last executing test programs: 2.03352611s ago: executing program 4 (id=2242): syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f0000000780), 0xfe, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 1.993237367s ago: executing program 2 (id=2244): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newae={0x68, 0x1e, 0x301, 0x709d2a, 0x24dfdbfe, {{@in=@dev={0xac, 0x14, 0x14, 0xf}, 0x4d6, 0xa, 0x2b}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3, 0x3507}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2c, 0x70bd28, 0x70bd2c, 0x70bd27, 0x8}}, @mark={0xc, 0x15, {0x35075d, 0x3}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 1.865998478s ago: executing program 2 (id=2248): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffff0000}]}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0x20}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc0}}, 0x0) 1.843261981s ago: executing program 0 (id=2249): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) 1.721048392s ago: executing program 2 (id=2252): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x801, 0x0, 0x9, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x54}}, 0x0) 1.702289245s ago: executing program 0 (id=2253): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x6}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}}]}]}]}, 0x44}}, 0x0) 1.576447096s ago: executing program 0 (id=2255): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_OKEY={0x8}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x100000}]}}}]}, 0x54}}, 0x20040040) 1.575834646s ago: executing program 2 (id=2256): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x3, 0x0, 0x7, 0x0, 0x20000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0x70}, 0x1, 0x7}, 0x0) 1.356656743s ago: executing program 2 (id=2258): r0 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x1, 0x101000) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000200)=""/27) 1.328403928s ago: executing program 0 (id=2259): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000004c0)={0x1b78, 0x5, 0x4, {0xe, @vbi={0x80000000, 0xf1, 0x5, 0x31435750, [0x4], [0x4, 0xa75], 0x1}}, 0x7fffffff}) 1.19338636s ago: executing program 0 (id=2260): syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f00000000c0)='./bus\x00', 0x2, &(0x7f000009df00)=ANY=[@ANYBLOB="6e6f71756f74612c6e6f696e746567726974792c67727071756f74612c6e6f646973636172642c696f636861727365743d6e6f6e652c6e6f646973636172642c696f636861727365743d63703835322c6e6f71756f74612c6e6f696e746567726974792c008283d279ba81174b20bb6aae5ea52f08eb98834c68ee88ba4a7465fd1dd3744c4dc490a46dd35125b04bc3a264a73f3262"], 0x5, 0x6188, &(0x7f0000004940)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 1.144329988s ago: executing program 3 (id=2261): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000)={0x59, 0x15}, 0x2) 1.140142569s ago: executing program 2 (id=2262): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000088945b406d04b6088eca0000000109021200017f00c0000904"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 1.051481684s ago: executing program 3 (id=2263): prctl$PR_SET_THP_DISABLE(0x29, 0x1) madvise(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0xe) 984.908775ms ago: executing program 3 (id=2265): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000006a000105fefdffffffdbdf250000000000000000080005"], 0x20}, 0x1, 0x0, 0x0, 0x200048c0}, 0x20008000) 910.277878ms ago: executing program 3 (id=2266): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0x40505331, &(0x7f0000000300)={0x80000000}) 835.99401ms ago: executing program 4 (id=2267): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="140000002d000b63d25a00648c2594f90424f3db", 0x14}], 0x1}, 0x4000800) 736.452597ms ago: executing program 3 (id=2269): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x60000, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, 0x0) 662.451589ms ago: executing program 3 (id=2271): syz_mount_image$jfs(&(0x7f0000000240), &(0x7f0000000040)='./file1\x00', 0x1010002, &(0x7f00000002c0)=ANY=[@ANYBLOB='discard,integrity,iocharset=macromanian,errors=continue,iocharset=koi8-ru,errors=remount-ro,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c75737271756f74612c696e746567726974792c6572726f72733d636f6e74696e75652c696f636861727365743d6b6f69382d752c001675d1c4df5e682aee4634c96198b60e3f6f67051b56ce1d5bb36c7851531b48b099d184ef502cb28b0166df950981209fb8dafc7bbfb20a997b27ea27c7063a9beed8867b30a1fade40c68ce98da0cd2303d52f934ca65b6a5a41703c7588003b7e04aa05cb36823bfc602740762eae52293c6eb58127c1260c84c866d1270f85ee0d320c4034e17b8c350f2508441bc7cc6c175c64238d29e2b1aeefe67387"], 0x24, 0x628f, &(0x7f00000065c0)="$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") openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) 619.813966ms ago: executing program 1 (id=2272): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, &(0x7f0000000240), &(0x7f0000000280)=0x30) 496.365527ms ago: executing program 4 (id=2273): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, 0x0, &(0x7f0000000200), 0x2, r0}, 0x38) 495.993907ms ago: executing program 1 (id=2274): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x8, 0x0, 0x3c) 407.868692ms ago: executing program 4 (id=2275): r0 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r0, 0x0, 0x0) 385.801366ms ago: executing program 1 (id=2276): syz_emit_ethernet(0x6a, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x4002, 0x5, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "96597d00c5c0577eec4f99e3a24dd89fb66655d7b05291cb", "af6af5116bf52dbb91d30ae25aab828a961858f6c338a29f34c53e0526788e16"}}}}}}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000180)={@random="e90c610faca2", @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0xfffe, 0x60, 0x0, @gue={{0x2, 0x0, 0x1, 0x7, 0x100}, "7ce565f282eb97e8731a554204d0fc098cfd4dd390ac043dddced31f1fb93323f63c856988f205d20c3170b59735ee349a75c0ccfe5a58bb0d45d525a25fbe4793167e467012e883648afeb586fe8ef7"}}}}}}, 0x0) 244.476969ms ago: executing program 4 (id=2277): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3f9, 0x200, 0x70bd2a, 0x25dfdbfb, {0x1, 0x1}}, 0x18}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 244.189259ms ago: executing program 1 (id=2278): r0 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000001900599c6d0eab070004000523"], 0xfe33) 174.646531ms ago: executing program 1 (id=2279): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000280)={0x0, 0x5, 0x5, &(0x7f00000001c0)={0xfd, "87ee9df500ac0000000000000000000000000000003c8b16e600"}}) 174.478141ms ago: executing program 4 (id=2280): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="140000001000010000000000000001000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b4000000000340004803000018008000100636d7000240002801000038009000100000000fd80000000080001400000041008000240000000000900010073797a30"], 0xd8}}, 0x4000000) 2.41661ms ago: executing program 1 (id=2281): r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000300)={0x1b, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000880}, 0x0) 0s ago: executing program 0 (id=2282): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='::,:/', 0x0) kernel console output (not intermixed with test programs): m 0 to 4096 [ 81.599720][ T4227] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 81.625540][ T4670] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 81.807532][ T4657] loop2: detected capacity change from 0 to 32768 [ 81.859109][ T4670] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 81.954671][ T4695] loop0: detected capacity change from 0 to 764 [ 82.079712][ T4695] Symlink component flag not implemented [ 82.087679][ T4695] Symlink component flag not implemented (122) [ 82.100635][ T4657] XFS (loop2): Mounting V5 Filesystem [ 82.112570][ T4234] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 82.119609][ T4194] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 82.130843][ T4194] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 82.160007][ T4227] usb 4-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=fd.bf [ 82.170221][ T4194] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 82.204543][ T144] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 82.212952][ T4227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.232703][ T4194] ntfs3: loop4: ntfs_evict_inode r=3 failed, -22. [ 82.258916][ T4227] usb 4-1: Product: syz [ 82.263647][ T4227] usb 4-1: Manufacturer: syz [ 82.268310][ T4227] usb 4-1: SerialNumber: syz [ 82.282972][ T4657] XFS (loop2): Ending clean mount [ 82.372535][ T4227] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 82.400796][ T4227] dvb-usb: bulk message failed: -22 (3/0) [ 82.486001][ T4713] netlink: 16 bytes leftover after parsing attributes in process `syz.0.205'. [ 82.495344][ T4713] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 82.498595][ T4227] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 82.564750][ T4227] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 82.575194][ T4198] XFS (loop2): Unmounting Filesystem [ 82.584431][ T4673] udc-core: couldn't find an available UDC or it's busy [ 82.597081][ T4227] usb 4-1: media controller created [ 82.614206][ T4673] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 82.697606][ T4227] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 82.930002][ T4227] DVB: Unable to find symbol mt352_attach() [ 82.936001][ T4227] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 83.000117][ T4227] dvb-usb: bulk message failed: -22 (3/0) [ 83.039715][ T4227] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 83.086282][ T4227] usb 4-1: USB disconnect, device number 2 [ 83.228610][ T4227] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 83.409738][ T4748] ubi31: attaching mtd0 [ 83.416841][ T4748] ubi31: scanning is finished [ 83.427251][ T4751] IPv6: sit1: Disabled Multicast RS [ 83.436046][ T4748] ubi31: empty MTD device detected [ 83.515309][ T4755] netlink: 'syz.4.225': attribute type 1 has an invalid length. [ 83.544424][ T4755] netlink: 224 bytes leftover after parsing attributes in process `syz.4.225'. [ 83.570855][ T4748] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 83.591435][ T4748] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 83.598974][ T4748] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 83.613098][ T4748] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 83.615974][ T4755] netlink: 9 bytes leftover after parsing attributes in process `syz.4.225'. [ 83.640926][ T4748] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 83.654904][ T4748] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 83.667742][ T4748] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 533832682 [ 83.680129][ T4229] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 83.719414][ T4761] netlink: 'syz.0.228': attribute type 21 has an invalid length. [ 83.755758][ T4748] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 83.780751][ T4757] ubi31: background thread "ubi_bgt31d" started, PID 4757 [ 83.929611][ T4229] usb 3-1: Using ep0 maxpacket: 8 [ 84.006398][ T4764] loop3: detected capacity change from 0 to 4096 [ 84.090218][ T4229] usb 3-1: unable to get BOS descriptor or descriptor too short [ 84.099296][ T4764] ntfs: (device loop3): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 84.162736][ T4764] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 84.175632][ T4229] usb 3-1: config 4 has an invalid interface number: 177 but max is 1 [ 84.190232][ T4229] usb 3-1: config 4 has no interface number 1 [ 84.215864][ T4764] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 84.229854][ T4229] usb 3-1: config 4 interface 177 has no altsetting 0 [ 84.253907][ T4229] usb 3-1: config 4 interface 0 has no altsetting 0 [ 84.294535][ T4764] ntfs: volume version 3.1. [ 84.429887][ T4229] usb 3-1: New USB device found, idVendor=413c, idProduct=81cc, bcdDevice=b7.34 [ 84.446259][ T4787] netlink: 'syz.1.240': attribute type 32 has an invalid length. [ 84.459462][ T4229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.499903][ T4229] usb 3-1: Product: syz [ 84.514194][ T4229] usb 3-1: Manufacturer: syz [ 84.529202][ T4229] usb 3-1: SerialNumber: syz [ 84.888453][ T4808] loop3: detected capacity change from 0 to 1024 [ 84.912129][ T4229] usb 3-1: selecting invalid altsetting 0 [ 84.917969][ T4229] usb 3-1: Could not set interface, error -22 [ 84.952747][ T4808] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 84.963361][ T4812] netlink: 76 bytes leftover after parsing attributes in process `syz.0.252'. [ 84.982194][ T4808] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 84.986822][ T4229] usb 3-1: USB disconnect, device number 2 [ 85.010181][ T4808] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 85.038540][ T4808] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 85.143519][ T4808] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,sysvgroups,nomblk_io_submit,bsddf,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,errors=continue,,errors=continue. Quota mode: writeback. [ 85.208564][ T4817] loop0: detected capacity change from 0 to 4096 [ 85.512152][ T4834] loop1: detected capacity change from 0 to 256 [ 85.547770][ T4186] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 85.595858][ T4186] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 85.913960][ T4843] syz.3.266 (4843) used greatest stack depth: 20112 bytes left [ 86.149744][ T1110] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.329644][ T4260] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 86.409779][ T1110] usb 1-1: Using ep0 maxpacket: 8 [ 86.560276][ T1110] usb 1-1: config 156 has an invalid interface number: 91 but max is 0 [ 86.568629][ T1110] usb 1-1: config 156 has no interface number 0 [ 86.578596][ T7] cfg80211: failed to load regulatory.db [ 86.599875][ T1110] usb 1-1: config 156 interface 91 has no altsetting 0 [ 86.629679][ T4260] usb 3-1: Using ep0 maxpacket: 32 [ 86.726816][ T4893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.290'. [ 86.779824][ T4260] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.036718][ T4260] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.047618][ T4260] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 87.057170][ T4260] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.074836][ T4260] usb 3-1: config 0 descriptor?? [ 87.130813][ T4260] hub 3-1:0.0: USB hub found [ 87.136388][ T1110] usb 1-1: string descriptor 0 read error: -22 [ 87.147163][ T4900] netlink: 104 bytes leftover after parsing attributes in process `syz.1.294'. [ 87.149801][ T1110] usb 1-1: New USB device found, idVendor=249c, idProduct=9008, bcdDevice=90.15 [ 87.183956][ T1110] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.195777][ T4900] netlink: 104 bytes leftover after parsing attributes in process `syz.1.294'. [ 87.212347][ T4900] netlink: 81 bytes leftover after parsing attributes in process `syz.1.294'. [ 87.232671][ T1110] usb 1-1: can't set first interface for hiFace device. [ 87.258381][ T1110] snd-usb-hiface: probe of 1-1:156.91 failed with error -5 [ 87.365446][ T4260] hub 3-1:0.0: 5 ports detected [ 87.399816][ T4260] hub 3-1:0.0: insufficient power available to use all downstream ports [ 87.494515][ T1110] usb 1-1: USB disconnect, device number 2 [ 87.569773][ T4260] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 87.576582][ T4260] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 87.699948][ T4260] usbhid 3-1:0.0: can't add hid device: -71 [ 87.710252][ T4260] usbhid: probe of 3-1:0.0 failed with error -71 [ 87.748202][ T4914] device netdevsim0 entered promiscuous mode [ 87.780443][ T4260] usb 3-1: USB disconnect, device number 3 [ 87.793090][ T4914] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 88.229906][ T4933] x_tables: unsorted underflow at hook 3 [ 88.453207][ T4936] loop4: detected capacity change from 0 to 4096 [ 88.524827][ T4936] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 88.651611][ T4936] ntfs: (device loop4): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 88.709597][ T4936] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 88.772032][ T4936] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 88.867275][ T4936] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 88.996974][ T4936] ntfs: volume version 3.1. [ 89.022866][ T4936] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index buffer (VCN 0x0) of directory inode 0x5 has a size (24) differing from the directory specified size (4096). Directory inode is corrupt or driver bug. [ 89.051205][ T4936] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 89.068979][ T4936] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 89.158922][ T4902] kexec: Could not allocate control_code_buffer [ 89.193428][ T4936] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index buffer (VCN 0x0) of directory inode 0x5 has a size (24) differing from the directory specified size (4096). Directory inode is corrupt or driver bug. [ 89.299681][ T4936] ntfs: (device loop4): ntfs_lookup(): ntfs_lookup_ino_by_name() failed with error code 5. [ 89.573041][ T4988] loop3: detected capacity change from 0 to 1024 [ 89.616143][ T1092] block nbd1: Attempted send on invalid socket [ 89.625047][ T1092] blk_update_request: I/O error, dev nbd1, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 89.641400][ T1092] gfs2: error 10 reading superblock [ 89.658037][ T4988] hfsplus: Filesystem is marked locked, mounting read-only. [ 89.735702][ T4988] hfsplus: filesystem is marked locked, leaving read-only. [ 89.789683][ T4227] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 89.982168][ T4997] loop1: detected capacity change from 0 to 4096 [ 90.049672][ T4227] usb 5-1: Using ep0 maxpacket: 16 [ 90.056831][ T4979] loop0: detected capacity change from 0 to 32768 [ 90.104432][ T4997] ntfs: volume version 3.1. [ 90.171020][ T4227] usb 5-1: config 0 has no interfaces? [ 90.370745][ T4227] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 90.419949][ T4227] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.429954][ T4227] usb 5-1: Product: syz [ 90.434190][ T4227] usb 5-1: Manufacturer: syz [ 90.469632][ T4227] usb 5-1: SerialNumber: syz [ 90.488955][ T4227] r8152-cfgselector 5-1: config 0 descriptor?? [ 90.509784][ T5013] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 90.590003][ T5017] tc_dump_action: action bad kind [ 90.689754][ T5023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.348'. [ 90.770585][ T4227] usbip-host 5-1: 5-1 is not in match_busid table... skip! [ 91.007345][ T4260] usb 5-1: USB disconnect, device number 2 [ 91.107303][ T5047] loop3: detected capacity change from 0 to 128 [ 91.169627][ T5047] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 91.181218][ T5047] ext4 filesystem being mounted at /68/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 91.301223][ T5055] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.310113][ T5055] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.388680][ T5055] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 91.957142][ T5053] loop2: detected capacity change from 0 to 32768 [ 91.985224][ T5086] sctp: [Deprecated]: syz.3.384 (pid 5086) Use of int in maxseg socket option. [ 91.985224][ T5086] Use struct sctp_assoc_value instead [ 92.125618][ T5053] ERROR: (device loop2): dbAlloc: the hint is outside the map [ 92.125618][ T5053] [ 92.186363][ T5053] ERROR: (device loop2): remounting filesystem as read-only [ 92.237821][ T5095] loop4: detected capacity change from 0 to 512 [ 92.355377][ T5091] loop0: detected capacity change from 0 to 4096 [ 92.412123][ T5095] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 92.448690][ T5095] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.645384][ T5104] damon: min_nr_regions (0) must be at least 3 [ 92.664002][ T5091] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 92.687243][ T5091] ntfs3: loop0: Failed to load $Extend. [ 92.818420][ T5067] loop1: detected capacity change from 0 to 32768 [ 92.945322][ T5120] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 92.960412][ T5120] overlayfs: missing 'lowerdir' [ 92.965481][ T5067] XFS (loop1): Mounting V5 Filesystem [ 93.102051][ T5127] [U]  [ 93.127919][ T5067] XFS (loop1): Ending clean mount [ 93.133202][ T4225] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 93.238369][ T4183] XFS (loop1): Unmounting Filesystem [ 93.467201][ T5143] loop0: detected capacity change from 0 to 512 [ 93.497464][ T5143] EXT4-fs (loop0): Ignoring removed orlov option [ 93.540065][ T4225] usb 3-1: config 0 has no interfaces? [ 93.545660][ T4225] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 93.581046][ T4225] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.594452][ T5143] EXT4-fs (loop0): orphan cleanup on readonly fs [ 93.623353][ T5143] EXT4-fs error (device loop0): ext4_find_extent:893: inode #4: comm syz.0.407: inode has invalid extent depth: 7 [ 93.651176][ T4225] usb 3-1: config 0 descriptor?? [ 93.680673][ T5143] __quota_error: 2 callbacks suppressed [ 93.680688][ T5143] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=-117 [ 93.707347][ T5143] EXT4-fs warning (device loop0): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 93.725531][ T5151] netlink: 'syz.4.412': attribute type 1 has an invalid length. [ 93.799749][ T5143] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 93.806422][ T5143] EXT4-fs (loop0): mounted filesystem without journal. Opts: orlov,grpid,,errors=continue. Quota mode: writeback. [ 93.898121][ T5143] EXT4-fs error (device loop0): ext4_lookup:1855: inode #2: comm syz.0.407: 'file0' linked to parent dir [ 93.911625][ T4225] usb 3-1: USB disconnect, device number 4 [ 93.959307][ T5161] xt_CONNSECMARK: invalid mode: 0 [ 94.209711][ T4227] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 94.459715][ T4227] usb 2-1: Using ep0 maxpacket: 16 [ 94.579841][ T4227] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 94.599045][ T4227] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.622179][ T4227] usb 2-1: config 0 has no interface number 0 [ 94.824136][ T4227] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 94.849455][ T4227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.871221][ T4227] usb 2-1: Product: syz [ 94.873931][ T5190] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551614) [ 94.881808][ T4227] usb 2-1: Manufacturer: syz [ 94.900997][ T4227] usb 2-1: SerialNumber: syz [ 94.927665][ T4227] usb 2-1: config 0 descriptor?? [ 94.940337][ T5190] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 94.951640][ T5194] netlink: 20 bytes leftover after parsing attributes in process `syz.0.432'. [ 94.989965][ T5194] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 95.219808][ T4227] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 95.238512][ T4227] usb 2-1: No valid video chain found. [ 95.283104][ T5209] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.438'. [ 95.364422][ T5212] loop3: detected capacity change from 0 to 1764 [ 95.457964][ T4229] usb 2-1: USB disconnect, device number 3 [ 95.483875][ T5212] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 95.621796][ T5192] loop4: detected capacity change from 0 to 32768 [ 95.713693][ T5192] ERROR: (device loop4): dbAllocNext: Corrupt dmap page [ 95.713693][ T5192] [ 95.769132][ T5192] ERROR: (device loop4): remounting filesystem as read-only [ 95.806348][ T5225] loop2: detected capacity change from 0 to 2048 [ 95.899773][ T5225] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 95.925953][ T5229] MTD: Couldn't look up './bus': -15 [ 96.581568][ T5245] loop2: detected capacity change from 0 to 4096 [ 96.638293][ T5245] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 96.660107][ T5223] loop3: detected capacity change from 0 to 32768 [ 96.667954][ T5245] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 96.696031][ T5245] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 96.735202][ T5245] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 96.766528][ T5223] (syz.3.444,5223,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 96.800480][ T5245] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 96.830053][ T5223] (syz.3.444,5223,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 96.856747][ T5245] ntfs: volume version 3.1. [ 96.904845][ T5223] JBD2: Ignoring recovery information on journal [ 96.971224][ T5245] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 97.080247][ T5245] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 97.134286][ T5245] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 97.148356][ T5268] netlink: 'syz.0.466': attribute type 2 has an invalid length. [ 97.159803][ T5245] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 97.188732][ T5223] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 97.199825][ T5268] netlink: 132 bytes leftover after parsing attributes in process `syz.0.466'. [ 97.351813][ T5259] loop1: detected capacity change from 0 to 32768 [ 97.461706][ T4260] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 97.563367][ T4190] ocfs2: Unmounting device (7,3) on (node local) [ 97.903278][ T4260] usb 5-1: unable to get BOS descriptor or descriptor too short [ 97.959920][ T4260] usb 5-1: not running at top speed; connect to a high speed hub [ 98.013428][ T5300] loop3: detected capacity change from 0 to 256 [ 98.065497][ T4260] usb 5-1: config 5 has an invalid interface number: 174 but max is 0 [ 98.079322][ T5305] loop0: detected capacity change from 0 to 8 [ 98.100072][ T4260] usb 5-1: config 5 has no interface number 0 [ 98.120212][ T4260] usb 5-1: config 5 interface 174 has no altsetting 0 [ 98.128639][ T5300] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 98.190048][ T1110] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 98.302809][ T5305] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 98.311329][ T4260] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db59, bcdDevice=57.ec [ 98.325151][ T4260] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.334458][ T4260] usb 5-1: Product: syz [ 98.349896][ T4260] usb 5-1: Manufacturer: syz [ 98.359765][ T4260] usb 5-1: SerialNumber: syz [ 98.489837][ T1110] usb 2-1: Using ep0 maxpacket: 8 [ 98.620696][ T1110] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 98.636349][ T5314] ieee802154 phy0 wpan0: encryption failed: -22 [ 98.645518][ T1110] usb 2-1: config 2 has no interface number 0 [ 98.659582][ T1110] usb 2-1: config 2 interface 31 has no altsetting 0 [ 98.677860][ T5303] loop2: detected capacity change from 0 to 32768 [ 98.706310][ T4260] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual Digital 2' in warm state. [ 98.749821][ T4260] dvb-usb: bulk message failed: -71 (2/0) [ 98.772289][ T4260] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 98.811692][ T4260] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 2 error while loading driver (-19) [ 98.847189][ T4260] dvb_usb_cxusb: probe of 5-1:5.174 failed with error -22 [ 98.869946][ T1110] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 98.895544][ T4260] usb 5-1: USB disconnect, device number 3 [ 98.908549][ T1110] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.934604][ T1110] usb 2-1: Product: syz [ 98.947281][ T1110] usb 2-1: Manufacturer: syz [ 98.958159][ T1110] usb 2-1: SerialNumber: syz [ 98.967044][ T5325] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 99.343759][ T5345] loop0: detected capacity change from 0 to 16 [ 99.417642][ T5345] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 99.459994][ T5351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.506'. [ 99.472663][ T4173] udevd[4173]: incorrect cramfs checksum on /dev/loop0 [ 99.548766][ T5345] cramfs: Error -3 while decompressing! [ 99.565467][ T4175] udevd[4175]: incorrect cramfs checksum on /dev/loop0 [ 99.575855][ T5345] cramfs: ffffffff964030a8(27)->ffff888050ef0000(4096) [ 99.593218][ T5345] cramfs: Error -3 while decompressing! [ 99.598822][ T5345] cramfs: ffffffff964030c3(16)->ffff888071e2f000(4096) [ 99.627313][ T4175] udevd[4175]: incorrect cramfs checksum on /dev/loop0 [ 99.652510][ T5345] cramfs: Error -3 while decompressing! [ 99.662449][ T5345] cramfs: ffffffff964030a8(27)->ffff888050ef0000(4096) [ 99.683356][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 99.683369][ T26] audit: type=1800 audit(1776208815.433:5): pid=5345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.505" name="file2" dev="loop0" ino=348 res=0 errno=0 [ 99.711110][ T1110] ch9200: probe of 2-1:2.31 failed with error -22 [ 99.758429][ T4677] udevd[4677]: incorrect cramfs checksum on /dev/loop0 [ 99.775069][ T1110] usb 2-1: USB disconnect, device number 4 [ 99.895462][ T5369] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.516'. [ 100.679111][ T5411] netlink: 'syz.0.536': attribute type 1 has an invalid length. [ 100.690295][ T5409] IPv6: NLM_F_REPLACE set, but no existing node found! [ 100.807057][ T5363] set_capacity_and_notify: 1 callbacks suppressed [ 100.807072][ T5363] loop4: detected capacity change from 0 to 32768 [ 101.158437][ T5435] netlink: 20 bytes leftover after parsing attributes in process `syz.0.549'. [ 101.348053][ T5449] loop3: detected capacity change from 0 to 64 [ 101.413224][ T5449] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 101.656085][ T5460] loop0: detected capacity change from 0 to 256 [ 101.722690][ T5460] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 101.757670][ T5464] netlink: 12 bytes leftover after parsing attributes in process `syz.3.562'. [ 101.776580][ T5464] netlink: 60 bytes leftover after parsing attributes in process `syz.3.562'. [ 101.786295][ T5464] netlink: 12 bytes leftover after parsing attributes in process `syz.3.562'. [ 101.806045][ T5464] netlink: 60 bytes leftover after parsing attributes in process `syz.3.562'. [ 101.835413][ T5464] netlink: 104 bytes leftover after parsing attributes in process `syz.3.562'. [ 101.844808][ T4225] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 102.003811][ T5476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.567'. [ 102.119604][ T4225] usb 2-1: Using ep0 maxpacket: 8 [ 102.279849][ T5496] netlink: 20 bytes leftover after parsing attributes in process `syz.0.573'. [ 102.290017][ T4225] usb 2-1: unable to get BOS descriptor or descriptor too short [ 102.389083][ T5504] netlink: 12 bytes leftover after parsing attributes in process `syz.3.580'. [ 102.409984][ T4225] usb 2-1: config 86 has an invalid interface number: 246 but max is 0 [ 102.418310][ T4225] usb 2-1: config 86 has no interface number 0 [ 102.435011][ T4225] usb 2-1: config 86 interface 246 altsetting 128 bulk endpoint 0x88 has invalid maxpacket 1023 [ 102.496305][ T4225] usb 2-1: config 86 interface 246 altsetting 128 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 102.525404][ T5509] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.582'. [ 102.549811][ T4225] usb 2-1: config 86 interface 246 has no altsetting 0 [ 102.730159][ T4225] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0012, bcdDevice=12.36 [ 102.762913][ T4225] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.779580][ T4225] usb 2-1: Product: syz [ 102.783823][ T4225] usb 2-1: Manufacturer: syz [ 102.788449][ T4225] usb 2-1: SerialNumber: syz [ 102.801814][ T5520] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 102.824424][ T5520] overlayfs: overlapping lowerdir path [ 102.861324][ T5454] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 102.999794][ T1110] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 103.151497][ T5506] loop0: detected capacity change from 0 to 32768 [ 103.194863][ T4225] kvaser_usb 2-1:86.246: Cannot get usb endpoint(s) [ 103.203516][ T5506] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.581 (5506) [ 103.229846][ T4225] usb 2-1: USB disconnect, device number 5 [ 103.236351][ T5537] kAFS: unable to lookup cell '({^@' [ 103.338439][ T5506] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 103.366280][ T5506] BTRFS info (device loop0): using free space tree [ 103.375399][ T5543] loop4: detected capacity change from 0 to 128 [ 103.382415][ T5506] BTRFS info (device loop0): has skinny extents [ 103.440758][ T5543] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 103.458046][ T1110] usb 4-1: unable to get BOS descriptor or descriptor too short [ 103.512363][ T5543] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 103.569813][ T1110] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.580710][ T1110] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 103.776054][ T5506] BTRFS info (device loop0): enabling ssd optimizations [ 103.780719][ T1110] usb 4-1: New USB device found, idVendor=041e, idProduct=3263, bcdDevice= 0.40 [ 103.792441][ T1110] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.800527][ T1110] usb 4-1: Product: syz [ 103.805102][ T1110] usb 4-1: Manufacturer: syz [ 103.822509][ T1110] usb 4-1: SerialNumber: syz [ 104.332122][ T1110] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 104.388495][ T4677] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop0 scanned by udevd (4677) [ 104.394681][ T1110] usb 4-1: USB disconnect, device number 3 [ 104.471889][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 105.163009][ T5652] netlink: 'syz.4.633': attribute type 21 has an invalid length. [ 105.180070][ T5652] netlink: 128 bytes leftover after parsing attributes in process `syz.4.633'. [ 105.259656][ T5652] netlink: 'syz.4.633': attribute type 5 has an invalid length. [ 105.297951][ T5652] netlink: 'syz.4.633': attribute type 6 has an invalid length. [ 105.363100][ T5652] netlink: 3 bytes leftover after parsing attributes in process `syz.4.633'. [ 105.545479][ T5667] loop0: detected capacity change from 0 to 4096 [ 105.557373][ T5673] netlink: 4 bytes leftover after parsing attributes in process `syz.4.642'. [ 105.719154][ T5680] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 105.879583][ T5667] NILFS error (device loop0): nilfs_dotdot: directory #12 missing '.' [ 105.963591][ T5667] Remounting filesystem read-only [ 106.066411][ T5696] netlink: 132 bytes leftover after parsing attributes in process `syz.1.652'. [ 106.137689][ T5698] netlink: 'syz.2.654': attribute type 2 has an invalid length. [ 106.200410][ T5698] netlink: 'syz.2.654': attribute type 5 has an invalid length. [ 106.215153][ T5686] loop4: detected capacity change from 0 to 8192 [ 106.312444][ T5708] loop3: detected capacity change from 0 to 16 [ 106.319242][ T5706] loop0: detected capacity change from 0 to 64 [ 106.339990][ T5686] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 106.386412][ T5708] erofs: (device loop3): mounted with root inode @ nid 36. [ 106.749227][ T5728] netlink: 'syz.4.668': attribute type 3 has an invalid length. [ 107.035889][ T5750] netlink: 16 bytes leftover after parsing attributes in process `syz.0.678'. [ 107.366648][ T5772] netlink: 'syz.0.691': attribute type 2 has an invalid length. [ 107.497790][ T5786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.695'. [ 107.510899][ T5784] openvswitch: netlink: Actions may not be safe on all matching packets [ 107.520019][ T5786] netlink: 'syz.1.695': attribute type 1 has an invalid length. [ 107.897948][ T5807] loop3: detected capacity change from 0 to 4096 [ 107.920738][ T5813] loop4: detected capacity change from 0 to 128 [ 107.977782][ T5813] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 108.018425][ T5817] loop0: detected capacity change from 0 to 256 [ 108.035430][ T5813] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 108.085758][ T5807] ntfs3: loop3: ino=5, "/" directory corrupted [ 108.106126][ T5807] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 108.122245][ T5817] FAT-fs (loop0): Directory bread(block 64) failed [ 108.149379][ T5817] FAT-fs (loop0): Directory bread(block 65) failed [ 108.164709][ T5817] FAT-fs (loop0): Directory bread(block 66) failed [ 108.179664][ T5615] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 108.189742][ T5817] FAT-fs (loop0): Directory bread(block 67) failed [ 108.216945][ T5817] FAT-fs (loop0): Directory bread(block 68) failed [ 108.245582][ T5817] FAT-fs (loop0): Directory bread(block 69) failed [ 108.276799][ T5817] FAT-fs (loop0): Directory bread(block 70) failed [ 108.329599][ T5817] FAT-fs (loop0): Directory bread(block 71) failed [ 108.336498][ T5817] FAT-fs (loop0): Directory bread(block 72) failed [ 108.392789][ T5817] FAT-fs (loop0): Directory bread(block 73) failed [ 108.672175][ T5799] loop1: detected capacity change from 0 to 32768 [ 108.735632][ T5829] netlink: 'syz.3.718': attribute type 8 has an invalid length. [ 108.749920][ T5615] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 108.759012][ T5615] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.841380][ T5615] usb 3-1: Product: syz [ 108.845622][ T5615] usb 3-1: Manufacturer: syz [ 108.863646][ T5615] usb 3-1: SerialNumber: syz [ 108.888744][ T5615] r8152-cfgselector 3-1: config 0 descriptor?? [ 109.088298][ T5842] loop0: detected capacity change from 0 to 128 [ 109.257185][ T5842] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 109.321120][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.353275][ T5842] ext4 filesystem being mounted at /156/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 109.409745][ T5615] r8152-cfgselector 3-1: Unknown version 0x0000 [ 109.416393][ T5615] r8152-cfgselector 3-1: bad CDC descriptors [ 109.459799][ T5615] r8152-cfgselector 3-1: Unknown version 0x0000 [ 109.470079][ T5842] EXT4-fs (loop0): Can't set test_dummy_encryption on remount [ 109.509698][ T5615] r8152-cfgselector 3-1: USB disconnect, device number 5 [ 109.938942][ T5881] binder: 5879:5881 ioctl 400c620e 200000000340 returned -22 [ 110.124574][ T5895] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 110.250256][ T5895] CIFS mount error: No usable UNC path provided in device string! [ 110.250256][ T5895] [ 110.282241][ T5895] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 110.698313][ T5927] ieee802154 phy0 wpan0: encryption failed: -22 [ 110.862105][ T5942] netlink: 'syz.2.771': attribute type 33 has an invalid length. [ 110.917422][ T5942] netlink: 36 bytes leftover after parsing attributes in process `syz.2.771'. [ 111.150397][ T5959] program syz.1.779 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.215099][ T5964] netlink: 'syz.4.782': attribute type 2 has an invalid length. [ 111.459813][ T5979] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 111.598383][ T5994] netlink: 'syz.2.794': attribute type 21 has an invalid length. [ 111.812077][ T6010] loop0: detected capacity change from 0 to 128 [ 111.915489][ T6010] attempt to access beyond end of device [ 111.915489][ T6010] loop0: rw=0, want=25676, limit=128 [ 111.930049][ T6010] Buffer I/O error on dev loop0, logical block 12837, async page read [ 111.972771][ T6010] attempt to access beyond end of device [ 111.972771][ T6010] loop0: rw=0, want=25676, limit=128 [ 111.985251][ T6020] netlink: 'syz.1.808': attribute type 21 has an invalid length. [ 112.023132][ T6024] dlm: non-version read from control device 8192 [ 112.037553][ T6010] Buffer I/O error on dev loop0, logical block 12837, async page read [ 112.058827][ T6026] Cannot find add_set index 0 as target [ 112.151041][ T6032] loop1: detected capacity change from 0 to 256 [ 112.422866][ T5621] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 112.560825][ T6058] loop0: detected capacity change from 0 to 1024 [ 112.828023][ T4234] hfsplus: b-tree write err: -5, ino 25 [ 112.833990][ T5621] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 112.849822][ T5621] usb 5-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 112.864838][ T4234] hfsplus: b-tree write err: -5, ino 4 [ 112.889985][ T4234] hfsplus: b-tree write err: -5, ino 2 [ 112.905781][ T5621] usb 5-1: config 2 interface 0 has no altsetting 0 [ 112.970045][ T4234] hfsplus: b-tree write err: -5, ino 17 [ 113.109997][ T5621] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 113.146270][ T5621] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.200770][ T5621] usb 5-1: Product: syz [ 113.205007][ T5621] usb 5-1: Manufacturer: syz [ 113.250658][ T5621] usb 5-1: SerialNumber: syz [ 113.425760][ T6094] ERROR: device name not specified. [ 113.578557][ T6100] ax25_connect(): syz.1.848 uses autobind, please contact jreuter@yaina.de [ 113.643982][ T5621] usb 5-1: USB disconnect, device number 4 [ 113.687687][ T6108] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 114.382288][ T6151] xt_limit: Overflow, try lower: 2147483649/3300 [ 114.559347][ T6162] loop3: detected capacity change from 0 to 256 [ 114.685896][ T6162] FAT-fs (loop3): Directory bread(block 64) failed [ 114.704665][ T6162] FAT-fs (loop3): Directory bread(block 65) failed [ 114.738665][ T6162] FAT-fs (loop3): Directory bread(block 66) failed [ 114.755979][ T6162] FAT-fs (loop3): Directory bread(block 67) failed [ 114.775882][ T6162] FAT-fs (loop3): Directory bread(block 68) failed [ 114.809872][ T6162] FAT-fs (loop3): Directory bread(block 69) failed [ 114.819769][ T4229] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 114.847888][ T6162] FAT-fs (loop3): Directory bread(block 70) failed [ 114.888526][ T6162] FAT-fs (loop3): Directory bread(block 71) failed [ 114.914844][ T6162] FAT-fs (loop3): Directory bread(block 72) failed [ 114.941690][ T6162] FAT-fs (loop3): Directory bread(block 73) failed [ 115.059611][ T4229] usb 3-1: Using ep0 maxpacket: 32 [ 115.179964][ T4229] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 115.188419][ T4229] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 115.229006][ T4229] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.282605][ T4229] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 115.294813][ T4229] usb 3-1: config 1 has no interface number 0 [ 115.301383][ T4229] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 115.311550][ T4229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.366389][ T5615] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 115.383446][ T4229] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 115.599824][ T4229] snd_usb_pod 3-1:1.1: set_interface failed [ 115.607238][ T4229] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 115.639093][ T4229] snd_usb_pod: probe of 3-1:1.1 failed with error -71 [ 115.639707][ T5615] usb 1-1: Using ep0 maxpacket: 8 [ 115.687224][ T4229] usb 3-1: USB disconnect, device number 6 [ 115.822504][ T5615] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 115.838017][ T5615] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.859661][ T5615] usb 1-1: config 0 has no interface number 0 [ 115.876069][ T5615] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 115.897849][ T6222] netlink: 'syz.4.908': attribute type 13 has an invalid length. [ 115.909036][ T5615] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 115.949238][ T5615] usb 1-1: config 0 interface 255 has no altsetting 0 [ 115.974825][ T6222] gretap0: refused to change device tx_queue_len [ 115.987420][ T6222] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 116.119811][ T5615] usb 1-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= d.68 [ 116.166008][ T5615] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.191593][ T5615] usb 1-1: Product: syz [ 116.195833][ T5615] usb 1-1: Manufacturer: syz [ 116.229981][ T5615] usb 1-1: SerialNumber: syz [ 116.237018][ T5615] usb 1-1: config 0 descriptor?? [ 116.321138][ T5615] kalmia 1-1:0.255 (unnamed net_device) (uninitialized): Error sending init packet. Status -22 [ 116.359651][ T5615] kalmia: probe of 1-1:0.255 failed with error -22 [ 116.450076][ T5621] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 116.519154][ T6255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.925'. [ 116.585730][ T5615] usb 1-1: USB disconnect, device number 3 [ 116.622273][ T6260] netlink: 32 bytes leftover after parsing attributes in process `syz.2.927'. [ 116.653174][ T6260] netlink: 32 bytes leftover after parsing attributes in process `syz.2.927'. [ 116.841199][ T5621] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.856511][ T5621] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 116.875172][ T5621] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 116.886616][ T5621] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 116.903020][ T5621] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 116.912513][ T5621] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.923255][ T5621] usb 2-1: config 0 descriptor?? [ 116.989794][ T6276] netlink: 292 bytes leftover after parsing attributes in process `syz.4.936'. [ 117.109648][ T4229] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 117.159667][ T6285] loop4: detected capacity change from 0 to 256 [ 117.177542][ T5621] usb 2-1: USB disconnect, device number 6 [ 117.462343][ T6300] loop4: detected capacity change from 0 to 1764 [ 117.649782][ T4229] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 117.665883][ T6310] loop0: detected capacity change from 0 to 512 [ 117.667918][ T4229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.694899][ T4229] usb 3-1: Product: syz [ 117.699261][ T4229] usb 3-1: Manufacturer: syz [ 117.704009][ T4229] usb 3-1: SerialNumber: syz [ 117.736146][ T4229] usb 3-1: config 0 descriptor?? [ 117.747679][ T6310] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 117.767328][ T6310] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 117.786936][ T6310] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 117.809265][ T4229] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 117.845460][ T6310] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 117.856294][ T6310] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 117.865064][ T6310] EXT4-fs (loop0): failed to initialize system zone (-117) [ 117.872555][ T6310] EXT4-fs (loop0): mount failed [ 118.208268][ T6332] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.959'. [ 118.238021][ T6332] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 118.249883][ T4229] gspca_sunplus: reg_w_riv err -71 [ 118.255142][ T4229] sunplus: probe of 3-1:0.0 failed with error -71 [ 118.295580][ T4229] usb 3-1: USB disconnect, device number 7 [ 118.390536][ T6340] cgroup: noprefix used incorrectly [ 118.665799][ T6357] loop3: detected capacity change from 0 to 512 [ 118.687717][ T6362] netlink: 16 bytes leftover after parsing attributes in process `syz.0.975'. [ 118.717772][ T6362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.975'. [ 118.810682][ T6366] loop1: detected capacity change from 0 to 1024 [ 118.826640][ T6368] netlink: 'syz.4.978': attribute type 3 has an invalid length. [ 