last executing test programs: 29.008136357s ago: executing program 1 (id=1479): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x8000001, 0x0, 0x0, 0x0, 0x3}]}) 28.890222536s ago: executing program 1 (id=1482): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)={0x44, 0x5e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x1}, @nested={0x2a, 0x0, 0x0, 0x1, [@generic="25dc00ae07d1ef04c8de396d1073884d095537a2e7044884f17912923e15e6852e5173f6ed", @generic="96"]}]}, 0x44}], 0x1}, 0x0) 28.707535033s ago: executing program 1 (id=1486): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 28.533059422s ago: executing program 1 (id=1492): syz_mount_image$hfs(&(0x7f0000000380), &(0x7f0000000000)='./file1\x00', 0x1218001, &(0x7f00000000c0)={[{}, {@codepage={'codepage', 0x3d, 'cp936'}}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@dir_umask}]}, 0x2, 0x34e, &(0x7f0000002280)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 28.259302104s ago: executing program 1 (id=1497): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv4_newrule={0x24, 0x20, 0x1, 0x70bd29, 0x25dfdbfc, {0x2, 0xa, 0x80, 0xc, 0x9, 0x0, 0x0, 0x0, 0x8013}, [@FRA_SRC={0x8, 0x2, @multicast2}]}, 0x24}, 0x1, 0x0, 0x0, 0x48094}, 0x240400c0) 27.755031054s ago: executing program 1 (id=1509): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 27.489346927s ago: executing program 32 (id=1509): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.718793603s ago: executing program 3 (id=1828): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmmsg(r0, &(0x7f00000094c0)=[{{&(0x7f00000007c0)=@nl=@kern={0x10, 0x0, 0x0, 0x10000}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000880)="f3", 0x1}], 0x1}}, {{&(0x7f00000011c0)=@nl=@kern={0x10, 0x0, 0x0, 0x10000}, 0x80, &(0x7f00000043c0)=[{&(0x7f0000001240)="1f", 0x1}], 0x1, &(0x7f0000004400)=ANY=[], 0x10}}], 0x2, 0x10) 2.685910597s ago: executing program 4 (id=1830): r0 = syz_open_dev$video4linux(&(0x7f0000000100), 0x10004, 0x40502) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x101b}) 2.525938988s ago: executing program 4 (id=1832): clock_settime(0xffffffffffffffff, &(0x7f0000000080)) getrusage(0xffffffffffffffff, &(0x7f00000001c0)) 2.466533038s ago: executing program 3 (id=1833): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000040)={0x6, @raw_data="1091d118303b71487be772ab173d930f71975eab660f80cf314a90ba995e21d864e726b4316e762ba94755c9d3fbf2fd1b284048336428efdbdb9e7bcd5fa4a322b2016c5422ee628bb484222ec596afca8b2dc7335310f97e5866ac2fde4bbeed3dfababee66093dc8279b6875d5f6cae79c153a9a458e34d7feb440f60e834ecd5796afa398fdb69356500c51cb5565268e79c0eef9a1eec2b9db520d0463723b522d16818d4c078bcca9194099cbfaeac52c8b219aaf4af57c37d347d084b987436054da1ad50"}) 2.448991995s ago: executing program 5 (id=1835): r0 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x6a, 0x3, 0x0, &(0x7f0000000440)) 2.442876764s ago: executing program 4 (id=1836): r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0xc, &(0x7f0000000340)={0x34, 0x7f, 0xfffffffe}) 2.373260831s ago: executing program 3 (id=1837): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000100)="01000000", 0x4}], 0x2, 0xfffffffd, 0x40000) 2.341004725s ago: executing program 4 (id=1839): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file1\x00', 0x4206c, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f00000001c0), 0x810, &(0x7f0000000080)={[{@nfs_export_off, 0x0}], [], 0x2c}) 2.281635056s ago: executing program 5 (id=1840): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 2.125180397s ago: executing program 5 (id=1842): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0xfffffffe, 0x298, 0x1d8, 0x12, 0x60d, 0x0, 0x202, 0x2d8, 0x2e8, 0x2e8, 0x2d8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @remote, [], [], 'veth0_to_team\x00', 'macsec0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) 2.063233426s ago: executing program 5 (id=1844): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x440, 0x280, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x370, 0x3a8, 0x3a8, 0x370, 0x3a8, 0x3, 0x0, {[{{@ipv6={@remote, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x238, 0x280, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'vxcan1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@time={{0x38}, {0x400, 0x101, 0x20000ea0, 0x9ab3, 0xfffffffd, 0x5, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@ipv6={@empty, @private1, [0xffffff00, 0xff, 0x0, 0xff], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'pimreg0\x00', 'bridge0\x00', {0xff}, {}, 0x33, 0xa, 0x0, 0x4d}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x62ff, 0x7fff, 0x6, '\x00', {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) 1.935996764s ago: executing program 5 (id=1846): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c000201000000090400"], 0x0) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x4b, 0x24, 0xd0, 0x20, 0xa2c, 0x8, 0xc7b3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xa0}}]}}, 0x0) 1.772408975s ago: executing program 3 (id=1848): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2b, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.738702089s ago: executing program 4 (id=1849): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r0, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8f, 0x0, 0x100000}, 0x20) 1.63753568s ago: executing program 4 (id=1852): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a00030100000009040000000101"], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x16, @string={0x16, 0x3, "f7574062868922c905bfab369eccdfaa59000aff"}}, 0x0, 0x0, 0x0}, 0x0) 1.425159153s ago: executing program 3 (id=1856): r0 = syz_open_dev$loop(&(0x7f0000001b00), 0x80, 0x300) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000002b40)) 1.371797793s ago: executing program 3 (id=1858): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[], 0x0, 0x552e, &(0x7f000000f680)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='.\x00') 1.147256864s ago: executing program 0 (id=1861): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f0000000580)=0x401, 0x4) 992.799796ms ago: executing program 0 (id=1863): r0 = open(&(0x7f00000001c0)='./cgroup\x00', 0x40000, 0x157) syz_clone3(&(0x7f0000000340)={0x3a0000080, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 807.957613ms ago: executing program 0 (id=1866): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42840, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, 0x0, 0x4) 707.709225ms ago: executing program 2 (id=1867): r0 = socket$inet_smc(0x2b, 0x1, 0x0) writev(r0, &(0x7f0000001640)=[{&(0x7f0000000100)="560543", 0x3}], 0x1) 660.599427ms ago: executing program 0 (id=1868): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064ce, &(0x7f0000000240)={0x9, 0x4, 0x24ce}) 622.11946ms ago: executing program 2 (id=1869): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40010161, 0x0) 512.955511ms ago: executing program 0 (id=1870): syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000000)='./file1\x00', 0x30008c0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYBLOB="11f4579be01e435c584a33c63f8173f96bc4546035804d47be19163bd9e589bfdd0a9e6804495a4e4d83804e78ac5a72446295afd79de3fd6a02932a26ab4045133c371e56b0d48544db3c7db23a432f837b93f89b6f223cd1f6731d407ffdb1dd9467f5cd2d6c4e8b9d4f50d338ac91501a4bb780c4723929e22f55254546facc4f0284e644e6", @ANYRES8, @ANYRESHEX=0x0], 0x11, 0x314, &(0x7f0000000b80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) 506.975289ms ago: executing program 2 (id=1871): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x18, 0x140f, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'srp\x00'}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 353.348962ms ago: executing program 2 (id=1872): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r0, 0x101, 0x19, &(0x7f0000000000), &(0x7f0000000040)=0x4) 199.375345ms ago: executing program 2 (id=1873): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000300)={0x6, @pix={0x1, 0x40, 0x32435750, 0x2, 0x1, 0xb95, 0x6, 0x8, 0x0, 0x8, 0x0, 0x1}}) 82.792774ms ago: executing program 0 (id=1874): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2b, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 4.21222ms ago: executing program 2 (id=1875): setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) 0s ago: executing program 5 (id=1876): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ppoll(&(0x7f00000003c0)=[{0xffffffffffffffff, 0x8002}, {r0}, {}, {r0, 0x40}], 0x4, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): yz.2.165,4960,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 119.481166][ T4962] REISERFS warning (device loop1): reiserfs_fill_super: corrupt root inode, run fsck [ 119.887090][ T4958] (syz.3.164,4958,1):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 119.946707][ T4958] (syz.3.164,4958,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 120.014212][ T4969] ntfs: volume version 3.1. [ 120.361746][ T4967] (syz.4.168,4967,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 120.400638][ T4967] (syz.4.168,4967,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 121.032544][ T4977] set_capacity_and_notify: 3 callbacks suppressed [ 121.032560][ T4977] loop4: detected capacity change from 0 to 16384 [ 121.170651][ T4980] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 122.464418][ T4984] loop4: detected capacity change from 0 to 32768 [ 122.529689][ T4984] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 122.555769][ T4984] dlm: no local IP address has been set [ 122.591458][ T4984] dlm: cannot start dlm midcomms -107 [ 122.608789][ T4984] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 122.928961][ T4986] loop4: detected capacity change from 0 to 4096 [ 123.020288][ T4986] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 123.245923][ T4989] loop0: detected capacity change from 0 to 3 [ 123.295022][ T4989] attempt to access beyond end of device [ 123.295022][ T4989] loop0: rw=2048, want=8, limit=3 [ 123.333022][ T4989] SQUASHFS error: Failed to read block 0x0: -5 [ 123.353220][ T4989] unable to read squashfs_super_block [ 123.588202][ T4992] loop0: detected capacity change from 0 to 8 [ 123.922147][ T4994] loop1: detected capacity change from 0 to 8192 [ 123.989413][ T4994] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 124.073706][ T4994] REISERFS (device loop1): using ordered data mode [ 124.080291][ T4994] reiserfs: using flush barriers [ 124.168638][ T4994] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 124.207176][ T4994] REISERFS (device loop1): checking transaction log (loop1) [ 124.483334][ T4994] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[1 2 0(1) DIR], item_len 35, item_location 4029, free_space(entry_count) 2 [ 124.529463][ T4994] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 124.570703][ T4994] REISERFS (device loop1): Remounting filesystem read-only [ 124.579151][ T4994] REISERFS error (device loop1): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 124.658152][ T4994] REISERFS warning (device loop1): reiserfs_fill_super: corrupt root inode, run fsck [ 124.722900][ T4999] loop2: detected capacity change from 0 to 2048 [ 124.816000][ T4999] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.223140][ T5003] loop1: detected capacity change from 0 to 128 [ 125.309388][ T5005] loop3: detected capacity change from 0 to 256 [ 125.324176][ T5003] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 125.377085][ T5003] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.409034][ T5005] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 125.490163][ T5005] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 125.581033][ T5005] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 125.589531][ T5005] UDF-fs: Scanning with blocksize 512 failed [ 125.614381][ T5007] loop1: detected capacity change from 0 to 256 [ 125.652683][ T5005] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 125.668997][ T5007] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 125.686175][ T5005] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.758233][ T5007] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 125.817341][ T5007] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 125.844307][ T5007] UDF-fs: Scanning with blocksize 512 failed [ 125.857802][ T5007] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 125.874329][ T5007] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 126.004066][ T5009] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 126.043831][ T5009] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 126.110880][ T5009] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 126.119007][ T5009] UDF-fs: Scanning with blocksize 512 failed [ 126.136323][ T5011] set_capacity_and_notify: 1 callbacks suppressed [ 126.136339][ T5011] loop1: detected capacity change from 0 to 128 [ 126.186137][ T5009] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 126.220009][ T5011] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 126.257756][ T5011] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 126.271432][ T5009] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 126.552797][ T5013] loop3: detected capacity change from 0 to 4096 [ 126.566189][ T5015] loop1: detected capacity change from 0 to 256 [ 126.609212][ T5017] loop4: detected capacity change from 0 to 512 [ 126.664429][ T5013] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 126.688890][ T5017] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 126.698433][ T5013] UDF-fs: Scanning with blocksize 512 failed [ 126.699172][ T5015] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 126.741269][ T5017] UDF-fs: Scanning with blocksize 512 failed [ 126.768975][ T5013] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 126.788693][ T5017] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 126.797556][ T5015] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 126.816163][ T5017] UDF-fs: Scanning with blocksize 1024 failed [ 126.860735][ T5015] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 126.868449][ T5015] UDF-fs: Scanning with blocksize 512 failed [ 126.890741][ T5017] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 126.898181][ T5017] UDF-fs: Scanning with blocksize 2048 failed [ 126.934565][ T5015] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 126.948036][ T5017] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 126.980733][ T5017] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 126.991329][ T5015] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 127.089226][ T5019] loop3: detected capacity change from 0 to 512 [ 127.195141][ T5019] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 127.228111][ T5019] UDF-fs: Scanning with blocksize 512 failed [ 127.270812][ T5019] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 127.278226][ T5022] loop1: detected capacity change from 0 to 128 [ 127.344053][ T5019] UDF-fs: Scanning with blocksize 1024 failed [ 127.379291][ T5025] loop0: detected capacity change from 0 to 256 [ 127.417034][ T5019] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 127.459591][ T5025] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 127.480220][ T5019] UDF-fs: Scanning with blocksize 2048 failed [ 127.527170][ T5019] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 127.530394][ T5025] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 127.597833][ T5025] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 127.615428][ T5019] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 127.627103][ T5027] loop1: detected capacity change from 0 to 2048 [ 127.642458][ T5025] UDF-fs: Scanning with blocksize 512 failed [ 127.692244][ T5025] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 127.792187][ T5025] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 127.847420][ T5031] loop1: detected capacity change from 0 to 256 [ 127.914936][ T5030] loop3: detected capacity change from 0 to 2048 [ 128.706606][ T5037] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 128.741087][ T5037] UDF-fs: Scanning with blocksize 512 failed [ 128.789686][ T5037] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 128.820656][ T5037] UDF-fs: Scanning with blocksize 1024 failed [ 128.861277][ T5037] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 128.890007][ T5037] UDF-fs: Scanning with blocksize 2048 failed [ 129.030287][ T5037] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 129.801916][ T5062] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 130.088793][ T5061] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 130.100490][ T5061] UDF-fs: Scanning with blocksize 512 failed [ 130.147906][ T5061] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 130.190686][ T5061] UDF-fs: Scanning with blocksize 1024 failed [ 130.199571][ T5061] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 130.240672][ T5061] UDF-fs: Scanning with blocksize 2048 failed [ 130.282873][ T5061] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 130.477132][ T5066] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 130.565809][ T5066] REISERFS (device loop1): using ordered data mode [ 130.611364][ T5066] reiserfs: using flush barriers [ 130.652103][ T5066] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 130.731093][ T5066] REISERFS (device loop1): checking transaction log (loop1) [ 131.105879][ T5066] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[1 2 0(1) DIR], item_len 35, item_location 4029, free_space(entry_count) 2 [ 131.186551][ T5066] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 131.228080][ T5066] REISERFS (device loop1): Remounting filesystem read-only [ 131.280671][ T5066] REISERFS error (device loop1): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 131.329570][ T5066] REISERFS warning (device loop1): reiserfs_fill_super: corrupt root inode, run fsck [ 131.927466][ T5079] set_capacity_and_notify: 14 callbacks suppressed [ 131.927483][ T5079] loop0: detected capacity change from 0 to 16384 [ 131.999658][ T5079] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 132.036792][ T5079] UDF-fs: Scanning with blocksize 512 failed [ 132.076847][ T5079] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 132.106029][ T5079] UDF-fs: Scanning with blocksize 1024 failed [ 132.136591][ T5079] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 132.160686][ T5079] UDF-fs: Scanning with blocksize 2048 failed [ 132.183667][ T5079] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.520168][ T5083] loop0: detected capacity change from 0 to 512 [ 132.578272][ T5083] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 132.606858][ T5083] UDF-fs: Scanning with blocksize 512 failed [ 132.634708][ T5083] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 132.664038][ T5083] UDF-fs: Scanning with blocksize 1024 failed [ 132.686655][ T5083] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 132.713292][ T5083] UDF-fs: Scanning with blocksize 2048 failed [ 132.733231][ T5083] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 132.775158][ T5083] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.880085][ T5077] loop3: detected capacity change from 0 to 65536 [ 133.254041][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.260987][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.278145][ T5089] loop2: detected capacity change from 0 to 32768 [ 134.511258][ T5089] XFS (loop2): Mounting V5 Filesystem [ 134.679246][ T5087] loop3: detected capacity change from 0 to 65536 [ 134.698293][ T5089] XFS (loop2): Ending clean mount [ 134.827283][ T5087] XFS (loop3): Mounting V5 Filesystem [ 134.841841][ T4187] XFS (loop2): Unmounting Filesystem [ 134.954765][ T5087] XFS (loop3): Ending clean mount [ 135.023712][ T4198] XFS (loop3): Unmounting Filesystem [ 135.503341][ T5111] loop2: detected capacity change from 0 to 512 [ 136.544839][ T5113] loop2: detected capacity change from 0 to 32768 [ 136.567180][ T5115] loop3: detected capacity change from 0 to 32768 [ 136.708693][ T5113] XFS (loop2): Mounting V5 Filesystem [ 136.959255][ T5113] XFS (loop2): Ending clean mount [ 137.083169][ T4187] XFS (loop2): Unmounting Filesystem [ 137.104943][ T5129] loop3: detected capacity change from 0 to 512 [ 137.244306][ T5129] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 137.270665][ T5129] UDF-fs: Scanning with blocksize 512 failed [ 137.310776][ T5129] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 137.328744][ T5129] UDF-fs: Scanning with blocksize 1024 failed [ 137.367996][ T5129] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 137.380632][ T5129] UDF-fs: Scanning with blocksize 2048 failed [ 137.405080][ T5129] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 137.481576][ T5129] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 138.740762][ T4449] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 139.030638][ T4449] usb 2-1: Using ep0 maxpacket: 32 [ 139.121216][ T5133] loop2: detected capacity change from 0 to 65536 [ 139.208377][ T5133] XFS (loop2): Deprecated V4 format (crc=0) not supported by kernel. [ 139.220883][ T4449] usb 2-1: unable to get BOS descriptor or descriptor too short [ 139.520974][ T4449] usb 2-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40 [ 139.550648][ T4449] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.569261][ T4449] usb 2-1: Product: syz [ 139.579586][ T4449] usb 2-1: Manufacturer: syz [ 139.590969][ T4449] usb 2-1: SerialNumber: syz [ 140.044008][ T4449] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 140.160768][ T4449] usb 2-1: unit 37 not found! [ 140.165621][ T4449] usb 2-1: unit 0 not found! [ 140.253507][ T4449] usb 2-1: USB disconnect, device number 2 [ 140.334727][ T5131] loop3: detected capacity change from 0 to 131072 [ 140.440958][ T5131] XFS (loop3): Mounting V5 Filesystem [ 140.564534][ T4319] udevd[4319]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 140.629225][ T5131] XFS (loop3): Ending clean mount [ 140.717732][ T4198] XFS (loop3): Unmounting Filesystem [ 142.488913][ T5167] loop3: detected capacity change from 0 to 256 [ 142.506616][ T5168] netlink: 34 bytes leftover after parsing attributes in process `syz.4.248'. [ 142.838694][ T5174] loop3: detected capacity change from 0 to 2048 [ 142.954513][ T5176] loop4: detected capacity change from 0 to 2048 [ 143.050046][ T4587] loop4: p1 p2 p3 [ 143.075701][ T5178] loop3: detected capacity change from 0 to 512 [ 143.110287][ T5176] loop4: p1 p2 p3 [ 143.314333][ T4528] udevd[4528]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 143.314635][ T4587] udevd[4587]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 143.337423][ T4286] udevd[4286]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 143.390768][ T5180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.255'. [ 143.576959][ T4594] udevd[4594]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 143.594779][ T4587] udevd[4587]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 143.610413][ T4286] udevd[4286]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 143.892765][ T5194] loop3: detected capacity change from 0 to 64 [ 144.469514][ T5211] loop4: detected capacity change from 0 to 256 [ 144.489476][ T5211] ======================================================= [ 144.489476][ T5211] WARNING: The mand mount option has been deprecated and [ 144.489476][ T5211] and is ignored by this kernel. Remove the mand [ 144.489476][ T5211] option from the mount to silence this warning. [ 144.489476][ T5211] ======================================================= [ 144.623800][ T5211] FAT-fs (loop4): Directory bread(block 64) failed [ 144.650781][ T5211] FAT-fs (loop4): Directory bread(block 65) failed [ 144.697898][ T5211] FAT-fs (loop4): Directory bread(block 66) failed [ 144.728182][ T5211] FAT-fs (loop4): Directory bread(block 67) failed [ 144.756094][ T5211] FAT-fs (loop4): Directory bread(block 68) failed [ 144.799894][ T5211] FAT-fs (loop4): Directory bread(block 69) failed [ 144.814531][ T5211] FAT-fs (loop4): Directory bread(block 70) failed [ 144.855376][ T5211] FAT-fs (loop4): Directory bread(block 71) failed [ 144.862920][ T5227] netlink: 24 bytes leftover after parsing attributes in process `syz.2.276'. [ 144.886678][ T5211] FAT-fs (loop4): Directory bread(block 72) failed [ 144.894042][ T5227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.276'. [ 144.910297][ T5211] FAT-fs (loop4): Directory bread(block 73) failed [ 145.893257][ T5282] mmap: syz.1.304 (5282) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 146.444575][ T5256] loop0: detected capacity change from 0 to 32768 [ 146.519669][ T5311] netlink: 'syz.1.317': attribute type 1 has an invalid length. [ 146.604566][ T5313] delete_channel: no stack [ 146.629421][ T5256] XFS (loop0): Mounting V5 Filesystem [ 146.914317][ T5256] XFS (loop0): Ending clean mount [ 147.068084][ T4186] XFS (loop0): Unmounting Filesystem [ 147.240149][ T5276] loop2: detected capacity change from 0 to 65536 [ 147.324076][ T5348] capability: warning: `syz.3.331' uses deprecated v2 capabilities in a way that may be insecure [ 147.378528][ T5276] XFS (loop2): Deprecated V4 format (crc=0) not supported by kernel. [ 147.548075][ T4448] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 147.710280][ T5359] xt_CT: You must specify a L4 protocol and not use inversions on it [ 148.080732][ T4448] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 148.100826][ T4448] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 148.109696][ T4448] usb 5-1: Product: syz [ 148.165510][ T4448] usb 5-1: SerialNumber: syz [ 148.192668][ T4448] usb 5-1: config 0 descriptor?? [ 148.373758][ T5389] libceph: resolve 'c' (ret=-3): failed [ 148.698768][ T4448] usb 5-1: USB disconnect, device number 5 [ 149.170910][ T5429] netlink: 'syz.0.369': attribute type 6 has an invalid length. [ 149.740138][ T150] block nbd3: Attempted send on invalid socket [ 149.747907][ T150] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 149.760036][ T5451] XFS (nbd3): SB validate failed with error -5. [ 150.705199][ T5517] loop2: detected capacity change from 0 to 64 [ 150.776777][ T5521] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 150.899632][ T5525] loop4: detected capacity change from 0 to 1024 [ 150.975738][ T5525] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,jqfmt=vfsv1,dioread_lock,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 150.994830][ T4449] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 151.008614][ T4446] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 151.073629][ T5534] netlink: 24 bytes leftover after parsing attributes in process `syz.2.413'. [ 151.086889][ T5525] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.101339][ T5534] netlink: 212 bytes leftover after parsing attributes in process `syz.2.413'. [ 151.388288][ T5549] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 151.430394][ T4449] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 151.449301][ T4449] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.471267][ T4446] usb 2-1: unable to get BOS descriptor or descriptor too short [ 151.501733][ T4449] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 151.507159][ T5552] tmpfs: Bad value for 'mpol' [ 151.522880][ T4446] usb 2-1: not running at top speed; connect to a high speed hub [ 151.544255][ T4449] usb 1-1: config 1 has no interface number 1 [ 151.559301][ T4449] usb 1-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 151.573901][ T4449] usb 1-1: config 1 interface 105 has no altsetting 0 [ 151.606240][ T4446] usb 2-1: config 2 has an invalid interface number: 226 but max is 1 [ 151.614745][ T4446] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 151.635043][ T4446] usb 2-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 151.661289][ T4446] usb 2-1: config 2 has no interface number 0 [ 151.671755][ T4446] usb 2-1: config 2 interface 226 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 151.694228][ T4446] usb 2-1: config 2 interface 226 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 151.719969][ T4446] usb 2-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 151.769900][ T4449] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 151.780282][ T4449] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.788365][ T4449] usb 1-1: Product: syz [ 151.791009][ T5560] loop4: detected capacity change from 0 to 128 [ 151.798659][ T4444] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 151.813512][ T4449] usb 1-1: Manufacturer: syz [ 151.818169][ T4449] usb 1-1: SerialNumber: syz [ 151.883047][ T5560] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 151.923727][ T4446] usb 2-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 151.943757][ T4446] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.967116][ T4446] usb 2-1: Product: syz [ 151.971365][ T4446] usb 2-1: Manufacturer: syz [ 151.988869][ T4446] usb 2-1: SerialNumber: syz [ 152.109060][ T4449] aqc111: probe of 1-1:1.105 failed with error -22 [ 152.129287][ T4444] usb 4-1: Using ep0 maxpacket: 8 [ 152.184644][ T5574] netlink: 'syz.2.435': attribute type 2 has an invalid length. [ 152.196053][ T5574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.435'. [ 152.253094][ T4444] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 152.261608][ T4444] usb 4-1: config 179 has no interface number 0 [ 152.278456][ T4444] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 152.300200][ T4444] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 152.312097][ T4444] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 34304, setting to 1024 [ 152.346787][ T4444] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 152.360778][ T4444] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 152.372836][ T4444] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.396407][ T4446] usb 2-1: USB disconnect, device number 3 [ 152.416214][ T4402] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 152.453546][ T4398] usb 1-1: USB disconnect, device number 4 [ 152.468394][ T5547] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 152.483856][ T5547] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 152.683160][ T4402] usb 5-1: Using ep0 maxpacket: 8 [ 152.710646][ T5590] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 152.756767][ T4446] usb 4-1: USB disconnect, device number 2 [ 152.775341][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 152.853139][ T4402] usb 5-1: unable to get BOS descriptor or descriptor too short [ 152.960322][ T4402] usb 5-1: config 86 has an invalid interface number: 246 but max is 0 [ 152.972986][ T4402] usb 5-1: config 86 has no interface number 0 [ 152.994503][ T4402] usb 5-1: config 86 interface 246 altsetting 128 bulk endpoint 0x88 has invalid maxpacket 1023 [ 153.033967][ T4402] usb 5-1: config 86 interface 246 altsetting 128 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 153.072646][ T4402] usb 5-1: config 86 interface 246 has no altsetting 0 [ 153.183305][ T5613] netlink: 28 bytes leftover after parsing attributes in process `syz.0.454'. [ 153.257394][ T4402] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0012, bcdDevice=12.36 [ 153.278193][ T4402] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.320755][ T4402] usb 5-1: Product: syz [ 153.325004][ T4402] usb 5-1: Manufacturer: syz [ 153.339137][ T4402] usb 5-1: SerialNumber: syz [ 153.380729][ T5572] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 153.456020][ T5622] loop0: detected capacity change from 0 to 2048 [ 153.505427][ T5622] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 153.514434][ T4392] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 153.555210][ T5622] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 153.574015][ T5622] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 153.611634][ T5622] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 153.632876][ T5622] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 153.651625][ T5622] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 153.663238][ T5622] UDF-fs: Scanning with blocksize 512 failed [ 153.694945][ T5622] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 153.713736][ T4402] kvaser_usb 5-1:86.246: Cannot get usb endpoint(s) [ 153.725446][ T5633] loop1: detected capacity change from 0 to 8192 [ 153.742841][ T4402] usb 5-1: USB disconnect, device number 6 [ 153.759926][ T5622] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 153.783302][ T5622] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 153.795957][ T5635] netlink: 'syz.3.464': attribute type 21 has an invalid length. [ 153.817795][ T5633] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 153.934311][ T4392] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 153.965661][ T4392] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 153.976049][ T4392] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 153.986860][ T4392] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 153.998282][ T4392] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 154.019245][ T4392] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.037672][ T4392] usb 3-1: config 0 descriptor?? [ 154.226330][ T5644] delete_channel: no stack [ 154.332607][ T4392] hdpvr 3-1:0.0: firmware version 0xd dated 8°mPª{, [ 154.332607][ T4392] #ðãpó⊻’lôEÈ¥£]Ô +±aV@g_C.ÏÁ«r‡9 [ 154.372513][ T5649] loop4: detected capacity change from 0 to 2048 [ 154.414046][ T5649] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=3932051, location=3932051 [ 154.467346][ T5649] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 154.508232][ T5649] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 154.567861][ T4392] hdpvr 3-1:0.0: device init failed [ 154.573352][ T4392] hdpvr: probe of 3-1:0.0 failed with error -12 [ 154.605667][ T5649] UDF-fs: error (device loop4): udf_verify_fi: directory (ino 1376) has entry at pos 100 with incorrect tag 9 [ 154.640806][ T4392] usb 3-1: USB disconnect, device number 3 [ 154.733147][ T5665] loop1: detected capacity change from 0 to 2048 [ 154.805177][ T5665] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 155.366321][ T4392] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 155.392648][ T5698] loop3: detected capacity change from 0 to 2048 [ 155.503085][ T5709] netlink: 'syz.4.499': attribute type 10 has an invalid length. [ 155.561280][ T5709] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 155.608720][ T5709] syz.4.499 (5709) used greatest stack depth: 21112 bytes left [ 155.629649][ T5698] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 155.641490][ T5698] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.651946][ T4392] usb 2-1: Using ep0 maxpacket: 32 [ 155.784177][ T4392] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 155.806400][ T4392] usb 2-1: config 0 has no interface number 0 [ 155.833424][ T4392] usb 2-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 155.865391][ T4392] usb 2-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0xE3, skipping [ 155.937956][ T4392] usb 2-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0xF2, skipping [ 155.967495][ T4392] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 29440, setting to 1024 [ 155.984202][ T5728] loop3: detected capacity change from 0 to 256 [ 156.006361][ T4392] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 156.068753][ T4392] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.146852][ T5734] netlink: 'syz.0.511': attribute type 3 has an invalid length. [ 156.279970][ T4392] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 156.309374][ T5740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.514'. [ 156.320885][ T4392] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.382896][ T4392] usb 2-1: Product: syz [ 156.395324][ T4392] usb 2-1: Manufacturer: syz [ 156.401205][ T4392] usb 2-1: SerialNumber: syz [ 156.426755][ T4392] usb 2-1: config 0 descriptor?? [ 156.464733][ T5683] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 156.486334][ T5683] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 156.506606][ T4392] microtek usb (rev 0.4.3): expecting 3 got 1 endpoints! Bailing out. [ 156.712792][ T4402] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 156.769042][ T4392] usb 2-1: USB disconnect, device number 4 [ 156.782155][ T5763] Restarting kernel threads ... done. [ 157.111163][ T4402] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 157.143574][ T4402] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 157.174381][ T4402] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 157.210840][ T4402] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 157.331629][ T5795] netlink: 'syz.0.541': attribute type 2 has an invalid length. [ 157.397223][ T5797] netlink: 'syz.2.543': attribute type 1 has an invalid length. [ 157.426873][ T4402] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 157.446799][ T4402] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.500748][ T4402] usb 5-1: Product: syz [ 157.505093][ T4402] usb 5-1: Manufacturer: syz [ 157.529177][ T4402] usb 5-1: SerialNumber: syz [ 157.553023][ T4402] usb 5-1: config 0 descriptor?? [ 157.574001][ T5793] loop3: detected capacity change from 0 to 4096 [ 157.599084][ T4402] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 157.720069][ T5817] netlink: 84 bytes leftover after parsing attributes in process `syz.2.552'. [ 157.734531][ T5793] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 157.756724][ T5817] device vlan0 entered promiscuous mode [ 157.844565][ T5793] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 157.869785][ T4402] ums-isd200: probe of 5-1:0.0 failed with error -22 [ 157.930844][ T5825] loop2: detected capacity change from 0 to 256 [ 157.938108][ T5793] ntfs: volume version 3.1. [ 157.943169][ T5826] netlink: 'syz.1.555': attribute type 1 has an invalid length. [ 157.967330][ T5826] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.555'. [ 158.043742][ T4402] usb 5-1: USB disconnect, device number 7 [ 158.192616][ T5834] libceph: resolve 'cc' (ret=-3): failed [ 158.379816][ T5846] netlink: 12 bytes leftover after parsing attributes in process `syz.0.563'. [ 158.453648][ T5848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.564'. [ 158.638219][ T4448] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 158.829808][ T5870] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 159.036864][ T4446] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 159.076277][ T4448] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.087359][ T5880] loop0: detected capacity change from 0 to 512 [ 159.100949][ T4448] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 159.113943][ T4448] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 159.166006][ T5880] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 159.166006][ T5880] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 159.166006][ T5880] [ 159.248736][ T5880] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 159.283531][ T5880] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 159.306238][ T5892] netlink: 12 bytes leftover after parsing attributes in process `syz.1.586'. [ 159.325840][ T5880] EXT4-fs error (device loop0): ext4_fill_super:4866: inode #2: comm syz.0.580: inode has both inline data and extents flags [ 159.350811][ T4448] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 159.360571][ T4448] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.368766][ T4448] usb 4-1: Product: syz [ 159.373999][ T4448] usb 4-1: Manufacturer: syz [ 159.379015][ T4448] usb 4-1: SerialNumber: syz [ 159.396876][ T5880] EXT4-fs (loop0): get root inode failed [ 159.414769][ T5880] EXT4-fs (loop0): mount failed [ 159.443178][ T4448] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 159.458199][ T4448] cdc_ncm 4-1:1.0: bind() failure [ 159.465598][ T4446] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.482447][ T4446] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 159.614818][ T4446] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 159.641422][ T4446] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 159.686717][ T4446] usb 5-1: SerialNumber: syz [ 159.697769][ T4444] usb 4-1: USB disconnect, device number 3 [ 159.750458][ T4446] usb 5-1: 0:2 : does not exist [ 160.044723][ T5919] netlink: 'syz.2.597': attribute type 10 has an invalid length. [ 160.055055][ T5921] loop0: detected capacity change from 0 to 64 [ 160.088385][ T5919] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 160.136657][ T5921] hfs: keylen 40 too large [ 160.202424][ T4401] usb 5-1: USB disconnect, device number 8 [ 160.425487][ T5938] (unnamed net_device) (uninitialized): option lacp_active: invalid value (161) [ 160.814707][ T5952] loop3: detected capacity change from 0 to 2048 [ 160.923164][ T5952] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 161.129923][ T5963] loop2: detected capacity change from 0 to 4096 [ 161.230211][ T5963] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 161.255278][ T5978] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 161.367929][ T5975] xt_CT: No such helper "snmp" [ 161.370009][ T5982] loop0: detected capacity change from 0 to 128 [ 161.439564][ T5984] loop1: detected capacity change from 0 to 64 [ 161.483680][ T5982] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 161.495237][ T5982] ext4 filesystem being mounted at /118/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 161.535097][ T5984] hfs: keylen 40 too large [ 161.967514][ T6004] loop4: detected capacity change from 0 to 4096 [ 161.980128][ T6012] loop3: detected capacity change from 0 to 512 [ 162.088088][ T6004] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 162.107891][ T6012] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 162.155861][ T6004] ntfs3: loop4: Failed to load $Extend. [ 162.172259][ T6012] EXT4-fs (loop3): mounted filesystem without journal. Opts: nomblk_io_submit,bsddf,discard,,errors=continue. Quota mode: writeback. [ 162.249052][ T6012] ext4 filesystem being mounted at /136/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 162.439279][ T26] audit: type=1800 audit(1773106996.389:3): pid=6004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.637" name=2E02 dev="loop4" ino=33 res=0 errno=0 [ 162.572351][ T6012] Quota error (device loop3): find_block_dqentry: Quota for id 0 referenced but not present [ 162.619188][ T6012] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 162.666662][ T6012] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.641: Failed to acquire dquot type 1 [ 162.778699][ T6050] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.659'. [ 162.962659][ T6060] loop4: detected capacity change from 0 to 1024 [ 163.072482][ T6064] loop3: detected capacity change from 0 to 2048 [ 163.147239][ T6068] netlink: 830 bytes leftover after parsing attributes in process `syz.0.668'. [ 163.182556][ T6071] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 163.225943][ T155] hfsplus: b-tree write err: -5, ino 25 [ 163.241503][ T6073] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 163.248418][ T6073] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 163.258360][ T6064] NILFS error (device loop3): nilfs_check_page: bad entry in directory #12: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 163.275436][ T6077] netlink: 12 bytes leftover after parsing attributes in process `syz.0.672'. [ 163.288436][ T155] hfsplus: b-tree write err: -5, ino 4 [ 163.294677][ T155] hfsplus: b-tree write err: -5, ino 2 [ 163.316628][ T6079] netlink: 132 bytes leftover after parsing attributes in process `syz.1.673'. [ 163.319978][ T155] hfsplus: b-tree write err: -5, ino 26 [ 163.348967][ T6073] vhci_hcd vhci_hcd.0: Device attached [ 163.371078][ T6064] Remounting filesystem read-only [ 163.551566][ T4448] vhci_hcd: vhci_device speed not set [ 163.622197][ T4448] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 163.664792][ T6097] netlink: 68 bytes leftover after parsing attributes in process `syz.1.679'. [ 163.760789][ T6097] netlink: 68 bytes leftover after parsing attributes in process `syz.1.679'. [ 163.843677][ T6102] netlink: 'syz.3.683': attribute type 15 has an invalid length. [ 163.916096][ T6102] netlink: 24 bytes leftover after parsing attributes in process `syz.3.683'. [ 163.958423][ T6074] vhci_hcd: connection reset by peer [ 163.967586][ T3085] vhci_hcd: stop threads [ 163.972428][ T3085] vhci_hcd: release socket [ 163.986602][ T3085] vhci_hcd: disconnect device [ 164.014680][ T6105] loop1: detected capacity change from 0 to 512 [ 164.232950][ T6105] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,usrquota,minixdf,nombcache,,errors=continue. Quota mode: writeback. [ 164.281688][ T6105] ext4 filesystem being mounted at /158/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 164.321216][ T6105] EXT4-fs error (device loop1): ext4_empty_dir:3145: inode #12: block 32: comm syz.1.685: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 164.387005][ T6105] EXT4-fs warning (device loop1): ext4_empty_dir:3147: inode #12: comm syz.1.685: directory missing '.' [ 165.120261][ T4446] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 165.377649][ T6146] loop1: detected capacity change from 0 to 32768 [ 165.448492][ T6146] XFS (loop1): Mounting V5 Filesystem [ 165.500526][ T6146] XFS (loop1): Ending clean mount [ 165.548721][ T4194] XFS (loop1): Unmounting Filesystem [ 165.656326][ T4449] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 165.711259][ T4446] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 165.745183][ T4446] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.755625][ T4446] usb 5-1: Product: syz [ 165.765094][ T4446] usb 5-1: Manufacturer: syz [ 165.771236][ T4446] usb 5-1: SerialNumber: syz [ 165.785104][ T6179] loop0: detected capacity change from 0 to 1024 [ 165.828165][ T4402] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 165.860525][ T4446] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 165.929458][ T4449] usb 3-1: Using ep0 maxpacket: 8 [ 166.071497][ T4449] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 166.079688][ T4449] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.103034][ T4449] usb 3-1: config 0 has no interface number 0 [ 166.109351][ T4449] usb 3-1: config 0 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 166.190824][ T4449] usb 3-1: config 0 interface 1 has no altsetting 0 [ 166.207584][ T4402] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 166.213298][ T4449] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 166.235657][ T4402] usb 4-1: config 0 has no interface number 0 [ 166.252533][ T4449] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.252542][ T4402] usb 4-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 166.252573][ T4402] usb 4-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 166.291598][ T4402] usb 4-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64 [ 166.311245][ T4402] usb 4-1: config 0 interface 2 has no altsetting 0 [ 166.316203][ T4449] usb 3-1: config 0 descriptor?? [ 166.409576][ T4449] hso 3-1:0.1: Failed to find BULK IN ep [ 166.490871][ T4402] usb 4-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 166.511364][ T4402] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.521386][ T4402] usb 4-1: Product: syz [ 166.536863][ T4402] usb 4-1: Manufacturer: syz [ 166.542844][ T4402] usb 4-1: SerialNumber: syz [ 166.556049][ T4402] usb 4-1: config 0 descriptor?? [ 166.576357][ T4446] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 166.579253][ T6169] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 166.599254][ T6169] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 166.632063][ T4447] usb 3-1: USB disconnect, device number 4 [ 166.676054][ T6203] loop0: detected capacity change from 0 to 2048 [ 166.737042][ T6203] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 166.916564][ T6199] loop1: detected capacity change from 0 to 32768 [ 167.007645][ T4447] usb 5-1: USB disconnect, device number 9 [ 167.128375][ T4402] usb 4-1: USB disconnect, device number 