last executing test programs: 5.057996019s ago: executing program 4 (id=21888): creat(0x0, 0x10) syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000bb210a08c907120082f60102030109022d000100000000090400000396b70a0009050f000000000000090505000000000000090501"], 0x0) 3.101679056s ago: executing program 4 (id=21926): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x77359400}) 2.960564203s ago: executing program 4 (id=21921): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000240)={[{@nodiscard}, {@nocheckpoint_merge}, {@alloc_mode_def}, {@six_active_logs}, {@flush_merge}, {@fault_injection={'fault_injection', 0x3d, 0x4ee}}, {@acl}, {@noacl}, {@compress_cache}, {@fsync_mode_strict}, {@noextent_cache}, {@compress_cache}, {@fault_type={'fault_type', 0x3d, 0x4}}]}, 0x1, 0x5505, &(0x7f0000002480)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) 2.464958278s ago: executing program 3 (id=21929): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 2.350158654s ago: executing program 0 (id=21931): syz_mount_image$erofs(&(0x7f0000000100), &(0x7f0000000300)='./file2\x00', 0x0, &(0x7f0000000080)={[{@dax}, {@cache_strategy_readahead}, {@dax_never}, {@nouser_xattr}, {@cache_strategy_readahead}, {@dax_always}, {@acl}]}, 0x1, 0x1a7, &(0x7f0000000340)="$eJxiGAWjYBSMWPDo4dcHvU4WISA2D4MKAztU/AUzQg0Tkvo7M0u1p9q6ztl0e+mRPL7aXRxo5oH4//8zqOC28T8E1EN4LAwMDAccmRlKkGSRVcMMCmFggrNDGZgYNKHscAZGBj0oO4GBiSEMyk5lYGSIhLKzkNj5IPV6emmZOal6yfk5KSCGAYgwBBFGIMIY2X6Q+942MjKkILmPDUm+uLIqOzEnJ7WIhgzcYQl1nyMTgy2S+5DjCxY2BkjhZ8jAxGAIZRszMDIEQ9kWDOywsIEECZL/pVgQ5jOT738WmD5GmofagDM4GQaFM0YZxDNgOXuwuGcoMxDl0/+FjAzqSOUTC1L5oV+SW6BfXFmlm5mbmJ6anppnZGRsZmBiYGBqpA8uiPTTOBlSDfCUf5zg8okLwmUCWcCKQy0bIxtDRWJJSZEhhITzjSAkyN3MaHqYwOUfE4OGMrTcYmBmYMPpGpA8BDOBaRBLA93IUTAKRsEoGAWjYBSMglEwCkbBKBgFo2AUjIJRMApGwSggFfyGTJ3JMzDC5tjwAaMAsCZAAAAA//9H1XYe") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115) getdents(r0, &(0x7f0000000040)=""/61, 0x3d) 2.262886648s ago: executing program 0 (id=21932): syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000300)='./file1\x00') 2.22181308s ago: executing program 1 (id=21933): r0 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x23}}, 0x6e}}, 0x9, 0xfff8}, 0x90) 1.899992826s ago: executing program 0 (id=21934): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002b40)={0xe, {"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", 0x1000}}, 0x1006) 1.899910406s ago: executing program 1 (id=21935): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="d80000001e0081064e81f782db44b9040002080006007c09e8fe11a10a0015c00200142603600e120800080024000000a80009001100014003001000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06b", 0x61}], 0x1}, 0x24000000) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x27, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f00000027c0)=""/4096, 0x1000}}, 0x10) 1.853089698s ago: executing program 1 (id=21936): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2e}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33) 1.730200734s ago: executing program 1 (id=21937): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file1\x00', 0x804, &(0x7f0000000400)={[{@shortname_win95}, {@shortname_lower}, {@utf8}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@fat=@nfs_stale_rw}, {@rodir}, {@shortname_win95}, {@fat=@nocase}, {@fat=@codepage={'codepage', 0x3d, '861'}}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp874'}}]}, 0x1, 0x27b, &(0x7f0000000640)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) openat$cgroup_ro(r0, &(0x7f00000002c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) 1.667313297s ago: executing program 2 (id=21939): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB="b702000001040000bfa30000000000000703000000feffff7a0af0fff8bffffd79a4f0ff00000000b7060000ffffffff2d640500000000006502040001001f000404000001007d60b7030000000000006a0a00fefdff00008500000026000000b7000000000000009500000000000000c743a0c8e3ebbadc20e5a7efcc9ac1467fb2ea80dbcf8df265e1b40e4c8afd5c0c000000008da68076774bbcdb2c769937000090af27db5b56024db96bcbbbd2cb2000ce03000000000000007e357754508535766c80114604a86fe569b05614eab9297eb290a248a120c9c6e39f403ff065fd3052aae80675eeba68562eaeaea5fecf298ca20f274233106eab63ecf772de7b265040b6c50b7420b48a93fe94c756108afcd0b2eb78040000005f02a5a6474ae549070004000000001294fba0ed5020e6474ac921fee1f6d8ad6a80d0947cd6d4a561ced21a0b4a902be6af7ec2d1ba002e57f301000000000000000000000000100000aaf25343063e6581f9e6de14ad72e5ad84309f47f96a576cd20cef7ed951a73ea73d7c7f14e306f1f1d1377e57bbb19700f0077e9d0000b93eb0f2c6f8141e350dc68147e5958128d22d58625cf9dba211bfff9c3709c9b134625d3d2369f516a49eeeb1a662c8dfb875bdf5c6ba73cccdfacb202994c40d322717faff03323dce8a34ee0ca2cf61efb4b30000642735d6d482ba98d252f36c54333a8b1aa736369392b9067665339820f5f1557b0bf7cc06a5a13c714e0b1a1f000000ff3283076cda3d0b1a2905cfc3d04f1db264b530abcbe44bc405f600807970727fb819afa1907228fa9e83433eedb4ac88d0285594ffb0d14c09d5c77f33702822b02488ea570204c8441ced81cacf945dcb2486d65ceec8bcaffbe800a041a378b40dc9e3600e916ae6307bd8325a442095bc9a8b0c95905979f34adddbb26f0d24425c8ab9d937d84b521914f92eed3d3e9de82942a952e86b567aff5bc2e3c1fcc00f618363df5d0d181ee8f4b8fd356c9eb365adc037e443820c05c5db16ff07a9cf471e2ebf91ab00a05f88c1cd55f8c81f5eb1f8d615ca27efb2193bb61665a1ce37f30c2efc9c3b5a4a5d95479fac471ba60fbd0e50225563cd37343d09da72472efc2b2877fbab12a891513e5f0763ae06c0610a2869747c143d7500760600f3ffb2310e19ac58bf29d7f178d09a9f634a3ae492f54649589e3692768a0f3a08ff275df45508ad85950d8e08465fa1067ea8f383b3e7a7ddf5977d46f4bc38f914b4a496426d8468f9ba618b6b2218b50c8fc9efbce3ba799cf70de7e13be871aa7eb402e2b11f440361e18d4e334bfc6ae54e62e67a03b4c756c544189e4519a029674e2a2bbbc7f6600000000000800000e5e30b70b1eb176d3a62660600000030a0af132e680510811d3ab71af5d98e2d3d928a749e8b9402d14655612bd58fb40b4625cb69bf6cea97b447f2d970d99100000000086000001b881afb2cc500003a73562af4878f75b4c98274eeb666aa1f5fcf91990cf0dcfef9540057b8a3fff2bc02c5941626d2015f414546e87835ba18e9101734a9e9c6955fc6b9a25fe2a3dd8bab7f21beccba5493a164c663eceed401737c12c65804712236a9a29a43b1e27e9b6816f2328ea8423121f12b7b35aa721fef26934ccafde573bee5c33ef15309f43cbd5d61aa679a9c402d337ebf57a5eacb569401c1df7b9c45b09743c61d1db37f0000000000020000000061d7d6818db785d8ba13dc577fe61a68eb365de5661f43d4c789bb117a3d208ae44a381b718b3157e218959156ff8e92b7e92bc275d2c9114547351a0d0f2a70d13be0194b6cb68b03000000000000004f153bbc7f52861e4e5df0d19e4e40ac44cfda6f87807e5b5ed7072c04da88afd3d4b79f060e004a0e2f00b9e726ac75d2ac0691314c627e9a8a07bdd607919fd48f01ad6d2f7621d9a75b134f1bc25ed7c33d411a5baa4daa3add16afc502b2b7629541d722e91d631e5ffb9d4beb5aa5a2c4e490a5bd5cf4538ba310b8cbc221af38ea842d4cb908bcd574f794459fd54b58c6a791e6df620047bade4ba41ee0141843958479544619f749ff70088b0fd115077f7eff7c5a3315ca604d110df1c54407f191a78d8362e4dc6e1138391c2af2b96779bb76c9f1daea4f085f38810edef6dd047937c231cba791a4e7713c5b3b0a0b6ba37db5016e02d114d714459d065a79609fea4efebad04edac11aac0e53dd094827453144fa419ee81823d00a90a9058ba740d2f41253a8d01a8c1a7265a084e30ad10d412aee8170a7111d62473e7bd8f3d64fb7ebdd32aada331900000000000000000000000084ef49dd02000000bf48ea48e0e1f463d9dcb285038ec38d5f4969ed0e98a71ac7bf8159a234833a5241722b2d24aa2fa4965d4eb7966fb27d118b6ef3308627e67d42f1041d5e92da28e0a7724ce715854775cbe06c5166f1dac0745f1373156a536cb6394c2c4473e2050cacf693fdf8e305080000001a901ecd90a5f53b8327a485557bc2a147b036477915e600000000034258ebbb6099b597d17ee2fc97ca850b8580b1337016a40566814594c13052b9d2b0741326825f19a24460e545c71e1940c998f39ac04a0c29691a7c8f7a78c1a7590a293c561f304533c638ae635f5ce026f7fa034d8cfe0e11831d4829692beab26891ef583cfcb713a4d3a2d8b958c0875d7e4bdcf98802db086ebcbb9d82fa569a18f06facc2ffe1ea9ae4231e1e503faa2de7f898c97788c4b9c61c70ff92abdf7476cc351156d11c0ada7614f315f4c6cca119d16827d4e864f5a7a9b690272a510c451dc07f391309d02e31e53b2bf0b5f86e776b1bcfe6c85ccd7ddf8a9559d596b5603895f265685fdd11263c946f8ef3ccec1b0d45a47a89b8237cbbdab14e4ca6dc76b2c41e071b93a065c0f5aa718e1cfab29beea78a6bd9a3114f0fb92be9a5862627b4bd99db2c08e4636e43f05f33535d5d1f9bb40e1fd8e5125a3d29b31dd94a6744bbc21722222b976089f073a4d3fcafc6d06518cf0c4fc6c3e3da0000000000000000000000007d3b60775243f2143d9f54804b11102cf0e4c641db1ba8bf75e46ab3a8fdece6562e7ebb3e407f3c7504dfa3da3aecbd49af3d1edeea11cc970416fadeedc8423bfdc85041ac4d8243a1130e6f4cb5bbfed9d095e18c98c7d690e4c491a7ddcd5635bc61dbed719ca28e8ca3f1fbbe588913ed057f1d6e34a79f4dc10df54d1993a5bc5f9ef6dbd339ee4b0b5764169f305e284ef82cc23e9366d4bc7eb45c7230b13433e5240657cb8eba33260147be8620b6d98cc48b000000000000000000000000c1ce872b18984f080100000000000000bd3fded92547d41809b398f36749083a147eb09ff1ed601bd36b873d3947fb223da647052528e0466cb917db7800f7c7000b593fca1903991cca1343882e3a1f60044f11c081dae4fc5bcf20efacdd2c577f4bcda2eea6f75a31dc90eebb6135b6fb824052181b0ad8a49ebf03ccf61d7e39bf6b0762d24d19796016301d1415b5110ba9df7f204aedb2a2e4e621c0553d312b309db67192f98ef7800000d629c04e216afc8fc66616bbf304e452373aa927c2ad6f5417f1b9bc322b802c1a1c42112a92a331cdc113b9ace3ff52ede7a853f9a89002ba070bac2f635a03db3375e5564f1a798bf9c0f8c72725d2eca9b0ec7e453d78ea20eca61530fe574299b393ca144adcb06108dfbb934065a87972739150a8752ac111c4d9062ccb95c54034fbdee131d94dfbaab1854d55665746fb7b47d25e54070b0d14c0a29c57bc4930075e1761913b036d43852c6df9f10e15105b2a1866b598a3577943514db0dce953dcec62139ff3f16066efec5d8cbc0600000000007289be5883aab951ea67cf2ff691d05c1ea91dd569ed9897fe8d88a0a6977dc8955be17e8026aff11c61fa5cc76196c1423cd597345253ba5d5ab46938e8fb23fa7047bc59c4345e912585a8adb5fe2ff51b64a326321b594e3f2d339f4090bdae6b30b62064bacbc155d3c930576f506b093ca7c60957bdfdd6536baaa871cf6a603c736b78761e6463b8ac503e219cc3d98f649602ad24d5667368290ee926fba76ee482a201a03efece3b236f4ee2ffcd5d90d92a2f0c5cea48c87f27c2f1e92988a6508c12f6b7755cc48eb10edafca92cb0260c72295a27a24846d3a2334bd60e94c0fd07e5db0a4964a7fc4e89e11a300510776934e87bb3c21394f46954a012b2a3b0760f5bad1dbd6b466ed7153bd18ee2c0b2353c38df9e0782eb000000000000000000000000001b58cadcc5aaf65e05663985a177aa1d1ea2ad1b8151c7d58f5b92827f550269b3585d98e1394e816a477e52ce2f6de2bd7192f46cf965e774968d151d2bda084b10ec4c8d2c6ab582b1e5e3ed874235ff128c661298ed75879d8a4025ad1c3d9ef6355dc7284c6e648a61da026a777fcc7ae2c60ce64a2f2b0000000000000000000000000000003022110d1230e998429a6fd8f35939a8ae5acc89125539d84b98df6f8ee2ad0b238759bf400ac14c591aefe9660076a494f73b0ea8f3cb4a9c2e4f745a2afb593fabb9481600b2f44e6415153c1f8cf974a226d2700608bb2838ef07d75aed8b082716be3c37f60f48b9995f6325fdaa1c164b1e2bcbde000000000000000000d4fd710a526223440f9df8d22bf9224e4b71b0757dbc8311a2ffbf680a2c09a893ffd79f0a645df3e2dce61e24c28750f50ccb9244fdb344773f79483ec0b6936fd853fda9ee154914a00831cf4bf6f9e6fe6cdfab5ab31de15450e6e703316d9597100d83d0444d511ec95edfc460461eef194209655b2a966078be83da84fe699fa66295c9995c869c18501c3d3bf6b17e5b2211c4903580dcdc7ea2bf9e3b202d7b01ea0b800868eb22cbb86e927b364c9c5642ea6188f53c36dffecbdeda61ceb3b1c1f4a7bc77e39a9ff7e547cef240c3cf78f61d3e000000000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b907ef19edfff007049e0ff0888e", 0x0, 0x3ff, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.525022194s ago: executing program 2 (id=21940): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r0) sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20040050}, 0x20004090) 1.524790974s ago: executing program 1 (id=21942): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, r1, 0x1, 0x1ea, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x5e}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000c4}, 0x4800) 1.41972846s ago: executing program 1 (id=21943): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=@generic={0x0, 0x2, 0x0, "87afea0a"}) socket$pppoe(0x18, 0x1, 0x0) 1.327267954s ago: executing program 2 (id=21944): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xd3, &(0x7f0000000000), &(0x7f0000000080)=0x4) 1.326687785s ago: executing program 0 (id=21945): r0 = syz_open_dev$usbmon(&(0x7f0000000240), 0x8, 0x0) mmap(&(0x7f00006c2000/0x1000)=nil, 0x1000, 0x5, 0x13, r0, 0x1e67e000) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x49cdee) 1.214054s ago: executing program 2 (id=21946): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000000101040000000000000000020000001c00188008000140000000040800034000000003080002400000000a240001801400018008000100e000000108000200e00000010c00028005000100"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.191256821s ago: executing program 4 (id=21947): syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000200)={[{@fat=@usefree}, {@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffffe5}}, {}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@dots}, {@nodots}, {@fat=@gid={'gid', 0x3d, 0xee00}}, {@nodots}, {@fat=@dos1xfloppy}, {@fat=@check_strict}, {@dots}, {@dots}, {@nodots}, {@fat=@quiet}, {@dots}, {@fat=@sys_immutable}, {@nodots}, {@dots}, {@fat=@showexec}, {@dots}, {@fat=@dmask={'dmask', 0x3d, 0xfffffffffffffffc}}, {@nodots}]}, 0x1, 0x20e, &(0x7f0000000400)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0xfffd, 0x0) 1.102950385s ago: executing program 0 (id=21948): r0 = socket(0x2, 0x3, 0x6) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x5dd8, 0x4) sendto$inet(r0, 0x0, 0x0, 0xdfedac7253303320, &(0x7f0000000600)={0x2, 0x0, @remote}, 0x10) 1.058447088s ago: executing program 2 (id=21949): unshare(0x2000400) r0 = socket(0x40000000015, 0x5, 0x0) bind$l2tp6(r0, &(0x7f0000000140)={0xa, 0x0, 0x400, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8001, 0x7}, 0x20) 1.01294018s ago: executing program 2 (id=21950): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001", @ANYRESDEC], 0x0, 0x0, 0x0}, 0x0) 948.324793ms ago: executing program 0 (id=21951): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, '\f\"'}, @global=@item_012={0x2, 0x1, 0x0, "0100"}, @global=@item_4={0x3, 0x1, 0x2, "c6dc64b9"}, @local=@item_012={0x2, 0x2, 0x2, "90a0"}, @global=@item_012={0x1, 0x1, 0x8, '8'}, @main=@item_4={0x3, 0x0, 0xb, "c83e0503"}, @local=@item_4={0x3, 0x2, 0x1, "dde84050"}, @local=@item_012={0x2, 0x2, 0x3, '\fh'}, @local=@item_4={0x3, 0x2, 0x5, 'c^,-'}]}}, 0x0}, 0x0) 477.609697ms ago: executing program 3 (id=21952): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001c00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 477.542807ms ago: executing program 4 (id=21953): r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x40084149, &(0x7f0000001080)=0x5) 358.579983ms ago: executing program 3 (id=21954): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x5, 0x543, 0x6, {}, {}, {0x3, 0x1, 0x1, 0x1}, 0x1, @can={{0x4, 0x0, 0x0, 0x1}, 0xa, 0x2, 0x0, 0x0, "d467aef0f23fe738"}}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) 358.489483ms ago: executing program 4 (id=21955): futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0xfffffffe) futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0x1) futex(&(0x7f000000cffc), 0xa, 0x4, 0x0, 0x0, 0x4) 164.120872ms ago: executing program 3 (id=21956): r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x4e21, 0xfffe, 0xa}, {0x0, 0x9, 0x0, 0x0, 0xfffbfffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0xfffffffffffffffe, 0x4}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00', 0xfffffffd, 0x33}, 0x0, @in=@multicast2, 0x3504, 0x4, 0x0, 0xfd, 0x673, 0x5, 0xfffffffe}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x7, @empty, 0x800}, 0x1c) 23.660899ms ago: executing program 3 (id=21957): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x8202, 0x0) fcntl$getflags(r0, 0x401) 0s ago: executing program 3 (id=21958): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x120000a, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f0000002380)="$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") mkdir(&(0x7f0000000480)='./bus\x00', 0x0) rmdir(&(0x7f0000000040)='./bus\x00') kernel console output (not intermixed with test programs): 12][T16901] loop2: detected capacity change from 0 to 2048 [ 828.528469][T16901] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 828.583225][T16901] UDF-fs: unknown compression code (0) [ 828.628006][ T4233] r8152-cfgselector 4-1: Unknown version 0x0000 [ 828.643554][ T4233] r8152-cfgselector 4-1: USB disconnect, device number 80 [ 828.945950][ T6658] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 828.964928][ T6651] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 829.224653][ T6658] usb 1-1: Using ep0 maxpacket: 16 [ 829.273459][T16951] netlink: 'syz.3.20915': attribute type 32 has an invalid length. [ 829.355037][ T6658] usb 1-1: config 0 has no interfaces? [ 829.375123][ T6651] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 829.405611][ T6651] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 