last executing test programs: 4.932866428s ago: executing program 1 (id=18570): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f00000024c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000001000)=ANY=[], 0xfd, 0x631c, &(0x7f00000027c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) stat(&(0x7f000000af40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) 2.701690893s ago: executing program 1 (id=18576): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x400, 0x70bd28, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x8}, {0xffff, 0x5}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0xb8}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 2.331847312s ago: executing program 1 (id=18580): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="09000000010001", 0x7) 2.092155599s ago: executing program 1 (id=18584): syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da00090589"], 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 1.753255967s ago: executing program 3 (id=18588): getpid() futex(&(0x7f0000000000)=0x1, 0xd, 0xfffffffe, 0x0, 0x0, 0xffffffff) futex(&(0x7f000000cffc), 0x5, 0x4, 0x0, &(0x7f0000000000)=0x3, 0x4ffffff) 1.593935281s ago: executing program 2 (id=18590): pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setrlimit(0x7, &(0x7f0000000400)) dup(r0) 1.445796224s ago: executing program 0 (id=18591): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000001640)={0x44, r1, 0x1, 0x70bd28, 0x2, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x6, 0x5, 'Nq'}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x44}}, 0xc800) 1.445317414s ago: executing program 2 (id=18592): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f00000000c0)="b9", 0x1) close(r0) 1.309158228s ago: executing program 2 (id=18593): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000400)={r1, 0x3, 0x80, 0x0, 0x0}) 1.23729968s ago: executing program 0 (id=18594): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="09000000010001", 0x7) 1.134933462s ago: executing program 2 (id=18595): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000003c0)=0xce, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000240)=0xe2b, 0x4) 1.075799014s ago: executing program 0 (id=18597): unshare(0x2040400) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f0000000200), 0x0}, 0x20) 982.216026ms ago: executing program 2 (id=18598): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="e000000015000000000000000000000070636263286663727970742d67656e65726963290000"], 0xe0}}, 0x0) sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) 915.415128ms ago: executing program 4 (id=18599): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000240)={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x26}}, 0x8) connect$inet(r0, &(0x7f0000000b00)={0x2, 0x4e20, @multicast2}, 0x10) 868.520689ms ago: executing program 0 (id=18600): pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltgid}]}}) 834.14885ms ago: executing program 3 (id=18601): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) set_mempolicy(0x2, &(0x7f00000002c0)=0x2, 0x3ce5) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) 743.084552ms ago: executing program 4 (id=18602): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a010400000000000000000a0000000c00010066696c746572000040000000030a010400000000000000000a0000000c00010066696c74657200000a000300696e707574000000140004800800010000000000080002000000000064000000060a010400000000000000000a0000000c00010066696c74657200000a000200696e70757400000038000480340001800a0001006d61746368000000240002800f0001006970763668656164657200000800020000000000070003002000000014000000110001"], 0xec}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x18, 0x2b, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {0x3200, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) 722.603153ms ago: executing program 2 (id=18603): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc294, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, "", [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x4, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1, 0x3, 0x9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB="0005280000002823f70fa39f0300000000000000ddca4fdca0560f920d54f365"], 0x0, 0x0, 0x0, 0x0}, 0x0) 665.674744ms ago: executing program 3 (id=18604): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r0, 0x11}, 0xa) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@ifindex, r0, 0x11, 0x0, 0x0, @void, @value=0x0}, 0x20) 568.047657ms ago: executing program 4 (id=18605): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a6970"], 0x60}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6800000004060500000000ac000000000000000a050001000700000005000100070000000900020073797a3000000000050001000700000005000100070000000900020073797a3100000000050001000700"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 528.522798ms ago: executing program 0 (id=18606): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3, 0xfffffffb, 0x1, 0x3ff}}) 480.693199ms ago: executing program 3 (id=18607): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="09000000010001", 0x7) 398.604521ms ago: executing program 0 (id=18608): syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x4010, &(0x7f0000000300), 0x1, 0x9768, &(0x7f0000012f40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x2904c, 0x1, 0x10003, '\x00', [{0x0, 0x3, 0x0, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x9, 0xa, 0xffffffffffffffff}], ['\x00']}) 388.017391ms ago: executing program 4 (id=18609): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000132c0)={0x0, 0x0, &(0x7f0000013280)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x801) 355.070702ms ago: executing program 3 (id=18610): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) 256.102834ms ago: executing program 4 (id=18611): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BETA={0xd, 0x6, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000080c) 206.242106ms ago: executing program 3 (id=18612): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x1, 0x9, 0x401, 0x0, 0x0, {0x4, 0x0, 0x3}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x16}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x20c}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x24040144) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x84, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x63, 0x3, "5916920a2710ed6a83134b160a839ec8909d184c57920f918e5504e91adffec551543e20c97c9a1f07dc6cc1a63106844d595518fe54ff2d3d8587511e8b9a6dca2aa2dae00fbafa827e397d205a8c2c9db714854a0bc90d967b03e1fa1977"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xe0}}, 0x0) 191.792696ms ago: executing program 1 (id=18613): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x50, 0x0, 0x0, 0x9000}, {0x30, 0x1, 0x3, 0xfffdf034}, {0x6, 0x2, 0x0, 0x5}]}, 0x10) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0x9ffc) 64.733139ms ago: executing program 4 (id=18614): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@mpls_getroute={0xa0, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_NEWDST={0x84}]}, 0xa0}, 0x1, 0x0, 0x0, 0x44085}, 0x0) 0s ago: executing program 1 (id=18615): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x23f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) kernel console output (not intermixed with test programs): 6] usb 3-1: USB disconnect, device number 84 [ 1114.100653][ T9196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17291'. [ 1114.276172][ T4226] usb 5-1: new full-speed USB device number 94 using dummy_hcd [ 1114.736255][ T4226] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 36129, setting to 64 [ 1114.971287][ T9217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17310'. [ 1115.042175][ T4226] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 1115.071639][ T4226] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.093209][ T9221] loop2: detected capacity change from 0 to 256 [ 1115.125303][ T4226] usb 5-1: Product: syz [ 1115.129572][ T4226] usb 5-1: Manufacturer: syz [ 1115.136253][ T9223] tmpfs: Cannot retroactively limit inodes [ 1115.174850][ T4226] usb 5-1: SerialNumber: syz [ 1115.247825][ T4226] usb 5-1: config 0 descriptor?? [ 1115.266516][ T9184] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1115.321970][ T4226] usb 5-1: Found UVC 0.00 device syz (18ec:3288) [ 1115.335573][ T4226] usb 5-1: No valid video chain found. [ 1115.498605][ T9234] loop2: detected capacity change from 0 to 128 [ 1115.554186][ T9234] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1115.603666][ T4226] usb 5-1: USB disconnect, device number 94 [ 1115.667559][ T26] audit: type=1800 audit(525657.170:62): pid=9234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.17317" name="file0" dev="loop2" ino=89 res=0 errno=0 [ 1115.704988][ T9240] loop0: detected capacity change from 0 to 1764 [ 1116.672449][ T9273] device macvlan0 entered promiscuous mode [ 1116.710500][ T9272] loop3: detected capacity change from 0 to 2048 [ 1116.753744][ T9276] loop0: detected capacity change from 0 to 8 [ 1116.906974][ T9272] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 1117.034669][ T9272] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1118.085035][ T9316] netlink: 56 bytes leftover after parsing attributes in process `syz.4.17354'. [ 1118.552378][ T9336] loop4: detected capacity change from 0 to 1024 [ 1118.575890][ T9278] loop2: detected capacity change from 0 to 40427 [ 1118.719714][ T9278] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1118.759442][ T9278] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1118.815853][ T9278] F2FS-fs (loop2): invalid crc value [ 1118.909260][ T9278] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1119.229657][ T9278] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1119.268731][ T9278] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1120.010218][ T9387] loop4: detected capacity change from 0 to 512 [ 1120.212647][ T9387] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1120.261683][ T1111] usb 2-1: new full-speed USB device number 95 using dummy_hcd [ 1120.276359][ T9387] EXT4-fs error (device loop4): ext4_orphan_get:1432: comm syz.4.17390: bad orphan inode 131083 [ 1120.366495][ T9387] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x0000000000000009,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 1120.482635][ T9402] loop0: detected capacity change from 0 to 2048 [ 1120.515706][ T26] audit: type=1800 audit(525662.020:63): pid=9387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.17390" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1120.587622][ T9402] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1120.762043][ T1111] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1120.780649][ T1111] usb 2-1: config 179 has no interface number 0 [ 1120.815056][ T1111] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1120.855346][ T1111] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 18366, setting to 64 [ 1120.898140][ T1111] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1120.938153][ T1111] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1120.971964][ T1111] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.064024][ T9385] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1121.175903][ T9416] loop0: detected capacity change from 0 to 128 [ 1121.209906][ T4226] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 1121.326049][ T9416] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1121.364342][ T9420] futex_wake_op: syz.4.17404 tries to shift op by 32; fix this program [ 1121.562440][ T9428] loop4: detected capacity change from 0 to 1024 [ 1121.658554][ T7] usb 2-1: USB disconnect, device number 95 [ 1121.666175][ T4226] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1121.709110][ T4226] usb 3-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 1121.758406][ T4226] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1121.785650][ T4226] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1121.812605][ T4226] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.821961][ T9428] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,data_err=ignore,init_itable,quota,abort,,errors=continue. Quota mode: writeback. [ 1121.876322][ T4226] usb 3-1: config 0 descriptor?? [ 1122.256059][T27117] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1122.372541][ T9450] loop4: detected capacity change from 0 to 2048 [ 1122.423229][ T4226] hid-multitouch 0003:1FD2:6007.000D: unknown main item tag 0x3 [ 1122.445360][ T4226] hid-multitouch 0003:1FD2:6007.000D: unknown main item tag 0x0 [ 1122.484309][ T4226] hid-multitouch 0003:1FD2:6007.000D: unknown main item tag 0x0 [ 1122.513273][ T4226] hid-multitouch 0003:1FD2:6007.000D: unknown main item tag 0x0 [ 1122.545929][ T9450] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1122.556243][ T4226] hid-multitouch 0003:1FD2:6007.000D: unknown main item tag 0x0 [ 1122.564406][ T4226] hid-multitouch 0003:1FD2:6007.000D: unknown main item tag 0x0 [ 1122.603850][ T9450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17416'. [ 1122.654186][ T4226] hid-multitouch 0003:1FD2:6007.000D: unknown main item tag 0x0 [ 1122.681718][ T9461] loop0: detected capacity change from 0 to 512 [ 1122.700826][ T4226] hid-multitouch 0003:1FD2:6007.000D: unknown main item tag 0x0 [ 1122.739273][ T4226] hid-multitouch 0003:1FD2:6007.000D: unknown main item tag 0x0 [ 1122.767624][ T4226] hid-multitouch 0003:1FD2:6007.000D: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0 [ 1122.839083][ T4226] usb 3-1: USB disconnect, device number 85 [ 1122.882298][ T9461] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.17420: invalid indirect mapped block 10 (level 1) [ 1122.896857][T27117] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1122.943648][T27117] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.978947][ T9466] fido_id[9466]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1123.020623][ T9461] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.17420: invalid indirect mapped block 8 (level 1) [ 1123.044281][T27117] usb 4-1: Product: syz [ 1123.065526][T27117] usb 4-1: Manufacturer: syz [ 1123.070204][T27117] usb 4-1: SerialNumber: syz [ 1123.126314][ T9461] EXT4-fs (loop0): 1 truncate cleaned up [ 1123.132039][ T9461] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1123.232334][T27117] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1123.695278][T27117] usb 5-1: new full-speed USB device number 95 using dummy_hcd [ 1124.105087][ T9492] loop0: detected capacity change from 0 to 512 [ 1124.122795][ T4226] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1124.166682][T27117] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1124.195315][T27117] usb 5-1: config 179 has no interface number 0 [ 1124.211933][T27117] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1124.260705][ T9492] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1124.275312][T27117] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 18366, setting to 64 [ 1124.318316][ T9492] EXT4-fs error (device loop0): ext4_orphan_get:1432: comm syz.0.17433: bad orphan inode 131083 [ 1124.345319][T27117] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1124.385327][ T9492] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x0000000000000009,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 1124.432939][T27117] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1124.473474][T27117] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.545548][ T26] audit: type=1800 audit(525666.050:64): pid=9492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.17433" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 1124.558149][ T9472] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1124.584690][ T1111] usb 4-1: USB disconnect, device number 84 [ 1125.076484][T28432] usb 5-1: USB disconnect, device number 95 [ 1125.185124][ T4226] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1125.205435][ T4226] ath9k_htc: Failed to initialize the device [ 1125.211786][ T1111] usb 4-1: ath9k_htc: USB layer deinitialized [ 1125.263488][ T9490] loop2: detected capacity change from 0 to 32768 [ 1125.418313][ T9511] loop3: detected capacity change from 0 to 64 [ 1125.495749][ T9490] XFS (loop2): Mounting V5 Filesystem [ 1125.758169][ T9490] XFS (loop2): Ending clean mount [ 1125.778385][ T9490] XFS (loop2): Quotacheck needed: Please wait. [ 1125.895589][ T9490] XFS (loop2): Quotacheck: Done. [ 1126.099025][ T4190] XFS (loop2): Unmounting Filesystem [ 1126.245168][ T9503] loop0: detected capacity change from 0 to 32768 [ 1126.251903][ T9531] damon: kdamond (9531) starts [ 1126.510267][ T9503] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop0 scanned by syz.0.17436 (9503) [ 1126.605517][ T9503] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 1126.655378][ T9503] BTRFS info (device loop0): using free space tree [ 1126.661944][ T9503] BTRFS info (device loop0): has skinny extents [ 1126.995883][ T9503] BTRFS info (device loop0): enabling ssd optimizations [ 1127.503019][ T9562] loop2: detected capacity change from 0 to 512 [ 1127.591240][ T9533] loop3: detected capacity change from 0 to 32768 [ 1127.689013][ T9562] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1127.752365][ T9562] EXT4-fs error (device loop2): ext4_orphan_get:1432: comm syz.2.17449: bad orphan inode 131083 [ 1127.864309][ T9562] EXT4-fs (loop2): mounted filesystem without journal. Opts: stripe=0x0000000000000009,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 1128.006895][ T26] audit: type=1800 audit(525669.510:65): pid=9562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.17449" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 1128.014548][ T9568] netlink: 9456 bytes leftover after parsing attributes in process `syz.1.17454'. [ 1128.154117][ T9568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17454'. [ 1128.670230][ T4228] usb 5-1: new full-speed USB device number 96 using dummy_hcd [ 1128.751919][ T9580] loop2: detected capacity change from 0 to 1024 [ 1128.817333][ T9586] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17464'. [ 1129.053306][ T9590] loop0: detected capacity change from 0 to 1024 [ 1129.106262][ T4228] usb 5-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 1129.137629][ T4228] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1129.199927][ T4228] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1129.255303][ T4228] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1129.269477][ T9594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17468'. [ 1129.336356][ T4228] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1129.388125][ T4228] usb 5-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 1129.414705][ T9590] hfsplus: xattr searching failed [ 1129.445447][ T4228] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.496201][ T4228] usb 5-1: config 0 descriptor?? [ 1129.750192][ T9585] loop3: detected capacity change from 0 to 32768 [ 1129.964421][ T9601] netlink: 9456 bytes leftover after parsing attributes in process `syz.2.17470'. [ 1129.986209][ T4228] hid-alps 0003:044E:120C.000E: unknown main item tag 0x0 [ 1130.016040][ T4228] hid-alps 0003:044E:120C.000E: hidraw0: USB HID v0.04 Device [HID 044e:120c] on usb-dummy_hcd.4-1/input0 [ 1130.045800][ T9601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17470'. [ 1130.242925][ T4228] usb 5-1: USB disconnect, device number 96 [ 1130.392102][ T9608] fido_id[9608]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1130.659750][ T9625] netlink: 36 bytes leftover after parsing attributes in process `syz.1.17481'. [ 1130.884090][ T9627] loop3: detected capacity change from 0 to 4096 [ 1130.916009][ T9635] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17485'. [ 1131.098009][ T9644] loop2: detected capacity change from 0 to 8 [ 1131.107004][ T9627] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 1131.169058][ T9627] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1131.225330][ T9627] ntfs3: loop3: Failed to load $AttrDef -> 0 [ 1131.428077][ T4228] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1131.703736][ T9663] netlink: 91 bytes leftover after parsing attributes in process `syz.3.17499'. [ 1131.825638][ T9665] futex_wake_op: syz.1.17500 tries to shift op by 32; fix this program [ 1131.966269][ T4228] usb 5-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1131.976663][T27128] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 1132.006936][ T4228] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1132.236340][ T4228] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0014, bcdDevice= 0.40 [ 1132.265306][ T4228] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.283612][ T4228] usb 5-1: Product: syz [ 1132.303876][ T4228] usb 5-1: Manufacturer: syz [ 1132.314969][ T4228] usb 5-1: SerialNumber: syz [ 1132.395678][T27128] usb 3-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 1132.425315][T27128] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1132.465313][T27128] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1132.491843][ T9657] loop0: detected capacity change from 0 to 32768 [ 1132.505303][T27128] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1132.546179][T27128] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1132.565836][T27128] usb 3-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 1132.606222][T27128] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.666694][T27128] usb 3-1: config 0 descriptor?? [ 1132.788599][ T4228] usb 5-1: 0:1 : does not exist [ 1132.808362][ T4228] usb 5-1: cannot request logical cluster ID: 24929 (err: -71) [ 1132.865596][ T4228] usb 5-1: unit 80 not found! [ 1132.889160][ T4228] usb 5-1: USB disconnect, device number 97 [ 1132.963834][T32254] udevd[32254]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1133.166495][T27128] hid-alps 0003:044E:120C.000F: unknown main item tag 0x0 [ 1133.195457][T27128] hid-alps 0003:044E:120C.000F: hidraw0: USB HID v0.04 Device [HID 044e:120c] on usb-dummy_hcd.2-1/input0 [ 1133.409502][T27128] usb 3-1: USB disconnect, device number 86 [ 1133.599235][ T9677] loop0: detected capacity change from 0 to 32768 [ 1133.792384][ T9677] XFS (loop0): Mounting V5 Filesystem [ 1133.906880][ T9677] XFS (loop0): Ending clean mount [ 1134.031740][ T4193] XFS (loop0): Unmounting Filesystem [ 1134.070675][ T9692] loop4: detected capacity change from 0 to 1024 [ 1134.130577][ T9694] loop2: detected capacity change from 0 to 1024 [ 1134.374749][ T9694] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,data_err=ignore,init_itable,quota,abort,,errors=continue. Quota mode: writeback. [ 1134.650655][ T9704] RDS: rds_bind could not find a transport for 0:0:900:0:9500::, load rds_tcp or rds_rdma? [ 1135.575304][ T4225] usb 1-1: new full-speed USB device number 89 using dummy_hcd [ 1135.829913][T27128] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1136.048015][ T4225] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1136.062675][ T9706] loop2: detected capacity change from 0 to 32768 [ 1136.116397][ T4225] usb 1-1: not running at top speed; connect to a high speed hub [ 1136.265960][T27128] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1136.297397][T27128] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1136.335787][T27128] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1136.395315][T27128] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.425905][T27128] usb 4-1: config 0 descriptor?? [ 1136.454891][ T4225] usb 1-1: New USB device found, idVendor=194f, idProduct=010c, bcdDevice= 0.40 [ 1136.473759][ T4225] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.505893][ T4225] usb 1-1: Product: syz [ 1136.510150][ T4225] usb 1-1: Manufacturer: syz [ 1136.545474][ T4225] usb 1-1: SerialNumber: syz [ 1136.613728][ T4228] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1136.859895][ T9751] tmpfs: Cannot retroactively limit inodes [ 1136.893982][ T9739] loop4: detected capacity change from 0 to 32768 [ 1136.943372][T27128] hid-led 0003:27B8:01ED.0010: unbalanced collection at end of report description [ 1136.970167][T27128] hid-led: probe of 0003:27B8:01ED.0010 failed with error -22 [ 1137.046091][ T4228] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1137.057188][ T9739] find_entry called with index = 0 [ 1137.062630][ T9739] read_mapping_page failed! [ 1137.071138][ T4228] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1137.112736][ T9739] ERROR: (device loop4): txCommit: [ 1137.112736][ T9739] [ 1137.120283][ T4228] usb 2-1: config 220 has no interface number 2 [ 1137.147058][ T4228] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1137.211151][ T4228] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1137.242059][ T4228] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1137.271727][ T4228] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1137.289815][ T9758] loop2: detected capacity change from 0 to 2048 [ 1137.300502][T27128] usb 4-1: USB disconnect, device number 85 [ 1137.345593][ T4225] usb 1-1: incorrect wMaxPacketSize 0x3ff for BADD profile [ 1137.384092][ T4225] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 1137.458843][ T9761] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1137.467712][ T9761] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1137.476614][ T9761] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1137.485520][ T9761] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1137.504021][ T7605] udevd[7605]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1137.505386][ T4225] usb 1-1: USB disconnect, device number 89 [ 1137.538528][ T9758] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1137.554749][ T4228] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1137.571477][ T4228] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1137.605311][ T4228] usb 2-1: Product: syz [ 1137.620167][ T4228] usb 2-1: Manufacturer: syz [ 1137.624933][ T4228] usb 2-1: SerialNumber: syz [ 1138.048436][ T4228] usb 2-1: selecting invalid altsetting 0 [ 1138.058129][ T4228] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 1138.093296][ T4228] usb 2-1: No valid video chain found. [ 1138.200434][ T4228] usb 2-1: selecting invalid altsetting 0 [ 1138.229237][ T4228] usbtest: probe of 2-1:220.1 failed with error -22 [ 1138.282608][ T4228] usb 2-1: USB disconnect, device number 96 [ 1138.875429][ T4228] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1139.093065][ T9809] loop4: detected capacity change from 0 to 4096 [ 1139.246282][ T9821] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1139.331967][ T9809] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 1139.354022][ T4228] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1139.385512][ T4228] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1139.395612][ T9809] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=12) [ 1139.455310][ T4228] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1139.487954][ T9809] Remounting filesystem read-only [ 1139.505160][ T9809] NILFS (loop4): error -5 truncating bmap (ino=12) [ 1139.513931][ T4228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.584714][ T4228] usb 3-1: config 0 descriptor?? [ 1139.646343][ T4197] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 1139.911030][ T9842] loop0: detected capacity change from 0 to 256 [ 1139.987344][ T9842] FAT-fs (loop0): "posix" option is obsolete, not supported now [ 1140.081907][ T4228] hid-led 0003:27B8:01ED.0011: unbalanced collection at end of report description [ 1140.116798][ T4228] hid-led: probe of 0003:27B8:01ED.0011 failed with error -22 [ 1140.303131][ T4225] usb 3-1: USB disconnect, device number 87 [ 1140.411705][ T9857] loop4: detected capacity change from 0 to 1764 [ 1140.535554][T27128] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1140.833692][T27128] usb 1-1: Using ep0 maxpacket: 32 [ 1141.194177][T27128] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1141.348985][ T9886] loop2: detected capacity change from 0 to 256 [ 1141.468587][T27128] usb 1-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.40 [ 1141.498803][T27128] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.533387][ T9886] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1141.552860][T27128] usb 1-1: Product: syz [ 1141.575309][T27128] usb 1-1: Manufacturer: syz [ 1141.600432][T27128] usb 1-1: SerialNumber: syz [ 1141.957389][T27128] appletouch 1-1:1.0: Failed to read mode from device. [ 1141.971812][T27128] appletouch: probe of 1-1:1.0 failed with error -5 [ 1142.048602][T27128] usb 1-1: USB disconnect, device number 90 [ 1142.319249][ T9905] netlink: 'syz.1.17607': attribute type 3 has an invalid length. [ 1142.534354][ T9912] netlink: 104 bytes leftover after parsing attributes in process `syz.1.17611'. [ 1143.062237][ T9936] loop3: detected capacity change from 0 to 1024 [ 1143.125090][ T9938] netlink: 128 bytes leftover after parsing attributes in process `syz.0.17620'. [ 1143.165763][ T9938] netlink: 'syz.0.17620': attribute type 5 has an invalid length. [ 1143.276694][ T9936] hfsplus: invalid xattr key length: 0 [ 1143.427784][T32516] hfsplus: b-tree write err: -5, ino 8 [ 1143.630317][ T9954] loop0: detected capacity change from 0 to 512 [ 1143.803402][ T9954] EXT4-fs (loop0): inline encryption not supported [ 1143.825424][ T9954] EXT4-fs (loop0): Mount option "nouser_xattr" will be removed by 3.5 [ 1143.825424][ T9954] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 1143.825424][ T9954] [ 1143.844211][ T9958] loop3: detected capacity change from 0 to 1024 [ 1143.869703][ T9950] loop4: detected capacity change from 0 to 8192 [ 1143.908700][ T9954] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1143.959788][ T9958] hfsplus: request for non-existent node 33423360 in B*Tree [ 1143.986249][ T9954] EXT4-fs (loop0): 1 truncate cleaned up [ 1144.009221][ T9954] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,inlinecrypt,debug_want_extra_isize=0x0000000000000080,nojournal_checksum,jqfmt=vfsv1,nouser_xattr,jqfmt=vfsold,errors=remount-ro,. Quota mode: none. [ 1144.033223][ T9958] hfsplus: request for non-existent node 33423360 in B*Tree [ 1144.041544][ T9950] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 1144.075442][ T9950] REISERFS (device loop4): using ordered data mode [ 1144.082037][ T9950] reiserfs: using flush barriers [ 1144.139567][ T9950] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1144.218504][ T9954] EXT4-fs error (device loop0): __ext4_expand_extra_isize:5893: inode #15: comm syz.0.17628: bad extra_isize 62 (inode size 256) [ 1144.245821][ T9950] REISERFS (device loop4): checking transaction log (loop4) [ 1144.306433][ T9950] REISERFS (device loop4): Using rupasov hash to sort names [ 1144.365366][ T9950] REISERFS (device loop4): using 3.5.x disk format [ 1144.393901][ T9954] EXT4-fs (loop0): Remounting filesystem read-only [ 1144.401212][ T9950] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1144.418188][ T9934] loop2: detected capacity change from 0 to 32768 [ 1144.436118][ T9966] sp0: Synchronizing with TNC [ 1144.459070][ T9954] EXT4-fs error (device loop0): __ext4_expand_extra_isize:5893: inode #15: comm syz.0.17628: bad extra_isize 62 (inode size 256) [ 1144.480235][ T9950] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1144.501733][ T9965] [U] è` [ 1144.536255][ T9950] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1144.611717][ T9950] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 1144.631064][ T9954] EXT4-fs (loop0): Remounting filesystem read-only [ 1144.676534][ T9954] EXT4-fs error (device loop0): __ext4_expand_extra_isize:5893: inode #15: comm syz.0.17628: bad extra_isize 62 (inode size 256) [ 