last executing test programs: 7.182092761s ago: executing program 4 (id=8801): prctl$PR_SET_IO_FLUSHER(0x39, 0x1) syz_clone(0x61880100, 0x0, 0x0, 0x0, 0x0, 0x0) 6.327338022s ago: executing program 4 (id=8813): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, 0x0) 5.998024899s ago: executing program 4 (id=8817): r0 = socket(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=[{0x10, 0x316, 0xbe}, {0x10, 0x84, 0x1}], 0x20}, 0x888d0) 5.814953177s ago: executing program 4 (id=8821): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b35d25a806f8c6394f90224fc602f0009000a740200053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 5.491922103s ago: executing program 4 (id=8826): r0 = syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x0, &(0x7f0000000280)={[{@grpid}, {@nolazytime}, {@inode32}]}, 0x0, 0x9747, &(0x7f000001c440)="$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") ioctl$FITRIM(r0, 0x80405880, &(0x7f0000000180)={0x2, 0x4000000000000003, 0x1ff}) 4.242921824s ago: executing program 3 (id=8837): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x40400, 0x0) read$FUSE(r0, 0x0, 0x0) 3.825872224s ago: executing program 3 (id=8842): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000084000000000100000100000000000000", @ANYRES16, @ANYRESHEX, @ANYBLOB="e45f"], 0x50) 3.615735934s ago: executing program 3 (id=8845): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) readv(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/218, 0xda}, {0x0, 0x20}], 0x2) 3.338511478s ago: executing program 3 (id=8850): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x100) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000340)={0x3, 0x2, 0x1, 0x1, 0xf5f}) 3.066682871s ago: executing program 3 (id=8855): syz_usb_connect(0x0, 0x2d, &(0x7f0000000f00)=ANY=[@ANYBLOB="1201000005d0d3087d07aa04d85b0102030109021b000f000000000904000001dbcc7a000905", @ANYBLOB="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"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 2.993250915s ago: executing program 1 (id=8857): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, 0x0, 0x0) 2.757142406s ago: executing program 1 (id=8861): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000001500010027bd7000fcdbdf250a10c700", @ANYRES32=0x0, @ANYBLOB="14000600000008000c00000001f8ffff00f0ffff14000100fe8000000000000000000000000000aa14000600090000000500000008000000091000000800080000030000140002"], 0x8c}}, 0x4000004) 2.225496842s ago: executing program 1 (id=8867): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001240)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000001280)=0x57) 2.044445341s ago: executing program 1 (id=8870): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x11, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.786025293s ago: executing program 0 (id=8873): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="40000000010205000000000000000000020000002c0002801400018008000100ac1414aa08000200ac1414bb06000340000000000c000280050001"], 0x40}}, 0x80) 1.721198497s ago: executing program 4 (id=8874): io_setup(0x10, &(0x7f0000000400)=0x0) io_cancel(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0xc16c, 0xffffffffffffffff, 0x0, 0x0, 0x7}, 0x0) 1.720440227s ago: executing program 1 (id=8875): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=ANY=[@ANYBLOB="740000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800c0001006d6163766c616e003c00028008000100100000001c000580180004"], 0x74}}, 0x2044890) 1.669295289s ago: executing program 0 (id=8876): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x0) 1.514140427s ago: executing program 2 (id=8877): prlimit64(0x0, 0x7, &(0x7f0000000000)={0x4, 0x4}, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 1.422596071s ago: executing program 0 (id=8878): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd4}, 0x1, 0x0, 0x0, 0x8000}, 0x24000810) 1.302624117s ago: executing program 1 (id=8879): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1.229285631s ago: executing program 2 (id=8880): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x6, 0x1, 0x0, 0x4, 0x3}, 0x1c) 1.138543415s ago: executing program 0 (id=8881): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="0f95f4", 0x3}], 0x1}, 0x88) 1.04688562s ago: executing program 2 (id=8882): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001a00), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000001a40)={0x10001, 0x8, 0x3, {0x1, @pix_mp={0x9, 0x4, 0x39565559, 0x0, 0x8, [{0x1, 0x9}, {0xc, 0x1}, {0x800, 0x800}, {0x2, 0xfffffffb}, {0x3, 0x9}, {0x66a5}, {0x564c, 0x8}, {0x7fffffff, 0x80}], 0x48, 0x40, 0x1, 0x2, 0x2}}, 0xc0}) 933.810155ms ago: executing program 2 (id=8883): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000000c0)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f00000007c0)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x660c, 0x0) 907.127656ms ago: executing program 0 (id=8884): mlockall(0x7) madvise(&(0x7f0000c0c000/0x1000)=nil, 0x1000, 0x4) 750.149354ms ago: executing program 3 (id=8885): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x51a, &(0x7f0000000f00)="$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") symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 404.146301ms ago: executing program 2 (id=8886): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x2, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r0, &(0x7f0000000580), 0x0}, 0x20) 117.091095ms ago: executing program 2 (id=8887): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) listen(r0, 0x9) 0s ago: executing program 0 (id=8888): r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'batadv0\x00', &(0x7f0000000000)=@ethtool_drvinfo={0x37, "0fe58faa563ced387bc900000000000160ff0160fd56391727e7611971306d00", "784bb2e82fe8fc2abe556c4c48672a19ec4c1621c488b8634de1f645d583ba91", "6acc0f91db70e93c10d8fbd47b53e42eadb323550cd6027777f0f598c5380b97", "6fc50610034dffb5e2a8719618f529fa6fceaedff1f4d99a8b79c38aaded28a3", "98110757773ac5e5d59f30f12e2db51abe192f26ef029bd486fa1d4753edf638", "7b54e7a79bc0d3799f634080", 0x2, 0x0, 0x0, 0x0, 0x400}}) kernel console output (not intermixed with test programs): s in process `syz.0.6852'. [ 741.746798][T19944] lo speed is unknown, defaulting to 1000 [ 741.751067][T19968] loop4: detected capacity change from 0 to 256 [ 741.774861][T19944] lo speed is unknown, defaulting to 1000 [ 741.808101][T19944] lo speed is unknown, defaulting to 1000 [ 741.821695][T19970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6853'. [ 741.838487][T19972] loop3: detected capacity change from 0 to 64 [ 741.875428][T19944] lo speed is unknown, defaulting to 1000 [ 741.953648][T19972] attempt to access beyond end of device [ 741.953648][T19972] loop3: rw=0, want=268435470, limit=64 [ 742.005179][T19976] kAFS: unable to lookup cell '(/' [ 742.005680][T19972] Buffer I/O error on dev loop3, logical block 134217734, async page read [ 742.033838][T19974] loop0: detected capacity change from 0 to 1764 [ 742.160794][T19974] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 742.178255][T19972] attempt to access beyond end of device [ 742.178255][T19972] loop3: rw=0, want=268435470, limit=64 [ 742.204831][T19981] comedi comedi0: dac02: a I/O base address must be specified [ 742.272636][T19972] Buffer I/O error on dev loop3, logical block 134217734, async page read [ 742.709547][T20010] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 742.733617][T20010] overlayfs: conflicting options: userxattr,metacopy=on [ 742.961923][T20023] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6877'. [ 742.986470][T20024] set_capacity_and_notify: 1 callbacks suppressed [ 742.986489][T20024] loop2: detected capacity change from 0 to 64 [ 742.999604][T20023] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6877'. [ 743.105034][T20024] attempt to access beyond end of device [ 743.105034][T20024] loop2: rw=0, want=268435470, limit=64 [ 743.138994][T20024] Buffer I/O error on dev loop2, logical block 134217734, async page read [ 743.230357][T20038] ieee802154 phy0 wpan0: encryption failed: -90 [ 743.231987][T20024] attempt to access beyond end of device [ 743.231987][T20024] loop2: rw=0, want=268435470, limit=64 [ 743.285376][T20024] Buffer I/O error on dev loop2, logical block 134217734, async page read [ 743.298901][T20044] ip6t_srh: unknown srh invflags 4000 [ 743.827666][T20074] loop1: detected capacity change from 0 to 64 [ 743.863618][T20076] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6906'. [ 743.885177][T20076] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6906'. [ 743.950777][T20074] attempt to access beyond end of device [ 743.950777][T20074] loop1: rw=0, want=268435470, limit=64 [ 743.998781][T20074] Buffer I/O error on dev loop1, logical block 134217734, async page read [ 744.048148][T20074] attempt to access beyond end of device [ 744.048148][T20074] loop1: rw=0, want=268435470, limit=64 [ 744.086337][T20074] Buffer I/O error on dev loop1, logical block 134217734, async page read [ 744.108754][T20041] loop0: detected capacity change from 0 to 32768 [ 744.243739][T20041] JBD2: Ignoring recovery information on journal [ 744.352841][T20086] TCP: TCP_TX_DELAY enabled [ 744.452936][T20087] loop3: detected capacity change from 0 to 1764 [ 744.458144][T20041] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 744.569427][T20041] (syz.0.6889,20041,1):ocfs2_find_entry:1086 ERROR: status = -117 [ 744.587559][T20041] (syz.0.6889,20041,1):ocfs2_find_entry:1086 ERROR: status = -117 [ 744.650200][T20087] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 744.662753][T20041] (syz.0.6889,20041,1):ocfs2_mknod:502 ERROR: status = -117 [ 744.693976][T20041] (syz.0.6889,20041,1):ocfs2_mkdir:659 ERROR: status = -117 [ 744.945108][ T4420] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 744.958275][ T4193] ocfs2: Unmounting device (7,0) on (node local) [ 745.127192][T20113] loop0: detected capacity change from 0 to 64 [ 745.335608][T20121] loop0: detected capacity change from 0 to 64 [ 745.362416][ T4420] usb 5-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc [ 745.399646][ T4420] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.406721][T20121] attempt to access beyond end of device [ 745.406721][T20121] loop0: rw=0, want=268435470, limit=64 [ 745.454473][T20121] Buffer I/O error on dev loop0, logical block 134217734, async page read [ 745.509478][ T4420] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6280 [ 745.536349][T20121] attempt to access beyond end of device [ 745.536349][T20121] loop0: rw=0, want=268435470, limit=64 [ 745.585078][T20121] Buffer I/O error on dev loop0, logical block 134217734, async page read [ 745.717990][T20140] netlink: 'syz.2.6938': attribute type 12 has an invalid length. [ 745.838514][T20140] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6938'. [ 745.971432][ T4420] gspca_sn9c20x: Write register 1001 failed -71 [ 745.978026][ T4420] gspca_sn9c20x: Device initialization failed [ 746.008131][ T4420] gspca_sn9c20x: probe of 5-1:252.0 failed with error -71 [ 746.051242][ T4420] usb 5-1: USB disconnect, device number 28 [ 746.224782][T20167] device gtp0 entered promiscuous mode [ 746.321806][T20163] loop3: detected capacity change from 0 to 4096 [ 746.376096][T20163] __ntfs_error: 1 callbacks suppressed [ 746.376117][T20163] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 746.408696][T20163] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 746.423253][T20163] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 746.440470][T20163] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 746.457186][T20163] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 746.470389][T20163] ntfs: volume version 3.1. [ 746.477437][T20163] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 746.490175][T20163] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 746.502379][T20163] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 746.518876][T20163] ntfs: (device loop3): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt. [ 746.530147][T20163] ntfs: (device loop3): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 746.667807][T20177] loop4: detected capacity change from 0 to 64 [ 746.759551][T20177] attempt to access beyond end of device [ 746.759551][T20177] loop4: rw=0, want=268435470, limit=64 [ 746.794624][T20177] Buffer I/O error on dev loop4, logical block 134217734, async page read [ 746.878571][T20187] mmap: syz.1.6956 (20187): VmData 49217536 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 746.955064][T20177] attempt to access beyond end of device [ 746.955064][T20177] loop4: rw=0, want=268435470, limit=64 [ 747.079188][T20177] Buffer I/O error on dev loop4, logical block 134217734, async page read [ 747.379479][T20209] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 747.428168][T20209] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 747.468143][T20209] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 747.626921][T20217] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6974'. [ 747.671466][T20217] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6974'. [ 747.700075][T20217] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6974'. [ 748.277798][T20251] netlink: 'syz.3.6991': attribute type 1 has an invalid length. [ 748.511586][T20261] loop3: detected capacity change from 0 to 512 [ 748.544154][T20211] loop4: detected capacity change from 0 to 32768 [ 748.630507][T20261] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 748.694345][T20280] loop0: detected capacity change from 0 to 64 [ 748.718218][T20211] XFS (loop4): Mounting V5 Filesystem [ 748.737490][T20261] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.6995: bg 0: block 104: invalid block bitmap [ 748.794321][T20261] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 748.805530][T20261] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.6995: invalid indirect mapped block 1 (level 1) [ 748.823559][T20261] EXT4-fs (loop3): 1 truncate cleaned up [ 748.850698][T20280] attempt to access beyond end of device [ 748.850698][T20280] loop0: rw=0, want=268435470, limit=64 [ 748.868949][T20280] Buffer I/O error on dev loop0, logical block 134217734, async page read [ 748.895912][T20280] attempt to access beyond end of device [ 748.895912][T20280] loop0: rw=0, want=268435470, limit=64 [ 748.909456][T20280] Buffer I/O error on dev loop0, logical block 134217734, async page read [ 748.930068][T20261] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 748.994369][T20211] XFS (loop4): Ending clean mount [ 749.029889][T20291] usb usb7: usbfs: process 20291 (syz.2.7006) did not claim interface 0 before use [ 749.244375][ T4197] XFS (loop4): Unmounting Filesystem [ 749.542117][T20310] loop3: detected capacity change from 0 to 64 [ 749.746704][T20321] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7021'. [ 749.994716][T20327] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.7024'. [ 750.033594][T20327] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 750.220829][T20339] libceph: resolve '0.0' (ret=-3): failed [ 750.271579][T20344] loop4: detected capacity change from 0 to 64 [ 750.342439][T20350] syz.0.7034: vmalloc error: size 9007199254740992, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 750.386803][T20344] attempt to access beyond end of device [ 750.386803][T20344] loop4: rw=0, want=268435470, limit=64 [ 750.398863][T20349] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7033'. [ 750.442339][T20350] CPU: 0 PID: 20350 Comm: syz.0.7034 Not tainted syzkaller #0 [ 750.450659][T20350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 750.461410][T20350] Call Trace: [ 750.464735][T20350] [ 750.467720][T20350] dump_stack_lvl+0x188/0x250 [ 750.472741][T20350] ? rcu_lock_release+0x5/0x20 [ 750.477946][T20350] ? show_regs_print_info+0x20/0x20 [ 750.483554][T20350] ? load_image+0x400/0x400 [ 750.488386][T20350] warn_alloc+0x243/0x320 [ 750.493247][T20350] ? rcu_lock_release+0x20/0x20 [ 750.498424][T20350] ? zone_watermark_ok_safe+0x240/0x240 [ 750.504561][T20350] ? dvb_demux_do_ioctl+0x313/0x530 [ 750.510743][T20350] ? kfree+0xef/0x2a0 [ 750.515500][T20350] __vmalloc_node_range+0x2b1/0x8b0 [ 750.518221][T20344] Buffer I/O error on dev loop4, logical block 134217734, async page read [ 750.521607][T20350] ? mutex_lock_io_nested+0x60/0x60 [ 750.536196][T20350] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 750.542156][T20350] vmalloc+0x75/0x80 [ 750.546430][T20350] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 750.552661][T20350] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 750.558718][T20350] dvb_demux_do_ioctl+0x450/0x530 [ 750.564134][T20350] dvb_usercopy+0x191/0x2b0 [ 750.569021][T20350] ? dvb_dmxdev_buffer_read+0x4c0/0x4c0 [ 750.575519][T20350] ? dvb_generic_ioctl+0xb0/0xb0 [ 750.580898][T20350] ? dvb_demux_poll+0x210/0x210 [ 750.586550][T20350] dvb_demux_ioctl+0x25/0x30 [ 750.591460][T20350] __se_sys_ioctl+0xfa/0x170 [ 750.596706][T20350] do_syscall_64+0x4c/0xa0 [ 750.601548][T20350] ? clear_bhb_loop+0x30/0x80 [ 750.606444][T20350] ? clear_bhb_loop+0x30/0x80 [ 750.612138][T20350] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 750.618804][T20350] RIP: 0033:0x7f66a0bf8799 [ 750.623796][T20350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 