829.464489][ T6651] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.536187][ T6658] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 829.566575][ T6651] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 829.584562][ T6658] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.619645][ T6658] usb 1-1: Product: syz [ 829.632816][ T6658] usb 1-1: Manufacturer: syz [ 829.639958][T16960] netlink: 'syz.3.20919': attribute type 1 has an invalid length. [ 829.654985][ T6658] usb 1-1: SerialNumber: syz [ 829.685454][T16865] FAT-fs (loop4): Directory bread(block 64) failed [ 829.685595][ T6658] r8152-cfgselector 1-1: config 0 descriptor?? [ 829.692106][T16865] FAT-fs (loop4): Directory bread(block 65) failed [ 829.692187][T16865] FAT-fs (loop4): Directory bread(block 66) failed [ 829.723459][T16865] FAT-fs (loop4): Directory bread(block 67) failed [ 829.752155][T16865] FAT-fs (loop4): Directory bread(block 68) failed [ 829.756907][T16964] netlink: 'syz.3.20921': attribute type 1 has an invalid length. [ 829.766620][T16865] FAT-fs (loop4): Directory bread(block 69) failed [ 829.766709][T16865] FAT-fs (loop4): Directory bread(block 70) failed [ 829.766740][T16865] FAT-fs (loop4): Directory bread(block 71) failed [ 829.766801][T16865] FAT-fs (loop4): Directory bread(block 72) failed [ 829.805165][ C1] net_ratelimit: 9939 callbacks suppressed [ 829.805180][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 829.823945][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 829.836583][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 829.849007][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 829.861452][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 829.864662][T16865] FAT-fs (loop4): Directory bread(block 73) failed [ 829.874089][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 829.888351][T16968] tmpfs: Bad value for 'mpol' [ 829.892585][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 829.909475][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 829.921920][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 829.934476][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 830.017126][ T6658] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 830.056992][T16972] SET target dimension over the limit! [ 830.262592][T16980] loop3: detected capacity change from 0 to 256 [ 830.289230][ T1107] usb 1-1: USB disconnect, device number 93 [ 830.409790][T16980] FAT-fs (loop3): Directory bread(block 64) failed [ 830.423572][T16980] FAT-fs (loop3): Directory bread(block 65) failed [ 830.440628][T16980] FAT-fs (loop3): Directory bread(block 66) failed [ 830.457573][T16980] FAT-fs (loop3): Directory bread(block 67) failed [ 830.461763][T30556] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 830.472066][T16980] FAT-fs (loop3): Directory bread(block 68) failed [ 830.489296][T16980] FAT-fs (loop3): Directory bread(block 69) failed [ 830.507221][T16980] FAT-fs (loop3): Directory bread(block 70) failed [ 830.522985][T16980] FAT-fs (loop3): Directory bread(block 71) failed [ 830.540317][T16980] FAT-fs (loop3): Directory bread(block 72) failed [ 830.556994][T16980] FAT-fs (loop3): Directory bread(block 73) failed [ 830.654786][ T6651] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 830.829056][T30556] usb 3-1: Using ep0 maxpacket: 8 [ 830.848314][T16982] netlink: 'syz.3.20930': attribute type 3 has an invalid length. [ 830.867920][ T6651] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 830.881952][ T6651] stv0680 2-1:4.0: last error: 86, command = 0x3 [ 830.902246][T16984] CIFS mount error: No usable UNC path provided in device string! [ 830.902246][T16984] [ 830.907043][ T6651] usb 2-1: USB disconnect, device number 83 [ 830.973240][T30556] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 830.981444][T16984] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 830.990367][T30556] usb 3-1: config 0 has no interface number 0 [ 831.212086][T30556] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 831.222137][T16996] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20937'. [ 831.231665][T30556] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.249042][T30556] usb 3-1: Product: syz [ 831.293116][T30556] usb 3-1: Manufacturer: syz [ 831.303252][T30556] usb 3-1: SerialNumber: syz [ 831.336240][T30556] usb 3-1: config 0 descriptor?? [ 831.532321][T17015] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 831.597616][T16974] udc-core: couldn't find an available UDC or it's busy [ 831.597636][T16974] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 831.641580][T30556] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 831.641649][T30556] usb 3-1: No streaming interface found for terminal 6. [ 831.669420][T30556] usb 3-1: USB disconnect, device number 94 [ 831.724514][ T6651] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 832.004746][ T6651] usb 4-1: Using ep0 maxpacket: 16 [ 832.081001][T17039] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20958'. [ 832.134668][ T6651] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 832.153093][ T6651] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 832.172098][ T6651] usb 4-1: config 0 has no interface number 0 [ 832.180711][ T6658] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 832.241011][T17047] netlink: 22 bytes leftover after parsing attributes in process `syz.0.20961'. [ 832.418271][ T6651] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 832.463951][ T6651] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.498789][ T6651] usb 4-1: Product: syz [ 832.503019][ T6651] usb 4-1: Manufacturer: syz [ 832.527983][ T6651] usb 4-1: SerialNumber: syz [ 832.543888][ T6651] usb 4-1: config 0 descriptor?? [ 832.627077][ T6658] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 832.668796][ T6658] usb 5-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 832.718486][ T6658] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.762497][T17069] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 832.763180][ T6658] usb 5-1: config 0 descriptor?? [ 832.795924][T17069] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 832.838067][ T6651] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 832.869699][ T6651] usb 4-1: No valid video chain found. [ 832.880263][ T6658] usb 5-1: bad CDC descriptors [ 832.913823][ T6658] usb 5-1: bad CDC descriptors [ 833.073012][ T6651] usb 5-1: USB disconnect, device number 95 [ 833.078843][T30556] usb 4-1: USB disconnect, device number 81 [ 833.110958][T17080] netlink: 'syz.1.20978': attribute type 1 has an invalid length. [ 833.134520][T17080] netlink: 'syz.1.20978': attribute type 2 has an invalid length. [ 833.252719][T17082] program syz.1.20979 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 833.268116][ T6658] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 833.310510][T17082] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 833.419134][T17084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20980'. [ 833.449501][T17084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20980'. [ 833.558998][ T6658] usb 3-1: Using ep0 maxpacket: 16 [ 833.718487][ T6658] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 833.734490][ T6658] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 833.778318][ T6658] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x8E has invalid maxpacket 51078, setting to 1024 [ 833.817392][ T6658] usb 3-1: config 0 interface 0 has no altsetting 0 [ 833.868613][T14540] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 834.007977][ T6658] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 834.023817][ T6658] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.036459][ T6658] usb 3-1: Product: syz [ 834.040652][ T6658] usb 3-1: Manufacturer: syz [ 834.055902][ T6658] usb 3-1: SerialNumber: syz [ 834.110358][ T6658] usb 3-1: config 0 descriptor?? [ 834.138609][T14540] usb 2-1: Using ep0 maxpacket: 16 [ 834.253706][T17124] 9pnet: Insufficient options for proto=fd [ 834.278687][T17126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20999'. [ 834.408106][T14540] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 834.427044][T14540] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 834.454344][T14540] usb 2-1: Product: syz [ 834.471006][T14540] usb 2-1: SerialNumber: syz [ 834.487866][T14540] usb 2-1: config 0 descriptor?? [ 834.560215][T14540] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 834.580612][T14540] dvb_usb_af9015: probe of 2-1:0.0 failed with error -22 [ 834.637131][T14540] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 834.662056][T14540] dvb_usb_af9035: probe of 2-1:0.0 failed with error -22 [ 834.714358][T14540] usb 3-1: USB disconnect, device number 95 [ 834.784288][ T6658] usb 2-1: USB disconnect, device number 84 [ 834.790524][T17152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21014'. [ 834.814593][ C1] net_ratelimit: 11929 callbacks suppressed [ 834.814609][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 834.833187][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 834.845624][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 834.858303][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 834.872257][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 834.885913][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 834.899484][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 834.913221][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 834.926199][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 834.938577][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 835.024281][T17138] loop4: detected capacity change from 0 to 32768 [ 835.055619][T17138] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.21006 (17138) [ 835.098950][T17138] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 835.131286][T17138] BTRFS info (device loop4): force zlib compression, level 3 [ 835.159275][T17138] BTRFS info (device loop4): force clearing of disk cache [ 835.189894][ T1107] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 835.212351][T17138] BTRFS info (device loop4): setting nodatasum [ 835.239265][T17138] BTRFS info (device loop4): allowing degraded mounts [ 835.239293][T17138] BTRFS info (device loop4): enabling disk space caching [ 835.239310][T17138] BTRFS info (device loop4): disk space caching is enabled [ 835.239326][T17138] BTRFS info (device loop4): has skinny extents [ 835.444406][T17138] BTRFS info (device loop4): clearing free space tree [ 835.448188][T17138] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 835.448272][T17138] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 835.556633][T17138] BTRFS error (device loop4): balance: mixed groups data and metadata options must be the same [ 835.596678][ T1107] usb 4-1: Using ep0 maxpacket: 8 [ 835.849713][ T1107] usb 4-1: unable to get BOS descriptor or descriptor too short [ 835.972238][ T1107] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 835.985202][ T1107] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 836.044482][ T1107] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 836.084074][ T1107] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 836.104512][ T1107] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 836.114306][ T1107] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 836.183622][ T1107] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 836.358143][T17208] device wlan0 entered promiscuous mode [ 836.447873][ T1107] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 836.474528][ T1107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.512038][ T1107] usb 4-1: Product: syz [ 836.531046][ T1107] usb 4-1: Manufacturer: syz [ 836.576514][ T1107] usb 4-1: SerialNumber: syz [ 836.605371][ T1107] usb 4-1: config 0 descriptor?? [ 836.628968][T17149] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 836.693580][T17224] dlm: non-version read from control device 8192 [ 836.736431][ T1107] snd-usb-audio: probe of 4-1:0.0 failed with error -12 [ 836.754630][T17228] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 836.835584][T17235] loop4: detected capacity change from 0 to 512 [ 836.911231][T17241] device bridge9 entered promiscuous mode [ 836.993671][ T1107] usb 4-1: USB disconnect, device number 82 [ 837.020871][T17235] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback. [ 837.403760][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 837.465658][T17271] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21062'. [ 837.696030][T17283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21069'. [ 837.794312][T17290] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 837.807655][ T4233] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 838.097584][ T4233] usb 2-1: Using ep0 maxpacket: 8 [ 838.109209][T17315] xt_l2tp: v2 doesn't support IP mode [ 838.224913][ T4233] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 838.254542][ T4233] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 838.273334][ T4233] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 838.283587][T14540] usb 3-1: new full-speed USB device number 96 using dummy_hcd [ 838.465129][ T4233] usb 2-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=f6.82 [ 838.504915][ T4233] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.564357][ T4233] usb 2-1: Product: syz [ 838.569753][ T4233] usb 2-1: Manufacturer: syz [ 838.574375][ T4233] usb 2-1: SerialNumber: syz [ 838.620606][ T4233] usb 2-1: config 0 descriptor?? [ 838.704654][T14540] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 838.727551][T17331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 838.733139][T14540] usb 3-1: config 0 has no interface number 0 [ 838.757730][T14540] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 838.790562][T14540] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 838.806932][T14540] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 838.817386][T14540] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.836280][T14540] usb 3-1: config 0 descriptor?? [ 838.887366][T14540] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 838.922424][T17337] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21094'. [ 838.940686][T30556] usb 2-1: USB disconnect, device number 85 [ 838.942038][T17337] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21094'. [ 839.082583][T17344] loop3: detected capacity change from 0 to 256 [ 839.132060][T17305] iowarrior 3-1:0.1: Error -90 while submitting URB [ 839.152636][ T4233] usb 3-1: USB disconnect, device number 96 [ 839.430812][T17355] loop4: detected capacity change from 0 to 64 [ 839.448319][T14540] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 839.744547][T14540] usb 1-1: Using ep0 maxpacket: 16 [ 839.825722][ C1] net_ratelimit: 10916 callbacks suppressed [ 839.825739][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 839.844155][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 839.856651][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 839.869100][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 839.881493][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 839.886345][T14540] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 839.893849][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 839.914095][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 839.926494][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 839.932358][T14540] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 839.938866][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 839.961262][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 839.967820][T14540] usb 1-1: config 1 has no interface number 0 [ 840.040918][T14540] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 840.077806][T14540] usb 1-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 840.086910][T17381] tmpfs: Bad value for 'mpol' [ 840.124513][T14540] usb 1-1: config 1 interface 105 has no altsetting 0 [ 840.180257][T17383] device ip6gre2 entered promiscuous mode [ 840.193101][T17344] FAT-fs (loop3): Directory bread(block 64) failed [ 840.214508][T17344] FAT-fs (loop3): Directory bread(block 65) failed [ 840.221140][T17344] FAT-fs (loop3): Directory bread(block 66) failed [ 840.268132][T17344] FAT-fs (loop3): Directory bread(block 67) failed [ 840.282130][T17344] FAT-fs (loop3): Directory bread(block 68) failed [ 840.317861][T17344] FAT-fs (loop3): Directory bread(block 69) failed [ 840.349446][T14540] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 