last executing test programs: 1.265268908s ago: executing program 2 (id=4877): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x161200, 0x0) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000140)) 1.173324061s ago: executing program 2 (id=4880): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@dellink={0x88, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x211}, [@IFLA_CARRIER_CHANGES={0x8}, @IFLA_PHYS_PORT_ID={0x18, 0x22, "fef29779420f1bdec5bd549fb90f2d92cd9392b2"}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3}, @IFLA_CARRIER={0xfffffee2, 0x21, 0x4c}, @IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @bridge_slave={{}, {0x0, 0x5, 0x0, 0x1, [@IFLA_BRPORT_FLUSH, @IFLA_BRPORT_LEARNING={0x0, 0x8, 0x1}, @IFLA_BRPORT_LEARNING={0x0, 0x8, 0x1}, @IFLA_BRPORT_ISOLATED, @IFLA_BRPORT_UNICAST_FLOOD]}}}, @IFLA_NUM_TX_QUEUES={0x0, 0x1f, 0x800}, @IFLA_AF_SPEC={0x0, 0x1a, 0x0, 0x1, [@AF_BRIDGE, @AF_MPLS]}, @IFLA_IFNAME={0x0, 0x3, 'ipvlan1\x00'}]}, 0x88}}, 0x0) 1.087463684s ago: executing program 4 (id=4882): setuid(0xee01) setgroups(0x0, 0x0) 1.046382526s ago: executing program 2 (id=4884): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000200, &(0x7f0000000040), 0x7, 0x4e3, &(0x7f0000001200)="$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") quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 997.171007ms ago: executing program 1 (id=4886): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x13, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd19ae7c2f4393c16a007d12b"]}]}, 0x114}], 0x1}, 0x0) 942.692599ms ago: executing program 4 (id=4887): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000100010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x24004005}, 0x0) 854.838212ms ago: executing program 1 (id=4889): r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x86, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x75}, 0x20) 788.732034ms ago: executing program 0 (id=4890): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$evdev(r0, &(0x7f0000000400)=[{{0x77359400}, 0x0, 0x3, 0x7ff}, {{0x77359400}, 0x14, 0x1}], 0x30) 716.801607ms ago: executing program 2 (id=4892): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x10, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000040)=@generic={0x0, r0}, 0x18) 649.368289ms ago: executing program 3 (id=4893): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000019000100000000000000000080200003fd11000500000000080001006401010108"], 0x2c}}, 0x0) 649.229549ms ago: executing program 0 (id=4894): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000002c0)={0x2, 0x1, 0xfffffffd, 0x3, 0x0, 0x0, 0x4}) 641.407849ms ago: executing program 1 (id=4895): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8482c0000005e14060205cd00000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) 615.98481ms ago: executing program 4 (id=4896): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0xc8, 0x8, 0xfa04, 0xc8, 0x6c02, 0x160, 0x194, 0x194, 0x160, 0x194, 0x3, 0x0, {[{{@ip={@remote, @broadcast, 0xff000000, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x1, 0x1e}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@ah={{0x2000}, {[0x1, 0xbfc], 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ip={@broadcast, @empty, 0xff000000, 0xffffff00, 'veth1_to_batadv\x00', 'nr0\x00', {}, {0xff}, 0x5c, 0x1, 0x7f}, 0x0, 0x70, 0xb8}, @common=@inet=@TCPMSS}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xffbe) 552.878812ms ago: executing program 0 (id=4897): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) 552.295272ms ago: executing program 3 (id=4898): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0) write$vga_arbiter(r0, &(0x7f0000000080)=@target={'target ', {'PCI:', '0', ':', '0', ':', '5', '.', '0'}}, 0x13) 465.369525ms ago: executing program 4 (id=4899): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x7f, 0x20203843, 0x0, [0x2]}) 439.941366ms ago: executing program 3 (id=4900): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x3) 409.580717ms ago: executing program 2 (id=4901): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x6d79c3d6df85c15e, 0x0, 0x0) 357.837908ms ago: executing program 1 (id=4902): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000004c0)=@setlink={0x40, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x35625, 0x40601}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_vlan\x00'}, @IFLA_BROADCAST={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x48800) 330.486309ms ago: executing program 3 (id=4903): r0 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(r0, 0x81204101, &(0x7f0000000340)) 308.46829ms ago: executing program 4 (id=4904): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa00}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) 307.90773ms ago: executing program 0 (id=4905): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x7f) 213.343553ms ago: executing program 2 (id=4906): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x8a, &(0x7f0000000e00)={[{@nombcache}, {@errors_remount}, {@acl}, {@noload}, {@noblock_validity}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x2}}, {@init_itable_val={'init_itable', 0x3d, 0xfd}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@orlov}, {@nodiscard}, {@usrjquota}, {@norecovery}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x6, 0x47e, &(0x7f0000000640)="$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") creat(&(0x7f0000000080)='./file0\x00', 0x6a) 203.705014ms ago: executing program 4 (id=4907): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x1, 0xfffffffc) syz_mount_image$ext4(&(0x7f00000006c0)='ext4\x00', &(0x7f0000000640)='./file2\x00', 0x380000a, &(0x7f0000000000)={[{@barrier_val={'barrier', 0x3d, 0x6}}, {@nobarrier}, {@nombcache}, {@barrier}]}, 0x3f, 0x543, &(0x7f0000000700)="$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") 195.378074ms ago: executing program 3 (id=4908): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4090) 145.333585ms ago: executing program 0 (id=4909): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)=ANY=[@ANYBLOB="e00000001000090503000000000000000800d20001000000a50000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b5f44e4ce287128282829289423debbb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefcaa100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f33363360000002000008014000100fe88000000000000000000000000000108006e00ffffffff0000000000000000"], 0xe0}], 0x1, 0x0, 0x0, 0x1}, 0x40040) 145.157525ms ago: executing program 1 (id=4910): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e00010069703667726574617000000004000280080001"], 0x44}}, 0x0) 91.410267ms ago: executing program 3 (id=4911): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x11, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}}) 24.298719ms ago: executing program 0 (id=4912): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r0, &(0x7f0000000280)=""/172, 0xac, 0x38) 0s ago: executing program 1 (id=4913): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="34000000120005ff00000400060000000000004a", @ANYRES32=0x0, @ANYBLOB="45f000000200000014001280040001"], 0x34}}, 0x24000800) kernel console output (not intermixed with test programs): nfig 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 309.589110][T10616] team0: Port device team_slave_0 removed [ 309.604596][ T8037] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 309.620281][ T8037] usb 4-1: config 0 interface 0 has no altsetting 0 [ 309.643965][T10618] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 309.711159][T10616] team0: Port device team_slave_1 removed [ 309.725494][T10618] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 309.744511][ T6218] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 309.753695][T10616] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.779727][T10616] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.800129][ T8037] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 309.809642][ T4241] usb 2-1: Using ep0 maxpacket: 32 [ 309.816360][T10616] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.834124][T10616] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.841695][ T8037] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.856651][ T8037] usb 4-1: Product: syz [ 309.861047][ T8037] usb 4-1: Manufacturer: syz [ 309.870243][ T8037] usb 4-1: SerialNumber: syz [ 309.883469][ T8037] usb 4-1: config 0 descriptor?? [ 309.941144][ T4241] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 309.949398][ T4241] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 309.979849][ T4241] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 310.010938][ T4241] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 310.041905][ T4241] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 310.096789][ T4241] usb 2-1: config 0 interface 0 has no altsetting 0 [ 310.192848][ T8037] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 310.226824][ T8037] imon 4-1:0.0: unable to initialize intf0, err -90 [ 310.238566][ T8037] imon:imon_probe: failed to initialize context! [ 310.245155][ T8037] imon 4-1:0.0: unable to register, err -19 [ 310.271565][ T8037] usb 4-1: USB disconnect, device number 34 [ 310.294695][ T4241] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 310.314887][ T4241] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 310.348905][ T4241] usb 2-1: Product: syz [ 310.362784][ T4241] usb 2-1: Manufacturer: syz [ 310.367658][ T4241] usb 2-1: SerialNumber: syz [ 310.379492][ T4241] usb 2-1: config 0 descriptor?? [ 310.417896][ T4241] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 310.453862][ T4241] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 310.517765][ T1324] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 310.581012][T10639] autofs4:pid:10639:validate_dev_ioctl: invalid path supplied for cmd(0xc018937d) [ 310.664938][T10614] ldusb 2-1:0.0: Couldn't submit interrupt_in_urb -90 [ 310.702298][ T4784] usb 2-1: USB disconnect, device number 44 [ 310.731162][ T4784] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 310.760904][ T1324] usb 1-1: Using ep0 maxpacket: 16 [ 310.772501][T10643] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.782757][T10645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 310.873212][ T1324] usb 1-1: config 0 has no interfaces? [ 311.022801][ T1324] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 311.044468][ T1324] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.053032][ T1324] usb 1-1: Product: syz [ 311.057240][ T1324] usb 1-1: Manufacturer: syz [ 311.071220][ T1324] usb 1-1: SerialNumber: syz [ 311.110747][ T1324] r8152-cfgselector 1-1: config 0 descriptor?? [ 311.216192][T10670] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2779'. [ 311.236127][T10670] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2779'. [ 311.368737][ T1324] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 311.566113][ T8037] usb 1-1: USB disconnect, device number 38 [ 311.899000][ T1324] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 311.934551][T10709] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 311.950029][T10708] loop4: detected capacity change from 0 to 1024 [ 311.965500][T10709] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 311.974718][T10709] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 312.014672][T10709] device bridge_slave_0 left promiscuous mode [ 312.030361][T10709] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.045680][T10708] hfsplus: cannot replace xattr [ 312.079706][ T7384] hfsplus: b-tree write err: -5, ino 25 [ 312.118735][T10709] device bridge_slave_1 left promiscuous mode [ 312.123888][ T1324] usb 4-1: Using ep0 maxpacket: 16 [ 312.130903][ T7384] hfsplus: b-tree write err: -5, ino 4 [ 312.149137][T10709] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.156791][ T7384] hfsplus: b-tree write err: -5, ino 2 [ 312.219649][T10709] bond0: (slave bond_slave_0): Releasing backup interface [ 312.239150][ T1324] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 312.259520][ T1324] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 312.285891][ T1324] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x8E has invalid maxpacket 51078, setting to 1024 [ 312.296034][T10719] xt_TCPMSS: Only works on TCP SYN packets [ 312.300475][ T1324] usb 4-1: config 0 interface 0 has no altsetting 0 [ 312.352939][T10709] bond0: (slave bond_slave_1): Releasing backup interface [ 312.421389][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 312.458913][ T1324] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 312.479242][ T1324] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.512406][ T1324] usb 4-1: Product: syz [ 312.517485][T10709] team0: Port device team_slave_0 removed [ 312.535730][ T1324] usb 4-1: Manufacturer: syz [ 312.540430][ T1324] usb 4-1: SerialNumber: syz [ 312.569868][ T1324] usb 4-1: config 0 descriptor?? [ 312.610532][T10709] team0: Port device team_slave_1 removed [ 312.638286][T10709] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.654985][T10709] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.674528][T10709] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.693737][T10709] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.057924][ T1324] usb 4-1: USB disconnect, device number 35 [ 313.680964][T10779] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2833'. [ 313.834818][T10787] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.2837'. [ 313.897071][T10787] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 313.918594][T10790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2838'. [ 313.928809][T10790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2838'. [ 313.951745][T10790] netlink: 'syz.0.2838': attribute type 6 has an invalid length. [ 314.152933][T10800] loop3: detected capacity change from 0 to 64 [ 314.230218][T10756] loop4: detected capacity change from 0 to 32768 [ 314.300458][T10756] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.2820 (10756) [ 314.403014][T10756] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 314.421414][T10756] BTRFS info (device loop4): using free space tree [ 314.461262][T10756] BTRFS info (device loop4): has skinny extents [ 314.531419][T10817] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2851'. [ 314.581032][T10815] device ipip0 entered promiscuous mode [ 314.671231][T10823] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 314.831196][T10843] loop3: detected capacity change from 0 to 4096 [ 314.866323][T10756] BTRFS info (device loop4): enabling ssd optimizations [ 314.950110][T10843] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 315.240863][ T8033] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop4 scanned by udevd (8033) [ 316.363794][T10920] netlink: 'syz.2.2889': attribute type 1 has an invalid length. [ 316.674228][T10943] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2900'. [ 316.674296][T10943] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2900'. [ 316.674313][T10943] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2900'. [ 316.970756][T10959] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.126769][T10970] loop2: detected capacity change from 0 to 512 [ 317.192412][T10970] EXT4-fs (loop2): Ignoring removed nobh option [ 317.205278][T10976] loop3: detected capacity change from 0 to 256 [ 317.253206][ T4241] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 317.312709][T10970] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,nogrpid,quota,nobh,,errors=continue. Quota mode: writeback. [ 317.341839][T10970] ext4 filesystem being mounted at /551/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 317.364092][T10970] Quota error (device loop2): find_tree_dqentry: Getting block too big (31 >= 6) [ 317.375168][T10970] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 317.385190][T10970] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.2914: Failed to acquire dquot type 0 [ 317.397572][T10976] FAT-fs (loop3): Directory bread(block 64) failed [ 317.434212][T10976] FAT-fs (loop3): Directory bread(block 65) failed [ 317.443501][T10976] FAT-fs (loop3): Directory bread(block 66) failed [ 317.453895][T10976] FAT-fs (loop3): Directory bread(block 67) failed [ 317.467338][T10976] FAT-fs (loop3): Directory bread(block 68) failed [ 317.483161][T10976] FAT-fs (loop3): Directory bread(block 69) failed [ 317.524132][T10976] FAT-fs (loop3): Directory bread(block 70) failed [ 317.542469][ T4241] usb 5-1: Using ep0 maxpacket: 32 [ 317.556372][T10976] FAT-fs (loop3): Directory bread(block 71) failed [ 317.570323][T10976] FAT-fs (loop3): Directory