last executing test programs: 3.033474634s ago: executing program 3 (id=10285): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000700)={0xe0, 0x10, 0x50b, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xa9, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44e4ff2d2d2873882fbd9423debbb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100100000000000000a0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="a64a6f8911da357ba323a96d75"]}]}, 0xe0}], 0x1}, 0x0) 2.790174502s ago: executing program 3 (id=10282): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000100)=ANY=[@ANYBLOB="2a01000020000040b708000000000000430109029200030172e5000904000000010100000a24010000000201020c0d240700000500006e626805000c240000e9fffff5ffffffff092403f3ff00000502", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0], 0x0) 1.030083198s ago: executing program 2 (id=10311): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8010000100001000000000000000000000000000000000000000000000000002001000000000000000000000000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000300af0000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017"], 0x1b8}}, 0x0) 924.357591ms ago: executing program 2 (id=10313): r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0x4, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0xb, 0x1, 0x0, "f819ebf45608e22e7a4944572ae210d0125a4b55b61c5deb3eb574c486d27eb2"}) 917.414681ms ago: executing program 3 (id=10314): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0905, 0x0, '\x00', @p_u32=0x0}}) 780.684975ms ago: executing program 0 (id=10317): r0 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, 0xffffffffffffffff, &(0x7f0000000000)=0xc) 780.530635ms ago: executing program 2 (id=10318): r0 = io_uring_setup(0x549c, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000400)=[0xe758, 0xf8de], 0x2) 779.270225ms ago: executing program 4 (id=10319): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x4, 0x8, 0x401, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4305}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x4004) 749.370396ms ago: executing program 3 (id=10330): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280), 0xf7, 0x25e, &(0x7f0000000e80)="$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") mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='.\x00', &(0x7f0000000000)='ext4\x00', 0x1400801, 0x0) 664.420889ms ago: executing program 4 (id=10321): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, 0x0, 0x0) 647.71358ms ago: executing program 0 (id=10322): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000180)={0x0, 0x1}, &(0x7f00000001c0)=0x8) 647.6352ms ago: executing program 2 (id=10323): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, 0x0) 628.836561ms ago: executing program 1 (id=10324): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e23}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e24}]}}}, @IFLA_IFNAME={0x14, 0x3, 'tunl0\x00'}]}, 0x58}}, 0x40820) 510.980714ms ago: executing program 1 (id=10325): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x4, 0x1, 0x3, "0ace4201ee34df7d231c15347e567b3525d1502a58dd2e810603fef3375cef86", 0x31303453}) 510.876474ms ago: executing program 2 (id=10326): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 476.832175ms ago: executing program 1 (id=10336): r0 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xcb, 0x0, 0x0) 476.219135ms ago: executing program 4 (id=10327): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xe, &(0x7f00000006c0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x32}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 467.006896ms ago: executing program 0 (id=10328): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000001000), 0x2, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000001240)=@multiplanar_mmap={0x8, 0x9, 0x4, 0x800000, 0x0, {}, {0x1, 0x0, 0x8, 0x80, 0xaa, 0x5, "b98fbf01"}, 0x8, 0x1, {&(0x7f0000000440)=[{0xfffffffa, 0x15, {0x3}, 0x100}, {0x4, 0xfffffff3, {0x3}, 0x352}]}, 0x7}) 466.942786ms ago: executing program 1 (id=10329): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90324fc60100c034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 449.726286ms ago: executing program 3 (id=10331): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000003200), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000033c0)={0xa, @win={{0x0, 0x0, 0x4701, 0x560}, 0x1, 0x1, 0x0, 0x9, 0x0, 0x4}}) 448.921486ms ago: executing program 2 (id=10332): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f0000000980)={[{@nodelalloc}, {@noblock_validity}, {@nolazytime}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@minixdf}, {@resgid={'resgid', 0x3d, 0xee01}}, {@noinit_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0xafb}, 0x32}]}, 0x9d, 0x4f0, &(0x7f0000000a40)="$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") mount(0x0, &(0x7f0000000180)='.\x00', 0x0, 0x2390024, 0x0) 304.524641ms ago: executing program 0 (id=10333): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x4, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0}}, [@migrate={0x9c, 0x11, [{@in=@loopback=0xa010101, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}, {@in=@private=0xa010101, @in=@loopback, @in=@empty, @in=@dev={0xac, 0x14, 0x14, 0x34}, 0x3c, 0x4, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 304.445181ms ago: executing program 4 (id=10334): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000200001"], 0x30}}, 0x0) 294.253661ms ago: executing program 1 (id=10335): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 209.241764ms ago: executing program 0 (id=10337): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r0, &(0x7f0000001080)=[{0x41, 0x0, 0x3, 0xfd, @time={0x0, 0x3}, {0x46, 0x1}, {0xf}, @addr={0xf, 0x95}}], 0x1c) 209.186374ms ago: executing program 3 (id=10338): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000180001002cbd7000ffdbdf2502200008fe03fe09000100000c00090004001001", @ANYRES32=0x0, @ANYBLOB="08001e0028"], 0x44}}, 0x0) 184.589315ms ago: executing program 4 (id=10339): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r0, 0x24, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 39.419669ms ago: executing program 0 (id=10340): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0xfff3}, {}, {0x3, 0xf}}}, 0x24}}, 0x200400d4) 38.71007ms ago: executing program 1 (id=10350): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write(r0, &(0x7f0000000200)="0d2ed7e6410bc63d8aa362", 0xb) 0s ago: executing program 4 (id=10341): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x1006, 0x40, 0x100007, 0xffff7682}) kernel console output (not intermixed with test programs): read failed, block=256, location=256 [ 797.974283][T22276] (syz.1.8209,22276,1):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 797.989959][T22339] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.8235'. [ 798.024584][T22276] (syz.1.8209,22276,1):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 798.034511][T22336] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 798.078031][T22276] (syz.1.8209,22276,1):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 798.096232][T22339] openvswitch: netlink: Key 29 has unexpected len 3064 expected 0 [ 798.138176][T22276] (syz.1.8209,22276,1):ocfs2_mknod:357 ERROR: status = -30 [ 798.145573][T22276] (syz.1.8209,22276,1):ocfs2_mknod:502 ERROR: status = -30 [ 798.207901][T22276] (syz.1.8209,22276,1):ocfs2_mkdir:659 ERROR: status = -30 [ 798.401133][ T4622] ocfs2: Unmounting device (7,1) on (node local) [ 798.476262][T22360] netlink: 'syz.0.8243': attribute type 1 has an invalid length. [ 798.520260][T22360] netlink: 'syz.0.8243': attribute type 2 has an invalid length. [ 798.569481][T22362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8248'. [ 798.584906][T22362] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8248'. [ 799.215445][T22388] loop2: detected capacity change from 0 to 4096 [ 799.239104][T22403] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.8267'. [ 799.258141][T22388] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 799.261363][ T4309] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 799.288277][T22403] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 799.417390][T22388] ntfs3: loop2: failed to convert "c46c" to cp850 [ 799.590153][ T4309] usb 1-1: Using ep0 maxpacket: 16 [ 799.742185][ T4309] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 799.750466][ T4309] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 799.812611][ T4309] usb 1-1: config 0 has no interface number 0 [ 799.934491][T22436] loop1: detected capacity change from 0 to 512 [ 799.950163][T22440] netlink: zone id is out of range [ 799.962218][T22440] netlink: set zone limit has 8 unknown bytes [ 800.004719][T22444] netlink: 'syz.3.8287': attribute type 49 has an invalid length. [ 800.062748][ T4309] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 800.078333][ T4309] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.087112][ T4309] usb 1-1: Product: syz [ 800.091329][ T4309] usb 1-1: Manufacturer: syz [ 800.097047][ T4309] usb 1-1: SerialNumber: syz [ 800.107417][T22436] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 800.121484][ T4309] usb 1-1: config 0 descriptor?? [ 800.157660][T22436] ext4 filesystem being mounted at /1588/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 800.404686][ T4309] usb 1-1: Found UVC 0.00 device syz (046d:08d3) [ 800.411220][ T4309] usb 1-1: No valid video chain found. [ 800.496752][T22471] netlink: 'syz.4.8299': attribute type 13 has an invalid length. [ 800.667006][ T4611] usb 1-1: USB disconnect, device number 123 [ 800.685754][T22481] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8303'. [ 800.818285][T22483] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8306'. [ 800.881170][T22488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8308'. [ 801.087345][T22499] loop4: detected capacity change from 0 to 256 [ 801.138343][T22501] loop3: detected capacity change from 0 to 16 [ 801.163976][T22503] device veth0_to_team entered promiscuous mode [ 801.218216][T22499] FAT-fs (loop4): Directory bread(block 64) failed [ 801.224898][T22499] FAT-fs (loop4): Directory bread(block 65) failed [ 801.243353][T22501] erofs: (device loop3): mounted with root inode @ nid 36. [ 801.342333][T22499] FAT-fs (loop4): Directory bread(block 66) failed [ 801.353970][T22499] FAT-fs (loop4): Directory bread(block 67) failed [ 801.366944][T22499] FAT-fs (loop4): Directory bread(block 68) failed [ 801.373552][T22499] FAT-fs (loop4): Directory bread(block 69) failed [ 801.424480][T22499] FAT-fs (loop4): Directory bread(block 70) failed [ 801.450929][T22499] FAT-fs (loop4): Directory bread(block 71) failed [ 801.486437][T22499] FAT-fs (loop4): Directory bread(block 72) failed [ 801.493059][T22499] FAT-fs (loop4): Directory bread(block 73) failed [ 801.879681][T22527] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8327'. [ 801.921558][T22527] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8327'. [ 802.041272][T22533] loop1: detected capacity change from 0 to 256 [ 802.129552][T22533] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010895, chksum : 0x816c887a, utbl_chksum : 0xe619d30d) [ 802.476184][T22543] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8335'. [ 802.550003][T22521] loop2: detected capacity change from 0 to 32768 [ 802.567767][T22519] loop0: detected capacity change from 0 to 32768 [ 802.708076][T22521] ialloc: diAlloc returned -17! [ 802.773360][T22519] ialloc: diAlloc returned -5! [ 803.390606][T22585] IPVS: set_ctl: invalid protocol: 0 10.1.1.1:20001 [ 803.586076][T22583] loop1: detected capacity change from 0 to 4096 [ 803.718858][ T4611] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 803.815488][T22605] autofs4:pid:22605:autofs_fill_super: called with bogus options [ 803.893790][T22607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8367'. [ 804.193104][T22623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8375'. [ 804.338583][T22635] loop4: detected capacity change from 0 to 256 [ 804.403208][ T4611] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 804.422574][ T4611] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.460333][ T4611] usb 4-1: Product: syz [ 804.482022][ T4611] usb 4-1: Manufacturer: syz [ 804.486691][ T4611] usb 4-1: SerialNumber: syz [ 804.521645][ T4611] usb 4-1: config 0 descriptor?? [ 804.585965][ T4611] ch341 4-1:0.0: ch341-uart converter detected [ 804.882404][T22656] xt_l2tp: v2 sid > 0xffff: 262144 [ 805.031821][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 805.031837][ T26] audit: type=1400 audit(2000000939.462:37): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=22663 comm="syz.1.8397" [ 805.066093][ T4611] usb 4-1: failed to send control message: -71 [ 805.072407][ T4611] ch341-uart: probe of ttyUSB0 failed with error -71 [ 805.133477][ T4611] usb 4-1: USB disconnect, device number 24 [ 805.160325][ T4611] ch341 4-1:0.0: device disconnected [ 805.236073][T22661] loop0: detected capacity change from 0 to 8192 [ 805.372078][T22661] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 805.394298][T22684] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 805.409776][T22661] REISERFS (device loop0): using ordered data mode [ 805.446169][T22661] reiserfs: using flush barriers [ 805.491936][T22661] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 805.590950][T22661] REISERFS (device loop0): checking transaction log (loop0) [ 805.935190][T22702] loop1: detected capacity change from 0 to 4096 [ 805.986148][T22702] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 806.049319][T22661] REISERFS (device loop0): Using tea hash to sort names [ 806.057399][T22661] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 806.122238][T22702] ntfs3: loop1: failed to convert "c46c" to cp850 [ 806.185634][T22708] loop4: detected capacity change from 0 to 4096 [ 806.338454][T22708] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 806.814247][T22733] loop0: detected capacity change from 0 to 256 [ 806.935330][T22740] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8432'. [ 806.950972][T22733] FAT-fs (loop0): Directory bread(block 64) failed [ 806.957592][T22733] FAT-fs (loop0): Directory bread(block 65) failed [ 806.983465][T22733] FAT-fs (loop0): Directory bread(block 66) failed [ 807.022549][T22733] FAT-fs (loop0): Directory bread(block 67) failed [ 807.053630][T22733] FAT-fs (loop0): Directory bread(block 68) failed [ 807.065118][T22733] FAT-fs (loop0): Directory bread(block 69) failed [ 807.071888][T22733] FAT-fs (loop0): Directory bread(block 70) failed [ 807.114734][T22733] FAT-fs (loop0): Directory bread(block 71) failed [ 807.133115][T22733] FAT-fs (loop0): Directory bread(block 72) failed [ 807.143860][T22733] FAT-fs (loop0): Directory bread(block 73) failed [ 807.489752][T22759] openvswitch: netlink: Key 2 has unexpected len 2 expected 4 [ 807.509108][T22738] loop1: detected capacity change from 0 to 32768 [ 807.562575][T22738] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.8433 (22738) [ 807.664651][T22738] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 807.670288][T22765] loop0: detected capacity change from 0 to 256 [ 807.673433][T22738] BTRFS info (device loop1): using free space tree [ 807.762614][T22765] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 807.774833][T22738] BTRFS info (device loop1): has skinny extents [ 807.985250][T18421] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 808.081312][T22738] BTRFS info (device loop1): enabling ssd optimizations [ 808.163704][T22800] loop0: detected capacity change from 0 to 256 [ 808.300270][T22800] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 808.342672][T22800] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 808.390726][T18421] usb 4-1: config 0 has no interfaces? [ 808.396311][T18421] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 808.405765][T22800] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 808.430527][T18421] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.439090][T22800] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 808.457534][T18421] usb 4-1: config 0 descriptor?? [ 808.529739][T22800] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 808.571487][T22800] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 