840.363862][T17344] FAT-fs (loop3): Directory bread(block 70) failed [ 840.374282][T14540] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 840.392771][T17344] FAT-fs (loop3): Directory bread(block 71) failed [ 840.412417][T14540] usb 1-1: Product: syz [ 840.424465][T14540] usb 1-1: Manufacturer: syz [ 840.434760][T17344] FAT-fs (loop3): Directory bread(block 72) failed [ 840.441507][T14540] usb 1-1: SerialNumber: syz [ 840.454749][T17344] FAT-fs (loop3): Directory bread(block 73) failed [ 840.486876][T17347] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 840.503237][T17377] loop2: detected capacity change from 0 to 32768 [ 840.641902][T17400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21125'. [ 840.669660][T17400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21125'. [ 840.758483][T14540] aqc111: probe of 1-1:1.105 failed with error -22 [ 840.851916][T17377] XFS (loop2): Mounting V5 Filesystem [ 840.961784][T17413] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 841.123558][ T4233] usb 1-1: USB disconnect, device number 94 [ 841.143118][T17377] XFS (loop2): Ending clean mount [ 841.250287][T17377] XFS (loop2): Quotacheck needed: Please wait. [ 841.439034][T17428] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 841.469105][T17377] XFS (loop2): Quotacheck: Done. [ 841.545145][ T4185] XFS (loop2): Unmounting Filesystem [ 841.643827][ T26] audit: type=1326 audit(841.607:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17434 comm="syz.4.21141" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd11c872799 code=0x0 [ 842.154787][T14540] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 842.444662][T14540] usb 4-1: Using ep0 maxpacket: 32 [ 842.595177][T14540] usb 4-1: config 0 has an invalid interface number: 167 but max is 0 [ 842.610817][T14540] usb 4-1: config 0 has no interface number 0 [ 842.619093][T14540] usb 4-1: config 0 interface 167 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 8 [ 842.632973][T14540] usb 4-1: config 0 interface 167 has no altsetting 0 [ 842.815046][ T4232] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 842.838068][T14540] usb 4-1: New USB device found, idVendor=07ca, idProduct=b808, bcdDevice=db.cd [ 842.863642][T14540] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.878634][T14540] usb 4-1: Product: syz [ 842.882914][T14540] usb 4-1: Manufacturer: syz [ 842.885889][T17488] netlink: 876 bytes leftover after parsing attributes in process `syz.0.21165'. [ 842.889163][T14540] usb 4-1: SerialNumber: syz [ 842.929733][T14540] usb 4-1: config 0 descriptor?? [ 842.932777][T17488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21165'. [ 842.955495][T17444] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 843.045963][T17494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21168'. [ 843.072939][T17494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21168'. [ 843.084762][ T4232] usb 5-1: Using ep0 maxpacket: 16 [ 843.098082][T17494] netlink: 'syz.0.21168': attribute type 13 has an invalid length. [ 843.098104][T17494] netlink: 'syz.0.21168': attribute type 11 has an invalid length. [ 843.224930][ T1325] usb 3-1: new full-speed USB device number 97 using dummy_hcd [ 843.267706][T14540] dvb-usb: found a 'AVerMedia AVerTV DVB-T Volar' in cold state, will try to load a firmware [ 843.338256][ T4232] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 843.348040][ T4232] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 843.359736][ T4232] usb 5-1: Product: syz [ 843.363918][ T4232] usb 5-1: SerialNumber: syz [ 843.369864][T14540] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 843.383704][ T4232] usb 5-1: config 0 descriptor?? [ 843.415142][T14540] dib0700: firmware download failed at 7 with -71 [ 843.434204][T14540] usb 4-1: USB disconnect, device number 83 [ 843.451352][ T4232] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 843.465567][ T4232] dvb_usb_af9015: probe of 5-1:0.0 failed with error -22 [ 843.479306][ T4232] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 843.498626][ T4232] dvb_usb_af9035: probe of 5-1:0.0 failed with error -22 [ 843.664560][ T4232] usb 5-1: USB disconnect, device number 96 [ 843.675059][ T1325] usb 3-1: unable to get BOS descriptor or descriptor too short [ 843.742325][ T1325] usb 3-1: not running at top speed; connect to a high speed hub [ 843.763583][T17520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21181'. [ 843.835024][ T1325] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 843.868968][ T1325] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 843.889227][ T1325] usb 3-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0x42, skipping [ 843.931336][ T26] audit: type=1326 audit(843.897:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17525 comm="syz.0.21184" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f58834cf799 code=0x0 [ 843.949812][T17528] tmpfs: Bad value for 'mpol' [ 844.055326][T17531] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 844.107983][ T1325] usb 3-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 844.121731][T17533] comedi: No check for data length of config insn id 3 is implemented [ 844.121764][ T1325] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.137879][T17533] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 844.164484][ T1325] usb 3-1: Product: syz [ 844.168944][ T1325] usb 3-1: Manufacturer: syz [ 844.173645][ T1325] usb 3-1: SerialNumber: syz [ 844.184359][T17533] comedi: Assuming n=15 is correct [ 844.768397][T17557] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 844.794581][ T1325] usb_set_interface error [ 844.805392][ T1325] snd-usb-us122l: probe of 3-1:1.1 failed with error -22 [ 844.835081][ C1] net_ratelimit: 10992 callbacks suppressed [ 844.835100][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 844.840255][ T1325] usb 3-1: USB disconnect, device number 97 [ 844.841459][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 844.874880][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 844.887385][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 844.899911][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 844.912500][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 844.924971][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 844.938205][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 844.950585][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 844.962998][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 845.380429][ T6295] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 845.446024][ T26] audit: type=1326 audit(845.407:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17582 comm="syz.1.21212" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f20accbc799 code=0x0 [ 845.542393][T17589] loop2: detected capacity change from 0 to 1024 [ 845.744767][ T6295] usb 4-1: Using ep0 maxpacket: 16 [ 845.904276][T17589] EXT4-fs (loop2): Ignoring removed orlov option [ 845.991842][T17589] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 846.067873][ T6295] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 846.098541][ T6295] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 846.106718][ T6295] usb 4-1: Product: syz [ 846.110974][ T6295] usb 4-1: SerialNumber: syz [ 846.140306][ T6295] usb 4-1: config 0 descriptor?? [ 846.210837][ T6295] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 846.235281][ T6295] dvb_usb_af9015: probe of 4-1:0.0 failed with error -22 [ 846.259671][ T6295] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 846.276026][ T6295] dvb_usb_af9035: probe of 4-1:0.0 failed with error -22 [ 846.427444][ T4232] usb 4-1: USB disconnect, device number 84 [ 846.507771][ T1325] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 846.584936][T17642] nbd: socks must be embedded in a SOCK_ITEM attr [ 846.766435][ T1325] usb 1-1: Using ep0 maxpacket: 16 [ 846.896219][ T1325] usb 1-1: config 0 has an invalid interface number: 68 but max is 0 [ 846.940329][ T1325] usb 1-1: config 0 has no interface number 0 [ 846.963589][ T1325] usb 1-1: config 0 interface 68 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 87 [ 847.031113][T17662] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21244'. [ 847.100365][T17665] loop2: detected capacity change from 0 to 256 [ 847.164932][ T1325] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 847.178636][ T1325] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.208347][T17665] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 847.226328][ T1325] usb 1-1: Product: syz [ 847.236653][ T1325] usb 1-1: Manufacturer: syz [ 847.256741][ T1325] usb 1-1: SerialNumber: syz [ 847.311890][ T1325] usb 1-1: config 0 descriptor?? [ 847.368339][T17627] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 847.420929][ T1325] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 847.509987][T17684] loop2: detected capacity change from 0 to 2048 [ 847.660836][ T1325] usb 1-1: USB disconnect, device number 95 [ 847.688175][ T1287] usb 1-1: Failed to submit usb control message: -71 [ 847.708922][ T1287] usb 1-1: unable to send the bmi data to the device: -71 [ 847.708989][ T1287] usb 1-1: unable to get target info from device [ 847.709005][ T1287] usb 1-1: could not get target info (-71) [ 847.709062][ T1287] usb 1-1: could not probe fw (-71) [ 847.991573][T17714] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.21270'. [ 848.007410][T17714] bridge_slave_1: default FDB implementation only supports local addresses [ 848.053152][T17717] loop4: detected capacity change from 0 to 256 [ 848.174816][ T4232] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 848.261057][T17725] hugetlbfs: Bad value for 'size' [ 848.477816][ T4232] usb 4-1: Using ep0 maxpacket: 16 [ 848.522071][T17744] binder: 17742:17744 ioctl c0306201 2000000001c0 returned -14 [ 848.580456][T17684] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 848.615968][ T4232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 848.652178][ T4232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 848.674554][ T4232] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 848.705011][ T4232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.738832][ T4232] usb 4-1: config 0 descriptor?? [ 848.832803][ T6295] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 848.924894][T14540] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 849.188868][ T6295] usb 2-1: Using ep0 maxpacket: 8 [ 849.220275][ T4232] corsair 0003:1B1C:1B02.0003: unbalanced delimiter at end of report description [ 849.261886][ T4232] corsair 0003:1B1C:1B02.0003: parse failed [ 849.307234][ T4232] corsair: probe of 0003:1B1C:1B02.0003 failed with error -22 [ 849.356132][ T6295] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7 [ 849.364883][T14540] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 849.413542][T14540] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 849.457804][T17767] loop4: detected capacity change from 0 to 2048 [ 849.484335][T14540] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 849.514645][T14540] usb 1-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 849.530726][T14540] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.563152][T14540] usb 1-1: config 0 descriptor?? [ 849.564730][T30556] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 849.580246][ T4232] usb 4-1: USB disconnect, device number 85 [ 849.587276][ T6295] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 849.596936][ T6295] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.631168][ T6295] usb 2-1: Product: syz [ 849.635429][ T6295] usb 2-1: Manufacturer: syz [ 849.640157][ T6295] usb 2-1: SerialNumber: syz [ 849.684265][T17767] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 849.845259][ C1] net_ratelimit: 11824 callbacks suppressed [ 849.845275][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 849.863652][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 849.875869][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 849.888248][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 849.900733][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 849.913130][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 849.925951][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 849.938249][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 849.950456][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 849.962804][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 849.987238][ T6295] usb 2-1: selecting invalid altsetting 1 [ 850.033605][T30556] usb 3-1: Using ep0 maxpacket: 16 [ 850.047015][T14540] hid-rmi 0003:0461:4E72.0004: collection stack underflow [ 850.076522][T14540] hid-rmi 0003:0461:4E72.0004: item 0 1 0 12 parsing failed [ 850.084386][T14540] hid-rmi 0003:0461:4E72.0004: parse failed [ 850.095200][T14540] hid-rmi: probe of 0003:0461:4E72.0004 failed with error -22 [ 850.191992][ T6295] usb 2-1: cannot request logical cluster ID: 0 (err: -5) [ 850.204496][ T6295] usb 2-1: invalid MIXER UNIT descriptor 6 [ 850.210619][ T6295] snd-usb-audio: probe of 2-1:1.0 failed with error -5 [ 850.227076][T30556] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 850.244741][T30556] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 850.257520][ T4232] usb 1-1: USB disconnect, device number 96 [ 850.268444][ T6295] usb 2-1: selecting invalid altsetting 1 [ 850.290335][T30556] usb 3-1: config 0 interface 0 has no altsetting 0 [ 850.305306][T30556] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice= 2.eb [ 850.314381][T30556] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.347101][T30556] usb 3-1: config 0 descriptor?? [ 850.396309][ T6295] usb 2-1: cannot request logical cluster ID: 0 (err: -71) [ 850.403633][ T6295] usb 2-1: invalid MIXER UNIT descriptor 6 [ 850.412710][ T6295] snd-usb-audio: probe of 2-1:1.1 failed with error -71 [ 850.444343][ T6295] usb 2-1: selecting invalid altsetting 1 [ 850.473682][ T6295] usb 2-1: cannot request logical cluster ID: 0 (err: -71) [ 850.481056][ T6295] usb 2-1: invalid MIXER UNIT descriptor 6 [ 850.526102][ T6295] snd-usb-audio: probe of 2-1:1.2 failed with error -71 [ 850.555638][ T6295] usb 2-1: USB disconnect, device number 86 [ 850.569221][ T4372] udevd[4372]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 850.874249][T14540] usb 3-1: USB disconnect, device number 98 [ 851.250995][T30556] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 851.434693][T14540] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 851.631748][T30556] usb 1-1: Using ep0 maxpacket: 8 [ 851.718919][T14540] usb 5-1: Using ep0 maxpacket: 16 [ 851.779447][T17836] loop2: detected capacity change from 0 to 256 [ 851.796889][T17836] exfat: Deprecated parameter 'utf8' [ 851.813340][T30556] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 851.814392][T17836] exfat: Deprecated parameter 'namecase' [ 851.835864][T30556] usb 1-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 851.855897][T30556] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.857047][T17836] exfat: Deprecated parameter 'namecase' [ 851.886394][T30556] usb 1-1: config 0 descriptor?? [ 851.887273][T14540] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 851.907359][T14540] usb 5-1: config 0 has no interface number 0 [ 851.919443][T14540] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 851.943463][T17836] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 851.971636][T14540] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 852.174801][T14540] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 852.194490][T14540] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.195341][T30556] usb 1-1: USB disconnect, device number 97 [ 852.221264][T14540] usb 5-1: Product: syz [ 852.234519][T14540] usb 5-1: Manufacturer: syz [ 852.249432][T14540] usb 5-1: SerialNumber: syz [ 852.269883][T14540] usb 5-1: config 0 descriptor?? [ 852.279974][T17848] netlink: 24 bytes leftover after parsing attributes in process `syz.3.21335'. [ 852.318186][T17809] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 852.329549][T17809] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 852.385969][T17852] loop3: detected capacity change from 0 to 128 [ 852.450266][T17852] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 852.583980][T17809] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 852.624664][T17809] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 852.750176][T17864] netlink: 'syz.1.21343': attribute type 17 has an invalid length. [ 852.894771][T14540] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 852.915337][T14540] asix: probe of 5-1:0.34 failed with error -61 [ 853.168953][ T1325] usb 5-1: USB disconnect, device number 97 [ 853.633524][T17862] loop3: detected capacity change from 0 to 32768 [ 853.829293][T17862] XFS (loop3): Mounting V5 Filesystem [ 853.930309][T17862] XFS (loop3): Ending clean mount [ 854.050555][T17862] XFS (loop3): Corruption warning: Metadata has LSN (2:16) ahead of current LSN (1:112). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 854.104693][ T4232] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 854.121253][T17862] XFS (loop3): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_finobt block 0x20 [ 854.124361][T17901] loop2: detected capacity change from 0 to 512 [ 854.154027][T17862] XFS (loop3): Unmount and run xfs_repair [ 854.190495][T17901] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 854.192431][T17862] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 854.240655][T17862] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 854.248493][T17901] EXT4-fs (loop2): orphan cleanup on readonly fs [ 854.281377][T17901] EXT4-fs error (device loop2): mb_free_blocks:1874: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 854.302163][T17862] 00000010: 00 00 00 00 00 00 00 20 00 00 00 02 00 00 00 10 ....... ........ [ 854.304256][T17901] EXT4-fs error (device loop2): ext4_do_update_inode:5222: inode #12: comm syz.2.21355: corrupted inode contents [ 854.329632][T17862] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 854.347354][T17862] 00000030: 00 00 00 00 ca b4 20 ce 00 00 11 40 00 00 40 37 ...... ....@..@7 [ 854.351126][T17901] EXT4-fs error (device loop2): ext4_dirty_inode:6058: inode #12: comm syz.2.21355: mark_inode_dirty error [ 854.374487][ T4232] usb 2-1: Using ep0 maxpacket: 32 [ 854.378680][T17862] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 854.408389][T17862] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 854.428978][T17901] EXT4-fs error (device loop2): ext4_do_update_inode:5222: inode #12: comm syz.2.21355: corrupted inode contents [ 854.455486][T17862] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 854.472807][T17901] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #12: comm syz.2.21355: mark_inode_dirty error [ 854.474500][T17862] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 854.504760][ T4232] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 854.506746][T17901] EXT4-fs error (device loop2): ext4_do_update_inode:5222: inode #12: comm syz.2.21355: corrupted inode contents [ 854.523049][ T4232] usb 2-1: config 0 has no interface number 0 [ 854.541639][T17862] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x20 len 8 error 74 [ 854.566965][T17901] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 854.569150][T17862] XFS (loop3): Failed to initialize disk quotas. [ 854.593948][T17901] EXT4-fs error (device loop2): ext4_do_update_inode:5222: inode #12: comm syz.2.21355: corrupted inode contents [ 854.598590][T17903] loop4: detected capacity change from 0 to 32768 [ 854.665201][T30556] usb 1-1: new full-speed USB device number 98 using dummy_hcd [ 854.680994][T17901] EXT4-fs error (device loop2): ext4_truncate:4279: inode #12: comm syz.2.21355: mark_inode_dirty error [ 854.693049][ T4187] XFS (loop3): Unmounting Filesystem [ 854.705377][T17901] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 854.715142][ T4232] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 854.724320][ T4232] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.750752][T17903] ERROR: (device loop4): diAllocAG: numfree > numinos [ 854.750752][T17903] [ 854.765846][T17901] EXT4-fs (loop2): 1 truncate cleaned up [ 854.771813][ T4232] usb 2-1: Product: syz [ 854.784162][ T4232] usb 2-1: Manufacturer: syz [ 854.789370][T17903] ialloc: diAlloc returned -5! [ 854.794269][ T4232] usb 2-1: SerialNumber: syz [ 854.810261][ T4232] usb 2-1: config 0 descriptor?? [ 854.829385][T17901] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,noblock_validity,i_version,journal_dev=0x0000000000000005,errors=continue,resgid=0x000000000000ee01,noinit_itable,noinit_itable,journal_dev=0x0000000000000afb2,errors=continue. Quota mode: writeback. [ 854.854547][ C1] net_ratelimit: 10819 callbacks suppressed [ 854.854566][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 854.873691][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 854.886078][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 854.898479][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 854.899617][ T4232] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 854.910778][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 854.931639][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 854.944623][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 854.957375][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 854.969758][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 854.982333][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 855.126056][T17910] tipc: Started in network mode [ 855.131074][T17910] tipc: Node identity 2d000000000000000000000000000001, cluster identity 4711 [ 855.140908][ T4232] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 855.158240][ T4232] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 855.211014][T17910] tipc: Enabling of bearer rejected, failed to enable media [ 855.264351][T17912] loop2: detected capacity change from 0 to 4096 [ 855.308168][T30556] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 855.318339][T30556] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 855.501128][T17914] loop4: detected capacity change from 0 to 4096 [ 855.515987][T30556] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 855.528661][T30556] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 855.545255][T30556] usb 1-1: SerialNumber: syz [ 855.577332][ T6651] usb 2-1: USB disconnect, device number 87 [ 855.584592][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 855.614113][ T6651] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 855.617426][T30556] usb 1-1: 0:2 : does not exist [ 855.647414][ T6651] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 855.693024][ T6651] quatech2 2-1:0.51: device disconnected [ 855.740023][T17914] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 855.936958][ T4196] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 855.961252][T17928] loop2: detected capacity change from 0 to 1024 [ 855.977520][T30556] Bluetooth: hci2: command 0x0811 tx timeout [ 856.013285][T17924] loop3: detected capacity change from 0 to 4096 [ 856.082475][T17924] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 856.140284][T30556] usb 1-1: USB disconnect, device number 98 [ 856.260529][T17924] ntfs3: loop3: failed to convert "c46c" to cp850 [ 856.453207][T17928] hfsplus: catalog name length corrupted [ 857.258738][T17980] loop3: detected capacity change from 0 to 8192 [ 857.570224][T17992] loop2: detected capacity change from 0 to 4096 [ 857.659540][T17992] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 857.734401][T17980] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 857.734640][T17992] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 857.772871][T17992] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 857.804945][T17980] REISERFS (device loop3): using ordered data mode [ 857.811600][T17980] reiserfs: using flush barriers [ 857.824542][T17992] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 857.912098][T17980] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 857.953058][T17992] ntfs: (device loop2): check_mft_mirror(): Failed to read $MFTMirr. [ 857.974599][T17992] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 858.124868][T17992] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 858.138268][T17992] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 858.145965][T17980] REISERFS (device loop3): checking transaction log (loop3) [ 858.199507][T17992] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 858.248263][T17980] REISERFS (device loop3): Using r5 hash to sort names [ 858.255846][T17980] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 858.280953][T17992] ntfs: volume version 3.1. [ 858.288531][T17980] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 858.325236][T18004] loop4: detected capacity change from 0 to 8192 [ 858.423037][T17992] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 858.423219][T18004] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 858.540247][T18013] netlink: 40 bytes leftover after parsing attributes in process `syz.1.21408'. [ 858.541447][T18004] REISERFS (device loop4): using ordered data mode [ 858.604518][T18004] reiserfs: using flush barriers [ 858.622130][T18004] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 858.673620][T18004] REISERFS (device loop4): checking transaction log (loop4) [ 858.738283][T18004] REISERFS (device loop4): Using tea hash to sort names [ 858.754821][T18004] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 859.201117][T18037] loop2: detected capacity change from 0 to 64 [ 859.236754][T18039] netlink: 91 bytes leftover after parsing attributes in process `syz.3.21422'. [ 859.722900][T18070] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21434'. [ 859.751151][T18066] loop3: detected capacity change from 0 to 2048 [ 859.771196][ T5446] attempt to access beyond end of device [ 859.771196][ T5446] loop2: rw=1, want=268435470, limit=64 [ 859.804869][ T5446] Buffer I/O error on dev loop2, logical block 134217734, lost async page write [ 859.864627][ C1] net_ratelimit: 9303 callbacks suppressed [ 859.864644][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 859.883326][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 859.895711][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 859.908158][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 859.920680][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 860.014127][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 860.026693][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 860.039438][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 860.051927][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 860.064858][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 860.151424][T18066] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c128, mo2=0003] [ 860.173731][T18066] System zones: 0-7 [ 860.214028][T18066] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,lazytime,inode_readahead_blks=0x0000000000000000,delalloc,norecovery,min_batch_time=0x000000000000000b,errors=remount-ro,. Quota mode: none. [ 860.356034][T18085] program syz.1.21441 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 860.505187][T18087] sp0: Synchronizing with TNC [ 860.827811][T18077] loop4: detected capacity change from 0 to 32768 [ 860.981483][T18077] XFS (loop4): Mounting V5 Filesystem [ 861.133888][T18077] XFS (loop4): Ending clean mount [ 861.175911][T18122] loop3: detected capacity change from 0 to 128 [ 861.380469][T18122] FAT-fs (loop3): Directory bread(block 32) failed [ 861.398460][ T4196] XFS (loop4): Unmounting Filesystem [ 861.419841][T18122] FAT-fs (loop3): Directory bread(block 33) failed [ 861.430314][T18122] FAT-fs (loop3): Directory bread(block 34) failed [ 861.437768][T18122] FAT-fs (loop3): Directory bread(block 35) failed [ 861.455082][T18130] netlink: 'syz.1.21458': attribute type 21 has an invalid length. [ 861.479817][ T1107] usb 1-1: new full-speed USB device number 99 using dummy_hcd [ 861.487990][T18122] FAT-fs (loop3): Directory bread(block 36) failed [ 861.594498][T18122] FAT-fs (loop3): Directory bread(block 37) failed [ 861.627107][T18122] FAT-fs (loop3): Directory bread(block 38) failed [ 861.666802][T18122] FAT-fs (loop3): Directory bread(block 39) failed [ 861.688916][T18122] FAT-fs (loop3): Directory bread(block 40) failed [ 861.714512][T18122] FAT-fs (loop3): Directory bread(block 41) failed [ 861.974907][T18122] attempt to access beyond end of device [ 861.974907][T18122] loop3: rw=0, want=4112, limit=128 [ 862.008937][ T1107] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 862.031422][ T1107] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 862.035820][T18122] FAT-fs (loop3): Filesystem has been set read-only [ 862.061784][ T1107] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 862.085193][T18122] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 862.089695][ T1107] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.101659][T18145] loop2: detected capacity change from 0 to 256 [ 862.137954][ T1107] usb 1-1: config 0 descriptor?? [ 862.162529][T18145] exfat: Deprecated parameter 'utf8' [ 862.204714][T18145] exfat: Deprecated parameter 'utf8' [ 862.211550][T18145] exfat: Deprecated parameter 'utf8' [ 862.233401][ T1107] hub 1-1:0.0: USB hub found [ 862.273689][T18145] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 862.447893][ T1107] hub 1-1:0.0: 1 port detected [ 862.673275][ T1107] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 862.703601][ T1107] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 862.714384][T18161] loop4: detected capacity change from 0 to 64 [ 862.832451][T18161] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 862.865261][ T1107] usbhid 1-1:0.0: can't add hid device: -71 [ 862.875132][ T1107] usbhid: probe of 1-1:0.0 failed with error -71 [ 862.960800][ T1107] usb 1-1: USB disconnect, device number 99 [ 863.271804][T18181] loop2: detected capacity change from 0 to 256 [ 863.519988][T18179] loop4: detected capacity change from 0 to 8192 [ 863.640539][T18173] loop3: detected capacity change from 0 to 32768 [ 863.663982][T18190] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 863.704092][T18179] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 863.717702][T18179] REISERFS (device loop4): using ordered data mode [ 863.724348][T18179] reiserfs: using flush barriers [ 863.747019][T18179] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 863.828742][T18179] REISERFS (device loop4): checking transaction log (loop4) [ 863.833233][T18173] (syz.3.21478,18173,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 863.900113][T18173] (syz.3.21478,18173,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 863.974236][T18173] (syz.3.21478,18173,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 864.007485][T18173] JBD2: Ignoring recovery information on journal [ 864.140109][T18173] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 864.184654][T18179] REISERFS (device loop4): Using tea hash to sort names [ 864.194284][T18179] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 864.592559][T18173] (syz.3.21478,18173,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb68296ec, computed 0xec517776. Applying ECC. [ 864.653253][T18173] (syz.3.21478,18173,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xb68296ec, computed 0xccb4c126 [ 864.695209][T18173] (syz.3.21478,18173,1):ocfs2_trim_mainbm:7603 ERROR: status = -5 [ 864.841130][T18216] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ1 [ 864.854156][ T4187] ocfs2: Unmounting device (7,3) on (node local) [ 864.874633][ C1] net_ratelimit: 9438 callbacks suppressed [ 864.874648][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 864.892910][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 864.905477][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 864.917786][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 864.930114][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 864.942629][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 864.955041][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 864.967470][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 864.980422][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 864.992971][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 865.650432][T18236] loop3: detected capacity change from 0 to 4096 [ 865.797447][T18236] EXT4-fs (loop3): Ignoring removed bh option [ 865.865395][T18236] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,bh,grpquota,stripe=0x0000000000000001,. Quota mode: writeback. [ 866.028710][T18228] loop4: detected capacity change from 0 to 32768 [ 866.104830][T18236] EXT4-fs error (device loop3): ext4_get_first_dir_block:3617: inode #12: block 80: comm syz.3.21507: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 866.115583][T18224] loop2: detected capacity change from 0 to 40427 [ 