bread(block 72) failed [ 317.578395][T10976] FAT-fs (loop3): Directory bread(block 73) failed [ 317.665237][ T4241] usb 5-1: config 2 has an invalid interface number: 222 but max is 0 [ 317.683654][ T4241] usb 5-1: config 2 has no interface number 0 [ 317.709095][ T4241] usb 5-1: config 2 interface 222 has no altsetting 0 [ 317.869233][ T4241] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=af.17 [ 317.887971][ T4241] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.896583][T11001] netlink: 'syz.0.2929': attribute type 10 has an invalid length. [ 317.936810][ T4241] usb 5-1: Product: syz [ 317.949983][ T4241] usb 5-1: Manufacturer: syz [ 317.969059][ T4241] usb 5-1: SerialNumber: syz [ 318.315584][ T4241] usb 5-1: USB disconnect, device number 38 [ 318.557797][T11037] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2946'. [ 318.575031][T11037] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2946'. [ 318.770705][T11048] netlink: 'syz.2.2950': attribute type 2 has an invalid length. [ 318.809409][T11048] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2950'. [ 319.088541][T11067] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2960'. [ 319.293080][T11081] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2964'. [ 319.327478][T11082] i2c i2c-0: Invalid block write size 253 [ 319.497685][T11094] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2982'. [ 319.549580][T11097] ieee802154 phy0 wpan0: encryption failed: -22 [ 319.824600][T11112] netlink: 'syz.1.2979': attribute type 1 has an invalid length. [ 319.836735][T11113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2978'. [ 319.868489][T11114] loop2: detected capacity change from 0 to 16 [ 319.953268][T11117] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 319.965276][T11114] erofs: (device loop2): mounted with root inode @ nid 36. [ 320.006188][T11114] attempt to access beyond end of device [ 320.006188][T11114] loop2: rw=524288, want=56, limit=16 [ 320.009503][T11117] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 320.039546][T11114] attempt to access beyond end of device [ 320.039546][T11114] loop2: rw=524288, want=1960, limit=16 [ 320.067293][T11114] attempt to access beyond end of device [ 320.067293][T11114] loop2: rw=0, want=48, limit=16 [ 320.108817][T11121] tc_dump_action: action bad kind [ 320.303790][T11129] xt_bpf: check failed: parse error [ 320.419690][T11133] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 320.427537][T11133] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 320.582921][ T4791] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 320.929026][ T4791] usb 2-1: config 8 has an invalid interface number: 80 but max is 0 [ 320.949616][ T4791] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 320.986136][ T4791] usb 2-1: config 8 has no interface number 0 [ 320.992302][ T4791] usb 2-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0xE7, skipping [ 321.040050][ T4791] usb 2-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 321.056017][T11161] [U] fGmڞrGf׊7 eMIC/nzUT7M͂Sv +`w%k,kAq폓،ȴ-G?ݖáN7]TA,gm.*j6_FxX(_Wg_%Z u2 [ 321.068540][ T4791] usb 2-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 321.123426][T11161] [U] dېy{H_jAj:HMF;AM [ 321.130409][ T4791] usb 2-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 321.149201][T11161] [U] ۈr, ->Cbz_Rd"dQU&KFXف] Ab.R獣{2HPB ``V 3Yōy [ 321.163598][ T4791] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 321.185620][T11161] [U] &'Dp\ReˮNtE#qrusm|:j~s}jC2d+r>+D# [ 321.189723][ T4791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.224314][T11161] [U] @vu҃9{o+bQ౛9|"oaHƀL" {SjFKMm(qogG|H@-N!ftF5@V?G2Sh`:JZrgyRNBCuR;Ē'{Ce>=YTĴKq0JgLoSr|us=9GWg ;CbZ_l [ 321.284943][ T4791] usb 2-1: NFC: intf ffff8880185cd000 id ffffffff8cb53340 [ 321.370212][T11161] [U] ߉cU|Cth\7h^|Wƙd;r+JuBhRR˓$[H!z~p{$mˇ#AWд[U [ 321.387849][T11161] [U] ˬܚ'$U80lFUD{i6:@pnuSFrREtC2~"_? 4.nyk ۵^APAm:_1&'©FC:L8_D\3 [ 321.411960][T11161] [U] :h(FE^|F,|c.;*[x W)[͗P~b[zGӆN]eVnE]  [ 321.525971][ T1324] usb 2-1: USB disconnect, device number 45 [ 321.541822][T11173] loop0: detected capacity change from 0 to 512 [ 321.631081][T11173] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 321.641698][ T1508] block nbd2: Attempted send on invalid socket [ 321.648047][ T1508] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 321.663495][T11175] XFS (nbd2): SB validate failed with error -5. [ 321.684800][T11173] EXT4-fs (loop0): 1 truncate cleaned up [ 321.691183][T11173] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,dax=inode,noauto_da_alloc,minixdf,data=journal,quota,,errors=continue. Quota mode: writeback. [ 321.732829][T11158] loop3: detected capacity change from 0 to 32768 [ 321.834192][T11158] (syz.3.3004,11158,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 321.866126][T11158] (syz.3.3004,11158,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 322.011271][T11158] JBD2: Ignoring recovery information on journal [ 322.208174][T11158] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 322.413100][ T26] audit: type=1107 audit(1780487947.114:19): pid=11213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 322.420347][T11216] __nla_validate_parse: 4 callbacks suppressed [ 322.445811][T11216] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3027'. [ 322.576083][T11223] netlink: 'syz.0.3031': attribute type 12 has an invalid length. [ 322.619613][T11223] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3031'. [ 322.699295][ T4194] ocfs2: Unmounting device (7,3) on (node local) [ 322.988486][T11235] loop0: detected capacity change from 0 to 4096 [ 323.084065][T11235] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 323.200854][T11235] ntfs3: loop0: failed to convert "c46c" to macromanian [ 323.238946][T11250] binder: Bad value for 'max' [ 323.321430][ T8037] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 323.376635][T11257] netlink: 'syz.4.3046': attribute type 1 has an invalid length. [ 323.391707][T11257] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3046'. [ 323.585202][T11268] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 323.716996][ T8037] usb 3-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e [ 323.726126][ T8037] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.803267][ T8037] pwc: Logitech/Cisco VT Camera webcam detected. [ 323.853960][T11286] xt_SECMARK: invalid mode: 2 [ 323.918917][T11288] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3062'. [ 323.953180][T11290] cgroup: Unknown subsys name 'noxattr' [ 323.967926][T11288] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 323.983261][T11292] loop4: detected capacity change from 0 to 256 [ 324.003993][T11288] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 324.061886][ T4905] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 324.168364][T11296] loop0: detected capacity change from 0 to 256 [ 324.212495][T11296] exfat: Deprecated parameter 'utf8' [ 324.220964][T11296] exfat: Deprecated parameter 'namecase' [ 324.226050][ T8037] pwc: send_video_command error -71 [ 324.237787][ T8037] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 324.250533][ T8037] Philips webcam: probe of 3-1:127.0 failed with error -71 [ 324.273676][ T8037] usb 3-1: USB disconnect, device number 17 [ 324.302847][T11296] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 324.455064][ T4905] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 324.463213][ T4905] usb 4-1: config 0 has no interface number 0 [ 324.509518][ T4905] usb 4-1: config 0 interface 29 has no altsetting 0 [ 324.538153][T11310] ieee802154 phy0 wpan0: encryption failed: -22 [ 324.714859][ T4905] usb 4-1: New USB device found, idVendor=0482, idProduct=0203, bcdDevice=be.5f [ 324.745277][ T4905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.767652][ T4905] usb 4-1: Product: syz [ 324.776457][ T4905] usb 4-1: Manufacturer: syz [ 324.786808][ T4905] usb 4-1: SerialNumber: syz [ 324.806258][ T4905] usb 4-1: config 0 descriptor?? [ 324.982371][T11324] loop2: detected capacity change from 0 to 4096 [ 325.036821][T11332] loop1: detected capacity change from 0 to 64 [ 325.079471][T11335] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 325.147877][ T4905] usb 4-1: USB disconnect, device number 36 [ 326.031990][T11376] netlink: 'syz.4.3104': attribute type 10 has an invalid length. [ 326.204170][T11386] loop3: detected capacity change from 0 to 64 [ 326.534162][T11343] loop1: detected capacity change from 0 to 40427 [ 326.644228][T11343] F2FS-fs (loop1): Found nat_bits in checkpoint [ 326.818551][T11343] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 326.886602][T11343] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 326.905012][T11416] xt_CONNSECMARK: invalid mode: 66 [ 327.092622][T11422] xt_TPROXY: Can be used only with -p tcp or -p udp [ 327.181324][T11343] attempt to access beyond end of device [ 327.181324][T11343] loop1: rw=2049, want=45104, limit=40427 [ 327.330151][T11430] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 327.570791][T11434] loop4: detected capacity change from 0 to 64 [ 327.779524][T11427] loop0: detected capacity change from 0 to 32768 [ 327.846587][T11427] (syz.0.3129,11427,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 327.886902][T11427] (syz.0.3129,11427,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 328.012377][T11438] loop3: detected capacity change from 0 to 1024 [ 328.025416][T11428] loop2: detected capacity change from 0 to 32768 [ 328.055497][T11427] JBD2: Ignoring recovery information on journal [ 328.182715][T11427] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 328.548627][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 328.594101][ T4189] ocfs2: Unmounting device (7,0) on (node local) [ 328.652556][T11464] batman_adv: Cannot find parent device [ 328.728936][ T8037] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 328.841285][T11476] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3152'. [ 328.996301][ T8037] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 329.191343][T11493] loop1: detected capacity change from 0 to 2048 [ 329.277475][T11493] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 329.286752][ T7973] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 329.483028][ T4905] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 329.527768][ T7973] usb 3-1: Using ep0 maxpacket: 16 [ 329.589723][ T8037] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 329.648954][ T7973] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 329.669341][T11519] loop3: detected capacity change from 0 to 16 [ 329.675645][ T7973] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 255, changing to 11 [ 329.723716][ T7973] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 57872, setting to 1024 [ 329.735611][T11521] nfs4: Bad value for 'source' [ 329.742948][ T7973] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 329.754476][ T7973] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 329.761328][ T4905] usb 1-1: Using ep0 maxpacket: 16 [ 329.775257][T11519] erofs: (device loop3): mounted with root inode @ nid 36. [ 329.796536][ T7973] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 329.811098][ T7973] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 329.820771][ T7973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.834065][ T7973] usb 3-1: config 0 descriptor?? [ 329.900716][ T4905] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 329.984665][ T7973] rc_core: IR keymap rc-hauppauge not found [ 329.991192][ T7973] Registered IR keymap rc-empty [ 330.006552][ T7973] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 330.068639][ T7973] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 330.077696][ T4905] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 330.096760][ T4905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.104810][ T4905] usb 1-1: Product: syz [ 330.120259][ T4905] usb 1-1: Manufacturer: syz [ 330.125287][ T4905] usb 1-1: SerialNumber: syz [ 330.133963][T11536] netlink: 'syz.3.3180': attribute type 4 has an invalid length. [ 330.138424][ T7973] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 330.143685][ T4905] r8152-cfgselector 1-1: config 0 descriptor?? [ 330.161275][T11536] netlink: 'syz.3.3180': attribute type 3 has an invalid length. [ 330.169600][T11534] team_slave_1: mtu greater than device maximum [ 330.179111][T11536] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3180'. [ 330.200360][ T7973] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input14 [ 330.236629][ T7973] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 330.273185][ T7973] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 330.308152][T11539] 8021q: adding VLAN 0 to HW filter on device bond1 [ 330.320474][ T7973] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 330.357819][ T7973] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 330.385956][ T7973] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 330.422500][ T7973] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 330.432758][T11544] loop4: detected capacity change from 0 to 4096 [ 330.455706][ T7973] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 330.562959][ T8037] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 330.582662][ T8037] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 330.637042][ T8037] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 330.666316][ T4905] r8152-cfgselector 1-1: Unknown version 0x0000 [ 330.677727][ T4905] r8152-cfgselector 1-1: USB disconnect, device number 39 [ 330.703876][T11544] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 330.722616][T11544] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 330.742614][T11544] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 330.754402][ T7973] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 330.772112][T11550] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3187'. [ 330.786223][T11544] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 330.796626][ T7973] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 330.809067][T11544] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 330.839799][T11544] ntfs: volume version 3.1. [ 330.844875][ T7973] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 330.859896][T11544] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 330.882313][T11544] ntfs: (device loop4): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 330.900595][ T7973] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 330.919790][ T7973] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 330.937549][T11544] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 330.978584][ T7973] usb 3-1: USB disconnect, device number 18 [ 331.006298][T11544] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 331.031404][T11544] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 331.252445][T11565] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3194'. [ 331.438594][T11575] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3199'. [ 331.708334][T11599] netlink: 'syz.0.3209': attribute type 10 has an invalid length. [ 331.731313][T11599] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3209'. [ 331.775566][T11599] batman_adv: batadv0: Adding interface: virt_wifi0 [ 331.792417][T11599] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.890398][T11599] batman_adv: batadv0: Interface activated: virt_wifi0 [ 331.951526][T11603] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3212'. [ 332.515746][T11649] loop4: detected capacity change from 0 to 512 [ 332.571881][T11649] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 332.633565][T11649] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 332.641648][T11649] System zones: 1-12 [ 332.647910][T11645] loop1: detected capacity change from 0 to 4096 [ 332.689561][T11649] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 332.741957][T11664] loop0: detected capacity change from 0 to 1024 [ 332.758240][T11649] EXT4-fs (loop4): 1 truncate cleaned up [ 332.795532][T11664] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 332.838589][T11649] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,debug_want_extra_isize=0x0000000000000068,debug,nombcache,quota,nolazytime,,errors=continue. Quota mode: writeback. [ 332.914738][T11664] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6815c01c, mo2=0003] [ 332.928769][T11664] System zones: 0-1, 3-36 [ 332.946827][T11664] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,noinit_itable,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 333.433591][T11686] loop3: detected capacity change from 0 to 1024 [ 