last executing test programs: 870.640213ms ago: executing program 2 (id=16266): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000080)={0xdb, 0x1ff, 0x2, 0xfffffffa}, 0x10) 795.755406ms ago: executing program 4 (id=16269): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10) 766.401187ms ago: executing program 3 (id=16270): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3}]}}}, {0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf0}}, 0x0) 759.226297ms ago: executing program 0 (id=16271): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000001380)=""/122, 0x7a}, {&(0x7f0000000040)=""/18, 0x12}], 0x3, 0x0, 0xfffffffd, 0x0) 665.21084ms ago: executing program 2 (id=16272): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000002000)={0x5, 0x8, 0x747, 0x7, 0x3, "eff95c292c69483a213d5e0d9bf8b1b2ee0fe5"}) 642.80597ms ago: executing program 4 (id=16273): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x8}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}}, 0x0) 627.461371ms ago: executing program 0 (id=16274): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000080)={0x0, 0x7a, 0x20f}) 601.487692ms ago: executing program 3 (id=16275): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e00000001b0001000000000000000000fc000000fe880000000000000000000000000000b100000000000000bd1142d300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00080010000800000000000c001500000000000000000008001f"], 0xe0}}, 0x0) 586.380742ms ago: executing program 1 (id=16276): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_newvlan={0x24, 0x76, 0x709, 0x2, 0x0, {0x7, 0x2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0xd, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x4000) 532.146354ms ago: executing program 4 (id=16277): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRES64=0x0, @ANYRESOCT, @ANYRESHEX, @ANYRES64, @ANYRES8=0x0, @ANYRESDEC, @ANYRES64], 0x1, 0x5f0, &(0x7f0000000c80)="$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") rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') 531.679154ms ago: executing program 2 (id=16278): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) 530.840564ms ago: executing program 0 (id=16279): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000340)=0x4000000) 452.265946ms ago: executing program 2 (id=16280): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000001c0)={0xa, {0x2, 0x9, 0x7}}, 0xa) 428.089938ms ago: executing program 3 (id=16281): r0 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x109340) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000000)={0x3, 0x2, 0x1, {0x80000002, 0x4, 0x8, 0x2}}) 427.514158ms ago: executing program 1 (id=16282): prlimit64(0x0, 0x2, &(0x7f0000000040)={0x1000000000000009, 0xffffffffffffffff}, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000002000/0x2000)=nil) 345.63216ms ago: executing program 1 (id=16283): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x2b, 0x1, 0x20000000, 0x25dfdbff, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 336.18646ms ago: executing program 0 (id=16284): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) lseek(r0, 0x0, 0x1) 301.359481ms ago: executing program 2 (id=16285): r0 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000100)={0x0, 0x34524742, 0x140, 0x4, 0x3, @stepwise={{0x80000001, 0x9}, {0x97c1}, {0xffffffff, 0x36}}}) 299.616431ms ago: executing program 3 (id=16286): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x30, 0xd, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) 254.918703ms ago: executing program 4 (id=16287): r0 = io_uring_setup(0x549c, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000400)=[0xe758, 0xf8de], 0x2) 222.678784ms ago: executing program 0 (id=16288): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/pm_debug_messages', 0x100102, 0x0) write$yama_ptrace_scope(r0, &(0x7f0000000040)='3\x00', 0x2) 209.832414ms ago: executing program 1 (id=16289): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x11, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f0000000300), &(0x7f00000003c0)=""/174}, 0x20) 184.606945ms ago: executing program 2 (id=16290): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f00000001c0)={[{@grpjquota, 0x4a}, {@debug}, {@jqfmt_vfsold}, {@dax_never}, {@bsdgroups}, {@usrjquota, 0x22}, {@nojournal_checksum}, {@errors_remount}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='.\x00', 0xe0, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 154.588886ms ago: executing program 3 (id=16291): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r0, r0, 0x0, 0x40008) 111.353057ms ago: executing program 0 (id=16292): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000008c0)={'tunl0\x00', &(0x7f00000007c0)={'sit0\x00', 0x0, 0x8000, 0x1, 0x7ff, 0x93e8, {{0x6, 0x4, 0x2, 0x5, 0x18, 0x64, 0x0, 0x7, 0x0, 0x0, @private=0xa010102, @local, {[@timestamp={0x44, 0x4, 0x43, 0x0, 0xc}]}}}}}) 101.467508ms ago: executing program 1 (id=16293): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$pppl2tp(r0, 0x0, 0x0) 81.153788ms ago: executing program 4 (id=16294): r0 = socket(0x1e, 0x4, 0x0) bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e24, @local}, 0x10) 35.78068ms ago: executing program 3 (id=16295): ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000009003940422c021664da010203010902120001000000040904"], 0x0) 11.940551ms ago: executing program 4 (id=16296): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000300)={0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 1 (id=16297): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x0) kernel console output (not intermixed with test programs): chkdsk [ 1025.754105][T10146] hpfs: You really don't want any checks? You are crazy... [ 1025.775957][T10146] hpfs: Code page index out of array [ 1025.786857][T10089] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.13619 (10089) [ 1025.804573][T10146] hpfs: code page support is disabled [ 1025.824200][T10146] hpfs: hpfs_map_4sectors(): unaligned read [ 1025.831023][T10146] hpfs: hpfs_map_4sectors(): unaligned read [ 1025.837652][T10146] hpfs: filesystem error: unable to find root dir [ 1025.876194][T10089] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1025.907295][T10089] BTRFS info (device loop4): enabling disk space caching [ 1025.926398][T10089] BTRFS info (device loop4): force zlib compression, level 3 [ 1025.954228][T10089] BTRFS warning (device loop4): the 'inode_cache' option is deprecated and has no effect since 5.11 [ 1026.016080][T10089] BTRFS info (device loop4): setting nodatasum [ 1026.024500][T10089] BTRFS info (device loop4): setting nodatacow [ 1026.030828][T10089] BTRFS info (device loop4): enabling ssd optimizations [ 1026.038073][T10089] BTRFS info (device loop4): using spread ssd allocation scheme [ 1026.045991][T10089] BTRFS error (device loop4): cannot disable free space tree [ 1026.058222][T10089] BTRFS error (device loop4): open_ctree failed: -22 [ 1026.426395][T10210] loop4: detected capacity change from 0 to 64 [ 1026.510603][T10210] minix-fs error: zone size must equal block size. s_log_zone_size > 0 is not supported. [ 1026.553642][T10210] MINIX-fs: bad superblock [ 1026.659310][T10234] comedi comedi3: dt2814: I/O port conflict (0x5,2) [ 1026.856035][T10210] loop4: detected capacity change from 0 to 4096 [ 1026.950341][T10210] ntfs3: loop4: mft corrupted [ 1026.969431][T10257] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 10257 comm: syz.3.13673) [ 1026.974859][T10210] ntfs3: loop4: Failed to load $MFT. [ 1027.011784][ T26] audit: type=1800 audit(1313.968:67): pid=10257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.13673" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=122421 res=0 errno=0 [ 1027.684660][T10318] loop4: detected capacity change from 0 to 256 [ 1027.749649][T10304] loop2: detected capacity change from 0 to 8192 [ 1027.930031][T10304] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 1027.942322][T10304] REISERFS (device loop2): using ordered data mode [ 1027.948962][T10304] reiserfs: using flush barriers [ 1027.957922][T10304] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1027.999870][T10304] REISERFS (device loop2): checking transaction log (loop2) [ 1028.013645][T10346] netlink: 36 bytes leftover after parsing attributes in process `syz.3.13703'. [ 1028.168595][T10304] REISERFS (device loop2): Using tea hash to sort names [ 1028.203516][T10304] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 1028.280320][T10304] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 1028.666201][T10400] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13723'. [ 1028.799841][ T4239] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1029.051556][ T4239] usb 5-1: Using ep0 maxpacket: 32 [ 1029.182482][ T4239] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 1029.200825][ T4239] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1029.228732][ T4239] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1029.256431][ T4239] usb 5-1: config 1 has no interface number 0 [ 1029.283350][ T4239] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1029.319017][T10466] device netdevsim0 left promiscuous mode [ 1029.321628][ T4239] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1029.336053][T10466] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1029.359489][ T4239] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1029.388794][ T4239] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1029.410138][ T4239] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.475143][ T4239] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 1029.615062][T10486] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.13750'. [ 1029.641820][T10425] loop2: detected capacity change from 0 to 32768 [ 1029.670424][ T4239] snd_usb_pod 5-1:1.1: cannot start listening: -90 [ 1029.680064][ T4239] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 1029.714001][ T4239] snd_usb_pod: probe of 5-1:1.1 failed with error -90 [ 1029.787641][T18199] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 1029.832124][T10425] XFS (loop2): Mounting V5 Filesystem [ 1029.911921][ T5983] usb 5-1: USB disconnect, device number 49 [ 1029.990959][T10425] XFS (loop2): Ending clean mount [ 1030.071612][ T4192] XFS (loop2): Unmounting Filesystem [ 1030.124896][ C1] vkms_vblank_simulate: vblank timer overrun [ 1030.179632][T18199] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1030.235080][T18199] usb 4-1: not running at top speed; connect to a high speed hub [ 1030.319329][T18199] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1030.347428][T18199] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1030.383209][T18199] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1030.396630][ T5983] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1030.561334][T18199] usb 4-1: New USB device found, idVendor=0582, idProduct=1f14, bcdDevice= 0.40 [ 1030.577466][T18199] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.616505][T18199] usb 4-1: Product: syz [ 1030.646436][T18199] usb 4-1: Manufacturer: syz [ 1030.651091][T18199] usb 4-1: SerialNumber: syz [ 1030.785195][ T5983] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1030.874763][T10543] loop1: detected capacity change from 0 to 32768 [ 1030.884189][ T5983] usb 1-1: config 0 has an invalid interface number: 86 but max is 0 [ 1030.918601][ T5983] usb 1-1: config 0 has no interface number 0 [ 1030.927249][ T5983] usb 1-1: config 0 interface 86 altsetting 4 bulk endpoint 0xE has invalid maxpacket 8 [ 1030.940001][ T5983] usb 1-1: config 0 interface 86 altsetting 4 bulk endpoint 0xC has invalid maxpacket 32 [ 1030.950248][ T5983] usb 1-1: config 0 interface 86 has no altsetting 0 [ 1030.971734][T10543] (syz.1.13766,10543,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1031.008541][T18199] usb 4-1: MIDIStreaming interface descriptor not found [ 1031.018519][T10543] (syz.1.13766,10543,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1031.095631][T10543] JBD2: Ignoring recovery information on journal [ 1031.102857][T18199] usb 4-1: USB disconnect, device number 47 [ 1031.112291][ T5983] usb 1-1: New USB device found, idVendor=0586, idProduct=1000, bcdDevice=aa.5e [ 1031.131457][ T5983] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.144582][ T5983] usb 1-1: Product: syz [ 1031.151842][ T5983] usb 1-1: Manufacturer: syz [ 1031.156656][ T5983] usb 1-1: SerialNumber: syz [ 1031.164656][ T5983] usb 1-1: config 0 descriptor?? [ 1031.180199][T10609] loop4: detected capacity change from 0 to 512 [ 1031.186984][T10530] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1031.195244][T10530] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1031.286694][T10609] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback. [ 1031.318388][T10543] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1031.388570][T10621] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13779'. [ 1031.410075][ T4714] udevd[4714]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1031.456542][T10621] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13779'. [ 1031.550860][ T5983] omninet 1-1:0.86: ZyXEL - omni.net usb converter detected [ 1031.578733][ T5983] usb 1-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 1031.616853][ T5983] usb 1-1: USB disconnect, device number 54 [ 1031.658770][ T5983] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 1031.683151][ T4191] ocfs2: Unmounting device (7,1) on (node local) [ 1031.710747][ T5983] omninet 1-1:0.86: device disconnected [ 1031.938837][T10656] loop3: detected capacity change from 0 to 4096 [ 1032.048006][T10656] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 1032.170602][T10656] ntfs3: loop3: Failed to load $Extend. [ 1032.215157][T10686] netlink: 244 bytes leftover after parsing attributes in process `syz.1.13794'. [ 1032.416536][ T5986] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1032.427547][T10687] loop4: detected capacity change from 0 to 4096 [ 1032.459573][T10687] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 1032.564030][T10687] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1032.572295][T10711] netlink: 'syz.1.13803': attribute type 3 has an invalid length. [ 1032.585854][T10711] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.13803'. [ 1032.615905][T10687] ntfs3: loop4: Failed to load root. [ 1032.751786][ T5986] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1032.782498][ T5986] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1032.822595][ T5986] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1032.849904][ T5986] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1032.897082][ T5986] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1032.933349][ T5986] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.957546][ T5986] usb 1-1: config 0 descriptor?? [ 1033.046663][T10750] loop2: detected capacity change from 0 to 1024 [ 1033.062687][T10757] loop1: detected capacity change from 0 to 16 [ 1033.108052][T10757] erofs: (device loop1): mounted with root inode @ nid 36. [ 1033.206105][ T5986] usb 1-1: USB disconnect, device number 55 [ 1033.523619][T10797] netlink: 'syz.1.13827': attribute type 21 has an invalid length. [ 1033.550877][T10800] loop4: detected capacity change from 0 to 1024 [ 1033.633143][T10800] EXT4-fs (loop4): Ignoring removed orlov option [ 1033.672099][T10800] EXT4-fs (loop4): mounted filesystem without journal. Opts: dax=never,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,mb_optimize_scan=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1033.800212][T10821] x_tables: duplicate underflow at hook 4 [ 1033.851306][ T5986] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 1034.119379][T10793] loop2: detected capacity change from 0 to 32768 [ 1034.211647][T10793] find_entry called with index >= next_index [ 1034.252261][ T5986] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1034.299309][ T5986] usb 4-1: not running at top speed; connect to a high speed hub [ 1034.597114][ T5986] usb 4-1: string descriptor 0 read error: -22 [ 1034.604866][ T5986] usb 4-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 1034.645999][ T5986] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.740356][ T5986] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 1034.808736][ T5986] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 1034.879365][T10896] loop1: detected capacity change from 0 to 1024 [ 1035.192271][T10935] device vlan0 entered promiscuous mode [ 1035.203146][ T5986] us122l: couldn't allocate write buffer [ 1035.209365][ T5986] snd-usb-us122l: probe of 4-1:1.1 failed with error -22 [ 1035.238306][ T5986] usb 4-1: USB disconnect, device number 48 [ 1035.267830][ T4668] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1035.278499][T10948] loop1: detected capacity change from 0 to 256 [ 1035.297753][T10935] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 1035.342109][T10948] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1035.437012][ T4702] udevd[4702]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1035.587694][ T4668] usb 3-1: Using ep0 maxpacket: 8 [ 1035.638317][T10964] loop1: detected capacity change from 0 to 4096 [ 1035.683336][T10964] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 1035.706369][T10964] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1035.725138][ T4668] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1035.751463][ T4668] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1035.766006][T10964] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1035.778098][ T4668] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1035.792275][ T4668] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1035.805921][T10964] ntfs: volume version 3.1. [ 1035.816967][T10964] ntfs: (device loop1): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 1035.833582][ T4668] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1035.849225][T10964] ntfs: (device loop1): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 1035.863993][ T4668] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1035.875467][T10964] ntfs: (device loop1): load_and_init_quota(): Failed to load $Quota/$Q index. [ 1035.884944][ T4668] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.911841][T10964] ntfs: (device loop1): load_system_files(): Failed to load $Quota. Mounting read-only. Run chkdsk. [ 1035.924476][ T4668] usb 3-1: config 0 descriptor?? [ 1035.949975][T10918] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1036.002309][T10986] device bond2 entered promiscuous mode [ 1036.023527][T10964] ntfs: (device loop1): ntfs_read_locked_inode(): Inode is an extent inode! [ 1036.054811][T10986] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1036.066280][T10964] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x44 as bad. Run chkdsk. [ 1036.106113][T10983] xt_CT: No such helper "pptp" [ 1036.233574][T11020] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 1036.296311][T11041] fuse: blksize only supported for fuseblk [ 1036.391250][ T5986] usb 3-1: USB disconnect, device number 40 [ 1036.468650][T11061] x_tables: duplicate underflow at hook 2 [ 1036.675034][T11082] QAT: failed to copy from user cfg_data. [ 1036.973722][ T5983] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1037.197217][ T4239] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1037.207255][ T5983] usb 4-1: Using ep0 maxpacket: 32 [ 1037.246638][T11140] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 1037.321971][ T5983] usb 4-1: config 239 has an invalid descriptor of length 0, skipping remainder of the config [ 1037.348037][ T5983] usb 4-1: config 239 has 1 interface, different from the descriptor's value: 3 [ 1037.489416][ T4239] usb 1-1: Using ep0 maxpacket: 16 [ 1037.533624][ T5983] usb 4-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice= 0.40 [ 1037.553016][ T5983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.579344][ T5983] usb 4-1: Product: syz [ 1037.593955][ T5983] usb 4-1: Manufacturer: syz [ 1037.607613][ T4239] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1037.612887][ T5983] usb 4-1: SerialNumber: syz [ 1037.631252][ T4239] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1037.671740][ T4239] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1037.682413][ T4239] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1037.718955][ T4239] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 1037.767444][ T4239] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1037.774274][ T4239] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1037.816112][ T4239] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.888351][ T4239] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 1037.961975][ T5983] usb 4-1: unit 2 not found! [ 1038.006699][ T5983] usb 4-1: USB disconnect, device number 49 [ 1038.115976][ T4239] scsi host1: usb-storage 1-1:1.0 [ 1038.223780][ T4702] udevd[4702]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:239.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1038.296958][ T4239] usb 1-1: USB disconnect, device number 56 [ 1038.442499][T11263] (unnamed net_device) (uninitialized): option lacp_active: invalid value (161) [ 1039.211126][ T4239] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 1039.435416][T11351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13983'. [ 1039.477141][T11351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13983'. [ 1039.524111][T11362] loop2: detected capacity change from 0 to 8 [ 1039.628470][T11362] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1039.650490][T11362] SQUASHFS error: Failed to read block 0x91: -5 [ 1039.658205][ T4239] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1039.683280][T11362] SQUASHFS error: Unable to read metadata cache entry [8f] [ 1039.695857][ T4239] usb 2-1: not running at top speed; connect to a high speed hub [ 1039.718100][T11362] SQUASHFS error: Unable to read inode 0x11f [ 1039.758016][T11362] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 1039.758016][T11362] SȘȞZ6' [ 1039.816808][ T4239] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1039.847650][ T4239] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1039.868386][ T4239] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1040.049613][ T4239] usb 2-1: New USB device found, idVendor=0582, idProduct=1f14, bcdDevice= 0.40 [ 1040.088706][ T4239] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.106653][ T4239] usb 2-1: Product: syz [ 1040.110875][ T4239] usb 2-1: Manufacturer: syz [ 1040.126566][ T4239] usb 2-1: SerialNumber: syz [ 1040.266258][T11366] loop3: detected capacity change from 0 to 32768 [ 1040.517898][ T4239] usb 2-1: MIDIStreaming interface descriptor not found [ 1040.582445][ T4239] usb 2-1: USB disconnect, device number 45 [ 1040.655846][ T5983] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1040.892801][T11483] device veth1_vlan left promiscuous mode [ 1040.930676][ T4714] udevd[4714]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1041.000735][ T5983] usb 1-1: config 32 has an invalid interface number: 255 but max is 0 [ 1041.028585][ T5983] usb 1-1: config 32 has no interface number 0 [ 1041.044969][ T5983] usb 1-1: too many endpoints for config 32 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1041.075500][ T5983] usb 1-1: config 32 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1041.099231][ T5983] usb 1-1: config 32 interface 255 has no altsetting 0 [ 1041.115057][ T5983] usb 1-1: New USB device found, idVendor=057b, idProduct=0000, bcdDevice= 0.00 [ 1041.134091][ T5983] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1041.199442][ T5983] usb-storage 1-1:32.255: USB Mass Storage device detected [ 1041.211528][ T5983] usb-storage 1-1:32.255: Quirks match for vid 057b pid 0000: 1 [ 1041.410182][T18199] usb 1-1: USB disconnect, device number 57 [ 1041.511340][T11536] netlink: 'syz.3.14032': attribute type 8 has an invalid length. [ 1041.541912][T11536] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.14032'. [ 1041.627292][T11542] netlink: 196 bytes leftover after parsing attributes in process `syz.4.14034'. [ 1041.657199][T11545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14035'. [ 1041.768773][T11513] loop1: detected capacity change from 0 to 32768 [ 1041.891658][T11513] XFS (loop1): Mounting V5 Filesystem [ 1041.970357][T11577] cgroup: Invalid name [ 1041.986325][T11513] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 1042.009258][T11513] XFS (loop1): Tail block (0x29) overwrite detected. Updated to 0x30 [ 1042.161856][T11513] XFS (loop1): Ending clean mount [ 1042.307479][ T4191] XFS (loop1): Unmounting Filesystem [ 1042.430134][T11610] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1042.432540][T18199] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1042.507105][T11615] loop3: detected capacity change from 0 to 512 [ 1042.583429][T11615] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1042.668916][T18199] usb 5-1: Using ep0 maxpacket: 8 [ 1042.718624][T11629] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 1042.780643][T18199] usb 5-1: config 0 has an invalid interface number: 33 but max is 1 [ 1042.793718][T18199] usb 5-1: config 0 has no interface number 1 [ 1042.817947][T18199] usb 5-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 1042.874073][T18199] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247 [ 1043.068248][T11659] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 1043.076374][T18199] usb 5-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 1043.101864][T18199] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.120730][T18199] usb 5-1: Product: syz [ 1043.124964][T18199] usb 5-1: Manufacturer: syz [ 1043.155755][T18199] usb 5-1: SerialNumber: syz [ 1043.192626][T18199] usb 5-1: config 0 descriptor?? [ 1043.210336][T11672] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14074'. [ 1043.223998][T11673] loop2: detected capacity change from 0 to 64 [ 1043.252034][T11672] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14074'. [ 1043.263919][T18199] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 1043.318762][T11684] openvswitch: netlink: Message has 4 unknown bytes. [ 1043.461189][ T2427] pvrusb2: Invalid read control endpoint [ 1043.467575][T18199] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 1043.492512][ T2427] usb 5-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 1043.530046][T18199] usb 5-1: USB disconnect, device number 50 [ 1043.557459][ T2427] usb 5-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 1043.671369][T11702] loop1: detected capacity change from 0 to 4096 [ 1043.735127][T11702] ntfs3: loop1: ino=3, Correct links count -> 2. [ 1043.830275][T11702] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1043.916118][T11735] loop3: detected capacity change from 0 to 512 [ 1043.941832][T11739] netlink: 'syz.0.14093': attribute type 21 has an invalid length. [ 1043.967848][T11735] EXT4-fs (loop3): Ignoring removed nobh option [ 1044.009043][T11739] IPv6: NLM_F_CREATE should be specified when creating new route [ 1044.074456][T11735] EXT4-fs (loop3): mounted filesystem without journal. Opts: data_err=ignore,nobh,,errors=continue. Quota mode: writeback. [ 1044.126808][T11752] loop2: detected capacity change from 0 to 1024 [ 1044.188424][T11752] hfsplus: invalid secondary volume header [ 1044.195102][T11752] hfsplus: unable to find HFS+ superblock [ 1044.258384][T11735] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1044.370445][ C0] vkms_vblank_simulate: vblank timer overrun [ 1044.885567][T11814] loop4: detected capacity change from 0 to 128 [ 1044.907469][T11815] loop3: detected capacity change from 0 to 256 [ 1044.985244][T11815] FAT-fs (loop3): Directory bread(block 64) failed [ 1045.001419][T11815] FAT-fs (loop3): Directory bread(block 65) failed [ 1045.020165][T11815] FAT-fs (loop3): Directory bread(block 66) failed [ 1045.027404][T11815] FAT-fs (loop3): Directory bread(block 67) failed [ 1045.038550][T11815] FAT-fs (loop3): Directory bread(block 68) failed [ 1045.050558][T11814] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1045.086852][T11815] FAT-fs (loop3): Directory bread(block 69) failed [ 1045.102927][T11814] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1045.126607][T11815] FAT-fs (loop3): Directory bread(block 70) failed [ 1045.146323][T11815] FAT-fs (loop3): Directory bread(block 71) failed [ 1045.173202][T11815] FAT-fs (loop3): Directory bread(block 72) failed [ 1045.190805][T11815] FAT-fs (loop3): Directory bread(block 73) failed [ 1045.429720][T11764] loop1: detected capacity change from 0 to 32768 [ 1045.508345][T11837] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1045.541627][T11764] XFS (loop1): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 1045.575034][T11837] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1045.653076][T11837] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1045.723877][T11837] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1045.802127][T11858] loop3: detected capacity change from 0 to 256 [ 1045.920237][T11858] FAT-fs (loop3): Directory bread(block 64) failed [ 1045.969070][ T4191] XFS (loop1): Unmounting Filesystem [ 1045.976233][T11858] FAT-fs (loop3): Directory bread(block 65) failed [ 1045.992706][T11858] FAT-fs (loop3): Directory bread(block 66) failed [ 1046.000022][T11858] FAT-fs (loop3): Directory bread(block 67) failed [ 1046.006854][T11858] FAT-fs (loop3): Directory bread(block 68) failed [ 1046.010741][ C0] vkms_vblank_simulate: vblank timer overrun [ 1046.014121][T11858] FAT-fs (loop3): Directory bread(block 69) failed [ 1046.052429][T11858] FAT-fs (loop3): Directory bread(block 70) failed [ 1046.059265][T11858] FAT-fs (loop3): Directory bread(block 71) failed [ 1046.067026][T11858] FAT-fs (loop3): Directory bread(block 72) failed [ 1046.074219][T11858] FAT-fs (loop3): Directory bread(block 73) failed [ 1046.111382][T11858] UBIFS error (pid: 11858): cannot open "./file0", error -22 [ 1046.136203][ T5986] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 1046.519639][ T5986] usb 3-1: config 8 has an invalid interface number: 80 but max is 0 [ 1046.538425][ T5986] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1046.575438][ T5986] usb 3-1: config 8 has no interface number 0 [ 1046.581616][ T5986] usb 3-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0xE7, skipping [ 1046.606965][ T5986] usb 3-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1046.656160][ T5986] usb 3-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1046.669779][T11892] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14138'. [ 1046.679070][ T5986] usb 3-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 1046.706462][ T5986] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 1046.762428][ T5986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.836176][ T5986] usb 3-1: NFC: intf ffff88807b3de000 id ffffffff8cb52700 [ 1047.028617][T18196] usb 3-1: USB disconnect, device number 41 [ 1047.756224][T11984] netlink: 'syz.3.14162': attribute type 1 has an invalid length. [ 1047.785392][T11984] netlink: 'syz.3.14162': attribute type 2 has an invalid length. [ 1047.984991][T12002] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14167'. [ 1048.205286][T18196] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1048.462048][T12043] sctp: [Deprecated]: syz.0.14182 (pid 12043) Use of int in max_burst socket option deprecated. [ 1048.462048][T12043] Use struct sctp_assoc_value instead [ 1048.484535][T12046] loop2: detected capacity change from 0 to 512 [ 1048.714328][T12046] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1048.736229][T18196] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1048.747845][T18196] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.784481][T18196] usb 2-1: Product: syz [ 1048.801807][T18196] usb 2-1: Manufacturer: syz [ 1048.806515][T18196] usb 2-1: SerialNumber: syz [ 1048.865986][T18196] usb 2-1: config 0 descriptor?? [ 1049.122744][T12089] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14193'. [ 1049.135713][T12083] loop2: detected capacity change from 0 to 2048 [ 1049.142459][T12089] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14193'. [ 1049.152227][T12089] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14193'. [ 1049.205251][T18196] mos7840 2-1:0.0: required endpoints missing [ 1049.237130][T18196] usb 2-1: USB disconnect, device number 46 [ 1049.253406][T12097] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1049.594656][T12119] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14202'. [ 