866.205358][T18236] EXT4-fs (loop3): Remounting filesystem read-only [ 866.228507][T18236] EXT4-fs error (device loop3): ext4_get_first_dir_block:3619: inode #12: comm syz.3.21507: directory missing '..' [ 866.261611][T18224] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x1ffff [ 866.261695][T18224] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x4 [ 866.263208][T18224] F2FS-fs (loop2): invalid crc value [ 866.282269][T18224] F2FS-fs (loop2): Found nat_bits in checkpoint [ 866.293931][T18236] EXT4-fs (loop3): Remounting filesystem read-only [ 866.304228][T18251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21513'. [ 866.304253][T18251] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21513'. [ 866.304274][T18251] netlink: 'syz.4.21513': attribute type 12 has an invalid length. [ 866.506656][T18224] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 866.731572][ T4185] attempt to access beyond end of device [ 866.731572][ T4185] loop2: rw=2049, want=45104, limit=40427 [ 867.261213][T30556] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 867.401650][T18281] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21528'. [ 867.484853][T18285] loop4: detected capacity change from 0 to 1024 [ 867.532983][T18285] EXT4-fs (loop4): Ignoring removed orlov option [ 867.574572][T18285] EXT4-fs (loop4): inline encryption not supported [ 867.581184][T18285] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 867.604736][T18285] EXT4-fs (loop4): invalid journal inode [ 867.634581][T18285] EXT4-fs (loop4): can't get journal size [ 867.655087][T18285] EXT4-fs (loop4): mounted filesystem without journal. Opts: orlov,norecovery,inlinecrypt,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 867.807540][T18292] loop3: detected capacity change from 0 to 256 [ 867.915183][T30556] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 867.923311][T30556] usb 1-1: config 0 has no interface number 0 [ 867.960788][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #21a!!! [ 867.970135][T30556] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 867.990287][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #29a!!! [ 868.002049][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #29a!!! [ 868.017301][T18292] exFAT-fs (loop3): bogus fat length [ 868.021212][T30556] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 868.032966][T18292] exFAT-fs (loop3): failed to read boot sector [ 868.053884][T30556] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 868.061265][T18292] exFAT-fs (loop3): failed to recognize exfat type [ 868.085959][T30556] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.101782][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 868.141020][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 868.166047][T30556] usb 1-1: config 0 descriptor?? [ 868.177739][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 868.516555][ T6295] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 868.712437][T30556] prodikeys 0003:041E:2801.0005: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.0-1/input1 [ 868.724338][T18301] loop4: detected capacity change from 0 to 32768 [ 868.751152][T18298] loop2: detected capacity change from 0 to 32768 [ 868.752780][T30556] hid_prodikeys: hid-prodikeys: failed to find output report [ 868.752780][T30556] [ 868.782938][T18301] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.21536 (18301) [ 868.867792][T18301] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 868.877258][T18298] XFS (loop2): Mounting V5 Filesystem [ 868.923870][T18301] BTRFS info (device loop4): using free space tree [ 868.958598][T30556] usb 1-1: USB disconnect, device number 100 [ 868.973755][T18306] loop3: detected capacity change from 0 to 32768 [ 868.983780][T18301] BTRFS info (device loop4): has skinny extents [ 868.997207][T18306] (syz.3.21538,18306,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 869.040270][T18306] (syz.3.21538,18306,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 869.070203][ T6295] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 869.080227][ T6295] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 869.122886][ T6295] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 869.145248][ T6295] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 869.151332][T18315] fido_id[18315]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 869.170880][ T6295] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 869.231832][T18298] XFS (loop2): Ending clean mount [ 869.261061][T18298] XFS (loop2): Quotacheck needed: Please wait. [ 869.267533][T18301] BTRFS info (device loop4): enabling ssd optimizations [ 869.284841][T18306] JBD2: Ignoring recovery information on journal [ 869.425438][ T6295] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 869.439124][ T6295] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 869.469898][ T6295] usb 2-1: Product: syz [ 869.472428][T18298] XFS (loop2): Quotacheck: Done. [ 869.474101][ T6295] usb 2-1: Manufacturer: syz [ 869.526398][T18306] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 869.622959][ T4175] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 9 /dev/loop4 scanned by udevd (4175) [ 869.636570][ T6295] cdc_wdm 2-1:1.0: skipping garbage [ 869.657965][ T6295] cdc_wdm 2-1:1.0: skipping garbage [ 869.715984][ T6295] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 869.721942][ T6295] cdc_wdm 2-1:1.0: Unknown control protocol [ 869.892834][ C1] net_ratelimit: 9097 callbacks suppressed [ 869.892851][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 869.911129][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 869.923529][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 869.935918][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 869.948243][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 869.960626][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 869.973109][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 869.987931][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 870.001816][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 870.014747][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 870.049911][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.210622][T18350] loop4: detected capacity change from 0 to 256 [ 870.224734][T16472] usb 2-1: USB disconnect, device number 88 [ 870.323443][ T4187] ocfs2: Unmounting device (7,3) on (node local) [ 870.335798][ T4185] XFS (loop2): Unmounting Filesystem [ 871.188091][ T1107] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 871.229453][T18384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21561'. [ 871.586584][ T1107] usb 4-1: Using ep0 maxpacket: 32 [ 871.752695][ T4232] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 871.760991][T16472] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 871.772548][ T1107] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 871.792549][ T1107] usb 4-1: config 0 has no interface number 0 [ 871.877830][T18418] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 872.013499][ T1107] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 872.022953][ T1107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.037925][ T4232] usb 5-1: Using ep0 maxpacket: 16 [ 872.043403][T16472] usb 3-1: Using ep0 maxpacket: 32 [ 872.046235][ T1107] usb 4-1: Product: syz [ 872.052789][ T1107] usb 4-1: Manufacturer: syz [ 872.065715][ T1107] usb 4-1: SerialNumber: syz [ 872.072057][ T1107] usb 4-1: config 0 descriptor?? [ 872.167172][ T1107] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 872.188218][ T4232] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 872.209513][ T4232] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 872.238388][T16472] usb 3-1: unable to get BOS descriptor or descriptor too short [ 872.256521][ T4232] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 872.282615][ T4232] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 872.296572][ T4232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.324751][T16472] usb 3-1: config 3 has an invalid interface number: 41 but max is 0 [ 872.337589][T16472] usb 3-1: config 3 has no interface number 0 [ 872.345356][ T4232] usb 5-1: config 0 descriptor?? [ 872.354070][T16472] usb 3-1: config 3 interface 41 altsetting 7 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 872.359421][ T1107] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 872.382616][T16472] usb 3-1: config 3 interface 41 has no altsetting 0 [ 872.396525][ T1107] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 872.565061][T16472] usb 3-1: New USB device found, idVendor=12d1, idProduct=3e5b, bcdDevice=d8.4b [ 872.594514][T16472] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.600792][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - change_port message too short [ 872.622985][T16472] usb 3-1: Product: syz [ 872.631149][T16472] usb 3-1: Manufacturer: syz [ 872.638498][T16472] usb 3-1: SerialNumber: syz [ 872.784531][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 872.823188][ T1107] usb 4-1: USB disconnect, device number 86 [ 872.839732][ T4232] microsoft 0003:045E:07DA.0006: ignoring exceeding usage max [ 872.840466][ T1107] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 872.875678][ T4232] microsoft 0003:045E:07DA.0006: unsupported Resolution Multiplier 0 [ 872.898365][ T4232] microsoft 0003:045E:07DA.0006: unsupported Resolution Multiplier 0 [ 872.908176][ T1107] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 872.928900][ T4232] microsoft 0003:045E:07DA.0006: No inputs registered, leaving [ 872.949674][ T1107] quatech2 4-1:0.51: device disconnected [ 872.990038][ T4232] microsoft 0003:045E:07DA.0006: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 873.027120][ T4232] microsoft 0003:045E:07DA.0006: no inputs found [ 873.039321][T16472] qmi_wwan 3-1:3.41: More than one union descriptor, skipping ... [ 873.071716][ T4232] microsoft 0003:045E:07DA.0006: could not initialize ff, continuing anyway [ 873.094794][T16472] qmi_wwan: probe of 3-1:3.41 failed with error -22 [ 873.123298][ T4232] usb 5-1: USB disconnect, device number 98 [ 873.158319][T16472] usb 3-1: USB disconnect, device number 99 [ 873.303806][T18463] fido_id[18463]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 873.733588][T18484] loop2: detected capacity change from 0 to 512 [ 873.784628][T18484] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 873.834750][T18485] loop3: detected capacity change from 0 to 4096 [ 873.910778][T18484] EXT4-fs (loop2): 1 orphan inode deleted [ 873.917856][T18484] EXT4-fs (loop2): 1 truncate cleaned up [ 873.923623][T18484] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,jqfmt=vfsv0,quota,. Quota mode: writeback. [ 873.962721][T18500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21616'. [ 873.986414][T18484] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1457: inode #12: block 7: comm syz.2.21610: path /4035/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 874.084458][T18505] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 874.229803][T18484] EXT4-fs (loop2): Remounting filesystem read-only [ 874.453980][T18523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21628'. [ 874.474872][T16472] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 874.575131][T18527] netlink: 16 bytes leftover after parsing attributes in process `syz.0.21630'. [ 874.684352][T18533] tipc: Enabling of bearer rejected, failed to enable media [ 874.766388][T16472] usb 5-1: Using ep0 maxpacket: 32 [ 874.894636][ C1] net_ratelimit: 10510 callbacks suppressed [ 874.894652][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 874.895888][T16472] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 874.900956][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 874.920947][T18543] loop3: detected capacity change from 0 to 512 [ 874.923222][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 874.942207][T16472] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 874.953402][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 874.969681][T16472] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 874.977071][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 875.004256][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 875.011038][T16472] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 875.018071][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 875.037072][T16472] usb 5-1: config 0 interface 0 has no altsetting 0 [ 875.045767][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 875.052853][T16472] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 875.064840][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 875.077379][T16472] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.086636][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 875.118952][T16472] usb 5-1: config 0 descriptor?? [ 875.375515][T18543] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 875.448878][T18543] EXT4-fs (loop3): 1 orphan inode deleted [ 875.466254][T18543] EXT4-fs (loop3): 1 truncate cleaned up [ 875.471930][T18543] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,jqfmt=vfsv0,quota,. Quota mode: writeback. [ 875.600698][T16472] corsair-psu 0003:1B1C:1C09.0007: item fetching failed at offset 3/5 [ 875.609388][T16472] corsair-psu: probe of 0003:1B1C:1C09.0007 failed with error -22 [ 875.640846][T18543] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1457: inode #12: block 7: comm syz.3.21637: path /4346/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 875.695014][T18543] EXT4-fs (loop3): Remounting filesystem read-only [ 875.845862][T16472] usb 5-1: USB disconnect, device number 99 [ 875.949582][T18554] loop3: detected capacity change from 0 to 512 [ 876.043362][T18554] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 876.135098][T18554] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #17: comm syz.3.21641: inode has both inline data and extents flags [ 876.168292][T18554] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.21641: couldn't read orphan inode 17 (err -117) [ 876.288242][T18554] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 876.403553][T18565] loop2: detected capacity change from 0 to 128 [ 876.479010][T18565] hpfs: bad mount options. [ 877.037049][T18589] loop2: detected capacity change from 0 to 256 [ 877.083386][T18589] exfat: Deprecated parameter 'utf8' [ 877.111398][T18589] exfat: Deprecated parameter 'utf8' [ 877.181380][T18589] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 877.340995][T18599] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 877.364066][T18599] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 877.389203][T18599] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 877.423265][T18599] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 877.472431][T18599] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 877.479196][T18599] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 877.518747][T18599] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 877.544558][T18599] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 877.551045][T18599] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 878.104409][T18639] Cannot find add_set index 46338 as target [ 878.278068][T18652] netlink: 'syz.3.21686': attribute type 10 has an invalid length. [ 878.282731][T18633] loop4: detected capacity change from 0 to 8192 [ 878.321536][T18633] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 878.343654][T18633] REISERFS (device loop4): using ordered data mode [ 878.364334][T18633] reiserfs: using flush barriers [ 878.388465][T18633] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 878.405536][T18633] REISERFS (device loop4): checking transaction log (loop4) [ 878.487671][T18633] REISERFS (device loop4): Using tea hash to sort names [ 878.499230][T18633] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 878.819962][T18667] nbd: socks must be embedded in a SOCK_ITEM attr [ 878.945575][T18669] hugetlbfs: Bad value for 'size' [ 878.983197][T18671] binder: 18670:18671 ioctl c0306201 2000000001c0 returned -14 [ 879.124539][T18677] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 879.131178][T18677] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 879.198311][T18677] vhci_hcd vhci_hcd.0: Device attached [ 879.452841][ T6295] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 879.464725][T16472] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 879.534592][ T6651] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 