last executing test programs: 53.513233218s ago: executing program 1 (id=4571): r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3, 0x1, 0x2}}, 0x2e) 53.391505911s ago: executing program 1 (id=4575): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0x12, 0x0, 0x1000, 0xb82, 0x400000, 0x1ff, 0x4, 0xc0000000, 0x402, 0x20009, 0x5, 0x7, 0x8, 0x80004006, 0x84, 0xfffffffc, 0x0, 0x37e9, 0x80000004, 0x6, 0x5, 0x40424f, 0x3}}) 53.265196674s ago: executing program 1 (id=4579): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f0000000140)={0x5, 0x8}) 53.139966477s ago: executing program 1 (id=4581): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file2\x00', 0x0, &(0x7f00000000c0)={[{@nls={'nls', 0x3d, 'iso8859-4'}}, {@barrier}, {@part={'part', 0x3d, 0x1fb38dde}}, {@force}, {@umask={'umask', 0x3d, 0x8}}, {@nodecompose}, {@part={'part', 0x3d, 0x7}}, {@nobarrier}]}, 0xfe, 0x5e5, &(0x7f0000002900)="$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") mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 52.900505533s ago: executing program 1 (id=4587): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000500)) 51.903594137s ago: executing program 1 (id=4600): r0 = syz_open_dev$vbi(&(0x7f0000000740), 0x0, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000780)={0x8, @pix_mp={0x5, 0x8, 0x30314442, 0x6, 0x2, [{0x7, 0xb}, {0x1000}, {0x401, 0xee}, {0x1, 0x10000}, {0x1, 0x9}, {0x7, 0x1}, {0xece, 0x2}, {0x6cdc, 0x7}], 0x1, 0x2, 0x4, 0x0, 0x3}}) 51.698360953s ago: executing program 32 (id=4600): r0 = syz_open_dev$vbi(&(0x7f0000000740), 0x0, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000780)={0x8, @pix_mp={0x5, 0x8, 0x30314442, 0x6, 0x2, [{0x7, 0xb}, {0x1000}, {0x401, 0xee}, {0x1, 0x10000}, {0x1, 0x9}, {0x7, 0x1}, {0xece, 0x2}, {0x6cdc, 0x7}], 0x1, 0x2, 0x4, 0x0, 0x3}}) 6.08003137s ago: executing program 4 (id=5568): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000440)="0800eca3486fa3e8", 0x8}], 0x1, &(0x7f0000000640)=[@ip_tos_u8={{0x11, 0x0, 0x7}}, @ip_pktinfo={{0xfffffffffffffe97, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x38}, 0x10) 6.043603091s ago: executing program 4 (id=5574): r0 = syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000780)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x763, 0x2030, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7f, 0xc0, 0x8, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0x23}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x25, 0x3, 0x2, {0xa, 0x25, 0x25, 0x405, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x74, 0x6, 0xc0, {0xa, 0x25, 0x25, 0x7ffffffc, 0x2, 0xbe1}}}}}}}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.811919246s ago: executing program 5 (id=5630): syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000056544820e1050804112101020301090224000100001a00090400000201"], 0x0) ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, 0x0) 3.700262099s ago: executing program 4 (id=5635): syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a800800904000001030000060905", @ANYRESDEC], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 1.990785631s ago: executing program 5 (id=5686): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mprotect(&(0x7f00004a4000/0x800000)=nil, 0x800000, 0x0) 1.879594704s ago: executing program 5 (id=5690): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000000), 0x800800, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@access_client}]}}) 1.854640735s ago: executing program 4 (id=5691): syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x10040, &(0x7f00000000c0)=ANY=[@ANYBLOB='heartbeat=none,journal_async_commit,journal_async_commit,coherency=full,coherency=full\x00'], 0x1, 0x4445, &(0x7f00000044c0)="$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") mknodat$loop(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6004, 0x1) 1.775817327s ago: executing program 0 (id=5694): r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f0000002980)={0x100008, 0x0, 0x20000, {r0}}, 0x20) 1.679989699s ago: executing program 0 (id=5696): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002000090002000000ffdbdf2502000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 1.554261533s ago: executing program 5 (id=5698): r0 = syz_open_dev$loop(&(0x7f0000000000), 0xc, 0x101000) ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0) 1.529124633s ago: executing program 3 (id=5699): r0 = fsopen(&(0x7f0000000400)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, 0x0, 0x0, 0x0) 1.450773505s ago: executing program 0 (id=5701): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/cpuinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001200)=[{&(0x7f0000001800)=""/250, 0xfa}], 0x1, 0x40000004, 0x0) 1.450249645s ago: executing program 5 (id=5702): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x28, 0x1411, 0x1, 0x70bd29, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x28}}, 0x0) 1.425574125s ago: executing program 3 (id=5703): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$sock(r0, &(0x7f0000000000)={&(0x7f0000000240)=@nl=@unspec={0x0, 0x0, 0x0, 0xd8ff}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[@timestamping={{0x14, 0x1, 0x4f, 0x3}}], 0x18}, 0x4) 1.368063087s ago: executing program 5 (id=5705): syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203"], 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 1.284111039s ago: executing program 3 (id=5706): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) lseek(r0, 0x80000001, 0x0) 1.283806439s ago: executing program 0 (id=5708): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@getnexthop={0x20, 0x76, 0xb0d, 0x20, 0x25dfdbff, {0x3, 0x0, 0x0, 0x0, 0x4000000}, [@NHA_MASTER={0x8, 0xa, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.24466844s ago: executing program 3 (id=5709): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x401, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x50058}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_to_bridge\x00'}, @IFLA_MASTER={0x8}, @IFLA_CARRIER={0x5, 0x21, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x5}, 0x80) 1.128101423s ago: executing program 0 (id=5711): r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101080, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'8255\x00', [0xfffffffc, 0xfffffffc, 0x4, 0x4, 0x0, 0xfffffff7, 0x8001, 0xa22, 0xfffffff8, 0x6, 0x6, 0xc3, 0x5006, 0x1000007, 0x1, 0x10003, 0x800ffc, 0x7fffffff, 0x1ff, 0x3ff, 0x1001010, 0x1ff, 0x8, 0x3, 0x8001, 0x5, 0x3ff, 0x9, 0x404, 0x3, 0xfffd]}) 1.092007034s ago: executing program 3 (id=5712): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37200c18800dac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) 971.896007ms ago: executing program 3 (id=5715): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x200041a, &(0x7f0000000140)=ANY=[@ANYBLOB="6465636f6d706f73652c6e6f626172726965722c6e6c733d63703737352c004ced152ed09fe8115489d9663b017f412168f2c35d21aff719da4cdf06e768be9440ad63ddad24a1cc0173a9ee54ecb163908c4f9c408f630f15"], 0x1, 0x5e2, &(0x7f0000001780)="$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") syz_usb_connect(0x5, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x300, 0x56, 0xa, 0xc1, 0x40, 0x7ca, 0x2835, 0xebe7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x2, 0x3, 0x2, 0x40, 0x2, "", [{{0x9, 0x4, 0x0, 0x9, 0x0, 0xff, 0xff, 0xff, 0x9}}, {{0x9, 0x4, 0x49, 0xe, 0x1, 0xff, 0xff, 0xff, 0xe0, [], [{{0x9, 0x5, 0x2, 0x15, 0x3ff, 0x88, 0x7e, 0x4}}]}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x155556b5}) 956.161627ms ago: executing program 0 (id=5716): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000200)=ANY=[]) 638.350385ms ago: executing program 4 (id=5721): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, 0x0, 0x0) 488.164069ms ago: executing program 2 (id=5724): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x48, 0x1, 0x200000, 0x0, {0xa, 0x0, 0x6e80}}, 0x14}}, 0x0) 463.299189ms ago: executing program 2 (id=5725): syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) pselect6(0x40, &(0x7f0000001600)={0x8, 0x8, 0x7, 0x7, 0x40002c16035f, 0x86a, 0xbd7, 0x7ff}, 0x0, 0x0, 0x0, 0x0) 332.484302ms ago: executing program 4 (id=5726): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000300)={[{@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xe}}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@nodelalloc}, {@minixdf}, {@orlov}]}, 0x1, 0xbaf, &(0x7f00000017c0)="$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") symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='.\x02\x00') 200.065466ms ago: executing program 2 (id=5727): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000240)={'mpc624\x00', [0x10f, 0x4, 0x13600, 0x10004, 0x1, 0x10005, 0x7fffffff, 0x2000003, 0x80008, 0x5, 0x2, 0x64, 0x7, 0x1, 0x6, 0xfd, 0x6, 0x9, 0x3, 0x0, 0xb740, 0x6, 0x9, 0x80, 0x9, 0xf39a, 0x0, 0x1539b804, 0x7, 0x1, 0x2]}) 171.603146ms ago: executing program 2 (id=5728): r0 = gettid() kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, 0x0) 115.753858ms ago: executing program 2 (id=5729): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc0100001300e999000000000000000000000000000000000000ffffe0000002ac1414aa00000000000000000000000000020000100000000200201002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1fc}}, 0x0) 0s ago: executing program 2 (id=5730): r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000102f80)={{0x0, 0xa60a, 0xc, 0x4, 0x9b3, 0x3, 0x100000000, 0x2, 0x1, 0x861, 0x1, 0x9, 0x5, 0x5, 0x9}}) kernel console output (not intermixed with test programs): ity change from 0 to 2048 [ 208.252473][ T7194] usb 2-1: config 4 has an invalid interface number: 128 but max is 0 [ 208.264943][ T7194] usb 2-1: config 4 has no interface number 0 [ 208.277258][ T7194] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 208.296064][T12360] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 208.316826][ T7194] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.338614][T12360] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 208.347737][T12362] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 208.377905][T12360] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 208.416807][ T7194] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 208.426953][T12360] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 208.474023][T12373] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 208.482588][ T7194] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.493370][T12360] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 208.517618][T12360] EXT4-fs (loop4): orphan cleanup on readonly fs [ 208.537460][T12360] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.3736: bg 0: block 34: padding at end of block bitmap is not set [ 208.566994][T12360] Quota error (device loop4): write_blk: dquota write failed [ 208.574844][T12360] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 208.628656][ T7194] hub 2-1:4.128: USB hub found [ 208.719214][T12382] rtc_cmos 00:00: Alarms can be up to one day in the future [ 208.722312][T12360] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.3736: Failed to acquire dquot type 1 [ 208.814049][T12360] EXT4-fs (loop4): 1 truncate cleaned up [ 208.846953][T12360] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,bsddf,mb_optimize_scan=0x0000000000000001,noquota,max_dir_size_kb=0x0000000000000001,noblock_validity,usrjquota=,jqfmt=vfsv0,inode_readahead_blks=0x0000000000001000,resgid=0x0000000000000000,sysvgroups,,errors=continue. Quota mode: writeback. [ 208.846974][ T7194] hub 2-1:4.128: 27 ports detected [ 208.847010][ T7194] hub 2-1:4.128: Using single TT (err -22) [ 208.937071][ T7194] hub 2-1:4.128: insufficient power available to use all downstream ports [ 209.080982][ T7194] hub 2-1:4.128: hub_hub_status failed (err = -71) [ 209.094415][ T7194] hub 2-1:4.128: config failed, can't get hub status (err -71) [ 209.132801][T12360] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 209.189384][ T7194] usb 2-1: USB disconnect, device number 15 [ 209.304112][T12407] xt_TCPMSS: Only works on TCP SYN packets [ 209.601175][T12423] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 209.745324][T12430] x_tables: unsorted entry at hook 2 [ 209.774768][T12434] loop2: detected capacity change from 0 to 256 [ 209.933038][T12442] loop3: detected capacity change from 0 to 512 [ 209.949901][T12434] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 210.101985][T12448] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 210.109472][T12448] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 210.123589][T12456] futex_wake_op: syz.1.3779 tries to shift op by 144; fix this program [ 210.154073][T12448] vhci_hcd vhci_hcd.0: Device attached [ 210.167617][T12456] futex_wake_op: syz.1.3779 tries to shift op by 144; fix this program [ 210.201609][T12442] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #3: comm syz.3.3775: corrupted inode contents [ 210.227410][T12442] EXT4-fs error (device loop3): ext4_dirty_inode:6077: inode #3: comm syz.3.3775: mark_inode_dirty error [ 210.347050][ T4198] vhci_hcd: vhci_device speed not set [ 210.377077][T12442] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #3: comm syz.3.3775: corrupted inode contents [ 210.437908][T12442] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #3: comm syz.3.3775: mark_inode_dirty error [ 210.463767][ T4198] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 210.471009][T12442] Quota error (device loop3): write_blk: dquota write failed [ 210.514455][T12442] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 210.537486][T12477] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 210.561221][T12442] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.3775: Failed to acquire dquot type 0 [ 210.563660][T12442] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #16: comm syz.3.3775: corrupted inode contents [ 210.564118][T12442] EXT4-fs error (device loop3): ext4_dirty_inode:6077: inode #16: comm syz.3.3775: mark_inode_dirty error [ 210.564592][T12442] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #16: comm syz.3.3775: corrupted inode contents [ 210.564950][T12442] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #16: comm syz.3.3775: mark_inode_dirty error [ 210.565294][T12442] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #16: comm syz.3.3775: corrupted inode contents [ 210.565611][T12442] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 210.565967][T12442] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #16: comm syz.3.3775: corrupted inode contents [ 210.566396][T12442] EXT4-fs error (device loop3): ext4_truncate:4286: inode #16: comm syz.3.3775: mark_inode_dirty error [ 210.571335][T12442] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 210.572274][T12442] EXT4-fs (loop3): 1 truncate cleaned up [ 210.572297][T12442] EXT4-fs (loop3): mounted filesystem without journal. Opts: resuid=0x0000000000000000,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 210.573163][T12477] FAT-fs (loop1): unable to read boot sector [ 210.724515][T12453] vhci_hcd: connection reset by peer [ 210.738126][ T6538] vhci_hcd: stop threads [ 210.739093][ T6538] vhci_hcd: release socket [ 210.745413][ T6538] vhci_hcd: disconnect device [ 211.159176][T12500] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3802'. [ 211.416373][T12516] loop2: detected capacity change from 0 to 8 [ 211.586484][T12530] netlink: 'syz.3.3816': attribute type 10 has an invalid length. [ 211.914205][T12552] tipc: Can't bind to reserved service type 0 [ 212.194815][T12564] xt_bpf: check failed: parse error [ 212.256473][T12570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3834'. [ 212.472595][T12580] trusted_key: encrypted_key: master key parameter '' is invalid [ 212.540008][T12584] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3841'. [ 212.580324][T12584] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3841'. [ 212.922185][ T6378] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 213.068215][T12562] loop2: detected capacity change from 0 to 32768 [ 213.305220][T12562] XFS (loop2): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 213.381105][ T6378] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 213.400344][ T6378] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.428537][T12562] XFS (loop2): Metadata corruption detected at xfs_dinode_verify+0x2bf/0xd50, inode 0x1803 dinode [ 213.436370][ T6378] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 213.466742][ T6378] usb 5-1: config 1 has no interface number 1 [ 213.483080][ T6378] usb 5-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 213.516761][ T6378] usb 5-1: config 1 interface 105 has no altsetting 0 [ 213.544579][T12562] XFS (loop2): Unmount and run xfs_repair [ 213.598213][T12562] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 213.675432][T12562] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00 INA............. [ 213.689049][ T6378] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 213.716747][ T6378] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.755748][T12562] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 213.756761][ T6378] usb 5-1: Product: syz [ 213.822390][T12562] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 e2 bf 3d 4.Xh....4.Xh...