last executing test programs: 4.031292763s ago: executing program 2 (id=13097): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000000040)={0x1, 0x2, 0x9, 0xffffffffffffffff}) 3.942114445s ago: executing program 2 (id=13100): socketpair(0x1e, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) 3.823461403s ago: executing program 2 (id=13103): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a001000010000090588"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000001c0)={0x40, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x7, 0x800, 0x6, 0x8, 0x5, 0x6, 0x9, 0xc, 0x7, 0x3, 0x4, 0x9}}, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000000140)={0x20, 0x89, 0x2}}) 1.487544108s ago: executing program 2 (id=13140): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002f80)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000380)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000010140)=ANY=[], 0x18}}], 0x2, 0x20000000) 1.426819357s ago: executing program 2 (id=13144): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x1010006, &(0x7f00000002c0)={[{@quota}, {@noquota}, {@nointegrity}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@noquota}, {@gid}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@uid={'uid', 0x3d, 0xee01}}]}, 0x24, 0x61b6, &(0x7f00000075c0)="$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") mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file1\x00', 0x0, 0x901001, 0x0) 1.035387881s ago: executing program 3 (id=13155): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x0, 0x0}) 985.378581ms ago: executing program 3 (id=13158): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r0, 0x0, 0x200900) 962.822637ms ago: executing program 4 (id=13159): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='./file1\x00', 0x0, &(0x7f0000000040)={[{@nobarrier}, {@nobarrier}, {@barrier}, {@nls={'nls', 0x3d, 'macromanian'}}, {@umask={'umask', 0x3d, 0x1f}}, {@umask={'umask', 0x3d, 0xde5}}]}, 0x3, 0x6be, &(0x7f0000001640)="$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") syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8f74c177cb5e687b, &(0x7f0000000400)=ANY=[@ANYRESDEC, @ANYRES64, @ANYRES8, @ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC, @ANYRES16], 0x0, 0x0, &(0x7f0000000c40)) 839.110553ms ago: executing program 1 (id=13162): r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback={0x0, 0x7ffffffff000}, 0x10000800, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x20) 706.032547ms ago: executing program 1 (id=13164): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000440)={0x1, @win={{0x3ff, 0x6, 0x32315852}, 0x0, 0xd, 0x0, 0x1539fdcf, 0x0}}) 702.518276ms ago: executing program 4 (id=13165): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, 0x28, 0x107, 0x0, 0x0, {0x3, 0x7c}}, 0x14}}, 0x0) 633.911603ms ago: executing program 1 (id=13166): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000000)={0x1, 0x60, 0x0}) 622.830171ms ago: executing program 0 (id=13167): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@delneigh={0x30, 0x1d, 0x1, 0x70bd26, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x0, 0x10, 0x21, 0xa}, [@NDA_DST_IPV6={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x30}}, 0x0) 534.059674ms ago: executing program 4 (id=13168): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@sack_info={0x0, 0x7fff, 0x3}, 0xc) 533.220373ms ago: executing program 3 (id=13169): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xffffffffffffffd3, 0x4, @link_local}, @TCA_SKBMOD_PARMS={0x24}]}, {0xfffffffffffffe84}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) 486.282294ms ago: executing program 1 (id=13170): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x160, 0x10, 0x713, 0x70bd25, 0x0, {{@in6=@mcast2, @in6=@rand_addr=' \x01\x00', 0x0, 0x8, 0x0, 0x2, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in=@loopback, 0x4d2, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x2, 0x0, 0x0, 0x2, 0x0, 0x1c00000000000}, {0x11df, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x70bd29, 0x0, 0xa, 0x1}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x60, "00000000000000000000a1c31b3718243e97a18e6085921a4cf3f6e2bca135414f6bec0c"}}]}, 0x160}}, 0x0) 486.153104ms ago: executing program 0 (id=13171): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x30, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_GATEWAY={0x14, 0x6, @ip4=@dev={0xac, 0x14, 0x14, 0x3d}}]}, 0x30}}, 0x0) 391.589755ms ago: executing program 2 (id=13172): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x10401, &(0x7f0000000140)=ANY=[@ANYBLOB='iocharset=cp1250,shortname=mixed,uni_xlate=0,shortname=win95,rodir,utf8=1,iocharset=iso8859-3,shortname=lower,uni_xlate=0,uni_xlate=1,utf8=0,uni_xlate=1,utf8=0,uni_xlate=0,shortname=mixed,check=relaxed,uni_xlate=1,uid=', @ANYRESDEC=0x0, @ANYBLOB=',permit_directio,rootcontext=root,subj_role=,silent,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x1, 0x36b, &(0x7f0000000500)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 391.488375ms ago: executing program 4 (id=13173): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) writev(r0, &(0x7f0000002040)=[{&(0x7f0000000000)="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", 0x4e7}], 0x1) 387.697815ms ago: executing program 0 (id=13174): r0 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$sock(r0, &(0x7f0000000cc0)={&(0x7f0000000940)=@pppoe={0x18, 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, 'veth1_virt_wifi\x00'}}, 0x80, 0x0}, 0x0) 378.751583ms ago: executing program 1 (id=13175): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x1c, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vcan0\x00'}}]}, 0x38}}, 0x0) 326.841173ms ago: executing program 3 (id=13176): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 223.483723ms ago: executing program 0 (id=13177): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080)={0x594, 0x0, 0x2b2a, 0x5, 0x0, 0x10, 0x6}, 0xc) 223.351113ms ago: executing program 4 (id=13178): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004a00)=@dellink={0x28, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x31089, 0x64124}, [@IFLA_GROUP={0x8, 0x1b, 0x3ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) 223.194293ms ago: executing program 3 (id=13179): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0200001900010026bd7800fedbdf25e0000002000000000000000000000000640101000000000000000000000000000000000600000000020000003c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x24008004}, 0x4c040) 193.105178ms ago: executing program 1 (id=13180): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r0, 0x0, 0x200900) 152.002799ms ago: executing program 0 (id=13181): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000500)={0x3, @sdr={0x35303553, 0x1000}}) 71.586394ms ago: executing program 3 (id=13182): syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c010203010902240001010000000904690202ff5aa30009050402100000fa000905820240000000"], 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x40000, 0x48) 47.600269ms ago: executing program 4 (id=13183): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0xf0f025, 0xfb}) 0s ago: executing program 0 (id=13184): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x14, 0x16, 0x1, 0x0, 0x0, {0x1a}}, 0x14}}, 0x0) kernel console output (not intermixed with test programs): g 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 603.438923][T21547] usb 2-1: config 0 interface 41 has no altsetting 0 [ 603.446027][T27778] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10893'. [ 603.506888][T27776] FAT-fs (loop3): Directory bread(block 64) failed [ 603.522122][T13778] usbtouchscreen 1-1:0.214: Failed to read FW rev: -71 [ 603.526540][T27776] FAT-fs (loop3): Directory bread(block 65) failed [ 603.546524][T13778] usbtouchscreen: probe of 1-1:0.214 failed with error -71 [ 603.558427][T27776] FAT-fs (loop3): Directory bread(block 66) failed [ 603.568720][T27776] FAT-fs (loop3): Directory bread(block 67) failed [ 603.583881][T13778] usb 1-1: USB disconnect, device number 55 [ 603.622230][T21547] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 603.631333][T21547] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.652339][T27776] FAT-fs (loop3): Directory bread(block 68) failed [ 603.666966][T27776] FAT-fs (loop3): Directory bread(block 69) failed [ 603.667305][T21547] usb 2-1: Product: syz [ 603.679478][T27776] FAT-fs (loop3): Directory bread(block 70) failed [ 603.686845][T27776] FAT-fs (loop3): Directory bread(block 71) failed [ 603.693889][T27776] FAT-fs (loop3): Directory bread(block 72) failed [ 603.700830][T27776] FAT-fs (loop3): Directory bread(block 73) failed [ 603.716253][T21547] usb 2-1: Manufacturer: syz [ 603.720917][T21547] usb 2-1: SerialNumber: syz [ 603.744438][T21547] usb 2-1: config 0 descriptor?? [ 603.762848][T27744] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 603.769977][T27744] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 603.779704][T27782] xt_CT: You must specify a L4 protocol and not use inversions on it [ 603.853823][T27776] attempt to access beyond end of device [ 603.853823][T27776] loop3: rw=524288, want=1196, limit=256 [ 603.919330][T27776] attempt to access beyond end of device [ 603.919330][T27776] loop3: rw=0, want=1196, limit=256 [ 603.952247][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 603.952264][ T26] audit: type=1800 audit(1772062236.553:45): pid=27776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.10892" name="file1" dev="loop3" ino=1048706 res=0 errno=0 [ 604.036342][T27744] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 604.059960][T27744] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 604.084965][ T26] audit: type=1400 audit(1772062236.673:46): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457C51CCA93031D371D06D2E59E880583300E11E8 pid=27794 comm="syz.2.10901" [ 604.247615][T27805] loop0: detected capacity change from 0 to 256 [ 604.352107][T21547] sr9700 2-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 604.380836][T21547] usb 2-1: USB disconnect, device number 53 [ 604.633605][T27838] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 604.872249][T13778] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 605.232366][T13778] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 605.246466][T27877] loop1: detected capacity change from 0 to 256 [ 605.262584][T13778] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 605.304331][T13778] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 605.341980][T13778] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 605.367020][T13778] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 605.393345][T27877] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x22932667, utbl_chksum : 0xe619d30d) [ 605.493689][T13778] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 605.513108][T13778] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 605.525629][T13778] usb 5-1: SerialNumber: syz [ 605.758843][T27909] 9pnet: Could not find request transport: 0xffffffffffffffff [ 605.892884][T27920] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10962'. [ 605.904636][T27921] xt_hashlimit: overflow, try lower: 3/0 [ 606.185440][T27937] loop3: detected capacity change from 0 to 512 [ 606.234274][T13778] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 606.287009][T27937] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,,errors=continue. Quota mode: writeback. [ 606.299168][T27937] ext4 filesystem being mounted at /2236/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 606.332135][T12845] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 606.352844][T21547] usb 5-1: USB disconnect, device number 58 [ 606.365799][T27937] Quota error (device loop3): find_tree_dqentry: Getting block too big (33554437 >= 6) [ 606.392803][T27937] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 606.405587][T27937] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.10971: Failed to acquire dquot type 0 [ 606.446568][T27948] overlayfs: missing 'lowerdir' [ 606.492287][T13778] usb 3-1: Using ep0 maxpacket: 32 [ 606.612615][T12845] usb 2-1: Using ep0 maxpacket: 32 [ 606.642594][T13778] usb 3-1: config 0 has an invalid interface number: 230 but max is 0 [ 606.651501][T13778] usb 3-1: config 0 has no interface number 0 [ 606.682011][T13778] usb 3-1: config 0 interface 230 has no altsetting 0 [ 606.752374][T12845] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 606.765283][T12845] usb 2-1: config 0 has no interface number 0 [ 606.794672][T12845] usb 2-1: config 0 interface 184 has no altsetting 0 [ 606.865063][T13778] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 606.879880][T13778] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.898849][T13778] usb 3-1: Product: syz [ 606.903795][T13778] usb 3-1: Manufacturer: syz [ 606.908433][T13778] usb 3-1: SerialNumber: syz [ 606.933885][T13778] usb 3-1: config 0 descriptor?? [ 606.984852][T12845] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 606.995449][T13778] ums-usbat 3-1:0.230: USB Mass Storage device detected [ 607.012547][T12845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.030026][T12845] usb 2-1: Product: syz [ 607.034699][T12845] usb 2-1: Manufacturer: syz [ 607.039356][T12845] usb 2-1: SerialNumber: syz [ 607.055200][T13778] ums-usbat 3-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 607.064689][T12845] usb 2-1: config 0 descriptor?? [ 607.074284][T27976] netlink: 'syz.3.10988': attribute type 10 has an invalid length. [ 607.113096][T12845] smsc75xx v1.0.0 [ 607.279564][T13778] ums-usbat: probe of 3-1:0.230 failed with error 3 [ 607.322220][T12845] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 607.334080][T13778] usb 3-1: USB disconnect, device number 47 [ 607.351256][T12845] smsc75xx: probe of 2-1:0.184 failed with error -71 [ 607.377768][T12845] usb 2-1: USB disconnect, device number 54 [ 607.385922][T27989] loop4: detected capacity change from 0 to 256 [ 607.433241][T27989] exfat: Deprecated parameter 'utf8' [ 607.439151][T27989] exfat: Deprecated parameter 'namecase' [ 607.452272][T27989] exfat: Deprecated parameter 'namecase' [ 607.468255][T27989] exfat: Deprecated parameter 'utf8' [ 607.500149][T27989] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 607.616662][T27972] loop0: detected capacity change from 0 to 32768 [ 607.693188][T27972] XFS (loop0): Mounting V5 Filesystem [ 607.782574][T27972] XFS (loop0): Ending clean mount [ 607.807772][T27972] XFS (loop0): Quotacheck needed: Please wait. [ 607.912216][T13778] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 607.951200][T27972] XFS (loop0): Quotacheck: Done. [ 608.034384][ T4186] XFS (loop0): Unmounting Filesystem [ 608.259431][T28020] loop1: detected capacity change from 0 to 4096 [ 608.334252][T13778] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 608.367810][T28020] ntfs: (device loop1): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 608.393674][T13778] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 608.444800][T13778] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 608.452809][T28020] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 608.472301][T28020] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 608.482038][T13778] usb 5-1: config 1 has no interface number 1 [ 608.505397][T13778] usb 5-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 608.522139][T28020] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 608.539460][T13778] usb 5-1: config 1 interface 105 has no altsetting 0 [ 608.591052][T28033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11013'. [ 608.625326][T28033] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 608.636575][T28020] ntfs: volume version 3.1. [ 608.723549][T13778] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 