last executing test programs: 2.416449561s ago: executing program 2 (id=13279): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c000240000000000000ffff0b00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001"], 0xd4}}, 0x0) 2.323826596s ago: executing program 2 (id=13280): r0 = socket$can_raw(0x1d, 0x3, 0x1) getpeername(r0, 0x0, 0x0) 2.24440774s ago: executing program 2 (id=13281): r0 = openat$pidfd(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) pidfd_send_signal(r0, 0x0, &(0x7f0000000080)={0x0, 0x3, 0xfffffffd}, 0x0) 2.155985864s ago: executing program 2 (id=13283): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x48d, 0x0, 0x2000000000}]}) 2.077154368s ago: executing program 2 (id=13284): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, 0x0, &(0x7f0000002380)) 2.03901135s ago: executing program 2 (id=13285): ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1d69e40cd0c3500970a010203010902348001000000000904000003dffcf00009052f0300000000000705e2", @ANYRES8], 0x0) 1.03024957s ago: executing program 0 (id=13304): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0xffffffffffff97ef}, 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 924.576775ms ago: executing program 4 (id=13307): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x3, &(0x7f0000000080)=0x446, 0x4) 902.830825ms ago: executing program 0 (id=13308): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e20, 0x1afd59a4, @loopback, 0x9}}, 0x8001, 0x8001}, 0x90) 800.41703ms ago: executing program 4 (id=13311): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0xfffe, {"3458f6134f847f93c9e8776f8ee906be", "0000000000000300", "00bd0e0000000000000015000500"}, 0x23eaf, 0x4}) 785.499421ms ago: executing program 0 (id=13313): r0 = syz_open_dev$video4linux(&(0x7f00000000c0), 0xc, 0x8580) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x3014, 0x4, 0x0, 0x10000, 0x3e12, 0x1}) 665.955967ms ago: executing program 0 (id=13315): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x7, 0x0, &(0x7f0000000080)) 589.855451ms ago: executing program 4 (id=13317): r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x28002) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"0400", 0x0, 0x5, 0x1, 0x800, 0x1, '\x00\x00\x00\f\x00', '\x00', '\x00\x00:\x00', '\x00', ["8ba8e2bca7cbd6e4af000700", "ca8cacfffffffff4550400", "000000ff0000000000000020", "0000000004000000001000"]}) 589.159301ms ago: executing program 3 (id=13318): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) 573.411061ms ago: executing program 0 (id=13319): syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000300)='./file3\x00', 0x0, &(0x7f0000001040)=ANY=[], 0x1, 0xadc, &(0x7f0000001900)="$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") open(&(0x7f00000003c0)='./file2\x00', 0x430dc882a8a7f17, 0xc) 572.915851ms ago: executing program 1 (id=13320): r0 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4) 537.910693ms ago: executing program 1 (id=13321): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x11}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xe}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x8}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 482.220266ms ago: executing program 1 (id=13322): unshare(0x400) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x3) 464.812717ms ago: executing program 3 (id=13323): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, 0x0) 395.703611ms ago: executing program 1 (id=13324): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x29, 0x10, 0x0, 0x0) 390.882351ms ago: executing program 3 (id=13325): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x400}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x8000}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) 301.210395ms ago: executing program 1 (id=13326): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) 300.673555ms ago: executing program 3 (id=13327): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newlink={0x40, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010100}, @IFLA_GRE_TTL={0x5, 0x8, 0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) 300.072035ms ago: executing program 4 (id=13328): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000180)={0x13, 0x10, 0xfa00, {0xffffffffffffffff}}, 0x18) 162.647242ms ago: executing program 4 (id=13329): r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_opts(r0, 0x29, 0x1d, 0x0, &(0x7f0000000000)) 152.550352ms ago: executing program 3 (id=13330): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 91.921856ms ago: executing program 0 (id=13331): r0 = socket$caif_stream(0x25, 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000002c0)='S', 0x1}], 0x1) 86.063016ms ago: executing program 1 (id=13332): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x3}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) 60.038717ms ago: executing program 4 (id=13333): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x3, 0x0, 0x0, 0xf}]}}, &(0x7f0000000f80)=""/4115, 0x26, 0x1013, 0x1}, 0x28) 0s ago: executing program 3 (id=13334): r0 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000002780), 0x2, 0x0) write$yama_ptrace_scope(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): 32.834320][T28125] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.10850'. [ 832.885456][T28127] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 833.014767][ T26] audit: type=1400 audit(2000001919.249:36): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A21D01A0B978D2F2F262D2A83D1 pid=28130 comm="syz.2.10853" [ 833.194764][T28143] netlink: 'syz.0.10859': attribute type 10 has an invalid length. [ 833.218226][T28143] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10859'. [ 833.252983][T28143] bridge0: port 2(team0) entered disabled state [ 833.302653][T28143] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 833.391771][ T8665] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 833.855799][ T8665] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 833.876948][ T8665] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 833.917802][ T8665] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 834.074584][T28200] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10887'. [ 834.150713][ T8665] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 834.178455][ T8665] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.197946][ T8665] usb 3-1: Product: syz [ 834.208341][ T8665] usb 3-1: Manufacturer: syz [ 834.212922][T28213] damon: kdamond (28213) starts [ 834.257603][ T8665] usb 3-1: SerialNumber: syz [ 834.290850][T28218] loop0: detected capacity change from 0 to 1024 [ 834.303905][T28221] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 834.329154][ T8665] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 834.338313][ T8665] cdc_ncm 3-1:1.0: bind() failure [ 834.419103][T28218] EXT4-fs (loop0): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,jqfmt=vfsv1,dioread_lock,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 834.442068][T28218] ext4 filesystem being mounted at /2249/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 834.487591][T28234] cgroup: none used incorrectly [ 834.556970][ T8665] usb 3-1: USB disconnect, device number 47 [ 834.670142][T28242] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 834.731108][T28248] overlayfs: missing 'workdir' [ 834.737222][T28244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10904'. [ 835.025795][T28268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10918'. [ 835.164334][T28278] loop2: detected capacity change from 0 to 64 [ 835.332463][ T4233] Bluetooth: hci4: command 0x0405 tx timeout [ 835.579720][T28300] netlink: 'syz.1.10933': attribute type 16 has an invalid length. [ 835.620932][T28300] netlink: 'syz.1.10933': attribute type 17 has an invalid length. [ 835.684495][T28300] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 835.751022][T28300] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 835.762271][T28262] loop0: detected capacity change from 0 to 32768 [ 835.787313][T28300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 835.804926][T28300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 835.818303][T28300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 835.830895][T28300] infiniband syz2: set active [ 835.893925][T28300] IPv6: ADDRCONF(NETDEV_CHANGE): ipip0: link becomes ready [ 835.942182][T28262] XFS (loop0): Mounting V5 Filesystem [ 836.071209][T28262] XFS (loop0): Ending clean mount [ 836.236893][ T4186] XFS (loop0): Unmounting Filesystem [ 836.292256][T28342] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10950'. [ 836.384411][T28344] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10951'. [ 836.391348][T28337] loop1: detected capacity change from 0 to 8192 [ 836.404369][T28344] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10951'. [ 836.414224][T28344] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10951'. [ 836.434425][T28346] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10952'. [ 836.565419][T28337] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 836.578488][T28337] REISERFS (device loop1): using ordered data mode [ 836.585021][T28337] reiserfs: using flush barriers [ 836.592486][T28337] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 836.666143][T28337] REISERFS (device loop1): checking transaction log (loop1) [ 836.754433][T28337] REISERFS (device loop1): Using tea hash to sort names [ 836.801864][T28337] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 836.918406][T28365] batman_adv: batadv0: Interface activated: netdevsim0 [ 837.011234][T28365] batman_adv: batadv0: Interface deactivated: netdevsim0 [ 837.226844][ T26] audit: type=1400 audit(2000001923.188:37): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name=3A3A0AE10CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A552C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=28372 comm="syz.1.10962" [ 837.266146][T28357] loop4: detected capacity change from 0 to 32768 [ 837.344543][T28383] netlink: 68 bytes leftover after parsing attributes in process `syz.0.10967'. [ 837.505709][T28389] netlink: 'syz.1.10971': attribute type 2 has an invalid length. [ 837.782242][T28409] dlm: no locking on control device [ 837.835213][T28412] loop2: detected capacity change from 0 to 256 [ 837.951608][T28412] exfat: Deprecated parameter 'utf8' [ 837.986435][T28412] exfat: Deprecated parameter 'namecase' [ 838.017488][T28412] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbcde3a0f, utbl_chksum : 0xe619d30d) [ 838.123168][T28412] exFAT-fs (loop2): error, found bogus dentry(7) beyond unused empty group(6) (start_clu : 5, cur_clu : 5) [ 838.142945][T28412] exFAT-fs (loop2): Filesystem has been set read-only [ 838.272653][T28439] xt_TCPMSS: Only works on TCP SYN packets [ 838.340160][ T8665] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 838.387126][T28441] loop2: detected capacity change from 0 to 2048 [ 838.420886][T28449] netlink: 'syz.3.11003': attribute type 16 has an invalid length. [ 838.446280][T28449] netlink: 'syz.3.11003': attribute type 17 has an invalid length. [ 838.461807][T28453] ieee802154 phy1 wpan1: encryption failed: -22 [ 838.471811][T28449] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 838.479581][T28449] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 838.490593][T28449] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 838.499258][T28449] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 838.507997][T28441] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 838.546248][T28441] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 838.639521][ T8665] usb 1-1: Using ep0 maxpacket: 16 [ 838.800035][T28465] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11011'. [ 838.809372][T28465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11011'. [ 838.821155][ T8665] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 838.848677][ T8665] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 838.946000][T28477] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11016'. [ 838.971918][T28479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11018'. [ 839.002966][T28481] loop2: detected capacity change from 0 to 128 [ 839.077914][ T8665] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 839.106467][ T8665] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.122750][ T8665] usb 1-1: Product: syz [ 839.132056][T28489] netlink: 'syz.2.11021': attribute type 16 has an invalid length. [ 839.146325][ T8665] usb 1-1: Manufacturer: syz [ 839.150959][ T8665] usb 1-1: SerialNumber: syz [ 839.173230][T28489] netlink: 'syz.2.11021': attribute type 17 has an invalid length. [ 839.208429][T28489] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 839.216016][T28489] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 839.251485][T28489] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 839.276946][T28489] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 839.346476][ T4265] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 839.486298][ T8665] usb 1-1: unit 2 not found! [ 839.491029][ T8665] usb 1-1: unit 8 not found! [ 839.516661][ T8665] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 839.548563][ T8665] usb 1-1: unit 2 not found! [ 839.553357][ T8665] usb 1-1: unit 8 not found! [ 839.585757][ T8665] snd-usb-audio: probe of 1-1:1.1 failed with error -22 [ 839.618986][ T8665] usb 1-1: USB disconnect, device number 51 [ 839.632557][T28516] loop1: detected capacity change from 0 to 164 [ 839.739101][T28525] loop2: detected capacity change from 0 to 64 [ 839.774200][T28516] Unable to read rock-ridge attributes [ 839.793060][T28516] Unable to read rock-ridge attributes [ 839.803591][T28516] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 839.848338][ T4194] udevd[4194]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 839.850910][T28525] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 839.980818][ T4265] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 840.082319][T28539] netlink: 'syz.4.11046': attribute type 16 has an invalid length. [ 840.090259][T28539] netlink: 'syz.4.11046': attribute type 17 has an invalid length. [ 840.143188][T28539] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 840.176719][T28539] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 840.203527][T28539] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 840.232707][T28539] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 840.287793][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 840.353089][T28564] netlink: 'syz.2.11057': attribute type 1 has an invalid length. [ 840.490703][T28571] netlink: 'syz.2.11062': attribute type 1 has an invalid length. [ 840.490726][T28571] netlink: 'syz.2.11062': attribute type 3 has an invalid length. [ 840.490756][T28571] NCSI netlink: No device for ifindex 55159 [ 841.205179][T28598] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 841.356708][T28600] loop0: detected capacity change from 0 to 512 [ 841.436815][T28600] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 841.460834][T28600] ext4 filesystem being mounted at /2266/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 842.053746][T28609] loop1: detected capacity change from 0 to 32768 [ 842.164980][T28636] __nla_validate_parse: 7 callbacks suppressed [ 842.164997][T28636] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11091'. [ 842.196094][T28624] loop0: detected capacity change from 0 to 8192 [ 842.292031][ T4189] loop0: p1 p3 p4 [ 842.305401][ T4189] loop0: partition table partially beyond EOD, truncated [ 842.335524][ T4189] loop0: p1 start 393225 is beyond EOD, truncated [ 842.338706][T28645] openvswitch: netlink: Actions may not be safe on all matching packets [ 842.362808][ T4189] loop0: p3 start 16777216 is beyond EOD, truncated [ 842.387142][ T4189] loop0: p4 start 4294967295 is