750.640561][T20344] attempt to access beyond end of device [ 750.640561][T20344] loop4: rw=0, want=268435470, limit=64 [ 750.644864][T20350] RSP: 002b:00007f669ee52028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 750.644897][T20350] RAX: ffffffffffffffda RBX: 00007f66a0e71fa0 RCX: 00007f66a0bf8799 [ 750.644914][T20350] RDX: 0020000000000000 RSI: 0000000000006f2d RDI: 0000000000000003 [ 750.644929][T20350] RBP: 00007f66a0c8ec99 R08: 0000000000000000 R09: 0000000000000000 [ 750.644944][T20350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 750.644958][T20350] R13: 00007f66a0e72038 R14: 00007f66a0e71fa0 R15: 00007ffd08ec9758 [ 750.644989][T20350] [ 750.739545][T20350] Mem-Info: [ 750.744004][T20350] active_anon:331 inactive_anon:10718 isolated_anon:0 [ 750.744004][T20350] active_file:18067 inactive_file:43070 isolated_file:0 [ 750.744004][T20350] unevictable:768 dirty:465 writeback:0 [ 750.744004][T20350] slab_reclaimable:21240 slab_unreclaimable:97782 [ 750.744004][T20350] mapped:31070 shmem:4397 pagetables:746 bounce:0 [ 750.744004][T20350] kernel_misc_reclaimable:0 [ 750.744004][T20350] free:1358587 free_pcp:4380 free_cma:0 [ 750.856931][T20344] Buffer I/O error on dev loop4, logical block 134217734, async page read [ 750.880045][T20329] loop2: detected capacity change from 0 to 32768 [ 750.891598][T20350] Node 0 active_anon:1292kB inactive_anon:47764kB active_file:72064kB inactive_file:172280kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124280kB dirty:1852kB writeback:0kB shmem:20812kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11768kB pagetables:2984kB all_unreclaimable? no [ 750.993236][T20329] JBD2: Ignoring recovery information on journal [ 751.278385][T20329] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 751.338054][T20350] Node 1 active_anon:32kB inactive_anon:508kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 751.359433][T20384] netlink: 'syz.3.7050': attribute type 1 has an invalid length. [ 751.422379][T20386] loop1: detected capacity change from 0 to 512 [ 751.478055][T20350] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 751.509273][T20329] (syz.2.7025,20329,1):ocfs2_remount:631 ERROR: Cannot change data mode on remount [ 751.557783][T20386] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 751.591845][T20386] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.7051: casefold flag without casefold feature [ 751.624665][ T4195] ocfs2: Unmounting device (7,2) on (node local) [ 751.632844][T20386] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.7051: couldn't read orphan inode 15 (err -117) [ 751.648984][T20386] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 751.681643][T20350] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 751.687738][T20350] Node 0 DMA32 free:1489760kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1752kB inactive_anon:47224kB active_file:72480kB inactive_file:171812kB unevictable:1536kB writepending:1848kB present:3129332kB managed:2606552kB mlocked:0kB bounce:0kB free_pcp:14940kB local_pcp:12968kB free_cma:0kB [ 751.715448][T20386] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #2: block 4: comm syz.1.7051: lblock 0 mapped to illegal pblock 4 (length 1) [ 751.734713][T20350] lowmem_reserve[]: 0 0 0 0 0 [ 751.740685][T20350] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 751.771016][T20350] lowmem_reserve[]: 0 0 0 0 0 [ 751.777712][T20350] Node 1 Normal free:3926988kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:8kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 751.792535][T20396] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 751.813546][T20350] lowmem_reserve[]: 0 0 0 0 0 [ 751.824992][T20350] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 751.857362][T20350] Node 0 DMA32: 1331*4kB (UME) 415*8kB (UME) 1072*16kB (UME) 691*32kB (UME) 581*64kB (UME) 206*128kB (UME) 77*256kB (UM) 23*512kB (UME) 9*1024kB (UM) 3*2048kB (ME) 325*4096kB (UM) = 1489508kB [ 751.930795][T20396] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 751.951306][T20350] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 751.965880][T20396] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 751.972445][T20350] Node 1 Normal: 205*4kB (UE) 49*8kB (UME) 29*16kB (UME) 196*32kB (UE) 77*64kB (UME) 25*128kB (UME) 17*256kB (UM) 2*512kB (UE) 0*1024kB 1*2048kB (M) 953*4096kB (UM) = 3926988kB [ 751.993500][T20350] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 752.044689][T20350] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 752.075823][T20350] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 752.146325][T20350] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 752.205465][T20350] 62543 total pagecache pages [ 752.210397][T20350] 29 pages in swap cache [ 752.244513][T20407] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7061'. [ 752.246612][T20350] Swap cache stats: add 265, delete 236, find 57/94 [ 752.292558][T20350] Free swap = 124472kB [ 752.307815][T20350] Total swap = 124996kB [ 752.318482][T20350] 2097051 pages RAM [ 752.320055][T20403] loop4: detected capacity change from 0 to 4096 [ 752.324296][T20350] 0 pages HighMem/MovableOnly [ 752.340345][T20350] 411490 pages reserved [ 752.382092][T20350] 0 pages cma reserved [ 752.403061][T20403] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 752.882096][T20440] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 752.895413][T20443] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7077'. [ 753.048809][T20451] loop4: detected capacity change from 0 to 512 [ 753.161540][T20451] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 753.219716][T20451] ext4 filesystem being mounted at /1324/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 753.416689][T20481] loop1: detected capacity change from 0 to 512 [ 753.439158][T20481] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 753.520210][T20481] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.7093: bg 0: block 104: invalid block bitmap [ 753.579129][T20481] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 753.650523][T20481] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.7093: invalid indirect mapped block 1 (level 1) [ 753.702061][T20481] EXT4-fs (loop1): 1 truncate cleaned up [ 753.707784][T20481] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 753.770131][T20503] xt_l2tp: wrong L2TP version: 0 [ 753.921606][T20514] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 754.016073][T20518] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 754.362487][T20539] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7122'. [ 754.393932][T20532] set_capacity_and_notify: 1 callbacks suppressed [ 754.393951][T20532] loop0: detected capacity change from 0 to 8192 [ 754.541594][T20532] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 754.573832][T20532] REISERFS (device loop0): using ordered data mode [ 754.598265][T20551] sctp: [Deprecated]: syz.2.7127 (pid 20551) Use of int in maxseg socket option. [ 754.598265][T20551] Use struct sctp_assoc_value instead [ 754.618533][T20532] reiserfs: using flush barriers [ 754.681648][T20532] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 754.710062][T20555] kAFS: unable to lookup cell '' [ 754.770719][T20532] REISERFS (device loop0): checking transaction log (loop0) [ 754.824673][T20560] netlink: 'syz.4.7131': attribute type 4 has an invalid length. [ 754.844207][T20532] REISERFS (device loop0): Using r5 hash to sort names [ 754.887822][T20532] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 754.897866][T20560] netlink: 17 bytes leftover after parsing attributes in process `syz.4.7131'. [ 754.981971][T20532] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 754.995081][T20565] netlink: 'syz.3.7133': attribute type 2 has an invalid length. [ 755.145732][T20569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7135'. [ 755.342111][T20577] overlayfs: missing 'lowerdir' [ 755.448806][T20583] loop1: detected capacity change from 0 to 512 [ 755.545521][T20583] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 755.612306][T20583] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 755.699802][ T4230] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 755.829858][T20606] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7151'. [ 755.882405][T20606] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7151'. [ 755.920258][T20606] netlink: 7 bytes leftover after parsing attributes in process `syz.1.7151'. [ 756.159694][ T4230] usb 4-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 756.188180][ T4230] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 756.211042][ T4230] usb 4-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 756.255783][ T4230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.361049][ T4230] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 756.459489][T20640] nftables ruleset with unbound chain [ 756.566065][T20648] sctp: [Deprecated]: syz.0.7174 (pid 20648) Use of int in maxseg socket option. [ 756.566065][T20648] Use struct sctp_assoc_value instead [ 756.598232][ T4226] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 756.831891][ T4230] gspca_sn9c2028: read1 error -71 [ 756.865088][ T4230] gspca_sn9c2028: read1 error -71 [ 756.877605][ T4230] sn9c2028: probe of 4-1:220.0 failed with error -71 [ 756.898622][ T4230] usb 4-1: USB disconnect, device number 13 [ 757.079206][ T4226] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 757.100130][ T4226] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 757.143310][ T4226] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.223427][ T4226] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 757.359527][T20647] loop1: detected capacity change from 0 to 32768 [ 757.537761][T20647] XFS (loop1): Mounting V5 Filesystem [ 757.607436][T20694] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7194'. [ 757.686619][T20647] XFS (loop1): Ending clean mount [ 757.734031][T20696] loop0: detected capacity change from 0 to 2048 [ 757.804705][T20696] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 758.021198][ T4185] XFS (loop1): Unmounting Filesystem [ 758.436665][ T4226] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 758.685349][ T4226] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 758.709613][ T4226] stv0680 5-1:4.0: last error: 70, command = 0x88 [ 758.735585][ T4226] usb 5-1: USB disconnect, device number 29 [ 759.070569][T20738] netlink: 'syz.2.7214': attribute type 27 has an invalid length. [ 759.111327][T20741] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7201'. [ 759.141175][T20741] netlink: get zone limit has 8 unknown bytes [ 759.317126][T20757] tmpfs: Bad value for 'mpol' [ 759.356706][T20759] netlink: 'syz.4.7222': attribute type 1 has an invalid length. [ 759.365175][T20759] netlink: 'syz.4.7222': attribute type 1 has an invalid length. [ 759.595176][T20772] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 759.756250][T20780] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7230'. [ 759.808192][T20780] IPv6: sit1: Disabled Multicast RS [ 759.863421][T20777] loop1: detected capacity change from 0 to 4096 [ 759.941124][T20777] __ntfs_error: 4 callbacks suppressed [ 759.941144][T20777] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 760.061710][T20777] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 760.110184][T20800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7238'. [ 760.130407][T20801] netlink: 'syz.4.7239': attribute type 2 has an invalid length. [ 760.182024][T20777] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 760.192904][T20801] netlink: 'syz.4.7239': attribute type 3 has an invalid length. [ 760.208677][T20777] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 760.287758][T20777] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 760.386062][T20777] ntfs: volume version 3.1. [ 760.397629][T20777] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 760.446008][T20777] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 760.521137][T20777] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 760.590639][T20777] ntfs: (device loop1): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt. [ 760.616407][T20777] ntfs: (device loop1): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 760.844074][ T4264] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 761.017795][T20848] cgroup: noprefix used incorrectly [ 761.173435][ T4846] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 761.187862][T20862] xt_TPROXY: Can be used only with -p tcp or -p udp [ 761.230879][ T4264] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 761.262302][ T4264] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 761.301813][ T4264] usb 5-1: config 0 has no interface number 0 [ 761.309015][ T4264] usb 5-1: config 0 interface 52 has no altsetting 0 [ 761.393646][T20875] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7261'. [ 761.504799][ T4264] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 761.525878][ T4264] usb 5-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 761.536426][ T4264] usb 5-1: Product: syz [ 761.544044][ T4264] usb 5-1: Manufacturer: syz [ 761.567036][ T4264] usb 5-1: SerialNumber: syz [ 761.574422][ T4264] usb 5-1: config 0 descriptor?? [ 761.622537][ T4846] usb 2-1: unable to get BOS descriptor or descriptor too short [ 761.672523][ T4846] usb 2-1: not running at top speed; connect to a high speed hub [ 761.765415][T20887] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 761.783391][ T4846] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 761.991759][ T4846] usb 2-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 762.034816][ T4846] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.082828][ T4846] usb 2-1: Product: syz [ 762.087190][ T4846] usb 2-1: Manufacturer: syz [ 762.092314][ T4846] usb 2-1: SerialNumber: syz [ 762.112309][ T4275] usb 5-1: USB disconnect, device number 30 [ 762.439697][ T4846] vmk80xx 2-1:8.0: driver 'vmk80xx' failed to auto-configure device. [ 762.487366][ T4846] usb 2-1: USB disconnect, device number 10 [ 762.642146][T20941] netlink: 22 bytes leftover after parsing attributes in process `syz.2.7289'. [ 762.931336][T20958] netlink: 11 bytes leftover after parsing attributes in process `syz.4.7296'. [ 763.138565][T20971] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 763.228532][T20976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7304'. [ 763.728632][T21013] syz.2.7319 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 764.092246][T21043] netlink: 'syz.0.7332': attribute type 8 has an invalid length. [ 764.458740][T21071] binder: 21069:21071 ioctl c0046209 e0ffff00000000 returned -22 [ 764.550940][T21063] loop4: detected capacity change from 0 to 4096 [ 764.638625][T21063] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 764.729204][T21063] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 764.951496][ T4230] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 765.031590][T21108] loop1: detected capacity change from 0 to 64 [ 765.104819][T21116] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7365'. [ 765.177526][T21120] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7366'. [ 765.278473][ T4230] usb 4-1: Using ep0 maxpacket: 16 [ 765.429108][T21134] kAFS: unable to lookup cell '/,' [ 765.433397][ T4230] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 765.545887][ T4226] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 765.590953][T21146] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (8) [ 765.642197][ T4230] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 765.678470][ T4230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.738045][ T4230] usb 4-1: Product: syz [ 765.764232][ T4230] usb 4-1: Manufacturer: syz [ 765.796142][ T4230] usb 4-1: SerialNumber: syz [ 765.835610][T21155] netlink: 'syz.1.7382': attribute type 1 has an invalid length. [ 765.843684][T21155] netlink: 'syz.1.7382': attribute type 3 has an invalid length. [ 765.844256][ T4230] r8152-cfgselector 4-1: config 0 descriptor?? [ 765.881424][T21155] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7382'. [ 765.894065][T21157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7383'. [ 765.906985][T21155] NCSI netlink: No device for ifindex 2986344450 [ 765.963380][ T4226] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 766.005146][ T4226] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 59382, setting to 1024 [ 766.070845][ T4226] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 766.122245][ T4226] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.182070][ T4226] usb 5-1: config 0 descriptor?? [ 766.265165][T21124] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 766.302843][ T4226] gspca_main: spca561-2.14.0 probing abcd:cdee [ 766.398118][T21177] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 766.454647][ T4230] r8152-cfgselector 4-1: Unknown version 0x0000 [ 766.462005][ T4230] r8152-cfgselector 4-1: bad CDC descriptors [ 766.502633][T21183] overlayfs: bad mount option "redirect_dir=on:/" [ 766.529299][ T4230] r8152-cfgselector 4-1: Unknown version 0x0000 [ 766.563139][ T4230] r8152-cfgselector 4-1: USB disconnect, device number 14 [ 766.625646][ T4226] spca561: probe of 5-1:0.0 failed with error -22 [ 766.638551][ T4226] usb 5-1: MIDIStreaming