608.740208][T13778] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.748332][T28020] ntfs: (device loop1): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 608.748588][T28020] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 608.776528][T13778] usb 5-1: Product: syz [ 608.800198][T13778] usb 5-1: Manufacturer: syz [ 608.815425][T13778] usb 5-1: SerialNumber: syz [ 608.826489][T28042] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19971 - 0 [ 608.854345][T28042] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19971 - 0 [ 608.874206][T28042] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19971 - 0 [ 608.906972][T28042] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19971 - 0 [ 609.094975][T13778] aqc111: probe of 5-1:1.105 failed with error -22 [ 609.193152][T28056] vxcan1 speed is unknown, defaulting to 1000 [ 609.223690][T28064] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 609.281722][T28067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11029'. [ 609.330474][T13778] usb 5-1: USB disconnect, device number 59 [ 609.578755][T28056] lo speed is unknown, defaulting to 1000 [ 610.058867][T28107] netlink: 'syz.3.11048': attribute type 4 has an invalid length. [ 610.116494][T28109] xt_nfacct: accounting object `syz1' does not exist [ 610.186486][T28111] kAFS: unparsable volume name [ 610.306347][T28119] tmpfs: Bad value for 'mpol' [ 610.459498][T28127] loop4: detected capacity change from 0 to 2048 [ 610.558490][T28139] loop1: detected capacity change from 0 to 256 [ 610.572341][T28127] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 610.621318][T28141] loop2: detected capacity change from 0 to 256 [ 610.659987][T28139] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xecc0b056, utbl_chksum : 0xe619d30d) [ 610.757428][T28141] FAT-fs (loop2): Directory bread(block 64) failed [ 610.774868][T28139] exFAT-fs (loop1): invalid start cluster (4278190088) [ 610.797315][T28141] FAT-fs (loop2): Directory bread(block 65) failed [ 610.812217][T28141] FAT-fs (loop2): Directory bread(block 66) failed [ 610.819085][T28141] FAT-fs (loop2): Directory bread(block 67) failed [ 610.844010][T28148] loop0: detected capacity change from 0 to 2048 [ 610.850725][T28141] FAT-fs (loop2): Directory bread(block 68) failed [ 610.882559][T28141] FAT-fs (loop2): Directory bread(block 69) failed [ 610.913760][T28141] FAT-fs (loop2): Directory bread(block 70) failed [ 610.920428][T28141] FAT-fs (loop2): Directory bread(block 71) failed [ 610.932971][T28141] FAT-fs (loop2): Directory bread(block 72) failed [ 610.944558][T28141] FAT-fs (loop2): Directory bread(block 73) failed [ 610.959176][T28148] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 611.035233][T28141] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 611.110203][T28157] ieee802154 phy1 wpan1: encryption failed: -22 [ 611.231058][T28163] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11078'. [ 611.545921][T28187] netlink: 212 bytes leftover after parsing attributes in process `syz.0.11089'. [ 611.607914][T28189] netlink: 'syz.4.11090': attribute type 1 has an invalid length. [ 611.634514][T28189] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.11090'. [ 611.674692][T28186] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 611.896996][T28203] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11097'. [ 611.962247][T28209] QAT: failed to copy from user cfg_data. [ 612.335783][T28174] loop1: detected capacity change from 0 to 32768 [ 612.544782][T28174] XFS (loop1): Mounting V5 Filesystem [ 612.579137][T28251] netlink: 'syz.0.11117': attribute type 1 has an invalid length. [ 612.630426][T28251] netlink: 'syz.0.11117': attribute type 2 has an invalid length. [ 612.686183][T28174] XFS (loop1): Ending clean mount [ 612.714178][T28174] XFS (loop1): Quotacheck needed: Please wait. [ 612.859715][T28174] XFS (loop1): Quotacheck: Done. [ 613.010296][ T4188] XFS (loop1): Unmounting Filesystem [ 613.882104][ T6857] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 614.328506][T28336] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11157'. [ 614.462335][ T6857] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 614.495840][ T6857] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.524637][ T6857] usb 5-1: Product: syz [ 614.528873][ T6857] usb 5-1: Manufacturer: syz [ 614.569557][ T6857] usb 5-1: SerialNumber: syz [ 614.603357][ T6857] usb 5-1: config 0 descriptor?? [ 614.654024][T28347] IPv6: sit2: Disabled Multicast RS [ 614.674552][ T6857] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 614.744863][T28308] loop2: detected capacity change from 0 to 32768 [ 614.778203][T28308] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 scanned by syz.2.11144 (28308) [ 614.846528][T28308] BTRFS: Invalid seeding and uuid-changed device detected [ 614.936116][ T8836] udevd[8836]: incorrect btrfs checksum on /dev/loop2 [ 615.034264][T21546] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 615.103474][ T6857] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 615.110767][ T6857] sq905c 5-1:0.0: Reading version command failed [ 615.135810][ T6857] sq905c: probe of 5-1:0.0 failed with error -71 [ 615.172460][ T6857] usb 5-1: USB disconnect, device number 60 [ 615.199671][T28361] vxcan1 speed is unknown, defaulting to 1000 [ 615.353172][T21547] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 615.363737][T28341] loop0: detected capacity change from 0 to 32768 [ 615.422189][T21546] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 615.434776][T28341] XFS (loop0): Mounting V5 Filesystem [ 615.445797][T28361] lo speed is unknown, defaulting to 1000 [ 615.451970][T21546] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 615.461232][T21546] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 615.477537][T21546] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.516551][T21546] usb 2-1: config 0 descriptor?? [ 615.533573][T28341] XFS (loop0): Ending clean mount [ 615.553793][T28341] XFS (loop0): Quotacheck needed: Please wait. [ 615.660134][T28341] XFS (loop0): Quotacheck: Done. [ 615.711345][ T4186] XFS (loop0): Unmounting Filesystem [ 615.899254][T21547] usb 3-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 615.921954][T21547] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.930019][T21547] usb 3-1: Product: syz [ 615.940645][T28378] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.11176'. [ 615.942225][T21547] usb 3-1: Manufacturer: syz [ 615.958901][T21547] usb 3-1: SerialNumber: syz [ 615.983032][T28378] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 615.996860][T21547] usb 3-1: config 0 descriptor?? [ 616.002287][T21546] Bluetooth: Can't get state to change to load configuration err [ 616.010050][T21546] Bluetooth: Loading sysconfig file failed [ 616.016873][T21546] ath3k: probe of 2-1:0.0 failed with error -16 [ 616.027473][T21546] usb 2-1: USB disconnect, device number 55 [ 616.262182][T21547] int51x1: probe of 3-1:0.0 failed with error -22 [ 616.406375][T28395] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11183'. [ 616.448139][T28399] loop3: detected capacity change from 0 to 16 [ 616.480803][T21547] usb 3-1: USB disconnect, device number 48 [ 616.517927][T28399] erofs: (device loop3): mounted with root inode @ nid 36. [ 616.720583][T28410] netlink: 'syz.3.11189': attribute type 3 has an invalid length. [ 616.731744][T28403] loop4: detected capacity change from 0 to 4096 [ 616.794115][T28403] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 616.880865][T28403] ntfs: (device loop4): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 616.953170][T28403] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 616.999536][T28403] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 617.064923][T28403] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 617.185839][T28403] ntfs: volume version 3.1. [ 617.279982][T28403] ntfs: (device loop4): ntfs_nlstoucs(): Name is too long (maximum length for a name on NTFS is 255 Unicode characters. [ 617.453565][T28445] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 617.522196][T28445] overlayfs: conflicting options: userxattr,metacopy=on [ 617.736152][T28467] loop0: detected capacity change from 0 to 64 [ 617.865104][T28467] attempt to access beyond end of device [ 617.865104][T28467] loop0: rw=0, want=1026, limit=64 [ 617.922083][T28467] Buffer I/O error on dev loop0, logical block 512, async page read [ 617.962340][T28467] attempt to access beyond end of device [ 617.962340][T28467] loop0: rw=0, want=113154, limit=64 [ 618.024527][T28467] Buffer I/O error on dev loop0, logical block 56576, async page read [ 618.356451][T28509] ip6t_srh: unknown srh invflags 4000 [ 618.505922][T28510] loop3: detected capacity change from 0 to 4096 [ 618.568644][T28510] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 618.675440][T28510] ntfs3: loop3: failed to convert "c46c" to cp437 [ 618.744376][T28530] loop4: detected capacity change from 0 to 256 [ 618.867002][T28530] exFAT-fs (loop4): bogus data start sector [ 618.881277][T28530] exFAT-fs (loop4): failed to read boot sector [ 618.926685][T28530] exFAT-fs (loop4): failed to recognize exfat type [ 619.346340][T28568] loop4: detected capacity change from 0 to 2048 [ 619.360162][T28572] ceph: No source [ 619.385055][T28568] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 619.615570][T28584] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 619.656689][T28584] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 619.690153][T28584] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 619.730657][T28584] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 619.753228][T28584] device geneve3 entered promiscuous mode [ 619.889131][T28605] loop3: detected capacity change from 0 to 256 [ 620.024916][T28605] FAT-fs (loop3): Directory bread(block 64) failed [ 620.031545][T28605] FAT-fs (loop3): Directory bread(block 65) failed [ 620.073466][T28605] FAT-fs (loop3): Directory bread(block 66) failed [ 620.086385][T28605] FAT-fs (loop3): Directory bread(block 67) failed [ 620.094481][T28605] FAT-fs (loop3): Directory bread(block 68) failed [ 620.112160][T28620] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 620.134855][T28605] FAT-fs (loop3): Directory bread(block 69) failed [ 620.161625][T28605] FAT-fs (loop3): Directory bread(block 70) failed [ 620.181678][T28605] FAT-fs (loop3): Directory bread(block 71) failed [ 620.208187][T28605] FAT-fs (loop3): Directory bread(block 72) failed [ 620.226703][T28605] FAT-fs (loop3): Directory bread(block 73) failed [ 620.330525][T28632] netlink: 'syz.4.11300': attribute type 21 has an invalid length. [ 620.359237][T28632] netlink: 128 bytes leftover after parsing attributes in process `syz.4.11300'. [ 620.392261][T28632] netlink: 'syz.4.11300': attribute type 4 has an invalid length. [ 620.413388][ T6857] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 620.430246][T28632] netlink: 'syz.4.11300': attribute type 3 has an invalid length. [ 620.455793][T28632] netlink: 3 bytes leftover after parsing attributes in process `syz.4.11300'. [ 620.552443][T28638] device bond4 entered promiscuous mode [ 620.558583][T28638] 8021q: adding VLAN 0 to HW filter on device bond4 [ 620.692017][ T6857] usb 3-1: Using ep0 maxpacket: 8 [ 620.842523][ T6857] usb 3-1: config 0 interface 0 has no altsetting 0 [ 620.855431][T28657] netlink: 'syz.0.11312': attribute type 21 has an invalid length. [ 620.915679][T28657] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11312'. [ 621.012054][T28663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11315'. [ 621.034466][ T6857] usb 3-1: New USB device found, idVendor=1209, idProduct=2323, bcdDevice=6e.23 [ 621.044672][ T6857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.062352][ T6857] usb 3-1: Product: syz [ 621.094501][ T6857] usb 3-1: Manufacturer: syz [ 621.099243][ T6857] usb 3-1: SerialNumber: syz [ 621.135237][ T6857] usb 3-1: config 0 descriptor?? [ 621.322271][T28672] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 621.392412][T28672] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 621.402319][T21552] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 621.440855][T28645] loop3: detected capacity change from 0 to 40427 [ 621.472014][T28672] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 621.496798][T28645] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 621.508452][T28672] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 621.525122][T28672] device geneve3 entered promiscuous mode [ 621.536919][T28645] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 621.580170][T28645] F2FS-fs (loop3): invalid crc value [ 621.622146][ T6857] gs_usb 3-1:0.0: Couldn't get device config: (err=-71) [ 621.642349][ T6857] gs_usb: probe of 3-1:0.0 failed with error -71 [ 621.652565][T28645] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 621.690433][ T6857] usb 3-1: USB disconnect, device number 49 [ 621.812320][T21552] usb 1-1: unable to get BOS descriptor or descriptor too short [ 621.852262][T21552] usb 1-1: not running at top speed; connect to a high speed hub [ 621.932201][T21552] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 621.949105][T28688] loop4: detected capacity change from 0 to 128 [ 621.958344][T28645] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 621.976352][T28645] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 622.012900][T28688] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 622.025237][T28691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11327'. [ 622.075513][T28688] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 622.096600][T28645] fscrypt (loop3, inode 3): Error -61 getting encryption context [ 622.123314][T21552] usb 1-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 622.139392][T21552] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.173091][T21552] usb 1-1: Product: syz [ 622.177390][T21552] usb 1-1: Manufacturer: syz [ 622.200262][T21552] usb 1-1: SerialNumber: syz [ 622.290304][T28698] Cannot find del_set index 286 as target [ 622.527233][T21552] vmk80xx 1-1:8.0: driver 'vmk80xx' failed to auto-configure device. [ 622.579584][T21552] usb 1-1: USB disconnect, device number 56 [ 622.725280][ T263] block nbd3: Attempted send on invalid socket [ 622.731613][ T263] blk_update_request: I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 622.750762][ T150] block nbd3: Attempted send on invalid socket [ 622.757650][ T150] blk_update_request: I/O error, dev nbd3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 622.951099][T28722] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11342'. [ 623.275941][T28741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11352'. [ 623.305547][T28695] loop4: detected capacity change from 0 to 32768 [ 623.391630][T28695] [ 623.391630][T28695] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 623.391630][T28695] [ 623.549447][ T4184] [ 623.549447][ T4184] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 623.549447][ T4184] [ 623.605205][ T4184] [ 623.605205][ T4184] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 623.605205][ T4184] [ 623.748963][T28771] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11366'. [ 623.797805][T28773] loop1: detected capacity change from 0 to 8 [ 623.807359][T28771] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11366'. [ 623.856015][T28776] loop3: detected capacity change from 0 to 1024 [ 623.867695][ T8836] udevd[8836]: incorrect cramfs checksum on /dev/loop1 [ 623.882720][T28773] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 623.981227][T28776] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 624.008956][ T8836] udevd[8836]: incorrect cramfs checksum on /dev/loop1 [ 624.038097][T28776] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. leaving read-only. [ 624.106901][T28787] vxcan1 speed is