last executing test programs: 9m52.841362707s ago: executing program 4 (id=1326): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000001180)=""/4085, 0xff5}], 0x1) 9m52.606329569s ago: executing program 4 (id=1331): r0 = syz_open_dev$video(&(0x7f0000000040), 0x80000000000004, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x5, 0x7, 0x59565955, 0x6, 0x9aa5, 0x6, 0x7, 0xf20e, 0x1, 0x0, 0x1, 0x7}}) 9m52.338522272s ago: executing program 4 (id=1335): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0x2, 0x1}, 0x20) 9m52.131602923s ago: executing program 4 (id=1339): syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f00000000c0)='./file0\x00', 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="6d61703d6f66662c73686f776173736f632c73657373696f6e3d3078303030303030303030303030303030382c00908809640140af5da36f3337170356d2bd3f14df23c00d84"], 0x1, 0x584, &(0x7f0000000300)="$eJzs3E1vG8cZAOBZmZIVFXACBI0dxYeN04MLNAxJ1zKEAAXY1VLahOISu6vAPhVBLQdGpbRIUqDxzRe3Bfon0t76C3rqPwp67DEFd0nXH6I+EtsU2ucBpBnuvjvzzpKYASkNAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQomSr0+lGYZiN9m7H8yVbRb57zPlZe/94qjim3xCiyU9YXQ0rzaErb/739I8nv66Fy82jy2F1UqyGBz96640P32wtza4/JqFXYHma7MH+F8cHRuG76FUl9XLsHHWrW/F2OsrKPNvtb6dxVubx5sZG54OdQRkPsmFa3imrdDdOWqFf5UV8Pflp3N3cvBGn7Tv53mh7qz9MZwdvvd/rdDbij9rjtF+U+eiDj9plspMNh9lou46ZnJ7E3Jq8ED/Oqvji43t/46Tc790/2O+eJqh3UlCv0+t1u71ed+Pm5s1bnU7ruQOdZ4TnIhb9omXRXtDMDT/cbP0HAAAA/ndF9Wfsk/f/y+FKXRtE3zUWnRoAAADwgtR/+b/8t2jy/j+EcCVEg2yYdhadFgAAAPAC/enEPXbl+GL0z3+FoliOHo5v/yQ67E/i+ocXmusuPNtiNWhFl6aN1MVGa/ooSa9GbzdBb8+iv50W907KIzpDAutzEgh/CetNzPrdprw7O9P0sjbIhmk7yYcfdkO/f2mpSm9Xv//8/h9CPfw/j3YvReHe/YP99q9/e3C3zuXhpJWHh9MNFM/tozgml6/q/7eoP3N5esTfNE0tT3KJpv2uNf12nhz/UnP50hn6fBTeaWLeWWvKtafHvzrps9ueM/rN10OdRfcHjvxRuNrEXL3+3qR47/oRWfSOymK6U7TOovdkFt/rXpwiixvz7kXzjFwMIZwqi9fmZQGwKPfmrUKP1/9n193W41lu5emmjplrZ6v7a9PQl7O6PwrvNjHvrtcTa2v9iBm9047CMTP6bI19uPJ9V7e/h2tNzLVZ8JFr7C9er/sNb8z6bVbVevH/Zm6/5bAXTZ6oC18d/i689eXXD96/f/jpZ/uf7X/e693Y6Py807nZC8v1MKbFMZkC8P8rLb6N1qo/RkWRjX/V3dzs9qudNC7y5OO4yLa20zgbVWmR7PRH22k8LvIqT/LhpPJJtpWWcbk3HudFFQ/yIh7nZXa7/uaXePrVL2UafjaqsqQcD9N+mcZJPqr6SRVvZWUSj/d+OczKnbSoLy7HaZINsqRfZfkobuV7f03SdhyXafpEYLaVjqpskE2qo3hcZLv94k78ST7c203jrbRMimxc5U2Ds76y0SAvdvtVdiG0F32zAeCc+PLrB7/59OBg/4tTVv493Rx4lque73VlEUMFAKYmq/TKnFUaAAAAAAAAAAAAAAA4H866/+8FVpanKSym95dUuTQd1Fkvn+2IPB+jeKISVs9FGoupLJ0qeCnMj2mdg1HMrcwmgSNjXv1cBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAn+U8AAAD//4n2lCg=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) 9m51.726404222s ago: executing program 4 (id=1346): r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @mcast1, 0x4, 0x4}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=[{0xc, 0x10f, 0x37}], 0xc}}], 0x1, 0x40) 9m50.97245395s ago: executing program 4 (id=1354): pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c63616368653d667363616368652c63616368657461673d14e2c311e2cb86c82d4873c6af6ddc7bde3c511a1315e4f85948a98ae388123b56361ed3cc4c3e5523eb70372d09d6bc2f"]) 9m50.629557327s ago: executing program 32 (id=1354): pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c63616368653d667363616368652c63616368657461673d14e2c311e2cb86c82d4873c6af6ddc7bde3c511a1315e4f85948a98ae388123b56361ed3cc4c3e5523eb70372d09d6bc2f"]) 5.022103171s ago: executing program 2 (id=8647): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x7a, 0x7}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) 4.782335613s ago: executing program 2 (id=8651): r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000000040)={[{@clear_cache}, {@metadata_ratio}, {@ssd_spread}]}, 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000080)=0x12b) 4.194255242s ago: executing program 0 (id=8659): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.887675728s ago: executing program 0 (id=8662): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x1f) 2.652419909s ago: executing program 0 (id=8671): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)={0x2c, 0x3a, 0x1, 0x7fffb, 0x4, {0x1}, [@typed={0x4}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x10}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 2.63038953s ago: executing program 2 (id=8673): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x5d7000000000000, 0x82442) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0xffffffffffffffff, 0x102, 0x3, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="b9e41ba4eaccbabfdc0faa5b6257b5f7cd872582a03639736544c168886bf5b128725241e7d142742c31fd78eca84a2876156fad756000fd977b839b40d1916c4afab2f62d7c4de01928131c8cf0297c5fed48843c19c38643ee948f8cbe6f7039eaed7dd62f0c3d7cf8f50b2f6e3e6fe71e9a4f1e96b16cafe6161447ee0f76d174479e16739ee35c1b966a4a347a12aca919ec85d8d6f070bba48044b1dee5d27dea8543e7660d3142431b7b87753ec0898914274a0abe839838a9b7bdeec0670b1653c552bb66ca2dbe9b30cb879519a093e25e6d18f7901ffef04ea6a1eeb6aec34c1bd9ff3dd87afd407328ea81eab9a29a73ba7437388f52951fc6a84374db", 0x0, 0x80000001, 0x18023, 0x0, 0x0}) 2.448060249s ago: executing program 3 (id=8674): syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000b40)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4, &(0x7f0000005c00)=ANY=[@ANYBLOB="00f3000000be5500200800000000c19e57fc847c52a19b0b247df0690ca7d757194d0335d8e8a065e069e1294e9f28bcee7085d4988309e751e0eec20f77d6c68ae8"], 0x1, 0x14a, &(0x7f0000000080)="$eJzs2j9Lw0AYBvBXEJSOjk6FShQ0/7WuOoqbu0OouTR4MSURpP0C4iQonINfQvAT+Akko5suRfwSkWsPTaNCFk2E57f0gbe93r0HN716Ekc2S3WijcHVwXgpiaN2193uMZt5NLVHRG0Zsjy/MeiL5496lpPxzRfqtfI2/eysBWL/goXcd+reEgAAAAAAAAAAAAAAAAAAAAAAVKS1VGj1RXTOQu7bhWo6HB17nPtJSrRY0w7rpbXVDBcxwW9lf9yZVqzLvCNTKHYTWbdmf3+twmpf8Jdyf83TaGCmw5EeRl7gB/6J47hda9OythxzspZZXlG7U3uiLL+3CuNkxuOhK+uFebOnKvNm6v7nl0NxeVb+t8/7R2hCmKPfWfm1KQdE+Ceh+gvacJP3b0xEC27nQb5/Ri/mR6r4F+2s9/gA8JP3AAAA///ltzsl") creat(&(0x7f00000000c0)='./file0\x00', 0x55) 2.329736005s ago: executing program 0 (id=8675): r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000940)={0x1, 0x0, 0x7, {0x3, 0x1000, 0xfc, 0x4}}) 2.174243992s ago: executing program 0 (id=8676): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001900010000000b8d01283bc90aa9900015110005000000000c00090008001100", @ANYRES32=0x0, @ANYBLOB="080001"], 0x30}}, 0x0) 2.056411088s ago: executing program 3 (id=8677): r0 = socket(0xa, 0x3, 0x87) sendmsg(r0, &(0x7f0000000700)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x209, @dev={0xfe, 0x80, '\x00', 0x23}, 0x5, 0x4}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000140)="99", 0x1}, {0x0, 0x63}], 0x2}, 0x0) 1.946352053s ago: executing program 0 (id=8678): r0 = syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f00000015c0)='./file0\x00', 0x4000, &(0x7f0000003a40), 0x0, 0x559e, &(0x7f000000ac40)="$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") ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000000)={0x1, 0xfffffffffffffffe}) 1.829881529s ago: executing program 3 (id=8680): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLOWINFO={0x8}]}}}]}, 0x3c}}, 0x0) 1.573167442s ago: executing program 3 (id=8682): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) 1.437025329s ago: executing program 1 (id=8684): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a28000000000a01040000000000000000010080030900010073797a300000000008000240000000012c000000030a01010000000000000000010002000900010073797a30000000000900030073797a300000000028010000030a05000000000000000000010000050c00024000000000000000010900010073797a30000000000c0002400000000000000001080005"], 0x1a4}}, 0x0) 1.312371235s ago: executing program 3 (id=8685): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x1, &(0x7f0000000300)={[{@heartbeat_none}, {@heartbeat_none}, {@dir_resv_level}, {@barrier={'barrier', 0x3d, 0x2}}, {@coherency_full}, {@localflocks}, {@coherency_full}, {@inode64}]}, 0x1, 0x4421, &(0x7f0000004500)="$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") syz_mount_image$msdos(&(0x7f0000000940), &(0x7f0000001cc0)='.\x00', 0x1a4a438, &(0x7f0000000300)=ANY=[], 0xb, 0x0, &(0x7f0000000300)) 1.253326878s ago: executing program 5 (id=8686): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000040)) 1.114160495s ago: executing program 1 (id=8687): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x62, 0xfffffffffffffe74, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000cc0)=""/265, 0xcb95, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x3ff}, 0x24) 1.113808385s ago: executing program 2 (id=8688): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000240)={0x2000, 0x1000000}) 1.078691067s ago: executing program 5 (id=8689): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0xa, 0x0, 0x4000}, 0x0, 0x0, &(0x7f0000001100)={{0x0, 0x0, 0x0, 0xfffffffc}}, 0x0, 0x0, 0x1}}) 745.773753ms ago: executing program 5 (id=8690): r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x3, 0x0, 0x0) 720.563805ms ago: executing program 2 (id=8691): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x1f00, 0x12) 589.838651ms ago: executing program 1 (id=8692): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000006100)={0x28, 0x3a, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@typed={0x4}, @nested={0xd, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x06\x00'}, @generic="9f"]}]}, 0x28}}, 0x0) 469.845077ms ago: executing program 1 (id=8693): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_triestat\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/38, 0x26}], 0x1, 0xb3, 0xffffe2a8) 409.373109ms ago: executing program 5 (id=8694): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, 0x0, &(0x7f0000000040)) 351.457903ms ago: executing program 1 (id=8695): r0 = timerfd_create(0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r0, 0x541b, 0x0) 288.668865ms ago: executing program 2 (id=8696): syz_mount_image$fuse(0x0, &(0x7f0000003140)='./file0\x00', 0x1860003, 0x0, 0x1, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x401, &(0x7f0000000080)=ANY=[@ANYBLOB=',trans=fd']) 145.179703ms ago: executing program 5 (id=8697): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) 85.936646ms ago: executing program 5 (id=8698): r0 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x48, &(0x7f0000000080)=ANY=[@ANYBLOB="081a"], 0x18) 681.66µs ago: executing program 3 (id=8699): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f80)={'dummy0\x00', &(0x7f0000000f40)=@ethtool_stats={0x50}}) 0s ago: executing program 1 (id=8700): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) write$cgroup_devices(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): e: invalid value (254) [ 656.388867][T19505] netlink: 'syz.2.6815': attribute type 2 has an invalid length. [ 656.910811][T19520] netlink: 'syz.2.6822': attribute type 1 has an invalid length. [ 657.264047][T19534] loop5: detected capacity change from 0 to 1764 [ 657.272467][T19537] netlink: 'syz.3.6830': attribute type 2 has an invalid length. [ 657.330837][T19534] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 657.455580][ T7] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 657.645418][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 657.652950][ T7] usb 3-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 657.684195][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.767620][T19549] netlink: 'syz.0.6846': attribute type 16 has an invalid length. [ 657.789382][ T7] usb 3-1: selecting invalid altsetting 3 [ 657.800973][T19549] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.6846'. [ 657.830906][ T7] comedi comedi5: could not set alternate setting 3 in high speed [ 657.860516][ T7] usbduxsigma 3-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 657.905129][ T7] usbduxsigma: probe of 3-1:128.0 failed with error -22 [ 657.977003][ T7516] usb 3-1: USB disconnect, device number 31 [ 658.245920][T19562] netlink: 'syz.3.6841': attribute type 1 has an invalid length. [ 659.005508][T19586] netlink: 'syz.3.6852': attribute type 16 has an invalid length. [ 659.044890][T19586] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.6852'. [ 659.155956][T19591] netlink: 'syz.1.6856': attribute type 1 has an invalid length. [ 659.658035][T19612] x_tables: unsorted entry at hook 1 [ 660.000677][T19622] netlink: 'syz.5.6869': attribute type 16 has an invalid length. [ 660.019200][T19622] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.6869'. [ 660.554183][T19611] loop0: detected capacity change from 0 to 32768 [ 660.593115][T19611] (syz.0.6865,19611,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 660.646277][T19611] (syz.0.6865,19611,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 660.772518][T19611] JBD2: Ignoring recovery information on journal [ 660.858360][T19611] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 660.909381][T19638] loop2: detected capacity change from 0 to 1764 [ 660.965401][T14021] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 660.983391][T19638] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 661.159562][ T4269] ocfs2: Unmounting device (7,0) on (node local) [ 661.175467][T14021] usb 4-1: Using ep0 maxpacket: 16 [ 661.184348][T14021] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 661.231408][T14021] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 661.302057][T14021] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 661.335440][T14021] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.363298][T14021] usb 4-1: Product: syz [ 661.378529][T14021] usb 4-1: Manufacturer: syz [ 661.383560][T14021] usb 4-1: SerialNumber: syz [ 661.441459][T14021] r8152-cfgselector 4-1: config 0 descriptor?? [ 661.683148][T14021] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 661.901359][T14021] usb 4-1: USB disconnect, device number 40 [ 662.070268][T19665] x_tables: unsorted entry at hook 1 [ 662.082265][T19644] loop1: detected capacity change from 0 to 32768 [ 662.093706][T19644] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.6883 (19644) [ 662.185355][T19644] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 662.251714][T19644] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 662.283640][T19644] BTRFS info (device loop1): turning off barriers [ 662.314055][T19644] BTRFS info (device loop1): enabling ssd optimizations [ 662.335117][T19644] BTRFS info (device loop1): using spread ssd allocation scheme [ 662.346018][T19670] netlink: 'syz.0.6893': attribute type 12 has an invalid length. [ 662.354148][T19670] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6893'. [ 662.366397][T19644] BTRFS info (device loop1): enabling auto defrag [ 662.374497][T19644] BTRFS info (device loop1): not using ssd optimizations [ 662.394742][T19644] BTRFS info (device loop1): not using spread ssd allocation scheme [ 662.432778][T19644] BTRFS info (device loop1): ignoring data csums [ 662.463201][T19644] BTRFS info (device loop1): force zlib compression, level 3 [ 662.495339][T19644] BTRFS info (device loop1): enabling ssd optimizations [ 662.534985][T19644] BTRFS info (device loop1): using spread ssd allocation scheme [ 662.585526][T19644] BTRFS info (device loop1): using free space tree [ 662.923859][ T4271] BTRFS info (device loop1: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 663.037457][T19700] netlink: 124 bytes leftover after parsing attributes in process `syz.0.6906'. [ 663.400012][T19663] loop5: detected capacity change from 0 to 32768 [ 663.673932][T19716] loop3: detected capacity change from 0 to 64 [ 663.704079][ T4411] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by udevd (4411) [ 663.718018][T19663] XFS (loop5): Mounting V5 Filesystem [ 663.744797][T19721] SET target dimension over the limit! [ 663.952603][T19663] XFS (loop5): Ending clean mount [ 663.981986][T19663] XFS (loop5): Quotacheck needed: Please wait. [ 664.138986][T19730] x_tables: unsorted entry at hook 1 [ 664.219619][T19663] XFS (loop5): Quotacheck: Done. [ 664.408919][T19734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6905'. [ 664.425423][ T7339] XFS (loop5): Unmounting Filesystem [ 665.187278][T19725] loop1: detected capacity change from 0 to 32768 [ 665.222359][T19725] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.6896 (19725) [ 665.291509][T19725] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 