118.834577][ T6368] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.978'. [ 118.865149][ T6366] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 118.880788][ T6357] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 118.929900][ T6357] ext4 filesystem being mounted at /211/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 118.964041][ T6366] EXT4-fs error (device loop1): ext4_get_journal_inode:5185: inode #32: comm syz.1.977: iget: special inode unallocated [ 119.026777][ T6366] EXT4-fs (loop1): no journal found [ 119.042653][ T6366] EXT4-fs (loop1): can't get journal size [ 119.120869][ T6366] EXT4-fs (loop1): filesystem is read-only [ 119.126776][ T6366] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,bsdgroups,resuid=0x0000000000000000,. Quota mode: none. [ 119.131638][ T6392] netlink: 'syz.4.989': attribute type 10 has an invalid length. [ 119.235076][ T6392] team0: Device veth1_vlan failed to register rx_handler [ 119.382126][ T6392] syz.4.989 (6392) used greatest stack depth: 20048 bytes left [ 119.489558][ T6408] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 119.499911][ T6408] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 119.530993][ T6408] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 119.538926][ T6408] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 119.602122][ T6412] loop4: detected capacity change from 0 to 1024 [ 119.922027][ T6437] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1011'. [ 120.599695][ T5615] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 120.698351][ T6494] loop2: detected capacity change from 0 to 512 [ 120.756323][ T6491] loop3: detected capacity change from 0 to 4096 [ 120.786795][ T6494] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.1037: inode has both inline data and extents flags [ 120.923859][ T6494] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1037: couldn't read orphan inode 15 (err -117) [ 120.987494][ T6494] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 120.990365][ T4300] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 121.059991][ T5615] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 121.069528][ T5615] usb 5-1: config 0 has no interface number 0 [ 121.088487][ T5615] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 121.160462][ T5615] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 121.216073][ T5615] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 121.280447][ T5615] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 121.290031][ T4300] usb 1-1: Using ep0 maxpacket: 16 [ 121.305921][ T5615] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.332433][ T5615] usb 5-1: config 0 descriptor?? [ 121.360149][ T6469] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 121.407357][ T5615] ldusb 5-1:0.55: Interrupt in endpoint not found [ 121.410593][ T4300] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 121.444687][ T4300] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.519716][ T4300] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 121.626599][ T6522] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1050'. [ 121.649212][ T6523] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1049'. [ 121.661208][ T4227] usb 5-1: USB disconnect, device number 5 [ 121.719962][ T4300] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 121.740149][ T4300] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.756322][ T4300] usb 1-1: Product: syz [ 121.761064][ T4300] usb 1-1: Manufacturer: syz [ 121.765701][ T4300] usb 1-1: SerialNumber: syz [ 121.784383][ T4300] usb 1-1: config 0 descriptor?? [ 121.820371][ T6528] loop3: detected capacity change from 0 to 8 [ 122.547402][ T6567] (syz.2.1072,6567,1):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 122.570008][ T6567] (syz.2.1072,6567,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 122.916485][ T6585] loop4: detected capacity change from 0 to 256 [ 122.928850][ T6583] loop2: detected capacity change from 0 to 1764 [ 122.964515][ T6591] loop1: detected capacity change from 0 to 64 [ 122.998673][ T6593] loop3: detected capacity change from 0 to 128 [ 123.052116][ T6583] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 123.083344][ T6593] VFS: Found a Xenix FS (block size = 1024) on device loop3 [ 123.128067][ T4190] sysv_free_block: flc_count > flc_size [ 123.159653][ T4190] sysv_free_block: flc_count > flc_size [ 123.165727][ T4190] sysv_free_block: flc_count > flc_size [ 123.179624][ T4190] sysv_free_block: flc_count > flc_size [ 123.207015][ T4190] sysv_free_block: flc_count > flc_size [ 123.222942][ T4190] sysv_free_block: flc_count > flc_size [ 123.241935][ T4190] sysv_free_block: flc_count > flc_size [ 123.247738][ T6599] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1088'. [ 123.264951][ T4190] sysv_free_block: flc_count > flc_size [ 123.274748][ T6597] xt_NFQUEUE: number of total queues is 0 [ 123.277706][ T4190] sysv_free_block: flc_count > flc_size [ 123.303322][ T4190] sysv_free_block: flc_count > flc_size [ 123.325068][ T4190] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 123.371871][ T6596] loop4: detected capacity change from 0 to 4096 [ 123.445664][ T6596] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 123.530091][ T6596] process 'syz.4.1087' launched '/dev/fd/3/./file0' with NULL argv: empty string added [ 123.567111][ T6603] loop3: detected capacity change from 0 to 4096 [ 123.654811][ T6603] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 123.666988][ T6610] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 123.730198][ T6610] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 123.770325][ T6603] ntfs3: loop3: Failed to load $Extend. [ 123.828287][ T5613] usb 1-1: USB disconnect, device number 4 [ 124.157956][ T6621] loop0: detected capacity change from 0 to 1024 [ 124.211421][ T6621] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 124.224780][ T4260] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 124.489966][ T4260] usb 2-1: Using ep0 maxpacket: 8 [ 124.614815][ T4260] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 124.630967][ T6639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1108'. [ 124.669784][ T4260] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 124.702390][ T4260] usb 2-1: config 2 has no interface number 0 [ 124.709045][ T6639] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1108'. [ 124.826402][ T6647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1111'. [ 124.857876][ T6647] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1111'. [ 124.879864][ T4260] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 124.888963][ T4260] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.904137][ T4260] usb 2-1: Product: syz [ 124.908461][ T4260] usb 2-1: Manufacturer: syz [ 124.915538][ T4260] usb 2-1: SerialNumber: syz [ 124.975827][ T4260] ch9200: probe of 2-1:2.31 failed with error -22 [ 125.100577][ T6613] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.108126][ T6613] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.159118][ T6655] overlayfs: missing 'lowerdir' [ 125.932658][ T6613] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.967407][ T6613] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.471263][ T6613] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.480633][ T6613] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.490549][ T6613] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.500489][ T6613] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.608723][ T6649] netlink: 'syz.0.1113': attribute type 10 has an invalid length. [ 126.650278][ T6649] team0: Device veth1_vlan failed to register rx_handler [ 126.710853][ T6653] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1114'. [ 126.952694][ T5615] usb 2-1: USB disconnect, device number 7 [ 127.071432][ T6699] netlink: 'syz.3.1136': attribute type 3 has an invalid length. [ 127.125172][ T6699] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1136'. [ 127.239944][ T4229] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 127.466065][ T6729] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1149'. [ 127.659785][ T4229] usb 5-1: unable to get BOS descriptor or descriptor too short [ 127.759845][ T4229] usb 5-1: config 74 has an invalid interface number: 240 but max is 0 [ 127.768225][ T4229] usb 5-1: config 74 has no interface number 0 [ 127.799827][ T4229] usb 5-1: config 74 interface 240 has no altsetting 0 [ 127.829574][ T5615] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 127.962159][ T6756] Unsupported ieee802154 address type: 0 [ 128.039684][ T4229] usb 5-1: string descriptor 0 read error: -22 [ 128.046043][ T4229] usb 5-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=b4.d6 [ 128.075747][ T4229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.099709][ T5615] usb 3-1: Using ep0 maxpacket: 32 [ 128.119195][ T6762] loop3: detected capacity change from 0 to 512 [ 128.151206][ T4229] net1080: probe of 5-1:74.240 failed with error -22 [ 128.259901][ T5615] usb 3-1: unable to get BOS descriptor or descriptor too short [ 128.339787][ T5615] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 232, changing to 7 [ 128.407260][ T5613] usb 5-1: USB disconnect, device number 6 [ 128.559875][ T5615] usb 3-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40 [ 128.573571][ T5615] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.588535][ T5615] usb 3-1: Product: syz [ 128.601843][ T5615] usb 3-1: Manufacturer: syz [ 128.611124][ T5615] usb 3-1: SerialNumber: syz [ 128.732738][ T6794] netlink: 'syz.1.1178': attribute type 6 has an invalid length. [ 128.749835][ T6794] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1178'. [ 128.859655][ T6800] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 128.949860][ T5615] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 129.091298][ T5615] snd-usb-audio: probe of 3-1:1.0 failed with error -71 [ 129.142063][ T5615] usb 3-1: USB disconnect, device number 8 [ 129.268361][ T6823] loop1: detected capacity change from 0 to 512 [ 129.288998][ T6825] loop4: detected capacity change from 0 to 128 [ 129.367646][ T6823] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,sysvgroups,,errors=continue. Quota mode: writeback. [ 129.380639][ T6823] ext4 filesystem being mounted at /236/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 129.399130][ T6825] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,,errors=continue. Quota mode: none. [ 129.404222][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 129.439287][ T6825] ext4 filesystem being mounted at /227/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 129.527399][ T6823] Quota error (device loop1): find_block_dqentry: Quota for id 0 referenced but not present [ 129.569682][ T6823] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 129.586808][ T6825] EXT4-fs warning (device loop4): verify_group_input:147: Cannot add at group 3 (only 1 groups) [ 129.616746][ T6823] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.1190: Failed to acquire dquot type 1 [ 129.936737][ T6854] loop2: detected capacity change from 0 to 4096 [ 130.003105][ T6854] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 130.100035][ T6854] ntfs3: Couldn't remount rw because journal is not replayed. Please umount/remount instead [ 130.100035][ T6854] [ 130.321865][ T6886] libceph: resolve '0' (ret=-3): failed [ 130.679393][ T6912] autofs4:pid:6912:autofs_fill_super: called with bogus options [ 130.848873][ T6925] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1238'. [ 131.081969][ T6939] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1245'. [ 131.111558][ T6943] loop1: detected capacity change from 0 to 512 [ 131.119567][ T6939] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1245'. [ 131.153798][ T6939] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1245'. [ 131.188992][ T6943] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 131.323057][ T6943] EXT4-fs (loop1): 1 orphan inode deleted [ 131.328916][ T6943] EXT4-fs (loop1): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 131.348547][ T6943] ext4 filesystem being mounted at /245/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.448652][ T6951] netlink: 'syz.2.1249': attribute type 4 has an invalid length. [ 131.522634][ T6951] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1249'. [ 131.806158][ T6957] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 132.096083][ T6971] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1260'. [ 132.201157][ T6931] loop4: detected capacity change from 0 to 32768 [ 132.277097][ T6931] [ 132.277097][ T6931] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 132.277097][ T6931] [ 132.439902][ T4194] [ 132.439902][ T4194] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 132.439902][ T4194] [ 132.469688][ T4194] [ 132.469688][ T4194] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 132.469688][ T4194] [ 132.527287][ T6985] loop3: detected capacity change from 0 to 2048 [ 132.649030][ T6985] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 132.662586][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.662635][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.695350][ T6985] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 132.753992][ T6985] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 132.819728][ T6985] UDF-fs: Scanning with blocksize 512 failed [ 132.880748][ T6985] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 133.408142][ T7038] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1293'. [ 133.489634][ T7038] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1293'. [ 133.514292][ T7028] loop1: detected capacity change from 0 to 4096 [ 133.537990][ T7038] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1293'. [ 133.581103][ T7038] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 133.605290][ T7028] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 133.616299][ T7041] loop3: detected capacity change from 0 to 4096 [ 133.638206][ T7044] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.660924][ T7046] IPv6: sit1: Disabled Multicast RS [ 133.698596][ T7041] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 133.736561][ T7028] ntfs3: loop1: failed to convert "c46c" to iso8859-1 [ 133.758085][ T7041] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 133.905180][ T7041] ntfs: volume version 3.1. [ 133.915377][ T7041] ntfs: (device loop3): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4). Marking corrupt inode and base inode 0x1a as bad. Run chkdsk. [ 134.024784][ T7059] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1303'. [ 134.036420][ T7041] ntfs: (device loop3): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute. [ 134.090641][ T7041] ntfs: (device loop3): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 134.204868][ T7064] loop0: detected capacity change from 0 to 64 [ 134.216116][ T7041] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Found already allocated name in phase 2. Please run chkdsk and if that doesn't find any errors please report you saw this message to linux-ntfs-dev@lists.sourceforge.net. [ 134.329708][ T7041] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 134.381409][ T7041] ntfs: (device loop3): ntfs_lookup(): ntfs_lookup_ino_by_name() failed with error code 5. [ 135.060277][ T7110] autofs4:pid:7110:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(2.1), cmd(0xc0189374) [ 135.087495][ T7111] netlink: 'syz.3.1328': attribute type 1 has an invalid length. [ 