unknown, defaulting to 1000 [ 624.312435][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.465828][T28808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11384'. [ 624.571919][T28787] lo speed is unknown, defaulting to 1000 [ 624.649402][T28821] loop0: detected capacity change from 0 to 64 [ 624.821642][T28832] netlink: 'syz.2.11394': attribute type 21 has an invalid length. [ 625.230272][T28858] loop4: detected capacity change from 0 to 512 [ 625.328115][T28865] loop0: detected capacity change from 0 to 512 [ 625.436274][T28858] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 625.460112][T28871] loop2: detected capacity change from 0 to 256 [ 625.509490][T28871] FAT-fs (loop2): Directory bread(block 64) failed [ 625.520057][T28858] ext4 filesystem being mounted at /2178/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 625.531977][T28871] FAT-fs (loop2): Directory bread(block 65) failed [ 625.538645][T28865] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 625.562010][T28871] FAT-fs (loop2): Directory bread(block 66) failed [ 625.600656][T28865] EXT4-fs (loop0): orphan cleanup on readonly fs [ 625.659359][T28865] Quota error (device loop0): v2_read_file_info: Can't read info structure [ 625.679226][T28871] FAT-fs (loop2): Directory bread(block 67) failed [ 625.700557][T28865] EXT4-fs warning (device loop0): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 625.747577][T28871] FAT-fs (loop2): Directory bread(block 68) failed [ 625.790641][T28871] FAT-fs (loop2): Directory bread(block 69) failed [ 625.802384][T28865] EXT4-fs (loop0): Cannot turn on quotas: error -5 [ 625.829382][T28871] FAT-fs (loop2): Directory bread(block 70) failed [ 625.859785][T28871] FAT-fs (loop2): Directory bread(block 71) failed [ 625.884953][T28865] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #16: comm syz.0.11411: corrupted inode contents [ 625.904833][T28871] FAT-fs (loop2): Directory bread(block 72) failed [ 625.920980][T28871] FAT-fs (loop2): Directory bread(block 73) failed [ 625.942085][T28865] EXT4-fs error (device loop0): ext4_dirty_inode:6058: inode #16: comm syz.0.11411: mark_inode_dirty error [ 626.018909][T28865] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #16: comm syz.0.11411: corrupted inode contents [ 626.090384][T28865] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.11411: mark_inode_dirty error [ 626.144684][T28865] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #16: comm syz.0.11411: corrupted inode contents [ 626.252368][T28865] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 626.282187][T28865] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #16: comm syz.0.11411: corrupted inode contents [ 626.345222][T28865] EXT4-fs error (device loop0): ext4_truncate:4279: inode #16: comm syz.0.11411: mark_inode_dirty error [ 626.392288][T28865] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 626.422861][ T6857] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 626.431451][T28865] EXT4-fs (loop0): 1 truncate cleaned up [ 626.451551][T28865] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 626.702056][ T6857] usb 4-1: Using ep0 maxpacket: 16 [ 626.708806][T28861] loop1: detected capacity change from 0 to 40427 [ 626.749285][T28861] F2FS-fs (loop1): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 626.815924][T28861] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 626.886433][T28861] F2FS-fs (loop1): invalid crc value [ 626.892268][ T6857] usb 4-1: unable to get BOS descriptor or descriptor too short [ 626.907477][T28861] F2FS-fs (loop1): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 626.982237][ T6857] usb 4-1: config 1 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 626.999858][T28861] F2FS-fs (loop1): Found nat_bits in checkpoint [ 627.012145][ T6857] usb 4-1: config 1 interface 0 has no altsetting 0 [ 627.113676][T28861] F2FS-fs (loop1): recover fsync data on readonly fs [ 627.155712][T28861] F2FS-fs (loop1): Try to recover 2th superblock, ret: -30 [ 627.166453][T28861] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 627.180913][T28910] loop2: detected capacity change from 0 to 4096 [ 627.212253][ T6857] usb 4-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 627.238940][ T6857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.271958][ T6857] usb 4-1: Product: syz [ 627.276199][ T6857] usb 4-1: Manufacturer: syz [ 627.289443][T28919] loop4: detected capacity change from 0 to 1024 [ 627.302342][T28910] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 627.312301][ T6857] usb 4-1: SerialNumber: syz [ 627.386204][T28910] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 627.590908][T28925] netlink: 'syz.0.11440': attribute type 1 has an invalid length. [ 627.602561][T28886] udc-core: couldn't find an available UDC or it's busy [ 627.632655][T28886] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 627.652296][T28925] __nla_validate_parse: 1 callbacks suppressed [ 627.652312][T28925] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.11440'. [ 627.757287][ T6857] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input46 [ 627.803524][ T3546] bcm5974 4-1:1.0: could not read from device [ 627.847149][ T6857] usb 4-1: USB disconnect, device number 40 [ 628.363598][T28964] xt_limit: Overflow, try lower: 2147483649/3300 [ 628.603301][T28982] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551614) [ 628.640398][T28982] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 628.667758][T28987] netlink: 'syz.1.11469': attribute type 1 has an invalid length. [ 629.334942][T29025] Device name cannot be null; rc = [-22] [ 629.374121][T29027] loop1: detected capacity change from 0 to 64 [ 629.726574][T29038] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 629.902327][T28999] loop2: detected capacity change from 0 to 32768 [ 630.095770][T29056] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 630.126819][T29010] loop0: detected capacity change from 0 to 32768 [ 630.145734][T29056] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 630.204922][T29058] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 630.379448][T29073] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.11509'. [ 630.431297][T29010] XFS (loop0): Mounting V5 Filesystem [ 630.499813][T29082] (unnamed net_device) (uninitialized): option mode: invalid value (8) [ 630.628260][ T7] XFS (loop0): Metadata corruption detected at xfs_agf_verify+0x208/0xa70, xfs_agf block 0x1 [ 630.651019][T29087] infiniband syz2: set active [ 630.676504][ T7] XFS (loop0): Unmount and run xfs_repair [ 630.711913][ T7] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 630.722164][T21548] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 630.729898][ T7] 00000000: 58 41 47 46 00 00 00 00 00 00 00 00 00 00 20 00 XAGF.......... . [ 630.729981][ T7] 00000010: 00 00 00 01 00 00 00 02 00 00 00 05 00 00 00 01 ................ [ 630.729998][ T7] 00000020: 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 06 ................ [ 630.730014][ T7] 00000030: 00 00 00 06 00 00 0d cb 00 00 0d b8 00 00 00 00 ................ [ 630.730029][ T7] 00000040: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 630.730044][ T7] 00000050: 00 00 00 01 00 00 00 01 00 00 00 06 00 00 00 01 ................ [ 630.731856][ T7] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 630.810122][ T7] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 630.838801][T29010] XFS (loop0): metadata I/O error in "xfs_read_agf+0x252/0x510" at daddr 0x1 len 1 error 117 [ 630.861546][T29010] XFS (loop0): Error -117 reserving per-AG metadata reserve pool. [ 630.893786][ T7] vxcan1 speed is unknown, defaulting to 1000 [ 630.928364][T29010] XFS (loop0): Corruption of in-memory data (0x8) detected at xfs_fs_reserve_ag_blocks+0x1bf/0x1f0 (fs/xfs/xfs_fsops.c:577). Shutting down filesystem. [ 630.998736][T29010] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 631.010392][T29064] loop2: detected capacity change from 0 to 32768 [ 631.038196][T29010] XFS (loop0): Ending clean mount [ 631.053510][T29064] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 631.100029][T29064] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 631.126695][T29064] (syz.2.11505,29064,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=0, inode=970662608961, rec_len=0, name_len=0 [ 631.152288][T21548] usb 2-1: config 0 has no interfaces? [ 631.175806][T29064] (syz.2.11505,29064,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 631.185366][T29064] (syz.2.11505,29064,1):ocfs2_mknod:298 ERROR: status = -2 [ 631.193169][T29064] (syz.2.11505,29064,1):ocfs2_mknod:502 ERROR: status = -2 [ 631.200614][T29064] (syz.2.11505,29064,1):ocfs2_create:676 ERROR: status = -2 [ 631.223570][T29010] UBIFS error (pid: 29010): cannot open "./file0", error -22 [ 631.276078][ T4186] XFS (loop0): Unmounting Filesystem [ 631.307743][ T4185] ocfs2: Unmounting device (7,2) on (node local) [ 631.313979][T21548] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 631.347101][T21548] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.385979][T21548] usb 2-1: Product: syz [ 631.390614][T21548] usb 2-1: Manufacturer: syz [ 631.425427][T21548] usb 2-1: SerialNumber: syz [ 631.449462][T21548] r8152-cfgselector 2-1: config 0 descriptor?? [ 631.477354][T29098] loop3: detected capacity change from 0 to 256 [ 631.611339][T29095] vxcan1 speed is unknown, defaulting to 1000 [ 631.639352][T29098] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 631.702646][T21548] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 631.736677][T29098] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000008) [ 631.778632][T29098] exFAT-fs (loop3): Filesystem has been set read-only [ 631.915817][T21548] usb 2-1: USB disconnect, device number 56 [ 632.030045][T29095] lo speed is unknown, defaulting to 1000 [ 632.091475][T29112] netlink: 9412 bytes leftover after parsing attributes in process `syz.3.11525'. [ 632.109540][T29114] overlayfs: './file0' not a directory [ 632.255044][T29125] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 632.281048][T29126] loop3: detected capacity change from 0 to 512 [ 632.362109][T29126] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ec01c, mo2=0003] [ 632.370231][T29126] System zones: 1-2, 4-12, 8-8 [ 632.409282][T29126] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.11532: iget: bad i_size value: 38620345925642 [ 632.502543][T29126] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.11532: couldn't read orphan inode 15 (err -117) [ 632.577264][T29126] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,delalloc,data_err=ignore,debug,usrjquota=,bsdgroups,,errors=continue. Quota mode: writeback. [ 632.593769][T21548] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 632.700448][T29144] netlink: 84 bytes leftover after parsing attributes in process `syz.2.11540'. [ 632.870827][T29158] cgroup: none used incorrectly [ 632.912457][T21547] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 632.992363][T21548] usb 1-1: unable to get BOS descriptor or descriptor too short [ 633.002964][T29162] block device autoloading is deprecated and will be removed. [ 633.072333][T21548] usb 1-1: config 8 has an invalid interface number: 114 but max is 0 [ 633.086027][T21548] usb 1-1: config 8 contains an unexpected descriptor of type 0x2, skipping [ 633.115592][T21548] usb 1-1: config 8 has an invalid interface number: 9 but max is 0 [ 633.140747][T21548] usb 1-1: config 8 has an invalid descriptor of length 248, skipping remainder of the config [ 633.152929][T21547] usb 4-1: Using ep0 maxpacket: 16 [ 633.188730][T21548] usb 1-1: config 8 has 2 interfaces, different from the descriptor's value: 1 [ 633.219001][T29177] loop2: detected capacity change from 0 to 512 [ 633.226471][T21548] usb 1-1: config 8 has no interface number 0 [ 633.238414][T21548] usb 1-1: config 8 has no interface number 1 [ 633.245568][T21548] usb 1-1: config 8 interface 114 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 633.269353][T21548] usb 1-1: config 8 interface 9 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 633.297940][T29177] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 633.324501][T21547] usb 4-1: unable to get BOS descriptor or descriptor too short [ 633.332877][T21548] usb 1-1: config 8 interface 9 has no altsetting 0 [ 633.385423][T29180] rtc_cmos 00:00: Alarms can be up to one day in the future [ 633.424567][T21547] usb 4-1: config 13 has an invalid interface number: 50 but max is 0 [ 633.440644][T21547] usb 4-1: config 13 has no interface number 0 [ 633.457109][T21547] usb 4-1: config 13 interface 50 has no altsetting 0 [ 633.572650][T21548] usb 1-1: string descriptor 0 read error: -22 [ 633.578994][T21548] usb 1-1: New USB device found, idVendor=1604, idProduct=8005, bcdDevice=ac.7d [ 633.608351][T21548] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.633400][T21547] usb 4-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 633.647290][T21547] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.664884][T21547] usb 4-1: Product: syz [ 633.673520][T21547] usb 4-1: Manufacturer: syz [ 633.678184][T21547] usb 4-1: SerialNumber: syz [ 633.765221][T29195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11565'. [ 633.821085][T29195] netlink: 76 bytes leftover after parsing attributes in process `syz.1.11565'. [ 633.855421][T21552] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 634.006079][T21548] usb 1-1: USB disconnect, device number 57 [ 634.104245][T21552] usb 3-1: Using ep0 maxpacket: 32 [ 634.112639][T21547] usb 4-1: MIDIStreaming interface descriptor not found [ 634.165485][T21547] usb 4-1: USB disconnect, device number 41 [ 634.207895][T29207] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 634.224701][T21552] usb 3-1: config 0 has an invalid interface number: 17 but max is 0 [ 634.273290][T21552] usb 3-1: config 0 has no interface number 0 [ 634.293247][T29131] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 634.452869][T21552] usb 3-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=bf.cd [ 634.464641][T21552] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.473720][T21552] usb 3-1: Product: syz [ 634.474157][ T5522] udevd[5522]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:13.50/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 634.477942][T21552] usb 3-1: Manufacturer: syz [ 634.509261][T21552] usb 3-1: SerialNumber: syz [ 634.573384][T21552] usb 3-1: config 0 descriptor?? [ 634.614304][T21552] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 634.626090][T29213] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11576'. [ 634.824242][T29215] vxcan1 speed is unknown, defaulting to 1000 [ 634.832200][T21552] gspca_sn9c2028: read1 error -71 [ 634.852189][T21552] gspca_sn9c2028: read1 error -71 [ 634.872222][T21552] gspca_sn9c2028: read1 error -71 [ 634.877414][T21552] sn9c2028: probe of 3-1:0.17 failed with error -71 [ 634.933501][T21552] usb 3-1: USB disconnect, device number 50 [ 635.314878][T29215] lo speed is unknown, defaulting to 1000 [ 636.164298][T29270] vxcan1 speed is unknown, defaulting to 1000 [ 636.242025][ T6857] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 636.421128][T29237] loop3: detected capacity change from 0 to 32768 [ 636.461268][T29237] XFS (loop3): sunit and swidth must be specified together [ 636.662498][ T6857] usb 3-1: config 0 has an invalid interface number: 17 but max is 1 [ 636.670675][ T6857] usb 3-1: config 0 has an invalid interface number: 135 but max is 1 [ 636.719795][ T6857] usb 3-1: config 0 has no interface number 0 [ 636.735903][T29294] loop3: detected capacity change from 0 to 2048 [ 636.742069][ T6857] usb 3-1: config 0 has no interface number 1 [ 636.748427][ T6857] usb 3-1: config 0 interface 17 has no altsetting 0 [ 636.791987][ T6857] usb 3-1: config 0 interface 135 has no