last executing test programs: 3.819770038s ago: executing program 2 (id=4933): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @raw_data="a73fb05f3771f0835931302088b6187916c7b0e5f1f7db307caa2c90fecaedfe56d521966c6f5ca1b46d182c443a5768c217df3ba1230934abad2e2bbd4401b182c34574db7554585d1f3cba9fc707f79a3bcec280417bb482e91562b2636266e3723b788e6010e21136df8b20e1238dc853276ba78cd4db1f7fd4cb738992e1ced9df4e9a31f534c3762ab0e345ab618406c9dcad18a65e2c9a80f2948809584a15bbf3956250db0cf5e948127560856c6d030334ab6166678f69df4dbc6af73f6eacdd4b6e23b1"}) 3.650163493s ago: executing program 2 (id=4935): syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"/321], 0xfd, 0x5544, &(0x7f000000b080)="$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") quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 1.90074528s ago: executing program 2 (id=4979): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0x4008af25, &(0x7f0000001780)={0x0, 0x9, 0x9}) 1.515715684s ago: executing program 4 (id=4989): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000540)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'batadv0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x20000040) 1.489057206s ago: executing program 2 (id=4991): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c00000029000b0027bd700000000000020000001800018014"], 0x2c}}, 0x0) 1.285592374s ago: executing program 2 (id=4996): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@polexpire={0xcc, 0x1b, 0x57a500b9b82fd89, 0x0, 0x0, {{{@in6=@private0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x60}, {0x0, 0x0, 0x0, 0x1}, {}, 0xfffffffc}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xcc}}, 0x0) 1.260100387s ago: executing program 4 (id=4997): r0 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000240)) 1.159142616s ago: executing program 2 (id=5000): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xbd, 0xe5, 0xa4, 0x40, 0x2770, 0x9052, 0x15f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6f, 0x5c, 0xa}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 1.086614022s ago: executing program 4 (id=5002): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f00000001c0)={0x8, 'vlan0\x00', {'macvlan1\x00'}}) 1.072760264s ago: executing program 3 (id=5003): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000002500), 0x2, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000002540)={0xa, @capture={0x0, 0x1, {0x80000000, 0x3}, 0x1, 0x6}}) 962.355784ms ago: executing program 3 (id=5006): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000240)) 962.226353ms ago: executing program 4 (id=5008): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) 924.089197ms ago: executing program 3 (id=5010): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0x232, 0x0, 0x90, [0x0, 0x200000000600, 0x0, 0x0, 0x200000000630, 0x200000000660], 0x0, 0x0, &(0x7f0000000600)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) 839.388175ms ago: executing program 3 (id=5011): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7030000000000008500000012000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 782.31983ms ago: executing program 4 (id=5012): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x4}) 782.1728ms ago: executing program 1 (id=5013): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@delsa={0x28, 0x11, 0x1, 0x70bd28, 0x25dfdbfe, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d5, 0xa, 0x33}}, 0x28}, 0x1, 0x0, 0x0, 0x844}, 0x10) 705.382336ms ago: executing program 4 (id=5015): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000480)=ANY=[@ANYBLOB="6e6f757365725f78617474722c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c6572726f72733d636f6e74696e75652c646174613d77726974656261636b2c6572726f72733d72656d6f756e742d726f2c6e6f61636c2c0033b67a38edf7ca65cff4aecf1bccac7b7847e83ec6928ad9eff2281ff7a2314d9a8541a9772b98d067c1463bb01ed3ebf5764745d29402107611df2e22d6cfb25eb0a8b970f339cf6413aaef25cee228060d70ce0ade90d917a9c5"], 0x1, 0x4438, &(0x7f00000088c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) 685.980798ms ago: executing program 1 (id=5016): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) 619.172784ms ago: executing program 1 (id=5018): r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') read$rfkill(r0, &(0x7f00000000c0), 0x8) 579.619877ms ago: executing program 0 (id=5019): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) 503.301014ms ago: executing program 1 (id=5020): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x6, 0x288c2) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 502.633274ms ago: executing program 3 (id=5021): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @raw_data="a73fb05f3771f0835852313288b6187916c7b0e5f1f7db307caa2c90fecaedfe56d521966c6f5ca1b46d182c443a5768c217df3ba1230934abad2e2bbd4401b182c34574db7554585d1f3cba9fc707f79a3bcec280417bb482e91562b2636266e3723b788e6010e21136df8b20e1238dc853276ba78cd4db1f7fd4cb738992e1ced9df4e9a31f534c3762ab0e345ab618406c9dcad18a65e2c9a80f2948809584a15bbf3956250db0cf5e948127560856c6d030334ab6166678f69df4dbc6af73f6eacdd4b6e23b1"}) 441.15187ms ago: executing program 0 (id=5022): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x20280, 0x0) close(r0) 441.01198ms ago: executing program 1 (id=5023): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206030000001a0000de00000000000014000780080006400000000005001500010000000500010006000000050005000200000005000400030000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) 430.047891ms ago: executing program 3 (id=5024): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x6, 0x61f, &(0x7f0000000b00)="$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") symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') 342.616729ms ago: executing program 1 (id=5025): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x88, 0x94, 0x5b, 0x40, 0x46d, 0x8b7, 0xca8e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdd, 0xc5, 0x42}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 341.991229ms ago: executing program 0 (id=5026): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020754d0400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000004000000180100002020642500000000002020207b1a00ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0x0, 0xfd, 0xfffffffffffffffc, &(0x7f0000000a40)="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", &(0x7f0000000140)=""/13, 0x0, 0x0, 0xad, 0x112, &(0x7f0000000240)="9cdc57e4a9c7fcb9b186c9bd43fa44b38bef6138ca1f6f08cdaacbcffe9a2ae0343debf4e6ce7818ec4261022c63c5174dbf51c34fd98db73c55431a897423936fe486079d14be4fdaa264f27421f79a60f4c7f8d297d74bc790de34386008fc17b9ca14491f71bbc7fd8367ce56a3fb28ba9d6d3b2c24568f8b891c71cab31229da7ca3687c49e4e9d44410b7fa88e3f5f4e437b5e143240b3bec30863d4b722b6ad3c8d882037a7daebcb362", &(0x7f0000000880)="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", 0x1, 0x0, 0x2}, 0x9) 259.972396ms ago: executing program 0 (id=5027): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix_mp={0x0, 0x0, 0x55595659}}) 122.883538ms ago: executing program 0 (id=5028): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, &(0x7f0000000240), &(0x7f0000000280)=0x30) 0s ago: executing program 0 (id=5029): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848350000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 620772][ T7] usb 3-1: 0:2 : does not exist [ 175.646937][ T4841] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 175.675126][ T7] usb 3-1: USB disconnect, device number 14 [ 175.694227][ T9845] loop3: detected capacity change from 0 to 4096 [ 175.769298][ T9845] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 175.825609][ T4841] usb 5-1: USB disconnect, device number 11 [ 175.838131][ T5309] usb 5-1: Failed to submit usb control message: -71 [ 175.845459][ T5309] usb 5-1: unable to send the bmi data to the device: -71 [ 175.864086][ T5309] usb 5-1: unable to get target info from device [ 175.877421][ T5309] usb 5-1: could not get target info (-71) [ 175.892915][ T5309] usb 5-1: could not probe fw (-71) [ 176.000786][ T4291] udevd[4291]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 176.113557][ T9872] tmpfs: Bad value for 'mpol' [ 176.271774][ T9878] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.293720][ T9876] loop3: detected capacity change from 0 to 4096 [ 176.331455][ T9878] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 176.355430][ T9880] IPv6: sit2: Disabled Multicast RS [ 176.418674][ T9876] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 176.846833][ T9911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2608'. [ 177.103081][ T9930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2617'. [ 177.320293][ T9946] netlink: 'syz.1.2625': attribute type 1 has an invalid length. [ 177.402003][ T9953] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2629'. [ 177.641296][ T9971] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2639'. [ 177.664205][ T9971] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2639'. [ 177.878200][ T6194] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 178.051136][ T9990] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2649'. [ 178.198139][ T4293] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 178.318151][ T6194] usb 5-1: unable to get BOS descriptor or descriptor too short [ 178.382701][ T9977] set_capacity_and_notify: 1 callbacks suppressed [ 178.382717][ T9977] loop2: detected capacity change from 0 to 32768 [ 178.408548][ T6194] usb 5-1: config 14 has an invalid interface number: 85 but max is 0 [ 178.419580][ T6194] usb 5-1: config 14 has no interface number 0 [ 178.425834][ T6194] usb 5-1: config 14 interface 85 has no altsetting 0 [ 178.438041][ T4293] usb 1-1: Using ep0 maxpacket: 8 [ 178.445405][T10008] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 178.498621][T10011] binder: 10009:10011 ioctl c0306201 200000000280 returned -14 [ 178.507899][ T9977] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 178.553029][T10016] UBIFS error (pid: 10016): cannot open "", error -22 [ 178.559632][ T9977] OCFS2: ERROR (device loop2): int ocfs2_reserve_suballoc_bits(struct ocfs2_super *, struct ocfs2_alloc_context *, int, u32, u64 *, int): Invalid chain allocator 73 [ 178.587387][ T9977] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 178.597774][ T9977] OCFS2: File system is now read-only. [ 178.603923][ T9977] (syz.2.2641,9977,1):ocfs2_reserve_suballoc_bits:850 ERROR: status = -30 [ 178.612755][ T9977] (syz.2.2641,9977,1):ocfs2_reserve_new_metadata_blocks:990 ERROR: status = -30 [ 178.622954][ T6194] usb 5-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=24.ae [ 178.632326][ T9977] (syz.2.2641,9977,1):ocfs2_reserve_new_metadata_blocks:1013 ERROR: status = -30 [ 178.643799][ T6194] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.648575][ T9977] (syz.2.2641,9977,0):ocfs2_mknod:350 ERROR: status = -30 [ 178.652051][ T6194] usb 5-1: Product: syz [ 178.668746][ T6194] usb 5-1: Manufacturer: syz [ 178.673367][ T6194] usb 5-1: SerialNumber: syz [ 178.702828][ T9977] (syz.2.2641,9977,1):ocfs2_mknod:502 ERROR: status = -30 [ 178.718247][ T4293] usb 1-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 178.735799][ T4293] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.748269][ T9977] (syz.2.2641,9977,1):ocfs2_create:676 ERROR: status = -30 [ 178.771277][ T4293] usb 1-1: Product: syz [ 178.775479][ T4293] usb 1-1: Manufacturer: syz [ 178.793247][ T4293] usb 1-1: SerialNumber: syz [ 178.813657][ T4293] usb 1-1: config 0 descriptor?? [ 178.823687][ T4196] ocfs2: Unmounting device (7,2) on (node local) [ 178.828545][ T7] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 178.883229][ T4293] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 178.970068][ T6194] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 178.998047][ T6194] gspca_sn9c2028: read1 error -71 [ 179.028261][ T6194] gspca_sn9c2028: read1 error -71 [ 179.037443][T10024] loop1: detected capacity change from 0 to 2048 [ 179.048072][ T6194] gspca_sn9c2028: read1 error -71 [ 179.053199][ T6194] sn9c2028: probe of 5-1:14.85 failed with error -71 [ 179.072717][T10026] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2662'. [ 179.087281][ T6194] usb 5-1: USB disconnect, device number 12 [ 179.149744][T10024] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 179.184999][T10024] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 179.308074][ T4293] gspca_vc032x: reg_w err -71 [ 179.312929][ T4293] vc032x: probe of 1-1:0.0 failed with error -71 [ 179.340691][ T4293] usb 1-1: USB disconnect, device number 13 [ 179.433831][ T7] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 179.453671][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.478993][T10044] netlink: 'syz.2.2673': attribute type 1 has an invalid length. [ 179.489401][T10044] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2673'. [ 179.498266][ T7] usb 4-1: Product: syz [ 179.502870][ T7] usb 4-1: Manufacturer: syz [ 179.507486][ T7] usb 4-1: SerialNumber: syz [ 179.535013][ T7] usb 4-1: config 0 descriptor?? [ 179.611343][ T7] usb 4-1: Waiting for MOTU Microbook II to boot up... [ 179.629849][ T7] usb 4-1: failed setting the sample rate for Motu MicroBook II: -22 [ 179.642973][T10051] loop4: detected capacity change from 0 to 256 [ 179.652204][ T7] snd-usb-audio: probe of 4-1:0.0 failed with error -22 [ 179.723234][T10051] FAT-fs (loop4): Directory bread(block 64) failed [ 179.756013][T10051] FAT-fs (loop4): Directory bread(block 65) failed [ 179.771849][T10051] FAT-fs (loop4): Directory bread(block 66) failed [ 179.798058][T10051] FAT-fs (loop4): Directory bread(block 67) failed [ 179.804730][T10051] FAT-fs (loop4): Directory bread(block 68) failed [ 179.828147][ T7] usb 4-1: USB disconnect, device number 12 [ 179.844867][T10051] FAT-fs (loop4): Directory bread(block 69) failed [ 179.869747][T10051] FAT-fs (loop4): Directory bread(block 70) failed [ 179.876395][T10051] FAT-fs (loop4): Directory bread(block 71) failed [ 179.920160][T10051] FAT-fs (loop4): Directory bread(block 72) failed [ 179.952455][T10063] loop2: detected capacity change from 0 to 64 [ 179.959569][T10051] FAT-fs (loop4): Directory bread(block 73) failed [ 179.968880][ T26] audit: type=1400 audit(1771474414.288:4): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=10064 comm="syz.0.2683" [ 180.173918][T10077] tmpfs: Unknown parameter 'no' [ 180.391701][T10090] netlink: 22 bytes leftover after parsing attributes in process `syz.1.2696'. [ 180.415606][T10090] netlink: 22 bytes leftover after parsing attributes in process `syz.1.2696'. [ 180.484673][T10090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2696'. [ 180.552242][T10099] loop4: detected capacity change from 0 to 1024 [ 180.621927][T10099] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 180.672266][T10099] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 180.695695][T10105] loop3: detected capacity change from 0 to 256 [ 180.702672][T10099] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 180.716175][T10107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2705'. [ 180.738276][ T2290] Bluetooth: hci1: command 0x0406 tx timeout [ 180.745513][T10099] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e054c018, mo2=0002] [ 180.753828][T10099] System zones: 0-1, 3-36 [ 180.757392][ T2290] Bluetooth: hci0: command 0x0406 tx timeout [ 180.771911][ T2290] Bluetooth: hci4: command 0x0406 tx timeout [ 180.783409][ T2290] Bluetooth: hci3: command 0x0406 tx timeout [ 180.791566][T10099] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,sysvgroups,nomblk_io_submit,bsddf,dioread_nolock,jqfmt=vfsv0,debug,errors=continue,,errors=continue. Quota mode: writeback. [ 180.797384][ T2290] Bluetooth: hci2: command 0x0406 tx timeout [ 180.842541][ T4293] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 180.888622][T10105] FAT-fs (loop3): Directory bread(block 64) failed [ 180.908172][T10105] FAT-fs (loop3): Directory bread(block 65) failed [ 180.925931][T10105] FAT-fs (loop3): Directory bread(block 66) failed [ 180.935731][T10113] loop2: detected capacity change from 0 to 128 [ 180.944884][T10105] FAT-fs (loop3): Directory bread(block 67) failed [ 180.951620][T10105] FAT-fs (loop3): Directory bread(block 68) failed [ 180.958370][T10105] FAT-fs (loop3): Directory bread(block 69) failed [ 180.964999][T10105] FAT-fs (loop3): Directory bread(block 70) failed [ 180.971969][T10105] FAT-fs (loop3): Directory bread(block 71) failed [ 180.979932][T10105] FAT-fs (loop3): Directory bread(block 72) failed [ 180.987183][T10105] FAT-fs (loop3): Directory bread(block 73) failed [ 181.057090][T10113] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 181.058204][ T2290] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 181.092919][T10113] System