1049.992436][T12107] loop4: detected capacity change from 0 to 32768 [ 1050.010904][T12150] loop2: detected capacity change from 0 to 256 [ 1050.035726][T12153] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1050.063254][T12153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1050.071331][T12153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1050.087693][T12107] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.14199 (12107) [ 1050.108823][T12153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1050.165632][T12107] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1050.186709][T12107] BTRFS info (device loop4): using free space tree [ 1050.194803][T12107] BTRFS info (device loop4): has skinny extents [ 1050.255740][T12163] program syz.3.14215 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1050.371848][T12171] loop2: detected capacity change from 0 to 512 [ 1050.463629][T12171] EXT4-fs (loop2): Ignoring removed nobh option [ 1050.533600][T12171] EXT4-fs (loop2): mounted filesystem without journal. Opts: data_err=ignore,nobh,,errors=continue. Quota mode: writeback. [ 1050.585927][T12107] BTRFS info (device loop4): enabling ssd optimizations [ 1050.675472][T12171] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1050.917112][T12215] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14226'. [ 1051.910825][T12297] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14253'. [ 1052.298346][T12334] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1052.776604][T12374] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1053.016926][T12401] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1053.052562][T12401] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1053.072194][T12401] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1053.107988][T12401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1053.216391][T12416] tmpfs: Bad value for 'mpol' [ 1053.228752][T12418] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1053.827780][T12477] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1054.025523][T12498] netlink: 'syz.1.14322': attribute type 46 has an invalid length. [ 1054.061023][T12498] netlink: 36 bytes leftover after parsing attributes in process `syz.1.14322'. [ 1054.309476][T12532] netlink: 100 bytes leftover after parsing attributes in process `syz.0.14334'. [ 1054.434985][T12541] loop3: detected capacity change from 0 to 256 [ 1054.498067][T12541] FAT-fs (loop3): Directory bread(block 64) failed [ 1054.520521][T12541] FAT-fs (loop3): Directory bread(block 65) failed [ 1054.545683][T12541] FAT-fs (loop3): Directory bread(block 66) failed [ 1054.552296][T12541] FAT-fs (loop3): Directory bread(block 67) failed [ 1054.581887][T12541] FAT-fs (loop3): Directory bread(block 68) failed [ 1054.588588][T12541] FAT-fs (loop3): Directory bread(block 69) failed [ 1054.625715][T12557] loop2: detected capacity change from 0 to 512 [ 1054.632367][T12541] FAT-fs (loop3): Directory bread(block 70) failed [ 1054.659006][T12541] FAT-fs (loop3): Directory bread(block 71) failed [ 1054.668412][T12541] FAT-fs (loop3): Directory bread(block 72) failed [ 1054.675083][T12541] FAT-fs (loop3): Directory bread(block 73) failed [ 1054.734130][T12557] EXT4-fs (loop2): Ignoring removed nobh option [ 1054.793701][T12557] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 1054.806417][T12557] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61 [ 1054.816472][T12557] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #13: comm syz.2.14344: inode has both inline data and extents flags [ 1054.869106][ T4688] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 1054.894837][T12557] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.14344: couldn't read orphan inode 13 (err -117) [ 1054.903122][ T4688] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 1054.915629][T12557] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue. Quota mode: writeback. [ 1054.954711][T16338] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 1054.976456][T12557] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 1055.207261][T16338] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 1055.313610][T12609] loop4: detected capacity change from 0 to 1764 [ 1055.447446][T16338] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 1055.938358][T12670] netlink: 76 bytes leftover after parsing attributes in process `syz.4.14379'. [ 1055.965362][T12673] loop1: detected capacity change from 0 to 256 [ 1055.985198][T12670] unsupported nla_type 34 [ 1056.289887][T12697] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1056.513938][T12714] device geneve1 entered promiscuous mode [ 1056.885489][T12750] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1056.927850][T12750] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1056.968331][T12757] netlink: 'syz.3.14408': attribute type 3 has an invalid length. [ 1056.977733][T12750] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1057.009810][T12750] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1057.017583][T12757] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14408'. [ 1057.045547][T12750] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1057.088190][T12750] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1057.141641][T12750] IPv6: ADDRCONF(NETDEV_CHANGE): bridge1: link becomes ready [ 1057.163421][ T4688] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1057.218021][T12774] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1057.225527][T12774] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1057.285469][T12774] vhci_hcd vhci_hcd.0: Device attached [ 1057.469978][ T4688] vhci_hcd: vhci_device speed not set [ 1057.535355][ T4688] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 1057.596717][T12815] loop1: detected capacity change from 0 to 8 [ 1057.660685][T12824] openvswitch: netlink: Message has 8 unknown bytes. [ 1057.675843][T12815] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1057.687908][T12826] netlink: 'syz.4.14433': attribute type 21 has an invalid length. [ 1057.698383][T12826] netlink: 120 bytes leftover after parsing attributes in process `syz.4.14433'. [ 1057.708262][T12826] netlink: 'syz.4.14433': attribute type 1 has an invalid length. [ 1057.718826][T12826] netlink: 9 bytes leftover after parsing attributes in process `syz.4.14433'. [ 1057.740567][T12828] netlink: 'syz.2.14434': attribute type 6 has an invalid length. [ 1057.748735][T12828] netlink: 'syz.2.14434': attribute type 7 has an invalid length. [ 1057.757795][T12828] netlink: 'syz.2.14434': attribute type 8 has an invalid length. [ 1057.766359][T12815] cramfs: bad data blocksize 4294934200 [ 1057.792991][ T4702] udevd[4702]: incorrect cramfs checksum on /dev/loop1 [ 1057.833420][T12815] cramfs: bad data blocksize 4294934200 [ 1057.839207][T16338] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1057.847108][T12776] vhci_hcd: connection reset by peer [ 1057.858805][ T7022] vhci_hcd: stop threads [ 1057.863927][ T26] audit: type=1800 audit(1347.067:68): pid=12815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.14430" name="file1" dev="loop1" ino=33092 res=0 errno=0 [ 1057.889086][ T7022] vhci_hcd: release socket [ 1057.900704][T12835] binfmt_misc: register: failed to install interpreter file ./file0 [ 1057.909374][ T7022] vhci_hcd: disconnect device [ 1058.117718][T12858] netlink: 76 bytes leftover after parsing attributes in process `syz.2.14444'. [ 1058.153361][T12864] loop1: detected capacity change from 0 to 512 [ 1058.164444][T12858] netlink: 72 bytes leftover after parsing attributes in process `syz.2.14444'. [ 1058.206341][T12858] netlink: 'syz.2.14444': attribute type 3 has an invalid length. [ 1058.214321][T12858] netlink: 11 bytes leftover after parsing attributes in process `syz.2.14444'. [ 1058.227699][T12864] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 1058.331857][T12864] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 1058.345506][ C0] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 1058.383172][T12887] netlink: 144 bytes leftover after parsing attributes in process `syz.3.14453'. [ 1058.516832][T12897] netlink: 'syz.3.14458': attribute type 4 has an invalid length. [ 1058.532605][T12864] EXT4-fs error (device loop1): ext4_get_first_dir_block:3597: inode #12: comm syz.1.14446: Attempting to read directory block (0) that is past i_size (3) [ 1058.841173][T12925] batman_adv: batadv0: Removing interface: netdevsim0 [ 1058.868879][T12925] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1059.285300][T12965] loop3: detected capacity change from 0 to 736 [ 1059.344444][T12956] loop4: detected capacity change from 0 to 4096 [ 1059.403140][T12956] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 1059.532247][T12956] ntfs: volume version 3.1. [ 1059.558453][T12979] loop2: detected capacity change from 0 to 128 [ 1060.073596][T13019] loop3: detected capacity change from 0 to 512 [ 1060.125875][T13019] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1060.264056][T13019] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 1060.344102][T13019] Quota error (device loop3): write_blk: dquota write failed [ 1060.383013][T13053] netlink: 'syz.4.14512': attribute type 1 has an invalid length. [ 1060.391387][T13053] netlink: 224 bytes leftover after parsing attributes in process `syz.4.14512'. [ 1060.401202][T13053] nbd: couldn't find a device at index 1024 [ 1060.408829][T13019] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 1060.473997][T13019] Quota error (device loop3): write_blk: dquota write failed [ 1060.497946][T13019] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 1060.543527][T13019] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.14500: Failed to acquire dquot type 1 [ 1060.563740][T13065] loop4: detected capacity change from 0 to 512 [ 1060.582606][T13019] EXT4-fs (loop3): 1 truncate cleaned up [ 1060.596852][T13019] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,noblock_validity,inode_readahead_blks=0x0000000002000000,resgid=0x0000000000000000,norecovery,quota,auto_da_alloc,auto_da_alloc=0x0000000000000001,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 1060.679564][T13065] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,noload,,errors=continue. Quota mode: writeback. [ 1060.721766][T13019] Quota error (device loop3): write_blk: dquota write failed [ 1060.763201][T13019] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 1060.773833][T13019] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.14500: Failed to acquire dquot type 1 [ 1061.113673][T13084] loop2: detected capacity change from 0 to 4096 [ 1061.159415][T13084] ntfs3: loop2: ino=3, Correct links count -> 2. [ 1061.194335][T13110] ieee802154 phy1 wpan1: encryption failed: -90 [ 1061.418410][T13124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14536'. [ 1061.891298][T13162] hsr0: VLAN not yet supported [ 1062.029037][T13100] loop4: detected capacity change from 0 to 40427 [ 1062.048546][T13176] netlink: 'syz.2.14554': attribute type 1 has an invalid length. [ 1062.057486][T13176] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.14554'. [ 1062.068095][T13176] netlink: 'syz.2.14554': attribute type 1 has an invalid length. [ 1062.239760][T13100] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 1062.264909][T13100] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1062.301201][T13100] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x6 [ 1062.307408][ T4688] vhci_hcd: vhci_device speed not set [ 1062.340470][T13100] F2FS-fs (loop4): invalid crc value [ 1062.375529][T13100] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1062.633683][T13100] F2FS-fs (loop4): Start checkpoint disabled! [ 1062.649513][T13217] netlink: 'syz.0.14566': attribute type 32 has an invalid length. [ 1062.668702][T13100] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1062.700101][T13100] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1062.874719][T13100] attempt to access beyond end of device [ 1062.874719][T13100] loop4: rw=2049, want=45104, limit=40427 [ 1062.919128][T13240] device wg1 entered promiscuous mode [ 1063.036875][ T4471] attempt to access beyond end of device [ 1063.036875][ T4471] loop4: rw=2049, want=45112, limit=40427 [ 1063.338268][T13267] netlink: 4268 bytes leftover after parsing attributes in process `syz.3.14586'. [ 1063.461677][T13274] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.14588'. [ 1063.593633][T13282] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14591'. [ 1063.700107][T13291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14594'. [ 1063.728071][T13295] netlink: 'syz.3.14595': attribute type 1 has an invalid length. [ 1063.793245][T13300] 9pnet: Insufficient options for proto=fd [ 1063.854855][T13302] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.14599'. [ 1064.037084][T13309] loop3: detected capacity change from 0 to 4096 [ 1064.143167][T13309] ntfs: volume version 3.1. [ 1064.173626][T13309] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1064.203651][T13335] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14606'. [ 1064.217073][T13309] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1064.255138][T13309] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 1064.293495][T13309] ntfs: (device loop3): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4). Marking corrupt inode and base inode 0x1a as bad. Run chkdsk. [ 1064.401307][T13309] ntfs: (device loop3): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute. [ 1064.431062][T13309] ntfs: (device loop3): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 1064.574372][T13357] netlink: 56 bytes leftover after parsing attributes in process `syz.0.14613'. [ 1064.625922][T13243] loop2: detected capacity change from 0 to 65536 [ 1064.631293][T13357] netlink: 56 bytes leftover after parsing attributes in process `syz.0.14613'. [ 1064.850191][T13243] XFS (loop2): Mounting V5 Filesystem [ 1064.875735][T13388] device bridge7 entered promiscuous mode [ 1064.952987][T13243] XFS (loop2): Ending clean mount [ 1064.985920][T13243] XFS (loop2): Quotacheck needed: Please wait. [ 1065.051856][T13243] XFS (loop2): Quotacheck: Done. [ 1065.211431][ T4192] XFS (loop2): Unmounting Filesystem [ 1065.292883][T13423] program syz.4.14632 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1065.436488][ C0] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 1065.714301][T13451] netlink: 'syz.4.14643': attribute type 5 has an invalid length. [ 1066.131704][T13487] netlink: 'syz.3.14657': attribute type 1 has an invalid length. [ 1066.164841][T13487] netlink: 224 bytes leftover after parsing attributes in process `syz.3.14657'. [ 1066.520098][ T5986] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1066.754907][ T5986] usb 2-1: Using ep0 maxpacket: 16 [ 1066.859784][T13561] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1066.870521][T16338] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1067.015762][ T5986] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1067.032765][ T5986] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.044335][ T5986] usb 2-1: Product: syz [ 1067.048684][ T5986] usb 2-1: Manufacturer: syz [ 1067.053455][ T5986] usb 2-1: SerialNumber: syz [ 1067.068082][ T5986] r8152-cfgselector 2-1: config 0 descriptor?? [ 1067.120008][T13580] loop2: detected capacity change from 0 to 128 [ 1067.148767][T13580] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1067.237649][T16338] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1067.249189][T16338] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1067.273989][T16338] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.362192][T16338] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1067.413316][T13602] netlink: 'syz.2.14691': attribute type 7 has an invalid length. [ 1067.423215][T13602] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14691'. [ 1067.527017][ T5986] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1067.543784][ T5986] r8152-cfgselector 2-1: USB disconnect, device number 47 [ 1067.610472][T13618] loop2: detected capacity change from 0 to 64 [ 1067.812527][T13635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14701'. [ 1067.926026][T13647] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14705'. [ 