beyond EOD, truncated [ 842.446477][T28624] loop0: p1 p3 p4 [ 842.450464][T28624] loop0: partition table partially beyond EOD, truncated [ 842.468254][T28624] loop0: p1 start 393225 is beyond EOD, truncated [ 842.532934][T28624] loop0: p3 start 16777216 is beyond EOD, truncated [ 842.540659][T28624] loop0: p4 start 4294967295 is beyond EOD, truncated [ 843.343460][T28704] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11124'. [ 844.029911][T28734] validate_nla: 3 callbacks suppressed [ 844.029929][T28734] netlink: 'syz.0.11139': attribute type 16 has an invalid length. [ 844.072292][T28734] netlink: 'syz.0.11139': attribute type 17 has an invalid length. [ 844.103502][T28734] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 844.122589][T28734] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 844.142669][T28734] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 844.186526][T28734] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 844.370525][T28746] loop1: detected capacity change from 0 to 2048 [ 844.378438][T28750] netlink: 'syz.3.11147': attribute type 2 has an invalid length. [ 844.417100][T28706] loop2: detected capacity change from 0 to 40427 [ 844.424820][T28750] netlink: 'syz.3.11147': attribute type 5 has an invalid length. [ 844.446778][T28746] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 844.494460][T28706] F2FS-fs (loop2): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 844.539677][T28706] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 844.567958][T28758] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.11151'. [ 844.592874][T28758] openvswitch: netlink: Key 29 has unexpected len 3064 expected 0 [ 844.596081][T28706] F2FS-fs (loop2): invalid crc value [ 844.686731][T28706] F2FS-fs (loop2): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 844.722573][T28706] F2FS-fs (loop2): Found nat_bits in checkpoint [ 844.900888][T28706] F2FS-fs (loop2): recover fsync data on readonly fs [ 844.909514][T28706] F2FS-fs (loop2): Try to recover 2th superblock, ret: -30 [ 844.945424][T28706] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 844.966624][ T4314] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 844.967884][T28780] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11162'. [ 845.307347][T28793] loop1: detected capacity change from 0 to 4096 [ 845.354067][ T4314] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 845.368574][T28797] loop0: detected capacity change from 0 to 512 [ 845.368637][ T4314] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 845.394024][T28793] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 845.428383][ T4314] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 845.440847][ T4314] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 845.454108][T28797] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 845.481072][ T4314] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 845.520656][T28793] ntfs3: loop1: failed to convert "c46c" to iso8859-4 [ 845.573397][T28797] EXT4-fs (loop0): mounted filesystem without journal. Opts: nomblk_io_submit,bsddf,discard,,errors=continue. Quota mode: writeback. [ 845.600169][T28797] ext4 filesystem being mounted at /2283/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 845.628665][T28797] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present [ 845.640234][ T4314] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 845.649301][ T4314] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 845.658257][T28797] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 845.668270][ T4314] usb 4-1: Product: syz [ 845.672743][ T4314] usb 4-1: Manufacturer: syz [ 845.678239][T28797] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.11171: Failed to acquire dquot type 1 [ 845.693485][ T8665] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 845.726257][ T4314] cdc_wdm 4-1:1.0: skipping garbage [ 845.731512][ T4314] cdc_wdm 4-1:1.0: skipping garbage [ 845.755085][ T4314] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 845.768470][ T4314] cdc_wdm 4-1:1.0: Unknown control protocol [ 845.901156][T28810] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11176'. [ 845.927187][T28810] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 845.988333][T28763] cdc_wdm 4-1:1.0: Error submitting int urb - -90 [ 846.025621][ T4234] usb 4-1: USB disconnect, device number 59 [ 846.192251][ T8665] usb 3-1: config 3 has an invalid interface number: 234 but max is 0 [ 846.213727][ T8665] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 846.240566][ T8665] usb 3-1: config 3 has no interface number 0 [ 846.249457][ T8665] usb 3-1: config 3 interface 234 altsetting 0 has an invalid endpoint with address 0x22, skipping [ 846.291384][ T8665] usb 3-1: config 3 interface 234 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 846.559338][ T8665] usb 3-1: New USB device found, idVendor=04dd, idProduct=8006, bcdDevice=60.f5 [ 846.580585][ T8665] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.588817][ T8665] usb 3-1: Product: syz [ 846.644797][ T8665] usb 3-1: Manufacturer: syz [ 846.660311][ T8665] usb 3-1: SerialNumber: syz [ 846.720682][ T8665] usb 3-1: bad CDC descriptors [ 846.792686][T28853] netlink: 'syz.3.11197': attribute type 11 has an invalid length. [ 846.808692][T28855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11196'. [ 846.984412][ T8665] usb 3-1: USB disconnect, device number 48 [ 847.029343][ T4265] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 847.210089][T28876] loop0: detected capacity change from 0 to 8 [ 847.298184][ T4265] usb 2-1: Using ep0 maxpacket: 32 [ 847.446354][ T4265] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 847.466983][T28886] 8021q: adding VLAN 0 to HW filter on device bond4 [ 847.660102][ T4265] usb 2-1: Dual-Role OTG device on HNP port [ 847.682865][ T4265] usb 2-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=db.74 [ 847.697329][ T4265] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.706695][ T4265] usb 2-1: Product: syz [ 847.711451][ T4265] usb 2-1: Manufacturer: syz [ 847.720836][ T4265] usb 2-1: SerialNumber: syz [ 847.732604][ T4265] usb 2-1: config 0 descriptor?? [ 847.812547][ T4265] rndis_wlan 2-1:0.0: skipping garbage [ 847.822981][ T4265] rndis_wlan 2-1:0.0: invalid descriptor buffer length [ 847.834756][ T4265] usb 2-1: bad CDC descriptors [ 847.848939][ T4265] rndis_host 2-1:0.0: skipping garbage [ 847.869706][ T4265] rndis_host 2-1:0.0: invalid descriptor buffer length [ 847.876819][ T4265] usb 2-1: bad CDC descriptors [ 847.882013][ T4265] cdc_acm 2-1:0.0: skipping garbage [ 847.899997][ T4265] cdc_acm 2-1:0.0: invalid descriptor buffer length [ 848.071967][ T8661] usb 2-1: USB disconnect, device number 58 [ 848.138550][T28913] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 848.289042][T28924] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11230'. [ 848.353591][T28932] netlink: 200 bytes leftover after parsing attributes in process `syz.0.11234'. [ 848.416561][T28929] loop2: detected capacity change from 0 to 4096 [ 848.588921][T28929] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 848.601827][T28929] ntfs3: loop2: Failed to load $Extend. [ 848.636150][T28948] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.11242'. [ 848.688844][T28948] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 848.726699][T28952] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.11244'. [ 848.741008][T28948] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 848.756651][T28952] openvswitch: netlink: Flow key attribute not present in set flow. [ 849.100077][T28975] netlink: 'syz.1.11257': attribute type 16 has an invalid length. [ 849.115579][T28977] delete_channel: no stack [ 849.149922][T28975] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.11257'. [ 849.236032][T28986] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11262'. [ 849.435930][T29002] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11268'. [ 849.550962][T29010] loop4: detected capacity change from 0 to 512 [ 849.625048][T29015] loop0: detected capacity change from 0 to 64 [ 849.668501][T29006] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 849.709955][T29010] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.11272: bad orphan inode 11862016 [ 849.824987][T29010] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 849.862942][T29010] ext4 filesystem being mounted at /2191/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 850.020113][T29032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11282'. [ 850.154848][T29029] loop0: detected capacity change from 0 to 4096 [ 850.286624][T29029] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 850.423834][T29059] netlink: 'syz.1.11296': attribute type 1 has an invalid length. [ 850.439407][T29029] ntfs3: loop0: failed to convert "c46c" to iso8859-4 [ 850.719771][T29079] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 850.802251][ T4265] Bluetooth: hci4: command 0x0405 tx timeout [ 851.115462][T29105] loop4: detected capacity change from 0 to 512 [ 851.215531][T29105] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 851.336742][T29105] EXT4-fs (loop4): mounted filesystem without journal. Opts: nomblk_io_submit,bsddf,discard,,errors=continue. Quota mode: writeback. [ 851.434340][T29105] ext4 filesystem being mounted at /2199/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 851.475825][T29125] loop1: detected capacity change from 0 to 256 [ 851.498884][T29127] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11328'. [ 851.578260][T29125] FAT-fs (loop1): Directory bread(block 64) failed [ 851.602312][T29105] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present [ 851.609351][T29134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11331'. [ 851.614024][T29125] FAT-fs (loop1): Directory bread(block 65) failed [ 851.667615][T29125] FAT-fs (loop1): Directory bread(block 66) failed [ 851.682098][T29105] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 851.694002][T29136] netlink: 'syz.2.11332': attribute type 16 has an invalid length. [ 851.699969][T29125] FAT-fs (loop1): Directory bread(block 67) failed [ 851.731008][T29136] netlink: 'syz.2.11332': attribute type 17 has an invalid length. [ 851.737032][T29105] EXT4-fs error (device loop4): ext4_acquire_dquot:6234: comm syz.4.11318: Failed to acquire dquot type 1 [ 851.739681][T29125] FAT-fs (loop1): Directory bread(block 68) failed [ 851.819329][T29136] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 851.884008][T29136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 851.902933][T29125] FAT-fs (loop1): Directory bread(block 69) failed [ 851.909563][T29125] FAT-fs (loop1): Directory bread(block 70) failed [ 851.932655][T29136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 851.990921][T29136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 852.005556][T29125] FAT-fs (loop1): Directory bread(block 71) failed [ 852.027847][T29136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 852.036285][T29125] FAT-fs (loop1): Directory bread(block 72) failed [ 852.073250][T29125] FAT-fs (loop1): Directory bread(block 73) failed [ 852.406810][T29157] netlink: 'syz.2.11342': attribute type 1 has an invalid length. [ 852.429196][T29157] netlink: 'syz.2.11342': attribute type 1 has an invalid length. [ 852.457168][ T4265] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 852.556646][ T8661] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 852.790064][ T4234] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 852.945811][T29199] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 852.994007][T29199] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 853.014771][T29199] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 853.027326][T29199] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 853.046671][ T4236] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 853.071827][T29199] infiniband syz2: set active [ 853.186766][ T4234] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 853.208023][ T4234] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 853.235473][ T4234] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 853.265448][ T4234] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 853.280313][T29218] loop1: detected capacity change from 0 to 16 [ 853.292074][T29219] netlink: 'syz.0.11372': attribute type 1 has an invalid length. [ 853.292789][ T4234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.324523][ T4236] usb 3-1: Using ep0 maxpacket: 16 [ 853.324868][T29218] erofs: (device loop1): mounted with root inode @ nid 36. [ 853.341490][ T4234] usb 5-1: config 0 descriptor?? [ 853.366130][T29218] erofs: (device loop1): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 853.403161][ T4197] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress 6887 in[4096, 0] out[8192] [ 853.436388][T29218] erofs: (device loop1): z_erofs_readahead: readahead error at page 10 @ nid 89 [ 853.452485][T29218] erofs: (device loop1): z_erofs_readahead: readahead error at page 9 @ nid 89 [ 853.478839][T29218] erofs: (device loop1): z_erofs_readahead: readahead error at page 8 @ nid 89 [ 853.488485][T29218] erofs: (device loop1): z_erofs_readahead: readahead error at page 7 @ nid 89 [ 853.501953][T29218] erofs: (device loop1): z_erofs_readahead: readahead error at page 6 @ nid 89 [ 853.511516][T29218] erofs: (device loop1): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 853.521300][T29218] erofs: (device loop1): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 853.533938][T29218] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress 6887 in[4096, 0] out[8192] [ 853.563542][ T26] audit: type=1800 audit(2000001938.477:38): pid=29218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.11373" name="file3" dev="loop1" ino=89 res=0 errno=0 [ 853.624541][ T4234] ath6kl: Failed to submit usb control message: -71 [ 853.631193][ T4234] ath6kl: unable to send the bmi data to the device: -71 [ 853.645111][ T4314] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 853.652883][ T4236] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 853.670910][ T4236] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.687676][ T4234] ath6kl: Unable to send get target info: -71 [ 853.700541][ T4236] usb 3-1: Product: syz [ 853.704740][ T4236] usb 3-1: Manufacturer: syz [ 853.743840][ T4236] usb 3-1: SerialNumber: syz [ 853.772296][ T4236] usb 3-1: config 0 descriptor?? [ 853.794323][ T4234] ath6kl: Failed to init ath6kl core: -71 [ 853.828057][ T4236] ums-onetouch 3-1:0.0: USB Mass Storage device detected [ 853.843285][ T4234] ath6kl_usb: probe of 5-1:0.0 failed with error -71 [ 853.866408][T29228] loop1: detected capacity change from 0 to 4096 [ 853.873284][ T4234] usb 5-1: USB disconnect, device number 31 [ 853.939967][T29228] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 854.038745][T29228] ntfs3: loop1: failed to convert "c46c" to iso8859-6 [ 854.040944][ T4314] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 854.074705][ T4314] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 854.077997][T29228] ntfs3: loop1: failed to convert "0030" to iso8859-6 [ 854.085882][ T4314] usb 4-1: config 0 has no interface number 0 [ 854.098804][ T4314] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 854.120045][ T4314] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 854.124533][T29228] ntfs3: loop1: failed to convert "0031" to iso8859-6 [ 854.152037][T29228] ntfs3: loop1: failed to convert "0032" to iso8859-6 [ 854.166228][ T4234] usb 3-1: USB disconnect, device number 49 [ 854.256776][T29246] __nla_validate_parse: 82 callbacks suppressed [ 854.256794][T29246] netlink: 64 bytes leftover after parsing attributes in process `syz.0.11385'. [ 854.299431][T29248] loop4: detected capacity change from 0 to 256 [ 854.329202][ T4314] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 