zones: 1-3, 19-19, 35-36 [ 181.099631][T10113] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,,errors=continue. Quota mode: none. [ 181.111312][T10113] ext4 filesystem being mounted at /565/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 181.221079][ T4293] usb 2-1: config index 0 descriptor too short (expected 29, got 18) [ 181.238604][ T4293] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 181.268198][ T4293] usb 2-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 181.298752][ T4293] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.339255][ T4293] usb 2-1: config 0 descriptor?? [ 181.383872][T10126] loop4: detected capacity change from 0 to 47 [ 181.458282][ T2290] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.479974][ T2290] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 181.490125][ T2290] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 4, skipping [ 181.528408][ T2290] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 181.622257][ T4293] usb 2-1: string descriptor 0 read error: -71 [ 181.628844][ T6194] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 181.638953][ T2290] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 181.646857][ T4293] ldusb 2-1:0.0: Interrupt in endpoint not found [ 181.665653][ T4293] usb 2-1: USB disconnect, device number 11 [ 181.668173][ T2290] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 181.700112][ T2290] usb 1-1: SerialNumber: syz [ 181.790794][T10144] netlink: 736 bytes leftover after parsing attributes in process `syz.3.2722'. [ 181.828084][ T4841] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 182.000853][ T2290] usb 1-1: 0:2 : does not exist [ 182.011266][ T2290] usb 1-1: unit 5 not found! [ 182.044742][ T2290] usb 1-1: USB disconnect, device number 14 [ 182.068447][ T4841] usb 5-1: Using ep0 maxpacket: 16 [ 182.168508][ T6194] usb 3-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.05 [ 182.177613][ T6194] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.188764][ T4841] usb 5-1: config 1 has an invalid descriptor of length 60, skipping remainder of the config [ 182.199682][ T4841] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 182.218311][ T6194] usb 3-1: Product: syz [ 182.222505][ T6194] usb 3-1: Manufacturer: syz [ 182.227156][ T6194] usb 3-1: SerialNumber: syz [ 182.252749][ T6194] usb 3-1: config 0 descriptor?? [ 182.268865][T10163] kernel read not supported for file /!selinuxwk1ÐmÃ9Éž*T“ýâ‘ïª#j—¼ÞYÌÅmVËvm(pÉ-QZ#Ò{„¿ (pid: 10163 comm: syz.3.2731) [ 182.310391][ T6194] go7007: probe of 3-1:0.0 failed with error -12 [ 182.324963][ T4841] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 182.340409][ T4291] udevd[4291]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 182.357332][ T4841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 182.381028][ T4841] usb 5-1: SerialNumber: syz [ 182.431815][ T4841] usb 5-1: 0:2 : does not exist [ 182.514568][T10170] loop3: detected capacity change from 0 to 4096 [ 182.530612][ T6194] usb 3-1: USB disconnect, device number 15 [ 182.579684][T10170] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 182.593436][T10170] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 182.608250][ T7] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 182.643883][ T2290] usb 5-1: USB disconnect, device number 13 [ 182.648316][T10170] ntfs: volume version 3.1. [ 182.677689][T10170] ntfs: (device loop3): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4). Marking corrupt inode and base inode 0x1a as bad. Run chkdsk. [ 182.714809][T10170] ntfs: (device loop3): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute. [ 182.726056][T10170] ntfs: (device loop3): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 182.760409][T10170] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Found already allocated name in phase 2. Please run chkdsk and if that doesn't find any errors please report you saw this message to linux-ntfs-dev@lists.sourceforge.net. [ 182.805150][T10176] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2738'. [ 182.806329][T10170] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 182.827286][T10170] ntfs: (device loop3): ntfs_lookup(): ntfs_lookup_ino_by_name() failed with error code 5. [ 182.844161][T10176] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 183.040410][T10186] IPv6: sit1: Disabled Multicast RS [ 183.212329][ T7] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 183.228904][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.237042][ T7] usb 2-1: Product: syz [ 183.288046][ T7] usb 2-1: Manufacturer: syz [ 183.302974][ T7] usb 2-1: SerialNumber: syz [ 183.323120][ T7] usb 2-1: config 0 descriptor?? [ 183.390188][ T7] ch341 2-1:0.0: ch341-uart converter detected [ 183.436023][T10210] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2755'. [ 183.456832][T10206] block device autoloading is deprecated and will be removed. [ 183.518251][ T2290] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 183.612053][T10217] netlink: 'syz.0.2759': attribute type 1 has an invalid length. [ 183.632505][T10217] netlink: 'syz.0.2759': attribute type 2 has an invalid length. [ 183.663309][T10217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2759'. [ 183.773099][T10228] ksmbd: Unknown IPC event: 10, ignore. [ 183.812409][ T2290] usb 4-1: too many configurations: 129, using maximum allowed: 8 [ 183.820361][ T7] usb 2-1: failed to send control message: -71 [ 183.826592][ T7] ch341-uart: probe of ttyUSB0 failed with error -71 [ 183.857013][T10230] netlink: 'syz.2.2766': attribute type 1 has an invalid length. [ 183.860873][ T7] usb 2-1: USB disconnect, device number 12 [ 183.904213][ T7] ch341 2-1:0.0: device disconnected [ 183.938353][ T2290] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 183.979751][ T2290] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 14336, setting to 64 [ 184.068324][ T2290] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 184.096040][T10239] loop2: detected capacity change from 0 to 2048 [ 184.102566][ T2290] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 14336, setting to 64 [ 184.180326][T10239] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 184.198268][ T2290] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 184.230337][ T2290] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 14336, setting to 64 [ 184.348195][ T2290] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 184.386743][ T2290] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 14336, setting to 64 [ 184.541994][ T2290] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 184.577959][ T2290] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 14336, setting to 64 [ 184.718396][ T2290] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 184.735122][T10278] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 184.749908][ T2290] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 14336, setting to 64 [ 184.785571][T10268] loop4: detected capacity change from 0 to 8192 [ 184.843422][T10268] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 184.867206][T10268] REISERFS (device loop4): using ordered data mode [ 184.875557][T10268] reiserfs: using flush barriers [ 184.899941][T10268] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 184.916490][ T2290] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 184.919242][T10268] REISERFS (device loop4): checking transaction log (loop4) [ 184.927865][ T2290] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 14336, setting to 64 [ 184.998315][T10268] REISERFS (device loop4): Using r5 hash to sort names [ 185.009095][T10268] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 185.028209][ T2290] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 185.044568][ T2290] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 14336, setting to 64 [ 185.114465][T10268] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 185.186830][T10297] netlink: 'syz.0.2798': attribute type 21 has an invalid length. [ 185.195937][T10300] netlink: 'syz.1.2800': attribute type 1 has an invalid length. [ 185.231010][T10300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2800'. [ 185.233787][T10297] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2798'. [ 185.258307][ T2290] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 185.275220][ T2290] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 185.322457][ T2290] usb 4-1: Product: syz [ 185.329234][T10303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2801'. [ 185.375544][T10305] netlink: 'syz.1.2803': attribute type 1 has an invalid length. [ 185.379802][ T2290] usb 4-1: Manufacturer: syz [ 185.408037][ T2290] usb 4-1: SerialNumber: syz [ 185.458359][ T2290] usb 4-1: config 0 descriptor?? [ 185.479889][T10312] netlink: 'syz.2.2807': attribute type 6 has an invalid length. [ 185.527378][ T2290] hub 4-1:0.0: Invalid hub with more than one config or interface [ 185.547159][T10313] netlink: 'syz.0.2804': attribute type 10 has an invalid length. [ 185.576392][ T2290] hub: probe of 4-1:0.0 failed with error -22 [ 185.590427][T10313] netlink: 'syz.0.2804': attribute type 10 has an invalid length. [ 185.609831][ T2290] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input15 [ 185.888586][T10337] loop4: detected capacity change from 0 to 256 [ 185.888883][ T6194] usb 4-1: USB disconnect, device number 13 [ 185.942866][T10337] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 185.984370][T10337] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 186.031330][T10337] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 186.371033][T10358] block device autoloading is deprecated and will be removed. [ 186.387069][T10364] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2830'. [ 186.522245][T10372] overlayfs: missing 'lowerdir' [ 187.035047][T10404] loop3: detected capacity change from 0 to 2048 [ 187.095622][T10404] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 187.158409][T10415] netlink: 'syz.1.2855': attribute type 6 has an invalid length. [ 187.198015][T10415] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2855'. [ 187.534523][T10443] loop3: detected capacity change from 0 to 4096 [ 187.634984][T10443] NILFS (loop3): mounting unchecked fs [ 187.635088][T10443] NILFS (loop3): recovery required for readonly filesystem [ 187.635102][T10443] NILFS (loop3): write access will be enabled during recovery [ 187.636994][T10443] NILFS (loop3): invalid segment: Checksum error in segment payload [ 187.637018][T10443] NILFS (loop3): trying rollback from an earlier position [ 187.653733][T10443] NILFS (loop3): norecovery option specified, skipping roll-forward recovery [ 187.675619][T10443] NILFS (loop3): unrecognized mount option "ÿÿ184467440737095516150xffffffffffffffff18446744073709551615±ñV?Œù³ßCp~'~8pٻ젌|ž^½Ö(cŸoö—ÈêM ) Çÿÿÿÿÿÿÿÿÿ" [ 187.821318][T10464] netlink: 'syz.4.2880': attribute type 32 has an invalid length. [ 188.028369][ T4229] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 188.288053][ T4229] usb 1-1: Using ep0 maxpacket: 8 [ 188.351071][T10488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2892'. [ 188.408318][ T4229] usb 1-1: config 1 has an invalid interface number: 128 but max is 1 [ 188.416626][ T4229] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.436164][ T4229] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 188.469331][ T4229] usb 1-1: config 1 has no interface number 0 [ 188.498095][ T4229] usb 1-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 188.733373][ T4229] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 188.744088][ T4229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.752557][ T4229] usb 1-1: Product: syz [ 188.756875][ T4229] usb 1-1: Manufacturer: syz [ 188.763188][ T4229] usb 1-1: SerialNumber: syz [ 188.834895][ T4229] cdc_wdm 1-1:1.128: skipping garbage [ 188.842670][ T4229] cdc_wdm 1-1:1.128: invalid descriptor buffer length [ 188.855213][T10516] bond0: (slave bridge0): Error: Slave device does not support XDP [ 188.866311][ T4229] cdc_wdm: probe of 1-1:1.128 failed with error -22 [ 188.912531][T10519] netlink: 'syz.1.2906': attribute type 41 has an invalid length. [ 189.043848][ T4229] usb 1-1: USB disconnect, device number 15 [ 189.162884][T10532] /dev/loop0: Can't open blockdev [ 189.265839][T10538] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2916'. [ 189.482392][T10548] netlink: 'syz.4.2922': attribute type 10 has an invalid length. [ 189.524780][T10548] team0: Port device macvlan1 added [ 189.695547][T10560] loop4: detected capacity change from 0 to 512 [ 189.760121][T10565] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2930'. [ 189.784694][T10551] loop2: detected capacity change from 0 to 8192 [ 189.803808][T10565] unsupported nlmsg_type 40 [ 189.844346][T10560] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 189.866150][T10560] ext4 filesystem being mounted at /527/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.898081][T10551] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 189.909058][T10551] REISERFS (device loop2): using ordered data mode [ 189.915586][T10551] reiserfs: using flush barriers [ 189.924590][T10551] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 189.982991][T10551] REISERFS (device loop2): checking transaction log (loop2) [ 189.999565][T10560] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 190.065575][T10551] REISERFS (device loop2): Using r5 hash to sort names [ 190.085672][T10551] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 190.109483][T10589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2939'. [ 190.338675][T10601] loop1: detected capacity change from 0 to 128 [ 190.387747][T10607] netlink: 'syz.0.2950': attribute type 1 has an invalid length. [ 190.406519][T10607] netlink: 'syz.0.2950': attribute type 3 has an invalid length. [ 190.424831][T10607] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2950'. [ 190.464468][T10601] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 190.492649][T10601] FAT-fs (loop1): Filesystem has been set read-only [ 190.540096][T10601] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 190.578198][T10601] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 190.846560][T10637] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2965'. [ 191.118987][ T4229] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 191.288021][ T7] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 191.653749][T10669] bond0: (slave macvlan0): Error: Slave device does not support XDP [ 191.670566][ T7] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x73, skipping [ 191.698301][ T4229] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 191.707556][ T4229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.721691][ T4229] usb 1-1: Product: syz [ 191.725886][ T4229] usb 1-1: Manufacturer: syz [ 191.734866][ T4229] usb 1-1: SerialNumber: syz [ 191.798955][ T4229] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 191.916031][ T7] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 191.932824][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.964018][T10686] loop2: detected capacity change from 0 to 8 [ 191.971116][ T7] usb 5-1: Product: syz [ 191.981667][ T7] usb 5-1: Manufacturer: syz [ 191.986488][ T7] usb 5-1: SerialNumber: syz [ 191.999712][ T7] usb 5-1: config 0 descriptor?? [ 192.032799][T10686] SQUASHFS error: Unknown inode type 0 in squashfs_iget! [ 192.042419][ T7] pegasus_notetaker 5-1:0.0: Invalid number of endpoints [ 192.064429][ T7] pegasus_notetaker: probe of 5-1:0.0 failed with error -22 [ 192.075176][T10689] loop3: detected capacity change from 0 to 512 [ 192.187554][T10689] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 192.211272][T10689] EXT4-fs (loop3): Remounting filesystem read-only [ 192.222475][T10689] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2991: invalid indirect mapped block 4278190080 (level 0) [ 192.245159][ T2290] usb 5-1: USB disconnect, device number 14 [ 192.269083][T10689] EXT4-fs (loop3): Remounting filesystem read-only [ 192.275626][T10689] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2991: invalid indirect mapped block 1 (level 1) [ 192.306051][T10689] EXT4-fs (loop3): Remounting filesystem read-only [ 192.338995][T10689] EXT4-fs (loop3): 1 truncate cleaned up [ 192.345755][T10689] EXT4-fs (loop3): mounted filesystem without journal. Opts: abort,errors=continue,inode_readahead_blks=0x0000000000000040,errors=remount-ro,barrier=0x0000000000001000,resgid=0x0000000000000000,nolazytime,noquota,auto_da_alloc=0x0000000000000006,data=journal,init_itable=0x000000000000. Quota mode: none. [ 192.399363][T10689] EXT4-fs error (device loop3): ext4_lookup:1850: inode #2: comm syz.3.2991: bad inode number: 1 [ 192.410674][ T7] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 192.433707][T10689] EXT4-fs (loop3): Remounting filesystem read-only [ 192.560227][T10703] netlink: 'syz.2.2997': attribute type 75 has an invalid length. [ 192.575400][ T4229] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 192.878660][ T7] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 192.892734][ T7] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 192.904392][ T7] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 192.914838][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.968453][T10693] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 193.012919][ T4236] usb 1-1: USB disconnect, device number 16 [ 193.078037][ T6187] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 193.433928][ T7] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 193.439494][ T6187] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 193.446759][ T7] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input17 [ 193.468586][ T6187] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 193.489055][ T7] usb 2-1: USB disconnect, device number 13 [ 193.508003][ C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 193.528125][ T6194] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 193.630472][ T4229] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 193.638194][ T6187] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 193.647270][ T6187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.650945][ T4229] ath9k_htc: Failed to initialize the device [ 193.667975][ T6187] usb 5-1: Product: syz [ 193.688691][ T4236] usb 1-1: ath9k_htc: USB layer deinitialized [ 193.695741][ T6187] usb 5-1: Manufacturer: syz [ 193.706226][ T6187] usb 5-1: SerialNumber: syz [ 193.739848][ T6187] usb 5-1: config 0 descriptor?? [ 193.768105][ T6194] usb 4-1: Using ep0 maxpacket: 32 [ 193.780899][ T6187] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input18 [ 193.894088][T10771] binder: Bad value for 'max' [ 193.968976][ T6194] usb 4-1: config 3 has an invalid interface number: 253 but max is 0 [ 193.983700][ T6194] usb 4-1: config 3 has no interface number 0 [ 193.990727][ T6194] usb 4-1: config 3 interface 253 has no altsetting 0 [ 194.008300][ T4840] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 194.022424][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.028779][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.044865][ T4841] usb 5-1: USB disconnect, device number 15 [ 194.124300][T10779] netlink: 'syz.0.3034': attribute type 32 has an invalid length. [ 194.152058][T10781] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3035'. [ 194.159028][ T6194] usb 4-1: New USB device found, idVendor=12d1, idProduct=1437, bcdDevice= 0.00 [ 194.172277][T10781] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3035'. [ 194.179090][ T6194] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.220662][ T6194] usb 4-1: Product: syz [ 194.243333][ T6194] usb 4-1: Manufacturer: syz [ 194.248129][ T4840] usb 3-1: Using ep0 maxpacket: 32 [ 194.256409][ T6194] usb 4-1: SerialNumber: syz [ 194.373516][ T4840] usb 3-1: config 0 has too many interfaces: 195, using maximum allowed: 32 [ 194.402840][ T4840] usb 3-1: config 0 has an invalid interface number: 196 but max is 194 [ 194.414069][T10793] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 194.431481][ T4840] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 195 [ 194.446152][ T4840] usb 3-1: config 0 has no interface number 0 [ 194.452805][ T4840] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 194.473423][ T4840] usb 3-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 194.515587][ T4840] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 194.529096][ T4840] usb 3-1: config 0 interface 196 has no altsetting 0 [ 194.588711][ T6194] usb-storage 4-1:3.253: USB Mass Storage device detected [ 194.676734][ T6194] usb 4-1: USB disconnect, device number 14 [ 194.698354][ T4840] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 194.707451][ T4840] usb 3-1: New USB device strings: Mfr=72, Product=223, SerialNumber=3 [ 194.747445][ T4840] usb 3-1: Product: syz [ 194.752400][ T4840] usb 3-1: Manufacturer: syz [ 194.757152][ T4840] usb 3-1: SerialNumber: syz [ 194.771547][ T4840] usb 3-1: config 0 descriptor?? [ 194.788265][T10763] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 195.006557][T10820] loop1: detected capacity change from 0 to 2048 [ 195.056673][T10820] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 195.068223][ T4840] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 195.096247][ T4840] ipheth: probe of 3-1:0.196 failed with error -71 [ 195.162031][ T4840] usb 3-1: USB disconnect, device number 16 [ 195.493836][T10838] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3063'. [ 195.787364][T10854] loop2: detected capacity change from 0 to 2048 [ 195.804711][T10857] loop3: detected capacity change from 0 to 256 [ 195.833324][T10855] device wlan0 entered promiscuous mode [ 195.901348][T10857] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010895, chksum : 0x816c887a, utbl_chksum : 0xe619d30d) [ 195.988120][T10854] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 196.018147][T10854] ext4 filesystem being mounted at /639/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.096532][T10854] fscrypt (loop2, inode 14): Error -61 getting encryption context [ 196.238889][T10876] loop1: detected capacity change from 0 to 4096 [ 196.968081][T10876] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 197.156684][T10890] netlink: 'syz.3.3087': attribute type 28 has an invalid length. [ 197.166523][T10876] ntfs3: loop1: failed to convert "c46c" to cp437 [ 197.168239][T10890] netlink: 'syz.3.3087': attribute type 29 has an invalid length. [ 197.189883][T10893] device wlan0 entered promiscuous mode [ 197.228154][T10890] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3087'. [ 197.380525][T10904] IPv6: ADDRCONF(NETDEV_CHANGE): bridge3: link becomes ready [ 197.415934][T10902] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3095'. [ 197.433644][T10908] loop2: detected capacity change from 0 to 1024 [ 197.448688][T10902] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3095'. [ 197.457902][T10902] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3095'. [ 197.565193][T10910] device bond4 entered promiscuous mode [ 197.603742][T10910] 8021q: adding VLAN 0 to HW filter on device bond4 [ 197.615167][T10908] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,nobarrier,errors=remount-ro,. Quota mode: writeback. [ 197.739885][T10908] EXT4-fs error (device loop2): ext4_get_first_dir_block:3608: inode #11: comm syz.2.3097: directory missing '.' [ 197.764345][T10908] EXT4-fs (loop2): Remounting filesystem read-only [ 197.823241][ T4236] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 197.862291][T10939] x_tables: unsorted underflow at hook 2 [ 198.027787][T10951] loop4: detected capacity change from 0 to 512 [ 198.052031][T10957] loop3: detected capacity change from 0 to 256 [ 198.118374][ T4236] usb 1-1: Using ep0 maxpacket: 16 [ 198.180624][T10951] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,i_version,,errors=continue. Quota mode: writeback. [ 198.191803][T10957] FAT-fs (loop3): Directory bread(block 64) failed [ 198.214610][T10951] ext4 filesystem being mounted at /553/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.218135][T10957] FAT-fs (loop3): Directory bread(block 65) failed [ 198.268709][T10951] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #12: comm syz.4.3116: invalid size [ 198.279548][ T4236] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.335152][T10957] FAT-fs (loop3): Directory bread(block 66) failed [ 198.342926][ T4236] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 198.347580][T10957] FAT-fs (loop3): Directory bread(block 67) failed [ 198.367113][T10957] FAT-fs (loop3): Directory bread(block 68) failed [ 198.374833][T10957] FAT-fs (loop3): Directory bread(block 69) failed [ 198.381988][T10957] FAT-fs (loop3): Directory bread(block 70) failed [ 198.389899][T10957] FAT-fs (loop3): Directory bread(block 71) failed [ 198.431906][T10957] FAT-fs (loop3): Directory bread(block 72) failed [ 198.467624][T10957] FAT-fs (loop3): Directory bread(block 73) failed [ 198.580529][T10972] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3126'. [ 198.592350][ T4236] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 198.624567][ T4236] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.668320][T10972] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3126'. [ 198.683512][ T4236] usb 1-1: Product: syz [ 198.687710][ T4236] usb 1-1: Manufacturer: syz [ 198.696215][T10977] netlink: 'syz.1.3127': attribute type 2 has an invalid length. [ 198.724476][ T4236] usb 1-1: SerialNumber: syz [ 199.025735][T10989] loop3: detected capacity change from 0 to 2048 [ 199.085854][T10989] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 199.100417][ T4236] usb 1-1: 0:2 : does not exist [ 199.105436][ T4236] usb 1-1: unit 9 not found! [ 199.146919][T10989] UDF-fs: error (device loop3): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 199.188256][T10989] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 1376) has entry past directory size at pos 232 [ 199.348465][ T4236] usb 1-1: 4:0: cannot get min/max values for control 2 (id 4) [ 199.357227][T11011] loop2: detected capacity change from 0 to 256 [ 199.415218][ T4236] usb 1-1: USB disconnect, device number 17 [ 199.485000][T11011] FAT-fs (loop2): Directory bread(block 64) failed [ 199.503096][T11019] netlink: 'syz.4.3148': attribute type 3 has an invalid length. [ 199.504864][T11011] FAT-fs (loop2): Directory bread(block 65) failed [ 199.519844][T11011] FAT-fs (loop2): Directory bread(block 66) failed [ 199.526424][T11011] FAT-fs (loop2): Directory bread(block 67) failed [ 199.534573][T11011] FAT-fs (loop2): Directory bread(block 68) failed [ 199.541546][T11011] FAT-fs (loop2): Directory bread(block 69) failed [ 199.569424][T11011] FAT-fs (loop2): Directory bread(block 70) failed [ 199.589626][T11011] FAT-fs (loop2): Directory bread(block 71) failed [ 199.628925][ T4291] udevd[4291]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 199.635426][T11011] FAT-fs (loop2): Directory bread(block 72) failed [ 199.714501][T11011] FAT-fs (loop2): Directory bread(block 73) failed [ 199.968163][ T6187] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 200.096660][T11049] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3163'. [ 200.108726][ T4841] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 200.252699][ T6187] usb 4-1: Using ep0 maxpacket: 32 [ 200.378364][ T6187] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 200.386993][ T6187] usb 4-1: config 0 has no interface number 0 [ 200.424962][ T6187] usb 4-1: config 0 interface 196 altsetting 1 endpoint 0x82 has an invalid bInterval 242, changing to 11 [ 200.448872][ T6187] usb 4-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid maxpacket 24941, setting to 1024 [ 200.508239][ T4841] usb 2-1: config 5 has an invalid interface number: 3 but max is 0 [ 200.516305][ T4841] usb 2-1: config 5 has no interface number 0 [ 200.531551][ T6187] usb 4-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 200.575695][ T6187] usb 4-1: config 0 interface 196 has no altsetting 0 [ 200.708411][ T4841] usb 2-1: New USB device found, idVendor=09fb, idProduct=602a, bcdDevice=fd.36 [ 200.717530][ T4841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.738580][ T6187] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 200.767041][ T6187] usb 4-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 200.775706][ T4841] usb 2-1: Product: syz [ 200.785510][T11085] loop2: detected capacity change from 0 to 512 [ 200.792079][ T4841] usb 2-1: Manufacturer: syz [ 200.796705][ T4841] usb 2-1: SerialNumber: syz [ 200.820343][ T6187] usb 4-1: Product: syz [ 200.824531][ T6187] usb 4-1: Manufacturer: syz [ 200.831635][T11085] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 200.841060][ T6187] usb 4-1: SerialNumber: syz [ 200.851608][ T6187] usb 4-1: config 0 descriptor?? [ 200.898947][ T4841] ftdi_sio 2-1:5.3: FTDI USB Serial Device converter detected [ 200.907154][ T4841] usb 2-1: Detected FT-X [ 200.969362][T11085] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 201.017318][T11085] Quota error (device loop2): write_blk: dquota write failed [ 201.026518][T11085] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 201.035978][T11085] Quota error (device loop2): write_blk: dquota write failed [ 201.046239][T11085] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 201.056885][T11085] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.3180: Failed to acquire dquot type 1 [ 201.078246][T11085] EXT4-fs (loop2): 1 truncate cleaned up [ 201.083933][T11085] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000002,noblock_validity,inode_readahead_blks=0x0000000000200000,resgid=0x0000000000000000,quota,quota,mb_optimize_scan=0x0000000000000001,sysvgroups,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 201.149571][ T6187] ipheth 4-1:0.196: Unable to find endpoints [ 201.168299][ T6187] usb 4-1: USB disconnect, device number 15 [ 201.183750][T11085] Quota error (device loop2): write_blk: dquota write failed [ 201.192245][T11085] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 201.215591][T11085] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.3180: Failed to acquire dquot type 1 [ 201.348783][ T4841] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 201.388133][ T4841] ftdi_sio 2-1:5.3: GPIO initialisation failed: -71 [ 201.406859][ T4841] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 201.456585][ T4841] usb 2-1: USB disconnect, device number 14 [ 201.497655][ T4841] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 201.553720][ T4841] ftdi_sio 2-1:5.3: device disconnected [ 202.581405][T11189] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 202.726938][T11200] loop4: detected capacity change from 0 to 2048 [ 202.793996][T11200] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=26504, location=26504 [ 202.810161][T11200] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 203.049821][ T4236] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 203.319332][T11236] netlink: 'syz.2.3253': attribute type 2 has an invalid length. [ 203.328060][ T4236] usb 1-1: Using ep0 maxpacket: 8 [ 203.361276][T11239] loop4: detected capacity change from 0 to 256 [ 203.402865][T11244] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3257'. [ 203.413979][T11244] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3257'. [ 203.478190][ T4236] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 203.508863][ T4236] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 203.533011][T11250] capability: warning: `syz.1.3260' uses 32-bit capabilities (legacy support in use) [ 203.551529][ T4236] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 203.600385][T11256] kAFS: No cell specified [ 203.660364][T11259] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 203.735773][T11259] exFAT-fs (nullb0): invalid boot record signature [ 203.758320][ T4236] usb 1-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=f6.82 [ 203.767448][ T4236] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.780077][T11265] loop4: detected capacity change from 0 to 128 [ 203.795169][T11259] exFAT-fs (nullb0): failed to read boot sector [ 203.801945][T11259] exFAT-fs (nullb0): failed to recognize exfat type [ 203.816328][ T4236] usb 1-1: Product: syz [ 203.821368][ T4236] usb 1-1: Manufacturer: syz [ 203.826005][ T4236] usb 1-1: SerialNumber: syz [ 203.863248][T11265] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 203.870335][ T4236] usb 1-1: config 0 descriptor?? [ 203.939367][T11265] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 204.028173][ T4229] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 204.151977][ T4236] usb 1-1: USB disconnect, device number 18 [ 204.307968][ T4229] usb 2-1: Using ep0 maxpacket: 32 [ 204.320476][T11294] netlink: 'syz.4.3282': attribute type 2 has an invalid length. [ 204.338270][T11294] netlink: 'syz.4.3282': attribute type 8 has an invalid length. [ 204.369309][T11294] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3282'. [ 204.478212][ T4229] usb 2-1: config 1 interface 0 altsetting 16 bulk endpoint 0x1 has invalid maxpacket 8 [ 204.493047][ T4229] usb 2-1: config 1 interface 0 has no altsetting 0 [ 204.726088][ T4229] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 204.745581][T11318] ax25_connect(): syz.0.3294 uses autobind, please contact jreuter@yaina.de [ 204.767964][ T4229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.775981][ T4229] usb 2-1: Product: syz [ 204.798353][ T4229] usb 2-1: Manufacturer: syz [ 204.802979][ T4229] usb 2-1: SerialNumber: syz [ 204.868249][T11262] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 204.947430][T11316] loop4: detected capacity change from 0 to 4096 [ 205.022205][T11316] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 205.155626][T11316] ntfs3: loop4: failed to convert "c46c" to iso8859-4 [ 205.168918][ T4229] usb 2-1: USB disconnect, device number 15 [ 205.354027][T11347] syz.4.3308 (11347): drop_caches: 0 [ 205.568099][T11358] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3314'. [ 205.647791][T11362] AppArmor: change_hat: Invalid input '0x000000000000' [ 206.070982][T11395] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3333'. [ 206.247146][T11408] kAFS: unable to lookup cell ' [ 206.247146][T11408] $)-.