333.610335][T11686] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 334.209452][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 334.302150][ T1508] block nbd0: Attempted send on invalid socket [ 334.308484][ T1508] blk_update_request: I/O error, dev nbd0, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 334.321044][T11728] REISERFS warning (device nbd0): sh-2006 read_super_block: bread failed (dev nbd0, block 2, size 4096) [ 334.340769][T11734] loop2: detected capacity change from 0 to 256 [ 334.348085][ T1508] block nbd0: Attempted send on invalid socket [ 334.354845][ T1508] blk_update_request: I/O error, dev nbd0, sector 128 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 334.370991][T11728] REISERFS warning (device nbd0): sh-2006 read_super_block: bread failed (dev nbd0, block 16, size 4096) [ 334.382666][T11728] REISERFS warning (device nbd0): sh-2021 reiserfs_fill_super: can not find reiserfs on nbd0 [ 334.460127][T11734] FAT-fs (loop2): Directory bread(block 64) failed [ 334.508720][T11734] FAT-fs (loop2): Directory bread(block 65) failed [ 334.554467][T11734] FAT-fs (loop2): Directory bread(block 66) failed [ 334.581202][T11734] FAT-fs (loop2): Directory bread(block 67) failed [ 334.614661][T11734] FAT-fs (loop2): Directory bread(block 68) failed [ 334.657611][T11734] FAT-fs (loop2): Directory bread(block 69) failed [ 334.695520][T11734] FAT-fs (loop2): Directory bread(block 70) failed [ 334.702768][T11734] FAT-fs (loop2): Directory bread(block 71) failed [ 334.758319][T11734] FAT-fs (loop2): Directory bread(block 72) failed [ 334.766049][T11734] FAT-fs (loop2): Directory bread(block 73) failed [ 334.948388][ T8037] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 334.969001][T11720] loop1: detected capacity change from 0 to 32768 [ 335.029324][T11753] loop3: detected capacity change from 0 to 4096 [ 335.052688][T11720] XFS (loop1): Mounting V5 Filesystem [ 335.112949][T11720] XFS (loop1): Ending clean mount [ 335.263175][ T4905] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 335.348788][ T4192] XFS (loop1): Unmounting Filesystem [ 335.372922][T11771] netlink: 'syz.3.3288': attribute type 1 has an invalid length. [ 335.382712][T11771] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3288'. [ 335.397619][T11771] NCSI netlink: No device for ifindex 0 [ 335.440718][ T8037] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 335.471277][ T8037] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 215, changing to 7 [ 335.522734][T11775] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3291'. [ 335.551038][ T4905] usb 1-1: Using ep0 maxpacket: 16 [ 335.673774][ T4905] usb 1-1: config index 0 descriptor too short (expected 65, got 36) [ 335.681967][ T4905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 335.726686][ T4905] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 335.748292][ T8037] usb 5-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice= 0.40 [ 335.773787][T11784] loop3: detected capacity change from 0 to 1024 [ 335.780466][ T8037] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.794730][ T4905] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 335.821738][ T8037] usb 5-1: Product: syz [ 335.831756][ T4905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.839948][ T8037] usb 5-1: Manufacturer: syz [ 335.852422][ T8037] usb 5-1: SerialNumber: syz [ 335.863639][ T4905] usb 1-1: config 0 descriptor?? [ 335.932749][ T4905] pxrc 1-1:0.0: Could not find endpoint [ 335.944465][ T4905] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 336.133398][ T4241] usb 1-1: USB disconnect, device number 40 [ 336.248504][T11795] loop2: detected capacity change from 0 to 4096 [ 336.261130][ T8037] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 336.282220][ T8037] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 336.414700][ T8037] usb 5-1: USB disconnect, device number 39 [ 336.562738][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 336.562754][ T26] audit: type=1400 audit(1780487962.297:20): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="#(%#{//(@\)//&@},['%%&\#*" pid=11808 comm="syz.3.3307" [ 336.662904][ T4524] udevd[4524]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 336.722658][T11807] loop1: detected capacity change from 0 to 4096 [ 336.803521][T11807] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 336.838962][T11807] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 336.888641][T11807] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 336.928598][T11807] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 337.012841][T11807] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 337.069673][T11807] ntfs: volume version 3.1. [ 337.100909][T11807] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 337.136132][T11829] device wlan0 entered promiscuous mode [ 337.184702][T11807] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 337.211059][T11829] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 337.249364][T11807] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 337.306530][T11807] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 337.367251][T11833] loop4: detected capacity change from 0 to 4096 [ 337.496727][T11845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3324'. [ 337.517409][T11845] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3324'. [ 338.324500][T11895] loop0: detected capacity change from 0 to 128 [ 338.377596][T11898] program syz.1.3350 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 338.453135][ T4241] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 338.741899][ T4791] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 338.834628][ T4241] usb 4-1: config 0 has an invalid interface number: 104 but max is 1 [ 338.859892][ T4241] usb 4-1: config 0 has an invalid interface number: 104 but max is 1 [ 338.868904][ T4241] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 338.885103][ T4241] usb 4-1: config 0 has no interface number 0 [ 338.901363][ T4241] usb 4-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid maxpacket 12288, setting to 64 [ 338.921092][ T4241] usb 4-1: config 0 interface 104 has no altsetting 1 [ 339.043239][T11891] loop4: detected capacity change from 0 to 32768 [ 339.097436][T11923] loop2: detected capacity change from 0 to 256 [ 339.124064][ T4791] usb 2-1: unable to get BOS descriptor or descriptor too short [ 339.124068][ T4241] usb 4-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 339.124096][ T4241] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.161826][ T4241] usb 4-1: Product: syz [ 339.166099][ T4241] usb 4-1: Manufacturer: syz [ 339.177840][ T4241] usb 4-1: SerialNumber: syz [ 339.181847][ T4791] usb 2-1: not running at top speed; connect to a high speed hub [ 339.215342][T11891] find_entry called with index = 0 [ 339.233755][T11923] FAT-fs (loop2): Directory bread(block 64) failed [ 339.242441][ T4241] usb 4-1: config 0 descriptor?? [ 339.267183][T11891] read_mapping_page failed! [ 339.269432][T11925] loop0: detected capacity change from 0 to 512 [ 339.272785][T11891] ERROR: (device loop4): txCommit: [ 339.272785][T11891] [ 339.279234][ T4791] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 339.290135][T11923] FAT-fs (loop2): Directory bread(block 65) failed [ 339.304340][ T4241] asix: probe of 4-1:0.104 failed with error -22 [ 339.328566][T11923] FAT-fs (loop2): Directory bread(block 66) failed [ 339.333158][ T4791] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 339.349240][T11923] FAT-fs (loop2): Directory bread(block 67) failed [ 339.391413][T11923] FAT-fs (loop2): Directory bread(block 68) failed [ 339.405754][T11925] EXT4-fs (loop0): orphan cleanup on readonly fs [ 339.413181][T11923] FAT-fs (loop2): Directory bread(block 69) failed [ 339.419862][T11923] FAT-fs (loop2): Directory bread(block 70) failed [ 339.427367][T11925] EXT4-fs warning (device loop0): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 339.434230][ T4791] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 339.443325][T11925] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 339.475730][T11923] FAT-fs (loop2): Directory bread(block 71) failed [ 339.489361][T11925] EXT4-fs error (device loop0): ext4_orphan_get:1432: comm syz.0.3363: bad orphan inode 14 [ 339.504277][T11923] FAT-fs (loop2): Directory bread(block 72) failed [ 339.505550][ T4241] usb 4-1: USB disconnect, device number 37 [ 339.522511][T11923] FAT-fs (loop2): Directory bread(block 73) failed [ 339.530669][T11925] ext4_test_bit(bit=13, block=18) = 1 [ 339.540115][T11925] is_bad_inode(inode)=0 [ 339.577741][T11925] NEXT_ORPHAN(inode)=0 [ 339.587772][T11925] max_ino=32 [ 339.595377][T11925] i_nlink=1 [ 339.598614][T11925] EXT4-fs (loop0): 1 truncate cleaned up [ 339.639030][T11925] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 339.692687][ T4791] usb 2-1: New USB device found, idVendor=0582, idProduct=1f14, bcdDevice= 0.40 [ 339.711912][ T4791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.757350][ T4791] usb 2-1: Product: syz [ 339.766812][ T4791] usb 2-1: Manufacturer: syz [ 339.781823][ T4791] usb 2-1: SerialNumber: syz [ 339.901308][T11934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3369'. [ 339.911803][T11934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3369'. [ 339.926542][T11934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3369'. [ 339.941036][T11934] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 340.141054][ T4791] usb 2-1: MIDIStreaming interface descriptor not found [ 340.219319][ T4791] usb 2-1: USB disconnect, device number 46 [ 340.524751][ T4182] udevd[4182]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 340.578525][T11966] netlink: 'syz.0.3382': attribute type 11 has an invalid length. [ 340.755403][T11973] loop1: detected capacity change from 0 to 2048 [ 340.799915][T11977] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 340.837220][T11977] SET target dimension over the limit! [ 340.850643][T11983] loop2: detected capacity change from 0 to 512 [ 340.877351][T11973] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 340.911662][T11973] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 340.933766][T11983] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 340.984561][T11983] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 341.120309][T11983] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,barrier=0x0000000000000009,mblk_io_submit,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 341.139173][ C0] vkms_vblank_simulate: vblank timer overrun [ 341.211403][T12001] loop3: detected capacity change from 0 to 256 [ 341.237348][T11983] ext4 filesystem being mounted at /653/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 341.406890][T12010] loop1: detected capacity change from 0 to 256 [ 341.580318][T12010] FAT-fs (loop1): Directory bread(block 64) failed [ 341.623136][T12010] FAT-fs (loop1): Directory bread(block 65) failed [ 341.667834][T12010] FAT-fs (loop1): Directory bread(block 66) failed [ 341.678756][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 341.724876][T12010] FAT-fs (loop1): Directory bread(block 67) failed [ 341.746984][T12010] FAT-fs (loop1): Directory bread(block 68) failed [ 341.755309][T12018] device wlan0 entered promiscuous mode [ 341.781003][T12010] FAT-fs (loop1): Directory bread(block 69) failed [ 341.793490][T12018] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 341.810420][T12010] FAT-fs (loop1): Directory bread(block 70) failed [ 341.823019][T12010] FAT-fs (loop1): Directory bread(block 71) failed [ 341.831323][T12010] FAT-fs (loop1): Directory bread(block 72) failed [ 341.891763][T12010] FAT-fs (loop1): Directory bread(block 73) failed [ 342.137935][T12038] loop0: detected capacity change from 0 to 164 [ 342.214009][T12042] trusted_key: encrypted_key: master key parameter is missing [ 342.238322][T12038] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 342.266565][T12038] isofs_fill_super: root inode is not a directory. Corrupted media? [ 342.283180][T12046] (unnamed net_device) (uninitialized): ARP monitoring cannot be used with MII monitoring [ 342.484404][T12053] device wlan0 entered promiscuous mode [ 342.533834][T12053] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 342.625736][T12062] netlink: 'syz.1.3421': attribute type 1 has an invalid length. [ 342.853703][T12078] netlink: 'syz.1.3429': attribute type 27 has an invalid length. [ 343.032463][ T4791] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 343.325663][T12108] loop4: detected capacity change from 0 to 256 [ 343.418970][ T4791] usb 4-1: config 0 has an invalid interface number: 231 but max is 0 [ 343.437825][T12108] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 343.450026][T12115] netlink: 'syz.1.3446': attribute type 1 has an invalid length. [ 343.467664][ T4791] usb 4-1: config 0 has no interface number 0 [ 343.474721][ T4791] usb 4-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 343.590012][T12108] exFAT-fs (loop4): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 343.634501][T12108] exFAT-fs (loop4): Filesystem has been set read-only [ 343.656082][ T4791] usb 4-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 343.675918][ T4791] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.690328][ T4791] usb 4-1: Product: syz [ 343.702535][ T4791] usb 4-1: Manufacturer: syz [ 343.714279][ T4791] usb 4-1: SerialNumber: syz [ 343.735258][ T4791] usb 4-1: config 0 descriptor?? [ 343.757167][T12124] loop2: detected capacity change from 0 to 164 [ 343.761514][T12074] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 343.839979][ T4791] plusb 4-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.3-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, ca:79:24:cb:b4:b2 [ 343.870153][ T4241] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 343.885362][T12124] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 343.917167][T12124] isofs_fill_super: root inode is not a directory. Corrupted media? [ 344.103942][ T4241] usb 2-1: Using ep0 maxpacket: 8 [ 344.147616][T12141] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3460'. [ 344.176005][T12143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3461'. [ 344.261906][ T4241] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 344.290522][ T4241] usb 2-1: config 0 has no interface number 0 [ 344.449139][ T4241] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 344.479236][ T4241] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.515208][ T4241] usb 2-1: Product: syz [ 344.524007][ T4241] usb 2-1: Manufacturer: syz [ 344.528695][ T4241] usb 2-1: SerialNumber: syz [ 344.591447][ T4241] usb 2-1: config 0 descriptor?? [ 344.834140][ T4241] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 344.846592][ T4241] usb 2-1: No valid video chain found. [ 344.955374][T12186] loop4: detected capacity change from 0 to 16 [ 344.984107][T12186] erofs: (device loop4): mounted with root inode @ nid 36. [ 345.043920][ T1324] usb 2-1: USB disconnect, device number 47 [ 345.340353][T12199] netlink: 'syz.2.3482': attribute type 1 has an invalid length. [ 345.468193][T12205] netlink: 'syz.0.3484': attribute type 28 has an invalid length. [ 345.482472][T12206] netlink: 209820 bytes leftover after parsing attributes in process `syz.4.3485'. [ 345.492719][ T4241] usb 4-1: USB disconnect, device number 38 [ 345.499772][ T4241] plusb 4-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.3-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 345.520322][T12205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3484'. [ 345.764393][T12216] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3489'. [ 346.040621][T12231] loop0: detected capacity change from 0 to 8 [ 346.058352][T12237] loop4: detected capacity change from 0 to 64 [ 346.181933][T12231] SQUASHFS error: Failed to read block 0x2d7: -5 [ 346.209819][T12231] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 346.388009][ T4241] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 346.467810][T12252] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3500'. [ 346.630697][ T4241] usb 3-1: Using ep0 maxpacket: 32 [ 346.689801][T12211] loop1: detected capacity change from 0 to 32768 [ 346.750603][T12211] find_entry called with index = 0 [ 346.756174][ T4241] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.777885][T12211] read_mapping_page failed! [ 346.824292][T12211] ERROR: (device loop1): txCommit: [ 346.824292][T12211] [ 346.929003][ T4241] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 346.953858][T12274] block nbd3: NBD_DISCONNECT [ 346.958579][ T4241] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.003811][ T4241] usb 3-1: Product: syz [ 347.008058][ T4241] usb 3-1: Manufacturer: syz [ 347.012686][ T4241] usb 3-1: SerialNumber: syz [ 347.080022][ T4241] usb 3-1: config 0 descriptor?? [ 347.125968][ T4241] usb 3-1: bad CDC descriptors [ 347.131339][ T4241] usb 3-1: unsupported MDLM descriptors [ 347.333412][T12295] openvswitch: netlink: Missing valid actions attribute. [ 347.351094][ T4241] usb 3-1: USB disconnect, device number 19 [ 347.390732][T12297] loop3: detected capacity change from 0 to 256 [ 347.404394][T12295] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 347.504027][T12297] FAT-fs (loop3): Directory bread(block 64) failed [ 347.538921][T12297] FAT-fs (loop3): Directory bread(block 65) failed [ 347.572299][T12297] FAT-fs (loop3): Directory bread(block 66) failed [ 347.610626][T12297] FAT-fs (loop3): Directory bread(block 67) failed [ 347.617397][T12297] FAT-fs (loop3): Directory bread(block 68) failed [ 347.699939][T12297] FAT-fs (loop3): Directory bread(block 69) failed [ 347.709776][T12297] FAT-fs (loop3): Directory bread(block 70) failed [ 347.717090][T12297] FAT-fs (loop3): Directory bread(block 71) failed [ 347.725745][T12297] FAT-fs (loop3): Directory bread(block 72) failed [ 347.732802][T12297] FAT-fs (loop3): Directory bread(block 73) failed [ 347.928061][T12315] netlink: 'syz.1.3522': attribute type 4 has an invalid length. [ 347.964474][T12315] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3522'. [ 348.052821][T12315] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 348.106696][T12318] loop4: detected capacity change from 0 to 4096 [ 348.245217][T12318] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 348.252263][T12318] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 348.293504][T12331] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3529'. [ 348.412812][ T4323] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 348.426909][ T4200] ntfs3: loop4: ntfs_evict_inode r=3 failed, -22. [ 348.455158][T12340] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3532'. [ 348.834835][T12365] loop1: detected capacity change from 0 to 128 [ 349.388547][T12400] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 349.656260][T12417] loop2: detected capacity change from 0 to 256 [ 350.015925][T12441] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 350.102698][T12447] netlink: 'syz.2.3576': attribute type 10 has an invalid length. [ 350.136751][T12447] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3576'. [ 350.165469][T12447] device bond0 entered promiscuous mode [ 350.188262][T12453] loop4: detected capacity change from 0 to 256 [ 350.194274][T12447] bridge0: port 1(bond0) entered blocking state [ 350.202195][T12447] bridge0: port 1(bond0) entered disabled state [ 350.479133][T12466] netlink: 'syz.3.3584': attribute type 6 has an invalid length. [ 350.495409][T12468] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3585'. [ 350.599638][ T4241] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 350.858487][T12494] xt_HMARK: spi-set and port-set can't be combined [ 351.004292][ T4241] usb 5-1: unable to get BOS descriptor or descriptor too short [ 351.022717][ T8037] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 351.048426][ T4241] usb 5-1: not running at top speed; connect to a high speed hub [ 351.065207][T12504] xt_recent: Unsupported userspace flags (000000b1) [ 351.117311][ T4241] usb 5-1: config 249 has an invalid interface number: 203 but max is 0 [ 351.117346][ T4241] usb 5-1: config 249 has an invalid descriptor of length 121, skipping remainder of the config [ 351.117369][ T4241] usb 5-1: config 249 has no interface number 0 [ 351.117404][ T4241] usb 5-1: config 249 interface 203 altsetting 184 endpoint 0x81 has invalid maxpacket 25839, setting to 64 [ 351.117436][ T4241] usb 5-1: config 249 interface 203 altsetting 184 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 351.117467][ T4241] usb 5-1: config 249 interface 203 has no altsetting 0 [ 351.247238][T12508] netlink: 'syz.2.3604': attribute type 27 has an invalid length. [ 351.247262][T12508] netlink: 'syz.2.3604': attribute type 3 has an invalid length. [ 351.265341][ T4241] usb 5-1: New USB device found, idVendor=0411, idProduct=0012, bcdDevice=90.39 [ 351.265376][ T4241] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.265399][ T4241] usb 5-1: Product: syz [ 351.265417][ T4241] usb 5-1: Manufacturer: syz [ 351.265434][ T4241] usb 5-1: SerialNumber: syz [ 351.274707][ T8037] usb 4-1: Using ep0 maxpacket: 32 [ 351.295954][T12453] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 351.347981][T12510] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3605'. [ 351.386559][ T8037] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 351.386592][ T8037] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 351.386615][ T8037] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 351.386636][ T8037] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 351.386660][ T8037] usb 4-1: config 1 has no interface number 0 [ 351.386736][ T8037] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 351.386764][ T8037] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.426530][ T8037] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 351.518353][T12515] loop0: detected capacity change from 0 to 512 [ 351.556181][T12515] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 351.579495][ T4241] rtl8150 5-1:249.203: couldn't find required endpoints [ 351.579605][ T4241] rtl8150: probe of 5-1:249.203 failed with error -5 [ 351.583531][ T4241] usb 5-1: USB disconnect, device number 40 [ 351.624470][T12515] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 351.631950][ T8037] snd_usb_pod 4-1:1.1: set_interface failed [ 351.662881][T12515] EXT4-fs (loop0): orphan cleanup on readonly fs [ 351.701816][ T8037] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 351.797886][ T8037] snd_usb_pod: probe of 4-1:1.1 failed with error -71 [ 351.806252][ T8037] usb 4-1: USB disconnect, device number 39 [ 351.818201][T12515] __quota_error: 8 callbacks suppressed [ 351.818221][T12515] Quota error (device loop0): v2_read_file_info: Free block number too big (0 >= 0). [ 351.835729][T12515] EXT4-fs warning (device loop0): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 351.851002][T12515] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 351.859507][T12515] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.3607: bg 0: block 40: padding at end of block bitmap is not set [ 351.874657][T12515] EXT4-fs (loop0): Remounting filesystem read-only [ 351.888206][T12515] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 351.922671][T12515] EXT4-fs (loop0): Remounting filesystem read-only [ 351.932995][T12515] EXT4-fs (loop0): 1 truncate cleaned up [ 351.940420][T12520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3609'. [ 351.946924][T12515] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsddf,errors=remount-ro,errors=remount-ro,jqfmt=vfsv0,. Quota mode: writeback. [ 352.275928][ T4791] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 352.385641][ T7973] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 352.473304][T12544] deleting an unspecified loop device is not supported. [ 352.514584][ T4791] usb 2-1: Using ep0 maxpacket: 16 [ 352.626175][ T7973] usb 3-1: Using ep0 maxpacket: 8 [ 352.739027][ T7973] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 352.775765][ T4791] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 352.795301][ T4791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.837197][ T4791] usb 2-1: Product: syz [ 352.846283][ T4791] usb 2-1: Manufacturer: syz [ 352.861524][ T4791] usb 2-1: SerialNumber: syz [ 352.884317][ T4791] usb 2-1: config 0 descriptor?? [ 352.897062][ T7973] usb 3-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice= 5.f6 [ 352.922425][ T7973] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.937008][ T4791] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 352.951053][ T7973] usb 3-1: Product: syz [ 352.957213][ T7973] usb 3-1: Manufacturer: syz [ 352.968082][ T7973] usb 3-1: SerialNumber: syz [ 352.988405][ T7973] usb 3-1: config 0 descriptor?? [ 353.038931][ T7973] gspca_main: t613-2.14.0 probing 17a1:0128 [ 353.241895][ T7973] gspca_t613: unknown sensor 0000 [ 353.247157][ T7973] t613: probe of 3-1:0.0 failed with error -22 [ 353.273244][ T7973] usb 3-1: USB disconnect, device number 20 [ 353.354647][ T4791] ssu100: probe of 2-1:0.0 failed with error -71 [ 353.382212][T12587] netlink: 'syz.4.3640': attribute type 10 has an invalid length. [ 353.392753][ T4791] usb 2-1: USB disconnect, device number 48 [ 353.427045][T12587] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3640'. [ 353.441128][T12587] device bond0 entered promiscuous mode [ 353.455008][T12587] bridge0: port 1(bond0) entered blocking state [ 353.473983][T12587] bridge0: port 1(bond0) entered disabled state [ 353.533286][T12595] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 353.827442][T12615] loop2: detected capacity change from 0 to 1024 [ 353.914917][T12619] netlink: 'syz.4.3651': attribute type 2 has an invalid length. [ 353.975743][T12615] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 354.069043][T12615] EXT4-fs error (device loop2): ext4_xattr_set_entry:1615: inode #13: comm syz.2.3650: corrupted xattr entries [ 354.169299][T12634] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3658'. [ 354.179400][T12635] openvswitch: netlink: Missing key (keys=48, expected=10000000) [ 354.341761][T12646] loop2: detected capacity change from 0 to 512 [ 354.426992][T12645] loop3: detected capacity change from 0 to 1764 [ 354.482107][T12646] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #11: comm syz.2.3660: ea_inode with extended attributes [ 354.579779][T12646] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.3660: error while reading EA inode 11 err=-117 [ 354.633446][T12661] loop1: detected capacity change from 0 to 164 [ 354.647119][T12646] EXT4-fs (loop2): 1 orphan inode deleted [ 354.655867][T12646] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,data_err=ignore,debug_want_extra_isize=0x000000000000004c,noload,delalloc,grpjquota=,bsdgroups,,errors=continue. Quota mode: none. [ 354.728966][T12661] rock: directory entry would overflow storage [ 354.738621][T12661] rock: sig=0x66, size=4, remaining=3 [ 354.780095][T12661] rock: directory entry would overflow storage [ 354.789535][T12661] rock: sig=0x66, size=4, remaining=3 [ 354.939435][T12670] loop4: detected capacity change from 0 to 256 [ 354.986940][T12676] netlink: 388 bytes leftover after parsing attributes in process `syz.3.3679'. [ 355.028797][T12678] netlink: 200 bytes leftover after parsing attributes in process `syz.2.3675'. [ 355.054185][T12670] FAT-fs (loop4): Directory bread(block 64) failed [ 355.088087][T12670] FAT-fs (loop4): Directory bread(block 65) failed [ 355.094821][T12670] FAT-fs (loop4): Directory bread(block 66) failed [ 355.127548][T12670] FAT-fs (loop4): Directory bread(block 67) failed [ 355.152320][T12686] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3683'. [ 355.173357][T12670] FAT-fs (loop4): Directory bread(block 68) failed [ 355.179976][T12670] FAT-fs (loop4): Directory bread(block 69) failed [ 355.207037][T12670] FAT-fs (loop4): Directory bread(block 70) failed [ 355.241378][T12670] FAT-fs (loop4): Directory bread(block 71) failed [ 355.279508][T12670] FAT-fs (loop4): Directory bread(block 72) failed [ 355.293676][T12670] FAT-fs (loop4): Directory bread(block 73) failed [ 355.313494][T12694] netlink: 'syz.1.3696': attribute type 4 has an invalid length. [ 355.334019][T12694] netlink: 206236 bytes leftover after parsing attributes in process `syz.1.3696'. [ 355.886942][T12726] delete_channel: no stack [ 356.002023][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 356.011985][T12734] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3708'. [ 356.205336][T12739] loop4: detected capacity change from 0 to 4096 [ 356.277950][T12739] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 356.344770][T12754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3717'. [ 356.564637][T12765] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 356.655277][T12770] afs: Unknown parameter '' [ 356.718713][T12772] loop1: detected capacity change from 0 to 1024 [ 356.963059][T12789] netlink: 'syz.4.3734': attribute type 4 has an invalid length. [ 357.037664][T12793] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 357.493169][ T4791] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 357.573732][ T4266] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 357.690088][T12832] loop0: detected capacity change from 0 to 64 [ 357.961996][ T4791] usb 4-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.02 [ 357.982211][ T4791] usb 4-1: New USB device strings: Mfr=0, Product=232, SerialNumber=255 [ 357.989035][ T4266] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 358.030142][ T4266] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 358.043866][ T4784] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 358.051583][ T4266] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 358.053229][ T4791] usb 4-1: Product: syz [ 358.099200][ T4791] usb 4-1: SerialNumber: syz [ 358.124078][ T4791] usb 4-1: config 0 descriptor?? [ 358.239761][ T4266] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 358.252998][ T4266] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 358.278713][ T4266] usb 2-1: Product: syz [ 358.282957][ T4266] usb 2-1: SerialNumber: syz [ 358.352278][ T4266] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 358.359141][ T4266] cdc_ncm 2-1:1.0: bind() failure [ 358.388565][ T4784] usb 5-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 358.398104][ T4791] ldusb 4-1:0.0: Interrupt in endpoint not found [ 358.424158][ T4784] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.463531][ T4791] usb 4-1: USB disconnect, device number 40 [ 358.485967][ T4784] usb 5-1: config 0 descriptor?? [ 358.537886][ T4784] pwc: Creative Labs Webcam 5 detected. [ 358.561785][ T8422] usb 2-1: USB disconnect, device number 49 [ 358.715355][ T4266] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 358.758190][T12866] loop0: detected capacity change from 0 to 16 [ 358.803250][T12866] erofs: (device loop0): mounted with root inode @ nid 36. [ 358.947983][ T4784] pwc: send_video_command error -71 [ 358.954129][ T4784] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 358.967120][ T4266] usb 3-1: Using ep0 maxpacket: 8 [ 358.976211][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 358.983063][ T4784] Philips webcam: probe of 5-1:0.0 failed with error -71 [ 359.002103][ T4784] usb 5-1: USB disconnect, device number 41 [ 359.097330][ T4266] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 359.126337][ T4266] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 359.348912][ T4266] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 359.367811][ T4266] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.395707][ T4266] usb 3-1: Product: syz [ 359.404973][ T4266] usb 3-1: Manufacturer: syz [ 359.409819][ T4266] usb 3-1: SerialNumber: syz [ 359.442841][ T4266] usb 3-1: config 0 descriptor?? [ 359.891640][T12880] loop0: detected capacity change from 0 to 32768 [ 359.920997][ T4266] usb 3-1: USB disconnect, device number 21 [ 359.975173][T12918] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3798'. [ 360.026413][T12880] ERROR: (device loop0): dtSearch: stack overrun! [ 360.026413][T12880] [ 360.073528][T12880] ERROR: (device loop0): remounting filesystem as read-only [ 360.083921][T12880] btstack dump: [ 360.090430][T12880] bn = 0, index = 4 [ 360.095216][T12880] bn = 0, index = 4 [ 360.101770][T12880] bn = 0, index = 4 [ 360.115950][T12880] bn = 0, index = 4 [ 360.123197][T12880] bn = 0, index = 4 [ 360.139051][T12880] bn = 0, index = 4 [ 360.146748][T12880] bn = 0, index = 4 [ 360.154482][T12880] bn = 0, index = 0 [ 360.183981][T12880] jfs_lookup: dtSearch returned -5 [ 360.269456][T12932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3805'. [ 360.302533][T12932] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 360.315070][T12932] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 360.323872][T12932] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 360.396095][T12932] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 360.430494][ T4266] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 360.514814][ T4266] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 360.522839][ T4266] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 360.564953][T12942] netlink: zone id is out of range [ 360.573218][T12942] netlink: zone id is out of range [ 360.578674][T12942] netlink: zone id is out of range [ 360.606722][T12944] Unsupported ieee802154 address type: 0 [ 360.641584][T12942] netlink: zone id is out of range [ 360.652031][T12942] netlink: zone id is out of range [ 360.660347][T12942] netlink: zone id is out of range [ 360.686858][T12942] netlink: del zone limit has 4 unknown bytes [ 360.868653][ T4266] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 361.173953][T12976] device netdevsim0 entered promiscuous mode [ 361.197214][T12978] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3827'. [ 361.401364][T12990] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3833'. [ 361.424258][T12990] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3833'. [ 361.932107][T13023] ieee802154 phy0 wpan0: encryption failed: -22 [ 361.956479][T13026] loop4: detected capacity change from 0 to 64 [ 362.085377][T13025] loop2: detected capacity change from 0 to 4096 [ 362.190275][T13025] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 362.204503][ T8037] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 362.412925][T13037] netlink: set zone limit has 4 unknown bytes [ 362.476579][ T8037] usb 1-1: Using ep0 maxpacket: 8 [ 362.533368][T13008] loop1: detected capacity change from 0 to 32768 [ 362.559295][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 362.565703][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 362.621458][ T8037] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 362.629857][ T8037] usb 1-1: config 0 has no interface number 0 [ 362.666353][ T8037] usb 1-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 362.696952][ T8037] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 362.721559][ T8037] usb 1-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x9A, skipping [ 362.732937][ T8037] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 362.741011][T13008] JBD2: Ignoring recovery information on journal [ 362.919762][ T8037] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 362.928957][ T8037] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.948525][T13008] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 362.976270][ T8037] usb 1-1: Product: syz [ 362.994853][ T8037] usb 1-1: Manufacturer: syz [ 362.999517][ T8037] usb 1-1: SerialNumber: syz [ 363.038888][ T8037] usb 1-1: config 0 descriptor?? [ 363.059139][T13008] ocfs2: Unmounting device (7,1) on (node local) [ 363.098644][ T8037] iowarrior 1-1:0.186: no interrupt-in endpoint found [ 363.390698][T13082] mip6: mip6_destopt_init_state: spi is not 0: 1114112 [ 363.649622][T13096] netlink: 'syz.3.3884': attribute type 16 has an invalid length. [ 363.669969][T13096] netlink: 'syz.3.3884': attribute type 3 has an invalid length. [ 363.694304][ T7] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 363.711628][T13096] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3884'. [ 364.179381][T13127] loop3: detected capacity change from 0 to 256 [ 364.196382][T13128] netlink: 'syz.2.3899': attribute type 21 has an invalid length. [ 364.209967][ T7] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 364.220170][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.231926][ T7] usb 5-1: Product: syz [ 364.243717][ T7] usb 5-1: Manufacturer: syz [ 364.258563][ T7] usb 5-1: SerialNumber: syz [ 364.283192][ T7] usb 5-1: config 0 descriptor?? [ 364.288926][T13127] FAT-fs (loop3): Directory bread(block 64) failed [ 364.313233][T13127] FAT-fs (loop3): Directory bread(block 65) failed [ 364.349711][T13127] FAT-fs (loop3): Directory bread(block 66) failed [ 364.359204][ T7] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 364.384329][T13127] FAT-fs (loop3): Directory bread(block 67) failed [ 364.391072][T13127] FAT-fs (loop3): Directory bread(block 68) failed [ 364.398617][T13127] FAT-fs (loop3): Directory bread(block 69) failed [ 364.405994][T13127] FAT-fs (loop3): Directory bread(block 70) failed [ 364.413109][T13127] FAT-fs (loop3): Directory bread(block 71) failed [ 364.419814][T13127] FAT-fs (loop3): Directory bread(block 72) failed [ 364.429481][T13127] FAT-fs (loop3): Directory bread(block 73) failed [ 364.639117][T13142] unsupported nlmsg_type 40 [ 364.764907][ T4784] usb 1-1: USB disconnect, device number 41 [ 364.775403][ T7] gspca_sunplus: reg_w_riv err -71 [ 364.780646][ T7] sunplus: probe of 5-1:0.0 failed with error -71 [ 364.829250][ T7] usb 5-1: USB disconnect, device number 42 [ 364.987293][T13162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3916'. [ 365.027423][T13162] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3916'. [ 365.143204][T13167] loop1: detected capacity change from 0 to 1024 [ 365.333786][T13182] usb usb7: usbfs: process 13182 (syz.4.3926) did not claim interface 0 before use [ 365.713476][T13201] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3936'. [ 365.754948][T13201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3936'. [ 366.023835][T13226] netlink: 'syz.0.3947': attribute type 1 has an invalid length. [ 366.081116][T13231] IPv6: NLM_F_CREATE should be specified when creating new route [ 366.138454][T13233] loop2: detected capacity change from 0 to 512 [ 366.191483][T13233] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 366.240447][T13233] EXT4-fs (loop2): 1 truncate cleaned up [ 366.240480][T13233] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,auto_da_alloc=0x0000000000000eb0,debug_want_extra_isize=0x0000000000000068,lazytime,resuid=0x0000000000000000,inode_readahead_blks=0x0000000004000000,noquota,,errors=continue. Quota mode: none. [ 366.350983][ T4784] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 366.404760][ C0] vkms_vblank_simulate: vblank timer overrun [ 366.575055][ T4784] usb 4-1: Using ep0 maxpacket: 16 [ 366.740356][ T4784] usb 4-1: unable to get BOS descriptor or descriptor too short [ 366.818678][ T4784] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 366.849063][ T4784] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 366.904463][ T4784] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 367.078096][ T4784] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 367.094502][ T4784] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.151174][ T4784] usb 4-1: Product: syz [ 367.165650][ T4784] usb 4-1: Manufacturer: syz [ 367.170339][ T4784] usb 4-1: SerialNumber: syz [ 367.221860][T13247] loop4: detected capacity change from 0 to 32768 [ 367.477696][ T4784] snd-ua101 4-1:1.1: invalid bNumEndpoints [ 367.486795][ T4784] snd-ua101 4-1:1.0: invalid num_altsetting [ 367.497902][ T7] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 367.505954][ T4266] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 367.537915][ T4784] usb 4-1: USB disconnect, device number 41 [ 367.688826][T13279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3974'. [ 367.914756][ T7] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 367.925185][ T4266] usb 2-1: config 0 has an invalid interface number: 231 but max is 0 [ 367.943443][ T4266] usb 2-1: config 0 has no interface number 0 [ 367.950675][ T7] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 367.960354][ T4266] usb 2-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 367.981797][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.068839][ T7] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 368.152251][T13299] netlink: 'syz.4.3967': attribute type 2 has an invalid length. [ 368.182028][ T4266] usb 2-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 368.197998][ T4266] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.215817][ T4266] usb 2-1: Product: syz [ 368.225086][ T4266] usb 2-1: Manufacturer: syz [ 368.229737][ T4266] usb 2-1: SerialNumber: syz [ 368.243965][ T4266] usb 2-1: config 0 descriptor?? [ 368.290839][T13265] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 368.318655][ T4266] plusb 2-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.1-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 02:74:48:b4:c2:c8 [ 368.339632][T13306] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 368.375208][T13306] overlayfs: missing 'lowerdir' [ 368.690963][ T4784] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 368.703630][T13324] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3993'. [ 368.843685][T13335] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 368.933574][ T4784] usb 5-1: Using ep0 maxpacket: 16 [ 369.045410][ T4784] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 369.058297][ T4784] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.070889][ T4784] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 369.084257][ T7] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 369.096039][ T4784] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 369.113439][ T4784] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 369.127155][ T4784] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 369.147886][ T8037] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 369.213342][ T4784] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 369.223520][ T4784] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 369.231767][ T4784] usb 5-1: SerialNumber: syz [ 369.248324][ T4241] usb 2-1: USB disconnect, device number 50 [ 369.260818][T13309] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 369.260993][ T4241] plusb 2-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.1-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 369.297353][ T7] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 369.308308][ T7] stv0680 1-1:4.0: last error: 249, command = 0xaf [ 369.317481][ T7] usb 1-1: USB disconnect, device number 42 [ 369.391773][ T8037] usb 4-1: Using ep0 maxpacket: 32 [ 369.523219][ T4784] cdc_acm: probe of 5-1:1.0 failed with error -12 [ 369.525667][ T8037] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 369.547398][ T8037] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 369.567213][ T8037] usb 4-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 369.576774][ T8037] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.579667][ T4784] usb 5-1: USB disconnect, device number 43 [ 369.601538][ T8037] usb 4-1: config 0 descriptor?? [ 369.659119][ T8037] rndis_wlan 4-1:0.0: skipping garbage [ 369.664771][ T8037] usb 4-1: bad CDC descriptors [ 369.689090][ T8037] rndis_host 4-1:0.0: skipping garbage [ 369.699453][ T8037] usb 4-1: bad CDC descriptors [ 369.704701][ T8037] cdc_acm 4-1:0.0: skipping garbage [ 369.820287][T13361] netlink: 'syz.2.3998': attribute type 7 has an invalid length. [ 369.836616][T13361] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3998'. [ 369.873464][ T8037] usb 4-1: USB disconnect, device number 42 [ 370.325983][T13388] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4011'. [ 370.577968][T13407] netlink: 'syz.0.4019': attribute type 1 has an invalid length. [ 370.632595][T13412] netlink: 'syz.1.4021': attribute type 1 has an invalid length. [ 370.676913][T13412] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.4021'. [ 370.702283][T13412] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4021'. [ 370.754395][ T4784] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 370.850261][T13424] netlink: 'syz.0.4025': attribute type 1 has an invalid length. [ 370.887715][T13424] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4025'. [ 370.939352][T13429] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.4028'. [ 370.985153][ T4784] usb 4-1: Using ep0 maxpacket: 32 [ 370.990610][T13429] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 371.067407][T13435] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4031'. [ 371.076681][T13437] netlink: 'syz.0.4030': attribute type 21 has an invalid length. [ 371.122496][T13437] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4030'. [ 371.140704][ T4784] usb 4-1: config 4 has an invalid interface number: 128 but max is 0 [ 371.164699][ T4784] usb 4-1: config 4 has no interface number 0 [ 371.170871][ T4784] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.203407][T13441] loop4: detected capacity change from 0 to 2048 [ 371.259435][ T4784] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.274327][T13441] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 371.307861][ T4784] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 371.353363][ T4784] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.470863][ T4784] hub 4-1:4.128: USB hub found [ 371.674578][ T4784] hub 4-1:4.128: 21 ports detected [ 371.679915][ T4784] hub 4-1:4.128: Using single TT (err -22) [ 371.742088][ T4784] hub 4-1:4.128: insufficient power available to use all downstream ports [ 371.743871][T13452] loop2: detected capacity change from 0 to 4096 [ 371.873090][T13452] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 371.880528][ T4784] hub 4-1:4.128: hub_hub_status failed (err = -71) [ 371.887786][ T4784] hub 4-1:4.128: config failed, can't get hub status (err -71) [ 371.962533][T13452] ntfs3: loop2: Failed to load $Extend. [ 371.993349][ T4784] usb 4-1: USB disconnect, device number 43 [ 372.285806][T13489] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4052'. [ 372.302376][T13491] loop2: detected capacity change from 0 to 512 [ 372.383727][T13491] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 372.482429][T13502] ieee802154 phy0 wpan0: encryption failed: -22 [ 372.496450][T13491] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.4050: invalid indirect mapped block 9 (level 0) [ 372.537279][T13491] EXT4-fs (loop2): 1 truncate cleaned up [ 372.551281][T13491] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000000004000,,errors=continue. Quota mode: none. [ 372.619650][T13508] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 373.357905][T13559] loop1: detected capacity change from 0 to 512 [ 373.470557][T13566] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4083'. [ 373.550711][T13559] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 373.586616][T13559] ext4 filesystem being mounted at /782/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 373.732810][T13559] Quota error (device loop1): find_tree_dqentry: Getting block too big (33554437 >= 6) [ 373.790865][T13559] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 373.846469][T13559] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.4081: Failed to acquire dquot type 0 [ 373.898332][T13594] loop0: detected capacity change from 0 to 256 [ 373.907683][T13596] binder: 13595:13596 ioctl c0306201 200000000080 returned -14 [ 374.050020][T13594] FAT-fs (loop0): Directory bread(block 64) failed [ 374.082402][T13594] FAT-fs (loop0): Directory bread(block 65) failed [ 374.089066][T13594] FAT-fs (loop0): Directory bread(block 66) failed [ 374.141718][T13608] ksmbd: Unknown IPC event: 10, ignore. [ 374.169302][T13594] FAT-fs (loop0): Directory bread(block 67) failed [ 374.184285][T13594] FAT-fs (loop0): Directory bread(block 68) failed [ 374.199035][T13594] FAT-fs (loop0): Directory bread(block 69) failed [ 374.207041][T13594] FAT-fs (loop0): Directory bread(block 70) failed [ 374.216371][T13594] FAT-fs (loop0): Directory bread(block 71) failed [ 374.248999][T13594] FAT-fs (loop0): Directory bread(block 72) failed [ 374.255645][T13594] FAT-fs (loop0): Directory bread(block 73) failed [ 375.012178][T13644] loop4: detected capacity change from 0 to 256 [ 375.277651][T13663] __nla_validate_parse: 3 callbacks suppressed [ 375.277670][T13663] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4127'. [ 375.328685][T13663] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4127'. [ 375.543122][T13668] block device autoloading is deprecated and will be removed. [ 375.603923][T13671] loop0: detected capacity change from 0 to 4096 [ 375.733051][T13671] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 375.789623][T13671] UDF-fs: Scanning with blocksize 512 failed [ 375.887472][T13671] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 375.908163][T13687] Zero length message leads to an empty skb [ 375.950020][T13671] UDF-fs: error (device loop0): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1328) [ 376.017396][T13671] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 1328) has too big (2088) entry at pos 0 [ 376.137471][T13695] loop4: detected capacity change from 0 to 64 [ 376.327356][T13695] MINIX-fs: mounting file system with errors, running fsck is recommended [ 376.399950][T13695] Trying to free block not in datazone [ 376.539274][T13673] loop2: detected capacity change from 0 to 32768 [ 376.690171][T13725] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20002 [ 376.706210][T13673] XFS (loop2): Mounting V5 Filesystem [ 376.775428][T13735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4160'. [ 376.803358][T13735] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 376.923735][T13673] XFS (loop2): Ending clean mount [ 376.940361][T13735] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 376.992662][T13673] XFS (loop2): Quotacheck needed: Please wait. [ 377.006973][T13735] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 377.030887][T13733] loop1: detected capacity change from 0 to 4096 [ 377.077636][T13735] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 377.111514][T13733] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 377.211085][T13673] XFS (loop2): Quotacheck: Done. [ 377.298040][T13735] IPv6: ADDRCONF(NETDEV_CHANGE): bridge1: link becomes ready [ 377.341149][T13748] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4165'. [ 377.354643][ T4199] XFS (loop2): Unmounting Filesystem [ 377.365688][T13748] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 377.601791][T13756] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 377.665993][T13756] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 377.688727][T13756] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 377.809823][T13756] device wlan0 left promiscuous mode [ 377.836847][T13756] device bond1 left promiscuous mode [ 378.026134][T13770] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4177'. [ 379.209639][T13837] program syz.2.4209 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 379.319219][T13838] loop4: detected capacity change from 0 to 2048 [ 379.332177][T13848] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4215'. [ 379.358293][T13848] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4215'. [ 379.397514][T13849] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 379.552466][T13858] No such timeout policy "syz1" [ 379.562424][ T8037] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 380.000485][ T8037] usb 1-1: unable to get BOS descriptor or descriptor too short [ 380.015733][T13881] loop2: detected capacity change from 0 to 2048 [ 380.056041][ T8037] usb 1-1: not running at top speed; connect to a high speed hub [ 380.156547][T13891] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 380.175028][ T8037] usb 1-1: config 5 has an invalid interface number: 246 but max is 0 [ 380.219994][ T8037] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 380.264215][ T8037] usb 1-1: config 5 has no interface number 0 [ 380.299018][ T8037] usb 1-1: config 5 interface 246 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 380.348400][ T8037] usb 1-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 380.384826][ T8037] usb 1-1: config 5 interface 246 has no altsetting 0 [ 380.530949][T13907] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4241'. [ 380.589166][ T8037] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 380.607721][ T8037] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.643878][ T8037] usb 1-1: Product: syz [ 380.652793][ T8037] usb 1-1: Manufacturer: syz [ 380.657450][ T8037] usb 1-1: SerialNumber: syz [ 380.801736][ T4784] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 380.832285][ T7] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 381.046415][ T4784] usb 4-1: Using ep0 maxpacket: 16 [ 381.061170][ T8037] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 381.090963][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 381.108063][ T144] usb 1-1: Failed to submit usb control message: -71 [ 381.126141][ T144] usb 1-1: unable to send the bmi data to the device: -71 [ 381.127973][ T8037] usb 1-1: USB disconnect, device number 43 [ 381.146970][ T144] usb 1-1: unable to get target info from device [ 381.154045][ T144] usb 1-1: could not get target info (-71) [ 381.160458][ T144] usb 1-1: could not probe fw (-71) [ 381.274128][ T7] usb 5-1: unable to get BOS descriptor or descriptor too short [ 381.324231][ T4784] usb 4-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 381.342155][ T4784] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.352835][ T7] usb 5-1: config 5 has an invalid interface number: 110 but max is 0 [ 381.362291][ T7] usb 5-1: config 5 has no interface number 0 [ 381.368451][ T7] usb 5-1: config 5 interface 110 altsetting 4 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 381.380020][ T4784] usb 4-1: Product: syz [ 381.394622][ T4784] usb 4-1: Manufacturer: syz [ 381.407073][ T4784] usb 4-1: SerialNumber: syz [ 381.422355][ T7] usb 5-1: config 5 interface 110 altsetting 4 endpoint 0xC has an invalid bInterval 128, changing to 11 [ 381.439416][ T7] usb 5-1: config 5 interface 110 has no altsetting 0 [ 381.622961][ T7] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=b0.b7 [ 381.641919][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.649982][ T7] usb 5-1: Product: syz [ 381.692119][ T7] usb 5-1: Manufacturer: syz [ 381.725215][ T7] usb 5-1: SerialNumber: syz [ 381.838943][ T4784] snd-usb-audio: probe of 4-1:222.0 failed with error -71 [ 381.860073][ T4784] usb 4-1: USB disconnect, device number 44 [ 382.052410][ T7] adutux 5-1:5.110: interrupt endpoints not found [ 382.079398][ T7] usb 5-1: USB disconnect, device number 44 [ 382.314111][ T8033] udevd[8033]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 382.442922][T13998] loop1: detected capacity change from 0 to 64 [ 382.479206][T14002] loop3: detected capacity change from 0 to 22 [ 382.491138][T14003] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 382.565131][T14002] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 382.608271][T14002] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 382.612043][T14009] netlink: 'syz.2.4293': attribute type 3 has an invalid length. [ 382.757428][T14017] loop1: detected capacity change from 0 to 2048 [ 382.820534][T14017] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 382.959397][T14025] loop4: detected capacity change from 0 to 1024 [ 383.024503][T14025] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 383.095163][T14025] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,barrier,nomblk_io_submit,journal_dev=0x0000000000000004,nombcache,noquota,,errors=continue. Quota mode: none. [ 383.232176][T14038] loop0: detected capacity change from 0 to 4096 [ 383.439686][T14053] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 383.447253][T14055] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4314'. [ 383.450940][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 383.726293][T14065] device batadv0 entered promiscuous mode [ 383.924347][T14080] netlink: 'syz.3.4325': attribute type 1 has an invalid length. [ 383.965762][T14080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4325'. [ 384.205149][ T8422] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 384.318738][T14100] nftables ruleset with unbound chain [ 384.351777][T14105] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 384.530519][T14108] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4340'. [ 384.540768][T14109] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4339'. [ 384.597040][ T8422] usb 2-1: unable to get BOS descriptor or descriptor too short [ 384.671486][ T8422] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 384.692378][ T8422] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 384.867415][ T8422] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 384.878454][ T8422] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.889757][ T8422] usb 2-1: Product: syz [ 384.894308][ T8422] usb 2-1: Manufacturer: syz [ 384.941696][ T8422] usb 2-1: SerialNumber: syz [ 385.000531][ T8422] usb 2-1: selecting invalid altsetting 1 [ 385.017040][ T8422] usb 2-1: unit 6 not found! [ 385.069783][ T8422] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 385.094169][T14139] x_tables: duplicate underflow at hook 3 [ 385.235048][ T8422] usb 2-1: USB disconnect, device number 51 [ 385.320732][T14156] overlayfs: missing 'lowerdir' [ 385.446576][ T8033] udevd[8033]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 385.534706][ T1324] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 385.718665][T14178] netlink: 'syz.4.4369': attribute type 1 has an invalid length. [ 385.751348][T14178] netlink: 'syz.4.4369': attribute type 2 has an invalid length. [ 385.770882][T14178] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4369'. [ 385.836814][T14182] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4371'. [ 385.883558][ T1324] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 385.920518][ T1324] usb 4-1: config 0 interface 0 has no altsetting 0 [ 385.962869][T14190] loop1: detected capacity change from 0 to 128 [ 386.088468][ T1324] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 386.109425][ T1324] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.142194][ T1324] usb 4-1: Product: syz [ 386.162491][ T1324] usb 4-1: Manufacturer: syz [ 386.172470][ T1324] usb 4-1: SerialNumber: syz [ 386.191677][ T1324] usb 4-1: config 0 descriptor?? [ 386.248579][ T1324] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 386.326169][ T1324] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 386.356800][T14201] loop0: detected capacity change from 0 to 4096 [ 386.397079][ T1324] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 386.425761][ T1324] usb 4-1: media controller created [ 386.444538][T14201] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 386.466444][T14216] loop4: detected capacity change from 0 to 64 [ 386.529192][ T1324] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 386.558729][T14216] MINIX-fs: bad superblock [ 386.716969][ T1324] DVB: Unable to find symbol tda10046_attach() [ 386.724978][ T1324] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 386.756162][T14229] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4394'. [ 386.763910][ T1324] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 386.804220][T14229] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4394'. [ 386.818619][ T1324] dvb_usb_m920x: probe of 4-1:0.0 failed with error -71 [ 386.856325][ T1324] usb 4-1: USB disconnect, device number 45 [ 386.857904][T14229] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4394'. [ 386.902775][T14232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4395'. [ 386.965129][T14230] loop2: detected capacity change from 0 to 4096 [ 386.982968][ T4905] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 387.227068][T14239] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 387.253803][ T4905] usb 2-1: Using ep0 maxpacket: 16 [ 387.387851][ T4905] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 387.402792][ T4905] usb 2-1: config 0 has no interface number 0 [ 387.408955][ T4905] usb 2-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 387.598639][ T4905] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 387.607753][ T4905] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 387.661352][ T4905] usb 2-1: Product: syz [ 387.679319][ T4905] usb 2-1: SerialNumber: syz [ 387.717076][ T4905] usb 2-1: config 0 descriptor?? [ 387.761359][T14227] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 387.787260][ T4905] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 388.098978][T14286] loop0: detected capacity change from 0 to 256 [ 388.195739][T14286] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 388.261894][T14286] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 388.672968][T14313] loop0: detected capacity change from 0 to 64 [ 388.679591][ T1324] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 388.767685][T14315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4436'. [ 389.187186][ T1324] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 389.198679][ T1324] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.214114][ T1324] usb 4-1: Product: syz [ 389.222470][ T1324] usb 4-1: Manufacturer: syz [ 389.227127][ T1324] usb 4-1: SerialNumber: syz [ 389.328201][T14343] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4450'. [ 389.357921][T14343] tc_dump_action: action bad kind [ 389.527259][ T1324] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 46 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 389.553627][ T4905] usb 2-1: USB disconnect, device number 52 [ 389.566719][ T1324] usb 4-1: USB disconnect, device number 46 [ 389.606915][ T1324] usblp0: removed [ 389.813350][T14370] loop4: detected capacity change from 0 to 8 [ 389.841499][T14372] netlink: 'syz.1.4464': attribute type 10 has an invalid length. [ 389.902215][T14370] SQUASHFS error: Failed to read block 0x1ec: -5 [ 389.913884][T14372] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 389.929150][T14370] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 390.116428][T14385] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4470'. [ 390.165170][T14385] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4470'. [ 390.312773][T14399] netlink: 'syz.2.4478': attribute type 8 has an invalid length. [ 390.459853][T14412] PKCS8: Unsupported PKCS#8 version [ 390.546387][T14415] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 390.618859][T14424] loop2: detected capacity change from 0 to 512 [ 390.689858][T14424] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 390.734619][T14424] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.4489: inode #15: comm syz.2.4489: iget: illegal inode # [ 390.754617][T14424] EXT4-fs (loop2): Remounting filesystem read-only [ 390.762668][T14424] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.4489: couldn't read orphan inode 15 (err -117) [ 390.778150][T14424] EXT4-fs (loop2): Remounting filesystem read-only [ 390.784745][T14424] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,errors=remount-ro,data=journal,usrjquota=,init_itable=0x0000000000000022,. Quota mode: none. [ 390.932977][T14424] EXT4-fs error (device loop2): ext4_lookup:1858: comm syz.2.4489: inode #15: comm syz.2.4489: iget: illegal inode # [ 390.963594][T14424] EXT4-fs (loop2): Remounting filesystem read-only [ 391.256348][T14456] loop3: detected capacity change from 0 to 2048 [ 391.365128][ T4905] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 391.403037][T14467] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 391.517796][T14456] attempt to access beyond end of device [ 391.517796][T14456] loop3: rw=0, want=2198922592330, limit=2048 [ 391.555885][T14456] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=1) [ 391.607054][ T4905] usb 2-1: Using ep0 maxpacket: 32 [ 391.628489][T14475] __nla_validate_parse: 1 callbacks suppressed [ 391.628507][T14475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4514'. [ 391.748068][ T4905] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.801781][T14428] loop4: detected capacity change from 0 to 40427 [ 391.893901][T14428] F2FS-fs (loop4): inline encryption not supported [ 391.923862][T14428] F2FS-fs (loop4): invalid crc value [ 391.980387][ T4905] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 391.999087][ T4905] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 392.007319][ T4905] usb 2-1: Product: syz [ 392.034410][T14428] F2FS-fs (loop4): Found nat_bits in checkpoint [ 392.082763][ T4905] usb 2-1: Manufacturer: syz [ 392.106817][ T4905] usb 2-1: SerialNumber: syz [ 392.137102][ T4905] usb 2-1: config 0 descriptor?? [ 392.219087][ T4905] hub 2-1:0.0: bad descriptor, ignoring hub [ 392.226349][ T4905] hub: probe of 2-1:0.0 failed with error -5 [ 392.259351][T14428] F2FS-fs (loop4): Start checkpoint disabled! [ 392.343091][T14428] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 392.512181][T14500] netlink: 'syz.2.4525': attribute type 1 has an invalid length. [ 392.532893][T14500] netlink: 'syz.2.4525': attribute type 2 has an invalid length. [ 392.546131][T14500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4525'. [ 392.560515][ T4905] usb 2-1: USB disconnect, device number 53 [ 392.821227][ T9] attempt to access beyond end of device [ 392.821227][ T9] loop4: rw=2049, want=40992, limit=40427 [ 392.911988][T14512] device geneve0 entered promiscuous mode [ 393.239687][T14527] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.4538'. [ 393.340587][T14530] netlink: 'syz.2.4541': attribute type 1 has an invalid length. [ 393.424724][T14530] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4541'. [ 393.796639][T14552] netlink: 'syz.1.4550': attribute type 12 has an invalid length. [ 394.141823][T14570] loop2: detected capacity change from 0 to 512 [ 394.215305][T14570] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 394.233342][T14576] loop4: detected capacity change from 0 to 16 [ 394.239823][T14570] EXT4-fs (loop2): Mount option "dax=always" incompatible with ext3 [ 394.286496][T14576] erofs: (device loop4): mounted with root inode @ nid 36. [ 394.307493][T14520] loop0: detected capacity change from 0 to 40427 [ 394.317641][T14576] erofs: (device loop4): find_target_block_classic: corrupted dir block 0 @ nid 36 [ 394.374198][T14570] gfs2: Unexpected value for 'barrier' [ 394.388229][T14580] netlink: 'syz.3.4565': attribute type 10 has an invalid length. [ 394.441689][T14520] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 394.464642][T14520] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 394.474734][T14580] team0: Device xfrm0 is of different type [ 394.581373][T14520] F2FS-fs (loop0): Found nat_bits in checkpoint [ 394.635592][ T150] block nbd1: Attempted send on invalid socket [ 394.641915][ T150] blk_update_request: I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 394.665198][ T1508] block nbd1: Attempted send on invalid socket [ 394.671401][ T1508] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 394.684136][T14592] netlink: 'syz.4.4569': attribute type 10 has an invalid length. [ 394.701527][ T150] block nbd1: Attempted send on invalid socket [ 394.709500][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 394.730782][ T1508] block nbd1: Attempted send on invalid socket [ 394.737159][ T1508] blk_update_request: I/O error, dev nbd1, sector 18 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 394.753021][ T150] block nbd1: Attempted send on invalid socket [ 394.759359][ T150] blk_update_request: I/O error, dev nbd1, sector 30 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 394.769923][T14592] device syz_tun entered promiscuous mode [ 394.776870][T14592] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 394.778415][ T150] block nbd1: Attempted send on invalid socket [ 394.793476][ T150] blk_update_request: I/O error, dev nbd1, sector 36 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 394.804633][T14590] VFS: unable to find oldfs superblock on device nbd1 [ 394.818876][T14520] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 394.832671][ T4323] bridge0: port 1(bond0) entered blocking state [ 394.839047][ T4323] bridge0: port 1(bond0) entered forwarding state [ 394.895266][T14520] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 394.972240][ T1324] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 394.997914][T14520] attempt to access beyond end of device [ 394.997914][T14520] loop0: rw=2049, want=53256, limit=40427 [ 395.033296][T14608] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4576'. [ 395.062961][T14610] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4577'. [ 395.134819][ T4189] attempt to access beyond end of device [ 395.134819][ T4189] loop0: rw=2049, want=45104, limit=40427 [ 395.289150][T14622] netlink: 'syz.1.4585': attribute type 12 has an invalid length. [ 395.320808][T14622] netlink: 197276 bytes leftover after parsing attributes in process `syz.1.4585'. [ 395.331086][ T1324] usb 4-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 395.495535][ T1324] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 395.532236][ T1324] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.558691][ T1324] usb 4-1: Product: syz [ 395.563473][ T1324] usb 4-1: Manufacturer: syz [ 395.568219][ T1324] usb 4-1: SerialNumber: syz [ 395.867935][ T1324] usb 4-1: Cannot retrieve CPort count: -71 [ 395.874149][ T1324] usb 4-1: Cannot retrieve CPort count: -71 [ 395.900247][ T1324] es2_ap_driver: probe of 4-1:246.0 failed with error -71 [ 395.955396][T14646] loop1: detected capacity change from 0 to 512 [ 395.968666][ T1324] usb 4-1: USB disconnect, device number 47 [ 396.146367][T14646] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 396.177550][T14646] ext4 filesystem being mounted at /876/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 396.412500][T14671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4608'. [ 396.699530][T14690] xt_recent: hitcount (262144) is larger than allowed maximum (255) [ 396.931512][T14703] comedi comedi2: dt2815: I/O port conflict (0xfffffffffffffff2,2) [ 397.225136][T14721] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4630'. [ 397.280940][T14724] netlink: 'syz.4.4633': attribute type 10 has an invalid length. [ 397.376111][T14724] team0: Port device wlan1 added [ 397.539932][T14740] netlink: 'syz.0.4639': attribute type 32 has an invalid length. [ 397.704323][T14746] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 397.777235][T14752] netlink: 'syz.1.4647': attribute type 46 has an invalid length. [ 397.821591][T14752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4647'. [ 398.026458][T14770] netlink: 'syz.4.4656': attribute type 6 has an invalid length. [ 398.139649][T14776] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4658'. [ 398.163400][T14776] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4658'. [ 398.272911][ T1324] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 398.287681][T14786] loop4: detected capacity change from 0 to 164 [ 398.549917][T14797] program syz.4.4668 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 398.608216][ T1324] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 398.628663][ T1324] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 398.641358][T14800] device bridge1 entered promiscuous mode [ 398.673408][ T1324] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 398.702475][ T1324] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 398.738515][ T1324] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 398.761288][ T1324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.798108][ T1324] usb 4-1: config 0 descriptor?? [ 398.948086][ T7] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 399.028048][ T1324] hdpvr 4-1:0.0: firmware version 0xd dated ­";W|۱adTUK> }1vN`Y# [ 399.152265][T14832] ipt_REJECT: ECHOREPLY no longer supported. [ 399.204602][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 399.232757][ T1324] hdpvr 4-1:0.0: device init failed [ 399.238455][ T1324] hdpvr: probe of 4-1:0.0 failed with error -12 [ 399.275156][ T1324] usb 4-1: USB disconnect, device number 48 [ 399.342148][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 399.369863][ T7] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 399.578083][ T7] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 399.602655][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.621053][ T7] usb 1-1: Product: syz [ 399.633715][ T7] usb 1-1: Manufacturer: syz [ 399.643322][ T7] usb 1-1: SerialNumber: syz [ 399.654358][ T7] usb 1-1: config 0 descriptor?? [ 399.690483][ T8037] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 399.836696][T14868] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4705'. [ 399.923037][ T8037] usb 5-1: Using ep0 maxpacket: 8 [ 399.945868][ T8422] usb 1-1: USB disconnect, device number 44 [ 400.229243][ T8037] usb 5-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice= 0.40 [ 400.247954][ T8037] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.262888][ T8037] usb 5-1: Product: syz [ 400.267555][ T8037] usb 5-1: Manufacturer: syz [ 400.274105][ T8037] usb 5-1: SerialNumber: syz [ 400.476086][T14905] loop1: detected capacity change from 0 to 2048 [ 400.486593][T14907] xt_TCPMSS: Only works on TCP SYN packets [ 400.632238][ T8037] usb 5-1: selecting invalid altsetting 1 [ 400.655148][T14905] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 400.679751][ T8037] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 400.688220][ T8037] usb 5-1: USB disconnect, device number 45 [ 400.860013][T14928] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4734'. [ 400.964530][ T8033] udevd[8033]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 401.409318][T14952] xt_hashlimit: max too large, truncated to 1048576 [ 401.507711][T14957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4747'. [ 401.624091][T14963] netlink: 'syz.1.4750': attribute type 1 has an invalid length. [ 401.662860][T14963] netlink: 200 bytes leftover after parsing attributes in process `syz.1.4750'. [ 401.705344][T14969] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4753'. [ 401.719688][T14969] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4753'. [ 401.736243][T14969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4753'. [ 401.747044][T14969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4753'. [ 401.843376][T14971] netlink: 'syz.2.4754': attribute type 1 has an invalid length. [ 401.857659][T14971] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4754'. [ 401.898837][ T4784] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 401.945350][ T1324] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 402.123610][T14978] loop0: detected capacity change from 0 to 8192 [ 402.172482][T14978] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 402.209189][T14978] REISERFS (device loop0): using ordered data mode [ 402.215756][T14978] reiserfs: using flush barriers [ 402.224781][T14978] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 402.242506][T14978] REISERFS (device loop0): checking transaction log (loop0) [ 402.328158][ T1324] usb 5-1: not running at top speed; connect to a high speed hub [ 402.353102][T14978] REISERFS (device loop0): Using tea hash to sort names [ 402.362237][T14978] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 402.384373][ T4784] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 402.406686][ T4784] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.415296][ T1324] usb 5-1: config 1 interface 0 altsetting 4 endpoint 0x1 has invalid maxpacket 624, setting to 64 [ 402.436723][ T1324] usb 5-1: config 1 interface 0 has no altsetting 0 [ 402.443915][ T4784] usb 4-1: Product: syz [ 402.467702][ T4784] usb 4-1: Manufacturer: syz [ 402.476382][ T4784] usb 4-1: SerialNumber: syz [ 402.500962][T14996] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4766'. [ 402.544366][ T4784] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 402.566088][T14996] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4766'. [ 402.589724][ T1324] usb 5-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 402.595549][T14996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4766'. [ 402.616108][ T1324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.643951][ T1324] usb 5-1: Product: syz [ 402.652293][ T1324] usb 5-1: Manufacturer: syz [ 402.663035][ T1324] usb 5-1: SerialNumber: syz [ 402.691462][T14967] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 402.924123][ T4784] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 402.971628][ T1324] usblp0: Disabling reads from problematic bidirectional printer [ 403.023208][ T1324] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 46 if 0 alt 4 proto 1 vid 0x03F0 pid 0x0004 [ 403.051933][ T1324] usb 5-1: USB disconnect, device number 46 [ 403.075333][ T1324] usblp0: removed [ 403.127072][ T8422] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 403.167074][ T4791] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 403.230709][T15006] loop0: detected capacity change from 0 to 4096 [ 403.311115][T15006] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 403.332606][T15006] ntfs3: loop0: Failed to load $Extend. [ 403.362594][ T8422] usb 3-1: Using ep0 maxpacket: 32 [ 403.410754][ T4784] usb 2-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 403.427989][ T4784] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.456137][ T4784] usb 2-1: Product: syz [ 403.460392][ T4784] usb 2-1: Manufacturer: syz [ 403.465043][ T4784] usb 2-1: SerialNumber: syz [ 403.500654][ T4784] usb 2-1: config 0 descriptor?? [ 403.511743][ T8422] usb 3-1: unable to get BOS descriptor or descriptor too short [ 403.551499][ T4784] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 403.588975][ T1324] usb 4-1: USB disconnect, device number 49 [ 403.611146][ T8422] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 403.622320][ T8422] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 403.875336][ T8422] usb 3-1: string descriptor 0 read error: -22 [ 403.882837][ T8422] usb 3-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 403.908154][ T8422] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.028341][T15026] loop4: detected capacity change from 0 to 512 [ 404.064889][T15026] EXT4-fs (loop4): Ignoring removed bh option [ 404.089802][ T4784] gspca_m5602: Failed to find a sensor [ 404.102901][ T4784] ALi m5602 2-1:0.0: ALi m5602 webcam failed [ 404.144340][ T4784] usb 2-1: USB disconnect, device number 54 [ 404.173783][ T4791] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 404.191334][ T4791] ath9k_htc: Failed to initialize the device [ 404.200707][T15026] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,sysvgroups,,errors=continue. Quota mode: writeback. [ 404.213853][ T1324] usb 4-1: ath9k_htc: USB layer deinitialized [ 404.278218][T15026] ext4 filesystem being mounted at /969/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 404.425695][ T4791] usb 3-1: USB disconnect, device number 22 [ 404.721653][T15053] loop3: detected capacity change from 0 to 128 [ 404.839701][T15053] VFS: Found a Xenix FS (block size = 1024) on device loop3 [ 405.003422][ T4194] sysv_free_block: flc_count > flc_size [ 405.032685][ T4194] sysv_free_block: flc_count > flc_size [ 405.064936][ T4194] sysv_free_block: flc_count > flc_size [ 405.100177][ T4194] sysv_free_block: flc_count > flc_size [ 405.133372][ T4194] sysv_free_block: flc_count > flc_size [ 405.146220][ T4194] sysv_free_block: flc_count > flc_size [ 405.186384][T15074] loop1: detected capacity change from 0 to 256 [ 405.195003][ T4194] sysv_free_block: flc_count > flc_size [ 405.221299][ T4194] sysv_free_block: flc_count > flc_size [ 405.244993][ T4194] sysv_free_block: flc_count > flc_size [ 405.265009][ T4194] sysv_free_block: flc_count > flc_size [ 405.272227][ T4194] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 405.537835][T15091] loop2: detected capacity change from 0 to 256 [ 405.645260][T15098] netlink: 'syz.3.4815': attribute type 20 has an invalid length. [ 405.673432][T15098] IPv6: NLM_F_CREATE should be specified when creating new route [ 405.867318][T15109] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 406.020302][T15116] IPv6: sit2: Disabled Multicast RS [ 406.075694][ T8422] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 406.123232][T15120] loop2: detected capacity change from 0 to 1764 [ 406.199376][ T26] audit: type=1800 audit(1780488036.979:21): pid=15120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4826" name="file0" dev="loop2" ino=1923 res=0 errno=0 [ 406.219172][ C1] vkms_vblank_simulate: vblank timer overrun [ 406.299032][ T8422] usb 2-1: Using ep0 maxpacket: 8 [ 406.419209][ T8422] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 406.453942][T15135] loop3: detected capacity change from 0 to 1024 [ 406.460607][ T8422] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.474750][ T8422] usb 2-1: config 0 has no interface number 0 [ 406.484138][ T8422] usb 2-1: config 0 interface 52 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 406.513174][ T8422] usb 2-1: config 0 interface 52 has no altsetting 0 [ 406.575374][T15144] netlink: 'syz.0.4838': attribute type 1 has an invalid length. [ 406.644764][ T8422] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 406.668405][ T8422] usb 2-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 406.668740][ T154] hfsplus: b-tree write err: -5, ino 25 [ 406.705940][ T8422] usb 2-1: Product: syz [ 406.713963][ T154] hfsplus: b-tree write err: -5, ino 4 [ 406.725055][ T8422] usb 2-1: SerialNumber: syz [ 406.736265][ T154] hfsplus: b-tree write err: -5, ino 2 [ 406.745174][ T8422] usb 2-1: config 0 descriptor?? [ 407.078096][T15161] loop0: detected capacity change from 0 to 2048 [ 407.163553][T15161] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 407.226677][ T8422] usb 2-1: USB disconnect, device number 55 [ 407.505656][T15177] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 407.513007][T15177] IPv6: NLM_F_CREATE should be set when creating new route [ 407.520325][T15177] IPv6: NLM_F_CREATE should be set when creating new route [ 407.752517][T15188] __nla_validate_parse: 5 callbacks suppressed [ 407.752536][T15188] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4858'. [ 407.812592][T15193] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4860'. [ 407.981370][T15202] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4866'. [ 408.045891][T15202] batman_adv: Cannot find parent device [ 408.145697][ T1508] block nbd3: Attempted send on invalid socket [ 