4 [ 167.143992][ T6199] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 167.393775][ T4194] ocfs2: Unmounting device (7,1) on (node local) [ 167.687879][ T4446] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 167.722501][ T4446] ath9k_htc: Failed to initialize the device [ 167.762400][ T4447] usb 5-1: ath9k_htc: USB layer deinitialized [ 167.766271][ T6225] loop2: detected capacity change from 0 to 4096 [ 167.849121][ T6225] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 167.915182][ T6225] ntfs3: loop2: Failed to load $Extend. [ 167.977478][ T26] audit: type=1800 audit(1773107001.865:4): pid=6225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.737" name=2E02 dev="loop2" ino=33 res=0 errno=0 [ 168.507019][ T6259] loop3: detected capacity change from 0 to 512 [ 168.595977][ T6259] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0022] [ 168.605543][ T6259] System zones: 1-12 [ 168.700466][ T6237] loop4: detected capacity change from 0 to 32768 [ 168.710052][ T6259] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.753: Directory hole found for htree index block 0 [ 168.786070][ T6259] EXT4-fs (loop3): Remounting filesystem read-only [ 168.818100][ T4448] vhci_hcd: vhci_device speed not set [ 168.837356][ T6259] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 168.861323][ T6259] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.753: Directory hole found for htree index block 0 [ 168.911053][ T6237] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 168.983984][ T6259] EXT4-fs (loop3): Remounting filesystem read-only [ 169.019913][ T6259] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 169.063397][ T6259] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,dax=never,bsdgroups,usrjquota="nodioread_nolock,errors=remount-ro,,. Quota mode: writeback. [ 169.202385][ T4196] ocfs2: Unmounting device (7,4) on (node local) [ 169.404523][ T6266] loop0: detected capacity change from 0 to 32768 [ 169.579822][ T6266] ERROR: (device loop0): dbAlloc: the hint is outside the map [ 169.579822][ T6266] [ 169.673994][ T6266] ERROR: (device loop0): remounting filesystem as read-only [ 169.737508][ T6289] loop2: detected capacity change from 0 to 512 [ 169.820227][ T6289] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.765: dx entry: limit 1024 != root limit 124 [ 169.902072][ T6289] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.765: Corrupt directory, running e2fsck is recommended [ 169.978614][ T6300] loop3: detected capacity change from 0 to 2048 [ 169.990460][ T6289] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 170.009364][ T6289] EXT4-fs error (device loop2): ext4_iget_extra_inode:4566: inode #15: comm syz.2.765: corrupted in-inode xattr [ 170.030653][ T6289] EXT4-fs (loop2): Remounting filesystem read-only [ 170.054233][ T6300] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 170.094682][ T6289] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.765: couldn't read orphan inode 15 (err -117) [ 170.196396][ T6289] EXT4-fs (loop2): Remounting filesystem read-only [ 170.223673][ T6289] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,grpquota,init_itable,auto_da_alloc,grpjquota=.nouid32,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 170.525079][ T6281] loop4: detected capacity change from 0 to 32768 [ 170.719863][ T6281] jfs_lookup: dtSearch returned -5 [ 171.525669][ T6369] SET target dimension over the limit! [ 171.872457][ T6335] loop2: detected capacity change from 0 to 32768 [ 171.916088][ T6388] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 171.957401][ T6395] trusted_key: encrypted_key: master key parameter is missing [ 171.987264][ T6388] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 172.003465][ T6335] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 172.197544][ T4187] ocfs2: Unmounting device (7,2) on (node local) [ 172.394985][ T6392] loop4: detected capacity change from 0 to 32768 [ 172.415448][ T6407] loop3: detected capacity change from 0 to 8 [ 172.521784][ T6392] ERROR: (device loop4): dbAlloc: the hint is outside the map [ 172.521784][ T6392] [ 172.546134][ T6407] SQUASHFS error: Unable to read directory block [629:26] [ 172.563403][ T6392] ERROR: (device loop4): remounting filesystem as read-only [ 172.799047][ T6415] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 173.268300][ T6437] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19971 - 0 [ 173.319432][ T6437] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19971 - 0 [ 173.350551][ T6437] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19971 - 0 [ 173.372182][ T6437] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19971 - 0 [ 173.494854][ T4402] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 173.578230][ T6447] netlink: 144 bytes leftover after parsing attributes in process `syz.2.842'. [ 173.756361][ T4402] usb 2-1: Using ep0 maxpacket: 32 [ 173.870681][ T6421] loop3: detected capacity change from 0 to 32768 [ 173.883776][ T4402] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.917234][ T4402] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 174.018144][ T6421] jfs_lookup: dtSearch returned -5 [ 174.078453][ T4448] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 174.098861][ T4402] usb 2-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0 [ 174.121405][ T4402] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.154973][ T4402] usb 2-1: Product: syz [ 174.167946][ T4402] usb 2-1: Manufacturer: syz [ 174.183124][ T4402] usb 2-1: SerialNumber: syz [ 174.221119][ T4402] usb 2-1: config 0 descriptor?? [ 174.282187][ T4402] qmi_wwan 2-1:0.0: bogus CDC Union: master=101, slave=0 [ 174.295450][ T6445] loop0: detected capacity change from 0 to 32768 [ 174.307459][ T4402] qmi_wwan: probe of 2-1:0.0 failed with error -22 [ 174.350187][ T4448] usb 5-1: Using ep0 maxpacket: 8 [ 174.389381][ T6474] loop3: detected capacity change from 0 to 256 [ 174.432324][ T6445] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.841 (6445) [ 174.481799][ T6445] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 174.509933][ T6445] BTRFS info (device loop0): force zlib compression, level 3 [ 174.510550][ T4402] usb 2-1: USB disconnect, device number 5 [ 174.533893][ T6474] FAT-fs (loop3): Directory bread(block 64) failed [ 174.551517][ T4448] usb 5-1: unable to get BOS descriptor or descriptor too short [ 174.553188][ T6474] FAT-fs (loop3): Directory bread(block 65) failed [ 174.592116][ T6445] BTRFS info (device loop0): turning on flush-on-commit [ 174.599497][ T6445] BTRFS info (device loop0): max_inline at 4096 [ 174.602293][ T6474] FAT-fs (loop3): Directory bread(block 66) failed [ 174.645143][ T6474] FAT-fs (loop3): Directory bread(block 67) failed [ 174.652706][ T4448] usb 5-1: config 245 has an invalid interface number: 221 but max is 0 [ 174.653169][ T6445] BTRFS info (device loop0): using free space tree [ 174.661180][ T4448] usb 5-1: config 245 has no interface number 0 [ 174.661223][ T4448] usb 5-1: config 245 interface 221 altsetting 1 endpoint 0x6 has invalid wMaxPacketSize 0 [ 174.687419][ T6474] FAT-fs (loop3): Directory bread(block 68) failed [ 174.709591][ T4448] usb 5-1: config 245 interface 221 altsetting 1 bulk endpoint 0x6 has invalid maxpacket 0 [ 174.710235][ T6445] BTRFS info (device loop0): has skinny extents [ 174.728431][ T4448] usb 5-1: config 245 interface 221 has no altsetting 0 [ 174.733436][ T6474] FAT-fs (loop3): Directory bread(block 69) failed [ 174.780280][ T6474] FAT-fs (loop3): Directory bread(block 70) failed [ 174.825483][ T6474] FAT-fs (loop3): Directory bread(block 71) failed [ 174.872488][ T6474] FAT-fs (loop3): Directory bread(block 72) failed [ 174.902065][ T6474] FAT-fs (loop3): Directory bread(block 73) failed [ 174.946459][ T4448] usb 5-1: New USB device found, idVendor=05da, idProduct=80a3, bcdDevice=b2.28 [ 174.956749][ T4448] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.966321][ T4448] usb 5-1: Product: syz [ 174.970828][ T4448] usb 5-1: Manufacturer: syz [ 174.975682][ T4448] usb 5-1: SerialNumber: syz [ 175.020579][ T6445] BTRFS info (device loop0): enabling ssd optimizations [ 175.232486][ T6508] netlink: 'syz.1.862': attribute type 30 has an invalid length. [ 175.317882][ T4448] microtek usb (rev 0.4.3): can only deal with one output endpoints. Bailing out. [ 175.322636][ T4448] usb 5-1: USB disconnect, device number 10 [ 175.788584][ T6524] netlink: 'syz.2.871': attribute type 1 has an invalid length. [ 175.843270][ T6524] netlink: 'syz.2.871': attribute type 3 has an invalid length. [ 175.866409][ T6524] netlink: 224 bytes leftover after parsing attributes in process `syz.2.871'. [ 175.899310][ T6527] xt_TCPMSS: Only works on TCP SYN packets [ 176.175615][ T6539] openvswitch: netlink: Actions may not be safe on all matching packets [ 176.363441][ T6551] netlink: 32 bytes leftover after parsing attributes in process `syz.1.882'. [ 176.752930][ T6567] loop1: detected capacity change from 0 to 4096 [ 176.842504][ T6567] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 176.892281][ T6567] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 176.966388][ T6567] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 177.003314][ T6590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.029070][ T6567] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 177.057196][ T6590] bond0: (slave rose0): Enslaving as an active interface with an up link [ 177.075163][ T6567] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 177.090176][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 177.132453][ T6567] ntfs: volume version 3.1. [ 177.151263][ T6567] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 177.188894][ T6567] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 177.220198][ T4402] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 177.249737][ T6567] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 177.284431][ T6567] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 177.338081][ T6567] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 177.498346][ T4402] usb 3-1: Using ep0 maxpacket: 16 [ 177.613503][ T6616] syz.1.903 (6616): /proc/6615/oom_adj is deprecated, please use /proc/6615/oom_score_adj instead. [ 177.632799][ T4402] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 177.661529][ T4402] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 177.702354][ T4402] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 177.732920][ T4402] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 177.768996][ T4402] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 177.808330][ T4402] usb 3-1: config 1 interface 0 has no altsetting 0 [ 177.838333][ T4402] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 177.877329][ T6629] netlink: 'syz.4.908': attribute type 12 has an invalid length. [ 177.885631][ T4402] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.937887][ T4402] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 178.088087][ T6638] netlink: zone id is out of range [ 178.119192][ T6638] netlink: zone id is out of range [ 178.127962][ T6638] netlink: zone id is out of range [ 178.137703][ T6638] netlink: zone id is out of range [ 178.143939][ T6638] netlink: zone id is out of range [ 178.149187][ T6638] netlink: zone id is out of range [ 178.157244][ T6638] netlink: del zone limit has 4 unknown bytes [ 178.213169][ T4402] scsi host1: usb-storage 3-1:1.0 [ 178.387890][ T4402] usb 3-1: USB disconnect, device number 5 [ 178.486530][ T6665] netlink: 16 bytes leftover after parsing attributes in process `syz.3.922'. [ 178.655842][ T6675] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 179.046900][ T6697] loop0: detected capacity change from 0 to 8 [ 179.145954][ T6697] SQUASHFS error: zstd decompression error: 2 [ 179.195432][ T6697] SQUASHFS error: zstd decompression failed, data probably corrupt [ 179.267232][ T6708] netlink: 16 bytes leftover after parsing attributes in process `syz.4.938'. [ 179.276879][ T6697] SQUASHFS error: Failed to read block 0x62b: -5 [ 179.290038][ T6697] SQUASHFS error: Unable to read metadata cache entry [629] [ 179.347393][ T6697] SQUASHFS error: Unable to read directory block [629:ff26] [ 179.746950][ T6728] AppArmor: change_hat: Invalid input '0x000000000000' [ 180.011248][ T4593] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 180.146910][ T6750] loop3: detected capacity change from 0 to 8 [ 180.245551][ T6757] loop2: detected capacity change from 0 to 512 [ 180.253042][ T6750] SQUASHFS error: Failed to read block 0x6e6: -5 [ 180.267307][ T6750] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 180.290394][ T6750] SQUASHFS error: Unable to read directory block [631:26] [ 180.309245][ T6750] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 180.344392][ T6750] SQUASHFS error: Unable to read directory block [631:26] [ 180.365667][ T6757] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 180.404738][ T6756] loop4: detected capacity change from 0 to 4096 [ 180.452424][ T4593] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 180.472269][ T4593] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 180.529544][ T6757] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.958: bg 0: block 104: invalid block bitmap [ 180.583022][ T6757] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 180.595587][ T4593] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 180.612918][ T4593] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 180.625900][ T6757] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.958: invalid indirect mapped block 1 (level 1) [ 180.645145][ T4593] usb 2-1: SerialNumber: syz [ 180.681083][ T6756] ntfs: volume version 3.1. [ 180.694525][ T6757] EXT4-fs (loop2): 1 truncate cleaned up [ 180.702069][ T6757] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 180.717992][ T6769] AppArmor: change_hat: Invalid input '0x000000000000' [ 180.911617][ T6777] loop3: detected capacity change from 0 to 764 [ 180.977580][ T4593] usb 2-1: skipping empty audio interface (v1) [ 181.052033][ T4593] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 181.095957][ T4593] usb 2-1: USB disconnect, device number 6 [ 181.213357][ T6785] loop0: detected capacity change from 0 to 256 [ 181.345355][ T6785] FAT-fs (loop0): Directory bread(block 64) failed [ 181.366174][ T6785] FAT-fs (loop0): Directory bread(block 65) failed [ 181.378530][ T4594] udevd[4594]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 181.396904][ T6790] loop3: detected capacity change from 0 to 2048 [ 181.407431][ T6785] FAT-fs (loop0): Directory bread(block 66) failed [ 181.420158][ T6785] FAT-fs (loop0): Directory bread(block 67) failed [ 181.443707][ T6790] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 181.453309][ T6785] FAT-fs (loop0): Directory bread(block 68) failed [ 181.485499][ T6785] FAT-fs (loop0): Directory bread(block 69) failed [ 181.523706][ T6785] FAT-fs (loop0): Directory bread(block 70) failed [ 181.534847][ T6785] FAT-fs (loop0): Directory bread(block 71) failed [ 181.546067][ T6785] FAT-fs (loop0): Directory bread(block 72) failed [ 181.583646][ T6785] FAT-fs (loop0): Directory bread(block 73) failed [ 181.712771][ T6785] attempt to access beyond end of device [ 181.712771][ T6785] loop0: rw=2051, want=1256, limit=256 [ 181.823708][ T6809] netlink: 12 bytes leftover after parsing attributes in process `syz.3.976'. [ 181.894209][ T6815] netlink: 76 bytes leftover after parsing attributes in process `syz.4.982'. [ 182.206316][ T6833] netlink: 28 bytes leftover after parsing attributes in process `syz.0.990'. [ 182.468792][ T6850] loop0: detected capacity change from 0 to 2048 [ 182.510625][ T6856] loop2: detected capacity change from 0 to 128 [ 182.520097][ T6854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1001'. [ 182.579687][ T6850] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 182.657783][ T6856] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv0,sysvgroups,,errors=continue. Quota mode: none. [ 182.701809][ T6856] ext4 filesystem being mounted at /216/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 182.812682][ T6856] EXT4-fs error (device loop2): __ext4_new_inode:1076: comm syz.2.1000: reserved inode found cleared - inode=2 [ 182.944631][ T6877] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1010'. [ 183.166069][ T6889] loop4: detected capacity change from 0 to 256 [ 183.273934][ T6889] FAT-fs (loop4): Directory bread(block 64) failed [ 183.289618][ T6893] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 183.313675][ T6889] FAT-fs (loop4): Directory bread(block 65) failed [ 183.342526][ T6889] FAT-fs (loop4): Directory bread(block 66) failed [ 183.370474][ T6889] FAT-fs (loop4): Directory bread(block 67) failed [ 183.430436][ T6889] FAT-fs (loop4): Directory bread(block 68) failed [ 183.458945][ T6889] FAT-fs (loop4): Directory bread(block 69) failed [ 183.480906][ T6889] FAT-fs (loop4): Directory bread(block 70) failed [ 183.489334][ T6889] FAT-fs (loop4): Directory bread(block 71) failed [ 183.512871][ T6889] FAT-fs (loop4): Directory bread(block 72) failed [ 183.529970][ T6889] FAT-fs (loop4): Directory bread(block 73) failed [ 183.572810][ T6889] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 183.911452][ T6922] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 184.032723][ T6922] ext4 filesystem being mounted at /210/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 184.069760][ T6931] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1036'. [ 184.125803][ T6922] EXT4-fs (loop3): Can't set test_dummy_encryption on remount [ 184.144432][ T6931] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1036'. [ 184.794696][ T6925] set_capacity_and_notify: 2 callbacks suppressed [ 184.794715][ T6925] loop4: detected capacity change from 0 to 32768 [ 184.889130][ T6925] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.1030 (6925) [ 184.996750][ T6925] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 185.082393][ T6966] netlink: 'syz.2.1053': attribute type 1 has an invalid length. [ 185.093845][ T6966] netlink: 'syz.2.1053': attribute type 2 has an invalid length. [ 185.103002][ T6966] netlink: 'syz.2.1053': attribute type 2 has an invalid length. [ 185.111002][ T6925] BTRFS info (device loop4): force zlib compression, level 3 [ 185.118775][ T6925] BTRFS info (device loop4): turning on flush-on-commit [ 185.126458][ T6966] netlink: 'syz.2.1053': attribute type 2 has an invalid length. [ 185.136153][ T6966] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1053'. [ 185.146181][ T6925] BTRFS info (device loop4): max_inline at 4096 [ 185.187900][ T6925] BTRFS info (device loop4): using free space tree [ 185.219988][ T6925] BTRFS info (device loop4): has skinny extents [ 185.602929][ T6925] BTRFS info (device loop4): enabling ssd optimizations [ 185.689094][ T7010] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 186.170777][ T4594] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 10 /dev/loop4 scanned by udevd (4594) [ 186.212717][ T7042] loop0: detected capacity change from 0 to 256 [ 186.233089][ T4270] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 186.483683][ T4270] usb 2-1: Using ep0 maxpacket: 16 [ 186.602722][ T7060] usb usb8: usbfs: process 7060 (syz.0.1088) did not claim interface 0 before use [ 186.764834][ T4270] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 186.774322][ T4270] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.813815][ T4270] usb 2-1: Product: syz [ 186.832110][ T4270] usb 2-1: Manufacturer: syz [ 186.844895][ T4270] usb 2-1: SerialNumber: syz [ 186.865528][ T4270] usb 2-1: config 0 descriptor?? [ 186.922491][ T4270] ums-onetouch 2-1:0.0: USB Mass Storage device detected [ 186.939475][ T7062] loop3: detected capacity change from 0 to 4096 [ 186.951776][ T7071] loop4: detected capacity change from 0 to 1024 [ 186.991102][ T7075] loop0: detected capacity change from 0 to 64 [ 187.032955][ T7062] __ntfs_error: 15 callbacks suppressed [ 187.032974][ T7062] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 187.062759][ T7062] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 187.088379][ T7062] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 187.113421][ T7062] ntfs: volume version 3.1. [ 187.158543][ T4271] hfsplus: b-tree write err: -5, ino 25 [ 187.164389][ T4271] hfsplus: b-tree write err: -5, ino 4 [ 187.171508][ T4593] usb 2-1: USB disconnect, device number 7 [ 187.180510][ T7062] ntfs: (device loop3): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 187.193861][ T4271] hfsplus: b-tree write err: -5, ino 2 [ 187.203352][ T7062] ntfs: (device loop3): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 187.232441][ T7062] ntfs: (device loop3): load_and_init_quota(): Failed to load $Quota/$Q index. [ 187.245440][ T7062] ntfs: (device loop3): load_system_files(): Failed to load $Quota. Mounting read-only. Run chkdsk. [ 187.274489][ T7062] ntfs: (device loop3): ntfs_nlstoucs(): Name using character set utf8 contains characters that cannot be converted to Unicode. [ 187.296453][ T7062] ntfs: (device loop3): ntfs_lookup(): Failed to convert name to Unicode. [ 187.396336][ T4270] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 187.552443][ T7084] loop4: detected capacity change from 0 to 16 [ 187.595691][ T7084] erofs: (device loop4): mounted with root inode @ nid 36. [ 187.637366][ T4270] usb 3-1: Using ep0 maxpacket: 32 [ 187.650558][ T7084] erofs: (device loop4): init_inode_xattrs: xattr_isize 12 of nid 46 is not supported yet [ 187.754987][ T7091] netlink: 'syz.3.1103': attribute type 2 has an invalid length. [ 187.797709][ T4270] usb 3-1: unable to get BOS descriptor or descriptor too short [ 187.877761][ T4270] usb 3-1: config 164 has an invalid interface number: 28 but max is 0 [ 187.886088][ T4270] usb 3-1: config 164 has an invalid descriptor of length 0, skipping remainder of the config [ 187.924475][ T4270] usb 3-1: config 164 has no interface number 0 [ 187.945863][ T4270] usb 3-1: config 164 interface 28 has no altsetting 0 [ 187.993859][ T7102] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1108'. [ 188.138478][ T4270] usb 3-1: New USB device found, idVendor=a772, idProduct=72b8, bcdDevice=30.cc [ 188.163445][ T4270] usb 3-1: New USB device strings: Mfr=126, Product=2, SerialNumber=3 [ 188.197662][ T4270] usb 3-1: Product: syz [ 188.219076][ T4270] usb 3-1: Manufacturer: syz [ 188.223922][ T4270] usb 3-1: SerialNumber: syz [ 188.580537][ T4270] usb 3-1: USB disconnect, device number 6 [ 188.703263][ T7138] trusted_key: encrypted_key: insufficient parameters specified [ 188.908838][ T7146] netlink: 'syz.4.1131': attribute type 1 has an invalid length. [ 189.067966][ T7150] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 189.234448][ T7157] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1137'. [ 189.271579][ T7157] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1137'. [ 189.348160][ T7157] netlink: 19 bytes leftover after parsing attributes in process `syz.3.1137'. [ 189.368723][ T7127] loop1: detected capacity change from 0 to 32768 [ 189.454033][ T7165] loop4: detected capacity change from 0 to 8 [ 189.534086][ T7165] SQUASHFS error: lzo decompression failed, data probably corrupt [ 189.573926][ T7142] loop0: detected capacity change from 0 to 32768 [ 189.600267][ T7165] SQUASHFS error: Failed to read block 0x1dd: -5 [ 189.631565][ T7127] XFS (loop1): Mounting V5 Filesystem [ 189.646438][ T7165] SQUASHFS error: Unable to read metadata cache entry [1db] [ 189.654680][ T7165] SQUASHFS error: Unable to read inode 0xa7 [ 189.725512][ T7142] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1129 (7142) [ 189.770332][ T7127] XFS (loop1): Ending clean mount [ 189.922758][ T7142] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 189.945792][ T7142] BTRFS info (device loop0): using free space tree [ 189.966472][ T4194] XFS (loop1): Unmounting Filesystem [ 190.003347][ T7142] BTRFS info (device loop0): has skinny extents [ 190.229088][ T4445] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 190.288360][ T7220] loop2: detected capacity change from 0 to 512 [ 190.346453][ T7142] BTRFS info (device loop0): enabling ssd optimizations [ 190.368559][ T7201] loop4: detected capacity change from 0 to 4096 [ 190.451064][ T7201] ntfs: (device loop4): check_mft_mirror(): Incomplete multi sector transfer detected in mft record 2. [ 190.508592][ T7220] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 190.544218][ T4445] usb 4-1: Using ep0 maxpacket: 8 [ 190.611693][ T7201] ntfs: volume version 3.1. [ 190.675803][ T7220] ext4 filesystem being mounted at /253/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.744847][ T4445] usb 4-1: unable to get BOS descriptor or descriptor too short [ 190.791587][ T4594] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by udevd (4594) [ 190.885094][ T4445] usb 4-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.908626][ T4445] usb 4-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 190.957350][ T4445] usb 4-1: config 1 interface 0 has no altsetting 0 [ 191.155931][ T4445] usb 4-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice= 0.40 [ 191.165048][ T4445] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.232154][ T4445] usb 4-1: Product: syz [ 191.258087][ T4445] usb 4-1: Manufacturer: syz [ 191.273046][ T4445] usb 4-1: SerialNumber: syz [ 191.599527][ T4445] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input7 [ 191.666944][ T3548] bcm5974 4-1:1.0: could not read from device [ 191.685492][ T7262] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 191.741122][ T4445] usb 4-1: USB disconnect, device number 5 [ 191.818357][ T7262] syz.0.1172 (7262) used greatest stack depth: 20944 bytes left [ 192.112983][ T7288] loop2: detected capacity change from 0 to 512 [ 192.150444][ T7291] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1187'. [ 192.166900][ T7291] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1187'. [ 192.193626][ T7288] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 192.250000][ T7288] EXT4-fs (loop2): mount failed [ 192.435256][ T7299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1190'. [ 192.679665][ T7311] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 192.991836][ T7330] loop2: detected capacity change from 0 to 2048 [ 193.049348][ T7330] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 193.166479][ T7330] UDF-fs: unknown compression code (0) [ 193.273591][ T7347] loop0: detected capacity change from 0 to 256 [ 193.285060][ T7346] netlink: 'syz.1.1213': attribute type 21 has an invalid length. [ 193.325909][ T7351] loop3: detected capacity change from 0 to 128 [ 193.330349][ T7346] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1213'. [ 193.355990][ T7346] netlink: 'syz.1.1213': attribute type 4 has an invalid length. [ 193.388008][ T7346] netlink: 'syz.1.1213': attribute type 3 has an invalid length. [ 193.403400][ T7346] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1213'. [ 193.422947][ T7347] FAT-fs (loop0): Directory bread(block 64) failed [ 193.437533][ T7347] FAT-fs (loop0): Directory bread(block 65) failed [ 193.490359][ T7347] FAT-fs (loop0): Directory bread(block 66) failed [ 193.520437][ T7347] FAT-fs (loop0): Directory bread(block 67) failed [ 193.527126][ T7347] FAT-fs (loop0): Directory bread(block 68) failed [ 193.575966][ T7347] FAT-fs (loop0): Directory bread(block 69) failed [ 193.595108][ T7347] FAT-fs (loop0): Directory bread(block 70) failed [ 193.620446][ T7347] FAT-fs (loop0): Directory bread(block 71) failed [ 193.627136][ T7347] FAT-fs (loop0): Directory bread(block 72) failed [ 193.694629][ T7347] FAT-fs (loop0): Directory bread(block 73) failed [ 193.889282][ T7378] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1225'. [ 194.866928][ T7366] loop3: detected capacity change from 0 to 32768 [ 194.937101][ T7366] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 194.961963][ T7366] BTRFS info (device loop3): using free space tree [ 194.971084][ T7366] BTRFS info (device loop3): has skinny extents [ 194.979848][ T7425] netlink: 'syz.2.1245': attribute type 1 has an invalid length. [ 195.008220][ T7425] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1245'. [ 195.041177][ T7425] nbd: couldn't find a device at index 1024 [ 195.149256][ T7438] loop2: detected capacity change from 0 to 512 [ 195.180512][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.187063][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.203128][ T4398] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 195.291759][ T7366] BTRFS info (device loop3): enabling ssd optimizations [ 195.334048][ T7438] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue. Quota mode: writeback. [ 195.526105][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 195.526122][ T26] audit: type=1800 audit(1773107029.292:5): pid=7438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1248" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 195.556242][ C1] vkms_vblank_simulate: vblank timer overrun [ 195.564468][ T4398] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 195.744388][ T4398] usb 1-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 195.753511][ T4398] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.762412][ T7469] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1258'. [ 195.784042][ T4398] usb 1-1: Product: syz [ 195.788275][ T4398] usb 1-1: Manufacturer: syz [ 195.810780][ T4398] usb 1-1: SerialNumber: syz [ 195.986739][ T7474] dlm: plock device version mismatch: kernel (1.2.0), user (1952804395.1769107551.1915428975) [ 196.073713][ T7476] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1253'. [ 196.375575][ T4398] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 196.395353][ T4398] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 196.409853][ T7482] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 196.464707][ T4398] usb 1-1: USB disconnect, device number 5 [ 196.770077][ T4594] udevd[4594]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 197.062577][ T7520] netlink: 'syz.3.1281': attribute type 19 has an invalid length. [ 197.120474][ T7520] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1281'. [ 197.343968][ T7532] device erspan1 entered promiscuous mode [ 197.719268][ T7540] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1291'. [ 197.868216][ T7546] vivid-000: disconnect [ 197.870768][ T7545] vivid-000: reconnect [ 197.896015][ T7518] loop1: detected capacity change from 0 to 32768 [ 197.966005][ T7518] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 197.974883][ T7518] JBD2: Ignoring recovery information on journal [ 198.133277][ T7518] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 198.174914][ T7518] ocfs2: Unmounting device (7,1) on (node local) [ 198.297817][ T7531] loop4: detected capacity change from 0 to 32768 [ 198.456279][ T7531] XFS (loop4): Mounting V5 Filesystem [ 198.590048][ T7531] XFS (loop4): Ending clean mount [ 198.661608][ T7578] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1305'. [ 198.707976][ T7531] XFS (loop4): Quotacheck needed: Please wait. [ 198.748477][ T4398] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 198.830717][ T7531] XFS (loop4): Quotacheck: Done. [ 199.041743][ T4196] XFS (loop4): Unmounting Filesystem [ 199.120526][ T4398] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 199.315882][ T4398] usb 3-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 199.325520][ T4398] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.359413][ T4398] usb 3-1: Product: syz [ 199.379265][ T4398] usb 3-1: Manufacturer: syz [ 199.394015][ T4398] usb 3-1: SerialNumber: syz [ 199.506295][ T7614] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1324'. [ 199.538698][ T7616] loop3: detected capacity change from 0 to 1024 [ 199.637574][ T7624] loop0: detected capacity change from 0 to 2048 [ 199.701249][ T7624] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=26504, location=26504 [ 199.725576][ T7624] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 199.785881][ T7629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1329'. [ 199.934491][ T7634] loop4: detected capacity change from 0 to 1024 [ 199.941734][ T4398] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 199.963862][ T4398] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 199.980377][ T7638] netlink: 'syz.0.1331': attribute type 10 has an invalid length. [ 200.032600][ T4398] usb 3-1: USB disconnect, device number 7 [ 200.071572][ T7638] device veth1_macvtap left promiscuous mode [ 200.103293][ T9] hfsplus: b-tree write err: -5, ino 25 [ 200.109245][ T9] hfsplus: b-tree write err: -5, ino 4 [ 200.129074][ T9] hfsplus: b-tree write err: -5, ino 2 [ 200.169830][ T7638] device veth1_macvtap entered promiscuous mode [ 200.185592][ T7638] team0: Port device macsec0 added [ 200.194064][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 200.245565][ T7638] syz.0.1331 (7638) used greatest stack depth: 20816 bytes left [ 200.356875][ T7653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1341'. [ 200.366480][ T4593] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 200.440924][ T7657] loop4: detected capacity change from 0 to 512 [ 200.562906][ T7657] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 200.590465][ T4528] udevd[4528]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 200.666019][ T7657] EXT4-fs (loop4): external journal has bad superblock [ 200.744106][ T7666] x_tables: unsorted underflow at hook 3 [ 201.021727][ T4593] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 201.038345][ T4593] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.081229][ T4593] usb 2-1: Product: syz [ 201.101254][ T4593] usb 2-1: Manufacturer: syz [ 201.106105][ T4593] usb 2-1: SerialNumber: syz [ 201.147306][ T4593] usb 2-1: config 0 descriptor?? [ 201.203944][ T4593] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 201.290339][ T7692] loop0: detected capacity change from 0 to 128 [ 201.404792][ T7692] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 201.456360][ T7692] FAT-fs (loop0): Filesystem has been set read-only [ 201.535360][ T7704] xt_TPROXY: Can be used only with -p tcp or -p udp [ 201.657716][ T4395] usb 2-1: USB disconnect, device number 8 [ 201.711579][ T7708] loop2: detected capacity change from 0 to 4096 [ 201.757028][ T7708] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 201.852196][ T4398] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 202.222724][ T4398] usb 4-1: config 0 has an invalid interface number: 120 but max is 0 [ 202.249251][ T4398] usb 4-1: config 0 has no interface number 0 [ 202.270044][ T4398] usb 4-1: config 0 interface 120 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 202.286369][ T7738] printk: syz.1.1378 (7738): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 202.336348][ T4398] usb 4-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 202.367612][ T7744] netlink: 'syz.0.1381': attribute type 1 has an invalid length. [ 202.382679][ T4398] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.383129][ T4446] Bluetooth: hci3: command 0x0406 tx timeout [ 202.404928][ T7744] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1381'. [ 202.426521][ T4398] usb 4-1: config 0 descriptor?? [ 202.436868][ T13] Bluetooth: hci1: command 0x0406 tx timeout [ 202.446316][ T4446] Bluetooth: hci4: command 0x0406 tx timeout [ 202.487669][ T4398] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.120/input/input9 [ 202.494585][ T4446] Bluetooth: hci2: command 0x0406 tx timeout [ 202.773624][ T4446] usb 4-1: USB disconnect, device number 6 [ 202.861831][ T7767] netlink: 'syz.1.1392': attribute type 3 has an invalid length. [ 203.870038][ T7819] loop2: detected capacity change from 0 to 4096 [ 203.983660][ T7819] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 204.008801][ T7819] ntfs3: loop2: Failed to load $Extend. [ 204.044765][ T7842] ipt_ECN: cannot use operation on non-tcp rule [ 204.284659][ T7857] loop1: detected capacity change from 0 to 256 [ 204.323499][ T7863] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.401688][ T7857] FAT-fs (loop1): Directory bread(block 64) failed [ 204.424463][ T7857] FAT-fs (loop1): Directory bread(block 65) failed [ 204.453051][ T7857] FAT-fs (loop1): Directory bread(block 66) failed [ 204.514821][ T7857] FAT-fs (loop1): Directory bread(block 67) failed [ 204.521735][ T7857] FAT-fs (loop1): Directory bread(block 68) failed [ 204.558480][ T7857] FAT-fs (loop1): Directory bread(block 69) failed [ 204.589113][ T7857] FAT-fs (loop1): Directory bread(block 70) failed [ 204.619273][ T7857] FAT-fs (loop1): Directory bread(block 71) failed [ 204.675105][ T7857] FAT-fs (loop1): Directory bread(block 72) failed [ 204.681808][ T7857] FAT-fs (loop1): Directory bread(block 73) failed [ 204.832717][ T7887] xt_CT: You must specify a L4 protocol and not use inversions on it [ 205.038014][ T7897] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1445'. [ 205.094249][ T7899] device ipip0 entered promiscuous mode [ 205.361047][ T7920] loop0: detected capacity change from 0 to 64 [ 205.430600][ T7913] loop3: detected capacity change from 0 to 8192 [ 205.516320][ T7913] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 205.581555][ T7913] REISERFS (device loop3): using ordered data mode [ 205.615782][ T7913] reiserfs: using flush barriers [ 205.727983][ T7913] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 205.886732][ T7913] REISERFS (device loop3): checking transaction log (loop3) [ 205.895435][ T7940] netlink: 'syz.0.1464': attribute type 1 has an invalid length. [ 205.908962][ T7913] REISERFS (device loop3): Using rupasov hash to sort names [ 205.939522][ T7913] REISERFS (device loop3): using 3.5.x disk format [ 205.995016][ T7913] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 206.064195][ T7913] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 206.109546][ T7913] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 206.164617][ T7913] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 206.260189][ T7913] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 206.361912][ T7913] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 206.387652][ T7957] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1473'. [ 206.416805][ T7913] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 206.997400][ T7989] netlink: 'syz.0.1490': attribute type 16 has an invalid length. [ 207.040863][ T7989] netlink: 'syz.0.1490': attribute type 17 has an invalid length. [ 207.050863][ T7995] loop1: detected capacity change from 0 to 64 [ 207.081941][ T7989] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 207.094700][ T7989] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 207.112065][ T7989] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 207.165336][ T7989] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 207.206670][ T7989] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 207.236871][ T7989] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 207.314840][ T7989] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 207.932553][ T154] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.103108][ T154] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.955271][ T8072] netlink: 'syz.0.1532': attribute type 75 has an invalid length. [ 209.162649][ T8047] chnl_net:caif_netlink_parms(): no params data found [ 209.203850][ T8082] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1536'. [ 209.237766][ T8082] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 209.298047][ T154] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.408799][ T8088] loop2: detected capacity change from 0 to 8 [ 209.464895][ T154] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.484050][ T8088] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 209.516784][ T8091] netlink: 'syz.4.1540': attribute type 21 has an invalid length. [ 209.543077][ T4594] udevd[4594]: incorrect cramfs checksum on /dev/loop2 [ 209.550969][ T8091] IPv6: NLM_F_CREATE should be specified when creating new route [ 209.608115][ T8088] cramfs: Error -5 while decompressing! [ 209.653558][ T8088] cramfs: ffffffff96403088(18)->ffff888072fb2000(4096) [ 209.680958][ T8105] loop0: detected capacity change from 0 to 8 [ 209.691225][ T8088] cramfs: Error -5 while decompressing! [ 209.698176][ T8088] cramfs: ffffffff96403088(18)->ffff888072fb2000(4096) [ 209.707631][ T26] audit: type=1800 audit(1773107043.457:6): pid=8088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1539" name="file1" dev="loop2" ino=324 res=0 errno=0 [ 209.712948][ T8104] netlink: 'syz.4.1544': attribute type 1 has an invalid length. [ 209.737561][ T8104] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1544'. [ 209.768572][ T8047] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.807011][ T8047] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.841795][ T8047] device bridge_slave_0 entered promiscuous mode [ 209.960515][ T8111] x_tables: unsorted entry at hook 1 [ 209.990600][ T8047] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.997789][ T8047] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.048640][ T8047] device bridge_slave_1 entered promiscuous mode [ 210.169527][ T8120] loop3: detected capacity change from 0 to 8 [ 210.221964][ T8047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.239474][ T8120] process 'syz.3.1553' launched './file2' with NULL argv: empty string added [ 210.259513][ T4392] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 210.270629][ T8047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.290684][ T8120] cramfs: Error -3 while decompressing! [ 210.324165][ T4594] udevd[4594]: incorrect cramfs checksum on /dev/loop3 [ 210.331537][ T8120] cramfs: ffffffff964070a8(26)->ffff88805d30f000(4096) [ 210.355908][ T8120] cramfs: Error -3 while decompressing! [ 210.379425][ T8125] loop0: detected capacity change from 0 to 1024 [ 210.424428][ T8120] cramfs: ffffffff964070c2(26)->ffff888072f9c000(4096) [ 210.443524][ T4587] udevd[4587]: incorrect cramfs checksum on /dev/loop3 [ 210.469765][ T8120] cramfs: Error -3 while decompressing! [ 210.475390][ T8120] cramfs: ffffffff964070dc(16)->ffff888072f94000(4096) [ 210.483485][ T4229] Bluetooth: hci3: command 0x0409 tx timeout [ 210.510754][ T4594] udevd[4594]: incorrect cramfs checksum on /dev/loop3 [ 210.529706][ T8047] team0: Port device team_slave_0 added [ 210.569997][ T8120] cramfs: Error -3 while decompressing! [ 210.575677][ T8120] cramfs: ffffffff964070a8(26)->ffff88805d30f000(4096) [ 210.594794][ T8047] team0: Port device team_slave_1 added [ 210.632559][ T4594] udevd[4594]: incorrect cramfs checksum on /dev/loop3 [ 210.640442][ T4392] usb 3-1: config 0 has an invalid descriptor of length 91, skipping remainder of the config [ 210.699597][ T4392] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 210.711077][ T8126] loop4: detected capacity change from 0 to 8192 [ 210.752353][ T4392] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 210.765030][ T4392] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 210.778226][ T4392] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 210.805611][ T4392] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 210.819700][ T8126] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 210.826413][ T4392] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.854448][ T4392] usb 3-1: config 0 descriptor?? [ 210.864619][ T8126] REISERFS (device loop4): using ordered data mode [ 210.872418][ T8126] reiserfs: using flush barriers [ 210.885517][ T8126] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 210.906617][ T8126] REISERFS (device loop4): checking transaction log (loop4) [ 210.917296][ T8126] REISERFS (device loop4): Using rupasov hash to sort names [ 210.950655][ T8126] REISERFS (device loop4): using 3.5.x disk format [ 210.957825][ T8126] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 210.989651][ T4392] rc_core: IR keymap rc-hauppauge not found [ 211.000205][ T4392] Registered IR keymap rc-empty [ 211.050664][ T8126] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 211.073546][ T8126] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 211.087666][ T4392] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 211.098125][ T8126] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 211.119413][ T8126] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 211.139824][ T4392] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 211.163641][ T8126] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 211.178092][ T4392] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 211.193912][ T8126] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 211.218091][ T4392] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input10 [ 211.289940][ T4392] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 211.349935][ T4392] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 211.399963][ T4392] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 211.449919][ T4392] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 211.485887][ T8047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.530025][ T4392] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 211.549938][ T8047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.579993][ T4392] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 211.646243][ T4392] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 211.647754][ T8047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.682980][ T8153] usb usb9: usbfs: interface 0 claimed by hub while 'syz.4.1559' sets config #0 [ 211.710128][ T4392] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 211.719336][ T8047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.749973][ T8047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.800943][ T4392] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 211.850355][ T4392] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 211.870397][ T8047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.882528][ T4392] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 211.930131][ T4392] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 211.987020][ T4392] usb 3-1: USB disconnect, device number 8 [ 212.020019][ T8164] loop4: detected capacity change from 0 to 1024 [ 212.041981][ T8167] loop2: detected capacity change from 0 to 64 [ 212.078556][ T8170] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 212.127355][ T8170] CIFS mount error: No usable UNC path provided in device string! [ 212.127355][ T8170] [ 212.212959][ T8167] Trying to free block not in datazone [ 212.228034][ T8170] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 212.584284][ T4446] Bluetooth: hci3: command 0x041b tx timeout [ 212.634861][ T8047] device hsr_slave_0 entered promiscuous mode [ 212.661527][ T8047] device hsr_slave_1 entered promiscuous mode [ 212.706969][ T8047] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.747415][ T8047] Cannot create hsr debugfs directory [ 213.525662][ T8222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1592'. [ 213.802957][ T8047] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 213.859294][ T8047] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 213.963707][ T8047] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 214.010057][ T8190] loop3: detected capacity change from 0 to 40427 [ 214.034174][ T8047] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 214.067800][ T8190] F2FS-fs (loop3): invalid crc value [ 214.113383][ T8190] F2FS-fs (loop3): Found nat_bits in checkpoint [ 214.294882][ T8190] F2FS-fs (loop3): Start checkpoint disabled! [ 214.326211][ T154] device hsr_slave_0 left promiscuous mode [ 214.370086][ T8190] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 214.384895][ T154] device hsr_slave_1 left promiscuous mode [ 214.411875][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.419938][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.459281][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.495800][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.542815][ T8190] F2FS-fs (loop3): disabling checkpoint not compatible with read-only [ 214.572309][ T154] device bridge_slave_1 left promiscuous mode [ 214.580440][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.607090][ T8269] Unsupported ieee802154 address type: 0 [ 214.631699][ T4448] Bluetooth: hci3: command 0x040f tx timeout [ 214.674825][ T154] device bridge_slave_0 left promiscuous mode [ 214.682972][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.001262][ T154] device veth1_macvtap left promiscuous mode [ 215.061979][ T154] device veth0_macvtap left promiscuous mode [ 215.103074][ T154] device veth1_vlan left promiscuous mode [ 215.139685][ T154] device veth0_vlan left promiscuous mode [ 215.350939][ T8291] loop4: detected capacity change from 0 to 2048 [ 215.435219][ T8291] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 215.708836][ T8264] loop0: detected capacity change from 0 to 40427 [ 215.753990][ T8264] F2FS-fs (loop0): invalid crc value [ 215.779421][ T8264] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 215.885667][ T8264] attempt to access beyond end of device [ 215.885667][ T8264] loop0: rw=0, want=45072, limit=40427 [ 215.899064][ T8264] F2FS-fs (loop0): Cannot turn on quotas: -5 on 2 [ 215.911311][ T8264] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 215.964502][ T8264] F2FS-fs (loop0): switch discard_unit option is not allowed [ 216.416459][ T8311] loop3: detected capacity change from 0 to 512 [ 216.568523][ T8311] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 216.612659][ T8311] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 216.630934][ T8311] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.1623: Failed to acquire dquot type 1 [ 216.677746][ T8311] EXT4-fs (loop3): 1 truncate cleaned up [ 216.689638][ T8320] loop0: detected capacity change from 0 to 256 [ 216.696202][ T8311] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,auto_da_alloc,minixdf,noinit_itable,init_itable,,errors=continue. Quota mode: writeback. [ 216.713103][ T4448] Bluetooth: hci3: command 0x0419 tx timeout [ 216.725760][ T8311] ext4 filesystem being mounted at /324/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.773443][ T8311] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 216.789811][ T8311] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 216.839513][ T8311] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.1623: Failed to acquire dquot type 1 [ 217.020508][ T154] team0 (unregistering): Port device team_slave_1 removed [ 217.039825][ T154] team0 (unregistering): Port device team_slave_0 removed [ 217.124330][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.193384][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.481771][ T154] bond0 (unregistering): Released all slaves [ 217.582064][ T8295] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1617'. [ 217.632852][ T4448] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 217.785197][ T8354] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 217.893339][ T8047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.931567][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 217.940839][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 217.964897][ T8047] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.015744][ T8132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 218.034208][ T8132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 218.064160][ T4448] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.091316][ T4448] usb 1-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 218.108340][ T8132] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.115810][ T8132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.152975][ T4448] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.175402][ T4448] usb 1-1: config 0 descriptor?? [ 218.216195][ T4448] dw2102: su3000_identify_state [ 218.221560][ T4448] dvb-usb: found a 'TeVii S662' in warm state. [ 218.246385][ T8372] netlink: 'syz.4.1649': attribute type 1 has an invalid length. [ 218.276681][ T8374] Option '2 O€ÉÇ—Wz [ 218.276681][ T8374] ­ f:ó–ã5úÉùÔAŠÀ- [ 218.276681][ T8374] ¶ÉØ)‰dÁÕ::ûÞl]GYï;ŸÌmÁ~Rã N+o¸ý{j\°' to dns_resolver key: bad/missing value [ 218.294824][ T4448] dw2102: su3000_power_ctrl: 1, initialized 0 [ 218.302174][ T4448] dvb-usb: bulk message failed: -22 (2/0) [ 218.316958][ T8132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 218.336336][ T8132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 218.381547][ T8132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 218.425786][ T8132] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.433232][ T8132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.469958][ T4448] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 218.489523][ T8132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 218.544844][ T8132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 218.572386][ T4448] dvb-usb: TeVii S662 error while loading driver (-19) [ 218.586286][ T8132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 218.613502][ T8132] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 218.663496][ T4448] usb 1-1: USB disconnect, device number 6 [ 218.677109][ T8386] netlink: 'syz.3.1654': attribute type 16 has an invalid length. [ 218.722928][ T8386] netlink: 'syz.3.1654': attribute type 17 has an invalid length. [ 218.796628][ T8393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1656'. [ 218.824577][ T8386] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 218.832860][ T8386] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 218.850163][ T8386] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 218.859959][ T8386] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 218.881125][ T8386] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 218.924767][ T8386] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 219.008514][ T8400] loop4: detected capacity change from 0 to 64 [ 219.045873][ T8132] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 219.057952][ T8132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 219.112328][ T8132] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 219.121174][ T8400] hfs: request for non-existent node 8388610 in B*Tree [ 219.149237][ T8400] hfs: request for non-existent node 8388610 in B*Tree [ 219.152987][ T8132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 219.211146][ T8132] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 219.280643][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 219.296108][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 219.327040][ T8047] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 219.561064][ T8417] rdma_rxe: rxe creation allowed on top of a real device only [ 219.968659][ T8430] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1670'. [ 220.053264][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 220.081400][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 220.132546][ T8047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.446701][ T8399] loop2: detected capacity change from 0 to 40427 [ 220.663241][ T8464] loop3: detected capacity change from 0 to 128 [ 220.732956][ T8399] F2FS-fs (loop2): invalid crc value [ 220.767914][ T8399] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 220.820526][ T4383] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 220.894465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 220.924827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 220.976643][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 220.996702][ T8399] attempt to access beyond end of device [ 220.996702][ T8399] loop2: rw=0, want=45072, limit=40427 [ 221.007657][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 221.038095][ T8047] device veth0_vlan entered promiscuous mode [ 221.040517][ T8399] F2FS-fs (loop2): Cannot turn on quotas: -5 on 2 [ 221.055635][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 221.081948][ T8399] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 221.086726][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 221.121904][ T8047] device veth1_vlan entered promiscuous mode [ 221.174414][ T8399] F2FS-fs (loop2): switch discard_unit option is not allowed [ 221.188612][ T4383] usb 1-1: config 8 has an invalid interface number: 177 but max is 0 [ 221.203673][ T4383] usb 1-1: config 8 has no interface number 0 [ 221.220760][ T4383] usb 1-1: config 8 interface 177 altsetting 9 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 221.256055][ T4383] usb 1-1: config 8 interface 177 altsetting 9 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 221.291536][ T4383] usb 1-1: config 8 interface 177 has no altsetting 0 [ 221.299223][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 221.309557][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 221.324151][ T4383] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 221.329518][ T8047] device veth0_macvtap entered promiscuous mode [ 221.353040][ T8047] device veth1_macvtap entered promiscuous mode [ 221.364451][ T4383] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.391325][ T8047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.409102][ T8047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.419346][ T8047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.425836][ T8456] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 221.448173][ T8456] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 221.462140][ T8047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.491013][ T8047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.504227][ C0] ir_toy 1-1:8.177: out urb status: -71 [ 221.528232][ T8047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.579840][ T8047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.610714][ T8047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.635446][ T8047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.651572][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 221.672976][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 221.739984][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 221.770456][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 221.850044][ T8047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.874218][ T8047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.911755][ T8047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.979142][ T8047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.994382][ T4383] ir_toy 1-1:8.177: could not write reset command: -110 [ 222.019960][ T8047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.024842][ C0] ir_toy 1-1:8.177: failed to resubmit urb: -1 [ 222.037874][ T4383] ir_toy: probe of 1-1:8.177 failed with error -110 [ 222.051289][ T8047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.055812][ T4383] usb 1-1: USB disconnect, device number 7 [ 222.095622][ T8047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.134341][ T8047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.176942][ T8047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.216383][ T8047] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.274345][ T8047] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.283117][ T8047] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.371241][ T8047] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.440172][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 222.465564][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 222.659618][ T8502] loop3: detected capacity change from 0 to 1024 [ 222.755573][ T3085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.764061][ T3085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.838845][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 222.847430][ T8510] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1692'. [ 222.877109][ T8502] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 223.040230][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.077045][ T8502] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 623: comm syz.3.1687: Attempting to read directory block (623) that is past i_size (638464) [ 223.097386][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.139085][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 223.409208][ T8527] comedi: No check for data length of config insn id 6 is implemented [ 223.424921][ T8527] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 223.448372][ T8527] comedi: Assuming n=15 is correct [ 223.855178][ T8550] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1704'. [ 223.866179][ T8547] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.1702'. [ 223.905950][ T8552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1705'. [ 223.969535][ T8499] loop2: detected capacity change from 0 to 32768 [ 224.075788][ T8557] loop3: detected capacity change from 0 to 1024 [ 224.129371][ T8557] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 224.145798][ T8557] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 224.183480][ T8557] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 224.227555][ T8499] XFS (loop2): Mounting V5 Filesystem [ 224.322408][ T8557] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 224.355076][ T8557] System zones: 0-1, 3-36 [ 224.369838][ T8557] EXT4-fs (loop3): mounted filesystem without journal. Opts: lazytime,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,mblk_io_submit,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 224.450515][ T8499] XFS (loop2): Ending clean mount [ 224.776086][ T4187] XFS (loop2): Unmounting Filesystem [ 225.018411][ T8599] loop5: detected capacity change from 0 to 128 [ 225.132339][ T8602] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1722'. [ 225.681695][ T8570] loop4: detected capacity change from 0 to 32768 [ 225.972356][ T8639] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1735'. [ 225.992095][ T8639] device veth0_to_bond entered promiscuous mode [ 226.113455][ T8647] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 226.171981][ T8647] overlayfs: conflicting options: userxattr,metacopy=on [ 226.325463][ T8659] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1743'. [ 226.335093][ T8659] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1743'. [ 226.350228][ T8659] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1743'. [ 226.438690][ T4383] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 226.705529][ T4383] usb 3-1: Using ep0 maxpacket: 8 [ 226.792520][ T8570] XFS (loop4): Mounting V5 Filesystem [ 226.910279][ T8692] loop3: detected capacity change from 0 to 512 [ 226.985848][ T4383] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03 [ 227.016945][ T4383] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.025201][ T4383] usb 3-1: Product: syz [ 227.066036][ T8692] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 227.088035][ T8570] XFS (loop4): Ending clean mount [ 227.096224][ T8692] ext4 filesystem being mounted at /366/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 227.109613][ T4383] usb 3-1: Manufacturer: syz [ 227.114291][ T4383] usb 3-1: SerialNumber: syz [ 227.194696][ T4383] usb 3-1: config 0 descriptor?? [ 227.277897][ T4383] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 227.299827][ T4196] XFS (loop4): Unmounting Filesystem [ 227.319582][ T4383] dvb-usb: bulk message failed: -22 (2/0) [ 227.332420][ T4383] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 227.386131][ T4383] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 227.429194][ T4383] usb 3-1: media controller created [ 227.528159][ T4383] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 227.649472][ T4383] dvb-usb: bulk message failed: -22 (1/0) [ 227.703558][ T4383] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 227.749342][ T8691] loop0: detected capacity change from 0 to 32768 [ 227.767444][ T4383] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input13 [ 227.788083][ T4383] dvb-usb: schedule remote query interval to 50 msecs. [ 227.800803][ T4383] dvb-usb: bulk message failed: -22 (2/0) [ 227.808780][ T4383] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 227.841844][ T4383] usb 3-1: USB disconnect, device number 9 [ 227.864989][ T4395] dvb-usb: bulk message failed: -22 (1/0) [ 227.894890][ T4395] dvb-usb: error while querying for an remote control event. [ 228.165388][ T8716] loop2: detected capacity change from 0 to 764 [ 228.281871][ T8691] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.1753 (8691) [ 228.381125][ T4383] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 228.469607][ T8691] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 228.496635][ T8691] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 228.526096][ T8691] BTRFS info (device loop0): use zstd compression, level 3 [ 228.557447][ T8691] BTRFS info (device loop0): using free space tree [ 228.564397][ T8691] BTRFS info (device loop0): has skinny extents [ 228.719588][ T8728] Set syz0 is full, maxelem 0 reached [ 229.101221][ T8691] BTRFS info (device loop0): enabling ssd optimizations [ 229.510817][ T8763] netlink: 1244 bytes leftover after parsing attributes in process `syz.2.1772'. [ 230.016269][ T8780] loop2: detected capacity change from 0 to 1024 [ 230.210943][ T8780] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 230.422964][ T8780] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 623: comm syz.2.1777: Attempting to read directory block (623) that is past i_size (638464) [ 230.589169][ T8788] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 440: padding at end of block bitmap is not set [ 230.618512][ T8801] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1787'. [ 230.802912][ T8744] loop3: detected capacity change from 0 to 40427 [ 230.926816][ T8744] F2FS-fs (loop3): Wrong SSA boundary, start(3584) end(4096) blocks(1024) [ 230.935409][ T8744] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 231.019013][ T8744] F2FS-fs (loop3): invalid crc value [ 231.084807][ T8744] F2FS-fs (loop3): Found nat_bits in checkpoint [ 231.272179][ T8835] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 231.280622][ T8744] F2FS-fs (loop3): recover fsync data on readonly fs [ 231.288918][ T13] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 231.316574][ T8837] loop4: detected capacity change from 0 to 256 [ 231.324404][ T8744] F2FS-fs (loop3): Try to recover 1th superblock, ret: -30 [ 231.352500][ T8744] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 231.398417][ T8837] FAT-fs (loop4): Directory bread(block 64) failed [ 231.423392][ T8837] FAT-fs (loop4): Directory bread(block 65) failed [ 231.436763][ T8841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1806'. [ 231.466102][ T8837] FAT-fs (loop4): Directory bread(block 66) failed [ 231.495910][ T8837] FAT-fs (loop4): Directory bread(block 67) failed [ 231.526282][ T8744] fscrypt (loop3, inode 3): Error -61 getting encryption context [ 231.536398][ T13] usb 1-1: Using ep0 maxpacket: 16 [ 231.546101][ T8837] FAT-fs (loop4): Directory bread(block 68) failed [ 231.591539][ T8837] FAT-fs (loop4): Directory bread(block 69) failed [ 231.637439][ T8837] FAT-fs (loop4): Directory bread(block 70) failed [ 231.644049][ T8837] FAT-fs (loop4): Directory bread(block 71) failed [ 231.656736][ T13] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 231.675092][ T13] usb 1-1: config 0 has no interface number 0 [ 231.702330][ T8837] FAT-fs (loop4): Directory bread(block 72) failed [ 231.724562][ T8849] netdevsim netdevsim5: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 231.746946][ T8837] FAT-fs (loop4): Directory bread(block 73) failed [ 231.829820][ T8855] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 231.856726][ T13] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 231.877139][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.885315][ T13] usb 1-1: Product: syz [ 231.950950][ T13] usb 1-1: Manufacturer: syz [ 231.956149][ T13] usb 1-1: SerialNumber: syz [ 232.017740][ T13] usb 1-1: config 0 descriptor?? [ 232.082510][ T13] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 232.296668][ T13] gspca_spca1528: reg_w err -71 [ 232.326791][ T13] spca1528: probe of 1-1:0.1 failed with error -71 [ 232.362126][ T13] usb 1-1: USB disconnect, device number 8 [ 232.516685][ T8882] netlink: 'syz.4.1822': attribute type 17 has an invalid length. [ 232.524876][ T8882] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1822'. [ 232.561223][ T8882] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 232.714508][ T8893] netlink: 'syz.5.1825': attribute type 6 has an invalid length. [ 232.849575][ T8893] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1825'. [ 233.240984][ T8929] overlayfs: missing 'lowerdir' [ 233.489771][ T8940] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 233.723316][ T8947] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 233.847078][ T8952] netlink: 'syz.3.1848': attribute type 1 has an invalid length. [ 233.891624][ T8952] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1848'. [ 234.026943][ T4446] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 234.102258][ T8965] loop2: detected capacity change from 0 to 64 [ 234.239196][ T4602] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 234.537636][ T4602] usb 5-1: Using ep0 maxpacket: 16 [ 234.607267][ T4446] usb 6-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=c7.b3 [ 234.627985][ T4446] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.648008][ T4446] usb 6-1: Product: syz [ 234.656500][ T4446] usb 6-1: Manufacturer: syz [ 234.666635][ T4446] usb 6-1: SerialNumber: syz [ 234.687272][ T4602] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.698783][ T4446] usb 6-1: config 0 descriptor?? [ 234.718101][ T4602] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 234.739740][ T4446] cypress_cy7c63 6-1:0.0: Cypress CY7C63xxx device now attached [ 234.887790][ T8970] loop3: detected capacity change from 0 to 40427 [ 234.937077][ T4602] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 234.953426][ T4602] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.968728][ T13] usb 6-1: USB disconnect, device number 2 [ 234.973084][ T4602] usb 5-1: Product: syz [ 234.980198][ T13] cypress_cy7c63 6-1:0.0: Cypress CY7C63xxx device now disconnected [ 235.024601][ T8970] F2FS-fs (loop3): Invalid segment count (0) [ 235.045530][ T8970] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 235.057819][ T4602] usb 5-1: Manufacturer: syz [ 235.066087][ T4602] usb 5-1: SerialNumber: syz [ 235.098883][ T9000] loop0: detected capacity change from 0 to 64 [ 235.121637][ T8970] F2FS-fs (loop3): invalid crc value [ 235.170984][ T8970] F2FS-fs (loop3): Found nat_bits in checkpoint [ 235.190672][ T9000] hfs: unable to locate alternate MDB [ 235.214522][ T9000] hfs: continuing without an alternate MDB [ 235.305623][ T26] audit: type=1800 audit(1773107069.038:7): pid=9000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1870" name="bus" dev="loop0" ino=21 res=0 errno=0 [ 235.403463][ T154] hfs: new node 0 already hashed? [ 235.422076][ T154] ------------[ cut here ]------------ [ 235.464863][ T8970] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 235.468021][ T154] WARNING: CPU: 0 PID: 154 at fs/hfs/bnode.c:530 hfs_bnode_create+0x3d1/0x450 [ 235.482604][ T8970] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 235.524244][ T154] Modules linked in: [ 235.534371][ T154] CPU: 0 PID: 154 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 235.565631][ T154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 235.596224][ T154] Workqueue: writeback wb_workfn (flush-7:0) [ 235.607344][ T4602] usb 5-1: cannot find UAC_HEADER [ 235.613851][ T154] RIP: 0010:hfs_bnode_create+0x3d1/0x450 [ 235.622841][ T154] Code: 97 3f 8a 89 ee e8 6f 65 82 07 e9 57 fd ff ff e8 a5 c4 49 ff 4c 89 ef e8 7d 7a 96 07 48 c7 c7 40 98 3f 8a 89 ee e8 4f 65 82 07 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 63 fc ff ff 4c [ 235.693432][ T154] RSP: 0018:ffffc9000126ee90 EFLAGS: 00010246 [ 235.710838][ T4602] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 235.740571][ T154] RAX: 000000000000001f RBX: ffff88807baac000 RCX: 90bdc3276449d700 [ 235.781936][ T154] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 235.799831][ T4602] usb 5-1: USB disconnect, device number 11 [ 235.812142][ T154] RBP: 0000000000000000 R08: ffff8880b9033d7f R09: 1ffff110172067af [ 235.843473][ T154] R10: dffffc0000000000 R11: ffffed10172067b0 R12: 0000000000000000 [ 235.898144][ T154] R13: ffff88807baac0e0 R14: ffff88801ec13700 R15: dffffc0000000000 [ 235.915842][ T154] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 235.926293][ T154] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 235.941219][ T154] CR2: 0000001b32b14ff8 CR3: 000000002ac4f000 CR4: 00000000003506e0 [ 235.950396][ T154] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 235.969518][ T154] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 235.982488][ T154] Call Trace: [ 235.986027][ T154] [ 236.025699][ T154] ? do_raw_spin_unlock+0x11d/0x230 [ 236.048489][ T154] hfs_bmap_alloc+0x5b8/0x670 [ 236.053440][ T154] ? hfs_bmap_reserve+0x420/0x420 [ 236.060279][ T154] hfs_btree_inc_height+0xfd/0xac0 [ 236.068842][ T4594] udevd[4594]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 236.097298][ T154] ? hfs_brec_insert+0x6f6/0xbd0 [ 236.103613][ T154] ? hfs_brec_insert+0xbd0/0xbd0 [ 236.150216][ T154] ? do_raw_spin_unlock+0x11d/0x230 [ 236.156368][ T154] hfs_brec_insert+0x744/0xbd0 [ 236.202459][ T154] ? hfs_brec_keylen+0x350/0x350 [ 236.208744][ T154] __hfs_ext_write_extent+0x2a1/0x470 [ 236.214810][ T154] hfs_ext_write_extent+0x17b/0x200 [ 236.221307][ T154] ? verify_lock_unused+0x140/0x140 [ 236.232226][ T154] ? hfs_ext_keycmp+0x310/0x310 [ 236.238523][ T154] ? writeback_sb_inodes+0x418/0x1680 [ 236.244362][ T154] hfs_write_inode+0xd8/0xa20 [ 236.255360][ T154] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 236.262044][ T154] ? __writeback_single_inode+0x471/0xda0 [ 236.274193][ T154] ? __lock_acquire+0x7d10/0x7d10 [ 236.281737][ T154] ? do_raw_spin_lock+0x128/0x2f0 [ 236.287839][ T154] ? __rwlock_init+0x140/0x140 [ 236.292821][ T154] __writeback_single_inode+0x6c3/0xda0 [ 236.298932][ T154] writeback_sb_inodes+0xa4e/0x1680 [ 236.304831][ T154] ? queue_io+0x550/0x550 [ 236.310600][ T154] ? rcu_is_watching+0x11/0xa0 [ 236.315557][ T154] wb_writeback+0x45d/0xbe0 [ 236.320727][ T154] ? rcu_lock_release+0x20/0x20 [ 236.325730][ T154] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 236.332387][ T154] ? mark_lock+0x94/0x320 [ 236.336863][ T154] ? _raw_spin_unlock_irq+0x1f/0x40 [ 236.342590][ T154] wb_workfn+0x43a/0xf20 [ 236.347700][ T154] ? inode_wait_for_writeback+0x220/0x220 [ 236.353688][ T154] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 236.360732][ T154] ? read_lock_is_recursive+0x10/0x10 [ 236.369592][ T154] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 236.376521][ T154] ? _raw_spin_unlock+0x40/0x40 [ 236.383913][ T154] ? _raw_spin_unlock_irq+0x1f/0x40 [ 236.389895][ T154] process_one_work+0x85f/0x1010 [ 236.395459][ T154] ? worker_detach_from_pool+0x240/0x240 [ 236.401822][ T154] ? lockdep_hardirqs_off+0x70/0x100 [ 236.411525][ T154] ? _raw_spin_lock_irq+0xb7/0xf0 [ 236.416633][ T154] ? _raw_spin_lock_irqsave+0x100/0x100 [ 236.422546][ T154] ? wq_worker_running+0x97/0x170 [ 236.428471][ T154] worker_thread+0xaa6/0x1290 [ 236.433287][ T154] kthread+0x436/0x520 [ 236.438019][ T154] ? rcu_lock_release+0x20/0x20 [ 236.443183][ T154] ? kthread_blkcg+0xd0/0xd0 [ 236.448694][ T154] ret_from_fork+0x1f/0x30 [ 236.453669][ T154] [ 236.456756][ T154] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 236.465628][ T154] CPU: 0 PID: 154 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 236.474029][ T154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 236.484444][ T154] Workqueue: writeback wb_workfn (flush-7:0) [ 236.491409][ T154] Call Trace: [ 236.495099][ T154] [ 236.498078][ T154] dump_stack_lvl+0x188/0x250 [ 236.502898][ T154] ? show_regs_print_info+0x20/0x20 [ 236.508240][ T154] ? load_image+0x400/0x400 [ 236.512798][ T154] panic+0x2e5/0x810 [ 236.516743][ T154] ? bpf_jit_dump+0xd0/0xd0 [ 236.521570][ T154] ? ret_from_fork+0x1f/0x30 [ 236.526646][ T154] ? hfs_bnode_create+0x3d1/0x450 [ 236.531722][ T154] __warn+0x248/0x2b0 [ 236.536158][ T154] ? hfs_bnode_create+0x3d1/0x450 [ 236.541244][ T154] report_bug+0x1b7/0x2e0 [ 236.546125][ T154] handle_bug+0x3a/0x70 [ 236.550501][ T154] exc_invalid_op+0x16/0x40 [ 236.555122][ T154] asm_exc_invalid_op+0x16/0x20 [ 236.560327][ T154] RIP: 0010:hfs_bnode_create+0x3d1/0x450 [ 236.566769][ T154] Code: 97 3f 8a 89 ee e8 6f 65 82 07 e9 57 fd ff ff e8 a5 c4 49 ff 4c 89 ef e8 7d 7a 96 07 48 c7 c7 40 98 3f 8a 89 ee e8 4f 65 82 07 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 63 fc ff ff 4c [ 236.586820][ T154] RSP: 0018:ffffc9000126ee90 EFLAGS: 00010246 [ 236.593672][ T154] RAX: 000000000000001f RBX: ffff88807baac000 RCX: 90bdc3276449d700 [ 236.602182][ T154] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 236.610190][ T154] RBP: 0000000000000000 R08: ffff8880b9033d7f R09: 1ffff110172067af [ 236.618570][ T154] R10: dffffc0000000000 R11: ffffed10172067b0 R12: 0000000000000000 [ 236.626589][ T154] R13: ffff88807baac0e0 R14: ffff88801ec13700 R15: dffffc0000000000 [ 236.634723][ T154] ? do_raw_spin_unlock+0x11d/0x230 [ 236.640349][ T154] hfs_bmap_alloc+0x5b8/0x670 [ 236.645698][ T154] ? hfs_bmap_reserve+0x420/0x420 [ 236.650933][ T154] hfs_btree_inc_height+0xfd/0xac0 [ 236.656891][ T154] ? hfs_brec_insert+0x6f6/0xbd0 [ 236.662159][ T154] ? hfs_brec_insert+0xbd0/0xbd0 [ 236.667328][ T154] ? do_raw_spin_unlock+0x11d/0x230 [ 236.673754][ T154] hfs_brec_insert+0x744/0xbd0 [ 236.680140][ T154] ? hfs_brec_keylen+0x350/0x350 [ 236.685289][ T154] __hfs_ext_write_extent+0x2a1/0x470 [ 236.691725][ T154] hfs_ext_write_extent+0x17b/0x200 [ 236.697620][ T154] ? verify_lock_unused+0x140/0x140 [ 236.703821][ T154] ? hfs_ext_keycmp+0x310/0x310 [ 236.708796][ T154] ? writeback_sb_inodes+0x418/0x1680 [ 236.714926][ T154] hfs_write_inode+0xd8/0xa20 [ 236.719754][ T154] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 236.725454][ T154] ? __writeback_single_inode+0x471/0xda0 [ 236.731502][ T154] ? __lock_acquire+0x7d10/0x7d10 [ 236.737312][ T154] ? do_raw_spin_lock+0x128/0x2f0 [ 236.742678][ T154] ? __rwlock_init+0x140/0x140 [ 236.747718][ T154] __writeback_single_inode+0x6c3/0xda0 [ 236.753665][ T154] writeback_sb_inodes+0xa4e/0x1680 [ 236.759287][ T154] ? queue_io+0x550/0x550 [ 236.763803][ T154] ? rcu_is_watching+0x11/0xa0 [ 236.768805][ T154] wb_writeback+0x45d/0xbe0 [ 236.773756][ T154] ? rcu_lock_release+0x20/0x20 [ 236.778649][ T154] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 236.785056][ T154] ? mark_lock+0x94/0x320 [ 236.789407][ T154] ? _raw_spin_unlock_irq+0x1f/0x40 [ 236.794738][ T154] wb_workfn+0x43a/0xf20 [ 236.799344][ T154] ? inode_wait_for_writeback+0x220/0x220 [ 236.805336][ T154] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 236.811483][ T154] ? read_lock_is_recursive+0x10/0x10 [ 236.817267][ T154] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 236.823217][ T154] ? _raw_spin_unlock+0x40/0x40 [ 236.828121][ T154] ? _raw_spin_unlock_irq+0x1f/0x40 [ 236.833614][ T154] process_one_work+0x85f/0x1010 [ 236.838575][ T154] ? worker_detach_from_pool+0x240/0x240 [ 236.844433][ T154] ? lockdep_hardirqs_off+0x70/0x100 [ 236.850500][ T154] ? _raw_spin_lock_irq+0xb7/0xf0 [ 236.855638][ T154] ? _raw_spin_lock_irqsave+0x100/0x100 [ 236.861453][ T154] ? wq_worker_running+0x97/0x170 [ 236.866611][ T154] worker_thread+0xaa6/0x1290 [ 236.871941][ T154] kthread+0x436/0x520 [ 236.876716][ T154] ? rcu_lock_release+0x20/0x20 [ 236.881901][ T154] ? kthread_blkcg+0xd0/0xd0 [ 236.886909][ T154] ret_from_fork+0x1f/0x30 [ 236.891447][ T154] [ 236.895232][ T154] Kernel Offset: disabled [ 236.900308][ T154] Rebooting in 86400 seconds..