808.614771][T22800] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 808.615587][T22800] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 808.615621][T22800] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 808.615652][T22800] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 808.620060][ T26] audit: type=1800 audit(2000000942.820:38): pid=22800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.8453" name="file1" dev="loop0" ino=1048658 res=0 errno=0 [ 808.936784][ T5550] usb 4-1: USB disconnect, device number 25 [ 809.089310][T22823] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8464'. [ 809.111697][T22823] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8464'. [ 809.176537][T22823] netlink: 31 bytes leftover after parsing attributes in process `syz.1.8464'. [ 809.201384][T22823] netlink: 'syz.1.8464': attribute type 2 has an invalid length. [ 809.245792][T22823] netlink: 31 bytes leftover after parsing attributes in process `syz.1.8464'. [ 809.582252][T22852] loop1: detected capacity change from 0 to 512 [ 809.841173][T22852] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 809.858273][T22867] xt_CT: No such helper "syz0" [ 809.868846][T22863] loop0: detected capacity change from 0 to 4096 [ 809.884047][T22852] ext4 filesystem being mounted at /1632/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 809.899548][T22852] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #15: comm syz.1.8477: corrupted xattr block 33 [ 810.013231][T22878] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 810.166547][T22886] netlink: 200 bytes leftover after parsing attributes in process `syz.3.8492'. [ 810.366419][T22897] SET target dimension over the limit! [ 810.378548][T22895] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8498'. [ 810.436384][T22900] netlink: 236 bytes leftover after parsing attributes in process `syz.0.8499'. [ 810.550791][T22907] loop3: detected capacity change from 0 to 64 [ 810.597060][T22907] MINIX-fs: mounting file system with errors, running fsck is recommended [ 810.985782][T22921] loop3: detected capacity change from 0 to 4096 [ 811.011367][T22925] loop2: detected capacity change from 0 to 2048 [ 811.041169][T22921] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 811.083570][T22925] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 811.107152][T22929] loop0: detected capacity change from 0 to 4096 [ 811.242222][T22929] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 811.980496][T22961] loop4: detected capacity change from 0 to 8192 [ 812.062454][T22961] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 812.078853][T22961] REISERFS (device loop4): using ordered data mode [ 812.095157][T22961] reiserfs: using flush barriers [ 812.140806][T22961] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 812.218275][T22961] REISERFS (device loop4): checking transaction log (loop4) [ 812.391487][T22986] nfs: Unknown parameter 'ntext' [ 812.521017][T22989] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 812.541100][T22961] REISERFS (device loop4): Using tea hash to sort names [ 812.561252][T22961] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 812.683053][T22998] device netdevsim0 entered promiscuous mode [ 812.728997][T22998] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8545'. [ 812.774946][T22998] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 813.022942][T23010] xt_recent: Unsupported userspace flags (000000b1) [ 813.133462][T23002] loop3: detected capacity change from 0 to 8192 [ 813.145583][T23015] loop1: detected capacity change from 0 to 64 [ 813.438131][T23024] rock: directory entry would overflow storage [ 813.444387][T23024] rock: sig=0x3b10, size=4, remaining=3 [ 813.516510][T23036] SET target dimension over the limit! [ 813.555767][T23038] tmpfs: Bad value for 'mpol' [ 814.077925][ T1326] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 814.143863][T23081] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8589'. [ 814.162069][T23081] unsupported nlmsg_type 40 [ 814.345476][ T1326] usb 2-1: Using ep0 maxpacket: 32 [ 814.478110][ T1326] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 814.520450][ T1326] usb 2-1: config 0 has no interface number 0 [ 814.526668][ T1326] usb 2-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 814.619198][ T1326] usb 2-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 814.726935][T23110] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8600'. [ 814.847882][ T1326] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 814.857078][ T1326] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.874334][T23112] comedi comedi0: No hardware detected at I/O base 0x3c4 [ 814.917813][ T1326] usb 2-1: Product: syz [ 814.922086][ T1326] usb 2-1: Manufacturer: syz [ 814.986228][ T1326] usb 2-1: SerialNumber: syz [ 815.006661][ T1326] usb 2-1: config 0 descriptor?? [ 815.028582][T23121] tmpfs: Bad value for 'mpol' [ 815.075541][ T1326] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 815.218817][T23135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8614'. [ 815.300014][ T1326] usb 2-1: qt2_setup_urbs - submit read urb failed -90 [ 815.311842][T23130] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 815.316427][ T1326] quatech2: probe of 2-1:0.51 failed with error -90 [ 815.426077][T23133] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8611'. [ 815.472449][T23133] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8611'. [ 815.525625][T18417] usb 2-1: USB disconnect, device number 20 [ 815.688923][T23149] netlink: 'syz.0.8622': attribute type 1 has an invalid length. [ 815.725187][T23147] set_capacity_and_notify: 1 callbacks suppressed [ 815.725206][T23147] loop2: detected capacity change from 0 to 4096 [ 815.739437][T23149] netlink: 200 bytes leftover after parsing attributes in process `syz.0.8622'. [ 815.884456][T23147] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 815.933569][T23165] loop3: detected capacity change from 0 to 764 [ 816.018646][T23165] Symlink component flag not implemented [ 816.037413][T23165] Symlink component flag not implemented (15) [ 816.066441][ T4666] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 816.297047][T23177] kAFS: unable to lookup cell ' [ 816.297047][T23177] $)-.ÌײfÍY¹Ç²a×ïÅ2sˆ [ 816.297047][T23177] ' [ 816.378637][ T4666] usb 5-1: Using ep0 maxpacket: 32 [ 816.550051][ T4666] usb 5-1: unable to get BOS descriptor or descriptor too short [ 816.654594][ T4666] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 816.684962][ T4666] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 816.741643][T23189] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 816.864297][T23201] loop2: detected capacity change from 0 to 1024 [ 816.889851][ T4666] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 816.906479][T23175] loop3: detected capacity change from 0 to 32768 [ 816.916526][ T4666] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.944862][ T4666] usb 5-1: Product: syz [ 816.983573][T23175] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 816.993272][ T4666] usb 5-1: Manufacturer: syz [ 817.032304][T23201] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 817.037596][T23175] JBD2: Ignoring recovery information on journal [ 817.044692][ T4666] usb 5-1: SerialNumber: syz [ 817.088546][T23201] EXT4-fs error (device loop2): ext4_xattr_set_entry:1615: inode #13: comm syz.2.8647: corrupted xattr entries [ 817.162992][T23219] loop1: detected capacity change from 0 to 128 [ 817.216370][T23219] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 817.229658][T23219] hpfs: filesystem error: improperly stopped [ 817.234377][T23175] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 817.237070][T23219] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 817.268454][T23219] hpfs: You really don't want any checks? You are crazy... [ 817.313128][T23219] hpfs: hpfs_map_sector(): read error [ 817.338661][T23219] hpfs: code page support is disabled [ 817.350499][T23219] hpfs: hpfs_map_4sectors(): unaligned read [ 817.367595][T23219] hpfs: hpfs_map_4sectors(): unaligned read [ 817.376994][T23219] hpfs: filesystem error: unable to find root dir [ 817.402339][T23175] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has an invalid bg_blkno of 393248 [ 817.439947][T23219] hpfs: hpfs_map_4sectors(): unaligned read [ 817.456360][T23175] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 817.466281][T23175] OCFS2: File system is now read-only. [ 817.477688][ T4666] usb 5-1: MIDIStreaming interface descriptor not found [ 817.513587][T23175] (syz.3.8634,23175,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 817.539363][T23175] (syz.3.8634,23175,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 817.560313][ T4666] usb 5-1: USB disconnect, device number 107 [ 817.592252][T23175] (syz.3.8634,23175,1):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 817.635850][T23175] (syz.3.8634,23175,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 817.650590][T23229] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 817.679858][T23175] (syz.3.8634,23175,1):__ocfs2_claim_clusters:2365 ERROR: status = -30 [ 817.704637][T23232] x_tables: duplicate entry at hook 3 [ 817.710503][T23175] (syz.3.8634,23175,1):__ocfs2_claim_clusters:2373 ERROR: status = -30 [ 817.765683][T23175] (syz.3.8634,23175,1):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 817.788064][T23175] (syz.3.8634,23175,1):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 817.796912][T23175] (syz.3.8634,23175,1):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 817.860487][T18828] udevd[18828]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 817.887880][T23175] (syz.3.8634,23175,1):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 817.911836][T23238] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8663'. [ 817.937765][T23175] (syz.3.8634,23175,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 817.947351][T23175] (syz.3.8634,23175,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 817.962409][T23238] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8663'. [ 818.034127][T23175] (syz.3.8634,23175,0):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 818.097568][T23175] (syz.3.8634,23175,0):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 818.108491][T23175] (syz.3.8634,23175,0):ocfs2_mknod:357 ERROR: status = -30 [ 818.115849][T23175] (syz.3.8634,23175,0):ocfs2_mknod:502 ERROR: status = -30 [ 818.132427][T23248] netlink: 'syz.0.8668': attribute type 17 has an invalid length. [ 818.174779][T23248] netlink: 5 bytes leftover after parsing attributes in process `syz.0.8668'. [ 818.196211][T23248] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 818.215215][T23175] (syz.3.8634,23175,0):ocfs2_mkdir:659 ERROR: status = -30 [ 818.392398][T23263] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8673'. [ 818.402939][ T4630] ocfs2: Unmounting device (7,3) on (node local) [ 818.429092][T23263] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8673'. [ 818.675126][T23276] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 818.681715][T23276] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 818.707216][T23276] vhci_hcd vhci_hcd.0: Device attached [ 818.725133][T23280] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 818.731807][T23280] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 818.741536][T23280] vhci_hcd vhci_hcd.0: Device attached [ 818.752643][T23281] vhci_hcd: connection closed [ 818.754514][T23277] vhci_hcd: connection closed [ 818.765457][ T144] vhci_hcd: stop threads [ 818.774610][ T144] vhci_hcd: release socket [ 818.779082][ T144] vhci_hcd: disconnect device [ 818.806276][ T144] vhci_hcd: stop threads [ 818.841321][ T144] vhci_hcd: release socket [ 818.858704][ T144] vhci_hcd: disconnect device [ 818.899571][ T4666] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 818.931552][T18419] vhci_hcd: vhci_device speed not set [ 818.991792][T23292] netlink: 'syz.3.8677': attribute type 2 has an invalid length. [ 819.120451][T23299] loop3: detected capacity change from 0 to 1024 [ 819.155940][ T4666] usb 5-1: Using ep0 maxpacket: 16 [ 819.251442][T23308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8695'. [ 819.327189][ T4666] usb 5-1: unable to get BOS descriptor or descriptor too short [ 819.423671][ T4666] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 819.532723][T23324] xt_CONNSECMARK: invalid mode: 0 [ 819.658776][T18417] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 819.722626][ T4666] usb 5-1: string descriptor 0 read error: -22 [ 819.738510][ T4666] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 819.784383][ T4666] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.854113][ T4666] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 819.882488][ T4666] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 819.921158][ T4666] usb 5-1: unknown interface protocol 0x44, assuming v1 [ 819.928602][T18417] usb 2-1: Using ep0 maxpacket: 16 [ 819.965177][ T4666] usb 5-1: cannot find UAC_HEADER [ 819.983222][ T4666] snd-usb-audio: probe of 5-1:1.1 failed with error -22 [ 820.018661][ T4666] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 820.040691][T23347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8715'. [ 820.054481][T18417] usb 2-1: config 0 has no interfaces? [ 820.078527][T23347] netlink: 540 bytes leftover after parsing attributes in process `syz.2.8715'. [ 820.235777][T18417] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 820.244920][T18417] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.272520][T23358] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 820.293809][T18417] usb 2-1: Product: syz [ 820.298034][T18417] usb 2-1: Manufacturer: syz [ 820.321721][T18417] usb 2-1: SerialNumber: syz [ 820.335868][T18417] r8152-cfgselector 2-1: config 0 descriptor?? [ 820.375360][ T4666] usb 5-1: USB disconnect, device number 108 [ 820.468950][T23366] loop0: detected capacity change from 0 to 256 [ 820.513422][T23362] loop3: detected capacity change from 0 to 4096 [ 820.525177][T23366] FAT-fs (loop0): Directory bread(block 64) failed [ 820.542712][T23366] FAT-fs (loop0): Directory bread(block 65) failed [ 820.549948][T23362] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 820.551499][T23366] FAT-fs (loop0): Directory bread(block 66) failed [ 820.587687][T23366] FAT-fs (loop0): Directory bread(block 67) failed [ 820.611455][T23366] FAT-fs (loop0): Directory bread(block 68) failed [ 820.618698][T23366] FAT-fs (loop0): Directory bread(block 69) failed [ 820.631913][T18417] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 820.649915][T23366] FAT-fs (loop0): Directory bread(block 70) failed [ 820.656988][T23366] FAT-fs (loop0): Directory bread(block 71) failed [ 820.664107][T23366] FAT-fs (loop0): Directory bread(block 72) failed [ 820.670834][T23366] FAT-fs (loop0): Directory bread(block 73) failed [ 820.859010][T18417] usb 2-1: USB disconnect, device number 21 [ 820.884247][T23370] loop3: detected capacity change from 0 to 512 [ 820.908668][T23370] EXT4-fs (loop3): inline encryption not supported [ 820.969252][T23370] EXT4-fs (loop3): mounted filesystem without journal. Opts: inlinecrypt,errors=remount-ro,abort,. Quota mode: writeback. [ 820.998211][T23370] ext4 filesystem being mounted at /1625/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 821.025386][T23370] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #12: comm syz.3.8725: invalid size [ 821.096876][T23370] EXT4-fs (loop3): Remounting filesystem read-only [ 821.722847][T23406] loop0: detected capacity change from 0 to 4096 [ 821.741347][T23412] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8744'. [ 821.773690][T23414] openvswitch: netlink: EtherType 0 is less than min 600 [ 821.860335][T23406] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 821.879382][T23416] loop4: detected capacity change from 0 to 4096 [ 821.925343][T23406] ntfs3: loop0: Failed to load $Extend. [ 821.959011][T23416] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 822.080959][T23416] ntfs3: loop4: ino=5, "/" directory corrupted [ 822.110593][T23416] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 822.477762][T23428] loop0: detected capacity change from 0 to 8192 [ 822.554083][T23442] loop1: detected capacity change from 0 to 512 [ 822.594997][T23428] loop0: p1 p3 p4 [ 822.613952][T23442] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 822.624678][T23428] loop0: partition table partially beyond EOD, truncated [ 822.641357][T23428] loop0: p1 start 393225 is beyond EOD, truncated [ 822.662749][T23428] loop0: p3 start 16777216 is beyond EOD, truncated [ 822.717546][T23428] loop0: p4 start 4294967295 is beyond EOD, truncated [ 822.746040][T23442] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodiscard,noinit_itable,barrier=0x0000000000000040,grpjquota=,errors=remount-ro,jqfmt=vfsv0,. Quota mode: writeback. [ 822.795393][T23442] ext4 filesystem being mounted at /1680/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 822.840896][T23445] loop3: detected capacity change from 0 to 4096 [ 822.860931][T23442] EXT4-fs error (device loop1): ext4_xattr_block_find:1857: inode #15: comm syz.1.8757: corrupted xattr block 32 [ 822.880687][T23442] EXT4-fs (loop1): Remounting filesystem read-only [ 822.919004][T23445] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 823.035389][T23456] loop0: detected capacity change from 0 to 256 [ 823.140289][T23459] netlink: 'syz.4.8767': attribute type 16 has an invalid length. [ 823.218511][T23459] netlink: 'syz.4.8767': attribute type 17 has an invalid length. [ 823.441426][T23463] loop3: detected capacity change from 0 to 4096 [ 823.469089][T23463] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 823.612867][T23463] ntfs3: loop3: ino=5, "/" directory corrupted [ 823.664057][T23463] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 823.827873][T18417] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 823.945646][ T4666] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 824.009031][T23495] netlink: 'syz.2.8782': attribute type 16 has an invalid length. [ 824.018727][T23495] netlink: 'syz.2.8782': attribute type 17 has an invalid length. [ 824.083459][T23495] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.098839][T23495] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.184854][T23501] loop1: detected capacity change from 0 to 4096 [ 824.223318][ T4666] usb 5-1: Using ep0 maxpacket: 16 [ 824.341210][T18417] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 824.356190][T23501] ntfs: volume version 3.1. [ 824.359347][ T4666] usb 5-1: New USB device found, idVendor=0471, idProduct=0307, bcdDevice=61.a4 [ 824.376460][T18417] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 824.385809][ T4666] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.404197][ T4666] usb 5-1: config 0 descriptor?? [ 824.411096][T18417] usb 1-1: Product: syz [ 824.418435][T18417] usb 1-1: SerialNumber: syz [ 824.437552][T18419] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 824.451611][T18417] usb 1-1: config 0 descriptor?? [ 824.460949][ T4666] pwc: Philips PCVC675K (Vesta) USB webcam detected. [ 824.683085][ T4666] pwc: send_video_command error -71 [ 824.688522][ T4666] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 824.688627][ T4666] Philips webcam: probe of 5-1:0.0 failed with error -71 [ 824.724364][ T4666] usb 5-1: USB disconnect, device number 109 [ 824.736417][T18419] usb 4-1: Using ep0 maxpacket: 16 [ 824.768741][T18417] hso 1-1:0.0: Can't find BULK IN endpoint [ 824.849017][T23523] xt_CT: You must specify a L4 protocol and not use inversions on it [ 824.879193][T18419] usb 4-1: config index 0 descriptor too short (expected 176, got 162) [ 824.898659][T18419] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 824.910338][T18419] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 824.920188][T18419] usb 4-1: config 1 interface 0 has no altsetting 0 [ 824.999178][ T4666] usb 1-1: USB disconnect, device number 124 [ 825.089589][T18419] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 825.098709][T18419] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.108063][T18419] usb 4-1: Product: syz [ 825.112906][T18419] usb 4-1: Manufacturer: syz [ 825.117550][T18419] usb 4-1: SerialNumber: syz [ 825.218694][T23541] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8804'. [ 825.463732][T18419] usb 4-1: 0:2 : does not exist [ 825.499017][T23555] loop4: detected capacity change from 0 to 64 [ 825.595021][T23555] attempt to access beyond end of device [ 825.595021][T23555] loop4: rw=0, want=268435470, limit=64 [ 825.669535][T23555] Buffer I/O error on dev loop4, logical block 134217734, async page read [ 825.698696][T18419] usb 4-1: 5:0: cannot get min/max values for control 4 (id 5) [ 825.716741][T23555] Trying to free block not in datazone [ 825.728612][T18419] usb 4-1: USB disconnect, device number 26 [ 825.829903][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 825.836335][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 825.902954][T23577] netlink: 'syz.0.8818': attribute type 3 has an invalid length. [ 825.999867][T18855] udevd[18855]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 826.072854][T23582] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8825'. [ 826.107603][T23583] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 826.135582][T23586] loop4: detected capacity change from 0 to 736 [ 826.152159][T23588] netlink: 'syz.1.8824': attribute type 16 has an invalid length. [ 826.169803][T23588] netlink: 'syz.1.8824': attribute type 17 has an invalid length. [ 826.578819][T23602] EXT4-fs (loop0): Ignoring removed bh option [ 826.596588][T23602] EXT4-fs (loop0): inline encryption not supported [ 826.603275][T23602] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 826.625157][T23608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8835'. [ 826.685944][T23610] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 826.734609][T23602] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 826.774399][T23602] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.8832: bg 0: block 248: padding at end of block bitmap is not set [ 826.922456][T23626] IPv6: sit1: Disabled Multicast RS [ 826.949954][T23602] Quota error (device loop0): write_blk: dquota write failed [ 826.957488][T23602] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 827.075715][T23602] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.8832: Failed to acquire dquot type 1 [ 827.160055][T23602] EXT4-fs (loop0): 1 truncate cleaned up [ 827.169519][T23602] EXT4-fs (loop0): mounted filesystem without journal. Opts: bh,inlinecrypt,nombcache,,errors=continue. Quota mode: writeback. [ 827.295360][T23649] netlink: 'syz.1.8853': attribute type 12 has an invalid length. [ 827.314173][T23651] set_capacity_and_notify: 1 callbacks suppressed [ 827.314191][T23651] loop3: detected capacity change from 0 to 512 [ 827.349358][ T9] Quota error (device loop0): remove_tree: Getting block too big (0 >= 6) [ 827.368482][ T9] EXT4-fs error (device loop0): ext4_release_dquot:6272: comm kworker/u4:0: Failed to release dquot type 1 [ 827.462794][T23651] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 827.499797][T23651] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodiscard,noinit_itable,barrier=0x0000000000000040,grpjquota=,errors=remount-ro,jqfmt=vfsv0,. Quota mode: writeback. [ 827.593682][T23651] ext4 filesystem being mounted at /1644/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 827.652912][T23651] EXT4-fs error (device loop3): ext4_xattr_block_find:1857: inode #15: comm syz.3.8854: corrupted xattr block 32 [ 827.688781][T23651] EXT4-fs (loop3): Remounting filesystem read-only [ 827.703056][T23669] netlink: 'syz.4.8862': attribute type 22 has an invalid length. [ 827.711652][T23669] (unnamed net_device) (uninitialized): option ad_select: invalid value (7) [ 828.257780][T23692] netlink: 'syz.3.8873': attribute type 16 has an invalid length. [ 828.344632][T23692] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.366512][T23692] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.393228][T18417] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 828.414106][T23698] loop4: detected capacity change from 0 to 512 [ 828.442713][T23698] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 828.517867][T23701] dlm: no locking on control device [ 828.553253][T23698] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,noinit_itable,barrier=0x0000000000000040,grpjquota=,errors=remount-ro,jqfmt=vfsv0,. Quota mode: writeback. [ 828.606972][T23698] ext4 filesystem being mounted at /1689/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 828.711983][T23698] EXT4-fs error (device loop4): ext4_xattr_block_find:1857: inode #15: comm syz.4.8876: corrupted xattr block 32 [ 828.746429][T23698] EXT4-fs (loop4): Remounting filesystem read-only [ 828.788669][T18417] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 828.799561][T18417] usb 2-1: config 0 has no interface number 0 [ 828.810142][T18417] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 828.948965][T18417] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 828.981358][T18417] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 829.007535][T18417] usb 2-1: Product: syz [ 829.022681][T18417] usb 2-1: SerialNumber: syz [ 829.030659][T23724] loop0: detected capacity change from 0 to 512 [ 829.044319][T18417] usb 2-1: config 0 descriptor?? [ 829.090456][T18417] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 829.110016][T23729] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8891'. [ 829.125510][T23729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8891'. [ 829.136152][T23729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8891'. [ 829.168600][T23724] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 829.223896][T23732] device veth0_vlan left promiscuous mode [ 829.274280][T23732] device veth0_vlan entered promiscuous mode [ 829.281457][T23724] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a81ec018, mo2=0002] [ 829.295977][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 829.304095][T23724] System zones: 0-2, 18-18, 34-35 [ 829.311000][T23724] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,debug,quota,usrjquota=,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 829.327100][T23724] ext4 filesystem being mounted at /1758/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 829.341115][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 829.349781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 829.397085][T18419] usb 2-1: USB disconnect, device number 22 [ 829.525815][ T4610] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 829.686140][T23740] loop3: detected capacity change from 0 to 32768 [ 829.694562][T23742] loop0: detected capacity change from 0 to 4096 [ 830.036658][ T4610] usb 5-1: unable to get BOS descriptor or descriptor too short [ 830.087764][T23756] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8902'. [ 830.157071][ T4610] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 830.183904][ T4610] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 830.207994][ T4610] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 830.228666][ T4610] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 830.295313][T23765] loop0: detected capacity change from 0 to 64 [ 830.311270][ T4610] usb 5-1: config 1 interface 1 has no altsetting 1 [ 830.514029][T23774] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8912'. [ 830.528007][T23770] loop3: detected capacity change from 0 to 4096 [ 830.535864][ T4610] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 830.554370][ T4610] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.584545][ T4610] usb 5-1: Product: syz [ 830.602393][ T4610] usb 5-1: Manufacturer: syz [ 830.614751][ T4610] usb 5-1: SerialNumber: syz [ 830.733147][T23778] loop1: detected capacity change from 0 to 2048 [ 830.863741][T23784] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 831.071014][ T4610] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 831.106913][ T4610] usb 5-1: USB disconnect, device number 110 [ 831.246456][T23803] loop1: detected capacity change from 0 to 512 [ 831.340298][T23803] EXT4-fs (loop1): Ignoring removed orlov option [ 831.379958][T23803] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 831.389032][T18828] udevd[18828]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 831.457270][T23803] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.8926: bad orphan inode 4 [ 831.459114][T23817] openvswitch: netlink: Message has 4 unknown bytes. [ 831.525067][T23803] EXT4-fs (loop1): Remounting filesystem read-only [ 831.532167][T23803] EXT4-fs (loop1): 1 orphan inode deleted [ 831.608554][T23803] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,errors=remount-ro,acl,noload,noblock_validity,usrjquota="init_itable=0x0000000000000002,init_itable=0x00000000000000fd,max_dir_size_kb=0x0000000000000007,orlov,nodiscard,usrjquota=,norecovery,init_itable=0x00000000. Quota mode: writeback. [ 831.700784][T23831] loop0: detected capacity change from 0 to 256 [ 831.761418][T23803] EXT4-fs error (device loop1): ext4_append:79: inode #2: comm syz.1.8926: Logical block already allocated [ 831.794419][T23838] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 831.813050][T23803] EXT4-fs (loop1): Remounting filesystem read-only [ 831.917063][T23831] FAT-fs (loop0): Directory bread(block 64) failed [ 831.930434][T23831] FAT-fs (loop0): Directory bread(block 65) failed [ 831.951809][T23831] FAT-fs (loop0): Directory bread(block 66) failed [ 831.976890][T23831] FAT-fs (loop0): Directory bread(block 67) failed [ 832.004023][T23831] FAT-fs (loop0): Directory bread(block 68) failed [ 832.027810][T23831] FAT-fs (loop0): Directory bread(block 69) failed [ 832.063733][T23831] FAT-fs (loop0): Directory bread(block 70) failed [ 832.071041][T23831] FAT-fs (loop0): Directory bread(block 71) failed [ 832.077690][T23831] FAT-fs (loop0): Directory bread(block 72) failed [ 832.084650][T23831] FAT-fs (loop0): Directory bread(block 73) failed [ 832.282785][T23854] EXT4-fs (loop2): orphan cleanup on readonly fs [ 832.301476][T23854] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #15: comm syz.2.8950: corrupted inode contents [ 832.324729][T23863] netlink: 144 bytes leftover after parsing attributes in process `syz.1.8955'. [ 832.341588][T23854] EXT4-fs error (device loop2): ext4_dirty_inode:6077: inode #15: comm syz.2.8950: mark_inode_dirty error [ 832.359545][T23854] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #15: comm syz.2.8950: corrupted inode contents [ 832.411298][T23854] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2954: inode #15: comm syz.2.8950: mark_inode_dirty error [ 832.449289][T23854] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2957: inode #15: comm syz.2.8950: mark inode dirty (error -117) [ 832.533800][T23854] EXT4-fs warning (device loop2): ext4_evict_inode:304: xattr delete (err -117) [ 832.553419][T23873] openvswitch: netlink: IP tunnel dst address not specified [ 832.572690][T23854] EXT4-fs (loop2): 1 orphan inode deleted [ 832.578505][T23854] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,auto_da_alloc=0x0000000000000004,debug_want_extra_isize=0x000000000000005c,delalloc,user_xattr,grpquota,init_itable=0x0000000000008d55,,errors=continue. Quota mode: writeback. [ 832.742980][T23883] program syz.3.8962 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 832.753167][T23884] ./file0: Can't open blockdev [ 833.096185][T23894] set_capacity_and_notify: 2 callbacks suppressed [ 833.096205][T23894] loop2: detected capacity change from 0 to 4096 [ 833.150611][T23909] No such timeout policy "syz0" [ 833.164823][T23912] loop3: detected capacity change from 0 to 64 [ 833.308702][T23912] Bad inode number on dev loop3: 5 is out of range [ 833.374589][ T4610] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 833.393778][T23918] loop4: detected capacity change from 0 to 512 [ 833.537410][T23918] EXT4-fs (loop4): orphan cleanup on readonly fs [ 833.587596][T23918] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.8982: invalid indirect mapped block 28777 (level 2) [ 833.663214][ T4610] usb 2-1: Using ep0 maxpacket: 32 [ 833.779116][T23918] EXT4-fs (loop4): 1 truncate cleaned up [ 833.808131][T23918] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,resuid=0x000000000000ee00,,errors=continue. Quota mode: none. [ 833.853413][ T26] audit: type=1326 audit(2000000966.420:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23937 comm="syz.2.8989" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7ed7677e59 