147: Cannot add at group 4095 (only 1 groups) [ 764.180673][T11769] hfsplus: b-tree write err: -5, ino 4 [ 764.635410][T21856] sctp: [Deprecated]: syz.4.8195 (pid 21856) Use of int in max_burst socket option. [ 764.635410][T21856] Use struct sctp_assoc_value instead [ 764.707440][T21860] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8197'. [ 764.741952][T21860] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8197'. [ 764.974396][T21879] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8207'. [ 765.012071][T21879] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8207'. [ 765.033342][T21877] loop2: detected capacity change from 0 to 4096 [ 765.082597][T21877] NILFS: invalid option "cp=0x00aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa": too large checkpoint number [ 765.348037][T21901] overlayfs: missing 'lowerdir' [ 765.440810][T21894] loop0: detected capacity change from 0 to 4096 [ 765.470468][T21894] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 765.578537][T21894] ntfs: (device loop0): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 765.632245][T21894] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 765.641382][T21894] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 765.718530][T21894] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 765.778510][T21920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8228'. [ 765.793079][T13941] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 765.828856][T21894] ntfs: volume version 3.1. [ 765.856763][T21920] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8228'. [ 765.895703][T21894] ntfs: (device loop0): load_and_init_quota(): Failed to find inode number for $Quota. [ 765.909105][T21920] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8228'. [ 765.936188][T21894] ntfs: (device loop0): load_system_files(): Failed to load $Quota. Will not be able to remount read-write. Run chkdsk. [ 766.070687][T13941] usb 4-1: Using ep0 maxpacket: 32 [ 766.115076][T21920] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8228'. [ 766.226108][T13941] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 766.243633][T13941] usb 4-1: config 0 has no interface number 0 [ 766.413556][T21937] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8236'. [ 766.466332][T13941] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 766.475542][T13941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.536068][T13941] usb 4-1: Product: syz [ 766.550040][T13941] usb 4-1: Manufacturer: syz [ 766.576981][T13941] usb 4-1: SerialNumber: syz [ 766.614089][T13941] usb 4-1: config 0 descriptor?? [ 766.791554][T21949] mip6: mip6_destopt_init_state: state's mode is not 2: 0 [ 766.920620][T13941] radio-si470x 4-1:0.35: this is not a si470x device. [ 767.064450][T21973] netlink: 'syz.4.8252': attribute type 1 has an invalid length. [ 767.161918][T13941] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 767.220054][T13941] usb 4-1: USB disconnect, device number 26 [ 767.445397][T21997] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 767.525826][T21997] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 767.600997][T22000] dlm: non-version read from control device 4096 [ 767.804243][T22014] loop0: detected capacity change from 0 to 128 [ 767.915966][T22014] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 767.938859][T22023] nfs4: Bad value for 'source' [ 767.969537][T22014] ext4 filesystem being mounted at /1606/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 768.083731][T22014] EXT4-fs warning (device loop0): verify_group_input:147: Cannot add at group 4095 (only 1 groups) [ 768.233498][T22036] usb usb8: usbfs: process 22036 (syz.0.8279) did not claim interface 0 before use [ 768.358302][ T4369] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 768.614818][ T4369] usb 3-1: Using ep0 maxpacket: 16 [ 768.626273][T22060] __nla_validate_parse: 3 callbacks suppressed [ 768.626366][T22060] netlink: 100 bytes leftover after parsing attributes in process `syz.0.8293'. [ 768.700340][T22060] netlink: 100 bytes leftover after parsing attributes in process `syz.0.8293'. [ 768.798959][ T4369] usb 3-1: unable to get BOS descriptor or descriptor too short [ 768.935549][ T4369] usb 3-1: config 3 has an invalid interface number: 209 but max is 1 [ 768.943842][ T4369] usb 3-1: config 3 has an invalid interface number: 44 but max is 1 [ 768.978617][ T4369] usb 3-1: config 3 has no interface number 0 [ 768.984784][ T4369] usb 3-1: config 3 has no interface number 1 [ 768.991396][ T4369] usb 3-1: config 3 interface 209 has no altsetting 0 [ 768.998346][ T4369] usb 3-1: config 3 interface 44 has no altsetting 0 [ 769.015964][T22074] binder: 22073:22074 ioctl c0046209 e0ffff00000000 returned -22 [ 769.218298][ T4369] usb 3-1: New USB device found, idVendor=06e1, idProduct=a190, bcdDevice= 7.59 [ 769.254051][ T4369] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.282415][ T4369] usb 3-1: Product: syz [ 769.289548][ T4369] usb 3-1: Manufacturer: syz [ 769.294247][ T4369] usb 3-1: SerialNumber: syz [ 769.306469][T22089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8307'. [ 769.422839][T22094] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8311'. [ 769.440903][T22094] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8311'. [ 769.614112][T22100] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8313'. [ 769.740822][ T4369] usb 3-1: USB disconnect, device number 55 [ 770.857922][T22158] loop0: detected capacity change from 0 to 256 [ 770.882218][T13941] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 771.042953][T22136] loop2: detected capacity change from 0 to 32768 [ 771.109336][T22136] (syz.2.8328,22136,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 771.151603][T22162] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 771.194472][T22136] (syz.2.8328,22136,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 771.233553][T22136] JBD2: Ignoring recovery information on journal [ 771.357251][T13941] usb 2-1: config 0 has an invalid interface number: 199 but max is 1 [ 771.394217][T13941] usb 2-1: config 0 has no interface number 1 [ 771.400390][T13941] usb 2-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 771.426546][T22136] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 771.482384][T13941] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 771.619643][T13941] usb 2-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 771.628781][T13941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 771.652483][T13941] usb 2-1: SerialNumber: syz [ 771.668976][T13941] usb 2-1: config 0 descriptor?? [ 771.685674][ T4379] ocfs2: Unmounting device (7,2) on (node local) [ 771.823814][T22193] device ipip0 entered promiscuous mode [ 771.836883][T22195] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.8357'. [ 771.998450][T13941] usb 2-1: Found UVC 0.00 device (0002:0000) [ 772.030473][T13941] usb 2-1: No valid video chain found. [ 772.083922][T13941] usb 2-1: USB disconnect, device number 62 [ 772.497125][T22233] netlink: 'syz.0.8372': attribute type 8 has an invalid length. [ 772.922908][T13938] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 773.190103][T13938] usb 2-1: Using ep0 maxpacket: 32 [ 773.350613][T13938] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 773.377381][T13938] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x2 has invalid wMaxPacketSize 0 [ 773.401005][T13938] usb 2-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 773.443831][T13938] usb 2-1: config 0 interface 0 has no altsetting 0 [ 773.466567][T13938] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 773.500611][T13938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.537320][T13938] usb 2-1: config 0 descriptor?? [ 773.560828][T22266] binder: binder_mmap: 22265 200000001000-20000000b000 bad vm_flags failed -1 [ 773.906640][T13935] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 773.914511][T13938] usbhid 2-1:0.0: can't add hid device: -71 [ 773.921740][T13938] usbhid: probe of 2-1:0.0 failed with error -71 [ 773.941810][T13938] usb 2-1: USB disconnect, device number 63 [ 774.041644][T22292] xt_CT: You must specify a L4 protocol and not use inversions on it [ 774.237224][T22304] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8410'. [ 774.273104][T22305] loop0: detected capacity change from 0 to 256 [ 774.280296][T22306] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 774.286860][T22306] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 774.297805][T22306] vhci_hcd vhci_hcd.0: Device attached [ 774.311122][T22306] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5) [ 774.317708][T22306] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 774.331094][T22306] vhci_hcd vhci_hcd.0: Device attached [ 774.344849][T22305] exfat: Deprecated parameter 'utf8' [ 774.352132][T22309] vhci_hcd: connection closed [ 774.352396][T22307] vhci_hcd: connection closed [ 774.354375][T22305] exfat: Deprecated parameter 'namecase' [ 774.370958][ T9] vhci_hcd: stop threads [ 774.371475][T22305] exfat: Deprecated parameter 'utf8' [ 774.375254][ T9] vhci_hcd: release socket [ 774.385468][T13935] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 774.419363][ T9] vhci_hcd: disconnect device [ 774.424211][T13935] usb 3-1: config 0 has no interface number 0 [ 774.442083][ T9] vhci_hcd: stop threads [ 774.446546][ T9] vhci_hcd: release socket [ 774.480460][T22305] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 774.497627][ T9] vhci_hcd: disconnect device [ 774.670579][T13935] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 774.688254][T13935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.718274][T13935] usb 3-1: Product: syz [ 774.737437][T13935] usb 3-1: Manufacturer: syz [ 774.742456][T13935] usb 3-1: SerialNumber: syz [ 774.754247][T13935] usb 3-1: config 0 descriptor?? [ 774.788242][T22321] loop3: detected capacity change from 0 to 64 [ 774.976664][T22332] netlink: 'syz.4.8421': attribute type 1 has an invalid length. [ 774.987505][T22332] netlink: 'syz.4.8421': attribute type 2 has an invalid length. [ 775.116712][T22337] netlink: 'syz.3.8422': attribute type 1 has an invalid length. [ 775.157678][T22341] tmpfs: Bad value for 'mpol' [ 775.272570][T22345] autofs4:pid:22345:validate_dev_ioctl: invalid path supplied for cmd(0xc018937d) [ 775.296247][T13935] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 775.306439][T13935] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 775.329319][T13935] asix: probe of 3-1:0.251 failed with error -5 [ 775.346998][T13935] usb 3-1: USB disconnect, device number 56 [ 776.011903][T22398] misc userio: No port type given on /dev/userio [ 776.192810][T22410] xt_hashlimit: max too large, truncated to 1048576 [ 776.282159][T22412] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8461'. [ 776.652109][T22435] netlink: 'syz.4.8471': attribute type 21 has an invalid length. [ 776.707130][T22435] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8471'. [ 776.786365][T22433] loop0: detected capacity change from 0 to 4096 [ 776.846434][T22391] loop3: detected capacity change from 0 to 32768 [ 776.976922][T22433] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 777.281567][ T4378] ntfs3: loop0: ntfs_sync_fs r=9 failed, -22. [ 777.325243][ T4378] ntfs3: loop0: ntfs_evict_inode r=9 failed, -22. [ 777.414909][T22457] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8482'. [ 777.473018][T22457] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8482'. [ 777.912601][T22488] ceph: No source [ 778.069618][T22496] netlink: 'syz.4.8500': attribute type 1 has an invalid length. [ 778.098071][T22496] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8500'. [ 778.129092][T22496] netlink: 'syz.4.8500': attribute type 1 has an invalid length. [ 778.151744][T22500] netlink: 256 bytes leftover after parsing attributes in process `syz.3.8502'. [ 778.212862][T22500] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 778.370533][T22515] loop2: detected capacity change from 0 to 512 [ 778.495374][T22515] EXT4-fs (loop2): 1 truncate cleaned up [ 778.501103][T22515] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,grpquota,debug_want_extra_isize=0x000000000000005c,nombcache,noauto_da_alloc,discard,grpjquota=,errors=remount-ro,data_err=abort,. Quota mode: writeback. [ 778.652759][ T5745] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 779.085983][ T5745] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 779.086016][ T5745] usb 4-1: config 0 has no interface number 0 [ 779.086047][ T5745] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 779.086076][ T5745] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 779.124662][T13935] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 779.284465][ T5745] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 779.313824][ T5745] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.339622][ T5745] usb 4-1: Product: syz [ 779.343973][ T5745] usb 4-1: Manufacturer: syz [ 779.368945][ T5745] usb 4-1: SerialNumber: syz [ 779.386153][ T5745] usb 4-1: config 0 descriptor?? [ 779.411704][T13935] usb 1-1: Using ep0 maxpacket: 16 [ 779.417311][T22514] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 779.444976][ T5745] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 779.477393][ T5745] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 779.794768][T22576] loop2: detected capacity change from 0 to 2048 [ 779.801377][T13935] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 779.801420][T13935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.801443][T13935] usb 1-1: Product: syz [ 779.839294][T13935] usb 1-1: Manufacturer: syz [ 779.844418][T13935] usb 1-1: SerialNumber: syz [ 779.851053][T13935] r8152-cfgselector 1-1: config 0 descriptor?? [ 779.888240][T22579] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 780.016375][T13938] usb 4-1: USB disconnect, device number 27 [ 780.045747][T13938] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 780.078221][T13938] cyberjack 4-1:0.69: device disconnected [ 780.102738][T22586] netlink: 'syz.4.8541': attribute type 28 has an invalid length. [ 780.122968][T22586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8541'. [ 780.395946][T13935] r8152-cfgselector 1-1: Unknown version 0x0000 [ 780.402479][T13935] r8152-cfgselector 1-1: bad CDC descriptors [ 780.459559][T13935] r8152-cfgselector 1-1: Unknown version 0x0000 [ 780.505358][T13935] r8152-cfgselector 1-1: USB disconnect, device number 50 [ 780.772343][T22618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8557'. [ 780.968912][T22627] usb usb9: usbfs: process 22627 (syz.4.8561) did not claim interface 0 before use [ 781.119936][T22634] loop3: detected capacity change from 0 to 128 [ 781.175851][T22630] loop0: detected capacity change from 0 to 4096 [ 781.189551][T22636] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8566'. [ 781.255778][T22640] device vti0 entered promiscuous mode [ 781.265090][T22634] FAT-fs (loop3): Directory bread(block 162) failed [ 781.273851][T22630] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 781.293339][T22634] FAT-fs (loop3): Directory bread(block 163) failed [ 781.302761][T22630] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 781.321589][T22634] FAT-fs (loop3): Directory bread(block 164) failed [ 781.336144][T22634] FAT-fs (loop3): Directory bread(block 165) failed [ 781.357839][T22630] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 781.371004][T22634] FAT-fs (loop3): Directory bread(block 166) failed [ 781.377691][T22634] FAT-fs (loop3): Directory bread(block 167) failed [ 781.408718][T22630] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 781.423534][T22634] FAT-fs (loop3): Directory bread(block 168) failed [ 781.430215][T22634] FAT-fs (loop3): Directory bread(block 169) failed [ 781.460740][T22630] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 781.488440][T22645] sctp: [Deprecated]: syz.4.8571 (pid 22645) Use of struct sctp_assoc_value in delayed_ack socket option. [ 781.488440][T22645] Use struct sctp_sack_info instead [ 781.508993][T22634] FAT-fs (loop3): Directory bread(block 162) failed [ 781.518127][T22634] FAT-fs (loop3): Directory bread(block 163) failed [ 781.528006][T22634] attempt to access beyond end of device [ 781.528006][T22634] loop3: rw=3, want=232, limit=128 [ 781.543412][T22630] ntfs: volume version 3.1. [ 781.550939][T22630] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 781.604760][T22634] attempt to access beyond end of device [ 781.604760][T22634] loop3: rw=2051, want=234, limit=128 [ 781.625523][T22630] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 781.676596][T22606] loop2: detected capacity change from 0 to 32768 [ 781.694360][T22630] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 781.726877][T22630] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 781.779827][T22630] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 781.985866][T22606] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 782.169757][ T4369] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 782.366038][ T4379] ocfs2: Unmounting device (7,2) on (node local) [ 782.485603][T22677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8586'. [ 782.565321][ T4369] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 782.573657][ T4369] usb 4-1: config 0 has no interface number 0 [ 782.750134][T22687] device wlan0 entered promiscuous mode [ 782.760804][ T4369] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 782.781421][ T4369] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.795347][ T4369] usb 4-1: Product: syz [ 782.799698][ T4369] usb 4-1: Manufacturer: syz [ 782.807369][ T4369] usb 4-1: SerialNumber: syz [ 782.833690][ T4369] usb 4-1: config 0 descriptor?? [ 783.021463][T22701] xt_l2tp: missing protocol rule (udp|l2tpip) [ 783.110594][ T7] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 783.186784][T22712] Cannot find del_set index 4 as target [ 783.300426][T22719] netlink: 'syz.0.8606': attribute type 5 has an invalid length. [ 783.378978][ T4369] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 783.396194][T22723] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8608'. [ 783.403305][ T4369] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 783.428787][T22725] loop0: detected capacity change from 0 to 512 [ 783.440188][ T4369] asix: probe of 4-1:0.251 failed with error -5 [ 783.458284][ T4369] usb 4-1: USB disconnect, device number 28 [ 783.559558][ T7] usb 2-1: unable to get BOS descriptor or descriptor too short [ 783.579008][T22725] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 783.611518][T22725] ext4 filesystem being mounted at /1691/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 783.624192][ T7] usb 2-1: not running at top speed; connect to a high speed hub [ 783.718514][ T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 783.757604][ T7] usb 2-1: config 1 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 783.782589][ T7] usb 2-1: config 1 interface 0 has no altsetting 0 [ 783.976486][ T7] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 783.990068][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.036550][ T7] usb 2-1: Product: syz [ 784.052566][ T7] usb 2-1: Manufacturer: syz [ 784.057240][ T7] usb 2-1: SerialNumber: syz [ 784.170944][T22764] loop2: detected capacity change from 0 to 64 [ 784.394157][ T7] usb 2-1: bad CDC descriptors [ 784.410322][T22776] netlink: 'syz.3.8633': attribute type 21 has an invalid length. [ 784.447887][ T7] usb 2-1: USB disconnect, device number 64 [ 784.882788][T22806] loop2: detected capacity change from 0 to 256 [ 784.938875][T22809] loop0: detected capacity change from 0 to 512 [ 785.019468][T22809] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.8649: inode has both inline data and extents flags [ 785.053905][T22806] FAT-fs (loop2): Directory bread(block 64) failed [ 785.098974][T22806] FAT-fs (loop2): Directory bread(block 65) failed [ 785.106068][T22806] FAT-fs (loop2): Directory bread(block 66) failed [ 785.113981][T22809] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.8649: couldn't read orphan inode 15 (err -117) [ 785.179310][T22809] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsdgroups,acl,noload,journal_dev=0x0000000000000003,nodiscard,,errors=continue. Quota mode: none. [ 785.207559][T22806] FAT-fs (loop2): Directory bread(block 67) failed [ 785.217828][T22825] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8656'. [ 785.241727][T22806] FAT-fs (loop2): Directory bread(block 68) failed [ 785.325480][T22806] FAT-fs (loop2): Directory bread(block 69) failed [ 785.332164][T22806] FAT-fs (loop2): Directory bread(block 70) failed [ 785.483094][T22806] FAT-fs (loop2): Directory bread(block 71) failed [ 785.494525][ C1] vkms_vblank_simulate: vblank timer overrun [ 785.511937][T22806] FAT-fs (loop2): Directory bread(block 72) failed [ 785.549412][T22806] FAT-fs (loop2): Directory bread(block 73) failed [ 785.852310][T22846] loop3: detected capacity change from 0 to 2048 [ 785.869794][T22831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 785.914213][T22831] bond0: (slave rose0): Enslaving as an active interface with an up link [ 785.945275][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 786.080243][T22846] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 786.206445][T22867] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8671'. [ 786.653690][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 786.660635][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 786.903653][T22913] xt_TCPMSS: Only works on TCP SYN packets [ 786.954852][T22916] (unnamed net_device) (uninitialized): ARP validating cannot be used with MII monitoring [ 787.248299][T22938] netlink: 'syz.4.8701': attribute type 29 has an invalid length. [ 787.288506][T22938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8701'. [ 787.376308][T22938] netlink: 'syz.4.8701': attribute type 29 has an invalid length. [ 787.412321][T22938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8701'. [ 787.597107][T22963] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8712'. [ 787.674966][T22963] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8712'. [ 787.718052][ T5745] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 787.873725][T22971] loop0: detected capacity change from 0 to 512 [ 787.977682][T22971] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 788.124193][ T5745] usb 4-1: config 0 has an invalid interface number: 174 but max is 0 [ 788.132659][ T5745] usb 4-1: config 0 has no interface number 0 [ 788.156037][T22971] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,dioread_nolock,noload,auto_da_alloc=0x000000000000168f,bsddf,. Quota mode: writeback. [ 788.214282][ T5745] usb 4-1: config 0 interface 174 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 788.248140][T22971] ext4 filesystem being mounted at /1717/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 788.283589][ T5745] usb 4-1: New USB device found, idVendor=07c9, idProduct=b010, bcdDevice=92.d3 [ 788.334690][ T5745] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.359968][T22971] EXT4-fs error (device loop0): ext4_xattr_block_list:713: inode #15: comm syz.0.8714: corrupted xattr block 32 [ 788.398405][ T5745] usb 4-1: config 0 descriptor?? [ 788.484116][T22971] EXT4-fs (loop0): Remounting filesystem read-only [ 788.669702][T23007] ieee802154 phy0 wpan0: encryption failed: -90 [ 788.741304][ T5745] kaweth 4-1:0.174: Firmware present in device. [ 788.860515][T23016] device sit0 entered promiscuous mode [ 788.916423][T23016] netlink: 'syz.0.8731': attribute type 1 has an invalid length. [ 788.947315][T13938] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 788.957748][ T5745] kaweth 4-1:0.174: Error reading configuration (-71), no net device created [ 788.957889][T23016] netlink: 'syz.0.8731': attribute type 3 has an invalid length. [ 788.990356][ T5745] kaweth: probe of 4-1:0.174 failed with error -5 [ 789.019371][ T5745] usb 4-1: USB disconnect, device number 29 [ 789.047258][T23024] trusted_key: encrypted_key: master key parameter '' is invalid [ 789.257207][T13938] usb 2-1: Using ep0 maxpacket: 16 [ 789.407300][T13938] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 789.428086][T13938] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 789.674551][T13938] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 789.698236][T13938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.726975][T13938] usb 2-1: Product: syz [ 789.736298][T13938] usb 2-1: Manufacturer: syz [ 789.751754][T13938] usb 2-1: SerialNumber: syz [ 789.840342][T23028] loop0: detected capacity change from 0 to 32768 [ 789.874335][T23046] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8742'. [ 789.893279][T23046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8742'. [ 790.024712][T23028] ERROR: (device loop0): dbAllocNext: Corrupt dmap page [ 790.024712][T23028] [ 790.061770][T23028] ERROR: (device loop0): remounting filesystem as read-only [ 790.069340][T23028] ialloc: diAlloc returned -5! [ 790.123830][T13938] usb 2-1: 0:2 : does not exist [ 790.141754][T13938] usb 2-1: USB disconnect, device number 65 [ 790.427393][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 790.986970][T23099] netlink: 'syz.1.8769': attribute type 4 has an invalid length. [ 791.249998][T23104] loop2: detected capacity change from 0 to 4096 [ 791.293024][T23104] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 791.318253][T23119] xt_TCPMSS: Only works on TCP SYN packets [ 791.472146][T23131] trusted_key: encrypted_key: keylen parameter is missing [ 792.234930][T23188] QAT: failed