= [ 213.822837][ T6378] usb 5-1: Manufacturer: syz [ 213.872764][T12562] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 20 4.Xh...=....... [ 213.886802][ T6378] usb 5-1: SerialNumber: syz [ 213.903590][T12562] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 213.947096][T12562] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 ca e6 3d c1 ..............=. [ 213.955987][T12562] 00000060: ff ff ff ff 6e d0 e3 2d 00 00 00 00 00 00 00 04 ....n..-........ [ 214.039788][T12562] 00000070: 00 00 00 03 00 00 00 10 00 00 00 00 00 00 00 06 ................ [ 214.083206][ T4193] XFS (loop2): Unmounting Filesystem [ 214.157274][ T6378] aqc111: probe of 5-1:1.105 failed with error -22 [ 214.186034][T12663] loop0: detected capacity change from 0 to 64 [ 214.382077][ T26] audit: type=1800 audit(214.340:6): pid=12663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3875" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 214.408154][ T6378] usb 5-1: USB disconnect, device number 16 [ 214.976296][T12692] netlink: 'syz.0.3889': attribute type 1 has an invalid length. [ 215.009872][T12692] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.3889'. [ 215.032005][T12687] loop1: detected capacity change from 0 to 4096 [ 215.047967][T12692] netlink: 'syz.0.3889': attribute type 1 has an invalid length. [ 215.108225][T12700] xt_hashlimit: size too large, truncated to 1048576 [ 215.133291][T12687] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 215.135263][T12700] xt_hashlimit: max too large, truncated to 1048576 [ 215.212530][T12700] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old? [ 215.287975][T12687] ntfs: volume version 3.1. [ 215.295000][T12706] loop2: detected capacity change from 0 to 128 [ 215.560860][T12718] netlink: 'syz.4.3902': attribute type 16 has an invalid length. [ 215.606799][T12718] netlink: 'syz.4.3902': attribute type 3 has an invalid length. [ 215.636899][T12718] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3902'. [ 215.651012][ T4198] vhci_hcd: vhci_device speed not set [ 215.735100][ T23] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 216.087333][T12750] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3918'. [ 216.119389][T12752] xt_hashlimit: size too large, truncated to 1048576 [ 216.168154][ T23] usb 3-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 216.188932][ T23] usb 3-1: config 220 has an invalid interface number: 218 but max is 183 [ 216.198179][T12752] xt_hashlimit: invalid rate [ 216.224790][T12750] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3918'. [ 216.256743][ T23] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 216.265992][ T23] usb 3-1: config 220 has no interface number 0 [ 216.313610][ T23] usb 3-1: too many endpoints for config 220 interface 218 altsetting 195: 181, using maximum allowed: 30 [ 216.368748][ T23] usb 3-1: config 220 interface 218 altsetting 195 has 0 endpoint descriptors, different from the interface descriptor's value: 181 [ 216.410339][ T23] usb 3-1: config 220 interface 218 has no altsetting 0 [ 216.436763][ T23] usb 3-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 216.486812][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.538258][T12768] ip6t_srh: unknown srh match flags FF3F [ 216.728059][ T4226] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 216.801524][ T23] usb 3-1: string descriptor 0 read error: -71 [ 216.818157][ T23] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 216.866966][ T23] gspca_sn9c2028: read1 error -71 [ 216.886942][ T23] gspca_sn9c2028: read1 error -71 [ 216.906921][ T23] gspca_sn9c2028: read1 error -71 [ 216.912116][ T23] sn9c2028: probe of 3-1:220.218 failed with error -71 [ 216.956805][ T23] usb 3-1: USB disconnect, device number 23 [ 217.171744][ T4226] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 217.202607][ T4226] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 217.366947][ T4226] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 217.426900][ T4226] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.445783][ T4226] usb 5-1: Product: syz [ 217.461464][ T4226] usb 5-1: Manufacturer: syz [ 217.479177][T12811] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3947'. [ 217.486501][ T4226] usb 5-1: SerialNumber: syz [ 217.526827][ T23] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 217.831459][T12825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3953'. [ 217.897103][ T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.926777][ T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 217.965396][ T23] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 217.985870][ T23] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 218.007338][ T4226] usb 5-1: failed to set cport flags for port 0 [ 218.014517][ T4226] greybus greybus1: 0/0:0: failed to enable host cport: -71 [ 218.036774][ T23] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 218.082674][ T4226] es2_ap_driver: probe of 5-1:1.0 failed with error -71 [ 218.085722][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.132813][ T4226] usb 5-1: USB disconnect, device number 17 [ 218.168573][T12838] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 218.382262][T12845] netlink: 'syz.2.3964': attribute type 1 has an invalid length. [ 218.396946][ T23] gud 2-1:1.0: Protocol version 33 is not supported [ 218.435218][T12845] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.3964'. [ 218.640466][ T4198] usb 2-1: USB disconnect, device number 16 [ 218.668100][T12857] program syz.2.3972 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 219.078477][T12881] loop0: detected capacity change from 0 to 64 [ 219.130465][T12885] x_tables: duplicate underflow at hook 2 [ 219.647069][ T7185] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 219.669289][T12902] loop4: detected capacity change from 0 to 8192 [ 219.729460][T12902] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 219.751019][T12902] REISERFS (device loop4): using ordered data mode [ 219.836569][T12902] reiserfs: using flush barriers [ 219.898763][T12902] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 219.915457][ T7185] usb 2-1: Using ep0 maxpacket: 16 [ 219.992529][T12902] REISERFS (device loop4): checking transaction log (loop4) [ 220.029061][T12902] REISERFS (device loop4): Using r5 hash to sort names [ 220.057767][ T7185] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 220.075549][T12919] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4000'. [ 220.083057][ T7185] usb 2-1: config 1 has an invalid descriptor of length 15, skipping remainder of the config [ 220.105862][T12902] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 220.108743][T12917] loop0: detected capacity change from 0 to 4096 [ 220.132111][ T7185] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 220.151467][ T7185] usb 2-1: config 1 has no interface number 1 [ 220.186398][ T7185] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 220.226132][T12917] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 220.266450][ T7185] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x89 has an invalid bInterval 201, changing to 7 [ 220.300963][T12917] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 220.444808][T12917] ntfs: volume version 0.0. [ 220.472694][T12917] ntfs: (device loop0): load_system_files(): Disabling sparse support due to NTFS volume version 0.0 (need at least version 3.0). [ 220.490326][ T7185] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 220.511944][ T7185] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.548844][ T7185] usb 2-1: Product: syz [ 220.569082][ T7185] usb 2-1: Manufacturer: syz [ 220.585694][ T7185] usb 2-1: SerialNumber: syz [ 220.626891][ T7194] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 220.681993][T12929] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4004'. [ 220.793710][T12935] kAFS: unable to lookup cell '/,' [ 220.957434][ T7185] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 220.968624][ T7185] usb 2-1: found format II with max.bitrate = 0, frame size=0 [ 220.986456][ T7185] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 221.054681][ T7185] usb 2-1: USB disconnect, device number 17 [ 221.061031][ T7194] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 80, setting to 64 [ 221.082215][ T7194] usb 3-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice= 0.00 [ 221.108708][ T7194] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.135856][ T7194] usb 3-1: config 0 descriptor?? [ 221.150057][T12950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4015'. [ 221.159460][T12923] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 221.182941][ T7194] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input18 [ 221.356849][ T8653] udevd[8653]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 221.426980][ T3544] bcm5974 3-1:0.0: could not read from device [ 221.455299][ T7194] usb 3-1: USB disconnect, device number 24 [ 221.461830][ T3544] bcm5974 3-1:0.0: could not read from device [ 221.488814][T12956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.541682][T12958] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 221.573200][T12958] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 221.851412][T12968] loop4: detected capacity change from 0 to 4096 [ 221.895795][T12970] netlink: 'syz.3.4026': attribute type 1 has an invalid length. [ 221.948405][T12980] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 221.978980][T12968] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 222.108939][T12986] loop2: detected capacity change from 0 to 1024 [ 222.116983][T12980] 8021q: adding VLAN 0 to HW filter on device bond4 [ 222.134241][T12968] ntfs: volume version 3.1. [ 222.340525][T12994] loop0: detected capacity change from 0 to 256 [ 222.378414][T12986] Quota error (device loop2): find_tree_dqentry: Getting block too big (64 >= 6) [ 222.456831][T12986] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 222.466511][T12986] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.4030: Failed to acquire dquot type 0 [ 222.538902][T12986] EXT4-fs error (device loop2): mb_free_blocks:1889: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 222.563402][T12986] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #13: comm syz.2.4030: corrupted inode contents [ 222.592646][T12994] exfat: Deprecated parameter 'utf8' [ 222.622270][T12994] exfat: Deprecated parameter 'utf8' [ 222.640128][T12986] EXT4-fs error (device loop2): ext4_dirty_inode:6077: inode #13: comm syz.2.4030: mark_inode_dirty error [ 222.681881][T12994] exfat: Deprecated parameter 'namecase' [ 222.702291][T12994] exfat: Deprecated parameter 'namecase' [ 222.742054][T12986] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #13: comm syz.2.4030: corrupted inode contents [ 222.755497][T12994] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 222.825504][T12986] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #13: comm syz.2.4030: mark_inode_dirty error [ 222.892008][T12986] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #13: comm syz.2.4030: corrupted inode contents [ 222.962622][T12986] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 222.998396][T12986] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #13: comm syz.2.4030: corrupted inode contents [ 223.022491][T12986] EXT4-fs error (device loop2): ext4_truncate:4286: inode #13: comm syz.2.4030: mark_inode_dirty error [ 223.063650][T13023] netlink: 'syz.3.4048': attribute type 2 has an invalid length. [ 223.128932][T12986] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 223.155502][T13023] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.4048'. [ 223.195387][T12986] EXT4-fs (loop2): 1 truncate cleaned up [ 223.212580][T12986] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 223.302728][T12986] Quota error (device loop2): find_tree_dqentry: Getting block too big (64 >= 6) [ 223.314343][T13033] netlink: 'syz.1.4052': attribute type 5 has an invalid length. [ 223.348659][T12986] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 223.416760][T12986] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.4030: Failed to acquire dquot type 0 [ 223.493184][T13046] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4059'. [ 223.554343][T13045] loop3: detected capacity change from 0 to 2048 [ 223.741510][T13045] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,errors=remount-ro,resgid=0x0000000000000000,jqfmt=vfsv0,quota,inode_readahead_blks=0x0000000000000400,. Quota mode: writeback. [ 224.488717][T13088] loop0: detected capacity change from 0 to 512 [ 224.602222][T13088] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 224.660888][T13088] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e01c, mo2=0002] [ 224.690961][T13088] EXT4-fs (loop0): orphan cleanup on readonly fs [ 224.763106][T13088] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.4074: attempt to clear invalid blocks 1024 len 1 [ 224.951740][T13088] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.4074: bg 0: block 361: padding at end of block bitmap is not set [ 225.056765][T13088] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 225.099833][T13088] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.4074: invalid indirect mapped block 1811939328 (level 0) [ 225.177446][T13088] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.4074: invalid indirect mapped block 2185560079 (level 1) [ 225.244860][T13088] EXT4-fs (loop0): 1 truncate cleaned up [ 225.276806][T13088] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,init_itable=0x00000000000004ef,noblock_validity,nodioread_nolock,i_version,errors=continue. Quota mode: none. [ 225.301456][T13110] loop3: detected capacity change from 0 to 4096 [ 225.333383][T13049] loop4: detected capacity change from 0 to 40427 [ 225.376968][ T4198] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 225.395195][T13110] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 225.450976][T13049] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 225.517792][T13049] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 225.560075][T13110] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 225.682440][T13049] F2FS-fs (loop4): invalid crc value [ 225.807598][ T4198] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.817316][T13049] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 225.838338][ T4198] usb 2-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=9e.06 [ 225.886743][ T4198] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.928293][ T4198] usb 2-1: config 0 descriptor?? [ 225.969664][ T4198] gspca_main: kinect-2.14.0 probing 045e:02bf [ 226.133876][T13146] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4091'. [ 226.186413][T13141] block device autoloading is deprecated and will be removed. [ 226.227182][ T23] usb 2-1: USB disconnect, device number 18 [ 226.253950][T13049] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 226.285152][T13049] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 226.418354][T13155] device bridge2 entered promiscuous mode [ 226.465588][T13049] fscrypt (loop4, inode 3): Error -61 getting encryption context [ 226.793276][T13176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4103'. [ 226.830743][T13176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4103'. [ 226.885014][T13182] usb usb8: usbfs: process 13182 (syz.2.4105) did not claim interface 0 before use [ 227.092590][T13191] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 227.099736][T13191] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 