135.096757][ T7065] loop4: detected capacity change from 0 to 32768 [ 135.109687][ T7110] autofs4:pid:7110:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 135.118389][ T7111] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1328'. [ 135.231657][ T7065] ERROR: (device loop4): diAllocAG: error reading iag [ 135.231657][ T7065] [ 135.260816][ T7065] ialloc: diAlloc returned -5! [ 135.293837][ T7121] netlink: 'syz.1.1334': attribute type 1 has an invalid length. [ 135.327876][ T4300] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 135.385259][ T7125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1337'. [ 135.408870][ T7125] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1337'. [ 135.495866][ T7131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1340'. [ 135.599874][ T4300] usb 1-1: Using ep0 maxpacket: 16 [ 135.606755][ T7139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1343'. [ 135.726054][ T4300] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 255 [ 135.946551][ T4300] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 135.978073][ T4300] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.978101][ T4300] usb 1-1: Product: syz [ 135.978116][ T4300] usb 1-1: Manufacturer: syz [ 135.978131][ T4300] usb 1-1: SerialNumber: syz [ 135.981143][ T4300] usb 1-1: config 0 descriptor?? [ 136.010718][ T7105] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 136.215655][ T7166] CIFS: bad ip= option (%RHe'ˠ/1C~1WexEAeSb{~R) [ 136.258296][ T4300] mcba_usb 1-1:0.0: Microchip CAN BUS Analyzer connected [ 136.449714][ C1] mcba_usb 1-1:0.0 can0: Tx URB aborted (-71) [ 136.456396][ C1] mcba_usb 1-1:0.0 can0: Tx URB aborted (-71) [ 136.466029][ T5615] usb 1-1: USB disconnect, device number 5 [ 136.500869][ T5615] mcba_usb 1-1:0.0 can0: device disconnected [ 136.562476][ T4260] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 136.602476][ T7179] ieee802154 phy0 wpan0: encryption failed: -90 [ 136.787560][ T7152] loop1: detected capacity change from 0 to 32768 [ 136.949921][ T4260] usb 5-1: config 8 has an invalid interface number: 7 but max is 0 [ 136.988913][ T4260] usb 5-1: config 8 has no interface number 0 [ 137.008383][ T4260] usb 5-1: config 8 interface 7 has no altsetting 0 [ 137.039618][ T4300] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 137.210026][ T4260] usb 5-1: New USB device found, idVendor=1614, idProduct=0800, bcdDevice=9a.6e [ 137.219251][ T4260] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.276383][ T4260] usb 5-1: Product: syz [ 137.297626][ T4260] usb 5-1: Manufacturer: syz [ 137.309899][ T4260] usb 5-1: SerialNumber: syz [ 137.358600][ T7219] netlink: 'syz.3.1375': attribute type 4 has an invalid length. [ 137.415678][ T7219] netlink: 'syz.3.1375': attribute type 3 has an invalid length. [ 137.429668][ T4300] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 137.464262][ T7219] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1375'. [ 137.473458][ T4300] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.473508][ T4300] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 137.473534][ T4300] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.640026][ T4260] hub 5-1:8.7: bad descriptor, ignoring hub [ 137.646481][ T4260] hub: probe of 5-1:8.7 failed with error -5 [ 137.680714][ T4260] option 5-1:8.7: GSM modem (1-port) converter detected [ 137.688640][ T4300] hub 3-1:4.0: USB hub found [ 137.761134][ T4260] usb 5-1: USB disconnect, device number 7 [ 137.768950][ T4260] option 5-1:8.7: device disconnected [ 137.919862][ T4300] hub 3-1:4.0: 4 ports detected [ 137.924820][ T4300] usb 3-1: selecting invalid altsetting 1 [ 137.967028][ T4300] hub 3-1:4.0: Using single TT (err -22) [ 138.009786][ T4300] hub 3-1:4.0: insufficient power available to use all downstream ports [ 138.139769][ T4300] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 138.149551][ T4300] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 138.201099][ T7259] SET target dimension over the limit! [ 138.234422][ T7264] loop1: detected capacity change from 0 to 64 [ 138.243988][ T4300] usb 3-1: USB disconnect, device number 9 [ 138.491571][ T7274] tmpfs: Bad value for 'mpol' [ 138.529925][ T7270] loop0: detected capacity change from 0 to 4096 [ 138.640815][ T7270] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 138.740789][ T7285] netlink: 'syz.4.1400': attribute type 3 has an invalid length. [ 138.758215][ T7270] ntfs3: loop0: Failed to load $Extend. [ 138.773172][ T7285] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1400'. [ 138.880657][ T7289] loop3: detected capacity change from 0 to 128 [ 139.159903][ T7301] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.683792][ T7328] loop2: detected capacity change from 0 to 2048 [ 139.862906][ T7328] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=18446736377128157191, rec_len=65535, name_len=255 [ 140.039239][ T7348] binfmt_misc: register: failed to install interpreter file ./file2 [ 140.207106][ T7357] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 140.284337][ T7357] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 140.516816][ T7316] loop1: detected capacity change from 0 to 40427 [ 140.564711][ T7316] F2FS-fs (loop1): Invalid log blocks per segment (4278190089) [ 140.564771][ T7316] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 140.598868][ T7376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1447'. [ 140.598906][ T7376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1447'. [ 140.598925][ T7376] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 140.609590][ T7316] F2FS-fs (loop1): invalid crc value [ 140.649062][ T7316] F2FS-fs (loop1): Found nat_bits in checkpoint [ 140.666886][ T7382] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1449'. [ 140.685146][ T7383] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1450'. [ 140.685172][ T7383] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1450'. [ 140.685189][ T7383] netlink: 'syz.2.1450': attribute type 3 has an invalid length. [ 140.685202][ T7383] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1450'. [ 140.825982][ T7316] F2FS-fs (loop1): recover fsync data on readonly fs [ 140.835593][ T7316] F2FS-fs (loop1): Try to recover 1th superblock, ret: -30 [ 140.835895][ T7316] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 140.994785][ T7316] F2FS-fs (loop1): Try to recover all the superblocks, ret: 0 [ 141.428825][ T7429] mmap: syz.4.1471 (7429) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 141.441578][ T5617] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 141.799836][ T5617] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 141.820515][ T5617] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 141.839606][ T5617] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 141.878940][ T5617] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 141.970111][ T5617] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 142.005189][ T7453] loop1: detected capacity change from 0 to 16 [ 142.026191][ T5617] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.088505][ T5617] usb 4-1: config 0 descriptor?? [ 142.102476][ T7453] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 142.176520][ T7457] sctp: [Deprecated]: syz.4.1485 (pid 7457) Use of int in max_burst socket option deprecated. [ 142.176520][ T7457] Use struct sctp_assoc_value instead [ 142.389842][ T5617] hdpvr 4-1:0.0: firmware version 0x12 dated [ 142.619611][ T5617] hdpvr 4-1:0.0: device init failed [ 142.624939][ T5617] hdpvr: probe of 4-1:0.0 failed with error -12 [ 142.649402][ T5617] usb 4-1: USB disconnect, device number 4 [ 142.841977][ T7475] loop4: detected capacity change from 0 to 4096 [ 142.948908][ T7475] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 142.981371][ T7475] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 143.029547][ T7475] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 143.078898][ T7475] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 143.115233][ T7475] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 143.147840][ T7475] ntfs: volume version 3.1. [ 143.165539][ T7475] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 143.200054][ T7475] ntfs: (device loop4): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 143.272574][ T7490] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 143.293413][ T7475] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 143.328313][ T7475] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 143.370553][ T7475] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 143.652224][ T7507] nft_compat: unsupported protocol 5 [ 143.807489][ T7518] overlayfs: missing 'lowerdir' [ 143.867050][ T7512] loop0: detected capacity change from 0 to 4096 [ 143.981010][ T7512] ntfs: volume version 3.1. [ 144.527553][ T7561] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1537'. [ 144.651973][ T7571] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1542'. [ 144.979939][ T7588] loop4: detected capacity change from 0 to 256 [ 144.992721][ T7590] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.1552'. [ 145.071859][ T7588] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbc404fdd, utbl_chksum : 0xe619d30d) [ 145.109347][ T7597] loop1: detected capacity change from 0 to 128 [ 145.184834][ T7588] exFAT-fs (loop4): error, found bogus dentry(8) beyond unused empty group(7) (start_clu : 5, cur_clu : 5) [ 145.440663][ T7617] netlink: 'syz.0.1565': attribute type 3 has an invalid length. [ 145.546817][ T7621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1567'. [ 145.583329][ T7624] loop4: detected capacity change from 0 to 256 [ 145.660486][ T7624] exfat: Deprecated parameter 'utf8' [ 145.665851][ T7624] exfat: Deprecated parameter 'utf8' [ 145.768305][ T7624] exfat: Deprecated parameter 'namecase' [ 145.799642][ T7624] exfat: Deprecated parameter 'namecase' [ 145.830753][ T7633] netlink: 'syz.1.1573': attribute type 21 has an invalid length. [ 145.866203][ T7624] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 145.879874][ T7633] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1573'. [ 145.933687][ T7639] netlink: 'syz.0.1577': attribute type 2 has an invalid length. [ 146.152939][ T7653] netlink: 'syz.3.1581': attribute type 10 has an invalid length. [ 146.183745][ T7653] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1581'. [ 146.236014][ T7653] device team0 entered promiscuous mode [ 146.264746][ T7653] device team_slave_0 entered promiscuous mode [ 146.287453][ T7653] device team_slave_1 entered promiscuous mode [ 146.318364][ T7653] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.357196][ T7653] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 146.685638][ T7673] overlayfs: unrecognized mount option "fsname=\(([\," or missing value [ 146.959589][ T5613] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 147.007214][ T7693] loop1: detected capacity change from 0 to 512 [ 147.105023][ T7652] loop0: detected capacity change from 0 to 32768 [ 147.229857][ T7693] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,journal_ioprio=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 147.261328][ T7652] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 147.274822][ T7652] BTRFS warning (device loop0): excessive commit interval 65536 [ 147.283379][ T7652] BTRFS info (device loop0): using free space tree [ 147.290115][ T7652] BTRFS info (device loop0): has skinny extents [ 147.297443][ T7693] ext4 filesystem being mounted at /321/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.369871][ T5613] usb 4-1: unable to get BOS descriptor or descriptor too short [ 147.420302][ T5613] usb 4-1: not running at top speed; connect to a high speed hub [ 147.520121][ T5613] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 147.534032][ T7652] BTRFS info (device loop0): enabling ssd optimizations [ 147.686298][ T7746] device netdevsim0 entered promiscuous mode [ 147.699681][ T7746] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 147.718572][ T7744] loop1: detected capacity change from 0 to 1764 [ 147.729773][ T5613] usb 4-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 147.761589][ T5613] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.784759][ T5613] usb 4-1: Product: syz [ 147.790322][ T5613] usb 4-1: Manufacturer: syz [ 147.799727][ T5613] usb 4-1: SerialNumber: syz [ 147.826336][ T7744] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 148.156107][ T5613] vmk80xx 4-1:8.0: driver 'vmk80xx' failed to auto-configure device. [ 148.249775][ T5613] usb 4-1: USB disconnect, device number 5 [ 148.636038][ T7774] loop2: detected capacity change from 0 to 4096 [ 148.676603][ T7780] loop1: detected capacity change from 0 to 16 [ 148.725970][ T7784] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1637'. [ 148.791576][ T7780] erofs: (device loop1): mounted with root inode @ nid 36. [ 148.827824][ T7774] __ntfs_error: 16 callbacks suppressed [ 148.827841][ T7774] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 148.890267][ T7774] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 148.983488][ T7774] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 149.061421][ T7774] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 149.123105][ T7774] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 149.212773][ T7774] ntfs: volume version 3.1. [ 149.240161][ T7774] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 149.272933][ T7774] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 149.340479][ T7774] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 149.376612][ T7774] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 149.429044][ T7774] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 149.681463][ T7826] loop3: detected capacity change from 0 to 1024 [ 149.736557][ T7826] EXT4-fs (loop3): inline encryption not supported [ 149.790466][ T7762] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 149.832655][ T7833] loop4: detected capacity change from 0 to 64 [ 149.861382][ T7826] EXT4-fs error (device loop3): ext4_free_blocks:6232: comm syz.3.1658: Freeing blocks not in datazone - block = 0, count = 4096 [ 149.925981][ T7826] EXT4-fs (loop3): Remounting filesystem read-only [ 149.966701][ T7826] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.1658: Invalid inode bitmap blk 0 in block_group 0 [ 149.992133][ T7826] EXT4-fs (loop3): Remounting filesystem read-only [ 150.013108][ T7826] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 150.045309][ T7826] EXT4-fs (loop3): Remounting filesystem read-only [ 150.053244][ T7826] EXT4-fs (loop3): 1 orphan inode deleted [ 150.059006][ T7826] EXT4-fs (loop3): mounted filesystem without journal. Opts: ; noblock_validity,nolazytime,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,inlinecrypt,errors=remount-ro,. Quota mode: writeback. [ 150.149782][ T7762] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 150.173029][ T7762] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 150.185802][ T7762] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.202527][ T7826] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 150.237858][ T7839] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 150.261991][ T7762] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 150.289751][ T7815] loop0: detected capacity change from 0 to 40427 [ 150.298248][ T7839] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 150.318421][ T7839] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 150.345187][ T7815] F2FS-fs (loop0): Invalid log blocks per