ÌײfÍY¹Ç²a×ïÅ2sˆ [ 206.247146][T11408] ' [ 206.397563][T11416] loop2: detected capacity change from 0 to 1764 [ 206.451307][T11422] loop1: detected capacity change from 0 to 256 [ 206.675121][T11440] loop4: detected capacity change from 0 to 736 [ 206.764721][T11446] loop2: detected capacity change from 0 to 512 [ 207.007621][T11446] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 207.049421][T11446] ext4 filesystem being mounted at /699/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.349551][T11476] netlink: 184 bytes leftover after parsing attributes in process `syz.1.3370'. [ 207.788207][T11509] device xfrm0 entered promiscuous mode [ 208.316452][T11553] netlink: 'syz.1.3408': attribute type 1 has an invalid length. [ 208.442925][T11560] netlink: 748 bytes leftover after parsing attributes in process `syz.1.3413'. [ 208.678164][T11568] xt_TCPMSS: Only works on TCP SYN packets [ 208.788185][ T6187] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 208.798279][T11575] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3420'. [ 208.927690][T11582] loop3: detected capacity change from 0 to 256 [ 208.945591][T11580] netlink: 'syz.2.3423': attribute type 3 has an invalid length. [ 209.044841][T11580] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 209.057485][T11571] loop1: detected capacity change from 0 to 32768 [ 209.061021][ T6187] usb 1-1: Using ep0 maxpacket: 32 [ 209.145150][T11571] JBD2: Ignoring recovery information on journal [ 209.188203][ T6187] usb 1-1: config 0 has an invalid interface number: 238 but max is 0 [ 209.196426][ T6187] usb 1-1: config 0 has no interface number 0 [ 209.278297][T11571] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 209.414133][ T6187] usb 1-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=70.50 [ 209.433472][ T6187] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.455714][T11603] xt_TCPMSS: Only works on TCP SYN packets [ 209.466987][ T6187] usb 1-1: Product: syz [ 209.484115][ T6187] usb 1-1: Manufacturer: syz [ 209.494227][ T6187] usb 1-1: SerialNumber: syz [ 209.515113][ T6187] usb 1-1: config 0 descriptor?? [ 209.550989][ T4186] ocfs2: Unmounting device (7,1) on (node local) [ 209.565506][ T6187] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 209.586313][ T6187] gspca_stv06xx: st6422 sensor detected [ 209.747377][T11618] vivid-001: ================= START STATUS ================= [ 209.791726][T11618] vivid-001: Generate PTS: true [ 209.818523][T11618] vivid-001: Generate SCR: true [ 209.844395][T11618] tpg source WxH: 720x576 (HSV) [ 209.860779][T11618] tpg field: 4 [ 209.882169][T11618] tpg crop: 64x64@0x0 [ 209.886316][T11618] tpg compose: 16x16@0x0 [ 209.906389][T11618] tpg colorspace: 1 [ 209.918124][T11618] tpg transfer function: 0/1 [ 209.922740][T11618] tpg HSV encoding: 0/0 [ 209.980767][T11618] tpg quantization: 0/1 [ 210.001779][T11618] tpg RGB range: 0/2 [ 210.005726][T11618] vivid-001: ================== END STATUS ================== [ 210.096287][T11632] loop4: detected capacity change from 0 to 16 [ 210.120757][ T6187] STV06xx: probe of 1-1:0.238 failed with error -71 [ 210.184346][T11632] erofs: (device loop4): mounted with root inode @ nid 36. [ 210.224218][ T6187] usb 1-1: unknown interface protocol 0x9, assuming v1 [ 210.232336][ T6187] usb 1-1: cannot find UAC_HEADER [ 210.317116][ T6187] snd-usb-audio: probe of 1-1:0.238 failed with error -22 [ 210.345047][ T6187] usb 1-1: USB disconnect, device number 19 [ 210.453084][T11648] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 210.568999][ T4291] udevd[4291]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.238/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 210.659950][T11658] loop4: detected capacity change from 0 to 1024 [ 210.675802][T11628] loop2: detected capacity change from 0 to 32768 [ 210.703697][T11658] EXT4-fs (loop4): Ignoring removed bh option [ 210.762035][T11658] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 2: comm syz.4.3461: lblock 2 mapped to illegal pblock 2 (length 1) [ 210.811810][T11658] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 210.827390][T11658] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 48: comm syz.4.3461: lblock 0 mapped to illegal pblock 48 (length 1) [ 210.828322][ T6194] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 210.855502][T11658] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 210.860000][T11628] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 210.868218][T11658] EXT4-fs error (device loop4): ext4_acquire_dquot:6234: comm syz.4.3461: Failed to acquire dquot type 0 [ 210.901329][T11658] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 210.928160][T11658] EXT4-fs error (device loop4): ext4_evict_inode:282: inode #11: comm syz.4.3461: mark_inode_dirty error [ 210.944739][T11628] (syz.2.3446,11628,0):ocfs2_find_entry:1075 ERROR: status = -117 [ 210.953221][T11658] EXT4-fs warning (device loop4): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 210.964297][T11628] (syz.2.3446,11628,0):ocfs2_find_entry:1075 ERROR: status = -117 [ 210.972396][T11658] EXT4-fs (loop4): 1 orphan inode deleted [ 210.982030][T11628] (syz.2.3446,11628,0):ocfs2_symlink:2065 ERROR: status = -117 [ 210.990151][ T144] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 211.013935][T11658] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,noblock_validity,bh,nodiscard,nouid32,barrier,,errors=continue. Quota mode: none. [ 211.084061][ T144] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 211.117706][ T144] EXT4-fs error (device loop4): ext4_release_dquot:6270: comm kworker/u4:1: Failed to release dquot type 0 [ 211.140304][ T4196] ocfs2: Unmounting device (7,2) on (node local) [ 211.198105][ T6194] usb 2-1: Using ep0 maxpacket: 16 [ 211.208749][T11676] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3468'. [ 211.299158][ T1230] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 211.339823][ T1230] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 211.378353][ T1230] EXT4-fs error (device loop4): ext4_release_dquot:6270: comm kworker/u4:4: Failed to release dquot type 0 [ 211.407107][T11684] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 211.426980][ T4193] EXT4-fs error (device loop4): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 211.459498][ T4193] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 211.478272][ T6194] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 211.497095][ T4193] EXT4-fs error (device loop4): ext4_quota_off:6540: inode #3: comm syz-executor: mark_inode_dirty error [ 211.497768][ T6194] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.532784][ T6194] usb 2-1: Product: syz [ 211.536972][ T6194] usb 2-1: Manufacturer: syz [ 211.581576][ T6194] usb 2-1: SerialNumber: syz [ 211.595816][ T6194] usb 2-1: config 0 descriptor?? [ 211.601859][T11688] overlayfs: unrecognized mount option "\" or missing value [ 211.868230][ T6194] speedtch 2-1:0.0: speedtch_bind: wrong device class 68 [ 211.881742][ T6194] speedtch 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 212.092652][ T6194] usb 2-1: USB disconnect, device number 16 [ 212.142942][T11724] netdevsim netdevsim3: Firmware load for '..' refused, path contains '..' component [ 212.314921][T11740] loop4: detected capacity change from 0 to 128 [ 212.331588][T11738] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 212.351429][ T26] audit: type=1400 audit(1771474446.678:5): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=11741 comm="syz.0.3501" [ 212.414385][T11740] affs: No valid root block on device loop4 [ 212.464911][T11748] cgroup: Invalid name [ 212.935726][T11786] binder: 11784:11786 unknown command 0 [ 212.967949][T11786] binder: 11784:11786 ioctl c0306201 200000000640 returned -22 [ 213.021899][T11794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3525'. [ 213.775115][T11862] netlink: 'syz.4.3561': attribute type 3 has an invalid length. [ 213.818219][T11862] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3561'. [ 213.975772][T11880] netlink: 'syz.0.3570': attribute type 16 has an invalid length. [ 214.002320][T11880] netlink: 'syz.0.3570': attribute type 3 has an invalid length. [ 214.032558][T11880] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3570'. [ 214.140187][T11889] device bridge_slave_1 left promiscuous mode [ 214.146446][T11889] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.205527][T11889] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 214.287121][T11896] netdevsim netdevsim0: Direct firmware load for / [ 214.287121][T11896] failed with error -2 [ 214.368517][T11896] netdevsim netdevsim0: Falling back to sysfs fallback for: / [ 214.368517][T11896] [ 214.524658][T11902] loop1: detected capacity change from 0 to 512 [ 214.661479][T11902] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 214.703814][T11902] ext4 filesystem being mounted at /718/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 215.234532][T11929] loop1: detected capacity change from 0 to 64 [ 215.531065][T11951] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3605'. [ 215.788128][ T6187] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 215.963989][T11986] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3618'. [ 216.158222][ T6187] usb 5-1: config 5 has an invalid interface number: 123 but max is 0 [ 216.176656][ T6187] usb 5-1: config 5 has no interface number 0 [ 216.211462][ T6187] usb 5-1: config 5 interface 123 has no altsetting 0 [ 216.388178][ T6187] usb 5-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 216.408004][ T6187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.442520][ T6187] usb 5-1: Product: syz [ 216.451317][T12020] comedi comedi4: bad chanlist[0]=0x00000010 chan=16 range length=2 [ 216.459764][ T6187] usb 5-1: Manufacturer: syz [ 216.464374][ T6187] usb 5-1: SerialNumber: syz [ 216.688049][ T4229] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 216.726391][T12038] xt_CT: You must specify a L4 protocol and not use inversions on it [ 216.779862][ T6187] comedi comedi5: driver 'ni6501' has successfully auto-configured 'ni6501'. [ 216.817429][ T6187] usb 5-1: USB disconnect, device number 16 [ 217.088323][ T4229] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.113911][ T4229] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 217.128388][ T4229] usb 3-1: config 1 has no interface number 0 [ 217.134639][ T4229] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 217.152821][ T4229] usb 3-1: config 1 interface 1 has no altsetting 0 [ 217.198200][ T4236] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 217.302288][T12071] loop4: detected capacity change from 0 to 1024 [ 217.318219][ T4840] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 217.348270][ T4229] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 217.364328][ T4229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.373227][ T4229] usb 3-1: Product: syz [ 217.377412][ T4229] usb 3-1: Manufacturer: syz [ 217.382221][T12071] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled [ 217.411945][T12071] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 217.424481][ T4229] usb 3-1: SerialNumber: syz [ 217.475680][T12071] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c02c, mo2=0103] [ 217.492937][T12071] System zones: 0-1, 3-36 [ 217.514474][T12071] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=./bus,delalloc,bsdgroups,debug,dioread_nolock,bsddf,abort,noauto_da_alloc,errors=remount-ro,mb_optimize_scan=0x0000000000000000,auto_da_alloc,auto_da_alloc,. Quota mode: writeback. [ 217.558082][ T4840] usb 4-1: Using ep0 maxpacket: 16 [ 217.678072][ T4840] usb 4-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 217.718007][ T4840] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 217.774057][ T4840] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 97, changing to 7 [ 217.802041][ T4840] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24929, setting to 1024 [ 217.818302][ T4236] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 217.833559][ T4236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.843394][ T4236] usb 2-1: Product: syz [ 217.847595][ T4236] usb 2-1: Manufacturer: syz [ 217.852661][ T4236] usb 2-1: SerialNumber: syz [ 217.872680][ T4840] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 217.918951][ T4236] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 217.954177][ T4229] usb 3-1: USB disconnect, device number 17 [ 217.999823][ T4840] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 218.039006][ T4840] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 218.047488][ T4840] usb 4-1: Manufacturer: syz [ 218.064291][ T4840] usb 4-1: config 0 descriptor?? [ 218.184890][T12101] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.3671'. [ 218.254717][T12101] syz.0.3671 (12101) used greatest stack depth: 16944 bytes left [ 218.360207][ T4840] usb 4-1: USB disconnect, device number 16 [ 218.535943][T12118] netlink: 'syz.2.3679': attribute type 10 has an invalid length. [ 218.548945][T12118] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3679'. [ 218.561799][T12118] batman_adv: batadv0: Adding interface: virt_wifi0 [ 218.569080][T12118] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.598226][ T4236] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 218.644766][T12118] batman_adv: batadv0: Interface activated: virt_wifi0 [ 218.707124][T12123] loop4: detected capacity change from 0 to 764 [ 218.842658][T12123] rock: directory entry would overflow storage [ 218.859848][T12123] rock: sig=0x4654, size=5, remaining=4 [ 219.017526][ T4840] usb 2-1: USB disconnect, device number 17 [ 219.071682][T12141] netlink: 'syz.3.3691': attribute type 1 has an invalid length. [ 219.242620][T12153] netlink: 'syz.0.3697': attribute type 49 has an invalid length. [ 219.357340][T12151] loop4: detected capacity change from 0 to 4096 [ 219.395878][T12161] device ipip0 entered promiscuous mode [ 219.530513][T12151] ntfs3: loop4: ino=5, "/" directory corrupted [ 219.578855][T12151] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 219.698019][ T4236] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 219.705071][ T4236] ath9k_htc: Failed to initialize the device [ 219.755922][ T4840] usb 2-1: ath9k_htc: USB layer deinitialized [ 219.763610][T12181] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3712'. [ 219.797483][T12181] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3712'. [ 219.882203][T12181] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3712'. [ 220.014562][T12198] netlink: 'syz.4.3721': attribute type 1 has an invalid length. [ 220.058117][T12198] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3721'. [ 220.388027][T12225] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3732'. [ 220.399488][T12223] device bridge2 entered promiscuous mode [ 220.444510][T12229] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3734'. [ 220.828121][ T7] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 220.890051][T12255] netlink: 'syz.1.3747': attribute type 3 has an invalid length. [ 220.934535][T12255] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3747'. [ 220.984475][T12262] xt_CT: You must specify a L4 protocol and not use inversions on it [ 221.043183][T12265] loop3: detected capacity change from 0 to 64 [ 221.078060][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 221.141559][T12265] hfs: unable to locate alternate MDB [ 221.148908][T12265] hfs: continuing without an alternate MDB [ 221.184135][T12265] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 221.248226][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.276057][ T7] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 221.308235][ T7] usb 3-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 221.349001][ T7] usb 3-1: config 0 interface 0 has no altsetting 1 [ 221.512404][T12296] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3766'. [ 221.549328][ T7] usb 3-1: New USB device found, idVendor=0582, idProduct=0033, bcdDevice=8e.57 [ 221.564988][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.588702][ T7] usb 3-1: Product: syz [ 221.612531][ T7] usb 3-1: Manufacturer: syz [ 221.627831][ T7] usb 3-1: SerialNumber: syz [ 221.686153][ T7] usb 3-1: config 0 descriptor?? [ 221.769235][ T7] snd-usb-audio: probe of 3-1:0.0 failed with error -2 [ 221.937532][ T7871] udevd[7871]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 221.976724][ T7] usb 3-1: USB disconnect, device number 18 [ 222.257825][T12293] loop1: detected capacity change from 0 to 32768 [ 222.288317][ T4229] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 222.375603][T12339] 9p: Unknown access argument Ø [ 222.421734][T12293] XFS (loop1): Mounting V5 Filesystem [ 222.558202][T12293] XFS (loop1): Ending clean mount [ 222.694545][ T4186] XFS (loop1): Unmounting Filesystem [ 222.718366][ T4229] usb 5-1: config 4 has an invalid interface number: 186 but max is 0 [ 222.726887][ T4229] usb 5-1: config 4 has no interface number 0 [ 222.746896][ T4229] usb 5-1: config 4 interface 186 has no altsetting 0 [ 222.787408][ T4229] usb 5-1: New USB device found, idVendor=0c26, idProduct=0020, bcdDevice=a6.ad [ 222.823941][ T4229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.148203][ T4229] usb 5-1: string descriptor 0 read error: -71 [ 223.183288][ T4229] usb 5-1: USB disconnect, device number 17 [ 223.338175][T12389] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3809'. [ 223.523325][T12400] netlink: 'syz.3.3815': attribute type 1 has an invalid length. [ 223.542588][T12400] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3815'. [ 223.713947][T12411] netlink: 'syz.4.3820': attribute type 10 has an invalid length. [ 223.793094][T12411] team0: Port device virt_wifi0 added [ 223.835717][T12419] netlink: 'syz.2.3824': attribute type 1 has an invalid length. [ 223.855159][T12413] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 224.294877][T12455] netlink: 'syz.2.3841': attribute type 21 has an invalid length. [ 224.528232][T12474] netlink: 'syz.0.3851': attribute type 21 has an invalid length. [ 224.536196][T12480] netlink: 'syz.1.3854': attribute type 13 has an invalid length. [ 224.735571][T12493] loop4: detected capacity change from 0 to 256 [ 224.763974][T12488] loop1: detected capacity change from 0 to 4096 [ 224.791742][T12493] exfat: Deprecated parameter 'utf8' [ 224.813357][T12493] exfat: Deprecated parameter 'namecase' [ 224.854018][T12493] exfat: Deprecated parameter 'namecase' [ 224.855662][T12488] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 224.897265][T12493] exfat: Deprecated parameter 'utf8' [ 224.918550][T12488] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 224.921567][T12493] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 224.953394][T12488] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 224.966573][T12506] device sit0 left promiscuous mode [ 224.976349][T12488] ntfs: volume version 3.1. [ 225.070687][ T4186] ntfs: (device loop1): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 225.091285][T12506] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 225.132577][T12506] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 225.204074][T12506] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 225.238067][T12510] __nla_validate_parse: 7 callbacks suppressed [ 225.238079][T12510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3870'. [ 225.523035][T12524] loop2: detected capacity change from 0 to 64 [ 225.958219][T12559] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 226.565548][T12595] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3910'. [ 226.904094][T12613] loop2: detected capacity change from 0 to 128 [ 227.021013][T12613] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 227.217719][T12590] loop4: detected capacity change from 0 to 32768 [ 227.325379][T12590] ERROR: (device loop4): diAllocAG: nfreeinos = 0, but iag on freelist [ 227.325379][T12590] [ 227.374223][T12590] ERROR: (device loop4): remounting filesystem as read-only [ 227.412207][T12590] ialloc: diAlloc returned -5! [ 227.637774][T12645] overlayfs: './file0' not a directory [ 227.764832][T12658] netlink: 'syz.1.3939': attribute type 3 has an invalid length. [ 228.204965][T12677] loop2: detected capacity change from 0 to 8192 [ 228.471007][T12710] device geneve3 entered promiscuous mode [ 228.722689][T12732] netlink: 'syz.0.3974': attribute type 10 has an invalid length. [ 229.711021][ T6194] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 229.866145][T12743] loop1: detected capacity change from 0 to 32768 [ 229.906311][T12743] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.3978 (12743) [ 229.967989][ T6194] usb 4-1: Using ep0 maxpacket: 32 [ 229.997329][T12743] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 230.032973][T12743] BTRFS info (device loop1): using free space tree [ 230.080068][T12743] BTRFS info (device loop1): has skinny extents [ 230.088759][ T6194] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 230.096910][ T6194] usb 4-1: config 0 has no interface number 0 [ 230.158921][T12815] overlayfs: conflicting options: userxattr,redirect_dir=off [ 230.275522][T12826] device bridge3 entered promiscuous mode [ 230.281722][ T6194] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 230.295851][ T6194] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.304316][ T6194] usb 4-1: Product: syz [ 230.309273][ T6194] usb 4-1: Manufacturer: syz [ 230.313899][ T6194] usb 4-1: SerialNumber: syz [ 230.335137][ T6194] usb 4-1: config 0 descriptor?? [ 230.363268][T12743] BTRFS info (device loop1): enabling ssd optimizations [ 230.608244][ T6194] radio-si470x 4-1:0.35: this is not a si470x device. [ 230.636175][T12855] loop2: detected capacity change from 0 to 512 [ 230.818250][ T6194] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 230.861786][T12855] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #11: comm syz.2.4027: ea_inode with extended attributes [ 230.888743][ T6194] usb 4-1: USB disconnect, device number 17 [ 230.967816][T12855] EXT4-fs (loop2): Remounting filesystem read-only [ 231.061889][T12855] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.4027: error while reading EA inode 11 err=-117 [ 231.075750][T12877] misc userio: The device must be registered before sending interrupts [ 231.122385][T12855] EXT4-fs (loop2): Remounting filesystem read-only [ 231.159689][T12855] EXT4-fs (loop2): 1 orphan inode deleted [ 231.178016][T12855] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000004c,errors=remount-ro,delalloc,journal_ioprio=0x0000000000000001,init_itable=0x0000000000008d55,. Quota mode: none. [ 232.040519][T12930] IPv6: NLM_F_CREATE should be specified when creating new route [ 232.066974][T12930] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4059'. [ 232.164283][T12940] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4065'. [ 232.838105][ T2290] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 232.868203][ T4229] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 233.084083][T13006] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4097'. [ 233.101349][T13006] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 233.138198][ T2290] usb 5-1: Using ep0 maxpacket: 16 [ 233.258421][ T4229] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 233.267794][ T2290] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 233.306072][ T2290] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.316954][ T4229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.329587][ T2290] usb 5-1: config 0 has no interface number 0 [ 233.338673][ T4229] usb 3-1: config 0 descriptor?? [ 233.430991][T13025] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 233.518210][ T2290] usb 5-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 233.537596][ T2290] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.570009][ T2290] usb 5-1: Product: syz [ 233.586063][ T2290] usb 5-1: Manufacturer: syz [ 233.595977][ T2290] usb 5-1: SerialNumber: syz [ 233.629458][ T2290] usb 5-1: config 0 descriptor?? [ 233.699941][ T2290] usb 5-1: Found UVC 0.00 device syz (046c:14e8) [ 233.716620][ T2290] usb 5-1: No valid video chain found. [ 233.819271][ T4229] hackrf 3-1:0.0: usb_control_msg() failed -71 request 0f [ 233.826466][ T4229] hackrf 3-1:0.0: Could not detect board [ 233.862681][ T4229] hackrf: probe of 3-1:0.0 failed with error -71 [ 233.879118][ T4229] usb 3-1: USB disconnect, device number 19 [ 233.917896][ T4236] usb 5-1: USB disconnect, device number 18 [ 234.096476][T13061] [U]  [ 234.193021][T13072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4129'. [ 234.349094][T13080] netlink: 'syz.3.4133': attribute type 4 has an invalid length. [ 234.356993][T13080] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4133'. [ 234.619759][T13101] netlink: 7 bytes leftover after parsing attributes in process `syz.4.4143'. [ 234.657373][T13101] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4143'. [ 234.698310][ T4236] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 235.006658][T13129] loop1: detected capacity change from 0 to 256 [ 235.103960][ T4236] usb 3-1: config 252 has an invalid interface number: 254 but max is 0 [ 235.121923][ T4236] usb 3-1: config 252 has no interface number 0 [ 235.143730][ T4236] usb 3-1: config 252 interface 254 altsetting 1 endpoint 0x6 has invalid wMaxPacketSize 0 [ 235.183310][ T4236] usb 3-1: config 252 interface 254 altsetting 1 bulk endpoint 0x6 has invalid maxpacket 0 [ 235.201155][ T4236] usb 3-1: config 252 interface 254 altsetting 1 endpoint 0x8 has invalid wMaxPacketSize 0 [ 235.227356][T13143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4165'. [ 235.242359][ T4236] usb 3-1: config 252 interface 254 has no altsetting 0 [ 235.266045][T13145] netlink: 'syz.4.4166': attribute type 13 has an invalid length. [ 235.376582][T13151] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4168'. [ 235.438336][ T4236] usb 3-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=46.29 [ 235.461341][ T4236] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.491766][ T4236] usb 3-1: Product: syz [ 235.499910][ T4236] usb 3-1: Manufacturer: syz [ 235.504536][ T4236] usb 3-1: SerialNumber: syz [ 235.580037][ T4236] bfusb: probe of 3-1:252.254 failed with error -5 [ 235.771011][T13172] loop3: detected capacity change from 0 to 256 [ 235.785460][ T6194] usb 3-1: USB disconnect, device number 20 [ 235.872497][T13172] FAT-fs (loop3): Directory bread(block 64) failed [ 235.872534][T13172] FAT-fs (loop3): Directory bread(block 65) failed [ 235.872599][T13172] FAT-fs (loop3): Directory bread(block 66) failed [ 235.872628][T13172] FAT-fs (loop3): Directory bread(block 67) failed [ 235.872690][T13172] FAT-fs (loop3): Directory bread(block 68) failed [ 235.872720][T13172] FAT-fs (loop3): Directory bread(block 69) failed [ 235.872782][T13172] FAT-fs (loop3): Directory bread(block 70) failed [ 235.872812][T13172] FAT-fs (loop3): Directory bread(block 71) failed [ 235.872874][T13172] FAT-fs (loop3): Directory bread(block 72) failed [ 235.872902][T13172] FAT-fs (loop3): Directory bread(block 73) failed [ 236.141285][T13191] openvswitch: netlink: Missing valid actions attribute. [ 236.141317][T13191] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.247850][T13195] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4190'. [ 236.634248][T13218] loop4: detected capacity change from 0 to 2048 [ 236.707659][T13218] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 236.740634][T13230] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 236.781190][T13232] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 236.847991][ T6194] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 236.946466][T13243] loop4: detected capacity change from 0 to 256 [ 236.999714][T13248] netlink: 'syz.3.4215': attribute type 4 has an invalid length. [ 237.143735][T13256] __nla_validate_parse: 2 callbacks suppressed [ 237.143750][T13256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4220'. [ 237.168552][T13256] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4220'. [ 237.192129][T13259] x_tables: duplicate underflow at hook 2 [ 237.228168][ T6187] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 237.251455][T13261] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4222'. [ 237.261093][ T6194] usb 2-1: unable to get BOS descriptor or descriptor too short [ 237.289212][T13265] netlink: 'syz.4.4224': attribute type 12 has an invalid length. [ 237.297663][T13265] netlink: 197276 bytes leftover after parsing attributes in process `syz.4.4224'. [ 237.308180][ T6194] usb 2-1: not running at top speed; connect to a high speed hub [ 237.398281][ T6194] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.440726][ T6194] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 237.598207][ T6187] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 237.632493][ T6187] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 237.648191][ T6194] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 237.667478][ T6194] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.679713][T13282] binder: 13280:13282 ioctl c018620b 0 returned -14 [ 237.693580][ T6194] usb 2-1: Product: syz [ 237.708294][ T6194] usb 2-1: Manufacturer: syz [ 237.712962][ T6194] usb 2-1: SerialNumber: syz [ 237.749756][T13285] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4234'. [ 237.769913][T13285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4234'. [ 237.782428][T13287] xt_socket: unknown flags 0x50 [ 237.792168][T13285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4234'. [ 237.848226][ T6187] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 237.867500][ T6187] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.908031][ T6187] usb 1-1: Product: syz [ 237.912516][ T6187] usb 1-1: Manufacturer: syz [ 237.933198][ T6187] usb 1-1: SerialNumber: syz [ 237.955269][ T6187] usb 1-1: config 0 descriptor?? [ 237.967005][T13297] netlink: 340 bytes leftover after parsing attributes in process `syz.2.4240'. [ 237.996859][T13297] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4240'. [ 237.999213][T13239] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 238.057965][ C1] port100 1-1:0.0: NFC: The urb has been stopped (status -2) [ 238.065679][ T6187] port100 1-1:0.0: NFC: Could not get supported command types [ 238.248365][ T6194] usb 2-1: cannot find UAC_HEADER [ 238.275990][ T4236] usb 1-1: USB disconnect, device number 20 [ 238.281177][ T6194] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 238.321713][ T6194] usb 2-1: USB disconnect, device number 18 [ 238.530326][T13330] loop3: detected capacity change from 0 to 512 [ 238.550701][ T4291] udevd[4291]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 238.574368][T13330] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 238.574368][T13330] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 238.574368][T13330] [ 238.639220][T13330] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 238.721229][T13330] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=80026019, mo2=0000] [ 238.782479][T13330] EXT4-fs (loop3): 1 truncate cleaned up [ 238.810433][T13330] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,noblock_validity,nombcache,acl,barrier=0x000000000000000c,noacl,max_batch_time=0x0000000000000006,nodelalloc,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 238.834106][ C1] vkms_vblank_simulate: vblank timer overrun [ 238.848131][ T5309] Quota error (device loop3): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 238.878614][T13350] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4265'. [ 238.932232][ T5309] EXT4-fs error (device loop3): ext4_release_dquot:6270: comm kworker/u4:7: Failed to release dquot type 1 [ 239.050380][ T1299] Quota error (device loop3): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 239.082221][ T1299] EXT4-fs error (device loop3): ext4_release_dquot:6270: comm kworker/u4:5: Failed to release dquot type 1 [ 239.307878][T13382] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 239.352744][T13386] mmap: syz.3.4283 (13386) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 239.699916][T13411] cgroup: name respecified [ 239.818178][T13419] device syz_tun entered promiscuous mode [ 240.406794][T13453] tmpfs: Bad value for 'mpol' [ 240.478039][ T4229] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 240.555941][T13457] loop2: detected capacity change from 0 to 4096 [ 240.682079][T13457] ntfs: (device loop2): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 240.706529][T13457] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 240.733212][T13457] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 