879.550915][ T6308] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 879.732529][ T6295] usb 3-1: Using ep0 maxpacket: 8 [ 879.794533][ T6651] usb 2-1: Using ep0 maxpacket: 16 [ 879.838903][ T6308] usb 1-1: Using ep0 maxpacket: 32 [ 879.901994][ T6295] usb 3-1: unable to get BOS descriptor or descriptor too short [ 879.909851][ C1] net_ratelimit: 10449 callbacks suppressed [ 879.909861][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 879.924559][ T6651] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 879.928241][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 879.939774][ T6651] usb 2-1: config 0 has no interface number 0 [ 879.948231][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 879.954355][ T6651] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 879.966290][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 879.980746][ T6651] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 879.989665][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 879.999585][ T6651] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 880.011483][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 880.023931][ T6651] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.032907][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 880.053226][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 880.053889][ T6651] usb 2-1: config 0 descriptor?? [ 880.065562][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 880.065868][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 880.358718][ T6308] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 880.367842][ T6308] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.393119][ T6295] usb 3-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=2b.cd [ 880.402241][ T6295] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.410867][ T6295] usb 3-1: Product: syz [ 880.415313][ T6308] usb 1-1: Product: syz [ 880.419512][ T6308] usb 1-1: Manufacturer: syz [ 880.424141][ T6308] usb 1-1: SerialNumber: syz [ 880.429117][ T6295] usb 3-1: Manufacturer: syz [ 880.433730][ T6295] usb 3-1: SerialNumber: syz [ 880.475295][ T6308] usb 1-1: config 0 descriptor?? [ 880.537205][ T6308] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 880.545671][ T6308] dvb-usb: bulk message failed: -22 (2/0) [ 880.571278][ T6308] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 880.601146][T18701] loop4: detected capacity change from 0 to 4096 [ 880.605709][ T6308] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 880.615862][ T6308] usb 1-1: media controller created [ 880.623464][T18701] __ntfs_error: 8 callbacks suppressed [ 880.623479][T18701] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 880.639175][ T6308] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 880.702509][ T6308] usb 1-1: selecting invalid altsetting 7 [ 880.708320][ T6308] cxusb: set interface failed [ 880.712378][T18701] ntfs: volume version 3.1. [ 880.713004][ T6308] dvb-usb: bulk message failed: -22 (1/0) [ 880.724700][T18688] cxusb: i2c wr: len=79 is too big! [ 880.724700][T18688] [ 880.742943][T18678] vhci_hcd: connection reset by peer [ 880.750495][ T1287] vhci_hcd: stop threads [ 880.773923][ T1287] vhci_hcd: release socket [ 880.789951][ T6295] kalmia: probe of 3-1:1.0 failed with error -22 [ 880.791223][ T1287] vhci_hcd: disconnect device [ 880.801776][ T6651] uclogic 0003:28BD:0071.0008: failed retrieving string descriptor #100: -71 [ 880.821919][ T6295] usb 3-1: USB disconnect, device number 100 [ 880.828471][ T6651] uclogic 0003:28BD:0071.0008: failed retrieving pen parameters: -71 [ 880.867630][ T6308] DVB: Unable to find symbol lgdt330x_attach() [ 880.873834][ T6308] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 880.882670][ T6651] uclogic 0003:28BD:0071.0008: pen probing failed: -71 [ 880.908455][ T6651] uclogic 0003:28BD:0071.0008: failed probing parameters: -71 [ 880.926639][ T6651] uclogic: probe of 0003:28BD:0071.0008 failed with error -71 [ 880.974717][ T6651] usb 2-1: USB disconnect, device number 89 [ 881.094211][ T6308] rc_core: IR keymap rc-dvico-portable not found [ 881.109362][ T6308] Registered IR keymap rc-empty [ 881.127660][ T6308] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 881.163741][ T6308] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input92 [ 881.220383][ T6308] dvb-usb: schedule remote query interval to 100 msecs. [ 881.236962][ T6308] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 881.281040][ T6308] usb 1-1: USB disconnect, device number 101 [ 881.347281][T18712] loop4: detected capacity change from 0 to 1024 [ 881.368187][ T6308] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 881.537183][T18712] hfsplus: small file entry [ 882.032774][T18732] loop4: detected capacity change from 0 to 4096 [ 882.086920][T18744] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21727'. [ 882.155090][T18732] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 882.184280][ T6308] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 882.509769][ T6308] usb 1-1: Using ep0 maxpacket: 32 [ 882.528037][ T6651] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 882.548337][T18738] loop3: detected capacity change from 0 to 40427 [ 882.570024][T18738] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 882.590764][T18738] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 882.672964][T18738] F2FS-fs (loop3): invalid crc value [ 882.703554][T18738] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 882.732149][ T6308] usb 1-1: unable to get BOS descriptor or descriptor too short [ 882.784747][ T6651] usb 3-1: Using ep0 maxpacket: 8 [ 882.842592][ T6308] usb 1-1: config 3 has an invalid interface number: 41 but max is 0 [ 882.850965][ T6308] usb 1-1: config 3 has no interface number 0 [ 882.851371][T18738] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 882.864605][ T6308] usb 1-1: config 3 interface 41 altsetting 7 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 882.864637][ T6308] usb 1-1: config 3 interface 41 has no altsetting 0 [ 882.902589][T18738] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 882.938000][ T6651] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 882.958186][ T6651] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 882.991648][ T26] audit: type=1800 audit(882.957:98): pid=18738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.21726" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 883.052658][ T4187] attempt to access beyond end of device [ 883.052658][ T4187] loop3: rw=2049, want=45104, limit=40427 [ 883.070728][T18762] loop4: detected capacity change from 0 to 256 [ 883.082187][ T6308] usb 1-1: New USB device found, idVendor=12d1, idProduct=3e5b, bcdDevice=d8.4b [ 883.091396][ T6308] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.116133][ T6308] usb 1-1: Product: syz [ 883.120394][ T6308] usb 1-1: Manufacturer: syz [ 883.133347][ T6308] usb 1-1: SerialNumber: syz [ 883.149278][T18762] exfat: Deprecated parameter 'namecase' [ 883.156020][T18762] exfat: Deprecated parameter 'namecase' [ 883.174803][ T6651] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 883.196471][ T6651] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.223256][T18762] exFAT-fs (loop4): failed to load upcase table (idx : 0x00000c00, chksum : 0x54b6a122, utbl_chksum : 0xe619d30d) [ 883.240100][ T6651] usb 3-1: Product: syz [ 883.244367][ T6651] usb 3-1: Manufacturer: syz [ 883.263459][ T6651] usb 3-1: SerialNumber: syz [ 883.548446][T18768] loop4: detected capacity change from 0 to 256 [ 883.565018][ T6308] qmi_wwan 1-1:3.41: More than one union descriptor, skipping ... [ 883.568302][T18768] exfat: Deprecated parameter 'utf8' [ 883.576079][T18770] loop3: detected capacity change from 0 to 256 [ 883.593613][ T6308] qmi_wwan: probe of 1-1:3.41 failed with error -22 [ 883.630963][T18768] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 883.643598][ T6308] usb 1-1: USB disconnect, device number 102 [ 883.674803][ T6651] usb 3-1: unit 0 not found! [ 883.679577][ T6651] usb 3-1: unit 2 not found! [ 883.733476][ T6651] usb 3-1: USB disconnect, device number 101 [ 883.845567][T18776] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 883.920685][T18779] netlink: 'syz.4.21741': attribute type 17 has an invalid length. [ 884.019255][ T4372] udevd[4372]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 884.251364][T18783] loop4: detected capacity change from 0 to 4096 [ 884.371975][T18770] FAT-fs (loop3): Directory bread(block 64) failed [ 884.379194][T18770] FAT-fs (loop3): Directory bread(block 65) failed [ 884.386166][T18770] FAT-fs (loop3): Directory bread(block 66) failed [ 884.392807][T18770] FAT-fs (loop3): Directory bread(block 67) failed [ 884.405254][T18770] FAT-fs (loop3): Directory bread(block 68) failed [ 884.415004][T18770] FAT-fs (loop3): Directory bread(block 69) failed [ 884.421619][T18770] FAT-fs (loop3): Directory bread(block 70) failed [ 884.475003][T18770] FAT-fs (loop3): Directory bread(block 71) failed [ 884.484950][T18770] FAT-fs (loop3): Directory bread(block 72) failed [ 884.509588][T18770] FAT-fs (loop3): Directory bread(block 73) failed [ 884.543154][T18797] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 884.624605][T16472] vhci_hcd: vhci_device speed not set [ 884.828426][T30556] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 884.914810][ C1] net_ratelimit: 12176 callbacks suppressed [ 884.914827][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 884.933377][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 884.945821][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 884.958385][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 884.970906][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 884.983633][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 884.996138][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 885.008606][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 885.009403][T18810] loop3: detected capacity change from 0 to 64 [ 885.021018][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 885.021288][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 885.122440][T18790] loop2: detected capacity change from 0 to 32768 [ 885.161967][T18810] attempt to access beyond end of device [ 885.161967][T18810] loop3: rw=0, want=1026, limit=64 [ 885.178165][T18810] Buffer I/O error on dev loop3, logical block 512, async page read [ 885.196614][T18810] attempt to access beyond end of device [ 885.196614][T18810] loop3: rw=0, want=113154, limit=64 [ 885.223595][T18810] Buffer I/O error on dev loop3, logical block 56576, async page read [ 885.328716][T18825] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 885.356915][T18825] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 885.415247][T18790] XFS (loop2): Mounting V5 Filesystem [ 885.424958][T18828] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 885.476039][T18825] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 885.504866][T30556] usb 2-1: config index 0 descriptor too short (expected 2084, got 36) [ 885.513242][T30556] usb 2-1: config 0 has an invalid interface number: 240 but max is 0 [ 885.518087][T18825] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 885.532881][T18825] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 885.557148][T18825] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 885.563848][T30556] usb 2-1: config 0 has no interface number 0 [ 885.586582][T30556] usb 2-1: config 0 interface 240 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 885.596280][T18825] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 885.607369][T18825] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 885.614606][T18825] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 885.638708][T18834] set_capacity_and_notify: 1 callbacks suppressed [ 885.638726][T18834] loop3: detected capacity change from 0 to 512 [ 885.651951][T30556] usb 2-1: config 0 interface 240 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 885.682644][T30556] usb 2-1: config 0 interface 240 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 885.708437][T18834] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 885.738738][T18834] EXT4-fs (loop3): orphan cleanup on readonly fs [ 885.742615][T30556] usb 2-1: config 0 interface 240 has no altsetting 0 [ 885.748109][T18834] EXT4-fs error (device loop3): mb_free_blocks:1874: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 885.752159][T30556] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 885.772857][T18834] EXT4-fs error (device loop3): ext4_do_update_inode:5222: inode #12: comm syz.3.21763: corrupted inode contents [ 885.795537][T18834] EXT4-fs error (device loop3): ext4_dirty_inode:6058: inode #12: comm syz.3.21763: mark_inode_dirty error [ 885.810561][T18834] EXT4-fs error (device loop3): ext4_do_update_inode:5222: inode #12: comm syz.3.21763: corrupted inode contents [ 885.825294][T18834] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #12: comm syz.3.21763: mark_inode_dirty error [ 885.837712][T30556] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.840462][T18834] EXT4-fs error (device loop3): ext4_do_update_inode:5222: inode #12: comm syz.3.21763: corrupted inode contents [ 885.862384][T30556] usb 2-1: config 0 descriptor?? [ 885.868339][T18834] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 885.879763][T18834] EXT4-fs error (device loop3): ext4_do_update_inode:5222: inode #12: comm syz.3.21763: corrupted inode contents [ 885.893895][T18834] EXT4-fs error (device loop3): ext4_truncate:4279: inode #12: comm syz.3.21763: mark_inode_dirty error [ 885.908744][T18790] XFS (loop2): Ending clean mount [ 885.909009][T18834] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 885.931177][T18834] EXT4-fs (loop3): 1 truncate cleaned up [ 885.942094][T18834] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,noblock_validity,i_version,journal_dev=0x0000000000000005,errors=continue,resgid=0x000000000000ee01,noinit_itable,noinit_itable,journal_dev=0x0000000000000afb2,errors=continue. Quota mode: writeback. [ 886.051217][T16472] XFS (loop2): Corruption warning: Metadata has LSN (2:16) ahead of current LSN (1:112). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 886.111144][T16472] XFS (loop2): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_finobt block 0x20 [ 886.149930][T16472] XFS (loop2): Unmount and run xfs_repair [ 886.170224][T16472] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 886.181243][T18844] tipc: Started in network mode [ 886.186546][T16472] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 886.198792][T18844] tipc: Node identity 2d000000000000000000000000000001, cluster identity 4711 [ 886.208069][T16472] 00000010: 00 00 00 00 00 00 00 20 00 00 00 02 00 00 00 10 ....... ........ [ 886.220711][T16472] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 886.229687][T18844] tipc: Enabling of bearer rejected, failed to enable media [ 886.241376][T16472] 00000030: 00 00 00 00 ca b4 20 ce 00 00 11 40 00 00 40 37 ...... ....@..