854.338294][ T4314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.402088][T29248] FAT-fs (loop4): Directory bread(block 64) failed [ 854.412926][ T4314] usb 4-1: Product: syz [ 854.417767][T29248] FAT-fs (loop4): Directory bread(block 65) failed [ 854.435144][ T4314] usb 4-1: Manufacturer: syz [ 854.445948][ T4314] usb 4-1: SerialNumber: syz [ 854.456809][T29248] FAT-fs (loop4): Directory bread(block 66) failed [ 854.482318][ T4314] usb 4-1: config 0 descriptor?? [ 854.491844][T29256] loop1: detected capacity change from 0 to 256 [ 854.497896][T29248] FAT-fs (loop4): Directory bread(block 67) failed [ 854.506261][T29248] FAT-fs (loop4): Directory bread(block 68) failed [ 854.518451][T29248] FAT-fs (loop4): Directory bread(block 69) failed [ 854.535593][T29248] FAT-fs (loop4): Directory bread(block 70) failed [ 854.542324][T29248] FAT-fs (loop4): Directory bread(block 71) failed [ 854.549273][T29258] device sit0 entered promiscuous mode [ 854.549698][T29248] FAT-fs (loop4): Directory bread(block 72) failed [ 854.562565][T29248] FAT-fs (loop4): Directory bread(block 73) failed [ 854.582501][T29258] netlink: 'syz.0.11391': attribute type 1 has an invalid length. [ 854.608585][T29258] netlink: 1 bytes leftover after parsing attributes in process `syz.0.11391'. [ 854.988126][ T4314] usbtouchscreen: probe of 4-1:0.117 failed with error -71 [ 855.020862][T29281] loop1: detected capacity change from 0 to 64 [ 855.034858][ T4314] usb 4-1: USB disconnect, device number 60 [ 855.650317][T29324] netlink: 'syz.3.11423': attribute type 21 has an invalid length. [ 855.691245][T29324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11423'. [ 855.725895][T29326] loop0: detected capacity change from 0 to 2048 [ 855.760267][T29326] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 855.839288][T29332] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 856.114147][ T4234] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 856.188234][T29353] loop4: detected capacity change from 0 to 512 [ 856.272667][T29353] EXT4-fs (loop4): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,mb_optimize_scan=0x0000000000000001,stripe=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 856.284303][T29364] CIFS mount error: No usable UNC path provided in device string! [ 856.284303][T29364] [ 856.311149][T29364] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 856.327959][T29353] ext4 filesystem being mounted at /2211/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 856.381302][ T4234] usb 4-1: Using ep0 maxpacket: 16 [ 856.466629][ T8661] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 856.629280][T29359] loop0: detected capacity change from 0 to 32768 [ 856.637940][ T4234] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 856.659915][ T4234] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 856.667953][ T4234] usb 4-1: Product: syz [ 856.680382][ T4234] usb 4-1: SerialNumber: syz [ 856.715585][ T4234] usb 4-1: config 0 descriptor?? [ 856.738962][T29359] ialloc: diAlloc returned -5! [ 856.779401][ T4234] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 856.794439][ T4234] dvb_usb_af9015: probe of 4-1:0.0 failed with error -22 [ 856.825888][ T4234] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 856.832768][ T4234] dvb_usb_af9035: probe of 4-1:0.0 failed with error -22 [ 856.834785][T29379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11447'. [ 856.863579][T29379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11447'. [ 856.873411][T29379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11447'. [ 856.894945][T29379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11447'. [ 856.905317][ T8661] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 856.937430][T29379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11447'. [ 856.957853][T29379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11447'. [ 857.007671][ T2302] usb 4-1: USB disconnect, device number 61 [ 857.015164][T29379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11447'. [ 857.049566][T29379] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 857.068914][T29379] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 857.089820][T29379] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 857.176844][ T8661] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 857.181093][T29373] loop4: detected capacity change from 0 to 32768 [ 857.204167][ T8661] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.229038][ T8661] usb 3-1: Product: syz [ 857.234491][ T8661] usb 3-1: Manufacturer: syz [ 857.244837][ T8661] usb 3-1: SerialNumber: syz [ 857.254358][ T8661] usb 3-1: config 0 descriptor?? [ 857.317402][T29373] XFS (loop4): Mounting V5 Filesystem [ 857.333471][ T8661] asix: probe of 3-1:0.0 failed with error -22 [ 857.356016][T29398] loop1: detected capacity change from 0 to 8 [ 857.451071][T29373] XFS (loop4): Ending clean mount [ 857.525616][ T4188] XFS (loop4): Unmounting Filesystem [ 857.566397][ T8661] usb 3-1: USB disconnect, device number 50 [ 857.833064][T29405] loop0: detected capacity change from 0 to 40427 [ 857.931536][T29405] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x1ffff [ 857.964311][T29405] F2FS-fs (loop0): invalid crc value [ 857.995225][ T8665] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 858.004982][T29405] F2FS-fs (loop0): Found nat_bits in checkpoint [ 858.267865][T29405] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 858.305169][ T8665] usb 2-1: Using ep0 maxpacket: 16 [ 858.310842][T29405] F2FS-fs (loop0): switch extent_cache option is not allowed [ 858.454847][ T8665] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 858.493187][ T8665] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 858.505788][ T8665] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 858.532148][T29447] netlink: 'syz.3.11476': attribute type 5 has an invalid length. [ 858.642806][ T8665] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 858.668295][ T8665] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 858.694853][ T8665] usb 2-1: SerialNumber: syz [ 858.722394][T29408] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 859.010926][ T8665] cdc_ether: probe of 2-1:1.0 failed with error -71 [ 859.039471][ T8665] usb 2-1: USB disconnect, device number 59 [ 859.150719][T29477] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 859.201509][T29481] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 859.286778][T29482] xt_CT: No such helper "snmp" [ 859.638158][T29467] set_capacity_and_notify: 1 callbacks suppressed [ 859.638174][T29467] loop0: detected capacity change from 0 to 32768 [ 859.651575][T29505] __nla_validate_parse: 82 callbacks suppressed [ 859.651591][T29505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11503'. [ 859.675773][ T4314] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 859.758638][T29467] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.11474 (29467) [ 859.801387][ T4233] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 859.819364][T29467] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 859.842925][T29467] BTRFS info (device loop0): force clearing of disk cache [ 859.868647][T29467] BTRFS info (device loop0): metadata ratio 0 [ 859.883415][T29467] BTRFS info (device loop0): enabling ssd optimizations [ 859.906367][T29467] BTRFS info (device loop0): using spread ssd allocation scheme [ 859.950783][T29467] BTRFS info (device loop0): using free space tree [ 859.970712][T29467] BTRFS info (device loop0): has skinny extents [ 860.037730][ T4314] usb 3-1: not running at top speed; connect to a high speed hub [ 860.132809][ T4314] usb 3-1: config 11 has an invalid interface number: 95 but max is 0 [ 860.172067][ T4314] usb 3-1: config 11 has no interface number 0 [ 860.182940][ T4314] usb 3-1: config 11 interface 95 altsetting 64 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 860.198926][ T4314] usb 3-1: config 11 interface 95 altsetting 64 endpoint 0x82 has invalid wMaxPacketSize 0 [ 860.209538][ T4314] usb 3-1: config 11 interface 95 has no altsetting 0 [ 860.218449][ T4233] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 860.293252][ T4314] usb 3-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=b1.4d [ 860.302726][ T4314] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 860.313677][ T4314] usb 3-1: Manufacturer: syz [ 860.335989][T29489] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 860.336047][T29467] BTRFS info (device loop0): clearing free space tree [ 860.361975][T29467] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 860.377736][T29467] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 860.402206][T29467] BTRFS info (device loop0): creating free space tree [ 860.413658][T29467] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 860.429701][T29467] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 860.466783][ T4233] usb 4-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 860.509851][ T4233] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.543858][ T4233] usb 4-1: Product: syz [ 860.548065][ T4233] usb 4-1: Manufacturer: syz [ 860.600593][ T4233] usb 4-1: SerialNumber: syz [ 860.658952][ T4314] usbtouchscreen: probe of 3-1:11.95 failed with error -8 [ 860.680297][ T4314] usb 3-1: USB disconnect, device number 51 [ 860.779259][T29575] loop1: detected capacity change from 0 to 8 [ 860.894939][T29575] SQUASHFS error: Unable to read inode 0xe3 [ 861.009551][ T4233] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 861.121010][ T8661] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 861.135519][ T4233] usb 4-1: USB disconnect, device number 62 [ 861.314921][T29590] xt_limit: Overflow, try lower: 65536/2147483648 [ 861.460322][ T6318] udevd[6318]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 861.596985][ T8661] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 861.605700][ T8661] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 861.664702][ T8661] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 861.704397][ T8661] usb 5-1: config 1 has no interface number 0 [ 861.710614][ T8661] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 861.771727][T29616] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.11547'. [ 861.782059][ T8661] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 861.842903][T29581] loop0: detected capacity change from 0 to 32768 [ 861.849625][ T8661] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 861.859897][ T8661] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.909881][ T8661] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 861.944093][T29581] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.11526 (29581) [ 862.003511][T29581] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 862.022599][T29581] BTRFS info (device loop0): using free space tree [ 862.034875][T29581] BTRFS info (device loop0): has skinny extents [ 862.142439][ T8661] snd_usb_pod 5-1:1.1: endpoint not available, using fallback values [ 862.163402][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 862.172471][ T8661] snd_usb_pod 5-1:1.1: invalid control EP [ 862.178618][ T8661] snd_usb_pod 5-1:1.1: cannot start listening: -22 [ 862.227400][ T8661] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 862.257696][T29659] (unnamed net_device) (uninitialized): option mode: invalid value (8) [ 862.281290][ T8661] snd_usb_pod: probe of 5-1:1.1 failed with error -22 [ 862.291783][T29581] BTRFS info (device loop0): enabling ssd optimizations [ 862.429989][ T4265] usb 5-1: USB disconnect, device number 32 [ 862.581846][ T4194] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop0 scanned by udevd (4194) [ 864.009813][T29754] loop4: detected capacity change from 0 to 4096 [ 864.038217][T29754] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 864.123946][T29754] ntfs3: loop4: failed to convert "c46c" to cp1250 [ 864.254029][ T4265] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 864.409667][T29790] loop2: detected capacity change from 0 to 16 [ 864.488353][T29790] erofs: (device loop2): mounted with root inode @ nid 36. [ 864.786123][T29818] netlink: 'syz.2.11639': attribute type 3 has an invalid length. [ 864.794225][T29818] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11639'. [ 864.803816][ T4265] usb 1-1: unable to get BOS descriptor or descriptor too short [ 864.823767][T29820] xt_ecn: cannot match TCP bits for non-tcp packets [ 864.931649][ T4265] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 864.951690][T29826] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11642'. [ 864.961087][ T4265] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 864.991411][ T4265] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 865.231052][ T4265] usb 1-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 865.249129][ T4265] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.275516][ T4265] usb 1-1: Product: syz [ 865.286841][ T4265] usb 1-1: Manufacturer: syz [ 865.297594][ T4265] usb 1-1: SerialNumber: syz [ 865.329988][T29824] infiniband syz0: set active [ 865.337114][T29824] infiniband syz0: added bond0 [ 865.419784][T29824] RDS/IB: syz0: added [ 865.436776][T29853] tmpfs: Bad value for 'mpol' [ 865.438933][T29824] smc: adding ib device syz0 with port count 1 [ 865.448193][T29824] smc: ib device syz0 port 1 has pnetid [ 865.508552][ T21] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 865.659386][ T4265] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 865.724001][ T4265] snd-usb-audio: probe of 1-1:1.1 failed with error -22 [ 865.744208][T29867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11662'. [ 865.753470][T29867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11662'. [ 865.765157][ T21] usb 4-1: Using ep0 maxpacket: 8 [ 865.865128][ T4265] snd-usb-audio: probe of 1-1:1.2 failed with error -22 [ 865.883055][ T4265] usb 1-1: USB disconnect, device number 52 [ 865.904356][ T21] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 865.920150][ T21] usb 4-1: config 179 has no interface number 0 [ 865.948818][ T21] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 865.991308][T29877] netlink: 328 bytes leftover after parsing attributes in process `syz.1.11667'. [ 866.011485][ T21] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 866.041116][ T21] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 866.069073][ T21] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 866.110930][T29881] loop4: detected capacity change from 0 to 1024 [ 866.118361][ T21] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 866.138195][ T21] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 866.162322][ T4315] udevd[4315]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 866.223387][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.263337][ T144] hfsplus: b-tree write err: -5, ino 25 [ 866.269729][T29841] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 866.285732][ T144] hfsplus: b-tree write err: -5, ino 4 [ 866.309309][ T144] hfsplus: b-tree write err: -5, ino 2 [ 866.327187][ T144] hfsplus: b-tree write err: -5, ino 26 [ 866.447949][T29899] netlink: 'syz.0.11678': attribute type 21 has an invalid length. [ 866.489183][T29899] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11678'. [ 866.512330][T29901] ieee802154 phy1 wpan1: encryption failed: -22 [ 866.721283][T29911] loop0: detected capacity change from 0 to 2048 [ 866.727109][ T4265] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 866.759083][T29911] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 866.777070][ T8661] usb 4-1: USB disconnect, device number 63 [ 866.780455][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 866.791517][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 866.876122][ T151] block nbd0: Attempted send on invalid socket [ 866.883197][ T151] blk_update_request: I/O error, dev