227.166464][T13191] vhci_hcd vhci_hcd.0: Device attached [ 227.249834][T13199] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 227.256512][T13199] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 227.267799][T13199] vhci_hcd vhci_hcd.0: Device attached [ 227.338420][T13203] vhci_hcd: connection closed [ 227.338494][T13194] vhci_hcd: connection closed [ 227.343476][ T1328] vhci_hcd: stop threads [ 227.394012][ T1328] vhci_hcd: release socket [ 227.399570][ T4198] vhci_hcd: vhci_device speed not set [ 227.407042][ T1328] vhci_hcd: disconnect device [ 227.436767][ T1328] vhci_hcd: stop threads [ 227.442090][ T1328] vhci_hcd: release socket [ 227.476764][ T1328] vhci_hcd: disconnect device [ 227.481999][ T4198] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 227.669908][T13223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4117'. [ 227.713635][T13223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4117'. [ 227.769351][T13223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4117'. [ 227.833935][T13223] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 228.109900][T13247] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 228.219598][ T26] audit: type=1400 audit(228.180:7): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A21D01A0B978D2F2F262D2A83D1 pid=13257 comm="syz.1.4131" [ 229.359651][T13344] netlink: 'syz.3.4166': attribute type 32 has an invalid length. [ 229.447028][ T7185] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 229.633273][T13359] loop1: detected capacity change from 0 to 16 [ 229.731406][T13359] erofs: (device loop1): mounted with root inode @ nid 36. [ 229.756583][T13359] erofs: (device loop1): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 229.792926][T13359] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 89 [ 229.823669][T13359] erofs: (device loop1): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 229.850492][T13359] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 89 [ 229.872804][T13359] erofs: (device loop1): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 229.899861][ T7185] usb 1-1: unable to get BOS descriptor or descriptor too short [ 229.956956][T13359] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 89 [ 230.007162][ T7185] usb 1-1: config 12 has an invalid interface number: 99 but max is 0 [ 230.020694][T13359] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 230.029347][ T7185] usb 1-1: config 12 has no interface number 0 [ 230.035795][ T7185] usb 1-1: config 12 interface 99 altsetting 14 endpoint 0xD has invalid maxpacket 552, setting to 64 [ 230.064179][ T26] audit: type=1800 audit(230.020:8): pid=13359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4173" name="file3" dev="loop1" ino=89 res=0 errno=0 [ 230.094981][ T7185] usb 1-1: config 12 interface 99 has no altsetting 0 [ 230.307306][ T7185] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=a4.d6 [ 230.337952][ T7185] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.358066][ T7185] usb 1-1: Product: syz [ 230.376827][ T7185] usb 1-1: Manufacturer: syz [ 230.381537][ T7185] usb 1-1: SerialNumber: syz [ 230.406821][ T23] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 230.546812][T13357] loop2: detected capacity change from 0 to 40427 [ 230.584841][T13357] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 230.608567][T13357] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 230.655803][T13357] F2FS-fs (loop2): invalid crc value [ 230.703680][T13357] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 230.768556][ T7185] usb 1-1: no audio or video endpoints found [ 230.805961][ T7185] usb 1-1: USB disconnect, device number 18 [ 230.815237][ T23] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c9.98 [ 230.836888][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.858811][ T23] usb 5-1: config 0 descriptor?? [ 230.899391][ T23] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 230.931739][ T23] usb 5-1: Detected FT-X [ 230.988717][T13357] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 230.994601][T13402] 8021q: VLANs not supported on lo [ 230.996231][T13357] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 231.129239][T13357] fscrypt (loop2, inode 3): Error -61 getting encryption context [ 231.311306][ T23] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 231.365154][ T23] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 231.409265][ T23] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 231.466781][ T23] usb 5-1: USB disconnect, device number 18 [ 231.520150][ T23] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 231.567176][ T23] ftdi_sio 5-1:0.0: device disconnected [ 231.906810][ T6378] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 231.930632][T13439] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4202'. [ 231.986990][T13439] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4202'. [ 232.327128][ T6378] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.379683][ T6378] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 232.601278][ T4198] vhci_hcd: vhci_device speed not set [ 232.607969][ T6378] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 232.628797][ T6378] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.656739][ T6378] usb 1-1: Product: syz [ 232.666973][ T6378] usb 1-1: Manufacturer: syz [ 232.684338][ T6378] usb 1-1: SerialNumber: syz [ 232.797089][T13482] netlink: 'syz.4.4222': attribute type 21 has an invalid length. [ 232.817218][T13482] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4222'. [ 233.001905][T13436] loop3: detected capacity change from 0 to 40427 [ 233.076958][T13436] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 233.100665][T13436] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 233.146455][T13436] F2FS-fs (loop3): invalid crc value [ 233.204831][T13436] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 233.236174][T13497] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4227'. [ 233.245802][ T6378] usb 1-1: cannot find UAC_HEADER [ 233.305400][ T6378] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 233.357099][ T6378] usb 1-1: USB disconnect, device number 19 [ 233.428653][ T8653] udevd[8653]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 233.488186][T13436] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 233.526387][T13436] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 233.552488][T13511] loop2: detected capacity change from 0 to 1024 [ 233.676133][T13511] hfsplus: request for non-existent node 16777217 in B*Tree [ 233.689320][T13518] netlink: 'syz.1.4232': attribute type 21 has an invalid length. [ 233.722788][T13436] fscrypt (loop3, inode 3): Error -61 getting encryption context [ 233.730927][T13518] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4232'. [ 233.757136][T13511] hfsplus: request for non-existent node 16777217 in B*Tree [ 234.195486][T13538] xt_CT: You must specify a L4 protocol and not use inversions on it [ 234.349619][T13548] loop0: detected capacity change from 0 to 256 [ 234.380512][T13546] netlink: 'syz.4.4249': attribute type 11 has an invalid length. [ 234.418407][T13546] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.4249'. [ 234.541633][T13548] FAT-fs (loop0): Directory bread(block 64) failed [ 234.554113][T13557] ALSA: mixer_oss: invalid OSS volume ';Êžg™ŻÔŠ8Ș\>PxŽi9ù hû~Ł' [ 234.590478][T13548] FAT-fs (loop0): Directory bread(block 65) failed [ 234.604233][T13557] ALSA: mixer_oss: invalid OSS volume '™ ÈȘé•U§°ć”ïBû”FRȘĐœEŰV—đ#d' [ 234.613098][T13557] ALSA: mixer_oss: invalid OSS volume 'eQCÈĄ*«±§q”pA˜ÚœűÄe ŠTÒú|Kˆ' [ 234.625554][T13548] FAT-fs (loop0): Directory bread(block 66) failed [ 234.632105][T13548] FAT-fs (loop0): Directory bread(block 67) failed [ 234.656003][T13557] ALSA: mixer_oss: invalid OSS volume ':ÀaűËz’ŽÄă]¶qł°eŁXŚfb]ʆ›BäÜ.' [ 234.675030][T13557] ALSA: mixer_oss: invalid OSS volume 'ŻȚj|‡ÓâÚŐq⩃˚[Òw3ù^.žŒîŚ’ű' [ 234.693513][T13548] FAT-fs (loop0): Directory bread(block 68) failed [ 234.708995][T13557] ALSA: mixer_oss: invalid OSS volume 'śuŃdFÿŸȚÙÙdèÚÿłsïj@JŒ¶Śuïg0ácd' [ 234.754151][T13557] ALSA: mixer_oss: invalid OSS volume 'ÓâŻÓśNë—W֓YZŁ”ëS%źąą‡†fŰèèŸV' [ 234.775795][T13548] FAT-fs (loop0): Directory bread(block 69) failed [ 234.795650][T13557] ALSA: mixer_oss: invalid OSS volume 'ò'ëlÈżD†ȘTBxĘN' [ 234.802991][T13548] FAT-fs (loop0): Directory bread(block 70) failed [ 234.836243][T13557] ALSA: mixer_oss: invalid OSS volume 'Șày' [ 234.842539][T13548] FAT-fs (loop0): Directory bread(block 71) failed [ 234.849595][T13548] FAT-fs (loop0): Directory bread(block 72) failed [ 234.873702][T13557] ALSA: mixer_oss: invalid OSS volume 'ű5y«’”}›9Ž—r~ŻM†š+šőĂÏ3óó' [ 234.917649][T13548] FAT-fs (loop0): Directory bread(block 73) failed [ 234.926043][T13557] ALSA: mixer_oss: invalid OSS volume '϶ŚÏ*kC9țšdË7띊2§;°"' [ 234.934381][T13557] ALSA: mixer_oss: invalid OSS volume '*n’dVĆé8”mĘE¶§€âÊ5Ś:êđ4' [ 235.006825][T13557] ALSA: mixer_oss: invalid OSS volume '„çÍÊPKŒóÚ”1}Âæ {N&I„œœĐa 8*ʇ' [ 235.015965][T13557] ALSA: mixer_oss: invalid OSS volume '€OCÔŰ"žÊ[ńƒ'mćțïŐ/AÏO^ìțG&ș-Û' [ 235.041999][T13557] ALSA: mixer_oss: invalid OSS volume 'Êű§' [ 235.059138][T13557] ALSA: mixer_oss: invalid OSS volume 'ƒżÀđ@HČĆĆVŹÉ-=f#oŽ»)ÉU.Nƒ' [ 235.624015][T13607] netlink: 'syz.3.4276': attribute type 8 has an invalid length. [ 235.787924][T13619] loop2: detected capacity change from 0 to 512 [ 236.150786][T13619] EXT4-fs (loop2): Test dummy encryption mode enabled [ 236.163154][T13639] block device autoloading is deprecated and will be removed. [ 236.180895][T13619] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 236.235160][T13645] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4295'. [ 236.250244][T13619] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e01c, mo2=0002] [ 236.274827][T13619] EXT4-fs (loop2): orphan cleanup on readonly fs [ 236.281211][T13619] EXT4-fs error (device loop2): ext4_orphan_get:1432: comm syz.2.4279: bad orphan inode 3 [ 236.299948][T13619] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,noblock_validity,discard,nolazytime,data=writeback,errors=continue. Quota mode: none. [ 236.449545][T13619] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.4279: dx entry: limit 0 != root limit 125 [ 236.514458][T13655] loop0: detected capacity change from 0 to 512 [ 236.526698][T13619] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.4279: Corrupt directory, running e2fsck is recommended [ 236.551499][T13659] netlink: 'syz.3.4301': attribute type 3 has an invalid length. [ 236.563650][T13658] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4302'. [ 236.582355][T13659] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4301'. [ 236.712448][T13655] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,init_itable,quota,,errors=continue. Quota mode: writeback. [ 236.826641][T13673] loop2: detected capacity change from 0 to 256 [ 236.989726][ T6378] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 237.032645][ T26] audit: type=1400 audit(524522.903:9): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=13679 comm="syz.0.4309" [ 237.145935][T13684] loop2: detected capacity change from 0 to 2048 [ 237.218438][T13684] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 237.283489][ T6378] usb 2-1: Using ep0 maxpacket: 32 [ 237.294129][T13684] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 237.396697][T13698] device netdevsim0 entered promiscuous mode [ 237.438866][ T6378] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 237.468994][ T6378] usb 2-1: config 0 has no interface number 0 [ 237.548274][T13705] netlink: 'syz.0.4321': attribute type 1 has an invalid length. [ 237.556458][T13705] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4321'. [ 237.606350][T13705] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4321'. [ 237.671895][ T6378] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 237.707250][ T6378] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.742489][ T6378] usb 2-1: Product: syz [ 237.772067][ T6378] usb 2-1: Manufacturer: syz [ 237.777968][ T6378] usb 2-1: SerialNumber: syz [ 237.814708][ T6378] usb 2-1: config 0 descriptor?? [ 237.877628][ T6378] smsc95xx v2.0.0 [ 238.112698][ T7194] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 238.134207][ T6378] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 238.165774][ T6378] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 238.192255][ T6378] usb 2-1: USB disconnect, device number 19 [ 238.410096][ T7194] usb 5-1: Using ep0 maxpacket: 16 [ 238.533389][T13738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4339'. [ 238.574325][ T7194] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.598759][ T7194] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 238.706573][T13749] ceph: No source [ 238.810086][ T7194] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 238.881730][ T7194] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.890306][ T7194] usb 5-1: Product: syz [ 238.917298][ T7194] usb 5-1: Manufacturer: syz [ 238.921956][ T7194] usb 5-1: SerialNumber: syz [ 239.321910][ T7194] usb 5-1: 0:2 : does not exist [ 239.364219][ T7194] usb 5-1: USB disconnect, device number 19 [ 239.551706][T13763] loop0: detected capacity change from 0 to 32768 [ 239.641304][ T8653] udevd[8653]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 239.990847][T13803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4371'. [ 240.169938][T13811] tmpfs: Bad value for 'mpol' [ 240.208792][T13817] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4376'. [ 240.272622][T13821] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 240.313541][T13821] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 240.540538][T13835] kAFS: unable to lookup cell ' [ 240.540538][T13835] $)-.ÌŚČfÍYčǝČaŚïĆ2sˆ [ 240.540538][T13835] ' [ 240.706606][ T6378] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 240.824538][T13850] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4393'. [ 240.848946][T13850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4393'. [ 240.984710][T13859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4399'. [ 241.092283][ T6378] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 241.100413][ T6378] usb 1-1: config 0 has no interface number 0 [ 241.139770][ T6378] usb 1-1: config 0 interface 41 has no altsetting 0 [ 241.349737][ T6378] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 241.369425][ T6378] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.434107][ T6378] usb 1-1: Product: syz [ 241.457810][ T6378] usb 1-1: Manufacturer: syz [ 241.462608][ T6378] usb 1-1: SerialNumber: syz [ 241.490115][ T6378] usb 1-1: config 0 descriptor?? [ 241.534473][T13880] loop2: detected capacity change from 0 to 1024 [ 241.713478][T13880] EXT4-fs (loop2): Ignoring removed bh option [ 241.728017][T13886] netlink: 'syz.1.4412': attribute type 2 has an invalid length. [ 241.764288][ T6378] CoreChips: probe of 1-1:0.41 failed with error -71 [ 241.791750][T13880] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,grpid,abort,debug_want_extra_isize=0x0000000000000008,lazytime,errors=remount-ro,stripe=0x0000000000000007,bh,auto_da_alloc,. Quota mode: none. [ 241.850721][T13862] loop4: detected capacity change from 0 to 32768 [ 241.851454][ T6378] usb 1-1: USB disconnect, device number 20 [ 241.876662][T13880] EXT4-fs error (device loop2): ext4_remount:6062: comm syz.2.4409: Abort forced by user [ 241.912028][T13880] EXT4-fs (loop2): Remounting filesystem read-only [ 241.928128][T13872] loop3: detected capacity change from 0 to 32768 [ 241.933553][T13880] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: none. [ 242.009199][T13862] jfs_strtoUCS: char2uni returned -22. [ 242.023278][T13893] loop1: detected capacity change from 0 to 256 [ 242.027374][T13872] [ 242.027374][T13872] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 242.027374][T13872] [ 242.049821][T13862] charset = cp936, char = 0xd4 [ 242.225513][ T1215] [ 242.225513][ T1215] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 242.225513][ T1215] [ 242.264480][T13895] loop4: detected capacity change from 0 to 256 [ 242.297056][ T1215] [ 242.297056][ T1215] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 242.297056][ T1215] [ 242.346297][ T4190] [ 242.346297][ T4190] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 242.346297][ T4190] [ 242.427080][ T277] [ 242.427080][ T277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 