code=0x0 [ 833.894018][ T4610] usb 2-1: unable to get BOS descriptor or descriptor too short [ 833.904215][T23918] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 834.001990][T23918] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: none. [ 834.026731][ T4610] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 834.078832][ T4610] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 834.127924][ T4610] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 834.180587][ T4610] usb 2-1: config 128 has no interface number 0 [ 834.208734][ T4610] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 834.247035][ T4610] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 834.260222][ T4610] usb 2-1: config 128 interface 127 has no altsetting 0 [ 834.453402][T23961] validate_nla: 1 callbacks suppressed [ 834.453422][T23961] netlink: 'syz.4.8996': attribute type 1 has an invalid length. [ 834.501043][T23961] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.8996'. [ 834.529192][ T4610] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 834.538461][ T4610] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.585015][ T4610] usb 2-1: Product: syz [ 834.589252][ T4610] usb 2-1: Manufacturer: syz [ 834.613178][ T4610] usb 2-1: SerialNumber: syz [ 834.628151][T23957] loop0: detected capacity change from 0 to 4096 [ 834.710194][T23957] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 834.780841][T23957] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 834.808325][T23957] ntfs3: loop0: Failed to load $Extend. [ 834.823369][T23974] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 834.990966][T23979] xt_TPROXY: Can be used only with -p tcp or -p udp [ 835.145223][ T4610] usb 2-1: USB disconnect, device number 23 [ 835.239627][T23997] loop3: detected capacity change from 0 to 128 [ 835.239672][T23999] netlink: 372 bytes leftover after parsing attributes in process `syz.4.9020'. [ 835.267712][T23999] netlink: 'syz.4.9020': attribute type 3 has an invalid length. [ 835.275614][T23999] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9020'. [ 835.316801][T23997] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 835.330584][T23997] System zones: 1-3, 19-19, 35-36 [ 835.340404][T23997] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,,errors=continue. Quota mode: none. [ 835.422380][T18854] udevd[18854]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 835.840957][ T26] audit: type=1326 audit(2000000968.282:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24023 comm="syz.1.9031" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb2ebd3e59 code=0x0 [ 836.077214][T24033] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9036'. [ 836.287435][T24045] netlink: 168 bytes leftover after parsing attributes in process `syz.1.9042'. [ 836.303129][ T4611] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 836.395950][T24049] ieee802154 phy0 wpan0: encryption failed: -22 [ 836.559571][T24061] loop4: detected capacity change from 0 to 16 [ 836.584594][ T4611] usb 4-1: Using ep0 maxpacket: 32 [ 836.661935][T24067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9053'. [ 836.673468][T24061] erofs: (device loop4): mounted with root inode @ nid 36. [ 836.742325][ T4611] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 836.758859][ T4611] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 836.797749][ T4611] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 836.816844][ T4611] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 836.886989][ T4611] usb 4-1: config 1 interface 1 has no altsetting 0 [ 837.105572][ T4611] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 837.114679][ T4611] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.133920][ T4611] usb 4-1: Product: syz [ 837.140740][ T4611] usb 4-1: Manufacturer: syz [ 837.145472][ T4611] usb 4-1: SerialNumber: syz [ 837.327025][T24101] loop0: detected capacity change from 0 to 1024 [ 837.483546][T24101] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 837.501528][ T4611] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 837.509504][ T4611] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 837.741998][ T4611] usb 4-1: USB disconnect, device number 27 [ 837.813583][T24123] device bridge_slave_1 left promiscuous mode [ 837.841717][T24123] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.925003][T24123] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 837.948896][T24125] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9080'. [ 838.068175][T18822] udevd[18822]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 838.916815][T24160] device team0 entered promiscuous mode [ 838.955026][T24160] device team_slave_0 entered promiscuous mode [ 838.960875][T24138] loop0: detected capacity change from 0 to 32768 [ 838.961866][T24160] device team_slave_1 entered promiscuous mode [ 838.997313][T24162] loop3: detected capacity change from 0 to 64 [ 839.014311][T24138] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.9087 (24138) [ 839.082620][T24138] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 839.136538][T24138] BTRFS info (device loop0): using free space tree [ 839.143451][T24138] BTRFS info (device loop0): has skinny extents [ 839.165711][T24140] loop1: detected capacity change from 0 to 40427 [ 839.271668][T24140] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 839.323970][T24140] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 839.376036][T24140] F2FS-fs (loop1): Unrecognized mount option "user_xa tr" or missing value [ 839.472351][T24138] BTRFS info (device loop0): enabling ssd optimizations [ 839.713956][ T4607] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 839.826708][T24201] loop4: detected capacity change from 0 to 512 [ 839.923990][T24197] loop3: detected capacity change from 0 to 4096 [ 840.015428][ T4607] usb 2-1: Using ep0 maxpacket: 32 [ 840.153007][T24201] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c02c, mo2=0002] [ 840.161476][T24201] System zones: 1-12 [ 840.176448][T24197] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 840.205970][ T4607] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 840.257889][T24201] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.9109: error while reading EA inode 32 err=-116 [ 840.263660][ T4607] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 840.347070][ T4607] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 840.389935][T24201] EXT4-fs (loop4): Remounting filesystem read-only [ 840.404769][T24201] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 840.419921][ T4607] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 54485, setting to 1024 [ 840.438836][T24201] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.9109: error while reading EA inode 32 err=-116 [ 840.473295][ T4607] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 840.488206][T24201] EXT4-fs (loop4): Remounting filesystem read-only [ 840.495032][ T4607] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 26 [ 840.518572][T24201] EXT4-fs (loop4): 1 orphan inode deleted [ 840.535248][T24201] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,debug,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsddf,jqfmt=vfsv1,grpid,. Quota mode: none. [ 840.554979][T24218] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9115'. [ 840.591843][T24218] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9115'. [ 840.669560][T24220] device wireguard0 entered promiscuous mode [ 840.716777][ T4607] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 840.782998][ T4607] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 840.787886][T24227] kAFS: unable to lookup cell '(,c¾Ì' [ 840.847722][ T4607] usb 2-1: SerialNumber: syz [ 840.901041][T24140] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 840.923845][ T4607] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 840.942145][T24233] loop3: detected capacity change from 0 to 16 [ 840.959902][ T4607] cdc_acm: probe of 2-1:1.0 failed with error -12 [ 841.019523][T24233] erofs: (device loop3): mounted with root inode @ nid 36. [ 841.172410][ T4610] usb 2-1: USB disconnect, device number 24 [ 841.182840][T24243] loop4: detected capacity change from 0 to 64 [ 841.212346][T24245] loop3: detected capacity change from 0 to 164 [ 841.382830][T24245] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 841.540080][T24262] netlink: 'syz.3.9136': attribute type 25 has an invalid length. [ 841.598515][T24262] netlink: 'syz.3.9136': attribute type 1 has an invalid length. [ 841.629138][T24266] loop4: detected capacity change from 0 to 512 [ 841.754032][T24266] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.9137: invalid indirect mapped block 4294967295 (level 1) [ 841.902968][T24266] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.9137: invalid indirect mapped block 4294967295 (level 1) [ 841.993233][T24266] EXT4-fs (loop4): 2 truncates cleaned up [ 841.999152][T24266] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_dev=0x0000000000000002,init_itable=0x0000000000004004,barrier=0x0000000000000005,,errors=continue. Quota mode: writeback. [ 842.154426][T24266] EXT4-fs (loop4): Cannot specify journal on remount [ 842.914718][T11565] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 843.078138][T24327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9167'. [ 843.089747][T24285] loop1: detected capacity change from 0 to 32768 [ 843.199118][T11565] usb 4-1: Using ep0 maxpacket: 32 [ 843.329928][T11565] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 843.351058][T11565] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 843.365573][T11565] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 843.420893][T11565] usb 4-1: config 1 has no interface number 0 [ 843.450358][T11565] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 843.486334][T11565] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 843.518588][T11565] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 843.540379][T11565] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.630119][T11565] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 843.862997][T11565] snd_usb_pod 4-1:1.1: invalid control EP [ 843.868807][T11565] snd_usb_pod 4-1:1.1: cannot start listening: -22 [ 843.911166][T11565] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 843.921861][T11565] snd_usb_pod: probe of 4-1:1.1 failed with error -22 [ 844.104174][ T4309] usb 4-1: USB disconnect, device number 28 [ 844.179771][T24362] i2c i2c-0: Invalid block write size 33 [ 844.259867][T24353] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 844.270818][T24366] xt_recent: hitcount (262144) is larger than allowed maximum (255) [ 844.287515][T24353] ntfs3: loop2: Failed to load $Extend. [ 844.357204][T24368] openvswitch: netlink: Actions may not be safe on all matching packets [ 844.384037][T24370] device syz_tun entered promiscuous mode [ 844.440040][T24370] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 844.529655][T24374] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9191'. [ 844.563323][T24374] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9191'. [ 844.810161][T24387] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.9196'. [ 844.845464][T24387] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 844.869700][T24392] set_capacity_and_notify: 1 callbacks suppressed [ 844.869718][T24392] loop2: detected capacity change from 0 to 16 [ 845.074273][T24392] erofs: (device loop2): mounted with root inode @ nid 36. [ 845.453740][T24428] ipt_CLUSTERIP: bad local_nodes[1] 0 [ 845.461785][T24430] netlink: 'syz.4.9217': attribute type 1 has an invalid length. [ 845.495375][T24430] netlink: 3 bytes leftover after parsing attributes in process `syz.4.9217'. [ 845.687741][T24444] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 846.048618][T24462] loop2: detected capacity change from 0 to 4096 [ 846.076230][T24465] loop3: detected capacity change from 0 to 4096 [ 846.116434][T24462] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 846.188036][T24465] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 846.244925][T24465] ntfs3: loop3: Failed to load $Extend. [ 846.364050][ T4610] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 846.658324][ T4610] usb 5-1: Using ep0 maxpacket: 32 [ 846.801997][ T4610] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 846.967264][T24505] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9255'. [ 847.058619][ T4610] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 847.079658][ T4610] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.101822][ T4610] usb 5-1: Product: syz [ 847.118819][ T4610] usb 5-1: Manufacturer: syz [ 847.144132][ T4610] usb 5-1: SerialNumber: syz [ 847.152043][T24474] loop1: detected capacity change from 0 to 32768 [ 847.171064][ T4610] usb 5-1: config 0 descriptor?? [ 847.241650][T24474] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.9240 (24474) [ 847.254449][ T4610] usb 5-1: bad CDC descriptors [ 847.272795][T24474] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 847.285134][ T4610] usb 5-1: unsupported MDLM descriptors [ 847.301791][T24474] BTRFS info (device loop1): using free space tree [ 847.357291][T24474] BTRFS info (device loop1): has skinny extents [ 847.465058][T24530] netlink: 'syz.2.9264': attribute type 10 has an invalid length. [ 847.546794][ T4610] usb 5-1: USB disconnect, device number 111 [ 847.568449][T24530] netlink: 2 bytes leftover after parsing attributes in process `syz.2.9264'. [ 847.606357][T24530] device bond0 entered promiscuous mode [ 847.621685][T24530] device bond_slave_0 entered promiscuous mode [ 847.629796][T24530] device bond_slave_1 entered promiscuous mode [ 847.639044][T24530] bridge0: port 3(bond0) entered blocking state [ 847.645634][T24530] bridge0: port 3(bond0) entered disabled state [ 847.719448][T24474] BTRFS info (device loop1): enabling ssd optimizations [ 847.948555][T24556] netlink: 'syz.2.9270': attribute type 1 has an invalid length. [ 848.077361][T24564] loop0: detected capacity change from 0 to 64 [ 848.415970][T24576] netlink: 220 bytes leftover after parsing attributes in process `syz.2.9281'. [ 849.007443][T24608] netlink: 100 bytes leftover after parsing attributes in process `syz.4.9296'. [ 849.322539][T24627] netlink: 'syz.3.9305': attribute type 3 has an invalid length. [ 849.374583][T24627] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.9305'. [ 849.428725][T24633] loop1: detected capacity change from 0 to 512 [ 849.509158][T24633] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 849.589876][T24633] EXT4-fs (loop1): orphan cleanup on readonly fs [ 849.632244][T24633] EXT4-fs error (device loop1): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 849.692784][T24633] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.9307: corrupted inode contents [ 849.708404][T24633] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #12: comm syz.1.9307: mark_inode_dirty error [ 849.730784][T24649] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9316'. [ 849.753928][T24633] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.9307: corrupted inode contents [ 849.827560][T24633] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #12: comm syz.1.9307: mark_inode_dirty error [ 849.910018][T24633] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.9307: corrupted inode contents [ 849.948599][T24633] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 849.977568][T24633] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.9307: corrupted inode contents [ 850.015666][T24633] EXT4-fs error (device loop1): ext4_truncate:4286: inode #12: comm syz.1.9307: mark_inode_dirty error [ 850.048379][T24633] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 850.095816][T24633] EXT4-fs (loop1): 1 truncate cleaned up [ 850.109049][T24633] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,noblock_validity,nolazytime,auto_da_alloc=0x0000000000000005,minixdf,resgid=0x000000000000ee01,noinit_itable,noinit_itable,journal_dev=0x0000000000000afb2,errors=continue. Quota mode: writeback. [ 850.231264][T24633] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 850.249983][T24633] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 850.297724][T18411] usb 1-1: new full-speed USB device number 125 using dummy_hcd [ 850.308554][ T4608] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 