nbd0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 866.900839][T29913] VFS: unable to read V7 FS superblock on device nbd0. [ 866.907777][T29913] VFS: could not find a valid V7 on nbd0. [ 866.951430][ T4233] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 867.037046][ T4265] usb 5-1: Using ep0 maxpacket: 32 [ 867.147235][ T151] block nbd0: Attempted send on invalid socket [ 867.153742][ T151] blk_update_request: I/O error, dev nbd0, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 867.165012][T29923] REISERFS warning (device nbd0): sh-2006 read_super_block: bread failed (dev nbd0, block 2, size 4096) [ 867.186918][ T4265] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 867.187192][ T1091] block nbd0: Attempted send on invalid socket [ 867.203689][ T1091] blk_update_request: I/O error, dev nbd0, sector 128 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 867.219630][T29923] REISERFS warning (device nbd0): sh-2006 read_super_block: bread failed (dev nbd0, block 16, size 4096) [ 867.236602][T29923] REISERFS warning (device nbd0): sh-2021 reiserfs_fill_super: can not find reiserfs on nbd0 [ 867.278566][ T4233] usb 2-1: Using ep0 maxpacket: 16 [ 867.298607][T29915] loop2: detected capacity change from 0 to 32768 [ 867.403195][ T4265] usb 5-1: New USB device found, idVendor=0c72, idProduct=0011, bcdDevice= 9.75 [ 867.419088][ T4265] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.427658][ T4233] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 867.437966][ T4233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.446698][ T4265] usb 5-1: Product: syz [ 867.451048][ T4265] usb 5-1: Manufacturer: syz [ 867.458712][ T4233] usb 2-1: config 0 descriptor?? [ 867.463815][ T4265] usb 5-1: SerialNumber: syz [ 867.474061][ T4265] usb 5-1: config 0 descriptor?? [ 867.483291][T29915] XFS (loop2): Mounting V5 Filesystem [ 867.497799][ T4233] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 867.498549][T29939] netlink: 'syz.3.11695': attribute type 10 has an invalid length. [ 867.565823][T29939] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 867.580717][T29915] XFS (loop2): Ending clean mount [ 867.674312][ T4187] XFS (loop2): Unmounting Filesystem [ 867.742650][ T4233] usb 2-1: Detected FT8U232AM [ 867.747572][ T4265] peak_usb 5-1:0.0: PEAK-System PCAN-USB Pro FD v0 fw v0.0.0 (2 channels) [ 867.764707][ T4233] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 867.959005][ T4233] usb 2-1: USB disconnect, device number 60 [ 867.998800][ T4265] peak_usb 5-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 868.013921][ T4265] peak_usb 5-1:0.0: unable to tell PCAN-USB Pro FD driver is loaded (err -71) [ 868.053825][ T4233] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 868.100677][ T4233] ftdi_sio 2-1:0.0: device disconnected [ 868.148759][ T4265] peak_usb: probe of 5-1:0.0 failed with error -71 [ 868.180524][ T4265] usb 5-1: USB disconnect, device number 33 [ 868.256115][T29973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11712'. [ 868.372414][T29983] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19971 - 0 [ 868.391534][T29983] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19971 - 0 [ 868.436005][T29983] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19971 - 0 [ 868.478938][T29983] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19971 - 0 [ 868.536305][T29990] device vti0 entered promiscuous mode [ 868.617800][T29994] netlink: 'syz.1.11721': attribute type 4 has an invalid length. [ 868.782650][T30005] netlink: 76 bytes leftover after parsing attributes in process `syz.3.11726'. [ 869.083587][T30029] net veth1_virt_wifi : renamed from virt_wifi0 [ 869.109778][T30031] netlink: 'syz.3.11738': attribute type 2 has an invalid length. [ 869.113511][T30018] loop4: detected capacity change from 0 to 8192 [ 869.155604][T30031] netlink: 'syz.3.11738': attribute type 8 has an invalid length. [ 869.214042][T30031] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11738'. [ 869.369923][T30047] overlayfs: missing 'workdir' [ 869.869957][T30095] loop4: detected capacity change from 0 to 22 [ 869.945128][T30095] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 869.964499][T30095] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 870.055606][T30111] i2c i2c-0: Invalid block write size 253 [ 870.107275][T30113] loop1: detected capacity change from 0 to 256 [ 870.237289][T30127] xt_hashlimit: max too large, truncated to 1048576 [ 870.305476][T30131] netlink: 'syz.2.11790': attribute type 3 has an invalid length. [ 870.339247][T30131] netlink: 232 bytes leftover after parsing attributes in process `syz.2.11790'. [ 870.591360][T30160] loop0: detected capacity change from 0 to 512 [ 870.674886][T30160] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 870.705044][T30160] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 870.764205][T30160] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 870.789481][T30160] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 870.797558][T30160] System zones: 0-2, 18-18, 34-35 [ 870.811146][T30160] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 871.237198][ T4265] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 871.376259][ T21] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 871.520212][ T26] audit: type=1400 audit(2000001955.271:39): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=30219 comm="syz.1.11831" [ 871.664901][ T21] usb 1-1: Using ep0 maxpacket: 8 [ 871.793276][ T21] usb 1-1: config 6 has an invalid interface number: 2 but max is 0 [ 871.801396][ T21] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 871.814754][ T4265] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 871.825755][ T4265] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 871.833541][ T21] usb 1-1: config 6 has no interface number 0 [ 871.833811][ T4265] usb 5-1: Product: syz [ 871.854435][ T21] usb 1-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 871.893760][ T4265] usb 5-1: SerialNumber: syz [ 871.908492][ T4265] usb 5-1: config 0 descriptor?? [ 872.055940][ T21] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 872.076203][ T21] usb 1-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 872.112580][ T21] usb 1-1: Product: syz [ 872.119445][ T21] usb 1-1: Manufacturer: syz [ 872.124186][ T21] usb 1-1: SerialNumber: syz [ 872.173133][T11248] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 872.181806][ T21] hso 1-1:6.2: Failed to find INT IN ep [ 872.257232][ T4265] hso 5-1:0.0: Can't find BULK IN endpoint [ 872.383804][T30271] loop1: detected capacity change from 0 to 22 [ 872.420292][ T4265] usb 1-1: USB disconnect, device number 53 [ 872.438070][T30271] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 872.445273][T11248] usb 4-1: Using ep0 maxpacket: 8 [ 872.463672][T30271] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 872.475661][ T8661] usb 5-1: USB disconnect, device number 34 [ 872.582709][T30278] openvswitch: netlink: Missing key (keys=40, expected=80) [ 872.626847][T11248] usb 4-1: unable to get BOS descriptor or descriptor too short [ 872.733727][T11248] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 872.754973][T11248] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 872.774671][T11248] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 872.805182][T11248] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 872.821259][T11248] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 872.845223][T11248] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 872.867346][T11248] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 873.043801][T11248] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 873.062228][T11248] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.071876][T30308] netlink: 244 bytes leftover after parsing attributes in process `syz.1.11874'. [ 873.075024][T11248] usb 4-1: Product: syz [ 873.102694][T11248] usb 4-1: Manufacturer: syz [ 873.111250][T11248] usb 4-1: SerialNumber: syz [ 873.127082][T11248] usb 4-1: config 0 descriptor?? [ 873.150827][T30237] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 873.218471][T11248] snd-usb-audio: probe of 4-1:0.0 failed with error -12 [ 873.351945][ T4315] udevd[4315]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 873.402859][T11247] usb 4-1: USB disconnect, device number 64 [ 873.479249][T30340] vivid-001: ================= START STATUS ================= [ 873.507822][T30340] vivid-001: Enable Output Cropping: true [ 873.536678][ T8661] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 873.549996][T30340] vivid-001: Enable Output Composing: true [ 873.568235][T30340] vivid-001: Enable Output Scaler: true [ 873.576720][T30342] loop2: detected capacity change from 0 to 1024 [ 873.584026][T30340] vivid-001: Tx RGB Quantization Range: Automatic [ 873.590956][T30340] vivid-001: Transmit Mode: HDMI [ 873.596084][T30340] vivid-001: Display Present: true inactive [ 873.602824][T30340] vivid-001: Hotplug Present: 0x00000000 [ 873.609040][T30340] vivid-001: RxSense Present: 0x00000001 [ 873.615209][T30340] vivid-001: EDID Present: 0x00000000 [ 873.621367][T30340] vivid-001: ================== END STATUS ================== [ 873.649910][T30346] loop1: detected capacity change from 0 to 1764 [ 873.679839][T30350] loop0: detected capacity change from 0 to 256 [ 873.723767][T30346] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 873.762328][T11249] hfsplus: b-tree write err: -5, ino 25 [ 873.768280][T11249] hfsplus: b-tree write err: -5, ino 4 [ 873.768282][T30350] FAT-fs (loop0): Directory bread(block 64) failed [ 873.768317][T30350] FAT-fs (loop0): Directory bread(block 65) failed [ 873.787600][T30350] FAT-fs (loop0): Directory bread(block 66) failed [ 873.808897][T11249] hfsplus: b-tree write err: -5, ino 2 [ 873.818453][T30350] FAT-fs (loop0): Directory bread(block 67) failed [ 873.827596][T11249] hfsplus: b-tree write err: -5, ino 17 [ 873.849886][T30350] FAT-fs (loop0): Directory bread(block 68) failed [ 873.875621][T30350] FAT-fs (loop0): Directory bread(block 69) failed [ 873.882724][T30350] FAT-fs (loop0): Directory bread(block 70) failed [ 873.908028][T30350] FAT-fs (loop0): Directory bread(block 71) failed [ 873.930873][T30350] FAT-fs (loop0): Directory bread(block 72) failed [ 873.937551][T30350] FAT-fs (loop0): Directory bread(block 73) failed [ 873.973680][ T8661] usb 5-1: config 8 has an invalid interface number: 177 but max is 0 [ 873.981924][ T8661] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 874.054657][ T8661] usb 5-1: config 8 has no interface number 0 [ 874.080088][ T8661] usb 5-1: config 8 interface 177 altsetting 9 endpoint 0x1 has invalid wMaxPacketSize 0 [ 874.116680][ T8661] usb 5-1: config 8 interface 177 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 874.158392][ T8661] usb 5-1: config 8 interface 177 has no altsetting 0 [ 874.165424][ T8661] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 874.226542][ T8661] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.306945][ T8661] ir_toy 5-1:8.177: required endpoints not found [ 874.328821][T30369] netlink: 'syz.3.11904': attribute type 3 has an invalid length. [ 874.400892][T30369] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 874.602551][T11248] usb 5-1: USB disconnect, device number 35 [ 874.622582][T30389] netlink: 'syz.3.11913': attribute type 3 has an invalid length. [ 874.642581][T30393] rdma_rxe: rxe_register_device failed with error -23 [ 874.699498][T30393] rdma_rxe: failed to add bond0 [ 874.767914][T30399] netlink: 'syz.1.11919': attribute type 10 has an invalid length. [ 874.811551][T30399] team0: Port device macvlan1 added [ 874.950495][T30410] xt_TCPMSS: Only works on TCP SYN packets [ 875.012353][T30415] loop2: detected capacity change from 0 to 512 [ 875.095603][T30415] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 875.103683][T30415] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 875.154160][T30415] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.11927: bad orphan inode 13 [ 875.175838][T30415] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="data_err=ignore,noload,data_err=ignore,grpjquota="errors=continue,max_dir_size_kb=0x00000000000001ff,nobarrier,,errors=continue. Quota mode: writeback. [ 875.199607][ T8661] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 875.277370][ T4265] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 875.325979][T30434] UBIFS error (pid: 30434): cannot open "(null)", error -22 [ 875.480425][ T8661] usb 1-1: Using ep0 maxpacket: 32 [ 875.587211][ T4265] usb 2-1: Using ep0 maxpacket: 16 [ 875.672970][ T8661] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 875.760280][T30459] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 875.794199][T30459] bond0: (slave lo): Error: Device can not be enslaved while up [ 875.878687][T30463] netlink: 'syz.4.11950': attribute type 1 has an invalid length. [ 875.897790][ T8661] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 875.903970][T30463] netlink: 224 bytes leftover after parsing attributes in process `syz.4.11950'. [ 875.910279][ T8661] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.940161][ T4265] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 875.949524][T30463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11950'. [ 875.964464][ T8661] usb 1-1: Product: syz [ 875.968772][ T8661] usb 1-1: Manufacturer: syz [ 875.969443][T30467] netlink: 'syz.3.11952': attribute type 1 has an invalid length. [ 875.986764][ T4265] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.989076][T30467] netlink: 224 bytes leftover after parsing attributes in process `syz.3.11952'. [ 876.004040][ T8661] usb 1-1: SerialNumber: syz [ 876.009394][ T4265] usb 2-1: Product: syz [ 876.013604][ T4265] usb 2-1: Manufacturer: syz [ 876.028787][ T8661] usb 1-1: config 0 descriptor?? [ 876.032655][T30467] nbd: couldn't find a device at index 1024 [ 876.045191][ T4265] usb 2-1: SerialNumber: syz [ 876.072389][ T4265] usb 2-1: config 0 descriptor?? [ 876.109996][ T8661] usb 1-1: bad CDC descriptors [ 876.127601][ T8661] usb 1-1: unsupported MDLM descriptors [ 876.134526][ T4265] ums-onetouch 2-1:0.0: USB Mass Storage device detected [ 876.192740][T30443] loop2: detected capacity change from 0 to 32768 [ 876.278855][T30443] ERROR: (device loop2): dbAlloc: unable to allocate blocks [ 876.278855][T30443] [ 876.330872][T30443] jfs_rename: dtInsert returned -EIO [ 876.331086][ T8661] usb 1-1: USB disconnect, device number 54 [ 876.351600][T11248] usb 2-1: USB disconnect, device number 61 [ 876.471129][T30487] loop4: detected capacity change from 0 to 64 [ 876.835917][T30507] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 876.861589][T30505] loop2: detected capacity change from 0 to 1764 [ 876.916925][T30505] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 877.047335][T30519] kAFS: unable to lookup cell '/,' [ 877.107112][T30525] xt_TCPMSS: Only works on TCP SYN packets [ 877.129063][T30529] netlink: 'syz.0.11981': attribute type 1 has an invalid length. [ 877.223676][T30532] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11983'. [ 877.244906][T30532] netlink: 48 bytes leftover after parsing attributes in process `syz.3.11983'. [ 877.498746][T30559] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11997'. [ 877.575177][T30559] netlink: 'syz.2.11997': attribute type 1 has an invalid length. [ 877.628657][T11248] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 877.652534][T30563] loop0: detected capacity change from 0 to 128 [ 877.846504][T30571] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12003'. [ 877.885086][T11248] usb 2-1: Using ep0 maxpacket: 16 [ 877.947674][T30575] netlink: 'syz.2.12005': attribute type 1 has an invalid length. [ 877.992376][T30575] netlink: 200 bytes leftover after parsing attributes in process `syz.2.12005'. [ 878.130075][T30553] loop4: detected