242.427080][ T277] [ 242.474805][ T4190] [ 242.474805][ T4190] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 242.474805][ T4190] [ 242.644060][T13907] SET target dimension over the limit! [ 243.065896][T13933] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4434'. [ 243.120025][ T7194] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 243.236986][ T4257] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 243.583211][ T7194] usb 4-1: unable to get BOS descriptor or descriptor too short [ 243.649587][ T4257] usb 2-1: config 0 has an invalid interface number: 168 but max is 0 [ 243.678449][ T4257] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.705457][ T7194] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.709414][ T4257] usb 2-1: config 0 has no interface number 0 [ 243.724790][ T7194] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 243.746162][ T4257] usb 2-1: config 0 interface 168 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 243.759300][T13970] xt_hashlimit: size too large, truncated to 1048576 [ 243.792606][ T4257] usb 2-1: config 0 interface 168 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 243.833655][ T4257] usb 2-1: config 0 interface 168 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 243.877842][ T4257] usb 2-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=48.98 [ 243.907773][ T4257] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.929128][ T4257] usb 2-1: config 0 descriptor?? [ 243.970320][ T7194] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 243.987306][ T4257] HFC-S_USB: probe of 2-1:0.168 failed with error -5 [ 243.990300][ T7194] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.055330][ T7194] usb 4-1: Product: syz [ 244.086870][ T7194] usb 4-1: Manufacturer: syz [ 244.116761][ T7194] usb 4-1: SerialNumber: syz [ 244.202279][ T7194] usb 4-1: selecting invalid altsetting 1 [ 244.221070][ T7194] usb 4-1: unit 6 not found! [ 244.251925][ T6378] usb 2-1: USB disconnect, device number 20 [ 244.359777][T13995] netlink: zone id is out of range [ 244.422703][ T4257] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 244.650968][ T7194] usb 4-1: cannot get ctl value: req = 0x82, wValue = 0x100, wIndex = 0x200, type = 3 [ 244.692432][ T7194] usb 4-1: 2:0: cannot get min/max values for control 1 (id 2) [ 244.738142][ T7194] usb 4-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x200, type = 3 [ 244.798986][ T4257] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.813845][ T7194] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 244.855501][ T7194] usb 4-1: USB disconnect, device number 9 [ 244.887606][T14013] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 244.982153][ T4257] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 245.011329][ T4257] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.041868][ T4257] usb 1-1: Product: syz [ 245.059254][ T4257] usb 1-1: Manufacturer: syz [ 245.083391][ T4257] usb 1-1: SerialNumber: syz [ 245.121784][ T8653] udevd[8653]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 245.336256][T14029] loop4: detected capacity change from 0 to 4096 [ 245.377675][ T4257] snd-usb-6fire 1-1:1.0: invalid firmware version in device: be b3 00 00. please reconnect to power. if this failure still happens, check your firmware installation. [ 245.421009][ T4257] snd-usb-6fire: probe of 1-1:1.0 failed with error -22 [ 245.431322][T14029] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 245.546241][T14044] netlink: zone id is out of range [ 245.621809][ T4257] usb 1-1: USB disconnect, device number 21 [ 245.749386][T14051] loop3: detected capacity change from 0 to 64 [ 245.828261][T14055] netlink: 184 bytes leftover after parsing attributes in process `syz.4.4493'. [ 245.901393][T14051] hfs: inconsistency in B*Tree (1,0,2,2,3) [ 245.987334][T14059] netlink: set zone limit has 8 unknown bytes [ 246.178520][T14067] overlayfs: missing 'lowerdir' [ 246.212873][T14070] loop0: detected capacity change from 0 to 256 [ 246.499815][T14086] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4508'. [ 246.733925][T14041] loop2: detected capacity change from 0 to 40427 [ 246.907533][T14041] F2FS-fs (loop2): Found nat_bits in checkpoint [ 247.186548][T14041] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 247.188289][T14127] netlink: 'syz.1.4527': attribute type 1 has an invalid length. [ 247.253432][T14127] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4527'. [ 247.506575][ T4193] attempt to access beyond end of device [ 247.506575][ T4193] loop2: rw=2049, want=45104, limit=40427 [ 247.763029][T14109] loop0: detected capacity change from 0 to 32768 [ 247.836657][T14144] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.959255][T14148] loop1: detected capacity change from 0 to 8 [ 248.048706][T14148] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 248.103298][T14148] cramfs: empty filesystem [ 248.106222][ T8653] udevd[8653]: incorrect cramfs checksum on /dev/loop1 [ 248.138673][T14154] 0x000000000000-0x000000020000 : "" [ 248.193964][T14154] ftl_cs: FTL header not found. [ 248.478837][T14166] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.849415][T14189] loop4: detected capacity change from 0 to 8 [ 248.884506][T14189] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 248.911290][T14195] loop2: detected capacity change from 0 to 256 [ 248.962241][ T8653] udevd[8653]: incorrect cramfs checksum on /dev/loop4 [ 248.969418][T14195] exfat: Deprecated parameter 'utf8' [ 248.975351][T14195] exfat: Deprecated parameter 'utf8' [ 249.001943][T14195] exfat: Deprecated parameter 'utf8' [ 249.007306][T14195] exfat: Deprecated parameter 'namecase' [ 249.022487][T14189] cramfs: Error -3 while decompressing! [ 249.059330][T14195] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 249.070318][T14189] cramfs: ffffffff96422068(18)->ffff8880566e8000(4096) [ 249.120704][T14189] cramfs: Error -3 while decompressing! [ 249.126295][T14189] cramfs: ffffffff96422068(18)->ffff8880566e8000(4096) [ 249.158206][T14195] overlayfs: filesystem on './file0' not supported [ 249.175343][ T26] audit: type=1800 audit(524534.826:10): pid=14189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4557" name="file1" dev="loop4" ino=324 res=0 errno=0 [ 249.373894][T14223] xt_bpf: check failed: parse error [ 249.459962][ T4226] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 249.640521][T14237] loop1: detected capacity change from 0 to 1024 [ 249.708869][T14237] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 249.730453][ T4226] usb 1-1: Using ep0 maxpacket: 8 [ 249.834112][T14245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.886629][ T4226] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.915339][ T4226] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 249.915419][T14248] SET target dimension over the limit! [ 249.942003][ T4226] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 249.991364][ T4226] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 250.035541][ T4226] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.270087][ T4226] usb 1-1: config 0 descriptor?? [ 250.609695][ T4226] usb 1-1: USB disconnect, device number 22 [ 251.048118][ T1215] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.085122][T14278] loop4: detected capacity change from 0 to 256 [ 251.229637][ T1215] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.488538][ T1215] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.599065][ T1215] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.692754][T14294] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4610'. [ 251.769140][T14273] loop2: detected capacity change from 0 to 32768 [ 251.855517][T14301] netlink: 'syz.3.4612': attribute type 5 has an invalid length. [ 252.017744][T14273] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 252.060182][T14273] BTRFS info (device loop2): using free space tree [ 252.070323][T14313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4619'. [ 252.077566][T14273] BTRFS info (device loop2): has skinny extents [ 252.143953][T14323] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4622'. [ 252.190149][T14331] loop4: detected capacity change from 0 to 64 [ 252.205124][T14323] netlink: 'syz.0.4622': attribute type 3 has an invalid length. [ 252.301872][T14290] chnl_net:caif_netlink_parms(): no params data found [ 252.446287][T14347] netlink: 'syz.3.4628': attribute type 12 has an invalid length. [ 252.454303][T14273] BTRFS info (device loop2): enabling ssd optimizations [ 252.633847][T14273] BTRFS info (device loop2): resizing devid 73709551615 [ 252.690424][T14273] BTRFS info (device loop2): resizer unable to find device 73709551615 [ 252.976341][T14290] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.029402][T14290] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.056644][T14374] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.4637'. [ 253.061548][T14290] device bridge_slave_0 entered promiscuous mode [ 253.121734][T14374] openvswitch: netlink: ct_state flags 00030000 unsupported [ 253.124248][T14290] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.165328][ T1110] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 253.179486][T14290] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.226662][T14290] device bridge_slave_1 entered promiscuous mode [ 253.458896][T14290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.523607][T14290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.599572][ T1110] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 253.634750][ T1110] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 253.647917][T14290] team0: Port device team_slave_0 added [ 253.664626][ T1110] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.755453][T14290] team0: Port device team_slave_1 added [ 253.762683][ T7193] Bluetooth: hci0: command 0x0409 tx timeout [ 253.800113][ T1110] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 253.854894][T14404] delete_channel: no stack [ 253.864878][T14290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.907685][T14290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.027573][T14290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.081701][T14419] netlink: 'syz.2.4653': attribute type 1 has an invalid length. [ 254.104263][T14419] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4653'. [ 254.134605][T14290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.141841][T14290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.195590][T14419] netlink: 'syz.2.4653': attribute type 1 has an invalid length. [ 254.241595][T14290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.474082][T14436] netlink: 'syz.2.4659': attribute type 7 has an invalid length. [ 254.493471][T14290] device hsr_slave_0 entered promiscuous mode [ 254.525981][T14290] device hsr_slave_1 entered promiscuous mode [ 254.551608][T14290] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 254.581209][T14290] Cannot create hsr debugfs directory [ 254.935229][ T1110] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 254.967649][T14290] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 254.983143][T14459] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4670'. [ 255.016232][T14290] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 255.082954][T14290] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 255.108149][T14290] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 255.153746][ T1110] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 255.162025][ T1110] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 255.214779][ T1110] usb 4-1: USB disconnect, device number 10 [ 255.263165][T14471] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4674'. [ 255.347285][T14471] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4674'. [ 255.450240][ T1215] device hsr_slave_0 left promiscuous mode [ 255.538893][ T1215] device hsr_slave_1 left promiscuous mode [ 255.585226][ T1215] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.642906][ T1215] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.659812][ T1215] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.685324][ T1215] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.705147][ T1215] device bridge_slave_1 left promiscuous mode [ 255.729137][ T1215] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.803865][ T1215] device bridge_slave_0 left promiscuous mode [ 255.822536][ T1215] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.858985][ T7185] Bluetooth: hci0: command 0x041b tx timeout [ 255.897400][ T1215] device veth1_macvtap left promiscuous mode [ 255.927570][ T1215] device veth0_macvtap left promiscuous mode [ 256.022498][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.256977][ T1215] bond4 (unregistering): Released all slaves [ 256.292125][ T1215] bond3 (unregistering): Released all slaves [ 256.360523][ T1215] bond2 (unregistering): Released all slaves [ 256.378164][ T1215] bond1 (unregistering): Released all slaves [ 256.693214][ T1215] team0 (unregistering): Port device team_slave_1 removed [ 256.719678][ T1215] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.756523][ T1215] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.867366][ T1215] bond0 (unregistering): Released all slaves [ 256.959308][T14485] netlink: 'syz.2.4680': attribute type 21 has an invalid length. [ 256.967200][T14485] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4680'. [ 257.108060][T14290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.183718][T14513] loop3: detected capacity change from 0 to 256 [ 257.236687][T14290] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.252477][ T6538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 257.301285][ T6538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 257.313675][T14513] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011e7e, chksum : 0x04bede55, utbl_chksum : 0xe619d30d) [ 257.372858][T14518] netlink: 'syz.0.4692': attribute type 21 has an invalid length. [ 257.387763][T14518] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4692'. [ 257.406630][T14519] loop2: detected capacity change from 0 to 512 [ 257.469031][ T6538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 257.498594][ T6538] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 257.511980][ T6538] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.512046][ T6538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.517913][ T6538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 257.518032][T14519] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.4691: bg 0: block 288: padding at end of block bitmap is not set [ 257.519414][T14519] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 257.520167][ T6538] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 257.522149][T14519] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.4691: attempt to clear invalid blocks 1024 len 1 [ 257.524112][T14519] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.4691: invalid indirect mapped block 1819239214 (level 0) [ 257.524672][T14519] EXT4-fs (loop2): 1 truncate cleaned up [ 257.524691][T14519] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 257.530200][ T6538] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.530249][ T6538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.530723][ T6538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 257.566870][ T6538] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 257.567580][ T6538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 257.583050][ T6538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 257.588289][ T6538] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 257.620899][ T6538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 257.621763][ T6538] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 257.642700][ T6538] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 257.643465][ T6538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 257.644026][ T6538] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 257.644597][ T6538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 257.645125][ T6538] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 257.690202][T14290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 257.919591][T14540] overlayfs: unrecognized mount option "\" or missing value [ 257.994626][ T4227] Bluetooth: hci0: command 0x040f