interface descriptor not found [ 766.730143][ T4226] usb 5-1: USB disconnect, device number 31 [ 766.785804][ T4846] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 766.970041][T21201] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7404'. [ 767.052457][ T4383] udevd[4383]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 767.069355][ T4846] usb 1-1: Using ep0 maxpacket: 32 [ 767.203060][ T4846] usb 1-1: config 7 has an invalid interface number: 8 but max is 0 [ 767.224589][ T4846] usb 1-1: config 7 has no interface number 0 [ 767.231098][ T4846] usb 1-1: config 7 interface 8 has no altsetting 0 [ 767.370561][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 767.370580][ T26] audit: type=1400 audit(1774338631.436:40): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A21D01A0B978D2F2F262D2A83D1 pid=21220 comm="syz.3.7413" [ 767.448948][ T4846] usb 1-1: New USB device found, idVendor=048d, idProduct=9006, bcdDevice=36.6e [ 767.459002][T21219] loop1: detected capacity change from 0 to 4096 [ 767.469828][ T4846] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.511159][ T4846] usb 1-1: Product: syz [ 767.533756][ T4846] usb 1-1: Manufacturer: syz [ 767.543267][ T4846] usb 1-1: SerialNumber: syz [ 767.600350][T21219] ntfs: volume version 3.1. [ 767.668659][T21233] device lo entered promiscuous mode [ 767.710501][T21229] loop2: detected capacity change from 0 to 4096 [ 767.712756][T21233] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 767.775334][T21233] syz.4.7420 (21233) used greatest stack depth: 19160 bytes left [ 767.796940][T21229] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 767.936138][T21229] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 767.951224][ T4846] usb 1-1: USB disconnect, device number 32 [ 768.230979][T21249] kernel read not supported for file / œ7³ÏüçÇ!Qöì¥fsõl{T‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 21249 comm: syz.3.7428) [ 768.292602][ T26] audit: type=1800 audit(1774338632.297:41): pid=21249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.7428" name=20019C1437B3CFFCC3A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=80988 res=0 errno=0 [ 768.321056][T21254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7429'. [ 768.949851][T21295] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7447'. [ 768.979116][T21290] Process accounting resumed [ 769.012438][T21295] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7447'. [ 769.518242][T21334] xt_hashlimit: max too large, truncated to 1048576 [ 769.561254][T21334] xt_limit: Overflow, try lower: 0/0 [ 769.773956][T21344] loop4: detected capacity change from 0 to 512 [ 769.903672][T21344] EXT4-fs (loop4): Ignoring removed bh option [ 769.930946][T21344] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 769.975606][T21344] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 770.035928][T21344] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 770.059894][T21344] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 770.079317][T21365] loop3: detected capacity change from 0 to 128 [ 770.089804][T21344] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,bh,noblock_validity,,errors=continue. Quota mode: none. [ 770.113159][T21344] EXT4-fs warning (device loop4): ext4_group_extend:1852: can't read last block, resize aborted [ 770.139509][T21365] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 770.174686][ T4264] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 770.228245][T21365] qnx6: superblock #1 checksum error [ 770.265631][T21368] loop1: detected capacity change from 0 to 64 [ 770.442236][ T4264] usb 1-1: Using ep0 maxpacket: 32 [ 770.570544][ T4264] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 770.595684][ T4264] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 770.624405][ T4264] usb 1-1: config 1 interface 1 has no altsetting 0 [ 770.794956][ T4264] usb 1-1: New USB device found, idVendor=17cc, idProduct=1021, bcdDevice= 0.40 [ 770.818414][ T4264] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.848340][ T4264] usb 1-1: Product: syz [ 770.863669][ T4264] usb 1-1: Manufacturer: syz [ 770.880330][ T4264] usb 1-1: SerialNumber: syz [ 771.070913][T21395] device bond2 entered promiscuous mode [ 771.081765][T21395] 8021q: adding VLAN 0 to HW filter on device bond2 [ 771.099782][T21372] loop3: detected capacity change from 0 to 32768 [ 771.157698][T21372] JBD2: Ignoring recovery information on journal [ 771.254760][ T4264] usb 1-1: unable to issue vendor read request (ret = -71) [ 771.286633][ T4264] usb 1-1: unable to issue vendor read request (ret = -71) [ 771.308013][ T4264] usb 1-1: unable to issue vendor read request (ret = -71) [ 771.333888][ T4264] usb 1-1: unable to issue vendor read request (ret = -71) [ 771.379552][T21372] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 771.382882][ T4264] usb 1-1: unable to issue vendor read request (ret = -71) [ 771.447265][ T4264] usb 1-1: unable to issue vendor read request (ret = -71) [ 771.475217][ T4264] usb 1-1: unable to issue vendor read request (ret = -71) [ 771.509047][T21372] (syz.3.7488,21372,1):ocfs2_remount:631 ERROR: Cannot change data mode on remount [ 771.532935][ T4264] usb 1-1: unable to issue vendor read request (ret = -71) [ 771.602714][ T4264] usb 1-1: USB disconnect, device number 33 [ 771.637128][ T4190] ocfs2: Unmounting device (7,3) on (node local) [ 771.864762][ T6528] udevd[6528]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 771.905122][T21432] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7515'. [ 771.970707][ T1108] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 772.127353][T21439] loop0: detected capacity change from 0 to 2048 [ 772.219070][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 772.226826][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 772.261452][T21453] kernel read not supported for file / œ7³ÏüçÇ!Qöì¥fsõl{T‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 21453 comm: syz.1.7524) [ 772.279943][T21439] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 772.294320][ T26] audit: type=1800 audit(1774338636.048:42): pid=21453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.7524" name=20019C1437B3CFFCC3A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=81323 res=0 errno=0 [ 772.355708][ T1108] usb 5-1: config 8 has an invalid interface number: 223 but max is 0 [ 772.392416][ T1108] usb 5-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 772.453557][T21439] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 772.481523][ T1108] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 772.511791][T21462] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7529'. [ 772.522285][ T1108] usb 5-1: config 8 has no interface number 0 [ 772.538931][T21462] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7529'. [ 772.543002][ T1108] usb 5-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 772.555547][T21462] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7529'. [ 772.585902][ T1108] usb 5-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 772.786074][ T1108] usb 5-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 772.820100][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.859995][ T1108] usb 5-1: Product: syz [ 772.889392][ T1108] usb 5-1: Manufacturer: syz [ 772.915647][ T1108] usb 5-1: SerialNumber: syz [ 773.095746][T21493] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7544'. [ 773.134806][T21493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7544'. [ 773.282566][ T1108] usb 5-1: USB disconnect, device number 32 [ 773.367277][T21509] loop1: detected capacity change from 0 to 1024 [ 773.401020][T21514] loop2: detected capacity change from 0 to 512 [ 773.469149][T21509] hfsplus: Filesystem is marked locked, mounting read-only. [ 773.490672][T21514] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 773.578198][T21514] ext4 filesystem being mounted at /1533/wÅü5ÔTÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8 supports timestamps until 2038-01-19 (0x7fffffff) [ 774.030161][T21546] loop0: detected capacity change from 0 to 8 [ 774.089105][T21551] loop4: detected capacity change from 0 to 256 [ 774.180616][T21551] FAT-fs (loop4): Directory bread(block 64) failed [ 774.217127][T21551] FAT-fs (loop4): Directory bread(block 65) failed [ 774.224255][T21551] FAT-fs (loop4): Directory bread(block 66) failed [ 774.243164][T21551] FAT-fs (loop4): Directory bread(block 67) failed [ 774.265544][T21560] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7576'. [ 774.279387][T21551] FAT-fs (loop4): Directory bread(block 68) failed [ 774.345693][T21551] FAT-fs (loop4): Directory bread(block 69) failed [ 774.354405][T21560] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7576'. [ 774.367017][T21551] FAT-fs (loop4): Directory bread(block 70) failed [ 774.377087][T21551] FAT-fs (loop4): Directory bread(block 71) failed [ 774.384076][T21551] FAT-fs (loop4): Directory bread(block 72) failed [ 774.433682][T21551] FAT-fs (loop4): Directory bread(block 73) failed [ 774.516388][T21569] loop0: detected capacity change from 0 to 256 [ 774.598042][T21573] loop2: detected capacity change from 0 to 1024 [ 774.606513][T21569] FAT-fs (loop0): Directory bread(block 64) failed [ 774.622044][T21569] FAT-fs (loop0): Directory bread(block 65) failed [ 774.628863][T21569] FAT-fs (loop0): Directory bread(block 66) failed [ 774.641415][T21569] FAT-fs (loop0): Directory bread(block 67) failed [ 774.652701][T21569] FAT-fs (loop0): Directory bread(block 68) failed [ 774.659841][T21569] FAT-fs (loop0): Directory bread(block 69) failed [ 774.682039][T21573] EXT4-fs (loop2): inline encryption not supported [ 774.699243][T21569] FAT-fs (loop0): Directory bread(block 70) failed [ 774.706406][T21569] FAT-fs (loop0): Directory bread(block 71) failed [ 774.715015][T21573] EXT4-fs (loop2): Ignoring removed bh option [ 774.740104][T21569] FAT-fs (loop0): Directory bread(block 72) failed [ 774.747009][T21569] FAT-fs (loop0): Directory bread(block 73) failed [ 774.755525][T21573] EXT4-fs (loop2): orphan cleanup on readonly fs [ 774.879184][T21573] EXT4-fs error (device loop2): ext4_quota_enable:6442: comm syz.2.7583: inode #2304: comm syz.2.7583: iget: illegal inode # [ 774.999748][T21573] EXT4-fs (loop2): Remounting filesystem read-only [ 775.014745][T21573] EXT4-fs error (device loop2): ext4_quota_enable:6445: comm syz.2.7583: Bad quota inode: 2304, type: 2 [ 775.084125][T21573] EXT4-fs (loop2): Remounting filesystem read-only [ 775.103135][T21573] EXT4-fs warning (device loop2): ext4_enable_quotas:6486: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 775.131290][T21592] xt_NFQUEUE: number of total queues is 0 [ 775.151567][T21573] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 775.171594][T21573] EXT4-fs (loop2): mounted filesystem without journal. Opts: abort,barrier,inlinecrypt,min_batch_time=0x0000000000000102,errors=remount-ro,bh,. Quota mode: writeback. [ 775.312844][T21573] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #15: comm syz.2.7583: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 775.408582][T21604] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7598'. [ 775.879140][T21626] loop2: detected capacity change from 0 to 2048 [ 776.018003][T21626] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 776.245533][T21644] loop3: detected capacity change from 0 to 256 [ 776.311549][T21648] netlink: 'syz.1.7620': attribute type 7 has an invalid length. [ 776.374081][T21648] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7620'. [ 776.608293][T21658] loop1: detected capacity change from 0 to 1024 [ 776.650089][T21662] loop0: detected capacity change from 0 to 64 [ 776.769689][T21658] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a001c01c, mo2=0002] [ 776.792941][T21658] System zones: 0-1, 3-36 [ 776.811744][T21658] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,journal_ioprio=0x0000000000000006,resuid=0x0000000000000000,max_batch_time=0x000000000000e5a6,debug,bsddf,nodiscard,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 776.835917][ C1] vkms_vblank_simulate: vblank timer overrun [ 776.963800][T21622] JBD2: Ignoring recovery information on journal [ 777.128300][T21689] netlink: 'syz.2.7639': attribute type 1 has an invalid length. [ 777.149281][T21622] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 777.217918][T21693] batman_adv: Cannot find parent device [ 777.289777][T21622] (syz.4.7605,21622,0):ocfs2_remount:631 ERROR: Cannot change data mode on remount [ 777.406986][ T4197] ocfs2: Unmounting device (7,4) on (node local) [ 777.587101][T21715] openvswitch: netlink: IP tunnel dst address not specified [ 778.205858][T21748] __nla_validate_parse: 2 callbacks suppressed [ 778.205878][T21748] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7668'. [ 778.381221][T21761] kAFS: unparsable volume name [ 778.401511][T21765] netlink: 'syz.3.7677': attribute type 21 has an invalid length. [ 778.449408][T21765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7677'. [ 778.504301][T21767] netlink: 'syz.4.7675': attribute type 13 has an invalid length. [ 778.899603][T21800] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 779.056008][T21811] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7695'. [ 779.104295][T21814] netlink: 'syz.2.7697': attribute type 21 has an invalid length. [ 779.212120][T21820] set_capacity_and_notify: 3 callbacks suppressed [ 779.212138][T21820] loop3: detected capacity change from 0 to 64 [ 779.262389][T21822] netlink: 'syz.1.7700': attribute type 1 has an invalid length. [ 779.280326][T21822] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7700'. [ 779.744665][ T4226] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 779.855422][T21859] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7718'. [ 779.875709][T21859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7718'. [ 779.908432][T21859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7718'. [ 779.936078][ T4275] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 780.002280][T21867] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7722'. [ 780.227659][ T4226] usb 2-1: unable to get BOS descriptor or descriptor too short [ 780.342056][ T4226] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 780.370809][ T4226] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 780.442469][ T4226] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 780.583328][ T4275] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 780.607691][ T4275] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.647178][ T4275] usb 3-1: Product: syz [ 780.672468][ T4275] usb 3-1: Manufacturer: syz [ 780.679028][ T4226] usb 2-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 780.708756][ T4226] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.720677][ T4275] usb 3-1: SerialNumber: syz [ 780.745992][ T4275] usb 3-1: config 0 descriptor?? [ 780.766285][ T4226] usb 2-1: Product: syz [ 780.780850][ T4226] usb 2-1: Manufacturer: syz [ 780.786289][ T4226] usb 2-1: SerialNumber: syz [ 780.826508][ T4275] ch341 3-1:0.0: ch341-uart converter detected [ 781.058029][ T4275] usb 3-1: short control message received (0 < 2) [ 781.061102][T21886] loop3: detected capacity change from 0 to 40427 [ 781.065120][ T4275] usb 3-1: failed to receive control message: -5 [ 781.088324][T21886] F2FS-fs (loop3): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 781.098261][T21886] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 781.107549][ T4275] ch341-uart: probe of ttyUSB0 failed with error -5 [ 781.128886][T21886] F2FS-fs (loop3): invalid crc value [ 781.135150][T21886] F2FS-fs (loop3): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 781.166185][T21886] F2FS-fs (loop3): Found nat_bits in checkpoint [ 781.197793][ T4226] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 781.224687][T21886] F2FS-fs (loop3): recover fsync data on readonly fs [ 781.234426][T21886] F2FS-fs (loop3): Try to recover 2th superblock, ret: -30 [ 781.243376][T21886] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 781.261723][ T4226] snd-usb-audio: probe of 2-1:1.1 failed with error -22 [ 781.349613][ T4846] usb 3-1: USB disconnect, device number 35 [ 781.357551][ T4846] ch341 3-1:0.0: device disconnected [ 781.426007][ T4226] snd-usb-audio: probe of 2-1:1.2 failed with error -22 [ 781.470943][ T4226] usb 2-1: USB disconnect, device number 11 [ 781.745153][T21902] dlm: no locking on control device [ 781.753684][ T4383] udevd[4383]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 781.862755][T21906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7741'. [ 781.923871][ T4846] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 781.994387][T21915] libceph: resolve '0' (ret=-3): failed [ 782.212317][ T4846] usb 4-1: Using ep0 maxpacket: 8 [ 782.277675][T21929] ieee802154 phy0 wpan0: encryption failed: -22 [ 782.316103][ T4846] usb 4-1: unable to get BOS descriptor or descriptor too short [ 782.405011][ T4846] usb 4-1: config 1 has an invalid interface number: 6 but max is 2 [ 782.423305][T21939] netlink: 'syz.0.7756': attribute type 13 has an invalid length. [ 782.424752][ T4846] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 782.451177][ T4846] usb 4-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 