850.683013][T18411] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 850.782226][ T4608] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 850.803807][ T4608] usb 4-1: config 0 has no interface number 0 [ 850.810000][ T4608] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 850.811822][T18411] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 850.824218][ T4608] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 850.843582][T18411] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 850.851976][T18411] usb 1-1: Manufacturer: syz [ 850.861684][T18411] usb 1-1: SerialNumber: syz [ 850.934878][T24694] loop4: detected capacity change from 0 to 4096 [ 851.014081][T18279] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 851.035652][ T4608] usb 4-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 851.045075][ T4608] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.053694][ T4608] usb 4-1: Product: syz [ 851.058175][ T4608] usb 4-1: Manufacturer: syz [ 851.062846][ T4608] usb 4-1: SerialNumber: syz [ 851.070173][ T4608] usb 4-1: config 0 descriptor?? [ 851.111539][ T4608] cypress_m8 4-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 851.168636][T18411] usbhid 1-1:36.0: couldn't find an input interrupt endpoint [ 851.182671][T18411] usb 1-1: USB disconnect, device number 125 [ 851.253557][T24700] loop4: detected capacity change from 0 to 2048 [ 851.281320][T18279] usb 2-1: Using ep0 maxpacket: 32 [ 851.327548][T24700] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 851.346907][ T4608] usb 4-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0 [ 851.370384][ T4608] usb 4-1: USB disconnect, device number 29 [ 851.391278][ T4608] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0 [ 851.410428][ T4608] cypress_m8 4-1:0.35: device disconnected [ 851.441864][T18279] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 851.452035][T18279] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 851.656031][T18279] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 851.665191][T18279] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.688494][T18279] usb 2-1: Product: syz [ 851.693554][T18279] usb 2-1: Manufacturer: syz [ 851.698594][T18279] usb 2-1: SerialNumber: syz [ 851.705844][T18279] usb 2-1: config 0 descriptor?? [ 851.976585][T18279] snd-usb-6fire 2-1:0.0: unknown device firmware state received from device: [ 851.991910][T18279] f0 e4 3d a7 d3 60 4f fe [ 852.018234][T18279] snd-usb-6fire: probe of 2-1:0.0 failed with error -5 [ 852.208465][T11565] usb 2-1: USB disconnect, device number 25 [ 852.292874][T24732] loop4: detected capacity change from 0 to 8192 [ 852.366447][T24732] attempt to access beyond end of device [ 852.366447][T24732] loop4: rw=0, want=57848, limit=8192 [ 852.397917][T24748] loop0: detected capacity change from 0 to 512 [ 852.425848][T24732] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 852.445476][T24732] FAT-fs (loop4): Filesystem has been set read-only [ 852.475009][T24748] EXT4-fs (loop0): Ignoring removed nobh option [ 852.496559][T24732] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 852.531824][T24732] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 852.582972][T24748] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #3: comm syz.0.9363: corrupted inode contents [ 852.613548][T24748] EXT4-fs (loop0): Remounting filesystem read-only [ 852.642869][T24748] EXT4-fs error (device loop0): ext4_dirty_inode:6077: inode #3: comm syz.0.9363: mark_inode_dirty error [ 852.719736][T24748] EXT4-fs (loop0): Remounting filesystem read-only [ 852.800956][T24748] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #3: comm syz.0.9363: corrupted inode contents [ 852.871092][T24748] EXT4-fs (loop0): Remounting filesystem read-only [ 852.889376][T24748] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #3: comm syz.0.9363: mark_inode_dirty error [ 852.894667][T24761] device wlan0 entered promiscuous mode [ 852.909725][T24748] EXT4-fs (loop0): Remounting filesystem read-only [ 852.918665][T24748] Quota error (device loop0): write_blk: dquota write failed [ 852.928155][T24748] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 852.938599][T24748] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.9363: Failed to acquire dquot type 0 [ 853.009524][T24748] EXT4-fs (loop0): Remounting filesystem read-only [ 853.050254][T24748] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #16: comm syz.0.9363: corrupted inode contents [ 853.088232][T24748] EXT4-fs (loop0): Remounting filesystem read-only [ 853.105555][T24748] EXT4-fs error (device loop0): ext4_dirty_inode:6077: inode #16: comm syz.0.9363: mark_inode_dirty error [ 853.145437][T24748] EXT4-fs (loop0): Remounting filesystem read-only [ 853.173453][T24748] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #16: comm syz.0.9363: corrupted inode contents [ 853.206002][ T2427] pvrusb2: request_firmware fatal error with code=-110 [ 853.212926][ T2427] pvrusb2: Failure uploading firmware1 [ 853.252419][T24748] EXT4-fs (loop0): Remounting filesystem read-only [ 853.259223][ T2427] pvrusb2: Device initialization was not successful. [ 853.265957][ T2427] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 853.272017][T24748] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.9363: mark_inode_dirty error [ 853.302016][ T2427] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 853.311275][ T9274] pvrusb2: Device being rendered inoperable [ 853.323946][T24748] EXT4-fs (loop0): Remounting filesystem read-only [ 853.348044][ T9274] pvrusb2: Device being rendered inoperable [ 853.372983][T24748] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #16: comm syz.0.9363: corrupted inode contents [ 853.395193][T24748] EXT4-fs (loop0): Remounting filesystem read-only [ 853.409175][T24748] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 853.418680][T24748] EXT4-fs (loop0): Remounting filesystem read-only [ 853.431610][T24748] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #16: comm syz.0.9363: corrupted inode contents [ 853.473299][T24748] EXT4-fs (loop0): Remounting filesystem read-only [ 853.479890][T24748] EXT4-fs error (device loop0): ext4_truncate:4286: inode #16: comm syz.0.9363: mark_inode_dirty error [ 853.504656][T24748] EXT4-fs (loop0): Remounting filesystem read-only [ 853.513987][T24748] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 853.588499][T24748] EXT4-fs (loop0): Remounting filesystem read-only [ 853.599935][T24748] EXT4-fs (loop0): 1 truncate cleaned up [ 853.613588][T24748] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nobh,. Quota mode: writeback. [ 853.662048][T24748] ext4 filesystem being mounted at /1868/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 853.663698][T24790] x_tables: duplicate entry at hook 2 [ 853.723464][T24748] EXT4-fs error (device loop0): ext4_search_dir:1549: inode #12: block 13: comm syz.0.9363: bad entry in directory: inode out of bounds - offset=24, inode=33554445, rec_len=16, size=4096 fake=0 [ 853.747399][T24795] loop2: detected capacity change from 0 to 128 [ 853.760783][T24748] EXT4-fs (loop0): Remounting filesystem read-only [ 854.296039][ T9274] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 854.397768][T24827] netlink: 'syz.4.9402': attribute type 7 has an invalid length. [ 854.419165][T24828] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9400'. [ 854.605952][ T9274] usb 2-1: Using ep0 maxpacket: 32 [ 854.767511][ T9274] usb 2-1: config 76 has an invalid descriptor of length 0, skipping remainder of the config [ 854.969816][ T9274] usb 2-1: New USB device found, idVendor=069a, idProduct=0001, bcdDevice=51.c5 [ 854.989198][T24864] autofs4:pid:24864:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(2.1), cmd(0xc0189374) [ 854.990020][ T9274] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.043236][T24868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9418'. [ 855.053864][ T9274] usb 2-1: Product: syz [ 855.065690][ T9274] usb 2-1: Manufacturer: syz [ 855.069431][T24864] autofs4:pid:24864:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 855.080497][ T9274] usb 2-1: SerialNumber: syz [ 855.153447][ T9274] pwc: Askey VC010 type 1 USB webcam detected. [ 855.461363][ T9274] pwc: send_video_command error -71 [ 855.466833][ T9274] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 855.488899][ T9274] Philips webcam: probe of 2-1:76.0 failed with error -71 [ 855.512422][ T9274] usb 2-1: USB disconnect, device number 26 [ 855.539361][T24882] loop4: detected capacity change from 0 to 4096 [ 855.595192][T24882] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 855.611232][T24882] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 855.691296][T24882] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 855.709330][T24882] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 855.725733][T24882] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 855.738957][T24882] ntfs: volume version 3.1. [ 855.762743][T24882] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 855.784910][T24882] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 855.813871][T24882] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 856.272416][T24914] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9441'. [ 856.453075][T24892] loop0: detected capacity change from 0 to 32768 [ 856.581916][T24892] ea_get: invalid extended attribute [ 856.787242][T24896] loop2: detected capacity change from 0 to 40427 [ 856.824077][T24938] netlink: 'syz.0.9453': attribute type 21 has an invalid length. [ 856.838493][T24896] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 856.855738][T24896] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 856.867158][T24938] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9453'. [ 856.887931][T24896] F2FS-fs (loop2): invalid crc value [ 856.935330][T24896] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 857.021581][T24949] netlink: 'syz.3.9457': attribute type 1 has an invalid length. [ 857.075567][T24949] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.9457'. [ 857.130864][T24896] F2FS-fs (loop2): recover fsync data on readonly fs [ 857.175017][T24896] F2FS-fs (loop2): Try to recover 2th superblock, ret: -30 [ 857.185620][T24896] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 857.246534][T18419] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 857.272444][T18279] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 857.482015][T24957] device syz_tun entered promiscuous mode [ 857.514690][T18419] usb 5-1: Using ep0 maxpacket: 8 [ 857.551950][T24957] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 857.727838][T18279] usb 2-1: config 0 has an invalid interface number: 147 but max is 0 [ 857.736069][T18279] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 857.755533][T18279] usb 2-1: config 0 has no interface number 0 [ 857.762716][T18279] usb 2-1: config 0 interface 147 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 857.774304][T18279] usb 2-1: config 0 interface 147 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 857.786363][T18279] usb 2-1: config 0 interface 147 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 857.834874][T18419] usb 5-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice= 0.40 [ 857.853982][T18419] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.868744][T18419] usb 5-1: Product: syz [ 857.877329][T18419] usb 5-1: Manufacturer: syz [ 857.881988][T18419] usb 5-1: SerialNumber: syz [ 857.973762][T18279] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.03 [ 857.993760][T18279] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.006929][T18279] usb 2-1: Product: syz [ 858.026255][T18279] usb 2-1: Manufacturer: syz [ 858.037419][T18279] usb 2-1: SerialNumber: syz [ 858.050415][T18279] usb 2-1: config 0 descriptor?? [ 858.080892][T24945] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 858.145581][T18279] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 858.242988][T18419] usb 5-1: selecting invalid altsetting 1 [ 858.306329][T18419] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 858.313610][T24959] loop3: detected capacity change from 0 to 32768 [ 858.324263][T18419] usb 5-1: USB disconnect, device number 112 [ 858.341795][ T4610] usb 2-1: USB disconnect, device number 27 [ 858.358593][ T4704] usb 2-1: Failed to submit usb control message: -71 [ 858.387941][ T4704] usb 2-1: unable to send the bmi data to the device: -71 [ 858.406694][ T4704] usb 2-1: unable to get target info from device [ 858.422756][T24959] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.9464 (24959) [ 858.441423][ T4704] usb 2-1: could not get target info (-71) [ 858.450992][ T4704] usb 2-1: could not probe fw (-71) [ 858.562454][T18858] udevd[18858]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 858.630691][T24959] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 858.641009][T24959] BTRFS info (device loop3): using free space tree [ 858.648176][T24959] BTRFS info (device loop3): has skinny extents [ 858.835267][T24959] BTRFS info (device loop3): enabling ssd optimizations [ 858.891086][T25024] netlink: 88 bytes leftover after parsing attributes in process `syz.2.9483'. [ 859.199410][T18858] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop3 scanned by udevd (18858) [ 859.728378][T25067] loop0: detected capacity change from 0 to 164 [ 859.880000][T25067] rock: directory entry would overflow storage [ 859.901168][T25067] rock: sig=0x4f50, size=4, remaining=3 [ 859.917796][T25067] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 859.986216][T25078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9510'. [ 860.004739][ T4602] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 860.035869][T25075] loop1: detected capacity change from 0 to 4096 [ 860.165123][ T7099] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 860.271988][ T4602] usb 5-1: Using ep0 maxpacket: 16 [ 860.407408][ T4602] usb 5-1: config 253 has an invalid interface number: 184 but max is 0 [ 860.427079][ T4602] usb 5-1: config 253 has no interface number 0 [ 860.437903][ T4602] usb 5-1: config 253 interface 184 has no altsetting 0 [ 860.630254][ T7099] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 860.649192][ T7099] usb 4-1: config 0 has no interface number 0 [ 860.706874][ T4602] usb 5-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 860.717243][ T4602] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.735772][ T4602] usb 5-1: Product: syz [ 860.740434][ T4602] usb 5-1: Manufacturer: syz [ 860.745538][ T4602] usb 5-1: SerialNumber: syz [ 860.767353][T25099] loop2: detected capacity change from 0 to 512 [ 860.790689][T25099] EXT4-fs (loop2): orphan cleanup on readonly fs [ 860.797509][T25099] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #4: comm syz.2.9521: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 1(1) [ 860.823863][ T4602] go7007: probe of 5-1:253.184 failed with error -12 [ 860.831872][T25099] EXT4-fs error (device loop2): ext4_quota_enable:6447: comm syz.2.9521: Bad quota inode: 4, type: 1 [ 860.845630][T25099] EXT4-fs warning (device loop2): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 860.861329][ T7099] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 860.870768][ T7099] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.871320][T25099] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 860.879233][ T7099] usb 4-1: Product: syz [ 860.890134][ T7099] usb 4-1: Manufacturer: syz [ 860.894906][ T7099] usb 4-1: SerialNumber: syz [ 860.902485][ T7099] usb 4-1: config 0 descriptor?? [ 860.910261][T25099] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 860.938590][T25099] EXT4-fs error (device loop2): ext4_lookup:1855: inode #2: comm syz.2.9521: 'file0' linked to parent dir [ 861.041350][ T4610] usb 5-1: USB disconnect, device number 113 [ 861.341378][T25104] ALSA: mixer_oss: invalid OSS volume 'u' [ 861.426816][ T7099] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 861.458602][ T7099] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 861.485742][ T7099] asix: probe of 4-1:0.251 failed with error -5 [ 861.530237][ T7099] usb 4-1: USB disconnect, device number 30 [ 861.778855][T25122] device vlan0 entered promiscuous mode [ 862.310594][T25144] loop1: detected capacity change from 0 to 2048 [ 862.415131][T25113] loop2: detected capacity