1068.000809][T13654] openvswitch: netlink: Actions may not be safe on all matching packets [ 1068.035385][T13657] vivid-003: ================= START STATUS ================= [ 1068.063108][T13657] vivid-003: Radio HW Seek Mode: Bounded [ 1068.073499][T13657] vivid-003: Radio Programmable HW Seek: false [ 1068.080088][T13657] vivid-003: RDS Rx I/O Mode: Block I/O [ 1068.086531][T13657] vivid-003: Generate RBDS Instead of RDS: false [ 1068.093081][T13657] vivid-003: RDS Reception: true [ 1068.098606][T13657] vivid-003: RDS Program Type: 0 inactive [ 1068.105057][T13657] vivid-003: RDS PS Name: inactive [ 1068.110566][T13657] vivid-003: RDS Radio Text: inactive [ 1068.117311][T13657] vivid-003: RDS Traffic Announcement: false inactive [ 1068.129976][T13657] vivid-003: RDS Traffic Program: false inactive [ 1068.137308][T13657] vivid-003: RDS Music: false inactive [ 1068.143539][T13657] vivid-003: ================== END STATUS ================== [ 1068.274242][T13672] netlink: 'syz.1.14714': attribute type 1 has an invalid length. [ 1068.375666][T16338] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 1068.386261][T13685] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.14719'. [ 1068.414421][ T4265] Bluetooth: hci4: command 0x0405 tx timeout [ 1068.483719][T13699] overlayfs: missing 'lowerdir' [ 1068.580281][T16338] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1068.595916][T16338] stv0680 4-1:4.0: last error: 249, command = 0xaf [ 1068.628393][T16338] usb 4-1: USB disconnect, device number 50 [ 1068.900047][T13743] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (3) [ 1069.151498][T13774] cgroup: No subsys list or none specified [ 1069.255565][T13775] loop2: detected capacity change from 0 to 4096 [ 1069.262420][ T5986] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1069.482046][T13799] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14756'. [ 1069.493131][ T5986] usb 1-1: Using ep0 maxpacket: 16 [ 1069.608295][ T5986] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1069.633644][ T5986] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1069.792846][ T5986] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1069.811749][ T5986] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.831897][ T5986] usb 1-1: Product: syz [ 1069.836286][ T5986] usb 1-1: Manufacturer: syz [ 1069.842459][ T5986] usb 1-1: SerialNumber: syz [ 1069.865797][T18196] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 1069.876777][T13830] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1069.899101][ T5986] usb 1-1: config 0 descriptor?? [ 1070.182544][ C1] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1070.230988][T18196] usb 4-1: config 0 has an invalid interface number: 3 but max is 2 [ 1070.251459][T18196] usb 4-1: config 0 has an invalid interface number: 176 but max is 2 [ 1070.262193][ T5986] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input61 [ 1070.279752][T18196] usb 4-1: config 0 has no interface number 1 [ 1070.286178][T18196] usb 4-1: config 0 has no interface number 2 [ 1070.292342][T18196] usb 4-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 1070.343143][ T5986] imon:send_packet: packet tx failed (-71) [ 1070.351061][T18196] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.373478][T18196] usb 4-1: config 0 descriptor?? [ 1070.388571][ T5986] imon 1-1:0.0: panel buttons/knobs setup failed [ 1070.518242][ T5986] rc_core: IR keymap rc-imon-pad not found [ 1070.534276][ T5986] Registered IR keymap rc-empty [ 1070.551626][ T5986] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1070.585297][ T5986] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1070.611558][T18196] qcserial 4-1:0.3: Qualcomm USB modem converter detected [ 1070.649070][ T5986] imon:send_packet: packet tx failed (-71) [ 1070.656855][T13889] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14782'. [ 1070.668490][ T5986] imon 1-1:0.0: remote input dev register failed [ 1070.674996][ T5986] imon 1-1:0.0: imon_init_intf0: rc device setup failed [ 1070.696889][T13889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14782'. [ 1070.818521][ T5986] imon 1-1:0.0: unable to initialize intf0, err 0 [ 1070.824999][ T5986] imon:imon_probe: failed to initialize context! [ 1070.838542][ T5986] imon 1-1:0.0: unable to register, err -19 [ 1070.856177][ T5986] usb 1-1: USB disconnect, device number 58 [ 1070.883957][T18196] usb 4-1: USB disconnect, device number 51 [ 1070.897370][T18196] qcserial 4-1:0.3: device disconnected [ 1071.155137][T13946] autofs4:pid:13946:autofs_fill_super: called with bogus options [ 1071.289746][T13963] loop2: detected capacity change from 0 to 128 [ 1071.585409][T13987] loop3: detected capacity change from 0 to 164 [ 1071.627699][ T4265] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1071.768477][T14003] loop3: detected capacity change from 0 to 1024 [ 1071.860546][ T5986] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1071.891202][ T4265] usb 3-1: Using ep0 maxpacket: 8 [ 1071.923074][T14003] hfsplus: request for non-existent node 33423360 in B*Tree [ 1071.937651][T14003] hfsplus: request for non-existent node 33423360 in B*Tree [ 1072.010564][ T4265] usb 3-1: config 64 has an invalid interface number: 19 but max is 0 [ 1072.019816][ T4265] usb 3-1: config 64 has no interface number 0 [ 1072.044090][ T4265] usb 3-1: config 64 interface 19 altsetting 0 endpoint 0x2 has invalid maxpacket 62721, setting to 1024 [ 1072.084365][ T4265] usb 3-1: config 64 interface 19 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1072.093975][ T5986] usb 2-1: Using ep0 maxpacket: 32 [ 1072.114564][ T4265] usb 3-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0 [ 1072.125708][ T4265] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.149329][T18196] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1072.187257][T13963] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1072.205856][ T5986] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1072.226433][ T5986] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1072.252178][ T5986] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1072.266960][ T5986] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1072.282052][ T5986] usb 2-1: config 1 interface 1 has no altsetting 0 [ 1072.385015][T18196] usb 1-1: Using ep0 maxpacket: 16 [ 1072.429418][ T4265] usb 3-1: string descriptor 0 read error: -71 [ 1072.439090][ T5986] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1072.444656][ T4265] usb 3-1: probing VID:PID(2201:012C) [ 1072.460252][ T4265] usb 3-1: vub300 testing BULK OUT EndPoint(0) 02 [ 1072.461797][ T5986] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.475676][ T4265] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs [ 1072.489069][ T4265] vub300: probe of 3-1:64.19 failed with error -22 [ 1072.491544][T14064] loop3: detected capacity change from 0 to 512 [ 1072.502354][T18196] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1072.512319][ T4265] usb 3-1: USB disconnect, device number 42 [ 1072.527949][ T5986] usb 2-1: Product: syz [ 1072.532922][T18196] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1072.542576][ T5986] usb 2-1: Manufacturer: syz [ 1072.547333][ T5986] usb 2-1: SerialNumber: syz [ 1072.673585][T14064] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1072.711592][T14085] netlink: 100 bytes leftover after parsing attributes in process `syz.4.14837'. [ 1072.719585][T18196] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1072.730661][T18196] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.738811][T18196] usb 1-1: Product: syz [ 1072.743067][T14064] EXT4-fs error (device loop3): ext4_lookup:1858: inode #12: comm syz.3.14834: iget: checksum invalid [ 1072.754823][T14085] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 1072.756180][T18196] usb 1-1: Manufacturer: syz [ 1072.783291][T18196] usb 1-1: SerialNumber: syz [ 1072.848992][ T5986] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 1072.862591][ C0] vkms_vblank_simulate: vblank timer overrun [ 1072.871583][ T5986] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 1073.025756][ T5986] usb 2-1: USB disconnect, device number 48 [ 1073.091326][T18196] usb 1-1: 0:2 : does not exist [ 1073.149681][T18196] usb 1-1: USB disconnect, device number 59 [ 1073.362057][ T4181] udevd[4181]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1073.410397][T14160] loop3: detected capacity change from 0 to 4096 [ 1073.428959][ T4702] udevd[4702]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1073.462254][T14173] loop4: detected capacity change from 0 to 1764 [ 1073.535077][T14160] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1073.840052][T14207] loop2: detected capacity change from 0 to 4096 [ 1073.875871][T14207] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1073.971298][T14227] netlink: 'syz.3.14867': attribute type 21 has an invalid length. [ 1073.985021][T14207] ntfs: volume version 3.1. [ 1074.000477][T14227] netlink: 128 bytes leftover after parsing attributes in process `syz.3.14867'. [ 1074.034778][T14227] netlink: 'syz.3.14867': attribute type 5 has an invalid length. [ 1074.053642][T14227] netlink: 3 bytes leftover after parsing attributes in process `syz.3.14867'. [ 1074.079047][T14231] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14869'. [ 1074.109843][T14231] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14869'. [ 1074.132848][T14231] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14869'. [ 1074.167994][T14231] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1074.221829][T14246] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1074.446152][ T5986] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1074.684944][ T5986] usb 4-1: Using ep0 maxpacket: 8 [ 1074.774371][T14288] loop2: detected capacity change from 0 to 256 [ 1074.798403][ T5986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1074.821823][ T5986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1074.833116][ T5986] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1074.857275][ T5986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1074.870220][ T5986] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1074.901562][T14288] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 1074.915829][T14288] FAT-fs (loop2): Filesystem has been set read-only [ 1074.918030][ T5986] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1074.965506][ T5986] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.006080][ T5986] usb 4-1: config 0 descriptor?? [ 1075.029662][T14245] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1075.124201][T14316] sctp: [Deprecated]: syz.2.14893 (pid 14316) Use of int in max_burst socket option. [ 1075.124201][T14316] Use struct sctp_assoc_value instead [ 1075.220810][T14326] tmpfs: Bad value for 'mpol' [ 1075.336866][ T5986] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1075.463626][ T5983] usb 4-1: USB disconnect, device number 52 [ 1075.673971][ T5986] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1075.694004][ T5986] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1075.706420][ T5986] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1075.763026][T14376] loop2: detected capacity change from 0 to 128 [ 1075.780458][T14379] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 1075.870816][ T5986] usb 1-1: New USB device found, idVendor=0e41, idProduct=4241, bcdDevice= 0.40 [ 1075.886263][ T5986] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.901080][ T5986] usb 1-1: Product: syz [ 1075.905395][ T5986] usb 1-1: Manufacturer: syz [ 1075.910233][ T5986] usb 1-1: SerialNumber: syz [ 1076.278550][ T5986] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1076.306335][ T5986] usb 1-1: 0:2 : does not exist [ 1076.311263][ T5986] usb 1-1: 0:3 : does not exist [ 1076.343692][ T5986] usb 1-1: 0:4 : does not exist [ 1076.348725][ T5986] usb 1-1: 0:5 : does not exist [ 1076.362253][ T5986] usb 1-1: 0:6 : does not exist [ 1076.370920][ T5986] usb 1-1: 0:7 : does not exist [ 1076.394294][ T5986] usb 1-1: 0:8 : does not exist [ 1076.404532][ T5986] usb 1-1: 0:9 : does not exist [ 1076.409648][ T5986] usb 1-1: 0:10 : does not exist [ 1076.414686][ T5986] usb 1-1: 0:11 : does not exist [ 1076.420283][ T5986] usb 1-1: 0:12 : does not exist [ 1076.425258][ T5986] usb 1-1: 0:13 : does not exist [ 1076.441713][ T5986] usb 1-1: 0:14 : does not exist [ 1076.446859][ T5986] usb 1-1: 0:15 : does not exist [ 1076.452143][ T5986] usb 1-1: 0:16 : does not exist [ 1076.458777][ T5986] usb 1-1: 0:17 : does not exist [ 1076.484360][ T5986] usb 1-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4 [ 1076.499178][T14439] overlayfs: missing 'lowerdir' [ 1076.509992][ T5986] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1076.530472][T14441] netlink: 64 bytes leftover after parsing attributes in process `syz.2.14933'. [ 1076.562280][T14441] netlink: 64 bytes leftover after parsing attributes in process `syz.2.14933'. [ 1076.581136][ T5986] usb 1-1: USB disconnect, device number 60 [ 1076.620071][T14459] netlink: 'syz.3.14936': attribute type 12 has an invalid length. [ 1076.671942][T14470] xt_hashlimit: max too large, truncated to 1048576 [ 1076.820797][ T4702] udevd[4702]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1076.865722][ T4688] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 1077.029711][T14502] SET target dimension over the limit! [ 1077.101171][T14510] loop3: detected capacity change from 0 to 512 [ 1077.125387][T14513] openvswitch: netlink: Unknown key attributes 20000000 [ 1077.163129][T14510] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1077.268811][T14510] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #12: comm syz.3.14952: invalid size [ 1077.286203][ T4688] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 1077.294990][ T4688] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 1077.303112][ T4688] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1077.312553][ T4688] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1077.323816][ T4688] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1077.335246][ T4688] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 255, setting to 64 [ 1077.346439][ T4688] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1077.555910][ T4688] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1077.579623][ T4688] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.620160][ T4688] usb 2-1: Product: syz [ 1077.631388][ T4688] usb 2-1: Manufacturer: syz [ 1077.636056][ T4688] usb 2-1: SerialNumber: syz [ 1077.676083][ T4688] usb 2-1: config 0 descriptor?? [ 1077.723233][T14455] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1077.745275][ T4688] hub 2-1:0.0: bad descriptor, ignoring hub [ 1077.751256][ T4688] hub: probe of 2-1:0.0 failed with error -5 [ 1077.782356][ T4688] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input64 [ 1078.009140][ T5986] usb 2-1: USB disconnect, device number 49 [ 1078.269651][T14622] nvme_fabrics: unknown parameter or missing value 'Y' in ctrl creation request [ 1078.365148][T14632] loop2: detected capacity change from 0 to 512 [ 1078.525431][T14632] Quota error (device loop2): do_check_range: Getting dqdh_next_free 256 out of range 0-7 [ 1078.536261][T14632] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1078.547418][T14632] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.14987: Failed to acquire dquot type 1 [ 1078.576244][T14632] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #16: comm syz.2.14987: corrupted inode contents [ 1078.611485][T14632] EXT4-fs error (device loop2): ext4_dirty_inode:6077: inode #16: comm syz.2.14987: mark_inode_dirty error [ 1078.668550][T14632] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #16: comm syz.2.14987: corrupted inode contents [ 1078.697513][T14632] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #16: comm syz.2.14987: mark_inode_dirty error [ 1078.734067][T14632] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #16: comm syz.2.14987: corrupted inode contents [ 1078.751231][T14661] program syz.0.14996 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1078.795082][T14632] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 1078.814809][T14632] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #16: comm syz.2.14987: corrupted inode contents [ 1078.876570][T14632] EXT4-fs error (device loop2): ext4_truncate:4286: inode #16: comm syz.2.14987: mark_inode_dirty error [ 1078.912646][T14632] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 1078.945874][T14632] EXT4-fs (loop2): 1 truncate cleaned up [ 1078.951608][T14632] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1078.963514][T14676] IPv6: Can't replace route, no match found [ 1079.102837][ T5986] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1079.336654][ T5986] usb 2-1: Using ep0 maxpacket: 16 [ 1079.485324][ T5986] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1079.559824][ T5986] usb 2-1: config 5 has an invalid interface number: 141 but max is 0 [ 1079.568098][ T5986] usb 2-1: config 5 has no interface number 0 [ 1079.587436][ T5986] usb 2-1: config 5 interface 141 altsetting 0 endpoint 0xD has an invalid bInterval 64, changing to 10 [ 1079.672356][T14741] netlink: 'syz.0.15026': attribute type 8 has an invalid length. [ 1079.793057][ T5986] usb 2-1: New USB device found, idVendor=06cd, idProduct=0102, bcdDevice=1b.38 [ 1079.807636][ T5986] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.849861][T14759] netlink: 'syz.4.15031': attribute type 12 has an invalid length. [ 1079.849964][ T5986] usb 2-1: Product: syz [ 1079.884780][ T5986] usb 2-1: Manufacturer: syz [ 1079.909911][ T5986] usb 2-1: SerialNumber: syz [ 1080.231731][ T5986] keyspan 2-1:5.141: Keyspan - (without firmware) converter detected [ 1080.261324][ T5986] usb 2-1: USB disconnect, device number 50 [ 1080.300020][ T5986] keyspan 2-1:5.141: device disconnected [ 1080.342303][ C0] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 1080.568113][T14831] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 1080.603407][T14831] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 1080.623779][T14834] loop2: detected capacity change from 0 to 512 [ 1080.703517][T14834] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1080.830051][T14854] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1080.830081][ T264] block nbd0: Attempted send on invalid socket [ 1080.854615][ T264] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1080.865669][T14852] hpfs: hpfs_map_sector(): read error [ 1080.931580][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 1080.941933][T14859] loop2: detected capacity change from 0 to 512 [ 1080.985947][T14859] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.15061: missing EA_INODE flag [ 1081.026374][T14859] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.15061: error while reading EA inode 12 err=-117 [ 1081.051410][T14859] EXT4-fs (loop2): 1 orphan inode deleted [ 1081.057397][T14859] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 1081.331630][T14887] netlink: 32 bytes leftover after parsing attributes in process `syz.1.15071'. [ 1081.358087][T14887] netlink: 32 bytes leftover after parsing attributes in process `syz.1.15071'. [ 1081.374761][T14887] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15071'. [ 1081.447205][T14899] loop3: detected capacity change from 0 to 512 [ 1081.482480][T14901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15077'. [ 1081.495599][T14901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15077'. [ 1081.535054][T14901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15077'. [ 1081.554748][T14901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15077'. [ 1081.578508][T14901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15077'. [ 1081.596283][T14899] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 1081.604451][T14901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15077'. [ 1081.617950][ T5986] usb 3-1: new low-speed USB device number 43 using dummy_hcd [ 1081.636344][T14901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15077'. [ 1081.801143][ C1] vkms_vblank_simulate: vblank timer overrun [ 1081.863344][ C1] vkms_vblank_simulate: vblank timer overrun [ 1081.982765][ T5986] usb 3-1: No LPM exit latency info found, disabling LPM. [ 1082.066558][ T5986] usb 3-1: config 1 interface 0 altsetting 2 endpoint 0x82 is Bulk; changing to Interrupt [ 1082.093631][ T5986] usb 3-1: config 1 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1082.111713][ T5986] usb 3-1: config 1 interface 0 altsetting 2 endpoint 0x3 is Bulk; changing to Interrupt [ 1082.132155][ T5986] usb 3-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1082.162739][ T5986] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1082.177844][T14956] loop3: detected capacity change from 0 to 1024 [ 1082.265275][T14956] hfsplus: failed to extend attributes file [ 1082.413235][ T5986] usb 3-1: string descriptor 0 read error: -22 [ 1082.435427][ T5986] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1082.445110][T18196] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1082.458369][ T5986] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.496002][T14890] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1082.533468][ T5986] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 1082.668352][T14995] loop1: detected capacity change from 0 to 2048 [ 1082.715040][T15002] netlink: 'syz.4.15108': attribute type 11 has an invalid length. [ 1082.750970][T14995] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1082.755543][ T4688] usb 3-1: USB disconnect, device number 43 [ 1082.784310][T18196] usb 1-1: config 0 has an invalid interface number: 237 but max is 0 [ 1082.792624][T18196] usb 1-1: config 0 has no interface number 0 [ 1082.815928][T18196] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1082.856155][T18196] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1082.871632][T18196] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1083.030457][T18196] usb 1-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be [ 1083.050325][T18196] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3 [ 1083.067111][T18196] usb 1-1: Product: syz [ 1083.075698][T18196] usb 1-1: Manufacturer: syz [ 1083.096485][T18196] usb 1-1: SerialNumber: syz [ 1083.132144][T15035] netlink: 'syz.3.15116': attribute type 4 has an invalid length. [ 1083.147933][T18196] usb 1-1: config 0 descriptor?? [ 1083.186735][T18196] xpad 1-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1083.222767][T18196] xpad: probe of 1-1:0.237 failed with error -5 [ 1083.388986][T18196] usb 1-1: USB disconnect, device number 61 [ 1083.974448][T15124] loop4: detected capacity change from 0 to 512 [ 1084.032066][T15124] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1084.097592][T15135] loop1: detected capacity change from 0 to 1024 [ 1084.130870][T15124] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 1084.154771][T15124] Quota error (device loop4): write_blk: dquota write failed [ 1084.168833][T15135] EXT4-fs (loop1): Ignoring removed orlov option [ 1084.176489][T15124] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 1084.182701][T15146] ip6t_srh: unknown srh invflags 4000 [ 1084.237655][T15124] Quota error (device loop4): write_blk: dquota write failed [ 1084.264418][T15124] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 1084.282014][T15135] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 1084.303753][T15124] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.15144: Failed to acquire dquot type 1 [ 1084.337784][T15124] EXT4-fs (loop4): 1 truncate cleaned up [ 1084.354389][T15124] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,noblock_validity,inode_readahead_blks=0x0000000000010000,resgid=0x0000000000000000,norecovery,abort,auto_da_alloc,nouid32,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 1084.379637][ C1] vkms_vblank_simulate: vblank timer overrun [ 1084.405700][T15124] Quota error (device loop4): write_blk: dquota write failed [ 1084.461911][T15124] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 1084.490947][T15124] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.15144: Failed to acquire dquot type 1 [ 1084.550177][ C1] vkms_vblank_simulate: vblank timer overrun [ 1084.582466][T15179] nfs4: Bad value for 'source' [ 1085.462715][T15249] loop2: detected capacity change from 0 to 736 [ 1085.682806][T18196] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 1085.809307][T15278] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 1085.940343][T15214] loop3: detected capacity change from 0 to 32768 [ 1086.003830][ T4702] loop3: p1 p3 < p5 p6 > [ 1086.032824][T18196] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1086.057931][T18196] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1086.105597][T15214] loop3: p1 p3 < p5 p6 > [ 1086.158366][T18196] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 1086.172161][T18196] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1086.200004][T18196] usb 1-1: SerialNumber: syz [ 1086.254288][T18196] usb 1-1: 0:2 : does not exist [ 1086.269901][T18198] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 1086.436453][T15346] netlink: 'syz.2.15207': attribute type 3 has an invalid length. [ 1086.504767][T18196] usb 1-1: USB disconnect, device number 62 [ 1086.605699][T18198] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1086.652372][T18198] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1086.832590][T18198] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 1086.859056][T18198] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.880696][T18198] usb 2-1: Product: syz [ 1086.890410][T18198] usb 2-1: Manufacturer: syz [ 1086.900215][T18198] usb 2-1: SerialNumber: syz [ 1086.918858][ T4555] udevd[4555]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 1086.919218][ T8558] udevd[8558]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 1086.948572][T18198] usb 2-1: config 0 descriptor?? [ 1086.957866][ T4182] udevd[4182]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 1086.969285][ T4702] udevd[4702]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 1087.026063][T18198] hub 2-1:0.0: bad descriptor, ignoring hub [ 1087.033718][T18198] hub: probe of 2-1:0.0 failed with error -5 [ 1087.054971][ T4182] udevd[4182]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 1087.065649][ T8558] udevd[8558]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 1087.076444][ T4714] udevd[4714]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 1087.093848][T18198] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input65 [ 1087.105322][ T4702] udevd[4702]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 1087.119681][T15389] netlink: 'syz.3.15215': attribute type 3 has an invalid length. [ 1087.129912][T15389] __nla_validate_parse: 41 callbacks suppressed [ 1087.129927][T15389] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.15215'. [ 1087.228972][T15358] loop2: detected capacity change from 0 to 32768 [ 1087.595404][T15420] siw: device registration error -23 [ 1088.085437][T15464] netlink: 'syz.2.15238': attribute type 1 has an invalid length. [ 1088.209434][ T4265] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1088.342762][T15488] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.15247'. [ 1088.600930][ T4265] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1088.610515][T15510] openvswitch: netlink: IP tunnel dst address not specified [ 1088.622116][ T4265] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.640767][ T4265] usb 1-1: config 0 descriptor?? [ 1088.842602][ T5983] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 1089.078874][ T4265] usb 1-1: Cannot set MAC address [ 1089.084416][ T4265] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71 [ 1089.132776][ T4265] usb 1-1: USB disconnect, device number 63 [ 1089.193015][T15573] netlink: 'syz.1.15273': attribute type 5 has an invalid length. [ 1089.206278][ T5983] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 1089.223104][ T5983] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 1089.232528][ T5983] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1089.243319][T15573] device ip6erspan0 entered promiscuous mode [ 1089.261830][ T5983] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1089.292813][ T5983] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1089.314117][ T5983] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 255, setting to 64 [ 1089.340101][ T5983] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1089.424332][T15580] loop2: detected capacity change from 0 to 4096 [ 1089.517027][T15580] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1089.541666][ T5983] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1089.550799][ T5983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.566223][ T5983] usb 4-1: Product: syz [ 1089.570847][ T5983] usb 4-1: Manufacturer: syz [ 1089.575477][ T5983] usb 4-1: SerialNumber: syz [ 1089.582163][ T5983] usb 4-1: config 0 descriptor?? [ 1089.597552][T15512] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1089.618879][ T5983] hub 4-1:0.0: bad descriptor, ignoring hub [ 1089.637692][ T5983] hub: probe of 4-1:0.0 failed with error -5 [ 1089.647934][ T5983] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input66 [ 1090.040865][T15634] netlink: 'syz.4.15288': attribute type 8 has an invalid length. [ 1090.385227][T15670] netlink: 209820 bytes leftover after parsing attributes in process `syz.4.15302'. [ 1090.620672][T15692] netlink: 'syz.4.15309': attribute type 21 has an invalid length. [ 1090.657189][T15692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15309'. [ 1090.767044][T15706] overlayfs: missing 'lowerdir' [ 1090.977483][T15726] netlink: 160 bytes leftover after parsing attributes in process `syz.2.15320'. [ 1090.989541][T15726] netlink: 160 bytes leftover after parsing attributes in process `syz.2.15320'. [ 1091.088196][T15726] netlink: 160 bytes leftover after parsing attributes in process `syz.2.15320'. [ 1091.131546][T15733] xt_CT: No such helper "syz0" [ 1091.435387][ T5983] usb 4-1: USB disconnect, device number 53 [ 1091.660875][T15800] device team0 entered promiscuous mode [ 1091.666489][T15800] device team_slave_0 entered promiscuous mode [ 1091.697027][T15800] device team_slave_1 entered promiscuous mode [ 1091.717333][T15800] device macvlan1 entered promiscuous mode [ 1091.777059][T18198] usb 2-1: USB disconnect, device number 51 [ 1091.873031][T15821] loop3: detected capacity change from 0 to 256 [ 1091.884076][T15821] exfat: Deprecated parameter 'namecase' [ 1091.909087][T15821] exfat: Deprecated parameter 'namecase' [ 1091.916661][T15827] loop2: detected capacity change from 0 to 512 [ 1091.950806][T15821] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1091.991312][T15827] EXT4-fs (loop2): Ignoring removed nobh option [ 1092.018516][T15839] loop1: detected capacity change from 0 to 512 [ 1092.050853][T15827] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,grpquota,,errors=continue. Quota mode: writeback. [ 1092.105250][T15848] netlink: 'syz.4.15357': attribute type 10 has an invalid length. [ 1092.124431][T15848] device syz_tun entered promiscuous mode [ 1092.149382][T15839] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1092.201161][T15848] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1092.221571][T15827] EXT4-fs error (device loop2): ext4_add_entry:2486: inode #12: comm syz.2.15351: Directory hole found for htree leaf block 0 [ 1092.264526][T15860] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1092.335858][T15839] Quota error (device loop1): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 1092.388441][T15839] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1092.431152][T15839] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.15354: Failed to acquire dquot type 0 [ 1092.834514][T15914] netlink: 'syz.2.15379': attribute type 3 has an invalid length. [ 1092.847138][T15908] loop3: detected capacity change from 0 to 2048 [ 1092.865586][T15914] netlink: 'syz.2.15379': attribute type 1 has an invalid length. [ 1092.931980][T15908] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 1092.985978][T15908] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1094.043305][T18198] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1094.276168][T18198] usb 3-1: Using ep0 maxpacket: 16 [ 1094.406786][T15951] loop1: detected capacity change from 0 to 32768 [ 