782.481541][ T4846] usb 4-1: config 1 has no interface number 3 [ 782.500811][T21941] loop1: detected capacity change from 0 to 256 [ 782.517554][ T4846] usb 4-1: too many endpoints for config 1 interface 6 altsetting 29: 147, using maximum allowed: 30 [ 782.560362][ T4846] usb 4-1: config 1 interface 6 altsetting 29 has an invalid endpoint descriptor of length 4, skipping [ 782.616885][T21945] loop0: detected capacity change from 0 to 1024 [ 782.627016][T21949] loop2: detected capacity change from 0 to 128 [ 782.628749][ T4846] usb 4-1: config 1 interface 6 altsetting 29 has 1 endpoint descriptor, different from the interface descriptor's value: 147 [ 782.667344][ T4846] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 202, changing to 7 [ 782.672687][T21941] FAT-fs (loop1): Directory bread(block 64) failed [ 782.687072][T21945] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a001c01c, mo2=0002] [ 782.699486][T21945] System zones: 0-1, 3-36 [ 782.705035][ T4846] usb 4-1: config 1 interface 6 has no altsetting 0 [ 782.713583][ T4846] usb 4-1: config 1 interface 1 has no altsetting 0 [ 782.724603][T21945] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodelalloc,journal_ioprio=0x0000000000000006,resuid=0x0000000000000000,max_batch_time=0x000000000000e5a6,debug,bsddf,nodiscard,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 782.760988][T21941] FAT-fs (loop1): Directory bread(block 65) failed [ 782.769090][T21941] FAT-fs (loop1): Directory bread(block 66) failed [ 782.776621][T21941] FAT-fs (loop1): Directory bread(block 67) failed [ 782.785065][T21941] FAT-fs (loop1): Directory bread(block 68) failed [ 782.793593][T21941] FAT-fs (loop1): Directory bread(block 69) failed [ 782.803644][T21941] FAT-fs (loop1): Directory bread(block 70) failed [ 782.810433][T21941] FAT-fs (loop1): Directory bread(block 71) failed [ 782.818331][T21941] FAT-fs (loop1): Directory bread(block 72) failed [ 782.826038][T21941] FAT-fs (loop1): Directory bread(block 73) failed [ 782.982295][ T4846] usb 4-1: string descriptor 0 read error: -22 [ 782.989338][ T4846] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 783.031989][ T4846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.115226][ T4846] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 783.146065][ T4846] usb 4-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 783.160785][T21967] netlink: zone id is out of range [ 783.167349][ T4846] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 783.198813][T21967] netlink: zone id is out of range [ 783.204701][T21967] netlink: zone id is out of range [ 783.270923][T21967] netlink: zone id is out of range [ 783.292949][T21967] netlink: zone id is out of range [ 783.298300][T21967] netlink: zone id is out of range [ 783.304534][T21975] comedi comedi0: dt2815: I/O port conflict (0x2,2) [ 783.373045][T21977] loop4: detected capacity change from 0 to 2048 [ 783.388458][T21967] netlink: zone id is out of range [ 783.431151][T21967] netlink: zone id is out of range [ 783.475732][T21967] netlink: zone id is out of range [ 783.493566][T21977] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 783.533996][T21967] netlink: zone id is out of range [ 783.776141][ T1108] usb 4-1: USB disconnect, device number 15 [ 783.820005][T21989] batman_adv: Cannot find parent device [ 783.894424][ T4275] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 784.260667][T22018] loop0: detected capacity change from 0 to 256 [ 784.354914][T22018] FAT-fs (loop0): Directory bread(block 65296) failed [ 784.399133][T22018] FAT-fs (loop0): Directory bread(block 65297) failed [ 784.416876][T22018] FAT-fs (loop0): Directory bread(block 65298) failed [ 784.416929][T22018] FAT-fs (loop0): Directory bread(block 65299) failed [ 784.417018][T22018] FAT-fs (loop0): Directory bread(block 65300) failed [ 784.417054][T22018] FAT-fs (loop0): Directory bread(block 65301) failed [ 784.417130][T22018] FAT-fs (loop0): Directory bread(block 65302) failed [ 784.417165][T22018] FAT-fs (loop0): Directory bread(block 65303) failed [ 784.417241][T22018] FAT-fs (loop0): Directory bread(block 65304) failed [ 784.417277][T22018] FAT-fs (loop0): Directory bread(block 65305) failed [ 784.874554][ T4226] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 784.971941][ T4275] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 785.190622][T22045] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7805'. [ 785.415139][T22015] loop4: detected capacity change from 0 to 32768 [ 785.481572][T22059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7813'. [ 785.600915][T22015] OCFS2: ERROR (device loop4): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #76: OCFS2_VALID_FL not set [ 785.619636][T22015] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 785.632719][T22015] (syz.4.7791,22015,0):ocfs2_read_locked_inode:521 ERROR: status = -30 [ 785.644722][T22015] (syz.4.7791,22015,1):_ocfs2_get_system_file_inode:144 ERROR: status = -30 [ 785.708699][T22068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7816'. [ 785.744968][T22015] (syz.4.7791,22015,1):ocfs2_init_local_system_inodes:493 ERROR: status=-30, sysfile=11, slot=0 [ 785.829745][T22015] (syz.4.7791,22015,0):ocfs2_init_local_system_inodes:502 ERROR: status = -30 [ 785.868563][T22015] (syz.4.7791,22015,0):ocfs2_mount_volume:1818 ERROR: status = -30 [ 785.932139][T22075] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7820'. [ 785.959045][T22015] (syz.4.7791,22015,0):ocfs2_fill_super:1177 ERROR: status = -30 [ 786.001894][T22075] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7820'. [ 786.069718][T22075] netlink: 'syz.1.7820': attribute type 3 has an invalid length. [ 786.119516][T22075] netlink: 11 bytes leftover after parsing attributes in process `syz.1.7820'. [ 786.138306][T22082] loop0: detected capacity change from 0 to 128 [ 786.174995][T22084] netlink: 'syz.3.7824': attribute type 2 has an invalid length. [ 786.184741][ T4420] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 786.200010][ T4420] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 786.435438][ T4420] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 786.644987][T22105] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 786.996359][T22109] loop1: detected capacity change from 0 to 4096 [ 787.114022][T22109] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 787.250410][T22125] netlink: 'syz.4.7843': attribute type 10 has an invalid length. [ 787.288645][T22125] device macvlan0 entered promiscuous mode [ 787.341355][T22125] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 787.423733][T22129] loop2: detected capacity change from 0 to 64 [ 787.506978][T22131] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 787.601119][T22134] batman_adv: Cannot find parent device [ 787.664840][ T4420] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 787.752130][T22100] loop0: detected capacity change from 0 to 32768 [ 787.978019][T22145] bridge0: port 1(bridge_slave_0) entered disabled state [ 788.122965][T22152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7857'. [ 788.395112][ T4420] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 788.439079][T22156] loop0: detected capacity change from 0 to 4096 [ 788.477188][ T4275] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 788.592517][T22156] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 788.862201][T22178] loop3: detected capacity change from 0 to 512 [ 788.998516][T22184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7873'. [ 789.270387][T22193] CIFS mount error: No usable UNC path provided in device string! [ 789.270387][T22193] [ 789.310426][T22198] loop1: detected capacity change from 0 to 256 [ 789.343461][T22193] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 789.431031][T22198] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 789.460722][T22198] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 789.565012][T22198] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 789.589226][ T4420] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 789.608876][ T4420] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 789.634250][T22205] overlayfs: missing 'lowerdir' [ 789.661007][T22198] exFAT-fs (loop1): failed to exfat_utf8_to_utf16 (estr:ENAMETOOLONG) nls len : 262, unilen : 257 > 255 [ 789.705239][T22207] delete_channel: no stack [ 790.084384][T22217] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.107520][T22217] net_ratelimit: 335 callbacks suppressed [ 790.107543][T22217] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 790.134438][ T4416] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 790.176995][ T4226] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 790.444165][ T4226] usb 4-1: Using ep0 maxpacket: 16 [ 790.555997][T22194] loop4: detected capacity change from 0 to 32768 [ 790.572817][ T4226] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 790.604585][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 790.664149][T22194] XFS (loop4): sunit and swidth must be specified together [ 790.807840][ T4226] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 790.817928][ T4226] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.867976][ T4226] usb 4-1: Product: syz [ 790.882363][ T4226] usb 4-1: Manufacturer: syz [ 790.896252][ T4226] usb 4-1: SerialNumber: syz [ 790.919096][ T4226] usb 4-1: config 0 descriptor?? [ 791.033956][T22255] netlink: zone id is out of range [ 791.089811][T22255] netlink: zone id is out of range [ 791.126708][ T4226] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 791.178979][T22255] netlink: zone id is out of range [ 791.196352][T22255] netlink: zone id is out of range [ 791.207110][ T4226] usb 4-1: USB disconnect, device number 16 [ 791.225970][ T6165] usb 4-1: Failed to submit usb control message: -71 [ 791.233935][ T6165] usb 4-1: unable to send the bmi data to the device: -71 [ 791.241658][ T6165] usb 4-1: unable to get target info from device [ 791.248907][T22255] netlink: zone id is out of range [ 791.249587][ T6165] usb 4-1: could not get target info (-71) [ 791.265563][ T6165] usb 4-1: could not probe fw (-71) [ 791.330744][T22255] netlink: zone id is out of range [ 791.353074][T22255] netlink: del zone limit has 4 unknown bytes [ 791.604678][T22275] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7915'. [ 791.625943][T22275] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7915'. [ 791.652814][T22275] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7915'. [ 791.681126][T22275] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7915'. [ 791.746227][T22275] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7915'. [ 792.074031][T22307] netlink: 'syz.0.7932': attribute type 10 has an invalid length. [ 792.090530][T22307] device macvlan0 entered promiscuous mode [ 792.128866][T22307] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 792.238085][T22302] loop2: detected capacity change from 0 to 4096 [ 792.333474][T22302] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 792.552430][T22325] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.629886][T22325] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 792.739702][T22332] device syz_tun entered promiscuous mode [ 792.797959][T22329] loop3: detected capacity change from 0 to 2048 [ 792.813203][T22334] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7944'. [ 792.900569][T22342] syz.4.7947 uses old SIOCAX25GETINFO [ 792.921399][T22329] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 793.117607][T22347] Cannot find del_set index 2 as target [ 793.465318][T22361] loop3: detected capacity change from 0 to 4096 [ 793.522149][T22361] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 793.648700][T22380] loop4: detected capacity change from 0 to 256 [ 794.196584][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 794.274032][ T1108] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 794.688456][ T1108] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 794.708259][ T1108] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 794.737077][ T1108] usb 2-1: config 220 has no interface number 2 [ 794.756023][ T1108] usb 2-1: config 220 interface 1 altsetting 5 endpoint 0x5 has invalid maxpacket 64947, setting to 64 [ 794.756872][T22424] netlink: 'syz.2.7988': attribute type 11 has an invalid length. [ 794.785323][ T1108] usb 2-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 794.814340][ T1108] usb 2-1: config 220 interface 0 has no altsetting 0 [ 794.828802][ T1108] usb 2-1: config 220 interface 76 has no altsetting 0 [ 794.836092][T22426] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7991'. [ 794.855715][ T1108] usb 2-1: config 220 interface 1 has no altsetting 0 [ 795.005788][T22433] netlink: 'syz.0.7993': attribute type 1 has an invalid length. [ 795.030996][T22433] netlink: 228 bytes leftover after parsing attributes in process `syz.0.7993'. [ 795.037500][T22380] FAT-fs (loop4): error, fat_get_cluster: detected the cluster chain loop (i_pos 194) [ 795.052268][ T1108] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 795.079434][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.102335][T22380] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 194) [ 795.112455][ T1108] usb 2-1: Product: syz [ 795.126628][ T1108] usb 2-1: Manufacturer: syz [ 795.137574][ T1108] usb 2-1: SerialNumber: syz [ 795.571531][ T1108] usb 2-1: selecting invalid altsetting 0 [ 795.593423][ T1108] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 795.631166][ T1108] usb 2-1: No valid video chain found. [ 795.636181][T22461] overlayfs: missing 'workdir' [ 795.691769][ T1108] usb 2-1: selecting invalid altsetting 0 [ 795.704778][T22454] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 795.711966][ T1108] usbtest: probe of 2-1:220.1 failed with error -22 [ 795.741679][T22464] loop4: detected capacity change from 0 to 64 [ 795.782663][ T1108] usb 2-1: USB disconnect, device number 12 [ 795.820081][T22464] hfs: inconsistency in B*Tree (1,0,2,2,3) [ 795.963113][T22471] netlink: 'syz.3.8010': attribute type 46 has an invalid length. [ 795.985486][T22471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8010'. [ 796.165382][T22482] netlink: 'syz.4.8017': attribute type 1 has an invalid length. [ 796.199688][T22484] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8015'. [ 796.438196][T22498] loop4: detected capacity change from 0 to 1024 [ 796.608938][T22500] loop0: detected capacity change from 0 to 4096 [ 796.670283][ T436] hfsplus: b-tree write err: -5, ino 25 [ 796.684663][ T436] hfsplus: b-tree write err: -5, ino 4 [ 796.706653][ T436] hfsplus: b-tree write err: -5, ino 2 [ 796.729530][ T436] hfsplus: b-tree write err: -5, ino 26 [ 796.820502][T22500] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 796.959752][T22527] netlink: 'syz.1.8034': attribute type 32 has an invalid length. [ 797.079246][T22528] loop3: detected capacity change from 0 to 4096 [ 797.311945][T22528] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,noblock_validity,,errors=continue. Quota mode: writeback. [ 797.809951][ T4416] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 797.824885][T22567] loop3: detected capacity change from 0 to 256 [ 797.918301][T22577] QAT: failed to copy from user cfg_data. [ 797.950617][T22567] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d) [ 798.087363][T22585] loop1: detected capacity change from 0 to 512 [ 798.170114][T22585] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 798.195351][T22585] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61 [ 798.210090][T22585] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #13: comm syz.1.8059: iget: bad i_size value: 12154757448730 [ 798.259334][ T4416] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 798.328454][ T4416] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 798.344554][T22585] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.8059: couldn't read orphan inode 13 (err -117) [ 798.371024][T22594] loop3: detected capacity change from 0 to 512 [ 798.376763][ T4416] usb 1-1: config 1 has no interface number 0 [ 798.386859][T22585] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,nodelalloc,sysvgroups,jqfmt=vfsold,nombcache,grpjquota=.seclabel,,errors=continue. Quota mode: writeback. [ 798.421742][ T4416] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 798.450560][ T4416] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 798.464683][T22594] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 798.468585][ T4416] usb 1-1: too many endpoints for config 1 interface 1 altsetting 1: 247, using maximum allowed: 30 [ 798.507134][ T4416] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 247 [ 798.532670][T22594] EXT4-fs (loop3): mount failed [ 798.551671][T22581] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 798.594540][T22583] __nla_validate_parse: 1 callbacks suppressed [ 798.594690][T22583] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8058'. [ 798.614286][T22583] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8058'. [ 798.631253][T22583] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8058'. [ 798.741609][ T4416] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 798.762654][ T4416] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.795799][ T4416] usb 1-1: Product: syz [ 798.800305][ T4416] usb 1-1: Manufacturer: syz [ 798.824530][ T4416] usb 1-1: SerialNumber: syz [ 798.908964][T22610] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8072'. [ 798.928244][T22610] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8072'. [ 798.969441][T22610] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8072'. [ 798.991763][T22615] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8073'. [ 799.003877][T22610] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 799.342463][T22624] loop2: detected capacity change from 0 to 4096 [ 799.402085][T22627] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 799.445669][ T4416] cdc_ncm 1-1:1.1: bind() failure [ 799.470549][ T4416] usb 1-1: USB disconnect, device number 34 [ 799.533145][T22624] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,noblock_validity,,errors=continue. Quota mode: writeback. [ 799.584762][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 799.930919][T22660] loop4: detected capacity change from 0 to 256 [ 799.948086][ T6479] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 800.125211][T22668] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8098'. [ 800.170401][T22668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8098'. [ 800.329191][T22678] loop4: detected capacity change from 0 to 512 [ 800.360390][ T6479] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 800.426949][T22678] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,noinit_itable,abort,bsdgroups,,errors=continue. Quota mode: writeback. [ 800.483917][T22678] ext4 filesystem being mounted at /1493/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 800.568212][ T6479] usb 4-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 800.588308][ T6479] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.603166][T22678] Quota error (device loop4): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 800.618012][ T6479] usb 4-1: Product: syz [ 800.632227][ T6479] usb 4-1: Manufacturer: syz [ 800.637369][ T6479] usb 4-1: SerialNumber: syz [ 800.644624][T22678] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 800.666351][ T6479] usb 4-1: config 0 descriptor?? [ 800.684602][T22678] EXT4-fs error (device loop4): ext4_acquire_dquot:6234: comm syz.4.8101: Failed to acquire dquot type 0 [ 800.719721][ T6479] redrat3 4-1:0.0: Couldn't find all endpoints [ 800.834534][ T26] audit: type=1400 audit(1774338662.735:43): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=22693 comm="syz.0.8110" [ 800.993639][ T6479] usb 4-1: USB disconnect, device number 17 [ 801.004717][T22700] libceph: resolve 'c' (ret=-3): failed [ 801.377262][T22720] netlink: 'syz.2.8123': attribute type 4 has an invalid length. [ 801.409655][T22720] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8123'. [ 801.453389][T22720] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 801.710711][T22738] device syz_tun entered promiscuous mode [ 801.753261][T22738] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 802.273439][T22780] loop3: detected capacity change from 0 to 8 [ 802.817020][T22820] loop4: detected capacity change from 0 to 512 [ 802.888292][T22820] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 802.947402][T22820] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61 [ 802.971639][T22820] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #13: comm syz.4.8171: iget: bad i_size value: 12154757448730 [ 803.016291][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 803.038346][T22820] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.8171: couldn't read orphan inode 13 (err -117) [ 803.059006][T22833] libceph: secret too big 289 [ 803.084546][T22820] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,nodelalloc,sysvgroups,jqfmt=vfsold,nombcache,grpjquota=.seclabel,,errors=continue. Quota mode: writeback. [ 803.581677][T22852] loop1: detected capacity change from 0 to 1024 [ 803.626552][T22859] kcapi: manufacturer command 4294967295 unknown. [ 803.667664][T22850] loop0: detected capacity change from 0 to 4096 [ 803.794771][T22852] EXT4-fs (loop1): Ignoring removed orlov option [ 803.819686][T22852] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (24670!=35945) [ 803.835018][T22850] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 803.867199][T22869] loop2: detected capacity change from 0 to 512 [ 803.880613][T22852] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 803.956471][T22850] ntfs3: loop0: Failed to load $Extend. [ 804.037326][T22852] EXT4-fs (loop1): Can't support bigalloc feature without extents feature [ 804.037326][T22852] [ 804.082221][T22869] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 804.085301][T22852] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 804.100330][T22852] EXT4-fs (loop1): mounted filesystem without journal. Opts: orlov,auto_da_alloc=0x00000000000001ff,errors=remount-ro,user_xattr,. Quota mode: writeback. [ 804.132813][T22852] EXT4-fs error (device loop1): ext4_search_dir:1549: inode #2: block 16: comm syz.1.8186: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 804.161723][T22869] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61 [ 804.189132][T22869] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #13: comm syz.2.8196: iget: bad i_size value: 12154757448730 [ 804.332079][T22869] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.8196: couldn't read orphan inode 13 (err -117) [ 804.394336][T22869] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,nodelalloc,sysvgroups,jqfmt=vfsold,nombcache,grpjquota=.seclabel,,errors=continue. Quota mode: writeback. [ 804.569707][T22882] loop1: detected capacity change from 0 to 512 [ 804.574830][T22884] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 804.586045][T22865] loop3: detected capacity change from 0 to 32768 [ 804.593290][ T6479] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 804.725652][T22865] (syz.3.8194,22865,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 804.755135][T22882] EXT4-fs (loop1): Ignoring removed oldalloc option [ 804.783279][T22865] (syz.3.8194,22865,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 804.792009][T22890] Zero length message leads to an empty skb [ 804.829968][T22882] EXT4-fs (loop1): 1 truncate cleaned up [ 804.927442][T22865] JBD2: Ignoring recovery information on journal [ 804.948396][T22894] netlink: 'syz.0.8206': attribute type 4 has an invalid length. [ 804.957341][T22882] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,nodelalloc,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 804.962270][T22894] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8206'. [ 804.995315][ T6479] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 805.045302][ T6479] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 805.074705][T22894] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 805.085701][ T6479] usb 5-1: config 220 has no interface number 2 [ 805.133048][T22865] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 805.149992][ T6479] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 805.229428][ T6479] usb 5-1: config 220 interface 0 has no altsetting 0 [ 805.236670][ T6479] usb 5-1: config 220 interface 76 has no altsetting 0 [ 805.276018][ T6479] usb 5-1: config 220 interface 1 has no altsetting 0 [ 805.434768][T22903] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8211'. [ 805.473131][ T4190] ocfs2: Unmounting device (7,3) on (node local) [ 805.497077][ T6479] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 805.528572][ T6479] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.567455][ T6479] usb 5-1: Product: syz [ 805.588750][ T6479] usb 5-1: Manufacturer: syz [ 805.593524][ T6479] usb 5-1: SerialNumber: syz [ 805.859186][T22921] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8213'. [ 806.044885][ T6479] usb 5-1: selecting invalid altsetting 0 [ 806.064571][ T6479] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 806.075809][T22932] loop3: detected capacity change from 0 to 64 [ 806.090260][ T6479] usb 5-1: No valid video chain found. [ 806.176684][T22932] attempt to access beyond end of device [ 806.176684][T22932] loop3: rw=0, want=2592, limit=64 [ 806.193355][ T6479] usb 5-1: selecting invalid altsetting 0 [ 806.200020][ T6479] usbtest: probe of 5-1:220.1 failed with error -22 [ 806.241469][T22937] netlink: 'syz.0.8227': attribute type 1 has an invalid length. [ 806.251358][ T6479] usb 5-1: USB disconnect, device number 33 [ 806.271809][T22932] Buffer I/O error on dev loop3, logical block 1295, async page read [ 806.307915][T22937] netlink: 'syz.0.8227': attribute type 2 has an invalid length. [ 806.320144][T22932] attempt to access beyond end of device [ 806.320144][T22932] loop3: rw=0, want=2592, limit=64 [ 806.329669][T22938] IPVS: length: 117 != 8 [ 806.361539][T22937] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8227'. [ 806.373548][T22932] Buffer I/O error on dev loop3, logical block 1295, async page read [ 806.399940][ T26] audit: type=1800 audit(1774338667.945:44): pid=22932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.8224" name="file3" dev="loop3" ino=6 res=0 errno=0 [ 806.803236][T22950] loop3: detected capacity change from 0 to 4096 [ 806.964602][T22972] loop2: detected capacity change from 0 to 1024 [ 806.974295][T22950] ntfs3: loop3: ino=5, "/" directory corrupted [ 806.990016][T22969] loop1: detected capacity change from 0 to 64 [ 807.073155][T22972] EXT4-fs (loop2): Ignoring removed orlov option [ 807.093605][T22972] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (24670!=35945) [ 807.145335][T22969] attempt to access beyond end of device [ 807.145335][T22969] loop1: rw=0, want=2592, limit=64 [ 807.157597][T22972] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 807.214326][T22969] Buffer I/O error on dev loop1, logical block 1295, async page read [ 807.222664][T22972] EXT4-fs (loop2): Can't support bigalloc feature without extents feature [ 807.222664][T22972] [ 807.354450][T22972] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 807.395108][T22972] EXT4-fs (loop2): mounted filesystem without journal. Opts: orlov,auto_da_alloc=0x00000000000001ff,errors=remount-ro,user_xattr,. Quota mode: writeback. [ 807.403449][T22969] attempt to access beyond end of device [ 807.403449][T22969] loop1: rw=0, want=2592, limit=64 [ 807.495801][T22969] Buffer I/O error on dev loop1, logical block 1295, async page read [ 807.511788][T22972] EXT4-fs error (device loop2): ext4_search_dir:1549: inode #2: block 16: comm syz.2.8244: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 807.530734][ T26] audit: type=1800 audit(1774338668.983:45): pid=22969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.8243" name="file3" dev="loop1" ino=6 res=0 errno=0 [ 807.553187][ C0] vkms_vblank_simulate: vblank timer overrun [ 807.935197][T23008] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8259'. [ 808.030213][T23008] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8259'. [ 808.056598][T23008] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8259'. [ 808.090942][T23008] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8259'. [ 808.978616][T23032] loop4: detected capacity change from 0 to 4096 [ 809.006039][T23042] loop0: detected capacity change from 0 to 512 [ 809.040125][T23032] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 809.061302][T23042] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 809.101874][T23042] EXT4-fs (loop0): external journal has bad superblock [ 809.222374][ T4230] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 809.657001][T23066] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.8288'. [ 809.673551][ T4230] usb 3-1: unable to get BOS descriptor or descriptor too short [ 809.742064][ T4230] usb 3-1: not running at top speed; connect to a high speed hub [ 809.804727][T23072] Cannot find set identified by id 4 to match [ 809.837509][ T4230] usb 3-1: config 65 has an invalid interface number: 126 but max is 0 [ 809.846269][ T4230] usb 3-1: config 65 has no interface number 0 [ 809.861977][ T4230] usb 3-1: config 65 interface 126 has no altsetting 0 [ 810.093724][ T4230] usb 3-1: New USB device found, idVendor=2040, idProduct=4982, bcdDevice=95.d9 [ 810.103585][ T4230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.126697][T23088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8299'. [ 810.133964][ T4230] usb 3-1: Product: syz [ 810.155588][ T4230] usb 3-1: Manufacturer: syz [ 810.166224][ T4230] usb 3-1: SerialNumber: syz [ 810.235216][T23054] loop4: detected capacity change from 0 to 32768 [ 810.264629][ T4264] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 810.346864][T23054] find_entry called with index = 0 [ 810.365642][T23054] read_mapping_page failed! [ 810.370464][T23054] ERROR: (device loop4): txCommit: [ 810.370464][T23054] [ 810.393158][ T6479] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 810.418979][T23094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8302'. [ 810.422403][T23054] ERROR: (device loop4): remounting filesystem as read-only [ 810.542644][ T4264] usb 4-1: Using ep0 maxpacket: 32 [ 810.544252][ T4230] hdpvr 3-1:65.126: Could not find bulk-in endpoint [ 810.591138][ T4230] hdpvr: probe of 3-1:65.126 failed with error -12 [ 810.618380][ T4230] usb 3-1: USB disconnect, device number 36 [ 810.852901][ T6479] usb 2-1: Using ep0 maxpacket: 16 [ 810.895487][ T4264] usb 4-1: config 0 has an invalid interface number: 167 but max is 0 [ 810.904626][ T4264] usb 4-1: config 0 has no interface number 0 [ 810.921517][ T4264] usb 4-1: config 0 interface 167 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 8 [ 810.941230][ T4264] usb 4-1: config 0 interface 167 has no altsetting 0 [ 810.962342][T23103] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.8306'. [ 811.094270][T23103] syz.0.8306 (23103) used greatest stack depth: 18512 bytes left [ 811.120634][ T4264] usb 4-1: New USB device found, idVendor=07ca, idProduct=b808, bcdDevice=db.cd [ 811.130304][ T4264] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.166728][ T6479] usb 2-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=fc.b6 [ 811.194623][ T6479] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.208626][ T4264] usb 4-1: Product: syz [ 811.219441][ T4264] usb 4-1: Manufacturer: syz [ 811.230448][ T6479] usb 2-1: Product: syz [ 811.235049][ T6479] usb 2-1: Manufacturer: syz [ 811.248079][ T4264] usb 4-1: SerialNumber: syz [ 811.263327][ T4264] usb 4-1: config 0 descriptor?? [ 811.268817][ T6479] usb 2-1: SerialNumber: syz [ 811.294123][ T6479] usb 2-1: config 0 descriptor?? [ 811.301938][T23082] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 811.335368][ T6479] safe_serial 2-1:0.0: safe_serial converter detected [ 811.364179][ T6479] usb 2-1: safe_serial converter now attached to ttyUSB0 [ 811.583184][ T4275] usb 2-1: USB disconnect, device number 13 [ 811.601087][ T4264] dvb-usb: found a 'AVerMedia AVerTV DVB-T Volar' in cold state, will try to load a firmware [ 811.610541][ T4275] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0 [ 811.630783][ T4264] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 811.639926][ T4275] safe_serial 2-1:0.0: device disconnected [ 811.697181][ T4264] dib0700: firmware download failed at 7 with -71 [ 811.731775][ T4264] usb 4-1: USB disconnect, device number 18 [ 811.752101][T23140] loop4: detected capacity change from 0 to 2048 [ 811.837683][T23140] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 811.959900][T23149] netlink: 'syz.4.8329': attribute type 1 has an invalid length. [ 812.134987][T23152] loop2: detected capacity change from 0 to 4096 [ 812.188229][T23162] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (8) [ 812.309896][T23152] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 812.364222][T23152] ntfs3: loop2: Failed to load $Extend. [ 812.466736][ T4275] usb 5-1: new low-speed USB device number 34 using dummy_hcd [ 812.766786][T23188] netlink: 'syz.1.8349': attribute type 16 has an invalid length. [ 812.775964][T23188] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.8349'. [ 812.861257][T23190] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.8350'. [ 812.916105][ T4275] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 813.012503][ T4275] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 813.130089][ T4275] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 813.319344][T23186] loop3: detected capacity change from 0 to 32768 [ 813.331374][T23206] device bridge2 entered promiscuous mode [ 813.407929][ T4275] usb 5-1: string descriptor 0 read error: -22 [ 813.425863][ T4275] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 813.452218][T23186] ERROR: (device loop3): diAllocBit: iag inconsistent [ 813.452218][T23186] [ 813.467379][ T4275] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.480768][T23186] ialloc: diAlloc returned -5! [ 813.531340][T23216] loop1: detected capacity change from 0 to 512 [ 813.548260][ T4275] adutux 5-1:168.0: interrupt endpoints not found [ 813.811203][ T4275] usb 5-1: USB disconnect, device number 34 [ 813.812194][T23224] device vlan0 entered promiscuous mode [ 813.944534][T23230] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8370'. [ 