665.353544][T19725] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 665.398466][T19725] BTRFS info (device loop1): using free space tree [ 665.531122][T19736] loop3: detected capacity change from 0 to 32768 [ 665.577635][T19736] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.6907 (19736) [ 665.675925][T19736] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 665.735602][T19725] BTRFS info (device loop1): enabling ssd optimizations [ 665.769802][T19736] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 665.805724][T19736] BTRFS info (device loop3): turning off barriers [ 665.813075][T19736] BTRFS info (device loop3): enabling ssd optimizations [ 665.840730][T19736] BTRFS info (device loop3): using spread ssd allocation scheme [ 665.865645][T19736] BTRFS info (device loop3): enabling auto defrag [ 665.872685][T19736] BTRFS info (device loop3): not using ssd optimizations [ 665.923631][T19736] BTRFS info (device loop3): not using spread ssd allocation scheme [ 665.956556][T19736] BTRFS info (device loop3): ignoring data csums [ 665.976691][T19736] BTRFS info (device loop3): force zlib compression, level 3 [ 665.984924][ T4271] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 666.015183][T19736] BTRFS info (device loop3): enabling ssd optimizations [ 666.083702][T19736] BTRFS info (device loop3): using spread ssd allocation scheme [ 666.138803][T19736] BTRFS info (device loop3): using free space tree [ 666.685669][ T125] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 666.895411][ T125] usb 6-1: Using ep0 maxpacket: 16 [ 666.913181][ T125] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 666.946261][ T125] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 667.029656][ T125] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 667.069612][ T125] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.108583][ T125] usb 6-1: Product: syz [ 667.115607][ T125] usb 6-1: Manufacturer: syz [ 667.133721][ T125] usb 6-1: SerialNumber: syz [ 667.150286][ T4277] BTRFS info (device loop3: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 667.172050][ T125] r8152-cfgselector 6-1: config 0 descriptor?? [ 667.179471][T19811] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6921'. [ 667.323120][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 667.323138][ T26] audit: type=1326 audit(2000000507.460:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19814 comm="syz.0.6930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94dc19c799 code=0x7ffc0000 [ 667.412944][ T125] usbip-host 6-1: 6-1 is not in match_busid table... skip! [ 667.455700][ T26] audit: type=1326 audit(2000000507.530:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19814 comm="syz.0.6930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f94dc19c799 code=0x7ffc0000 [ 667.519696][ T26] audit: type=1326 audit(2000000507.530:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19814 comm="syz.0.6930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94dc19c799 code=0x7ffc0000 [ 667.634824][ T125] usb 6-1: USB disconnect, device number 32 [ 667.643122][ T26] audit: type=1326 audit(2000000507.530:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19814 comm="syz.0.6930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94dc19c799 code=0x7ffc0000 [ 668.335152][T19839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6941'. [ 668.498965][ T26] audit: type=1326 audit(2000000508.640:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19845 comm="syz.1.6943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9a59c799 code=0x7ffc0000 [ 668.637682][ T26] audit: type=1326 audit(2000000508.660:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19845 comm="syz.1.6943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9a59c799 code=0x7ffc0000 [ 668.676254][T19850] IPv6: NLM_F_CREATE should be specified when creating new route [ 668.751121][ T26] audit: type=1326 audit(2000000508.660:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19845 comm="syz.1.6943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fcf9a59c799 code=0x7ffc0000 [ 668.790548][T19853] fuse: blksize only supported for fuseblk [ 668.855623][ T26] audit: type=1326 audit(2000000508.660:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19845 comm="syz.1.6943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9a59c799 code=0x7ffc0000 [ 668.970621][ T26] audit: type=1326 audit(2000000508.660:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19845 comm="syz.1.6943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9a59c799 code=0x7ffc0000 [ 669.323403][ T26] audit: type=1326 audit(2000000509.460:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19873 comm="syz.3.6959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5745f9c799 code=0x7ffc0000 [ 669.347771][ T7522] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 669.545460][ T7522] usb 3-1: Using ep0 maxpacket: 16 [ 669.552972][ T7522] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 669.595024][ T7522] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 669.627359][ T7522] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 669.646064][ T7522] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.692258][ T7522] usb 3-1: Product: syz [ 669.702427][ T7522] usb 3-1: Manufacturer: syz [ 669.722727][ T7522] usb 3-1: SerialNumber: syz [ 669.734777][ T7522] r8152-cfgselector 3-1: config 0 descriptor?? [ 669.801582][T19891] fuse: blksize only supported for fuseblk [ 669.828752][T19892] IPv6: NLM_F_CREATE should be specified when creating new route [ 669.976407][ T7522] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 670.051257][ T11] usb 3-1: config 0 descriptor?? [ 670.216155][ T4323] usb 3-1: USB disconnect, device number 32 [ 670.216259][ T11] usb 3-1: can't set config #0, error -71 [ 670.535668][T19914] ieee802154 phy1 wpan1: encryption failed: -22 [ 670.697112][T19919] fuse: blksize only supported for fuseblk [ 670.718740][T19921] loop5: detected capacity change from 0 to 1024 [ 670.751699][T19921] EXT4-fs: Ignoring removed nomblk_io_submit option [ 670.775587][ T4323] usb 1-1: new low-speed USB device number 39 using dummy_hcd [ 670.813280][T19921] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 670.897148][T19925] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6984'. [ 670.925333][T19921] EXT4-fs error (device loop5): ext4_ext_check_inode:520: inode #11: comm syz.5.6981: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 670.955066][T19921] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.6981: couldn't read orphan inode 11 (err -117) [ 670.967958][T19921] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 670.979658][ T4323] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 671.010705][ T4323] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 671.073899][ T4323] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 671.085503][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 671.094795][T19921] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:477: comm syz.5.6981: Invalid block bitmap block 0 in block_group 0 [ 671.135388][ T4323] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 671.181091][ T4323] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 671.192018][T19921] EXT4-fs error (device loop5): ext4_acquire_dquot:6835: comm syz.5.6981: Failed to acquire dquot type 0 [ 671.220104][ T4323] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 671.284509][ T4323] usb 1-1: string descriptor 0 read error: -22 [ 671.303751][ T4323] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 671.333940][ T4323] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.349426][ T7339] EXT4-fs (loop5): unmounting filesystem. [ 671.356628][ T4323] usb 1-1: config 0 descriptor?? [ 671.362445][T19911] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 671.400146][ T4323] hub 1-1:0.0: bad descriptor, ignoring hub [ 671.427390][ T4323] hub: probe of 1-1:0.0 failed with error -5 [ 671.442496][ T4323] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input32 [ 671.646631][ T4323] usb 1-1: USB disconnect, device number 39 [ 671.865059][T19954] loop5: detected capacity change from 0 to 1024 [ 671.998136][T19954] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 672.073920][T19954] EXT4-fs error (device loop5): ext4_empty_dir:3166: inode #11: block 623: comm syz.5.6995: Attempting to read directory block (623) that is past i_size (638464) [ 672.157805][ T7339] EXT4-fs (loop5): unmounting filesystem. [ 672.294124][T19966] loop2: detected capacity change from 0 to 1024 [ 672.315543][ T4323] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 672.366897][T19969] loop3: detected capacity change from 0 to 164 [ 672.505488][ T4323] usb 2-1: Using ep0 maxpacket: 16 [ 672.512962][ T4323] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 672.552092][ T4323] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 672.559044][ T7] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 672.627782][T19972] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7005'. [ 672.642023][ T4323] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 672.675518][ T4323] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.714032][ T4323] usb 2-1: Product: syz [ 672.735519][ T4323] usb 2-1: Manufacturer: syz [ 672.740222][ T4323] usb 2-1: SerialNumber: syz [ 672.764928][ T4323] r8152-cfgselector 2-1: config 0 descriptor?? [ 672.795629][ T7] usb 6-1: Using ep0 maxpacket: 8 [ 672.811788][ T7] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 672.841071][ T7] usb 6-1: config 179 has no interface number 0 [ 672.871699][ T7] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 672.914573][ T7] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 672.947372][ T7] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 672.975368][ T7] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 672.994953][ T4323] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 672.995469][ T7] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 673.042448][ T7] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 673.056376][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.074310][T19965] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 673.095182][ T4334] usb 2-1: config 0 descriptor?? [ 673.221610][ T4334] usb 2-1: can't set config #0, error -71 [ 673.222257][ T4323] usb 2-1: USB disconnect, device number 35 [ 673.547389][T13800] usb 6-1: USB disconnect, device number 33 [ 673.547581][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 673.562291][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 673.669132][T19996] loop0: detected capacity change from 0 to 1024 [ 673.928552][T20001] loop2: detected capacity change from 0 to 64 [ 674.095220][T20005] loop1: detected capacity change from 0 to 1024 [ 674.126705][T20005] EXT4-fs: Ignoring removed nomblk_io_submit option [ 674.164345][T20005] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 674.290539][T20005] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #11: comm syz.1.7020: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 674.444828][T20005] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.7020: couldn't read orphan inode 11 (err -117) [ 674.473255][T20005] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 674.594590][T20005] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm syz.1.7020: Invalid block bitmap block 0 in block_group 0 [ 674.729360][T20005] __quota_error: 6 callbacks suppressed [ 674.729382][T20005] Quota error (device loop1): write_blk: dquota write failed [ 674.759516][T20005] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 674.786509][T20005] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.7020: Failed to acquire dquot type 0 [ 674.972451][T20030] loop2: detected capacity change from 0 to 164 [ 675.002030][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 675.223621][T20038] loop1: detected capacity change from 0 to 64 [ 676.029523][T20064] loop5: detected capacity change from 0 to 512 [ 676.049454][T20066] loop0: detected capacity change from 0 to 164 [ 676.136354][T20064] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 676.156023][T20064] ext4 filesystem being mounted at /1104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 676.197985][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 676.294233][ T7339] EXT4-fs (loop5): unmounting filesystem. [ 676.325511][ T7522] usb 4-1: new low-speed USB device number 41 using dummy_hcd [ 676.524814][T20082] netdevsim netdevsim5: Firmware load for './file0/../file0' refused, path contains '..' component [ 676.547453][ T7522] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 676.567214][ T7522] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 676.610236][ T7522] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 676.639901][ T7522] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 676.671853][ T7522] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 676.733867][ T7522] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 676.779387][ T7522] usb 4-1: string descriptor 0 read error: -22 [ 676.799150][ T7522] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 676.829498][ T7522] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.874817][ T7522] usb 4-1: config 0 descriptor?? [ 676.900436][T20068] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 676.926454][ T7522] hub 4-1:0.0: bad descriptor, ignoring hub [ 676.933462][ T7522] hub: probe of 4-1:0.0 failed with error -5 [ 676.982512][ T7522] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input33 [ 677.033861][T20093] xt_hashlimit: max too large, truncated to 1048576 [ 677.043407][T20093] No such timeout policy "syz1" [ 677.253199][ T7] usb 4-1: USB disconnect, device number 41 [ 677.521605][T20106] loop1: detected capacity change from 0 to 512 [ 677.578260][T20106] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 677.600041][T20106] ext4 filesystem being mounted at /1418/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 677.646962][T20113] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 677.718588][T20117] bad cache= option: nonw [ 677.718588][T20117] [ 677.725998][T20117] CIFS: VFS: bad cache= option: nonw [ 677.856675][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 678.191848][T20122] loop2: detected capacity change from 0 to 8192 [ 678.229445][T20122] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 678.295615][ T4326] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 678.317933][T20122] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 678.393252][T20122] REISERFS (device loop2): using ordered data mode [ 678.441907][T20122] reiserfs: using flush barriers [ 678.485840][T20122] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 678.495924][ T4326] usb 4-1: Using ep0 maxpacket: 8 [ 678.528479][ T4326] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 678.583902][T20122] REISERFS (device loop2): checking transaction log (loop2) [ 678.585654][ T4326] usb 4-1: config 179 has no interface number 0 [ 678.625886][ T4326] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 678.655390][ T4326] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 678.679496][ T4326] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 678.722598][ T4326] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 678.754868][ T4326] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 678.783290][ T4326] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 678.804012][ T4326] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.830825][T20126] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 678.896652][T20122] REISERFS (device loop2): Using tea hash to sort names [ 678.911878][T20122] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 679.010157][T13800] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 679.215523][T13800] usb 1-1: Using ep0 maxpacket: 8 [ 679.239283][T13800] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 679.288011][T13800] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.300318][T20152] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component [ 679.328566][T13800] usb 1-1: Product: syz [ 679.332928][T13800] usb 