change from 0 to 32768 [ 862.440164][T25144] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 862.594322][T25113] XFS (loop2): Mounting V5 Filesystem [ 862.688183][T18412] usb 1-1: new full-speed USB device number 126 using dummy_hcd [ 862.712057][T25162] netlink: 'syz.4.9548': attribute type 3 has an invalid length. [ 862.728829][T25164] loop1: detected capacity change from 0 to 256 [ 862.738062][T25113] XFS (loop2): Ending clean mount [ 862.746335][T25162] netlink: 766 bytes leftover after parsing attributes in process `syz.4.9548'. [ 862.760954][T25113] XFS (loop2): Quotacheck needed: Please wait. [ 862.817053][T25164] exfat: Deprecated parameter 'namecase' [ 862.842836][T25113] XFS (loop2): Quotacheck: Done. [ 862.872734][T25164] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d) [ 862.908502][T25135] loop3: detected capacity change from 0 to 32768 [ 862.946978][ T4625] XFS (loop2): Unmounting Filesystem [ 863.025738][T25135] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.9539 (25135) [ 863.120810][T25135] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 863.158609][T18412] usb 1-1: unable to get BOS descriptor or descriptor too short [ 863.165312][T25135] BTRFS info (device loop3): using free space tree [ 863.182089][T25135] BTRFS info (device loop3): has skinny extents [ 863.216177][T18412] usb 1-1: not running at top speed; connect to a high speed hub [ 863.330113][T18412] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 863.362737][T18412] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 863.564936][T18412] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 863.585233][T18412] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.594178][T25135] BTRFS info (device loop3): enabling ssd optimizations [ 863.601597][T18412] usb 1-1: Product: syz [ 863.606231][T18412] usb 1-1: Manufacturer: syz [ 863.612369][T18412] usb 1-1: SerialNumber: syz [ 863.648365][T25203] netlink: 'syz.1.9559': attribute type 2 has an invalid length. [ 863.671416][T25203] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 863.952980][T18412] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 864.057741][T18412] snd-usb-audio: probe of 1-1:1.1 failed with error -22 [ 864.085488][T18412] usb 1-1: USB disconnect, device number 126 [ 864.340616][T18858] udevd[18858]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 864.490824][T25235] loop1: detected capacity change from 0 to 1024 [ 864.588865][T25239] loop0: detected capacity change from 0 to 512 [ 864.640905][T25239] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 864.680805][T25235] EXT4-fs (loop1): #clusters per group too big: 24576 [ 864.750895][T25239] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 865.031615][T25228] loop2: detected capacity change from 0 to 32768 [ 865.039083][T25260] program syz.1.9584 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 865.120827][T25228] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.9571 (25228) [ 865.175202][T25267] netlink: 'syz.3.9589': attribute type 1 has an invalid length. [ 865.198027][T25267] netlink: 220 bytes leftover after parsing attributes in process `syz.3.9589'. [ 865.238186][T25273] loop0: detected capacity change from 0 to 8 [ 865.261286][T25228] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 865.294174][T25228] BTRFS info (device loop2): using free space tree [ 865.318611][T25228] BTRFS info (device loop2): has skinny extents [ 865.508895][T25305] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (3) [ 865.545963][T25228] BTRFS info (device loop2): enabling ssd optimizations [ 865.596359][T18415] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 865.613568][T25313] loop4: detected capacity change from 0 to 8 [ 865.981241][T18415] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 865.990379][T18415] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.056888][T18415] usb 4-1: config 0 descriptor?? [ 866.395955][T25341] loop4: detected capacity change from 0 to 32768 [ 866.410881][T25348] erofs: (device loop0): mounted with root inode @ nid 36. [ 866.465940][T25341] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.9617 (25341) [ 866.536045][T25341] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 866.549222][T18415] ath6kl: Failed to submit usb control message: -71 [ 866.555906][T18415] ath6kl: unable to send the bmi data to the device: -71 [ 866.581038][T25341] BTRFS info (device loop4): using free space tree [ 866.588913][T18415] ath6kl: Unable to send get target info: -71 [ 866.602236][T25341] BTRFS info (device loop4): has skinny extents [ 866.619172][T18415] ath6kl: Failed to init ath6kl core: -71 [ 866.938242][T18415] ath6kl_usb: probe of 4-1:0.0 failed with error -71 [ 866.963618][T18415] usb 4-1: USB disconnect, device number 31 [ 867.007086][T18419] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 867.120104][T25359] XFS (loop2): sunit and swidth must be specified together [ 867.218851][T25341] BTRFS info (device loop4): enabling ssd optimizations [ 867.316477][T25378] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 867.398716][T25378] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 867.413663][T18419] usb 1-1: config 1 has an invalid descriptor of length 141, skipping remainder of the config [ 867.439535][T18419] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 58823, setting to 1024 [ 867.490564][T18419] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1024 [ 867.541246][T18419] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 867.787892][T18419] usb 1-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40 [ 867.813316][T18419] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.843026][T18419] usb 1-1: Product: syz [ 867.858643][T18419] usb 1-1: Manufacturer: syz [ 867.875090][T18419] usb 1-1: SerialNumber: syz [ 867.916254][T25348] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 868.380920][T18419] usb 1-1: USB disconnect, device number 127 [ 868.544144][T25417] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 868.556472][T25416] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 868.583208][T25417] overlayfs: overlapping lowerdir path [ 868.805795][T18854] udevd[18854]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 868.917472][T25422] binder: 25421:25422 ioctl c018620c 200000000040 returned -1 [ 869.012256][T25426] set_capacity_and_notify: 2 callbacks suppressed [ 869.012276][T25426] loop1: detected capacity change from 0 to 64 [ 869.027843][T25411] loop2: detected capacity change from 0 to 32768 [ 869.082576][T25411] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.9641 (25411) [ 869.121343][T25434] netlink: 'syz.4.9652': attribute type 2 has an invalid length. [ 869.136146][T25426] Trying to free block not in datazone [ 869.156556][T25426] Trying to free block not in datazone [ 869.162088][T25426] Trying to free block not in datazone [ 869.179437][T25411] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 869.209434][T25426] Trying to free block not in datazone [ 869.215334][T25411] BTRFS info (device loop2): using free space tree [ 869.239383][T25411] BTRFS info (device loop2): has skinny extents [ 869.246759][T25426] Trying to free block not in datazone [ 869.257401][T25426] minix_free_block (loop1:6): bit already cleared [ 869.267803][T25440] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 869.287155][T25426] Trying to free block not in datazone [ 869.297865][T25426] Trying to free block not in datazone [ 869.519490][T18419] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 869.603065][T25411] BTRFS info (device loop2): enabling ssd optimizations [ 869.786883][T18419] usb 4-1: Using ep0 maxpacket: 16 [ 869.915187][T18419] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 869.923592][T18419] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 869.972442][T18419] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 870.073533][T25487] bond0: Error: Cannot enslave bond to itself. [ 870.161125][T18419] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 870.173819][T18419] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.216530][T18419] usb 4-1: Product: syz [ 870.221001][T18419] usb 4-1: Manufacturer: syz [ 870.247144][T18419] usb 4-1: SerialNumber: syz [ 870.278471][T18411] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 870.297438][T18419] r8152-cfgselector 4-1: config 0 descriptor?? [ 870.565821][T25480] loop4: detected capacity change from 0 to 32768 [ 870.599753][T18419] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 870.666533][T25500] netlink: 'syz.2.9667': attribute type 9 has an invalid length. [ 870.674895][T18411] usb 2-1: config 0 has an invalid interface number: 18 but max is 0 [ 870.683046][T18411] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 870.701656][T25480] jfs_strtoUCS: char2uni returned -22. [ 870.708856][T25480] charset = cp1255, char = 0xfc [ 870.725576][T18411] usb 2-1: config 0 has no interface number 0 [ 870.732824][T25500] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.9667'. [ 870.748873][T18411] usb 2-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 870.773328][T18411] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.797480][T25502] netlink: 'syz.0.9676': attribute type 1 has an invalid length. [ 870.806452][T18411] usb 2-1: config 0 descriptor?? [ 870.827640][T18415] usb 4-1: USB disconnect, device number 32 [ 870.840283][T25502] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9676'. [ 870.864186][T25502] nbd: couldn't find a device at index 1024 [ 870.880857][T18411] rndis_wlan 2-1:0.18: skipping garbage [ 870.887405][T25504] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 870.905399][T18411] usb 2-1: bad CDC descriptors [ 870.921111][T25504] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 870.930369][T25504] overlayfs: missing 'lowerdir' [ 870.952410][T18411] rndis_host 2-1:0.18: skipping garbage [ 870.971199][T18411] usb 2-1: bad CDC descriptors [ 871.087848][T18415] usb 2-1: USB disconnect, device number 28 [ 871.132738][T25513] usb usb7: usbfs: process 25513 (syz.0.9681) did not claim interface 0 before use [ 871.547331][T25507] loop2: detected capacity change from 0 to 32768 [ 871.622712][T25507] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.9678 (25507) [ 871.635097][T25533] netlink: 92 bytes leftover after parsing attributes in process `syz.3.9691'. [ 871.786150][T25507] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 871.817392][T25507] BTRFS info (device loop2): using free space tree [ 871.845159][T25507] BTRFS info (device loop2): has skinny extents [ 871.882123][ T4601] usb 5-1: new full-speed USB device number 114 using dummy_hcd [ 871.901031][T25543] loop3: detected capacity change from 0 to 2048 [ 872.054638][T25543] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 872.261503][T25575] loop1: detected capacity change from 0 to 8 [ 872.268347][T25507] BTRFS info (device loop2): enabling ssd optimizations [ 872.306835][T25573] netlink: 76 bytes leftover after parsing attributes in process `syz.0.9701'. [ 872.316168][ T4601] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 872.344091][ T4601] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 872.374786][T25575] SQUASHFS error: lzo decompression failed, data probably corrupt [ 872.382693][T25575] SQUASHFS error: Failed to read block 0x91: -5 [ 872.403136][T25573] netlink: 72 bytes leftover after parsing attributes in process `syz.0.9701'. [ 872.445045][T25575] SQUASHFS error: Unable to read metadata cache entry [8f] [ 872.465943][T25573] netlink: 'syz.0.9701': attribute type 3 has an invalid length. [ 872.483470][T25575] SQUASHFS error: Unable to read inode 0x11f [ 872.490971][T25573] netlink: 11 bytes leftover after parsing attributes in process `syz.0.9701'. [ 872.513133][ T4601] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 872.522244][ T4601] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 872.585658][ T4601] usb 5-1: SerialNumber: syz [ 872.672494][ T4601] usb 5-1: 0:2 : does not exist [ 872.741921][T25583] netlink: 'syz.0.9707': attribute type 1 has an invalid length. [ 873.083992][T18412] usb 5-1: USB disconnect, device number 114 [ 873.262317][T18416] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 873.629674][T25618] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 873.657403][T18416] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 42052, setting to 64 [ 873.670794][T25599] loop0: detected capacity change from 0 to 32768 [ 873.702345][T25618] 8021q: adding VLAN 0 to HW filter on device bond3 [ 873.751592][T25599] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.9715 (25599) [ 873.792110][T25599] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 873.812971][T25599] BTRFS info (device loop0): using free space tree [ 873.832799][T25599] BTRFS info (device loop0): has skinny extents [ 873.849361][T18416] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 873.858595][T18416] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.869426][T18416] usb 2-1: Product: syz [ 873.874903][T18416] usb 2-1: Manufacturer: syz [ 873.879953][T18416] usb 2-1: SerialNumber: syz [ 873.888324][T18416] usb 2-1: config 0 descriptor?? [ 873.913586][T25575] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 873.935372][T18416] hub 2-1:0.0: bad descriptor, ignoring hub [ 873.941356][T18416] hub: probe of 2-1:0.0 failed with error -5 [ 874.021760][T18416] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input36 [ 874.166828][T25656] tmpfs: Bad value for 'mpol' [ 874.271929][T25599] BTRFS info (device loop0): enabling ssd optimizations [ 874.805386][T25679] loop2: detected capacity change from 0 to 16 [ 874.939944][T25679] erofs: (device loop2): mounted with root inode @ nid 36. [ 875.082844][T25665] loop4: detected capacity change from 0 to 32768 [ 875.322681][T25665] XFS (loop4): Mounting V5 Filesystem [ 875.369059][T25706] netlink: 'syz.1.9754': attribute type 9 has an invalid length. [ 875.399851][T25706] netlink: 'syz.1.9754': attribute type 7 has an invalid length. [ 875.431633][T25706] netlink: 'syz.1.9754': attribute type 8 has an invalid length. [ 875.461350][T25706] netlink: 'syz.1.9754': attribute type 13 has an invalid length. [ 875.516926][T25665] XFS (loop4): Ending clean mount [ 875.619143][ T21] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 875.719648][ T4629] XFS (loop4): Unmounting Filesystem [ 875.933880][ T21] usb 1-1: Using ep0 maxpacket: 8 [ 875.942059][T25701] loop2: detected capacity change from 0 to 32768 [ 875.982180][T25701] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.9750 (25701) [ 876.040039][T25701] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 876.067487][T25701] BTRFS info (device loop2): using free space tree [ 876.088784][ T21] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 876.094240][T25701] BTRFS info (device loop2): has skinny extents [ 876.110622][ T21] usb 1-1: config 0 interface 0 has no altsetting 0 [ 876.319110][ T21] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 876.358347][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.383345][ T21] usb 1-1: Product: syz [ 876.391334][ T21] usb 1-1: Manufacturer: syz [ 876.397236][ T21] usb 1-1: SerialNumber: syz [ 876.414533][ T21] usb 1-1: config 0 descriptor?? [ 876.471763][ T21] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 876.518122][T25701] BTRFS info (device loop2): enabling ssd optimizations [ 876.552558][T25756] loop4: detected capacity change from 0 to 4096 [ 876.575473][T18279] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 876.621286][T25756] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 876.677892][T25756] EXT4-fs (loop4): inline encryption not supported [ 876.722927][T25756] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled [ 876.736378][ T21] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 876.769264][T25756] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 876.783646][ T21] snd_usb_toneport: probe of 1-1:0.0 failed with error -22 [ 876.860773][T24133] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 9 /dev/loop2 scanned by udevd (24133) [ 876.874353][T25756] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,inlinecrypt,grpjquota=./file0,noblock_validity,mblk_io_submit,resgid=0x0000000000000000,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 876.977616][ T21] usb 1-1: USB