813.955177][T23230] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8370'. [ 813.994692][T23230] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8370'. [ 814.025662][T23232] loop2: detected capacity change from 0 to 256 [ 814.450544][T23222] loop1: detected capacity change from 0 to 32768 [ 814.555014][T23222] JBD2: Ignoring recovery information on journal [ 814.693266][T23222] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 814.707346][T23252] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8380'. [ 814.747204][T23222] OCFS2: ERROR (device loop1): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 814.751059][T23222] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 814.861714][T23222] OCFS2: File system is now read-only. [ 814.894421][T23222] (syz.1.8366,23222,1):ocfs2_calc_xattr_init:642 ERROR: status = -117 [ 814.938073][T23222] (syz.1.8366,23222,1):ocfs2_mknod:334 ERROR: status = -117 [ 814.968818][T23222] (syz.1.8366,23222,1):ocfs2_mknod:502 ERROR: status = -117 [ 815.016099][T23264] syz.0.8384 (23264): drop_caches: 0 [ 815.040583][T23222] (syz.1.8366,23222,1):ocfs2_mkdir:659 ERROR: status = -117 [ 815.255817][T23232] FAT-fs (loop2): error, fat_get_cluster: detected the cluster chain loop (i_pos 194) [ 815.302944][T23232] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 194) [ 815.344413][T23274] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.8392'. [ 815.640432][ T4185] ocfs2: Unmounting device (7,1) on (node local) [ 815.643512][T23286] comedi comedi4: bad chanlist[0]=0x80100000 chan=0 range length=2 [ 815.804883][T23291] kAFS: No cell specified [ 815.980338][T23298] loop0: detected capacity change from 0 to 256 [ 816.170984][T23302] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.8406'. [ 816.502555][T23311] loop3: detected capacity change from 0 to 512 [ 816.638792][T23311] EXT4-fs (loop3): 1 truncate cleaned up [ 816.644906][T23311] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 816.736844][T23296] loop4: detected capacity change from 0 to 32768 [ 816.935843][T23296] XFS (loop4): Mounting V5 Filesystem [ 817.230813][T23296] XFS (loop4): Ending clean mount [ 817.271348][T23296] XFS (loop4): Quotacheck needed: Please wait. [ 817.373895][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 817.421129][T23296] XFS (loop4): Quotacheck: Done. [ 817.583816][ T4197] XFS (loop4): Unmounting Filesystem [ 817.751610][T23353] tmpfs: Bad value for 'mpol' [ 817.827902][T23298] FAT-fs (loop0): error, fat_get_cluster: detected the cluster chain loop (i_pos 194) [ 817.916908][T23359] loop1: detected capacity change from 0 to 16 [ 817.927618][T23298] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 194) [ 817.973609][T23359] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 818.653292][T23389] netlink: 'syz.1.8443': attribute type 15 has an invalid length. [ 819.085011][T23381] loop2: detected capacity change from 0 to 32768 [ 819.143499][T23408] loop1: detected capacity change from 0 to 64 [ 819.187982][T23413] loop4: detected capacity change from 0 to 256 [ 819.229899][T23417] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8455'. [ 819.241184][T23413] exfat: Deprecated parameter 'utf8' [ 819.250082][T23413] exfat: Deprecated parameter 'utf8' [ 819.263574][T23413] exfat: Deprecated parameter 'utf8' [ 819.312249][T23381] XFS (loop2): Mounting V5 Filesystem [ 819.350619][T23413] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 819.514048][T23427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8458'. [ 819.616677][T23381] XFS (loop2): Ending clean mount [ 819.625872][T23381] XFS (loop2): Quotacheck needed: Please wait. [ 819.913598][T23381] XFS (loop2): Quotacheck: Done. [ 819.949590][T23379] loop3: detected capacity change from 0 to 40427 [ 820.011701][T23442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8465'. [ 820.021783][T23379] F2FS-fs (loop3): invalid crc value [ 820.037154][ T4195] XFS (loop2): Unmounting Filesystem [ 820.043213][T23379] F2FS-fs (loop3): Found nat_bits in checkpoint [ 820.121266][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 820.154048][T23379] F2FS-fs (loop3): Start checkpoint disabled! [ 820.206102][T23379] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 820.413055][T23379] F2FS-fs (loop3): disabling checkpoint not compatible with read-only [ 821.115536][T10195] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 821.168608][T23484] netlink: 'syz.0.8485': attribute type 11 has an invalid length. [ 821.264246][T23486] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8486'. [ 821.289781][T23486] tc_dump_action: action bad kind [ 821.574948][T10195] usb 5-1: unable to get BOS descriptor or descriptor too short [ 821.683354][T10195] usb 5-1: config 66 has an invalid interface number: 168 but max is 0 [ 821.704963][T10195] usb 5-1: config 66 has an invalid descriptor of length 30, skipping remainder of the config [ 821.742129][T10195] usb 5-1: config 66 has no interface number 0 [ 821.751997][T10195] usb 5-1: config 66 interface 168 altsetting 131 has 0 endpoint descriptors, different from the interface descriptor's value: 20 [ 821.774860][T10195] usb 5-1: config 66 interface 168 has no altsetting 0 [ 821.848795][T23504] loop0: detected capacity change from 0 to 4096 [ 821.875480][T23504] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 821.949564][T10195] usb 5-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 821.990279][T10195] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.012894][T10195] usb 5-1: Product: syz [ 822.018286][T10195] usb 5-1: Manufacturer: syz [ 822.023990][T10195] usb 5-1: SerialNumber: syz [ 822.158342][T23512] lo speed is unknown, defaulting to 1000 [ 822.285514][T23516] loop2: detected capacity change from 0 to 8192 [ 822.384474][T10195] usb 5-1: USB disconnect, device number 35 [ 822.398410][T23516] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 822.490666][T23516] REISERFS (device loop2): using ordered data mode [ 822.537131][T23516] reiserfs: using flush barriers [ 822.603557][T23516] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 822.659102][T23516] REISERFS (device loop2): checking transaction log (loop2) [ 822.709520][T23516] REISERFS (device loop2): Using r5 hash to sort names [ 822.717297][T23516] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 822.730085][T23506] loop3: detected capacity change from 0 to 32768 [ 822.784614][T23516] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 822.882609][T23506] JBD2: Ignoring recovery information on journal [ 823.003768][T23536] sctp: [Deprecated]: syz.1.8510 (pid 23536) Use of struct sctp_assoc_value in delayed_ack socket option. [ 823.003768][T23536] Use struct sctp_sack_info instead [ 823.127598][T23506] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 823.312656][T23506] OCFS2: ERROR (device loop3): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 823.312694][T23506] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 823.448798][T23506] OCFS2: File system is now read-only. [ 823.459395][T23506] (syz.3.8496,23506,1):ocfs2_calc_xattr_init:642 ERROR: status = -117 [ 823.475812][T23554] loop0: detected capacity change from 0 to 128 [ 823.506481][T23506] (syz.3.8496,23506,1):ocfs2_mknod:334 ERROR: status = -117 [ 823.531710][T23506] (syz.3.8496,23506,1):ocfs2_mknod:502 ERROR: status = -117 [ 823.536145][T23557] loop4: detected capacity change from 0 to 512 [ 823.540262][T23506] (syz.3.8496,23506,1):ocfs2_mkdir:659 ERROR: status = -117 [ 823.583085][T23554] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 823.671914][ T4190] ocfs2: Unmounting device (7,3) on (node local) [ 823.756086][ T4275] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 823.912857][T23557] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.8519: bad orphan inode 13 [ 823.918329][T23566] loop1: detected capacity change from 0 to 8 [ 823.956924][T23557] ext4_test_bit(bit=12, block=4) = 1 [ 823.985211][T23557] is_bad_inode(inode)=0 [ 823.990024][T23557] NEXT_ORPHAN(inode)=0 [ 824.032946][T23557] max_ino=32 [ 824.043788][T23557] i_nlink=1 [ 824.054765][T23557] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,stripe=0x0000000000000007,,errors=continue. Quota mode: none. [ 824.114647][T23566] unable to read fragment index table [ 824.162768][T23557] EXT4-fs warning (device loop4): dx_probe:845: inode #2: comm syz.4.8519: Hash code is SIPHASH, but hash not in dirent [ 824.194745][ T4275] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 824.223627][ T4275] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 824.226449][T23557] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.8519: Corrupt directory, running e2fsck is recommended [ 824.267918][ T4275] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 824.284975][T23557] EXT4-fs warning (device loop4): dx_probe:845: inode #2: comm syz.4.8519: Hash code is SIPHASH, but hash not in dirent [ 824.299417][ T4275] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.356339][T23557] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.8519: Corrupt directory, running e2fsck is recommended [ 824.377657][ T4275] hub 3-1:4.0: USB hub found [ 824.392015][T23582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 824.423673][T23557] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #2: block 13: comm syz.4.8519: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=0, rec_len=6, size=1024 fake=0 [ 824.578374][T23590] netlink: 'syz.0.8535': attribute type 8 has an invalid length. [ 824.604706][ T4275] hub 3-1:4.0: 2 ports detected [ 824.610534][ T4275] usb 3-1: selecting invalid altsetting 1 [ 824.632230][ T4275] hub 3-1:4.0: Using single TT (err -22) [ 824.832813][ T4275] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 824.846718][ T4275] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 824.937755][ T4275] usb 3-1: USB disconnect, device number 37 [ 825.013080][T23606] device netdevsim0 entered promiscuous mode [ 825.038196][T23606] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 825.085772][T23604] netlink: 'syz.1.8541': attribute type 9 has an invalid length. [ 825.136662][T23604] netlink: 'syz.1.8541': attribute type 7 has an invalid length. [ 825.189812][T23604] netlink: 'syz.1.8541': attribute type 8 has an invalid length. [ 825.244100][T23604] netlink: 'syz.1.8541': attribute type 13 has an invalid length. [ 825.297764][T23618] netlink: zone id is out of range [ 825.326401][T23618] netlink: zone id is out of range [ 825.472660][T23624] kAFS: unable to lookup cell '.,' [ 825.888394][T23636] lo speed is unknown, defaulting to 1000 [ 825.901079][T23650] binder: 23649:23650 ioctl 40046210 0 returned -14 [ 826.539501][T23672] loop3: detected capacity change from 0 to 256 [ 826.565914][T23675] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8576'. [ 826.723278][T23672] FAT-fs (loop3): Directory bread(block 64) failed [ 826.776705][T23672] FAT-fs (loop3): Directory bread(block 65) failed [ 826.819453][T23672] FAT-fs (loop3): Directory bread(block 66) failed [ 826.828062][T23672] FAT-fs (loop3): Directory bread(block 67) failed [ 826.842281][T23672] FAT-fs (loop3): Directory bread(block 68) failed [ 826.849510][T23672] FAT-fs (loop3): Directory bread(block 69) failed [ 826.862844][T23672] FAT-fs (loop3): Directory bread(block 70) failed [ 826.871611][T23672] FAT-fs (loop3): Directory bread(block 71) failed [ 826.906703][T23672] FAT-fs (loop3): Directory bread(block 72) failed [ 826.917541][T23672] FAT-fs (loop3): Directory bread(block 73) failed [ 827.164668][T23662] loop0: detected capacity change from 0 to 32768 [ 827.428454][T23662] XFS (loop0): Mounting V5 Filesystem [ 827.782552][T23677] loop2: detected capacity change from 0 to 32768 [ 827.816045][T23662] XFS (loop0): Ending clean mount [ 827.834649][T23662] XFS (loop0): Quotacheck needed: Please wait. [ 827.845899][T23701] loop4: detected capacity change from 0 to 1024 [ 827.995285][T23677] JBD2: Ignoring recovery information on journal [ 827.999631][T23662] XFS (loop0): Quotacheck: Done. [ 828.108385][T23677] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 828.271930][T23677] OCFS2: ERROR (device loop2): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 828.271979][T23677] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 828.274407][T23717] device wlan0 entered promiscuous mode [ 828.328403][ T4193] XFS (loop0): Unmounting Filesystem [ 828.358463][T23677] OCFS2: File system is now read-only. [ 828.372294][T23717] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 828.385949][T23677] (syz.2.8577,23677,0):ocfs2_calc_xattr_init:642 ERROR: status = -117 [ 828.417313][T23677] (syz.2.8577,23677,1):ocfs2_mknod:334 ERROR: status = -117 [ 828.508818][T23677] (syz.2.8577,23677,1):ocfs2_mknod:502 ERROR: status = -117 [ 828.539265][T23677] (syz.2.8577,23677,1):ocfs2_mkdir:659 ERROR: status = -117 [ 828.762597][ T4195] ocfs2: Unmounting device (7,2) on (node local) [ 829.444126][T23744] loop2: detected capacity change from 0 to 4096 [ 829.535628][T23744] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 829.839869][T23753] netlink: 'syz.4.8608': attribute type 9 has an invalid length. [ 829.961255][T23753] netlink: 'syz.4.8608': attribute type 7 has an invalid length. [ 829.999061][T23753] netlink: 'syz.4.8608': attribute type 8 has an invalid length. [ 830.050625][T23753] netlink: 'syz.4.8608': attribute type 13 has an invalid length. [ 830.393030][T23777] loop0: detected capacity change from 0 to 1764 [ 830.413096][T23774] loop3: detected capacity change from 0 to 4096 [ 830.486522][T23774] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 830.539959][T23774] ntfs3: loop3: Failed to load $Extend. [ 830.575014][T23780] loop1: detected capacity change from 0 to 4096 [ 830.688596][T23780] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 830.901464][T23799] netlink: 'syz.2.8631': attribute type 9 has an invalid length. [ 830.941490][T23799] netlink: 'syz.2.8631': attribute type 7 has an invalid length. [ 830.991291][T23799] netlink: 'syz.2.8631': attribute type 8 has an invalid length. [ 831.028260][T23799] netlink: 'syz.2.8631': attribute type 13 has an invalid length. [ 831.089911][T23805] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 831.338853][T23817] loop4: detected capacity change from 0 to 512 [ 831.349176][T23820] netlink: 'syz.1.8640': attribute type 2 has an invalid length. [ 831.443916][T23817] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 831.628356][T23817] EXT4-fs (loop4): orphan cleanup on readonly fs [ 831.649711][T23817] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 831.756654][T23817] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.8639: attempt to clear invalid blocks 2 len 1 [ 831.853699][T23817] EXT4-fs (loop4): Remounting filesystem read-only [ 831.867653][T23836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8647'. [ 831.907210][T23817] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 832.072755][T23817] EXT4-fs (loop4): Remounting filesystem read-only [ 832.121676][T23846] loop3: detected capacity change from 0 to 512 [ 832.141536][ T4416] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 832.148229][T23817] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.8639: invalid indirect mapped block 1819239214 (level 0) [ 832.209393][T23817] EXT4-fs (loop4): Remounting filesystem read-only [ 832.214955][T23849] lo speed is unknown, defaulting to 1000 [ 832.233767][T23817] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.8639: invalid indirect mapped block 1819239214 (level 1) [ 832.329156][T23846] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.8652: bad orphan inode 13 [ 832.351407][T23817] EXT4-fs (loop4): Remounting filesystem read-only [ 832.391379][T23846] ext4_test_bit(bit=12, block=4) = 1 [ 832.412419][T23817] EXT4-fs (loop4): 1 truncate cleaned up [ 832.447697][ T4416] usb 2-1: Using ep0 maxpacket: 16 [ 832.458191][T23846] is_bad_inode(inode)=0 [ 832.462955][T23846] NEXT_ORPHAN(inode)=0 [ 832.467495][T23846] max_ino=32 [ 832.496700][T23817] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,init_itable=0x0000000000000004,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=... Quota mode: writeback. [ 832.540271][T23846] i_nlink=1 [ 832.554490][T23846] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrjquota=,stripe=0x0000000000000007,,errors=continue. Quota mode: none. [ 832.677029][T23846] EXT4-fs warning (device loop3): dx_probe:845: inode #2: comm syz.3.8652: Hash code is SIPHASH, but hash not in dirent [ 832.696003][T23846] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.8652: Corrupt directory, running e2fsck is recommended [ 832.730862][T23846] EXT4-fs warning (device loop3): dx_probe:845: inode #2: comm syz.3.8652: Hash code is SIPHASH, but hash not in dirent [ 832.779362][ T4416] usb 2-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 832.789791][T23846] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.8652: Corrupt directory, running e2fsck is recommended [ 832.810940][ T4416] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.853707][ T4416] usb 2-1: Product: syz [ 832.858017][ T4416] usb 2-1: Manufacturer: syz [ 832.863070][ T4416] usb 2-1: SerialNumber: syz [ 832.868785][T23846] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #2: block 13: comm