1-1: Manufacturer: syz [ 679.355534][T13800] usb 1-1: SerialNumber: syz [ 679.375559][ T4326] usb 6-1: new low-speed USB device number 34 using dummy_hcd [ 679.400666][T13800] usb 1-1: config 0 descriptor?? [ 679.420097][ T7522] usb 4-1: USB disconnect, device number 42 [ 679.420149][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 679.420241][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 679.443003][T13800] radio-usb-si4713 1-1:0.0: Si4713 development board discovered: (10C4:8244) [ 679.473704][T20154] loop2: detected capacity change from 0 to 512 [ 679.534503][T20154] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 679.573172][T20154] ext4 filesystem being mounted at /1460/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 679.587580][ T4326] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 679.597017][ T4326] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 679.606788][ T4326] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 679.616641][ T4326] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 679.629540][ T4326] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 679.640793][ T4326] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 679.658224][ T4326] usb 6-1: string descriptor 0 read error: -22 [ 679.664881][ T4326] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 679.675060][ T4326] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.712420][ T4326] usb 6-1: config 0 descriptor?? [ 679.737468][T20148] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 679.767729][ T4326] hub 6-1:0.0: bad descriptor, ignoring hub [ 679.774201][ T4326] hub: probe of 6-1:0.0 failed with error -5 [ 679.801827][ T4326] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input34 [ 679.864839][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 679.892545][T13800] radio-usb-si4713: probe of 1-1:0.0 failed with error -71 [ 679.938082][T13800] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 679.995779][T13800] usb 1-1: USB disconnect, device number 40 [ 680.052077][ C1] usb_acecad 6-1:0.0: can't resubmit intr, dummy_hcd.5-1/input0, status -1 [ 680.141286][ T4321] usb 6-1: USB disconnect, device number 34 [ 680.382979][T20172] loop3: detected capacity change from 0 to 256 [ 680.424869][T20172] /dev/loop3: Can't open blockdev [ 680.721679][T20184] xt_hashlimit: max too large, truncated to 1048576 [ 680.736113][T20183] netdevsim netdevsim3: Firmware load for './file0/../file0' refused, path contains '..' component [ 680.790174][T20184] No such timeout policy "syz1" [ 681.111268][T20191] loop5: detected capacity change from 0 to 4096 [ 681.297967][T20204] loop1: detected capacity change from 0 to 256 [ 681.314204][T20191] ntfs3: loop5: ino=1e, "file1" attr_set_size [ 681.365214][T20204] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x25f1dec1, utbl_chksum : 0xe619d30d) [ 681.402207][T20191] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 681.516135][T20204] exFAT-fs (loop1): error, found bogus dentry(10) beyond unused empty group(9) (start_clu : 5, cur_clu : 5) [ 681.557265][T20202] loop3: detected capacity change from 0 to 8192 [ 681.632787][T12353] I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 682.125756][T20224] netlink: 'syz.1.7124': attribute type 9 has an invalid length. [ 682.133937][T20224] netlink: 'syz.1.7124': attribute type 7 has an invalid length. [ 682.207210][T20224] netlink: 'syz.1.7124': attribute type 8 has an invalid length. [ 682.744786][T20239] loop5: detected capacity change from 0 to 4096 [ 682.799009][T20239] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 682.828961][T20249] device wlan0 left promiscuous mode [ 682.859813][T20249] device geneve2 left promiscuous mode [ 682.927742][T20239] ntfs3: loop5: ntfs_sync_fs r=1a failed, -22. [ 682.934291][T20239] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 683.109169][T20246] loop1: detected capacity change from 0 to 8192 [ 683.152813][T20255] loop3: detected capacity change from 0 to 256 [ 683.197862][T20246] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 683.285697][T20246] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 683.296743][T20255] exfat: Deprecated parameter 'utf8' [ 683.302313][T20255] exfat: Deprecated parameter 'namecase' [ 683.310157][T20255] exfat: Deprecated parameter 'namecase' [ 683.316419][T20255] /dev/loop3: Can't open blockdev [ 683.367941][T20246] REISERFS (device loop1): using ordered data mode [ 683.407232][T12353] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 683.418880][T20246] reiserfs: using flush barriers [ 683.483155][T20246] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 683.586295][T20246] REISERFS (device loop1): checking transaction log (loop1) [ 683.852875][T20267] loop2: detected capacity change from 0 to 4096 [ 683.981447][T20246] REISERFS (device loop1): Using tea hash to sort names [ 684.004973][T20246] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 684.119706][T20267] ntfs3: loop2: ino=1e, "file1" attr_set_size [ 684.134532][T20267] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 684.844539][T20294] loop0: detected capacity change from 0 to 256 [ 684.912947][T20294] exfat: Deprecated parameter 'utf8' [ 684.962506][T20294] exfat: Deprecated parameter 'namecase' [ 684.982477][T20294] exfat: Deprecated parameter 'namecase' [ 685.053356][T20294] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 685.576922][T20321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7172'. [ 685.587448][T20321] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 685.761989][T20311] loop5: detected capacity change from 0 to 8192 [ 685.843329][T20311] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 685.947266][T20311] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 685.965713][T20311] REISERFS (device loop5): using ordered data mode [ 685.972595][T20311] reiserfs: using flush barriers [ 685.979591][T20311] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 686.014931][T20311] REISERFS (device loop5): checking transaction log (loop5) [ 686.288700][T20311] REISERFS (device loop5): Using tea hash to sort names [ 686.320614][T20311] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 686.337088][T20343] loop1: detected capacity change from 0 to 256 [ 686.373324][T20343] exfat: Deprecated parameter 'utf8' [ 686.402804][T20343] exfat: Deprecated parameter 'namecase' [ 686.431529][T20343] exfat: Deprecated parameter 'namecase' [ 686.503993][T20343] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 686.879982][T20354] netlink: 'syz.0.7188': attribute type 9 has an invalid length. [ 686.909073][T20354] netlink: 'syz.0.7188': attribute type 7 has an invalid length. [ 686.945548][T20354] netlink: 'syz.0.7188': attribute type 8 has an invalid length. [ 687.025570][ T4323] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 687.226964][ T4323] usb 4-1: Using ep0 maxpacket: 8 [ 687.247324][ T4323] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 687.293523][ T4323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.318917][ T4323] usb 4-1: Product: syz [ 687.325654][ T4323] usb 4-1: Manufacturer: syz [ 687.330898][ T4323] usb 4-1: SerialNumber: syz [ 687.365631][ T4323] usb 4-1: config 0 descriptor?? [ 687.389863][ T4323] radio-usb-si4713 4-1:0.0: Si4713 development board discovered: (10C4:8244) [ 687.712129][ T2165] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 687.819932][T20384] netlink: 'syz.2.7202': attribute type 9 has an invalid length. [ 687.836562][T20384] netlink: 'syz.2.7202': attribute type 7 has an invalid length. [ 687.844796][T20384] netlink: 'syz.2.7202': attribute type 8 has an invalid length. [ 687.858453][ T4323] radio-usb-si4713: probe of 4-1:0.0 failed with error -71 [ 687.871127][ T4323] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 687.898655][ T4323] usb 4-1: USB disconnect, device number 43 [ 687.905450][ T2165] usb 1-1: Using ep0 maxpacket: 16 [ 687.912585][ T2165] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 687.946525][ T2165] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 687.987371][ T2165] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 688.023197][T20386] loop1: detected capacity change from 0 to 4096 [ 688.029827][ T2165] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 688.046507][ T2165] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 688.081744][ T2165] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.088573][T20386] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 688.109287][ T2165] usb 1-1: Product: syz [ 688.130978][ T2165] usb 1-1: Manufacturer: syz [ 688.151059][ T2165] usb 1-1: SerialNumber: syz [ 688.244056][T20386] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22. [ 688.282137][T20386] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 688.600080][ T2165] usb 1-1: 0:2 : does not exist [ 688.643187][ T2165] usb 1-1: USB disconnect, device number 41 [ 688.927690][ T4511] udevd[4511]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 689.094091][T20412] netlink: 'syz.3.7214': attribute type 9 has an invalid length. [ 689.112550][T20412] netlink: 'syz.3.7214': attribute type 7 has an invalid length. [ 689.168860][T20412] netlink: 'syz.3.7214': attribute type 8 has an invalid length. [ 689.262907][T20418] loop2: detected capacity change from 0 to 16 [ 689.313173][T20418] erofs: (device loop2): mounted with root inode @ nid 36. [ 690.311836][T20450] loop0: detected capacity change from 0 to 4096 [ 690.325393][ T125] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 690.515627][ T125] usb 4-1: Using ep0 maxpacket: 16 [ 690.523652][ T125] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 690.574844][ T125] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 690.639453][ T125] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 690.665341][ T125] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 690.706883][ T125] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 690.725386][ T125] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.733724][ T125] usb 4-1: Product: syz [ 690.747882][ T125] usb 4-1: Manufacturer: syz [ 690.753068][ T125] usb 4-1: SerialNumber: syz [ 690.865411][ T2165] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 691.055440][ T2165] usb 2-1: Using ep0 maxpacket: 8 [ 691.067468][ T2165] usb 2-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 691.104714][ T2165] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 691.125476][ T2165] usb 2-1: Product: syz [ 691.129831][ T2165] usb 2-1: Manufacturer: syz [ 691.155218][ T2165] usb 2-1: SerialNumber: syz [ 691.186639][ T2165] usb 2-1: config 0 descriptor?? [ 691.207876][ T125] usb 4-1: 0:2 : does not exist [ 691.214706][ T2165] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 691.244258][ T125] usb 4-1: USB disconnect, device number 44 [ 691.568603][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.578843][ T4511] udevd[4511]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 691.606942][ T2165] gspca_sn9c2028: read1 error -71 [ 691.626200][ T2165] gspca_sn9c2028: read1 error -71 [ 691.645535][ T2165] sn9c2028: probe of 2-1:0.0 failed with error -71 [ 691.682938][ T2165] usb 2-1: USB disconnect, device number 36 [ 694.034990][T20574] loop3: detected capacity change from 0 to 4096 [ 694.053208][T20574] /dev/loop3: Can't open blockdev [ 695.025498][ T125] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 695.183134][T20627] loop5: detected capacity change from 0 to 512 [ 695.235756][ T125] usb 3-1: Using ep0 maxpacket: 16 [ 695.247289][ T125] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 695.290950][ T125] usb 3-1: New USB device found, idVendor=1803, idProduct=5510, bcdDevice=7d.bf [ 695.312582][T20627] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 695.358551][ T125] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.447206][ T125] usb 3-1: Product: syz [ 695.451477][ T125] usb 3-1: Manufacturer: syz [ 695.485733][ T125] usb 3-1: SerialNumber: syz [ 695.513902][ T125] usb 3-1: config 0 descriptor?? [ 695.572178][ T7339] EXT4-fs (loop5): unmounting filesystem. [ 695.743042][ T125] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 695.960039][ T125] usb 3-1: USB disconnect, device number 33 [ 696.475046][T20665] loop1: detected capacity change from 0 to 4096 [ 697.546764][T20703] loop2: detected capacity change from 0 to 512 [ 697.656589][T20703] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 697.765482][T20711] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7358'. [ 697.849030][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 697.894870][ C0] vkms_vblank_simulate: vblank timer overrun [ 698.087459][T20724] loop3: detected capacity change from 0 to 64 [ 698.475719][T20734] loop3: detected capacity change from 0 to 256 [ 698.531408][ T4411] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 698.798581][T20744] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7374'. [ 698.832670][T20745] loop3: detected capacity change from 0 to 512 [ 698.846983][T20745] /dev/loop3: Can't open blockdev [ 698.928023][ T4411] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 699.433833][T20764] device bond4 entered promiscuous mode [ 699.502859][T20764] 8021q: adding VLAN 0 to HW filter on device bond4 [ 700.036167][T20785] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7391'. [ 700.330288][T20793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7395'. [ 700.379328][T20795] loop2: detected capacity change from 0 to 64 [ 701.046020][T20819] loop0: detected capacity change from 0 to 512 [ 701.444079][T20834] netlink: 180 bytes leftover after parsing attributes in process `syz.1.7416'. [ 701.698666][T20838] device bond4 entered promiscuous mode [ 701.704603][T20838] 8021q: adding VLAN 0 to HW filter on device bond4 [ 701.795504][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 701.935572][ T4321] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 702.135360][ T4321] usb 6-1: Using ep0 maxpacket: 16 [ 702.155968][ T4321] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 702.228002][ T4321] usb 6-1: New USB device found, idVendor=1803, idProduct=5510, bcdDevice=7d.bf [ 702.245998][T20858] loop3: detected capacity change from 0 to 512 [ 702.256208][ T4321] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.264517][ T4321] usb 6-1: Product: syz [ 702.302746][ T4321] usb 6-1: Manufacturer: syz [ 702.309401][ T4321] usb 6-1: SerialNumber: syz [ 702.324336][ T4321] usb 6-1: config 0 descriptor?? [ 702.381969][ T4411] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 702.382490][T20864] netlink: 180 bytes leftover after parsing attributes in process `syz.2.7431'. [ 702.563698][ T4321] cxacru 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 702.791238][ T4321] usb 6-1: USB disconnect, device number 35 [ 703.032577][T20876] device bond2 entered promiscuous mode [ 703.046933][T20876] 8021q: adding VLAN 0 to HW filter on device bond2 [ 703.181779][T20862] loop1: detected capacity change from 0 to 32768 [ 703.265391][T20862] JBD2: Ignoring recovery information on journal [ 703.488343][T20862] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 703.723682][ T4271] ocfs2: Unmounting device (7,1) on (node local) [ 704.442656][T20913] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7452'. [ 704.475598][T20913] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7452'. [ 704.507129][T20913] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7452'. [ 704.709965][T20921] netlink: 216 bytes leftover after parsing attributes in process `syz.1.7456'. [ 704.765218][T20921] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7456'. [ 705.006185][T20898] loop3: detected capacity change from 0 to 32768 [ 705.568290][T20948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7469'. [ 705.643051][T20948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7469'. [ 705.709321][T20947] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7468'. [ 705.745434][T20947] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7468'. [ 705.785432][T20947] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7468'. [ 706.119336][T20966] netlink: 'syz.0.7478': attribute