240.778169][T13457] ntfs: (device loop2): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 240.849984][T13457] ntfs: volume version 3.1. [ 240.885563][T13457] ntfs: (device loop2): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 240.898343][ T4229] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE8, skipping [ 240.922797][T13457] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 240.938090][ T4229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 241.168259][ T4229] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 241.219122][ T4229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.227152][ T4229] usb 1-1: Product: syz [ 241.241805][ T4229] usb 1-1: Manufacturer: syz [ 241.258125][T13506] netlink: 'syz.3.4342': attribute type 11 has an invalid length. [ 241.274497][ T4229] usb 1-1: SerialNumber: syz [ 241.303995][ T4229] usb 1-1: config 0 descriptor?? [ 241.321163][T13507] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 241.376186][T13507] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 241.435235][T13503] loop1: detected capacity change from 0 to 8192 [ 241.551052][T13503] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 241.585402][T12871] usb 1-1: USB disconnect, device number 21 [ 241.597213][T13503] REISERFS (device loop1): using ordered data mode [ 241.604841][T13503] reiserfs: using flush barriers [ 241.614149][T13503] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 241.659909][T13503] REISERFS (device loop1): checking transaction log (loop1) [ 241.932188][T13503] REISERFS (device loop1): Using tea hash to sort names [ 241.948290][T13503] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 241.990218][T13503] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 242.053892][T13548] ipt_CLUSTERIP: Please specify an interface name [ 242.133673][T13552] openvswitch: netlink: Actions may not be safe on all matching packets [ 242.625778][T13576] smb3: Bad value for 'uid' [ 242.693919][T13578] ieee802154 phy0 wpan0: encryption failed: -90 [ 242.714336][T13580] loop2: detected capacity change from 0 to 256 [ 242.764181][T13580] exfat: Deprecated parameter 'namecase' [ 242.775661][T13580] exfat: Deprecated parameter 'namecase' [ 242.842909][T13580] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x7808ae6a, utbl_chksum : 0xe619d30d) [ 242.915255][T13580] exFAT-fs (loop2): hint_cluster is invalid (4278190089) [ 242.952770][T13580] exFAT-fs (loop2): error, failed to bmap (inode : ffff8880581321e0 iblock : 8, err : -5) [ 242.969117][T13580] exFAT-fs (loop2): error, invalid access to FAT (entry 0xff000008) [ 242.977372][T13580] exFAT-fs (loop2): error, invalid access to FAT (entry 0xff000008) [ 243.028522][T13601] __nla_validate_parse: 3 callbacks suppressed [ 243.028536][T13601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4389'. [ 243.047714][ T5309] attempt to access beyond end of device [ 243.047714][ T5309] loop2: rw=1, want=34225520826, limit=256 [ 243.085291][ T5309] Buffer I/O error on dev loop2, logical block 34225520825, lost async page write [ 243.122271][ T5309] attempt to access beyond end of device [ 243.122271][ T5309] loop2: rw=1, want=34225520827, limit=256 [ 243.159777][ T5309] Buffer I/O error on dev loop2, logical block 34225520826, lost async page write [ 243.198203][T12871] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 243.218335][ T5309] attempt to access beyond end of device [ 243.218335][ T5309] loop2: rw=1, want=34225520828, limit=256 [ 243.227260][T13607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4395'. [ 243.282284][ T5309] Buffer I/O error on dev loop2, logical block 34225520827, lost async page write [ 243.338040][ T5309] attempt to access beyond end of device [ 243.338040][ T5309] loop2: rw=1, want=34225520829, limit=256 [ 243.384444][ T5309] Buffer I/O error on dev loop2, logical block 34225520828, lost async page write [ 243.400724][ T5309] attempt to access beyond end of device [ 243.400724][ T5309] loop2: rw=1, want=34225520830, limit=256 [ 243.412378][ T5309] Buffer I/O error on dev loop2, logical block 34225520829, lost async page write [ 243.421860][ T5309] attempt to access beyond end of device [ 243.421860][ T5309] loop2: rw=1, want=34225520831, limit=256 [ 243.469495][ T5309] Buffer I/O error on dev loop2, logical block 34225520830, lost async page write [ 243.472128][T12871] usb 1-1: Using ep0 maxpacket: 8 [ 243.499298][ T5309] attempt to access beyond end of device [ 243.499298][ T5309] loop2: rw=1, want=34225520832, limit=256 [ 243.538085][ T5309] Buffer I/O error on dev loop2, logical block 34225520831, lost async page write [ 243.629016][T12871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 243.658169][T12871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 243.677976][T12871] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 243.699801][T13637] netlink: 'syz.3.4406': attribute type 11 has an invalid length. [ 243.707783][T12871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 243.726910][T12871] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 243.746633][T12871] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 243.766177][T12871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.795989][T12871] usb 1-1: config 0 descriptor?? [ 243.821850][T13595] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 243.918353][ T6187] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 243.938163][ T4236] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 244.051875][T13655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4413'. [ 244.082709][ T6194] usb 1-1: USB disconnect, device number 22 [ 244.165274][T13663] loop1: detected capacity change from 0 to 256 [ 244.188127][ T6187] usb 3-1: Using ep0 maxpacket: 16 [ 244.208178][ T4236] usb 5-1: Using ep0 maxpacket: 32 [ 244.232032][T13663] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000003) [ 244.310337][ T6187] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.331901][ T6187] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.367595][ T6187] usb 3-1: config 0 interface 0 has no altsetting 0 [ 244.378364][ T4236] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 244.390137][ T4236] usb 5-1: config 0 has no interface number 0 [ 244.398372][ T6187] usb 3-1: New USB device found, idVendor=046d, idProduct=c117, bcdDevice= 0.00 [ 244.404690][ T4236] usb 5-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 244.407470][ T6187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.420501][T13669] loop1: detected capacity change from 0 to 4096 [ 244.432522][ T4236] usb 5-1: config 0 interface 1 has no altsetting 0 [ 244.440585][ T6187] usb 3-1: config 0 descriptor?? [ 244.505928][T13669] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 244.618150][ T4236] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 244.627230][ T4236] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.669093][ T4236] usb 5-1: Product: syz [ 244.673427][ T4236] usb 5-1: Manufacturer: syz [ 244.683683][ T4236] usb 5-1: SerialNumber: syz [ 244.697342][ T4229] usb 3-1: USB disconnect, device number 21 [ 244.744820][ T4236] usb 5-1: config 0 descriptor?? [ 245.075778][ T4236] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 245.108085][ T4236] cx231xx 5-1:0.1: Failed to read PCB config [ 245.128362][ T4236] cx231xx: probe of 5-1:0.1 failed with error -71 [ 245.155878][ T4236] usb 5-1: USB disconnect, device number 19 [ 245.470926][T13724] loop3: detected capacity change from 0 to 2048 [ 245.493019][T13727] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 245.522745][T13727] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 245.533831][T13724] UDF-fs: bad mount option "shortan$uid½forget" or missing value [ 245.565995][T13728] netlink: 'syz.1.4450': attribute type 12 has an invalid length. [ 245.583258][T13724] cifs: Unknown parameter 'anchor' [ 245.879684][T13741] loop3: detected capacity change from 0 to 4096 [ 245.928986][T13741] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 246.003085][T13741] ntfs: (device loop3): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 246.023928][T13759] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744071562067969) [ 246.037130][T13756] loop1: detected capacity change from 0 to 4096 [ 246.078157][T13741] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 246.087057][T13741] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 246.102081][T13756] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 246.111422][T13759] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 246.188099][ T4236] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 246.240114][T13766] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4470'. [ 246.254745][T13741] ntfs: (device loop3): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 246.323770][T13769] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4472'. [ 246.333814][T13769] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4472'. [ 246.353959][T13741] ntfs: volume version 3.1. [ 246.370872][T13770] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 246.434052][T13770] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 246.440910][T13769] netlink: 'syz.1.4472': attribute type 6 has an invalid length. [ 246.484175][T13770] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 246.491841][T13741] ntfs: (device loop3): ntfs_nlstoucs(): Name is too long (maximum length for a name on NTFS is 255 Unicode characters. [ 246.506803][T13769] netlink: 'syz.1.4472': attribute type 5 has an invalid length. [ 246.547712][T13769] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4472'. [ 246.608291][ T4236] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 246.621473][ T4236] usb 5-1: config 0 has no interface number 0 [ 246.635517][ T4236] usb 5-1: config 0 interface 41 has no altsetting 0 [ 246.815611][T13786] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4480'. [ 246.828215][ T4236] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 246.865218][ T4236] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.866088][T13786] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 246.883612][ T4236] usb 5-1: Product: syz [ 246.893740][ T4236] usb 5-1: Manufacturer: syz [ 246.901765][ T4236] usb 5-1: SerialNumber: syz [ 246.931134][ T4236] usb 5-1: config 0 descriptor?? [ 247.237561][T13808] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 247.246503][T13807] libceph: resolve '0' (ret=-3): failed [ 247.255781][T13808] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 247.422969][ T4236] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 247.445405][ T4236] CoreChips: probe of 5-1:0.41 failed with error -71 [ 247.473784][ T4236] usb 5-1: USB disconnect, device number 20 [ 248.325938][T13871] loop3: detected capacity change from 0 to 8192 [ 248.748307][ T4236] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 248.882869][T13914] loop1: detected capacity change from 0 to 4096 [ 248.942190][T13914] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 249.005160][T13914] ntfs3: loop1: ntfs_evict_inode r=6 failed, -22. [ 249.021439][T13914] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 249.105018][T13896] loop4: detected capacity change from 0 to 32768 [ 249.137072][T13896] XFS: attr2 mount option is deprecated. [ 249.168321][ T4236] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 70, setting to 64 [ 249.197229][ T4236] usb 3-1: config 0 interface 0 has no altsetting 0 [ 249.296226][T13896] XFS (loop4): Mounting V5 Filesystem [ 249.388199][ T4236] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 249.401532][T13922] loop3: detected capacity change from 0 to 32768 [ 249.408123][ T4236] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 249.416328][ T4236] usb 3-1: Product: syz [ 249.428633][ T4236] usb 3-1: Manufacturer: syz [ 249.431519][T13896] XFS (loop4): Ending clean mount [ 249.435281][ T4236] usb 3-1: SerialNumber: syz [ 249.446017][T13896] XFS (loop4): Quotacheck needed: Please wait. [ 249.472258][ T4236] usb 3-1: config 0 descriptor?? [ 249.511268][ T4236] usb 3-1: selecting invalid altsetting 0 [ 249.556777][T13896] XFS (loop4): Quotacheck: Done. [ 249.571751][T13922] XFS (loop3): Mounting V5 Filesystem [ 249.620121][T13946] SET target dimension over the limit! [ 249.664307][ T4193] XFS (loop4): Unmounting Filesystem [ 249.674629][T13922] XFS (loop3): Ending clean mount [ 249.727210][T13894] usb 3-1: selecting invalid altsetting 0 [ 249.778211][T13894] usb 3-1: 0:0: usb_set_interface failed (-22) [ 249.796806][T13894] usb 3-1: selecting invalid altsetting 0 [ 249.823038][T13894] usb 3-1: 0:0: usb_set_interface failed (-22) [ 249.879952][T13894] usb 3-1: selecting invalid altsetting 0 [ 249.906369][T13894] usb 3-1: 0:0: usb_set_interface failed (-22) [ 249.920700][ T4188] XFS (loop3): Unmounting Filesystem [ 249.942219][ T4236] usb 3-1: USB disconnect, device number 22 [ 250.413152][T13954] loop1: detected capacity change from 0 to 32768 [ 250.492421][T13954] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.4551 (13954) [ 250.568994][T13954] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 250.605681][T13954] BTRFS info (device loop1): force zlib compression, level 3 [ 250.646323][T13954] BTRFS info (device loop1): turning on flush-on-commit [ 250.690519][T13954] BTRFS info (device loop1): max_inline at 4096 [ 250.696824][T13954] BTRFS info (device loop1): using free space tree [ 250.743812][T13954] BTRFS info (device loop1): has skinny extents [ 250.766973][T13972] loop4: detected capacity change from 0 to 4096 [ 250.806161][T13980] loop3: detected capacity change from 0 to 4096 [ 250.872010][T13980] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 251.183923][T13954] BTRFS info (device loop1): enabling ssd optimizations [ 251.298157][T14019] misc userio: No port type given on /dev/userio [ 251.381307][T13954] BTRFS info (device loop1): balance: start -d -m -s [ 251.431878][T13954] BTRFS info (device loop1): relocating block group 6881280 flags data|metadata [ 251.641209][ T9] BTRFS info (device loop1): space_info 5 has 602112 free, is not full [ 251.650090][ T9] BTRFS info (device loop1): space_info total=3276800, used=61440, pinned=0, reserved=8192, may_use=978944, readonly=1626112 zone_unusable=0 [ 251.664745][ T9] BTRFS info (device loop1): global_block_rsv: size 851968 reserved 851968 [ 251.673975][ T9] BTRFS info (device loop1): trans_block_rsv: size 0 reserved 0 [ 251.681696][ T9] BTRFS info (device loop1): chunk_block_rsv: size 0 reserved 0 [ 251.689405][ T9] BTRFS info (device loop1): delayed_block_rsv: size 0 reserved 0 [ 251.697295][ T9] BTRFS info (device loop1): delayed_refs_rsv: size 262144 reserved 126976 [ 251.718671][T13954] BTRFS info (device loop1): balance: canceled [ 252.078100][T14062] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 252.090115][T14066] loop3: detected capacity change from 0 to 64 [ 252.575893][T14091] loop2: detected capacity change from 0 to 256 [ 252.605898][T14097] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4609'. [ 252.670953][T14091] FAT-fs (loop2): Directory bread(block 64) failed [ 252.698536][T14091] FAT-fs (loop2): Directory bread(block 65) failed [ 252.705187][T14091] FAT-fs (loop2): Directory bread(block 66) failed [ 252.728306][T14091] FAT-fs (loop2): Directory bread(block 67) failed [ 252.743366][T14091] FAT-fs (loop2): Directory bread(block 68) failed [ 252.756646][T14091] FAT-fs (loop2): Directory bread(block 69) failed [ 252.788215][T14091] FAT-fs (loop2): Directory bread(block 70) failed [ 252.808103][T14091] FAT-fs (loop2): Directory bread(block 71) failed [ 252.833955][T14091] FAT-fs (loop2): Directory bread(block 72) failed [ 252.846141][T14091] FAT-fs (loop2): Directory bread(block 73) failed [ 253.000654][T14122] Unknown options in mask b7f2 [ 253.005854][T14124] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4622'. [ 253.028087][T14125] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4621'. [ 253.066913][T14125] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4621'. [ 253.083671][T14125] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4621'. [ 253.118649][T14125] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4621'. [ 253.134472][T14125] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4621'. [ 253.158468][T14125] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4621'. [ 253.177631][T14129] loop4: detected capacity change from 0 to 1024 [ 253.225478][T14125] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4621'. [ 253.299959][T14125] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4621'. [ 253.303805][T14129] hfsplus: keylen 65060 too large [ 253.689055][T14150] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 253.769136][T14155] loop3: detected capacity change from 0 to 256 [ 253.782292][T14160] netlink: 'syz.0.4639': attribute type 10 has an invalid length. [ 253.792135][T14160] device team0 entered promiscuous mode [ 253.820228][T14160] device team_slave_0 entered promiscuous mode [ 253.830512][T14155] FAT-fs (loop3): Directory bread(block 64) failed [ 253.837756][T14160] device team_slave_1 entered promiscuous mode [ 253.845000][T14155] FAT-fs (loop3): Directory bread(block 65) failed [ 253.853386][T14160] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 253.918160][T14155] FAT-fs (loop3): Directory bread(block 66) failed [ 253.940924][T14155] FAT-fs (loop3): Directory bread(block 67) failed [ 253.993581][T14155] FAT-fs (loop3): Directory bread(block 68) failed [ 254.017992][T14155] FAT-fs (loop3): Directory bread(block 69) failed [ 254.027791][T14155] FAT-fs (loop3): Directory bread(block 70) failed [ 254.101652][T14155] FAT-fs (loop3): Directory bread(block 71) failed [ 254.138133][T14155] FAT-fs (loop3): Directory bread(block 72) failed [ 254.159963][T14155] FAT-fs (loop3): Directory bread(block 73) failed [ 254.239124][T14172] loop4: detected capacity change from 0 to 4096 [ 254.300446][T14172] ntfs3: loop4: mft corrupted [ 254.305380][T14172] ntfs3: loop4: Failed to load $MFT. [ 254.437381][T14194] netlink: 'syz.1.4657': attribute type 21 has an invalid length. [ 254.454553][T14194] IPv6: NLM_F_CREATE should be specified when creating new route [ 254.493370][T14197] loop2: detected capacity change from 0 to 16 [ 254.523734][T14198] netlink: 'syz.4.4658': attribute type 1 has an invalid length. [ 254.596905][T14197] erofs: (device loop2): mounted with root inode @ nid 36. [ 254.708197][T14206] trusted_key: encrypted_key: keyword 'new¼°±‹U£_5' not recognized [ 254.842941][ T26] audit: type=1400 audit(1771474489.168:6): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=14218 comm="syz.2.4666" [ 254.996335][T14232] nvme_fabrics: unknown parameter or missing value 'çd©ƒ' in ctrl creation request [ 255.208242][T12871] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 255.307402][T14260] loop3: detected capacity change from 0 to 1024 [ 255.343642][T14265] loop2: detected capacity change from 0 to 64 [ 255.352072][T14266] x_tables: duplicate underflow at hook 1 [ 255.384434][T14260] EXT4-fs (loop3): Ignoring removed nobh option [ 255.399769][T14265] Trying to free block not in datazone [ 255.405490][T14260] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #11: comm syz.3.4690: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 255.422613][T14265] Trying to free block not in datazone [ 255.441009][T14265] Trying to free block not in datazone [ 255.446740][T14265] Trying to free block not in datazone [ 255.451641][T14260] EXT4-fs (loop3): Remounting filesystem read-only [ 255.458954][T14265] minix_free_block (loop2:6): bit already cleared [ 255.459039][T14265] Trying to free block not in datazone [ 255.459062][T14265] Trying to free block not in datazone [ 255.477233][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.483558][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.492203][T14260] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.4690: couldn't read orphan inode 11 (err -117) [ 255.513011][T14272] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 255.529651][T14260] EXT4-fs (loop3): Remounting filesystem read-only [ 255.536197][T14260] EXT4-fs (loop3): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=remount-ro,quota,. Quota mode: writeback. [ 255.610890][T14274] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 255.638138][ T4229] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 255.645969][T12871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.667783][T12871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.688115][T12871] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 255.718771][T12871] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 255.737928][T12871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.761390][T12871] usb 5-1: config 0 descriptor?? [ 255.828893][T12871] hub 5-1:0.0: USB hub found [ 256.038267][T12871] hub 5-1:0.0: 14 ports detected [ 256.058272][ T4229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 256.068228][T12871] hub 5-1:0.0: insufficient power available to use all downstream ports [ 256.102495][ T4229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 256.262841][T12871] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 256.269305][ T4229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 256.289201][T12871] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 256.309419][ T4229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 256.369108][T12871] usb 5-1: USB disconnect, device number 21 [ 256.438209][ T4229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 256.467002][ T4229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 256.511640][T14306] loop3: detected capacity change from 0 to 4096 [ 256.581088][T14306] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 256.688271][ T4229] usb 1-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 256.707750][ T4229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.738427][T14306] ntfs3: loop3: failed to convert "c46c" to cp860 [ 256.748058][ T4229] usb 1-1: Product: syz [ 256.762952][ T4229] usb 1-1: Manufacturer: syz [ 256.767606][ T4229] usb 1-1: SerialNumber: syz [ 256.808085][ T4229] usb 1-1: config 0 descriptor?? [ 256.857096][ T4229] ti_usb_3410_5052 1-1:0.0: TI USB 5052 2 port adapter converter detected [ 256.906436][ T4229] ti_usb_3410_5052 1-1:0.0: missing endpoints [ 256.999849][T14326] loop4: detected capacity change from 0 to 4096 [ 257.054189][ T4229] usb 1-1: USB disconnect, device number 23 [ 257.111783][T14326] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 257.130162][T14328] ntfs: (device loop1): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 257.158014][T14328] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 257.171909][T14326] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 257.230909][T14326] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 257.247536][T14328] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 257.291765][T14326] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 257.335109][T14328] ntfs: volume version 3.1. [ 257.341493][T14326] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 257.377396][T14328] ntfs: (device loop1): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 257.414222][T14326] ntfs: volume version 3.1. [ 257.777063][T14370] set_capacity_and_notify: 1 callbacks suppressed [ 257.777079][T14370] loop3: detected capacity change from 0 to 256 [ 258.093306][T14391] loop4: detected capacity change from 0 to 1024 [ 258.132031][T14395] netdevsim netdevsim3: Direct firmware load for ..€ failed with error -2 [ 258.150873][T14395] netdevsim netdevsim3: Falling back to sysfs fallback for: ..€ [ 258.256085][T14391] hfsplus: request for non-existent node 211 in B*Tree [ 258.274159][T14391] hfsplus: request for non-existent node 211 in B*Tree [ 258.596694][T14408] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 258.677547][T14410] netlink: 'syz.0.4764': attribute type 1 has an invalid length. [ 258.724484][T14410] netlink: 'syz.0.4764': attribute type 1 has an invalid length. [ 258.739866][T14410] netlink: 'syz.0.4764': attribute type 1 has an invalid length. [ 259.002299][T14403] loop1: detected capacity change from 0 to 32768 [ 259.084752][T14403] JBD2: Ignoring recovery information on journal [ 259.149090][T14418] loop4: detected capacity change from 0 to 8192 [ 259.177995][T14403] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 259.196263][T14403] (syz.1.4760,14403,0):ocfs2_find_entry:1086 ERROR: status = -117 [ 259.214260][T14403] (syz.1.4760,14403,0):ocfs2_find_entry:1086 ERROR: status = -117 [ 259.223294][T14403] (syz.1.4760,14403,0):ocfs2_mknod:502 ERROR: status = -117 [ 259.227712][T14418] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 259.230664][T14403] (syz.1.4760,14403,0):ocfs2_mkdir:659 ERROR: status = -117 [ 259.262722][T14418] REISERFS (device loop4): using ordered data mode [ 259.274327][T14418] reiserfs: using flush barriers [ 259.303813][ T4186] ocfs2: Unmounting device (7,1) on (node local) [ 259.312525][T14418] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 259.334503][T14418] REISERFS (device loop4): checking transaction log (loop4) [ 259.346001][T14418] REISERFS (device loop4): Using r5 hash to sort names [ 259.373721][T14440] netlink: 'syz.1.4775': attribute type 4 has an invalid length. [ 259.388236][T12863] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 259.398849][T14418] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 259.678926][T12863] usb 3-1: Using ep0 maxpacket: 32 [ 259.968322][T12863] usb 3-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=cd.c6 [ 259.987707][T12863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.035244][T14473] __nla_validate_parse: 20 callbacks suppressed [ 260.035261][T14473] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4792'. [ 260.048285][T12863] usb 3-1: Product: syz [ 260.063940][T12863] usb 3-1: Manufacturer: syz [ 260.088894][T12863] usb 3-1: SerialNumber: syz [ 260.101024][T14474] device gretap1 entered promiscuous mode [ 260.119425][T12863] usb 3-1: config 0 descriptor?? [ 260.400159][T12863] usb 3-1: USB disconnect, device number 23 [ 260.530972][T14451] loop3: detected capacity change from 0 to 32768 [ 260.586318][T14503] loop1: detected capacity change from 0 to 256 [ 260.625540][T14451] JBD2: Ignoring recovery information on journal [ 260.727220][T14503] FAT-fs (loop1): Directory bread(block 64) failed [ 260.794754][T14451] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 260.808081][T14503] FAT-fs (loop1): Directory bread(block 65) failed [ 260.814732][T14503] FAT-fs (loop1): Directory bread(block 66) failed [ 260.831906][T14503] FAT-fs (loop1): Directory bread(block 67) failed [ 260.869400][T14503] FAT-fs (loop1): Directory bread(block 68) failed [ 260.876479][T14451] OCFS2: ERROR (device loop3): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 260.876603][T14451] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 260.929816][T14503] FAT-fs (loop1): Directory bread(block 69) failed [ 260.942355][T14451] OCFS2: File system is now read-only. [ 260.947859][T14451] (syz.3.4781,14451,1):ocfs2_calc_xattr_init:642 ERROR: status = -117 [ 260.959556][T14451] (syz.3.4781,14451,1):ocfs2_mknod:334 ERROR: status = -117 [ 260.960235][T14503] FAT-fs (loop1): Directory bread(block 70) failed [ 260.967464][T14509] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 260.980219][T14509] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 261.006730][T14451] (syz.3.4781,14451,1):ocfs2_mknod:502 ERROR: status = -117 [ 261.019355][T14451] (syz.3.4781,14451,1):ocfs2_mkdir:659 ERROR: status = -117 [ 261.027448][T14509] vhci_hcd vhci_hcd.0: Device attached [ 261.032496][T14503] FAT-fs (loop1): Directory bread(block 71) failed [ 261.048494][T14513] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 261.055030][T14513] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 261.056059][T14503] FAT-fs (loop1): Directory bread(block 72) failed [ 261.093720][T14503] FAT-fs (loop1): Directory bread(block 73) failed [ 261.108026][T14513] vhci_hcd vhci_hcd.0: Device attached [ 261.141378][T14515] vhci_hcd: connection closed [ 261.158093][ T1299] vhci_hcd: stop threads [ 261.163299][ T4188] ocfs2: Unmounting device (7,3) on (node local) [ 261.188934][T14510] vhci_hcd: connection closed [ 261.193919][ T1299] vhci_hcd: release socket [ 261.224898][ T21] vhci_hcd: vhci_device speed not set [ 261.244984][ T1299] vhci_hcd: disconnect device [ 261.266584][ T1299] vhci_hcd: stop threads [ 261.283710][ T1299] vhci_hcd: release socket [ 261.283953][T14520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4813'. [ 261.298565][ T21] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 261.308254][ T1299] vhci_hcd: disconnect device [ 261.695388][T14540] batadv0 speed is unknown, defaulting to 1000 [ 261.736525][T14540] batadv0 speed is unknown, defaulting to 1000 [ 261.772820][T14540] batadv0 speed is unknown, defaulting to 1000 [ 262.202296][T14577] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4839'. [ 262.228043][ T6194] batadv0 speed is unknown, defaulting to 1000 [ 262.238341][T14540] infiniband syz1: set active [ 262.243712][T14540] infiniband syz1: added batadv0 [ 262.322064][T14540] RDS/IB: syz1: added [ 262.327076][T14540] smc: adding ib device syz1 with port count 1 [ 262.335502][T14540] smc: ib device syz1 port 1 has pnetid [ 262.347237][T12863] batadv0 speed is unknown, defaulting to 1000 [ 262.359520][T14540] batadv0 speed is unknown, defaulting to 1000 [ 262.624020][T14603] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4850'. [ 262.766931][T14613] netlink: 'syz.2.4855': attribute type 4 has an invalid length. [ 262.816814][T14540] batadv0 speed is unknown, defaulting to 1000 [ 262.851527][T14617] 9pnet: Insufficient options for proto=fd [ 262.881818][T14616] loop4: detected capacity change from 0 to 1024 [ 263.265381][T14540] batadv0 speed is unknown, defaulting to 1000 [ 263.586234][T14652] netlink: 'syz.3.4874': attribute type 4 has an invalid length. [ 263.626193][T14540] batadv0 speed is unknown, defaulting to 1000 [ 263.718240][ T4229] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 263.764775][T14660] binder: 14659:14660 ioctl c0046209 e0ffff00000000 returned -22 [ 263.973585][T14540] batadv0 speed is unknown, defaulting to 1000 [ 264.008103][ T4229] usb 5-1: Using ep0 maxpacket: 16 [ 264.086370][T14678] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4886'. [ 264.116700][T14680] loop3: detected capacity change from 0 to 1024 [ 264.124740][T14678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4886'. [ 264.148171][ T4229] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 264.187128][ T4229] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.245394][ T4229] usb 5-1: config 0 has no interface number 0 [ 264.458347][ T4229] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 264.467425][ T4229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=21 [ 264.492111][ T4229] usb 5-1: Product: syz [ 264.523589][ T4229] usb 5-1: Manufacturer: syz [ 264.549046][ T4229] usb 5-1: SerialNumber: syz [ 264.570245][ T4229] usb 5-1: config 0 descriptor?? [ 264.600837][T14704] openvswitch: netlink: Missing key (keys=40, expected=100) [ 264.642591][ T4229] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 264.657993][ T4229] usb 5-1: No valid video chain found. [ 264.763239][T12863] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 264.819278][T14718] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 264.842449][ T6191] usb 5-1: USB disconnect, device number 22 [ 265.049204][T12863] usb 4-1: Using ep0 maxpacket: 16 [ 265.130521][T14739] loop2: detected capacity change from 0 to 64 [ 265.188361][T12863] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 265.218778][T12863] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 265.252055][T12863] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x8E has invalid maxpacket 51078, setting to 1024 [ 265.277945][T12863] usb 4-1: config 0 interface 0 has no altsetting 0 [ 265.384565][T14749] Zero length message leads to an empty skb [ 265.468396][T12863] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 265.477479][T12863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.528059][T12863] usb 4-1: Product: syz [ 265.538877][T12863] usb 4-1: Manufacturer: syz [ 265.566753][T12863] usb 4-1: SerialNumber: syz [ 265.582627][T12863] usb 4-1: config 0 descriptor?? [ 265.814626][T14772] netlink: 'syz.4.4932': attribute type 10 has an invalid length. [ 265.855040][T14772] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4932'. [ 266.068232][T12871] usb 4-1: USB disconnect, device number 18 [ 266.425092][ T21] vhci_hcd: vhci_device speed not set [ 266.909735][T14776] loop2: detected capacity change from 0 to 40427 [ 267.019327][T14776] F2FS-fs (loop2): Wrong SSA boundary, start(3584) end(4096) blocks(167772672) [ 267.097066][T14776] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 267.171083][T14776] F2FS-fs (loop2): invalid crc value [ 267.239482][T14776] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 267.468597][T14776] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 267.514980][T14776] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 267.532521][T14776] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 267.587159][T14847] loop4: detected capacity change from 0 to 4096 [ 267.686031][T14847] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 267.786736][T14870] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 