syz.3.8652: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=0, rec_len=6, size=1024 fake=0 [ 832.918669][ T4416] usb 2-1: config 0 descriptor?? [ 833.145619][T23851] loop0: detected capacity change from 0 to 32768 [ 833.217555][ T4416] usb 2-1: ignoring: not an USB2CAN converter [ 833.256428][T23851] JBD2: Ignoring recovery information on journal [ 833.488017][ T4230] usb 2-1: USB disconnect, device number 14 [ 833.513038][T23851] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 833.572591][T23872] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8659'. [ 833.687058][T23851] OCFS2: ERROR (device loop0): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 833.687093][T23851] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 833.793833][T23851] OCFS2: File system is now read-only. [ 833.829396][T23851] (syz.0.8654,23851,1):ocfs2_calc_xattr_init:642 ERROR: status = -117 [ 833.865578][T23884] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8666'. [ 833.876182][T23851] (syz.0.8654,23851,1):ocfs2_mknod:334 ERROR: status = -117 [ 833.901974][T23851] (syz.0.8654,23851,1):ocfs2_mknod:502 ERROR: status = -117 [ 833.921922][T23851] (syz.0.8654,23851,1):ocfs2_mkdir:659 ERROR: status = -117 [ 834.011696][ T4193] ocfs2: Unmounting device (7,0) on (node local) [ 834.051632][ T4230] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 834.186323][T23890] device wlan0 entered promiscuous mode [ 834.225141][T23890] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 834.319059][T23899] loop1: detected capacity change from 0 to 1024 [ 834.503117][ T4230] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 834.534248][ T4230] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 834.606991][ T4230] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 834.627339][ T4230] usb 4-1: config 1 has no interface number 0 [ 834.671204][ T4230] usb 4-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 834.710611][T23910] loop1: detected capacity change from 0 to 1024 [ 834.724630][ T4230] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 834.867051][T23910] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 834.903671][T23910] EXT4-fs (loop1): invalid journal inode [ 834.929348][T23910] EXT4-fs (loop1): can't get journal size [ 834.956600][T23925] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8682'. [ 834.970674][ T4230] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 834.974327][T23910] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,sysvgroups,norecovery,noauto_da_alloc,nombcache,,errors=continue. Quota mode: writeback. [ 834.983159][ T4230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.158456][T23931] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 835.184326][ T4230] usb 4-1: Product: syz [ 835.188894][ T4230] usb 4-1: Manufacturer: syz [ 835.194155][ T4230] usb 4-1: SerialNumber: syz [ 835.255432][T23935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8686'. [ 835.354649][T23935] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8686'. [ 835.662153][T23954] loop0: detected capacity change from 0 to 8 [ 835.810472][T23954] SQUASHFS error: Failed to read block 0x8f: -5 [ 835.869838][T23954] SQUASHFS error: Unable to read data cache entry [8f] [ 835.911457][T23954] SQUASHFS error: Unable to read page, block 8f, size 1c00001 [ 835.963923][T23954] SQUASHFS error: Unable to read data cache entry [8f] [ 835.967785][ T4230] usb 4-1: USB disconnect, device number 19 [ 835.987364][T23954] SQUASHFS error: Unable to read page, block 8f, size 1c00001 [ 836.035554][T23954] SQUASHFS error: Unable to read data cache entry [8f] [ 836.049200][T23967] ieee802154 phy0 wpan0: encryption failed: -22 [ 836.114612][T23954] SQUASHFS error: Unable to read page, block 8f, size 1c00001 [ 836.165588][T23954] SQUASHFS error: Failed to read block 0x8f: -5 [ 836.221136][T23954] SQUASHFS error: Failed to read block 0x8f: -5 [ 836.230894][ T26] audit: type=1800 audit(1774338695.848:46): pid=23954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.8695" name="file3" dev="loop0" ino=6 res=0 errno=0 [ 836.456480][ T4275] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 836.606168][ T6480] usb 3-1: new low-speed USB device number 38 using dummy_hcd [ 836.772274][T23993] device wlan0 entered promiscuous mode [ 836.803182][T23993] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 836.884751][T23997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8716'. [ 836.916395][ T4275] usb 2-1: config 0 has an invalid interface number: 83 but max is 0 [ 836.935669][ T4275] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 836.995865][ T4275] usb 2-1: config 0 has no interface number 0 [ 837.013007][ T6480] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 190, changing to 4 [ 837.013171][ T4275] usb 2-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 837.055936][ T6480] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 512, setting to 0 [ 837.104160][ T4275] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.122421][ T6480] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 32, setting to 0 [ 837.152377][ T4275] usb 2-1: config 0 descriptor?? [ 837.207103][ T4275] ttusbir 2-1:0.83: cannot find expected altsetting [ 837.414647][ T6480] usb 3-1: string descriptor 0 read error: -22 [ 837.436186][ T6480] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice= 0.40 [ 837.492014][ T6480] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.496337][ T4275] usb 2-1: USB disconnect, device number 15 [ 837.637422][T24019] lo speed is unknown, defaulting to 1000 [ 837.902276][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 837.909533][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 838.007569][ T4230] usb 3-1: USB disconnect, device number 38 [ 838.205715][T24023] loop4: detected capacity change from 0 to 512 [ 838.326677][T24023] EXT4-fs (loop4): Test dummy encryption mode enabled [ 838.370402][T24023] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 838.372540][T24028] netlink: 7 bytes leftover after parsing attributes in process `syz.1.8730'. [ 838.497958][T24023] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.8727: bad orphan inode 131083 [ 838.539385][T24023] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,journal_dev=0x0000000000000002,,errors=continue. Quota mode: none. [ 838.570758][T24032] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 838.623625][T24028] netlink: 7 bytes leftover after parsing attributes in process `syz.1.8730'. [ 838.889113][T24038] loop1: detected capacity change from 0 to 8 [ 838.955962][T24040] loop3: detected capacity change from 0 to 1024 [ 838.958705][T24038] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 838.984767][T24023] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 839.173657][T24036] lo speed is unknown, defaulting to 1000 [ 839.386111][ T3064] hfsplus: b-tree write err: -5, ino 25 [ 839.408196][ T3064] hfsplus: b-tree write err: -5, ino 4 [ 839.414098][ T3064] hfsplus: b-tree write err: -5, ino 2 [ 839.725985][T24060] loop4: detected capacity change from 0 to 512 [ 839.879259][T24060] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 839.970793][T24060] ext4 filesystem being mounted at /1616/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 840.117959][T24060] EXT4-fs error (device loop4): ext4_get_first_dir_block:3597: inode #12: comm syz.4.8741: Attempting to read directory block (0) that is past i_size (3) [ 840.683437][T24092] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8756'. [ 840.737768][T24093] set match dimension is over the limit! [ 840.868128][T24084] loop2: detected capacity change from 0 to 4096 [ 840.892220][T24101] netlink: 'syz.4.8761': attribute type 10 has an invalid length. [ 840.938699][T24101] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8761'. [ 840.983535][T24101] device team0 entered promiscuous mode [ 841.025301][T24101] device team_slave_0 entered promiscuous mode [ 841.042897][T24101] device team_slave_1 entered promiscuous mode [ 841.116564][T24101] 8021q: adding VLAN 0 to HW filter on device team0 [ 841.126387][T24084] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 841.197951][T24101] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 841.238982][T24084] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 841.268289][T24101] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 841.321054][T24101] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 841.394546][T24084] ntfs: volume version 3.1. [ 841.504422][T24084] ntfs: (device loop2): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4). Marking corrupt inode and base inode 0x1a as bad. Run chkdsk. [ 841.624807][T24124] rdma_rxe: rxe creation allowed on top of a real device only [ 841.679089][T24084] ntfs: (device loop2): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute. [ 841.767695][T24084] ntfs: (device loop2): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 842.006142][T24084] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Found already allocated name in phase 2. Please run chkdsk and if that doesn't find any errors please report you saw this message to linux-ntfs-dev@lists.sourceforge.net. [ 842.247809][T24084] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 842.350283][T24084] ntfs: (device loop2): ntfs_lookup(): ntfs_lookup_ino_by_name() failed with error code 5. [ 843.351910][T24138] loop0: detected capacity change from 0 to 32768 [ 843.515851][T24189] loop1: detected capacity change from 0 to 512 [ 843.599907][T24190] lo speed is unknown, defaulting to 1000 [ 843.614824][T24189] EXT4-fs (loop1): Test dummy encryption mode enabled [ 843.630442][T24189] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 843.643234][T24192] loop3: detected capacity change from 0 to 512 [ 843.720196][T24189] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.8803: bad orphan inode 131083 [ 843.750706][T24192] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 843.836372][T24189] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,journal_dev=0x0000000000000002,,errors=continue. Quota mode: none. [ 843.920060][T24192] EXT4-fs (loop3): orphan cleanup on readonly fs [ 844.057867][T24192] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 844.129260][T24192] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.8802: attempt to clear invalid blocks 2 len 1 [ 844.296127][T24192] EXT4-fs (loop3): Remounting filesystem read-only [ 844.367819][T24192] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 844.530506][T24220] nfs: Unknown parameter '/dev/ocfs2_control' [ 844.556007][T24192] EXT4-fs (loop3): Remounting filesystem read-only [ 844.611906][T24192] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.8802: invalid indirect mapped block 1819239214 (level 0) [ 844.746077][T24192] EXT4-fs (loop3): Remounting filesystem read-only [ 844.807388][T24192] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.8802: invalid indirect mapped block 1819239214 (level 1) [ 844.829871][T24232] netlink: 'syz.4.8821': attribute type 9 has an invalid length. [ 844.857367][T24233] netlink: 'syz.0.8820': attribute type 1 has an invalid length. [ 844.891586][T24232] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.8821'. [ 844.926139][T24192] EXT4-fs (loop3): Remounting filesystem read-only [ 844.944854][T24233] netlink: 212908 bytes leftover after parsing attributes in process `syz.0.8820'. [ 844.954074][T24192] EXT4-fs (loop3): 1 truncate cleaned up [ 844.992458][T24192] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,init_itable=0x0000000000000004,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=... Quota mode: writeback. [ 845.011729][ C0] vkms_vblank_simulate: vblank timer overrun [ 845.345139][T24242] lo speed is unknown, defaulting to 1000 [ 845.663958][T24249] loop0: detected capacity change from 0 to 8192 [ 846.015369][T24261] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.8834'. [ 846.385124][T24269] loop2: detected capacity change from 0 to 8 [ 846.450957][T24269] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 846.487339][ T6528] udevd[6528]: incorrect cramfs checksum on /dev/loop2 [ 846.585275][T24269] cramfs: Error -3 while decompressing! [ 846.619653][ T6528] udevd[6528]: incorrect cramfs checksum on /dev/loop2 [ 846.674197][T24269] cramfs: ffffffff96407088(18)->ffff888051ee3000(4096) [ 846.739665][T24269] cramfs: Error -3 while decompressing! [ 846.818866][T24269] cramfs: ffffffff96407088(18)->ffff888051ee3000(4096) [ 846.862447][ T26] audit: type=1800 audit(1774338705.791:47): pid=24269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8836" name="file1" dev="loop2" ino=324 res=0 errno=0 [ 847.668621][T24240] loop4: detected capacity change from 0 to 32768 [ 847.906384][ T4420] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 848.002540][T24321] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8861'. [ 848.066621][T24240] XFS (loop4): Mounting V5 Filesystem [ 848.208847][ T4420] usb 4-1: Using ep0 maxpacket: 8 [ 848.215384][T24333] netlink: 'syz.2.8864': attribute type 8 has an invalid length. [ 848.368014][ T4420] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 848.378042][ T4420] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 86, changing to 10 [ 848.403969][ T4420] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 50212, setting to 1024 [ 848.603558][T24240] XFS (loop4): Ending clean mount [ 848.631289][T24348] loop2: detected capacity change from 0 to 22 [ 848.638667][ T4420] usb 4-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 848.665098][ T4420] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.694566][ T4420] usb 4-1: Product: syz [ 848.718730][ T4420] usb 4-1: Manufacturer: syz [ 848.723606][ T4420] usb 4-1: SerialNumber: syz [ 848.751638][T24348] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 848.774883][ T4420] usb 4-1: config 0 descriptor?? [ 848.784923][ T4197] XFS (loop4): Unmounting Filesystem [ 848.801979][T24308] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 848.859935][ T4420] powermate: probe of 4-1:0.0 failed with error -5 [ 848.868357][T24348] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 848.928488][T24354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8875'. [ 848.994894][T24354] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8875'. [ 849.200900][ T4420] usb 4-1: USB disconnect, device number 20 [ 849.473239][T24366] ieee802154 phy0 wpan0: encryption failed: -22 [ 849.670182][ T4275] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 849.708579][T24372] loop2: detected capacity change from 0 to 128 [ 849.861198][T24374] loop3: detected capacity change from 0 to 512 [ 849.944823][T24372] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 849.959138][T24372] ext4 filesystem being mounted at /1790/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 850.194221][ T4275] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 850.244340][ T4275] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.286628][ T4275] usb 2-1: config 0 descriptor?? [ 850.352128][T24374] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback. [ 850.439907][T24374] ext4 filesystem being mounted at /1738/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 850.497608][T24374] [ 850.499994][T24374] ====================================================== [ 850.507671][T24374] WARNING: possible circular locking dependency detected [ 850.515656][T24374] syzkaller #0 Not tainted [ 850.521240][T24374] ------------------------------------------------------ [ 850.528904][T24374] syz.3.8885/24374 is trying to acquire lock: [ 850.535226][T24374] ffff88805fa553e8 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x5a/0x410 [ 850.545285][T24374] [ 850.545285][T24374] but task is already holding lock: [ 850.553083][T24374] ffff888062fc2060 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x8bf/0x1b30 [ 850.563323][T24374] [ 850.563323][T24374] which lock already depends on the new lock. [ 850.563323][T24374] [ 850.574572][T24374] [ 850.574572][T24374] the existing dependency chain (in reverse order) is: [ 850.584144][T24374] [ 850.584144][T24374] -> #2 (&ei->i_data_sem/2){++++}-{3:3}: [ 850.592360][T24374] down_read+0x44/0x2e0 [ 850.597164][T24374] ext4_map_blocks+0x33c/0x1b30 [ 850.602935][T24374] ext4_getblk+0x176/0x670 [ 850.608148][T24374] ext4_bread+0x26/0x180 [ 850.613320][T24374] ext4_quota_read+0x1b3/0x3a0 [ 850.618648][T24374] find_tree_dqentry+0x188/0xb30 [ 850.624415][T24374] find_tree_dqentry+0x3eb/0xb30 [ 850.630134][T24374] find_tree_dqentry+0x3eb/0xb30 [ 850.636599][T24374] find_tree_dqentry+0x3eb/0xb30 [ 850.642093][T24374] qtree_read_dquot+0x13c/0x680 [ 850.647847][T24374] v2_read_dquot+0xc0/0x110 [ 850.653096][T24374] dquot_acquire+0x152/0x520 [ 850.658703][T24374] ext4_acquire_dquot+0x2d9/0x4a0 [ 850.664524][T24374] dqget+0x778/0xeb0 [ 850.669064][T24374] __dquot_initialize+0x333/0xcd0 [ 850.674817][T24374] ext4_process_orphan+0x54/0x300 [ 850.680681][T24374] ext4_orphan_cleanup+0xad2/0x1320 [ 850.686602][T24374] ext4_fill_super+0x8e25/0x95a0 [ 850.692367][T24374] mount_bdev+0x287/0x3c0 [ 850.697741][T24374] legacy_get_tree+0xe6/0x180 [ 850.703225][T24374] vfs_get_tree+0x88/0x270 [ 850.708849][T24374] do_new_mount+0x24a/0xa40 [ 850.714009][T24374] __se_sys_mount+0x2e3/0x3d0 [ 850.719768][T24374] do_syscall_64+0x4c/0xa0 [ 850.725184][T24374] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 850.732462][T24374] [ 850.732462][T24374] -> #1 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 850.740791][T24374] down_read+0x44/0x2e0 [ 850.745964][T24374] v2_read_dquot+0x4a/0x110 [ 850.751210][T24374] dquot_acquire+0x152/0x520 [ 850.756805][T24374] ext4_acquire_dquot+0x2d9/0x4a0 [ 850.762753][T24374] dqget+0x778/0xeb0 [ 850.767493][T24374] __dquot_initialize+0x333/0xcd0 [ 850.773364][T24374] ext4_process_orphan+0x54/0x300 [ 850.779307][T24374] ext4_orphan_cleanup+0xad2/0x1320 [ 850.785914][T24374] ext4_fill_super+0x8e25/0x95a0 [ 850.791499][T24374] mount_bdev+0x287/0x3c0 [ 850.796385][T24374] legacy_get_tree+0xe6/0x180 [ 850.801884][T24374] vfs_get_tree+0x88/0x270 [ 850.807394][T24374] do_new_mount+0x24a/0xa40 [ 850.812724][T24374] __se_sys_mount+0x2e3/0x3d0 [ 850.817959][T24374] do_syscall_64+0x4c/0xa0 [ 850.823245][T24374] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 850.830792][T24374] [ 850.830792][T24374] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 850.839171][T24374] __lock_acquire+0x2c42/0x7d10 [ 850.844755][T24374] lock_acquire+0x19e/0x400 [ 850.849988][T24374] __mutex_lock_common+0x1e3/0x2400 [ 850.856449][T24374] mutex_lock_nested+0x17/0x20 [ 850.861849][T24374] dquot_commit+0x5a/0x410 [ 850.867276][T24374] ext4_write_dquot+0x1f0/0x360 [ 850.873652][T24374] mark_all_dquot_dirty+0xf9/0x400 [ 850.879760][T24374] __dquot_alloc_space+0x5d0/0xe20 [ 850.885595][T24374] ext4_mb_new_blocks+0xf81/0x4980 [ 850.891854][T24374] ext4_ext_map_blocks+0x191c/0x6580 [ 850.897908][T24374] ext4_map_blocks+0x98e/0x1b30 [ 850.903697][T24374] _ext4_get_block+0x1e7/0x540 [ 850.909638][T24374] ext4_block_write_begin+0x61b/0x1220 [ 850.915938][T24374] ext4_write_begin+0x6c8/0x15d0 [ 850.921870][T24374] ext4_da_write_begin+0x43b/0xb40 [ 850.928250][T24374] __page_symlink+0x102/0x200 [ 850.933840][T24374] ext4_symlink+0x8bd/0xca0 [ 850.939098][T24374] vfs_symlink+0x247/0x3d0 [ 850.944846][T24374] do_symlinkat+0x1ab/0x6b0 [ 850.950178][T24374] __x64_sys_symlink+0x7a/0x90 [ 850.955841][T24374] do_syscall_64+0x4c/0xa0 [ 850.961407][T24374] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 850.968211][T24374] [ 850.968211][T24374] other info that might help us debug this: [ 850.968211][T24374] [ 850.979086][T24374] Chain exists of: [ 850.979086][T24374] &dquot->dq_lock --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2 [ 850.979086][T24374] [ 850.993497][T24374] Possible unsafe locking scenario: [ 850.993497][T24374] [ 851.001859][T24374] CPU0 CPU1 [ 851.007482][T24374] ---- ---- [ 851.013309][T24374] lock(&ei->i_data_sem/2); [ 851.018831][T24374] lock(&s->s_dquot.dqio_sem); [ 851.026582][T24374] lock(&ei->i_data_sem/2); [ 851.034503][T24374] lock(&dquot->dq_lock); [ 851.039387][T24374] [ 851.039387][T24374] *** DEADLOCK *** [ 851.039387][T24374] [ 851.048731][T24374] 4 locks held by syz.3.8885/24374: [ 851.054759][T24374] #0: ffff88805d3da460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 851.064387][T24374] #1: ffff888062f067a0 (&type->i_mutex_dir_key#4/1){+.+.}-{3:3}, at: filename_create+0x208/0x470 [ 851.075252][T24374] #2: ffff888062fc2060 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x8bf/0x1b30 [ 851.086117][T24374] #3: ffffffff8c441538 (dquot_srcu){....}-{0:0}, at: rcu_lock_acquire+0x5/0x30 [ 851.095426][T24374] [ 851.095426][T24374] stack backtrace: [ 851.102114][T24374] CPU: 0 PID: 24374 Comm: syz.3.8885 Not tainted syzkaller #0 [ 851.109784][T24374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 851.120598][T24374] Call Trace: [ 851.124250][T24374] [ 851.127295][T24374] dump_stack_lvl+0x188/0x250 [ 851.132525][T24374] ? load_image+0x400/0x400 [ 851.137137][T24374] ? show_regs_print_info+0x20/0x20 [ 851.142554][T24374] ? print_circular_bug+0x12b/0x1a0 [ 851.147781][T24374] check_noncircular+0x296/0x330 [ 851.152833][T24374] ? lockdep_lock+0x1f0/0x1f0 [ 851.157711][T24374] ? add_chain_block+0x940/0x940 [ 851.162840][T24374] ? lockdep_lock+0xf1/0x1f0 [ 851.167914][T24374] ? __bfs+0x2a3/0x5c0 [ 851.172719][T24374] ? mark_lock+0x94/0x320 [ 851.177499][T24374] __lock_acquire+0x2c42/0x7d10 [ 851.182945][T24374] ? add_chain_block+0x940/0x940 [ 851.188544][T24374] ? lockdep_lock+0xf1/0x1f0 [ 851.193429][T24374] ? verify_lock_unused+0x140/0x140 [ 851.198837][T24374] ? lockdep_unlock+0x143/0x2e0 [ 851.203823][T24374] ? mark_lock+0x94/0x320 [ 851.208736][T24374] ? __lock_acquire+0x13bc/0x7d10 [ 851.214164][T24374] lock_acquire+0x19e/0x400 [ 851.218965][T24374] ? dquot_commit+0x5a/0x410 [ 851.223907][T24374] ? __might_sleep+0xf0/0xf0 [ 851.228636][T24374] ? read_lock_is_recursive+0x10/0x10 [ 851.234746][T24374] ? dquot_commit+0x5a/0x410 [ 851.239910][T24374] __mutex_lock_common+0x1e3/0x2400 [ 851.245494][T24374] ? dquot_commit+0x5a/0x410 [ 851.250736][T24374] ? __might_sleep+0xf0/0xf0 [ 851.256318][T24374] ? mutex_lock_io_nested+0x60/0x60 [ 851.262089][T24374] mutex_lock_nested+0x17/0x20 [ 851.266993][T24374] dquot_commit+0x5a/0x410 [ 851.271637][T24374] ? __ext4_journal_start_sb+0x1bd/0x360 [ 851.277593][T24374] ext4_write_dquot+0x1f0/0x360 [ 851.282581][T24374] mark_all_dquot_dirty+0xf9/0x400 [ 851.287927][T24374] __dquot_alloc_space+0x5d0/0xe20 [ 851.293596][T24374] ext4_mb_new_blocks+0xf81/0x4980 [ 851.299200][T24374] ? memset+0x1e/0x40 [ 851.303657][T24374] ? ext4_mb_pa_callback+0xd0/0xd0 [ 851.309079][T24374] ? ext4_ext_check_overlap+0x15f/0x560 [ 851.314660][T24374] ? ext4_inode_to_goal_block+0x313/0x450 [ 851.320659][T24374] ext4_ext_map_blocks+0x191c/0x6580 [ 851.326294][T24374] ? ext4_ext_release+0x10/0x10 [ 851.331536][T24374] ? rwsem_write_trylock+0x135/0x1c0 [ 851.338217][T24374] ext4_map_blocks+0x98e/0x1b30 [ 851.343693][T24374] ? ext4_issue_zeroout+0x250/0x250 [ 851.350545][T24374] _ext4_get_block+0x1e7/0x540 [ 851.356066][T24374] ? ext4_get_block+0x40/0x40 [ 851.361052][T24374] ext4_block_write_begin+0x61b/0x1220 [ 851.367338][T24374] ? ext4_es_is_delayed+0x40/0x40 [ 851.372689][T24374] ? ext4_print_free_blocks+0x390/0x390 [ 851.378545][T24374] ? __ext4_journal_start_sb+0x1bd/0x360 [ 851.384582][T24374] ext4_write_begin+0x6c8/0x15d0 [ 851.390411][T24374] ? ext4_readahead+0x110/0x110 [ 851.395567][T24374] ? __ext4_mark_inode_dirty+0x4d5/0x700 [ 851.401523][T24374] ext4_da_write_begin+0x43b/0xb40 [ 851.407067][T24374] ? ext4_set_page_dirty+0x320/0x320 [ 851.412819][T24374] ? ext4_orphan_add+0x14f/0x1210 [ 851.418326][T24374] ? pagecache_write_begin+0x33/0xa0 [ 851.424161][T24374] __page_symlink+0x102/0x200 [ 851.429439][T24374] ? page_readlink+0x1a0/0x1a0 [ 851.434649][T24374] ? __ext4_journal_stop+0x30/0x190 [ 851.440159][T24374] ? ext4_symlink+0x795/0xca0 [ 851.445143][T24374] ext4_symlink+0x8bd/0xca0 [ 851.450037][T24374] ? lookup_one_qstr_excl+0x11c/0x240 [ 851.455599][T24374] ? ext4_unlink+0x500/0x500 [ 851.460657][T24374] ? inode_permission+0xef/0x480 [ 851.465917][T24374] ? bpf_lsm_inode_symlink+0x5/0x10 [ 851.471417][T24374] ? security_inode_symlink+0xb2/0x100 [ 851.477315][T24374] vfs_symlink+0x247/0x3d0 [ 851.482135][T24374] do_symlinkat+0x1ab/0x6b0 [ 851.486933][T24374] ? vfs_symlink+0x3d0/0x3d0 [ 851.491815][T24374] ? getname_flags+0x1fe/0x500 [ 851.497143][T24374] __x64_sys_symlink+0x7a/0x90 [ 851.502021][T24374] do_syscall_64+0x4c/0xa0 [ 851.506467][T24374] ? clear_bhb_loop+0x30/0x80 [ 851.511451][T24374] ? clear_bhb_loop+0x30/0x80 [ 851.516772][T24374] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 851.523146][T24374] RIP: 0033:0x7fb04eaf3799 [ 851.527852][T24374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 851.549275][T24374] RSP: 002b:00007fb04cd4d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 851.558260][T24374] RAX: ffffffffffffffda RBX: 00007fb04ed6cfa0 RCX: 00007fb04eaf3799 [ 851.566702][T24374] RDX: 0000000000000000 RSI: 0000200000000800 RDI: 0000200000000540 [ 851.575439][T24374] RBP: 00007fb04eb89c99 R08: 0000000000000000 R09: 0000000000000000 [ 851.583931][T24374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 851.592645][T24374] R13: 00007fb04ed6d038 R14: 00007fb04ed6cfa0 R15: 00007ffc5d2bef28 SYZFAIL: failed to send rpc fd=3 want=64 sent=0 n=-1 (errno 32: Broken pipe) [ 851.601348][T24374] [ 851.604471][ C0] vkms_vblank_simulate: vblank timer overrun [ 851.611572][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 851.733523][ T4275] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 851.743186][ T4275] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 851.829582][ T4275] [drm:udl_init] *ERROR* Selecting channel failed [ 851.852776][ T4275] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 851.860742][ T4275] [drm] Initialized udl on minor 2 [ 851.925967][ T4275] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 851.935304][ T4275] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 852.000780][ T4275] usb 2-1: USB disconnect, device number 16 [ 852.008912][ T4230] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 852.044164][ T4230] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 852.053022][ T4230] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 853.376086][ T144] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.436850][ T144] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.480242][ T144] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.532649][ T144] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.636406][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 853.651344][ T144] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.715378][ T144] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.757881][ T144] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.822395][ T144] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.951120][ T144] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.004237][ T144] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.059316][ T144] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.101458][ T144] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.198706][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.250704][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.294148][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.347752][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.560548][ T144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.614341][ T144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.655978][ T144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.699438][ T144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.989796][ T144] device  left promiscuous mode [ 856.806160][ T144] device hsr_slave_0 left promiscuous mode [ 856.812867][ T144] device hsr_slave_1 left promiscuous mode [ 856.819400][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 856.827548][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 856.838053][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 856.846582][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 856.855829][ T144] device bridge_slave_1 left promiscuous mode [ 856.862770][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.873440][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 856.884734][ T144] device hsr_slave_0 left promiscuous mode [ 856.894420][ T144] device hsr_slave_1 left promiscuous mode [ 856.902122][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 856.909827][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 856.918078][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 856.927059][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 856.935769][ T144] bridge0: port 3(dummy0) entered disabled state [ 856.943842][ T144] device bridge_slave_1 left promiscuous mode [ 856.950698][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.959199][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 856.971578][ T144] device hsr_slave_0 left promiscuous mode [ 856.978242][ T144] device hsr_slave_1 left promiscuous mode [ 856.985829][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 856.993895][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 857.001784][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 857.010005][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 857.018302][ T144] device bridge_slave_1 left promiscuous mode [ 857.025240][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.033406][ T144] device bridge_slave_0 left promiscuous mode [ 857.040299][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.051892][ T144] device hsr_slave_0 left promiscuous mode [ 857.058513][ T144] device hsr_slave_1 left promiscuous mode [ 857.064689][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 857.072481][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 857.081002][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 857.088879][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 857.097557][ T144] device bridge_slave_1 left promiscuous mode [ 857.104789][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.113292][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.125489][ T144] device hsr_slave_0 left promiscuous mode [ 857.131867][ T144] device hsr_slave_1 left promiscuous mode [ 857.138599][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 857.146241][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 857.154717][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 857.162626][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 857.171202][ T144] device bridge_slave_1 left promiscuous mode [ 857.178104][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.186628][ T144] device bridge_slave_0 left promiscuous mode [ 857.193510][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.207966][ T144] device veth1_macvtap left promiscuous mode [ 857.214848][ T144] device veth0_macvtap left promiscuous mode [ 857.221179][ T144] device veth1_vlan left promiscuous mode [ 857.227422][ T144] device veth0_vlan left promiscuous mode [ 857.234030][ T144] device veth1_macvtap left promiscuous mode [ 857.240569][ T144] device veth0_macvtap left promiscuous mode [ 857.246900][ T144] device veth1_vlan left promiscuous mode [ 857.253144][ T144] device veth0_vlan left promiscuous mode [ 857.259919][ T144] device veth1_macvtap left promiscuous mode [ 857.266329][ T144] device veth0_macvtap left promiscuous mode [ 857.272988][ T144] device veth1_vlan left promiscuous mode [ 857.279609][ T144] device veth1_macvtap left promiscuous mode [ 857.286602][ T144] device veth0_macvtap left promiscuous mode [ 857.293838][ T144] device veth1_vlan left promiscuous mode [ 857.300600][ T144] device veth0_vlan left promiscuous mode [ 857.307869][ T144] device veth1_macvtap left promiscuous mode [ 857.316651][ T144] device veth0_macvtap left promiscuous mode [ 857.322947][ T144] device veth1_vlan left promiscuous mode [ 857.615712][ T144] bond2 (unregistering): Released all slaves [ 857.625150][ T144] bond1 (unregistering): Released all slaves [ 857.691409][ T144] team0 (unregistering): Port device team_slave_1 removed [ 857.704474][ T144] team0 (unregistering): Port device team_slave_0 removed [ 857.716116][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 857.728582][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 857.775653][ T144] bond0 (unregistering): Released all slaves [ 857.837211][ T144] bond1 (unregistering): Released all slaves [ 857.862232][ T144] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 857.895315][ T144] device team_slave_1 left promiscuous mode [ 857.903918][ T144] team0 (unregistering): Port device team_slave_1 removed [ 857.917049][ T144] device team_slave_0 left promiscuous mode [ 857.927227][ T144] team0 (unregistering): Port device team_slave_0 removed [ 857.938860][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 857.953741][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 858.005294][ T144] bond0 (unregistering): Released all slaves [ 858.055125][ T144] bond3 (unregistering): Released all slaves [ 858.064498][ T144] bond2 (unregistering): Released all slaves [ 858.074718][ T144] bond1 (unregistering): Released all slaves [ 858.153583][ T144] team0 (unregistering): Port device team_slave_1 removed [ 858.166680][ T144] team0 (unregistering): Port device team_slave_0 removed [ 858.179859][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 858.194232][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 858.243629][ T144] bond0 (unregistering): Released all slaves [ 858.342549][ T144] bond1 (unregistering): Released all slaves [ 858.462375][ T144] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 858.494161][ T144] team0 (unregistering): Port device team_slave_1 removed [ 858.505368][ T144] team0 (unregistering): Port device team_slave_0 removed [ 858.518904][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 858.532218][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 858.577973][ T144] bond0 (unregistering): Released all slaves [ 858.706705][ T144] team0 (unregistering): Port device team_slave_1 removed [ 858.719783][ T144] team0 (unregistering): Port device team_slave_0 removed [ 858.730301][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 858.743220][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 858.791820][ T144] bond0 (unregistering): Released all slaves [ 858.852827][ T4230] lo speed is unknown, defaulting to 1000