to copy from user cfg_data. [ 792.253055][T23187] netlink: 'syz.2.8812': attribute type 2 has an invalid length. [ 792.575237][T23209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8822'. [ 792.587690][T23211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8823'. [ 792.646822][T23216] tc_dump_action: action bad kind [ 792.897719][T23232] comedi comedi0: pcmda12: I/O port conflict (0x3,16) [ 792.940386][T23236] openvswitch: netlink: Actions may not be safe on all matching packets [ 793.217900][T23251] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8844'. [ 793.609845][T23266] loop0: detected capacity change from 0 to 256 [ 793.762598][T23266] FAT-fs (loop0): Directory bread(block 64) failed [ 793.789704][T23278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8853'. [ 793.802395][T23266] FAT-fs (loop0): Directory bread(block 65) failed [ 793.811118][T23266] FAT-fs (loop0): Directory bread(block 66) failed [ 793.818020][T23266] FAT-fs (loop0): Directory bread(block 67) failed [ 793.843827][T23266] FAT-fs (loop0): Directory bread(block 68) failed [ 793.861518][T23266] FAT-fs (loop0): Directory bread(block 69) failed [ 793.878638][T23266] FAT-fs (loop0): Directory bread(block 70) failed [ 793.949978][T23266] FAT-fs (loop0): Directory bread(block 71) failed [ 793.958663][T23266] FAT-fs (loop0): Directory bread(block 72) failed [ 793.992858][T23266] FAT-fs (loop0): Directory bread(block 73) failed [ 794.054016][T23276] loop3: detected capacity change from 0 to 8192 [ 794.127400][T23285] kAFS: unable to lookup cell '/,' [ 794.369421][T23293] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8862'. [ 794.388522][T23294] kAFS: unable to lookup cell '@mTsyz0' [ 794.589532][T23306] netlink: 10 bytes leftover after parsing attributes in process `syz.0.8868'. [ 795.064267][T23329] loop2: detected capacity change from 0 to 256 [ 795.529929][T23302] loop3: detected capacity change from 0 to 32768 [ 795.623043][T23358] loop2: detected capacity change from 0 to 1024 [ 795.640529][T23302] (syz.3.8866,23302,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 795.677934][T23358] EXT4-fs (loop2): Ignoring removed nobh option [ 795.684913][T23302] (syz.3.8866,23302,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 795.735168][ T13] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 795.755840][T23358] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #11: comm syz.2.8894: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 795.781632][T23358] EXT4-fs (loop2): Remounting filesystem read-only [ 795.788305][T23358] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.8894: couldn't read orphan inode 11 (err -117) [ 795.820958][T23302] JBD2: Ignoring recovery information on journal [ 795.909834][T23302] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 795.945763][T23358] EXT4-fs (loop2): Remounting filesystem read-only [ 795.952710][T23358] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=remount-ro,quota,. Quota mode: writeback. [ 796.136271][ T13] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 796.155488][ T13] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 796.184164][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.224907][ T4386] ocfs2: Unmounting device (7,3) on (node local) [ 796.253008][ T13] usb 2-1: config 0 descriptor?? [ 796.491930][T23394] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8908'. [ 796.553767][T23394] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8908'. [ 796.744092][T13938] usb 2-1: USB disconnect, device number 66 [ 797.291100][T23443] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8933'. [ 797.531666][T23458] xt_nfacct: accounting object `syz1' does not exist [ 797.916071][T13938] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 797.994069][T23478] loop0: detected capacity change from 0 to 256 [ 798.106237][T23478] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 798.365424][T13938] usb 2-1: config 0 has an invalid interface number: 241 but max is 0 [ 798.373718][T13938] usb 2-1: config 0 has no interface number 0 [ 798.407816][T13938] usb 2-1: config 0 interface 241 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 798.417819][T13938] usb 2-1: config 0 interface 241 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 798.671287][T13938] usb 2-1: New USB device found, idVendor=0675, idProduct=1688, bcdDevice=d1.c7 [ 798.680766][T13938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.728054][T13938] usb 2-1: Product: syz [ 798.749635][T13938] usb 2-1: Manufacturer: syz [ 798.766948][T13938] usb 2-1: SerialNumber: syz [ 798.768025][T23503] xt_CT: You must specify a L4 protocol and not use inversions on it [ 798.790909][T13938] usb 2-1: config 0 descriptor?? [ 798.847936][T23480] loop2: detected capacity change from 0 to 32768 [ 798.907573][T23513] netlink: 'syz.4.8967': attribute type 1 has an invalid length. [ 798.962318][T23480] (syz.2.8951,23480,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 798.992131][T23480] (syz.2.8951,23480,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 799.042251][T23518] loop0: detected capacity change from 0 to 16 [ 799.083013][T23480] JBD2: Ignoring recovery information on journal [ 799.128639][T23480] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 799.139422][T13938] HFC-S_USB: probe of 2-1:0.241 failed with error -5 [ 799.157848][T23518] erofs: (device loop0): mounted with root inode @ nid 36. [ 799.184834][T13938] usb 2-1: USB disconnect, device number 67 [ 799.210874][T23518] erofs: (device loop0): erofs_read_inode: bogus i_mode (0) @ nid 281474976710655 [ 799.354287][ T4379] ocfs2: Unmounting device (7,2) on (node local) [ 799.434134][ T5745] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 799.775410][T23542] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8980'. [ 799.872439][ T5745] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 799.888477][ T5745] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 799.909968][ T5745] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 799.922396][ T5745] usb 5-1: config 1 has no interface number 1 [ 799.929449][ T5745] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 799.943140][ T5745] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 33022, setting to 64 [ 800.060401][T23556] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8987'. [ 800.083684][T23556] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8987'. [ 800.107893][T23556] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8987'. [ 800.129817][T23560] xt_hashlimit: invalid interval [ 800.139837][ T5745] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 800.149374][ T5745] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.186493][ T5745] usb 5-1: Product: syz [ 800.230484][ T5745] usb 5-1: Manufacturer: syz [ 800.235924][ T5745] usb 5-1: SerialNumber: syz [ 800.577760][ T13] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 800.665849][ T5745] usb 5-1: USB disconnect, device number 66 [ 800.703166][T23591] netlink: 'syz.3.9004': attribute type 21 has an invalid length. [ 800.866608][ T13] usb 1-1: Using ep0 maxpacket: 32 [ 800.938230][T23601] loop3: detected capacity change from 0 to 256 [ 800.968104][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 801.005547][ T13] usb 1-1: config 0 has an invalid interface number: 231 but max is 0 [ 801.022210][ T13] usb 1-1: config 0 has no interface number 0 [ 801.048360][ T13] usb 1-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 801.051376][T23601] FAT-fs (loop3): Directory bread(block 64) failed [ 801.085190][ T13] usb 1-1: config 0 interface 231 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 801.113612][T23601] FAT-fs (loop3): Directory bread(block 65) failed [ 801.135922][T23601] FAT-fs (loop3): Directory bread(block 66) failed [ 801.142627][T23601] FAT-fs (loop3): Directory bread(block 67) failed [ 801.159483][T23601] FAT-fs (loop3): Directory bread(block 68) failed [ 801.188336][T23601] FAT-fs (loop3): Directory bread(block 69) failed [ 801.195039][T23601] FAT-fs (loop3): Directory bread(block 70) failed [ 801.222211][T23601] FAT-fs (loop3): Directory bread(block 71) failed [ 801.228926][T23601] FAT-fs (loop3): Directory bread(block 72) failed [ 801.294225][ T13] usb 1-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 801.301931][T23601] FAT-fs (loop3): Directory bread(block 73) failed [ 801.318139][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.346953][ T13] usb 1-1: Product: syz [ 801.389717][ T13] usb 1-1: Manufacturer: syz [ 801.400893][ T13] usb 1-1: SerialNumber: syz [ 801.420604][ T13] usb 1-1: config 0 descriptor?? [ 801.475962][T23565] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 801.484221][T23565] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 801.519255][ T13] plusb 1-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 6a:19:27:85:0c:96 [ 801.601829][T23619] xt_CT: No such helper "netbios-ns" [ 801.642801][T23625] netlink: 'syz.2.9019': attribute type 1 has an invalid length. [ 801.724373][T23629] device geneve2 entered promiscuous mode [ 802.333826][T23661] trusted_key: encrypted_key: master key parameter '' is invalid [ 802.554141][T23679] netlink: 'syz.3.9041': attribute type 21 has an invalid length. [ 802.597197][T23679] netlink: 128 bytes leftover after parsing attributes in process `syz.3.9041'. [ 802.629317][T23679] netlink: 'syz.3.9041': attribute type 4 has an invalid length. [ 802.675770][T23679] netlink: 'syz.3.9041': attribute type 5 has an invalid length. [ 802.715804][T23679] netlink: 3 bytes leftover after parsing attributes in process `syz.3.9041'. [ 802.958121][T23700] xt_cluster: node mask cannot exceed total number of nodes [ 803.208616][T13938] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 803.236164][ T7] usb 1-1: USB disconnect, device number 51 [ 803.267228][ T7] plusb 1-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 803.486031][T13938] usb 4-1: Using ep0 maxpacket: 32 [ 803.649999][T13938] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 803.683725][T13938] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 803.842472][ T13] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 803.860352][T13938] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 803.869481][T13938] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 803.940710][T13938] usb 4-1: Product: syz [ 803.944971][T13938] usb 4-1: Manufacturer: syz [ 804.042815][T13938] hub 4-1:4.0: USB hub found [ 804.116209][ T13] usb 5-1: Using ep0 maxpacket: 32 [ 804.125596][T23763] IPv6: NLM_F_CREATE should be specified when creating new route [ 804.266259][T13938] hub 4-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 804.287586][ T13] usb 5-1: unable to get BOS descriptor or descriptor too short [ 804.389243][ T13] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 804.414123][ T13] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 804.483638][ T13] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 804.522428][ T13] usb 5-1: config 128 has no interface number 0 [ 804.528870][ T13] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 804.559418][ T13] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 804.573408][ T13] usb 5-1: config 128 interface 127 has no altsetting 0 [ 804.704552][ T7] usb 4-1: USB disconnect, device number 30 [ 804.747218][ T13] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 804.756342][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.811084][ T13] usb 5-1: Product: syz [ 804.815336][ T13] usb 5-1: Manufacturer: syz [ 804.820000][ T13] usb 5-1: SerialNumber: syz [ 804.853079][T23799] loop0: detected capacity change from 0 to 256 [ 804.992740][T23799] FAT-fs (loop0): Directory bread(block 64) failed [ 804.999394][T23799] FAT-fs (loop0): Directory bread(block 65) failed [ 805.009037][T23805] cgroup: none used incorrectly [ 805.037621][T23799] FAT-fs (loop0): Directory bread(block 66) failed [ 805.099618][T23799] FAT-fs (loop0): Directory bread(block 67) failed [ 805.142543][T23799] FAT-fs (loop0): Directory bread(block 68) failed [ 805.149162][T23799] FAT-fs (loop0): Directory bread(block 69) failed [ 805.197334][T23799] FAT-fs (loop0): Directory bread(block 70) failed [ 805.203956][T23799] FAT-fs (loop0): Directory bread(block 71) failed [ 805.269836][T23799] FAT-fs (loop0): Directory bread(block 72) failed [ 805.288151][T23799] FAT-fs (loop0): Directory bread(block 73) failed [ 805.345551][ T13] usb 5-1: USB disconnect, device number 67 [ 805.630909][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 805.754580][T23835] loop2: detected capacity change from 0 to 1764 [ 805.913279][T23837] loop3: detected capacity change from 0 to 4096 [ 806.013911][T23837] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 807.262566][T23913] netlink: 'syz.2.9141': attribute type 3 has an invalid