type 13 has an invalid length. [ 706.183265][T20966] gretap0: refused to change device tx_queue_len [ 706.211439][T20966] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 706.855619][ T7522] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 706.954061][T20992] loop5: detected capacity change from 0 to 1024 [ 707.065497][ T7522] usb 1-1: Using ep0 maxpacket: 16 [ 707.076113][ T7522] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 707.102321][ T7522] usb 1-1: New USB device found, idVendor=1803, idProduct=5510, bcdDevice=7d.bf [ 707.113543][ T7522] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.122346][ T7522] usb 1-1: Product: syz [ 707.133014][ T7522] usb 1-1: Manufacturer: syz [ 707.138920][ T7522] usb 1-1: SerialNumber: syz [ 707.139040][T20974] loop2: detected capacity change from 0 to 32768 [ 707.165148][ T7522] usb 1-1: config 0 descriptor?? [ 707.188657][ T56] hfsplus: b-tree write err: -5, ino 25 [ 707.195119][ T56] hfsplus: b-tree write err: -5, ino 4 [ 707.231447][ T56] hfsplus: b-tree write err: -5, ino 2 [ 707.403125][ T7522] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 707.641042][ T7522] usb 1-1: USB disconnect, device number 42 [ 707.853463][T21012] ax25_connect(): syz.5.7501 uses autobind, please contact jreuter@yaina.de [ 708.123162][T21020] loop1: detected capacity change from 0 to 1024 [ 708.235139][T21023] loop3: detected capacity change from 0 to 256 [ 708.330989][T19705] hfsplus: b-tree write err: -5, ino 25 [ 708.339001][T19705] hfsplus: b-tree write err: -5, ino 4 [ 708.344760][T19705] hfsplus: b-tree write err: -5, ino 2 [ 708.955468][ T7522] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 709.014420][T21046] loop2: detected capacity change from 0 to 1024 [ 709.159696][ T7522] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 709.183045][ T7522] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 709.215070][ T7522] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.237734][ T7522] usb 4-1: Product: syz [ 709.242228][ T7522] usb 4-1: Manufacturer: syz [ 709.253860][ T7522] usb 4-1: SerialNumber: syz [ 709.263765][ T7522] usb 4-1: config 0 descriptor?? [ 709.299260][T21055] loop1: detected capacity change from 0 to 2048 [ 709.308604][ T40] hfsplus: b-tree write err: -5, ino 25 [ 709.327072][ T40] hfsplus: b-tree write err: -5, ino 4 [ 709.332815][ T40] hfsplus: b-tree write err: -5, ino 2 [ 709.411323][T21059] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 709.456652][T21055] NILFS error (device loop1): nilfs_check_page: bad entry in directory #12: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 709.500745][T21061] loop2: detected capacity change from 0 to 256 [ 709.552948][ T7522] snd-usb-audio: probe of 4-1:0.0 failed with error -2 [ 709.594293][T21055] Remounting filesystem read-only [ 709.623952][T21061] FAT-fs (loop2): Directory bread(block 64) failed [ 709.662434][T21061] FAT-fs (loop2): Directory bread(block 65) failed [ 709.701322][T21061] FAT-fs (loop2): Directory bread(block 66) failed [ 709.716901][ T4411] udevd[4411]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 709.742505][ T7522] usb 4-1: USB disconnect, device number 45 [ 709.764457][T21061] FAT-fs (loop2): Directory bread(block 67) failed [ 709.794981][T21061] FAT-fs (loop2): Directory bread(block 68) failed [ 709.822770][T21061] FAT-fs (loop2): Directory bread(block 69) failed [ 709.845815][T21061] FAT-fs (loop2): Directory bread(block 70) failed [ 709.892668][T21061] FAT-fs (loop2): Directory bread(block 71) failed [ 709.911845][T21061] FAT-fs (loop2): Directory bread(block 72) failed [ 709.921971][T21061] FAT-fs (loop2): Directory bread(block 73) failed [ 710.434148][T21080] netlink: 'syz.5.7534': attribute type 13 has an invalid length. [ 710.472952][T21080] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 710.489813][T21085] ax25_connect(): syz.3.7536 uses autobind, please contact jreuter@yaina.de [ 710.539561][T21080] gretap0: refused to change device tx_queue_len [ 710.558063][T21080] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 710.931239][T21100] loop3: detected capacity change from 0 to 16 [ 710.942886][T21101] loop0: detected capacity change from 0 to 256 [ 710.960535][T21100] erofs: (device loop3): mounted with root inode @ nid 36. [ 711.008897][T21101] FAT-fs (loop0): Directory bread(block 64) failed [ 711.050176][T21101] FAT-fs (loop0): Directory bread(block 65) failed [ 711.064464][T21100] erofs: (device loop3): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 711.066235][T21101] FAT-fs (loop0): Directory bread(block 66) failed [ 711.104214][T21101] FAT-fs (loop0): Directory bread(block 67) failed [ 711.119456][T21100] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 711.149991][T21101] FAT-fs (loop0): Directory bread(block 68) failed [ 711.165599][T21100] erofs: (device loop3): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 711.194239][T21101] FAT-fs (loop0): Directory bread(block 69) failed [ 711.231979][T21101] FAT-fs (loop0): Directory bread(block 70) failed [ 711.241214][T21104] loop2: detected capacity change from 0 to 2048 [ 711.255444][T21101] FAT-fs (loop0): Directory bread(block 71) failed [ 711.281792][T21101] FAT-fs (loop0): Directory bread(block 72) failed [ 711.318248][T21101] FAT-fs (loop0): Directory bread(block 73) failed [ 711.326329][T21104] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 711.530420][T21109] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 711.556915][T21109] EXT4-fs (loop1): orphan cleanup on readonly fs [ 711.602338][T21109] Quota error (device loop1): find_block_dqentry: Quota for id 0 referenced but not present [ 711.765521][T21109] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 711.775011][T21109] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.7549: Failed to acquire dquot type 1 [ 711.891029][T21109] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.7549: bg 0: block 40: padding at end of block bitmap is not set [ 711.972309][T21109] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6179: Corrupt filesystem [ 712.002788][T21109] EXT4-fs (loop1): 1 truncate cleaned up [ 712.013801][T21124] netlink: 'syz.2.7554': attribute type 13 has an invalid length. [ 712.022825][T21109] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 712.066384][T21124] gretap0: refused to change device tx_queue_len [ 712.106664][T21124] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 712.176129][T21126] __nla_validate_parse: 13 callbacks suppressed [ 712.176152][T21126] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7556'. [ 712.223327][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 712.446602][T21133] set_capacity_and_notify: 1 callbacks suppressed [ 712.446626][T21133] loop2: detected capacity change from 0 to 256 [ 712.460436][T21134] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 712.467802][T21134] IPv6: NLM_F_CREATE should be set when creating new route [ 712.475433][T21134] IPv6: NLM_F_CREATE should be set when creating new route [ 712.604917][T21133] FAT-fs (loop2): Directory bread(block 64) failed [ 712.627614][T21133] FAT-fs (loop2): Directory bread(block 65) failed [ 712.680809][T21133] FAT-fs (loop2): Directory bread(block 66) failed [ 712.713137][T21133] FAT-fs (loop2): Directory bread(block 67) failed [ 712.737574][T21133] FAT-fs (loop2): Directory bread(block 68) failed [ 712.774020][T21133] FAT-fs (loop2): Directory bread(block 69) failed [ 712.809040][T21133] FAT-fs (loop2): Directory bread(block 70) failed [ 712.830481][T21133] FAT-fs (loop2): Directory bread(block 71) failed [ 712.842086][T21133] FAT-fs (loop2): Directory bread(block 72) failed [ 712.865606][T21133] FAT-fs (loop2): Directory bread(block 73) failed [ 713.687907][T21170] loop5: detected capacity change from 0 to 2048 [ 713.738897][T21170] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 713.976411][T21181] loop3: detected capacity change from 0 to 256 [ 714.277013][T21191] loop2: detected capacity change from 0 to 16 [ 714.314209][T21191] erofs: (device loop2): mounted with root inode @ nid 36. [ 714.459483][T21191] erofs: (device loop2): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 714.511675][T21191] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 714.546563][T21191] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 714.661015][T21202] x_tables: ip_tables: osf match: only valid for protocol 6 [ 714.821805][T21208] loop2: detected capacity change from 0 to 512 [ 714.868050][T21209] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7596'. [ 714.887839][T21208] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 714.908343][T21208] EXT4-fs (loop2): orphan cleanup on readonly fs [ 714.939514][T21212] loop5: detected capacity change from 0 to 256 [ 714.982268][T21208] Quota error (device loop2): find_block_dqentry: Quota for id 0 referenced but not present [ 715.016008][T21208] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 715.051919][T21214] loop0: detected capacity change from 0 to 2048 [ 715.071376][T21208] EXT4-fs error (device loop2): ext4_acquire_dquot:6835: comm syz.2.7598: Failed to acquire dquot type 1 [ 715.101494][T21214] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 715.114817][T21208] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.7598: bg 0: block 40: padding at end of block bitmap is not set [ 715.177512][T21212] FAT-fs (loop5): Directory bread(block 64) failed [ 715.195850][T21208] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6179: Corrupt filesystem [ 715.219583][T21212] FAT-fs (loop5): Directory bread(block 65) failed [ 715.244808][T21212] FAT-fs (loop5): Directory bread(block 66) failed [ 715.247267][T21208] EXT4-fs (loop2): 1 truncate cleaned up [ 715.299995][T21208] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 715.306798][T21212] FAT-fs (loop5): Directory bread(block 67) failed [ 715.336045][T21212] FAT-fs (loop5): Directory bread(block 68) failed [ 715.342772][T21212] FAT-fs (loop5): Directory bread(block 69) failed [ 715.376127][T21212] FAT-fs (loop5): Directory bread(block 70) failed [ 715.406724][T21212] FAT-fs (loop5): Directory bread(block 71) failed [ 715.413527][T21212] FAT-fs (loop5): Directory bread(block 72) failed [ 715.460936][T21212] FAT-fs (loop5): Directory bread(block 73) failed [ 715.713045][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 715.933629][T21205] loop3: detected capacity change from 0 to 32768 [ 716.316489][T21238] netlink: 168 bytes leftover after parsing attributes in process `syz.1.7611'. [ 716.392688][T21243] xt_SECMARK: invalid mode: 2 [ 716.921800][T21257] bond0: (slave bond_slave_1): Releasing backup interface [ 717.294868][T21273] loop2: detected capacity change from 0 to 164 [ 717.362748][T21273] rock: directory entry would overflow storage [ 717.379623][T21273] rock: sig=0x66, size=4, remaining=3 [ 717.399657][T21273] rock: directory entry would overflow storage [ 717.435659][T21273] rock: sig=0x66, size=4, remaining=3 [ 717.595659][ T125] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 717.801931][ T125] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 717.834390][ T125] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 717.891903][ T125] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 717.912477][ T125] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.958301][T21279] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 718.325066][ T125] usb 2-1: USB disconnect, device number 37 [ 718.699582][T21316] IPv6: Can't replace route, no match found [ 718.798964][T21320] loop3: detected capacity change from 0 to 128 [ 718.828365][T21320] /dev/loop3: Can't open blockdev [ 718.900685][T21318] loop2: detected capacity change from 0 to 4096 [ 719.549983][T21342] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7662'. [ 719.716420][T21347] overlayfs: missing 'lowerdir' [ 720.132300][T21362] loop0: detected capacity change from 0 to 512 [ 720.234443][T21362] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80fc02c, mo2=0002] [ 720.257511][T21362] System zones: 1-12 [ 720.277445][T21362] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.7672: error while reading EA inode 32 err=-116 [ 720.425577][T21362] EXT4-fs (loop0): Remounting filesystem read-only [ 720.443468][T21364] loop1: detected capacity change from 0 to 4096 [ 720.462818][T21362] EXT4-fs (loop0): 1 orphan inode deleted [ 720.479048][T21362] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 720.498128][T21364] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 720.529403][T21362] EXT4-fs error (device loop0): ext4_lookup:1862: inode #2: comm syz.0.7672: deleted inode referenced: 15 [ 720.548088][T21364] ntfs3: loop1: ntfs_evict_inode r=6 failed, -22. [ 720.567155][T21364] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 720.626508][T21362] EXT4-fs (loop0): Remounting filesystem read-only [ 720.846972][ T4269] EXT4-fs (loop0): unmounting filesystem. [ 721.134442][T21391] --map-set only usable from mangle table [ 721.484483][T21372] loop3: detected capacity change from 0 to 32768 [ 721.595527][ T4411] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 721.726908][T21401] loop5: detected capacity change from 0 to 1764 [ 722.130589][T21411] device netdevsim0 entered promiscuous mode [ 722.163074][T21411] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 722.281371][T21367] Bluetooth: hci3: command 0x2016 tx timeout [ 722.388413][T21393] loop2: detected capacity change from 0 to 32768 [ 722.449226][T21393] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.7686 (21393) [ 722.518753][T21393] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 722.559128][T21393] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 722.637249][T21393] BTRFS info (device loop2): enabling disk space caching [ 722.699633][T21393] BTRFS info (device loop2): force clearing of disk cache [ 722.733233][T21393] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 722.767782][T21393] BTRFS info (device loop2): use zstd compression, level 3 [ 722.805402][T21393] BTRFS info (device loop2): disk space caching is enabled [ 722.848383][T21425] loop1: detected capacity change from 0 to 4096 [ 722.912107][T21425] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 723.041799][T21448] loop0: detected capacity change from 0 to 2048 [ 723.068078][T21393] BTRFS info (device loop2): enabling ssd optimizations [ 723.102881][T21393] BTRFS info (device loop2): rebuilding free space tree [ 723.118366][T21448] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 723.186106][T21393] BTRFS info (device loop2): disabling free space tree [ 723.218762][T21393] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 723.282125][T21393] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 723.506051][T21393] BTRFS error (device loop2: state M): unrecognized mount option '18446744073709551615' [ 723.761737][ T4275] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 724.048617][T21471] loop3: detected capacity change from 0 to 64 [ 724.491940][T21485] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 724.763437][T21487] loop5: detected capacity change from 0 to 2048 [ 725.631454][T21517] loop0: detected capacity change from 0 to 1024 [ 725.685046][T21521] netlink: 'syz.2.7741': attribute type 1 has an invalid length. [ 725.705377][T21521] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7741'. [ 725.751893][T21517] Quota error (device loop0): do_check_range: Getting block 64 out of range 1-5 [ 725.788394][T21525] usb usb8: usbfs: process 21525 (syz.5.7742) did not claim interface 0 before use [ 725.825573][T21517] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 725.836517][T21517] EXT4-fs error (device loop0): ext4_acquire_dquot:6835: comm syz.0.7739: Failed to acquire dquot type 0 [ 725.870827][T21517] EXT4-fs error (device loop0): mb_free_blocks:1824: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 725.911712][T21517] EXT4-fs error (device loop0): ext4_do_update_inode:5272: inode #13: comm syz.0.7739: corrupted inode contents [ 725.982374][T21517] EXT4-fs error (device loop0): ext4_dirty_inode:6137: inode #13: comm syz.0.7739: mark_inode_dirty error [ 726.026159][T21517] EXT4-fs error (device loop0): ext4_do_update_inode:5272: inode #13: comm syz.0.7739: corrupted inode contents [ 726.082543][T21517] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #13: comm syz.0.7739: mark_inode_dirty error [ 726.110731][T21517] EXT4-fs error (device loop0): ext4_do_update_inode:5272: inode #13: comm syz.0.7739: corrupted inode contents [ 726.165807][T21517] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 726.187440][T21517] EXT4-fs error (device loop0): ext4_do_update_inode:5272: inode #13: comm syz.0.7739: corrupted inode contents [ 726.251912][T21517] EXT4-fs error (device loop0): ext4_truncate:4318: inode #13: comm syz.0.7739: mark_inode_dirty error [ 726.302376][T21517] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 726.344418][T21517] EXT4-fs (loop0): 1 truncate cleaned up [ 726.364452][T21517] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 726.427945][T21517] Quota error (device loop0): do_check_range: Getting block 64 out of range 1-5 [ 726.496870][T21517] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 726.535410][T21517] EXT4-fs error (device loop0): ext4_acquire_dquot:6835: comm syz.0.7739: Failed to acquire dquot type 0 [ 726.772712][ T4269] EXT4-fs (loop0): unmounting filesystem. [ 726.863549][T21557] loop1: detected capacity change from 0 to 256 [ 726.976834][T21557] FAT-fs (loop1): Directory bread(block 64) failed [ 726.983898][T21557] FAT-fs (loop1): Directory bread(block 65) failed [ 726.997960][T21559] loop0: detected capacity change from 0 to 512 [ 727.038028][T21557] FAT-fs (loop1): Directory bread(block 66) failed [ 727.049541][T21559] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 727.112861][T21557] FAT-fs (loop1): Directory bread(block 67) failed [ 727.123224][T21559] EXT4-fs (loop0): orphan cleanup on readonly fs [ 727.136581][T21557] FAT-fs (loop1): Directory bread(block 68) failed [ 727.153765][T21557] FAT-fs (loop1): Directory bread(block 69) failed [ 727.185720][T21557] FAT-fs (loop1): Directory bread(block 70) failed [ 727.192466][T21557] FAT-fs (loop1): Directory bread(block 71) failed [ 727.220329][T21559] EXT4-fs warning (device loop0): ext4_enable_quotas:7087: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 727.255846][T21557] FAT-fs (loop1): Directory bread(block 72) failed [ 727.275889][T21559] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 727.283213][T21557] FAT-fs (loop1): Directory bread(block 73) failed [ 727.308763][T21559] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #13: comm syz.0.7759: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 727.426253][T21559] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.7759: couldn't read orphan inode 13 (err -117) [ 727.502345][T21559] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 727.607661][T21559] EXT4-fs error (device loop0): ext4_lookup:1858: comm syz.0.7759: inode #15: comm syz.0.7759: iget: illegal inode # [ 727.775114][ T4269] EXT4-fs (loop0): unmounting filesystem. [ 727.912678][T21582] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7769'. [ 727.951003][T21582] netlink: 'syz.1.7769': attribute type 1 has an invalid length. [ 727.989461][T21582] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7769'. [ 728.242898][T21592] loop1: detected capacity change from 0 to 256 [ 728.422690][T21592] FAT-fs (loop1): Directory bread(block 64) failed [ 728.455445][T21592] FAT-fs (loop1): Directory bread(block 65) failed [ 728.462561][T21592] FAT-fs (loop1): Directory bread(block 66) failed [ 728.531697][T21592] FAT-fs (loop1): Directory bread(block 67) failed [ 728.580825][T21592] FAT-fs (loop1): Directory bread(block 68) failed [ 728.603080][T21592] FAT-fs (loop1): Directory bread(block 69) failed [ 728.646821][T21592] FAT-fs (loop1): Directory bread(block 70) failed [ 728.664770][T21592] FAT-fs (loop1): Directory bread(block 71) failed [ 728.693673][T21592] FAT-fs (loop1): Directory bread(block 72) failed [ 728.718987][T21592] FAT-fs (loop1): Directory bread(block 73) failed [ 728.948639][T21610] device netdevsim0 entered promiscuous mode [ 729.004454][T21610] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7784'. [ 729.034850][T21580] loop2: detected capacity change from 0 to 32768 [ 729.157389][T21580] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 729.192238][T21580] XFS (loop2): Mounting V5 Filesystem [ 729.507014][T21580] XFS (loop2): Ending clean mount [ 729.738038][ T4275] XFS (loop2): Unmounting Filesystem [ 730.540722][T21663] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7807'. [ 730.561796][T21663] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7807'. [ 731.405868][T21693] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7821'. [ 732.328822][T21687] loop1: detected capacity change from 0 to 32768 [ 732.335611][ T4323] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 732.474544][T21687] XFS (loop1): Mounting V5 Filesystem [ 732.537106][ T4323] usb 3-1: too many configurations: 227, using maximum allowed: 8 [ 732.595975][ T4323] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 732.665458][ T4323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.686259][T21687] XFS (loop1): Ending clean mount [ 732.718304][ T4323] usb 3-1: config 0 descriptor?? [ 732.752250][ T4323] pwc: Samsung MPC-C10 USB webcam detected. [ 732.804194][ T4323] pwc: Warning: more than 1 configuration available. [ 732.956726][ T4323] pwc: send_video_command error -71 [ 732.962132][ T4323] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 732.995854][ T4323] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 733.036861][ T4323] usb 3-1: USB disconnect, device number 34 [ 733.058195][T21747] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7844'. [ 733.089731][ T4271] XFS (loop1): Unmounting Filesystem [ 733.362546][T21754] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7848'. [ 734.083119][ T125] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 734.101549][T21773] program syz.0.7857 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 734.213333][T21775] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7858'. [ 734.278701][ T125] usb 6-1: unable to get BOS descriptor or descriptor too short [ 734.298125][ T125] usb 6-1: not running at top speed; connect to a high speed hub [ 734.333442][T21779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7859'. [ 734.342026][ T125] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 734.398892][ T125] usb 6-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 734.421657][ T125] usb 6-1: string descriptor 0 read error: -22 [ 734.460943][ T125] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=b2.86 [ 734.505424][ T125] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.780955][ T125] snd-usb-6fire 6-1:2.0: unknown device firmware state received from device: [ 734.805334][ T125] eb 2e 87 4b 9a 05 e6 5e [ 734.809977][ T125] snd-usb-6fire: probe of 6-1:2.0 failed with error -5 [ 735.039958][ T125] usb 6-1: USB disconnect, device number 36 [ 736.868185][T21875] netlink: 'syz.0.7907': attribute type 5 has an invalid length. [ 737.258793][T21889] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7913'. [ 737.286891][ T4323] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 737.489740][ T4323] usb 2-1: Using ep0 maxpacket: 8 [ 737.500751][ T4323] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 737.534366][ T4323] usb 2-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 737.558873][ T4323] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.573753][ T4323] usb 2-1: Product: syz [ 737.587696][T21899] 8021q: adding VLAN 0 to HW filter on device team0 [ 737.599470][ T4323] usb 2-1: Manufacturer: syz [ 737.604203][ T4323] usb 2-1: SerialNumber: syz [ 737.616231][T21899] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 737.646538][ T4323] usb 2-1: config 0 descriptor?? [ 737.705061][ T4323] cdc_ether 2-1:0.0: skipping garbage [ 737.720524][ T4323] cdc_ether 2-1:0.0: skipping garbage [ 737.731873][ T4323] cdc_ether 2-1:0.0: invalid descriptor buffer length [ 737.745108][T21905] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7921'. [ 737.755094][ T4323] usb 2-1: bad CDC descriptors [ 737.782785][ T4323] usb 2-1: unsupported MDLM descriptors [ 737.796005][ T4323] cdc_acm 2-1:0.0: skipping garbage [ 737.812019][ T4323] cdc_acm 2-1:0.0: skipping garbage [ 737.827906][ T4323] cdc_acm 2-1:0.0: invalid descriptor buffer length [ 737.927141][ T125] usb 2-1: USB disconnect, device number 38 [ 738.164584][T21917] loop3: detected capacity change from 0 to 1764 [ 738.243134][T21917] ISOFS: unable to read i-node block [ 738.387773][T21925] netlink: 'syz.5.7930': attribute type 5 has an invalid length. [ 738.760847][T21939] loop2: detected capacity change from 0 to 64 [ 738.839154][T21939] syz.2.7937: attempt to access beyond end of device [ 738.839154][T21939] loop2: rw=0, sector=65534, nr_sectors = 2 limit=64 [ 738.895672][T21939] Buffer I/O error on dev loop2, logical block 32767, async page read [ 738.906913][T21941] libceph: resolve 'cϐ' (ret=-3): failed [ 739.453872][T21958] loop5: detected capacity change from 0 to 4096 [ 739.471023][T21964] --map-set only usable from mangle table [ 739.484623][T21958] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 739.604716][T21958] ntfs3: loop5: ntfs_evict_inode r=6 failed, -22. [ 739.635826][T21958] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 740.302351][T21988] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 740.404837][T21994] loop2: detected capacity change from 0 to 64 [ 740.801174][T22008] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 741.732043][T22042] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 741.820376][T22046] loop3: detected capacity change from 0 to 512 [ 741.869370][T22046] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 741.900092][T22046] EXT4-fs (loop3): write access unavailable, skipping orphan cleanup [ 741.915704][T22046] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 742.036955][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 742.110217][T22057] usb usb8: usbfs: process 22057 (syz.2.7993) did not claim interface 0 before use [ 742.386839][T22063] loop0: detected capacity change from 0 to 2048 [ 742.460358][T22063] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 742.552514][T22063] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 742.678652][T22073] loop2: detected capacity change from 0 to 2048 [ 742.761780][T22073] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 743.390644][T22093] loop3: detected capacity change from 0 to 2048 [ 743.490228][ T4411] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 743.655535][ T4323] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 743.835390][ T4323] usb 1-1: Using ep0 maxpacket: 16 [ 743.842823][ T4323] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 743.857968][ T4323] usb 1-1: config 0 has an invalid descriptor of length 149, skipping remainder of the config [ 743.933760][ T4323] usb 1-1: config 0 has no interface number 0 [ 743.957240][ T4323] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.17 [ 743.975373][ T4323] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.005362][ T4323] usb 1-1: Product: syz [ 744.009966][ T4323] usb 1-1: Manufacturer: syz [ 744.022872][T22111] loop5: detected capacity change from 0 to 128 [ 744.029903][ T4323] usb 1-1: SerialNumber: syz [ 744.066265][ T4323] usb 1-1: config 0 descriptor?? [ 744.142976][T22111] FAT-fs (loop5): Directory bread(block 162) failed [ 744.170357][T22111] FAT-fs (loop5): Directory bread(block 163) failed [ 744.209747][T22111] FAT-fs (loop5): Directory bread(block 164) failed [ 744.225843][T22111] FAT-fs (loop5): Directory bread(block 165) failed [ 744.243647][T22111] FAT-fs (loop5): Directory bread(block 166) failed [ 744.287704][T22111] FAT-fs (loop5): Directory bread(block 167) failed [ 744.316401][T22117] x_tables: duplicate entry at hook 2 [ 744.323714][ T4323] usb 1-1: USB disconnect, device number 43 [ 744.335075][T22111] FAT-fs (loop5): Directory bread(block 168) failed [ 744.365590][T22111] FAT-fs (loop5): Directory bread(block 169) failed [ 744.373111][T22111] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 744.389244][T22096] loop2: detected capacity change from 0 to 32768 [ 744.435894][T22111] FAT-fs (loop5): Directory bread(block 162) failed [ 744.443047][T22111] FAT-fs (loop5): Directory bread(block 163) failed [ 744.472812][T22111] syz.5.8022: attempt to access beyond end of device [ 744.472812][T22111] loop5: rw=3, sector=226, nr_sectors = 6 limit=128 [ 744.497062][T22111] syz.5.8022: attempt to access beyond end of device [ 744.497062][T22111] loop5: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 744.530855][T22096] XFS (loop2): Mounting V5 Filesystem [ 744.656935][T22096] XFS (loop2): Ending clean mount [ 744.697985][T22132] netlink: 'syz.3.8029': attribute type 5 has an invalid length. [ 744.833099][ T4275] XFS (loop2): Unmounting Filesystem [ 745.262987][T22147] netlink: 'syz.5.8036': attribute type 1 has an invalid length. [ 745.462206][T22153] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8039'. [ 745.486063][T22153] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8039'. [ 745.541561][T22153] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8039'. [ 745.566217][T22153] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8039'. [ 745.582340][T22153] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8039'. [ 745.603455][T22153] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8039'. [ 745.623860][T22153] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8039'. [ 745.656025][T22153] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8039'. [ 745.671627][T22153] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8039'. [ 745.696294][T22153] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8039'. [ 745.815897][ T7522] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 746.323624][T22177] netlink: 'syz.5.8050': attribute type 16 has an invalid length. [ 746.345442][T22177] netlink: 'syz.5.8050': attribute type 17 has an invalid length. [ 746.374571][ C1] vkms_vblank_simulate: vblank timer overrun [ 746.381659][T22177] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 746.442730][T22177] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 746.487540][T22177] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 746.506397][T22177] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 746.519306][T22177] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 746.551915][T22177] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 746.690969][T22177] IPv6: ADDRCONF(NETDEV_CHANGE): gretap1: link becomes ready [ 746.730556][T22177] IPv6: ADDRCONF(NETDEV_CHANGE): gretap1: link becomes ready [ 746.761375][ T7522] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 746.913401][T22167] loop1: detected capacity change from 0 to 32768 [ 747.069007][T22167] XFS (loop1): Mounting V5 Filesystem [ 747.264349][T22167] XFS (loop1): Ending clean mount [ 747.425708][ T4271] XFS (loop1): Unmounting Filesystem [ 747.489544][T22207] loop5: detected capacity change from 0 to 512 [ 747.498718][ C1] vkms_vblank_simulate: vblank timer overrun [ 747.584362][T22207] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 747.690867][T22207] EXT4-fs (loop5): orphan cleanup on readonly fs [ 747.797587][T22207] Quota error (device loop5): dq_insert_tree: Quota tree root isn't allocated! [ 747.835548][T22207] Quota error (device loop5): qtree_write_dquot: Error -5 occurred while creating quota [ 747.864815][T22207] EXT4-fs error (device loop5): ext4_acquire_dquot:6835: comm syz.5.8060: Failed to acquire dquot type 1 [ 747.932161][T22207] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.8060: bg 0: block 40: padding at end of block bitmap is not set [ 747.985423][T22207] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6179: Corrupt filesystem [ 748.030541][T22207] EXT4-fs (loop5): 1 truncate cleaned up [ 748.055585][T22207] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 748.122557][T22207] EXT4-fs error (device loop5): ext4_get_link:104: inode #16: comm syz.5.8060: bad symlink. [ 748.191655][T22224] xt_recent: hitcount (134217728) is larger than allowed maximum (255) [ 748.298149][ T7339] EXT4-fs (loop5): unmounting filesystem. [ 748.798571][T22242] netlink: 'syz.0.8077': attribute type 46 has an invalid length. [ 749.200563][T22222] loop2: detected capacity change from 0 to 40427 [ 749.243156][T22222] F2FS-fs (loop2): build fault injection attr: rate: 684, type: 0x3ffff [ 749.263894][T22222] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x35f7 [ 749.287038][T22222] F2FS-fs (loop2): invalid crc value [ 749.295478][ T7522] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 749.362146][T22222] F2FS-fs (loop2): Found nat_bits in checkpoint [ 749.485643][ T7522] usb 2-1: Using ep0 maxpacket: 16 [ 749.493504][ T7522] usb 2-1: config 1 has an invalid interface number: 193 but max is 1 [ 749.531242][ T7522] usb 2-1: config 1 has an invalid interface number: 208 but max is 1 [ 749.550143][T22222] F2FS-fs (loop2): Start checkpoint disabled! [ 749.557045][ T7522] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 749.564583][T22236] loop5: detected capacity change from 0 to 32768 [ 749.595625][T22222] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 749.613766][ T7522] usb 2-1: config 1 has no interface number 0 [ 749.634438][ T7522] usb 2-1: config 1 has no interface number 1 [ 749.669631][ T7522] usb 2-1: config 1 interface 193 altsetting 13 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 749.704296][ T7522] usb 2-1: config 1 interface 193 altsetting 13 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 749.720618][ T7522] usb 2-1: config 1 interface 193 altsetting 13 endpoint 0xD has an invalid bInterval 101, changing to 7 [ 749.732791][ T7522] usb 2-1: config 1 interface 193 altsetting 13 bulk endpoint 0x9 has invalid maxpacket 16 [ 749.741861][T22236] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 749.748968][ T7522] usb 2-1: config 1 interface 193 altsetting 13 has a duplicate endpoint with address 0xD, skipping [ 749.763831][ T7522] usb 2-1: config 1 interface 193 altsetting 13 has a duplicate endpoint with address 0xA, skipping [ 749.775518][ T7522] usb 2-1: config 1 interface 193 altsetting 13 has a duplicate endpoint with address 0xD, skipping [ 749.787261][ T7522] usb 2-1: config 1 interface 193 altsetting 13 has an invalid endpoint with address 0x80, skipping [ 749.799006][ T7522] usb 2-1: config 1 interface 208 altsetting 153 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 749.810819][ T7522] usb 2-1: config 1 interface 208 altsetting 153 has a duplicate endpoint with address 0xA, skipping [ 749.822377][ T7522] usb 2-1: config 1 interface 208 altsetting 153 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 749.834372][ T7522] usb 2-1: config 1 interface 208 altsetting 153 bulk endpoint 0x4 has invalid maxpacket 1024 [ 749.846024][ T7522] usb 2-1: config 1 interface 208 altsetting 153 has a duplicate endpoint with address 0x5, skipping [ 749.878602][ T7522] usb 2-1: config 1 interface 208 altsetting 153 has a duplicate endpoint with address 0x4, skipping [ 749.920971][ T7522] usb 2-1: config 1 interface 208 altsetting 153 has 7 endpoint descriptors, different from the interface descriptor's value: 8 [ 749.946259][T22222] syz.2.8068: attempt to access beyond end of device [ 749.946259][T22222] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 749.968142][ T7522] usb 2-1: config 1 interface 193 has no altsetting 0 [ 749.995340][ T7522] usb 2-1: config 1 interface 208 has no altsetting 0 [ 750.027359][ T7522] usb 2-1: New USB device found, idVendor=04b8, idProduct=0602, bcdDevice= 1.10 [ 750.065538][ T7522] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.073824][ T7522] usb 2-1: Product: syz [ 750.105470][ T7522] usb 2-1: Manufacturer: syz [ 750.110272][ T7522] usb 2-1: SerialNumber: syz [ 750.152262][ T7522] usb 2-1: Interface #193 referenced by multiple IADs [ 750.192893][T22248] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 750.218733][ T7339] ocfs2: Unmounting device (7,5) on (node local) [ 750.431851][ T7522] usb-storage 2-1:1.193: USB Mass Storage device detected [ 750.465164][ T40] kworker/u4:2: attempt to access beyond end of device [ 750.465164][ T40] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 750.496689][ T7522] usb-storage 2-1:1.193: Quirks match for vid 04b8 pid 0602: 1 [ 750.933060][ T7522] usb-storage 2-1:1.208: USB Mass Storage device detected [ 750.981804][ T7522] usb-storage 2-1:1.208: Quirks match for vid 04b8 pid 0602: 1 [ 751.282309][ T26] audit: type=1326 audit(2000000591.420:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22289 comm="syz.5.8097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65b99c799 code=0x7ffc0000 [ 751.319915][ T7522] usb 2-1: USB disconnect, device number 39 [ 751.331989][ T26] audit: type=1326 audit(2000000591.420:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22289 comm="syz.5.8097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65b99c799 code=0x7ffc0000 [ 751.424372][ T26] audit: type=1326 audit(2000000591.460:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22289 comm="syz.5.8097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7fb65b99c799 code=0x7ffc0000 [ 751.492382][ T26] audit: type=1326 audit(2000000591.460:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22289 comm="syz.5.8097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65b99c799 code=0x7ffc0000 [ 751.593778][ T26] audit: type=1326 audit(2000000591.460:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22289 comm="syz.5.8097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65b99c799 code=0x7ffc0000 [ 751.717145][T22302] loop3: detected capacity change from 0 to 256 [ 752.376007][T22322] __nla_validate_parse: 84 callbacks suppressed [ 752.376033][T22322] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8113'. [ 752.501680][T22288] loop1: detected capacity change from 0 to 32768 [ 752.618876][T22288] XFS (loop1): Mounting V5 Filesystem [ 752.714389][T22288] XFS (loop1): Ending clean mount [ 752.753486][T22288] XFS (loop1): Quotacheck needed: Please wait. [ 752.772052][T22342] vivid-007: disconnect [ 752.777541][T22341] vivid-007: reconnect [ 752.815539][ T125] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 752.988509][T22346] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 753.005172][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 753.031703][ C0] vkms_vblank_simulate: vblank timer overrun [ 753.041386][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.061178][ T125] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 753.073864][ T125] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 753.084823][ T125] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.097458][ T125] usb 3-1: config 0 descriptor?? [ 753.107641][T22288] XFS (loop1): Quotacheck: Done. [ 753.340008][ T125] ath6kl: Failed to submit usb control message: -71 [ 753.367013][ T125] ath6kl: unable to send the bmi data to the device: -71 [ 753.420705][ T125] ath6kl: Unable to send get target info: -71 [ 753.482407][ T125] ath6kl: Failed to init ath6kl core: -71 [ 753.530704][ T4271] XFS (loop1): Unmounting Filesystem [ 753.762357][ T125] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 753.792345][ T125] usb 3-1: USB disconnect, device number 35 [ 754.294867][T22375] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 754.343555][T22375] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 754.444563][T22379] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8138'. [ 754.735631][ T2165] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 754.925633][ T2165] usb 6-1: Using ep0 maxpacket: 32 [ 754.942107][ T2165] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 754.964394][ T2165] usb 6-1: config 0 has no interface number 0 [ 754.992300][ T2165] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 755.047689][ T2165] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 755.096407][ T2165] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 755.126186][ T2165] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.154783][ T2165] usb 6-1: Product: syz [ 755.178826][ T2165] usb 6-1: Manufacturer: syz [ 755.188039][ T2165] usb 6-1: SerialNumber: syz [ 755.221947][ T2165] usb 6-1: config 0 descriptor?? [ 755.270212][T22407] loop3: detected capacity change from 0 to 256 [ 755.348625][ T4511] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 755.453929][ T2165] radio-si470x 6-1:0.35: this is not a si470x device. [ 755.479739][T22413] netlink: 920 bytes leftover after parsing attributes in process `syz.2.8154'. [ 755.664656][ T2165] radio-raremono 6-1:0.35: this is not Thanko's Raremono. [ 755.703086][ T2165] usb 6-1: USB disconnect, device number 37 [ 756.138411][ T26] audit: type=1326 audit(2000000596.280:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22430 comm="syz.1.8162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9a59c799 code=0x7ffc0000 [ 756.181103][T22411] loop0: detected capacity change from 0 to 32768 [ 756.189161][ T26] audit: type=1326 audit(2000000596.280:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22430 comm="syz.1.8162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9a59c799 code=0x7ffc0000 [ 756.290828][ T26] audit: type=1326 audit(2000000596.350:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22430 comm="syz.1.8162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9a59c799 code=0x7ffc0000 [ 756.315202][ T2165] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 756.421516][ T26] audit: type=1326 audit(2000000596.350:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22430 comm="syz.1.8162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9a59c799 code=0x7ffc0000 [ 756.497877][ T26] audit: type=1326 audit(2000000596.350:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22430 comm="syz.1.8162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7fcf9a59c799 code=0x7ffc0000 [ 756.522199][ T2165] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 756.547860][ T2165] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 756.566603][ T2165] usb 4-1: Product: syz [ 756.576150][ T2165] usb 4-1: SerialNumber: syz [ 756.609379][ T2165] usb 4-1: config 0 descriptor?? [ 756.615412][ T26] audit: type=1326 audit(2000000596.350:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22430 comm="syz.1.8162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9a59c799 code=0x7ffc0000 [ 756.725599][ T26] audit: type=1326 audit(2000000596.350:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22430 comm="syz.1.8162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9a59c799 code=0x7ffc0000 [ 756.811961][ T26] audit: type=1326 audit(2000000596.350:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22430 comm="syz.1.8162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fcf9a59c799 code=0x7ffc0000 [ 756.861820][ T2165] hso 4-1:0.0: Can't find BULK IN endpoint [ 756.911141][ T26] audit: type=1326 audit(2000000596.350:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22430 comm="syz.1.8162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fcf9a59c799 code=0x7ffc0000 [ 757.079943][ T4326] usb 4-1: USB disconnect, device number 46 [ 757.144784][T22452] netlink: 'syz.2.8175': attribute type 1 has an invalid length. [ 757.153872][T22452] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8175'. [ 757.258613][ T2165] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 757.461009][ T2165] usb 6-1: Using ep0 maxpacket: 16 [ 757.469440][ T2165] usb 6-1: config 252 has an invalid interface number: 15 but max is 0 [ 757.494143][T22458] loop1: detected capacity change from 0 to 4096 [ 757.507498][ T2165] usb 6-1: config 252 has no interface number 0 [ 757.524213][T22458] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 757.538208][ T2165] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 757.556382][ T2165] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.578464][ T2165] usb 6-1: Product: syz [ 757.585941][ T2165] usb 6-1: Manufacturer: syz [ 757.608027][ T2165] usb 6-1: SerialNumber: syz [ 757.737715][ T2165] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 757.829049][T22458] ntfs3: loop1: mft corrupted [ 757.880514][ T26] audit: type=1326 audit(2000000598.020:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22469 comm="syz.2.8182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78159c799 code=0x7ffc0000 [ 757.923951][ T4334] usb 6-1: Failed to submit usb control message: -71 [ 757.924095][ T4326] usb 6-1: USB disconnect, device number 38 [ 757.962553][ T4334] usb 6-1: unable to send the bmi data to the device: -71 [ 758.001078][ T4334] usb 6-1: unable to get target info from device [ 758.014185][ T4334] usb 6-1: could not get target info (-71) [ 758.033833][ T4334] usb 6-1: could not probe fw (-71) [ 758.515057][T22487] binder: 22486:22487 ioctl c018620c 200000000280 returned -1 [ 758.585391][ T14] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 758.753064][T22496] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 758.820620][ T14] usb 3-1: Using ep0 maxpacket: 32 [ 758.840398][ T14] usb 3-1: unable to get BOS descriptor or descriptor too short [ 758.887352][T22496] 8021q: adding VLAN 0 to HW filter on device bond3 [ 758.950336][ T14] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 759.036948][ T14] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 759.057355][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.097643][ T14] usb 3-1: Product: syz [ 759.117958][ T14] usb 3-1: Manufacturer: syz [ 759.123788][ T14] usb 3-1: SerialNumber: syz [ 759.378314][ T14] usb 3-1: Limiting number of CPorts to U8_MAX [ 759.411435][ T14] usb 3-1: Not enough endpoints found in device, aborting! [ 759.507003][ C0] vkms_vblank_simulate: vblank timer overrun [ 759.639874][ C0] vkms_vblank_simulate: vblank timer overrun [ 759.712032][ T4366] usb 3-1: USB disconnect, device number 36 [ 760.698512][T22522] loop0: detected capacity change from 0 to 32768 [ 760.764375][T22522] XFS (loop0): Mounting V5 Filesystem [ 760.863959][T22522] XFS (loop0): Ending clean mount [ 760.899014][T22522] XFS (loop0): Quotacheck needed: Please wait. [ 761.056202][ C0] vkms_vblank_simulate: vblank timer overrun [ 761.134549][T22575] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 761.182366][T22522] XFS (loop0): Quotacheck: Done. [ 761.350295][ T4269] XFS (loop0): Unmounting Filesystem [ 761.458433][ C0] vkms_vblank_simulate: vblank timer overrun [ 761.689768][ C0] vkms_vblank_simulate: vblank timer overrun [ 761.725839][T22588] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 761.882574][T22592] tmpfs: Bad value for 'nr_blocks' [ 762.104523][T13800] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 762.176569][T22596] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 762.306474][T13800] usb 3-1: Using ep0 maxpacket: 16 [ 762.313654][T13800] usb 3-1: config 252 has an invalid interface number: 15 but max is 0 [ 762.349979][T13800] usb 3-1: config 252 has no interface number 0 [ 762.370767][T22601] xt_recent: Unsupported userspace flags (000000de) [ 762.383212][T13800] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 762.419732][T13800] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.441712][T13800] usb 3-1: Product: syz [ 762.465506][T13800] usb 3-1: Manufacturer: syz [ 762.470303][T13800] usb 3-1: SerialNumber: syz [ 762.484577][T22579] loop5: detected capacity change from 0 to 32768 [ 762.565998][T22579] XFS (loop5): Mounting V5 Filesystem [ 762.580241][T13800] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 762.709031][T22621] loop0: detected capacity change from 0 to 64 [ 762.781348][ T56] usb 3-1: Failed to submit usb control message: -71 [ 762.789705][ T56] usb 3-1: unable to send the bmi data to the device: -71 [ 762.809299][ T56] usb 3-1: unable to get target info from device [ 762.820212][ T4326] usb 3-1: USB disconnect, device number 37 [ 762.830513][ T56] usb 3-1: could not get target info (-71) [ 762.857495][ T56] usb 3-1: could not probe fw (-71) [ 762.933688][T22579] XFS (loop5): Starting recovery (logdev: internal) [ 762.955184][ C0] vkms_vblank_simulate: vblank timer overrun [ 763.047624][T22579] XFS (loop5): Ending recovery (logdev: internal) [ 763.225994][ T7339] XFS (loop5): Unmounting Filesystem [ 764.627968][T22633] loop0: detected capacity change from 0 to 32768 [ 764.685700][T22633] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.8249 (22633) [ 764.860127][T22633] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 764.892522][T22633] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 764.985544][T22633] BTRFS info (device loop0): force zlib compression, level 3 [ 765.025665][T22633] BTRFS info (device loop0): force clearing of disk cache [ 765.033136][T22633] BTRFS info (device loop0): setting nodatasum [ 765.047147][T22639] loop1: detected capacity change from 0 to 40427 [ 765.075501][T22633] BTRFS info (device loop0): allowing degraded mounts [ 765.083034][T22633] BTRFS info (device loop0): enabling disk space caching [ 765.105707][T22639] F2FS-fs (loop1): Invalid segment count (0) [ 765.112694][T22639] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 765.164504][T22639] F2FS-fs (loop1): invalid crc value [ 765.175436][T22633] BTRFS info (device loop0): disk space caching is enabled [ 765.327816][T22639] F2FS-fs (loop1): Found nat_bits in checkpoint [ 765.560551][T22633] BTRFS info (device loop0): rebuilding free space tree [ 765.612731][T22639] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 765.621895][T22633] BTRFS info (device loop0): disabling free space tree [ 765.662542][T22639] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 765.666405][T22633] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 765.722990][T22633] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 766.064391][ T4269] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 766.283584][T22659] loop3: detected capacity change from 0 to 32768 [ 766.321667][ C0] vkms_vblank_simulate: vblank timer overrun [ 767.860012][T22741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8288'. [ 768.127766][T22751] netlink: 'syz.0.8292': attribute type 1 has an invalid length. [ 768.139832][T22751] netlink: 'syz.0.8292': attribute type 2 has an invalid length. [ 768.320970][T22750] loop2: detected capacity change from 0 to 4096 [ 768.365492][T22750] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 768.511428][T22750] ntfs3: loop2: failed to convert "076c" to cp949 [ 768.854637][T22737] loop1: detected capacity change from 0 to 32768 [ 768.968200][T22737] ialloc: diAlloc returned -5! [ 769.249602][T22779] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8307'. [ 769.295760][T22779] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 769.353769][T22779] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 769.763916][T22797] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 770.178608][T22809] SET target dimension over the limit! [ 770.719298][T22831] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8333'. [ 770.844747][T22836] loop1: detected capacity change from 0 to 256 [ 770.896550][T22836] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 771.101336][ T4334] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 771.206105][T22845] 9pnet_fd: p9_fd_create_tcp (22845): problem connecting socket to 127.0.0.1 [ 771.696154][T22865] loop3: detected capacity change from 0 to 736 [ 772.140187][T22877] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8356'. [ 772.247140][T22883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8359'. [ 772.320148][T22883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8359'. [ 773.085724][T22915] netlink: 'syz.2.8373': attribute type 24 has an invalid length. [ 773.175498][T22918] unsupported nlmsg_type 40 [ 773.429919][T22930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 773.777852][T22942] rtc_cmos 00:00: Alarms can be up to one day in the future [ 774.112842][T22954] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8393'. [ 774.143446][T22956] loop0: detected capacity change from 0 to 128 [ 774.310263][T22956] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 774.330778][T22956] ext4 filesystem being mounted at /1655/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 774.383991][T22956] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #2: comm syz.0.8395: No space for directory leaf checksum. Please run e2fsck -D. [ 774.400489][T22956] EXT4-fs error (device loop0): __ext4_find_entry:1696: inode #2: comm syz.0.8395: checksumming directory block 0 [ 774.453359][ T4269] EXT4-fs (loop0): unmounting filesystem. [ 774.633503][T22972] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 774.876234][T22978] QAT: Invalid ioctl 1075883590 [ 774.881348][T22978] QAT: Invalid ioctl 1075883590 [ 774.912492][T22978] QAT: Invalid ioctl 1075883590 [ 774.925898][T22978] QAT: Invalid ioctl 1075883590 [ 774.942439][T22978] QAT: Invalid ioctl 1075883590 [ 774.969617][T22978] QAT: Invalid ioctl 1075883590 [ 774.986065][T22978] QAT: Invalid ioctl 1075883590 [ 775.006950][T22984] netlink: 2 bytes leftover after parsing attributes in process `syz.3.8408'. [ 775.019026][T22978] QAT: Invalid ioctl 1075883590 [ 775.024168][T22978] QAT: Invalid ioctl 1075883590 [ 775.041609][T22978] QAT: Invalid ioctl 1075883590 [ 775.311436][T22995] netlink: 'syz.1.8412': attribute type 2 has an invalid length. [ 775.371297][T22995] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.8412'. [ 775.571521][T23001] ieee802154 phy1 wpan1: encryption failed: -22 [ 775.836024][T23008] device bridge6 entered promiscuous mode [ 776.140262][T23020] program syz.1.8425 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 776.320706][T22990] loop2: detected capacity change from 0 to 32768 [ 776.355506][ T2165] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 776.567792][ T2165] usb 6-1: Using ep0 maxpacket: 8 [ 776.575437][ T7792] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 776.600168][ T2165] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 776.613420][ T2165] usb 6-1: config 0 has no interface number 0 [ 776.638937][ T2165] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 776.661507][ T2165] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.684802][ T2165] usb 6-1: Product: syz [ 776.693369][ T2165] usb 6-1: Manufacturer: syz [ 776.703296][ T2165] usb 6-1: SerialNumber: syz [ 776.714805][ T2165] usb 6-1: config 0 descriptor?? [ 776.775498][ T7792] usb 2-1: Using ep0 maxpacket: 32 [ 776.784556][ T7792] usb 2-1: unable to get BOS descriptor or descriptor too short [ 776.818885][ T7792] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 776.853189][ T7792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.875452][ T7792] usb 2-1: Product: syz [ 776.884785][ T7792] usb 2-1: Manufacturer: syz [ 776.908914][ T7792] usb 2-1: SerialNumber: syz [ 776.954647][ T2165] usb 6-1: Found UVC 0.04 device syz (046d:08c3) [ 776.964877][ T2165] usb 6-1: No valid video chain found. [ 777.018499][ T2165] usb 6-1: USB disconnect, device number 39 [ 777.113237][T23043] loop3: detected capacity change from 0 to 256 [ 777.195133][ T7792] usb 2-1: USB disconnect, device number 40 [ 777.241161][ T4411] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 777.436309][ T4511] udevd[4511]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 777.684984][T23054] autofs4:pid:23054:validate_dev_ioctl: path string terminator missing for cmd(0xc018937e) [ 777.849489][T23058] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8444'. [ 777.885950][T23058] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8444'. [ 777.924838][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 777.924859][ T26] audit: type=1326 audit(2000000618.060:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23063 comm="syz.5.8448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65b99c799 code=0x7ffc0000 [ 778.050691][ T26] audit: type=1326 audit(2000000618.130:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23063 comm="syz.5.8448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7fb65b99c799 code=0x7ffc0000 [ 778.138381][T23066] loop3: detected capacity change from 0 to 256 [ 778.155432][ T26] audit: type=1326 audit(2000000618.130:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23063 comm="syz.5.8448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65b99c799 code=0x7ffc0000 [ 778.236114][ T26] audit: type=1326 audit(2000000618.130:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23063 comm="syz.5.8448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65b99c799 code=0x7ffc0000 [ 778.266448][T23066] /dev/loop3: Can't open blockdev [ 778.901502][T23096] netlink: 'syz.5.8463': attribute type 1 has an invalid length. [ 779.179058][T23105] loop1: detected capacity change from 0 to 16 [ 779.242118][T23105] erofs: (device loop1): mounted with root inode @ nid 36. [ 779.461286][T23112] netlink: 'syz.2.8472': attribute type 1 has an invalid length. [ 779.506932][T23112] netlink: 'syz.2.8472': attribute type 2 has an invalid length. [ 779.815515][ T7792] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 780.024688][ T7792] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 780.055589][ T7792] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 780.085422][ T7792] usb 1-1: config 1 has no interface number 0 [ 780.091820][ T7792] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 780.154980][ T7792] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 780.201261][ T7792] usb 1-1: too many endpoints for config 1 interface 1 altsetting 1: 247, using maximum allowed: 30 [ 780.239558][ T7792] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 247 [ 780.295948][ T7792] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 780.324438][ T7792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.345270][ T7792] usb 1-1: Product: syz [ 780.349686][ T7792] usb 1-1: Manufacturer: syz [ 780.365551][ T7792] usb 1-1: SerialNumber: syz [ 780.605743][T13800] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 780.652116][ T26] audit: type=1326 audit(2000000620.790:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23151 comm="syz.5.8492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65b99c799 code=0x7ffc0000 [ 780.678435][ T26] audit: type=1326 audit(2000000620.820:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23151 comm="syz.5.8492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65b99c799 code=0x7ffc0000 [ 780.711984][ T26] audit: type=1326 audit(2000000620.840:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23151 comm="syz.5.8492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fb65b99c799 code=0x7ffc0000 [ 780.760177][T23154] xt_hashlimit: size too large, truncated to 1048576 [ 780.798662][ T26] audit: type=1326 audit(2000000620.850:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23151 comm="syz.5.8492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65b99c799 code=0x7ffc0000 [ 780.823195][ T7792] cdc_ncm 1-1:1.1: bind() failure [ 780.844738][ T7792] usb 1-1: USB disconnect, device number 44 [ 780.855367][T13800] usb 4-1: Using ep0 maxpacket: 32 [ 780.862700][T13800] usb 4-1: config 3 has an invalid interface number: 160 but max is 0 [ 780.892289][T13800] usb 4-1: config 3 has no interface number 0 [ 780.932332][T13800] usb 4-1: config 3 interface 160 altsetting 3 bulk endpoint 0xF has invalid maxpacket 16 [ 780.965088][T13800] usb 4-1: config 3 interface 160 has no altsetting 0 [ 780.990767][T13800] usb 4-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=7d.bd [ 781.017905][T13800] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.041251][T13800] usb 4-1: Product: syz [ 781.051332][T13800] usb 4-1: Manufacturer: syz [ 781.075427][T13800] usb 4-1: SerialNumber: syz [ 781.092098][T23144] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 781.178582][T23162] loop5: detected capacity change from 0 to 2048 [ 781.218720][T23162] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 781.255126][T23163] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 781.310142][T23165] netlink: 'syz.1.8498': attribute type 3 has an invalid length. [ 781.330017][T13800] usbhid 4-1:3.160: couldn't find an input interrupt endpoint [ 781.344570][T23162] NILFS (loop5): DAT doesn't have a block to manage vblocknr = 8796093022222 [ 781.382041][T13800] usb 4-1: USB disconnect, device number 47 [ 781.408177][T23162] NILFS error (device loop5): nilfs_bmap_truncate: broken bmap (inode number=16) [ 781.503906][T23162] Remounting filesystem read-only [ 781.530047][T23162] NILFS (loop5): error -5 truncating bmap (ino=16) [ 781.578071][T23170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8501'. [ 781.592786][T23170] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8501'. [ 781.660973][ T7339] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 782.208611][T23190] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 782.260188][T23193] IPv6: Can't replace route, no match found [ 782.561647][T23206] netlink: 'syz.1.8517': attribute type 1 has an invalid length. [ 782.903842][T23217] vxcan1 speed is unknown, defaulting to 1000 [ 782.930432][T23217] vxcan1 speed is unknown, defaulting to 1000 [ 782.976039][T23217] vxcan1 speed is unknown, defaulting to 1000 [ 783.248864][T23198] loop5: detected capacity change from 0 to 32768 [ 783.281084][T23198] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.8514 (23198) [ 783.369571][T23198] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 783.401742][T23217] infiniband syz2: set active [ 783.407090][ T7792] vxcan1 speed is unknown, defaulting to 1000 [ 783.423697][T23198] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 783.444873][T23217] infiniband syz2: added vxcan1 [ 783.456320][T23198] BTRFS info (device loop5): force clearing of disk cache [ 783.471996][T23198] BTRFS info (device loop5): metadata ratio 0 [ 783.528762][T23198] BTRFS info (device loop5): enabling ssd optimizations [ 783.534442][T23217] RDS/IB: syz2: added [ 783.544521][T23198] BTRFS info (device loop5): using spread ssd allocation scheme [ 783.552652][T23198] BTRFS info (device loop5): using free space tree [ 783.569101][T23230] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 783.577027][T23217] smc: adding ib device syz2 with port count 1 [ 783.615630][T23217] smc: ib device syz2 port 1 has pnetid [ 783.622635][ T7792] vxcan1 speed is unknown, defaulting to 1000 [ 783.639594][T23217] vxcan1 speed is unknown, defaulting to 1000 [ 783.832321][T23198] BTRFS info (device loop5): rebuilding free space tree [ 783.895635][T23250] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8530'. [ 783.936135][T23250] tc_dump_action: action bad kind [ 784.155916][ T7339] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 784.203460][T23217] vxcan1 speed is unknown, defaulting to 1000 [ 784.252672][T23257] loop2: detected capacity change from 0 to 64 [ 784.378947][T23257] hfs: unable to locate alternate MDB [ 784.384725][T23257] hfs: continuing without an alternate MDB [ 784.396603][ T4411] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop5 scanned by udevd (4411) [ 784.707705][T23217] vxcan1 speed is unknown, defaulting to 1000 [ 785.190838][T23276] loop2: detected capacity change from 0 to 256 [ 785.310132][T23217] vxcan1 speed is unknown, defaulting to 1000 [ 785.325753][ T4321] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 785.515795][ T4321] usb 4-1: Using ep0 maxpacket: 16 [ 785.527287][ T4321] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 97, changing to 7 [ 785.579320][ T4321] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 24929, setting to 1024 [ 785.632452][ T4321] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 785.676298][ T4321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.710404][T23217] vxcan1 speed is unknown, defaulting to 1000 [ 785.715641][ T4321] usb 4-1: Product: syz [ 785.723540][ T4321] usb 4-1: Manufacturer: syz [ 785.745488][ T4321] usb 4-1: SerialNumber: syz [ 785.762031][ T4321] usb 4-1: config 0 descriptor?? [ 785.818081][ T4321] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 785.993261][ T1198] usb 4-1: Failed to submit usb control message: -71 [ 785.996783][ T4321] usb 4-1: USB