segment (4278190089) [ 150.371907][ T7815] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 150.418225][ T7815] F2FS-fs (loop0): invalid crc value [ 150.470835][ T7815] F2FS-fs (loop0): Found nat_bits in checkpoint [ 150.652698][ T7815] F2FS-fs (loop0): recover fsync data on readonly fs [ 150.709734][ T7815] F2FS-fs (loop0): Try to recover 1th superblock, ret: -30 [ 150.717005][ T7815] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 150.889245][ T7815] F2FS-fs (loop0): Try to recover all the superblocks, ret: 0 [ 150.944258][ T7864] loop4: detected capacity change from 0 to 256 [ 151.040004][ T7864] FAT-fs (loop4): Directory bread(block 64) failed [ 151.070691][ T7864] FAT-fs (loop4): Directory bread(block 65) failed [ 151.077455][ T7864] FAT-fs (loop4): Directory bread(block 66) failed [ 151.099039][ T7864] FAT-fs (loop4): Directory bread(block 67) failed [ 151.176405][ T7864] FAT-fs (loop4): Directory bread(block 68) failed [ 151.213473][ T7864] FAT-fs (loop4): Directory bread(block 69) failed [ 151.230683][ T7864] FAT-fs (loop4): Directory bread(block 70) failed [ 151.237306][ T7864] FAT-fs (loop4): Directory bread(block 71) failed [ 151.263382][ T7864] FAT-fs (loop4): Directory bread(block 72) failed [ 151.289975][ T7864] FAT-fs (loop4): Directory bread(block 73) failed [ 151.325170][ T7874] xt_hashlimit: size too large, truncated to 1048576 [ 151.330286][ T7762] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 151.549773][ T7762] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 151.565909][ T7762] stv0680 2-1:4.0: last error: 0, command = 0x0 [ 151.598585][ T7762] usb 2-1: USB disconnect, device number 8 [ 151.658311][ T7886] netlink: 'syz.0.1685': attribute type 1 has an invalid length. [ 151.792628][ T7890] device bond2 entered promiscuous mode [ 151.816639][ T7890] 8021q: adding VLAN 0 to HW filter on device bond2 [ 151.993176][ T7904] netlink: 'syz.4.1691': attribute type 10 has an invalid length. [ 152.021322][ T7900] loop3: detected capacity change from 0 to 1764 [ 152.045591][ T7904] team0: Port device bridge0 added [ 152.122972][ T7908] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1695'. [ 152.146192][ T7908] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1695'. [ 152.159962][ T7900] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 152.198958][ T7914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1697'. [ 152.407183][ T7924] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.478575][ T7924] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.490496][ T7932] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 152.536456][ T7924] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.570431][ T7924] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.856658][ T7949] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (2049) [ 152.993528][ T7959] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1719'. [ 153.019107][ T7962] loop3: detected capacity change from 0 to 256 [ 153.031989][ T7958] loop4: detected capacity change from 0 to 1024 [ 153.042576][ T7959] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1719'. [ 153.137424][ T7958] EXT4-fs (loop4): inline encryption not supported [ 153.159273][ T7958] EXT4-fs error (device loop4): ext4_free_blocks:6232: comm syz.4.1718: Freeing blocks not in datazone - block = 0, count = 4096 [ 153.194068][ T7958] EXT4-fs (loop4): Remounting filesystem read-only [ 153.217712][ T7958] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.1718: Invalid inode bitmap blk 0 in block_group 0 [ 153.276847][ T7962] FAT-fs (loop3): Directory bread(block 64) failed [ 153.286933][ T7958] EXT4-fs (loop4): Remounting filesystem read-only [ 153.300966][ T7958] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 153.308368][ T7962] FAT-fs (loop3): Directory bread(block 65) failed [ 153.332703][ T7958] EXT4-fs (loop4): Remounting filesystem read-only [ 153.343894][ T7962] FAT-fs (loop3): Directory bread(block 66) failed [ 153.359658][ T7958] EXT4-fs (loop4): 1 orphan inode deleted [ 153.364421][ T7962] FAT-fs (loop3): Directory bread(block 67) failed [ 153.379574][ T7958] EXT4-fs (loop4): mounted filesystem without journal. Opts: ; noblock_validity,nolazytime,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,inlinecrypt,errors=remount-ro,. Quota mode: writeback. [ 153.390748][ T7962] FAT-fs (loop3): Directory bread(block 68) failed [ 153.465545][ T7962] FAT-fs (loop3): Directory bread(block 69) failed [ 153.478871][ T7962] FAT-fs (loop3): Directory bread(block 70) failed [ 153.516452][ T7962] FAT-fs (loop3): Directory bread(block 71) failed [ 153.544387][ T7958] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 153.547367][ T7962] FAT-fs (loop3): Directory bread(block 72) failed [ 153.579776][ T7962] FAT-fs (loop3): Directory bread(block 73) failed [ 153.595648][ T7985] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 153.899743][ T4229] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 153.991161][ T8001] loop4: detected capacity change from 0 to 16 [ 154.061302][ T8001] erofs: (device loop4): mounted with root inode @ nid 36. [ 154.132946][ T8009] netlink: 'syz.0.1743': attribute type 21 has an invalid length. [ 154.150296][ T8009] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1743'. [ 154.197882][ T8009] netlink: 'syz.0.1743': attribute type 4 has an invalid length. [ 154.200194][ T4229] usb 2-1: Using ep0 maxpacket: 8 [ 154.206264][ T8009] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1743'. [ 154.350586][ T4229] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 154.379643][ T4229] usb 2-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 154.408516][ T4229] usb 2-1: config 6 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 154.604131][ T8029] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 154.629920][ T4300] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 154.637722][ T4229] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 154.650000][ T4229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.678797][ T4229] usb 2-1: Product: syz [ 154.688982][ T4229] usb 2-1: Manufacturer: syz [ 154.697272][ T8032] xt_TPROXY: Can be used only with -p tcp or -p udp [ 154.704926][ T4229] usb 2-1: SerialNumber: syz [ 154.764661][ T4229] hso 2-1:6.0: Can't find BULK IN endpoint [ 154.844304][ T8039] device netdevsim0 entered promiscuous mode [ 154.875779][ T8039] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1758'. [ 154.885809][ T8039] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 155.025167][ T4300] usb 4-1: config 127 has an invalid interface number: 95 but max is 0 [ 155.044024][ T4300] usb 4-1: config 127 has no interface number 0 [ 155.046134][ T5613] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 155.058481][ T1108] usb 2-1: USB disconnect, device number 9 [ 155.064991][ T4300] usb 4-1: config 127 interface 95 altsetting 0 endpoint 0xC has an invalid bInterval 132, changing to 11 [ 155.078626][ T4300] usb 4-1: config 127 interface 95 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 32 [ 155.090419][ T4300] usb 4-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice= e.76 [ 155.099994][ T4300] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.125659][ T8049] capability: warning: `syz.0.1763' uses 32-bit capabilities (legacy support in use) [ 155.140517][ T8013] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 155.162742][ T4300] ti_usb_3410_5052 4-1:127.95: TI USB 3410 1 port adapter converter detected [ 155.179762][ T4300] ti_usb_3410_5052 4-1:127.95: missing endpoints [ 155.333048][ T5613] usb 3-1: Using ep0 maxpacket: 32 [ 155.407183][ T8064] netlink: 'syz.4.1770': attribute type 1 has an invalid length. [ 155.420950][ T1108] usb 4-1: USB disconnect, device number 6 [ 155.432842][ T8064] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1770'. [ 155.463569][ T5613] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 155.482099][ T5613] usb 3-1: config 0 has no interface number 0 [ 155.488274][ T5613] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 155.532630][ T5613] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 155.555887][ T8069] netlink: 1244 bytes leftover after parsing attributes in process `syz.0.1773'. [ 155.627944][ T8073] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 155.721160][ T5613] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 155.730629][ T5613] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.738648][ T5613] usb 3-1: Product: syz [ 155.768774][ T5613] usb 3-1: Manufacturer: syz [ 155.780646][ T5613] usb 3-1: SerialNumber: syz [ 155.801731][ T5613] usb 3-1: config 0 descriptor?? [ 156.069784][ T5613] radio-si470x 3-1:0.35: this is not a si470x device. [ 156.107734][ T8094] loop4: detected capacity change from 0 to 764 [ 156.116292][ T8095] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 156.203897][ T8094] Symlink component flag not implemented [ 156.229934][ T8094] Symlink component flag not implemented (15) [ 156.281157][ T5613] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 156.357436][ T5613] usb 3-1: USB disconnect, device number 10 [ 156.490644][ T8108] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 156.831560][ T8127] loop0: detected capacity change from 0 to 164 [ 156.883832][ T8127] overlayfs: upper fs is r/o, try multi-lower layers mount [ 156.896624][ T8131] loop4: detected capacity change from 0 to 256 [ 156.947870][ T8131] exfat: Deprecated parameter 'namecase' [ 156.969438][ T8131] exfat: Deprecated parameter 'utf8' [ 157.038746][ T8131] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 157.097123][ T8142] netlink: 'syz.0.1808': attribute type 1 has an invalid length. [ 157.137669][ T8145] loop3: detected capacity change from 0 to 1024 [ 157.205804][ T8145] EXT4-fs (loop3): Ignoring removed bh option [ 157.247629][ T8149] loop0: detected capacity change from 0 to 512 [ 157.275526][ T8145] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nodioread_nolock,jqfmt=vfsv0,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,discard,. Quota mode: none. [ 157.327926][ T8149] EXT4-fs (loop0): Ignoring removed nobh option [ 157.345600][ T8149] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 157.362502][ T8145] EXT4-fs error (device loop3): __ext4_new_inode:1076: comm syz.3.1811: reserved inode found cleared - inode=18 [ 157.469683][ T8149] EXT4-fs (loop0): orphan cleanup on readonly fs [ 157.493447][ T8145] EXT4-fs (loop3): Remounting filesystem read-only [ 157.530796][ T8149] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.1813: bad orphan inode 15 [ 157.565192][ T8149] ext4_test_bit(bit=14, block=18) = 1 [ 157.574846][ T8149] is_bad_inode(inode)=0 [ 157.579354][ T8149] NEXT_ORPHAN(inode)=1023 [ 157.594704][ T8149] max_ino=32 [ 157.630071][ T8149] i_nlink=0 [ 157.643509][ T8149] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1813: bg 0: block 161: padding at end of block bitmap is not set [ 157.687618][ T8149] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 157.708637][ T5613] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 157.725790][ T8149] EXT4-fs (loop0): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,nobh,,errors=continue. Quota mode: none. [ 157.897176][ T8176] __nla_validate_parse: 2 callbacks suppressed [ 157.897193][ T8176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1825'. [ 158.085626][ T8182] device bridge1 entered promiscuous mode [ 158.114110][ T8184] loop0: detected capacity change from 0 to 256 [ 158.210184][ T8184] exfat: Deprecated parameter 'utf8' [ 158.215788][ T8184] exfat: Deprecated parameter 'utf8' [ 158.239967][ T5613] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 158.269947][ T8184] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 158.280060][ T5613] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.295014][ T8194] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1834'. [ 158.303667][ T5613] usb 5-1: Product: syz [ 158.308558][ T5613] usb 5-1: Manufacturer: syz [ 158.338505][ T5613] usb 5-1: SerialNumber: syz [ 158.391136][ T5613] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 158.668337][ T8206] openvswitch: netlink: Actions may not be safe on all matching packets [ 158.761976][ T8210] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 158.805354][ T8210] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 158.844693][ T8210] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 158.918289][ T8210] device netdevsim0 left promiscuous mode [ 159.059855][ T5613] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 159.075170][ T8196] loop3: detected capacity change from 0 to 32768 [ 159.196959][ T8196] JBD2: Ignoring recovery information on journal [ 159.309749][ T8196] JBD2: Unrecognised features on journal [ 159.315466][ T8196] (syz.3.1835,8196,1):ocfs2_journal_load:1105 ERROR: Failed to load journal! [ 159.351413][ T8227] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 159.359835][ T8196] (syz.3.1835,8196,0):ocfs2_check_volume:2437 ERROR: ocfs2 journal load failed! -22 [ 159.359910][ T8196] (syz.3.1835,8196,0):ocfs2_check_volume:2493 ERROR: status = -22 [ 159.359933][ T8196] (syz.3.1835,8196,0):ocfs2_mount_volume:1824 ERROR: status = -22 [ 159.397365][ T8196] (syz.3.1835,8196,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 159.476508][ T4300] usb 5-1: USB disconnect, device number 8 [ 159.570622][ T8196] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 159.720719][ T8236] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 159.962774][ T8246] netlink: 'syz.0.1859': attribute type 4 has an invalid length. [ 160.032073][ T8246] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1859'. [ 160.092242][ T8257] netlink: 'syz.3.1864': attribute type 15 has an invalid length. [ 160.107252][ T8257] IPv6: NLM_F_CREATE should be specified when creating new route [ 160.154192][ T8259] Cannot find add_set index 0 as target [ 160.170235][ T5613] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 160.178053][ T5613] ath9k_htc: Failed to initialize the device [ 160.221924][ T4300] usb 5-1: ath9k_htc: USB layer deinitialized [ 160.284002][ T8268] netlink: 'syz.1.1870': attribute type 13 has an invalid length. [ 160.647980][ T8268] gretap0: refused to change device tx_queue_len [ 160.664902][ T8268] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 160.674442][ T8290] openvswitch: netlink: Message has 8 unknown bytes. [ 160.688698][ T8290] openvswitch: netlink: Actions may not be safe on all matching packets [ 160.777427][ T8286] sp0: Synchronizing with TNC [ 160.984331][ T8306] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1888'. [ 161.122406][ T7] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 161.539564][ T8340] ieee802154 phy0 wpan0: encryption failed: -22 [ 161.649916][ T7] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 161.664043][ T7] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 161.682779][ T7] usb 3-1: Product: syz [ 161.687059][ T7] usb 3-1: Manufacturer: syz [ 161.724310][ T7] usb 3-1: SerialNumber: syz [ 161.743839][ T7] usb 3-1: config 0 descriptor?? [ 161.756156][ T8352] xt_TPROXY: Can be used only with -p tcp or -p udp [ 161.782417][ T7] ch341 3-1:0.0: ch341-uart converter detected [ 161.999794][ T7] usb 3-1: short control message received (0 < 2) [ 162.019555][ T7] usb 3-1: failed to receive control message: -5 [ 162.026032][ T7] ch341-uart: probe of ttyUSB0 failed with error -5 [ 162.257210][ T7] usb 3-1: USB disconnect, device number 11 [ 162.265183][ T7] ch341 3-1:0.0: device disconnected [ 162.559252][ T8402] loop1: detected capacity change from 0 to 256 [ 162.648641][ T8402] FAT-fs (loop1): Directory bread(block 64) failed [ 162.676083][ T8402] FAT-fs (loop1): Directory bread(block 65) failed [ 162.705893][ T8402] FAT-fs (loop1): Directory bread(block 66) failed [ 162.724627][ T8402] FAT-fs (loop1): Directory bread(block 67) failed [ 162.741571][ T8402] FAT-fs (loop1): Directory bread(block 68) failed [ 162.748273][ T8402] FAT-fs (loop1): Directory bread(block 69) failed [ 162.762044][ T8402] FAT-fs (loop1): Directory bread(block 70) failed [ 162.768749][ T8402] FAT-fs (loop1): Directory bread(block 71) failed [ 162.779167][ T8402] FAT-fs (loop1): Directory bread(block 72) failed [ 162.798561][ T8402] FAT-fs (loop1): Directory bread(block 73) failed [ 162.899680][ T7] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 163.048274][ T8423] loop2: detected capacity change from 0 to 2048 [ 163.120887][ T8423] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 163.185013][ T8431] xt_hashlimit: max too large, truncated to 1048576 [ 163.212265][ T8431] xt_hashlimit: overflow, rate too high: 0 [ 163.217563][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 163.217606][ T26] audit: type=1800 audit(1776208878.963:6): pid=8423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1945" name="file1" dev="loop2" ino=1367 res=0 errno=0 [ 163.270300][ T4300] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 163.449819][ T7] usb 1-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=33.00 [ 163.459008][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.509579][ T7] usb 1-1: Product: syz [ 163.525814][ T7] usb 1-1: Manufacturer: syz [ 163.554456][ T7] usb 1-1: SerialNumber: syz [ 163.567561][ T7] usb 1-1: config 0 descriptor?? [ 163.616164][ T8448] loop1: detected capacity change from 0 to 512 [ 163.631232][ T7] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 163.649865][ T7] usb 1-1: Detected FT-X [ 163.665302][ T4300] usb 5-1: config 0 has an invalid interface number: 3 but max is 2 [ 163.676517][ T4300] usb 5-1: config 0 has an invalid interface number: 176 but max is 2 [ 163.693721][ T4300] usb 5-1: config 0 has no interface number 1 [ 163.704491][ T4300] usb 5-1: config 0 has no interface number 2 [ 163.713173][ T4300] usb 5-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 163.737058][ T4300] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.757665][ T4300] usb 5-1: config 0 descriptor?? [ 163.767935][ T8448] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 163.786338][ T8448] EXT4-fs (loop1): external journal has bad superblock [ 164.019790][ T4300] qcserial 5-1:0.3: Qualcomm USB modem converter detected [ 164.069814][ T7] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 164.099644][ T7] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 164.132088][ T7] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 164.168798][ T7] usb 1-1: USB disconnect, device number 6 [ 164.180193][ T8474] xt_limit: Overflow, try lower: 65536/2147483648 [ 164.203067][ T7] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 164.233611][ T7] ftdi_sio 1-1:0.0: device disconnected [ 164.289921][ T4300] usb 5-1: USB disconnect, device number 9 [ 164.296721][ T4300] qcserial 5-1:0.3: device disconnected [ 164.636041][ T8500] usb usb9: usbfs: interface 0 claimed by hub while 'syz.0.1983' sets config #5 [ 164.850338][ T8514] loop0: detected capacity change from 0 to 512 [ 164.897954][ T8514] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 164.897954][ T8514] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 164.897954][ T8514] [ 164.960938][ T8514] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 165.089345][ T8514] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=80026019, mo2=0000] [ 165.186121][ T8514] EXT4-fs (loop0): 1 truncate cleaned up [ 165.215609][ T155] Quota error (device loop0): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 165.245116][ T8514] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,noblock_validity,nombcache,acl,barrier=0x000000000000000c,noacl,max_batch_time=0x0000000000000006,nodelalloc,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 165.278647][ T8539] netlink: 344 bytes leftover after parsing attributes in process `syz.3.1999'. [ 165.278810][ T155] EXT4-fs error (device loop0): ext4_release_dquot:6270: comm kworker/u4:3: Failed to release dquot type 1 [ 165.319078][ T8524] loop4: detected capacity change from 0 to 4096 [ 165.369695][ T5613] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 165.387306][ T8524] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 165.410699][ T8524] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 165.478730][ T8524] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 165.512661][ T8524] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 165.555045][ T4291] Quota error (device loop0): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 165.582652][ T4291] EXT4-fs error (device loop0): ext4_release_dquot:6270: comm kworker/u4:6: Failed to release dquot type 1 [ 165.594577][ T8524] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 165.682144][ T8524] ntfs: volume version 3.1. [ 165.695614][ T8524] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 165.770900][ T8524] ntfs: (device loop4): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 165.776172][ T8554] loop0: detected capacity change from 0 to 512 [ 165.784757][ T5613] usb 3-1: unable to get BOS descriptor or descriptor too short [ 165.859898][ T5613] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.937569][ T8554] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 165.965774][ T8554] System zones: 0-2, 18-18, 34-34 [ 166.045330][ T8554] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 166.140980][ T5613] usb 3-1: string descriptor 0 read error: -22 [ 166.147285][ T5613] usb 3-1: New USB device found, idVendor=054c, idProduct=0095, bcdDevice=a5.6a [ 166.159597][ T8554] EXT4-fs (loop0): Remounting filesystem read-only [ 166.186694][ T8554] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #16: comm syz.0.2004: corrupted inode contents [ 166.229240][ T5613] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.255383][ T8571] loop4: detected capacity change from 0 to 4096 [ 166.275218][ T8554] EXT4-fs (loop0): Remounting filesystem read-only [ 166.284555][ T8554] EXT4-fs error (device loop0): ext4_dirty_inode:6058: inode #16: comm syz.0.2004: mark_inode_dirty error [ 166.311040][ T8554] EXT4-fs (loop0): Remounting filesystem read-only [ 166.327574][ T8554] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #16: comm syz.0.2004: corrupted inode contents [ 166.350470][ T8554] EXT4-fs (loop0): Remounting filesystem read-only [ 166.365075][ T8554] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.2004: mark_inode_dirty error [ 166.408109][ T8554] EXT4-fs (loop0): Remounting filesystem read-only [ 166.428552][ T8571] ntfs3: loop4: ino=5, "/" directory corrupted [ 166.436316][ T8554] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #16: comm syz.0.2004: corrupted inode contents [ 166.470076][ T8554] EXT4-fs (loop0): Remounting filesystem read-only [ 166.476657][ T8554] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.2004: mark_inode_dirty error [ 166.519709][ T5613] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 166.530695][ T8554] EXT4-fs (loop0): Remounting filesystem read-only [ 166.537464][ T8554] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #16: comm syz.0.2004: corrupted inode contents [ 166.558393][ T5613] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 166.579352][ T5613] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 166.601777][ T8554] EXT4-fs (loop0): Remounting filesystem read-only [ 166.619374][ T8554] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 166.635643][ T8554] EXT4-fs (loop0): Remounting filesystem read-only [ 166.675612][ T8554] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #16: comm syz.0.2004: corrupted inode contents [ 166.733572][ T7762] usb 3-1: USB disconnect, device number 12 [ 166.750141][ T8554] EXT4-fs (loop0): Remounting filesystem read-only [ 166.756710][ T8554] EXT4-fs error (device loop0): ext4_truncate:4279: inode #16: comm syz.0.2004: mark_inode_dirty error [ 166.768304][ T5613] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 166.781762][ T7762] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 166.819048][ T7762] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 166.830779][ T8554] EXT4-fs (loop0): Remounting filesystem read-only [ 166.837331][ T8554] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 166.858680][ T8554] EXT4-fs (loop0): Remounting filesystem read-only [ 166.863827][ T7762] visor 3-1:1.0: device disconnected [ 166.869239][ T8554] EXT4-fs (loop0): 1 truncate cleaned up [ 166.876321][ T8554] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,debug,. Quota mode: writeback. [ 166.942999][ T8554] ext4 filesystem being mounted at /407/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.095489][ T8554] EXT4-fs error (device loop0): ext4_get_first_dir_block:3608: inode #12: comm syz.0.2004: directory missing '.' [ 167.096589][ T8601] loop1: detected capacity change from 0 to 512 [ 167.121164][ T8554] EXT4-fs (loop0): Remounting filesystem read-only [ 167.130015][ T5613] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 167.141525][ T5613] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 167.153118][ T5613] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 167.164552][ T5613] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 167.177921][ T5613] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 167.201862][ T5613] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.239804][ T8580] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 167.263030][ T5613] usb 4-1: invalid MIDI out EP 0 [ 167.270126][ T8601] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.2026: bad orphan inode 11862016 [ 167.310085][ T8601] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 167.364471][ T8601] ext4 filesystem being mounted at /414/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.494686][ T8614] usb usb9: usbfs: process 8614 (syz.2.2031) did not claim interface 8 before use [ 167.517786][ T5613] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 167.545665][ T5613] usb 4-1: USB disconnect, device number 7 [ 167.863745][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 168.021884][ T8640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2045'. [ 168.075129][ T8644] netlink: 45 bytes leftover after parsing attributes in process `syz.2.2047'. [ 168.298252][ T8656] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 168.521948][ T8668] usb usb1: usbfs: process 8668 (syz.1.2059) did not claim interface 0 before use [ 168.624836][ T8673] netlink: 'syz.4.2061': attribute type 13 has an invalid length. [ 168.699738][ T4229] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 168.733591][ T8677] loop1: detected capacity change from 0 to 512 [ 168.762725][ T8650] loop2: detected capacity change from 0 to 32768 [ 168.822037][ T8677] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 168.841234][ T8677] ext4 filesystem being mounted at /422/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.854345][ T8684] loop4: detected capacity change from 0 to 1024 [ 168.913407][ T8650] XFS (loop2): Mounting V5 Filesystem [ 168.959616][ T4226] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 168.979585][ T4229] usb 4-1: Using ep0 maxpacket: 16 [ 169.037178][ T8650] XFS (loop2): Ending clean mount [ 169.058533][ T8650] XFS (loop2): Quotacheck needed: Please wait. [ 169.119695][ T4229] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 169.133894][ T4229] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 169.144289][ T4229] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 169.154752][ T4229] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 169.165070][ T4229] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 169.175719][ T4229] usb 4-1: config 1 interface 0 has no altsetting 0 [ 169.183401][ T4229] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 169.193030][ T4229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.203319][ T8650] XFS (loop2): Quotacheck: Done. [ 169.239766][ T1108] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 169.271877][ T4198] XFS (loop2): Unmounting Filesystem [ 169.281669][ T4229] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 169.409740][ T4226] usb 1-1: unable to get BOS descriptor or descriptor too short [ 169.497031][ T4229] scsi host1: usb-storage 4-1:1.0 [ 169.502456][ T1108] usb 5-1: Using ep0 maxpacket: 8 [ 169.519689][ T4226] usb 1-1: config 66 has an invalid interface number: 168 but max is 0 [ 169.538188][ T4226] usb 1-1: config 66 has an invalid descriptor of length 30, skipping remainder of the config [ 169.569775][ T4226] usb 1-1: config 66 has no interface number 0 [ 169.576036][ T4226] usb 1-1: config 66 interface 168 altsetting 131 has 0 endpoint descriptors, different from the interface descriptor's value: 20 [ 169.590809][ T4226] usb 1-1: config 66 interface 168 has no altsetting 0 [ 169.696452][ T7761] Bluetooth: hci0: command 0x0c20 tx timeout [ 169.725414][ T4229] usb 4-1: USB disconnect, device number 8 [ 169.745890][ T8709] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (8) [ 169.780362][ T4226] usb 1-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 169.794151][ T4226] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.823380][ T1108] usb 5-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=88.56 [ 169.839536][ T4226] usb 1-1: Product: syz [ 169.843926][ T1108] usb 5-1: New USB device strings: Mfr=102, Product=169, SerialNumber=3 [ 169.853973][ T4226] usb 1-1: Manufacturer: syz [ 169.858616][ T4226] usb 1-1: SerialNumber: syz [ 169.869502][ T1108] usb 5-1: Product: syz [ 169.873713][ T1108] usb 5-1: Manufacturer: syz [ 169.889898][ T1108] usb 5-1: SerialNumber: syz [ 169.912920][ T1108] usb 5-1: config 0 descriptor?? [ 169.982152][ T1108] pwc: Logitech ViewPort AV 100 webcam detected. [ 170.123533][ T8726] comedi comedi3: pcmda12: I/O port conflict (0x5,16) [ 170.229842][ T1108] pwc: Failed to set LED on/off time (-71) [ 170.256850][ T1108] pwc: send_video_command error -71 [ 170.273258][ T4226] usb 1-1: USB disconnect, device number 7 [ 170.279222][ T1108] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 170.319712][ T1108] Philips webcam: probe of 5-1:0.0 failed with error -71 [ 170.353780][ T1108] usb 5-1: USB disconnect, device number 10 [ 170.534215][ T8741] loop1: detected capacity change from 0 to 4096 [ 170.566276][ T8743] loop3: detected capacity change from 0 to 4096 [ 170.579294][ T8745] loop2: detected capacity change from 0 to 128 [ 170.615815][ T8743] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 170.742425][ T8741] ntfs3: loop1: ino=5, "/" directory corrupted [ 170.786019][ T154] hfsplus: b-tree write err: -5, ino 25 [ 170.796367][ T154] hfsplus: b-tree write err: -5, ino 4 [ 170.826552][ T154] hfsplus: b-tree write err: -5, ino 2 [ 171.027667][ T8757] netlink: 'syz.0.2096': attribute type 21 has an invalid length. [ 171.061599][ T8757] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2096'. [ 171.110623][ T8756] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 171.326836][ T8769] xt_TCPMSS: Only works on TCP SYN packets [ 171.505738][ T8779] netlink: 'syz.0.2106': attribute type 1 has an invalid length. [ 171.546700][ T8781] Sensor A: ================= START STATUS ================= [ 