length. [ 807.376723][T13938] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 807.448051][T23877] loop0: detected capacity change from 0 to 32768 [ 807.540599][T23877] jfs_strtoUCS: char2uni returned -22. [ 807.546179][T23877] charset = cp949, char = 0xd4 [ 807.665382][ T7] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 807.825640][T13938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 807.835364][T13938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 807.847853][T23937] netlink: 'syz.1.9153': attribute type 10 has an invalid length. [ 807.879268][T23937] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 807.913899][T23937] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 807.921816][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 807.973778][T23937] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 808.051404][ T7] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 808.076578][ T7] usb 3-1: config 0 has no interface number 0 [ 808.136105][T13938] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 808.152063][T13938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.169904][T13938] usb 5-1: Product: syz [ 808.175878][T13938] usb 5-1: Manufacturer: syz [ 808.183266][T13938] usb 5-1: SerialNumber: syz [ 808.201877][T13938] usb 5-1: config 0 descriptor?? [ 808.274969][ T7] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 808.284076][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.311381][ T7] usb 3-1: Product: syz [ 808.324472][ T7] usb 3-1: Manufacturer: syz [ 808.329799][ T7] usb 3-1: SerialNumber: syz [ 808.347963][ T7] usb 3-1: config 0 descriptor?? [ 808.369070][T23957] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9163'. [ 808.416901][ T7] radio-si470x 3-1:0.35: could not find interrupt in endpoint [ 808.435604][ T7] radio-si470x: probe of 3-1:0.35 failed with error -5 [ 808.499809][T13938] usb 5-1: USB disconnect, device number 68 [ 808.648837][ T7] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 808.676047][ T7] usbhid 3-1:0.35: couldn't find an input interrupt endpoint [ 808.777967][ T9309] udevd[9309]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 808.890695][ T7] usb 3-1: USB disconnect, device number 57 [ 809.119435][T23983] netlink: 372 bytes leftover after parsing attributes in process `syz.1.9175'. [ 809.151800][T23983] netlink: 'syz.1.9175': attribute type 3 has an invalid length. [ 809.184252][T23983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9175'. [ 809.271842][T23961] loop3: detected capacity change from 0 to 32768 [ 809.340570][T23995] netlink: 220 bytes leftover after parsing attributes in process `syz.4.9181'. [ 809.428758][T23961] XFS (loop3): Mounting V5 Filesystem [ 809.536310][T24006] loop2: detected capacity change from 0 to 4096 [ 809.621603][T24006] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 809.655567][T23961] XFS (loop3): Ending clean mount [ 809.702814][T23961] XFS (loop3): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_finobt block 0x20 [ 809.749760][T23961] XFS (loop3): Unmount and run xfs_repair [ 809.755849][T23961] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 809.774276][T24006] ntfs3: loop2: Failed to load $Extend. [ 809.832327][T23961] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 809.853290][T23961] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 809.907169][T24023] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 809.912965][T23961] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 809.957896][T23961] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 809.975419][T24025] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9193'. [ 809.984645][T23961] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 810.004973][T23961] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 ................ [ 810.018227][T23961] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 810.081204][T23961] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 810.140655][T23961] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x20 len 8 error 74 [ 810.178737][T23961] XFS (loop3): Failed to initialize disk quotas. [ 810.485194][ T4386] XFS (loop3): Unmounting Filesystem [ 810.550527][T24051] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 810.837255][T24057] loop0: detected capacity change from 0 to 2048 [ 810.893167][T24057] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 811.692541][T24095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9228'. [ 812.468054][T24137] loop2: detected capacity change from 0 to 4096 [ 812.775536][T24153] netlink: 'syz.2.9258': attribute type 1 has an invalid length. [ 812.899457][T24159] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 813.106615][T13938] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 813.271105][ T13] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 813.311465][T24185] ubi0: attaching mtd0 [ 813.319058][T24185] ubi0: scanning is finished [ 813.368896][T24185] ubi0: empty MTD device detected [ 813.395171][T13938] usb 4-1: Using ep0 maxpacket: 32 [ 813.545405][T13938] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 813.554721][ T13] usb 3-1: Using ep0 maxpacket: 16 [ 813.561905][T13938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.570902][T24185] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 813.582612][T13938] usb 4-1: config 0 descriptor?? [ 813.589031][T24185] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 813.596666][T24185] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 813.604786][T24185] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 813.614015][T24185] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 813.626545][T24185] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 813.637440][T13938] gspca_main: sq930x-2.14.0 probing 041e:403c [ 813.649605][T24185] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 587167680 [ 813.660462][T24185] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 813.679241][T24194] ubi0: background thread "ubi_bgt0d" started, PID 24194 [ 813.685343][ T13] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 813.705863][ T13] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 813.738174][ T13] usb 3-1: config 0 has no interface number 0 [ 813.769496][T24195] loop0: detected capacity change from 0 to 4096 [ 813.813012][T24195] __ntfs_warning: 6 callbacks suppressed [ 813.813029][T24195] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 813.823786][ T4369] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 813.880423][T24195] ntfs: (device loop0): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 813.899883][T24195] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 813.909239][ T13] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 813.929709][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.940511][T24195] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 813.959749][ T13] usb 3-1: Product: syz [ 813.969907][ T13] usb 3-1: Manufacturer: syz [ 813.983488][ T13] usb 3-1: SerialNumber: syz [ 814.002093][T24195] ntfs: volume version 3.1. [ 814.010634][ T13] usb 3-1: config 0 descriptor?? [ 814.089997][T13938] gspca_sq930x: ucbus_write failed -71 [ 814.095629][T13938] sq930x: probe of 4-1:0.0 failed with error -71 [ 814.140084][T13938] usb 4-1: USB disconnect, device number 31 [ 814.196846][ T4369] usb 2-1: Using ep0 maxpacket: 16 [ 814.219020][T24201] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9280'. [ 814.235095][ T4344] ntfs: (device loop0): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 814.282546][ T4344] ntfs: (device loop0): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 814.299774][ T5745] usb 3-1: USB disconnect, device number 58 [ 814.325335][ T4369] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 814.335078][ T4369] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 255, changing to 11 [ 814.358109][ T4378] ntfs: (device loop0): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 814.410667][ T4369] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 814.441064][ T4369] usb 2-1: config 0 interface 0 has no altsetting 0 [ 814.574688][T24207] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.9281'. [ 814.596288][T24209] netlink: 'syz.4.9284': attribute type 4 has an invalid length. [ 814.605130][T24209] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.9284'. [ 814.633529][ T4369] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 814.649215][ T4369] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.649240][ T4369] usb 2-1: Product: syz [ 814.649257][ T4369] usb 2-1: Manufacturer: syz [ 814.649272][ T4369] usb 2-1: SerialNumber: syz [ 814.673588][ T4369] usb 2-1: config 0 descriptor?? [ 814.700045][T24192] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 814.956262][T24192] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 815.000797][ T4369] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input65 [ 815.181650][T24235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9296'. [ 815.244677][ T4369] usb 2-1: USB disconnect, device number 68 [ 815.713575][ T1092] block nbd4: Attempted send on invalid socket [ 815.719864][ T1092] blk_update_request: I/O error, dev nbd4, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 815.754924][T24255] VFS: could not find a valid V7 on nbd4. [ 815.825752][T24261] netlink: 'syz.0.9310': attribute type 9 has an invalid length. [ 816.126576][T24276] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9317'. [ 816.328474][T24239] loop3: detected capacity change from 0 to 32768 [ 816.705338][T24312] loop0: detected capacity change from 0 to 2048 [ 816.846998][T24312] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 816.908615][T24327] netlink: 'syz.2.9334': attribute type 1 has an invalid length. [ 816.908992][T24312] attempt to access beyond end of device [ 816.908992][T24312] loop0: rw=524288, want=33554432, limit=2048 [ 816.933403][T24328] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 816.960790][T24327] netlink: 'syz.2.9334': attribute type 1 has an invalid length. [ 816.994054][T24312] attempt to access beyond end of device [ 816.994054][T24312] loop0: rw=0, want=33554432, limit=2048 [ 817.002140][T24330] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.9327'. [ 817.060101][T24312] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=3) [ 817.081472][T24312] NILFS (loop0): error -5 reading inode: ino=12 [ 817.461897][T24344] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9342'. [ 817.497512][T24344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9342'. [ 817.517341][T24341] loop3: detected capacity change from 0 to 4096 [ 817.826302][T24357] xt_TCPMSS: Only works on TCP SYN packets [ 817.990110][T24368] netlink: 'syz.4.9354': attribute type 1 has an invalid length. [ 818.042527][T24368] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9354'. [ 818.058408][T24368] NCSI netlink: No device for ifindex 0 [ 818.130797][ T4369] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 818.323264][T13938] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 818.398030][ T4369] usb 4-1: Using ep0 maxpacket: 16 [ 818.461895][T24394] device veth3 entered promiscuous mode [ 818.471719][T24396] fuse: Bad value for 'group_id' [ 818.513153][T24398] netlink: 92 bytes leftover after parsing attributes in process `syz.2.9369'. [ 818.526570][ T4369] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 818.535488][ T4369] usb 4-1: config 0 has no interface number 0 [ 818.611847][T13938] usb 1-1: Using ep0 maxpacket: 32 [ 818.729419][ T4369] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 818.740581][T13938] usb 1-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 818.749739][T13938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.758303][ T4369] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.795866][T13938] usb 1-1: config 0 descriptor?? [ 818.830068][ T4369] usb 4-1: Product: syz [ 818.834321][ T4369] usb 4-1: Manufacturer: syz [ 818.852562][ T4369] usb 4-1: SerialNumber: syz [ 818.852614][T13938] rndis_host: probe of 1-1:0.0 failed with error -22 [ 818.888681][ T4369] usb 4-1: config 0 descriptor?? [ 818.934838][ T4369] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 818.955647][T24416] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 819.068958][T13938] usb 1-1: USB disconnect, device number 52 [ 819.408848][ T4369] gspca_spca1528: reg_w err -71 [ 819.451287][ T4369] spca1528: probe of 4-1:0.1 failed with error -71 [ 819.474458][T24447] device wlan0 entered promiscuous mode [ 819.483448][ T4369] usb 4-1: USB disconnect, device number 32 [ 819.557116][T24450] loop2: detected capacity change from 0 to 2048 [ 819.584579][T13938] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 819.606494][T24450] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 819.889629][T13938] usb 5-1: Using ep0 maxpacket: 16 [ 820.023128][T13938] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 820.032875][T13938] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 255, changing to 11 [ 820.087629][T13938] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 820.111882][T24464] loop2: detected capacity change from 0 to 4096 [ 820.122516][T13938] usb 5-1: config 0 interface 0 has no altsetting 0 [ 820.191090][T24464] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 820.247833][T24464] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 820.349002][T13938] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 820.392049][T24464] ntfs: volume version 3.1. [ 820.397679][T13938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.405731][T13938] usb 5-1: Product: syz [ 820.447101][T13938] usb 5-1: Manufacturer: syz [ 820.471758][T13938] usb 5-1: SerialNumber: syz [ 820.498023][T13938] usb 5-1: config 0 descriptor?? [ 820.537578][T24436] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 820.792144][T24436] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 820.848180][T13938] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input66 [ 821.104181][T13938] usb 5-1: USB disconnect, device number 69 [ 821.124380][ T3544] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 821.335283][T24523] loop3: detected capacity change from 0 to 4096 [ 821.355178][T24526] loop2: detected capacity change from 0 to 4096 [ 821.417851][T24526] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 821.452298][T24523] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 821.529470][T24523] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 821.560752][T24523] ntfs3: loop3: mft corrupted [ 821.581987][T24523] ntfs3: loop3: Failed to load $Extend. [ 821.613065][T24539] __nla_validate_parse: 5 callbacks suppressed [ 821.613087][T24539] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.9439'. [ 821.799967][ T4344] ntfs3: loop3: ino=1e, Internal error [ 821.806488][ T4344] ntfs3: loop3: ntfs3_write_inode r=1e failed, -22. [ 821.844113][T24549] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9443'. [ 821.893646][T24549] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9443'. [ 821.966564][T24553] netlink: 'syz.2.9447': attribute type 2 has an invalid length. [ 822.013530][T24553] netlink: 'syz.2.9447': attribute type 8 has an invalid length. [ 822.065007][T24553] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9447'. [ 822.238281][T24565] tipc: Can't bind to reserved service type 0 [ 822.618179][T24583] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9460'. [ 822.672441][ T7199] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 823.059064][ T7199] usb 2-1: config 5 has an invalid interface number: 123 but max is 0 [ 823.072151][ T7199] usb 2-1: config 5 has no interface number 0 [ 823.084330][ T7199] usb 2-1: config 5 interface 123 has no altsetting 0 [ 823.171201][T24610] netlink: 'syz.4.9470': attribute type 1 has an invalid length. [ 823.267505][ T13] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 823.275848][ T7199] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 823.288944][ T7199] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.304800][ T7199] usb 2-1: Product: syz [ 823.313913][ T7199] usb 2-1: Manufacturer: syz [ 823.323507][ T7199] usb 2-1: SerialNumber: syz [ 823.409028][T24617] loop0: detected capacity change from 0 to 1024 [ 823.491443][T24617] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 823.491486][T24617] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 823.491508][T24617] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 823.491528][T24617] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 823.539850][ T13] usb 4-1: Using ep0 maxpacket: 8 [ 823.630734][T24617] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,sysvgroups,nomblk_io_submit,bsddf,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,errors=continue,,errors=continue. Quota mode: writeback. [ 823.663607][ T7199] comedi comedi5: driver 'ni6501' has successfully auto-configured 'ni6501'. [ 823.679083][ T13] usb 4-1: config 0 has an invalid interface number: 78 but max is 0 [ 823.698712][ T13] usb 4-1: config 0 has no interface number 0 [ 823.708453][T24628] netlink: 'syz.4.9476': attribute type 28 has an invalid length. [ 823.719053][ T7199] usb 2-1: USB disconnect, device number 69 [ 823.726042][T24628] netlink: 'syz.4.9476': attribute type 3 has an invalid length. [ 823.748763][T24628] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9476'. [ 823.903526][ T13] usb 4-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=f0.21 [ 823.923704][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.948109][T24636] xt_CT: You must specify a L4 protocol and not use inversions on it [ 823.967485][ T13] usb 4-1: Product: syz [ 823.971958][ T13] usb 4-1: Manufacturer: syz [ 823.976603][ T13] usb 4-1: SerialNumber: syz [ 824.011222][ T13] usb 4-1: config 0 descriptor?? [ 824.092674][T24642] netlink: 'syz.4.9483': attribute type 4 has an invalid length. [ 824.109434][T24642] netlink: 236 bytes leftover after parsing attributes in process `syz.4.9483'. [ 824.128477][T24643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9482'. [ 824.333179][ T13] usbhid 4-1:0.78: couldn't find an input interrupt endpoint [ 824.374847][ T13] usb 4-1: USB disconnect, device number 33 [ 824.673790][T24664] netlink: 'syz.0.9492': attribute type 2 has an invalid length. [ 824.731513][T24664] netlink: 1 bytes leftover after parsing attributes in process `syz.0.9492'. [ 824.771408][T24671] ieee802154 phy0 wpan0: encryption failed: -90 [ 824.998424][T24683] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.9503'. [ 825.043255][T24686] usb usb7: usbfs: process 24686 (syz.1.9504) did not claim interface 0 before use [ 825.202553][ T13] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 825.464086][ T13] usb 4-1: Using ep0 maxpacket: 16 [ 825.592593][ T13] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 825.614174][ T13] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 255, changing to 11 [ 825.661159][ T13] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 825.694895][ T13] usb 4-1: config 0 interface 0 has no altsetting 0 [ 825.784791][ T5745] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 825.881206][ T13] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 825.896019][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.920556][T24709] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 825.931464][ T13] usb 4-1: Product: syz [ 825.942315][ T13] usb 4-1: Manufacturer: syz [ 825.963113][ T13] usb 4-1: SerialNumber: syz [ 825.985393][ T13] usb 4-1: config 0 descriptor?? [ 826.020769][T24677] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 826.073438][ T5745] usb 3-1: Using ep0 maxpacket: 8 [ 826.218141][ T5745] usb 3-1: config 7 interface 0 has no altsetting 0 [ 826.260806][T24677] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 826.321747][ T13] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input67 [ 826.426607][ T5745] usb 3-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=58.70 [ 826.445607][ T5745] usb 3-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3 [ 826.494226][ T5745] usb 3-1: Product: syz [ 826.498480][ T5745] usb 3-1: Manufacturer: syz [ 826.533051][ T5745] usb 3-1: SerialNumber: syz [ 826.568869][ T5376] usb 4-1: USB disconnect, device number 34 [ 826.633126][ T4360] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 826.659259][T24717] loop0: detected capacity change from 0 to 4096 [ 826.779203][T24717] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 826.892844][T24717] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 826.909145][ T5745] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 827.024886][ T5745] pwc: Failed to set LED on/off time (-71) [ 827.031626][T24717] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 827.046176][ T5745] pwc: send_video_command error -71 [ 827.057354][ T5745] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 827.065833][ T5745] Philips webcam: probe of 3-1:7.0 failed with error -71 [ 827.110574][T24717] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 827.160488][ T5745] usb 3-1: USB disconnect, device number 59 [ 827.195971][T24717] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 827.282123][T24717] ntfs: volume version 3.1. [ 827.312533][T24717] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 827.428048][T24717] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 827.489902][T24717] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 827.583013][T24717] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 827.605935][T24717] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 828.087903][T24756] netlink: 'syz.0.9539': attribute type 1 has an invalid length. [ 828.156311][T24756] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9539'. [ 828.222427][T24756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9539'. [ 828.384607][T24767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9546'. [ 828.692174][T24781] loop3: detected capacity change from 0 to 512 [ 828.966303][T24781] EXT4-fs (loop3): orphan cleanup on readonly fs [ 829.061190][T24781] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.9550: bg 0: block 248: padding at end of block bitmap is not set [ 829.197257][T24781] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.9550: Failed to acquire dquot type 1 [ 829.278191][T24781] EXT4-fs (loop3): 1 truncate cleaned up [ 829.295954][T24802] ip6t_REJECT: ECHOREPLY is not supported [ 829.312953][T24781] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 829.482479][T24806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9563'. [ 829.989700][T24828] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551614) [ 830.056521][T24828] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 830.435796][T24833] loop2: detected capacity change from 0 to 4096 [ 830.561053][T24833] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 830.651230][T24833] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 831.097034][ T4379] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 831.796122][T24903] lo speed is unknown, defaulting to 1000 [ 831.806461][T24899] loop3: detected capacity change from 0 to 1764 [ 831.824929][T24903] lo speed is unknown, defaulting to 1000 [ 831.834953][T24903] lo speed is unknown, defaulting to 1000 [ 831.920894][T13935] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 831.933653][T24903] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 832.004280][T24903] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 832.012202][T24905] loop0: detected capacity change from 0 to 4096 [ 832.129320][T24903] lo speed is unknown, defaulting to 1000 [ 832.177014][T24903] lo speed is unknown, defaulting to 1000 [ 832.201805][T24903] lo speed is unknown, defaulting to 1000 [ 832.208632][T24903] lo speed is unknown, defaulting to 1000 [ 832.262245][T24903] lo speed is unknown, defaulting to 1000 [ 832.397986][T13935] usb 3-1: config 0 has an invalid interface number: 238 but max is 0 [ 832.402558][ T7199] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 832.412537][T13935] usb 3-1: config 0 has no interface number 0 [ 832.448923][T13935] usb 3-1: config 0 interface 238 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 832.485220][T13935] usb 3-1: config 0 interface 238 altsetting 0 endpoint 0x88 has invalid maxpacket 47698, setting to 1024 [ 832.530289][T13935] usb 3-1: config 0 interface 238 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1024 [ 832.557169][T24925] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9618'. [ 832.582440][T24925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9618'. [ 832.702476][ T7199] usb 4-1: Using ep0 maxpacket: 8 [ 832.761205][T24933] netlink: 'syz.0.9623': attribute type 2 has an invalid length. [ 832.779277][T24933] netlink: 'syz.0.9623': attribute type 1 has an invalid length. [ 832.787694][T24933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9623'. [ 832.797529][T13935] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=76.6a [ 832.817792][T13935] usb 3-1: New USB device strings: Mfr=7, Product=2, SerialNumber=3 [ 832.827482][T13935] usb 3-1: Product: syz [ 832.830470][ T7199] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 832.840043][T13935] usb 3-1: Manufacturer: syz [ 832.840067][T13935] usb 3-1: SerialNumber: syz [ 832.856053][ T7199] usb 4-1: config 179 has no interface number 0 [ 832.872152][ T5745] usb 2-1: new low-speed USB device number 70 using dummy_hcd [ 832.880318][ T7199] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 832.880992][T13935] usb 3-1: config 0 descriptor?? [ 832.900578][ T7199] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 832.912550][ T7199] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 832.943754][ T7199] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 832.965859][ T7199] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 832.992189][T24891] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 833.000190][ T7199] usb 4-1: config 179 interface 65 has no altsetting 0 [ 833.016661][T13935] ni6501 3-1:0.238: driver 'ni6501' failed to auto-configure device. [ 833.038333][ T7199] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 833.048113][ T7199] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.138881][ T7199] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input68 [ 833.265773][ T7199] usb 3-1: USB disconnect, device number 60 [ 833.342931][ T5745] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 is Bulk; changing to Interrupt [ 833.377345][ T5745] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 833.418912][ T5745] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.437321][T24952] netlink: 'syz.4.9632': attribute type 1 has an invalid length. [ 833.482403][T24923] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 833.483222][ T4369] usb 4-1: USB disconnect, device number 35 [ 833.495908][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 833.513165][T24952] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9632'. [ 833.552650][ T4369] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 833.759639][ T5745] usb 2-1: string descriptor 0 read error: -71 [ 833.768095][ T5745] hub 2-1:32.0: USB hub found [ 833.855949][ T5745] hub 2-1:32.0: config failed, can't read hub descriptor (err -22) [ 833.937970][T24957] loop0: detected capacity change from 0 to 40427 [ 833.998870][ T5745] usb 2-1: USB disconnect, device number 70 [ 834.024884][T24957] F2FS-fs (loop0): Fix alignment : internally, start(4096) end(16896) block(12288) [ 834.070337][T24957] F2FS-fs (loop0): invalid crc value [ 834.081993][T24957] F2FS-fs (loop0): Found nat_bits in checkpoint [ 834.316390][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 834.349061][T24957] F2FS-fs (loop0): recover fsync data on readonly fs [ 834.389687][T24957] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 834.924461][T25018] netlink: 'syz.1.9664': attribute type 4 has an invalid length. [ 834.946079][T25018] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9664'. [ 834.987803][T25020] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9667'. [ 835.262476][T25039] loop0: detected capacity change from 0 to 128 [ 835.344781][T25045] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9678'. [ 835.358935][T25035] loop3: detected capacity change from 0 to 4096 [ 835.365543][T25045] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9678'. [ 835.502393][T25035] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 835.549441][T25035] ntfs3: loop3: ntfs_sync_fs r=9 failed, -22. [ 835.560366][T25035] ntfs3: loop3: ntfs_evict_inode r=9 failed, -22. [ 835.573368][T25057] netlink: 'syz.0.9683': attribute type 32 has an invalid length. [ 835.817537][T25071] loop3: detected capacity change from 0 to 256 [ 836.075585][T25075] loop2: detected capacity change from 0 to 4096 [ 836.098796][T25084] CIFS mount error: No usable UNC path provided in device string! [ 836.098796][T25084] [ 836.098825][T25084] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 836.150447][T25075] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 836.373796][T25099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9701'. [ 836.373828][T25099] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9701'. [ 836.840912][T25119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9713'. [ 837.068392][T25129] loop3: detected capacity change from 0 to 1024 [ 837.629730][ T5745] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 837.713030][T25148] loop3: detected capacity change from 0 to 1764 [ 837.870165][T25158] cgroup: Name too long [ 837.991880][T25121] loop0: detected capacity change from 0 to 32768 [ 838.056930][ T5745] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 838.100577][ T5745] usb 3-1: config 0 has no interface number 0 [ 838.121314][ T5745] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 838.136696][ T5745] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 838.235436][T25175] netlink: 'syz.1.9739': attribute type 21 has an invalid length. [ 838.243561][T25175] netlink: 156 bytes leftover after parsing attributes in process `syz.1.9739'. [ 838.328474][T25121] XFS (loop0): Mounting V5 Filesystem [ 838.399947][ T5745] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 838.409803][ T5745] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.496115][ T5745] usb 3-1: Product: syz [ 838.500371][ T5745] usb 3-1: Manufacturer: syz [ 838.550758][ T5745] usb 3-1: SerialNumber: syz [ 838.570823][ T5745] usb 3-1: config 0 descriptor?? [ 838.621081][T25121] XFS (loop0): Ending clean mount [ 838.646140][T25138] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 838.677324][T25193] netlink: 84 bytes leftover after parsing attributes in process `syz.4.9745'. [ 838.700542][ T5745] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 838.731292][ T5745] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 838.765441][ T4378] XFS (loop0): Unmounting Filesystem [ 838.965904][ C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 839.198857][ T5745] usb 3-1: USB disconnect, device number 61 [ 839.220782][T25217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9757'. [ 839.240259][ T5745] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 839.305380][ T5745] cyberjack 3-1:0.69: device disconnected [ 839.589042][T25229] netlink: 'syz.3.9763': attribute type 2 has an invalid length. [ 839.606632][T25229] netlink: 'syz.3.9763': attribute type 1 has an invalid length. [ 840.074775][T25254] loop0: detected capacity change from 0 to 1024 [ 840.262995][T25254] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 2: comm syz.0.9775: lblock 2 mapped to illegal pblock 2 (length 1) [ 840.290427][T25254] __quota_error: 8 callbacks suppressed [ 840.290447][T25254] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 840.306219][T25254] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 48: comm syz.0.9775: lblock 0 mapped to illegal pblock 48 (length 1) [ 840.331097][T25254] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 840.348967][T25254] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.9775: Failed to acquire dquot type 0 [ 840.360808][T25254] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 840.376237][T25254] EXT4-fs error (device loop0): ext4_evict_inode:282: inode #11: comm syz.0.9775: mark_inode_dirty error [ 840.394146][T25254] EXT4-fs warning (device loop0): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 840.404772][T25254] EXT4-fs (loop0): 1 orphan inode deleted [ 840.417240][T25254] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 840.440214][ T154] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 840.539389][ T154] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 840.579865][ T154] EXT4-fs error (device loop0): ext4_release_dquot:6270: comm kworker/u4:2: Failed to release dquot type 0 [ 840.622399][ T4369] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 840.678111][ T4344] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 840.678536][ T4344] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 840.678574][ T4344] EXT4-fs error (device loop0): ext4_release_dquot:6270: comm kworker/u4:4: Failed to release dquot type 0 [ 840.699096][ T4378] EXT4-fs error (device loop0): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 840.825188][ T4378] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 840.831443][ T4378] EXT4-fs error (device loop0): ext4_quota_off:6540: inode #3: comm syz-executor: mark_inode_dirty error [ 840.908230][ T4369] usb 4-1: Using ep0 maxpacket: 16 [ 841.199831][ T4369] usb 4-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 841.209144][ T4369] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.257977][ T4369] usb 4-1: Product: syz [ 841.262241][ T4369] usb 4-1: Manufacturer: syz [ 841.283368][T25301] tmpfs: Bad value for 'mpol' [ 841.288213][ T4369] usb 4-1: SerialNumber: syz [ 841.307507][ T4369] usb 4-1: config 0 descriptor?? [ 841.350161][ T4369] hub 4-1:0.0: bad descriptor, ignoring hub [ 841.356160][ T4369] hub: probe of 4-1:0.0 failed with error -5 [ 841.710301][T25323] loop0: detected capacity change from 0 to 256 [ 841.723764][ T5745] usb 4-1: USB disconnect, device number 36 [ 841.793322][T25323] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 841.793393][T25323] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 841.804183][T25323] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 841.839138][T25323] exFAT-fs (loop0): failed to exfat_utf8_to_utf16 (estr:ENAMETOOLONG) nls len : 262, unilen : 257 > 255 [ 842.701375][T25356] netlink: 'syz.3.9824': attribute type 11 has an invalid length. [ 843.313441][T25344] loop2: detected capacity change from 0 to 32768 [ 843.532983][T25405] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 0 [ 843.562384][T13938] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 843.965327][T25424] xt_CT: You must specify a L4 protocol and not use inversions on it [ 844.145229][T25431] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9862'. [ 844.176113][T25435] netlink: 'syz.1.9863': attribute type 7 has an invalid length. [ 844.204813][T13938] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 844.215281][T25437] loop0: detected capacity change from 0 to 736 [ 844.233869][T13938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.245520][T13938] usb 5-1: Product: syz [ 844.250463][T13938] usb 5-1: Manufacturer: syz [ 844.255558][T13938] usb 5-1: SerialNumber: syz [ 844.300902][T13938] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 844.771951][T25466] loop0: detected capacity change from 0 to 128 [ 844.807312][T25468] loop3: detected capacity change from 0 to 128 [ 844.910248][T25468] affs: No valid root block on device loop3 [ 845.070005][T13938] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 845.511800][T13935] usb 5-1: USB disconnect, device number 70 [ 845.528011][T25503] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 845.723966][T25516] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.9896'. [ 846.181630][T13938] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 846.195533][T13938] ath9k_htc: Failed to initialize the device [ 846.229889][T13935] usb 5-1: ath9k_htc: USB layer deinitialized [ 846.256121][ T5745] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 846.307368][T25545] 9pnet: p9_fd_create_unix (25545): problem connecting socket: ./file0: -111 [ 846.354920][T25541] overlayfs: option "workdir=./file1\" is useless in a non-upper mount, ignore [ 846.390613][T25541] overlayfs: missing 'lowerdir' [ 846.428234][T25550] loop3: detected capacity change from 0 to 256 [ 846.551470][T25559] loop2: detected capacity change from 0 to 16 [ 846.566077][ T5745] usb 1-1: Using ep0 maxpacket: 16 [ 846.621335][T25559] erofs: (device loop2): mounted with root inode @ nid 36. [ 846.645002][T25559] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 46 [ 846.762385][T25565] loop3: detected capacity change from 0 to 2048 [ 846.796444][ C1] vkms_vblank_simulate: vblank timer overrun [ 846.809908][T13935] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 846.829538][T25569] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9923'. [ 846.908476][ T5745] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 846.928354][ T5745] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.952473][ T5745] usb 1-1: Product: syz [ 846.970071][ T5745] usb 1-1: Manufacturer: syz [ 846.980344][T25569] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9923'. [ 846.988998][ T5745] usb 1-1: SerialNumber: syz [ 847.018887][ T5745] r8152-cfgselector 1-1: config 0 descriptor?? [ 847.114516][T13935] usb 2-1: Using ep0 maxpacket: 16 [ 847.160401][T25582] netlink: 'syz.3.9925': attribute type 44 has an invalid length. [ 847.496543][T13935] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 847.505687][T13935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.549720][T13935] usb 2-1: Product: syz [ 847.553963][T13935] usb 2-1: Manufacturer: syz [ 847.558603][T13935] usb 2-1: SerialNumber: syz [ 847.572241][T13935] r8152-cfgselector 2-1: config 0 descriptor?? [ 847.581765][ T5745] r8152-cfgselector 1-1: Unknown version 0x0000 [ 847.613816][ T5745] r8152-cfgselector 1-1: USB disconnect, device number 53 [ 847.778995][T25603] comedi comedi0: comedi_parport: I/O port conflict (0x3,3) [ 848.001285][T25611] IPv6: NLM_F_CREATE should be specified when creating new route [ 848.071610][T25590] loop3: detected capacity change from 0 to 32768 [ 848.105095][T25615] loop2: detected capacity change