tx timeout [ 258.179866][T14551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4700'. [ 258.190625][T14551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4700'. [ 258.191015][T14551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4700'. [ 258.191032][T14551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4700'. [ 258.196939][T14551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4700'. [ 258.197334][T14551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4700'. [ 258.197639][T14551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4700'. [ 258.205632][T14551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4700'. [ 258.214955][T14551] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 258.534488][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 258.534625][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 258.576814][T14290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.336377][T14536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 259.337011][T14536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 259.422774][T14290] device veth0_vlan entered promiscuous mode [ 259.445586][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 259.446693][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 259.466158][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 259.466880][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 259.468765][T14290] device veth1_vlan entered promiscuous mode [ 259.568272][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 260.049642][ T7193] Bluetooth: hci0: command 0x0419 tx timeout [ 260.119287][T14626] libceph: Failed to parse secret: -22 [ 260.307422][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 260.341527][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 260.405742][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 260.448363][T14290] device veth0_macvtap entered promiscuous mode [ 260.497337][T14290] device veth1_macvtap entered promiscuous mode [ 260.612277][T14648] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 260.679103][T14290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.742027][T14290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.793489][T14290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.863470][T14290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.903687][T14290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.944100][T14290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.988575][T14290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.054603][T14290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.096164][T14290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.109310][T14661] IPv6: Can't replace route, no match found [ 261.132929][T14667] device sit0 left promiscuous mode [ 261.182765][T14667] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.229222][T14667] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.300131][T14667] device xfrm0 left promiscuous mode [ 261.358798][T14667] device ip6gretap2 left promiscuous mode [ 261.385743][T14667] device geneve2 left promiscuous mode [ 261.407987][T14667] device bridge4 left promiscuous mode [ 261.431179][T14667] device bond2 left promiscuous mode [ 261.448580][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 261.472373][ T7179] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 261.477875][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 261.522280][T14290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.563320][T14290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.595362][T14290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.638058][T14290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.658032][T14290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.718472][T14290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.770155][T14290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.824271][T14290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.855128][T14290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.899151][T14290] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.940036][ T7179] usb 5-1: unable to get BOS descriptor or descriptor too short [ 261.955026][T14290] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.990112][T14290] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.034502][T14290] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.050762][ T7179] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 262.082255][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 262.088307][ T7179] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 262.112804][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 262.166011][ T26] audit: type=1326 audit(524547.707:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14705 comm="syz.0.4764" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fce658d50d9 code=0x0 [ 262.362167][ T7179] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 262.391672][ T7179] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.433673][ T7179] usb 5-1: Product: syz [ 262.437962][ T7179] usb 5-1: Manufacturer: syz [ 262.448993][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.457240][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.471008][ T7179] usb 5-1: SerialNumber: syz [ 262.519887][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 262.558000][ T7179] usb 5-1: selecting invalid altsetting 1 [ 262.573119][ T23] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 262.582265][ T7179] usb 5-1: unit 6 not found! [ 262.612654][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.643386][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.664959][ T7179] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 262.678399][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 262.779239][ T8653] udevd[8653]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 262.884660][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 262.915237][ T7193] usb 5-1: USB disconnect, device number 20 [ 263.016265][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.196375][ T4198] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 263.206737][ T23] usb 3-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice= 5.f6 [ 263.234767][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.258569][ T23] usb 3-1: Product: syz [ 263.262765][ T23] usb 3-1: Manufacturer: syz [ 263.281031][ T23] usb 3-1: SerialNumber: syz [ 263.294898][ T23] usb 3-1: config 0 descriptor?? [ 263.340224][ T23] gspca_main: t613-2.14.0 probing 17a1:0128 [ 263.568251][ T4198] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 263.580508][ T23] gspca_t613: unknown sensor 0000 [ 263.586027][ T23] t613: probe of 3-1:0.0 failed with error -22 [ 263.617108][ T4198] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 263.638939][ T23] usb 3-1: USB disconnect, device number 25 [ 263.682468][ T4198] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 263.720297][T14783] __nla_validate_parse: 83 callbacks suppressed [ 263.720315][T14783] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.4791'. [ 263.769369][T14783] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.778772][T14785] comedi comedi4: bad chanlist[0]=0x04004003 chan=16387 range length=2 [ 263.899894][ T4198] usb 1-1: New USB device found, idVendor=0582, idProduct=0145, bcdDevice= 0.40 [ 263.939284][ T4198] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.952615][ T4198] usb 1-1: Product: syz [ 263.957110][ T4198] usb 1-1: Manufacturer: syz [ 263.975312][ T4198] usb 1-1: SerialNumber: syz [ 264.000621][T14736] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 264.048793][T14806] netlink: 'syz.4.4801': attribute type 21 has an invalid length. [ 264.099185][T14806] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4801'. [ 264.488132][T14835] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4810'. [ 264.544369][T14837] loop2: detected capacity change from 0 to 64 [ 264.553481][ T4198] usb 1-1: MIDIStreaming interface descriptor not found [ 264.599689][ T4198] usb 1-1: USB disconnect, device number 23 [ 264.623437][T14837] attempt to access beyond end of device [ 264.623437][T14837] loop2: rw=0, want=234881064, limit=64 [ 264.694424][T14837] Buffer I/O error on dev loop2, logical block 117440531, async page read [ 264.723332][T14837] attempt to access beyond end of device [ 264.723332][T14837] loop2: rw=0, want=8548515842, limit=64 [ 264.754546][T14850] netlink: 'syz.5.4816': attribute type 15 has an invalid length. [ 264.771804][T14837] Buffer I/O error on dev loop2, logical block 4274257920, async page read [ 264.793237][T14837] attempt to access beyond end of device [ 264.793237][T14837] loop2: rw=0, want=301989890, limit=64 [ 264.829343][T14837] Buffer I/O error on dev loop2, logical block 150994944, async page read [ 264.872523][T14837] attempt to access beyond end of device [ 264.872523][T14837] loop2: rw=0, want=234881064, limit=64 [ 264.888313][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 264.934818][ T7193] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 264.944036][T14862] loop5: detected capacity change from 0 to 736 [ 264.945024][T14837] Buffer I/O error on dev loop2, logical block 117440531, async page read [ 264.986051][ T26] audit: type=1800 audit(524550.513:12): pid=14837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4812" name="file2" dev="loop2" ino=6 res=0 errno=0 [ 265.241807][T14878] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=io+mem:owns=io+mem [ 265.355517][ T7193] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 265.384958][ T7193] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 265.418744][T14888] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4827'. [ 265.436926][ T7193] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 265.469342][ T7193] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 265.608210][ T7193] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 265.632969][ T7193] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 265.662107][ T7193] usb 4-1: SerialNumber: syz [ 265.688244][ T7185] usb 1-1: new low-speed USB device number 24 using dummy_hcd [ 265.759410][ T7193] cdc_acm 4-1:1.0: invalid descriptor buffer length [ 265.767099][ T7193] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 265.793263][ T7193] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 265.825683][ T7193] cdc_acm: probe of 4-1:1.0 failed with error -22 [ 265.990666][ T7193] usb 4-1: USB disconnect, device number 11 [ 266.141122][ T7185] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.165926][ T7185] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 266.193319][ T7185] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 266.244777][ T7185] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 266.266138][T14936] smb3: Bad value for 'uid' [ 266.274697][ T7185] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.302528][ T7185] usb 1-1: config 0 descriptor?? [ 266.340868][T14880] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 266.471950][T14944] loop2: detected capacity change from 0 to 2048 [ 266.577088][T14947] loop4: detected capacity change from 0 to 4096 [ 266.581049][ T7179] usb 1-1: USB disconnect, device number 24 [ 266.650738][T14952] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 266.674079][T14944] attempt to access beyond end of device [ 266.674079][T14944] loop2: rw=0, want=18441677524128759846, limit=2048 [ 266.798139][T14947] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 266.828202][T14957] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 266.835528][T14957] IPv6: NLM_F_CREATE should be set when creating new route [ 266.842970][T14957] IPv6: NLM_F_CREATE should be set when creating new route [ 267.034528][T14968] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4854'. [ 267.191960][T14974] program syz.5.4858 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 267.224370][ T4198] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 267.485374][ T6377] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 267.515785][T14986] loop0: detected capacity change from 0 to 4096 [ 267.589271][ T4198] usb 3-1: config index 0 descriptor too short (expected 65152, got 36) [ 267.601053][T14986] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 267.614269][ T4198] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 267.676690][T14986] ntfs3: loop0: mft corrupted [ 267.696144][T14986] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 267.740469][T14986] ntfs3: loop0: Failed to load $BadClus. [ 267.806703][ T4198] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 267.822985][ T4198] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.847257][ T4198] usb 3-1: Product: syz [ 267.852755][ T4198] usb 3-1: Manufacturer: syz [ 267.872402][ T4198] usb 3-1: SerialNumber: syz [ 267.886930][ T6377] usb 5-1: unable to get BOS descriptor or descriptor too short [ 267.937872][ T4198] rtl8150 3-1:1.0: couldn't find required endpoints [ 267.944744][ T4198] rtl8150: probe of 3-1:1.0 failed with error -5 [ 267.987333][ T6377] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 268.023875][ T6377] usb 5-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 268.087126][ T6377] usb 5-1: config 1 interface 0 has no altsetting 0 [ 268.099221][T15021] (unnamed net_device) (uninitialized): ARP validating cannot be used with MII monitoring [ 268.114615][ T6377] usb 5-1: config 1 interface 0 has no altsetting 1 [ 268.167547][ T6378] usb 3-1: USB disconnect, device number 26 [ 268.195914][T15026] netlink: 'syz.5.4874': attribute type 3 has an invalid length. [ 268.210878][T15026] netlink: 'syz.5.4874': attribute type 1 has an invalid length. [ 268.298541][ T6377] usb 5-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 268.322033][ T6377] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.352470][ T6377] usb 5-1: Product: syz [ 268.356671][ T6377] usb 5-1: Manufacturer: syz [ 268.386124][ T6377] usb 5-1: SerialNumber: syz [ 268.618999][T15057] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4885'. [ 268.691134][ T6377] smsusb:smsusb_probe: board id=8, interface number 0 [ 268.697957][ T6377] usb 5-1: selecting invalid altsetting 0 [ 268.740655][ T6377] smsusb:smsusb_probe: usb_set_interface failed, rc -22 [ 268.750083][T15068] netlink: 'syz.0.4890': attribute type 2 has an invalid length. [ 268.764544][T15067] Unknown options in mask b7f2 [ 268.766163][ T6377] smsusb: probe of 5-1:1.0 failed with error -22 [ 268.819676][ T6377] usb 5-1: USB disconnect, device number 21 [ 269.026750][T15084] loop0: detected capacity change from 0 to 64 [ 269.167312][T15092] netlink: 'syz.5.4900': attribute type 2 has an invalid length. [ 269.218392][T15092] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.4900'. [ 269.341475][T15103] loop3: detected capacity change from 0 to 8 [ 269.355187][T15109] xt_l2tp: invalid flags combination: 0 [ 269.475053][T15103] SQUASHFS error: Corrupted symlink [ 269.797937][T15149] netlink: 'syz.2.4924': attribute type 21 has an invalid length. [ 269.883866][ T7185] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 270.151622][T15176] IPv6: NLM_F_REPLACE set, but no existing node found! [ 270.184918][ T6378] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 270.185279][ T7185] usb 4-1: Using ep0 maxpacket: 8 [ 270.526165][ T7185] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 270.550588][ T6378] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 270.558616][ T7185] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 270.590273][ T7185] usb 4-1: Product: syz [ 270.592054][ T6378] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.594463][ T7185] usb 4-1: Manufacturer: syz [ 270.668600][ T7185] usb 4-1: SerialNumber: syz [ 270.675787][ T6378] usb 6-1: config 0 has no interface number 0 [ 270.729740][ T7185] usb 4-1: config 0 descriptor?? [ 270.798678][ T7185] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 270.847050][ T6378] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 270.878632][ T6378] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.907014][ T6378] usb 6-1: Product: syz [ 270.911303][ T6378] usb 6-1: Manufacturer: syz [ 270.915915][ T6378] usb 6-1: SerialNumber: syz [ 270.933598][ T6378] usb 6-1: config 0 descriptor?? [ 270.977569][ T7193] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 271.022110][ T6378] hub 6-1:0.31: bad descriptor, ignoring hub [ 271.032413][ T6378] hub: probe of 6-1:0.31 failed with error -5 [ 271.046642][ T6378] usb 6-1: Found UVC 0.04 device syz (046d:08c3) [ 271.054907][ T6378] uvcvideo 6-1:0.31: Entity type for entity Output 6 was not initialized! [ 271.071745][ T6378] usb 6-1: Failed to create links for entity 6 [ 271.082306][ T6378] usb 6-1: Failed to register entities (-22). [ 271.125988][T15233] openvswitch: netlink: Message has 4 unknown bytes. [ 271.232108][ T7193] usb 3-1: Using ep0 maxpacket: 8 [ 271.248145][ T7185] gspca_zc3xx: reg_r err -71 [ 271.262926][ T7185] gspca_zc3xx: probe of 4-1:0.0 failed with error -71 [ 271.290909][ T7185] usb 4-1: USB disconnect, device number 12 [ 271.378739][ T6378] usb 6-1: USB disconnect, device number 2 [ 271.378909][ T7193] usb 3-1: config 0 has an invalid interface number: 4 but max is 0 [ 271.416331][ T7193] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.442392][ T7193] usb 3-1: config 0 has no interface number 0 [ 271.450361][ T7193] usb 3-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 271.468640][ T7193] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.533223][ T7193] usb 3-1: config 0 descriptor?? [ 271.580345][ T7193] hub 3-1:0.4: bad descriptor, ignoring hub [ 271.586445][ T7193] hub: probe of 3-1:0.4 failed with error -5 [ 271.616892][ T7193] sierra 3-1:0.4: Sierra USB modem converter detected [ 271.697762][T15267] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4967'. [ 271.809843][ T7193] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 271.896821][ T7193] usb 3-1: USB disconnect, device number 27 [ 271.947655][ T7193] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 271.983977][ T7193] sierra 3-1:0.4: device disconnected [ 272.085528][ T6378] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 272.400149][T15263] loop0: detected capacity change from 0 to 40427 [ 272.501963][ T6378] usb 5-1: unable to get BOS descriptor or descriptor too short [ 272.530476][T15263] F2FS-fs (loop0): Found nat_bits in checkpoint [ 272.593364][ T6378] usb 5-1: config 0 has an invalid interface number: 86 but max is 0 [ 272.601507][ T6378] usb 5-1: config 0 has no interface number 0 [ 272.631239][ T6378] usb 5-1: config 0 interface 86 altsetting 4 bulk endpoint 0xE has invalid maxpacket 8 [ 272.666069][ T6378] usb 5-1: config 0 interface 86 altsetting 4 bulk endpoint 0xC has invalid maxpacket 32 [ 272.686367][T15263] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 272.730716][ T6378] usb 5-1: config 0 interface 86 has no altsetting 0 [ 272.764398][T15263] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 272.923091][ T6378] usb 5-1: New USB device found, idVendor=0586, idProduct=1000, bcdDevice=aa.5e [ 272.942883][ T6378] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.950920][ T6378] usb 5-1: Product: syz [ 272.993989][ T6378] usb 5-1: Manufacturer: syz [ 272.999424][ T6378] usb 5-1: SerialNumber: syz [ 273.034050][ T6378] usb 5-1: config 0 descriptor?? [ 273.053673][T15270] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 273.079800][T15270] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 273.139213][T15347] loop2: detected capacity change from 0 to 256 [ 273.198085][T15352] netlink: 'syz.3.5000': attribute type 5 has an invalid length. [ 273.275864][T15347] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x190b464b, utbl_chksum : 0xe619d30d) [ 273.363032][T15347] exFAT-fs (loop2): error, broken FAT chain. [ 273.374989][ T6378] omninet 5-1:0.86: ZyXEL - omni.net usb converter detected [ 273.391460][T15347] exFAT-fs (loop2): Filesystem has been set read-only [ 273.404670][ T6378] usb 5-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 273.443651][ T6378] usb 5-1: USB disconnect, device number 22 [ 273.452894][T15347] exFAT-fs (loop2): error, failed to bmap (inode : ffff8880739114e0 iblock : 0, err : -5) [ 273.478821][ T6378] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 273.544695][ T6378] omninet 5-1:0.86: device disconnected [ 273.671247][T15376] overlayfs: missing 'lowerdir' [ 274.049541][ T26] audit: type=1107 audit(524559.542:13): pid=15396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 274.180723][T15409] Cannot find del_set index 286 as target [ 274.268507][ C0] vkms_vblank_simulate: vblank timer overrun [ 274.446755][ T7193] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 274.601495][T15378] loop5: detected capacity change from 0 to 32768 [ 274.714300][T15378] [ 274.714300][T15378] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 274.714300][T15378] [ 274.826418][ T6538] [ 274.826418][ T6538] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 274.826418][ T6538] [ 274.868178][ T6538] [ 274.868178][ T6538] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 274.868178][ T6538] [ 274.879586][ T7193] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.898869][ T7193] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 274.928328][T14290] [ 274.928328][T14290] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 274.928328][T14290] [ 274.932740][ T7193] usb 3-1: config 1 has no interface number 0 [ 274.949590][ T277] [ 274.949590][ T277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 274.949590][ T277] [ 274.975132][T14290] [ 274.975132][T14290] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 274.975132][T14290] [ 275.065935][T15448] binder: 15447:15448 ioctl c018620b 0 returned -14 [ 275.073394][T15450] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.5043'. [ 275.178651][ T7193] usb 3-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40 [ 275.203210][ T7193] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.242148][ T7193] usb 3-1: Product: syz [ 275.246344][ T7193] usb 3-1: Manufacturer: syz [ 275.247752][T15458] loop0: detected capacity change from 0 to 512 [ 275.276510][ T7193] usb 3-1: SerialNumber: syz [ 275.352179][T15458] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 275.380886][T15458] EXT4-fs (loop0): invalid journal inode [ 275.396929][T15458] EXT4-fs (loop0): can't get journal size [ 275.458232][T15458] EXT4-fs (loop0): 1 truncate cleaned up [ 275.475960][T15458] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,sysvgroups,sysvgroups,lazytime,,errors=continue. Quota mode: none. [ 275.506905][T15432] loop3: detected capacity change from 0 to 40427 [ 275.548822][T15432] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 275.567337][T15458] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #2: block 13: comm syz.0.5047: bad entry in directory: directory entry overrun - offset=76, inode=16, rec_len=1040, size=1024 fake=0 [ 275.730055][ T7193] usb 3-1: 1:0 : does not exist [ 275.737364][ T7193] usb 3-1: 1:2 : does not exist [ 275.757659][ T7193] usb 3-1: 1:3 : does not exist [ 275.767827][ T7193] usb 3-1: BAAD HEADPHONE p_chmask mismatch [ 275.877323][ T7193] snd-usb-audio: probe of 3-1:1.1 failed with error -22 [ 275.923030][ T7193] usb 3-1: USB disconnect, device number 28 [ 275.928240][ T8653] udevd[8653]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 276.136503][T15455] loop4: detected capacity change from 0 to 32768 [ 276.201045][T15455] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.5046 (15455) [ 276.280478][T15455] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 276.339502][T15455] BTRFS info (device loop4): using free space tree [ 276.391523][T15455] BTRFS info (device loop4): has skinny extents [ 276.720859][T15532] openvswitch: netlink: IP tunnel dst address not specified [ 276.792133][T15455] BTRFS info (device loop4): enabling ssd optimizations [ 277.423931][T15570] openvswitch: netlink: Missing valid actions attribute. [ 277.448998][T15570] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.622169][T15581] loop3: detected capacity change from 0 to 16 [ 277.757376][T15581] erofs: (device loop3): mounted with root inode @ nid 36. [ 278.154791][ T7193] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 278.260515][T15619] IPv6: sit2: Disabled Multicast RS [ 278.318487][ T4228] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 278.471969][T15632] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5118'. [ 278.545946][ T7193] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 278.576733][ T4228] usb 5-1: Using ep0 maxpacket: 32 [ 278.585602][ T7193] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 278.594881][T15636] netlink: 'syz.0.5120': attribute type 13 has an invalid length. [ 278.685998][ T7193] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 278.696168][ T4228] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 278.701890][T15640] netlink: 'syz.2.5122': attribute type 1 has an invalid length. [ 278.713066][ T7193] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 278.719799][ T4228] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.736355][ T7193] usb 6-1: SerialNumber: syz [ 278.775376][ T4228] usb 5-1: config 0 descriptor?? [ 278.817578][ T7193] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 278.824841][ T7193] usb-storage 6-1:1.0: USB Mass Storage device detected [ 278.842914][ T4228] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 278.880888][ T7193] usb-storage 6-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 278.938478][ T7193] scsi host1: usb-storage 6-1:1.0 [ 279.046681][ T4228] gspca_nw80x: reg_w err -71 [ 279.051399][ T4228] nw80x: probe of 5-1:0.0 failed with error -71 [ 279.085586][ T4228] usb 5-1: USB disconnect, device number 23 [ 279.291508][T15678] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5137'. [ 279.664875][T15699] dlm: non-version read from control device 36 [ 279.922955][T15715] netlink: 8752 bytes leftover after parsing attributes in process `syz.3.5153'. [ 280.223514][ T7193] usb 6-1: USB disconnect, device number 3 [ 280.436193][T15752] loop3: detected capacity change from 0 to 256 [ 280.479574][T15752] exfat: Deprecated parameter 'namecase' [ 280.538679][T15752] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 280.624274][T15767] xt_TPROXY: Can be used only with -p tcp or -p udp [ 280.898775][T15786] netlink: 'syz.2.5188': attribute type 2 has an invalid length. [ 281.056599][ T1372] block nbd2: Attempted send on invalid socket [ 281.062968][ T1372] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 281.164803][T15807] loop3: detected capacity change from 0 to 4096 [ 281.207198][T15811] loop0: detected capacity change from 0 to 1764 [ 281.247399][T15807] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 281.300455][T15807] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 281.317603][T15818] device ip6tnl1 entered promiscuous mode [ 281.344756][T15807] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 281.396666][T15807] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 281.417298][T15826] IPv6: Can't replace route, no match found [ 281.431512][T15807] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 281.459735][T15807] ntfs: volume version 3.1. [ 281.488304][T15807] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 281.539360][T15807] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 281.599296][T15807] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 281.642612][T15807] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 281.668222][T15807] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 282.114767][T15874] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5231'. [ 282.151224][T15877] xt_bpf: check failed: parse error [ 282.166843][T15874] netlink: 252 bytes leftover after parsing attributes in process `syz.5.5231'. [ 282.206434][T15874] netlink: 'syz.5.5231': attribute type 1 has an invalid length. [ 282.245594][T15874] netlink: 80 bytes leftover after parsing attributes in process `syz.5.5231'. [ 282.381202][T15895] loop0: detected capacity change from 0 to 256 [ 282.450495][T15888] loop2: detected capacity change from 0 to 8192 [ 282.491081][T15895] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0xda219aab, utbl_chksum : 0xe619d30d) [ 282.534644][T15888] loop2: p1 < > p2 p4 < p5 > [ 282.541016][T15895] exFAT-fs (loop0): error, invalid access to FAT free cluster (entry 0x00000008) [ 282.563286][T15888] loop2: partition table partially beyond EOD, truncated [ 282.592291][T15895] exFAT-fs (loop0): Filesystem has been set read-only [ 282.607945][T15888] loop2: p1 start 134217728 is beyond EOD, truncated [ 282.632927][T15888] loop2: p2 size 591360 extends beyond EOD, truncated [ 282.681726][T15888] loop2: p5 size 591360 extends beyond EOD, truncated [ 282.791819][T15919] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5254'. [ 282.822824][T15919] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5254'. [ 283.129290][T15933] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5258'. [ 283.240849][ T5453] udevd[5453]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 283.261261][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 283.282256][ T4348] udevd[4348]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 283.472141][T15948] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5267'. [ 283.507550][T15948] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5267'. [ 283.840586][T15976] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5280'. [ 284.086337][T16000] netlink: 'syz.2.5289': attribute type 1 has an invalid length. [ 284.198407][T16009] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5294'. [ 284.545145][ T4257] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 284.623980][T16033] loop2: detected capacity change from 0 to 4096 [ 284.722976][T16033] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 284.915769][ T4257] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.930231][T16058] loop0: detected capacity change from 0 to 256 [ 284.955532][ T4257] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 285.028018][T16061] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 285.088096][T16070] netlink: 'syz.4.5318': attribute type 3 has an invalid length. [ 285.110715][T16072] lo speed is unknown, defaulting to 1000 [ 285.166239][ T4257] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 285.188000][ T4257] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.203962][T16072] lo speed is unknown, defaulting to 1000 [ 285.241192][ T4257] usb 4-1: Product: syz [ 285.260593][T16072] lo speed is unknown, defaulting to 1000 [ 285.269678][ T4257] usb 4-1: Manufacturer: syz [ 285.274304][ T4257] usb 4-1: SerialNumber: syz [ 285.355351][ T4257] cdc_ncm 4-1:1.0: skipping garbage [ 285.369858][T16081] netlink: 'syz.4.5322': attribute type 3 has an invalid length. [ 285.374446][ T4257] cdc_ncm 4-1:1.0: NCM or ECM functional descriptors missing [ 285.396115][ T4257] cdc_ncm 4-1:1.0: bind() failure [ 285.411499][T16086] kAFS: unable to lookup cell '' [ 285.425371][ T4257] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 285.463392][ T4257] cdc_ncm 4-1:1.1: bind() failure [ 285.615999][ T4198] usb 4-1: USB disconnect, device number 13 [ 285.824203][ T7185] lo speed is unknown, defaulting to 1000 [ 285.821977][T16072] infiniband syz1: set down [ 285.895557][T16072] infiniband syz1: added lo [ 286.120959][T16072] RDS/IB: syz1: added [ 286.127264][T16072] smc: adding ib device syz1 with port count 1 [ 286.134330][T16072] smc: ib device syz1 port 1 has pnetid [ 286.159214][ T4198] lo speed is unknown, defaulting to 1000 [ 286.223331][T16072] lo speed is unknown, defaulting to 1000 [ 286.503347][ T4198] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 286.666729][T16072] lo speed is unknown, defaulting to 1000 [ 286.888083][ T4198] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 286.905792][ T4198] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.945163][ T4198] usb 4-1: config 0 descriptor?? [ 287.007710][T16185] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 287.092613][T16072] lo speed is unknown, defaulting to 1000 [ 287.258397][ T4198] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 287.273239][ T4198] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 287.328492][ T4198] [drm:udl_init] *ERROR* Selecting channel failed [ 287.334242][T16206] __nla_validate_parse: 3 callbacks suppressed [ 287.334258][T16206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5363'. [ 287.409115][T16072] lo speed is unknown, defaulting to 1000 [ 287.444034][ T4198] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 287.481301][ T4198] [drm] Initialized udl on minor 2 [ 287.502600][T16211] loop0: detected capacity change from 0 to 16 [ 287.543346][ T4198] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 287.570510][T16214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5366'. [ 287.576552][ T4198] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 287.610317][ T4198] usb 4-1: USB disconnect, device number 14 [ 287.626381][T16211] erofs: (device loop0): mounted with root inode @ nid 36. [ 287.646439][ T4257] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 287.734080][ T4257] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 287.790857][T16072] lo speed is unknown, defaulting to 1000 [ 287.800783][ T4257] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 287.981327][T16229] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5368'. [ 288.120982][T16197] loop5: detected capacity change from 0 to 32768 [ 288.203751][T16197] ERROR: (device loop5): dbAlloc: the hint is outside the map [ 288.203751][T16197] [ 288.241609][T16244] netlink: 'syz.4.5375': attribute type 4 has an invalid length. [ 288.281761][T16197] ERROR: (device loop5): remounting filesystem as read-only [ 288.303075][T16197] ialloc: diAlloc returned -5! [ 288.444633][T16258] netlink: 'syz.0.5381': attribute type 9 has an invalid length. [ 288.485689][T16258] netlink: 'syz.0.5381': attribute type 6 has an invalid length. [ 288.669756][ T4198] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 288.783555][ T4257] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 288.919811][ T4198] usb 4-1: Using ep0 maxpacket: 8 [ 288.956850][T16292] loop4: detected capacity change from 0 to 16 [ 289.023572][T16297] loop0: detected capacity change from 0 to 1764 [ 289.031682][T16292] erofs: Unknown parameter '5‚ser_xattr' [ 289.040086][ T4198] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 289.050332][ T4198] usb 4-1: config 179 has no interface number 0 [ 289.056629][ T4198] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 289.070605][ T4198] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 289.082483][ T4198] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 289.099493][T16292] cifs: Unknown parameter '5‚ser_xattr' [ 289.119568][ T4198] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 289.143372][ T4198] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 289.162431][ T4198] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 289.183960][ T4198] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.192451][ T4257] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 289.220387][T16254] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 289.360361][ T4257] usb 6-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 289.385289][ T4257] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.424980][ T4257] usb 6-1: Product: syz [ 289.429364][ T4257] usb 6-1: Manufacturer: syz [ 289.450328][ T4257] usb 6-1: SerialNumber: syz [ 289.487770][ T4257] usb 6-1: config 0 descriptor?? [ 289.510898][T16263] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 289.531659][ T4257] port100 6-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 289.674105][ T4257] usb 4-1: USB disconnect, device number 15 [ 289.680607][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 289.689626][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 289.771423][ T4228] usb 6-1: USB disconnect, device number 4 [ 289.781298][T16325] loop4: detected capacity change from 0 to 4096 [ 289.936656][T16325] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 290.365848][T16376] loop3: detected capacity change from 0 to 256 [ 290.385170][T16369] loop4: detected capacity change from 0 to 2048 [ 290.469668][T16369] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 290.531492][ T7185] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 290.559741][T16369] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 290.610460][T16369] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 290.652556][T16369] UDF-fs: Scanning with blocksize 512 failed [ 290.720056][T16369] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 290.731174][T16393] netlink: del zone limit has 4 unknown bytes [ 290.798869][T16369] UDF-fs: bad mount option "ę'*§vèŸzłçnt" or missing value [ 290.932143][ T7185] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.960385][ T7185] usb 3-1: config 0 interface 0 altsetting 91 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 291.009635][ T7185] usb 3-1: config 0 interface 0 altsetting 91 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.040431][ T7185] usb 3-1: config 0 interface 0 altsetting 91 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 291.087917][T16416] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5441'. [ 291.116856][ T7185] usb 3-1: config 0 interface 0 has no altsetting 0 [ 291.139661][T16416] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5441'. [ 291.212028][ T7185] usb 3-1: New USB device found, idVendor=0404, idProduct=c294, bcdDevice= 0.00 [ 291.221276][ T7185] usb 3-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 291.246636][ T7185] usb 3-1: Manufacturer: syz [ 291.259458][ T7185] usb 3-1: config 0 descriptor?? [ 291.338640][T16429] netlink: 'syz.0.5447': attribute type 21 has an invalid length. [ 291.468747][T16436] openvswitch: netlink: Flow actions attr not present in new flow. [ 291.591937][ T7185] usb 3-1: USB disconnect, device number 29 [ 291.684661][T16444] loop0: detected capacity change from 0 to 4096 [ 291.706702][T16448] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5457'. [ 291.728948][T16444] __ntfs_warning: 6 callbacks suppressed [ 291.728962][T16444] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 291.743798][T16448] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5457'. [ 291.826612][T16444] ntfs: (device loop0): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 291.875412][T16444] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 291.929082][T16431] loop3: detected capacity change from 0 to 32768 [ 291.929318][T16444] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 291.951592][T16454] netlink: 'syz.4.5460': attribute type 1 has an invalid length. [ 291.974190][T16444] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 291.986344][T16431] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.5448 (16431) [ 291.995754][T16444] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 292.022541][T16454] netlink: 228 bytes leftover after parsing attributes in process `syz.4.5460'. [ 292.035442][T16444] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 292.053379][T16444] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 292.084052][T16431] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 292.097106][T16431] BTRFS info (device loop3): using free space tree [ 292.127509][T16431] BTRFS info (device loop3): has skinny extents [ 292.150601][T16444] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 292.178320][T16444] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 292.269883][T16444] ntfs: volume version 3.1. [ 292.345185][T16473] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 292.454092][T16494] loop4: detected capacity change from 0 to 256 [ 292.579564][T16431] BTRFS info (device loop3): enabling ssd optimizations [ 292.854941][T16513] loop4: detected capacity change from 0 to 512 [ 292.896146][T16517] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5482'. [ 292.994401][T16513] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 293.121277][T16528] netlink: 'syz.0.5486': attribute type 46 has an invalid length. [ 293.140977][T16528] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5486'. [ 293.486954][T16544] netlink: 'syz.0.5495': attribute type 1 has an invalid length. [ 293.703729][ T4228] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 293.962820][ T4228] usb 6-1: Using ep0 maxpacket: 8 [ 293.980780][T16563] loop4: detected capacity change from 0 to 4096 [ 294.093485][ T4228] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 294.109654][T16563] ntfs: volume version 3.1. [ 294.126845][ T4228] usb 6-1: config 0 interface 0 has no altsetting 0 [ 294.294843][ T4228] usb 6-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 294.313393][ T4228] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.331924][ T4228] usb 6-1: Product: syz [ 294.341159][ T4228] usb 6-1: Manufacturer: syz [ 294.362170][ T4228] usb 6-1: SerialNumber: syz [ 294.374331][ T4228] usb 6-1: config 0 descriptor?? [ 294.398174][T16587] device veth1_vlan left promiscuous mode [ 294.435864][ T4228] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 found [ 294.659375][ T4228] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 now disconnected [ 294.681600][ T4228] snd_usb_toneport: probe of 6-1:0.0 failed with error -22 [ 294.768731][T16620] ieee802154 phy0 wpan0: encryption failed: -22 [ 294.832236][T16622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5529'. [ 294.886742][T16622] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 294.892368][ T4228] usb 6-1: USB disconnect, device number 5 [ 294.910216][T16624] sctp: [Deprecated]: syz.3.5531 (pid 16624) Use of int in max_burst socket option. [ 294.910216][T16624] Use struct sctp_assoc_value instead [ 294.915834][T16622] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 294.944793][T16622] device bridge3 entered promiscuous mode [ 294.952922][T16626] rdma_rxe: ignoring netdev event = 23 for lo [ 294.973950][T16626] rdma_rxe: lo changed mtu to 66 [ 294.979380][T16626] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5530'. [ 295.033034][T16626] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 295.316487][T16611] loop4: detected capacity change from 0 to 32768 [ 295.451719][T16611] [ 295.451719][T16611] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 295.451719][T16611] [ 295.510737][T16646] loop3: detected capacity change from 0 to 4096 [ 295.574067][T16611] ERROR: (device loop4): dbAlloc: the hint is outside the map [ 295.574067][T16611] [ 295.598184][T16655] loop5: detected capacity change from 0 to 4096 [ 295.669952][T16646] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 295.685709][T16611] ERROR: (device loop4): remounting filesystem as read-only [ 295.739470][T16655] EXT4-fs (loop5): Test dummy encryption mode enabled [ 295.792877][T16655] EXT4-fs (loop5): Ignoring removed orlov option [ 295.860118][T16655] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x000000000000000e,nodioread_nolock,test_dummy_encryption,lazytime,nodelalloc,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 296.013012][T16655] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 296.045895][T16683] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 296.274074][T16694] ceph: Unknown parameter 'port' [ 296.575540][T16715] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5562'. [ 296.764798][T16738] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5573'. [ 297.002747][ T7185] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 297.154969][T16764] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (8) [ 297.249181][ T7193] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 297.435231][T16784] netlink: 207496 bytes leftover after parsing attributes in process `syz.5.5596'. [ 297.445194][ T7185] usb 5-1: unable to get BOS descriptor or descriptor too short [ 297.512849][ T7185] usb 5-1: not running at top speed; connect to a high speed hub [ 297.638050][ T7185] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 4 [ 297.652174][T16802] loop0: detected capacity change from 0 to 256 [ 297.660677][ T7185] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 4 [ 297.682921][ T7193] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 297.712538][ T7193] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.732632][ T7193] usb 4-1: config 0 has no interface number 0 [ 297.732811][ T4228] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 297.743556][ T7193] usb 4-1: config 0 interface 251 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 297.826012][T16810] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 297.910501][T16812] loop5: detected capacity change from 0 to 4096 [ 297.933119][ T7185] usb 5-1: string descriptor 0 read error: -22 [ 297.939561][ T7185] usb 5-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 297.949531][ T7185] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.961907][ T7193] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 297.971436][ T7193] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.980450][ T7193] usb 4-1: Product: syz [ 297.996490][T16812] __ntfs_error: 11 callbacks suppressed [ 297.996506][T16812] ntfs: (device loop5): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 297.999046][ T7193] usb 4-1: Manufacturer: syz [ 298.022855][ T4228] usb 3-1: Using ep0 maxpacket: 16 [ 298.027398][T16812] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 298.048218][ T7193] usb 4-1: SerialNumber: syz [ 298.054049][T16812] ntfs: (device loop5): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 298.068966][ T7193] usb 4-1: config 0 descriptor?? [ 298.074490][T16812] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 298.087939][T16812] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 298.100709][T16812] ntfs: volume version 3.1. [ 298.107909][T16812] ntfs: (device loop5): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 298.121332][ T7193] asix: probe of 4-1:0.251 failed with error -22 [ 298.132472][T16812] ntfs: (device loop5): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 298.142896][ T4228] usb 3-1: config 0 has no interfaces? [ 298.153159][T16812] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 298.171236][T16812] ntfs: (device loop5): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 298.182965][T16812] ntfs: (device loop5): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 298.222821][ T4257] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 298.313011][ T4228] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 298.333553][ T4228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.342062][ T4228] usb 3-1: Product: syz [ 298.347699][ T4228] usb 3-1: Manufacturer: syz [ 298.352508][ T4228] usb 3-1: SerialNumber: syz [ 298.359463][ T4228] r8152-cfgselector 3-1: config 0 descriptor?? [ 298.366688][ T4198] usb 4-1: USB disconnect, device number 16 [ 298.472961][ T4257] usb 1-1: Using ep0 maxpacket: 16 [ 298.510896][ T7185] usb 5-1: USB disconnect, device number 24 [ 298.594087][ T4257] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.604822][T16835] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5621'. [ 298.614722][ T4257] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 298.629024][ T4228] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 298.647476][ T4257] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 298.656838][ T4257] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.667082][ T4257] usb 1-1: config 0 descriptor?? [ 298.674350][T16837] tmpfs: Bad value for 'mpol' [ 298.704960][ T4257] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 298.720822][ T4277] usb 3-1: config 0 descriptor?? [ 298.867871][ T7185] usb 3-1: USB disconnect, device number 30 [ 298.883241][ T4277] usb 3-1: can't set config #0, error -71 [ 298.909400][ T4257] usb 1-1: USB disconnect, device number 25 [ 299.212790][ T4228] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 299.219507][T16873] x_tables: unsorted underflow at hook 3 [ 299.352780][ T7193] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 299.442512][T16886] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 299.462774][ T4228] usb 6-1: Using ep0 maxpacket: 32 [ 299.486611][T16889] loop0: detected capacity change from 0 to 256 [ 299.497591][T16887] loop2: detected capacity change from 0 to 4096 [ 299.532334][T16887] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 299.582982][ T4228] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.589484][T16887] EXT4-fs (loop2): inline encryption not supported [ 299.603812][T16889] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 299.622681][ T4228] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 299.640639][T16887] EXT4-fs (loop2): Test dummy encryption mode enabled [ 299.698521][T16887] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 299.711800][T16887] System zones: 0-5 [ 299.721086][T16887] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,inlinecrypt,errors=remount-ro,test_dummy_encryption=v1,norecovery,delalloc,nogrpid,minixdf,. Quota