capacity change from 0 to 32768 [ 878.167687][T30585] netlink: 'syz.2.12010': attribute type 3 has an invalid length. [ 878.190288][T11248] usb 2-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 878.205475][T11248] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.222656][T30589] netlink: 'syz.3.12012': attribute type 21 has an invalid length. [ 878.248714][T11248] usb 2-1: Product: syz [ 878.264034][T11248] usb 2-1: Manufacturer: syz [ 878.268771][T11248] usb 2-1: SerialNumber: syz [ 878.324298][T11248] usb 2-1: config 0 descriptor?? [ 878.370530][T30596] device bridge1 entered promiscuous mode [ 878.545495][T30605] device bridge2 entered promiscuous mode [ 878.607587][T11248] usb 2-1: ignoring: not an USB2CAN converter [ 878.824325][T17386] usb 2-1: USB disconnect, device number 62 [ 879.039466][ T8661] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 879.111893][T30637] netlink: 'syz.4.12037': attribute type 10 has an invalid length. [ 879.158808][T30637] team0: Port device macvlan1 added [ 879.292927][T30645] netlink: 'syz.2.12040': attribute type 8 has an invalid length. [ 879.315056][T30645] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.12040'. [ 879.488421][ T8661] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 879.521229][ T8661] usb 1-1: config 0 has no interface number 0 [ 879.541706][ T8661] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 879.572101][ T8661] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 879.597480][ T8661] usb 1-1: config 0 interface 255 has no altsetting 0 [ 879.798487][ T8661] usb 1-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 879.798521][ T8661] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.798540][ T8661] usb 1-1: Product: syz [ 879.798555][ T8661] usb 1-1: Manufacturer: syz [ 879.798570][ T8661] usb 1-1: SerialNumber: syz [ 879.806552][ T8661] usb 1-1: config 0 descriptor?? [ 880.102579][T17386] usb 1-1: USB disconnect, device number 55 [ 880.301018][T30708] netlink: 'syz.4.12070': attribute type 2 has an invalid length. [ 880.377037][T30712] bond0: Error: Cannot enslave bond to itself. [ 880.633719][T30727] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12080'. [ 880.968415][T30764] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.12097'. [ 880.999974][T30764] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 881.019899][T17386] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 881.028275][T30764] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 881.200978][T30779] program syz.4.12103 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 881.337843][T30787] device bond1 entered promiscuous mode [ 881.343799][T30787] 8021q: adding VLAN 0 to HW filter on device bond1 [ 881.455169][T17386] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 881.463477][T17386] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 881.529798][T17386] usb 1-1: config 0 has no interface number 0 [ 881.536120][T17386] usb 1-1: config 0 interface 52 has no altsetting 0 [ 881.733017][T17386] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 881.764610][T17386] usb 1-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 881.773954][T17386] usb 1-1: Product: syz [ 881.778903][T17386] usb 1-1: Manufacturer: syz [ 881.783529][T17386] usb 1-1: SerialNumber: syz [ 881.796915][ T4236] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 881.801762][T17386] usb 1-1: config 0 descriptor?? [ 881.865070][T30823] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12121'. [ 882.053395][ T4236] usb 5-1: Using ep0 maxpacket: 16 [ 882.234257][T30818] loop1: detected capacity change from 0 to 32768 [ 882.324807][T30818] ERROR: (device loop1): dbAlloc: unable to allocate blocks [ 882.324807][T30818] [ 882.352720][ T4236] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 882.361800][ T4236] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.389102][T30818] jfs_rename: dtInsert returned -EIO [ 882.397694][ T4236] usb 5-1: Product: syz [ 882.401883][ T4236] usb 5-1: Manufacturer: syz [ 882.411415][ T4236] usb 5-1: SerialNumber: syz [ 882.443029][T11248] usb 1-1: USB disconnect, device number 56 [ 882.449962][ T4236] r8152-cfgselector 5-1: config 0 descriptor?? [ 882.983292][ T4236] r8152-cfgselector 5-1: Unknown version 0x0000 [ 882.989695][ T4236] r8152-cfgselector 5-1: bad CDC descriptors [ 883.026016][ T4236] r8152-cfgselector 5-1: Unknown version 0x0000 [ 883.045074][ T4236] r8152-cfgselector 5-1: USB disconnect, device number 36 [ 883.231184][T30886] openvswitch: netlink: Actions may not be safe on all matching packets [ 883.356224][T30894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12156'. [ 883.411771][ T4314] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 883.453441][T30902] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 883.498946][T30906] validate_nla: 1 callbacks suppressed [ 883.498963][T30906] netlink: 'syz.0.12162': attribute type 3 has an invalid length. [ 883.526556][T30906] netlink: 766 bytes leftover after parsing attributes in process `syz.0.12162'. [ 883.631334][T30914] netlink: 72 bytes leftover after parsing attributes in process `syz.0.12166'. [ 883.827644][ T4314] usb 2-1: config 0 has no interfaces? [ 883.833173][ T4314] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 883.885295][ T4314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.914411][T30936] loop0: detected capacity change from 0 to 256 [ 883.924775][ T4314] usb 2-1: config 0 descriptor?? [ 884.100563][T30936] FAT-fs (loop0): Directory bread(block 64) failed [ 884.119818][T30936] FAT-fs (loop0): Directory bread(block 65) failed [ 884.134775][T30936] FAT-fs (loop0): Directory bread(block 66) failed [ 884.141877][T30936] FAT-fs (loop0): Directory bread(block 67) failed [ 884.160908][T30936] FAT-fs (loop0): Directory bread(block 68) failed [ 884.178786][T30936] FAT-fs (loop0): Directory bread(block 69) failed [ 884.187814][ T4314] usb 2-1: USB disconnect, device number 63 [ 884.191847][T30936] FAT-fs (loop0): Directory bread(block 70) failed [ 884.218523][T30936] FAT-fs (loop0): Directory bread(block 71) failed [ 884.233745][T30936] FAT-fs (loop0): Directory bread(block 72) failed [ 884.240905][T30936] FAT-fs (loop0): Directory bread(block 73) failed [ 884.262439][T30964] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 884.491265][T30979] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12198'. [ 884.638425][T30988] netlink: 'syz.4.12203': attribute type 21 has an invalid length. [ 884.804489][T30990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12204'. [ 885.006180][T30999] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12208'. [ 885.094963][T31003] netlink: 264 bytes leftover after parsing attributes in process `syz.4.12211'. [ 885.143731][T31003] netlink: 264 bytes leftover after parsing attributes in process `syz.4.12211'. [ 885.184793][T31003] netlink: 175 bytes leftover after parsing attributes in process `syz.4.12211'. [ 885.503286][T31021] netlink: 'syz.0.12219': attribute type 1 has an invalid length. [ 885.525105][T30986] loop2: detected capacity change from 0 to 32768 [ 885.596553][T31025] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12221'. [ 885.616613][T31028] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 885.640727][T30986] (syz.2.12202,30986,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 885.698209][T30986] (syz.2.12202,30986,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 885.739402][T30986] JBD2: Ignoring recovery information on journal [ 885.837959][T30986] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 886.093431][ T4314] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 886.105225][ T4187] ocfs2: Unmounting device (7,2) on (node local) [ 886.106696][T31052] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12234'. [ 886.159139][T31051] Process accounting resumed [ 886.161392][T31052] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12234'. [ 886.347739][T31068] loop0: detected capacity change from 0 to 64 [ 886.371283][ T4314] usb 5-1: Using ep0 maxpacket: 16 [ 886.499725][ T4314] usb 5-1: config 0 has no interfaces? [ 886.660662][T31084] openvswitch: netlink: Geneve opt len 3 is not a multiple of 4. [ 886.670763][ T4314] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 886.700079][T31089] netlink: 'syz.0.12252': attribute type 32 has an invalid length. [ 886.713454][ T4314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.721909][ T4314] usb 5-1: Product: syz [ 886.729079][ T4314] usb 5-1: Manufacturer: syz [ 886.732666][T31091] netlink: 'syz.2.12253': attribute type 1 has an invalid length. [ 886.733883][ T4314] usb 5-1: SerialNumber: syz [ 886.767624][ T4314] r8152-cfgselector 5-1: config 0 descriptor?? [ 886.873668][T31093] erofs: (device nullb0): erofs_read_superblock: cannot find valid erofs superblock [ 886.970294][T31103] ieee802154 phy1 wpan1: encryption failed: -22 [ 887.025933][T31109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12262'. [ 887.060213][T31109] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12262'. [ 887.066575][ T4314] usbip-host 5-1: 5-1 is not in match_busid table... skip! [ 887.096137][T31112] bond0: option ad_select: unable to set because the bond device is up [ 887.283670][ T4314] usb 5-1: USB disconnect, device number 37 [ 887.379810][T31131] program syz.2.12272 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 887.496727][T31139] tmpfs: Bad value for 'mpol' [ 887.648187][T31152] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 888.019123][T31184] usb usb8: usbfs: process 31184 (syz.2.12295) did not claim interface 32 before use [ 888.484947][T31228] program syz.0.12317 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 888.891385][T31254] netlink: 'syz.2.12331': attribute type 30 has an invalid length. [ 888.957693][T17386] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 889.292881][T31274] usb usb9: usbfs: interface 0 claimed by hub while 'syz.1.12341' sets config #0 [ 889.406728][T17386] usb 4-1: config 0 has an invalid interface number: 216 but max is 0 [ 889.415025][T17386] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 889.438717][T17386] usb 4-1: config 0 has no interface number 0 [ 889.449609][T17386] usb 4-1: config 0 interface 216 altsetting 4 bulk endpoint 0x8F has invalid maxpacket 64 [ 889.456432][T31278] loop1: detected capacity change from 0 to 1024 [ 889.470688][T17386] usb 4-1: config 0 interface 216 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 889.501302][T17386] usb 4-1: config 0 interface 216 has no altsetting 0 [ 889.519394][T17386] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.2e [ 889.557078][T17386] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.581761][T31278] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,errors=remount-ro,resgid=0x0000000000000000,barrier,auto_da_alloc,nodelalloc,. Quota mode: none. [ 889.599713][T17386] usb 4-1: config 0 descriptor?? [ 889.610817][T31278] ext4 filesystem being mounted at /2351/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 889.627158][T31243] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 889.634829][T31278] EXT4-fs error (device loop1): ext4_free_blocks:6232: comm syz.1.12343: Freeing blocks not in datazone - block = 0, count = 16 [ 889.651691][T17386] usb 4-1: NFC: intf ffff888078d3d000 id ffffffff8cb52680 [ 889.670617][T31278] EXT4-fs (loop1): Remounting filesystem read-only [ 889.678578][T31278] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.12343: bg 0: block 112: padding at end of block bitmap is not set [ 889.705974][T31278] EXT4-fs (loop1): Remounting filesystem read-only [ 889.714542][T31270] loop2: detected capacity change from 0 to 32768 [ 889.731685][T31278] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 889.746800][T31260] loop4: detected capacity change from 0 to 40427 [ 889.756490][T31278] EXT4-fs (loop1): Remounting filesystem read-only [ 889.811410][T31260] F2FS-fs (loop4): Fix alignment : internally, start(4096) end(16896) block(12288) [ 889.851909][T31260] F2FS-fs (loop4): invalid crc value [ 889.903127][T31260] F2FS-fs (loop4): Found nat_bits in checkpoint [ 889.934562][T11247] usb 4-1: USB disconnect, device number 65 [ 890.057882][T31260] F2FS-fs (loop4): recover fsync data on readonly fs [ 890.079010][T31260] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 890.133526][T31260] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 890.145275][T31260] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 890.167435][T31296] xt_hashlimit: max too large, truncated to 1048576 [ 890.266142][T31260] F2FS-fs (loop4): Try to recover all the superblocks, ret: 0 [ 890.677722][T31333] __nla_validate_parse: 3 callbacks suppressed [ 890.677738][T31333] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12368'. [ 890.785683][T31339] netlink: 'syz.2.12371': attribute type 2 has an invalid length. [ 890.980675][T31360] openvswitch: netlink: Message has 4 unknown bytes. [ 891.073325][T31364] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 891.181138][T11247] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 891.286666][T31381] SET target dimension over the limit! [ 891.376657][T31387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12395'. [ 891.437270][T11247] usb 1-1: Using ep0 maxpacket: 16 [ 891.565749][T11247] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 891.596117][T11247] usb 1-1: config 0 has an invalid descriptor of length 149, skipping remainder of the config [ 891.631719][T11247] usb 1-1: config 0 has no interface number 0 [ 891.711661][T31415] CIFS mount error: No usable UNC path provided in device string! [ 891.711661][T31415] [ 891.731601][T31415] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 891.824216][T11247] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.17 [ 891.852389][T11247] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.882589][T11247] usb 1-1: Product: syz [ 891.900900][T11247] usb 1-1: Manufacturer: syz [ 891.904518][T31427] netlink: 'syz.3.12414': attribute type 5 has an invalid length. [ 891.916466][T11247] usb 1-1: SerialNumber: syz [ 891.918787][T31427] device ip6erspan0 entered promiscuous mode [ 891.929874][T11247] usb 1-1: config 0 descriptor?? [ 892.259645][T31445] loop1: detected capacity change from 0 to 136 [ 892.267228][T11247] usb 1-1: USB disconnect, device number 57 [ 892.302452][T31447] loop2: detected capacity change from 0 to 64 [ 892.359260][T31423] loop4: detected capacity change from 0 to 32768 [ 892.425033][T31423] XFS (loop4): Mounting V5 Filesystem [ 892.559630][T17386] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 892.568591][T31423] XFS (loop4): Ending clean mount [ 892.586874][T31423] XFS (loop4): Quotacheck needed: Please wait. [ 892.692308][T31423] XFS (loop4): Quotacheck: Done. [ 892.796779][ T4188] XFS (loop4): Unmounting Filesystem [ 893.004811][T31473] IPv6: addrconf: prefix option has invalid lifetime [ 893.012770][T17386] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 893.023576][T17386] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 893.033894][T17386] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 893.061969][ T26] audit: type=1400 audit(2000001975.435:40): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=31474 comm="syz.0.12435" [ 893.094155][ T8665] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 893.265157][T17386] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 893.282848][T17386] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.305948][T31489] loop0: detected capacity change from 0 to 64 [ 893.316316][T17386] usb 4-1: Product: syz [ 893.328492][T17386] usb 4-1: Manufacturer: syz [ 893.334498][T17386] usb 4-1: SerialNumber: syz [ 893.394033][ T8665] usb 2-1: Using ep0 maxpacket: 32 [ 893.516116][T31499] loop0: detected capacity change from 0 to 512 [ 893.527740][T31499] EXT4-fs (loop0): Ignoring removed