1144.779565][ T9954] EXT4-fs (loop0): Remounting filesystem read-only [ 1144.816664][ T9974] netlink: 128 bytes leftover after parsing attributes in process `syz.3.17638'. [ 1144.841882][ T9954] EXT4-fs error (device loop0): __ext4_expand_extra_isize:5893: inode #15: comm syz.0.17628: bad extra_isize 62 (inode size 256) [ 1144.915477][ T9974] netlink: 'syz.3.17638': attribute type 5 has an invalid length. [ 1144.994612][ T9954] EXT4-fs (loop0): Remounting filesystem read-only [ 1145.005660][ T9954] EXT4-fs error (device loop0): __ext4_expand_extra_isize:5893: inode #15: comm syz.0.17628: bad extra_isize 62 (inode size 256) [ 1145.025479][ T9979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17641'. [ 1145.123567][ T9954] EXT4-fs (loop0): Remounting filesystem read-only [ 1145.141543][ T9954] EXT4-fs error (device loop0): __ext4_expand_extra_isize:5893: inode #15: comm syz.0.17628: bad extra_isize 62 (inode size 256) [ 1145.224692][ T9954] EXT4-fs (loop0): Remounting filesystem read-only [ 1145.270961][ T9954] EXT4-fs error (device loop0): __ext4_expand_extra_isize:5893: inode #15: comm syz.0.17628: bad extra_isize 62 (inode size 256) [ 1145.361583][ T9954] EXT4-fs (loop0): Remounting filesystem read-only [ 1145.388593][ T9954] EXT4-fs error (device loop0): __ext4_expand_extra_isize:5893: inode #15: comm syz.0.17628: bad extra_isize 62 (inode size 256) [ 1145.413184][ T9991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17646'. [ 1145.473264][ T9954] EXT4-fs (loop0): Remounting filesystem read-only [ 1145.480805][T27128] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1145.550638][ T9993] loop3: detected capacity change from 0 to 512 [ 1145.699470][ T9993] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 1145.716974][ T9993] EXT4-fs (loop3): inline encryption not supported [ 1145.723607][ T9993] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1145.791214][ T9993] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 1145.812191][T27128] usb 2-1: Using ep0 maxpacket: 8 [ 1145.841448][ T9993] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1145.920306][ T9993] EXT4-fs (loop3): 1 truncate cleaned up [ 1145.956509][ T9993] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 1146.105357][T27128] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1146.172374][T10008] ip_tables: iptables: counters copy to user failed while replacing table [ 1146.253911][T10011] netlink: 128 bytes leftover after parsing attributes in process `syz.4.17654'. [ 1146.295021][T27128] usb 2-1: config 1 has an invalid interface number: 211 but max is 0 [ 1146.325584][T10011] netlink: 'syz.4.17654': attribute type 5 has an invalid length. [ 1146.335311][T27128] usb 2-1: config 1 has no interface number 0 [ 1146.361815][T27128] usb 2-1: too many endpoints for config 1 interface 211 altsetting 3: 250, using maximum allowed: 30 [ 1146.404099][T10014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17656'. [ 1146.443743][T27128] usb 2-1: config 1 interface 211 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 250 [ 1146.512644][ T9987] loop2: detected capacity change from 0 to 32768 [ 1146.529368][T27128] usb 2-1: config 1 interface 211 has no altsetting 0 [ 1146.705628][T27128] usb 2-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=5a.54 [ 1146.705664][T27128] usb 2-1: New USB device strings: Mfr=7, Product=0, SerialNumber=3 [ 1146.705687][T27128] usb 2-1: Manufacturer: syz [ 1146.705705][T27128] usb 2-1: SerialNumber: syz [ 1146.795669][ T9987] XFS (loop2): Mounting V5 Filesystem [ 1146.925484][ T1111] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1147.003311][T27128] usb 2-1: USB disconnect, device number 97 [ 1147.051661][ T9987] XFS (loop2): Ending clean mount [ 1147.165920][ T4190] XFS (loop2): Unmounting Filesystem [ 1147.202145][ T4228] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1147.366043][ T1111] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1147.387172][ T1111] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1147.427371][ T1111] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1147.460802][ T1111] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1147.481112][ T1111] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.545680][ T1111] usb 4-1: config 0 descriptor?? [ 1147.686225][ T4228] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 1147.715423][ T4228] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1147.755301][ T4228] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1147.786211][ T4228] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 1147.840337][ T4228] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 1147.875301][ T4228] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.920784][ T4228] usb 1-1: config 0 descriptor?? [ 1148.073134][ T1111] steelseries_srws1 0003:1038:1410.0012: unknown main item tag 0x1 [ 1148.101862][ T1111] steelseries_srws1 0003:1038:1410.0012: not enough values in HID_OUTPUT_REPORT 0 field 0 [ 1148.155519][T10046] ip_tables: iptables: counters copy to user failed while replacing table [ 1148.303635][ T1111] usb 4-1: USB disconnect, device number 86 [ 1148.421675][ T4228] holtek_kbd 0003:04D9:A055.0013: unbalanced collection at end of report description [ 1148.456862][ T4228] holtek_kbd: probe of 0003:04D9:A055.0013 failed with error -22 [ 1148.628210][ T1111] usb 1-1: USB disconnect, device number 91 [ 1149.270624][ T1111] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1149.496025][ T4228] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1149.595480][ T4226] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1149.686318][ T1111] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 1149.694838][ T1111] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1149.797153][ T1111] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1149.816790][ T1111] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1149.835013][ T1111] usb 3-1: Manufacturer: syz [ 1149.850939][ T1111] usb 3-1: config 0 descriptor?? [ 1149.856864][ T4226] usb 2-1: Using ep0 maxpacket: 8 [ 1149.985937][ T4226] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1150.005333][ T4226] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1150.015749][ T1111] rc_core: IR keymap rc-hauppauge not found [ 1150.021694][ T1111] Registered IR keymap rc-empty [ 1150.036061][ T1111] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1150.066447][ T1111] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input73 [ 1150.116383][ T4228] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1150.145297][ T4228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1150.173652][ T4228] usb 4-1: Product: syz [ 1150.178249][ T4228] usb 4-1: Manufacturer: syz [ 1150.182995][ T4228] usb 4-1: SerialNumber: syz [ 1150.205847][ T4228] usb 4-1: config 0 descriptor?? [ 1150.226225][ T4226] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1150.245304][ T4226] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1150.258134][ T4228] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1150.275276][ T4226] usb 2-1: Product: syz [ 1150.288020][ T4228] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1150.297508][ T4226] usb 2-1: Manufacturer: syz [ 1150.302223][ T4226] usb 2-1: SerialNumber: syz [ 1150.327322][ T4226] usb 2-1: config 0 descriptor?? [ 1150.345720][ T4228] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1150.365459][ T4228] usb 4-1: media controller created [ 1150.378703][ T4226] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 1150.401732][ T4228] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1150.540931][ T4228] DVB: Unable to find symbol mt352_attach() [ 1150.584711][ T1111] usb 3-1: USB disconnect, device number 88 [ 1150.608644][ T4226] snd_usb_toneport 2-1:0.0: cannot get proper max packet size [ 1150.626610][ T4226] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 1150.667448][ T4226] snd_usb_toneport: probe of 2-1:0.0 failed with error -22 [ 1150.684204][ T4228] DVB: Unable to find symbol nxt6000_attach() [ 1150.695279][ T4228] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1150.767419][ T4228] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input74 [ 1150.806989][ T4228] dvb-usb: schedule remote query interval to 1000 msecs. [ 1150.852346][ T4228] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1150.892818][ T4228] dvb-usb: bulk message failed: -22 (7/0) [ 1150.902875][ T4228] dvb-usb: bulk message failed: -22 (7/0) [ 1150.935423][ T4226] usb 2-1: USB disconnect, device number 98 [ 1150.955017][ T4228] usb 4-1: USB disconnect, device number 87 [ 1151.100310][ T4228] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1151.226696][T10102] loop2: detected capacity change from 0 to 512 [ 1151.325653][T10101] loop3: detected capacity change from 0 to 4096 [ 1151.362285][T10102] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1151.418663][T10101] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 1151.451526][T10102] EXT4-fs (loop2): 1 truncate cleaned up [ 1151.459610][T10102] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000008,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,errors=remount-ro,nombcache,. Quota mode: none. [ 1151.686211][T10101] ntfs3: loop3: failed to convert "c46c" to maccroatian [ 1151.782393][T10094] loop0: detected capacity change from 0 to 32768 [ 1152.004061][T10112] loop3: detected capacity change from 0 to 64 [ 1152.030784][T10094] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1152.199907][ T26] audit: type=1800 audit(525693.700:66): pid=10094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.17685" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 1152.227180][T10115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17697'. [ 1152.350535][ T4193] ocfs2: Unmounting device (7,0) on (node local) [ 1152.385386][T10119] loop3: detected capacity change from 0 to 256 [ 1152.455039][T10121] loop2: detected capacity change from 0 to 1024 [ 1152.655384][T10121] EXT4-fs (loop2): inline encryption not supported [ 1152.767558][T10121] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,inlinecrypt,,errors=continue. Quota mode: none. [ 1153.101928][T10132] loop0: detected capacity change from 0 to 1024 [ 1153.476528][T10140] loop0: detected capacity change from 0 to 1024 [ 1153.506120][ T4226] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1153.525703][T10138] loop2: detected capacity change from 0 to 4096 [ 1153.601628][T10138] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 1153.792744][T10142] loop0: detected capacity change from 0 to 1024 [ 1153.799374][T10138] ntfs3: loop2: failed to convert "c46c" to maccroatian [ 1153.859362][T10142] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1153.957077][T10142] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,dax=inode,dioread_nolock,nodelalloc,noblock_validity,jqfmt=vfsv0,,errors=continue. Quota mode: none. [ 1154.021234][ T4226] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 1154.056021][ T4226] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1154.158889][T10151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17711'. [ 1154.236718][ T4226] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1154.252710][T10152] EXT4-fs (loop4): inline encryption not supported [ 1154.265273][ T4226] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1154.297070][ T4226] usb 4-1: Manufacturer: syz [ 1154.328676][ T4226] usb 4-1: config 0 descriptor?? [ 1154.417170][T10152] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,inlinecrypt,,errors=continue. Quota mode: none. [ 1154.525612][ T4225] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1154.633398][ C0] vkms_vblank_simulate: vblank timer overrun [ 1154.661205][ T4226] rc_core: IR keymap rc-hauppauge not found [ 1154.670014][ T4226] Registered IR keymap rc-empty [ 1154.676077][ T4226] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1154.726513][ T4226] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input75 [ 1154.846163][T10171] netlink: 92 bytes leftover after parsing attributes in process `syz.4.17717'. [ 1154.879871][T10171] netlink: 6 bytes leftover after parsing attributes in process `syz.4.17717'. [ 1154.966897][ T4225] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1154.984056][ T4225] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1155.033239][ T4225] usb 3-1: config 220 has no interface number 2 [ 1155.064414][ T4225] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1155.124201][ T4225] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1155.149464][ T4225] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1155.173732][ T4225] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1155.233162][T27128] usb 4-1: USB disconnect, device number 88 [ 1155.376623][ T4225] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1155.393630][ T4225] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.421135][ T4225] usb 3-1: Product: syz [ 1155.431831][ T4225] usb 3-1: Manufacturer: syz [ 1155.443908][ T4225] usb 3-1: SerialNumber: syz [ 1155.522241][T10165] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop0 scanned by syz.0.17728 (10165) [ 1155.585624][T10165] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 1155.595069][T10165] BTRFS info (device loop0): using free space tree [ 1155.644883][T10165] BTRFS info (device loop0): has skinny extents [ 1155.870690][ T4225] usb 3-1: selecting invalid altsetting 0 [ 1155.877233][ T4225] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 1155.917069][ T4225] usb 3-1: No valid video chain found. [ 1155.972967][T10165] BTRFS info (device loop0): enabling ssd optimizations [ 1156.028411][ T4225] usb 3-1: selecting invalid altsetting 0 [ 1156.039854][ T4225] usbtest: probe of 3-1:220.1 failed with error -22 [ 1156.090114][ T4225] usb 3-1: USB disconnect, device number 89 [ 1156.285529][ T4226] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1156.756367][ T4226] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 1156.765223][ T4226] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1156.955331][ T4226] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1156.964422][ T4226] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1157.003085][ T4226] usb 2-1: Manufacturer: syz [ 1157.029151][ T4226] usb 2-1: config 0 descriptor?? [ 1157.080441][T10206] set_capacity_and_notify: 2 callbacks suppressed [ 1157.080459][T10206] loop4: detected capacity change from 0 to 32768 [ 1157.236091][ T4226] rc_core: IR keymap rc-hauppauge not found [ 1157.242238][ T4226] Registered IR keymap rc-empty [ 1157.247819][ T4226] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1157.279494][ T4226] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input76 [ 1157.290494][T10206] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.17723 (10206) [ 1157.351115][T10206] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1157.376183][T10206] BTRFS info (device loop4): setting nodatacow, compression disabled [ 1157.414815][T10206] BTRFS info (device loop4): setting datasum, datacow enabled [ 1157.434982][T10206] BTRFS info (device loop4): force clearing of disk cache [ 1157.480762][T10221] netlink: 92 bytes leftover after parsing attributes in process `syz.2.17731'. [ 1157.495346][T10206] BTRFS info (device loop4): enabling ssd optimizations [ 1157.530968][T10206] BTRFS info (device loop4): using spread ssd allocation scheme [ 1157.542417][T10221] netlink: 6 bytes leftover after parsing attributes in process `syz.2.17731'. [ 1157.575351][T10206] BTRFS info (device loop4): turning on sync discard [ 1157.615330][T10206] BTRFS info (device loop4): turning off barriers [ 1157.621900][T10206] BTRFS info (device loop4): setting nodatacow, compression disabled [ 1157.663659][T10226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17735'. [ 1157.705880][T10206] BTRFS info (device loop4): not using ssd