disconnect, device number 48 [ 786.005720][ T1198] usb 4-1: unable to send the bmi data to the device: -71 [ 786.025303][ T1198] usb 4-1: unable to get target info from device [ 786.032111][ T1198] usb 4-1: could not get target info (-71) [ 786.053655][ T1198] usb 4-1: could not probe fw (-71) [ 786.999510][ T26] audit: type=1326 audit(2000000627.140:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23322 comm="syz.3.8561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5745f9c799 code=0x7ffc0000 [ 787.095496][ T26] audit: type=1326 audit(2000000627.180:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23322 comm="syz.3.8561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f5745f9c799 code=0x7ffc0000 [ 787.185342][ T26] audit: type=1326 audit(2000000627.180:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23322 comm="syz.3.8561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5745f9c799 code=0x7ffc0000 [ 787.244995][T23328] loop2: detected capacity change from 0 to 512 [ 787.268044][ T26] audit: type=1326 audit(2000000627.180:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23322 comm="syz.3.8561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5745f9c799 code=0x7ffc0000 [ 787.324493][T23328] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 787.346983][T23328] EXT4-fs (loop2): orphan cleanup on readonly fs [ 787.363616][T23328] Quota error (device loop2): find_block_dqentry: Quota for id 0 referenced but not present [ 787.408998][T23336] delete_channel: no stack [ 787.447403][T23328] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 787.457196][T23328] EXT4-fs error (device loop2): ext4_acquire_dquot:6835: comm syz.2.8565: Failed to acquire dquot type 1 [ 787.479136][T23328] EXT4-fs (loop2): Remounting filesystem read-only [ 787.490331][T23328] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.8565: bg 0: block 40: padding at end of block bitmap is not set [ 787.556455][T23328] EXT4-fs (loop2): Remounting filesystem read-only [ 787.563732][T23328] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6179: Corrupt filesystem [ 787.574421][T23328] EXT4-fs (loop2): Remounting filesystem read-only [ 787.581837][T23328] EXT4-fs (loop2): 1 truncate cleaned up [ 787.589109][T23328] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 787.751643][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 788.285437][ T4321] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 788.489260][ T4321] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 788.525670][ T4321] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 788.556565][ T4321] usb 4-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 788.616099][ T4321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.655012][ T4321] usb 4-1: Product: syz [ 788.665186][ T4321] usb 4-1: Manufacturer: syz [ 788.670387][ T4321] usb 4-1: SerialNumber: syz [ 788.684643][T23372] netlink: 'syz.0.8585': attribute type 3 has an invalid length. [ 788.707514][T23343] loop5: detected capacity change from 0 to 32768 [ 788.726182][T23372] netlink: 46 bytes leftover after parsing attributes in process `syz.0.8585'. [ 788.772888][T23343] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 788.816577][T23343] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 788.852491][T23374] xt_CT: You must specify a L4 protocol and not use inversions on it [ 788.860673][T23343] BTRFS info (device loop5): using free space tree [ 788.934103][ T4321] usb 4-1: 0:1 : does not exist [ 788.963569][ T4321] usb 4-1: unit 0 not found! [ 789.020297][T23343] BTRFS info (device loop5): enabling ssd optimizations [ 789.053830][ T4321] usb 4-1: USB disconnect, device number 49 [ 789.223725][ T7339] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 789.929802][T23413] loop3: detected capacity change from 0 to 128 [ 790.054417][ T4411] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 790.528542][T23429] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8605'. [ 790.549186][T23434] netlink: 'syz.2.8607': attribute type 5 has an invalid length. [ 790.558381][T23429] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8605'. [ 790.575586][T23429] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8605'. [ 790.960156][T23439] loop1: detected capacity change from 0 to 4096 [ 790.984952][T23445] openvswitch: netlink: Tunnel attr 6 has unexpected len 4 expected 0 [ 791.031766][T23439] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 791.192453][T23439] ntfs3: loop1: ino=5, "/" directory corrupted [ 791.488630][T23457] nft_compat: unsupported protocol 5 [ 791.795641][ C1] icmp: detected local route for 172.20.20.26 during ICMP sending, src 172.20.20.0 [ 791.923218][T23435] loop3: detected capacity change from 0 to 40427 [ 792.062857][T23477] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8627'. [ 792.340897][T23485] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.8633' sets config #2 [ 792.524074][T23491] loop0: detected capacity change from 0 to 8 [ 792.562709][T23491] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 792.671834][ T4511] udevd[4511]: incorrect cramfs checksum on /dev/loop0 [ 792.700665][T23495] SET target dimension over the limit! [ 792.802111][ T4511] udevd[4511]: incorrect cramfs checksum on /dev/loop0 [ 793.038575][T23506] netlink: 'syz.0.8643': attribute type 21 has an invalid length. [ 793.091395][T23506] netlink: 128 bytes leftover after parsing attributes in process `syz.0.8643'. [ 793.130885][T23506] netlink: 'syz.0.8643': attribute type 4 has an invalid length. [ 793.151775][T23506] netlink: 3 bytes leftover after parsing attributes in process `syz.0.8643'. [ 793.238451][T23513] xt_TCPMSS: Only works on TCP SYN packets [ 793.658424][T23527] netlink: 196 bytes leftover after parsing attributes in process `syz.3.8654'. [ 793.691488][T23527] netlink: 196 bytes leftover after parsing attributes in process `syz.3.8654'. [ 793.745417][T23527] netlink: 19 bytes leftover after parsing attributes in process `syz.3.8654'. [ 793.843553][T23532] syz.0.8656 uses old SIOCAX25GETINFO [ 793.855434][T13800] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 793.918542][T23533] loop1: detected capacity change from 0 to 128 [ 794.023359][T23533] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 794.045460][T13800] usb 6-1: Using ep0 maxpacket: 16 [ 794.056920][T13800] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 794.095702][T13800] usb 6-1: config 0 has no interface number 0 [ 794.124763][T13800] usb 6-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 794.155440][T13800] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.163801][T13800] usb 6-1: Product: syz [ 794.209318][T13800] usb 6-1: Manufacturer: syz [ 794.214040][T13800] usb 6-1: SerialNumber: syz [ 794.245127][T13800] usb 6-1: config 0 descriptor?? [ 794.302890][T23539] netlink: 'syz.3.8660': attribute type 2 has an invalid length. [ 794.363588][T23543] ubi31: attaching mtd0 [ 794.383469][T23521] loop2: detected capacity change from 0 to 32768 [ 794.400949][T23543] ubi31: scanning is finished [ 794.412499][T23543] ubi31: empty MTD device detected [ 794.431824][T23521] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.8651 (23521) [ 794.473637][T13800] usb 6-1: selecting invalid altsetting 1 [ 794.492320][T13800] speedtch 6-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 794.502127][T13800] speedtch 6-1:0.1: usbatm_usb_probe: bind failed: -22! [ 794.535525][T13800] speedtch: probe of 6-1:0.1 failed with error -22 [ 794.554891][T13800] usb 6-1: USB disconnect, device number 40 [ 794.574794][T23521] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 794.621734][T23521] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 794.643325][T23521] BTRFS info (device loop2): force clearing of disk cache [ 794.651562][T23521] BTRFS info (device loop2): metadata ratio 0 [ 794.671650][T23521] BTRFS info (device loop2): enabling ssd optimizations [ 794.687827][T23521] BTRFS info (device loop2): using spread ssd allocation scheme [ 794.714324][T23521] BTRFS info (device loop2): using free space tree [ 794.862207][T23543] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 794.905604][T23543] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 794.913731][T23543] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 794.940132][T23543] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 794.962472][T23543] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 794.986270][T23543] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 795.109278][T23543] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 284952379 [ 795.121900][T23521] BTRFS info (device loop2): rebuilding free space tree [ 795.129670][T23543] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 795.178864][T23555] ubi31: background thread "ubi_bgt31d" started, PID 23555 [ 795.215451][ T7790] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 795.440175][ T7790] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 795.459498][ T7790] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 795.492011][ T7790] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 795.519239][ T4275] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 795.564573][ T7790] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 795.605066][ T7790] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 795.629365][ T7790] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.642020][T23580] openvswitch: netlink: IP tunnel dst address not specified [ 795.651890][ C1] vkms_vblank_simulate: vblank timer overrun [ 795.675416][ T7790] usb 2-1: config 0 descriptor?? [ 795.782187][T23584] loop3: detected capacity change from 0 to 24 [ 795.861558][T23584] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 795.890318][ T7790] hdpvr 2-1:0.0: firmware version 0x8 dated [ 795.915422][T23584] /dev/loop3: Can't open blockdev [ 795.920905][ C1] vkms_vblank_simulate: vblank timer overrun [ 796.000003][ C1] vkms_vblank_simulate: vblank timer overrun [ 796.083800][ C1] vkms_vblank_simulate: vblank timer overrun [ 796.098430][ T7790] hdpvr 2-1:0.0: device init failed [ 796.103916][ T7790] hdpvr: probe of 2-1:0.0 failed with error -12 [ 796.152524][ T7790] usb 2-1: USB disconnect, device number 41 [ 796.168541][ C1] vkms_vblank_simulate: vblank timer overrun [ 796.383519][ C1] vkms_vblank_simulate: vblank timer overrun [ 796.416060][ C1] vkms_vblank_simulate: vblank timer overrun [ 796.905366][T23605] netlink: 232 bytes leftover after parsing attributes in process `syz.1.8684'. [ 797.195808][T23592] loop0: detected capacity change from 0 to 32768 [ 797.233737][T23592] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.8678 (23592) [ 797.355465][T23592] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 797.414243][T23592] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 797.498911][T23592] BTRFS info (device loop0): using free space tree [ 797.540454][T23618] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 797.604542][T23627] openvswitch: netlink: Message has 1 unknown bytes. [ 797.748798][T23607] loop3: detected capacity change from 0 to 32768 [ 797.879234][T23607] ocfs2: Readonly device (7,3) detected. Cluster services will not be used for this mount. Recovery will be skipped. [ 797.896472][T23607] ocfs2: Mounting device (7,3) on (node local, slot 65535) with ordered data mode. [ 797.959187][T23592] BTRFS info (device loop0): enabling ssd optimizations [ 798.086768][T23651] 9pnet_fd: Insufficient options for proto=fd [ 798.176940][ T4277] INFO: trying to register non-static key. [ 798.182944][ T4277] The code is fine but needs lockdep annotation, or maybe [ 798.190399][ T4277] you didn't initialize this object before use? [ 798.196799][ T4277] turning off the locking correctness validator. [ 798.203195][ T4277] CPU: 1 PID: 4277 Comm: syz-executor Not tainted syzkaller #0 [ 798.210882][ T4277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 798.221100][ T4277] Call Trace: [ 798.224430][ T4277] [ 798.227419][ T4277] dump_stack_lvl+0x188/0x24e [ 798.232206][ T4277] ? show_regs_print_info+0x12/0x12 [ 798.237648][ T4277] ? load_image+0x400/0x400 [ 798.242256][ T4277] ? _find_next_bit+0x11e/0x130 [ 798.247171][ T4277] ? __is_module_percpu_address+0x279/0x3b0 [ 798.253509][ T4277] ? is_kernel_percpu_address+0x18f/0x1b0 [ 798.259386][ T4277] assign_lock_key+0x201/0x230 [ 798.264231][ T4277] ? SOFTIRQ_verbose+0x10/0x10 [ 798.269146][ T4277] ? verify_lock_unused+0x140/0x140 [ 798.274418][ T4277] ? deref_stack_reg+0x19f/0x230 [ 798.279425][ T4277] register_lock_class+0x21d/0x870 [ 798.284707][ T4277] ? mark_lock+0x94/0x320 [ 798.289105][ T4277] ? is_dynamic_key+0x260/0x260 [ 798.294033][ T4277] ? __lock_acquire+0x13cf/0x7d10 [ 798.299305][ T4277] ? __lock_acquire+0x7d10/0x7d10 [ 798.304401][ T4277] __lock_acquire+0x16f/0x7d10 [ 798.309864][ T4277] ? is_bpf_text_address+0x28b/0x2a0 [ 798.315296][ T4277] ? kernel_text_address+0x9c/0xd0 [ 798.320495][ T4277] ? verify_lock_unused+0x140/0x140 [ 798.325761][ T4277] ? stack_trace_save+0xf0/0xf0 [ 798.330945][ T4277] ? arch_stack_walk+0xf2/0x140 [ 798.335861][ T4277] ? verify_lock_unused+0x140/0x140 [ 798.341396][ T4277] ? stack_trace_save+0xa6/0xf0 [ 798.346317][ T4277] lock_acquire+0x1bb/0x4a0 [ 798.350885][ T4277] ? ocfs2_mark_lockres_freeing+0x159/0x600 [ 798.357110][ T4277] ? memset+0x1e/0x40 [ 798.361245][ T4277] ? read_lock_is_recursive+0x10/0x10 [ 798.366947][ T4277] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 798.373362][ T4277] ? lockdep_hardirqs_on+0x94/0x140 [ 798.378793][ T4277] _raw_spin_lock_irqsave+0xb0/0x100 [ 798.384215][ T4277] ? ocfs2_mark_lockres_freeing+0x159/0x600 [ 798.390272][ T4277] ? _raw_spin_lock+0x40/0x40 [ 798.395009][ T4277] ? ktime_get+0x247/0x270 [ 798.399532][ T4277] ocfs2_mark_lockres_freeing+0x159/0x600 [ 798.405320][ T4277] ? kasan_quarantine_put+0xd4/0x220 [ 798.410674][ T4277] ? ocfs2_dlm_shutdown+0x240/0x240 [ 798.416040][ T4277] ? ocfs2_journal_shutdown+0x673/0xc20 [ 798.421926][ T4277] ? ocfs2_journal_init+0xdb0/0xdb0 [ 798.427297][ T4277] ? __kmem_cache_free+0xb6/0x1f0 [ 798.432513][ T4277] ocfs2_dlm_shutdown+0x36/0x240 [ 798.437618][ T4277] ocfs2_dismount_volume+0x47f/0x940 [ 798.443053][ T4277] ? ocfs2_enable_quotas+0x490/0x490 [ 798.448841][ T4277] ? clear_inode+0x150/0x150 [ 798.453771][ T4277] ? ocfs2_free_inode+0x20/0x20 [ 798.458877][ T4277] generic_shutdown_super+0x130/0x340 [ 798.464380][ T4277] kill_block_super+0x7c/0xe0 [ 798.469136][ T4277] deactivate_locked_super+0x93/0xf0 [ 798.474563][ T4277] cleanup_mnt+0x42c/0x4b0 [ 798.479051][ T4277] ? lockdep_hardirqs_on+0x94/0x140 [ 798.484350][ T4277] task_work_run+0x1d0/0x260 [ 798.489078][ T4277] ? task_work_cancel+0x220/0x220 [ 798.494278][ T4277] ? exit_to_user_mode_loop+0x3b/0x110 [ 798.499836][ T4277] exit_to_user_mode_loop+0xe6/0x110 [ 798.505218][ T4277] exit_to_user_mode_prepare+0xee/0x180 [ 798.510864][ T4277] syscall_exit_to_user_mode+0x16/0x40 [ 798.516395][ T4277] do_syscall_64+0x58/0xa0 [ 798.520890][ T4277] ? clear_bhb_loop+0x60/0xb0 [ 798.525665][ T4277] ? clear_bhb_loop+0x60/0xb0 [ 798.530418][ T4277] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 798.536383][ T4277] RIP: 0033:0x7f5745f9d9d7 [ 798.540881][ T4277] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 798.560910][ T4277] RSP: 002b:00007ffe5d159b38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 798.569532][ T4277] RAX: 0000000000000000 RBX: 00007f5746032050 RCX: 00007f5745f9d9d7 [ 798.577656][ T4277] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe5d159bf0 [ 798.585821][ T4277] RBP: 00007ffe5d159bf0 R08: 00007ffe5d15abf0 R09: 00000000ffffffff [ 798.593860][ T4277] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe5d15ac80 [ 798.601927][ T4277] R13: 00007f5746032050 R14: 00000000000c2cf2 R15: 00007ffe5d15acc0 [ 798.610145][ T4277] [ 798.613325][ C1] vkms_vblank_simulate: vblank timer overrun [ 798.633192][ T4269] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 798.649120][ T4277] ocfs2: Unmounting device (7,3) on (node local) [ 799.075481][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 804.195444][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!