altsetting 0 [ 636.819942][T29294] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 636.962145][ T6857] usb 3-1: New USB device found, idVendor=413c, idProduct=81cf, bcdDevice=1b.39 [ 636.981515][ T6857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.014027][T29286] vxcan1 speed is unknown, defaulting to 1000 [ 637.014426][ T6857] usb 3-1: Product: syz [ 637.042589][T29270] lo speed is unknown, defaulting to 1000 [ 637.052347][ T6857] usb 3-1: Manufacturer: syz [ 637.057019][ T6857] usb 3-1: SerialNumber: syz [ 637.080239][ T6857] usb 3-1: config 0 descriptor?? [ 637.386436][ T6857] usb 3-1: USB disconnect, device number 51 [ 637.528804][T29308] netlink: 'syz.4.11619': attribute type 1 has an invalid length. [ 637.654351][T29286] lo speed is unknown, defaulting to 1000 [ 637.654385][T29314] ipt_CLUSTERIP: bad num_local_nodes 18 [ 637.989821][T29332] IPv6: NLM_F_REPLACE set, but no existing node found! [ 638.411218][T29366] loop4: detected capacity change from 0 to 1024 [ 638.507946][T29366] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 638.549998][T29366] EXT4-fs error (device loop4): ext4_get_journal_inode:5185: inode #32: comm syz.4.11647: iget: special inode unallocated [ 638.622697][T29366] EXT4-fs (loop4): no journal found [ 638.628119][T29366] EXT4-fs (loop4): can't get journal size [ 638.694483][T29385] netlink: 11 bytes leftover after parsing attributes in process `syz.3.11656'. [ 638.712872][T29366] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,jqfmt=vfsv0,nobarrier,. Quota mode: none. [ 638.780999][T29384] loop2: detected capacity change from 0 to 764 [ 638.826743][T29391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11659'. [ 638.836123][T29391] tc_dump_action: action bad kind [ 638.881341][T29384] rock: directory entry would overflow storage [ 638.902157][T29384] rock: sig=0x4654, size=5, remaining=4 [ 639.095614][T29402] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11666'. [ 639.177277][T29410] loop4: detected capacity change from 0 to 512 [ 639.292902][T29414] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11669'. [ 639.314151][T29410] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 639.336289][T29410] EXT4-fs (loop4): 1 truncate cleaned up [ 639.385796][T29410] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,errors=remount-ro,noblock_validity,. Quota mode: writeback. [ 639.774458][T29437] netlink: 'syz.0.11680': attribute type 9 has an invalid length. [ 639.821999][T29437] netlink: 'syz.0.11680': attribute type 6 has an invalid length. [ 639.916923][T29445] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 640.150063][T29455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11689'. [ 640.154928][T29406] loop2: detected capacity change from 0 to 32768 [ 640.285605][T29406] XFS (loop2): Mounting V5 Filesystem [ 640.294463][T29466] loop0: detected capacity change from 0 to 64 [ 640.349153][T29470] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 640.519067][T29406] XFS (loop2): Ending clean mount [ 640.522100][T13778] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 640.545372][T29406] XFS (loop2): Quotacheck needed: Please wait. [ 640.709503][T29473] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11694'. [ 640.772002][T13778] usb 2-1: Using ep0 maxpacket: 32 [ 640.808846][T29406] XFS (loop2): Quotacheck: Done. [ 640.972112][T13778] usb 2-1: unable to get BOS descriptor or descriptor too short [ 641.018282][ T4185] XFS (loop2): Unmounting Filesystem [ 641.062229][T13778] usb 2-1: config 3 has an invalid interface number: 224 but max is 0 [ 641.070486][T13778] usb 2-1: config 3 has no interface number 0 [ 641.116396][T13778] usb 2-1: config 3 interface 224 altsetting 9 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 641.144533][ C1] vkms_vblank_simulate: vblank timer overrun [ 641.211121][T13778] usb 2-1: config 3 interface 224 has no altsetting 0 [ 641.367762][T29482] vxcan1 speed is unknown, defaulting to 1000 [ 641.462430][T13778] usb 2-1: New USB device found, idVendor=1199, idProduct=9055, bcdDevice=35.1f [ 641.474112][T13778] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.523664][T13778] usb 2-1: Product: syz [ 641.527900][T13778] usb 2-1: Manufacturer: syz [ 641.543465][T29486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11701'. [ 641.562303][T13778] usb 2-1: SerialNumber: syz [ 641.779914][T29450] loop4: detected capacity change from 0 to 32768 [ 641.957518][T13778] rndis_host 2-1:3.224: invalid descriptor buffer length [ 641.961837][T29482] lo speed is unknown, defaulting to 1000 [ 641.972606][T13778] usb 2-1: bad CDC descriptors [ 642.100682][T13778] usb 2-1: USB disconnect, device number 57 [ 642.177099][T29450] XFS (loop4): Mounting V5 Filesystem [ 642.369853][T29509] IPv6: Can't replace route, no match found [ 642.424982][T13778] XFS (loop4): Metadata corruption detected at xfs_agf_verify+0x208/0xa70, xfs_agf block 0x1 [ 642.448919][T13778] XFS (loop4): Unmount and run xfs_repair [ 642.465341][T13778] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 642.487600][T13778] 00000000: 58 41 47 46 00 00 00 00 00 00 00 00 00 00 20 00 XAGF.......... . [ 642.527222][T13778] 00000010: 00 00 00 01 00 00 00 02 00 00 00 05 00 00 00 01 ................ [ 642.579872][T13778] 00000020: 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 06 ................ [ 642.621635][T13778] 00000030: 00 00 00 06 00 00 0d cb 00 00 0d b8 00 00 00 00 ................ [ 642.664186][T13778] 00000040: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 642.688899][T29517] tmpfs: Bad value for 'uid' [ 642.696635][T13778] 00000050: 00 00 00 01 00 00 00 01 00 00 00 06 00 00 00 01 ................ [ 642.737038][T13778] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 642.772853][T13778] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 642.785048][T29450] XFS (loop4): metadata I/O error in "xfs_read_agf+0x252/0x510" at daddr 0x1 len 1 error 117 [ 642.802395][T29450] XFS (loop4): Error -117 reserving per-AG metadata reserve pool. [ 642.828727][T29450] XFS (loop4): Corruption of in-memory data (0x8) detected at xfs_fs_reserve_ag_blocks+0x1bf/0x1f0 (fs/xfs/xfs_fsops.c:577). Shutting down filesystem. [ 642.896810][T29450] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 642.944862][T29450] XFS (loop4): Ending clean mount [ 643.021422][ T4184] XFS (loop4): Unmounting Filesystem [ 644.739689][T29628] loop2: detected capacity change from 0 to 4096 [ 644.786563][T29636] loop4: detected capacity change from 0 to 4096 [ 644.822852][T29628] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 644.942188][T29636] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 645.004845][T29636] ntfs3: loop4: Failed to load $Extend. [ 645.249483][T29659] loop0: detected capacity change from 0 to 512 [ 645.349354][T29659] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.11782: inode has both inline data and extents flags [ 645.382354][T29659] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.11782: couldn't read orphan inode 15 (err -117) [ 645.396156][T29659] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsdgroups,acl,noload,journal_dev=0x0000000000000007,data_err=abort,,errors=continue. Quota mode: none. [ 645.532186][T12845] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 645.572100][ T4271] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 645.714379][T29677] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11788'. [ 645.802131][T12845] usb 4-1: Using ep0 maxpacket: 32 [ 645.832026][ T4271] usb 2-1: Using ep0 maxpacket: 8 [ 645.944624][T12845] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 645.955078][T29685] SET target dimension over the limit! [ 645.974563][ T4271] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 645.984578][T12845] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 645.996485][ T4271] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.012333][T12845] usb 4-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 646.045260][ T4271] usb 2-1: config 0 descriptor?? [ 646.059450][T12845] usb 4-1: config 0 interface 0 has no altsetting 1 [ 646.242440][T12845] usb 4-1: New USB device found, idVendor=0582, idProduct=0033, bcdDevice=8e.57 [ 646.257270][T12845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.270858][T12845] usb 4-1: Product: syz [ 646.299562][T12845] usb 4-1: Manufacturer: syz [ 646.314289][T12845] usb 4-1: SerialNumber: syz [ 646.324426][T12845] usb 4-1: config 0 descriptor?? [ 646.344440][ T4271] usb 2-1: string descriptor 0 read error: -71 [ 646.350755][ T4271] usb 2-1: Found UVC 0.00 device (2833:0201) [ 646.359327][ T4271] usb 2-1: No valid video chain found. [ 646.378870][ T4271] usb 2-1: USB disconnect, device number 58 [ 646.413974][T29706] loop2: detected capacity change from 0 to 1024 [ 646.458649][T12845] snd-usb-audio: probe of 4-1:0.0 failed with error -2 [ 646.607321][ T9] hfsplus: b-tree write err: -5, ino 4 [ 646.637317][ T6857] usb 4-1: USB disconnect, device number 42 [ 646.728486][T29720] Option '2 OǗWz [ 646.728486][T29720] f:5A- [ 646.728486][T29720] )d::l]GY;m~R N+o{j\' to dns_resolver key: bad/missing value [ 646.802069][T12845] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 646.885568][ T8836] udevd[8836]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 646.912032][T29726] netlink: 22 bytes leftover after parsing attributes in process `syz.1.11812'. [ 646.921339][T29726] netlink: 22 bytes leftover after parsing attributes in process `syz.1.11812'. [ 646.932517][T29726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11812'. [ 647.175334][T29740] netlink: 'syz.2.11819': attribute type 1 has an invalid length. [ 647.202195][T29740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11819'. [ 647.242375][T12845] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 647.260234][T12845] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 647.299223][T12845] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 647.515760][T29752] vxcan1 speed is unknown, defaulting to 1000 [ 647.539239][T12845] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 647.571557][T12845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.591349][T12845] usb 5-1: Product: syz [ 647.596166][T12845] usb 5-1: Manufacturer: syz [ 647.601133][T12845] usb 5-1: SerialNumber: syz [ 647.688329][T12845] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 647.705986][T12845] cdc_ncm 5-1:1.0: bind() failure [ 647.764149][T21543] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 647.924997][T21548] usb 5-1: USB disconnect, device number 61 [ 647.994690][T29752] lo speed is unknown, defaulting to 1000 [ 648.012008][T21543] usb 3-1: Using ep0 maxpacket: 8 [ 648.172165][T21543] usb 3-1: unable to get BOS descriptor or descriptor too short [ 648.262257][T21543] usb 3-1: config 9 has an invalid interface number: 175 but max is 0 [ 648.286189][T21543] usb 3-1: config 9 has no interface number 0 [ 648.316574][T21543] usb 3-1: config 9 interface 175 altsetting 12 endpoint 0x1 has an invalid bInterval 192, changing to 11 [ 648.348762][T21543] usb 3-1: config 9 interface 175 has no altsetting 0 [ 648.445954][T29809] loop0: detected capacity change from 0 to 128 [ 648.480142][T29813] netlink: 830 bytes leftover after parsing attributes in process `syz.3.11854'. [ 648.532699][T21543] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=6a.86 [ 648.550862][T29809] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 648.561978][T21543] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.578216][T21543] usb 3-1: Product: syz [ 648.592039][T21543] usb 3-1: Manufacturer: syz [ 648.596895][T21543] usb 3-1: SerialNumber: syz [ 648.603689][T29809] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 649.114957][T29839] loop3: detected capacity change from 0 to 128 [ 649.174413][T29839] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 649.194906][T21543] usb 3-1: USB disconnect, device number 52 [ 649.202394][T29841] kAFS: unable to lookup cell '({^@' [ 649.723483][T29868] netlink: 340 bytes leftover after parsing attributes in process `syz.2.11883'. [ 649.977278][T29881] openvswitch: netlink: Actions may not be safe on all matching packets [ 650.184621][T29890] netlink: 276 bytes leftover after parsing attributes in process `syz.2.11892'. [ 650.335243][T29899] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11897'. [ 650.356394][T29899] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11897'. [ 650.379304][T29896] IPv6: Can't replace route, no match found [ 650.612304][T29913] rdma_rxe: rxe_register_device failed with error -23 [ 650.635045][T29913] rdma_rxe: failed to add bond_slave_1 [ 650.821099][T29925] loop3: detected capacity change from 0 to 1024 [ 651.018872][T15510] hfsplus: b-tree write err: -5, ino 4 [ 651.334308][T29952] netlink: 256 bytes leftover after parsing attributes in process `syz.1.11921'. [ 651.509175][T29917] loop0: detected capacity change from 0 to 32768 [ 651.556632][T29917] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.11905 (29917) [ 651.639906][T29917] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 651.689308][T29917] BTRFS info (device loop0): setting nodatacow, compression disabled [ 651.701942][T21547] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 651.742575][T29917] BTRFS info (device loop0): using free space tree [ 651.773590][T29917] BTRFS info (device loop0): has skinny extents [ 651.899966][T29983] netlink: 'syz.3.11933': attribute type 1 has an invalid length. [ 652.082881][T21547] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 652.091040][T21547] usb 5-1: config 0 has no interface number 0 [ 652.133892][T21547] usb 5-1: config 0 interface 41 has no altsetting 0 [ 652.172812][T29917] BTRFS info (device loop0): enabling ssd optimizations [ 652.203331][T30001] ecryptfs_parse_options: eCryptfs: unrecognized option [&@] [ 652.286842][T30001] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 652.292914][T21547] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 652.322457][T21547] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.331560][T21547] usb 5-1: Product: syz [ 652.356486][T21547] usb 5-1: Manufacturer: syz [ 652.361188][T21547] usb 5-1: SerialNumber: syz [ 652.396167][T21547] usb 5-1: config 0 descriptor?? [ 652.401532][T30001] Error parsing options; rc = [-22] [ 652.469944][T30014] mip6: mip6_destopt_init_state: spi is not 0: 1114112 [ 652.555856][T30016] loop2: detected capacity change from 0 to 64 [ 652.892040][T21547] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 652.908570][T21547] CoreChips: probe of 5-1:0.41 failed with error -71 [ 652.950280][T21547] usb 5-1: USB disconnect, device number 62 [ 653.113465][T30028] device geneve4 entered promiscuous mode [ 653.703459][T30065] netlink: 'syz.1.11967': attribute type 1 has an invalid length. [ 653.754411][T30065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11967'. [ 654.222525][ T4271] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 654.349171][T30103] loop3: detected capacity change from 0 to 256 [ 654.602435][ T4271] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 654.624717][ T4271] usb 1-1: config 1 has no interface number 1 [ 654.646970][T30067] loop4: detected capacity change from 0 to 32768 [ 654.686194][T30067] (syz.4.11968,30067,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 654.737251][T30067] (syz.4.11968,30067,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 654.755368][T30114] device geneve4 entered promiscuous mode [ 654.791096][T30067] JBD2: Ignoring recovery information on journal [ 654.822238][ T4271] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 654.831781][ T4271] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.840824][ T4271] usb 1-1: Product: syz [ 654.846037][ T4271] usb 1-1: Manufacturer: syz [ 654.850765][ T4271] usb 1-1: SerialNumber: syz [ 