orlov option [ 893.545957][T31499] EXT4-fs (loop0): orphan cleanup on readonly fs [ 893.552625][T31499] EXT4-fs error (device loop0): ext4_find_extent:893: inode #4: comm syz.0.12444: inode has invalid extent depth: 7 [ 893.572420][T31499] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=-117 [ 893.582731][T31499] EXT4-fs warning (device loop0): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 893.601778][T31499] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 893.607232][ T8665] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 893.608846][T31499] EXT4-fs (loop0): mounted filesystem without journal. Opts: orlov,grpid,,errors=continue. Quota mode: writeback. [ 893.656358][T31499] EXT4-fs error (device loop0): ext4_lookup:1855: inode #2: comm syz.0.12444: 'file0' linked to parent dir [ 893.735621][T17386] usb 4-1: 0:2 : does not exist [ 893.792434][T17386] usb 4-1: USB disconnect, device number 66 [ 893.807747][T31510] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 893.852938][ T8665] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 893.876857][ T8665] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.912918][ T8665] usb 2-1: Product: syz [ 893.917253][ T8665] usb 2-1: Manufacturer: syz [ 893.927683][ T8665] usb 2-1: SerialNumber: syz [ 893.938823][ T8665] usb 2-1: config 0 descriptor?? [ 894.003891][ T8665] quatech2 2-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 894.138746][ T6318] udevd[6318]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 894.237745][ T8665] usb 2-1: qt2_setup_urbs - submit read urb failed -8 [ 894.269823][ T8665] quatech2: probe of 2-1:0.0 failed with error -8 [ 894.514807][ T4236] usb 2-1: USB disconnect, device number 64 [ 894.841358][T31568] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12479'. [ 894.964774][T17386] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 895.015989][T31581] netlink: 'syz.2.12486': attribute type 1 has an invalid length. [ 895.171015][T31590] netlink: 14 bytes leftover after parsing attributes in process `syz.2.12490'. [ 895.226362][T31596] loop1: detected capacity change from 0 to 256 [ 895.274300][T17386] usb 4-1: Using ep0 maxpacket: 16 [ 895.335138][T31596] FAT-fs (loop1): Directory bread(block 64) failed [ 895.356159][T31596] FAT-fs (loop1): Directory bread(block 65) failed [ 895.382758][T31596] FAT-fs (loop1): Directory bread(block 66) failed [ 895.413318][T17386] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 895.431268][T31596] FAT-fs (loop1): Directory bread(block 67) failed [ 895.446683][T31596] FAT-fs (loop1): Directory bread(block 68) failed [ 895.459906][T17386] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 895.467110][T31596] FAT-fs (loop1): Directory bread(block 69) failed [ 895.501565][T17386] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.502316][T31596] FAT-fs (loop1): Directory bread(block 70) failed [ 895.532931][T31596] FAT-fs (loop1): Directory bread(block 71) failed [ 895.547287][T17386] usb 4-1: config 0 descriptor?? [ 895.548166][T31596] FAT-fs (loop1): Directory bread(block 72) failed [ 895.578415][T31596] FAT-fs (loop1): Directory bread(block 73) failed [ 895.597593][T17386] usbhid 4-1:0.0: fixing wrong optional hid class descriptors count [ 895.905111][T17386] usbhid 4-1:0.0: can't add hid device: -71 [ 895.911111][T17386] usbhid: probe of 4-1:0.0 failed with error -71 [ 895.948502][T17386] usb 4-1: USB disconnect, device number 67 [ 895.967403][T31640] netlink: 'syz.2.12514': attribute type 30 has an invalid length. [ 896.235433][T31659] (unnamed net_device) (uninitialized): ARP monitoring cannot be used with MII monitoring [ 896.343175][T31665] affs: No valid root block on device nbd0 [ 896.573044][T31675] loop4: detected capacity change from 0 to 2048 [ 896.653330][ T4194] loop4: p3 p4 < > [ 896.658415][ T4194] loop4: p3 start 33554432 is beyond EOD, truncated [ 896.688431][T31683] ALSA: mixer_oss: invalid OSS volume 'u' [ 896.703694][T31675] loop4: p3 p4 < > [ 896.710310][T31675] loop4: p3 start 33554432 is beyond EOD, truncated [ 896.883058][T31695] netlink: 14 bytes leftover after parsing attributes in process `syz.1.12541'. [ 896.924290][T31657] loop2: detected capacity change from 0 to 32768 [ 896.975199][ T4194] udevd[4194]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 897.093619][T31657] JBD2: Ignoring recovery information on journal [ 897.147427][T31657] JBD2: Unrecognised features on journal [ 897.153550][T31657] (syz.2.12522,31657,1):ocfs2_journal_load:1105 ERROR: Failed to load journal! [ 897.166122][T31657] (syz.2.12522,31657,0):ocfs2_check_volume:2437 ERROR: ocfs2 journal load failed! -22 [ 897.175743][T31657] (syz.2.12522,31657,0):ocfs2_check_volume:2493 ERROR: status = -22 [ 897.212890][T31657] (syz.2.12522,31657,1):ocfs2_mount_volume:1824 ERROR: status = -22 [ 897.238521][T31657] (syz.2.12522,31657,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 897.304974][T17386] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 897.593551][T17386] usb 5-1: Using ep0 maxpacket: 8 [ 897.621538][T31730] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12556'. [ 897.652516][T31730] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12556'. [ 897.676951][T31657] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 897.707054][T31732] netlink: 14 bytes leftover after parsing attributes in process `syz.0.12559'. [ 897.732719][T17386] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 897.758618][T17386] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 897.781301][T31734] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12560'. [ 897.784671][T17386] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 897.805296][T31734] netlink: 'syz.3.12560': attribute type 1 has an invalid length. [ 897.834410][T17386] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 897.835644][T31734] netlink: 92 bytes leftover after parsing attributes in process `syz.3.12560'. [ 897.862469][T17386] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 897.876242][T17386] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 897.917532][T17386] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.951746][T17386] usb 5-1: config 0 descriptor?? [ 897.989534][T31701] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 898.273764][T31757] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12570'. [ 898.289157][T31758] QAT: failed to copy from user cfg_data. [ 898.310637][T31757] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12570'. [ 898.374175][T31757] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12570'. [ 898.573396][T31776] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 898.609849][ T4233] usb 5-1: USB disconnect, device number 38 [ 898.720720][T31788] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 899.033083][T31809] loop1: detected capacity change from 0 to 4096 [ 899.624280][ T8665] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 899.902021][ T8665] usb 4-1: Using ep0 maxpacket: 8 [ 900.070581][T31836] loop0: detected capacity change from 0 to 32768 [ 900.194309][T31836] XFS (loop0): Mounting V5 Filesystem [ 900.222942][ T8665] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 900.232303][T17386] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 900.258775][ T8665] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 900.279803][ T8665] usb 4-1: Product: syz [ 900.302524][ T8665] usb 4-1: Manufacturer: syz [ 900.316932][ T8665] usb 4-1: SerialNumber: syz [ 900.334269][T31836] XFS (loop0): Ending clean mount [ 900.340058][ T8665] usb 4-1: config 0 descriptor?? [ 900.350024][T31836] XFS (loop0): Quotacheck needed: Please wait. [ 900.398000][ T8665] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 900.400625][T31836] XFS (loop0): Quotacheck: Done. [ 900.465936][ T4186] XFS (loop0): Unmounting Filesystem [ 900.540144][T17386] usb 2-1: Using ep0 maxpacket: 16 [ 900.686850][T31907] loop4: detected capacity change from 0 to 764 [ 900.704206][T17386] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 900.723572][T17386] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 900.746369][T17386] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 900.853372][ T8665] gspca_zc3xx: reg_r err -71 [ 900.858592][ T8665] gspca_zc3xx: probe of 4-1:0.0 failed with error -71 [ 900.867623][ T8665] usb 4-1: USB disconnect, device number 68 [ 900.960320][T17386] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 900.984704][T17386] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.985826][T31911] netlink: 36 bytes leftover after parsing attributes in process `syz.4.12644'. [ 901.023097][T31911] device bond5 entered promiscuous mode [ 901.030032][T17386] usb 2-1: Product: syz [ 901.034235][T17386] usb 2-1: Manufacturer: syz [ 901.103409][T17386] usb 2-1: SerialNumber: syz [ 901.163234][T17386] usb 2-1: config 0 descriptor?? [ 902.259596][T31977] loop2: detected capacity change from 0 to 2048 [ 902.308750][T31977] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 902.541551][T31987] loop2: detected capacity change from 0 to 64 [ 902.698409][T31993] __nla_validate_parse: 6 callbacks suppressed [ 902.698426][T31993] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12681'. [ 903.175189][T17386] usb 2-1: USB disconnect, device number 65 [ 903.329543][T32033] cgroup: subsys name conflicts with all [ 903.542844][T32049] netlink: 'syz.2.12709': attribute type 1 has an invalid length. [ 903.557524][T32049] netlink: 224 bytes leftover after parsing attributes in process `syz.2.12709'. [ 903.582083][T32054] xt_connbytes: Forcing CT accounting to be enabled [ 903.591329][T32049] NCSI netlink: No device for ifindex 0 [ 903.642852][ T4236] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 903.738140][T32063] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12715'. [ 903.770442][T32066] x_tables: unsorted underflow at hook 1 [ 903.784304][T32063] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12715'. [ 903.863714][T32063] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12715'. [ 903.914108][T32063] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12715'. [ 903.925064][T32063] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12715'. [ 903.935367][T32063] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12715'. [ 903.970395][T32063] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12715'. [ 903.987378][T32063] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12715'. [ 904.039459][ T4236] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 904.072577][ T4236] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 904.251005][T32084] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 904.295039][ T4236] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 904.304220][ T4236] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.346539][ T4236] usb 1-1: Product: syz [ 904.369031][ T4236] usb 1-1: Manufacturer: syz [ 904.378285][ T4236] usb 1-1: SerialNumber: syz [ 904.428245][T32064] loop2: detected capacity change from 0 to 32768 [ 904.428817][T32095] loop4: detected capacity change from 0 to 24 [ 904.445275][ T4236] usb 1-1: bad CDC descriptors [ 904.541237][T32095] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 904.571367][T32095] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 904.596286][T32064] JBD2: Ignoring recovery information on journal [ 904.639525][T32095] VFS: Lookup of 'file0' in romfs loop4 would have caused loop [ 904.678993][T11248] usb 1-1: USB disconnect, device number 58 [ 904.756115][T32064] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 904.867107][T32064] (syz.2.12716,32064,1):ocfs2_remount:631 ERROR: Cannot change data mode on remount [ 905.007906][ T4187] ocfs2: Unmounting device (7,2) on (node local) [ 905.204125][T32101] loop1: detected capacity change from 0 to 32768 [ 905.943204][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 906.140827][T32127] loop2: detected capacity change from 0 to 32768 [ 906.522488][T32127] XFS (loop2): Mounting V5 Filesystem [ 906.726216][T32127] XFS (loop2): Ending clean mount [ 906.745323][T32127] XFS (loop2): Quotacheck needed: Please wait. [ 906.797284][ T8665] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 906.903425][T32127] XFS (loop2): Quotacheck: Done. [ 906.949189][ T4187] XFS (loop2): Unmounting Filesystem [ 907.084217][ T8665] usb 2-1: Using ep0 maxpacket: 16 [ 907.330484][ T8665] usb 2-1: unable to get BOS descriptor or descriptor too short [ 907.458606][ T8665] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 907.483572][T32228] loop2: detected capacity change from 0 to 512 [ 907.544762][T32228] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 907.586539][T32228] EXT4-fs (loop2): external journal has bad superblock [ 907.683008][ T8665] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 907.696114][ T8665] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.719912][ T8665] usb 2-1: Product: syz [ 907.724290][ T8665] usb 2-1: Manufacturer: syz [ 907.745098][ T8665] usb 2-1: SerialNumber: syz [ 908.064253][ T4236] usb 2-1: USB disconnect, device number 66 [ 908.165877][T32271] xt_CT: You must specify a L4 protocol and not use inversions on it [ 908.390720][T32289] SET target dimension over the limit! [ 908.399377][T32291] loop2: detected capacity change from 0 to 128 [ 908.611411][T32303] netlink: 'syz.3.12830': attribute type 2 has an invalid length. [ 908.645139][T32303] __nla_validate_parse: 16 callbacks suppressed [ 908.645157][T32303] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12830'. [ 908.796761][T32317] device bridge3 entered promiscuous mode [ 908.849579][T32321] xt_TCPMSS: Only works on TCP SYN packets [ 909.041958][ T26] audit: type=1800 audit(2000001990.377:41): pid=32310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.0.12831" name="/" dev="sockfs" ino=116985 res=0 errno=0 [ 909.536853][T32365] loop0: detected capacity change from 0 to 64 [ 909.953036][T32393] x_tables: duplicate underflow at hook 4 [ 909.993772][T32394] netlink: 'syz.4.12873': attribute type 10 has an invalid length. [ 910.000320][T32349] loop2: detected capacity change from 0 to 32768 [ 910.100818][T32349] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.12850 (32349) [ 910.162392][T11248] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 910.183318][T32349] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 910.232274][T32349] BTRFS info (device loop2): turning on async discard [ 910.281304][T32349] BTRFS info (device loop2): enabling all of the rescue options [ 910.315105][T32349] BTRFS info (device loop2): ignoring data csums [ 910.354146][T32412] loop4: detected capacity change from 0 to 256 [ 910.357035][T32349] BTRFS info (device loop2): ignoring bad roots [ 910.376196][T32349] BTRFS info (device loop2): disabling log replay at mount time [ 910.394886][T32349] BTRFS info (device loop2): turning on flush-on-commit [ 910.416405][T32349] BTRFS info (device loop2): using free space tree [ 910.437920][T32349] BTRFS info (device loop2): has skinny extents [ 910.440888][T32412] exfat: Deprecated parameter 'namecase' [ 910.475536][T32412] exfat: Deprecated parameter 'namecase' [ 910.553346][T32412] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x7808ae6a, utbl_chksum : 0xe619d30d) [ 910.611366][T11248] usb 1-1: unable to get BOS descriptor or descriptor too short [ 910.696909][T11248] usb 1-1: config 66 has an invalid interface number: 168 but max is 0 [ 910.701802][T32412] exFAT-fs (loop4): hint_cluster is invalid (4278190089) [ 910.705233][T11248] usb 1-1: config 66 has an invalid descriptor of length 30, skipping remainder of the config [ 910.705257][T11248] usb 1-1: config 66 has no interface number 0 [ 910.705294][T11248] usb 1-1: config 66 interface 168 altsetting 131 has 0 endpoint descriptors, different from the interface descriptor's value: 20 [ 910.705317][T11248] usb 1-1: config 66 interface 168 has no altsetting 0 [ 910.752061][T32412] exFAT-fs (loop4): error, failed to bmap (inode : ffff8880742c1b60 iblock : 8, err : -5) [ 910.785241][T32412] exFAT-fs (loop4): error, invalid access to FAT (entry 0xff000008) [ 910.798198][T32412] exFAT-fs (loop4): error, invalid access to FAT (entry 0xff000008) [ 910.917671][T16288] BTRFS warning (device loop2): checksum verify failed on 5332992 wanted 0xb929531db417ae5491593d99afe1510df15bdaa63fb6603d26a93ec9245f098d found 0x8883588ed640b7a5f22f0afabea3add9399913a6417ca0e34e9d294b2a9d89c6 level 0 [ 910.960362][ T1266] attempt to access beyond end of device [ 910.960362][ T1266] loop4: rw=1, want=34225520826, limit=256 [ 910.983404][T32446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 910.987586][T32349] BTRFS warning (device loop2): couldn't read tree root [ 910.995762][T11248] usb 1-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 911.020240][ T1266] Buffer I/O error on dev loop4, logical block 34225520825, lost async page write [ 911.030104][ T1266] attempt to access beyond end of device [ 911.030104][ T1266] loop4: rw=1, want=34225520827, limit=256 [ 911.041528][T11248] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.042038][ T1266] Buffer I/O error on dev loop4, logical block 34225520826, lost async page write [ 911.066596][ T1266] attempt to access beyond end of device [ 911.066596][ T1266] loop4: rw=1, want=34225520828, limit=256 [ 911.079330][T11248] usb 1-1: Product: syz [ 911.092506][ T1266] Buffer I/O error on dev loop4, logical block 34225520827, lost async page write [ 911.101936][T11248] usb 1-1: Manufacturer: syz [ 911.112799][T11248] usb 1-1: SerialNumber: syz [ 911.118330][ T1266] attempt to access beyond end of device [ 911.118330][ T1266] loop4: rw=1, want=34225520829, limit=256 [ 911.178046][ T1266] Buffer I/O error on dev loop4, logical block 34225520828, lost async page write [ 911.207545][ T1266] attempt to access beyond end of device [ 911.207545][ T1266] loop4: rw=1, want=34225520830, limit=256 [ 911.239069][ T1266] Buffer I/O error on dev loop4, logical block 34225520829, lost async page write [ 911.279856][ T1266] attempt to access beyond end of device [ 911.279856][ T1266] loop4: rw=1, want=34225520831, limit=256 [ 911.326656][ T1266] Buffer I/O error on dev loop4, logical block 34225520830, lost async page write [ 911.358848][ T1266] attempt to access beyond end of device [ 911.358848][ T1266] loop4: rw=1, want=34225520832, limit=256 [ 911.386393][ T1266] Buffer I/O error on dev loop4, logical block 34225520831, lost async page write [ 911.491911][T11248] usb 1-1: USB disconnect, device number 59 [ 911.598773][T32349] BTRFS error (device loop2): open_ctree failed: -22 [ 911.828099][T32466] netlink: 'syz.1.12900': attribute type 4 has an invalid length. [ 911.871739][T32466] netlink: 152 bytes leftover after parsing attributes in process `syz.1.12900'. [ 911.883191][ T8661] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 911.909888][T32466] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 912.193025][ T8661] usb 4-1: Using ep0 maxpacket: 8 [ 912.252264][T32494] program syz.4.12914 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 912.355055][ T8661] usb 4-1: config 7 has an invalid interface number: 143 but max is 1 [ 912.377107][ T8661] usb 4-1: config 7 has an invalid interface number: 217 but max is 1 [ 912.414159][ T8661] usb 4-1: config 7 has an invalid descriptor of length 121, skipping remainder of the config [ 912.448098][ T8661] usb 4-1: config 7 has no interface number 0 [ 912.478863][ T8661] usb 4-1: config 7 has no interface number 1 [ 912.491951][ T8661] usb 4-1: too many endpoints for config 7 interface 217 altsetting 0: 255, using maximum allowed: 30 [ 912.536235][ T8661] usb 4-1: config 7 interface 217 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 912.604745][ T8661] usb 4-1: config 7 interface 143 has no altsetting 0 [ 912.665619][T32529] openvswitch: netlink: EtherType 0 is less than min 600 [ 912.834430][ T8661] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=ba.35 [ 912.844098][T32536] ieee802154 phy1 wpan1: encryption failed: -90 [ 912.854752][ T8661] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.873932][ T8661] usb 4-1: Product: syz [ 912.884710][ T8661] usb 4-1: Manufacturer: syz [ 912.909303][ T8661] usb 4-1: SerialNumber: syz [ 912.966309][T32543] syz.4.12937 uses old SIOCAX25GETINFO [ 912.981962][T32548] xt_ecn: cannot match TCP bits for non-tcp packets [ 913.217021][ T8661] qmi_wwan: probe of 4-1:7.143 failed with error -22 [ 913.237431][T32566] netlink: 272 bytes leftover after parsing attributes in process `syz.1.12948'. [ 913.294393][ T8661] usb 4-1: Could not set interface, error -71 [ 913.338143][ T8661] usb 4-1: USB disconnect, device number 69 [ 914.092430][T32633] trusted_key: encrypted_key: keyword 'newU_5' not recognized [ 914.246081][T32644] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 914.252649][T32644] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 914.301551][T32644] vhci_hcd vhci_hcd.0: Device attached [ 914.375419][T32652] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 914.381979][T32652] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 914.397864][T32652] vhci_hcd vhci_hcd.0: Device attached [ 914.429372][T32657] vhci_hcd: connection closed [ 914.429551][T32647] vhci_hcd: connection closed [ 914.429925][T11249] vhci_hcd: stop threads [ 914.467842][T11249] vhci_hcd: release socket [ 914.500013][T11249] vhci_hcd: disconnect device [ 914.512427][ T8661] vhci_hcd: vhci_device speed not set [ 914.525426][T32667] delete_channel: no stack [ 914.533049][T11249] vhci_hcd: stop threads [ 914.543315][T11249] vhci_hcd: release socket [ 914.586558][T11249] vhci_hcd: disconnect device [ 914.597817][ T8661] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 914.625459][ T8661] usb 37-1: enqueue for inactive port 0 [ 914.747469][ T8661] vhci_hcd: vhci_device speed not set [ 915.072802][T32708] netlink: 96 bytes leftover after parsing attributes in process `syz.0.13013'. [ 915.238181][T32702] loop4: detected capacity change from 0 to 4096 [ 915.493622][T32735] overlayfs: './file0' not a directory [ 915.593769][T32739] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13029'. [ 915.816572][T32757] netlink: 124 bytes leftover after parsing attributes in process `syz.2.13038'. [ 915.824781][T32756] netlink: 'syz.0.13037': attribute type 1 has an invalid length. [ 915.884333][T32756] netlink: 224 bytes leftover after parsing attributes in process `syz.0.13037'. [ 916.131006][ T301] loop4: detected capacity change from 0 to 2048 [ 916.159114][ T315] loop0: detected capacity change from 0 to 8 [ 916.210109][ T318] netlink: 'syz.3.13052': attribute type 10 has an invalid length. [ 916.222405][ T318] netlink: 2 bytes leftover after parsing attributes in process `syz.3.13052'. [ 916.254495][ T318] device bond0 entered promiscuous mode [ 916.274300][ T318] device bond_slave_1 entered promiscuous mode [ 916.281853][ T301] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 916.282030][ T318] device wlan1 entered promiscuous mode [ 916.300474][ T323] netlink: 'syz.1.13055': attribute type 10 has an invalid length. [ 916.312248][ T315] unable to read fragment index table [ 916.316658][ T323] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.13055'. [ 916.346742][ T318] bridge0: port 3(bond0) entered blocking state [ 916.361396][ T318] bridge0: port 3(bond0) entered disabled state [ 916.387778][ T318] bridge0: port 3(bond0) entered blocking state [ 916.394364][ T318] bridge0: port 3(bond0) entered forwarding state [ 916.567551][ T339] loop0: detected capacity change from 0 to 1024 [ 916.623028][ T339] EXT4-fs (loop0): Ignoring removed bh option [ 916.630618][ T339] EXT4-fs (loop0): inline encryption not supported [ 916.644677][ T335] loop1: detected capacity change from 0 to 4096 [ 916.693233][ T339] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 916.710392][ T335] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 916.807226][ T335] ntfs: volume version 3.1. [ 916.872033][ T339] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 2: comm syz.0.13061: lblock 2 mapped to illegal pblock 2 (length 1) [ 916.950086][ T355] netlink: 209820 bytes leftover after parsing attributes in process `syz.4.13069'. [ 916.958338][ T339] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 916.998719][ T339] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 48: comm syz.0.13061: lblock 0 mapped to illegal pblock 48 (length 1) [ 917.013453][ T356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13068'. [ 917.024355][ T335] ntfs: (device loop1): ntfs_mark_quotas_out_of_date(): Quota defaults entry version 0x5 is not supported. [ 917.088049][ T335] ntfs: (device loop1): load_system_files(): Failed to mark quotas out of date. Mounting read-only. Run chkdsk. [ 917.100904][ T339] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 917.118256][ T339] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.13061: Failed to acquire dquot type 0 [ 917.193372][ T363] netlink: 32 bytes leftover after parsing attributes in process `syz.2.13072'. [ 917.202525][ T339] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 917.212796][ T335] ntfs: (device loop1): ntfs_remount(): Volume has errors and is read-only. Cannot remount read-write. [ 917.239556][ T363] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13072'. [ 917.256564][ T339] EXT4-fs error (device loop0): ext4_evict_inode:282: inode #11: comm syz.0.13061: mark_inode_dirty error [ 917.267749][ T365] openvswitch: netlink: Flow actions attr not present in new flow. [ 917.302406][ T339] EXT4-fs warning (device loop0): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 917.357854][ T339] EXT4-fs (loop0): 1 orphan inode deleted [ 917.374394][ T339] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,noblock_validity,bh,max_batch_time=0x00000000000008c9,debug,inlinecrypt,,errors=continue. Quota mode: writeback. [ 917.411263][ T369] usb usb8: usbfs: process 369 (syz.3.13076) did not claim interface 0 before use [ 917.432804][ T3064] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 917.502861][ T3064] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 917.539118][ T339] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 1: comm syz.0.13061: lblock 1 mapped to illegal pblock 1 (length 1) [ 917.553819][ T3064] EXT4-fs error (device loop0): ext4_release_dquot:6270: comm kworker/u4:5: Failed to release dquot type 0 [ 917.611523][ T375] loop2: detected capacity change from 0 to 1024 [ 917.618421][ T339] Quota error (device loop0): find_next_id: Can't read quota tree block 1 [ 917.771221][ T4186] EXT4-fs error (device loop0): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 917.825006][ T4186] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 917.866884][ T4186] EXT4-fs error (device loop0): ext4_quota_off:6540: inode #3: comm syz-executor: mark_inode_dirty error [ 918.452767][ T405] loop2: detected capacity change from 0 to 8192 [ 918.601890][ T405] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 918.612086][ T405] REISERFS (device loop2): using ordered data mode [ 918.622553][ T405] reiserfs: using flush barriers [ 918.632105][ T405] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 918.696746][ T405] REISERFS (device loop2): checking transaction log (loop2) [ 918.805283][ T405] REISERFS (device loop2): Using r5 hash to sort names [ 918.874425][ T405] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 919.199157][ T475] loop0: detected capacity change from 0 to 512 [ 919.244820][ T479] netlink: 'syz.3.13128': attribute type 10 has an invalid length. [ 919.311284][ T471] loop1: detected capacity change from 0 to 4096 [ 919.339597][ T471] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 919.391891][ T471] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 919.393678][ T475] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.13126: Failed to acquire dquot type 1 [ 919.436115][ T479] bond0: (slave macvlan0): Releasing backup interface [ 919.459347][ T479] device macvlan0 left promiscuous mode [ 919.466700][ T471] ntfs: volume version 3.1. [ 919.471214][ T479] team0: Port device macvlan0 added [ 919.535639][ T8661] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 919.535968][ T475] EXT4-fs (loop0): 1 truncate cleaned up [ 919.580925][ T488] device ~ entered promiscuous mode [ 919.653115][ T475] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,auto_da_alloc,minixdf,noinit_itable,init_itable,,errors=continue. Quota mode: writeback. [ 919.673343][ T475] ext4 filesystem being mounted at /2660/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 919.720508][ T497] loop4: detected capacity change from 0 to 256 [ 919.745776][ T475] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.13126: Failed to acquire dquot type 1 [ 919.824867][ T497] exfat: Deprecated parameter 'namecase' [ 919.830614][ T497] exfat: Deprecated parameter 'namecase' [ 919.887646][ T497] exFAT-fs (loop4): failed to load upcase table (idx : 0x00000c00, chksum : 0x54b6a122, utbl_chksum : 0xe619d30d) [ 920.021711][ T8661] usb 3-1: unable to get BOS descriptor or descriptor too short [ 920.054963][T17386] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 920.241097][ T8661] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 920.257031][ T8661] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 920.319984][ T514] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002] [ 920.333368][ T519] libceph: resolve '0.0' (ret=-3): failed [ 920.359010][ T514] System zones: 0-1, 3-36 [ 920.401992][ T514] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.13143: bad orphan inode 134217728 [ 920.476478][ T8661] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=e1.40 [ 920.485913][ T8661] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.494646][ T8661] usb 3-1: Product: syz [ 920.508055][ T8661] usb 3-1: Manufacturer: syz [ 920.512849][ T8661] usb 3-1: SerialNumber: syz [ 920.525053][ T514] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000101,debug,journal_dev=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 920.575177][ T8661] usb 3-1: selecting invalid altsetting 1 [ 920.581427][ T8661] usb 3-1: unit 6 not found! [ 920.608066][ T514] EXT4-fs error (device loop4): ext4_iget_extra_inode:4566: inode #15: comm syz.4.13143: corrupted in-inode xattr [ 920.638025][ T534] netlink: 'syz.0.13153': attribute type 4 has an invalid length. [ 920.671413][ T534] netlink: 'syz.0.13153': attribute type 3 has an invalid length. [ 920.671504][ T536] tc_dump_action: action bad kind [ 920.685449][ T534] __nla_validate_parse: 5 callbacks suppressed [ 920.685464][ T534] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13153'. [ 920.824077][T17386] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 920.849920][ T8661] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 920.860671][T17386] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.869041][T17386] usb 4-1: Product: syz [ 920.885030][ T8661] usb 3-1: USB disconnect, device number 52 [ 920.912565][T17386] usb 4-1: Manufacturer: syz [ 920.926115][T17386] usb 4-1: SerialNumber: syz [ 920.983275][T17386] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 921.091707][ T560] set_capacity_and_notify: 2 callbacks suppressed [ 921.091722][ T560] loop4: detected capacity change from 0 to 1024 [ 921.107429][ T563] ieee802154 phy1 wpan1: encryption failed: -90 [ 921.168325][ T4194] udevd[4194]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 921.271134][T16288] hfsplus: b-tree write err: -5, ino 25 [ 921.276922][T16288] hfsplus: b-tree write err: -5, ino 4 [ 921.298048][T16288] hfsplus: b-tree write err: -5, ino 2 [ 921.657453][ T596] bridge0: port 3(batadv0) entered disabled state [ 921.801554][T17386] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 921.926174][ T617] netlink: 148 bytes leftover after parsing attributes in process `syz.1.13194'. [ 922.054194][ T625] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13198'. [ 922.171996][ T632] loop0: detected capacity change from 0 to 1024 [ 922.213412][ T628] loop2: detected capacity change from 0 to 4096 [ 922.237536][ T636] loop1: detected capacity change from 0 to 1024 [ 922.241146][ T8665] usb 4-1: USB disconnect, device number 70 [ 922.304845][ T628] __ntfs_warning: 7 callbacks suppressed [ 922.304861][ T628] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 922.314570][ T1226] hfsplus: b-tree write err: -5, ino 25 [ 922.332623][ T636] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 922.382507][ T636] EXT4-fs error (device loop1): ext4_get_journal_inode:5185: inode #32: comm syz.1.13203: iget: special inode unallocated [ 922.404345][ T640] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13205'. [ 922.418708][ T1226] hfsplus: b-tree write err: -5, ino 4 [ 922.432610][ T1226] hfsplus: b-tree write err: -5, ino 2 [ 922.443676][ T1226] hfsplus: b-tree write err: -5, ino 26 [ 922.463381][ T636] EXT4-fs (loop1): no journal found [ 922.474073][ T636] EXT4-fs (loop1): can't get journal size [ 922.493009][ T636] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,jqfmt=vfsv0,nobarrier,. Quota mode: none. [ 922.543989][ T628] ntfs: volume version 3.1. [ 922.598711][ T628] ntfs: (device loop2): ntfs_mark_quotas_out_of_date(): Quota defaults entry version 0x5 is not supported. [ 922.648572][ T628] ntfs: (device loop2): load_system_files(): Failed to mark quotas out of date. Mounting read-only. Run chkdsk. [ 922.770615][ T628] ntfs: (device loop2): ntfs_remount(): Volume has errors and is read-only. Cannot remount read-write. [ 922.836694][ T651] loop4: detected capacity change from 0 to 4096 [ 922.947348][ T651] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 922.966613][T17386] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 922.973778][T17386] ath9k_htc: Failed to initialize the device [ 922.984490][ T651] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 923.035041][ T651] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 923.050107][ T8665] usb 4-1: ath9k_htc: USB layer deinitialized [ 923.113960][ T651] ntfs: volume version 3.1. [ 923.294472][ T4188] ntfs: (device loop4): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 923.364318][ T689] tmpfs: Bad value for 'mpol' [ 923.512364][ T702] netlink: 'syz.3.13235': attribute type 13 has an invalid length. [ 923.571050][ T706] loop4: detected capacity change from 0 to 64 [ 923.766140][ T720] loop0: detected capacity change from 0 to 64 [ 923.797238][ T26] audit: type=1800 audit(2000002004.187:43): pid=706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.13237" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 923.911846][ T720] Trying to free block not in datazone [ 923.970483][ T720] Trying to free block not in datazone [ 923.987585][ T720] Trying to free block not in datazone [ 923.999544][ T720] Trying to free block not in datazone [ 924.013340][ T720] Trying to free block not in datazone [ 924.034902][ T720] minix_free_block (loop0:6): bit already cleared [ 924.063830][ T720] Trying to free block not in datazone [ 924.074246][ T720] Trying to free block not in datazone [ 924.322937][ T753] libceph: resolve '0' (ret=-3): failed [ 924.345208][T11247] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 924.569525][ T8665] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 924.633691][ T21] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 924.729993][T11247] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 924.758884][T11247] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 924.771965][T11247] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 924.793888][T11247] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 924.828579][ T775] netlink: 'syz.0.13272': attribute type 21 has an invalid length. [ 924.875923][ T8665] usb 2-1: Using ep0 maxpacket: 8 [ 924.968651][T11247] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 924.989428][T11247] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.011034][T11247] usb 5-1: Product: syz [ 925.015252][T11247] usb 5-1: Manufacturer: syz [ 925.029465][ T8665] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 925.031170][T11247] usb 5-1: SerialNumber: syz [ 925.037772][ T8665] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 925.037794][ T8665] usb 2-1: config 0 has no interface number 0 [ 925.037826][ T8665] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 925.065057][T11247] usb 5-1: config 0 descriptor?? [ 925.132501][ T8665] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 925.148450][ T789] netlink: 'syz.2.13279': attribute type 1 has an invalid length. [ 925.153954][ T8665] usb 2-1: config 0 interface 255 has no altsetting 0 [ 925.196639][ T21] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 925.206716][ T21] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 925.221449][ T21] usb 4-1: Product: syz [ 925.225669][ T21] usb 4-1: Manufacturer: syz [ 925.238813][ T21] usb 4-1: SerialNumber: syz [ 925.255887][ T21] usb 4-1: config 0 descriptor?? [ 925.297405][ T21] ch341 4-1:0.0: ch341-uart converter detected [ 925.362698][ T798] loop0: detected capacity change from 0 to 256 [ 925.371477][ T8665] usb 2-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= d.68 [ 925.371718][T11247] adutux 5-1:0.0: Could not retrieve serial number [ 925.380550][ T8665] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.380576][ T8665] usb 2-1: Product: syz [ 925.398212][T11247] adutux: probe of 5-1:0.0 failed with error -5 [ 925.407937][ T8665] usb 2-1: Manufacturer: syz [ 925.412578][ T8665] usb 2-1: SerialNumber: syz [ 925.426695][ T8665] usb 2-1: config 0 descriptor?? [ 925.490249][ T8665] kalmia 2-1:0.255 (unnamed net_device) (uninitialized): Error sending init packet. Status -22 [ 925.521592][ T8665] kalmia: probe of 2-1:0.255 failed with error -22 [ 925.616573][T11247] usb 5-1: USB disconnect, device number 39 [ 925.733395][ T8665] usb 2-1: USB disconnect, device number 67 [ 925.755988][ T21] usb 4-1: failed to send control message: -71 [ 925.762325][ T21] ch341-uart: probe of ttyUSB0 failed with error -71 [ 925.778010][ T4265] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 925.806431][ T21] usb 4-1: USB disconnect, device number 71 [ 925.834583][ T21] ch341 4-1:0.0: device disconnected [ 925.849649][ T812] netlink: 'syz.0.13289': attribute type 12 has an invalid length. [ 925.875170][ T812] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13289'. [ 926.227112][ T4265] usb 3-1: config index 0 descriptor too short (expected 32820, got 52) [ 926.258168][ T4265] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 926.301008][ T4265] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x2F, skipping [ 926.345227][ T4265] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 926.391295][ T4265] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 926.653893][ T4265] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0035, bcdDevice= a.97 [ 926.662973][ T4265] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.728359][ T4265] usb 3-1: Product: syz [ 926.732664][ T4265] usb 3-1: Manufacturer: syz [ 926.737275][ T4265] usb 3-1: SerialNumber: syz [ 926.772232][ T858] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 926.785215][ T4265] usb 3-1: config 0 descriptor?? [ 926.822872][ T858] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 926.892657][ T4265] snd-usb-audio: probe of 3-1:0.0 failed with error -2 [ 926.976154][ T874] netlink: 'syz.3.13318': attribute type 12 has an invalid length. [ 927.057594][ T4194] udevd[4194]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 927.057683][ T877] loop0: detected capacity change from 0 to 2048 [ 927.090766][ T4265] usb 3-1: USB disconnect, device number 53 [ 927.151883][ T886] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 927.216177][ T26] audit: type=1800 audit(2000002007.387:44): pid=877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.13319" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 927.275729][ T891] program syz.1.13326 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 927.307366][ T877] NILFS (loop0): error -2 truncating bmap (ino=16) [ 927.328419][ T891] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 927.477110][ T886] ------------[ cut here ]------------ [ 927.483287][ T886] WARNING: CPU: 1 PID: 886 at fs/nilfs2/dat.c:200 nilfs_dat_commit_end+0x5ac/0x6b0 [ 927.492943][ T886] Modules linked in: [ 927.496866][ T886] CPU: 1 PID: 886 Comm: segctord Not tainted syzkaller #0 [ 927.504038][ T886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 927.514163][ T886] RIP: 0010:nilfs_dat_commit_end+0x5ac/0x6b0 [ 927.520213][ T886] Code: 8b 34 24 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b8 54 03 00 e8 73 5a 6a fe e8 7e b6 f1 fd e9 b8 fc ff ff e8 64 5a 6a fe <0f> 0b e9 16 fc ff ff e8 58 5a 6a fe e8 63 b6 f1 fd e9 74 fe ff ff [ 927.539983][ T886] RSP: 0018:ffffc9000344f390 EFLAGS: 00010293 [ 927.546126][ T886] RAX: ffffffff830ec6ac RBX: ffff8880783691a0 RCX: ffff888062285940 [ 927.554236][ T886] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 00000000003f0002 [ 927.562344][ T886] RBP: 0000000000000003 R08: ffff88807411abcf R09: 1ffff1100e823579 [ 927.570365][ T886] R10: dffffc0000000000 R11: ffffed100e82357a R12: ffff8880622870c8 [ 927.578389][ T886] R13: ffff8880236659e0 R14: 00000000003f0002 R15: ffff88807dfa9730 [ 927.586443][ T886] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 927.595694][ T886] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 927.602325][ T886] CR2: 00005555844a3a28 CR3: 0000000063b01000 CR4: 00000000003506e0 [ 927.610361][ T886] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 927.618413][ T886] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 927.626441][ T886] Call Trace: [ 927.629856][ T886] [ 927.632803][ T886] nilfs_dat_commit_update+0x24/0x40 [ 927.638339][ T886] nilfs_btree_commit_update_v+0x93/0x410 [ 927.644090][ T886] nilfs_btree_propagate+0x95a/0xcf0 [ 927.649635][ T886] nilfs_bmap_propagate+0x70/0x120 [ 927.654808][ T886] nilfs_segctor_apply_buffers+0x15d/0x320 [ 927.660775][ T886] ? nilfs_collect_file_data+0xc0/0xc0 [ 927.666436][ T886] nilfs_segctor_scan_file+0x7af/0x9d0 [ 927.672089][ T886] ? trace_nilfs2_collection_stage_transition+0x1a0/0x1a0 [ 927.679418][ T886] ? nilfs_segbuf_extend_segsum+0x25d/0x360 [ 927.685384][ T886] ? rcu_is_watching+0x11/0xa0 [ 927.690206][ T886] nilfs_segctor_do_construct+0x1c26/0x6ca0 [ 927.696232][ T886] ? verify_lock_unused+0x140/0x140 [ 927.701610][ T886] ? nilfs_transaction_unlock+0x220/0x220 [ 927.707376][ T886] ? nilfs_bmap_test_and_clear_dirty+0x4c/0x70 [ 927.714049][ T886] ? clear_nonspinnable+0x60/0x60 [ 927.719104][ T886] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 927.724981][ T886] ? __lock_acquire+0x7d10/0x7d10 [ 927.730135][ T886] ? __rwlock_init+0x140/0x140 [ 927.734992][ T886] ? do_raw_spin_unlock+0x11d/0x230 [ 927.740380][ T886] ? _raw_spin_unlock+0x24/0x40 [ 927.745343][ T886] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 927.750823][ T886] nilfs_segctor_construct+0x17b/0x690 [ 927.756367][ T886] nilfs_segctor_thread+0x523/0x1180 [ 927.761956][ T886] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 927.768187][ T886] ? nilfs_iput_work_func+0x70/0x70 [ 927.773409][ T886] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 927.779379][ T886] ? _raw_spin_unlock+0x40/0x40 [ 927.784248][ T886] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 927.790520][ T886] ? init_wait_entry+0xd0/0xd0 [ 927.795871][ T886] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 927.801866][ T886] ? __kthread_parkme+0x157/0x1b0 [ 927.806997][ T886] kthread+0x436/0x520 [ 927.811138][ T886] ? nilfs_iput_work_func+0x70/0x70 [ 927.816378][ T886] ? kthread_blkcg+0xd0/0xd0 [ 927.821052][ T886] ret_from_fork+0x1f/0x30 [ 927.825497][ T886] [ 927.828542][ T886] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 927.835902][ T886] CPU: 1 PID: 886 Comm: segctord Not tainted syzkaller #0 [ 927.843324][ T886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 927.853457][ T886] Call Trace: [ 927.856844][ T886] [ 927.859789][ T886] dump_stack_lvl+0x188/0x250 [ 927.864563][ T886] ? show_regs_print_info+0x20/0x20 [ 927.869765][ T886] ? load_image+0x400/0x400 [ 927.874263][ T886] panic+0x2e5/0x810 [ 927.878156][ T886] ? bpf_jit_dump+0xd0/0xd0 [ 927.882673][ T886] ? ret_from_fork+0x1f/0x30 [ 927.887266][ T886] ? nilfs_dat_commit_end+0x5ac/0x6b0 [ 927.892659][ T886] __warn+0x248/0x2b0 [ 927.896742][ T886] ? nilfs_dat_commit_end+0x5ac/0x6b0 [ 927.902482][ T886] report_bug+0x1b7/0x2e0 [ 927.906957][ T886] handle_bug+0x3a/0x70 [ 927.911107][ T886] exc_invalid_op+0x16/0x40 [ 927.915600][ T886] asm_exc_invalid_op+0x16/0x20 [ 927.920453][ T886] RIP: 0010:nilfs_dat_commit_end+0x5ac/0x6b0 [ 927.926468][ T886] Code: 8b 34 24 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b8 54 03 00 e8 73 5a 6a fe e8 7e b6 f1 fd e9 b8 fc ff ff e8 64 5a 6a fe <0f> 0b e9 16 fc ff ff e8 58 5a 6a fe e8 63 b6 f1 fd e9 74 fe ff ff [ 927.946626][ T886] RSP: 0018:ffffc9000344f390 EFLAGS: 00010293 [ 927.952889][ T886] RAX: ffffffff830ec6ac RBX: ffff8880783691a0 RCX: ffff888062285940 [ 927.961060][ T886] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 00000000003f0002 [ 927.969122][ T886] RBP: 0000000000000003 R08: ffff88807411abcf R09: 1ffff1100e823579 [ 927.977086][ T886] R10: dffffc0000000000 R11: ffffed100e82357a R12: ffff8880622870c8 [ 927.985053][ T886] R13: ffff8880236659e0 R14: 00000000003f0002 R15: ffff88807dfa9730 [ 927.993287][ T886] ? nilfs_dat_commit_end+0x5ac/0x6b0 [ 927.998680][ T886] nilfs_dat_commit_update+0x24/0x40 [ 928.003966][ T886] nilfs_btree_commit_update_v+0x93/0x410 [ 928.009714][ T886] nilfs_btree_propagate+0x95a/0xcf0 [ 928.015374][ T886] nilfs_bmap_propagate+0x70/0x120 [ 928.020570][ T886] nilfs_segctor_apply_buffers+0x15d/0x320 [ 928.026459][ T886] ? nilfs_collect_file_data+0xc0/0xc0 [ 928.031919][ T886] nilfs_segctor_scan_file+0x7af/0x9d0 [ 928.037374][ T886] ? trace_nilfs2_collection_stage_transition+0x1a0/0x1a0 [ 928.044582][ T886] ? nilfs_segbuf_extend_segsum+0x25d/0x360 [ 928.050598][ T886] ? rcu_is_watching+0x11/0xa0 [ 928.055454][ T886] nilfs_segctor_do_construct+0x1c26/0x6ca0 [ 928.061361][ T886] ? verify_lock_unused+0x140/0x140 [ 928.066757][ T886] ? nilfs_transaction_unlock+0x220/0x220 [ 928.072672][ T886] ? nilfs_bmap_test_and_clear_dirty+0x4c/0x70 [ 928.078827][ T886] ? clear_nonspinnable+0x60/0x60 [ 928.083848][ T886] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 928.089426][ T886] ? __lock_acquire+0x7d10/0x7d10 [ 928.094550][ T886] ? __rwlock_init+0x140/0x140 [ 928.099318][ T886] ? do_raw_spin_unlock+0x11d/0x230 [ 928.104542][ T886] ? _raw_spin_unlock+0x24/0x40 [ 928.109506][ T886] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 928.114961][ T886] nilfs_segctor_construct+0x17b/0x690 [ 928.120422][ T886] nilfs_segctor_thread+0x523/0x1180 [ 928.125720][ T886] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 928.131604][ T886] ? nilfs_iput_work_func+0x70/0x70 [ 928.136793][ T886] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 928.142683][ T886] ? _raw_spin_unlock+0x40/0x40 [ 928.147549][ T886] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 928.153437][ T886] ? init_wait_entry+0xd0/0xd0 [ 928.158223][ T886] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 928.164115][ T886] ? __kthread_parkme+0x157/0x1b0 [ 928.169144][ T886] kthread+0x436/0x520 [ 928.173224][ T886] ? nilfs_iput_work_func+0x70/0x70 [ 928.178411][ T886] ? kthread_blkcg+0xd0/0xd0 [ 928.183168][ T886] ret_from_fork+0x1f/0x30 [ 928.187601][ T886] [ 928.191143][ T886] Kernel Offset: disabled [ 928.195893][ T886] Rebooting in 86400 seconds..