1094.426033][T18198] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1094.493159][T15951] [ 1094.493159][T15951] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1094.493159][T15951] [ 1094.519383][T18198] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1094.554345][T18198] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1094.719205][ T4191] [ 1094.719205][ T4191] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1094.719205][ T4191] [ 1094.733441][T18198] usb 3-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 1094.752141][ T4191] [ 1094.752141][ T4191] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1094.752141][ T4191] [ 1094.763560][T18198] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.789367][T18198] usb 3-1: Product: syz [ 1094.807673][T18198] usb 3-1: Manufacturer: syz [ 1094.812336][T18198] usb 3-1: SerialNumber: syz [ 1095.063940][T16038] loop3: detected capacity change from 0 to 64 [ 1095.190432][T18198] usb 3-1: Focusrite Scarlett Gen 2/3 Mixer Driver disabled; use options snd_usb_audio vid=0x1235 pid=0x8212 device_setup=1 to enable and report any issues to g@b4.vu [ 1095.264226][T18198] usb 3-1: USB disconnect, device number 44 [ 1095.509577][ T4702] udevd[4702]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1095.858059][T16093] loop1: detected capacity change from 0 to 256 [ 1095.957904][T16093] FAT-fs (loop1): Directory bread(block 64) failed [ 1095.982263][T16093] FAT-fs (loop1): Directory bread(block 65) failed [ 1096.017835][T16093] FAT-fs (loop1): Directory bread(block 66) failed [ 1096.034786][T16093] FAT-fs (loop1): Directory bread(block 67) failed [ 1096.047658][T16093] FAT-fs (loop1): Directory bread(block 68) failed [ 1096.064351][T16093] FAT-fs (loop1): Directory bread(block 69) failed [ 1096.084409][T16093] FAT-fs (loop1): Directory bread(block 70) failed [ 1096.091016][T16093] FAT-fs (loop1): Directory bread(block 71) failed [ 1096.107940][T16093] FAT-fs (loop1): Directory bread(block 72) failed [ 1096.124777][T16093] FAT-fs (loop1): Directory bread(block 73) failed [ 1096.470205][ T5986] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1096.814175][ T5986] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1096.833536][ T5986] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1096.851040][ T5986] usb 4-1: config 220 has no interface number 2 [ 1096.870158][ T5986] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1096.903795][ T5986] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1096.920198][ T5986] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1096.930399][ T5986] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1097.100924][ T5986] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1097.122963][ T5986] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.161079][ T5986] usb 4-1: Product: syz [ 1097.165314][ T5986] usb 4-1: Manufacturer: syz [ 1097.171806][ T5986] usb 4-1: SerialNumber: syz [ 1097.296123][T15901] syz.0.15374 (15901): drop_caches: 3 [ 1097.473196][T16178] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1097.519989][ T5986] usb 4-1: selecting invalid altsetting 0 [ 1097.536441][ T5986] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 1097.565288][ T5986] usb 4-1: No valid video chain found. [ 1097.602643][T16187] netlink: 22 bytes leftover after parsing attributes in process `syz.1.15458'. [ 1097.670730][ T5986] usb 4-1: selecting invalid altsetting 0 [ 1097.676671][ T5986] usbtest: probe of 4-1:220.1 failed with error -22 [ 1097.722396][ T5986] usb 4-1: USB disconnect, device number 54 [ 1097.729155][T16199] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.15460'. [ 1097.775124][T16199] openvswitch: netlink: Flow key attribute not present in set flow. [ 1097.828971][T16211] netlink: 'syz.1.15463': attribute type 10 has an invalid length. [ 1098.007311][T16226] netlink: 64 bytes leftover after parsing attributes in process `syz.3.15469'. [ 1098.509594][T16268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15484'. [ 1098.705489][T16285] loop4: detected capacity change from 0 to 16 [ 1098.786470][T16285] erofs: (device loop4): mounted with root inode @ nid 36. [ 1098.834127][T16285] erofs: (device loop4): find_target_block_classic: corrupted dir block 0 @ nid 36 [ 1098.917568][T16303] fuse: Invalid rootmode [ 1099.008058][T16312] loop3: detected capacity change from 0 to 128 [ 1099.511764][T16361] openvswitch: netlink: Actions may not be safe on all matching packets [ 1099.662975][T16375] loop2: detected capacity change from 0 to 512 [ 1099.770250][T16386] netlink: zone id is out of range [ 1099.778410][T16375] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1099.834035][T16375] Quota error (device loop2): v2_read_file_info: Block with free entry too big (9 >= 6). [ 1099.866106][T16386] netlink: zone id is out of range [ 1099.916465][T16386] netlink: zone id is out of range [ 1099.921851][T16375] EXT4-fs warning (device loop2): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1099.966751][T16386] netlink: zone id is out of range [ 1099.983484][T16375] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 1099.998439][T16386] netlink: zone id is out of range [ 1100.013981][T16386] netlink: zone id is out of range [ 1100.032226][T16386] netlink: del zone limit has 4 unknown bytes [ 1100.038279][ T2427] pvrusb2: request_firmware fatal error with code=-110 [ 1100.038392][ T2427] pvrusb2: Failure uploading firmware1 [ 1100.038402][ T2427] pvrusb2: Device initialization was not successful. [ 1100.038411][ T2427] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1100.038421][ T2427] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1100.038456][ T2427] pvrusb2: Failed to submit write-control URB status=-19 [ 1100.044231][ T2427] usb 5-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 1100.047437][T18199] pvrusb2: Device being rendered inoperable [ 1100.087283][T16375] EXT4-fs error (device loop2): ext4_orphan_get:1432: comm syz.2.15515: bad orphan inode 14 [ 1100.120408][ T2427] usb 5-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 1100.152365][T16375] ext4_test_bit(bit=13, block=18) = 1 [ 1100.176445][T16375] is_bad_inode(inode)=0 [ 1100.180663][T16375] NEXT_ORPHAN(inode)=0 [ 1100.213188][T16375] max_ino=32 [ 1100.228912][T16408] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551615) [ 1100.232853][T16375] i_nlink=1 [ 1100.251131][T16375] EXT4-fs (loop2): 1 truncate cleaned up [ 1100.262673][T16375] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1100.600198][T16444] netlink: 'syz.3.15537': attribute type 5 has an invalid length. [ 1100.632829][T16448] netlink: 'syz.2.15539': attribute type 3 has an invalid length. [ 1100.819489][T18198] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 1100.905380][T16469] loop2: detected capacity change from 0 to 512 [ 1101.041018][T16469] EXT4-fs error (device loop2): ext4_orphan_get:1432: comm syz.2.15547: bad orphan inode 11862016 [ 1101.062918][T16469] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1101.095955][T16484] netlink: 40 bytes leftover after parsing attributes in process `syz.3.15551'. [ 1101.166204][T18198] usb 2-1: config index 0 descriptor too short (expected 539, got 27) [ 1101.205027][T18198] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1101.216891][T16488] netlink: 'syz.0.15553': attribute type 1 has an invalid length. [ 1101.241533][T16488] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.15553'. [ 1101.271824][T16488] netlink: 'syz.0.15553': attribute type 1 has an invalid length. [ 1101.407369][T18198] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1101.430155][T18198] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.478060][T18198] usb 2-1: Product: syz [ 1101.521978][T18198] usb 2-1: Manufacturer: syz [ 1101.526647][T18198] usb 2-1: SerialNumber: syz [ 1101.553853][T18198] usb 2-1: config 0 descriptor?? [ 1101.603050][T18198] hub 2-1:0.0: bad descriptor, ignoring hub [ 1101.609030][T18198] hub: probe of 2-1:0.0 failed with error -5 [ 1101.632052][T18198] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input67 [ 1101.645978][T18198] usbtouchscreen 2-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 1101.682540][T18198] usbtouchscreen: probe of 2-1:0.0 failed with error -8 [ 1101.938485][T18198] usb 2-1: USB disconnect, device number 52 [ 1102.096015][T16592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15573'. [ 1102.329340][T18198] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1102.480453][T16619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15584'. [ 1102.494179][T16619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15584'. [ 1102.503729][T16619] netlink: 'syz.2.15584': attribute type 6 has an invalid length. [ 1102.674575][T18198] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1102.703829][T18198] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1102.724442][T18198] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1102.754814][T18198] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1102.780658][T18198] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1102.804314][T16638] netlink: 'syz.0.15590': attribute type 30 has an invalid length. [ 1102.815955][T18198] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.837564][T18198] usb 4-1: config 0 descriptor?? [ 1102.842829][T16638] netlink: 32 bytes leftover after parsing attributes in process `syz.0.15590'. [ 1102.978441][T16685] netlink: 'syz.2.15595': attribute type 10 has an invalid length. [ 1102.987140][T16685] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.15595'. [ 1102.997704][T16685] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1103.103916][T18198] hdpvr 4-1:0.0: firmware version 0x0 dated [ 1103.114449][T16652] loop1: detected capacity change from 0 to 4096 [ 1103.129278][T18198] hdpvr 4-1:0.0: untested firmware, the driver might not work. [ 1103.243248][T16699] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1103.308441][T18198] hdpvr 4-1:0.0: device init failed [ 1103.313763][T18198] hdpvr: probe of 4-1:0.0 failed with error -12 [ 1103.364019][T18198] usb 4-1: USB disconnect, device number 55 [ 1103.908916][T16752] netlink: 14 bytes leftover after parsing attributes in process `syz.0.15617'. [ 1104.289339][T16785] netlink: 'syz.0.15629': attribute type 1 has an invalid length. [ 1104.476626][T16800] dlm: no local IP address has been set [ 1104.508642][T16800] dlm: cannot start dlm midcomms -107 [ 1104.628189][T16808] loop1: detected capacity change from 0 to 64 [ 1104.633983][T16776] loop4: detected capacity change from 0 to 4096 [ 1104.830471][T16776] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1104.887106][T16776] ntfs3: loop4: Failed to load $Extend. [ 1105.152433][T16837] netlink: 404 bytes leftover after parsing attributes in process `syz.1.15642'. [ 1105.162166][ T4265] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1105.399238][T16853] ieee802154 phy1 wpan1: encryption failed: -22 [ 1105.564080][ T4265] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1105.582787][ T4265] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1105.629045][ T4265] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.697061][ T4265] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1105.752954][T16876] netlink: 1244 bytes leftover after parsing attributes in process `syz.1.15656'. [ 1105.875310][T16887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15658'. [ 1106.536155][T16977] netlink: 32 bytes leftover after parsing attributes in process `syz.2.15679'. [ 1106.536189][T16977] netlink: 40 bytes leftover after parsing attributes in process `syz.2.15679'. [ 1106.915257][ T4265] gspca_stv0680: usb_control_msg error 2, request = 0x6, error = -71 [ 1106.960314][ T4265] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1106.979076][ T4265] stv0680 4-1:4.0: last error: 86, command = 0x78 [ 1107.028343][ T4265] usb 4-1: USB disconnect, device number 56 [ 1107.060079][T17020] loop2: detected capacity change from 0 to 1024 [ 1107.174037][T17034] loop4: detected capacity change from 0 to 512 [ 1107.189232][T17020] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 1107.212430][T17038] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 1107.227174][T17020] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 1107.260075][T17020] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #11: comm syz.2.15693: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 1107.279522][T17020] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.15693: couldn't read orphan inode 11 (err -117) [ 1107.292792][T17020] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,noload,mblk_io_submit,jqfmt=vfsv0,discard,usrjquota=,grpquota,quota,,errors=continue. Quota mode: writeback. [ 1107.314945][T17034] EXT4-fs (loop4): Ignoring removed orlov option [ 1107.403013][T17051] loop1: detected capacity change from 0 to 1024 [ 1107.434548][T17034] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,orlov,,errors=continue. Quota mode: writeback. [ 1107.461424][ C0] vkms_vblank_simulate: vblank timer overrun [ 1107.540512][T17051] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 2: comm syz.1.15704: lblock 2 mapped to illegal pblock 2 (length 1) [ 1107.662937][T17051] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 1107.761456][T17051] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 48: comm syz.1.15704: lblock 0 mapped to illegal pblock 48 (length 1) [ 1107.852257][T17087] netlink: 'syz.2.15711': attribute type 20 has an invalid length. [ 1107.866662][T17051] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 1107.868848][T17086] netlink: 'syz.0.15712': attribute type 1 has an invalid length. [ 1107.886219][T17051] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.15704: Failed to acquire dquot type 0 [ 1107.910397][T17051] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 1107.913258][T17087] IPv6: NLM_F_CREATE should be specified when creating new route [ 1107.968437][T17090] __nla_validate_parse: 2 callbacks suppressed [ 1107.968454][T17090] netlink: 14 bytes leftover after parsing attributes in process `syz.3.15713'. [ 1107.976906][T17051] EXT4-fs error (device loop1): ext4_evict_inode:284: inode #11: comm syz.1.15704: mark_inode_dirty error [ 1108.073195][T17051] EXT4-fs warning (device loop1): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 1108.125162][T17051] EXT4-fs (loop1): 1 orphan inode deleted [ 1108.139389][ T4246] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 1108.178019][T17051] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 1108.211979][ T4246] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 1108.248928][ T4246] EXT4-fs error (device loop1): ext4_release_dquot:6272: comm kworker/u4:5: Failed to release dquot type 0 [ 1108.349026][ T4246] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 1108.382087][ T4246] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 1108.410939][ T4246] EXT4-fs error (device loop1): ext4_release_dquot:6272: comm kworker/u4:5: Failed to release dquot type 0 [ 1108.461699][T17123] netlink: 'syz.2.15725': attribute type 9 has an invalid length. [ 1108.477320][ T4191] EXT4-fs error (device loop1): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1108.501458][T17123] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.15725'. [ 1108.537300][ T4191] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 1108.557073][ T4191] EXT4-fs error (device loop1): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 1108.703530][T17142] netlink: 'syz.1.15724': attribute type 29 has an invalid length. [ 1108.821908][T17153] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 1108.974708][ C0] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 1109.020610][T17175] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.15742'. [ 1109.397021][T17200] loop2: detected capacity change from 0 to 4096 [ 1109.413490][ T4688] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1109.490671][T17200] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1109.536481][T17226] binder: 17225:17226 ioctl 40046210 0 returned -14 [ 1109.645918][T17200] ntfs: volume version 3.1. [ 1109.646840][ T4688] usb 2-1: Using ep0 maxpacket: 16 [ 1109.719226][T17200] ntfs: (device loop2): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 1109.767238][T17200] ntfs: (device loop2): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x44, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 1109.804988][ T4688] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1109.822672][ T4688] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1109.861963][ T4688] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x8E has invalid maxpacket 51078, setting to 1024 [ 1109.897973][ T4688] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1110.085517][ T4688] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1110.106805][ T4688] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.128761][ T4688] usb 2-1: Product: syz [ 1110.135652][T17267] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1110.148337][ T4688] usb 2-1: Manufacturer: syz [ 1110.158838][ T4688] usb 2-1: SerialNumber: syz [ 1110.187934][ T4688] usb 2-1: config 0 descriptor?? [ 1110.254933][T17276] xt_l2tp: v2 doesn't support IP mode [ 1110.537926][T17261] loop3: detected capacity change from 0 to 32768 [ 1110.550484][T17288] loop2: detected capacity change from 0 to 2048 [ 1110.593514][T17261] XFS (loop3): Mounting V5 Filesystem [ 1110.633178][T17288] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 1110.655190][T17288] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1110.725950][ T4688] usb 2-1: USB disconnect, device number 53 [ 1110.784062][T17261] XFS (loop3): Ending clean mount [ 1110.797533][T17261] XFS (loop3): Quotacheck needed: Please wait. [ 1110.910213][T17261] XFS (loop3): Quotacheck: Done. [ 1111.088730][ T4190] XFS (loop3): Unmounting Filesystem [ 1111.127834][T17315] netlink: 188 bytes leftover after parsing attributes in process `syz.2.15781'. [ 1111.680853][ T5986] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1111.923272][T16338] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 1111.976567][ T4688] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1112.021597][T17391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15812'. [ 1112.037596][ T5986] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 1112.046205][ T5986] usb 2-1: config 0 has no interface number 0 [ 1112.056466][ T5986] usb 2-1: config 0 interface 255 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1112.067978][ T5986] usb 2-1: config 0 interface 255 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1112.228276][ T5986] usb 2-1: New USB device found, idVendor=10cf, idProduct=8065, bcdDevice=91.79 [ 1112.236673][ T4688] usb 3-1: Using ep0 maxpacket: 8 [ 1112.241766][ T5986] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.251669][ T5986] usb 2-1: Product: syz [ 1112.256316][ T5986] usb 2-1: Manufacturer: syz [ 1112.260945][ T5986] usb 2-1: SerialNumber: syz [ 1112.269005][ T5986] usb 2-1: config 0 descriptor?? [ 1112.293567][T16338] usb 4-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x78, skipping [ 1112.307916][T16338] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 221, setting to 64 [ 1112.315660][ T5986] vmk80xx 2-1:0.255: driver 'vmk80xx' failed to auto-configure device. [ 1112.325660][T16338] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1112.338182][ T5986] vmk80xx: probe of 2-1:0.255 failed with error -22 [ 1112.344715][T16338] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.396124][T17359] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1112.403799][T17359] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1112.414937][ T4688] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1112.426216][T16338] usb 4-1: invalid MIDI in EP 0 [ 1112.478642][T16338] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 1112.514538][ T4688] usb 3-1: config 28 has an invalid interface number: 152 but max is 0 [ 1112.532107][ T4688] usb 3-1: config 28 has no interface number 0 [ 1112.541921][ T4688] usb 3-1: config 28 interface 152 altsetting 2 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 1112.558763][ T4688] usb 3-1: config 28 interface 152 has no altsetting 0 [ 1112.584427][ T4714] udevd[4714]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1112.605994][T16338] usb 2-1: USB disconnect, device number 54 [ 1112.643186][ T4265] usb 4-1: USB disconnect, device number 57 [ 1112.653136][T17443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15824'. [ 1112.759412][ T4688] usb 3-1: New USB device found, idVendor=1e2d, idProduct=0055, bcdDevice=4a.b3 [ 1112.768895][ T4688] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.776968][ T4688] usb 3-1: Product: syz [ 1112.781292][ T4688] usb 3-1: Manufacturer: syz [ 1112.785921][ T4688] usb 3-1: SerialNumber: syz [ 1113.095582][ T4688] cdc_ether 3-1:28.152: skipping garbage [ 1113.110183][ T4688] usb 3-1: bad CDC descriptors [ 1113.130192][ T4688] usb 3-1: USB disconnect, device number 45 [ 1113.249124][T17477] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15832'. [ 1113.310807][T17481] loop3: detected capacity change from 0 to 128 [ 1113.410393][ T4190] sysv_free_block: flc_count > flc_size [ 1113.426407][ T4190] sysv_free_block: flc_count > flc_size [ 1113.445998][ T4190] sysv_free_block: flc_count > flc_size [ 1113.457588][ T4190] sysv_free_block: flc_count > flc_size [ 1113.464786][ T4190] sysv_free_block: flc_count > flc_size [ 1113.473321][ T4190] sysv_free_block: flc_count > flc_size [ 1113.480534][ T4190] sysv_free_block: flc_count > flc_size [ 1113.496670][ T4190] sysv_free_block: flc_count > flc_size [ 1113.502379][ T4190] sysv_free_block: flc_count > flc_size [ 1113.518887][ T4190] sysv_free_block: flc_count > flc_size [ 1113.536866][ T4190] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1113.583906][T17498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15841'. [ 1113.977048][T17528] loop1: detected capacity change from 0 to 4096 [ 1114.065850][T17528] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 1114.804688][T17620] loop1: detected capacity change from 0 to 64 [ 1115.175147][T17649] loop3: detected capacity change from 0 to 4096 [ 1115.230133][T17649] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1115.321669][T17673] loop2: detected capacity change from 0 to 256 [ 1115.339534][T17649] ntfs: volume version 3.1. [ 1115.402710][T17649] ntfs: (device loop3): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 1115.462921][T17649] ntfs: (device loop3): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x44, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 1116.186358][T17686] loop2: detected capacity change from 0 to 32768 [ 1116.248157][ T4673] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1116.285084][T17686] XFS (loop2): Mounting V5 Filesystem [ 1116.336316][T17753] x_tables: unsorted underflow at hook 2 [ 1116.458097][T17686] XFS (loop2): Ending clean mount [ 1116.468095][T17686] XFS (loop2): Quotacheck needed: Please wait. [ 1116.551794][T17771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15931'. [ 1116.575391][T17686] XFS (loop2): Quotacheck: Done. [ 1116.646084][ T4673] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1116.675897][ T4673] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1116.707688][ T4192] XFS (loop2): Unmounting Filesystem [ 1116.888379][ T4673] usb 2-1: New USB device found, idVendor=0e41, idProduct=4241, bcdDevice= 0.40 [ 1116.897487][ T4673] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.914290][ T4673] usb 2-1: Product: syz [ 1116.925693][ T4673] usb 2-1: Manufacturer: syz [ 1116.930395][ T4673] usb 2-1: SerialNumber: syz [ 1117.009020][ T4688] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1117.238025][T17818] tmpfs: Bad value for 'mpol' [ 1117.288794][ T4688] usb 1-1: Using ep0 maxpacket: 16 [ 1117.317244][ T4673] usb 2-1: 0:1 : does not exist [ 1117.324342][ T4673] usb 2-1: 0:2 : does not exist [ 1117.335303][ T4673] usb 2-1: 0:3 : does not exist [ 1117.340732][ T4673] usb 2-1: 0:4 : does not exist [ 1117.354533][ T4673] usb 2-1: 0:5 : does not exist [ 1117.369562][ T4673] usb 2-1: 0:6 : does not exist [ 1117.376006][ T4673] usb 2-1: 0:7 : does not exist [ 1117.391877][ T4673] usb 2-1: 0:8 : does not exist [ 1117.396838][ T4673] usb 2-1: 0:9 : does not exist [ 1117.419033][ T4673] usb 2-1: 0:10 : does not exist [ 1117.424674][ T4688] usb 1-1: config 1 has an invalid interface association descriptor of length 5, skipping [ 1117.436980][ T4688] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1117.448031][ T4673] usb 2-1: 0:11 : does not exist [ 1117.472049][ T4673] usb 2-1: 0:12 : does not exist [ 1117.477523][ T4688] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 14609, setting to 1024 [ 1117.489093][ T4673] usb 2-1: 0:13 : does not exist [ 1117.494912][ T4673] usb 2-1: 0:14 : does not exist [ 1117.507094][ T4673] usb 2-1: 0:15 : does not exist [ 1117.512544][ T4688] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 1024 [ 1117.528099][ T4673] usb 2-1: 0:16 : does not exist [ 1117.534101][ T4673] usb 2-1: 0:17 : does not exist [ 1117.539160][ T4688] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1117.559234][ T4673] usb 2-1: BAAD GENERIC IO: no channels? [ 1117.603764][ T4673] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 1117.634192][ T4673] usb 2-1: USB disconnect, device number 55 [ 1117.701961][T17854] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.758101][ T4688] usb 1-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40 [ 1117.782851][ T4688] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.810407][ T4688] usb 1-1: Product: syz [ 1117.814642][ T4688] usb 1-1: Manufacturer: syz [ 1117.819314][ T4688] usb 1-1: SerialNumber: syz [ 1117.877263][T17779] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1117.885347][ T4702] udevd[4702]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1118.053156][T17888] netlink: 'syz.4.15966': attribute type 7 has an invalid length. [ 1118.106513][T17888] netlink: 'syz.4.15966': attribute type 1 has an invalid length. [ 1118.180994][T17888] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.15966'. [ 1118.220736][ T4265] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1118.295314][ T4688] usb 1-1: MIDIStreaming interface descriptor not found [ 1118.354080][ T4688] usb 1-1: USB disconnect, device number 64 [ 1118.383476][T17929] netlink: 'syz.3.15975': attribute type 2 has an invalid length. [ 1118.482245][ T4265] usb 3-1: Using ep0 maxpacket: 16 [ 1118.612776][ T4265] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 1118.641528][ T4714] udevd[4714]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1118.771192][ T4265] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1118.799163][ T4265] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.846063][ T4265] usb 3-1: Product: syz [ 1118.850284][ T4265] usb 3-1: Manufacturer: syz [ 1118.885815][ T4265] usb 3-1: SerialNumber: syz [ 1118.903888][ T4265] r8152-cfgselector 3-1: config 0 descriptor?? [ 1119.274646][T18023] No source specified [ 1119.305716][T18026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16002'. [ 1119.327287][T18026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16002'. [ 1119.358518][ T4265] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1119.390926][ T4265] r8152-cfgselector 3-1: USB disconnect, device number 46 [ 1119.642279][T18057] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16013'. [ 1119.668145][T18057] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16013'. [ 1119.935793][T18200] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1119.936219][T18085] loop2: detected capacity change from 0 to 64 [ 1120.169126][ T5986] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1120.271582][T18200] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1120.285315][T18200] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1120.303750][T18200] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1120.317434][T18200] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1120.331971][T18200] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1120.352466][T18200] usb 2-1: config 0 descriptor?? [ 1120.393174][T18200] hub 2-1:0.0: USB hub found [ 1120.398179][ T5986] usb 4-1: Using ep0 maxpacket: 32 [ 1120.443101][T18116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16029'. [ 1120.551512][ T5986] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1120.588571][T18200] hub 2-1:0.0: 9 ports detected [ 1120.608043][T18200] hub 2-1:0.0: insufficient power available to use all downstream ports [ 1120.626820][ T5986] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 1120.644455][ T5986] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1120.663034][ T5986] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1120.681363][ T5986] usb 4-1: config 128 has no interface number 0 [ 1120.698127][ T5986] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 1120.735343][ T5986] usb 4-1: config 128 interface 127 has no altsetting 0 [ 1120.784456][T18200] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 1120.802935][T18200] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 1120.868615][T18200] usb 2-1: USB disconnect, device number 56 [ 1120.905057][ T5986] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1120.924149][ T5986] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.955968][ T5986] usb 4-1: Product: syz [ 1120.960281][ T5986] usb 4-1: Manufacturer: syz [ 1120.965898][ T5986] usb 4-1: SerialNumber: syz [ 1120.998294][T18080] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1121.010253][T18151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16040'. [ 1121.088789][T18158] loop4: detected capacity change from 0 to 64 [ 1121.100545][T18124] loop2: detected capacity change from 0 to 32768 [ 1121.181843][T18158] attempt to access beyond end of device [ 1121.181843][T18158] loop4: rw=0, want=234881064, limit=64 [ 1121.226100][T18158] Buffer I/O error on dev loop4, logical block 117440531, async page read [ 1121.240011][T18124] XFS (loop2): Mounting V5 Filesystem [ 1121.278864][T18158] attempt to access beyond end of device [ 1121.278864][T18158] loop4: rw=0, want=234881064, limit=64 [ 1121.304589][T18158] Buffer I/O error on dev loop4, logical block 117440531, async page read [ 1121.314103][ T26] audit: type=1800 audit(1415.142:69): pid=18158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.16043" name="file2" dev="loop4" ino=6 res=0 errno=0 [ 1121.372364][ T5986] usb 4-1: USB disconnect, device number 58 [ 1121.527265][T18204] bond0: (slave netdevsim0): Error: Device can not be enslaved while up [ 1121.537863][T18124] XFS (loop2): Ending clean mount [ 1121.567495][ T4702] udevd[4702]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1121.663454][ T4192] XFS (loop2): Unmounting Filesystem [ 1122.281484][T18264] netlink: 34 bytes leftover after parsing attributes in process `syz.1.16073'. [ 1122.479278][T18285] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16079'. [ 1122.653787][T18298] device bridge6 entered promiscuous mode [ 1122.686226][ T4673] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1122.707603][T18301] netlink: 16 bytes leftover after parsing attributes in process `syz.4.16084'. [ 1122.760768][T18311] netlink: 'syz.1.16087': attribute type 29 has an invalid length. [ 1122.769802][T18311] netlink: 'syz.1.16087': attribute type 3 has an invalid length. [ 1122.946864][ T4673] usb 3-1: Using ep0 maxpacket: 32 [ 1122.965647][T18329] __nla_validate_parse: 1 callbacks suppressed [ 1122.965663][T18329] netlink: 14 bytes leftover after parsing attributes in process `syz.1.16093'. [ 1123.143040][ T4673] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1123.234238][ T4673] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1123.344230][T18365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16106'. [ 1123.365125][T18365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16106'. [ 1123.422198][ T4673] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1123.449764][ T4673] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.478026][ T4673] usb 3-1: Product: syz [ 1123.482253][ T4673] usb 3-1: Manufacturer: syz [ 1123.486877][ T4673] usb 3-1: SerialNumber: syz [ 1123.531224][T18381] netlink: 'syz.1.16112': attribute type 3 has an invalid length. [ 1123.561036][T18379] netlink: 40 bytes leftover after parsing attributes in process `syz.0.16111'. [ 1123.576024][T18379] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1123.671725][T18392] loop1: detected capacity change from 0 to 256 [ 1123.795026][ T4673] usb 3-1: Invalid number of CPorts: 0 [ 1123.800747][ T4673] es2_ap_driver: probe of 3-1:7.0 failed with error -22 [ 1123.994485][ T4673] usb 3-1: USB disconnect, device number 47 [ 1124.158272][T18441] xt_CONNSECMARK: invalid mode: 66 [ 1124.274944][T18455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16134'. [ 1124.447281][ T5986] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1124.679833][ T5986] usb 4-1: Using ep0 maxpacket: 8 [ 1124.767648][T18501] netlink: 44 bytes leftover after parsing attributes in process `syz.2.16152'. [ 1124.795180][T18501] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16152'. [ 1124.811693][T18501] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16152'. [ 1124.945248][T18517] loop1: detected capacity change from 0 to 1024 [ 1124.951035][ T5986] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1124.979140][ T5986] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.998485][ T5986] usb 4-1: Product: syz [ 1125.002767][ T5986] usb 4-1: Manufacturer: syz [ 1125.049003][ T5986] usb 4-1: SerialNumber: syz [ 1125.070649][T18517] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,data_err=ignore,,errors=continue. Quota mode: none. [ 1125.113916][ T5986] usb 4-1: config 0 descriptor?? [ 1125.184588][ T5986] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1125.434028][ T26] audit: type=1107 audit(1419.563:70): pid=18549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='P' [ 1125.582776][ T5986] gspca_sonixj: reg_r err -71 [ 1125.590195][ T5986] sonixj: probe of 4-1:0.0 failed with error -71 [ 1125.614404][ T5986] usb 4-1: USB disconnect, device number 59 [ 1125.638040][T18571] netlink: 120 bytes leftover after parsing attributes in process `syz.2.16175'. [ 1126.287367][T18624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16192'. [ 1126.421891][T18637] loop1: detected capacity change from 0 to 16 [ 1126.472572][T18637] erofs: (device loop1): mounted with root inode @ nid 36. [ 1127.114873][T18695] netlink: 'syz.3.16216': attribute type 1 has an invalid length. [ 1127.140500][T18697] netlink: 'syz.1.16215': attribute type 1 has an invalid length. [ 1127.335234][T18712] netlink: 'syz.3.16221': attribute type 12 has an invalid length. [ 1127.718355][T18740] __nla_validate_parse: 3 callbacks suppressed [ 1127.718374][T18740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16231'. [ 1127.762448][T18740] netlink: 32 bytes leftover after parsing attributes in process `syz.3.16231'. [ 1127.889327][T18759] IPv6: NLM_F_CREATE should be specified when creating new route [ 1128.018685][T18770] netlink: 64 bytes leftover after parsing attributes in process `syz.4.16238'. [ 1128.354136][T18796] loop1: detected capacity change from 0 to 1024 [ 1128.444816][T18796] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.16250: Invalid block bitmap block 0 in block_group 0 [ 1128.493218][T18796] Quota error (device loop1): write_blk: dquota write failed [ 1128.500772][T18796] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1128.555590][T18796] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.16250: Failed to acquire dquot type 0 [ 1128.576400][T18796] EXT4-fs error (device loop1): ext4_free_blocks:6231: comm syz.1.16250: Freeing blocks not in datazone - block = 0, count = 4096 [ 1128.606200][T18796] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.16250: Invalid inode bitmap blk 0 in block_group 0 [ 1128.641238][ T4246] Quota error (device loop1): remove_tree: Getting block too big (0 >= 8) [ 1128.657282][ T4246] EXT4-fs error (device loop1): ext4_release_dquot:6272: comm kworker/u4:5: Failed to release dquot type 0 [ 1128.688162][T18796] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 1128.747855][T18796] EXT4-fs (loop1): 1 orphan inode deleted [ 1128.773227][T18796] EXT4-fs (loop1): mounted filesystem without journal. Opts: ; ,errors=continue. Quota mode: writeback. [ 1129.299952][T18882] netlink: 'syz.1.16276': attribute type 3 has an invalid length. [ 1129.360643][T18889] loop4: detected capacity change from 0 to 1024 [ 1129.712869][T18925] loop2: detected capacity change from 0 to 512 [ 1129.837730][T18925] ================================================================== [ 1129.847535][T18925] BUG: KASAN: use-after-free in __ext4_iget+0x2bb/0x3e50 [ 1129.854611][T18925] Read of size 8 at addr ffff888070e74180 by task syz.2.16290/18925 [ 1129.862628][T18925] [ 1129.864986][T18925] CPU: 1 PID: 18925 Comm: syz.2.16290 Not tainted syzkaller #0 [ 1129.872569][T18925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1129.883103][T18925] Call Trace: [ 1129.886420][T18925] [ 1129.889382][T18925] dump_stack_lvl+0x188/0x250 [ 1129.894110][T18925] ? show_regs_print_info+0x20/0x20 [ 1129.899359][T18925] ? load_image+0x400/0x400 [ 1129.904165][T18925] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 1129.909675][T18925] ? __rwlock_init+0x140/0x140 [ 1129.914489][T18925] print_address_description+0x60/0x2d0 [ 1129.920093][T18925] ? __ext4_iget+0x2bb/0x3e50 [ 1129.924823][T18925] kasan_report+0xdf/0x130 [ 1129.929291][T18925] ? __ext4_iget+0x2bb/0x3e50 [ 1129.934023][T18925] __ext4_iget+0x2bb/0x3e50 [ 1129.938597][T18925] ? __free_pages+0x95/0x1a0 [ 1129.943257][T18925] ? apply_workqueue_attrs+0x170/0x170 [ 1129.948755][T18925] ? ext4_get_projid+0x140/0x140 [ 1129.954822][T18925] ? mb_cache_create+0x428/0x530 [ 1129.959831][T18925] ext4_fill_super+0x73f9/0x94f0 [ 1129.964860][T18925] ? format_decode+0x898/0x1300 [ 1129.969786][T18925] ? ext4_mount+0x40/0x40 [ 1129.974158][T18925] ? set_blocksize+0x1f3/0x370 [ 1129.978968][T18925] ? sb_set_blocksize+0xa5/0xe0 [ 1129.983865][T18925] mount_bdev+0x287/0x3c0 [ 1129.988430][T18925] ? ext4_mount+0x40/0x40 [ 1129.992811][T18925] legacy_get_tree+0xe6/0x180 [ 1129.997545][T18925] ? ext4_errno_to_code+0x160/0x160 [ 1130.002795][T18925] vfs_get_tree+0x88/0x270 [ 1130.007262][T18925] do_new_mount+0x24a/0xa40 [ 1130.011823][T18925] __se_sys_mount+0x2e3/0x3d0 [ 1130.016557][T18925] ? __x64_sys_mount+0xc0/0xc0 [ 1130.021372][T18925] ? lockdep_hardirqs_on+0x94/0x140 [ 1130.026714][T18925] ? __x64_sys_mount+0x1c/0xc0 [ 1130.031521][T18925] do_syscall_64+0x4c/0xa0 [ 1130.035979][T18925] ? clear_bhb_loop+0x30/0x80 [ 1130.040693][T18925] ? clear_bhb_loop+0x30/0x80 [ 1130.045411][T18925] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1130.051534][T18925] RIP: 0033:0x7f00882510ca [ 1130.055986][T18925] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1130.075741][T18925] RSP: 002b:00007f00864a8e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1130.084200][T18925] RAX: ffffffffffffffda RBX: 00007f00864a8ee0 RCX: 00007f00882510ca [ 1130.092216][T18925] RDX: 0000200000000080 RSI: 0000200000000480 RDI: 00007f00864a8ea0 [ 1130.100229][T18925] RBP: 0000200000000080 R08: 00007f00864a8ee0 R09: 0000000000000010 [ 1130.108244][T18925] R10: 0000000000000010 R11: 0000000000000246 R12: 0000200000000480 [ 1130.116259][T18925] R13: 00007f00864a8ea0 R14: 00000000000004c2 R15: 000000000000002c [ 1130.124295][T18925] [ 1130.127353][T18925] [ 1130.129703][T18925] Allocated by task 7810: [ 1130.134069][T18925] __kasan_slab_alloc+0x9c/0xd0 [ 1130.138969][T18925] slab_post_alloc_hook+0x4c/0x380 [ 1130.144138][T18925] kmem_cache_alloc+0x100/0x290 [ 1130.149039][T18925] reiserfs_alloc_inode+0x19/0xb0 [ 1130.154133][T18925] iget5_locked+0x9e/0x250 [ 1130.158592][T18925] reiserfs_fill_super+0x122d/0x2440 [ 1130.163919][T18925] mount_bdev+0x287/0x3c0 [ 1130.167863][ T4688] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1130.168282][T18925] legacy_get_tree+0xe6/0x180 [ 1130.180539][T18925] vfs_get_tree+0x88/0x270 [ 1130.185011][T18925] do_new_mount+0x24a/0xa40 [ 1130.189561][T18925] __se_sys_mount+0x2e3/0x3d0 [ 1130.194278][T18925] do_syscall_64+0x4c/0xa0 [ 1130.198732][T18925] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1130.204665][T18925] [ 1130.207019][T18925] Last potentially related work creation: [ 1130.212762][T18925] kasan_save_stack+0x35/0x60 [ 1130.217503][T18925] kasan_record_aux_stack+0xb8/0x100 [ 1130.222828][T18925] call_rcu+0x189/0x950 [ 1130.227022][T18925] evict+0x834/0x8d0 [ 1130.230957][T18925] evict_inodes+0x60c/0x6a0 [ 1130.235502][T18925] generic_shutdown_super+0x93/0x300 [ 1130.240826][T18925] kill_block_super+0x7c/0xe0 [ 1130.245541][T18925] deactivate_locked_super+0x93/0xf0 [ 1130.250855][T18925] cleanup_mnt+0x42d/0x4e0 [ 1130.255481][T18925] task_work_run+0x125/0x1a0 [ 1130.260102][T18925] exit_to_user_mode_loop+0x10f/0x130 [ 1130.265505][T18925] exit_to_user_mode_prepare+0xee/0x180 [ 1130.271093][T18925] syscall_exit_to_user_mode+0x16/0x40 [ 1130.276599][T18925] do_syscall_64+0x58/0xa0 [ 1130.281058][T18925] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1130.287001][T18925] [ 1130.289367][T18925] Second to last potentially related work creation: [ 1130.295989][T18925] kasan_save_stack+0x35/0x60 [ 1130.300722][T18925] kasan_record_aux_stack+0xb8/0x100 [ 1130.306060][T18925] call_rcu+0x189/0x950 [ 1130.310254][T18925] evict+0x834/0x8d0 [ 1130.314191][T18925] evict_inodes+0x60c/0x6a0 [ 1130.318739][T18925] generic_shutdown_super+0x93/0x300 [ 1130.324069][T18925] kill_block_super+0x7c/0xe0 [ 1130.328792][T18925] deactivate_locked_super+0x93/0xf0 [ 1130.334126][T18925] cleanup_mnt+0x42d/0x4e0 [ 1130.338586][T18925] task_work_run+0x125/0x1a0 [ 1130.343218][T18925] exit_to_user_mode_loop+0x10f/0x130 [ 1130.348628][T18925] exit_to_user_mode_prepare+0xee/0x180 [ 1130.354221][T18925] syscall_exit_to_user_mode+0x16/0x40 [ 1130.359733][T18925] do_syscall_64+0x58/0xa0 [ 1130.364201][T18925] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1130.370153][T18925] [ 1130.372509][T18925] The buggy address belongs to the object at ffff888070e73ba0 [ 1130.372509][T18925] which belongs to the cache reiser_inode_cache of size 1568 [ 1130.387439][T18925] The buggy address is located 1504 bytes inside of [ 1130.387439][T18925] 1568-byte region [ffff888070e73ba0, ffff888070e741c0) [ 1130.400981][T18925] The buggy address belongs to the page: [ 1130.406822][T18925] page:ffffea0001c39c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888070e748e0 pfn:0x70e70 [ 1130.418401][T18925] head:ffffea0001c39c00 order:3 compound_mapcount:0 compound_pincount:0 [ 1130.426799][T18925] memcg:ffff88801fe6a501 [ 1130.431075][T18925] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1130.439111][T18925] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff88801e0698c0 [ 1130.447736][T18925] raw: ffff888070e748e0 0000000080130009 00000001ffffffff ffff88801fe6a501 [ 1130.456438][T18925] page dumped because: kasan: bad access detected [ 1130.462882][T18925] page_owner tracks the page as allocated [ 1130.468624][T18925] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d20d0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 5050, ts 106335634016, free_ts 76306264176 [ 1130.490983][T18925] get_page_from_freelist+0x1bbd/0x1ca0 [ 1130.496584][T18925] __alloc_pages+0x1ee/0x480 [ 1130.501213][T18925] new_slab+0xc0/0x4b0 [ 1130.505327][T18925] ___slab_alloc+0x80a/0xdd0 [ 1130.510046][T18925] kmem_cache_alloc+0x195/0x290 [ 1130.514939][T18925] reiserfs_alloc_inode+0x19/0xb0 [ 1130.519997][T18925] iget5_locked+0x9e/0x250 [ 1130.524445][T18925] reiserfs_fill_super+0x122d/0x2440 [ 1130.529770][T18925] mount_bdev+0x287/0x3c0 [ 1130.534481][T18925] legacy_get_tree+0xe6/0x180 [ 1130.539200][T18925] vfs_get_tree+0x88/0x270 [ 1130.543655][T18925] do_new_mount+0x24a/0xa40 [ 1130.548200][T18925] __se_sys_mount+0x2e3/0x3d0 [ 1130.552913][T18925] do_syscall_64+0x4c/0xa0 [ 1130.557374][T18925] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1130.563330][T18925] page last free stack trace: [ 1130.568044][T18925] free_unref_page_prepare+0x637/0x6c0 [ 1130.573553][T18925] free_unref_page+0x8f/0x2a0 [ 1130.578281][T18925] __unfreeze_partials+0x1a5/0x200 [ 1130.583449][T18925] put_cpu_partial+0x12d/0x190 [ 1130.588261][T18925] qlist_free_all+0x35/0x90 [ 1130.592802][T18925] kasan_quarantine_reduce+0x150/0x160 [ 1130.598296][T18925] __kasan_slab_alloc+0x2f/0xd0 [ 1130.603199][T18925] slab_post_alloc_hook+0x4c/0x380 [ 1130.608436][T18925] kmem_cache_alloc_node+0x12d/0x2d0 [ 1130.613754][T18925] __alloc_skb+0xf4/0x750 [ 1130.618137][T18925] netlink_sendmsg+0x654/0xbe0 [ 1130.622932][T18925] ____sys_sendmsg+0x5b7/0x8f0 [ 1130.627737][T18925] ___sys_sendmsg+0x236/0x2e0 [ 1130.632448][T18925] __se_sys_sendmsg+0x1af/0x290 [ 1130.637337][T18925] do_syscall_64+0x4c/0xa0 [ 1130.641789][T18925] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1130.647732][T18925] [ 1130.650079][T18925] Memory state around the buggy address: [ 1130.655744][T18925] ffff888070e74080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1130.663843][T18925] ffff888070e74100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1130.671944][T18925] >ffff888070e74180: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1130.680042][T18925] ^ [ 1130.684144][T18925] ffff888070e74200: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00 [ 1130.692237][T18925] ffff888070e74280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1130.700345][T18925] ================================================================== [ 1130.708457][T18925] Disabling lock debugging due to kernel taint [ 1130.717158][T18925] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1130.724390][T18925] CPU: 1 PID: 18925 Comm: syz.2.16290 Tainted: G B syzkaller #0 [ 1130.733463][T18925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1130.743553][T18925] Call Trace: [ 1130.747117][T18925] [ 1130.750081][T18925] dump_stack_lvl+0x188/0x250 [ 1130.754795][T18925] ? show_regs_print_info+0x20/0x20 [ 1130.760031][T18925] ? load_image+0x400/0x400 [ 1130.764575][T18925] panic+0x2e5/0x810 [ 1130.768512][T18925] ? bpf_jit_dump+0xd0/0xd0 [ 1130.773061][T18925] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 1130.779086][T18925] ? _raw_spin_unlock+0x40/0x40 [ 1130.783986][T18925] ? __ext4_iget+0x2bb/0x3e50 [ 1130.788704][T18925] check_panic_on_warn+0x80/0xa0 [ 1130.793785][T18925] ? __ext4_iget+0x2bb/0x3e50 [ 1130.798504][T18925] end_report+0x6d/0xf0 [ 1130.802695][T18925] kasan_report+0x102/0x130 [ 1130.807232][T18925] ? __ext4_iget+0x2bb/0x3e50 [ 1130.811946][T18925] __ext4_iget+0x2bb/0x3e50 [ 1130.816474][T18925] ? __free_pages+0x95/0x1a0 [ 1130.821107][T18925] ? apply_workqueue_attrs+0x170/0x170 [ 1130.826658][T18925] ? ext4_get_projid+0x140/0x140 [ 1130.831610][T18925] ? mb_cache_create+0x428/0x530 [ 1130.836575][T18925] ext4_fill_super+0x73f9/0x94f0 [ 1130.841526][T18925] ? format_decode+0x898/0x1300 [ 1130.846478][T18925] ? ext4_mount+0x40/0x40 [ 1130.850984][T18925] ? set_blocksize+0x1f3/0x370 [ 1130.855782][T18925] ? sb_set_blocksize+0xa5/0xe0 [ 1130.860665][T18925] mount_bdev+0x287/0x3c0 [ 1130.865061][T18925] ? ext4_mount+0x40/0x40 [ 1130.869565][T18925] legacy_get_tree+0xe6/0x180 [ 1130.874274][T18925] ? ext4_errno_to_code+0x160/0x160 [ 1130.879483][T18925] vfs_get_tree+0x88/0x270 [ 1130.883914][T18925] do_new_mount+0x24a/0xa40 [ 1130.888433][T18925] __se_sys_mount+0x2e3/0x3d0 [ 1130.893145][T18925] ? __x64_sys_mount+0xc0/0xc0 [ 1130.897942][T18925] ? lockdep_hardirqs_on+0x94/0x140 [ 1130.903253][T18925] ? __x64_sys_mount+0x1c/0xc0 [ 1130.908046][T18925] do_syscall_64+0x4c/0xa0 [ 1130.912532][T18925] ? clear_bhb_loop+0x30/0x80 [ 1130.917244][T18925] ? clear_bhb_loop+0x30/0x80 [ 1130.921934][T18925] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1130.927832][T18925] RIP: 0033:0x7f00882510ca [ 1130.932350][T18925] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1130.951965][T18925] RSP: 002b:00007f00864a8e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1130.960574][T18925] RAX: ffffffffffffffda RBX: 00007f00864a8ee0 RCX: 00007f00882510ca [ 1130.968701][T18925] RDX: 0000200000000080 RSI: 0000200000000480 RDI: 00007f00864a8ea0 [ 1130.976849][T18925] RBP: 0000200000000080 R08: 00007f00864a8ee0 R09: 0000000000000010 [ 1130.984867][T18925] R10: 0000000000000010 R11: 0000000000000246 R12: 0000200000000480 [ 1130.992851][T18925] R13: 00007f00864a8ea0 R14: 00000000000004c2 R15: 000000000000002c [ 1131.000845][T18925] [ 1131.003999][T18925] Kernel Offset: disabled [ 1131.008359][T18925] Rebooting in 86400 seconds..