654.875519][T30067] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 654.912020][T12840] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 654.996850][ T4184] ocfs2: Unmounting device (7,4) on (node local) [ 655.075905][T30122] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.11995'. [ 655.182875][T12840] usb 4-1: Using ep0 maxpacket: 32 [ 655.242373][ T4271] usb 1-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 655.286953][ T4271] usb 1-1: 2:1 : sample bitwidth 8 in over sample bytes 0 [ 655.312496][ T4271] usb 1-1: 2:1 : unsupported sample bitwidth 8 in 0 bytes [ 655.377843][ T4271] usb 1-1: USB disconnect, device number 58 [ 655.492488][T12840] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 655.513702][T12840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.527986][T30138] loop2: detected capacity change from 0 to 512 [ 655.532952][T12840] usb 4-1: Product: syz [ 655.549911][T12840] usb 4-1: Manufacturer: syz [ 655.561662][T12840] usb 4-1: SerialNumber: syz [ 655.574824][T12840] usb 4-1: config 0 descriptor?? [ 655.575071][T30140] xt_TPROXY: Can be used only with -p tcp or -p udp [ 655.597873][T30138] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 655.614514][T12840] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 655.663964][ T4270] udevd[4270]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 655.708320][T30138] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,noload,acl,mblk_io_submit,sysvgroups,,errors=continue. Quota mode: writeback. [ 655.772972][T30138] ext4 filesystem being mounted at /2468/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 655.969108][T30162] netlink: 'syz.2.12012': attribute type 21 has an invalid length. [ 655.983225][T30162] netlink: 128 bytes leftover after parsing attributes in process `syz.2.12012'. [ 656.012724][T30162] netlink: 'syz.2.12012': attribute type 4 has an invalid length. [ 656.034943][T30162] netlink: 'syz.2.12012': attribute type 5 has an invalid length. [ 656.045629][T12840] gspca_topro: reg_w err -71 [ 656.065738][T30162] netlink: 3 bytes leftover after parsing attributes in process `syz.2.12012'. [ 656.075724][T30166] netlink: 44 bytes leftover after parsing attributes in process `syz.1.12014'. [ 656.087291][T12840] gspca_topro: Sensor soi763a [ 656.107078][T12840] usb 4-1: USB disconnect, device number 43 [ 656.637198][T30201] netlink: 'syz.3.12032': attribute type 1 has an invalid length. [ 656.682368][T30201] netlink: 'syz.3.12032': attribute type 9 has an invalid length. [ 656.742745][T30206] netlink: 'syz.1.12034': attribute type 30 has an invalid length. [ 656.754605][T12840] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 656.794617][T30206] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12034'. [ 656.845395][T30206] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 656.875488][T30206] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 657.021969][T12840] usb 5-1: Using ep0 maxpacket: 16 [ 657.106904][T30229] device syz_tun entered promiscuous mode [ 657.324170][T30243] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 657.334251][T12840] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 657.352560][T12840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.384262][T12840] usb 5-1: Product: syz [ 657.411613][T12840] usb 5-1: Manufacturer: syz [ 657.421758][T12840] usb 5-1: SerialNumber: syz [ 657.433749][T12840] usb 5-1: config 0 descriptor?? [ 657.702436][T12840] speedtch 5-1:0.0: speedtch_bind: wrong device class 68 [ 657.709559][T12840] speedtch 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 657.925056][T12840] usb 5-1: USB disconnect, device number 63 [ 658.095447][T30291] netlink: 84 bytes leftover after parsing attributes in process `syz.0.12076'. [ 658.144154][T30291] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12076'. [ 658.532522][ T4271] usb 3-1: new low-speed USB device number 53 using dummy_hcd [ 658.540226][T12840] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 658.649437][T30328] qrtr: Invalid version 0 [ 658.685176][T30332] netlink: 'syz.0.12095': attribute type 10 has an invalid length. [ 658.708504][T30334] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12096'. [ 658.744609][T30332] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 658.902667][T30344] Unsupported ieee802154 address type: 0 [ 658.954382][ T4271] usb 3-1: config 4 has an invalid interface number: 186 but max is 0 [ 658.963098][T12840] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 658.971393][T12840] usb 2-1: config 0 has no interface number 0 [ 658.990679][ T4271] usb 3-1: config 4 has no interface number 0 [ 658.999879][T12840] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 106, changing to 10 [ 659.011746][ T4271] usb 3-1: config 4 interface 186 has no altsetting 0 [ 659.031752][ T4271] usb 3-1: New USB device found, idVendor=0c26, idProduct=0020, bcdDevice=a6.ad [ 659.041512][ T4271] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.050352][T12840] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1569, setting to 1024 [ 659.242273][T12840] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 659.259862][T12840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.288686][T12840] usb 2-1: Product: syz [ 659.298827][T12840] usb 2-1: Manufacturer: syz [ 659.312007][T12840] usb 2-1: SerialNumber: syz [ 659.340501][T12840] usb 2-1: config 0 descriptor?? [ 659.362277][ T4271] usb 3-1: string descriptor 0 read error: -71 [ 659.383353][T30298] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 659.386535][ T4271] usb 3-1: USB disconnect, device number 53 [ 659.441517][T12840] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 659.459414][T30370] loop3: detected capacity change from 0 to 2048 [ 659.519037][T30370] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 659.576118][T30375] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 659.639350][ T4271] usb 2-1: USB disconnect, device number 59 [ 659.660074][ T4271] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 660.019210][T30392] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12123'. [ 660.642726][T30442] autofs4:pid:30442:autofs_fill_super: called with bogus options [ 660.864499][T30462] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 661.005060][T30472] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 661.030595][T30477] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12166'. [ 661.381128][T30505] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12180'. [ 661.407092][T30505] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12180'. [ 661.432224][T30505] device vlan0 entered promiscuous mode [ 661.511297][T30515] netlink: 'syz.4.12185': attribute type 32 has an invalid length. [ 661.586025][T30519] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 661.612310][T21547] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 661.841678][T30532] netlink: 268 bytes leftover after parsing attributes in process `syz.1.12192'. [ 661.862156][T21547] usb 4-1: Using ep0 maxpacket: 32 [ 661.902278][T30532] unsupported nla_type 65024 [ 661.961482][T30535] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12195'. [ 661.982302][T21547] usb 4-1: config 0 has an invalid interface number: 47 but max is 0 [ 661.992907][T21547] usb 4-1: config 0 has no interface number 0 [ 661.999247][T21547] usb 4-1: config 0 interface 47 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 662.050209][T21547] usb 4-1: config 0 interface 47 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 662.222326][T21547] usb 4-1: New USB device found, idVendor=08dd, idProduct=90ff, bcdDevice=7b.76 [ 662.231564][T21547] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.283156][T21547] usb 4-1: Product: syz [ 662.290018][T21547] usb 4-1: Manufacturer: syz [ 662.307122][T21547] usb 4-1: SerialNumber: syz [ 662.334184][T21547] usb 4-1: config 0 descriptor?? [ 662.352441][T30503] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 662.359712][T30503] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 662.420426][T30521] loop2: detected capacity change from 0 to 32768 [ 662.463034][T30521] [ 662.463034][T30521] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 662.463034][T30521] [ 662.529274][T30553] netlink: 72 bytes leftover after parsing attributes in process `syz.0.12204'. [ 662.549945][T30555] netlink: 76 bytes leftover after parsing attributes in process `syz.1.12205'. [ 662.590841][ T9] read_mapping_page failed! [ 662.631529][ T9] ERROR: (device loop2): txCommit: [ 662.631529][ T9] [ 662.652149][T21547] asix: probe of 4-1:0.47 failed with error -71 [ 662.662771][T21547] usb 4-1: USB disconnect, device number 44 [ 662.672767][ T9] jfs_write_inode: jfs_commit_inode failed! [ 662.679836][ T4185] [ 662.679836][ T4185] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 662.679836][ T4185] [ 662.692611][ T4185] [ 662.692611][ T4185] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 662.692611][ T4185] [ 662.703678][T30533] orangefs_mount: mount request failed with -4 [ 662.949382][T30571] loop4: detected capacity change from 0 to 1764 [ 663.080530][T30571] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 663.261280][T30592] netlink: 'syz.0.12223': attribute type 1 has an invalid length. [ 663.327983][T30592] netlink: 'syz.0.12223': attribute type 2 has an invalid length. [ 663.388405][T30592] netlink: 'syz.0.12223': attribute type 1 has an invalid length. [ 663.414433][T30605] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12230'. [ 663.511530][T30612] netlink: 'syz.1.12232': attribute type 12 has an invalid length. [ 663.521982][T30612] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12232'. [ 663.549117][T30617] x_tables: duplicate underflow at hook 4 [ 663.730557][T30628] loop4: detected capacity change from 0 to 256 [ 663.752048][T21547] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 663.765417][T30632] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12243'. [ 663.776068][T30634] netlink: 'syz.1.12244': attribute type 7 has an invalid length. [ 663.792689][T30634] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.12244'. [ 663.849826][T30628] FAT-fs (loop4): Directory bread(block 64) failed [ 663.867085][T30628] FAT-fs (loop4): Directory bread(block 65) failed [ 663.882984][T30628] FAT-fs (loop4): Directory bread(block 66) failed [ 663.899929][T30628] FAT-fs (loop4): Directory bread(block 67) failed [ 663.916500][T30628] FAT-fs (loop4): Directory bread(block 68) failed [ 663.931951][T30628] FAT-fs (loop4): Directory bread(block 69) failed [ 663.949066][T30628] FAT-fs (loop4): Directory bread(block 70) failed [ 663.979456][T30628] FAT-fs (loop4): Directory bread(block 71) failed [ 663.992113][T21547] usb 4-1: Using ep0 maxpacket: 16 [ 663.996363][T30628] FAT-fs (loop4): Directory bread(block 72) failed [ 664.009777][T30628] FAT-fs (loop4): Directory bread(block 73) failed [ 664.112183][T21547] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 664.133080][T21547] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 664.181450][T21547] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 664.292295][T21547] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 664.301430][T21547] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 664.347673][T21547] usb 4-1: SerialNumber: syz [ 664.392426][T30610] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 664.505385][ T4300] udevd[4300]: inotify_add_watch(7, /dev/nbd1p4, 10) failed: No such file or directory [ 664.652176][T21547] cdc_ether: probe of 4-1:1.0 failed with error -71 [ 664.709254][T21547] usb 4-1: USB disconnect, device number 45 [ 664.899278][T30637] loop2: detected capacity change from 0 to 32768 [ 664.906407][T30675] loop0: detected capacity change from 0 to 8 [ 665.251004][T30689] cgroup: noprefix used incorrectly [ 665.432507][T30702] netlink: 'syz.1.12276': attribute type 1 has an invalid length. [ 665.475121][T30702] netlink: 'syz.1.12276': attribute type 2 has an invalid length. [ 665.536378][T30705] netlink: 372 bytes leftover after parsing attributes in process `syz.4.12279'. [ 665.595293][T30705] netlink: 'syz.4.12279': attribute type 3 has an invalid length. [ 665.604636][T30705] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12279'. [ 665.621322][T30710] netlink: 'syz.1.12282': attribute type 10 has an invalid length. [ 665.631995][T21547] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 665.874979][T21547] usb 3-1: Using ep0 maxpacket: 32 [ 665.992160][T21547] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 666.020124][T21547] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 666.204639][T21547] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 666.236638][T21547] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.265317][T21547] usb 3-1: Product: syz [ 666.269565][T21547] usb 3-1: Manufacturer: syz [ 666.285617][T21547] usb 3-1: SerialNumber: syz [ 666.296000][T30757] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 666.314130][T21547] usb 3-1: config 0 descriptor?? [ 666.544843][ T4271] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 666.602163][T21547] snd-usb-6fire 3-1:0.0: unknown device firmware state received from device: [ 666.627570][T21547] f0 e4 3d a7 d3 60 4f fe [ 666.644589][T21547] snd-usb-6fire: probe of 3-1:0.0 failed with error -5 [ 666.816406][T21547] usb 3-1: USB disconnect, device number 54 [ 666.834816][ T4271] usb 4-1: Using ep0 maxpacket: 8 [ 666.956696][T30799] loop0: detected capacity change from 0 to 128 [ 666.983912][ T4271] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 666.992132][T13778] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 666.999790][ T4271] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 667.011041][ T4271] usb 4-1: config 0 has no interface number 0 [ 667.018386][ T4271] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 667.029660][ T4271] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 667.043436][ T4271] usb 4-1: config 0 interface 52 has no altsetting 0 [ 667.078875][T30799] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 667.093607][T30799] hpfs: filesystem error: improperly stopped [ 667.099666][T30799] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 667.109368][T30799] hpfs: You really don't want any checks? You are crazy... [ 667.117664][T30799] hpfs: hpfs_map_sector(): read error [ 667.125585][T30799] hpfs: code page support is disabled [ 667.131239][T30799] hpfs: hpfs_map_4sectors(): unaligned read [ 667.138003][ T4271] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 667.148230][T30799] hpfs: hpfs_map_4sectors(): unaligned read [ 667.154609][ T4271] usb 4-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 667.163209][T30799] hpfs: filesystem error: unable to find root dir [ 667.170429][ T4271] usb 4-1: Manufacturer: syz [ 667.179077][ T4271] usb 4-1: config 0 descriptor?? [ 667.188912][T30799] hpfs: bad mount options. [ 667.212499][ T6857] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 667.233194][ T4271] hub 4-1:0.52: bad descriptor, ignoring hub [ 667.239257][ T4271] hub: probe of 4-1:0.52 failed with error -5 [ 667.384039][T30807] __nla_validate_parse: 3 callbacks suppressed [ 667.384058][T30807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12330'. [ 667.404434][T30807] netlink: 56 bytes leftover after parsing attributes in process `syz.2.12330'. [ 667.446978][ T4271] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input48 [ 667.472262][ T6857] usb 2-1: Using ep0 maxpacket: 16 [ 667.572383][T13778] usb 5-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 667.581621][T13778] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.602198][ T6857] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 667.611231][ T6857] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 667.657379][T13778] usb 5-1: Product: syz [ 