@7 [ 886.250761][T16472] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 886.263175][T16472] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 886.283221][T16472] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 886.300621][T16472] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 886.318622][T18790] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x20 len 8 error 74 [ 886.339808][T18790] XFS (loop2): Failed to initialize disk quotas. [ 886.380573][T30556] uclogic 0003:5543:004D.0009: unknown main item tag 0x0 [ 886.388477][T30556] uclogic 0003:5543:004D.0009: unknown main item tag 0x0 [ 886.434538][T30556] uclogic 0003:5543:004D.0009: unknown main item tag 0x0 [ 886.441645][T30556] uclogic 0003:5543:004D.0009: unknown main item tag 0x0 [ 886.483122][ T4185] XFS (loop2): Unmounting Filesystem [ 886.494495][T30556] uclogic 0003:5543:004D.0009: unknown main item tag 0x0 [ 886.518918][T30556] uclogic 0003:5543:004D.0009: unknown main item tag 0x0 [ 886.541887][T30556] uclogic 0003:5543:004D.0009: No inputs registered, leaving [ 886.568372][T30556] uclogic 0003:5543:004D.0009: hidraw0: USB HID v0.00 Device [HID 5543:004d] on usb-dummy_hcd.1-1/input240 [ 886.650371][T30556] usb 2-1: USB disconnect, device number 90 [ 886.822166][T18855] fido_id[18855]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 886.838542][T18857] tipc: Started in network mode [ 886.843433][T18857] tipc: Node identity , cluster identity 4711 [ 886.864784][T18857] tipc: Failed to obtain node identity [ 886.908456][T18857] tipc: Enabling of bearer rejected, failed to enable media [ 886.956517][T16472] usb 5-1: new full-speed USB device number 100 using dummy_hcd [ 887.150385][T18859] loop3: detected capacity change from 0 to 8192 [ 887.243337][T18859] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 887.287577][T18859] REISERFS (device loop3): using ordered data mode [ 887.294121][T18859] reiserfs: using flush barriers [ 887.334489][T18859] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 887.354269][T18859] REISERFS (device loop3): checking transaction log (loop3) [ 887.364771][T16472] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 887.394587][T16472] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 887.449682][T18859] REISERFS (device loop3): Using tea hash to sort names [ 887.480325][T18859] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 887.505025][T16472] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 887.514186][T16472] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 887.573582][T16472] usb 5-1: SerialNumber: syz [ 887.650600][T16472] usb 5-1: 0:2 : does not exist [ 887.781128][T18872] loop2: detected capacity change from 0 to 4096 [ 888.035607][T18872] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 888.074673][ T4233] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 888.150343][T18889] loop3: detected capacity change from 0 to 1024 [ 888.163403][T16472] usb 5-1: USB disconnect, device number 100 [ 888.196600][ T4185] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 888.247052][T18889] EXT4-fs (loop3): Ignoring removed orlov option [ 888.269422][T18892] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21791'. [ 888.279973][T18889] EXT4-fs (loop3): Invalid want_extra_isize 9 [ 888.364829][ T4233] usb 1-1: Using ep0 maxpacket: 8 [ 888.496365][ T4233] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7 [ 888.725725][ T4233] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 888.751896][ T4233] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.776007][ T4233] usb 1-1: Product: syz [ 888.780310][ T4233] usb 1-1: Manufacturer: syz [ 888.814872][ T4233] usb 1-1: SerialNumber: syz [ 889.032441][T18908] loop2: detected capacity change from 0 to 8192 [ 889.107027][ T4233] usb 1-1: selecting invalid altsetting 1 [ 889.150631][T18908] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 889.193572][T18908] REISERFS (device loop2): using ordered data mode [ 889.238041][T18908] reiserfs: using flush barriers [ 889.268351][T18908] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 889.327957][ T4233] usb 1-1: cannot request logical cluster ID: 0 (err: -5) [ 889.345743][ T4233] usb 1-1: invalid MIXER UNIT descriptor 6 [ 889.365434][ T1107] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 889.373450][T18908] REISERFS (device loop2): checking transaction log (loop2) [ 889.374767][ T4233] snd-usb-audio: probe of 1-1:1.0 failed with error -5 [ 889.408383][T18908] REISERFS (device loop2): Using tea hash to sort names [ 889.430743][T18908] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 889.438753][ T4233] usb 1-1: selecting invalid altsetting 1 [ 889.535941][ T4233] usb 1-1: cannot request logical cluster ID: 0 (err: -71) [ 889.558004][ T4233] usb 1-1: invalid MIXER UNIT descriptor 6 [ 889.565514][ T4233] snd-usb-audio: probe of 1-1:1.1 failed with error -71 [ 889.589823][ T4233] usb 1-1: selecting invalid altsetting 1 [ 889.617959][ T4233] usb 1-1: cannot request logical cluster ID: 0 (err: -71) [ 889.634135][ T4233] usb 1-1: invalid MIXER UNIT descriptor 6 [ 889.692859][ T4233] snd-usb-audio: probe of 1-1:1.2 failed with error -71 [ 889.707049][T18929] netlink: 40 bytes leftover after parsing attributes in process `syz.4.21809'. [ 889.712658][ T4233] usb 1-1: USB disconnect, device number 103 [ 889.729782][ T1107] usb 2-1: Using ep0 maxpacket: 16 [ 889.813773][ T4372] udevd[4372]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 889.865924][T18916] loop3: detected capacity change from 0 to 32768 [ 889.902453][ T1107] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 889.912237][ T1107] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 889.924537][ C1] net_ratelimit: 10934 callbacks suppressed [ 889.924552][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 889.943018][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 889.955416][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 889.967967][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 889.978363][T18916] UFO tlock:0xffffc90002852168 [ 889.980386][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 889.998021][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 890.011216][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 890.023984][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 890.036715][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 890.049314][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 890.067671][ T1107] usb 2-1: config 0 interface 0 has no altsetting 0 [ 890.074672][ T1107] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice= 2.eb [ 890.083735][ T1107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.094687][ T1107] usb 2-1: config 0 descriptor?? [ 890.295579][T18935] loop4: detected capacity change from 0 to 4096 [ 890.344952][T18935] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 890.360449][T18935] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 890.390580][T18935] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 890.403329][T18935] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 890.478457][T18935] ntfs: (device loop4): check_mft_mirror(): Failed to read $MFTMirr. [ 890.504025][T18935] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 890.552641][T18935] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 890.586008][T18935] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 890.628234][T30556] usb 2-1: USB disconnect, device number 91 [ 890.650792][T18935] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 890.719458][T18935] ntfs: volume version 3.1. [ 890.753860][T18946] loop2: detected capacity change from 0 to 8192 [ 890.786471][ T4233] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 890.795439][T18946] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 890.796700][T18935] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 890.817504][T18946] REISERFS (device loop2): using ordered data mode [ 890.824024][T18946] reiserfs: using flush barriers [ 890.845351][T18946] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 890.929020][T18946] REISERFS (device loop2): checking transaction log (loop2) [ 890.971220][T18955] tipc: Enabling of bearer rejected, failed to enable media [ 890.990391][T18946] REISERFS (device loop2): Using r5 hash to sort names [ 890.998768][T18946] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 891.018667][T18946] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 891.060838][ T4233] usb 1-1: Using ep0 maxpacket: 16 [ 891.185082][ T4233] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 891.228038][ T4233] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 891.244147][T18959] loop4: detected capacity change from 0 to 1024 [ 891.244145][ T4233] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 891.244172][ T4233] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.282368][T18957] loop3: detected capacity change from 0 to 8192 [ 891.282390][ T4233] usb 1-1: config 0 descriptor?? [ 891.421042][T18957] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 891.490479][T18957] REISERFS (device loop3): using ordered data mode [ 891.500387][T18957] reiserfs: using flush barriers [ 891.514312][T18959] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 891.543816][T18957] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 891.577333][T18957] REISERFS (device loop3): checking transaction log (loop3) [ 891.622666][T18971] netlink: 'syz.1.21823': attribute type 10 has an invalid length. [ 891.719200][T18957] REISERFS (device loop3): Using tea hash to sort names [ 891.765835][T18957] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 891.803671][T18974] loop2: detected capacity change from 0 to 512 [ 891.819086][ T4233] corsair 0003:1B1C:1B02.000A: unbalanced delimiter at end of report description [ 891.844046][ T4233] corsair 0003:1B1C:1B02.000A: parse failed [ 891.891795][T18974] EXT4-fs (loop2): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 891.901286][T18974] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 891.911163][T18974] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 891.912845][ T4233] corsair: probe of 0003:1B1C:1B02.000A failed with error -22 [ 891.920223][T18974] EXT4-fs (loop2): The Hurd can't support 64-bit file systems [ 892.036296][ T4233] usb 1-1: USB disconnect, device number 104 [ 892.268726][T18983] program syz.4.21834 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 892.366445][T18986] tipc: Started in network mode [ 892.387009][T18986] tipc: Node identity 2d000000000000000000000000000001, cluster identity 4711 [ 892.424762][T18986] tipc: Enabling of bearer rejected, failed to enable media [ 892.691906][T19002] netlink: 'syz.2.21841': attribute type 10 has an invalid length. [ 892.765242][T19007] sp0: Synchronizing with TNC [ 892.831133][T19009] loop2: detected capacity change from 0 to 1024 [ 892.974683][ T4232] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 893.264729][ T4232] usb 4-1: Using ep0 maxpacket: 16 [ 893.407916][ T4232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 893.454794][ T4232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 893.493486][ T4232] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 893.564857][ T4232] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 893.594327][ T4232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.629275][ T4232] usb 4-1: config 0 descriptor?? [ 893.681677][ T144] hfsplus: b-tree write err: -5, ino 25 [ 893.687717][ T144] hfsplus: b-tree write err: -5, ino 4 [ 893.702555][ T144] hfsplus: b-tree write err: -5, ino 2 [ 893.719839][ T144] hfsplus: b-tree write err: -5, ino 26 [ 894.126454][ T4232] microsoft 0003:045E:07DA.000B: ignoring exceeding usage max [ 894.155194][ T4232] microsoft 0003:045E:07DA.000B: unsupported Resolution Multiplier 0 [ 894.203436][ T4232] microsoft 0003:045E:07DA.000B: unsupported Resolution Multiplier 0 [ 894.244914][ T4232] microsoft 0003:045E:07DA.000B: No inputs registered, leaving [ 894.273461][ T4232] microsoft 0003:045E:07DA.000B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 894.332608][ T4232] microsoft 0003:045E:07DA.000B: no inputs found [ 894.364571][ T4232] microsoft 0003:045E:07DA.000B: could not initialize ff, continuing anyway [ 894.424937][ T4232] usb 4-1: USB disconnect, device number 87 [ 894.452575][T19060] loop2: detected capacity change from 0 to 4096 [ 894.551762][T19067] fido_id[19067]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 894.632514][T19060] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 894.973601][ C1] net_ratelimit: 10217 callbacks suppressed [ 894.973618][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 894.992114][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 895.004705][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 895.017186][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 895.029604][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 895.042165][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 895.054652][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 895.067119][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 895.079519][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 895.092250][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 895.241902][T19105] loop3: detected capacity change from 0 to 256 [ 895.315189][T19105] exfat: Deprecated parameter 'utf8' [ 895.321289][T19105] exfat: Deprecated parameter 'utf8' [ 895.337566][T19105] exfat: Deprecated parameter 'utf8' [ 895.386699][T19105] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 895.457931][ T4232] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 895.546935][ T4233] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 895.814761][ T4233] usb 5-1: Using ep0 maxpacket: 8 [ 895.874939][ T4232] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 895.888791][ T4232] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 895.907051][ T4232] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 895.947008][ T4232] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 895.974816][ T4233] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 896.013820][ T4233] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 896.033302][ T4232] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 896.065078][ T4233] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 896.215376][ T4232] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 896.256204][ T4232] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 896.274809][ T4232] usb 1-1: Product: syz [ 896.285059][ T4233] usb 5-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=f6.82 [ 896.294846][ T4232] usb 1-1: Manufacturer: syz [ 896.300315][ T4233] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.324495][ T4233] usb 5-1: Product: syz [ 896.328806][ T4233] usb 5-1: Manufacturer: syz [ 896.338934][ T4233] usb 5-1: SerialNumber: syz [ 896.365834][ T4232] cdc_wdm 1-1:1.0: skipping garbage [ 896.371075][ T4232] cdc_wdm 1-1:1.0: skipping garbage [ 896.378355][ T4233] usb 5-1: config 0 descriptor?? [ 896.387371][ T4232] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 896.393335][ T4232] cdc_wdm 1-1:1.0: Unknown control protocol [ 896.506604][ T1107] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 896.638967][ T4232] usb 5-1: USB disconnect, device number 101 [ 896.684010][ T4233] usb 1-1: USB disconnect, device number 105 [ 897.002598][ T1107] usb 3-1: config index 0 descriptor too short (expected 2084, got 36) [ 897.023243][ T1107] usb 3-1: config 0 has an invalid interface number: 240 but max is 0 [ 897.043169][ T1107] usb 3-1: config 0 has no interface number 0 [ 897.062602][ T1107] usb 3-1: config 0 interface 240 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 897.108636][ T1107] usb 3-1: config 0 interface 240 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 897.127107][ T1107] usb 3-1: config 0 interface 240 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 897.161400][ T1107] usb 3-1: config 0 interface 240 has no altsetting 0 [ 897.168396][ T1107] usb 3-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 897.212711][ T1107] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.243786][ T1107] usb 3-1: config 0 descriptor?? [ 897.402619][T19178] loop3: detected capacity change from 0 to 1024 [ 897.613347][T19186] netlink: 'syz.0.21925': attribute type 7 has an invalid length. [ 897.643445][T19186] netlink: 'syz.0.21925': attribute type 1 has an invalid length. [ 897.661991][ T151] hfsplus: b-tree write err: -5, ino 25 [ 897.671597][ T151] hfsplus: b-tree write err: -5, ino 4 [ 897.682850][T19186] netlink: 191376 bytes leftover after parsing attributes in process `syz.0.21925'. [ 897.701508][ T151] hfsplus: b-tree write err: -5, ino 2 [ 897.714547][ T151] hfsplus: b-tree write err: -5, ino 26 [ 897.773610][T19190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21938'. [ 897.781145][ T1107] uclogic 0003:5543:004D.000C: unknown main item tag 0x0 [ 897.793715][T19190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21938'. [ 897.794784][ T1107] uclogic 0003:5543:004D.000C: unknown main item tag 0x0 [ 897.826541][T19190] netlink: 'syz.1.21938': attribute type 12 has an invalid length. [ 897.846787][ T1107] uclogic 0003:5543:004D.000C: unknown main item tag 0x0 [ 897.864280][ T1107] uclogic 0003:5543:004D.000C: unknown main item tag 0x0 [ 897.871840][ T1107] uclogic 0003:5543:004D.000C: unknown main item tag 0x0 [ 897.891545][ T1107] uclogic 0003:5543:004D.000C: unknown main item tag 0x0 [ 897.910302][ T1107] uclogic 0003:5543:004D.000C: No inputs registered, leaving [ 897.958008][ T1107] uclogic 0003:5543:004D.000C: hidraw0: USB HID v0.00 Device [HID 5543:004d] on usb-dummy_hcd.2-1/input240 [ 898.066315][ T1107] usb 3-1: USB disconnect, device number 102 [ 898.222789][T19201] fido_id[19201]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 898.307904][ T4233] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 898.421385][T19177] loop4: detected