mode: writeback. [ 299.803205][ T7193] usb 5-1: config 36 interface 0 altsetting 0 has an invalid endpoint with address 0x31, skipping [ 299.813055][ T4228] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=21.11 [ 299.828936][ T4228] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.847599][ T4228] usb 6-1: Product: syz [ 299.862682][ T4228] usb 6-1: Manufacturer: syz [ 299.890597][ T4228] usb 6-1: SerialNumber: syz [ 299.900257][ T4228] usb 6-1: config 0 descriptor?? [ 299.982988][ T7193] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 300.029240][ T7193] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 300.058357][ T7193] usb 5-1: Manufacturer: syz [ 300.075774][T16914] netlink: 204 bytes leftover after parsing attributes in process `syz.3.5660'. [ 300.097497][ T7193] usb 5-1: SerialNumber: syz [ 300.229625][ T4228] usb 6-1: USB disconnect, device number 6 [ 300.484503][ T7193] usbhid 5-1:36.0: couldn't find an input interrupt endpoint [ 300.523591][ T7193] usb 5-1: USB disconnect, device number 25 [ 300.650025][T16957] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5680'. [ 300.862386][T16973] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5687'. [ 300.877112][T16974] netlink: 'syz.2.5689': attribute type 3 has an invalid length. [ 301.078352][T16986] tmpfs: Bad value for 'mpol' [ 301.111950][T16988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5696'. [ 301.134975][T16990] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5697'. [ 301.554858][T17015] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check. [ 301.607442][T17019] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 301.608216][T16978] loop4: detected capacity change from 0 to 32768 [ 301.635930][T17019] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 301.676786][T17021] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.5712'. [ 301.678199][T17019] comedi comedi0: 8255: I/O port conflict (0x4,4) [ 301.701662][T17019] comedi comedi0: 8255: I/O port conflict (0x4,4) [ 301.708526][ T7193] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 301.787568][T17028] loop3: detected capacity change from 0 to 1024 [ 301.797724][T16978] JBD2: Ignoring recovery information on journal [ 301.887833][T16978] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 301.954840][T17037] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5719'. [ 302.008408][T17037] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.124233][ T4198] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 302.139570][ T4194] ocfs2: Unmounting device (7,4) on (node local) [ 302.152737][ T7193] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 302.160931][ T7193] usb 6-1: config 0 has no interface number 0 [ 302.188001][ T7193] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 302.216759][ T7193] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 302.222794][ T4228] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 302.392797][ T4198] usb 1-1: Using ep0 maxpacket: 8 [ 302.422985][ T7193] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 302.453506][ T7193] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.471795][ T7193] usb 6-1: Product: syz [ 302.476267][ T7193] usb 6-1: Manufacturer: syz [ 302.476995][T17054] loop4: detected capacity change from 0 to 4096 [ 302.480958][ T7193] usb 6-1: SerialNumber: syz [ 302.494692][ T7193] usb 6-1: config 0 descriptor?? [ 302.512924][ T4198] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 302.521437][ T4198] usb 1-1: config 179 has no interface number 0 [ 302.534273][ T4198] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 302.534405][ T7193] yurex 6-1:0.50: Could not submitting URB [ 302.564109][T17054] EXT4-fs (loop4): Test dummy encryption mode enabled [ 302.587810][ T7193] yurex: probe of 6-1:0.50 failed with error -5 [ 302.588474][ T4198] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 302.617296][T17054] EXT4-fs (loop4): Ignoring removed orlov option [ 302.646858][ T4228] usb 4-1: unable to get BOS descriptor or descriptor too short [ 302.665935][T17054] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x000000000000000e,nodioread_nolock,test_dummy_encryption,lazytime,nodelalloc,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 302.665992][ T4198] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 302.760416][T17054] [ 302.762874][T17054] ====================================================== [ 302.770413][T17054] WARNING: possible circular locking dependency detected [ 302.778153][T17054] syzkaller #0 Not tainted [ 302.782673][T17054] ------------------------------------------------------ [ 302.790672][T17054] syz.4.5726/17054 is trying to acquire lock: [ 302.797263][T17054] ffff8880605b07a8 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x5a/0x410 [ 302.806247][T17054] [ 302.806247][T17054] but task is already holding lock: [ 302.813619][T17054] ffff88807f091668 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x8c4/0x1a50 [ 302.823131][T17054] [ 302.823131][T17054] which lock already depends on the new lock. [ 302.823131][T17054] [ 302.833807][T17054] [ 302.833807][T17054] the existing dependency chain (in reverse order) is: [ 302.842915][T17054] [ 302.842915][T17054] -> #2 (&ei->i_data_sem/2){++++}-{3:3}: [ 302.850841][T17054] down_read+0x44/0x2e0 [ 302.855849][T17054] ext4_map_blocks+0x350/0x1a50 [ 302.861317][T17054] ext4_getblk+0x176/0x670 [ 302.866353][T17054] ext4_bread+0x26/0x180 [ 302.871303][T17054] ext4_quota_read+0x1ac/0x390 [ 302.876420][T17064] loop2: detected capacity change from 0 to 32768 [ 302.876594][T17054] find_tree_dqentry+0x187/0xb30 [ 302.888016][ T7179] usb 6-1: USB disconnect, device number 7 [ 302.888560][T17054] find_tree_dqentry+0x3e8/0xb30 [ 302.888582][T17054] find_tree_dqentry+0x3e8/0xb30 [ 302.905448][T17054] find_tree_dqentry+0x3e8/0xb30 [ 302.906418][T17064] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.5730 (17064) [ 302.910915][T17054] qtree_read_dquot+0x122/0x690 [ 302.910941][T17054] v2_read_dquot+0xc0/0x110 [ 302.910955][T17054] dquot_acquire+0x152/0x520 [ 302.939093][T17054] ext4_acquire_dquot+0x2e3/0x4a0 [ 302.944840][T17054] dqget+0x713/0xbb0 [ 302.949364][T17054] __dquot_initialize+0x324/0xd00 [ 302.955170][T17054] ext4_process_orphan+0x4c/0x2e0 [ 302.960795][T17054] ext4_orphan_cleanup+0xad8/0x1320 [ 302.966607][T17054] ext4_fill_super+0x8c65/0x93f0 [ 302.972050][T17054] mount_bdev+0x28a/0x3c0 [ 302.976968][T17054] legacy_get_tree+0xe6/0x180 [ 302.982353][T17054] vfs_get_tree+0x88/0x270 [ 302.987663][T17054] do_new_mount+0x247/0xa40 [ 302.994050][T17054] __se_sys_mount+0x2e3/0x3d0 [ 303.000984][T17054] do_syscall_64+0x4c/0xa0 [ 303.006965][T17054] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 303.014721][T17054] [ 303.014721][T17054] -> #1 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 303.023708][T17054] down_read+0x44/0x2e0 [ 303.028474][T17054] v2_read_dquot+0x4a/0x110 [ 303.033772][T17054] dquot_acquire+0x152/0x520 [ 303.039044][T17054] ext4_acquire_dquot+0x2e3/0x4a0 [ 303.045053][T17054] dqget+0x713/0xbb0 [ 303.049737][T17054] __dquot_initialize+0x324/0xd00 [ 303.055384][T17054] ext4_process_orphan+0x4c/0x2e0 [ 303.060925][T17054] ext4_orphan_cleanup+0xad8/0x1320 [ 303.066626][T17054] ext4_fill_super+0x8c65/0x93f0 [ 303.072065][T17054] mount_bdev+0x28a/0x3c0 [ 303.076897][T17054] legacy_get_tree+0xe6/0x180 [ 303.082105][T17054] vfs_get_tree+0x88/0x270 [ 303.087127][T17054] do_new_mount+0x247/0xa40 [ 303.092445][T17054] __se_sys_mount+0x2e3/0x3d0 [ 303.097648][T17054] do_syscall_64+0x4c/0xa0 [ 303.102588][T17054] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 303.109076][T17054] [ 303.109076][T17054] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 303.116701][T17054] __lock_acquire+0x2c66/0x7b50 [ 303.122156][T17054] lock_acquire+0x19e/0x400 [ 303.127262][T17054] __mutex_lock_common+0x1e5/0x2400 [ 303.133239][T17054] mutex_lock_nested+0x17/0x20 [ 303.139138][T17054] dquot_commit+0x5a/0x410 [ 303.144322][T17054] ext4_write_dquot+0x1f0/0x360 [ 303.149785][T17054] mark_all_dquot_dirty+0xf9/0x400 [ 303.155401][T17054] __dquot_alloc_space+0x5cb/0xe10 [ 303.161108][T17054] ext4_mb_new_blocks+0xf80/0x47c0 [ 303.166815][T17054] ext4_ext_map_blocks+0x17d1/0x63d0 [ 303.172605][T17054] ext4_map_blocks+0x97f/0x1a50 [ 303.177958][T17054] _ext4_get_block+0x1e7/0x540 [ 303.183264][T17054] ext4_block_write_begin+0x5ff/0x1200 [ 303.189235][T17054] ext4_write_begin+0x6c8/0x15d0 [ 303.194695][T17054] __page_symlink+0x102/0x200 [ 303.200149][T17054] ext4_symlink+0x885/0xcd0 [ 303.205152][T17054] vfs_symlink+0x245/0x3d0 [ 303.210336][T17054] do_symlinkat+0x1ab/0x6b0 [ 303.215535][T17054] __x64_sys_symlink+0x7a/0x90 [ 303.221059][T17054] do_syscall_64+0x4c/0xa0 [ 303.226062][T17054] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 303.232719][T17054] [ 303.232719][T17054] other info that might help us debug this: [ 303.232719][T17054] [ 303.242925][T17054] Chain exists of: [ 303.242925][T17054] &dquot->dq_lock --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2 [ 303.242925][T17054] [ 303.257129][T17054] Possible unsafe locking scenario: [ 303.257129][T17054] [ 303.264675][T17054] CPU0 CPU1 [ 303.270290][T17054] ---- ---- [ 303.275721][T17054] lock(&ei->i_data_sem/2); [ 303.280297][T17054] lock(&s->s_dquot.dqio_sem); [ 303.287644][T17054] lock(&ei->i_data_sem/2); [ 303.294823][T17054] lock(&dquot->dq_lock); [ 303.299307][T17054] [ 303.299307][T17054] *** DEADLOCK *** [ 303.299307][T17054] [ 303.307617][T17054] 4 locks held by syz.4.5726/17054: [ 303.312878][T17054] #0: ffff88807efe6460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 303.323068][T17054] #1: ffff88807f0a2bd0 (&type->i_mutex_dir_key#4/1){+.+.}-{3:3}, at: filename_create+0x20b/0x450 [ 303.334310][T17054] #2: ffff88807f091668 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x8c4/0x1a50 [ 303.344689][T17054] #3: ffffffff8c4417f8 (dquot_srcu){....}-{0:0}, at: rcu_lock_acquire+0x5/0x30 [ 303.353721][T17054] [ 303.353721][T17054] stack backtrace: [ 303.359589][T17054] CPU: 1 PID: 17054 Comm: syz.4.5726 Not tainted syzkaller #0 [ 303.367034][T17054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 303.377286][T17054] Call Trace: [ 303.380547][T17054] [ 303.383586][T17054] dump_stack_lvl+0x188/0x250 [ 303.388406][T17054] ? load_image+0x410/0x410 [ 303.393111][T17054] ? show_regs_print_info+0x20/0x20 [ 303.398490][T17054] ? print_circular_bug+0x12b/0x1a0 [ 303.403762][T17054] check_noncircular+0x296/0x330 [ 303.408692][T17054] ? add_chain_block+0x9b0/0x9b0 [ 303.413608][T17054] ? lockdep_lock+0xf1/0x1f0 [ 303.418271][T17054] ? mark_lock+0x94/0x320 [ 303.422581][T17054] ? _find_first_zero_bit+0xd1/0xf0 [ 303.427851][T17054] __lock_acquire+0x2c66/0x7b50 [ 303.432691][T17054] ? verify_lock_unused+0x140/0x140 [ 303.437969][T17054] ? mark_lock+0x94/0x320 [ 303.442482][T17054] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 303.448550][T17054] ? __lock_acquire+0x7b50/0x7b50 [ 303.453566][T17054] ? lock_chain_count+0x20/0x20 [ 303.458401][T17054] lock_acquire+0x19e/0x400 [ 303.463086][T17054] ? dquot_commit+0x5a/0x410 [ 303.467657][T17054] ? finish_lock_switch+0x12d/0x290 [ 303.472838][T17054] ? __might_sleep+0xf0/0xf0 [ 303.477422][T17054] ? read_lock_is_recursive+0x10/0x10 [ 303.482777][T17054] ? __schedule+0x11cb/0x4350 [ 303.487438][T17054] __mutex_lock_common+0x1e5/0x2400 [ 303.492625][T17054] ? dquot_commit+0x5a/0x410 [ 303.497299][T17054] ? dquot_commit+0x5a/0x410 [ 303.501898][T17054] ? __might_sleep+0xf0/0xf0 [ 303.506559][T17054] ? mutex_lock_io_nested+0x60/0x60 [ 303.511744][T17054] ? preempt_schedule+0xbc/0xd0 [ 303.516671][T17054] mutex_lock_nested+0x17/0x20 [ 303.521419][T17054] dquot_commit+0x5a/0x410 [ 303.526081][T17054] ext4_write_dquot+0x1f0/0x360 [ 303.530917][T17054] mark_all_dquot_dirty+0xf9/0x400 [ 303.536311][T17054] __dquot_alloc_space+0x5cb/0xe10 [ 303.541520][T17054] ext4_mb_new_blocks+0xf80/0x47c0 [ 303.546887][T17054] ? memset+0x1e/0x40 [ 303.552074][T17054] ? ext4_mb_pa_callback+0xd0/0xd0 [ 303.557657][T17054] ? ext4_inode_to_goal_block+0x2be/0x450 [ 303.563753][T17054] ext4_ext_map_blocks+0x17d1/0x63d0 [ 303.569262][T17054] ? ext4_ext_release+0x10/0x10 [ 303.574293][T17054] ? rwsem_write_trylock+0x135/0x1c0 [ 303.579569][T17054] ext4_map_blocks+0x97f/0x1a50 [ 303.584410][T17054] ? ext4_issue_zeroout+0x250/0x250 [ 303.590035][T17054] _ext4_get_block+0x1e7/0x540 [ 303.594786][T17054] ? ext4_get_block+0x40/0x40 [ 303.599451][T17054] ext4_block_write_begin+0x5ff/0x1200 [ 303.604982][T17054] ? ext4_es_is_delayed+0x40/0x40 [ 303.610101][T17054] ? ext4_print_free_blocks+0x380/0x380 [ 303.615724][T17054] ? __ext4_journal_start_sb+0x1bd/0x360 [ 303.621339][T17054] ext4_write_begin+0x6c8/0x15d0 [ 303.626269][T17054] ? memset+0x1e/0x40 [ 303.630262][T17054] ? ext4_readahead+0x110/0x110 [ 303.635101][T17054] ? ext4_orphan_add+0x145/0x1200 [ 303.640326][T17054] ? kmemdup+0x3d/0x50 [ 303.644400][T17054] ? pagecache_write_begin+0x33/0xa0 [ 303.649769][T17054] __page_symlink+0x102/0x200 [ 303.654478][T17054] ? page_readlink+0x1a0/0x1a0 [ 303.659224][T17054] ? ext4_inode_journal_mode+0x189/0x460 [ 303.665100][T17054] ? ext4_set_aops+0x10/0x240 [ 303.669765][T17054] ? __ext4_journal_stop+0x30/0x190 [ 303.675033][T17054] ? ext4_symlink+0x74d/0xcd0 [ 303.679701][T17054] ext4_symlink+0x885/0xcd0 [ 303.684457][T17054] ? ext4_unlink+0x500/0x500 [ 303.689025][T17054] ? inode_permission+0xef/0x480 [ 303.693955][T17054] ? bpf_lsm_inode_symlink+0x5/0x10 [ 303.699221][T17054] ? security_inode_symlink+0xb2/0x100 [ 303.704753][T17054] vfs_symlink+0x245/0x3d0 [ 303.709169][T17054] do_symlinkat+0x1ab/0x6b0 [ 303.713653][T17054] ? vfs_symlink+0x3d0/0x3d0 [ 303.718239][T17054] ? getname_flags+0x1f9/0x4f0 [ 303.723004][T17054] __x64_sys_symlink+0x7a/0x90 [ 303.727845][T17054] do_syscall_64+0x4c/0xa0 [ 303.732244][T17054] ? clear_bhb_loop+0x30/0x80 [ 303.736905][T17054] ? clear_bhb_loop+0x30/0x80 [ 303.741568][T17054] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 303.747492][T17054] RIP: 0033:0x7f1228ba00d9 [ 303.751893][T17054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.771569][T17054] RSP: 002b:00007f1226df8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 303.780070][T17054] RAX: ffffffffffffffda RBX: 00007f1228e27fa0 RCX: 00007f1228ba00d9 [ 303.788036][T17054] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 00002000000005c0 [ 303.796002][T17054] RBP: 00007f1228c37024 R08: 0000000000000000 R09: 0000000000000000 [ 303.804053][T17054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 303.812013][T17054] R13: 00007f1228e28038 R14: 00007f1228e27fa0 R15: 00007ffdc13ca2d8 [ 303.820076][T17054] [ 303.855252][ T4198] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 303.867107][ T4198] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 303.882690][ T4198] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 303.892157][ T4198] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.900590][ T4228] usb 4-1: config 3 has an invalid interface number: 73 but max is 1 [ 303.910392][ T4228] usb 4-1: config 3 has no interface number 1 [ 303.917294][ T4228] usb 4-1: config 3 interface 73 altsetting 14 endpoint 0x2 has an invalid bInterval 136, changing to 7 [ 303.931775][ T4228] usb 4-1: config 3 interface 0 has no altsetting 0 [ 303.939499][ T4228] usb 4-1: config 3 interface 73 has no altsetting 0 [ 303.953399][T17064] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 303.962914][T17032] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 303.971453][T17064] BTRFS info (device loop2): using free space tree [ 303.978183][T17064] BTRFS info (device loop2): has skinny extents [ 304.000193][T17064] BTRFS info (device loop2): enabling ssd optimizations [ 304.182751][ T4228] usb 4-1: string descriptor 0 read error: -22 [ 304.202863][ T4228] usb 4-1: New USB device found, idVendor=07ca, idProduct=2835, bcdDevice=eb.e7 [ 304.211931][ T4228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.274853][ T4228] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 304.281317][ T4228] dvb_usb_af9035: probe of 4-1:3.0 failed with error -22 [ 304.441076][ T4228] usb 1-1: USB disconnect, device number 26 [ 304.447232][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 304.447270][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 304.477218][ T4198] usb 4-1: USB disconnect, device number 17