from 0 to 256 [ 848.116534][T13935] r8152-cfgselector 2-1: Unknown version 0x0000 [ 848.136728][T13935] r8152-cfgselector 2-1: bad CDC descriptors [ 848.180273][T13935] r8152-cfgselector 2-1: Unknown version 0x0000 [ 848.206227][T13935] r8152-cfgselector 2-1: USB disconnect, device number 71 [ 848.305551][T25590] XFS (loop3): Mounting V5 Filesystem [ 848.399352][T25636] loop0: detected capacity change from 0 to 64 [ 848.409323][T25637] ieee802154 phy0 wpan0: encryption failed: -22 [ 848.421220][T25633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 848.466978][T25590] XFS (loop3): Ending clean mount [ 848.496392][T25636] MINIX-fs: mounting file system with errors, running fsck is recommended [ 848.702974][ T4386] XFS (loop3): Unmounting Filesystem [ 849.011490][T25654] sctp: [Deprecated]: syz.0.9957 (pid 25654) Use of int in maxseg socket option. [ 849.011490][T25654] Use struct sctp_assoc_value instead [ 849.340289][T25670] loop2: detected capacity change from 0 to 2048 [ 849.448371][T25674] dlm: no locking on control device [ 849.455298][T25670] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 849.545813][T25670] Invalid option length (0) for dns_resolver key [ 849.640227][ T4369] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 849.722561][T25682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9974'. [ 849.933561][ T4369] usb 1-1: Using ep0 maxpacket: 32 [ 849.940690][T25689] xt_CT: No such helper "snmp" [ 850.059362][T25699] loop2: detected capacity change from 0 to 1764 [ 850.066214][ T4369] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 850.091302][ T4369] usb 1-1: config 0 has no interface number 0 [ 850.118240][ T4369] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 850.329326][ T4369] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 850.338544][ T4369] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.380190][ T4369] usb 1-1: Product: syz [ 850.384708][ T4369] usb 1-1: Manufacturer: syz [ 850.400265][ T4369] usb 1-1: SerialNumber: syz [ 850.436670][ T4369] usb 1-1: config 0 descriptor?? [ 850.457558][T25671] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 850.619995][ T7] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 850.667907][T25732] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9997'. [ 850.690385][T25732] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9997'. [ 850.718299][T25671] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 850.751299][ T7199] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 850.895710][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 850.992090][ T4369] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 851.003087][ T4369] asix: probe of 1-1:0.188 failed with error -71 [ 851.019247][ T4369] usb 1-1: USB disconnect, device number 54 [ 851.026037][ T7] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 851.040110][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 851.061585][ T7] usb 4-1: config 0 has no interface number 0 [ 851.109436][T13941] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 851.162971][ T7199] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 851.179087][ T7199] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 851.190376][ T7199] usb 3-1: config 0 interface 0 has no altsetting 0 [ 851.237706][ T7] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 851.247218][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.262884][ T7] usb 4-1: Product: syz [ 851.267270][ T7] usb 4-1: Manufacturer: syz [ 851.275248][ T7] usb 4-1: SerialNumber: syz [ 851.286045][ T7] usb 4-1: config 0 descriptor?? [ 851.387224][T13941] usb 2-1: Using ep0 maxpacket: 8 [ 851.387998][ T7199] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 851.406827][ T7199] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 851.425571][ T7199] usb 3-1: Product: syz [ 851.430102][ T7199] usb 3-1: Manufacturer: syz [ 851.445598][ T7199] usb 3-1: SerialNumber: syz [ 851.456058][ T7199] usb 3-1: config 0 descriptor?? [ 851.516449][ T7199] hub 3-1:0.0: bad descriptor, ignoring hub [ 851.522633][ T7199] hub: probe of 3-1:0.0 failed with error -5 [ 851.558448][T13941] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 851.559406][ T7199] usb 3-1: selecting invalid altsetting 0 [ 851.573026][ T7] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 851.597669][T13941] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 851.610513][ T7] usb 4-1: No valid video chain found. [ 851.616657][T13941] usb 2-1: config 0 has no interface number 0 [ 851.806634][ T7199] usb 4-1: USB disconnect, device number 37 [ 851.836362][T13941] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 851.850285][T13941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.868282][T13941] usb 2-1: Product: syz [ 851.883611][T13941] usb 2-1: Manufacturer: syz [ 851.894001][T13941] usb 2-1: SerialNumber: syz [ 851.916125][T13941] usb 2-1: config 0 descriptor?? [ 851.975269][ T7] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 852.013473][ T4369] usb 3-1: USB disconnect, device number 62 [ 852.035658][T25779] SET target dimension over the limit! [ 852.223810][T25787] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 852.244132][T13941] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 852.250620][T13941] usb 2-1: No valid video chain found. [ 852.330477][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 852.336919][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 852.403180][ T7] usb 1-1: unable to get BOS descriptor or descriptor too short [ 852.474425][ T4369] usb 2-1: USB disconnect, device number 72 [ 852.509812][ T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 852.529782][ T7] usb 1-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 852.580006][ T7] usb 1-1: config 1 interface 0 has no altsetting 1 [ 852.766394][ T7] usb 1-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 852.787585][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.797602][ T7] usb 1-1: Product: syz [ 852.808502][ T7] usb 1-1: Manufacturer: syz [ 852.813567][ T7] usb 1-1: SerialNumber: syz [ 852.870386][ T7] smsusb:smsusb_probe: board id=8, interface number 0 [ 853.043420][T25825] comedi comedi0: comedi_config --init_data is deprecated [ 853.119251][ T7] smsusb:smsusb_probe: Device initialized with return code -19 [ 853.373639][ T4369] usb 1-1: USB disconnect, device number 55 [ 853.628047][T25854] xt_bpf: check failed: parse error [ 853.773238][T25861] openvswitch: netlink: Missing key (keys=40, expected=80) [ 853.847504][T25865] nfs: Unknown parameter 'ntext' [ 854.048055][ T26] audit: type=1400 audit(2000000111.609:44): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=25877 comm="syz.2.10067" [ 854.217701][T25889] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10074'. [ 854.577046][T25915] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 854.607948][T25918] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.10087'. [ 854.617561][T25915] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 854.685513][T25918] openvswitch: netlink: Key type 541 is out of range max 29 [ 854.956671][T25938] loop0: detected capacity change from 0 to 512 [ 855.048568][T25938] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 855.125515][T25938] EXT4-fs (loop0): 1 truncate cleaned up [ 855.131370][T25938] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,debug_want_extra_isize=0x0000000000000068,barrier,jqfmt=vfsold,quota,. Quota mode: writeback. [ 855.205727][T25955] x_tables: unsorted entry at hook 2 [ 855.311900][T25959] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 855.581387][T25983] netlink: 48 bytes leftover after parsing attributes in process `syz.2.10119'. [ 855.706200][ T4369] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 856.091259][ T4369] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 856.099448][ T4369] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 856.161105][ T4369] usb 2-1: config 0 interface 0 has no altsetting 0 [ 856.336696][ T5745] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 856.358240][ T4369] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 856.367365][ T4369] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 856.402072][ T4369] usb 2-1: Product: syz [ 856.411732][ T4369] usb 2-1: Manufacturer: syz [ 856.440907][ T4369] usb 2-1: SerialNumber: syz [ 856.459547][T26013] netlink: 80 bytes leftover after parsing attributes in process `syz.4.10134'. [ 856.477531][ T4369] usb 2-1: config 0 descriptor?? [ 856.521941][ T4369] hub 2-1:0.0: bad descriptor, ignoring hub [ 856.527931][ T4369] hub: probe of 2-1:0.0 failed with error -5 [ 856.543292][T26007] loop2: detected capacity change from 0 to 4096 [ 856.554176][ T4369] usb 2-1: selecting invalid altsetting 0 [ 856.646767][ T5745] usb 1-1: Using ep0 maxpacket: 8 [ 856.720659][T26007] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 856.776356][T26007] ntfs3: loop2: Failed to load $Extend. [ 856.786617][ T5745] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 856.829410][ T5745] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 856.856549][ T5745] usb 1-1: config 0 interface 0 has no altsetting 0 [ 857.001318][ T7] usb 2-1: USB disconnect, device number 73 [ 857.064054][ T5745] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 857.079864][ T5745] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.115187][ T5745] usb 1-1: Product: syz [ 857.127840][ T5745] usb 1-1: Manufacturer: syz [ 857.132508][ T5745] usb 1-1: SerialNumber: syz [ 857.166682][ T5745] usb 1-1: config 0 descriptor?? [ 857.238906][ T5745] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 857.488731][ T5745] snd_usb_toneport 1-1:0.0: cannot get proper max packet size [ 857.499001][ T5745] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 857.527519][ T5745] snd_usb_toneport: probe of 1-1:0.0 failed with error -22 [ 857.551515][T26057] loop3: detected capacity change from 0 to 1764 [ 857.627946][T26065] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10159'. [ 857.673030][T26065] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10159'. [ 857.703913][T26065] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10159'. [ 857.719063][T26065] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 857.794120][T13941] usb 1-1: USB disconnect, device number 56 [ 857.961621][ T5745] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 858.056366][T26084] comedi comedi4: bad chanlist[0]=0xfffffc01 chan=64513 range length=2 [ 858.151923][T26089] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 858.164827][T26089] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 858.273349][T26095] x_tables: duplicate entry at hook 2 [ 858.357718][ T7] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 858.400336][ T5745] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 858.592515][ T5745] usb 3-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 858.601732][ T5745] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.637459][ T5745] usb 3-1: Product: syz [ 858.641715][ T5745] usb 3-1: Manufacturer: syz [ 858.646825][ T5745] usb 3-1: SerialNumber: syz [ 858.678494][ T5745] usb 3-1: config 0 descriptor?? [ 858.705898][T26112] netlink: 'syz.1.10182': attribute type 3 has an invalid length. [ 858.742178][ T7] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 858.742578][ T5745] usbtouchscreen: probe of 3-1:0.0 failed with error -32 [ 858.751017][ T4369] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 858.789736][ T7] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 858.822071][ T7] usb 5-1: config 0 interface 0 has no altsetting 0 [ 858.966803][ T13] usb 3-1: USB disconnect, device number 63 [ 858.998771][ T7] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 859.012846][ T7] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 859.022180][ T7] usb 5-1: Product: syz [ 859.026752][ T7] usb 5-1: Manufacturer: syz [ 859.049160][ T7] usb 5-1: SerialNumber: syz [ 859.068515][ T7] usb 5-1: config 0 descriptor?? [ 859.127967][ T7] hub 5-1:0.0: bad descriptor, ignoring hub [ 859.133975][ T7] hub: probe of 5-1:0.0 failed with error -5 [ 859.156686][ T7] usb 5-1: selecting invalid altsetting 0 [ 859.223143][ T4369] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 859.244523][ T4369] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 859.262629][ T4369] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 859.273458][ T4369] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.343504][T26104] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 859.533502][ T7] usb 5-1: USB disconnect, device number 71 [ 859.546730][T26132] device netdevsim0 entered promiscuous mode [ 859.552887][T26132] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 859.650076][ T4369] usb 1-1: USB disconnect, device number 57 [ 859.938642][T26144] affs: No valid root