optimizations [ 1157.712982][T10206] BTRFS info (device loop4): not using spread ssd allocation scheme [ 1157.731451][T10226] bond0: option miimon: invalid value (18446744073472114689) [ 1157.761671][T10226] bond0: option miimon: allowed values 0 - 2147483647 [ 1157.792013][T10206] BTRFS info (device loop4): using free space tree [ 1157.830962][T10206] BTRFS info (device loop4): has skinny extents [ 1157.860913][ T9789] usb 2-1: USB disconnect, device number 99 [ 1158.107378][T10206] BTRFS info (device loop4): clearing free space tree [ 1158.124717][T10206] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1158.171315][T10206] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1158.187668][T27128] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1158.302269][T10206] BTRFS info (device loop4): creating free space tree [ 1158.333870][T10206] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1158.384033][T10206] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1158.541399][ T26] audit: type=1800 audit(525700.040:67): pid=10206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.17723" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 1158.670765][T27128] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1158.690856][T27128] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1158.749810][T10243] loop2: detected capacity change from 0 to 32768 [ 1158.799412][T10206] BTRFS info (device loop4): balance: start -sconvert=raid0,usage=0..9 [ 1158.849075][T10206] BTRFS info (device loop4): balance: ended with status: 0 [ 1158.890404][T10243] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop2 scanned by syz.2.17738 (10243) [ 1158.920763][T27128] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 1158.940412][T27128] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.960927][T10243] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 1158.980649][T27128] usb 1-1: Product: syz [ 1158.985054][T27128] usb 1-1: Manufacturer: syz [ 1159.005342][T10243] BTRFS info (device loop2): using free space tree [ 1159.011947][T10243] BTRFS info (device loop2): has skinny extents [ 1159.022230][T27128] usb 1-1: SerialNumber: syz [ 1159.057575][T10257] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.17750'. [ 1159.114379][T10257] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 1159.261854][T10276] loop3: detected capacity change from 0 to 512 [ 1159.294102][T10243] BTRFS info (device loop2): enabling ssd optimizations [ 1159.375749][T27128] usb 1-1: Limiting number of CPorts to U8_MAX [ 1159.595326][ C0] usb 1-1: invalid arpc response id received: 0 [ 1159.785535][T27128] usb 1-1: failed to set cport flags for port 0 [ 1159.793110][T27128] greybus greybus1: 0/0:0: failed to enable host cport: -71 [ 1159.866748][T27128] es2_ap_driver: probe of 1-1:1.0 failed with error -71 [ 1159.888411][T27128] usb 1-1: USB disconnect, device number 92 [ 1160.084245][T10276] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1160.204107][T10276] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.17742: inode #1: comm syz.3.17742: iget: illegal inode # [ 1160.275703][T10276] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.17742: error while reading EA inode 1 err=-117 [ 1160.396073][T10276] EXT4-fs (loop3): 1 orphan inode deleted [ 1160.401975][T10276] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000002000003,norecovery,noinit_itable,init_itable=0x0000000000000001,minixdf,usrjquota=,debug_want_extra_isize=0x0000000000000006,usrjquota=,test_dummy_encryption=v1,noblock_validity,noquota,,errors=continue. Quota mode: none. [ 1160.662195][T10297] loop4: detected capacity change from 0 to 1024 [ 1160.826094][T10297] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1160.932443][T10297] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,dax=inode,dioread_nolock,nodelalloc,noblock_validity,jqfmt=vfsv0,,errors=continue. Quota mode: none. [ 1161.565391][T27128] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1161.838628][T27128] usb 1-1: Using ep0 maxpacket: 16 [ 1162.004835][T27128] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1162.060841][T27128] usb 1-1: New USB device found, idVendor=056a, idProduct=032f, bcdDevice= 0.00 [ 1162.120624][T27128] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1162.182326][T27128] usb 1-1: config 0 descriptor?? [ 1162.387151][T10336] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17767'. [ 1162.707294][T27128] wacom 0003:056A:032F.0014: unknown main item tag 0x7 [ 1162.744803][T27128] wacom 0003:056A:032F.0014: unknown main item tag 0x0 [ 1162.795427][T27128] wacom 0003:056A:032F.0014: unknown main item tag 0x1 [ 1162.802419][T27128] wacom 0003:056A:032F.0014: unknown main item tag 0xd [ 1162.890580][T27128] wacom 0003:056A:032F.0014: hidraw0: USB HID v0.09 Device [HID 056a:032f] on usb-dummy_hcd.0-1/input0 [ 1162.989322][T27128] usb 1-1: USB disconnect, device number 93 [ 1163.080021][T10353] loop3: detected capacity change from 0 to 2048 [ 1163.188368][T10353] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1163.238899][T10356] fido_id[10356]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1163.675726][T10375] loop0: detected capacity change from 0 to 64 [ 1163.864517][T10375] attempt to access beyond end of device [ 1163.864517][T10375] loop0: rw=0, want=1026, limit=64 [ 1163.943833][T10375] Buffer I/O error on dev loop0, logical block 512, async page read [ 1164.025473][T10375] attempt to access beyond end of device [ 1164.025473][T10375] loop0: rw=0, want=113154, limit=64 [ 1164.077203][T10386] netlink: 30 bytes leftover after parsing attributes in process `syz.3.17789'. [ 1164.107846][T10375] Buffer I/O error on dev loop0, logical block 56576, async page read [ 1164.155467][T10386] netlink: 3 bytes leftover after parsing attributes in process `syz.3.17789'. [ 1164.186714][T10383] attempt to access beyond end of device [ 1164.186714][T10383] loop0: rw=0, want=1026, limit=64 [ 1164.262729][T10383] Buffer I/O error on dev loop0, logical block 512, async page read [ 1164.327740][T10383] attempt to access beyond end of device [ 1164.327740][T10383] loop0: rw=0, want=113154, limit=64 [ 1164.395379][T10383] Buffer I/O error on dev loop0, logical block 56576, async page read [ 1164.659474][T27128] usb 2-1: new full-speed USB device number 100 using dummy_hcd [ 1164.715168][T10401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17796'. [ 1164.785068][T10401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17796'. [ 1164.835429][T10401] netlink: 'syz.0.17796': attribute type 18 has an invalid length. [ 1165.047683][T10411] tipc: Started in network mode [ 1165.052671][T10411] tipc: Node identity 000000400000005f0007, cluster identity 4711 [ 1165.110500][T10411] tipc: Enabling of bearer rejected, failed to enable media [ 1165.145881][T10418] tipc: Started in network mode [ 1165.152391][T27128] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1165.166147][T10418] tipc: Node identity fff50000000000000000000000000001, cluster identity 4711 [ 1165.194009][T27128] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1165.222530][T10418] tipc: Enabling of bearer rejected, failed to enable media [ 1165.281661][T27128] usb 2-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 1165.336699][T27128] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.387180][T27128] usb 2-1: config 0 descriptor?? [ 1165.428052][T10428] netlink: 'syz.3.17808': attribute type 13 has an invalid length. [ 1165.460703][T10426] loop0: detected capacity change from 0 to 2048 [ 1165.481404][T10428] netlink: 14585 bytes leftover after parsing attributes in process `syz.3.17808'. [ 1165.622670][T10426] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1165.679065][T10426] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1165.735462][T10426] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1165.798776][T10438] loop2: detected capacity change from 0 to 2048 [ 1165.823164][T10426] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1165.875435][T10438] EXT4-fs (loop2): Unrecognized mount option "hash" or missing value [ 1165.884801][T10426] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1165.910990][T27128] hid-led 0003:1294:1320.0015: unknown main item tag 0xd [ 1165.938527][T27128] hid-led 0003:1294:1320.0015: unknown main item tag 0xe [ 1165.955325][T10426] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 1165.996190][T10426] UDF-fs: Scanning with blocksize 512 failed [ 1166.015909][T27128] hid-led 0003:1294:1320.0015: hidraw0: USB HID v0.00 Device [HID 1294:1320] on usb-dummy_hcd.1-1/input0 [ 1166.047478][T10426] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1166.129170][T10426] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1166.242635][T27128] hid-led 0003:1294:1320.0015: Riso Kagaku Webmail Notifier initialized [ 1166.251296][T10426] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1166.309433][T27128] usb 2-1: USB disconnect, device number 100 [ 1166.414778][T28442] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 1166.445964][T28442] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 1166.501923][T28442] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 1166.598319][T10453] fido_id[10453]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1167.094635][T10476] loop2: detected capacity change from 0 to 2048 [ 1167.276897][T10476] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1167.384972][T10483] loop4: detected capacity change from 0 to 4096 [ 1167.556991][T27128] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1167.612339][T10497] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1167.838260][T10503] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17844'. [ 1167.896597][T27128] usb 1-1: Using ep0 maxpacket: 16 [ 1167.955564][T10505] loop4: detected capacity change from 0 to 64 [ 1167.983113][T10509] program syz.1.17847 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1168.035832][T27128] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1168.079301][T27128] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1168.163424][T27128] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1168.193813][T27128] usb 1-1: New USB device found, idVendor=045e, idProduct=076c, bcdDevice= 0.00 [ 1168.251276][T27128] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1168.301035][T27128] usb 1-1: config 0 descriptor?? [ 1168.439819][T10520] loop2: detected capacity change from 0 to 256 [ 1168.452375][T10522] loop4: detected capacity change from 0 to 64 [ 1168.643863][T10520] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 1168.838981][T27128] input: HID 045e:076c as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:076C.0016/input/input80 [ 1168.972032][T27128] microsoft 0003:045E:076C.0016: input,hidraw0: USB HID v0.00 Joystick [HID 045e:076c] on usb-dummy_hcd.0-1/input0 [ 1169.088875][T27128] usb 1-1: USB disconnect, device number 94 [ 1169.258397][T10546] netlink: 80 bytes leftover after parsing attributes in process `syz.3.17865'. [ 1169.360416][T10543] fido_id[10543]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1169.488167][T10555] loop4: detected capacity change from 0 to 512 [ 1169.678761][T10555] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.17869: invalid indirect mapped block 10 (level 1) [ 1169.775082][T10555] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.17869: invalid indirect mapped block 8 (level 1) [ 1169.851649][T10555] EXT4-fs (loop4): 1 truncate cleaned up [ 1169.887965][T10555] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_dev=0x0000000000000001,,errors=continue. Quota mode: none. [ 1170.028027][T10578] loop0: detected capacity change from 0 to 2048 [ 1170.244353][T10578] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1170.416399][T10580] loop2: detected capacity change from 0 to 4096 [ 1170.600800][T10580] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1170.645324][T10580] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1170.734383][T10580] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1170.761940][T10599] loop3: detected capacity change from 0 to 256 [ 1170.812978][T10580] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1170.885948][T10580] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1170.926604][T10599] FAT-fs (loop3): Directory bread(block 64) failed [ 1170.933326][T10599] FAT-fs (loop3): Directory bread(block 65) failed [ 1170.983476][T10599] FAT-fs (loop3): Directory bread(block 66) failed [ 1170.995314][T10580] ntfs: volume version 3.1. [ 1171.001742][T10604] tipc: Enabling of bearer rejected, failed to enable media [ 1171.035627][T10599] FAT-fs (loop3): Directory bread(block 67) failed [ 1171.053371][T10599] FAT-fs (loop3): Directory bread(block 68) failed [ 1171.065374][T10580] ntfs: (device loop2): ntfs_lookup_inode_by_name(): No index allocation attribute but index entry requires one. Directory inode 0x5 is corrupt or driver bug. [ 1171.115363][T10599] FAT-fs (loop3): Directory bread(block 69) failed [ 1171.143936][T10599] FAT-fs (loop3): Directory bread(block 70) failed [ 1171.185406][T10580] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1171.197208][T10599] FAT-fs (loop3): Directory bread(block 71) failed [ 1171.203894][T10599] FAT-fs (loop3): Directory bread(block 72) failed [ 1171.245324][T10580] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 1171.285373][T10599] FAT-fs (loop3): Directory bread(block 73) failed [ 1171.376441][T10580] ntfs: (device loop2): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt. [ 1171.420870][T10580] ntfs: (device loop2): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 1171.709987][T27128] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1171.756744][ C0] vkms_vblank_simulate: vblank timer overrun [ 1172.007527][T10636] loop3: detected capacity change from 0 to 64 [ 1172.220407][T27128] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1172.245324][T27128] usb 1-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1172.551366][T27128] usb 1-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 1172.580892][T27128] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1172.626588][T27128] usb 1-1: Product: syz [ 1172.631098][T27128] usb 1-1: Manufacturer: syz [ 1172.685303][T27128] usb 1-1: SerialNumber: syz [ 1172.783794][T27128] usb-storage 1-1:1.0: USB Mass Storage device detected [ 1172.835759][T27128] usb-storage 1-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 1172.885592][T27128] scsi host1: usb-storage 1-1:1.0 [ 1173.033022][T27128] usb 1-1: USB disconnect, device number 95 [ 1173.075378][ T4226] kernel write not supported for file /vcs (pid: 4226 comm: kworker/0:5) [ 1173.210221][T10673] loop4: detected capacity change from 0 to 2048 [ 1173.361427][T10673] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1173.417371][T10673] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1173.913326][T10647] loop2: detected capacity change from 0 to 40427 [ 1174.028259][T10694] netlink: 56 bytes leftover after parsing attributes in process `syz.1.17933'. [ 1174.041023][T10647] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 1174.065330][T10647] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1174.113424][T10647] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x6 [ 1174.226086][T10647] F2FS-fs (loop2): invalid crc value [ 1174.249711][T10647] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1174.442391][T10675] loop3: detected capacity change from 0 to 32768 [ 1174.583108][T10647] F2FS-fs (loop2): Start checkpoint disabled! [ 1174.633368][T10675] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.17924 (10675) [ 1174.701883][T10675] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1174.712012][T10647] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1174.741205][T10647] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1174.770649][T10675] BTRFS info (device loop3): setting nodatasum [ 1174.786258][T10675] BTRFS info (device loop3): force zlib compression, level 3 [ 1174.834576][T10675] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1174.885154][T10675] BTRFS info (device loop3): use lzo compression, level 0 [ 1174.916213][T27128] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1174.943443][T10675] BTRFS info (device loop3): turning on flush-on-commit [ 1174.975326][T10675] BTRFS info (device loop3): enabling auto defrag [ 1175.022558][T10675] BTRFS info (device loop3): max_inline at 4096 [ 1175.060739][T10675] BTRFS info (device loop3): using free space tree [ 1175.087696][T10675] BTRFS info (device loop3): has skinny extents [ 1175.110366][ T154] attempt to access beyond end of device [ 1175.110366][ T154] loop2: rw=2049, want=45104, limit=40427 [ 1175.247212][T10728] openvswitch: netlink: Actions may not be safe on all matching packets [ 1175.386346][T27128] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1175.432239][T10675] BTRFS info (device loop3): enabling ssd optimizations [ 1175.442320][T27128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1175.492984][T27128] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1175.533517][T27128] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1175.595310][T27128] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1175.645283][T27128] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.889812][T10707] loop0: detected capacity change from 0 to 32768 [ 1176.403728][T27128] gud 2-1:1.0: Failed to get properties (error=-71) [ 1176.410525][T27128] gud: probe of 2-1:1.0 failed with error -71 [ 1176.497828][T27128] usb 2-1: USB disconnect, device number 101 [ 1178.413540][T10794] netlink: 52 bytes leftover after parsing attributes in process `syz.2.17971'. [ 1178.849049][T10780] loop3: detected capacity change from 0 to 40427 [ 1178.932848][T10810] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17979'. [ 1179.007550][T10780] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x1ffff [ 1179.065318][T10780] F2FS-fs (loop3): invalid crc value [ 1179.147267][T10780] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1179.197906][T10824] syz.0.17985[10824] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1179.198072][T10824] syz.0.17985[10824] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1179.439397][T10780] F2FS-fs (loop3): Start checkpoint disabled! [ 1179.460885][T10825] ALSA: seq fatal error: cannot create timer (-19) [ 1179.665209][T10780] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 1180.096467][T10847] loop2: detected capacity change from 0 to 4096 [ 1180.118658][ T155] attempt to access beyond end of device [ 1180.118658][ T155] loop3: rw=2049, want=40976, limit=40427 [ 1180.179220][T10847] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 1180.476206][T10866] netlink: 'syz.1.18005': attribute type 3 has an invalid length. [ 1180.900366][T10876] loop0: detected capacity change from 0 to 128 [ 1181.023437][T10876] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1181.023570][T10876] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1181.129639][T10876] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 1181.237642][T10886] loop3: detected capacity change from 0 to 256 [ 1182.084877][ T4226] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1182.159824][T10899] loop0: detected capacity change from 0 to 8192 [ 1182.368933][T10899] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 1182.388759][ T4226] usb 4-1: Using ep0 maxpacket: 8 [ 1182.434694][T10899] REISERFS (device loop0): using ordered data mode [ 1182.486731][T10899] reiserfs: using flush barriers [ 1182.544146][T10899] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1182.590010][ T4226] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 1182.612741][ T4226] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1182.645122][T10921] IPv6: Can't replace route, no match found [ 1182.651673][T10899] REISERFS (device loop0): checking transaction log (loop0) [ 1182.679250][ T4226] usb 4-1: config 0 has no interface number 0 [ 1182.964649][ T4226] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1182.994209][ T4226] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.036039][T10899] REISERFS (device loop0): Using rupasov hash to sort names [ 1183.043670][T10899] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 1183.062914][ T4226] usb 4-1: Product: syz [ 1183.081579][ T4226] usb 4-1: Manufacturer: syz [ 1183.090333][T10931] loop2: detected capacity change from 0 to 128 [ 1183.106876][ T4226] usb 4-1: SerialNumber: syz [ 1183.146424][ T4226] usb 4-1: config 0 descriptor?? [ 1183.237462][T10931] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1183.300274][T10931] hpfs: filesystem error: improperly stopped [ 1183.330515][T10931] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1183.374564][T10931] hpfs: You really don't want any checks? You are crazy... [ 1183.415360][T10931] hpfs: Code page index out of array [ 1183.420716][T10931] hpfs: code page support is disabled [ 1183.476208][ T4226] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 1183.486728][ T4226] usb 4-1: No valid video chain found. [ 1183.494793][T10931] hpfs: hpfs_map_4sectors(): unaligned read [ 1183.530827][T10931] hpfs: hpfs_map_4sectors(): unaligned read [ 1183.566864][T10931] hpfs: filesystem error: unable to find root dir [ 1183.715337][T28439] usb 4-1: USB disconnect, device number 89 [ 1183.726934][T10931] hpfs: hpfs_map_4sectors(): unaligned read [ 1184.230425][T10954] loop0: detected capacity change from 0 to 512 [ 1184.371026][T10959] loop3: detected capacity change from 0 to 512 [ 1184.431908][T10961] loop2: detected capacity change from 0 to 256 [ 1184.450811][T10959] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 1184.509659][T10959] EXT4-fs (loop3): 1 orphan inode deleted [ 1184.538817][T10959] EXT4-fs (loop3): mounted filesystem without journal. Opts: nomblk_io_submit,max_batch_time=0x0000000000005314,usrquota,jqfmt=vfsv1,noinit_itable,delalloc,inode_readahead_blks=0x0000000000000100,debug_want_extra_isize=0x000000000000005c,i_version,,errors=continue. Quota mode: writeback. [ 1184.569072][T10954] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,,errors=continue. Quota mode: writeback. [ 1184.582138][T10961] exfat: Deprecated parameter 'namecase' [ 1184.639174][T10954] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #2: comm syz.0.18044: corrupted inode contents [ 1184.662260][T10961] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 1184.762415][T10954] EXT4-fs error (device loop0): ext4_dirty_inode:6077: inode #2: comm syz.0.18044: mark_inode_dirty error [ 1184.807670][T10954] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #2: comm syz.0.18044: corrupted inode contents [ 1184.924796][T10968] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #2: comm syz.0.18044: corrupted inode contents [ 1184.984065][T10968] EXT4-fs error (device loop0): ext4_dirty_inode:6077: inode #2: comm syz.0.18044: mark_inode_dirty error [ 1185.003911][T10943] loop4: detected capacity change from 0 to 32768 [ 1185.094140][T10968] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #2: comm syz.0.18044: corrupted inode contents [ 1185.122529][T10971] loop3: detected capacity change from 0 to 256 [ 1185.142534][T10973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18052'. [ 1185.157783][T10943] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.18040 (10943) [ 1185.173895][T10975] loop2: detected capacity change from 0 to 256 [ 1185.210377][T10973] device batadv0 entered promiscuous mode [ 1185.248844][T10973] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1185.283722][T10975] exfat: Deprecated parameter 'namecase' [ 1185.306474][T10973] device batadv0 left promiscuous mode [ 1185.313254][T10943] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1185.327250][T10971] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1185.355329][T10975] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 1185.376064][T10943] BTRFS info (device loop4): setting nodatasum [ 1185.382519][T10971] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 1185.402691][T10943] BTRFS info (device loop4): force zlib compression, level 3 [ 1185.444300][T10943] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1185.460426][T10971] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1185.522727][T10943] BTRFS info (device loop4): use lzo compression, level 0 [ 1185.560396][T10943] BTRFS info (device loop4): turning on flush-on-commit [ 1185.606309][T10943] BTRFS info (device loop4): enabling auto defrag [ 1185.653712][T10943] BTRFS info (device loop4): max_inline at 4096 [ 1185.699572][T10943] BTRFS info (device loop4): using free space tree [ 1185.753630][T10943] BTRFS info (device loop4): has skinny extents [ 1185.908976][T10988] device vlan0 entered promiscuous mode [ 1185.925003][T10993] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1185.999075][T10988] device bridge0 entered promiscuous mode [ 1186.007191][T11003] snd_dummy snd_dummy.0: control 0:0:0:syz0:0: value out of range 7 (0/2) at count 0 [ 1186.031182][T11001] netlink: 7 bytes leftover after parsing attributes in process `syz.3.18058'. [ 1186.074927][T11003] snd_dummy snd_dummy.0: control 0:0:0:syz0:0: access overflow [ 1186.145511][T10943] BTRFS info (device loop4): enabling ssd optimizations [ 1186.264810][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 1186.264827][ T26] audit: type=1800 audit(525727.760:68): pid=10943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.18040" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 1186.319397][T11015] netlink: 92 bytes leftover after parsing attributes in process `syz.3.18061'. [ 1186.397652][T11015] netlink: 6 bytes leftover after parsing attributes in process `syz.3.18061'. [ 1186.562293][T11020] loop0: detected capacity change from 0 to 2048 [ 1186.825306][T11028] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1187.455764][T11038] loop2: detected capacity change from 0 to 256 [ 1187.630801][T27121] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1187.947108][T27121] usb 2-1: Using ep0 maxpacket: 8 [ 1188.086298][T11058] netlink: 16 bytes leftover after parsing attributes in process `syz.0.18082'. [ 1188.115332][T11058] netlink: 16 bytes leftover after parsing attributes in process `syz.0.18082'. [ 1188.126145][T27121] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 1188.175291][T27121] usb 2-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1188.195442][T11058] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info Ack ret = -22) [ 1188.236031][T28438] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1188.263700][T27121] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1188.290972][T27121] usb 2-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 1188.341443][T27121] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1188.396740][T27121] usb 2-1: config 0 descriptor?? [ 1188.441974][T11036] loop4: detected capacity change from 0 to 32768 [ 1188.542589][T11064] loop0: detected capacity change from 0 to 4096 [ 1188.596053][T28438] usb 3-1: Using ep0 maxpacket: 8 [ 1188.728193][T28438] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1188.746343][T28438] usb 3-1: config 0 has no interface number 0 [ 1188.783160][T28438] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1188.813614][T28438] usb 3-1: config 0 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1188.852364][T28438] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1188.875869][T28438] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1188.906256][T28438] usb 3-1: config 0 descriptor?? [ 1188.914720][T27121] sony 0003:054C:0374.0017: unknown main item tag 0x0 [ 1188.932007][T27121] sony 0003:054C:0374.0017: unknown main item tag 0x0 [ 1188.951901][T27121] sony 0003:054C:0374.0017: unknown main item tag 0x0 [ 1188.961955][T27121] sony 0003:054C:0374.0017: unknown main item tag 0x0 [ 1188.980658][T27121] sony 0003:054C:0374.0017: unknown main item tag 0x0 [ 1188.989776][T28438] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 1189.015549][T27121] sony 0003:054C:0374.0017: unknown main item tag 0x0 [ 1189.056391][T27121] sony 0003:054C:0374.0017: hiddev0,hidraw0: USB HID v10.01 Device [HID 054c:0374] on usb-dummy_hcd.1-1/input0 [ 1189.088682][T27121] sony 0003:054C:0374.0017: failed to claim input [ 1189.137599][T27121] usb 2-1: USB disconnect, device number 102 [ 1189.268659][T28439] usb 3-1: USB disconnect, device number 90 [ 1189.310156][T11069] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 1189.329565][T11071] program syz.3.18089 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1189.348731][T11067] fido_id[11067]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1189.523171][T11075] loop3: detected capacity change from 0 to 512 [ 1189.642817][T11075] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 1189.663049][T11077] loop0: detected capacity change from 0 to 2048 [ 1189.675626][T11075] EXT4-fs (loop3): invalid journal inode [ 1189.681378][T11075] EXT4-fs (loop3): can't get journal size [ 1189.758483][T11075] EXT4-fs (loop3): 1 truncate cleaned up [ 1189.764272][T11075] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 1189.925677][T11085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18093'. [ 1189.937240][T11077] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,resuid=0x0000000000000000,auto_da_alloc=0x000000000000ffff,noblock_validity,,errors=continue. Quota mode: none. [ 1190.030732][T11085] device batadv0 entered promiscuous mode [ 1190.112881][T11085] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1190.124552][T11077] EXT4-fs error (device loop0): ext4_find_extent:929: inode #2: comm syz.0.18092: pblk 93 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(4) [ 1190.198880][T11085] device batadv0 left promiscuous mode [ 1190.651663][T11107] loop2: detected capacity change from 0 to 512 [ 1190.925881][T11107] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1191.404156][ C0] vkms_vblank_simulate: vblank timer overrun [ 1191.453112][T11139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18118'. [ 1191.688075][T28438] logitech-hidpp-device 0005:046D:B012.0018: Device not connected [ 1191.994498][T11155] loop3: detected capacity change from 0 to 512 [ 1192.097868][T28438] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1192.164320][T11155] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1192.188531][T11155] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1192.249302][T11155] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1192.278995][T11155] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1192.315440][T11155] System zones: 0-2, 18-18, 34-35 [ 1192.336419][T11155] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,,errors=continue. Quota mode: none. [ 1192.385988][T28438] usb 2-1: Using ep0 maxpacket: 16 [ 1192.475571][T11160] loop2: detected capacity change from 0 to 2048 [ 1192.546152][T28438] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 1192.599231][T11160] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1192.773642][T11153] loop0: detected capacity change from 0 to 32768 [ 1192.796171][T28438] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1192.835279][T28438] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.863588][T28438] usb 2-1: Product: syz [ 1192.883810][T28438] usb 2-1: Manufacturer: syz [ 1192.898777][T28438] usb 2-1: SerialNumber: syz [ 1192.915137][T11153] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.18124 (11153) [ 1192.938379][T28438] r8152-cfgselector 2-1: config 0 descriptor?? [ 1192.995324][T11153] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1193.034665][T11153] BTRFS info (device loop0): setting nodatacow, compression disabled [ 1193.064895][T11153] BTRFS info (device loop0): setting datasum, datacow enabled [ 1193.105312][T11153] BTRFS info (device loop0): force clearing of disk cache [ 1193.143037][T11153] BTRFS info (device loop0): enabling ssd optimizations [ 1193.173320][T11153] BTRFS info (device loop0): using spread ssd allocation scheme [ 1193.209039][T11176] loop2: detected capacity change from 0 to 256 [ 1193.215537][T11153] BTRFS info (device loop0): turning on sync discard [ 1193.222292][T11153] BTRFS info (device loop0): turning off barriers [ 1193.259474][T11153] BTRFS info (device loop0): setting nodatacow, compression disabled [ 1193.295326][T11153] BTRFS info (device loop0): not using ssd optimizations [ 1193.322886][T11153] BTRFS info (device loop0): not using spread ssd allocation scheme [ 1193.346642][T11153] BTRFS info (device loop0): using free space tree [ 1193.414198][T11153] BTRFS info (device loop0): has skinny extents [ 1193.443948][T28438] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1193.455355][T28438] r8152-cfgselector 2-1: bad CDC descriptors [ 1193.531993][T28438] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1193.569956][T28438] r8152-cfgselector 2-1: USB disconnect, device number 103 [ 1193.676476][T11153] BTRFS info (device loop0): clearing free space tree [ 1193.683356][T11153] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1193.723284][T11153] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1193.758237][T11153] BTRFS info (device loop0): creating free space tree [ 1193.776450][T11153] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1193.806061][T11153] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1193.883843][ T26] audit: type=1800 audit(525736.384:69): pid=11153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.18124" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 1193.906016][T28439] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1193.925794][T11153] BTRFS info (device loop0): balance: start -sconvert=raid0,usage=0..9 [ 1193.964804][T11153] BTRFS info (device loop0): balance: ended with status: 0 [ 1194.193145][T28439] usb 3-1: Using ep0 maxpacket: 32 [ 1194.355855][T28439] usb 3-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00 [ 1194.390478][T11213] loop3: detected capacity change from 0 to 512 [ 1194.397016][T28439] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.429404][T28439] usb 3-1: config 0 descriptor?? [ 1194.718668][T11213] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,,errors=continue. Quota mode: writeback. [ 1194.852393][T11213] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #2: comm syz.3.18143: corrupted inode contents [ 1194.926589][T11213] EXT4-fs error (device loop3): ext4_dirty_inode:6077: inode #2: comm syz.3.18143: mark_inode_dirty error [ 1194.942763][T28439] wacom 0003:056A:0003.0019: unknown main item tag 0x6 [ 1194.960498][T28439] wacom 0003:056A:0003.0019: Unknown device_type for 'HID 056a:0003'. Assuming pen. [ 1194.990836][T11213] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #2: comm syz.3.18143: corrupted inode contents [ 1195.035633][T28439] wacom 0003:056A:0003.0019: hidraw0: USB HID vf0.00 Device [HID 056a:0003] on usb-dummy_hcd.2-1/input0 [ 1195.067468][T11221] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #2: comm syz.3.18143: corrupted inode contents [ 1195.086778][T28439] input: Wacom Cintiq Partner Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0003.0019/input/input81 [ 1195.127918][T11221] EXT4-fs error (device loop3): ext4_dirty_inode:6077: inode #2: comm syz.3.18143: mark_inode_dirty error [ 1195.200699][T11221] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #2: comm syz.3.18143: corrupted inode contents [ 1195.270963][T28439] usb 3-1: USB disconnect, device number 91 [ 1195.389882][T11222] fido_id[11222]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1196.056461][T11236] netlink: 'syz.0.18149': attribute type 10 has an invalid length. [ 1196.226437][T11241] loop3: detected capacity change from 0 to 2048 [ 1196.263520][T11244] loop2: detected capacity change from 0 to 16 [ 1196.308557][T11241] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1196.354015][T11248] loop0: detected capacity change from 0 to 1024 [ 1196.419568][T11244] erofs: (device loop2): mounted with root inode @ nid 36. [ 1196.581114][T11248] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1196.755597][T11254] loop3: detected capacity change from 0 to 2048 [ 1196.869238][T32254] loop3: p4 < > [ 1196.913147][T11254] loop3: p4 < > [ 1197.052913][T11261] loop2: detected capacity change from 0 to 256 [ 1197.236859][T32254] udevd[32254]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 1197.293448][T11261] FAT-fs (loop2): Directory bread(block 64) failed [ 1197.325352][T11261] FAT-fs (loop2): Directory bread(block 65) failed [ 1197.332055][T11261] FAT-fs (loop2): Directory bread(block 66) failed [ 1197.356786][T32254] udevd[32254]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 1197.425327][T11261] FAT-fs (loop2): Directory bread(block 67) failed [ 1197.460829][T11265] loop0: detected capacity change from 0 to 2048 [ 1197.467483][T11261] FAT-fs (loop2): Directory bread(block 68) failed [ 1197.474055][T11261] FAT-fs (loop2): Directory bread(block 69) failed [ 1197.531492][T11261] FAT-fs (loop2): Directory bread(block 70) failed [ 1197.551524][T11261] FAT-fs (loop2): Directory bread(block 71) failed [ 1197.572390][T11247] loop4: detected capacity change from 0 to 32768 [ 1197.586111][T11261] FAT-fs (loop2): Directory bread(block 72) failed [ 1197.616065][T11261] FAT-fs (loop2): Directory bread(block 73) failed [ 1197.640929][T11265] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1197.687495][T11247] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.18154 (11247) [ 1197.703194][T11265] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1197.725860][T28438] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1197.784673][T11247] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1197.806180][T11261] attempt to access beyond end of device [ 1197.806180][T11261] loop2: rw=2051, want=1768, limit=256 [ 1197.830441][T11247] BTRFS info (device loop4): setting nodatasum [ 1197.860853][T11247] BTRFS info (device loop4): force zlib compression, level 3 [ 1197.905325][T11247] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1197.945914][T11247] BTRFS info (device loop4): use lzo compression, level 0 [ 1197.953360][T11247] BTRFS info (device loop4): turning on flush-on-commit [ 1198.055327][T28438] usb 4-1: Using ep0 maxpacket: 16 [ 1198.062936][T11247] BTRFS info (device loop4): enabling auto defrag [ 1198.103887][T11247] BTRFS info (device loop4): max_inline at 4096 [ 1198.127908][T11272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18161'. [ 1198.147226][T11247] BTRFS info (device loop4): using free space tree [ 1198.153822][T11247] BTRFS info (device loop4): has skinny extents [ 1198.239224][T28438] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1198.293061][T28438] usb 4-1: New USB device found, idVendor=056a, idProduct=032f, bcdDevice= 0.00 [ 1198.349950][T28438] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1198.406679][T28438] usb 4-1: config 0 descriptor?? [ 1198.476593][T11292] netlink: 56 bytes leftover after parsing attributes in process `syz.0.18163'. [ 1198.511074][T11247] BTRFS info (device loop4): enabling ssd optimizations [ 1198.528426][T11292] IPVS: stopping backup sync thread 9394 ... [ 1198.973878][T28438] wacom 0003:056A:032F.001A: unknown main item tag 0x7 [ 1199.005283][T28438] wacom 0003:056A:032F.001A: unknown main item tag 0x0 [ 1199.046261][T28438] wacom 0003:056A:032F.001A: unknown main item tag 0x1 [ 1199.076410][T28438] wacom 0003:056A:032F.001A: unknown main item tag 0xd [ 1199.124283][T28438] wacom 0003:056A:032F.001A: hidraw0: USB HID v0.09 Device [HID 056a:032f] on usb-dummy_hcd.3-1/input0 [ 1199.846264][T28434] usb 4-1: USB disconnect, device number 90 [ 1199.855830][T11316] netlink: 104 bytes leftover after parsing attributes in process `syz.3.18177'. [ 1199.923161][T11319] loop4: detected capacity change from 0 to 128 [ 1200.025961][T11320] loop2: detected capacity change from 0 to 2048 [ 1200.120558][T11320] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 1200.220949][T11320] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1200.288921][T11309] loop0: detected capacity change from 0 to 32768 [ 1200.530892][T11309] XFS (loop0): Mounting V5 Filesystem [ 1200.561788][T11341] netlink: 'syz.3.18184': attribute type 2 has an invalid length. [ 1200.695806][T11309] XFS (loop0): Ending clean mount [ 1201.001531][ T4193] XFS (loop0): Unmounting Filesystem [ 1201.454288][T11376] netlink: 96 bytes leftover after parsing attributes in process `syz.3.18201'. [ 1203.069772][T11441] loop4: detected capacity change from 0 to 128 [ 1203.217336][T11449] trusted_key: encrypted_key: key trusted:syz not found [ 1203.426072][T26379] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1203.676706][T11461] loop2: detected capacity change from 0 to 512 [ 1203.685572][T28434] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1203.746192][T26379] usb 1-1: Using ep0 maxpacket: 32 [ 1203.751493][T11441] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1203.771726][T11461] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1203.795359][T11441] hpfs: filesystem error: improperly stopped [ 1203.801583][T11441] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1203.852265][T11441] hpfs: You really don't want any checks? You are crazy... [ 1203.880713][T11461] EXT4-fs (loop2): 1 truncate cleaned up [ 1203.895322][T11461] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,errors=remount-ro,nombcache,. Quota mode: none. [ 1203.925708][T11441] hpfs: hpfs_map_sector(): read error [ 1203.940906][T26379] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1203.965287][T26379] usb 1-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 1204.005011][T11441] hpfs: code page support is disabled [ 1204.015281][T11441] hpfs: hpfs_map_4sectors(): unaligned read [ 1204.021282][T11441] hpfs: hpfs_map_4sectors(): unaligned read [ 1204.028082][T26379] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.069388][T26379] usb 1-1: config 0 descriptor?? [ 1204.079482][T11441] hpfs: filesystem error: unable to find root dir [ 1204.143283][T11470] loop3: detected capacity change from 0 to 128 [ 1204.160971][T28434] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 1204.186808][T28434] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1204.225959][T28434] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1204.255262][T28434] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 1204.288615][T28434] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 1204.304511][T28434] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.312976][T11470] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1204.345013][T11470] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1204.362505][T28434] usb 2-1: config 0 descriptor?? [ 1204.538025][T11474] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 1204.549198][T26379] logitech 0003:046D:C295.001B: unknown main item tag 0x6 [ 1204.562027][T26379] logitech 0003:046D:C295.001B: ignoring exceeding usage max [ 1204.574861][T11474] ALSA: mixer_oss: invalid index 1374389 [ 1204.611902][T26379] logitech 0003:046D:C295.001B: hidraw0: USB HID v0.81 Device [HID 046d:c295] on usb-dummy_hcd.0-1/input0 [ 1204.684426][T26379] logitech 0003:046D:C295.001B: no inputs found [ 1204.775698][T26379] usb 1-1: USB disconnect, device number 96 [ 1204.848445][T28434] holtek_kbd 0003:04D9:A055.001C: unbalanced collection at end of report description [ 1204.905733][T28434] holtek_kbd: probe of 0003:04D9:A055.001C failed with error -22 [ 1204.992749][T11487] tipc: Enabling not permitted [ 1205.029479][T11487] tipc: Enabling of bearer rejected, failed to enable media [ 1205.058250][T28434] usb 2-1: USB disconnect, device number 104 [ 1205.128610][T11488] fido_id[11488]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1206.242651][T11489] loop4: detected capacity change from 0 to 32768 [ 1206.559678][T11493] loop2: detected capacity change from 0 to 32768 [ 1206.691293][T11495] loop3: detected capacity change from 0 to 32768 [ 1206.743155][T11493] XFS (loop2): Mounting V5 Filesystem [ 1206.912878][T28434] kernel read not supported for file /dsp (pid: 28434 comm: kworker/0:14) [ 1206.955182][T11520] loop4: detected capacity change from 0 to 4096 [ 1206.984869][T11495] XFS (loop3): Mounting V5 Filesystem [ 1206.992049][T11493] XFS (loop2): Ending clean mount [ 1207.070076][ T26] audit: type=1800 audit(525749.574:70): pid=11493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.18250" name="file1" dev="loop2" ino=6150 res=0 errno=0 [ 1207.108140][T11520] NILFS (loop4): invalid segment: Checksum error in segment payload [ 1207.135584][T11495] XFS (loop3): Ending clean mount [ 1207.155497][T11495] XFS (loop3): Quotacheck needed: Please wait. [ 1207.161837][T11520] NILFS (loop4): trying rollback from an earlier position [ 1207.249001][T11542] loop0: detected capacity change from 0 to 128 [ 1207.260469][ T4190] XFS (loop2): Unmounting Filesystem [ 1207.286874][T11520] NILFS (loop4): recovery complete [ 1207.306721][T11545] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1207.430435][T11520] IPv6: addrconf: prefix option has invalid lifetime [ 1207.472444][T11542] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1207.527527][T11520] IPv6: addrconf: prefix option has invalid lifetime [ 1207.615704][T11495] XFS (loop3): Quotacheck: Done. [ 1207.875176][T11552] loop4: detected capacity change from 0 to 64 [ 1207.882047][T11553] loop0: detected capacity change from 0 to 512 [ 1207.940314][ T4195] XFS (loop3): Unmounting Filesystem [ 1208.236534][T11553] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.18271: bg 0: block 5: invalid block bitmap [ 1208.345597][T11553] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 1208.379269][T11553] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.18271: invalid indirect mapped block 3 (level 2) [ 1208.425608][T11563] ip_tables: iptables: counters copy to user failed while replacing table [ 1208.496807][T11553] EXT4-fs (loop0): 1 orphan inode deleted [ 1208.502597][T11553] EXT4-fs (loop0): 1 truncate cleaned up [ 1208.595315][T11553] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 1208.667875][T11567] loop4: detected capacity change from 0 to 136 [ 1208.766787][T11567] Attempt to read inode for relocated directory [ 1209.091311][T11577] usb usb8: usbfs: process 11577 (syz.4.18281) did not claim interface 0 before use [ 1209.704511][T11593] loop4: detected capacity change from 0 to 16 [ 1209.914274][T11593] erofs: (device loop4): mounted with root inode @ nid 36. [ 1210.138472][T27121] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1210.311576][T11575] loop0: detected capacity change from 0 to 32768 [ 1210.529374][T11575] XFS (loop0): Mounting V5 Filesystem [ 1210.605676][T27121] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1210.631596][T27121] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1210.699694][T27121] usb 4-1: config 0 descriptor?? [ 1210.778864][T27121] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1210.805715][T11575] XFS (loop0): Ending clean mount [ 1210.944048][ T4193] XFS (loop0): Unmounting Filesystem [ 1211.044527][T11597] loop2: detected capacity change from 0 to 32768 [ 1211.235003][T27121] gspca_sunplus: reg_w_riv err -71 [ 1211.240337][T26379] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1211.248882][T27121] sunplus: probe of 4-1:0.0 failed with error -71 [ 1211.263124][T11597] XFS (loop2): Mounting V5 Filesystem [ 1211.276370][T27121] usb 4-1: USB disconnect, device number 91 [ 1211.378611][T11597] XFS (loop2): Ending clean mount [ 1211.529352][ T4190] XFS (loop2): Unmounting