667.661622][T13778] usb 5-1: Manufacturer: syz [ 667.667520][ T6857] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 667.677589][T13778] usb 5-1: SerialNumber: syz [ 667.683233][ T6857] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 667.702686][T13778] usb 5-1: config 0 descriptor?? [ 667.709062][ T6857] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 667.719357][ T6857] usb 2-1: config 1 interface 0 has no altsetting 0 [ 667.726660][ T6857] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 667.738874][ T6857] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.770948][ T4271] usb 4-1: USB disconnect, device number 46 [ 667.813736][ T6857] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 667.940500][T30829] loop0: detected capacity change from 0 to 4096 [ 667.968628][T30829] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 667.983346][T13778] mos7840 5-1:0.0: required endpoints missing [ 668.003623][T30829] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 668.040911][ T6857] scsi host1: usb-storage 2-1:1.0 [ 668.050334][T30829] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 668.086840][T30829] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 668.120764][T30829] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 668.137514][T30829] ntfs: volume version 3.1. [ 668.154840][T30829] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 668.174673][T30829] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 668.205244][T21547] usb 5-1: USB disconnect, device number 64 [ 668.221050][T30829] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 668.243307][ T6857] usb 2-1: USB disconnect, device number 60 [ 668.275092][T30838] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12344'. [ 668.285181][T30829] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 668.325720][T30829] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 668.657176][T30860] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12355'. [ 668.743206][T30864] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12357'. [ 669.202537][T30902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12376'. [ 669.261311][T30905] usb usb8: usbfs: process 30905 (syz.4.12377) did not claim interface 0 before use [ 669.529172][T30925] loop3: detected capacity change from 0 to 512 [ 669.621038][T30925] EXT4-fs (loop3): Ignoring removed bh option [ 669.642091][T30925] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 669.824960][T30925] EXT4-fs (loop3): 1 truncate cleaned up [ 669.834320][T30925] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 669.931849][T30943] validate_nla: 2 callbacks suppressed [ 669.958500][T30943] netlink: 'syz.4.12395': attribute type 1 has an invalid length. [ 670.521838][T30976] ieee802154 phy1 wpan1: encryption failed: -22 [ 671.036044][T31013] tmpfs: Bad value for 'mpol' [ 671.200405][T31028] netlink: 34 bytes leftover after parsing attributes in process `syz.0.12437'. [ 671.663366][T31073] netlink: 'syz.2.12459': attribute type 4 has an invalid length. [ 671.824174][T31084] netlink: 'syz.4.12464': attribute type 2 has an invalid length. [ 672.004302][ T6857] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 672.264264][T31108] loop2: detected capacity change from 0 to 256 [ 672.272128][ T6857] usb 4-1: Using ep0 maxpacket: 16 [ 672.281657][T31109] netlink: 72 bytes leftover after parsing attributes in process `syz.1.12475'. [ 672.367488][T31113] openvswitch: netlink: Actions may not be safe on all matching packets [ 672.386071][T31108] FAT-fs (loop2): Directory bread(block 64) failed [ 672.432327][T31108] FAT-fs (loop2): Directory bread(block 65) failed [ 672.449324][T31108] FAT-fs (loop2): Directory bread(block 66) failed [ 672.469541][T31108] FAT-fs (loop2): Directory bread(block 67) failed [ 672.497162][T31108] FAT-fs (loop2): Directory bread(block 68) failed [ 672.514340][T31108] FAT-fs (loop2): Directory bread(block 69) failed [ 672.531799][T31108] FAT-fs (loop2): Directory bread(block 70) failed [ 672.564459][T31108] FAT-fs (loop2): Directory bread(block 71) failed [ 672.577107][T31108] FAT-fs (loop2): Directory bread(block 72) failed [ 672.591401][T31108] FAT-fs (loop2): Directory bread(block 73) failed [ 672.592910][ T6857] usb 4-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 672.661977][ T6857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.670132][ T6857] usb 4-1: Product: syz [ 672.710428][ T6857] usb 4-1: Manufacturer: syz [ 672.726324][T31108] attempt to access beyond end of device [ 672.726324][T31108] loop2: rw=524288, want=1164, limit=256 [ 672.751907][ T6857] usb 4-1: SerialNumber: syz [ 672.760011][T31108] attempt to access beyond end of device [ 672.760011][T31108] loop2: rw=0, want=1164, limit=256 [ 672.764684][ T6857] usb 4-1: config 0 descriptor?? [ 672.877300][ T6857] hub 4-1:0.0: bad descriptor, ignoring hub [ 672.892474][ T6857] hub: probe of 4-1:0.0 failed with error -5 [ 672.900118][T31134] netlink: 'syz.0.12490': attribute type 10 has an invalid length. [ 673.153774][T31147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12493'. [ 673.214568][ T6857] usb 4-1: USB disconnect, device number 47 [ 673.291375][T31159] loop4: detected capacity change from 0 to 512 [ 673.416063][T31159] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 673.435459][T31159] EXT4-fs (loop4): Test dummy encryption mode enabled [ 673.452518][T31159] EXT4-fs (loop4): Test dummy encryption mode enabled [ 673.479960][T31159] EXT4-fs (loop4): Mount option "journal_async_commit" incompatible with ext3 [ 673.522097][T21547] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 673.677673][ T263] block nbd3: Attempted send on invalid socket [ 673.684259][ T263] blk_update_request: I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 673.697110][T31185] vxfs: unable to read disk superblock at 1 [ 673.705070][ T263] block nbd3: Attempted send on invalid socket [ 673.711366][ T263] blk_update_request: I/O error, dev nbd3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 673.722843][T31185] vxfs: unable to read disk superblock at 8 [ 673.728943][T31185] vxfs: can't find superblock. [ 673.823722][T31193] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12518'. [ 673.827052][T31191] loop3: detected capacity change from 0 to 2048 [ 673.894875][T21547] usb 1-1: config 3 has an invalid interface number: 84 but max is 0 [ 673.903190][T21552] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 673.914560][T31191] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 673.931949][T21547] usb 1-1: config 3 has no interface number 0 [ 673.938287][T21547] usb 1-1: config 3 interface 84 has no altsetting 0 [ 674.104242][T31207] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12526'. [ 674.128601][T21547] usb 1-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=10.6b [ 674.142113][T21547] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.143604][T31211] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12527'. [ 674.169421][T31211] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12527'. [ 674.198909][T21547] usb 1-1: Product: syz [ 674.203583][T31211] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12527'. [ 674.230026][T21547] usb 1-1: Manufacturer: syz [ 674.255092][T21547] usb 1-1: SerialNumber: syz [ 674.262179][T21552] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 674.310372][T21552] usb 5-1: config 0 has no interface number 0 [ 674.337612][T21552] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 106, changing to 10 [ 674.383099][T21552] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1569, setting to 1024 [ 674.586551][T21552] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 674.606170][T21552] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.629474][T21547] as10x_usb: device has been detected [ 674.652378][T21547] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 674.662511][T21552] usb 5-1: Product: syz [ 674.666835][T21552] usb 5-1: Manufacturer: syz [ 674.714707][T21552] usb 5-1: SerialNumber: syz [ 674.730654][T21552] usb 5-1: config 0 descriptor?? [ 674.747918][T21547] usb 1-1: DVB: registering adapter 2 frontend 0 (Abilis Systems DVB-Titan)... [ 674.772547][T31159] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 674.795046][T21552] yurex 5-1:0.50: USB YUREX device now attached to Yurex #1 [ 674.871188][T21547] as10x_usb: error during firmware upload part1 [ 674.891673][T21547] Registered device Abilis Systems DVB-Titan [ 674.901528][T21547] usb 1-1: USB disconnect, device number 59 [ 675.010134][T21552] usb 5-1: USB disconnect, device number 65 [ 675.056367][T21552] yurex 5-1:0.50: USB YUREX #1 now disconnected [ 675.069127][T21547] Unregistered device Abilis Systems DVB-Titan [ 675.092839][T21547] as10x_usb: device has been disconnected [ 675.266633][T31255] netlink: 'syz.3.12550': attribute type 11 has an invalid length. [ 675.477495][T31271] QAT: Device 7 not found [ 675.659693][T31285] netlink: 'syz.4.12563': attribute type 10 has an invalid length. [ 675.669741][T31285] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.12563'. [ 676.122461][T31312] xt_recent: hitcount (4294967295) is larger than allowed maximum (255) [ 676.207813][T31317] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (2) [ 676.231721][T31319] kAFS: unparsable volume name [ 676.499579][T31338] loop2: detected capacity change from 0 to 2048 [ 676.597633][T31338] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 676.642150][T21552] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 676.670453][T31338] UDF-fs: error (device loop2): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 676.702102][T31352] loop3: detected capacity change from 0 to 64 [ 676.738860][T31338] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1376) has entry past directory size at pos 232 [ 677.012200][T21552] usb 2-1: config 0 has an invalid interface number: 29 but max is 0 [ 677.049952][T21552] usb 2-1: config 0 has no interface number 0 [ 677.076471][T21552] usb 2-1: config 0 interface 29 has no altsetting 0 [ 677.096691][T31376] afs: Bad value for 'source' [ 677.252459][T21552] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 677.283598][T21552] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.303843][T21552] usb 2-1: Product: syz [ 677.305845][T31391] libceph: resolve '. [ 677.305845][T31391] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 677.305845][T31391] ' (ret=-3): failed [ 677.308073][T21552] usb 2-1: Manufacturer: syz [ 677.358141][T21552] usb 2-1: SerialNumber: syz [ 677.372892][T21552] usb 2-1: config 0 descriptor?? [ 677.429978][T31399] ieee802154 phy1 wpan1: encryption failed: -22 [ 677.544193][ T4271] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 677.557490][T31405] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.12622'. [ 677.642372][T21552] peak_usb 2-1:0.29: PEAK-System PCAN-USB X6 v174 fw v146.0.0 (2 channels) [ 677.822132][ T4271] usb 5-1: Using ep0 maxpacket: 8 [ 677.853333][T21552] peak_usb 2-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 677.863535][T21552] peak_usb 2-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 677.918759][T31427] netlink: 'syz.0.12631': attribute type 4 has an invalid length. [ 677.929934][T31429] sctp: [Deprecated]: syz.2.12632 (pid 31429) Use of int in max_burst socket option. [ 677.929934][T31429] Use struct sctp_assoc_value instead [ 677.944868][T31427] netlink: 152 bytes leftover after parsing attributes in process `syz.0.12631'. [ 677.958074][T31427] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 677.972644][ T4271] usb 5-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 677.995855][ T4271] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 678.006268][ T4271] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 65 [ 678.016152][ T4271] usb 5-1: config 0 has no interface number 0 [ 678.037548][T21552] peak_usb: probe of 2-1:0.29 failed with error -71 [ 678.057193][ T4271] usb 5-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 678.068204][T21552] usb 2-1: USB disconnect, device number 61 [ 678.096717][ T4271] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.114365][T31432] CIFS mount error: No usable UNC path provided in device string! [ 678.114365][T31432] [ 678.124645][T31432] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 678.136731][ T4271] usb 5-1: config 0 descriptor?? [ 678.388585][T31447] loop0: detected capacity change from 0 to 2048 [ 678.444533][T31447] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 678.519529][T31455] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 678.546364][T31458] Zero length message leads to an empty skb [ 678.649384][ T4271] usb 5-1: USB disconnect, device number 66 [ 678.690086][T31463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12648'. [ 679.213948][T31500] loop0: detected capacity change from 0 to 512 [ 679.268205][T31500] EXT4-fs (loop0): Ignoring removed bh option [ 679.302806][T31500] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 679.328317][T31510] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12670'. [ 679.344735][T31511] netlink: 'syz.3.12671': attribute type 2 has an invalid length. [ 679.366773][T31500] EXT4-fs (loop0): 1 truncate cleaned up [ 679.372798][T31511] netlink: 'syz.3.12671': attribute type 8 has an invalid length. [ 679.372821][T31511] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12671'. [ 679.392685][T31500] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 679.440358][T31518] binder: 31517:31518 ioctl c018620c 200000000200 returned -22 [ 679.570671][T31528] netlink: 'syz.1.12678': attribute type 16 has an invalid length. [ 679.579750][T31528] netlink: 'syz.1.12678': attribute type 17 has an invalid length. [ 679.593743][T31529] netlink: 'syz.2.12681': attribute type 1 has an invalid length. [ 679.615250][T31529] netlink: 228 bytes leftover after parsing attributes in process `syz.2.12681'. [ 679.651299][T31528] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 679.688069][T31528] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 679.703924][T31528] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 679.733560][T31528] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 679.763146][T31528] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 679.770765][T31528] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 679.836097][T31528] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 679.866637][T31528] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.873827][T31528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 679.929774][T31528] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.936972][T31528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 679.989287][T31528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 680.035033][T31528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 680.051515][T31528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 680.083750][T31528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 680.187210][T31528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 680.240576][T31528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 680.271793][T31528] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 680.290208][T31528] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 680.310145][T31528] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 680.383372][ T5521] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 680.676929][T31544] loop2: detected capacity change from 0 to 32768 [ 680.849369][T31544] XFS (loop2): Mounting V5 Filesystem [ 680.933503][T31588] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 680.966985][T31561] loop3: detected capacity change from 0 to 32768 [ 680.982147][T31588] bond0: (slave lo): Error: Device can not be enslaved while up [ 681.022577][T31594] netlink: 9 bytes leftover after parsing attributes in