block on device nbd1 [ 860.035874][T13941] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 860.302642][T13941] usb 3-1: Using ep0 maxpacket: 16 [ 860.431329][T13941] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 860.440516][T26142] loop3: detected capacity change from 0 to 32768 [ 860.447205][T13941] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 860.479314][T13941] usb 3-1: config 0 has no interface number 0 [ 860.588262][T26142] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 860.687769][T13941] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 860.696975][T13941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=21 [ 860.789279][T13941] usb 3-1: Product: syz [ 860.793531][T13941] usb 3-1: Manufacturer: syz [ 860.802494][T13941] usb 3-1: SerialNumber: syz [ 860.850084][T26176] libceph: resolve '0' (ret=-3): failed [ 860.871483][T13941] usb 3-1: config 0 descriptor?? [ 860.887761][ T4386] (syz-executor,4386,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 860.914257][T13941] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 860.920695][T13941] usb 3-1: No valid video chain found. [ 860.950538][ T4386] ocfs2: Unmounting device (7,3) on (node local) [ 861.017989][T26174] loop0: detected capacity change from 0 to 4096 [ 861.126127][T26183] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 861.182043][T26174] NILFS error (device loop0): nilfs_dotdot: directory #12 missing '.' [ 861.196517][T13941] usb 3-1: USB disconnect, device number 64 [ 861.275834][T26174] Remounting filesystem read-only [ 861.886723][ T4344] bond0: (slave bond_slave_0): interface is now down [ 861.886608][T26201] bond0: option arp_validate: invalid value (18446744073491447809) [ 861.904900][ T4344] bond0: (slave bond_slave_1): interface is now down [ 861.915442][T26205] netlink: 'syz.2.10225': attribute type 11 has an invalid length. [ 861.949292][ T4344] bond0: now running without any active interface! [ 861.985418][T26205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10225'. [ 862.245337][T26221] loop3: detected capacity change from 0 to 256 [ 862.749963][T26247] netlink: 'syz.2.10248': attribute type 5 has an invalid length. [ 862.848529][T26251] loop3: detected capacity change from 0 to 256 [ 862.882848][T26254] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10251'. [ 862.893586][T26254] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10251'. [ 863.078075][T26260] nft_compat: unsupported protocol 5 [ 863.155699][T26264] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 863.241448][T26270] SET target dimension over the limit! [ 863.424224][ T4369] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 863.568200][T26282] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10265'. [ 863.616734][T26282] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 863.751082][T26290] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 863.887275][T26294] xt_hashlimit: size too large, truncated to 1048576 [ 863.905490][ T4369] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 863.925743][T26294] xt_hashlimit: overflow, try lower: 9223372036854775807/9 [ 863.937522][ T4369] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 863.955368][ T4369] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 864.001949][ T4369] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.044724][T26263] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 864.136695][T26302] loop0: detected capacity change from 0 to 1024 [ 864.384468][T26302] hfsplus: keylen 65060 too large [ 864.399297][ T13] usb 4-1: USB disconnect, device number 38 [ 864.558482][T13935] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 864.591425][T26310] loop2: detected capacity change from 0 to 128 [ 864.617912][T26312] loop0: detected capacity change from 0 to 256 [ 864.739781][T26310] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 864.787195][T26310] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 864.950270][T13935] usb 5-1: config 0 has too many interfaces: 202, using maximum allowed: 32 [ 864.963462][T13935] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 864.995325][T13935] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 202 [ 865.188371][T13935] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 865.204125][T13935] usb 5-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 865.240740][T13935] usb 5-1: Product: syz [ 865.256546][T13935] usb 5-1: Manufacturer: syz [ 865.272544][T13935] usb 5-1: SerialNumber: syz [ 865.293290][T13935] usb 5-1: config 0 descriptor?? [ 865.606337][T13935] snd-usb-audio: probe of 5-1:0.0 failed with error -2 [ 865.689078][T26357] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 865.766830][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 865.829675][T13941] usb 5-1: USB disconnect, device number 72 [ 866.428844][ T4369] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 866.688382][T26399] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 866.750731][ T4369] usb 4-1: Using ep0 maxpacket: 16 [ 866.887936][ T4369] usb 4-1: config 8 has an invalid interface number: 39 but max is 0 [ 866.909653][ T4369] usb 4-1: config 8 has no interface number 0 [ 866.915854][ T4369] usb 4-1: config 8 interface 39 altsetting 1 has an invalid endpoint with address 0xDF, skipping [ 866.952113][ T4369] usb 4-1: config 8 interface 39 has no altsetting 0 [ 866.980495][T26380] loop0: detected capacity change from 0 to 32768 [ 867.074579][T26411] netlink: 'syz.2.10328': attribute type 6 has an invalid length. [ 867.108964][T26380] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.10312 (26380) [ 867.155181][ T4369] usb 4-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 867.185247][ T4369] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.211163][T26380] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 867.243474][ T4369] usb 4-1: Product: syz [ 867.247737][ T4369] usb 4-1: Manufacturer: syz [ 867.251951][T26380] BTRFS info (device loop0): using free space tree [ 867.297109][ T4369] usb 4-1: SerialNumber: syz [ 867.311597][T26380] BTRFS info (device loop0): has skinny extents [ 867.527691][T26435] xt_CONNSECMARK: invalid mode: 0 [ 867.688162][T26380] BTRFS info (device loop0): enabling ssd optimizations [ 867.712280][ T4369] ipheth 4-1:8.39: Unable to find endpoints [ 867.729448][ T4369] usb 4-1: USB disconnect, device number 39 [ 867.858969][T26459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 868.022455][ T4176] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop0 scanned by udevd (4176) [ 868.342155][T26475] binder: 26474:26475 ioctl c018620b 0 returned -14 [ 869.122615][T26509] netlink: 'syz.0.10368': attribute type 1 has an invalid length. [ 869.154020][T13935] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 869.262985][T26517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10371'. [ 869.560427][T13935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 869.570261][T13935] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 869.634754][T13935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 869.678242][T13935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 869.860336][T13935] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 869.885145][T13935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.932051][T13935] usb 2-1: Product: syz [ 869.955668][T13935] usb 2-1: Manufacturer: syz [ 869.962103][T26545] loop2: detected capacity change from 0 to 64 [ 869.972537][T13935] usb 2-1: SerialNumber: syz [ 870.016994][T13935] usb 2-1: config 0 descriptor?? [ 870.085255][T13935] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 870.096902][T26513] loop3: detected capacity change from 0 to 32768 [ 870.322934][T13938] usb 2-1: USB disconnect, device number 74 [ 870.334015][T26551] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 870.356627][ T4386] general protection fault, probably for non-canonical address 0xdffffc00000000ba: 0000 [#1] PREEMPT SMP KASAN [ 870.368411][ T4386] KASAN: null-ptr-deref in range [0x00000000000005d0-0x00000000000005d7] [ 870.376865][ T4386] CPU: 0 PID: 4386 Comm: syz-executor Not tainted syzkaller #0 [ 870.384453][ T4386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 870.394546][ T4386] RIP: 0010:bio_associate_blkg_from_css+0x2ab/0x9c0 [ 870.401183][ T4386] Code: ff df 80 3c 08 00 74 08 48 89 df e8 4f 36 ec fd 41 be d0 05 00 00 4c 03 33 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 f7 e8 27 36 ec fd bb 90 00 00 00 49 03 1e [ 870.420958][ T4386] RSP: 0018:ffffc90003fdfa80 EFLAGS: 00010202 [ 870.427071][ T4386] RAX: 00000000000000ba RBX: ffff888078c968c8 RCX: dffffc0000000000 [ 870.435205][ T4386] RDX: 0000000000000000 RSI: ffffffff8a79f760 RDI: ffffffff8a79f720 [ 870.443373][ T4386] RBP: 1ffff1100f192d21 R08: dffffc0000000000 R09: 1ffffffff203a218 [ 870.451410][ T4386] R10: dffffc0000000000 R11: fffffbfff203a219 R12: ffff888147613110 [ 870.459483][ T4386] R13: ffff888078c96908 R14: 00000000000005d0 R15: ffff88807bb11dec [ 870.467597][ T4386] FS: 000055558a3f7500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 870.476712][ T4386] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 870.483350][ T4386] CR2: 00007fb9f7b00000 CR3: 0000000062267000 CR4: 00000000003506f0 [ 870.491373][ T4386] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 870.499388][ T4386] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 870.507470][ T4386] Call Trace: [ 870.510797][ T4386] [ 870.514023][ T4386] bio_associate_blkg+0x23a/0x340 [ 870.519108][ T4386] lbmStartIO+0x204/0x4c0 [ 870.523773][ T4386] lbmWrite+0x361/0x480 [ 870.528000][ T4386] jfs_flush_journal+0x537/0xec0 [ 870.533130][ T4386] ? lmLogShutdown+0x850/0x850 [ 870.537954][ T4386] ? dqput+0x460/0x460 [ 870.542073][ T4386] ? writeback_inodes_sb_nr+0x30/0x30 [ 870.547500][ T4386] jfs_sync_fs+0x79/0xa0 [ 870.551792][ T4386] sync_filesystem+0xe6/0x220 [ 870.556517][ T4386] generic_shutdown_super+0x6b/0x300 [ 870.561848][ T4386] kill_block_super+0x7c/0xe0 [ 870.566571][ T4386] deactivate_locked_super+0x93/0xf0 [ 870.571906][ T4386] cleanup_mnt+0x42d/0x4e0 [ 870.576569][ T4386] ? lockdep_hardirqs_on+0x94/0x140 [ 870.581936][ T4386] task_work_run+0x125/0x1a0 [ 870.586575][ T4386] exit_to_user_mode_loop+0x10f/0x130 [ 870.591988][ T4386] exit_to_user_mode_prepare+0xee/0x180 [ 870.597586][ T4386] syscall_exit_to_user_mode+0x16/0x40 [ 870.603184][ T4386] do_syscall_64+0x58/0xa0 [ 870.607641][ T4386] ? clear_bhb_loop+0x30/0x80 [ 870.612364][ T4386] ? clear_bhb_loop+0x30/0x80 [ 870.617086][ T4386] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 870.623025][ T4386] RIP: 0033:0x7f3c77a29f17 [ 870.627503][ T4386] Code: a2 c7 05 7c 96 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 870.647154][ T4386] RSP: 002b:00007ffe85b170c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 870.655876][ T4386] RAX: 0000000000000000 RBX: 00007f3c77a9271f RCX: 00007f3c77a29f17 [ 870.664378][ T4386] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe85b17180 [ 870.672399][ T4386] RBP: 00007ffe85b17180 R08: 00007ffe85b18180 R09: 00000000ffffffff [ 870.680726][ T4386] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe85b18210 [ 870.688860][ T4386] R13: 00007f3c77a9271f R14: 00000000000c9810 R15: 00007ffe85b18250 [ 870.697123][ T4386] [ 870.700346][ T4386] Modules linked in: [ 870.704299][ C0] vkms_vblank_simulate: vblank timer overrun [ 870.715908][T26553] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 870.815248][ T4386] ---[ end trace 0f58a62d67e79dab ]--- [ 870.820969][ T4386] RIP: 0010:bio_associate_blkg_from_css+0x2ab/0x9c0 [ 870.827928][ T4386] Code: ff df 80 3c 08 00 74 08 48 89 df e8 4f 36 ec fd 41 be d0 05 00 00 4c 03 33 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 f7 e8 27 36 ec fd bb 90 00 00 00 49 03 1e [ 870.850555][ T4386] RSP: 0018:ffffc90003fdfa80 EFLAGS: 00010202 [ 870.856885][ T4386] RAX: 00000000000000ba RBX: ffff888078c968c8 RCX: dffffc0000000000 [ 870.867412][ T4386] RDX: 0000000000000000 RSI: ffffffff8a79f760 RDI: ffffffff8a79f720 [ 870.875661][ T4386] RBP: 1ffff1100f192d21 R08: dffffc0000000000 R09: 1ffffffff203a218 [ 870.883927][ T4386] R10: dffffc0000000000 R11: fffffbfff203a219 R12: ffff888147613110 [ 870.908663][ T4386] R13: ffff888078c96908 R14: 00000000000005d0 R15: ffff88807bb11dec [ 870.944366][ T4386] FS: 000055558a3f7500(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 870.960086][ T4386] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 870.967755][ T4386] CR2: 00007f5f0daf6198 CR3: 0000000062267000 CR4: 00000000003506e0 [ 870.976243][ T4386] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 870.985167][ T4386] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 870.993564][ T4386] Kernel panic - not syncing: Fatal exception [ 871.000325][ T4386] Kernel Offset: disabled [ 871.004861][ T4386] Rebooting in 86400 seconds..