171.574918][ T8781] Sensor A: Test Pattern: 75% Colorbar [ 171.598302][ T8781] Sensor A: Show Information: All [ 171.611343][ T8781] Sensor A: Vertical Flip: false [ 171.633479][ T8781] Sensor A: Horizontal Flip: false [ 171.671109][ T8785] loop0: detected capacity change from 0 to 512 [ 171.680964][ T8781] Sensor A: Brightness: 128 [ 171.685578][ T8781] Sensor A: Contrast: 128 [ 171.715268][ T8781] Sensor A: Hue: 0 [ 171.719107][ T8781] Sensor A: Saturation: 128 [ 171.731481][ T8788] loop1: detected capacity change from 0 to 64 [ 171.737806][ T8781] Sensor A: ================== END STATUS ================== [ 171.755251][ T8785] EXT4-fs (loop0): Test dummy encryption mode enabled [ 171.778493][ T8785] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 171.851033][ T8785] EXT4-fs error (device loop0): xattr_find_entry:297: inode #15: comm syz.0.2109: corrupted xattr entries [ 171.913709][ T8748] loop2: detected capacity change from 0 to 32768 [ 171.968776][ T8785] EXT4-fs (loop0): Remounting filesystem read-only [ 172.008966][ T8799] loop4: detected capacity change from 0 to 8192 [ 172.025313][ T8785] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 172.050367][ T8785] EXT4-fs (loop0): 1 orphan inode deleted [ 172.056339][ T8785] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,errors=remount-ro,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,test_dummy_encryption,. Quota mode: none. [ 172.077326][ T8748] XFS (loop2): Mounting V5 Filesystem [ 172.094369][ T8799] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 172.109873][ T8799] REISERFS (device loop4): using ordered data mode [ 172.116450][ T8799] reiserfs: using flush barriers [ 172.160364][ T8799] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 172.178127][ T8799] REISERFS (device loop4): checking transaction log (loop4) [ 172.347209][ T8748] XFS (loop2): Ending clean mount [ 172.436930][ T8748] XFS (loop2): Quotacheck needed: Please wait. [ 172.466552][ T8799] REISERFS (device loop4): Using tea hash to sort names [ 172.649954][ T8748] XFS (loop2): Quotacheck: Done. [ 172.740915][ T4198] XFS (loop2): Unmounting Filesystem [ 172.771940][ T8799] reiserfs: enabling write barrier flush mode [ 172.873126][ T8799] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 173.344125][ T8850] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 173.436497][ T8846] hfsplus: invalid length 32517 has been corrected to 255 [ 173.975913][ T8876] trusted_key: encrypted_key: insufficient parameters specified [ 174.129596][ T4229] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 174.239369][ T8848] set_capacity_and_notify: 2 callbacks suppressed [ 174.239385][ T8848] loop0: detected capacity change from 0 to 32768 [ 174.372427][ T8848] ERROR: (device loop0): diAllocBit: iag inconsistent [ 174.372427][ T8848] [ 174.396691][ T8848] ialloc: diAlloc returned -5! [ 174.410021][ T4229] usb 2-1: Using ep0 maxpacket: 16 [ 174.540026][ T4229] usb 2-1: config 212 has an invalid interface number: 172 but max is 0 [ 174.570081][ T4229] usb 2-1: config 212 has no interface number 0 [ 174.588508][ T8904] loop2: detected capacity change from 0 to 4096 [ 174.589229][ T4229] usb 2-1: config 212 interface 172 has no altsetting 0 [ 174.754745][ T8915] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 174.799773][ T4229] usb 2-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=72.7d [ 174.808942][ T4229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.848140][ T8904] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=4096, inode=0, rec_len=0, name_len=0 [ 174.859589][ T4229] usb 2-1: Product: syz [ 174.872103][ T8917] loop0: detected capacity change from 0 to 512 [ 174.888017][ T4229] usb 2-1: Manufacturer: syz [ 174.898493][ T4229] usb 2-1: SerialNumber: syz [ 174.927443][ T8904] Remounting filesystem read-only [ 174.941868][ T8917] FAT-fs (loop0): Directory bread(block 199916) failed [ 174.990185][ T8917] FAT-fs (loop0): Directory bread(block 199917) failed [ 175.015148][ T8917] FAT-fs (loop0): Directory bread(block 199918) failed [ 175.030313][ T8917] FAT-fs (loop0): Directory bread(block 199919) failed [ 175.079598][ T8917] FAT-fs (loop0): Directory bread(block 199920) failed [ 175.109184][ T8917] FAT-fs (loop0): Directory bread(block 199921) failed [ 175.157372][ T8917] FAT-fs (loop0): Directory bread(block 199922) failed [ 175.177689][ T8917] FAT-fs (loop0): Directory bread(block 199923) failed [ 175.215113][ T8917] FAT-fs (loop0): Directory bread(block 199916) failed [ 175.250548][ T4229] ipw 2-1:212.172: IPWireless converter converter detected [ 175.293966][ T4229] usb 2-1: USB disconnect, device number 10 [ 175.323927][ T4229] ipw 2-1:212.172: device disconnected [ 175.334292][ T8917] FAT-fs (loop0): Directory bread(block 199917) failed [ 175.664921][ T8941] loop2: detected capacity change from 0 to 2048 [ 175.735271][ T8947] loop3: detected capacity change from 0 to 1024 [ 175.756849][ T8941] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 175.826089][ T8952] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 175.910058][ T8954] comedi comedi0: dt2801: I/O port conflict (0x8,2) [ 176.290449][ T1108] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 176.384796][ T8980] loop4: detected capacity change from 0 to 512 [ 176.476105][ T8980] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000e94,max_dir_size_kb=0x0000000000000004,min_batch_time=0x000000000000000b,quota,,errors=continue. Quota mode: writeback. [ 176.488817][ T8984] befs: (loop1): No write support. Marking filesystem read-only [ 176.510429][ T8984] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 176.532925][ T8980] ext4 filesystem being mounted at /427/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 176.541009][ T8984] befs: (loop1): unable to read superblock [ 176.569609][ T7] Bluetooth: hci0: command 0x080f tx timeout [ 176.638025][ T8992] loop2: detected capacity change from 0 to 8 [ 176.716435][ T8992] SQUASHFS error: Failed to read block 0x6fc: -5 [ 176.726205][ T8992] SQUASHFS error: Unable to read metadata cache entry [6fa] [ 176.889823][ T1108] usb 4-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=33.00 [ 176.898977][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.928034][ T9006] loop4: detected capacity change from 0 to 16 [ 176.945145][ T1108] usb 4-1: Product: syz [ 176.949378][ T1108] usb 4-1: Manufacturer: syz [ 176.955416][ T9002] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 176.968459][ T1108] usb 4-1: SerialNumber: syz [ 176.991972][ T1108] usb 4-1: config 0 descriptor?? [ 177.031867][ T9006] erofs: (device loop4): mounted with root inode @ nid 36. [ 177.061300][ T1108] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 177.080161][ T1108] usb 4-1: Detected FT-X [ 177.167167][ T9010] loop2: detected capacity change from 0 to 4096 [ 177.224506][ T9010] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 177.259430][ T9022] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 177.304231][ T9010] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 177.519633][ T1108] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 177.546178][ T1108] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 177.553341][ T144] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22. [ 177.569644][ T4198] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 177.576026][ T4198] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 177.586084][ T1108] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 177.617681][ T4198] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 177.631927][ T1108] usb 4-1: USB disconnect, device number 9 [ 177.657787][ T4234] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22. [ 177.667842][ T4198] ntfs3: loop2: ntfs_evict_inode r=3 failed, -22. [ 177.680365][ T1108] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 177.716343][ T1108] ftdi_sio 4-1:0.0: device disconnected [ 178.058398][ T9045] loop0: detected capacity change from 0 to 4096 [ 178.193342][ T9056] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 178.223990][ T9045] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=4096, inode=0, rec_len=0, name_len=0 [ 178.273305][ T9045] Remounting filesystem read-only [ 178.356005][ T9064] libceph: resolve '0..' (ret=-3): failed [ 178.392349][ T9067] : renamed from ipvlan0 [ 178.829854][ T9093] netlink: 'syz.3.2250': attribute type 3 has an invalid length. [ 178.977882][ T9106] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 178.988792][ T9077] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 179.089662][ T9077] REISERFS (device loop4): using ordered data mode [ 179.106967][ T9077] reiserfs: using flush barriers [ 179.128925][ T9109] binder: 9108:9109 unknown command 1077961712 [ 179.166845][ T9077] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 179.196283][ T9109] binder: 9108:9109 ioctl c0306201 200000000480 returned -22 [ 179.207663][ T9094] NILFS (loop1): DAT doesn't have a block to manage vblocknr = 8796093022222 [ 179.229920][ T9094] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=16) [ 179.249996][ T9077] REISERFS (device loop4): checking transaction log (loop4) [ 179.298563][ T9077] REISERFS (device loop4): Using r5 hash to sort names [ 179.308019][ T9094] Remounting filesystem read-only [ 179.339928][ T9094] NILFS (loop1): error -5 truncating bmap (ino=16) [ 179.345953][ T9077] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 179.481402][ T4183] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 179.749763][ T1108] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 180.169904][ T1108] usb 3-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e [ 180.179071][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.262106][ T1108] pwc: Logitech/Cisco VT Camera webcam detected. [ 180.386072][ T9116] set_capacity_and_notify: 2 callbacks suppressed [ 180.386089][ T9116] loop0: detected capacity change from 0 to 32768 [ 180.403020][ T9154] i2c i2c-0: Invalid block write size 253 [ 180.441154][ T9156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2280'. [ 180.533900][ T9136] loop3: detected capacity change from 0 to 32768 [ 180.553775][ T4234] general protection fault, probably for non-canonical address 0xdffffc00000000ba: 0000 [#1] PREEMPT SMP KASAN [ 180.565560][ T4234] KASAN: null-ptr-deref in range [0x00000000000005d0-0x00000000000005d7] [ 180.574009][ T4234] CPU: 1 PID: 4234 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 180.581559][ T4234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 180.591646][ T4234] Workqueue: writeback wb_workfn (flush-7:0) [ 180.597683][ T4234] RIP: 0010:bio_associate_blkg_from_css+0x128/0x9c0 [ 180.604303][ T4234] Code: df 41 80 3c 04 00 74 08 48 89 df e8 c2 1b ec fd 41 be d0 05 00 00 4c 03 33 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 f7 e8 9a 1b ec fd 41 bf 90 00 00 00 4d 03 [ 180.623953][ T4234] RSP: 0018:ffffc900031ef260 EFLAGS: 00010202 [ 180.630052][ T4234] RAX: 00000000000000ba RBX: ffff88801e9bba08 RCX: dffffc0000000000 [ 180.638062][ T4234] RDX: 0000000000000000 RSI: ffffffff96482e00 RDI: ffff88801e9bba00 [ 180.646064][ T4234] RBP: 1ffff11003d37749 R08: dffffc0000000000 R09: 1ffffffff203a818 [ 180.654092][ T4234] R10: dffffc0000000000 R11: fffffbfff203a819 R12: 1ffff11003d37741 [ 180.662169][ T4234] R13: ffff88801e9bba48 R14: 00000000000005d0 R15: ffff8880296dd96c [ 180.670176][ T4234] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 180.679134][ T4234] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 180.685746][ T4234] CR2: 00007fc06d3f2a08 CR3: 0000000063607000 CR4: 00000000003506e0 [ 180.693754][ T4234] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 180.701760][ T4234] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 180.709766][ T4234] Call Trace: [ 180.713073][ T4234] [ 180.716035][ T4234] bio_associate_blkg+0x23a/0x340 [ 180.721095][ T4234] lbmStartIO+0x204/0x4c0 [ 180.725463][ T4234] lbmWrite+0x361/0x480 [ 180.729657][ T4234] jfs_flush_journal+0x537/0xec0 [ 180.734636][ T4234] ? lmLogShutdown+0x850/0x850 [ 180.739434][ T4234] ? __lock_acquire+0x7d10/0x7d10 [ 180.744481][ T4234] ? do_raw_spin_lock+0x128/0x2f0 [ 180.749534][ T4234] ? __rwlock_init+0x140/0x140 [ 180.754322][ T4234] jfs_write_inode+0x12b/0x220 [ 180.759111][ T4234] __writeback_single_inode+0x6c3/0xda0 [ 180.764686][ T4234] writeback_sb_inodes+0xa4e/0x1680 [ 180.769927][ T4234] ? queue_io+0x550/0x550 [ 180.774291][ T4234] ? rcu_is_watching+0x11/0xa0 [ 180.779099][ T4234] wb_writeback+0x45d/0xbe0 [ 180.783636][ T4234] ? rcu_lock_release+0x20/0x20 [ 180.788514][ T4234] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 180.794536][ T4234] ? _raw_spin_unlock_irq+0x1f/0x40 [ 180.799767][ T4234] wb_workfn+0x43a/0xf20 [ 180.804055][ T4234] ? inode_wait_for_writeback+0x220/0x220 [ 180.809814][ T4234] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 180.815839][ T4234] ? read_lock_is_recursive+0x10/0x10 [ 180.821241][ T4234] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 180.827167][ T4234] ? _raw_spin_unlock+0x40/0x40 [ 180.832053][ T4234] ? _raw_spin_unlock_irq+0x1f/0x40 [ 180.837283][ T4234] process_one_work+0x85f/0x1010 [ 180.842259][ T4234] ? worker_detach_from_pool+0x240/0x240 [ 180.847924][ T4234] ? lockdep_hardirqs_off+0x70/0x100 [ 180.853244][ T4234] ? _raw_spin_lock_irq+0xb7/0xf0 [ 180.858306][ T4234] ? _raw_spin_lock_irqsave+0x100/0x100 [ 180.858332][ T4234] ? wq_worker_running+0x97/0x170 [ 180.858353][ T4234] worker_thread+0xaa6/0x1290 [ 180.858378][ T4234] ? lockdep_hardirqs_on+0x94/0x140 [ 180.858401][ T4234] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 180.858425][ T4234] kthread+0x436/0x520 [ 180.858444][ T4234] ? rcu_lock_release+0x20/0x20 [ 180.858462][ T4234] ? kthread_blkcg+0xd0/0xd0 [ 180.858481][ T4234] ret_from_fork+0x1f/0x30 [ 180.858509][ T4234] [ 180.858525][ T4234] Modules linked in: [ 180.858562][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.861249][ T1108] pwc: send_video_command error -71 [ 180.861262][ T1108] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 180.861320][ T1108] Philips webcam: probe of 3-1:127.0 failed with error -71 [ 180.876996][ T1108] usb 3-1: USB disconnect, device number 13 [ 180.877835][ T4234] ---[ end trace e2b956b203b34704 ]--- [ 180.877849][ T4234] RIP: 0010:bio_associate_blkg_from_css+0x128/0x9c0 [ 180.877880][ T4234] Code: df 41 80 3c 04 00 74 08 48 89 df e8 c2 1b ec fd 41 be d0 05 00 00 4c 03 33 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 f7 e8 9a 1b ec fd 41 bf 90 00 00 00 4d 03 [ 180.877897][ T4234] RSP: 0018:ffffc900031ef260 EFLAGS: 00010202 [ 180.877977][ T4234] RAX: 00000000000000ba RBX: ffff88801e9bba08 RCX: dffffc0000000000 [ 180.877994][ T4234] RDX: 0000000000000000 RSI: ffffffff96482e00 RDI: ffff88801e9bba00 [ 180.878010][ T4234] RBP: 1ffff11003d37749 R08: dffffc0000000000 R09: 1ffffffff203a818 [ 180.878825][ T4234] R10: dffffc0000000000 R11: fffffbfff203a819 R12: 1ffff11003d37741 [ 180.878845][ T4234] R13: ffff88801e9bba48 R14: 00000000000005d0 R15: ffff8880296dd96c [ 180.878862][ T4234] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 180.878881][ T4234] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 180.878897][ T4234] CR2: 00007fc06d3f2a08 CR3: 000000007e938000 CR4: 00000000003506e0 [ 180.878916][ T4234] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 180.878929][ T4234] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 180.878953][ T4234] Kernel panic - not syncing: Fatal exception [ 180.879230][ T4234] Kernel Offset: disabled [ 181.078578][ T4234] Rebooting in 86400 seconds..