267.800431][T14847] ntfs3: loop4: Failed to load $Extend. [ 268.147544][T14889] rdma_rxe: rxe_register_device failed with error -23 [ 268.167443][T14892] netlink: 'syz.2.4991': attribute type 1 has an invalid length. [ 268.198416][T14889] rdma_rxe: failed to add batadv0 [ 268.648193][T14925] device wlan0 entered promiscuous mode [ 268.758033][T12871] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 269.236719][T14959] loop3: detected capacity change from 0 to 1024 [ 269.314515][T12871] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 269.332950][T12871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.344163][T14959] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #3: block 2: comm syz.3.5024: lblock 2 mapped to illegal pblock 2 (length 1) [ 269.355127][T12871] usb 3-1: Product: syz [ 269.362642][T12871] usb 3-1: Manufacturer: syz [ 269.367271][T12871] usb 3-1: SerialNumber: syz [ 269.373980][T12871] usb 3-1: config 0 descriptor?? [ 269.411491][T14959] __quota_error: 11 callbacks suppressed [ 269.411505][T14959] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 269.429937][T12871] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 269.475822][T14941] loop4: detected capacity change from 0 to 32768 [ 269.482767][T14959] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #3: block 48: comm syz.3.5024: lblock 0 mapped to illegal pblock 48 (length 1) [ 269.504718][T14959] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 269.513787][T14959] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.5024: Failed to acquire dquot type 0 [ 269.539762][T14959] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 269.549998][ T4229] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 269.582983][T14959] EXT4-fs error (device loop3): ext4_evict_inode:282: inode #11: comm syz.3.5024: mark_inode_dirty error [ 269.596381][T14971] netlink: 'syz.0.5029': attribute type 10 has an invalid length. [ 269.609439][T14959] EXT4-fs warning (device loop3): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 269.625059][T14971] team0: Device veth1_vlan failed to register rx_handler [ 269.644769][T14941] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 269.681700][T14959] EXT4-fs (loop3): 1 orphan inode deleted [ 269.698346][T14959] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 269.721295][ T144] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 269.742840][T14941] [ 269.745188][T14941] ====================================================== [ 269.752211][T14941] WARNING: possible circular locking dependency detected [ 269.759249][T14941] syzkaller #0 Not tainted [ 269.763667][T14941] ------------------------------------------------------ [ 269.770693][T14941] syz.4.5015/14941 is trying to acquire lock: [ 269.776769][T14941] ffff88807b730990 (jbd2_handle){++++}-{0:0}, at: wait_transaction_locked+0x19f/0x270 [ 269.786382][T14941] [ 269.786382][T14941] but task is already holding lock: [ 269.793758][T14941] ffff88806151e8e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a6/0x6f0 [ 269.804048][T14941] [ 269.804048][T14941] which lock already depends on the new lock. [ 269.804048][T14941] [ 269.804192][ T144] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 269.814454][T14941] [ 269.814454][T14941] the existing dependency chain (in reverse order) is: [ 269.814462][T14941] [ 269.814462][T14941] -> #5 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 269.814490][T14941] down_read+0x44/0x2e0 [ 269.814511][T14941] ocfs2_start_trans+0x3a6/0x6f0 [ 269.814527][T14941] ocfs2_shutdown_local_alloc+0x1f8/0xaa0 [ 269.814544][T14941] ocfs2_dismount_volume+0x1e1/0x8a0 [ 269.862776][T14941] generic_shutdown_super+0x130/0x300 [ 269.868693][T14941] kill_block_super+0x7c/0xe0 [ 269.873924][T14941] deactivate_locked_super+0x93/0xf0 [ 269.879753][T14941] cleanup_mnt+0x42d/0x4e0 [ 269.884703][T14941] task_work_run+0x125/0x1a0 [ 269.889829][T14941] exit_to_user_mode_loop+0x10f/0x130 [ 269.895739][T14941] exit_to_user_mode_prepare+0xee/0x180 [ 269.901834][T14941] syscall_exit_to_user_mode+0x16/0x40 [ 269.906712][ T144] EXT4-fs error (device loop3): ext4_release_dquot:6270: comm kworker/u4:1: Failed to release dquot type 0 [ 269.907828][T14941] do_syscall_64+0x58/0xa0 [ 269.907849][T14941] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 269.930652][T14941] [ 269.930652][T14941] -> #4 (sb_internal#2){.+.+}-{0:0}: [ 269.938144][T14941] ocfs2_start_trans+0x2a7/0x6f0 [ 269.943620][T14941] ocfs2_acquire_dquot+0x688/0xb10 [ 269.949282][T14941] dqget+0x778/0xeb0 [ 269.953723][T14941] dquot_get_next_dqblk+0xb3/0x390 [ 269.959371][T14941] quota_getnextquota+0x2a9/0x4a0 [ 269.964989][T14941] __se_sys_quotactl+0x28b/0x6f0 [ 269.970461][T14941] do_syscall_64+0x4c/0xa0 [ 269.975418][T14941] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 269.981860][T14941] [ 269.981860][T14941] -> #3 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 269.990735][T14941] down_write+0x38/0x60 [ 269.995430][T14941] ocfs2_create_local_dquot+0x199/0x1850 [ 270.001596][T14941] ocfs2_acquire_dquot+0x7ed/0xb10 [ 270.007248][T14941] dqget+0x778/0xeb0 [ 270.011729][T14941] dquot_get_next_dqblk+0xb3/0x390 [ 270.017384][T14941] quota_getnextquota+0x2a9/0x4a0 [ 270.023000][T14941] __se_sys_quotactl+0x28b/0x6f0 [ 270.028490][T14941] do_syscall_64+0x4c/0xa0 [ 270.033469][T14941] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 270.039906][T14941] [ 270.039906][T14941] -> #2 (&dquot->dq_lock){+.+.}-{3:3}: [ 270.047588][T14941] __mutex_lock_common+0x1e3/0x2400 [ 270.053342][T14941] mutex_lock_nested+0x17/0x20 [ 270.058647][T14941] dquot_commit+0x5a/0x410 [ 270.063601][T14941] ext4_write_dquot+0x1f0/0x360 [ 270.068997][T14941] mark_all_dquot_dirty+0xf9/0x400 [ 270.074647][T14941] __dquot_free_space+0x7ca/0xb90 [ 270.080246][T14941] ext4_free_blocks+0x1b2b/0x24d0 [ 270.085821][T14941] ext4_ext_remove_space+0x1f86/0x42b0 [ 270.091825][T14941] ext4_ext_truncate+0x192/0x240 [ 270.097314][T14941] ext4_truncate+0xa09/0x10f0 [ 270.102565][T14941] ext4_evict_inode+0xb4f/0x1090 [ 270.108048][T14941] evict+0x4c9/0x8d0 [ 270.112519][T14941] do_unlinkat+0x3e7/0x710 [ 270.117479][T14941] __x64_sys_unlinkat+0xd1/0xe0 [ 270.122886][T14941] do_syscall_64+0x4c/0xa0 [ 270.127839][T14941] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 270.134268][T14941] [ 270.134268][T14941] -> #1 (&ei->i_data_sem){++++}-{3:3}: [ 270.142023][T14941] down_write+0x38/0x60 [ 270.146713][T14941] ext4_truncate+0x97f/0x10f0 [ 270.151933][T14941] ext4_setattr+0xffe/0x19e0 [ 270.157064][T14941] notify_change+0xbcd/0xee0 [ 270.162195][T14941] do_truncate+0x1ac/0x240 [ 270.167153][T14941] do_sys_ftruncate+0x31b/0x3d0 [ 270.172556][T14941] do_syscall_64+0x4c/0xa0 [ 270.177515][T14941] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 270.183959][T14941] [ 270.183959][T14941] -> #0 (jbd2_handle){++++}-{0:0}: [ 270.191277][T14941] __lock_acquire+0x2c42/0x7d10 [ 270.196674][T14941] lock_acquire+0x19e/0x400 [ 270.201724][T14941] wait_transaction_locked+0x1bb/0x270 [ 270.207725][T14941] add_transaction_credits+0x103/0xc80 [ 270.213731][T14941] start_this_handle+0x74d/0x15c0 [ 270.219287][T14941] jbd2__journal_restart+0x233/0x630 [ 270.225105][T14941] ocfs2_extend_trans+0x2bb/0x6f0 [ 270.230690][T14941] ocfs2_reserve_suballoc_bits+0x1761/0x44d0 [ 270.237205][T14941] ocfs2_reserve_new_inode+0x4f5/0xcd0 [ 270.243390][T14941] ocfs2_mknod+0x885/0x2510 [ 270.248412][T14941] ocfs2_create+0x192/0x420 [ 270.253443][T14941] path_openat+0x11db/0x2fa0 [ 270.258577][T14941] do_filp_open+0x1e2/0x410 [ 270.263606][T14941] do_sys_openat2+0x150/0x4b0 [ 270.268807][T14941] __x64_sys_openat+0x135/0x160 [ 270.274187][T14941] do_syscall_64+0x4c/0xa0 [ 270.279120][T14941] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 270.285542][T14941] [ 270.285542][T14941] other info that might help us debug this: [ 270.285542][T14941] [ 270.295759][T14941] Chain exists of: [ 270.295759][T14941] jbd2_handle --> sb_internal#2 --> &journal->j_trans_barrier [ 270.295759][T14941] [ 270.309135][T14941] Possible unsafe locking scenario: [ 270.309135][T14941] [ 270.316587][T14941] CPU0 CPU1 [ 270.321943][T14941] ---- ---- [ 270.327296][T14941] lock(&journal->j_trans_barrier); [ 270.332587][T14941] lock(sb_internal#2); [ 270.339374][T14941] lock(&journal->j_trans_barrier); [ 270.347229][T14941] lock(jbd2_handle); [ 270.351294][T14941] [ 270.351294][T14941] *** DEADLOCK *** [ 270.351294][T14941] [ 270.359453][T14941] 6 locks held by syz.4.5015/14941: [ 270.364656][T14941] #0: ffff888076b88460 (sb_writers#14){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 270.373876][T14941] #1: ffff88805803ed88 (&type->i_mutex_dir_key#26){+.+.}-{3:3}, at: path_openat+0x803/0x2fa0 [ 270.384152][T14941] #2: ffff8880607e42c8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16a/0x44d0 [ 270.397820][T14941] #3: ffff88805803c2c8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16a/0x44d0 [ 270.411487][T14941] #4: ffff888076b88650 (sb_internal#2){.+.+}-{0:0}, at: ocfs2_reserve_suballoc_bits+0x7ab/0x44d0 [ 270.422156][T14941] #5: ffff88806151e8e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a6/0x6f0 [ 270.432845][T14941] [ 270.432845][T14941] stack backtrace: [ 270.438733][T14941] CPU: 0 PID: 14941 Comm: syz.4.5015 Not tainted syzkaller #0 [ 270.446202][T14941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 270.456257][T14941] Call Trace: [ 270.459601][T14941] [ 270.462539][T14941] dump_stack_lvl+0x188/0x250 [ 270.467300][T14941] ? load_image+0x400/0x400 [ 270.471817][T14941] ? show_regs_print_info+0x20/0x20 [ 270.477037][T14941] ? print_circular_bug+0x12b/0x1a0 [ 270.482235][T14941] check_noncircular+0x296/0x330 [ 270.487185][T14941] ? add_chain_block+0x940/0x940 [ 270.492263][T14941] ? lockdep_lock+0xf1/0x1f0 [ 270.496877][T14941] ? mark_lock+0x94/0x320 [ 270.501210][T14941] __lock_acquire+0x2c42/0x7d10 [ 270.506084][T14941] ? verify_lock_unused+0x140/0x140 [ 270.511290][T14941] ? mark_lock+0x94/0x320 [ 270.515631][T14941] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 270.521615][T14941] ? lock_chain_count+0x20/0x20 [ 270.526469][T14941] lock_acquire+0x19e/0x400 [ 270.530981][T14941] ? wait_transaction_locked+0x19f/0x270 [ 270.536629][T14941] ? wait_transaction_locked+0x17c/0x270 [ 270.542262][T14941] ? __lock_acquire+0x7d10/0x7d10 [ 270.547366][T14941] ? read_lock_is_recursive+0x10/0x10 [ 270.552742][T14941] wait_transaction_locked+0x1bb/0x270 [ 270.558234][T14941] ? wait_transaction_locked+0x19f/0x270 [ 270.563877][T14941] ? lock_chain_count+0x20/0x20 [ 270.568727][T14941] ? add_transaction_credits+0xc80/0xc80 [ 270.574370][T14941] ? init_wait_entry+0xd0/0xd0 [ 270.579134][T14941] ? finish_lock_switch+0x12f/0x280 [ 270.584343][T14941] ? lockdep_hardirqs_on+0x94/0x140 [ 270.589544][T14941] ? finish_lock_switch+0x12f/0x280 [ 270.594755][T14941] add_transaction_credits+0x103/0xc80 [ 270.600250][T14941] ? jbd2_journal_begin_ordered_truncate+0x150/0x150 [ 270.606922][T14941] ? read_lock_is_recursive+0x10/0x10 [ 270.612293][T14941] ? lockdep_hardirqs_on+0x94/0x140 [ 270.617520][T14941] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 270.623681][T14941] start_this_handle+0x74d/0x15c0 [ 270.628762][T14941] ? preempt_schedule_common+0xa5/0xd0 [ 270.634276][T14941] ? jbd2__journal_start+0x5a0/0x5a0 [ 270.639557][T14941] ? do_raw_read_unlock+0x70/0x70 [ 270.644595][T14941] ? preempt_schedule_thunk+0x16/0x18 [ 270.649979][T14941] ? _raw_write_unlock+0x36/0x40 [ 270.654938][T14941] jbd2__journal_restart+0x233/0x630 [ 270.660224][T14941] ocfs2_extend_trans+0x2bb/0x6f0 [ 270.665253][T14941] ? ocfs2_commit_trans+0x240/0x240 [ 270.670478][T14941] ocfs2_reserve_suballoc_bits+0x1761/0x44d0 [ 270.676486][T14941] ? 0xffffffffa002a000 [ 270.680651][T14941] ? __kernel_text_address+0x9a/0x100 [ 270.686017][T14941] ? unwind_get_return_address+0x49/0x80 [ 270.691649][T14941] ? stack_trace_save+0xf0/0xf0 [ 270.696514][T14941] ? ocfs2_block_group_search+0x470/0x470 [ 270.702245][T14941] ? stack_trace_save+0xa6/0xf0 [ 270.707092][T14941] ? verify_lock_unused+0x140/0x140 [ 270.712299][T14941] ? __kasan_kmalloc+0xcc/0xf0 [ 270.717072][T14941] ? __kasan_kmalloc+0xb5/0xf0 [ 270.721842][T14941] ? ocfs2_reserve_new_inode+0x103/0xcd0 [ 270.727471][T14941] ? ocfs2_create+0x192/0x420 [ 270.732159][T14941] ? do_filp_open+0x1e2/0x410 [ 270.736846][T14941] ? do_sys_openat2+0x150/0x4b0 [ 270.741690][T14941] ? __x64_sys_openat+0x135/0x160 [ 270.746715][T14941] ? do_syscall_64+0x4c/0xa0 [ 270.751310][T14941] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 270.757433][T14941] ocfs2_reserve_new_inode+0x4f5/0xcd0 [ 270.762893][T14941] ? ocfs2_reserve_new_metadata+0x60/0x60 [ 270.768623][T14941] ? ocfs2_lookup_ino_from_name+0xf0/0xf0 [ 270.774351][T14941] ? mark_lock+0x94/0x320 [ 270.778693][T14941] ocfs2_mknod+0x885/0x2510 [ 270.783214][T14941] ? ocfs2_mkdir+0x420/0x420 [ 270.787806][T14941] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 270.793743][T14941] ? __wake_up_common+0x5b/0x4e0 [ 270.798691][T14941] ? ocfs2_inode_unlock+0xa1/0x140 [ 270.803835][T14941] ? __lock_acquire+0x7d10/0x7d10 [ 270.808873][T14941] ? __rwlock_init+0x140/0x140 [ 270.813652][T14941] ? _raw_spin_unlock+0x24/0x40 [ 270.818503][T14941] ? do_raw_spin_unlock+0x11d/0x230 [ 270.823736][T14941] ? rcu_is_watching+0x11/0xa0 [ 270.828521][T14941] ? ocfs2_lookup+0x490/0x950 [ 270.833225][T14941] ocfs2_create+0x192/0x420 [ 270.837724][T14941] ? ocfs2_update_inode_fsync_trans+0x200/0x200 [ 270.843957][T14941] ? ocfs2_lookup+0x950/0x950 [ 270.848655][T14941] ? inode_permission+0xef/0x480 [ 270.853694][T14941] ? bpf_lsm_inode_create+0x5/0x10 [ 270.858814][T14941] ? security_inode_create+0xb3/0x100 [ 270.864229][T14941] ? ocfs2_lookup+0x950/0x950 [ 270.868905][T14941] path_openat+0x11db/0x2fa0 [ 270.873518][T14941] ? do_filp_open+0x410/0x410 [ 270.878202][T14941] do_filp_open+0x1e2/0x410 [ 270.882726][T14941] ? vfs_tmpfile+0x300/0x300 [ 270.887335][T14941] ? _raw_spin_unlock+0x24/0x40 [ 270.892203][T14941] ? alloc_fd+0x598/0x630 [ 270.896735][T14941] do_sys_openat2+0x150/0x4b0 [ 270.901430][T14941] ? __lock_acquire+0x7d10/0x7d10 [ 270.906462][T14941] ? do_sys_open+0xe0/0xe0 [ 270.910893][T14941] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 270.916892][T14941] ? lock_chain_count+0x20/0x20 [ 270.921744][T14941] ? vtime_user_exit+0x2c8/0x3e0 [ 270.926702][T14941] __x64_sys_openat+0x135/0x160 [ 270.931562][T14941] do_syscall_64+0x4c/0xa0 [ 270.935990][T14941] ? clear_bhb_loop+0x30/0x80 [ 270.940658][T14941] ? clear_bhb_loop+0x30/0x80 [ 270.945329][T14941] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 270.951219][T14941] RIP: 0033:0x7ff5f012e629 [ 270.955685][T14941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.975293][T14941] RSP: 002b:00007ff5ee388028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 270.983704][T14941] RAX: ffffffffffffffda RBX: 00007ff5f03a7fa0 RCX: 00007ff5f012e629 [ 270.991675][T14941] RDX: 00000000000026e1 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 270.999661][T14941] RBP: 00007ff5f01c4b39 R08: 0000000000000000 R09: 0000000000000000 [ 271.007737][T14941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.015709][T14941] R13: 00007ff5f03a8038 R14: 00007ff5f03a7fa0 R15: 00007ffd6be50fd8 [ 271.023768][T14941] [ 271.026839][ C0] vkms_vblank_simulate: vblank timer overrun [ 271.040293][ T144] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 271.058001][T12871] gspca_sq905c: sq905c_read: usb_control_msg failed (-110) [ 271.069315][T12871] sq905c 3-1:0.0: Reading version command failed [ 271.079629][ T144] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 271.079710][T12871] sq905c: probe of 3-1:0.0 failed with error -110 [ 271.089228][ T144] EXT4-fs error (device loop3): ext4_release_dquot:6270: comm kworker/u4:1: Failed to release dquot type 0 [ 271.106953][ T4188] EXT4-fs error (device loop3): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 271.113528][T12871] usb 3-1: USB disconnect, device number 24 [ 271.128670][ T4188] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 271.138537][ T4188] EXT4-fs error (device loop3): ext4_quota_off:6540: inode #3: comm syz-executor: mark_inode_dirty error [ 271.154347][ T4193] ocfs2: Unmounting device (7,4) on (node local) [ 271.218177][ T4229] usb 2-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=ca.8e [ 271.227353][ T4229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.319272][ T4229] pwc: Logitech ViewPort AV 100 webcam detected. [ 271.758049][ T4229] pwc: send_video_command error -71 [ 271.763318][ T4229] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 271.771017][ T4229] Philips webcam: probe of 2-1:127.0 failed with error -71 [ 271.779553][ T4229] usb 2-1: USB disconnect, device number 19