process `syz.4.12705'. [ 681.036599][T31544] XFS (loop2): Ending clean mount [ 681.090621][ T4185] XFS (loop2): Unmounting Filesystem [ 681.110409][T31561] XFS (loop3): Mounting V5 Filesystem [ 681.273367][T31561] XFS (loop3): Ending clean mount [ 681.297727][T31561] XFS (loop3): Quotacheck needed: Please wait. [ 681.465060][T31561] XFS (loop3): Quotacheck: Done. [ 681.581798][T31627] loop0: detected capacity change from 0 to 64 [ 681.589366][ T4187] XFS (loop3): Unmounting Filesystem [ 682.413375][T31662] netlink: 'syz.3.12721': attribute type 9 has an invalid length. [ 682.470082][T31662] netlink: 'syz.3.12721': attribute type 7 has an invalid length. [ 682.517536][T31662] netlink: 'syz.3.12721': attribute type 8 has an invalid length. [ 683.046092][T31692] loop2: detected capacity change from 0 to 256 [ 683.103889][T31692] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 683.613790][T31718] loop4: detected capacity change from 0 to 1024 [ 683.722470][T31731] netlink: 'syz.0.12769': attribute type 1 has an invalid length. [ 683.827031][ T154] hfsplus: b-tree write err: -5, ino 4 [ 683.947416][T31736] ipt_CLUSTERIP: Please specify destination IP [ 684.110049][T31754] loop0: detected capacity change from 0 to 16 [ 684.193598][T31754] erofs: (device loop0): mounted with root inode @ nid 36. [ 684.466338][T31768] loop0: detected capacity change from 0 to 4096 [ 684.502402][T21552] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 684.580571][T31768] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 684.752076][T21552] usb 4-1: Using ep0 maxpacket: 8 [ 684.767945][T31795] netlink: 'syz.0.12798': attribute type 16 has an invalid length. [ 684.779176][T31795] netlink: 'syz.0.12798': attribute type 17 has an invalid length. [ 684.790636][T31795] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 684.809920][T31795] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 684.820526][T31790] loop4: detected capacity change from 0 to 4096 [ 684.872288][T31795] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 684.899198][T31790] __ntfs_error: 7 callbacks suppressed [ 684.899217][T31790] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 684.915395][T21552] usb 4-1: unable to get BOS descriptor or descriptor too short [ 684.932685][T31795] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 684.944701][T31790] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 684.961093][T31790] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 684.973373][T31795] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 684.986578][T31790] ntfs: volume version 3.1. [ 684.986970][T31795] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 685.010068][T31795] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 685.013186][T21552] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 685.045736][T31795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 685.057105][T31795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 685.070383][T31795] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.077618][T31795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 685.096306][T21552] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 685.121933][T21552] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 685.141814][T31795] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 685.160185][T21552] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 685.176054][T21552] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 685.190316][T31795] IPv6: ADDRCONF(NETDEV_CHANGE): ipip0: link becomes ready [ 685.201220][T21552] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 685.214595][T21552] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 685.308561][ T4184] ntfs: (device loop4): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 685.377215][T31807] loop0: detected capacity change from 0 to 64 [ 685.385495][T21552] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 685.405272][T21552] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.417095][T21552] usb 4-1: Product: syz [ 685.421332][T21552] usb 4-1: Manufacturer: syz [ 685.428722][T21552] usb 4-1: SerialNumber: syz [ 685.449376][T21552] usb 4-1: config 0 descriptor?? [ 685.467719][T31811] SET target dimension over the limit! [ 685.512470][T31761] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 685.579547][T31813] loop4: detected capacity change from 0 to 2048 [ 685.598431][T21552] snd-usb-audio: probe of 4-1:0.0 failed with error -12 [ 685.645165][T31815] loop2: detected capacity change from 0 to 4096 [ 685.670044][T31813] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 685.745268][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.774673][T31823] netlink: 'syz.0.12811': attribute type 2 has an invalid length. [ 685.791459][ T4271] usb 4-1: USB disconnect, device number 48 [ 685.795230][T31815] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 685.809281][T31824] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 685.863312][T31828] netlink: 'syz.1.12813': attribute type 1 has an invalid length. [ 685.873734][T31823] netlink: 'syz.0.12811': attribute type 8 has an invalid length. [ 685.916826][T31823] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12811'. [ 686.043427][ T4278] udevd[4278]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 686.205874][ T6857] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 686.497264][T31854] x_tables: duplicate entry at hook 2 [ 686.614667][ T6857] usb 2-1: config 3 has an invalid interface number: 84 but max is 0 [ 686.631925][ T6857] usb 2-1: config 3 has no interface number 0 [ 686.651934][ T6857] usb 2-1: config 3 interface 84 has no altsetting 0 [ 686.768421][T31878] netlink: 48 bytes leftover after parsing attributes in process `syz.4.12837'. [ 686.844606][ T6857] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=10.6b [ 686.865793][ T6857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.888110][T31886] loop0: detected capacity change from 0 to 8 [ 686.901932][ T6857] usb 2-1: Product: syz [ 686.906168][ T6857] usb 2-1: Manufacturer: syz [ 686.921104][ T6857] usb 2-1: SerialNumber: syz [ 687.035412][T31886] SQUASHFS error: lzo decompression failed, data probably corrupt [ 687.056661][T31886] SQUASHFS error: Failed to read block 0x1dd: -5 [ 687.063454][T31886] SQUASHFS error: Unable to read metadata cache entry [1db] [ 687.071018][T31886] SQUASHFS error: Unable to read inode 0xa7 [ 687.082669][T31900] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12850'. [ 687.104576][T31900] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12850'. [ 687.134029][T31902] x_tables: unsorted underflow at hook 3 [ 687.282096][T21543] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 687.296924][ T6857] as10x_usb: device has been detected [ 687.312736][ T6857] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 687.380822][ T6857] usb 2-1: DVB: registering adapter 2 frontend 0 (Abilis Systems DVB-Titan)... [ 687.415180][ T6857] as10x_usb: error during firmware upload part1 [ 687.468451][ T6857] Registered device Abilis Systems DVB-Titan [ 687.488626][ T6857] usb 2-1: USB disconnect, device number 62 [ 687.522383][T21543] usb 4-1: Using ep0 maxpacket: 32 [ 687.559128][ T6857] Unregistered device Abilis Systems DVB-Titan [ 687.579600][ T6857] as10x_usb: device has been disconnected [ 687.641559][T31928] Scaler: ================= START STATUS ================= [ 687.649169][T21543] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 687.649204][T21543] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.661077][T31927] netlink: 'syz.2.12864': attribute type 6 has an invalid length. [ 687.681942][T12840] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 687.688316][T31928] Scaler: ================== END STATUS ================== [ 687.701326][T31927] netlink: 168 bytes leftover after parsing attributes in process `syz.2.12864'. [ 687.726381][T21543] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 687.793412][T31931] netlink: 'syz.0.12866': attribute type 21 has an invalid length. [ 687.823265][T31931] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12866'. [ 687.962215][T12840] usb 5-1: Using ep0 maxpacket: 32 [ 688.152246][T21543] gspca_nw80x: reg_r err -71 [ 688.157006][T21543] nw80x: probe of 4-1:3.0 failed with error -71 [ 688.189831][T21543] usb 4-1: USB disconnect, device number 49 [ 688.292827][T12840] usb 5-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 688.309433][T12840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.326285][T12840] usb 5-1: Product: syz [ 688.330713][T12840] usb 5-1: Manufacturer: syz [ 688.337741][T12840] usb 5-1: SerialNumber: syz [ 688.387559][T31969] netlink: 'syz.1.12884': attribute type 11 has an invalid length. [ 688.401990][T31969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12884'. [ 688.453363][ T6857] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 688.498764][T31975] loop0: detected capacity change from 0 to 64 [ 688.588372][T31981] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12890'. [ 688.600366][T12840] usb 5-1: palm_os_4_probe - error -71 getting connection info [ 688.608787][T31981] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12890'. [ 688.621043][T12840] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 688.640734][T12840] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 688.668469][T12840] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 688.752485][T12840] usb 5-1: USB disconnect, device number 67 [ 688.771422][T12840] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 688.807846][T12840] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 688.822807][T12840] visor 5-1:1.0: device disconnected [ 688.833059][T21552] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 688.852244][ T6857] usb 3-1: config 3 has an invalid interface number: 84 but max is 0 [ 688.861202][ T6857] usb 3-1: config 3 has no interface number 0 [ 688.880976][ T6857] usb 3-1: config 3 interface 84 has no altsetting 0 [ 689.000536][T31997] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12898'. [ 689.051423][T31999] tmpfs: Bad value for 'mpol' [ 689.074475][T21552] usb 1-1: Using ep0 maxpacket: 8 [ 689.082331][ T6857] usb 3-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=10.6b [ 689.104366][ T6857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.127444][ T6857] usb 3-1: Product: syz [ 689.132383][ T6857] usb 3-1: Manufacturer: syz [ 689.137022][ T6857] usb 3-1: SerialNumber: syz [ 689.166968][T32003] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (8) [ 689.207478][T13778] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 689.213488][T21552] usb 1-1: config 7 has an invalid interface number: 143 but max is 1 [ 689.233622][T21552] usb 1-1: config 7 has an invalid interface number: 217 but max is 1 [ 689.244268][T21552] usb 1-1: config 7 has an invalid descriptor of length 121, skipping remainder of the config [ 689.275594][T21552] usb 1-1: config 7 has no interface number 0 [ 689.283940][T21552] usb 1-1: config 7 has no interface number 1 [ 689.290413][T21552] usb 1-1: too many endpoints for config 7 interface 217 altsetting 0: 255, using maximum allowed: 30 [ 689.310339][T21552] usb 1-1: config 7 interface 217 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 689.324607][T21552] usb 1-1: config 7 interface 143 has no altsetting 0 [ 689.424524][T32015] usb usb8: usbfs: process 32015 (syz.4.12907) did not claim interface 0 before use [ 689.473550][T13778] usb 4-1: Using ep0 maxpacket: 32 [ 689.493592][T32019] program syz.4.12909 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 689.503319][T21552] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=ba.35 [ 689.510609][ T6857] as10x_usb: device has been detected [ 689.512461][T21552] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.512488][T21552] usb 1-1: Product: syz [ 689.512504][T21552] usb 1-1: Manufacturer: syz [ 689.512519][T21552] usb 1-1: SerialNumber: syz [ 689.544603][ T6857] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 689.563590][ T6857] usb 3-1: DVB: registering adapter 2 frontend 0 (Abilis Systems DVB-Titan)... [ 689.577950][ T6857] as10x_usb: error during firmware upload part1 [ 689.584766][ T6857] Registered device Abilis Systems DVB-Titan [ 689.586605][ T6857] usb 3-1: USB disconnect, device number 55 [ 689.612141][T13778] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 689.612160][T21543] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 689.644819][T13778] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 689.676383][ T6857] Unregistered device Abilis Systems DVB-Titan [ 689.677891][ T6857] as10x_usb: device has been disconnected [ 689.694132][T13778] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 689.709389][T13778] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 689.734560][T13778] usb 4-1: config 0 interface 0 has no altsetting 0 [ 689.813247][T21552] qmi_wwan: probe of 1-1:7.143 failed with error -22 [ 689.823029][T32027] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 689.892191][T21552] usb 1-1: Could not set interface, error -71 [ 689.906886][T21552] usb 1-1: USB disconnect, device number 60 [ 689.923904][T13778] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 689.935325][T13778] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 689.944462][T13778] usb 4-1: Product: syz [ 689.948702][T13778] usb 4-1: Manufacturer: syz [ 689.958468][T13778] usb 4-1: SerialNumber: syz [ 689.966890][T13778] usb 4-1: config 0 descriptor?? [ 689.984532][T21543] usb 2-1: config 0 has an invalid interface number: 110 but max is 0 [ 689.994847][T21543] usb 2-1: config 0 has no interface number 0 [ 690.001008][T21543] usb 2-1: config 0 interface 110 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 690.014035][T13778] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 690.024662][T21543] usb 2-1: config 0 interface 110 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 690.046429][T21543] usb 2-1: config 0 interface 110 has no altsetting 0 [ 690.066715][T13778] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 690.212268][T21543] usb 2-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 690.221385][T21543] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.261994][T21543] usb 2-1: Product: syz [ 690.266241][T21543] usb 2-1: Manufacturer: syz [ 690.278399][T21543] usb 2-1: SerialNumber: syz [ 690.314850][T21543] usb 2-1: config 0 descriptor?? [ 690.322563][T21552] usb 4-1: USB disconnect, device number 50 [ 690.338492][T21552] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 690.468685][T32048] loop0: detected capacity change from 0 to 128 [ 690.566929][T32048] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 690.576477][T21543] cdc_subset: probe of 2-1:0.110 failed with error -22 [ 690.599835][T32048] FAT-fs (loop0): Filesystem has been set read-only [ 690.618795][T32055] loop2: detected capacity change from 0 to 512 [ 690.653679][T32055] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 690.761076][T32055] EXT4-fs (loop2): mounted filesystem without journal. Opts: nomblk_io_submit,inode_readahead_blks=0x0000000000000800,discard,,errors=continue. Quota mode: writeback. [ 690.798463][ T6857] usb 2-1: USB disconnect, device number 63 [ 690.923683][T32055] ext4 filesystem being mounted at /2661/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 690.988726][T32078] __nla_validate_parse: 1 callbacks suppressed [ 690.988746][T32078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12937'. [ 691.114824][T32089] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 691.196540][T32093] netlink: 'syz.2.12940': attribute type 3 has an invalid length. [ 691.291038][T32099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12947'. [ 691.455525][T32113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12953'. [ 691.700779][T32124] loop4: detected capacity change from 0 to 256 [ 691.760861][T32129] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.12962'. [ 691.792519][T32124] FAT-fs (loop4): Directory bread(block 64) failed [ 691.822225][T32129] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 691.836678][T32124] FAT-fs (loop4): Directory bread(block 65) failed [ 691.853895][T32124] FAT-fs (loop4): Directory bread(block 66) failed [ 691.871967][T32124] FAT-fs (loop4): Directory bread(block 67) failed [ 691.886755][T32124] FAT-fs (loop4): Directory bread(block 68) failed [ 691.901399][T32124] FAT-fs (loop4): Directory bread(block 69) failed [ 691.937061][T32124] FAT-fs (loop4): Directory bread(block 70) failed [ 691.971980][T32124] FAT-fs (loop4): Directory bread(block 71) failed [ 691.991387][T32124] FAT-fs (loop4): Directory bread(block 72) failed [ 692.017869][T32124] FAT-fs (loop4): Directory bread(block 73) failed [ 692.186154][T32153] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12973'. [ 692.198471][T32153] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12973'. [ 692.208812][T32153] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12973'. [ 692.218499][T32153] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12973'. [ 692.228135][T32153] netlink: 104 bytes leftover after parsing attributes in process `syz.1.12973'. [ 692.551453][T32178] loop2: detected capacity change from 0 to 1024 [ 692.650526][T32186] loop3: detected capacity change from 0 to 1024 [ 692.702870][T32178] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 692.743291][T13778] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 692.750789][T32178] ext4 filesystem being mounted at /2672/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 692.821166][ T300] hfsplus: b-tree write err: -5, ino 4 [ 692.857835][T32178] EXT4-fs warning (device loop2): ext4_empty_dir:3156: inode #12: comm syz.2.12986: directory missing '..' [ 693.122887][T32215] loop3: detected capacity change from 0 to 512 [ 693.162476][T13778] usb 1-1: config 0 has an invalid interface number: 49 but max is 0 [ 693.170660][T13778] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 693.210945][T13778] usb 1-1: config 0 has no interface number 0 [ 693.224159][T32222] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13007'. [ 693.239750][T13778] usb 1-1: config 0 interface 49 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 693.276608][T13778] usb 1-1: config 0 interface 49 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 693.306653][T32215] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 693.311163][T13778] usb 1-1: config 0 interface 49 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 693.350522][T32215] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1048578 out of range 0-7 [ 693.379906][T32215] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 693.390860][T32215] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.13004: Failed to acquire dquot type 1 [ 693.406644][T13778] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=2d.ad [ 693.424438][T32215] EXT4-fs error (device loop3): ext4_do_update_inode:5222: inode #16: comm syz.3.13004: corrupted inode contents [ 693.448019][T32215] EXT4-fs error (device loop3): ext4_dirty_inode:6058: inode #16: comm syz.3.13004: mark_inode_dirty error [ 693.457797][T13778] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.475036][T32215] EXT4-fs error (device loop3): ext4_do_update_inode:5222: inode #16: comm syz.3.13004: corrupted inode contents [ 693.497911][T32215] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #16: comm syz.3.13004: mark_inode_dirty error [ 693.524424][T32215] EXT4-fs error (device loop3): ext4_do_update_inode:5222: inode #16: comm syz.3.13004: corrupted inode contents [ 693.528213][T13778] usb 1-1: config 0 descriptor?? [ 693.554499][T32215] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 693.589946][T32215] EXT4-fs error (device loop3): ext4_do_update_inode:5222: inode #16: comm syz.3.13004: corrupted inode contents [ 693.602096][T32238] netlink: 'syz.2.13014': attribute type 10 has an invalid length. [ 693.602150][T32238] netlink: 'syz.2.13014': attribute type 10 has an invalid length. [ 693.637657][T13778] xbox_remote_probe: Unexpected endpoint_in [ 693.675420][T32215] EXT4-fs error (device loop3): ext4_truncate:4279: inode #16: comm syz.3.13004: mark_inode_dirty error [ 693.700463][T32215] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 693.767507][T32215] EXT4-fs (loop3): 1 truncate cleaned up [ 693.786830][T32215] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 693.854653][T32215] ext4 filesystem being mounted at /2638/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 693.887140][T13778] usb 1-1: USB disconnect, device number 61 [ 693.970855][T32215] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1048578 out of range 0-7 [ 694.017445][T32215] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 694.067698][T32215] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.13004: Failed to acquire dquot type 1 [ 694.440107][T32263] loop3: detected capacity change from 0 to 2048 [ 694.516679][T32271] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 694.587656][T32263] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 694.715942][T32288] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 694.760657][T32285] nvme_fabrics: missing parameter 'transport=%s' [ 694.771622][T32285] nvme_fabrics: missing parameter 'nqn=%s' [ 694.946255][T32297] loop4: detected capacity change from 0 to 1024 [ 695.066237][T32297] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 695.167466][T32297] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 32: comm syz.4.13041: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=255, rec_len=0, size=1024 fake=0 [ 695.619530][T32338] ieee802154 phy1 wpan1: encryption failed: -22 [ 695.808988][T32352] netlink: 'syz.1.13067': attribute type 2 has an invalid length. [ 695.951311][T32364] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 696.257409][T32388] autofs4:pid:32388:autofs_fill_super: called with bogus options [ 697.006652][T32426] kernel read not supported for file /  (pid: 32426 comm: syz.0.13104) [ 697.056198][ T26] audit: type=1800 audit(1772062329.663:48): pid=32426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.13104" name=200120 dev="mqueue" ino=121949 res=0 errno=0 [ 697.271994][ T6857] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 697.375811][T32436] loop3: detected capacity change from 0 to 256 [ 697.465758][T32436] FAT-fs (loop3): Directory bread(block 64) failed [ 697.482007][T32436] FAT-fs (loop3): Directory bread(block 65) failed [ 697.499106][T32432] loop0: detected capacity change from 0 to 4096 [ 697.509406][T32436] FAT-fs (loop3): Directory bread(block 66) failed [ 697.549888][T32436] FAT-fs (loop3): Directory bread(block 67) failed [ 697.565340][T32432] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 697.573411][T32436] FAT-fs (loop3): Directory bread(block 68) failed [ 697.608352][T32442] __nla_validate_parse: 2 callbacks suppressed [ 697.608372][T32442] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13111'. [ 697.653117][T32442] netlink: 56 bytes leftover after parsing attributes in process `syz.1.13111'. [ 697.668170][T32442] netlink: 44 bytes leftover after parsing attributes in process `syz.1.13111'. [ 697.678257][T32436] FAT-fs (loop3): Directory bread(block 69) failed [ 697.691777][T32442] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13111'. [ 697.702275][ T6857] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 697.704679][T32436] FAT-fs (loop3): Directory bread(block 70) failed [ 697.721176][ T6857] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 697.734092][ T6857] usb 3-1: config 0 has no interface number 0 [ 697.752381][T32436] FAT-fs (loop3): Directory bread(block 71) failed [ 697.759045][T32436] FAT-fs (loop3): Directory bread(block 72) failed [ 697.765796][ T6857] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 697.784420][T32432] ntfs: volume version 3.1. [ 697.804380][ T6857] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 697.808220][T32436] FAT-fs (loop3): Directory bread(block 73) failed [ 698.042378][ T6857] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 698.051502][ T6857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.080736][ T6857] usb 3-1: Product: syz [ 698.097387][ T6857] usb 3-1: Manufacturer: syz [ 698.115076][ T6857] usb 3-1: SerialNumber: syz [ 698.134638][T32452] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 698.188465][T32449] loop3: detected capacity change from 0 to 4096 [ 698.202711][ T6857] usb 3-1: config 0 descriptor?? [ 698.264575][T32449] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 698.410466][T32456] loop4: detected capacity change from 0 to 4096 [ 698.569119][T32465] device wlan0 entered promiscuous mode [ 698.579271][T32456] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 698.589224][T32467] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 698.618817][T32465] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 698.646784][T32456] NILFS (loop4): mounting fs with errors [ 698.682313][T21543] usb 3-1: USB disconnect, device number 56 [ 698.691549][T32456] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=32, inode=9, rec_len=24, name_len=6 [ 699.132435][T32494] loop0: detected capacity change from 0 to 256 [ 699.217296][T32494] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 699.278533][T32503] loop3: detected capacity change from 0 to 256 [ 699.425118][T32512] loop0: detected capacity change from 0 to 8 [ 699.571087][T32521] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13148'. [ 699.604462][T32521] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13148'. [ 699.652076][T32521] netlink: 80 bytes leftover after parsing attributes in process `syz.3.13148'. [ 699.905912][T32539] loop4: detected capacity change from 0 to 1024 [ 700.035357][T32547] netlink: 'syz.0.13163': attribute type 19 has an invalid length. [ 700.070164][T32547] netlink: 5 bytes leftover after parsing attributes in process `syz.0.13163'. [ 700.084138][ T5521] hfsplus: b-tree write err: -5, ino 4 [ 700.200600][T32515] loop2: detected capacity change from 0 to 32768 [ 700.353712][T32561] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13169'. [ 700.369791][ T4185] read_mapping_page failed! [ 700.384317][T32561] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13169'. [ 700.409305][ T4185] ERROR: (device loop2): txCommit: [ 700.409305][ T4185] [ 700.417836][ T4185] read_mapping_page failed! [ 700.427997][ T4185] ERROR: (device loop2): txCommit: [ 700.427997][ T4185] [ 700.863225][ T5521] general protection fault, probably for non-canonical address 0xdffffc00000000ba: 0000 [#1] PREEMPT SMP KASAN [ 700.875018][ T5521] KASAN: null-ptr-deref in range [0x00000000000005d0-0x00000000000005d7] [ 700.883469][ T5521] CPU: 1 PID: 5521 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 700.891047][ T5521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 700.901139][ T5521] Workqueue: writeback wb_workfn (flush-7:2) [ 700.907197][ T5521] RIP: 0010:bio_associate_blkg_from_css+0x128/0x9c0 [ 700.913839][ T5521] Code: df 41 80 3c 04 00 74 08 48 89 df e8 92 2f ec fd 41 be d0 05 00 00 4c 03 33 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 f7 e8 6a 2f ec fd 41 bf 90 00 00 00 4d 03 [ 700.933503][ T5521] RSP: 0018:ffffc900034ef260 EFLAGS: 00010202 [ 700.939622][ T5521] RAX: 00000000000000ba RBX: ffff888061ae1148 RCX: dffffc0000000000 [ 700.947625][ T5521] RDX: 0000000000000000 RSI: ffffffff96481e00 RDI: ffff888061ae1140 [ 700.955627][ T5521] RBP: 1ffff1100c35c231 R08: dffffc0000000000 R09: 1ffffffff203a618 [ 700.963865][ T5521] R10: dffffc0000000000 R11: fffffbfff203a619 R12: 1ffff1100c35c229 [ 700.971877][ T5521] R13: ffff888061ae1188 R14: 00000000000005d0 R15: ffff888028d83bac [ 700.979887][ T5521] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 700.988860][ T5521] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 700.995472][ T5521] CR2: 000000110c3683e0 CR3: 000000007344b000 CR4: 00000000003506e0 [ 701.003482][ T5521] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 701.011491][ T5521] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 701.019501][ T5521] Call Trace: [ 701.022839][ T5521] [ 701.025826][ T5521] bio_associate_blkg+0x23a/0x340 [ 701.030892][ T5521] lbmStartIO+0x204/0x4c0 [ 701.035261][ T5521] lbmWrite+0x361/0x480 [ 701.039455][ T5521] jfs_flush_journal+0x537/0xec0 [ 701.044537][ T5521] ? lmLogShutdown+0x850/0x850 [ 701.049323][ T5521] ? __lock_acquire+0x7d10/0x7d10 [ 701.054373][ T5521] ? do_raw_spin_lock+0x128/0x2f0 [ 701.059437][ T5521] ? __rwlock_init+0x140/0x140 [ 701.064240][ T5521] jfs_write_inode+0x12b/0x220 [ 701.069031][ T5521] __writeback_single_inode+0x6c3/0xda0 [ 701.074595][ T5521] writeback_sb_inodes+0xa4e/0x1680 [ 701.079814][ T5521] ? queue_io+0x550/0x550 [ 701.084181][ T5521] ? rcu_is_watching+0x11/0xa0 [ 701.088965][ T5521] wb_writeback+0x45d/0xbe0 [ 701.093505][ T5521] ? rcu_lock_release+0x20/0x20 [ 701.098378][ T5521] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 701.104395][ T5521] ? _raw_spin_unlock_irq+0x1f/0x40 [ 701.109639][ T5521] wb_workfn+0x43a/0xf20 [ 701.113935][ T5521] ? inode_wait_for_writeback+0x220/0x220 [ 701.119674][ T5521] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 701.125684][ T5521] ? read_lock_is_recursive+0x10/0x10 [ 701.131081][ T5521] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 701.136994][ T5521] ? _raw_spin_unlock+0x40/0x40 [ 701.141867][ T5521] ? _raw_spin_unlock_irq+0x1f/0x40 [ 701.147075][ T5521] process_one_work+0x85f/0x1010 [ 701.152078][ T5521] ? worker_detach_from_pool+0x240/0x240 [ 701.157727][ T5521] ? lockdep_hardirqs_off+0x70/0x100 [ 701.163253][ T5521] ? _raw_spin_lock_irq+0xb7/0xf0 [ 701.168346][ T5521] ? _raw_spin_lock_irqsave+0x100/0x100 [ 701.173929][ T5521] ? wq_worker_running+0x97/0x170 [ 701.178978][ T5521] worker_thread+0xaa6/0x1290 [ 701.183674][ T5521] ? lockdep_hardirqs_on+0x94/0x140 [ 701.188886][ T5521] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 701.194803][ T5521] kthread+0x436/0x520 [ 701.198883][ T5521] ? rcu_lock_release+0x20/0x20 [ 701.203758][ T5521] ? kthread_blkcg+0xd0/0xd0 [ 701.208364][ T5521] ret_from_fork+0x1f/0x30 [ 701.212805][ T5521] [ 701.215869][ T5521] Modules linked in: [ 701.294572][T21543] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 701.349437][ T5521] ---[ end trace 123aa17ceb408834 ]--- [ 701.369731][ T5521] RIP: 0010:bio_associate_blkg_from_css+0x128/0x9c0 [ 701.377271][ T5521] Code: df 41 80 3c 04 00 74 08 48 89 df e8 92 2f ec fd 41 be d0 05 00 00 4c 03 33 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 f7 e8 6a 2f ec fd 41 bf 90 00 00 00 4d 03 [ 701.434481][ T5521] RSP: 0018:ffffc900034ef260 EFLAGS: 00010202 [ 701.451306][ T5521] RAX: 00000000000000ba RBX: ffff888061ae1148 RCX: dffffc0000000000 [ 701.460970][ T5521] RDX: 0000000000000000 RSI: ffffffff96481e00 RDI: ffff888061ae1140 [ 701.469253][ T5521] RBP: 1ffff1100c35c231 R08: dffffc0000000000 R09: 1ffffffff203a618 [ 701.478734][ T5521] R10: dffffc0000000000 R11: fffffbfff203a619 R12: 1ffff1100c35c229 [ 701.486983][ T5521] R13: ffff888061ae1188 R14: 00000000000005d0 R15: ffff888028d83bac [ 701.496512][ T5521] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 701.505882][ T5521] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 701.513667][ T5521] CR2: 00007fe0d773b000 CR3: 000000001bd38000 CR4: 00000000003506f0 [ 701.526580][ T5521] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 701.541655][ T5521] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 701.549849][ T5521] Kernel panic - not syncing: Fatal exception [ 701.556267][ T5521] Kernel Offset: disabled [ 701.560618][ T5521] Rebooting in 86400 seconds..