408.151982][ T1508] blk_update_request: I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 408.169387][ T1508] block nbd3: Attempted send on invalid socket [ 408.175835][ T1508] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 408.194504][ T1508] block nbd3: Attempted send on invalid socket [ 408.200756][ T1508] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 408.216636][ T150] block nbd3: Attempted send on invalid socket [ 408.223512][ T150] blk_update_request: I/O error, dev nbd3, sector 18 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 408.236087][ T150] block nbd3: Attempted send on invalid socket [ 408.242446][ T150] blk_update_request: I/O error, dev nbd3, sector 30 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 408.253858][ T150] block nbd3: Attempted send on invalid socket [ 408.260170][ T150] blk_update_request: I/O error, dev nbd3, sector 36 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 408.271373][T15213] VFS: unable to find oldfs superblock on device nbd3 [ 408.289291][T15206] device bond2 entered promiscuous mode [ 408.340259][T15222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4875'. [ 408.383069][T15224] tmpfs: Bad value for 'mpol' [ 408.518293][T15233] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4880'. [ 408.719708][T15246] netlink: 236 bytes leftover after parsing attributes in process `syz.1.4886'. [ 408.739974][T15243] loop2: detected capacity change from 0 to 512 [ 408.781525][T15251] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4887'. [ 408.866180][T15243] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.4884: bg 0: block 5: invalid block bitmap [ 408.884596][T15243] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 408.895101][T15243] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.4884: invalid indirect mapped block 3 (level 2) [ 408.909334][T15243] EXT4-fs (loop2): 1 orphan inode deleted [ 408.915111][T15243] EXT4-fs (loop2): 1 truncate cleaned up [ 408.921174][T15243] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 409.110892][T15265] netlink: 'syz.1.4895': attribute type 10 has an invalid length. [ 409.212772][T15265] team0: Port device xfrm0 added [ 409.247155][T15270] netlink: 'syz.0.4897': attribute type 12 has an invalid length. [ 409.445731][T15289] loop2: detected capacity change from 0 to 512 [ 409.531524][T15293] loop4: detected capacity change from 0 to 512 [ 409.542733][T15289] EXT4-fs (loop2): Ignoring removed orlov option [ 409.559962][T15295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4910'. [ 409.599169][T15289] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 409.727023][T15293] [ 409.729437][T15293] ====================================================== [ 409.736539][T15293] WARNING: possible circular locking dependency detected [ 409.743607][T15293] syzkaller #0 Not tainted [ 409.748078][T15293] ------------------------------------------------------ [ 409.755306][T15293] syz.4.4907/15293 is trying to acquire lock: [ 409.761409][T15293] ffff888073abc0a8 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x5a/0x410 [ 409.770694][T15293] [ 409.770694][T15293] but task is already holding lock: [ 409.778098][T15293] ffff8880738f6628 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_truncate+0x97f/0x10f0 [ 409.787656][T15293] [ 409.787656][T15293] which lock already depends on the new lock. [ 409.787656][T15293] [ 409.798091][T15293] [ 409.798091][T15293] the existing dependency chain (in reverse order) is: [ 409.807141][T15293] [ 409.807141][T15293] -> #2 (&ei->i_data_sem/2){++++}-{3:3}: [ 409.815021][T15293] down_write+0x38/0x60 [ 409.819844][T15293] ext4_map_blocks+0x8bf/0x1b30 [ 409.825351][T15293] ext4_getblk+0x176/0x670 [ 409.830330][T15293] ext4_bread+0x26/0x180 [ 409.835138][T15293] ext4_quota_write+0x236/0x580 [ 409.840651][T15293] do_insert_tree+0x115c/0x1970 [ 409.846284][T15293] do_insert_tree+0x5b1/0x1970 [ 409.851616][T15293] do_insert_tree+0x5b1/0x1970 [ 409.856946][T15293] do_insert_tree+0x5b1/0x1970 [ 409.862277][T15293] qtree_write_dquot+0x361/0x4b0 [ 409.867897][T15293] v2_write_dquot+0x108/0x190 [ 409.873144][T15293] dquot_acquire+0x2d5/0x520 [ 409.878301][T15293] ext4_acquire_dquot+0x2d9/0x4a0 [ 409.883888][T15293] dqget+0x72b/0xc30 [ 409.888342][T15293] __dquot_initialize+0x3c3/0xcd0 [ 409.893927][T15293] ext4_process_orphan+0x54/0x300 [ 409.899528][T15293] ext4_orphan_cleanup+0xad2/0x1320 [ 409.905329][T15293] ext4_fill_super+0x8d6e/0x94f0 [ 409.910833][T15293] mount_bdev+0x287/0x3c0 [ 409.915738][T15293] legacy_get_tree+0xe6/0x180 [ 409.920979][T15293] vfs_get_tree+0x88/0x270 [ 409.926128][T15293] do_new_mount+0x24a/0xa40 [ 409.931283][T15293] __se_sys_mount+0x2e3/0x3d0 [ 409.936697][T15293] do_syscall_64+0x4c/0xa0 [ 409.941678][T15293] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 409.948157][T15293] [ 409.948157][T15293] -> #1 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 409.956310][T15293] down_read+0x44/0x2e0 [ 409.961205][T15293] v2_read_dquot+0x4a/0x110 [ 409.966270][T15293] dquot_acquire+0x152/0x520 [ 409.971424][T15293] ext4_acquire_dquot+0x2d9/0x4a0 [ 409.977014][T15293] dqget+0x72b/0xc30 [ 409.981522][T15293] __dquot_initialize+0x3c3/0xcd0 [ 409.987140][T15293] ext4_process_orphan+0x54/0x300 [ 409.992912][T15293] ext4_orphan_cleanup+0xad2/0x1320 [ 409.996556][T15289] EXT4-fs error (device loop2): ext4_orphan_get:1432: comm syz.2.4906: bad orphan inode 4 [ 409.998672][T15293] ext4_fill_super+0x8d6e/0x94f0 [ 410.014046][T15293] mount_bdev+0x287/0x3c0 [ 410.018941][T15293] legacy_get_tree+0xe6/0x180 [ 410.024445][T15293] vfs_get_tree+0x88/0x270 [ 410.029429][T15293] do_new_mount+0x24a/0xa40 [ 410.034504][T15293] __se_sys_mount+0x2e3/0x3d0 [ 410.039751][T15293] do_syscall_64+0x4c/0xa0 [ 410.044731][T15293] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 410.051185][T15293] [ 410.051185][T15293] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 410.058868][T15293] __lock_acquire+0x2c42/0x7d10 [ 410.064287][T15293] lock_acquire+0x19e/0x400 [ 410.069351][T15293] __mutex_lock_common+0x1e3/0x2400 [ 410.075117][T15293] mutex_lock_nested+0x17/0x20 [ 410.075855][T15289] EXT4-fs (loop2): Remounting filesystem read-only [ 410.080432][T15293] dquot_commit+0x5a/0x410 [ 410.080462][T15293] ext4_write_dquot+0x1f0/0x360 [ 410.097302][T15293] mark_all_dquot_dirty+0xf9/0x400 [ 410.103070][T15293] __dquot_free_space+0x7ca/0xb90 [ 410.108652][T15293] ext4_free_blocks+0x1b2b/0x24d0 [ 410.114245][T15293] ext4_ext_remove_space+0x1f86/0x42b0 [ 410.120269][T15293] ext4_ext_truncate+0x192/0x240 [ 410.125765][T15293] ext4_truncate+0xa09/0x10f0 [ 410.131005][T15293] ext4_process_orphan+0x1cb/0x300 [ 410.136682][T15293] ext4_orphan_cleanup+0xad2/0x1320 [ 410.142441][T15293] ext4_fill_super+0x8d6e/0x94f0 [ 410.147939][T15293] mount_bdev+0x287/0x3c0 [ 410.152850][T15293] legacy_get_tree+0xe6/0x180 [ 410.158093][T15293] vfs_get_tree+0x88/0x270 [ 410.163081][T15293] do_new_mount+0x24a/0xa40 [ 410.168150][T15293] __se_sys_mount+0x2e3/0x3d0 [ 410.173392][T15293] do_syscall_64+0x4c/0xa0 [ 410.178362][T15293] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 410.184065][T15289] EXT4-fs (loop2): 1 orphan inode deleted [ 410.184916][T15293] [ 410.184916][T15293] other info that might help us debug this: [ 410.184916][T15293] [ 410.184926][T15293] Chain exists of: [ 410.184926][T15293] &dquot->dq_lock --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2 [ 410.184926][T15293] [ 410.214744][T15293] Possible unsafe locking scenario: [ 410.214744][T15293] [ 410.222221][T15293] CPU0 CPU1 [ 410.227612][T15293] ---- ---- [ 410.233001][T15293] lock(&ei->i_data_sem/2); [ 410.237651][T15293] lock(&s->s_dquot.dqio_sem); [ 410.245147][T15293] lock(&ei->i_data_sem/2); [ 410.252509][T15293] lock(&dquot->dq_lock); [ 410.256966][T15293] [ 410.256966][T15293] *** DEADLOCK *** [ 410.256966][T15293] [ 410.261043][T15289] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,errors=remount-ro,acl,noload,noblock_validity,usrjquota="init_itable=0x0000000000000002,init_itable=0x00000000000000fd,max_dir_size_kb=0x0000000000000007,orlov,nodiscard,usrjquota=,norecovery,init_itable=0x00000000. Quota mode: writeback. [ 410.265138][T15293] 4 locks held by syz.4.4907/15293: [ 410.265154][T15293] #0: ffff8880238720e0 (&type->s_umount_key#28/1){+.+.}-{3:3}, at: alloc_super+0x201/0x950 [ 410.310726][T15293] #1: ffff8880738f67a0 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: ext4_process_orphan+0x187/0x300 [ 410.321759][T15293] #2: ffff8880738f6628 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_truncate+0x97f/0x10f0 [ 410.331566][T15293] #3: ffffffff8c441d38 (dquot_srcu){....}-{0:0}, at: rcu_lock_acquire+0x5/0x30 [ 410.340677][T15293] [ 410.340677][T15293] stack backtrace: [ 410.346613][T15293] CPU: 1 PID: 15293 Comm: syz.4.4907 Not tainted syzkaller #0 [ 410.354317][T15293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 410.364403][T15293] Call Trace: [ 410.367723][T15293] [ 410.370684][T15293] dump_stack_lvl+0x188/0x250 [ 410.375408][T15293] ? load_image+0x400/0x400 [ 410.379948][T15293] ? show_regs_print_info+0x20/0x20 [ 410.385186][T15293] ? print_circular_bug+0x12b/0x1a0 [ 410.390423][T15293] check_noncircular+0x296/0x330 [ 410.395428][T15293] ? add_chain_block+0x940/0x940 [ 410.400396][T15293] ? lockdep_lock+0xf1/0x1f0 [ 410.405044][T15293] ? deref_stack_reg+0xd0/0x120 [ 410.409931][T15293] ? mark_lock+0x94/0x320 [ 410.414305][T15293] __lock_acquire+0x2c42/0x7d10 [ 410.419209][T15293] ? stack_trace_save+0xa6/0xf0 [ 410.424090][T15293] ? verify_lock_unused+0x140/0x140 [ 410.429322][T15293] ? check_noncircular+0x189/0x330 [ 410.434463][T15293] ? add_chain_block+0x940/0x940 [ 410.439435][T15293] ? lockdep_unlock+0x143/0x2e0 [ 410.444323][T15293] lock_acquire+0x19e/0x400 [ 410.448862][T15293] ? dquot_commit+0x5a/0x410 [ 410.453496][T15293] ? __might_sleep+0xf0/0xf0 [ 410.458251][T15293] ? read_lock_is_recursive+0x10/0x10 [ 410.463711][T15293] ? mark_lock+0x94/0x320 [ 410.468079][T15293] ? dquot_commit+0x5a/0x410 [ 410.472708][T15293] __mutex_lock_common+0x1e3/0x2400 [ 410.477950][T15293] ? dquot_commit+0x5a/0x410 [ 410.482584][T15293] ? mark_lock+0x94/0x320 [ 410.486950][T15293] ? __might_sleep+0xf0/0xf0 [ 410.491575][T15293] ? mutex_lock_io_nested+0x60/0x60 [ 410.496817][T15293] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 410.503058][T15293] mutex_lock_nested+0x17/0x20 [ 410.508135][T15293] dquot_commit+0x5a/0x410 [ 410.512605][T15293] ? __ext4_journal_start_sb+0x1bd/0x360 [ 410.518464][T15293] ext4_write_dquot+0x1f0/0x360 [ 410.523442][T15293] mark_all_dquot_dirty+0xf9/0x400 [ 410.528588][T15293] __dquot_free_space+0x7ca/0xb90 [ 410.533657][T15293] ext4_free_blocks+0x1b2b/0x24d0 [ 410.538876][T15293] ? ext4_mb_discard_preallocations_should_retry+0x690/0x690 [ 410.546304][T15293] ? __ext4_journal_ensure_credits+0x2c/0x450 [ 410.552426][T15293] ? ext4_inode_journal_mode+0x18f/0x460 [ 410.558118][T15293] ext4_ext_remove_space+0x1f86/0x42b0 [ 410.563641][T15293] ? ext4_ext_index_trans_blocks+0xf0/0xf0 [ 410.569776][T15293] ? ext4_es_remove_extent+0x24f/0x3e0 [ 410.575281][T15293] ext4_ext_truncate+0x192/0x240 [ 410.580262][T15293] ext4_truncate+0xa09/0x10f0 [ 410.585173][T15293] ? rwsem_write_trylock+0x135/0x1c0 [ 410.590498][T15293] ? __ext4_mark_inode_dirty+0x700/0x700 [ 410.596181][T15293] ext4_process_orphan+0x1cb/0x300 [ 410.601333][T15293] ext4_orphan_cleanup+0xad2/0x1320 [ 410.606585][T15293] ? ext4_orphan_del+0xbf0/0xbf0 [ 410.611573][T15293] ? errseq_check_and_advance+0x62/0x120 [ 410.617254][T15293] ext4_fill_super+0x8d6e/0x94f0 [ 410.622237][T15293] ? format_decode+0x898/0x1300 [ 410.627143][T15293] ? ext4_mount+0x40/0x40 [ 410.627792][T15289] EXT4-fs error (device loop2): ext4_append:79: inode #2: comm syz.2.4906: Logical block already allocated [ 410.631503][T15293] ? set_blocksize+0x1f3/0x370 [ 410.631536][T15293] ? sb_set_blocksize+0xa5/0xe0 [ 410.655051][T15293] mount_bdev+0x287/0x3c0 [ 410.659419][T15293] ? ext4_mount+0x40/0x40 [ 410.663798][T15293] legacy_get_tree+0xe6/0x180 [ 410.664638][T15289] EXT4-fs (loop2): Remounting filesystem read-only [ 410.668964][T15293] ? ext4_errno_to_code+0x160/0x160 [ 410.681445][T15293] vfs_get_tree+0x88/0x270 [ 410.685998][T15293] do_new_mount+0x24a/0xa40 [ 410.690554][T15293] __se_sys_mount+0x2e3/0x3d0 [ 410.695277][T15293] ? __x64_sys_mount+0xc0/0xc0 [ 410.700078][T15293] ? lockdep_hardirqs_on+0x94/0x140 [ 410.705310][T15293] ? __x64_sys_mount+0x1c/0xc0 [ 410.710109][T15293] do_syscall_64+0x4c/0xa0 [ 410.714579][T15293] ? clear_bhb_loop+0x30/0x80 [ 410.719299][T15293] ? clear_bhb_loop+0x30/0x80 [ 410.724018][T15293] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 410.729950][T15293] RIP: 0033:0x7f323bec50ca [ 410.734400][T15293] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.756207][T15293] RSP: 002b:00007f323a11ce58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 410.764672][T15293] RAX: ffffffffffffffda RBX: 00007f323a11cee0 RCX: 00007f323bec50ca [ 410.772795][T15293] RDX: 00002000000006c0 RSI: 0000200000000640 RDI: 00007f323a11cea0 [ 410.781764][T15293] RBP: 00002000000006c0 R08: 00007f323a11cee0 R09: 000000000380000a [ 410.789772][T15293] R10: 000000000380000a R11: 0000000000000246 R12: 0000200000000640 [ 410.797778][T15293] R13: 00007f323a11cea0 R14: 0000000000000543 R15: 0000200000000000 [ 410.805795][T15293] [ 410.808854][ C1] vkms_vblank_simulate: vblank timer overrun [ 410.873297][T15293] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #16: comm syz.4.4907: corrupted inode contents [ 410.887181][T15293] EXT4-fs error (device loop4): ext4_dirty_inode:6077: inode #16: comm syz.4.4907: mark_inode_dirty error [ 410.925677][T15293] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #16: comm syz.4.4907: corrupted inode contents [ 410.944766][T15293] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #16: comm syz.4.4907: mark_inode_dirty error [ 410.963221][T15293] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #16: comm syz.4.4907: corrupted inode contents [ 410.996050][T15293] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 411.013140][T15293] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #16: comm syz.4.4907: corrupted inode contents [ 411.042031][T15293] EXT4-fs error (device loop4): ext4_truncate:4286: inode #16: comm syz.4.4907: mark_inode_dirty error [ 411.057521][T15293] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 411.067765][T15293] EXT4-fs (loop4): 1 truncate cleaned up [ 411.075810][T15293] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier=0x0000000000000006,nobarrier,nombcache,barrier,,errors=continue. Quota mode: writeback. [ 411.094731][T15293] ext4 filesystem being mounted at /998/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 411.159877][T15314] loop2: detected capacity change from 0 to 32768 [ 411.178326][T15314] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.4914 (15314) [ 411.236517][T15314] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 411.248426][T15314] BTRFS info (device loop2): enabling auto defrag [ 411.255669][T15314] BTRFS info (device loop2): doing ref verification [ 411.263059][T15314] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 411.287433][T15314] BTRFS info (device loop2): trying to use backup root at mount time [ 411.295917][T15314] BTRFS info (device loop2): force zlib compression, level 3 [ 411.315961][T15314] BTRFS info (device loop2): metadata ratio 8 [ 411.322126][T15314] BTRFS info (device loop2): using free space tree [ 411.329632][T15314] BTRFS info (device loop2): has skinny extents [ 411.412224][ T154] BTRFS warning (device loop2): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 411.426426][T15314] BTRFS warning (device loop2): failed to read root (objectid=2): -5 [ 411.435074][ T154] BTRFS warning (device loop2): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 411.447829][T15314] BTRFS warning (device loop2): couldn't read tree root [ 411.457797][T15314] BTRFS error (device loop2): parent transid verify failed on 5255168 wanted 5 found 7 [ 411.468519][T15314] BTRFS warning (device loop2): couldn't read tree root [ 411.488069][T15314] BTRFS info (device loop2): enabling ssd optimizations [ 411.497353][T15314] BTRFS info (device loop2): clearing free space tree [ 411.505395][T15314] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 411.516670][T15314] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 411.534468][T15314] BTRFS info (device loop2): creating free space tree [ 411.544186][T15314] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 411.556069][T15314] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)