capacity change from 0 to 40427 [ 898.532146][T19177] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x1ffff [ 898.532233][T19177] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x4 [ 898.562172][T19177] F2FS-fs (loop4): invalid crc value [ 898.618729][T19177] F2FS-fs (loop4): Found nat_bits in checkpoint [ 898.716081][ T4233] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 898.716111][ T4233] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 898.716130][ T4233] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 898.716164][ T4233] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 898.716190][ T4233] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 898.720957][T19177] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 898.861447][ T4233] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 898.878833][ T4233] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 898.897918][ T4233] usb 4-1: Product: syz [ 898.938472][ T4233] usb 4-1: Manufacturer: syz [ 898.995624][ T4233] cdc_wdm 4-1:1.0: skipping garbage [ 899.003196][ T4233] cdc_wdm 4-1:1.0: skipping garbage [ 899.028436][ T4233] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 899.048489][ T4233] cdc_wdm 4-1:1.0: Unknown control protocol [ 899.138414][ T4196] attempt to access beyond end of device [ 899.138414][ T4196] loop4: rw=2049, want=45104, limit=40427 [ 899.155601][T19229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21946'. [ 899.278460][ T1107] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 899.325106][ T4233] usb 4-1: USB disconnect, device number 88 [ 899.579838][T19239] loop4: detected capacity change from 0 to 256 [ 899.684688][ T4232] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 899.712246][T30556] usb 3-1: new full-speed USB device number 103 using dummy_hcd [ 899.929573][ T1107] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 899.954120][ T1107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.970435][ T1107] usb 2-1: Product: syz [ 899.975377][ C1] net_ratelimit: 12235 callbacks suppressed [ 899.975392][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 899.988127][ T4232] usb 1-1: Using ep0 maxpacket: 16 [ 899.993892][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 900.011069][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 900.023777][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 900.036576][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 900.049062][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 900.063186][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 900.076642][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 900.089246][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 900.101553][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 900.115945][ T4232] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 900.118874][ T1107] usb 2-1: Manufacturer: syz [ 900.131490][ T1107] usb 2-1: SerialNumber: syz [ 900.138441][ T4232] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 900.182552][ T4232] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 900.197039][ T1107] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 900.202404][ T4232] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 900.226051][ T4232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.239047][ T4232] usb 1-1: config 0 descriptor?? [ 900.344597][T30556] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 900.361029][T30556] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 900.385825][T19255] loop3: detected capacity change from 0 to 4096 [ 900.386555][T30556] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 900.429459][T30556] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.435303][T19255] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 900.457503][T30556] usb 3-1: config 0 descriptor?? [ 900.509975][T30556] hub 3-1:0.0: USB hub found [ 900.528056][T19255] [ 900.530413][T19255] ====================================================== [ 900.537437][T19255] WARNING: possible circular locking dependency detected [ 900.545034][T19255] syzkaller #0 Not tainted [ 900.549547][T19255] ------------------------------------------------------ [ 900.556584][T19255] syz.3.21958/19255 is trying to acquire lock: [ 900.563201][T19255] ffff888073f1fae8 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x5a/0x410 [ 900.573253][T19255] [ 900.573253][T19255] but task is already holding lock: [ 900.580623][T19255] ffff8881408a6628 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x8bf/0x1b30 [ 900.590455][T19255] [ 900.590455][T19255] which lock already depends on the new lock. [ 900.590455][T19255] [ 900.601032][T19255] [ 900.601032][T19255] the existing dependency chain (in reverse order) is: [ 900.610058][T19255] [ 900.610058][T19255] -> #2 (&ei->i_data_sem/2){++++}-{3:3}: [ 900.617894][T19255] down_read+0x44/0x2e0 [ 900.622588][T19255] ext4_map_blocks+0x33c/0x1b30 [ 900.627966][T19255] ext4_getblk+0x176/0x670 [ 900.632907][T19255] ext4_bread+0x26/0x180 [ 900.637687][T19255] ext4_quota_read+0x1b3/0x3a0 [ 900.643247][T19255] find_tree_dqentry+0x188/0xb30 [ 900.648718][T19255] find_tree_dqentry+0x3eb/0xb30 [ 900.654444][T19255] find_tree_dqentry+0x3eb/0xb30 [ 900.659910][T19255] find_tree_dqentry+0x3eb/0xb30 [ 900.665374][T19255] qtree_read_dquot+0x13c/0x680 [ 900.670754][T19255] v2_read_dquot+0xc0/0x110 [ 900.675893][T19255] dquot_acquire+0x152/0x520 [ 900.681025][T19255] ext4_acquire_dquot+0x2d9/0x4a0 [ 900.686575][T19255] dqget+0x778/0xeb0 [ 900.691001][T19255] __dquot_initialize+0x333/0xcd0 [ 900.696556][T19255] ext4_process_orphan+0x54/0x300 [ 900.702214][T19255] ext4_orphan_cleanup+0xad2/0x1320 [ 900.708114][T19255] ext4_fill_super+0x8e25/0x95a0 [ 900.713574][T19255] mount_bdev+0x287/0x3c0 [ 900.718422][T19255] legacy_get_tree+0xe6/0x180 [ 900.723622][T19255] vfs_get_tree+0x88/0x270 [ 900.728560][T19255] do_new_mount+0x24a/0xa40 [ 900.733583][T19255] __se_sys_mount+0x2e3/0x3d0 [ 900.738780][T19255] do_syscall_64+0x4c/0xa0 [ 900.743741][T19255] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 900.750155][T19255] [ 900.750155][T19255] -> #1 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 900.758323][T19255] down_read+0x44/0x2e0 [ 900.763006][T19255] v2_read_dquot+0x4a/0x110 [ 900.768182][T19255] dquot_acquire+0x152/0x520 [ 900.773564][T19255] ext4_acquire_dquot+0x2d9/0x4a0 [ 900.779312][T19255] dqget+0x778/0xeb0 [ 900.783919][T19255] __dquot_initialize+0x3c3/0xcd0 [ 900.789650][T19255] ext4_process_orphan+0x54/0x300 [ 900.795197][T19255] ext4_orphan_cleanup+0xad2/0x1320 [ 900.800947][T19255] ext4_fill_super+0x8e25/0x95a0 [ 900.806407][T19255] mount_bdev+0x287/0x3c0 [ 900.811280][T19255] legacy_get_tree+0xe6/0x180 [ 900.816756][T19255] vfs_get_tree+0x88/0x270 [ 900.821701][T19255] do_new_mount+0x24a/0xa40 [ 900.827685][T19255] __se_sys_mount+0x2e3/0x3d0 [ 900.832975][T19255] do_syscall_64+0x4c/0xa0 [ 900.837918][T19255] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 900.844334][T19255] [ 900.844334][T19255] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 900.851978][T19255] __lock_acquire+0x2c42/0x7d10 [ 900.857593][T19255] lock_acquire+0x19e/0x400 [ 900.862766][T19255] __mutex_lock_common+0x1e3/0x2400 [ 900.868510][T19255] mutex_lock_nested+0x17/0x20 [ 900.873823][T19255] dquot_commit+0x5a/0x410 [ 900.878778][T19255] ext4_write_dquot+0x1f0/0x360 [ 900.884175][T19255] mark_all_dquot_dirty+0xf9/0x400 [ 900.889905][T19255] __dquot_alloc_space+0x5d0/0xe20 [ 900.895660][T19255] ext4_mb_new_blocks+0xf81/0x4980 [ 900.901304][T19255] ext4_ext_map_blocks+0x191c/0x6580 [ 900.907114][T19255] ext4_map_blocks+0x98e/0x1b30 [ 900.912501][T19255] ext4_getblk+0x176/0x670 [ 900.917437][T19255] ext4_bread+0x26/0x180 [ 900.922200][T19255] ext4_append+0x2be/0x560 [ 900.927138][T19255] ext4_init_new_dir+0x2a2/0x940 [ 900.932596][T19255] ext4_mkdir+0x4fb/0xce0 [ 900.937447][T19255] vfs_mkdir+0x387/0x570 [ 900.942280][T19255] do_mkdirat+0x1df/0x5b0 [ 900.948252][T19255] __x64_sys_mkdir+0x6a/0x80 [ 900.953899][T19255] do_syscall_64+0x4c/0xa0 [ 900.958858][T19255] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 900.965598][T19255] [ 900.965598][T19255] other info that might help us debug this: [ 900.965598][T19255] [ 900.977108][T19255] Chain exists of: [ 900.977108][T19255] &dquot->dq_lock --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2 [ 900.977108][T19255] [ 900.981153][ T6308] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 900.994111][T19255] Possible unsafe locking scenario: [ 900.994111][T19255] [ 900.994123][T19255] CPU0 CPU1 [ 900.994127][T19255] ---- ---- [ 900.994132][T19255] lock(&ei->i_data_sem/2); [ 900.994151][T19255] lock(&s->s_dquot.dqio_sem); [ 900.994164][T19255] lock(&ei->i_data_sem/2); [ 901.042021][T19255] lock(&dquot->dq_lock); [ 901.046441][T19255] [ 901.046441][T19255] *** DEADLOCK *** [ 901.046441][T19255] [ 901.054972][T19255] 4 locks held by syz.3.21958/19255: [ 901.060256][T19255] #0: ffff888052bfa460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 901.069855][T19255] #1: ffff888075f421d8 (&type->i_mutex_dir_key#4/1){+.+.}-{3:3}, at: filename_create+0x208/0x470 [ 901.080511][T19255] #2: ffff8881408a6628 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x8bf/0x1b30 [ 901.090453][T19255] #3: ffffffff8c441538 (dquot_srcu){....}-{0:0}, at: rcu_lock_acquire+0x5/0x30 [ 901.099528][T19255] [ 901.099528][T19255] stack backtrace: [ 901.105420][T19255] CPU: 0 PID: 19255 Comm: syz.3.21958 Not tainted syzkaller #0 [ 901.113147][T19255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 901.123930][T19255] Call Trace: [ 901.127219][T19255] [ 901.130249][T19255] dump_stack_lvl+0x188/0x250 [ 901.134932][T19255] ? load_image+0x400/0x400 [ 901.139439][T19255] ? show_regs_print_info+0x20/0x20 [ 901.144668][T19255] ? print_circular_bug+0x12b/0x1a0 [ 901.149874][T19255] check_noncircular+0x296/0x330 [ 901.154828][T19255] ? add_chain_block+0x940/0x940 [ 901.159868][T19255] ? lockdep_lock+0xf1/0x1f0 [ 901.164740][T19255] ? mark_lock+0x94/0x320 [ 901.169100][T19255] ? _find_first_zero_bit+0xce/0xf0 [ 901.174317][T19255] __lock_acquire+0x2c42/0x7d10 [ 901.179199][T19255] ? add_chain_block+0x940/0x940 [ 901.184366][T19255] ? lockdep_lock+0xf1/0x1f0 [ 901.189264][T19255] ? verify_lock_unused+0x140/0x140 [ 901.194755][T19255] ? lockdep_unlock+0x143/0x2e0 [ 901.199811][T19255] ? mark_lock+0x94/0x320 [ 901.204328][T19255] ? __lock_acquire+0x13bc/0x7d10 [ 901.209380][T19255] lock_acquire+0x19e/0x400 [ 901.213902][T19255] ? dquot_commit+0x5a/0x410 [ 901.218607][T19255] ? __might_sleep+0xf0/0xf0 [ 901.223324][T19255] ? read_lock_is_recursive+0x10/0x10 [ 901.228727][T19255] ? dquot_commit+0x5a/0x410 [ 901.233336][T19255] __mutex_lock_common+0x1e3/0x2400 [ 901.238551][T19255] ? dquot_commit+0x5a/0x410 [ 901.243375][T19255] ? __might_sleep+0xf0/0xf0 [ 901.247995][T19255] ? mutex_lock_io_nested+0x60/0x60 [ 901.253604][T19255] mutex_lock_nested+0x17/0x20 [ 901.258525][T19255] dquot_commit+0x5a/0x410 [ 901.262977][T19255] ? __ext4_journal_start_sb+0x1bd/0x360 [ 901.268931][T19255] ext4_write_dquot+0x1f0/0x360 [ 901.273837][T19255] mark_all_dquot_dirty+0xf9/0x400 [ 901.278967][T19255] __dquot_alloc_space+0x5d0/0xe20 [ 901.284108][T19255] ext4_mb_new_blocks+0xf81/0x4980 [ 901.289241][T19255] ? memset+0x1e/0x40 [ 901.293255][T19255] ? ext4_mb_pa_callback+0xd0/0xd0 [ 901.298384][T19255] ? ext4_ext_check_overlap+0x15f/0x560 [ 901.304107][T19255] ? ext4_inode_to_goal_block+0x313/0x450 [ 901.309839][T19255] ext4_ext_map_blocks+0x191c/0x6580 [ 901.315135][T19255] ? kasan_quarantine_put+0xd4/0x220 [ 901.320612][T19255] ? ext4_ext_release+0x10/0x10 [ 901.326114][T19255] ? rwsem_write_trylock+0x135/0x1c0 [ 901.331529][T19255] ? ext4_es_lookup_extent+0x60a/0xa00 [ 901.337094][T19255] ext4_map_blocks+0x98e/0x1b30 [ 901.342050][T19255] ? ext4_map_blocks+0x56a/0x1b30 [ 901.347316][T19255] ? ext4_issue_zeroout+0x250/0x250 [ 901.352532][T19255] ext4_getblk+0x176/0x670 [ 901.356987][T19255] ? ext4_get_block_unwritten+0x30/0x30 [ 901.363287][T19255] ? __brelse+0x55/0x90 [ 901.368071][T19255] ext4_bread+0x26/0x180 [ 901.372860][T19255] ext4_append+0x2be/0x560 [ 901.377665][T19255] ? ext4_init_new_dir+0x940/0x940 [ 901.382971][T19255] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 901.391511][T19255] ext4_init_new_dir+0x2a2/0x940 [ 901.397865][T19255] ext4_mkdir+0x4fb/0xce0 [ 901.403009][T19255] ? ext4_symlink+0xca0/0xca0 [ 901.407906][T19255] ? inode_permission+0xef/0x480 [ 901.413499][T19255] ? bpf_lsm_inode_mkdir+0x5/0x10 [ 901.416314][ T6295] usb 2-1: USB disconnect, device number 92 [ 901.418919][T19255] ? security_inode_mkdir+0xb3/0x100 [ 901.430704][T19255] vfs_mkdir+0x387/0x570 [ 901.435411][T19255] do_mkdirat+0x1df/0x5b0 [ 901.439950][T19255] ? vfs_mkdir+0x570/0x570 [ 901.444408][T19255] ? getname_flags+0x1fe/0x500 [ 901.449175][T19255] __x64_sys_mkdir+0x6a/0x80 [ 901.453778][T19255] do_syscall_64+0x4c/0xa0 [ 901.458213][T19255] ? clear_bhb_loop+0x30/0x80 [ 901.462992][T19255] ? clear_bhb_loop+0x30/0x80 [ 901.467676][T19255] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 901.473573][T19255] RIP: 0033:0x7f88fb5ea799 [ 901.478006][T19255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 901.497839][T19255] RSP: 002b:00007f88f9844028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 901.506442][T19255] RAX: ffffffffffffffda RBX: 00007f88fb863fa0 RCX: 00007f88fb5ea799 [ 901.514420][T19255] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000480 [ 901.522409][T19255] RBP: 00007f88fb680c99 R08: 0000000000000000 R09: 0000000000000000 [ 901.530388][T19255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 901.538469][T19255] R13: 00007f88fb864038 R14: 00007f88fb863fa0 R15: 00007ffdf1f34ac8 [ 901.546464][T19255] [ 901.549600][ C0] vkms_vblank_simulate: vblank timer overrun [ 901.570206][T30556] hub 3-1:0.0: 1 port detected [ 901.654583][ T4232] microsoft 0003:045E:07DA.000D: ignoring exceeding usage max [ 901.669239][ T4232] microsoft 0003:045E:07DA.000D: unsupported Resolution Multiplier 0 [ 901.688731][ T4232] microsoft 0003:045E:07DA.000D: unsupported Resolution Multiplier 0 [ 901.717555][ T4232] microsoft 0003:045E:07DA.000D: No inputs registered, leaving [ 901.726393][ T4232] microsoft 0003:045E:07DA.000D: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 901.764547][ T4232] microsoft 0003:045E:07DA.000D: no inputs found [ 901.771004][ T4232] microsoft 0003:045E:07DA.000D: could not initialize ff, continuing anyway [ 901.785339][T30556] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 901.791705][T30556] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 901.948332][ T4232] usb 1-1: USB disconnect, device number 106 [ 901.949476][T30556] usbhid 3-1:0.0: can't add hid device: -71 [ 901.960448][T30556] usbhid: probe of 3-1:0.0 failed with error -71 [ 902.052774][ T6308] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 902.073079][T30556] usb 3-1: USB disconnect, device number 103 [ 902.096014][ T6308] ath9k_htc: Failed to initialize the device [ 902.134808][ T6295] usb 2-1: ath9k_htc: USB layer deinitialized [ 904.984477][ C1] net_ratelimit: 44627 callbacks suppressed [ 904.984496][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 904.984514][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 904.990645][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 905.002935][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 905.015035][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 905.027110][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 905.039190][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 905.051119][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 905.062958][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 905.075435][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 909.994514][ C0] net_ratelimit: 57566 callbacks suppressed [ 909.994535][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 909.994575][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 910.000759][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 910.012693][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 910.024639][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 910.036702][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 910.048626][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 910.060454][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 910.072643][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 910.108745][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)