disconnect, device number 2 [ 877.029266][T18279] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 877.052677][T18279] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 877.068615][T18279] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 877.109242][T25768] program syz.2.9771 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 877.196935][T18279] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 877.234812][T18279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 877.250860][T18279] usb 4-1: SerialNumber: syz [ 877.542419][T18279] usb 4-1: USB disconnect, device number 33 [ 877.916638][T25808] usb usb9: usbfs: process 25808 (syz.1.9794) did not claim interface 0 before use [ 877.926797][ T21] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 878.055573][T25818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9799'. [ 878.130816][T25822] loop4: detected capacity change from 0 to 128 [ 878.272029][T25830] loop0: detected capacity change from 0 to 256 [ 878.340484][T25830] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x1a218ca7, utbl_chksum : 0xe619d30d) [ 878.371639][ T21] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 878.407470][ T21] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 878.430224][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 878.430242][ T26] audit: type=1800 audit(2000001008.120:42): pid=25830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.9804" name="file1" dev="loop0" ino=1048664 res=0 errno=0 [ 878.500530][T25830] exFAT-fs (loop0): error, invalid access to FAT free cluster (entry 0x00000008) [ 878.524541][T25830] exFAT-fs (loop0): Filesystem has been set read-only [ 878.574627][ T21] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 878.590569][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 878.617186][ T21] usb 3-1: SerialNumber: syz [ 878.842096][T25860] loop4: detected capacity change from 0 to 16 [ 878.928280][T25860] erofs: (device loop4): mounted with root inode @ nid 36. [ 878.951825][ T21] usb 3-1: 0:2 : does not exist [ 878.971712][T25860] attempt to access beyond end of device [ 878.971712][T25860] loop4: rw=0, want=15300821032, limit=16 [ 879.012948][T25860] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 879.029257][ T21] usb 3-1: USB disconnect, device number 22 [ 879.183018][T25879] netlink: 'syz.3.9829': attribute type 11 has an invalid length. [ 879.206268][T25882] comedi comedi4: bad chanlist[0]=0x000001ff chan=511 range length=2 [ 879.253210][T18412] usb 2-1: USB disconnect, device number 29 [ 879.279775][T25886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9831'. [ 879.314773][T25889] loop1: detected capacity change from 0 to 128 [ 879.360511][T25889] vxfs: WRONG superblock magic 7b3185b5 at 1 [ 879.371232][T25889] vxfs: unsupported VxFS version (-1232326277) [ 879.620068][T25907] netlink: 'syz.0.9842': attribute type 1 has an invalid length. [ 879.645885][T25907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9842'. [ 879.695393][T25905] xt_cluster: node mask cannot exceed total number of nodes [ 879.760199][T25913] loop4: detected capacity change from 0 to 64 [ 880.217337][T25889] loop1: detected capacity change from 0 to 32768 [ 880.872923][T18412] usb 4-1: new low-speed USB device number 34 using dummy_hcd [ 880.890933][T25977] CIFS: VFS: Malformed UNC in devname [ 880.925578][T25979] netlink: 'syz.1.9876': attribute type 1 has an invalid length. [ 881.051223][T25989] CIFS mount error: No usable UNC path provided in device string! [ 881.051223][T25989] [ 881.083630][T25989] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 881.169532][T18858] udevd[18858]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 881.268608][T18412] usb 4-1: config 8 has an invalid interface number: 137 but max is 0 [ 881.276863][T18412] usb 4-1: config 8 has no interface number 0 [ 881.334214][T26003] netlink: 'syz.2.9888': attribute type 3 has an invalid length. [ 881.339202][T26005] netlink: 'syz.1.9889': attribute type 1 has an invalid length. [ 881.386901][T26007] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9890'. [ 881.448333][T26007] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9890'. [ 881.557386][T18412] usb 4-1: string descriptor 0 read error: -22 [ 881.563788][T18412] usb 4-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=14.6e [ 881.612178][T18412] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.677224][T26024] x_tables: unsorted underflow at hook 4 [ 881.688029][T18412] ttusb_dec_send_command: command bulk message failed: error -22 [ 881.712088][T18412] ttusb-dec: probe of 4-1:8.137 failed with error -22 [ 881.871436][T26039] netlink: 'syz.4.9904': attribute type 2 has an invalid length. [ 881.889704][T26038] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 881.919012][ T21] usb 4-1: USB disconnect, device number 34 [ 881.998681][T26045] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9907'. [ 882.038106][T26045] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9907'. [ 882.162291][ T26] audit: type=1400 audit(2000001011.609:43): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=26054 comm="syz.2.9912" [ 882.220973][T26058] dlm: no local IP address has been set [ 882.227344][T26058] dlm: cannot start dlm midcomms -107 [ 882.420637][T26071] loop0: detected capacity change from 0 to 2048 [ 882.606365][T26071] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 882.635879][T11565] kernel write not supported for file /3779/net/rt_acct (pid: 11565 comm: kworker/0:21) [ 882.700618][T26071] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 882.712331][T26090] netlink: 'syz.3.9929': attribute type 1 has an invalid length. [ 882.788007][T26092] loop4: detected capacity change from 0 to 512 [ 882.807560][T26096] loop1: detected capacity change from 0 to 164 [ 882.824540][T26097] ipt_REJECT: TCP_RESET invalid for non-tcp [ 882.833108][T26098] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 882.907658][T26092] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nobarrier,stripe=0x0000000000000042,,errors=continue. Quota mode: writeback. [ 882.932327][T26096] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 882.958024][T26092] ext4 filesystem being mounted at /1932/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 883.430969][T26116] xt_CT: No such helper "syz0" [ 883.551340][T26138] No such timeout policy "syz1" [ 883.801517][T26163] xt_l2tp: unknown flags: 17 [ 884.167727][T26189] netlink: 'syz.3.9976': attribute type 7 has an invalid length. [ 884.178604][T26192] QAT: Device 1 not found [ 884.215695][T26189] netlink: 'syz.3.9976': attribute type 1 has an invalid length. [ 884.248065][T26189] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.9976'. [ 884.548942][T26217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9989'. [ 884.593518][T26217] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9989'. [ 885.764637][T26265] SET target dimension over the limit! [ 885.824865][T26269] delete_channel: no stack [ 885.841758][T26270] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 886.206426][T26289] netlink: 'syz.1.10026': attribute type 12 has an invalid length. [ 886.261941][T26289] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10026'. [ 886.324027][T26293] netlink: 'syz.3.10028': attribute type 41 has an invalid length. [ 886.442776][ T21] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 886.575506][T26307] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 886.614796][T26307] exFAT-fs (loop3): unable to read boot sector [ 886.643085][T26307] exFAT-fs (loop3): failed to read boot sector [ 886.677115][T26307] exFAT-fs (loop3): failed to recognize exfat type [ 886.954597][T26332] loop4: detected capacity change from 0 to 256 [ 887.042407][T26332] FAT-fs (loop4): Directory bread(block 64) failed [ 887.049043][T26332] FAT-fs (loop4): Directory bread(block 65) failed [ 887.069492][T26332] FAT-fs (loop4): Directory bread(block 66) failed [ 887.076642][ T21] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 887.088448][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.097446][T26332] FAT-fs (loop4): Directory bread(block 67) failed [ 887.104859][T26332] FAT-fs (loop4): Directory bread(block 68) failed [ 887.112199][ T21] usb 1-1: Product: syz [ 887.116890][T26332] FAT-fs (loop4): Directory bread(block 69) failed [ 887.124007][ T21] usb 1-1: Manufacturer: syz [ 887.129500][ T21] usb 1-1: SerialNumber: syz [ 887.135214][T26332] FAT-fs (loop4): Directory bread(block 70) failed [ 887.181264][T26332] FAT-fs (loop4): Directory bread(block 71) failed [ 887.196472][T26332] FAT-fs (loop4): Directory bread(block 72) failed [ 887.204888][ T21] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 887.225678][T26332] FAT-fs (loop4): Directory bread(block 73) failed [ 887.344612][T26346] loop2: detected capacity change from 0 to 256 [ 887.379689][T26348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10055'. [ 887.404382][T26348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10055'. [ 887.411729][T26346] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 887.802315][T26364] netlink: 'syz.1.10063': attribute type 3 has an invalid length. [ 887.918204][ T21] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 888.063860][ T26] audit: type=1400 audit(2000001017.128:44): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name=3A3A0AE10CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A552C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=26377 comm="syz.4.10069" [ 888.153308][ C1] usb 1-1: ath: unknown panic pattern! [ 888.369406][T18415] usb 1-1: USB disconnect, device number 3 [ 888.412161][T26396] loop4: detected capacity change from 0 to 128 [ 888.455355][T26396] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 888.499284][T26396] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 888.613210][T26357] loop2: detected capacity change from 0 to 32768 [ 888.779578][T26357] XFS (loop2): Mounting V5 Filesystem [ 888.794932][T26415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10086'. [ 888.839239][T26421] netlink: 'syz.4.10087': attribute type 10 has an invalid length. [ 888.847569][T26421] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10087'. [ 888.857958][T26421] batman_adv: batadv0: Adding interface: virt_wifi0 [ 888.865239][T26421] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 888.955194][T26421] batman_adv: batadv0: Not using interface virt_wifi0 (retrying later): interface not active [ 888.968150][T26357] XFS (loop2): Ending clean mount [ 889.011066][T26357] XFS (loop2): Quotacheck needed: Please wait. [ 889.030040][ T21] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 889.046978][ T21] ath9k_htc: Failed to initialize the device [ 889.066099][T18415] usb 1-1: ath9k_htc: USB layer deinitialized [ 889.162304][T26357] XFS (loop2): Quotacheck: Done. [ 889.415004][ T4625] XFS (loop2): Unmounting Filesystem [ 889.490715][T18412] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 889.880694][T18412] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 889.892813][T18412] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 889.947161][T18412] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 889.972018][T18412] usb 4-1: config 1 has no interface number 0 [ 889.978194][T18412] usb 4-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 890.067022][T18412] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 890.213192][T26480] netlink: 56 bytes leftover after parsing attributes in process `syz.2.10095'. [ 890.263941][T18412] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 890.277645][T26482] loop0: detected capacity change from 0 to 128 [ 890.290182][T18412] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.300845][T18412] usb 4-1: Product: syz [ 890.309890][T18412] usb 4-1: Manufacturer: syz [ 890.316124][T18412] usb 4-1: SerialNumber: syz [ 890.358040][T26482] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 890.374520][T26482] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 890.483736][T18416] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 890.817742][T18412] usb 4-1: USB disconnect, device number 35 [ 890.833843][T26506] netlink: 'syz.2.10128': attribute type 10 has an invalid length. [ 890.883216][T18416] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 890.899152][T18416] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 890.909270][T26506] team0: Port device wlan1 added [ 890.914406][T18416] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 891.039917][T18416] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 891.050673][T18416] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 891.058730][T18416] usb 2-1: Product: syz [ 891.076817][T18416] usb 2-1: SerialNumber: syz [ 891.140139][T18416] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 891.157264][T18416] cdc_ncm 2-1:1.0: bind() failure [ 891.164931][T26520] netlink: 'syz.0.10135': attribute type 32 has an invalid length. [ 891.304111][T26526] netlink: 196 bytes leftover after parsing attributes in process `syz.2.10138'. [ 891.335491][T26526] netlink: 196 bytes leftover after parsing attributes in process `syz.2.10138'. [ 891.364156][ T7099] usb 2-1: USB disconnect, device number 30 [ 891.390344][T26526] netlink: 19 bytes leftover after parsing attributes in process `syz.2.10138'. [ 891.502290][T26537] netlink: 144 bytes leftover after parsing attributes in process `syz.3.10142'. [ 891.517906][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 891.524493][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 891.575564][T26540] netlink: 'syz.2.10144': attribute type 1 has an invalid length. [ 891.616089][T26540] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.10144'. [ 891.658358][T26540] netlink: 'syz.2.10144': attribute type 1 has an invalid length. [ 891.901445][T26558] device ipip0 entered promiscuous mode [ 891.925675][T26560] comedi comedi0: comedi_config --init_data is deprecated [ 892.728981][ T7099] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 892.996030][T26633] comedi comedi1: mpc624: I/O port conflict (0x100,16) [ 893.028044][ T7099] usb 4-1: Using ep0 maxpacket: 16 [ 893.167325][ T7099] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 20, changing to 7 [ 893.377867][T26655] ip6t_rpfilter: unknown options [ 893.413310][ T7099] usb 4-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 893.422422][ T7099] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.471845][ T7099] usb 4-1: Product: syz [ 893.476093][ T7099] usb 4-1: Manufacturer: syz [ 893.499002][ T7099] usb 4-1: SerialNumber: syz [ 893.521127][T26661] IPv6: Can't replace route, no match found [ 893.593128][T26667] netlink: 'syz.1.10200': attribute type 1 has an invalid length. [ 893.608323][T26667] netlink: 244 bytes leftover after parsing attributes in process `syz.1.10200'. [ 893.692672][T26670] binder: 26668:26670 unknown command 0 [ 893.698731][T26670] binder: 26668:26670 ioctl c0306201 200000000080 returned -22 [ 893.803111][T26679] netlink: 'syz.4.10205': attribute type 21 has an invalid length. [ 893.851285][T26679] netlink: 164 bytes leftover after parsing attributes in process `syz.4.10205'. [ 893.857388][T26681] loop2: detected capacity change from 0 to 128 [ 893.900969][T26681] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 893.926360][ T7099] usb 4-1: 1:1 : bogus bTerminalLink 1 [ 893.947549][ T7099] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 893.975057][T26681] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 893.984398][ T7099] usb 4-1: unit 1 not found! [ 894.094771][ T7099] usb 4-1: USB disconnect, device number 36 [ 894.387979][T18828] udevd[18828]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 894.744159][T26736] netlink: 'syz.0.10227': attribute type 1 has an invalid length. [ 894.890959][T26741] dlm: dev_write: no op 0 0 [ 895.046276][T26749] loop1: detected capacity change from 0 to 2048 [ 895.163203][T26761] netlink: 'syz.4.10242': attribute type 27 has an invalid length. [ 895.177031][T18415] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 895.199004][T26762] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 895.476187][T18415] usb 3-1: Using ep0 maxpacket: 32 [ 895.591561][T26784] netlink: 220 bytes leftover after parsing attributes in process `syz.0.10253'. [ 895.604744][T18415] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 