Filesystem [ 1211.535485][T26379] usb 2-1: Using ep0 maxpacket: 16 [ 1211.727555][T26379] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1211.765310][T26379] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1211.815303][T26379] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1211.863676][T26379] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1211.903121][T26379] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1211.961736][T26379] usb 2-1: config 0 descriptor?? [ 1212.173216][T11635] device dummy0 entered promiscuous mode [ 1212.448115][T27121] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1212.506523][T26379] microsoft 0003:045E:07DA.001D: ignoring exceeding usage max [ 1212.546979][T26379] microsoft 0003:045E:07DA.001D: ignoring exceeding usage max [ 1212.598786][T26379] microsoft 0003:045E:07DA.001D: No inputs registered, leaving [ 1212.634812][T26379] microsoft 0003:045E:07DA.001D: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1212.695268][T26379] microsoft 0003:045E:07DA.001D: no inputs found [ 1212.719027][T26379] microsoft 0003:045E:07DA.001D: could not initialize ff, continuing anyway [ 1212.775631][T26379] usb 2-1: USB disconnect, device number 105 [ 1212.850049][T11647] loop3: detected capacity change from 0 to 4096 [ 1212.895502][T11650] fido_id[11650]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1212.902686][T11652] netlink: 'syz.2.18309': attribute type 1 has an invalid length. [ 1212.946270][T27121] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1212.958321][T11652] netlink: 128 bytes leftover after parsing attributes in process `syz.2.18309'. [ 1212.975281][T27121] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1213.015273][T27121] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1213.044634][T27121] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1213.104889][T11634] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1213.112365][T11647] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1213.282469][T11656] loop2: detected capacity change from 0 to 4096 [ 1213.525426][T11666] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1213.683542][T11672] Zero length message leads to an empty skb [ 1213.689785][T11671] loop3: detected capacity change from 0 to 512 [ 1213.773965][T26379] usb 1-1: USB disconnect, device number 97 [ 1213.810956][ T26] audit: type=1326 audit(525756.314:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11675 comm="syz.1.18319" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c7d7460d9 code=0x0 [ 1213.882152][T11671] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.18316: invalid block [ 1213.982175][T11671] EXT4-fs (loop3): Remounting filesystem read-only [ 1214.005580][T11671] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.18316: invalid indirect mapped block 4294967295 (level 1) [ 1214.061621][T11671] EXT4-fs (loop3): Remounting filesystem read-only [ 1214.086217][T11671] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.18316: invalid indirect mapped block 4294967295 (level 1) [ 1214.138347][T11671] EXT4-fs (loop3): Remounting filesystem read-only [ 1214.163105][T11671] EXT4-fs (loop3): 2 truncates cleaned up [ 1214.195548][T11671] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,init_itable=0x0000000000004004,barrier=0x0000000000000005,. Quota mode: writeback. [ 1214.325775][T11671] EXT4-fs error (device loop3): ext4_get_parent:1906: inode #11: comm syz.3.18316: bad parent inode number: 3 [ 1214.401462][T11671] EXT4-fs (loop3): Remounting filesystem read-only [ 1214.713946][T26379] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1214.742404][T11696] loop3: detected capacity change from 0 to 4096 [ 1214.841276][T11702] sp0: Synchronizing with TNC [ 1214.955559][T11696] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1215.094752][T11696] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 1215.178106][T26379] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1215.202137][T26379] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1215.269641][T26379] usb 3-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 1215.325472][T26379] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1215.362618][T26379] usb 3-1: config 0 descriptor?? [ 1215.894992][T26379] input: Retrode SNES Mouse as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0403:97C1.001E/input/input87 [ 1215.990848][T11721] loop3: detected capacity change from 0 to 64 [ 1216.027912][T26379] hid-retrode 0003:0403:97C1.001E: input,hidraw0: USB HID v0.00 Joystick [HID 0403:97c1] on usb-dummy_hcd.2-1/input0 [ 1216.110365][T26379] usb 3-1: USB disconnect, device number 92 [ 1216.283155][T11726] loop0: detected capacity change from 0 to 16 [ 1216.355403][T11726] erofs: (device loop0): mounted with root inode @ nid 36. [ 1216.429544][T11726] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 1216.466050][T11726] erofs: (device loop0): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 1216.525602][T11726] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 1216.539698][T11727] fido_id[11727]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1216.580719][T11726] erofs: (device loop0): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 1216.624241][T11726] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 1216.669061][T11732] loop3: detected capacity change from 0 to 2048 [ 1216.705336][T11726] erofs: (device loop0): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 1216.748727][T11726] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 1216.764866][T11734] loop2: detected capacity change from 0 to 512 [ 1216.791512][T11726] erofs: (device loop0): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 1216.819936][T11732] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1216.839213][T11726] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 1216.879675][T11734] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1216.930932][T11726] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 1216.942487][T11734] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1216.984597][ T26] audit: type=1800 audit(525759.484:72): pid=11726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.18341" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 1217.061791][T11734] EXT4-fs (loop2): 1 truncate cleaned up [ 1217.095352][T11734] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,bsdgroups,inode_readahead_blks=0x0000000000100000,,errors=continue. Quota mode: none. [ 1217.119070][ C0] vkms_vblank_simulate: vblank timer overrun [ 1218.555515][T11786] netlink: 'syz.0.18367': attribute type 5 has an invalid length. [ 1218.883355][T11788] loop4: detected capacity change from 0 to 8192 [ 1219.125790][T11788] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 1219.175383][T11788] REISERFS (device loop4): using ordered data mode [ 1219.241336][T11788] reiserfs: using flush barriers [ 1219.281969][T11763] loop3: detected capacity change from 0 to 32768 [ 1219.305376][T11788] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1219.387745][T11788] REISERFS (device loop4): checking transaction log (loop4) [ 1219.501508][T11763] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.18357 (11763) [ 1219.585754][T11763] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1219.594567][T11763] BTRFS info (device loop3): setting nodatasum [ 1219.651868][T11763] BTRFS info (device loop3): force zlib compression, level 3 [ 1219.695331][T11763] BTRFS info (device loop3): metadata ratio 1 [ 1219.701599][T11763] BTRFS info (device loop3): turning on flush-on-commit [ 1219.716739][T27121] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1219.753056][T11788] REISERFS (device loop4): Using tea hash to sort names [ 1219.780566][T11763] BTRFS info (device loop3): allowing degraded mounts [ 1219.790933][T11788] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 1219.825305][T11763] BTRFS info (device loop3): using free space tree [ 1219.871347][T11763] BTRFS info (device loop3): has skinny extents [ 1220.057111][ T26] audit: type=1800 audit(525762.564:73): pid=11788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.18368" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 1220.209340][T11794] loop0: detected capacity change from 0 to 32768 [ 1220.216236][T11763] BTRFS info (device loop3): enabling ssd optimizations [ 1220.225558][T27121] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1220.271598][T27121] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1220.334845][T27121] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1220.368472][T27121] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1220.411740][T27121] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1220.433042][T11794] XFS (loop0): Mounting V5 Filesystem [ 1220.456735][T27121] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.635657][T11794] XFS (loop0): Ending clean mount [ 1220.786733][ T4193] XFS (loop0): Unmounting Filesystem [ 1220.838229][T11763] BTRFS warning (device loop3): failed to trim 1 device(s), last error -512 [ 1221.216110][T27121] gud 3-1:1.0: Failed to get properties (error=-71) [ 1221.222844][T27121] gud: probe of 3-1:1.0 failed with error -71 [ 1221.305291][T27121] usb 3-1: USB disconnect, device number 93 [ 1221.545022][T11878] IPv6: addrconf: prefix option has invalid lifetime [ 1221.576961][T11878] IPv6: addrconf: prefix option has invalid lifetime [ 1221.837011][T11886] overlayfs: unrecognized mount option "\']*=°¢°­ô[\1\@" or missing value [ 1222.228020][T11896] netlink: 64 bytes leftover after parsing attributes in process `syz.2.18396'. [ 1222.713559][T11916] netlink: 'syz.3.18405': attribute type 12 has an invalid length. [ 1223.289995][T11940] loop4: detected capacity change from 0 to 256 [ 1223.339472][T11940] exfat: Deprecated parameter 'utf8' [ 1223.384160][T11940] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 1223.454245][T11940] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5f1fc80d, utbl_chksum : 0xe619d30d) [ 1223.848287][T11957] iwpm_parse_nlmsg: Invalid attribute (msg type Register Pid response ret = -22) [ 1224.003856][T11964] netlink: 'syz.0.18428': attribute type 3 has an invalid length. [ 1224.080326][T11964] netlink: 'syz.0.18428': attribute type 3 has an invalid length. [ 1224.125280][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 1224.135057][T11964] netlink: 'syz.0.18428': attribute type 3 has an invalid length. [ 1224.166048][T11964] netlink: 'syz.0.18428': attribute type 3 has an invalid length. [ 1224.212316][T11964] netlink: 'syz.0.18428': attribute type 3 has an invalid length. [ 1224.251861][T11964] netlink: 'syz.0.18428': attribute type 3 has an invalid length. [ 1224.293457][T11964] netlink: 'syz.0.18428': attribute type 3 has an invalid length. [ 1224.332780][T11964] netlink: 'syz.0.18428': attribute type 3 has an invalid length. [ 1224.368217][T11976] netlink: 100 bytes leftover after parsing attributes in process `syz.3.18434'. [ 1224.382276][T11964] netlink: 'syz.0.18428': attribute type 3 has an invalid length. [ 1224.412622][T11964] netlink: 'syz.0.18428': attribute type 3 has an invalid length. [ 1224.525264][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 1224.555261][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 1224.565262][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 1224.939932][T27121] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1224.966925][T11992] loop4: detected capacity change from 0 to 64 [ 1225.050294][T11992] hfs: unable to locate alternate MDB [ 1225.055837][T11992] hfs: continuing without an alternate MDB [ 1225.335259][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 1225.345298][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 1225.486972][T27121] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1225.517499][T27121] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1225.611481][T27121] usb 4-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 1225.672114][T27121] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1225.822897][T11974] loop2: detected capacity change from 0 to 40427 [ 1225.924374][T11974] F2FS-fs (loop2): invalid crc value [ 1226.019158][T11974] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1226.031070][T27121] ttusb_dec_init_stb: unknown model returned by firmware (00070000) - please report [ 1226.061109][T27121] ttusb-dec: probe of 4-1:1.0 failed with error -2 [ 1226.083390][T12023] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1226.223915][ T6648] usb 4-1: USB disconnect, device number 92 [ 1226.257907][T11974] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 1226.269344][T28437] usb 2-1: new full-speed USB device number 106 using dummy_hcd [ 1226.335322][T11974] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 1226.545900][T12004] loop0: detected capacity change from 0 to 32768 [ 1226.710503][T12004] JBD2: Ignoring recovery information on journal [ 1226.778231][T28437] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 1226.815262][T28437] usb 2-1: config 0 has no interface number 0 [ 1226.855268][T28437] usb 2-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid maxpacket 12592, setting to 64 [ 1226.929008][T12004] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1226.977445][T12037] loop3: detected capacity change from 0 to 2048 [ 1227.158197][ T4193] ocfs2: Unmounting device (7,0) on (node local) [ 1227.185394][T12043] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1227.194512][T28437] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1227.235258][T28437] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.276410][T28437] usb 2-1: Product: syz [ 1227.280765][T28437] usb 2-1: Manufacturer: syz [ 1227.325273][T28437] usb 2-1: SerialNumber: syz [ 1227.386405][T28437] usb 2-1: config 0 descriptor?? [ 1227.417802][T12047] tipc: Enabling of bearer rejected, failed to enable media [ 1227.436014][T12017] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1227.698852][T28437] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 1227.726361][T28437] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 1227.784924][T28437] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 1227.833806][T12052] loop3: detected capacity change from 0 to 4096 [ 1227.844133][T28437] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 1227.893020][T28437] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1227.961995][T28437] usb 2-1: USB disconnect, device number 106 [ 1227.990102][T28437] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1228.032020][T12052] NILFS (loop3): invalid segment: Checksum error in segment payload [ 1228.065715][T28437] keyspan 2-1:0.133: device disconnected [ 1228.084661][T12052] NILFS (loop3): trying rollback from an earlier position [ 1228.149798][T12052] NILFS (loop3): recovery complete [ 1228.234653][T12073] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1228.307832][T12052] NILFS (loop3): Segment number 1023 to be freed is out of range [ 1228.715846][T12087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18483'. [ 1228.775467][T12087] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18483'. [ 1229.147351][T12101] loop2: detected capacity change from 0 to 64 [ 1229.657467][T12077] binder: 12074:12077 ioctl c018620c 200000000240 returned -22 [ 1230.563064][T12123] loop2: detected capacity change from 0 to 131072 [ 1230.675495][T12123] F2FS-fs (loop2): invalid crc value [ 1230.702636][T12123] F2FS-fs (loop2): Current segment's next free block offset is inconsistent with bitmap, logtype:2, segno:0, type:0, next_blkoff:0, blkofs:1 [ 1230.717139][T12123] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 1230.777633][T12125] loop4: detected capacity change from 0 to 512 [ 1230.883998][T12098] loop3: detected capacity change from 0 to 32768 [ 1231.020095][T12098] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.18490 (12098) [ 1231.035920][T12125] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 1231.247487][T12141] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1231.274729][T12098] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1231.297157][T12098] BTRFS info (device loop3): using free space tree [ 1231.335294][T12098] BTRFS info (device loop3): has skinny extents [ 1231.645420][T12098] BTRFS info (device loop3): enabling ssd optimizations [ 1231.858916][T12177] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 1232.171869][ T4178] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 10 /dev/loop3 scanned by udevd (4178) [ 1232.530143][T12186] loop2: detected capacity change from 0 to 4096 [ 1232.657695][T12186] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 1232.657739][T12186] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1232.657795][T12186] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1232.658787][T12186] ntfs: volume version 3.1. [ 1232.688428][T12186] ntfs: (device loop2): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 1232.688463][T12186] ntfs: (device loop2): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 1232.688524][T12186] ntfs: (device loop2): load_and_init_quota(): Failed to load $Quota/$Q index. [ 1232.688541][T12186] ntfs: (device loop2): load_system_files(): Failed to load $Quota. Mounting read-only. Run chkdsk. [ 1232.696901][T12186] ntfs: (device loop2): ntfs_read_locked_inode(): Inode is an extent inode! [ 1232.697000][T12186] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x44 as bad. Run chkdsk. [ 1233.377622][T12196] loop3: detected capacity change from 0 to 16 [ 1233.514205][T12196] erofs: (device loop3): mounted with root inode @ nid 36. [ 1233.621841][T12198] loop2: detected capacity change from 0 to 1764 [ 1233.909471][T12192] loop0: detected capacity change from 0 to 32768 [ 1233.986315][T12205] netlink: 7 bytes leftover after parsing attributes in process `syz.2.18528'. [ 1234.195979][T12192] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1234.320954][T12192] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has an invalid bg_blkno of 4294901792 [ 1234.444379][T12192] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1234.515335][T12192] OCFS2: File system is now read-only. [ 1234.575332][T12192] (syz.0.18523,12192,0):ocfs2_trim_mainbm:7603 ERROR: status = -30 [ 1234.828682][ T4193] ocfs2: Unmounting device (7,0) on (node local) [ 1235.644409][T12211] loop4: detected capacity change from 0 to 40427 [ 1235.954056][T12211] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 1235.995300][T12211] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 1236.052348][T12211] F2FS-fs (loop4): invalid crc value [ 1236.234563][T12211] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 1236.616980][T12211] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 1236.624081][T12211] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1236.737297][T12219] loop3: detected capacity change from 0 to 32768 [ 1236.755739][T12225] loop0: detected capacity change from 0 to 32768 [ 1236.864563][T12219] JBD2: Ignoring recovery information on journal [ 1236.879416][T12243] netlink: 277 bytes leftover after parsing attributes in process `syz.1.18542'. [ 1236.947051][ T1336] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1236.990202][T12225] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1237.161885][T12219] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1237.268170][ T1336] usb 3-1: Using ep0 maxpacket: 8 [ 1237.276831][ T4193] ocfs2: Unmounting device (7,0) on (node local) [ 1237.451647][ T1336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 1237.493305][ T1336] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1237.560674][ T1336] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 1237.629383][ T1336] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.666911][ T4195] ocfs2: Unmounting device (7,3) on (node local) [ 1237.678953][ T1336] usb 3-1: config 0 descriptor?? [ 1237.806547][T12259] loop0: detected capacity change from 0 to 256 [ 1237.977413][T12259] FAT-fs (loop0): Directory bread(block 64) failed [ 1238.024563][T12259] FAT-fs (loop0): Directory bread(block 65) failed [ 1238.065021][T12259] FAT-fs (loop0): Directory bread(block 66) failed [ 1238.095310][T12259] FAT-fs (loop0): Directory bread(block 67) failed [ 1238.102720][T12259] FAT-fs (loop0): Directory bread(block 68) failed [ 1238.170371][T12259] FAT-fs (loop0): Directory bread(block 69) failed [ 1238.190310][ T1336] input: HID 054c:03d5 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:03D5.001F/input/input90 [ 1238.228650][T12259] FAT-fs (loop0): Directory bread(block 70) failed [ 1238.266020][T12259] FAT-fs (loop0): Directory bread(block 71) failed [ 1238.297977][T12259] FAT-fs (loop0): Directory bread(block 72) failed [ 1238.327941][T12259] FAT-fs (loop0): Directory bread(block 73) failed [ 1238.358318][ T1336] sony 0003:054C:03D5.001F: input,hidraw0: USB HID v0.be Joystick [HID 054c:03d5] on usb-dummy_hcd.2-1/input0 [ 1238.425766][ T1336] usb 3-1: USB disconnect, device number 94 [ 1238.649877][T12269] fido_id[12269]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1238.698979][T12272] nbd: must specify a size in bytes for the device [ 1238.906592][T12276] siw: device registration error -23 [ 1239.323223][T12290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18562'. [ 1239.395502][T12290] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18562'. [ 1239.405298][T12293] UBIFS error (pid: 12293): cannot open "upperdir=./file1,", error -22 [ 1239.455395][T12290] validate_nla: 76 callbacks suppressed [ 1239.455423][T12290] netlink: 'syz.4.18562': attribute type 14 has an invalid length. [ 1239.593221][T12290] netlink: 'syz.4.18562': attribute type 12 has an invalid length. [ 1240.292154][T12284] loop2: detected capacity change from 0 to 32768 [ 1240.539704][T12291] loop0: detected capacity change from 0 to 32768 [ 1240.655143][T12284] JBD2: Ignoring recovery information on journal [ 1240.668309][T12291] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.18561 (12291) [ 1240.778606][T12291] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1240.846292][T12291] BTRFS info (device loop0): using free space tree [ 1240.852875][T12291] BTRFS info (device loop0): has skinny extents [ 1240.886802][T12284] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1241.187081][ T4190] ocfs2: Unmounting device (7,2) on (node local) [ 1241.274481][T12291] BTRFS info (device loop0): enabling ssd optimizations [ 1241.441978][T12306] loop4: detected capacity change from 0 to 32768 [ 1241.897616][T12306] XFS (loop4): Mounting V5 Filesystem [ 1241.929024][T12339] loop2: detected capacity change from 0 to 256 [ 1242.033890][T12339] exfat: Deprecated parameter 'utf8' [ 1242.040114][T12306] XFS (loop4): Ending clean mount [ 1242.045926][T12339] exfat: Deprecated parameter 'utf8' [ 1242.139667][T12339] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 1242.309765][T12346] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1242.412813][T12349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18576'. [ 1242.465185][T12349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18576'. [ 1242.493307][T12349] netlink: 'syz.1.18576': attribute type 14 has an invalid length. [ 1242.532767][T12351] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 1242.545459][T12349] netlink: 'syz.1.18576': attribute type 12 has an invalid length. [ 1242.677622][ T4197] XFS (loop4): Unmounting Filesystem [ 1243.237465][T12372] loop0: detected capacity change from 0 to 1024 [ 1243.270790][T27121] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1243.393609][T12372] hfsplus: request for non-existent node 33423360 in B*Tree [ 1243.449783][T12372] hfsplus: request for non-existent node 33423360 in B*Tree [ 1243.707771][T27121] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1243.736180][T27121] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1243.790502][T27121] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1243.847539][T27121] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1243.901443][T27121] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1243.954051][T27121] usb 2-1: config 0 descriptor?? [ 1244.038267][T27121] hdpvr 2-1:0.0: Could not find bulk-in endpoint [ 1244.058927][T27121] hdpvr: probe of 2-1:0.0 failed with error -12 [ 1244.119872][T12398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18598'. [ 1244.275574][T27121] usb 2-1: USB disconnect, device number 107 [ 1244.519413][T12412] netlink: 20 bytes leftover after parsing attributes in process `syz.4.18605'. [ 1244.660430][ T1336] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1244.827766][T12424] netlink: 'syz.4.18611': attribute type 6 has an invalid length. [ 1244.956082][T27121] ------------[ cut here ]------------ [ 1244.985291][T27121] WARNING: CPU: 0 PID: 27121 at net/netfilter/nft_set_pipapo.c:2297 nft_pipapo_destroy+0x8b0/0x960 [ 1244.997005][ T1336] usb 3-1: Using ep0 maxpacket: 8 [ 1245.046731][T27121] Modules linked in: [ 1245.065846][T27121] CPU: 0 PID: 27121 Comm: kworker/0:8 Not tainted syzkaller #0 [ 1245.114253][T27121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1245.155298][T27121] Workqueue: events nf_tables_trans_destroy_work [ 1245.162445][T27121] RIP: 0010:nft_pipapo_destroy+0x8b0/0x960 [ 1245.169132][ T1336] usb 3-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1245.202696][ T1336] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1245.222349][T27121] Code: 24 80 3c 18 00 74 08 4c 89 f7 e8 bb d0 81 f9 49 c7 06 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 60 ad 3c f9 <0f> 0b e9 ad f7 ff ff 48 c7 c1 f0 0f 8b 8d 80 e1 07 80 c1 03 38 c1 [ 1245.242258][ T1336] usb 3-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 1245.272457][ T1336] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1245.311520][T27121] RSP: 0000:ffffc9000330fa68 EFLAGS: 00010293 [ 1245.318864][ T1336] usb 3-1: config 0 descriptor?? [ 1245.334327][T27121] RAX: ffffffff883c4f50 RBX: ffff8880618fc8f0 RCX: ffff888021af9dc0 [ 1245.362648][T27121] RDX: 0000000000000000 RSI: ffff8880618fc800 RDI: ffff88805e58c528 [ 1245.391126][T27121] RBP: ffffc9000330fc30 R08: ffff888021af9dc0 R09: 0000000000000008 [ 1245.421322][T27121] R10: 0000000000000018 R11: 0000000000000000 R12: ffff8880618fc8c0 [ 1245.451508][T27121] R13: dffffc0000000000 R14: ffff8880618fc910 R15: dffffc0000000000 [ 1245.481719][T27121] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 1245.521023][T27121] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1245.531087][T27121] CR2: 00007f041ed267c0 CR3: 000000006498d000 CR4: 00000000003506f0 [ 1245.561354][T27121] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1245.599956][T27121] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1245.620067][T27121] Call Trace: [ 1245.630961][T12420] loop0: detected capacity change from 0 to 32768 [ 1245.637510][T27121] [ 1245.647599][T27121] ? __lock_acquire+0x7b50/0x7b50 [ 1245.657967][T27121] ? do_raw_spin_lock+0x128/0x2f0 [ 1245.673212][T27121] nft_set_destroy+0x488/0xa30 [ 1245.683260][T27121] ? do_raw_spin_unlock+0x11d/0x230 [ 1245.698671][T27121] nf_tables_trans_destroy_work+0xc5d/0xf00 [ 1245.714810][T27121] ? __lock_acquire+0x7b50/0x7b50 [ 1245.724885][T27121] ? nft_object_dump+0x1e0/0x1e0 [ 1245.740616][T27121] ? __schedule+0x11cb/0x4350 [ 1245.752901][T27121] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1245.768768][T27121] process_one_work+0x867/0xff0 [ 1245.791466][T27121] ? worker_detach_from_pool+0x240/0x240 [ 1245.802189][ T1336] logitech 0003:046D:C294.0020: unknown main item tag 0x2 [ 1245.825247][T27121] ? lockdep_hardirqs_off+0x70/0x100 [ 1245.830962][ T1336] logitech 0003:046D:C294.0020: unknown main item tag 0x0 [ 1245.855251][T27121] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1245.860363][T27121] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1245.875121][ T1336] logitech 0003:046D:C294.0020: unknown main item tag 0x0 [ 1245.892864][ T1336] logitech 0003:046D:C294.0020: unknown main item tag 0x0 [ 1245.900157][T27121] ? wq_worker_running+0x97/0x170 [ 1245.925258][T27121] worker_thread+0xad7/0x12a0 [ 1245.935272][ T1336] logitech 0003:046D:C294.0020: unknown main item tag 0x0 [ 1245.952761][T27121] kthread+0x42e/0x520 [ 1245.962954][ T1336] logitech 0003:046D:C294.0020: item fetching failed at offset 24/40 [ 1245.971226][T27121] ? rcu_lock_release+0x20/0x20 [ 1245.995252][T27121] ? kthread_blkcg+0xd0/0xd0 [ 1246.002212][ T1336] logitech 0003:046D:C294.0020: parse failed [ 1246.020211][T27121] ret_from_fork+0x1f/0x30 [ 1246.024924][T27121] [ 1246.028088][ T1336] logitech: probe of 0003:046D:C294.0020 failed with error -22 [ 1246.045269][T27121] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1246.052608][T27121] CPU: 0 PID: 27121 Comm: kworker/0:8 Not tainted syzkaller #0 [ 1246.060214][T27121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1246.070308][T27121] Workqueue: events nf_tables_trans_destroy_work [ 1246.076694][T27121] Call Trace: [ 1246.080007][T27121] [ 1246.082969][T27121] dump_stack_lvl+0x188/0x250 [ 1246.087688][T27121] ? show_regs_print_info+0x20/0x20 [ 1246.093362][T27121] ? load_image+0x410/0x410 [ 1246.097919][T27121] panic+0x2f8/0x850 [ 1246.101856][T27121] ? bpf_jit_dump+0xd0/0xd0 [ 1246.106403][T27121] ? ret_from_fork+0x1f/0x30 [ 1246.111032][T27121] ? nft_pipapo_destroy+0x8b0/0x960 [ 1246.116271][T27121] __warn+0x248/0x2b0 [ 1246.120687][T27121] ? nft_pipapo_destroy+0x8b0/0x960 [ 1246.125939][T27121] report_bug+0x1b9/0x2e0 [ 1246.130412][T27121] handle_bug+0x3a/0x70 [ 1246.134634][T27121] exc_invalid_op+0x16/0x40 [ 1246.139439][T27121] asm_exc_invalid_op+0x16/0x20 [ 1246.144332][T27121] RIP: 0010:nft_pipapo_destroy+0x8b0/0x960 [ 1246.150184][T27121] Code: 24 80 3c 18 00 74 08 4c 89 f7 e8 bb d0 81 f9 49 c7 06 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 60 ad 3c f9 <0f> 0b e9 ad f7 ff ff 48 c7 c1 f0 0f 8b 8d 80 e1 07 80 c1 03 38 c1 [ 1246.169927][T27121] RSP: 0000:ffffc9000330fa68 EFLAGS: 00010293 [ 1246.176039][T27121] RAX: ffffffff883c4f50 RBX: ffff8880618fc8f0 RCX: ffff888021af9dc0 [ 1246.184054][T27121] RDX: 0000000000000000 RSI: ffff8880618fc800 RDI: ffff88805e58c528 [ 1246.192065][T27121] RBP: ffffc9000330fc30 R08: ffff888021af9dc0 R09: 0000000000000008 [ 1246.200080][T27121] R10: 0000000000000018 R11: 0000000000000000 R12: ffff8880618fc8c0 [ 1246.208095][T27121] R13: dffffc0000000000 R14: ffff8880618fc910 R15: dffffc0000000000 [ 1246.216121][T27121] ? nft_pipapo_destroy+0x8b0/0x960 [ 1246.221565][T27121] ? nft_pipapo_destroy+0x8b0/0x960 [ 1246.226841][T27121] ? __lock_acquire+0x7b50/0x7b50 [ 1246.232106][T27121] ? do_raw_spin_lock+0x128/0x2f0 [ 1246.237722][T27121] nft_set_destroy+0x488/0xa30 [ 1246.242527][T27121] ? do_raw_spin_unlock+0x11d/0x230 [ 1246.247769][T27121] nf_tables_trans_destroy_work+0xc5d/0xf00 [ 1246.253704][T27121] ? __lock_acquire+0x7b50/0x7b50 [ 1246.258822][T27121] ? nft_object_dump+0x1e0/0x1e0 [ 1246.263801][T27121] ? __schedule+0x11cb/0x4350 [ 1246.268517][T27121] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1246.273755][T27121] process_one_work+0x867/0xff0 [ 1246.278660][T27121] ? worker_detach_from_pool+0x240/0x240 [ 1246.284337][T27121] ? lockdep_hardirqs_off+0x70/0x100 [ 1246.289699][T27121] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1246.294871][T27121] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1246.300635][T27121] ? wq_worker_running+0x97/0x170 [ 1246.305706][T27121] worker_thread+0xad7/0x12a0 [ 1246.310451][T27121] kthread+0x42e/0x520 [ 1246.314771][T27121] ? rcu_lock_release+0x20/0x20 [ 1246.319660][T27121] ? kthread_blkcg+0xd0/0xd0 [ 1246.324291][T27121] ret_from_fork+0x1f/0x30 [ 1246.328765][T27121] [ 1246.331915][T27121] Kernel Offset: disabled [ 1246.336925][T27121] Rebooting in 86400 seconds..