895.786541][T18415] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 895.817917][T18415] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.843529][T18415] usb 3-1: Product: syz [ 895.848055][T18415] usb 3-1: Manufacturer: syz [ 895.856926][T18415] usb 3-1: SerialNumber: syz [ 895.867490][T18415] usb 3-1: config 0 descriptor?? [ 895.942289][T18415] usb 3-1: bad CDC descriptors [ 895.950122][T18415] usb 3-1: unsupported MDLM descriptors [ 896.153397][T18412] usb 3-1: USB disconnect, device number 23 [ 896.222594][T26818] netlink: 176 bytes leftover after parsing attributes in process `syz.3.10270'. [ 896.305609][T26824] netlink: 'syz.0.10273': attribute type 10 has an invalid length. [ 896.319226][T26824] netlink: 2 bytes leftover after parsing attributes in process `syz.0.10273'. [ 896.346993][T26824] device bond0 entered promiscuous mode [ 896.352634][T26824] device bond_slave_0 entered promiscuous mode [ 896.379103][T26824] device bond_slave_1 entered promiscuous mode [ 896.396211][T26824] bridge0: port 3(bond0) entered blocking state [ 896.445722][T26824] bridge0: port 3(bond0) entered disabled state [ 896.590244][T26840] netlink: 'syz.1.10278': attribute type 3 has an invalid length. [ 896.828819][T26854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10296'. [ 896.913410][T26860] netlink: 'syz.1.10289': attribute type 10 has an invalid length. [ 896.923053][T26860] netlink: 2 bytes leftover after parsing attributes in process `syz.1.10289'. [ 896.933051][T26860] device bond0 entered promiscuous mode [ 896.938726][T26860] device bond_slave_0 entered promiscuous mode [ 896.952236][T26862] comedi comedi0: pcl726: I/O port conflict (0xffffffffffffffff,16) [ 896.978280][T26860] device bond_slave_1 entered promiscuous mode [ 896.994476][T26860] bridge0: port 2(bond0) entered blocking state [ 897.001815][T26860] bridge0: port 2(bond0) entered disabled state [ 897.008687][T18412] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 897.026536][ T21] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 897.193969][T26875] xt_CT: You must specify a L4 protocol and not use inversions on it [ 897.217441][T26877] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.10298'. [ 897.272382][T18412] usb 5-1: Using ep0 maxpacket: 8 [ 897.405648][T18412] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 897.430651][T18412] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 897.440911][T18412] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 897.454056][T18412] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 897.463277][T18412] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.473414][T18412] usb 5-1: config 0 descriptor?? [ 897.486570][ T21] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 897.498490][ T21] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 897.508198][ T21] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 4, skipping [ 897.523181][ T21] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 897.657507][ T21] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 897.666754][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 897.675065][ T21] usb 4-1: SerialNumber: syz [ 897.738954][T18412] usb 5-1: USB disconnect, device number 115 [ 897.980909][ T21] usb 4-1: 0:2 : does not exist [ 897.985882][ T21] usb 4-1: unit 5 not found! [ 897.996439][ T21] usb 4-1: USB disconnect, device number 37 [ 898.224790][T18858] udevd[18858]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 898.359757][T26899] netlink: 'syz.4.10306': attribute type 10 has an invalid length. [ 898.395116][T26899] netlink: 2 bytes leftover after parsing attributes in process `syz.4.10306'. [ 898.419411][T26901] netlink: 100 bytes leftover after parsing attributes in process `syz.2.10311'. [ 898.434273][T26899] device bond0 entered promiscuous mode [ 898.450966][T26899] device bond_slave_0 entered promiscuous mode [ 898.472790][T26899] device bond_slave_1 entered promiscuous mode [ 898.479462][T26899] bridge0: port 3(bond0) entered blocking state [ 898.539104][T26899] bridge0: port 3(bond0) entered disabled state [ 898.724589][T26921] loop3: detected capacity change from 0 to 128 [ 898.873007][T26921] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 898.887118][T26921] ext4 filesystem being mounted at /1919/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 899.023376][T26944] loop2: detected capacity change from 0 to 512 [ 899.034086][T26942] netlink: 'syz.1.10329': attribute type 3 has an invalid length. [ 899.048628][T26942] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.10329'. [ 899.177222][T26944] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 899.219536][T26944] EXT4-fs (loop2): orphan cleanup on readonly fs [ 899.303223][T26944] EXT4-fs error (device loop2): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 899.344915][T26959] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10338'. [ 899.475276][T26944] [ 899.477680][T26944] ====================================================== [ 899.484722][T26944] WARNING: possible circular locking dependency detected [ 899.491777][T26944] syzkaller #0 Not tainted [ 899.496221][T26944] ------------------------------------------------------ [ 899.503264][T26944] syz.2.10332/26944 is trying to acquire lock: [ 899.509440][T26944] ffff8880617b2ce8 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x5a/0x410 [ 899.518441][T26944] [ 899.518441][T26944] but task is already holding lock: [ 899.525828][T26944] ffff8880617bb450 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_truncate+0x97f/0x10f0 [ 899.535289][T26944] [ 899.535289][T26944] which lock already depends on the new lock. [ 899.535289][T26944] [ 899.545819][T26944] [ 899.545819][T26944] the existing dependency chain (in reverse order) is: [ 899.554861][T26944] [ 899.554861][T26944] -> #2 (&ei->i_data_sem/2){++++}-{3:3}: [ 899.562884][T26944] down_write+0x38/0x60 [ 899.567619][T26944] ext4_map_blocks+0x8bf/0x1b30 [ 899.573041][T26944] ext4_getblk+0x176/0x670 [ 899.578017][T26944] ext4_bread+0x26/0x180 [ 899.582816][T26944] ext4_quota_write+0x236/0x580 [ 899.588323][T26944] remove_free_dqentry+0x318/0xd70 [ 899.594055][T26944] do_insert_tree+0xe94/0x1970 [ 899.599379][T26944] do_insert_tree+0x5b1/0x1970 [ 899.604715][T26944] do_insert_tree+0x5b1/0x1970 [ 899.610045][T26944] do_insert_tree+0x5b1/0x1970 [ 899.615389][T26944] qtree_write_dquot+0x361/0x4b0 [ 899.620901][T26944] v2_write_dquot+0x108/0x190 [ 899.626155][T26944] dquot_acquire+0x2d5/0x520 [ 899.631319][T26944] ext4_acquire_dquot+0x2d9/0x4a0 [ 899.636911][T26944] dqget+0x72b/0xc30 [ 899.641367][T26944] __dquot_initialize+0x3c3/0xcd0 [ 899.647055][T26944] ext4_process_orphan+0x54/0x300 [ 899.652641][T26944] ext4_orphan_cleanup+0xad2/0x1320 [ 899.658404][T26944] ext4_fill_super+0x8d6e/0x94f0 [ 899.663905][T26944] mount_bdev+0x287/0x3c0 [ 899.668818][T26944] legacy_get_tree+0xe6/0x180 [ 899.674158][T26944] vfs_get_tree+0x88/0x270 [ 899.679143][T26944] do_new_mount+0x24a/0xa40 [ 899.684439][T26944] __se_sys_mount+0x2e3/0x3d0 [ 899.689678][T26944] do_syscall_64+0x4c/0xa0 [ 899.694677][T26944] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 899.701134][T26944] [ 899.701134][T26944] -> #1 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 899.709253][T26944] down_read+0x44/0x2e0 [ 899.714089][T26944] v2_read_dquot+0x4a/0x110 [ 899.719238][T26944] dquot_acquire+0x152/0x520 [ 899.724388][T26944] ext4_acquire_dquot+0x2d9/0x4a0 [ 899.729980][T26944] dqget+0x72b/0xc30 [ 899.734435][T26944] __dquot_initialize+0x3c3/0xcd0 [ 899.740026][T26944] ext4_process_orphan+0x54/0x300 [ 899.745720][T26944] ext4_orphan_cleanup+0xad2/0x1320 [ 899.751481][T26944] ext4_fill_super+0x8d6e/0x94f0 [ 899.756981][T26944] mount_bdev+0x287/0x3c0 [ 899.761876][T26944] legacy_get_tree+0xe6/0x180 [ 899.767118][T26944] vfs_get_tree+0x88/0x270 [ 899.772099][T26944] do_new_mount+0x24a/0xa40 [ 899.777175][T26944] __se_sys_mount+0x2e3/0x3d0 [ 899.782415][T26944] do_syscall_64+0x4c/0xa0 [ 899.787393][T26944] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 899.793862][T26944] [ 899.793862][T26944] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 899.801547][T26944] __lock_acquire+0x2c42/0x7d10 [ 899.806967][T26944] lock_acquire+0x19e/0x400 [ 899.812032][T26944] __mutex_lock_common+0x1e3/0x2400 [ 899.817881][T26944] mutex_lock_nested+0x17/0x20 [ 899.823213][T26944] dquot_commit+0x5a/0x410 [ 899.828192][T26944] ext4_write_dquot+0x1f0/0x360 [ 899.833609][T26944] mark_all_dquot_dirty+0xf9/0x400 [ 899.839287][T26944] __dquot_free_space+0x7ca/0xb90 [ 899.844873][T26944] ext4_free_blocks+0x1b2b/0x24d0 [ 899.850459][T26944] ext4_ext_remove_space+0x1f86/0x42b0 [ 899.856555][T26944] ext4_ext_truncate+0x192/0x240 [ 899.862054][T26944] ext4_truncate+0xa09/0x10f0 [ 899.867295][T26944] ext4_process_orphan+0x1cb/0x300 [ 899.872964][T26944] ext4_orphan_cleanup+0xad2/0x1320 [ 899.878726][T26944] ext4_fill_super+0x8d6e/0x94f0 [ 899.884233][T26944] mount_bdev+0x287/0x3c0 [ 899.889133][T26944] legacy_get_tree+0xe6/0x180 [ 899.894543][T26944] vfs_get_tree+0x88/0x270 [ 899.899522][T26944] do_new_mount+0x24a/0xa40 [ 899.904586][T26944] __se_sys_mount+0x2e3/0x3d0 [ 899.909831][T26944] do_syscall_64+0x4c/0xa0 [ 899.914808][T26944] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 899.921266][T26944] [ 899.921266][T26944] other info that might help us debug this: [ 899.921266][T26944] [ 899.931563][T26944] Chain exists of: [ 899.931563][T26944] &dquot->dq_lock --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2 [ 899.931563][T26944] [ 899.945701][T26944] Possible unsafe locking scenario: [ 899.945701][T26944] [ 899.953184][T26944] CPU0 CPU1 [ 899.958576][T26944] ---- ---- [ 899.963982][T26944] lock(&ei->i_data_sem/2); [ 899.968615][T26944] lock(&s->s_dquot.dqio_sem); [ 899.976027][T26944] lock(&ei->i_data_sem/2); [ 899.983177][T26944] lock(&dquot->dq_lock); [ 899.987631][T26944] [ 899.987631][T26944] *** DEADLOCK *** [ 899.987631][T26944] [ 899.995807][T26944] 4 locks held by syz.2.10332/26944: [ 900.001118][T26944] #0: ffff88805c77c0e0 (&type->s_umount_key#28/1){+.+.}-{3:3}, at: alloc_super+0x201/0x950 [ 900.011278][T26944] #1: ffff8880617bb5c8 (&type->i_mutex_dir_key#4){++++}-{3:3}, at: ext4_process_orphan+0x187/0x300 [ 900.022133][T26944] #2: ffff8880617bb450 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_truncate+0x97f/0x10f0 [ 900.031973][T26944] #3: ffffffff8c441d38 (dquot_srcu){....}-{0:0}, at: rcu_lock_acquire+0x5/0x30 [ 900.041096][T26944] [ 900.041096][T26944] stack backtrace: [ 900.047007][T26944] CPU: 1 PID: 26944 Comm: syz.2.10332 Not tainted syzkaller #0 [ 900.054597][T26944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 900.064733][T26944] Call Trace: [ 900.068047][T26944] [ 900.071010][T26944] dump_stack_lvl+0x188/0x250 [ 900.075740][T26944] ? load_image+0x400/0x400 [ 900.080289][T26944] ? show_regs_print_info+0x20/0x20 [ 900.085658][T26944] ? print_circular_bug+0x12b/0x1a0 [ 900.090871][T26944] check_noncircular+0x296/0x330 [ 900.095830][T26944] ? add_chain_block+0x940/0x940 [ 900.100804][T26944] ? lockdep_lock+0xf1/0x1f0 [ 900.105408][T26944] ? mark_lock+0x94/0x320 [ 900.109751][T26944] __lock_acquire+0x2c42/0x7d10 [ 900.114661][T26944] ? __bfs+0x2a3/0x5c0 [ 900.118747][T26944] ? verify_lock_unused+0x140/0x140 [ 900.123979][T26944] ? check_noncircular+0x189/0x330 [ 900.129093][T26944] ? insert_work+0x54/0x3d0 [ 900.133661][T26944] ? add_chain_block+0x940/0x940 [ 900.138607][T26944] ? lockdep_lock+0xf1/0x1f0 [ 900.143248][T26944] ? lockdep_unlock+0x143/0x2e0 [ 900.148131][T26944] lock_acquire+0x19e/0x400 [ 900.152668][T26944] ? dquot_commit+0x5a/0x410 [ 900.157314][T26944] ? __might_sleep+0xf0/0xf0 [ 900.162030][T26944] ? read_lock_is_recursive+0x10/0x10 [ 900.167457][T26944] ? mark_lock+0x94/0x320 [ 900.171843][T26944] ? dquot_commit+0x5a/0x410 [ 900.176479][T26944] __mutex_lock_common+0x1e3/0x2400 [ 900.181719][T26944] ? dquot_commit+0x5a/0x410 [ 900.186373][T26944] ? __might_sleep+0xf0/0xf0 [ 900.191108][T26944] ? mutex_lock_io_nested+0x60/0x60 [ 900.196337][T26944] mutex_lock_nested+0x17/0x20 [ 900.201140][T26944] dquot_commit+0x5a/0x410 [ 900.205573][T26944] ? __ext4_journal_start_sb+0x1bd/0x360 [ 900.211250][T26944] ext4_write_dquot+0x1f0/0x360 [ 900.216115][T26944] mark_all_dquot_dirty+0xf9/0x400 [ 900.221264][T26944] __dquot_free_space+0x7ca/0xb90 [ 900.226321][T26944] ext4_free_blocks+0x1b2b/0x24d0 [ 900.231386][T26944] ? ext4_mb_discard_preallocations_should_retry+0x690/0x690 [ 900.238774][T26944] ? __ext4_journal_ensure_credits+0x2c/0x450 [ 900.244883][T26944] ext4_ext_remove_space+0x1f86/0x42b0 [ 900.250395][T26944] ? ext4_ext_index_trans_blocks+0xf0/0xf0 [ 900.256216][T26944] ? ext4_es_remove_extent+0x24f/0x3e0 [ 900.261756][T26944] ext4_ext_truncate+0x192/0x240 [ 900.266758][T26944] ext4_truncate+0xa09/0x10f0 [ 900.271484][T26944] ? rwsem_write_trylock+0x135/0x1c0 [ 900.276799][T26944] ? __ext4_mark_inode_dirty+0x700/0x700 [ 900.282473][T26944] ext4_process_orphan+0x1cb/0x300 [ 900.287619][T26944] ext4_orphan_cleanup+0xad2/0x1320 [ 900.292858][T26944] ? ext4_orphan_del+0xbf0/0xbf0 [ 900.297827][T26944] ? errseq_check_and_advance+0x62/0x120 [ 900.303568][T26944] ext4_fill_super+0x8d6e/0x94f0 [ 900.308525][T26944] ? format_decode+0x898/0x1300 [ 900.313428][T26944] ? ext4_mount+0x40/0x40 [ 900.317820][T26944] ? set_blocksize+0x1f3/0x370 [ 900.322596][T26944] ? sb_set_blocksize+0xa5/0xe0 [ 900.327452][T26944] mount_bdev+0x287/0x3c0 [ 900.331794][T26944] ? ext4_mount+0x40/0x40 [ 900.336159][T26944] legacy_get_tree+0xe6/0x180 [ 900.340865][T26944] ? ext4_errno_to_code+0x160/0x160 [ 900.346071][T26944] vfs_get_tree+0x88/0x270 [ 900.350507][T26944] do_new_mount+0x24a/0xa40 [ 900.355040][T26944] __se_sys_mount+0x2e3/0x3d0 [ 900.360087][T26944] ? __x64_sys_mount+0xc0/0xc0 [ 900.364864][T26944] ? lockdep_hardirqs_on+0x94/0x140 [ 900.370072][T26944] ? __x64_sys_mount+0x1c/0xc0 [ 900.374853][T26944] do_syscall_64+0x4c/0xa0 [ 900.379301][T26944] ? clear_bhb_loop+0x30/0x80 [ 900.384015][T26944] ? clear_bhb_loop+0x30/0x80 [ 900.388767][T26944] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 900.394788][T26944] RIP: 0033:0x7f7ed76790ca [ 900.399238][T26944] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 900.418890][T26944] RSP: 002b:00007f7ed58d0e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 900.427353][T26944] RAX: ffffffffffffffda RBX: 00007f7ed58d0ee0 RCX: 00007f7ed76790ca [ 900.435361][T26944] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 00007f7ed58d0ea0 [ 900.443361][T26944] RBP: 0000200000000040 R08: 00007f7ed58d0ee0 R09: 000000000001c917 [ 900.451380][T26944] R10: 000000000001c917 R11: 0000000000000246 R12: 0000200000000000 [ 900.459618][T26944] R13: 00007f7ed58d0ea0 R14: 00000000000004f0 R15: 0000200000000980 [ 900.467619][T26944] [ 900.470664][ C1] vkms_vblank_simulate: vblank timer overrun [ 900.478514][T26944] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #12: comm syz.2.10332: corrupted inode contents [ 900.498462][T26944] EXT4-fs error (device loop2): ext4_dirty_inode:6077: inode #12: comm syz.2.10332: mark_inode_dirty error [ 900.512499][T26944] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #12: comm syz.2.10332: corrupted inode contents [ 900.526124][T26944] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #12: comm syz.2.10332: mark_inode_dirty error [ 900.538108][T26944] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #12: comm syz.2.10332: corrupted inode contents [ 900.550488][T26944] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 900.559521][T26944] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #12: comm syz.2.10332: corrupted inode contents [ 900.571807][T26944] EXT4-fs error (device loop2): ext4_truncate:4286: inode #12: comm syz.2.10332: mark_inode_dirty error [ 900.583901][T26944] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 900.593835][T26944] EXT4-fs (loop2): 1 truncate cleaned up [ 900.609831][T26944] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,noblock_validity,nolazytime,auto_da_alloc=0x0000000000000005,minixdf,resgid=0x000000000000ee01,noinit_itable,noinit_itable,journal_dev=0x0000000000000afb2,errors=continue. Quota mode: writeback. [ 900.669862][T26944] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 900.683543][T26944] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback.