last executing test programs: 1.758168598s ago: executing program 3 (id=5205): r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x3, @pix_mp={0x1, 0x2, 0x34524742, 0x5, 0x3, [{0x8000}, {0x4, 0x4}, {0x1, 0x7}, {0x6, 0x54}, {0x7fffffff, 0x3}, {0x80000001, 0x5}, {0xfff, 0x29}, {0x8, 0x5}], 0x0, 0x0, 0x0, 0x0, 0x7}}) 1.435904279s ago: executing program 3 (id=5209): r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x502) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000040)={0x80000000, 0x0, &(0x7f0000000140)}) 1.404246252s ago: executing program 4 (id=5210): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x18, 0x140c, 0x367d, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x5}]}, 0x18}}, 0x0) 1.267824466s ago: executing program 3 (id=5212): syz_mount_image$cramfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x10880, &(0x7f0000000480)=ANY=[], 0x1, 0x15b, &(0x7f0000000580)="$eJzskD1rWlEch5/Te32h1WrBgi20FDr00mJ9w24dtFTq0AotLp2EeqWCVlEobm0C2TLkAzgkCJnEIWTMYMxkohDMp8ggZBAyhJBw7r1BDH6E82zn+f/+L/d+/jgxCIKGzad6rdE0Wy2z9Op7/mv2x97+wWPpPYDXStQaTRkuWY/rQRp+AwMdZmu2PvK7KVeq5vtf9ap8z9JgAJlHUK64OMfOPpQuhJWNO854DcOntkuscEnHPdchE7CcPI2bHXgj5z1ZzJsD7c67fu/423iUi7zdfaGxkXM+lIV/aW4mss+6vrBGwRQChOw7i44ip9F+bzoZe52WxIdkLB6Lpab5k3Eu9X8L/YvvL/wUy3vcbqAA6wI6AnpWfXYl/MBw+zJfC3hCwMWfIIh259/hXUV3FlkV+XuKYVe3GAo+QDPkVcvMcd1XCoVCoVAoFAqFQqFQrOQ2AAD//80bY1k=") execve(&(0x7f0000000080)='./file2\x00', 0x0, 0x0) 1.210020481s ago: executing program 4 (id=5214): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xb, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.073701835s ago: executing program 2 (id=5216): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0xfffffffe}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_DREG={0x8}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) 1.069058905s ago: executing program 1 (id=5217): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x54, 0x10, 0x403, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_USE_CARRIER={0x5}, @IFLA_BOND_MIIMON={0x8, 0x3, 0x2}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x6}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 1.001701372s ago: executing program 0 (id=5218): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0xee0c) 994.550903ms ago: executing program 4 (id=5219): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x64, 0x10, 0x437, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x20400}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x3}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x7}, @IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 907.323531ms ago: executing program 2 (id=5220): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000140)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7fffffff}}, 0x10) 801.298272ms ago: executing program 0 (id=5221): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/fscreate\x00') writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) 777.822644ms ago: executing program 1 (id=5222): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x1, 0x7, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xe}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) 734.887768ms ago: executing program 4 (id=5223): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x14, 0x3, 0x3, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 686.926893ms ago: executing program 2 (id=5224): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000cc0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1ae8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) 638.379858ms ago: executing program 0 (id=5225): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000140)={'virt_wifi0\x00', @random="0100000000eb"}) 618.825669ms ago: executing program 1 (id=5226): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x1c, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vcan0\x00'}}]}, 0x38}}, 0x0) 533.987578ms ago: executing program 4 (id=5227): r0 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 523.862579ms ago: executing program 3 (id=5228): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x1}, @IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0xffff}]}}}]}, 0x44}}, 0x0) 488.299582ms ago: executing program 2 (id=5229): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x560f, &(0x7f00000002c0)={0xb, 0x17f, 0x7dfd}) 487.656173ms ago: executing program 0 (id=5230): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000000)=0x8) 446.341397ms ago: executing program 1 (id=5231): symlinkat(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setxattr$trusted_overlay_upper(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040), 0x0, 0x0, 0x3) 376.300093ms ago: executing program 2 (id=5232): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, 0x0) 375.652393ms ago: executing program 4 (id=5233): syz_usb_connect(0x3, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0xb3, 0xb9, 0x3b, 0x40, 0x830, 0x80, 0x1518, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x5b, 0xfc, 0x0, 0x22, 0xe1, 0x11}}]}}]}}, &(0x7f0000000140)={0x0, 0x0, 0xfffffffffffffe24, 0x0}) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x5607, 0x3) 326.062208ms ago: executing program 1 (id=5234): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x1, &(0x7f0000002840)=ANY=[@ANYRES16=0x0], 0x0, 0x5f9, &(0x7f0000002e80)="$eJzs3U9rHOcdB/DvrNaK5IKzSewkLS0V9qElprZWmzg6tNgtpegQSqCXXHIQthwLr5UgKUUJpcj9e+07SHqQzz31UHowpOe+BUEpORR6181lZmdXG0uWV47jXaWfDzz7PLPPzPPn55lHO7OYDfB/a+mdnLqfIksX39oqt3d3Ot3dnc6dfjnJc0kaSbOXpVhLis+Sa+mlfLN8s26ueFQ/737y5uLn7Xt3e1vNOlX7N446bjTbdcpckqk6P6bmo9q7/mTtDSkGMywDdqEfOBi3BwdsH+fwL3ndApOg6P3dPKCVnE4yU38OSL06NJ7t6J6+Y61yAAAAcEI9v5e9bOXMuMcBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ0n9+/9FnRr98lyK/u//T9fvpS6faPfHPQAAAAAAAAAAeAq+W2zvZStn+tsPiuo7//PVxtnq9Rv5MBtZyXouZSvL2cxm1tNO0hpqaHpreXNzvT3CkQuHHrnwbOYLAAAAAAAAAF9Tv8nS/vf/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwCYpkqpdV6Wy/3EqjmWQmyXS533by9375JLs/7gEAAADAM/D8XvaylTP97QdFdc//cnXfP5MPs5bNrGYz3azkRvUsoHfX39jd6XR3dzp3ynSw3R//91jDqFpM79nD4T3PV3sUgyOW8rP8Ihczl7ezntX8MsvZzErm8tOqtJwirfrpRas/zsPHe+0LW28/aoxTdf5qNZLZ3MxqNbZLuZ73082NNKo5VPsc3ePdMjrFVK5WRozRjTovZ/SnOp8MrSoipwYRma9jVUbjhaMjcczz5OGe2mkMnkGdHSXmV68eK+an67yM9R8mOuYLQ2ffy0dHIjn/r+/89VZ37fatmxsXJ2dKT+jhSHSGIvHKYyMxk69HJIpmbxVtDVaqRs4Nah+/Wp6vjj2T1fw87+dGVvJGFvNGFvJ6Xs98FnNlKK7nRrjWGse71i58vy7MJvljnU+GMq4vDMV1eKVrVXXD7+xH6cVjrEg/+vdIQ2l+qy6Uffy2zifDw5FoD0XipaMj8ecH5etGd+32+q3lD0bs73t1Xl62v5+otbk8X14s/7GqrS+eHWXdS4fWtau6s4O6xoG6c4O6x12p0/VnuIMtLVR1rxxa16nqXh2qO+xTDgAT7/Rrp6dn/zP7z9lPZ383e2v2rZmfPLf43Lenc+ofzb9N/aVxr/HD4rV8ml/v3/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABPbuOjj28vd7sr6woKYypMOQ8nsDDulQn4ql3evPPB5Y2PPv7B6p3l91beW1nrdNpXFhavLC5cuXxztbsy33sd9zCBr8D+H/1xjwQAAAAAAAAAAAAY1bP47wTjniMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsi29k1P3U6Q9f2k+RZKdTnd3p9Mt6/p5TzNJI0nxq6T4LLmWXkprqLniUf28+8mbi5+3793db6vZ379x1HGj2a5T5pJM1fnTau/6l26vGMywDNiFfuBg3P4XAAD//xofCro=") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000200)='./file0\x00', 0x1a4243c, &(0x7f0000000340)=ANY=[@ANYRES16, @ANYRESOCT, @ANYBLOB="12a4095a2aac12f0bfcb206d982e44066381388d27f14002d8d7431d3947f6399c7ff9f5193fc0398653e5a67bbb319f02bf4ac6f6ccd5acbfe1350cc3a6d2d48cf6c089ddf67171ffb3b15988e7b394c5daf3e12ca05e4dbdad7edd45f10cbc296a53a530d4c2d203ee650d5fff3a9b5aae78794fe84327e508172cdd72eeff5af4d6db9379bef20dde8e64b91d31a84ce8a7598bb78cc85108874811fc650f0520a5", @ANYRES32, @ANYBLOB="7b8ae4d950a510a981c78f2246d4825535c37655327112a414ee394162b6e558c36104bc2a1b47a800a92237a6148a222bcace4f74ebf7b4d63ad663b601d02146f21caf496271e9376e3f721e48caaa194f00e137096facebc4e2574ed5d094491b637c93517ded181fdf49e2daceefb5c72f3fef86df384ff03cb9820b35f281ae9b5064199b03e8e689b35f17c7e23647ccaa01c87d80ab00757848", @ANYRES16, @ANYRES16, @ANYBLOB="9a7f40ad4c7145903a868b9020e1e8899ed5747db23004fc9d248900abcaa6b065cf0800930a71dcd8b8955d93c78b9d4e5e06d8d5c9ac9b75d177754d6eba23e6d2be546c0dfecdf61baf732950a5729c01fbdc11e36cb411be200a9135657acd97d21ee46aac313ebdddd9265af16558dd3e5ba4836659a6abfe08aad84276acf949bdaa34bdf7f7b2dfb2fe8b9d6d225dcecebeb6e15f649994728842bd99fc94897d24315ac2d17bf6c2acfbfa8464d80f36304f88b906b78ab359be3479db5b0e7555f04416807c2202d6551f2425440be741dbe053e0bfeb845623e722a9293843f1cf0a71119dcadf7e353af4da52aed3086d6e5a095774248be9a1b1418dec1c03a2cb0ece0840ebeaaf7b67867da45943b700e2d6dad775ae6f33e55aa86ca84c336c91e3b7d7224f7a9a10d5b45a6ce0769d875415bea136b5508e5e0a88290792da3b11b2284a3d757c301cec78b55d3fcfa073615ccb089f66c5b9a5c84f6c1bb78c3370c4687eab260711fa05525687c7709e15cddea061f70798cbf940ad929eb80f33ad8bb4fcd322dd0558f111d7d01351147976b425a27e573402490055054cf3d80bebde6a89f3086170633740f08780aac3a73f17eaeda8deb642c2887962596b4d78c0ffffb28d0e64073b0641f89cf83a69afaaea03ba6070838fdbdaccb81630a6fdaa77fc10146013b9fd79e965a320daf81c1a51f032a3f462f2740e579eb116cad80b4e233326bf94fea52184517accf608b1fbfb395942869841b9ca0f314beff6b2dc0a74d7599012274b24775f0382e72907c1f0c571b994f048c0266feb775d893fec84e5733cd66a96cd45b60f63743b17b05d99c427a2d00a27fef17cadf128059a2e227b80701755b0bc706f32255c8cd619fa995cc7649f28337361a62cff46669fa4cf095a2d148987a9fafa6e1fb9f59b5ac5ff10a4c62e0187a3c75a983f7f5211142c6c09170a13e29c2044e5568bda8055cee4722e445e83ea01307c42cbe63a5bc529e1200e5874f7500275abacd6cc0e3bf8fd38ab7bab39f54d180d60892e2e3a713a3e654c89b8e9ba4474909991844514c04b655c66ccd6f2a17e29ff69d343ebac7ac5e1510ad4ff52e6a932a97bb0d814259da6545022152dd63f06219a1d66ec2278b694876ed6195b0543b8c9289b8438e8ee57dd38bcdb045a6fc4cede28effaa0354afbd4190fcbccd9a0e91508e4399e0e30a0bfdedcc19454b6dd7c2785a6e4fe74a0ece1d683ad07d76eafec02fb0d88debfeacd3531413185da0ffa4fb9b5e6d5a916f7bb5d51efc8ab61e4953fc6b2d1e670769f3ca56d51b804ceb118278acc90422e1f51e448a27d2fe4f93c88cf7c6148474bf650902dd6dd96541044113d244cf938150ec426e7ed63e1f153bbe328f4232552b104c8dee60b0c4e4c25f2605e97cc6f4263d32e8340be2d167137682373ae4cd501fdc9c5359b40f52803a5e4c0e04a5de0412c5cbd4d05e6135a1209d4b2dff50d39e481f1d1b01ed71004fb0c18e736af8ab176f833a439a85c9132e6d2296f665771c6a284eadc08c94ffa520dcc37fd6426c152364699514b15d4df6732fff39834e8ba29688b19db27a970d9d7fbee973c76bee04fb6164963969ebde0f785606781d63726736d8b60a713d5f72207a23f6f00420fdf24d14c069f36a7e236620481cc7a63857cc1355bac8d4f9a3f32785ad4d9d81719077a816b33b98006c322ee473aa9f8f83fae86a4d421104b298a9e42357c44b773e3504b3f9eb5b29330411b776b78fdb6dd9713dd1aee0cc9c7ee8bd23a50d4c8babaf6d74bc25377009a8c57c941f80e58ac08c93a275656cbad3864df9e791305d66103ab30983b07553ede5b5d5b0aab157f805eb6c11c75dd7f297c2cc9110551131a797164dec422b13799f1c261464c765a62c201eb9c8686eee94642d59f429cd137cba0d1a8126dcdfc28ea5c201526c61164a86f480dfde0c60fdf6afd3cd64719de1d89b5a362e058054a9db73aaffac324b04e8903060e1f14ca4ac31c82183066e6d581685efbe3452a20a665166b03808220770d66051971b61d8114376e22a4511cae9fdf7bbed68bb9f45b57eee1c15775730ef1434731d7b82a7cbcd6155396263984edfcea62196189da0ba9908d7d5ef514d75a3e1d4ae42654365083873fc4ce969fa4fac51d640be8d948bb9464d1a7e494c8df98bd5a569ff7fe1aca542c34610148a8f1dc9d60ff0f761270577f286a362f32164184ffce3ad132637e9f0381e9ce76a11f296f9d1e835cdc44926104e1df4d0a282a84b9fbc23064bfcab0d221c6e3124ae8ba6022e62f170dcc2d655f73b40f83fd65f5c705bc1f9e8df13adeadff9e1fe4660a55be7dc969cfffaed607190162dcd09d0cd86a297b22142b88f0eb28dd1a45152a4f4f2dca0d96d39fa594349040f486cd486af619b7083236cf90324cddc6f1ed0f6a103c8d936d7f2f31d420ef50931838e66721bff7494617b6b4bc385f3e51b3f81cf5d6953ac7fddc0f3466682911b38bc7f082e0c18e3ae0badf7f3fd3e186ebc2bab71fa26f77bb14cd97e6761c93c8c25887c0ef1f3dc1d8d86ce0fb73190f66f4deca77977e8d6064bfeeac3fad2bc50488c144e2a1a82fcc1e1c12ac54bf3e2d468e8f53241e4a6ad9e466746a45b053452ded5caa20461881d78d8235e986ba8b77e83601655d2650bf1b64ce17c75314216b43bbd1101a2e12e57525bb7d3b136a70635bdac8af24367a24ce2fe2a72ef2b0e56ff8dc62a82946f86f9b6b1418a89b1971372dfe7d5ce2e6611befff721f04a19bce7f90b1551a4cdead136662c50513fdde6f9d4a199c3907ed8799f231f54dd8347c71d829ff8ddc5d96b5aac2fe58652c81ff7f54e2568119dff2763ef435aa420630dacc7e9414340ee8688f46c7a8ab96d860937641042b3cdf6857ff1d2d4e47cec1f23e65fe541f38cb96b132666f999002e89cd1896ca58c2e63b87382e1a6c1ee9afa56cf3ba923fa9c989e20bff313f37252632fdcff03fbdd2d334ee93baf75c1bdae30feaa81fb2ac1b63c42dda06f20ce8c9d003eb3efed7931def342fb874fce92763f6f477c7f589b75d2129419fc4cb7a8893a1d3f94533ed9fdf9f21fc254fd80aa74750833d390327a2107e761240928d35a36c5eaca61fd848116b8dd7ec8157928bc2dd87f7756aa517cf6a61d2009fd4ba0579ca3b3129cfd5403546f5ab6d0575799a008fc67da9658427636d8f806d9b8cad64aee438d0a9b45957f31a5afe3ed894add9acadfd347246099c6ff0b4ec6f19ac61557daf8739e528185ab1468ca72d6d72e4f026e371e540b774b6576df3014dcc9e91b2cd1f0403a4fcaa6627b22682bb54f92150c2917acaee1972b2b03bc2bd37fdb9e7352c654d94ef196b7229e4da5ee62b7d395ecdd5177f2563242ea49ff78151a4a816a94e89b03f41c7e6684f8be3e5802e9338e7cbd3b43f708c062f944a59f31b02ca9a177e6b681accee8785d2467d2d78636be4330febaa3f6907db07992a2de74e459f3ae8ee6adae20cbc75aabd2d5d3424de0ddcc3ddd981c3a4966c57f8fdb1c42db87395f0bc800ff8ddb4c228a7d793d8a997885494a8578f5433d3f82886ea573641bf16065efbc25718c88f7277ce04c94af560d8deb7968496f849d3fad78741272b08bf7aec3f3c777428d3b8b897333ae5afb6823af63cb7347601ee2e8d4e21b21a12e6d42f66a1aac26d296bc68a998d8ba179ed5f756c2efd8a7acc0e3f08093bb4a83d37f15b4fe07c90858058ad1ff0e21bb7bf4363079c5d452dba5972b21c8f41daf6f11a51d321d3c1d544190238036d907d965ff469ce4895eb7675f3e94a15f83b837b892a40390d87d76e9b15eda02366299d3dd93943466bceeb2f9e465adccc08e1a02c3ac01815931627ed327e0ffbe09563221a365b88c4f2449bd3634920d5bfbde7cdc92c4cb16a579f35f07dafc87ce6ce4de7bf9e8ff0e80b81cdab8f2164a25a0a6929679ce9ae0dc2ac7ed41a787446676f091597551dc2e8c054224bac6652bba5fb675c0b2c94d2faac160f11b7b96fc96415aca8a47fa03658b8afa24b6bd97f7dbeead9ae5f7ec1cb0d000055f41a5043c6c4c97212398b168b5cb9ee650726eabcc31b6712e815fdaae77885350884fb36d6d5444d5e5500a7d636d4eced14b9d411c765b36a4be06ca9be2965d6d6c06c3b6bcb38babeb2999ee71295d48926bf6e39363fabf74de5e57aa0b59f9dddeca142d0c50ab7ff198196c69c971e6ab591220f4e42d6525e2dbd99b6c57949c854e4ee0e4581f9e3e160b3f66b01f23f4d0472c0a1f307837ac8dac0a257d09ab82975148dcd764fe6359a5f21b9cbe2ae7b9b277489a8b3285b8289a84ff854508b4488ffcf68f47ec7a5c18a8c3d06e26b32f754ac74ea8e93a554147fd3b3daf1fbe924e2e389cac13a5f80f3a21dbd250d3917f7b5acfc739a63f2b3d6b3f099efb4be7a842215c89fc87bd8550d11ba2a4af0f111ab124503b26feeae3be3ee24168dd4553a226b9168edb11c3e61bc850adf995b4d6f1aace6db0b91f805c3d1789a3e6b470e5470968f429d5b05c8f76ca2981e37f5bde4ad00a09755c76774ead7d93f3f41255b1d56152e3699b133b2e0b277427c992323d1b4d8c438434e9e901ddd43788f80cb9a975e9dd1671ce16be5ff8033d5da824f00fd78b540edbcd69a2e9aff03e31af9afefb809434f52b4a1239fdd241ed3a268258addde19d1724155a1a4c877bd59b0659b7a786886f6ffcb5999d1f9c007d615020926f7165a9ddd4aaa3c7b631d30cc951e328131d99282ac06a18f88373092320ea5308f06c376e711aecda4cd1c2b639d9ea7a2613d4e9eaa9a0ef72774fdec622f7d131b45135d577897bf686b460a371083070139ea544bda15012251d6c8e7163c25412841faefba76765648ca7cd1b423403a654b6b5754588ae6c309621477db20f7c9236af1e422ebd3fb6d6a712e7a6d00d58416b7d65a53a2514bf51bedfe9207f16a4d79418600389b98ea8b9e06b8da708a86f191e567925af39a09ac9fd7902e8f8e77567baf1b75c05ba1eb7089b424801405afc982a8d79c80fada184a1ab3bab526a3b0a5e20d2dc6bcdd2c5cb7c49f735f3e8f4d36a388ca805876ae08f0e3acca5dd864c1fa1552068bf799095221480374fd2dcaeddb74be93470eff4fe278e190f0a131f32340ada9cca518af769f42943875f4c5707beee2179771da21cd66405b9973648bd047a516d1cf902fa1f0fcdcbc3f4c1f20fc22f9a7e9f4c3a52576399604c46f83ede44f542d06d54e6e8a1e693a2cfcbb16c178d1bace976133e72cc4533bd02b1c4ec2cc22097435aff5a682ca7227414895450831560fa682493f4814ce8fbdb190f8ce2b533ed9582638511bda93aeae5d0690f745b788db622864ba3fb60952f119427fbe66754c5c038c5fb2cb87c326d65862e353c14950bd1fa7c70e36323e9cf90c81f6275e59c7926acac1560a0b6bbc7a850817f2effa19d485315a219d49e293f871278294d02765cf72caa2f438de3337ed205bf68ff6ddaaa5e4b80de5fba022dfcf9cf074a319678df11eb77b3ef66e512b67ba5182265a60eaf457691e973d23cbaf6000537f886695074ebb616f9cdad9de7c6fe9ecfbd13d537d64c34a7c90ca56b50e60d6a7067e391e63561793edf6ed3c2eeb8555909a59ce73da1f096d41fb42de44494128324a9", @ANYRESDEC, @ANYRES16], 0x0, 0x0, &(0x7f0000000000)) 249.685086ms ago: executing program 0 (id=5235): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0xfffffffffffffffe) 248.782096ms ago: executing program 3 (id=5236): close(0xffffffffffffffff) close(0xffffffffffffffff) 170.050974ms ago: executing program 2 (id=5237): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) 124.002198ms ago: executing program 3 (id=5238): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 123.255388ms ago: executing program 0 (id=5239): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r0, 0x84, 0x84, &(0x7f00000020c0)=""/4055, &(0x7f0000001080)=0xfd7) 0s ago: executing program 1 (id=5240): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000022c0)='./file1\x00', 0x3a0c050, &(0x7f0000000080)={[{@iocharset={'iocharset', 0x3d, 'cp775'}}, {@shortname_winnt}, {@numtail}, {@fat=@uid}, {@shortname_lower}, {@shortname_mixed}, {@shortname_mixed}, {@shortname_mixed}, {@shortname_mixed}, {@uni_xlate}, {@utf8no}, {@utf8no}]}, 0x3, 0x354, &(0x7f0000000900)="$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") open(&(0x7f0000000140)='./file1\x00', 0x141042, 0x0) kernel console output (not intermixed with test programs): 500681][T11649] FAT-fs (loop4): Directory bread(block 67) failed [ 254.521021][T11649] FAT-fs (loop4): Directory bread(block 68) failed [ 254.551882][T11649] FAT-fs (loop4): Directory bread(block 69) failed [ 254.554450][T11656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3246'. [ 254.595461][T11649] FAT-fs (loop4): Directory bread(block 70) failed [ 254.615647][T11649] FAT-fs (loop4): Directory bread(block 71) failed [ 254.654473][T11656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3246'. [ 254.658988][T11649] FAT-fs (loop4): Directory bread(block 72) failed [ 254.686864][T11649] FAT-fs (loop4): Directory bread(block 73) failed [ 254.811372][T11649] attempt to access beyond end of device [ 254.811372][T11649] loop4: rw=524288, want=1164, limit=256 [ 254.855622][T11649] attempt to access beyond end of device [ 254.855622][T11649] loop4: rw=0, want=1164, limit=256 [ 255.059660][T11652] loop2: detected capacity change from 0 to 32768 [ 255.117715][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 255.154842][T11652] (syz.2.3244,11652,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 255.233022][T11652] (syz.2.3244,11652,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 255.315625][T11652] (syz.2.3244,11652,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 255.406080][T11652] JBD2: Ignoring recovery information on journal [ 255.517696][ T4918] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 255.520723][T11660] loop0: detected capacity change from 0 to 40427 [ 255.532275][T11658] loop1: detected capacity change from 0 to 32768 [ 255.545624][T11652] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 255.653696][T11660] F2FS-fs (loop0): Found nat_bits in checkpoint [ 255.662971][T11658] XFS (loop1): Mounting V5 Filesystem [ 255.671148][ T4182] ocfs2: Unmounting device (7,2) on (node local) [ 255.761176][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.767723][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.827589][T11660] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 255.861662][T11658] XFS (loop1): Ending clean mount [ 255.897849][ T4918] usb 4-1: config index 0 descriptor too short (expected 3133, got 61) [ 255.916957][ T4918] usb 4-1: config 0 has an invalid interface number: 156 but max is 1 [ 255.944529][ T4918] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.970617][T11660] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 256.017816][ T4918] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 256.060416][ T4918] usb 4-1: config 0 has no interface number 0 [ 256.077050][ T4918] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 256.092572][ T4918] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 256.097975][T11660] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 256.104868][ T4918] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 256.137635][ T4918] usb 4-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 256.158925][ T4918] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 256.169621][ T4918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.188602][ T4184] XFS (loop1): Unmounting Filesystem [ 256.196045][ T4918] usb 4-1: config 0 descriptor?? [ 256.274235][ T4918] gspca_main: spca561-2.14.0 probing abcd:cdee [ 256.528083][ T4918] spca561: probe of 4-1:0.156 failed with error -22 [ 256.556798][ T4918] usb 4-1: MIDIStreaming interface descriptor not found [ 256.706500][ T4918] usb 4-1: USB disconnect, device number 18 [ 256.717666][ T5845] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 257.003332][T11728] loop4: detected capacity change from 0 to 256 [ 257.007903][ T5845] usb 3-1: Using ep0 maxpacket: 32 [ 257.148624][ T5845] usb 3-1: config 0 has an invalid interface number: 235 but max is 0 [ 257.174877][ T5845] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.182064][T11739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3280'. [ 257.210673][ T5845] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 257.226027][T11728] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 257.263725][ T5845] usb 3-1: config 0 has no interface number 1 [ 257.280969][ T5845] usb 3-1: config 0 interface 235 altsetting 0 endpoint 0x1 has invalid maxpacket 9216, setting to 64 [ 257.313133][ T5845] usb 3-1: config 0 interface 235 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 257.560953][T11754] loop3: detected capacity change from 0 to 1024 [ 257.578210][ T5845] usb 3-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 257.604624][ T5845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.638721][ T5845] usb 3-1: Product: syz [ 257.644959][ T5845] usb 3-1: Manufacturer: syz [ 257.658334][T11754] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 257.674955][ T5845] usb 3-1: SerialNumber: syz [ 257.728243][T11754] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 257.735284][ T5845] usb 3-1: config 0 descriptor?? [ 257.774728][T11754] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 257.845316][T11754] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,sysvgroups,inode_readahead_blks=0x0000000000004000,bsddf,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 257.962626][T11764] lo speed is unknown, defaulting to 1000 [ 258.057906][ T5845] kaweth 3-1:0.235: Firmware present in device. [ 258.248814][ T5845] kaweth 3-1:0.235: Error reading configuration (-71), no net device created [ 258.277366][ T5845] kaweth: probe of 3-1:0.235 failed with error -5 [ 258.357600][ T5845] kaweth 3-1:0.0: Firmware present in device. [ 258.407876][ T5845] kaweth 3-1:0.0: Error reading configuration (-71), no net device created [ 258.426883][ T5845] kaweth: probe of 3-1:0.0 failed with error -5 [ 258.443690][ T5845] usb 3-1: USB disconnect, device number 19 [ 258.678353][T11800] loop0: detected capacity change from 0 to 4096 [ 258.804172][T11800] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 258.983310][T11817] loop4: detected capacity change from 0 to 256 [ 259.069810][T11817] MINIX-fs: mounting file system with errors, running fsck is recommended [ 259.192580][T11823] loop1: detected capacity change from 0 to 256 [ 259.219305][T11792] loop3: detected capacity change from 0 to 32768 [ 259.299439][T11823] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x587066de, utbl_chksum : 0xe619d30d) [ 259.401498][T11792] read_mapping_page failed! [ 259.425226][T11792] ERROR: (device loop3): txCommit: [ 259.425226][T11792] [ 259.467753][T11792] ERROR: (device loop3): remounting filesystem as read-only [ 259.530524][T11835] loop2: detected capacity change from 0 to 128 [ 259.540254][T11837] netlink: 'syz.0.3326': attribute type 1 has an invalid length. [ 259.579905][T11837] netlink: 'syz.0.3326': attribute type 3 has an invalid length. [ 259.599983][T11835] ADFS-fs (loop2): error: can't find an ADFS filesystem on dev loop2. [ 259.654426][T11841] bond0: option xmit_hash_policy: invalid value (8) [ 259.654666][T11837] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3326'. [ 259.879168][T11850] loop2: detected capacity change from 0 to 512 [ 260.080270][T11850] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 260.168435][T11850] ext4 filesystem being mounted at /648/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.174242][T11869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3340'. [ 260.188075][T11869] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3340'. [ 260.462369][T11883] ubi0: attaching mtd0 [ 260.542597][T11883] ubi0: scanning is finished [ 260.572074][T11883] ubi0: empty MTD device detected [ 260.668887][T11887] loop2: detected capacity change from 0 to 1024 [ 260.783319][T11883] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 260.817742][T11883] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 260.859421][T11883] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 260.867420][T11883] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 260.957934][T11883] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 261.008326][T11883] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 261.090899][T11883] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2928356131 [ 261.237694][T11883] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 261.351080][T11890] ubi0: background thread "ubi_bgt0d" started, PID 11890 [ 261.531627][T11875] loop0: detected capacity change from 0 to 32768 [ 261.711880][T11875] JBD2: Ignoring recovery information on journal [ 261.743920][T11880] loop3: detected capacity change from 0 to 32768 [ 261.748460][T11903] loop1: detected capacity change from 0 to 4096 [ 261.759960][T11904] lo speed is unknown, defaulting to 1000 [ 261.844377][T11903] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 261.937260][T11875] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 261.957030][T11880] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 261.985076][T11880] JBD2: Ignoring recovery information on journal [ 262.084995][T11875] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1792 has bad signature [ 262.168073][T11875] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 262.187184][T11914] loop2: detected capacity change from 0 to 1024 [ 262.222850][T11875] OCFS2: File system is now read-only. [ 262.223503][T11903] ntfs3: loop1: Failed to load $Extend. [ 262.245474][T11875] (syz.0.3343,11875,1):ocfs2_search_chain:1785 ERROR: status = -30 [ 262.286288][T11875] (syz.0.3343,11875,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 262.289071][T11880] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 262.338678][T11875] (syz.0.3343,11875,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 262.347357][T11875] (syz.0.3343,11875,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 262.483204][T11875] (syz.0.3343,11875,1):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 262.483992][ T4185] ocfs2: Unmounting device (7,3) on (node local) [ 262.525834][T11875] (syz.0.3343,11875,1):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 262.546112][T11875] (syz.0.3343,11875,1):ocfs2_mknod_locked:639 ERROR: status = -30 [ 262.638340][T11875] (syz.0.3343,11875,1):ocfs2_symlink:1941 ERROR: status = -30 [ 262.684157][T11919] loop2: detected capacity change from 0 to 164 [ 262.691986][T11875] (syz.0.3343,11875,1):ocfs2_symlink:2065 ERROR: status = -30 [ 262.725326][T11921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3363'. [ 262.762126][T11919] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 262.848634][ T4183] ocfs2: Unmounting device (7,0) on (node local) [ 262.896724][T11906] loop4: detected capacity change from 0 to 32768 [ 263.014484][T11906] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.3358 (11906) [ 263.027147][T11925] loop2: detected capacity change from 0 to 512 [ 263.092084][T11906] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 263.155326][T11906] BTRFS info (device loop4): turning on async discard [ 263.164775][T11925] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 263.174094][T11906] BTRFS info (device loop4): metadata ratio 2 [ 263.183811][T11906] BTRFS info (device loop4): use no compression [ 263.190823][T11906] BTRFS info (device loop4): force clearing of disk cache [ 263.198312][T11906] BTRFS warning (device loop4): the 'inode_cache' option is deprecated and has no effect since 5.11 [ 263.209452][T11906] BTRFS info (device loop4): using free space tree [ 263.215989][T11906] BTRFS info (device loop4): has skinny extents [ 263.278095][T11925] ext4 filesystem being mounted at /655/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.867161][T11906] BTRFS info (device loop4): clearing free space tree [ 263.880632][T11906] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 263.957692][T11906] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 263.977708][T11975] binder: 11974:11975 unknown command 1077961712 [ 263.984194][T11975] binder: 11974:11975 ioctl c0306201 200000000480 returned -22 [ 264.042764][T11906] BTRFS info (device loop4): creating free space tree [ 264.070005][T11906] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 264.120417][T11906] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 264.146071][ T150] block nbd3: Attempted send on invalid socket [ 264.152583][ T150] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 264.239420][T11985] loop1: detected capacity change from 0 to 47 [ 264.760197][T11941] loop0: detected capacity change from 0 to 40427 [ 264.839605][T11941] F2FS-fs (loop0): Invalid log sectors per block(0) log sectorsize(9) [ 264.886448][T11941] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 264.916666][T11941] F2FS-fs (loop0): invalid crc value [ 265.000323][T11941] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 265.118173][T12003] ieee802154 phy0 wpan0: encryption failed: -90 [ 265.136460][T12007] netlink: 'syz.3.3392': attribute type 6 has an invalid length. [ 265.262545][T11941] F2FS-fs (loop0): recover fsync data on readonly fs [ 265.338009][T11941] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 265.394978][T11941] F2FS-fs (loop0): Try to recover 1th superblock, ret: -30 [ 265.447663][T11941] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 265.484456][T12018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3398'. [ 265.608117][T11941] F2FS-fs (loop0): Try to recover all the superblocks, ret: 0 [ 265.678674][T12031] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3404'. [ 265.841980][T12041] loop2: detected capacity change from 0 to 256 [ 265.939971][T12041] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 265.989046][ T4918] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 266.040052][T12041] befs: Unrecognized mount option "umask=00000000000000000000005" or missing value [ 266.094301][T12041] befs: (nullb0): cannot parse mount options [ 266.185720][T12047] loop4: detected capacity change from 0 to 8 [ 266.227821][ T4918] usb 2-1: Using ep0 maxpacket: 8 [ 266.357826][ T4918] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 266.368038][ T4918] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.403301][ T4918] usb 2-1: config 0 has no interface number 0 [ 266.567893][ T4918] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 266.596452][ T4918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.625108][ T4918] usb 2-1: Product: syz [ 266.635304][ T4918] usb 2-1: Manufacturer: syz [ 266.655630][ T4918] usb 2-1: SerialNumber: syz [ 266.678623][ T4918] usb 2-1: config 0 descriptor?? [ 266.852032][T12065] device bridge2 entered promiscuous mode [ 266.866439][T12039] loop3: detected capacity change from 0 to 32768 [ 266.939201][T12039] (syz.3.3407,12039,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 266.957996][ T4918] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 266.966404][ T4918] usb 2-1: No valid video chain found. [ 267.007293][T12039] (syz.3.3407,12039,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 267.063291][T12073] loop4: detected capacity change from 0 to 764 [ 267.125528][T12039] JBD2: Ignoring recovery information on journal [ 267.161577][T12073] rock: directory entry would overflow storage [ 267.178812][ T4918] usb 2-1: USB disconnect, device number 15 [ 267.223621][T12073] rock: sig=0x4654, size=5, remaining=4 [ 267.303050][T12081] loop0: detected capacity change from 0 to 512 [ 267.350565][T12039] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 267.453796][T12039] (syz.3.3407,12039,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xdf97dca5. Applying ECC. [ 267.517430][T12081] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 267.621975][T12081] ext4 filesystem being mounted at /689/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.680306][T12039] (syz.3.3407,12039,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xc9ee627, computed 0x45d1f118. Applying ECC. [ 267.778056][T12039] (syz.3.3407,12039,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xc9ee627, computed 0x45d1f118 [ 267.808376][T12039] (syz.3.3407,12039,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 267.865538][T12039] (syz.3.3407,12039,1):ocfs2_quota_read:201 ERROR: status = -5 [ 267.890036][T12039] __quota_error: 19 callbacks suppressed [ 267.890054][T12039] Quota error (device loop3): find_tree_dqentry: Can't read quota tree block 3 [ 267.960496][T12100] loop1: detected capacity change from 0 to 256 [ 267.991724][T12039] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 268.017717][ T5623] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 268.037878][T12039] (syz.3.3407,12039,1):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 268.052585][T12100] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 268.089847][T12039] (syz.3.3407,12039,1):ocfs2_mknod:314 ERROR: status = -5 [ 268.130496][T12039] (syz.3.3407,12039,1):ocfs2_mknod:502 ERROR: status = -5 [ 268.171348][T12039] (syz.3.3407,12039,1):ocfs2_mkdir:659 ERROR: status = -5 [ 268.261337][ T5623] usb 5-1: Using ep0 maxpacket: 32 [ 268.298282][ T4185] ocfs2: Unmounting device (7,3) on (node local) [ 268.540036][T12118] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3444'. [ 268.548130][ T5623] usb 5-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=cd.c6 [ 268.562492][T12117] loop1: detected capacity change from 0 to 512 [ 268.579831][ T5623] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.605328][ T5623] usb 5-1: Product: syz [ 268.616717][ T5623] usb 5-1: Manufacturer: syz [ 268.621774][ T5623] usb 5-1: SerialNumber: syz [ 268.655797][ T5623] usb 5-1: config 0 descriptor?? [ 268.938328][ T4918] usb 5-1: USB disconnect, device number 17 [ 269.214969][T12108] loop0: detected capacity change from 0 to 32768 [ 269.348577][T12142] loop2: detected capacity change from 0 to 2048 [ 269.468548][T12142] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 269.688051][T12157] xt_TCPMSS: Only works on TCP SYN packets [ 269.910256][T12171] loop2: detected capacity change from 0 to 64 [ 270.022131][T12174] loop3: detected capacity change from 0 to 1024 [ 270.232373][T12181] loop0: detected capacity change from 0 to 256 [ 270.248133][ T154] hfsplus: b-tree write err: -5, ino 4 [ 270.323865][T12189] loop4: detected capacity change from 0 to 16 [ 270.328539][T12181] exfat: Deprecated parameter 'namecase' [ 270.355135][T12181] exfat: Deprecated parameter 'namecase' [ 270.393243][T12189] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 270.420730][T12181] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 270.525611][ T4918] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 270.637312][T12203] loop4: detected capacity change from 0 to 64 [ 270.723411][T12207] loop3: detected capacity change from 0 to 512 [ 270.778116][ T4918] usb 3-1: Using ep0 maxpacket: 8 [ 270.822591][T12211] loop1: detected capacity change from 0 to 2048 [ 270.838852][T12207] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.3488: casefold flag without casefold feature [ 270.869119][T12211] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 270.886023][T12214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3491'. [ 270.964274][T12207] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.3488: couldn't read orphan inode 15 (err -117) [ 270.985989][T12217] loop4: detected capacity change from 0 to 64 [ 271.034073][T12207] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 271.058507][ T4918] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 271.090836][ T4918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.108181][ T26] audit: type=1800 audit(1761157948.766:13): pid=12217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3492" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 271.144120][ T4918] usb 3-1: Product: syz [ 271.167640][ T4918] usb 3-1: Manufacturer: syz [ 271.186876][ T4918] usb 3-1: SerialNumber: syz [ 271.253126][ T4918] usb 3-1: config 0 descriptor?? [ 271.597928][ T5623] usb 3-1: USB disconnect, device number 20 [ 271.881966][T12239] netlink: 'syz.0.3502': attribute type 21 has an invalid length. [ 271.912838][T12239] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3502'. [ 271.947755][T12239] netlink: 'syz.0.3502': attribute type 4 has an invalid length. [ 271.973010][T12239] netlink: 'syz.0.3502': attribute type 5 has an invalid length. [ 272.001549][T12239] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3502'. [ 272.048884][T12248] loop1: detected capacity change from 0 to 64 [ 272.248846][T12256] loop4: detected capacity change from 0 to 16 [ 272.325169][T12256] erofs: (device loop4): mounted with root inode @ nid 36. [ 272.539886][T12273] loop1: detected capacity change from 0 to 256 [ 272.721038][T12273] FAT-fs (loop1): Directory bread(block 64) failed [ 272.767628][T12273] FAT-fs (loop1): Directory bread(block 65) failed [ 272.774289][T12273] FAT-fs (loop1): Directory bread(block 66) failed [ 272.820171][T12273] FAT-fs (loop1): Directory bread(block 67) failed [ 272.869246][T12296] loop3: detected capacity change from 0 to 16 [ 272.872583][T12273] FAT-fs (loop1): Directory bread(block 68) failed [ 272.919276][T12273] FAT-fs (loop1): Directory bread(block 69) failed [ 272.934285][T12273] FAT-fs (loop1): Directory bread(block 70) failed [ 272.954934][T12296] erofs: (device loop3): mounted with root inode @ nid 36. [ 272.957757][T12273] FAT-fs (loop1): Directory bread(block 71) failed [ 273.007478][T12273] FAT-fs (loop1): Directory bread(block 72) failed [ 273.057628][T12273] FAT-fs (loop1): Directory bread(block 73) failed [ 273.180969][T12308] loop0: detected capacity change from 0 to 164 [ 273.253808][T12308] Unable to read rock-ridge attributes [ 273.368875][ T5623] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 273.440334][T12323] loop3: detected capacity change from 0 to 64 [ 273.594311][T12326] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3545'. [ 273.641573][T12326] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3545'. [ 273.737926][ T5623] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 273.772482][ T5623] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 274.006551][ T5623] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 274.025543][ T5623] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.045768][ T5623] usb 3-1: Product: syz [ 274.050072][ T5623] usb 3-1: Manufacturer: syz [ 274.077820][ T5623] usb 3-1: SerialNumber: syz [ 274.106034][ T5623] usb 3-1: config 0 descriptor?? [ 274.159584][T12351] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3558'. [ 274.347824][T12359] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 274.364676][T12363] xt_TCPMSS: Only works on TCP SYN packets [ 274.406588][T12359] exFAT-fs (nullb0): invalid boot record signature [ 274.420310][ T5623] usb 3-1: USB disconnect, device number 21 [ 274.427973][T12359] exFAT-fs (nullb0): failed to read boot sector [ 274.448800][T12359] exFAT-fs (nullb0): failed to recognize exfat type [ 274.700078][ T26] audit: type=1400 audit(1761157952.356:14): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=12382 comm="syz.4.3574" [ 274.795517][T12385] loop1: detected capacity change from 0 to 256 [ 274.890456][T12385] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 275.040819][T12385] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000008) [ 275.080684][T12385] exFAT-fs (loop1): Filesystem has been set read-only [ 275.135667][T12409] loop2: detected capacity change from 0 to 64 [ 275.406317][T12425] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3595'. [ 275.477622][ T5827] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 275.651003][T12442] xt_hashlimit: invalid interval [ 275.737627][ T5827] usb 5-1: Using ep0 maxpacket: 8 [ 275.805906][T12451] ipt_REJECT: TCP_RESET invalid for non-tcp [ 275.877825][ T5827] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 276.077929][ T5827] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 276.107571][ T5827] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 276.147406][ T5827] usb 5-1: Product: syz [ 276.171758][ T5623] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 276.179697][ T5827] usb 5-1: Manufacturer: syz [ 276.204486][ T5827] usb 5-1: SerialNumber: syz [ 276.399747][T12474] mmap: syz.0.3619 (12474): VmData 45854720 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 276.444094][ T5623] usb 4-1: Using ep0 maxpacket: 16 [ 276.455232][T12447] loop2: detected capacity change from 0 to 32768 [ 276.485282][T12477] loop1: detected capacity change from 0 to 16 [ 276.507754][ T5827] usb 5-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 276.516064][T12477] erofs: (device loop1): mounted with root inode @ nid 36. [ 276.526268][ T5827] usb 5-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 276.554945][ T5827] usb 5-1: Handspring Visor / Palm OS: Number of ports: 2 [ 276.568352][ T5623] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 276.578681][T12447] add_index: next_index = 0. Resetting! [ 276.584538][T12447] find_entry called with index >= next_index [ 276.606352][ T5623] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.635391][T12447] find_entry called with index >= next_index [ 276.674674][ T5623] usb 4-1: config 0 descriptor?? [ 276.720066][ T5623] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 276.737769][ T5827] usb 5-1: palm_os_3_probe - error -71 getting bytes available request [ 276.746104][ T5827] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 276.802204][ T5827] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 276.817140][ T5827] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB2 [ 276.842999][ T5827] usb 5-1: USB disconnect, device number 18 [ 276.881576][ T5827] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 276.937737][ T5623] usb 4-1: Detected FT8U232AM [ 276.938755][ T5827] visor ttyUSB2: Handspring Visor / Palm OS converter now disconnected from ttyUSB2 [ 276.943562][ T5623] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 276.957494][ T5827] visor 5-1:1.0: device disconnected [ 277.058904][T12493] Cannot find add_set index 2 as target [ 277.144558][T12000] usb 4-1: USB disconnect, device number 19 [ 277.162287][T12000] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 277.192643][T12000] ftdi_sio 4-1:0.0: device disconnected [ 277.346125][T12505] loop2: detected capacity change from 0 to 1024 [ 277.404465][T12511] netlink: 'syz.1.3638': attribute type 1 has an invalid length. [ 277.425453][T12511] netlink: 'syz.1.3638': attribute type 2 has an invalid length. [ 277.430951][T12514] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3639'. [ 277.447288][T12511] netlink: 'syz.1.3638': attribute type 2 has an invalid length. [ 277.471176][T12511] netlink: 'syz.1.3638': attribute type 2 has an invalid length. [ 277.501816][T12517] loop0: detected capacity change from 0 to 256 [ 277.506880][T12511] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3638'. [ 277.529150][T12505] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,nobarrier,errors=remount-ro,. Quota mode: none. [ 277.595448][T12505] EXT4-fs error (device loop2): ext4_get_first_dir_block:3597: inode #11: comm syz.2.3633: Directory hole found for htree leaf block 0 [ 277.618221][T12517] FAT-fs (loop0): Directory bread(block 64) failed [ 277.641113][T12505] EXT4-fs (loop2): Remounting filesystem read-only [ 277.657864][T12517] FAT-fs (loop0): Directory bread(block 65) failed [ 277.664631][T12517] FAT-fs (loop0): Directory bread(block 66) failed [ 277.672332][T12517] FAT-fs (loop0): Directory bread(block 67) failed [ 277.680127][T12517] FAT-fs (loop0): Directory bread(block 68) failed [ 277.686877][T12517] FAT-fs (loop0): Directory bread(block 69) failed [ 277.691944][T12521] loop4: detected capacity change from 0 to 1024 [ 277.694107][T12517] FAT-fs (loop0): Directory bread(block 70) failed [ 277.706770][T12517] FAT-fs (loop0): Directory bread(block 71) failed [ 277.713899][T12517] FAT-fs (loop0): Directory bread(block 72) failed [ 277.749453][T12517] FAT-fs (loop0): Directory bread(block 73) failed [ 278.020910][T12535] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3648'. [ 278.231991][T12547] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3652'. [ 278.404262][ T4918] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 278.415360][T12555] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3660'. [ 278.455809][T12559] netlink: 'syz.4.3657': attribute type 2 has an invalid length. [ 278.667608][ T4918] usb 1-1: Using ep0 maxpacket: 32 [ 278.696418][T12572] loop1: detected capacity change from 0 to 1024 [ 278.790115][ T4918] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.827618][ T5827] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 278.977949][ T4918] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 278.997343][ T4918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.015946][ T4918] usb 1-1: Product: syz [ 279.023095][ T4918] usb 1-1: Manufacturer: syz [ 279.036551][ T4918] usb 1-1: SerialNumber: syz [ 279.043582][ T4918] usb 1-1: config 0 descriptor?? [ 279.109198][ T4918] usb 1-1: bad CDC descriptors [ 279.116909][ T4918] usb 1-1: unsupported MDLM descriptors [ 279.139862][T12592] device sit0 entered promiscuous mode [ 279.173604][T12592] netlink: 'syz.1.3677': attribute type 1 has an invalid length. [ 279.177877][T12595] loop2: detected capacity change from 0 to 4096 [ 279.194845][T12592] netlink: 'syz.1.3677': attribute type 3 has an invalid length. [ 279.267826][ T5827] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 279.299283][ T5827] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 279.350573][ T5623] usb 1-1: USB disconnect, device number 14 [ 279.359433][T12595] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 279.404924][T12595] ntfs3: loop2: ntfs_sync_fs r=9 failed, -22. [ 279.414738][ T5827] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 279.437182][ T5827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 279.479451][ T5827] usb 4-1: SerialNumber: syz [ 279.547504][ T4182] ntfs3: loop2: ntfs_sync_fs r=9 failed, -22. [ 279.554101][ T4182] ntfs3: loop2: ntfs_evict_inode r=9 failed, -22. [ 279.573398][T12605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3683'. [ 279.800998][ T5827] usb 4-1: 0:2 : does not exist [ 279.833063][ T5827] usb 4-1: USB disconnect, device number 20 [ 279.961221][T12623] netlink: 'syz.2.3692': attribute type 2 has an invalid length. [ 279.975179][T12615] loop4: detected capacity change from 0 to 4096 [ 279.992738][T12623] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3692'. [ 280.065970][T12615] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 280.098982][ T4450] udevd[4450]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 280.802188][T12669] netlink: 'syz.0.3715': attribute type 21 has an invalid length. [ 280.846355][T12669] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3715'. [ 280.879124][T12675] loop2: detected capacity change from 0 to 16 [ 280.922652][ T5827] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 280.933736][T12680] Timeout policy `syz0' can only be used by L3 protocol number 3 [ 280.945359][T12681] loop4: detected capacity change from 0 to 256 [ 280.964381][T12683] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3722'. [ 280.977304][T12675] erofs: (device loop2): mounted with root inode @ nid 36. [ 280.987315][T12683] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3722'. [ 281.056116][T12681] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 281.071432][T12685] loop0: detected capacity change from 0 to 16 [ 281.138695][T12685] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 281.559204][ T5827] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 281.582540][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.638446][ T5827] usb 4-1: Product: syz [ 281.643366][ T5827] usb 4-1: Manufacturer: syz [ 281.677579][ T5827] usb 4-1: SerialNumber: syz [ 281.946674][T12731] loop1: detected capacity change from 0 to 512 [ 281.989469][T12735] netlink: 'syz.2.3748': attribute type 28 has an invalid length. [ 282.009415][ T5830] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 282.020884][T12731] EXT4-fs (loop1): Ignoring removed oldalloc option [ 282.075341][T12731] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,block_validity,grpid,oldalloc,,errors=continue. Quota mode: writeback. [ 282.090294][ T5827] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 282.099094][T12731] ext4 filesystem being mounted at /770/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 282.109657][ T5827] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 282.124103][ T5827] usb 4-1: 2:1 : sample bitwidth 205 in over sample bytes 2 [ 282.135299][ T5827] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 282.211669][ T5827] usb 4-1: USB disconnect, device number 21 [ 282.256856][T12748] loop0: detected capacity change from 0 to 256 [ 282.477967][ T5830] usb 5-1: unable to get BOS descriptor or descriptor too short [ 282.498615][ T4450] udevd[4450]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 282.567912][ T5830] usb 5-1: not running at top speed; connect to a high speed hub [ 282.592797][T12766] loop3: detected capacity change from 0 to 512 [ 282.658086][T12766] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 282.689411][ T5830] usb 5-1: config 4 has an invalid interface number: 32 but max is 0 [ 282.708105][ T5830] usb 5-1: config 4 has no interface number 0 [ 282.900234][ T5830] usb 5-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=f1.50 [ 282.924839][ T5830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.974428][ T5830] usb 5-1: Product: syz [ 282.990238][ T5830] usb 5-1: Manufacturer: syz [ 283.016872][ T5830] usb 5-1: SerialNumber: syz [ 283.259650][T12770] loop1: detected capacity change from 0 to 32768 [ 283.318131][T12788] __nla_validate_parse: 2 callbacks suppressed [ 283.318149][T12788] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3774'. [ 283.334541][T12788] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3774'. [ 283.376603][T12790] validate_nla: 1 callbacks suppressed [ 283.376621][T12790] netlink: 'syz.2.3775': attribute type 1 has an invalid length. [ 283.459499][T12794] netlink: 'syz.2.3777': attribute type 1 has an invalid length. [ 283.467480][T12794] netlink: 'syz.2.3777': attribute type 2 has an invalid length. [ 283.477989][ T5830] usb 5-1: Found UVC 0.02 device syz (17dc:0202) [ 283.486461][ T5830] usb 5-1: No valid video chain found. [ 283.501612][ T5830] usb 5-1: USB disconnect, device number 19 [ 283.693523][T12770] XFS (loop1): Mounting V5 Filesystem [ 283.821570][T12816] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3783'. [ 283.831020][T12816] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3783'. [ 283.888804][T12770] XFS (loop1): Ending clean mount [ 284.105972][ T4184] XFS (loop1): Unmounting Filesystem [ 284.109638][T12834] device ip6gretap2 entered promiscuous mode [ 284.145522][T12836] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 284.197107][T12838] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3794'. [ 284.492997][T12850] netlink: 'syz.2.3801': attribute type 3 has an invalid length. [ 284.696274][T12854] loop4: detected capacity change from 0 to 4096 [ 285.179121][T12890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3819'. [ 285.194319][T12890] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3819'. [ 285.606827][T12921] xt_CT: You must specify a L4 protocol and not use inversions on it [ 285.693487][T12926] loop1: detected capacity change from 0 to 64 [ 285.767272][T12930] netlink: 'syz.3.3838': attribute type 1 has an invalid length. [ 285.807014][T12926] Trying to free block not in datazone [ 285.838116][T12926] Trying to free block not in datazone [ 285.843636][T12926] Trying to free block not in datazone [ 285.857574][T12930] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3838'. [ 285.879850][T12937] loop4: detected capacity change from 0 to 256 [ 285.898718][T12926] Trying to free block not in datazone [ 285.904998][T12930] nbd: couldn't find a device at index 1024 [ 285.921915][T12926] Trying to free block not in datazone [ 285.931391][T12926] Trying to free block not in datazone [ 285.943113][T12926] minix_free_block (loop1:6): bit already cleared [ 285.986382][T12937] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 286.025492][T12926] Trying to free block not in datazone [ 286.216784][T12939] loop0: detected capacity change from 0 to 4096 [ 286.288590][T12952] loop1: detected capacity change from 0 to 1024 [ 286.308413][T12939] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 286.449267][T12952] hfsplus: request for non-existent node 211 in B*Tree [ 286.457074][T12952] hfsplus: request for non-existent node 211 in B*Tree [ 286.478437][T12939] ntfs: volume version 3.1. [ 286.503846][T12939] ntfs: (device loop0): ntfs_mark_quotas_out_of_date(): Quota defaults entry version 0x5 is not supported. [ 286.548051][T12939] ntfs: (device loop0): load_system_files(): Failed to mark quotas out of date. Mounting read-only. Run chkdsk. [ 286.672115][T12963] netlink: 'syz.3.3852': attribute type 10 has an invalid length. [ 286.864347][T12972] loop3: detected capacity change from 0 to 256 [ 287.042835][T12972] FAT-fs (loop3): Directory bread(block 64) failed [ 287.078210][T12972] FAT-fs (loop3): Directory bread(block 65) failed [ 287.107114][T12972] FAT-fs (loop3): Directory bread(block 66) failed [ 287.128534][T12972] FAT-fs (loop3): Directory bread(block 67) failed [ 287.157809][T12972] FAT-fs (loop3): Directory bread(block 68) failed [ 287.164410][T12972] FAT-fs (loop3): Directory bread(block 69) failed [ 287.228287][T12972] FAT-fs (loop3): Directory bread(block 70) failed [ 287.234928][T12972] FAT-fs (loop3): Directory bread(block 71) failed [ 287.271161][T12972] FAT-fs (loop3): Directory bread(block 72) failed [ 287.307621][T12972] FAT-fs (loop3): Directory bread(block 73) failed [ 287.483051][T12956] loop4: detected capacity change from 0 to 32768 [ 287.528742][T12956] (syz.4.3849,12956,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 287.608171][T12956] (syz.4.3849,12956,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 287.753802][T12956] JBD2: Ignoring recovery information on journal [ 287.938156][T12956] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 287.981839][T13023] loop1: detected capacity change from 0 to 256 [ 287.989085][T12956] (syz.4.3849,12956,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xdf97dca5. Applying ECC. [ 288.157712][T12956] (syz.4.3849,12956,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xc9ee627, computed 0x45d1f118. Applying ECC. [ 288.197672][T12956] (syz.4.3849,12956,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xc9ee627, computed 0x45d1f118 [ 288.221566][T12956] (syz.4.3849,12956,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 288.239537][T12956] (syz.4.3849,12956,0):ocfs2_quota_read:201 ERROR: status = -5 [ 288.252789][T12956] Quota error (device loop4): find_tree_dqentry: Can't read quota tree block 3 [ 288.273754][T12956] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 288.285976][T12956] (syz.4.3849,12956,0):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 288.304902][T12956] (syz.4.3849,12956,0):ocfs2_mknod:314 ERROR: status = -5 [ 288.324659][T12956] (syz.4.3849,12956,0):ocfs2_mknod:502 ERROR: status = -5 [ 288.344840][T12956] (syz.4.3849,12956,0):ocfs2_mkdir:659 ERROR: status = -5 [ 288.433887][ T4186] ocfs2: Unmounting device (7,4) on (node local) [ 288.490192][ T5830] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 288.725471][T13064] loop0: detected capacity change from 0 to 256 [ 288.757685][ T5830] usb 4-1: Using ep0 maxpacket: 16 [ 288.882514][T13064] FAT-fs (loop0): Directory bread(block 64) failed [ 288.897862][ T5830] usb 4-1: config 0 has an invalid interface number: 137 but max is 0 [ 288.930948][T13064] FAT-fs (loop0): Directory bread(block 65) failed [ 288.943423][ T5830] usb 4-1: config 0 has no interface number 0 [ 288.954027][T13064] FAT-fs (loop0): Directory bread(block 66) failed [ 288.980391][T13064] FAT-fs (loop0): Directory bread(block 67) failed [ 288.996931][T13064] FAT-fs (loop0): Directory bread(block 68) failed [ 289.004270][T13064] FAT-fs (loop0): Directory bread(block 69) failed [ 289.034616][T13064] FAT-fs (loop0): Directory bread(block 70) failed [ 289.050842][T13064] FAT-fs (loop0): Directory bread(block 71) failed [ 289.057500][T13064] FAT-fs (loop0): Directory bread(block 72) failed [ 289.080342][T13064] FAT-fs (loop0): Directory bread(block 73) failed [ 289.147860][ T5830] usb 4-1: New USB device found, idVendor=0c45, idProduct=628f, bcdDevice=88.db [ 289.167174][ T5830] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.228067][ T5830] usb 4-1: Product: syz [ 289.232394][ T5830] usb 4-1: Manufacturer: syz [ 289.237015][ T5830] usb 4-1: SerialNumber: syz [ 289.265268][ T5830] usb 4-1: config 0 descriptor?? [ 289.330259][ T5830] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:628f [ 289.475483][T13090] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3915'. [ 289.619952][T13098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3919'. [ 289.765131][ T5830] gspca_sn9c20x: Write register 1001 failed -71 [ 289.772420][ T5830] gspca_sn9c20x: Device initialization failed [ 289.800606][ T5830] gspca_sn9c20x: probe of 4-1:0.137 failed with error -71 [ 289.841742][ T5830] usb 4-1: USB disconnect, device number 22 [ 289.922915][T13070] loop1: detected capacity change from 0 to 32768 [ 289.990119][T13070] (syz.1.3905,13070,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 290.033897][T13120] loop2: detected capacity change from 0 to 8 [ 290.076276][T13070] (syz.1.3905,13070,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 290.148546][T13070] JBD2: Ignoring recovery information on journal [ 290.302295][T13120] SQUASHFS error: Failed to read block 0x738: -5 [ 290.353836][T13120] SQUASHFS error: Unable to read metadata cache entry [736] [ 290.362421][T13070] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 290.428037][T13070] (syz.1.3905,13070,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xdf97dca5. Applying ECC. [ 290.521872][T13136] loop4: detected capacity change from 0 to 8 [ 290.525852][T13135] loop0: detected capacity change from 0 to 256 [ 290.564669][T13070] (syz.1.3905,13070,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xc9ee627, computed 0x45d1f118. Applying ECC. [ 290.581646][T13070] (syz.1.3905,13070,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xc9ee627, computed 0x45d1f118 [ 290.602453][T13070] (syz.1.3905,13070,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 290.616215][T13070] (syz.1.3905,13070,0):ocfs2_quota_read:201 ERROR: status = -5 [ 290.647695][T13070] Quota error (device loop1): find_tree_dqentry: Can't read quota tree block 3 [ 290.703168][T13070] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 290.733724][T13070] (syz.1.3905,13070,0):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 290.757836][T13070] (syz.1.3905,13070,0):ocfs2_mknod:314 ERROR: status = -5 [ 290.765052][T13070] (syz.1.3905,13070,0):ocfs2_mknod:502 ERROR: status = -5 [ 290.847634][T13070] (syz.1.3905,13070,0):ocfs2_mkdir:659 ERROR: status = -5 [ 291.005450][ T4184] ocfs2: Unmounting device (7,1) on (node local) [ 291.088502][T13148] loop4: detected capacity change from 0 to 4096 [ 291.238326][T13148] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 291.409541][T13166] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 291.712118][T13179] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 291.749703][T13182] tmpfs: Bad value for 'mpol' [ 291.839952][T13186] tmpfs: Bad value for 'mpol' [ 291.992195][ T26] audit: type=1400 audit(1761157969.646:15): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=13192 comm="syz.4.3965" [ 292.131244][T13199] netlink: 'syz.4.3967': attribute type 21 has an invalid length. [ 292.168889][T13203] loop3: detected capacity change from 0 to 1024 [ 292.289169][T13203] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 292.423102][T13212] netlink: 'syz.0.3974': attribute type 1 has an invalid length. [ 292.443954][T13162] loop2: detected capacity change from 0 to 32768 [ 292.604283][T13219] syz.0.3976 (13219): attempted to duplicate a private mapping with mremap. This is not supported. [ 292.697497][T13221] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3978'. [ 292.807163][T13225] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 293.028322][T13231] loop3: detected capacity change from 0 to 2048 [ 293.163556][T13238] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 293.174634][T13241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3987'. [ 293.188887][T13231] NILFS error (device loop3): nilfs_check_page: bad entry in directory #12: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 293.301184][T13246] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 293.336386][T13231] Remounting filesystem read-only [ 293.418033][T13243] loop2: detected capacity change from 0 to 4096 [ 293.490261][T13250] xt_recent: hitcount (4294901760) is larger than allowed maximum (255) [ 293.594009][T13243] ntfs: volume version 3.1. [ 293.702075][T13262] loop4: detected capacity change from 0 to 8 [ 293.854001][T13265] device erspan1 entered promiscuous mode [ 294.040324][T13278] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4004'. [ 294.388016][T13294] netlink: 'syz.2.4011': attribute type 21 has an invalid length. [ 294.405069][T13294] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4011'. [ 294.425573][ T5830] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 294.437779][T13294] netlink: 'syz.2.4011': attribute type 6 has an invalid length. [ 294.471811][T13294] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4011'. [ 294.632130][T13308] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.4017'. [ 294.837998][ T5830] usb 1-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e [ 294.865726][ T5830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.899144][T13321] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4023'. [ 294.950263][ T5830] pwc: Logitech/Cisco VT Camera webcam detected. [ 294.968662][T13321] netlink: 'syz.4.4023': attribute type 1 has an invalid length. [ 294.978370][T13321] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4023'. [ 295.082763][T13329] loop2: detected capacity change from 0 to 512 [ 295.120316][T13329] EXT4-fs (loop2): Test dummy encryption mode enabled [ 295.155054][T13329] EXT4-fs (loop2): Test dummy encryption mode enabled [ 295.177735][ T5830] pwc: Failed to set LED on/off time (-71) [ 295.204133][T13325] loop3: detected capacity change from 0 to 4096 [ 295.205641][ T5830] pwc: send_video_command error -71 [ 295.254347][T13329] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,inode_readahead_blks=0x0000000000000100,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000. Quota mode: writeback. [ 295.258202][ T5830] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 295.330645][T13325] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 295.423651][T13342] xt_CT: You must specify a L4 protocol and not use inversions on it [ 295.530879][ T5830] Philips webcam: probe of 1-1:127.0 failed with error -71 [ 295.595265][ T5830] usb 1-1: USB disconnect, device number 15 [ 295.629926][T13329] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 295.677711][T13329] EXT4-fs error (device loop2): ext4_add_entry:2486: inode #2: comm syz.2.4027: Directory hole found for htree leaf block 0 [ 295.744002][T13325] ntfs3: loop3: failed to convert "c46c" to cp1250 [ 295.784699][T13350] loop4: detected capacity change from 0 to 4096 [ 295.827762][T13329] EXT4-fs (loop2): Remounting filesystem read-only [ 295.966250][T13350] ntfs: volume version 3.1. [ 296.690693][T13390] netlink: 'syz.3.4052': attribute type 8 has an invalid length. [ 296.739441][T13396] loop2: detected capacity change from 0 to 64 [ 296.900371][T13393] loop4: detected capacity change from 0 to 4096 [ 297.022925][T13393] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 297.077761][T13393] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 297.158139][T13393] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 297.217258][T13393] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 297.278017][T13393] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 297.368162][T13393] ntfs: volume version 3.1. [ 297.406753][T13393] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 297.422549][T13411] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 297.468156][T13393] ntfs: (device loop4): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 297.537791][T13393] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 297.597840][T13393] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 297.623792][T13378] loop0: detected capacity change from 0 to 32768 [ 297.662224][T13393] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 297.766641][T13378] ialloc: diAlloc returned -5! [ 297.987852][T13422] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4065'. [ 298.073180][T13389] loop1: detected capacity change from 0 to 32768 [ 298.141389][T13389] XFS: attr2 mount option is deprecated. [ 298.239745][T13431] CIFS mount error: No usable UNC path provided in device string! [ 298.239745][T13431] [ 298.372544][T13431] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 298.463272][T13389] XFS (loop1): Mounting V5 Filesystem [ 298.529341][T13445] loop0: detected capacity change from 0 to 64 [ 298.722315][T13389] XFS (loop1): Ending clean mount [ 298.733220][T13389] XFS (loop1): Quotacheck needed: Please wait. [ 298.747933][T13453] netlink: 'syz.3.4076': attribute type 10 has an invalid length. [ 298.973202][T13389] XFS (loop1): Quotacheck: Done. [ 299.131683][T13466] loop3: detected capacity change from 0 to 256 [ 299.176534][ T4184] XFS (loop1): Unmounting Filesystem [ 299.275228][T13466] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 299.560762][T13483] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4093'. [ 299.972657][T13495] loop0: detected capacity change from 0 to 4096 [ 300.074242][T13495] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 300.483074][T13520] netlink: 'syz.1.4110': attribute type 4 has an invalid length. [ 300.531724][T13520] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4110'. [ 300.557839][T12000] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 300.579104][T13525] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4112'. [ 300.722251][T13531] loop1: detected capacity change from 0 to 512 [ 300.805779][T13531] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 300.834537][T13531] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ce01c, mo2=0002] [ 300.849307][T12000] usb 5-1: Using ep0 maxpacket: 16 [ 300.855521][T13531] System zones: 1-12 [ 300.885064][T13531] EXT4-fs (loop1): orphan cleanup on readonly fs [ 300.893923][T13531] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.4114: invalid indirect mapped block 12 (level 1) [ 300.938417][T13531] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.4114: invalid indirect mapped block 2 (level 2) [ 300.957951][ T5830] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 300.968824][T13531] EXT4-fs (loop1): 1 truncate cleaned up [ 300.975925][T13531] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,nobarrier,,,errors=continue. Quota mode: writeback. [ 300.992638][T13538] loop3: detected capacity change from 0 to 4096 [ 301.009013][T12000] usb 5-1: config 254 has an invalid interface number: 235 but max is 0 [ 301.032288][T12000] usb 5-1: config 254 has no interface number 0 [ 301.051338][T12000] usb 5-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 301.081433][T12000] usb 5-1: config 254 interface 235 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 301.102875][T12000] usb 5-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 301.120299][T12000] usb 5-1: config 254 interface 235 has no altsetting 0 [ 301.191950][T13538] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 301.338005][T12000] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 301.387823][ T5830] usb 3-1: config 0 has an invalid interface number: 110 but max is 0 [ 301.398841][T12000] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.408822][ T5830] usb 3-1: config 0 has no interface number 0 [ 301.415344][ T5830] usb 3-1: config 0 interface 110 has no altsetting 0 [ 301.454355][T12000] usb 5-1: Product: syz [ 301.459481][T12000] usb 5-1: Manufacturer: syz [ 301.468862][T12000] usb 5-1: SerialNumber: syz [ 301.518564][T13510] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 301.639712][T13559] loop1: detected capacity change from 0 to 512 [ 301.658121][ T5830] usb 3-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 301.669898][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.693515][ T5830] usb 3-1: Product: syz [ 301.732780][ T5830] usb 3-1: Manufacturer: syz [ 301.740842][T13559] EXT4-fs error (device loop1): ext4_acquire_dquot:6209: comm syz.1.4128: Failed to acquire dquot type 1 [ 301.747993][ T5830] usb 3-1: SerialNumber: syz [ 301.774214][T13510] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 301.793895][ T5830] usb 3-1: config 0 descriptor?? [ 301.834082][T13559] EXT4-fs (loop1): 1 truncate cleaned up [ 301.845903][T12000] usbtest 5-1:254.235: Linux gadget zero [ 301.852729][T12000] usbtest 5-1:254.235: high-speed {control in/out bulk-out int-in} tests (+alt) [ 301.863427][T13559] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,sysvgroups,,errors=continue. Quota mode: writeback. [ 301.886014][T13559] ext4 filesystem being mounted at /827/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.911238][T13559] EXT4-fs error (device loop1): ext4_acquire_dquot:6209: comm syz.1.4128: Failed to acquire dquot type 1 [ 302.025823][T13572] misc userio: The device must be registered before sending interrupts [ 302.067826][ T5830] cdc_subset: probe of 3-1:0.110 failed with error -22 [ 302.132850][T13576] loop0: detected capacity change from 0 to 64 [ 302.144248][T12000] usb 5-1: USB disconnect, device number 20 [ 302.340276][ T1111] usb 3-1: USB disconnect, device number 22 [ 302.796879][T13602] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 302.813375][T13602] Error parsing options; rc = [-22] [ 302.893401][T12000] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 303.175008][T13612] device wlan0 entered promiscuous mode [ 303.201505][T13612] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 303.235775][T13584] loop1: detected capacity change from 0 to 32768 [ 303.306401][T13620] libceph: resolve 'c' (ret=-3): failed [ 303.328356][T13584] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.4139 (13584) [ 303.416985][T13584] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 303.454662][T13584] BTRFS info (device loop1): setting nodatacow, compression disabled [ 303.511059][T12000] usb 1-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 303.538791][T12000] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.539686][T13584] BTRFS info (device loop1): disabling tree log [ 303.568070][T12000] usb 1-1: Product: syz [ 303.578203][T13584] BTRFS info (device loop1): turning on sync discard [ 303.586529][T13584] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 303.593509][T13631] loop2: detected capacity change from 0 to 256 [ 303.604965][T12000] usb 1-1: Manufacturer: syz [ 303.617667][T12000] usb 1-1: SerialNumber: syz [ 303.656911][T12000] usb 1-1: config 0 descriptor?? [ 303.684652][T13584] BTRFS info (device loop1): force zstd compression, level 3 [ 303.701560][T13631] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 303.742683][T13631] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 303.743403][T13584] BTRFS info (device loop1): using free space tree [ 303.805053][T13584] BTRFS info (device loop1): has skinny extents [ 303.825095][T13631] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 303.947879][T12000] usb 1-1: ignoring: not an USB2CAN converter [ 304.112660][T13584] BTRFS info (device loop1): enabling ssd optimizations [ 304.260738][T13665] xt_NFQUEUE: number of total queues is 0 [ 304.287928][T12000] usb 1-1: USB disconnect, device number 16 [ 304.829261][T13684] netlink: 207496 bytes leftover after parsing attributes in process `syz.3.4179'. [ 304.875181][T13688] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4182'. [ 305.222785][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 305.222807][ T26] audit: type=1400 audit(1761157982.866:16): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="#(%#{//(@\)//&@},['%%&\#*" pid=13697 comm="syz.4.4187" [ 305.271500][T13694] loop2: detected capacity change from 0 to 4096 [ 305.389806][T13706] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4190'. [ 305.446528][T13706] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4190'. [ 305.627192][T13708] loop0: detected capacity change from 0 to 1024 [ 305.759495][T13694] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 305.807253][T13708] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 305.816435][T13718] nftables ruleset with unbound chain [ 305.826564][T13694] ntfs3: loop2: Failed to load $Extend. [ 305.867789][T13708] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 305.882199][T13694] ntfs3: loop2: ino=5, "/" directory corrupted [ 305.939125][T13708] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #3: comm syz.0.4191: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 2, max 15(4), depth 0(0) [ 306.047323][T13708] EXT4-fs (loop0): no journal found [ 306.068115][T13708] EXT4-fs (loop0): can't get journal size [ 306.089823][T13708] EXT4-fs (loop0): mounted filesystem without journal. Opts: dax=never,journal_dev=0x0000000000000003,max_dir_size_kb=0x0000000000000005,noblock_validity,noload,data=writeback,,errors=continue. Quota mode: writeback. [ 306.226045][T13733] kAFS: unable to lookup cell ' [ 306.226045][T13733] $)-.ÌײfÍY¹Ç²a×ïÅ2sˆ [ 306.226045][T13733] ' [ 306.226399][T13730] xt_hashlimit: max too large, truncated to 1048576 [ 306.288159][T13730] xt_hashlimit: overflow, rate too high: 0 [ 306.545746][T13746] lo speed is unknown, defaulting to 1000 [ 306.590501][T13753] loop0: detected capacity change from 0 to 256 [ 306.671894][T13757] loop3: detected capacity change from 0 to 256 [ 306.728873][T13759] vivid-000: disconnect [ 306.735748][T13758] vivid-000: reconnect [ 306.758833][T13757] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d) [ 306.771052][T13753] FAT-fs (loop0): Directory bread(block 64) failed [ 306.807797][T13753] FAT-fs (loop0): Directory bread(block 65) failed [ 306.844596][T13753] FAT-fs (loop0): Directory bread(block 66) failed [ 306.908757][T13753] FAT-fs (loop0): Directory bread(block 67) failed [ 306.956985][T13753] FAT-fs (loop0): Directory bread(block 68) failed [ 307.026160][T13768] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4219'. [ 307.077205][T13753] FAT-fs (loop0): Directory bread(block 69) failed [ 307.093164][T13753] FAT-fs (loop0): Directory bread(block 70) failed [ 307.123236][T13753] FAT-fs (loop0): Directory bread(block 71) failed [ 307.134863][T13753] FAT-fs (loop0): Directory bread(block 72) failed [ 307.196046][T13753] FAT-fs (loop0): Directory bread(block 73) failed [ 307.335250][T13779] loop4: detected capacity change from 0 to 128 [ 307.526750][T13779] VFS: Found a Xenix FS (block size = 1024) on device loop4 [ 307.605694][T13789] loop2: detected capacity change from 0 to 512 [ 307.679032][T13789] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 307.723542][T13789] EXT4-fs (loop2): orphan cleanup on readonly fs [ 307.731765][T13789] EXT4-fs warning (device loop2): ext4_enable_quotas:6461: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 307.752801][ T4186] sysv_free_block: flc_count > flc_size [ 307.777376][ T4186] sysv_free_block: flc_count > flc_size [ 307.787400][ T4186] sysv_free_block: flc_count > flc_size [ 307.794053][ T4186] sysv_free_block: flc_count > flc_size [ 307.800078][ T4186] sysv_free_block: flc_count > flc_size [ 307.805896][ T4186] sysv_free_block: flc_count > flc_size [ 307.812971][ T4186] sysv_free_block: flc_count > flc_size [ 307.813829][T13798] netlink: 'syz.0.4234': attribute type 5 has an invalid length. [ 307.819936][ T4186] sysv_free_block: flc_count > flc_size [ 307.834059][ T4186] sysv_free_block: flc_count > flc_size [ 307.840749][ T4186] sysv_free_block: flc_count > flc_size [ 307.854616][ T4186] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 307.859498][T13789] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 307.939971][T13789] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #13: comm syz.2.4231: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 307.979077][T13789] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.4231: couldn't read orphan inode 13 (err -117) [ 308.067194][T13789] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,noblock_validity,min_batch_time=0x000000000000082f,grpquota,debug,debug,grpid,,errors=continue. Quota mode: writeback. [ 308.147739][ T1111] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 308.179634][T13789] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 308.213786][T13789] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 308.220834][T13810] netlink: 'syz.1.4241': attribute type 2 has an invalid length. [ 308.302890][T13789] EXT4-fs warning (device loop2): ext4_enable_quotas:6461: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 308.387725][ T1111] usb 4-1: Using ep0 maxpacket: 16 [ 308.547858][ T1111] usb 4-1: unable to get BOS descriptor or descriptor too short [ 308.640965][ T1111] usb 4-1: config 8 has an invalid interface number: 42 but max is 0 [ 308.662344][ T1111] usb 4-1: config 8 has no interface number 0 [ 308.699531][ T1111] usb 4-1: config 8 interface 42 altsetting 129 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 308.738604][ T1111] usb 4-1: config 8 interface 42 altsetting 129 bulk endpoint 0xB has invalid maxpacket 1023 [ 308.772904][T13832] affs: No valid root block on device nbd1 [ 308.797724][ T1111] usb 4-1: config 8 interface 42 has no altsetting 0 [ 308.859492][T13835] UBIFS error (pid: 13835): cannot open "(null)", error -22 [ 308.940086][T13840] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 308.978032][ T1111] usb 4-1: New USB device found, idVendor=1608, idProduct=020c, bcdDevice=2c.fa [ 308.995149][T13843] loop2: detected capacity change from 0 to 256 [ 309.005820][ T1111] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.022219][T13840] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 309.047645][ T1111] usb 4-1: Product: syz [ 309.057129][ T1111] usb 4-1: Manufacturer: syz [ 309.066020][T13845] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.4257'. [ 309.076404][T13843] exfat: Deprecated parameter 'utf8' [ 309.096080][ T1111] usb 4-1: SerialNumber: syz [ 309.157967][T13800] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 309.404010][T13857] loop2: detected capacity change from 0 to 256 [ 309.458647][ T1111] io_ti 4-1:8.42: required endpoints missing [ 309.484908][T13863] netlink: 'syz.4.4266': attribute type 1 has an invalid length. [ 309.486094][ T1111] usb 4-1: USB disconnect, device number 23 [ 309.503420][T13857] FAT-fs (loop2): Directory bread(block 1285) failed [ 309.549191][T13857] FAT-fs (loop2): Directory bread(block 1285) failed [ 309.578336][T13857] FAT-fs (loop2): Directory bread(block 1285) failed [ 309.618901][T13857] FAT-fs (loop2): Directory bread(block 1285) failed [ 309.639053][T13861] loop0: detected capacity change from 0 to 4096 [ 309.686471][T13861] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 309.899927][T13871] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4270'. [ 309.909084][T12000] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 309.947884][T13871] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4270'. [ 309.956879][T13871] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4270'. [ 309.964923][T13861] ntfs3: loop0: ntfs_sync_inode r=1e failed, -22. [ 309.991387][T13861] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 310.133736][ T5334] ntfs3: loop0: ntfs3_write_inode r=1e failed, -22. [ 310.161372][ T4183] ntfs3: loop0: ntfs_evict_inode r=1e failed, -22. [ 310.168621][T12000] usb 2-1: Using ep0 maxpacket: 16 [ 310.229865][T13879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4274'. [ 310.308142][T12000] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 310.336675][T12000] usb 2-1: config 0 has no interface number 0 [ 310.448578][T13889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4279'. [ 310.548176][T12000] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 310.578097][T12000] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.588213][T12000] usb 2-1: Product: syz [ 310.592436][T12000] usb 2-1: Manufacturer: syz [ 310.597071][T12000] usb 2-1: SerialNumber: syz [ 310.649830][T12000] usb 2-1: config 0 descriptor?? [ 310.700284][T12000] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 310.859242][T13893] loop3: detected capacity change from 0 to 8192 [ 310.935320][T13893] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 310.981962][T13893] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 311.037015][T13893] FAT-fs (loop3): Filesystem has been set read-only [ 311.127812][T12000] gspca_spca1528: reg_w err -71 [ 311.163789][T13873] loop2: detected capacity change from 0 to 32768 [ 311.167744][T12000] spca1528: probe of 2-1:0.1 failed with error -71 [ 311.179472][T12000] usb 2-1: USB disconnect, device number 16 [ 311.186633][ T4185] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 311.238427][T13873] XFS: attr2 mount option is deprecated. [ 311.367803][T13873] XFS (loop2): Mounting V5 Filesystem [ 311.394318][T13920] openvswitch: netlink: Actions may not be safe on all matching packets [ 311.584152][T13873] XFS (loop2): Ending clean mount [ 311.662769][T13873] XFS (loop2): Quotacheck needed: Please wait. [ 311.698719][T13931] loop3: detected capacity change from 0 to 1024 [ 311.778085][T13873] XFS (loop2): Quotacheck: Done. [ 311.971775][ T4182] XFS (loop2): Unmounting Filesystem [ 312.006801][ T5334] hfsplus: b-tree write err: -5, ino 4 [ 312.553013][T13968] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4316'. [ 312.563470][T13972] overlayfs: './file0' not a directory [ 312.672599][T13970] loop1: detected capacity change from 0 to 4096 [ 312.714697][T13974] sctp: [Deprecated]: syz.4.4318 (pid 13974) Use of struct sctp_assoc_value in delayed_ack socket option. [ 312.714697][T13974] Use struct sctp_sack_info instead [ 312.772853][T13970] EXT4-fs (loop1): Test dummy encryption mode enabled [ 312.808899][T13970] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 312.879680][T13970] System zones: 0-5 [ 312.934531][T13970] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 313.428679][T13994] loop4: detected capacity change from 0 to 4096 [ 313.484378][T13994] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 313.977206][T14037] xt_TCPMSS: Only works on TCP SYN packets [ 314.137756][T14049] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4351'. [ 314.321255][T14057] loop1: detected capacity change from 0 to 1024 [ 314.523226][T14059] loop3: detected capacity change from 0 to 4096 [ 314.578269][T14067] 8021q: adding VLAN 0 to HW filter on device bond1 [ 314.661552][T14059] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 314.817704][T14059] ntfs3: loop3: ntfs_sync_inode r=1e failed, -22. [ 314.860452][T14059] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 314.920205][T14080] vxcan1 speed is unknown, defaulting to 1000 [ 314.935653][ T5621] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 314.992628][T14080] vxcan1 speed is unknown, defaulting to 1000 [ 314.999109][ T4273] ntfs3: loop3: ntfs3_write_inode r=1e failed, -22. [ 315.013786][ T4185] ntfs3: loop3: ntfs_evict_inode r=1e failed, -22. [ 315.052832][T14080] vxcan1 speed is unknown, defaulting to 1000 [ 315.307910][ T5621] usb 2-1: config index 0 descriptor too short (expected 3133, got 61) [ 315.329835][ T5621] usb 2-1: config 0 has an invalid interface number: 156 but max is 1 [ 315.346860][T14089] loop4: detected capacity change from 0 to 8 [ 315.386817][ T5621] usb 2-1: config 0 has an invalid descriptor of length 111, skipping remainder of the config [ 315.414408][ T5621] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 315.429927][ T5621] usb 2-1: config 0 has no interface number 0 [ 315.436376][ T5621] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 315.453607][ T5621] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 315.509453][T14080] infiniband syz2: set active [ 315.516092][ T5621] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 315.534515][T14080] infiniband syz2: added vxcan1 [ 315.539946][ T5621] usb 2-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 315.569635][ T5621] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 315.585638][ T5621] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.597220][ T4915] vxcan1 speed is unknown, defaulting to 1000 [ 315.628495][ T5621] usb 2-1: config 0 descriptor?? [ 315.648982][T14080] RDS/IB: syz2: added [ 315.664670][T14031] loop2: detected capacity change from 0 to 65536 [ 315.670439][ T5621] gspca_main: spca561-2.14.0 probing abcd:cdee [ 315.677230][T14080] smc: adding ib device syz2 with port count 1 [ 315.677809][T14080] smc: ib device syz2 port 1 has pnetid [ 315.730590][ T1111] vxcan1 speed is unknown, defaulting to 1000 [ 315.741057][T14080] vxcan1 speed is unknown, defaulting to 1000 [ 315.809951][T14104] loop3: detected capacity change from 0 to 256 [ 315.839063][T14031] XFS (loop2): Mounting V5 Filesystem [ 315.955743][ T5621] spca561: probe of 2-1:0.156 failed with error -22 [ 315.963016][T14031] XFS (loop2): Ending clean mount [ 315.964080][ T5621] usb 2-1: MIDIStreaming interface descriptor not found [ 316.028265][ T5621] usb 2-1: USB disconnect, device number 17 [ 316.192186][T14115] loop4: detected capacity change from 0 to 4096 [ 316.195009][ T4182] XFS (loop2): Unmounting Filesystem [ 316.203129][T14118] netlink: 'syz.3.4381': attribute type 2 has an invalid length. [ 316.241382][T14118] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4381'. [ 316.336345][T14080] vxcan1 speed is unknown, defaulting to 1000 [ 316.378786][T14115] ntfs: volume version 3.1. [ 316.390027][ T7759] udevd[7759]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 316.539452][T14115] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 316.619325][T14115] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 316.641073][T14115] ntfs: (device loop4): ntfs_cluster_alloc(): Failed to map page. [ 316.649311][T14115] ntfs: (device loop4): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -5). [ 316.660726][T14115] ntfs: (device loop4): ntfs_truncate(): Cannot truncate inode 0x43, attribute type 0x80, because the conversion from resident to non-resident attribute failed with error code -5. [ 316.796931][ T4186] ntfs: (device loop4): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 316.865887][T14080] vxcan1 speed is unknown, defaulting to 1000 [ 317.203098][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.209593][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.337112][T14080] vxcan1 speed is unknown, defaulting to 1000 [ 317.621783][T14161] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 317.683550][T14161] overlayfs: missing 'lowerdir' [ 317.819866][T14171] netlink: 'syz.4.4405': attribute type 5 has an invalid length. [ 317.868359][T14171] device ip6erspan0 entered promiscuous mode [ 317.886215][T14080] vxcan1 speed is unknown, defaulting to 1000 [ 318.024746][T14180] loop2: detected capacity change from 0 to 764 [ 318.098820][T14180] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 318.419607][T14200] sock: sock_timestamping_bind_phc: sock not bind to device [ 318.588136][T14208] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4425'. [ 318.615698][T14212] loop1: detected capacity change from 0 to 512 [ 318.803712][T14224] program syz.2.4430 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 318.808371][T14212] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 318.862562][T14212] ext4 filesystem being mounted at /874/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 319.287781][ T1111] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 319.342993][T14253] loop3: detected capacity change from 0 to 256 [ 319.461012][T14253] FAT-fs (loop3): Directory bread(block 64) failed [ 319.486134][T14253] FAT-fs (loop3): Directory bread(block 65) failed [ 319.506298][T14253] FAT-fs (loop3): Directory bread(block 66) failed [ 319.517216][T14253] FAT-fs (loop3): Directory bread(block 67) failed [ 319.534353][T14253] FAT-fs (loop3): Directory bread(block 68) failed [ 319.543657][T14253] FAT-fs (loop3): Directory bread(block 69) failed [ 319.556594][ T1111] usb 5-1: Using ep0 maxpacket: 8 [ 319.580280][T14253] FAT-fs (loop3): Directory bread(block 70) failed [ 319.597998][T14253] FAT-fs (loop3): Directory bread(block 71) failed [ 319.605092][T14253] FAT-fs (loop3): Directory bread(block 72) failed [ 319.626525][T14253] FAT-fs (loop3): Directory bread(block 73) failed [ 319.843170][ T1111] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 319.877980][ T1111] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.916179][ T1111] usb 5-1: Product: syz [ 319.926320][ T1111] usb 5-1: Manufacturer: syz [ 319.956185][ T1111] usb 5-1: SerialNumber: syz [ 319.985989][ T1111] usb 5-1: config 0 descriptor?? [ 320.039868][ T1111] gspca_main: se401-2.14.0 probing 047d:5003 [ 320.197675][T14296] loop0: detected capacity change from 0 to 128 [ 320.262803][T14302] loop3: detected capacity change from 0 to 512 [ 320.416798][T14302] EXT4-fs (loop3): mounted filesystem without journal. Opts: lazytime,,errors=continue. Quota mode: none. [ 320.477894][ T1111] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 320.487771][ T1111] se401: probe of 5-1:0.0 failed with error -71 [ 320.580517][ T1111] usb 5-1: USB disconnect, device number 21 [ 320.820826][T14323] netlink: 'syz.0.4478': attribute type 1 has an invalid length. [ 321.094468][T14337] loop3: detected capacity change from 0 to 512 [ 321.142008][T14341] tmpfs: Bad value for 'mpol' [ 321.317131][T14347] overlayfs: conflicting options: nfs_export=on,index=off [ 321.487079][T14354] loop0: detected capacity change from 0 to 2048 [ 321.597029][T14354] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 321.675097][T14369] netlink: 'syz.4.4500': attribute type 10 has an invalid length. [ 321.768010][T14369] openvswitch: netlink: Flow key attr not present in new flow. [ 321.845141][T14373] netlink: 'syz.1.4503': attribute type 2 has an invalid length. [ 321.875054][T14373] netlink: 'syz.1.4503': attribute type 1 has an invalid length. [ 321.967340][T14377] netlink: 'syz.0.4501': attribute type 27 has an invalid length. [ 322.027163][T14377] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 322.082365][T14380] loop4: detected capacity change from 0 to 256 [ 322.086262][T14381] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4505'. [ 322.233531][T14385] loop0: detected capacity change from 0 to 256 [ 322.252743][T14387] netlink: 'syz.1.4509': attribute type 5 has an invalid length. [ 322.272522][T14366] loop3: detected capacity change from 0 to 32768 [ 322.281540][T14387] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.4509'. [ 322.317682][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 322.387082][T14385] FAT-fs (loop0): Directory bread(block 64) failed [ 322.432309][T14366] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.4498 (14366) [ 322.441080][T14385] FAT-fs (loop0): Directory bread(block 65) failed [ 322.479616][T14385] FAT-fs (loop0): Directory bread(block 66) failed [ 322.486216][T14385] FAT-fs (loop0): Directory bread(block 67) failed [ 322.511651][T14366] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 322.555052][T14366] BTRFS info (device loop3): force zlib compression, level 3 [ 322.588041][T14385] FAT-fs (loop0): Directory bread(block 68) failed [ 322.594354][T14366] BTRFS info (device loop3): force clearing of disk cache [ 322.606941][T14400] comedi comedi0: pcl711: I/O port conflict (0x2,16) [ 322.622248][T14385] FAT-fs (loop0): Directory bread(block 69) failed [ 322.624745][T14366] BTRFS info (device loop3): setting nodatasum [ 322.670206][T14366] BTRFS info (device loop3): allowing degraded mounts [ 322.671344][T14385] FAT-fs (loop0): Directory bread(block 70) failed [ 322.693944][T14366] BTRFS info (device loop3): enabling disk space caching [ 322.717824][T14385] FAT-fs (loop0): Directory bread(block 71) failed [ 322.735948][T14385] FAT-fs (loop0): Directory bread(block 72) failed [ 322.742220][T14366] BTRFS info (device loop3): disk space caching is enabled [ 322.772643][T14366] BTRFS info (device loop3): has skinny extents [ 322.802910][T14385] FAT-fs (loop0): Directory bread(block 73) failed [ 323.003097][T14427] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4522'. [ 323.218784][T14366] BTRFS info (device loop3): clearing free space tree [ 323.229103][T14366] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 323.255884][T14366] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 323.805710][T14464] loop4: detected capacity change from 0 to 4096 [ 323.909765][T14474] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4543'. [ 323.931629][T14467] loop0: detected capacity change from 0 to 4096 [ 323.982642][T14467] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 323.995969][T14477] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 324.180960][T14481] loop1: detected capacity change from 0 to 1024 [ 324.420319][ T9] hfsplus: b-tree write err: -5, ino 4 [ 324.716645][T14507] netlink: 'syz.3.4554': attribute type 5 has an invalid length. [ 324.854928][T14512] dlm: non-version read from control device 4096 [ 324.944984][T14517] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 325.153486][T14530] loop1: detected capacity change from 0 to 256 [ 325.567633][ T4187] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 325.668415][T14570] loop1: detected capacity change from 0 to 1024 [ 325.715346][ T5830] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 325.855920][T14581] loop0: detected capacity change from 0 to 256 [ 325.886349][T14584] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.4595'. [ 325.895846][T14584] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 325.978002][ T4187] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 325.997446][ T4187] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.031110][ T4187] usb 4-1: config 0 descriptor?? [ 326.122967][ T5830] usb 5-1: config index 0 descriptor too short (expected 65207, got 72) [ 326.303391][ T4187] [drm] vendor descriptor length:6 data:06 5f 01 30 30 30 00 00 00 00 00 [ 326.312107][ T5830] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 326.331530][ T4187] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 326.340156][ T5827] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 326.358038][ T5830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.366101][ T5830] usb 5-1: Product: syz [ 326.387619][ T5830] usb 5-1: Manufacturer: syz [ 326.408361][ T5830] usb 5-1: SerialNumber: syz [ 326.490012][ T5830] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 326.528237][ T4187] [drm:udl_init] *ERROR* Selecting channel failed [ 326.614778][ T4187] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 326.633021][ T4187] [drm] Initialized udl on minor 2 [ 326.639021][ T5827] usb 2-1: Using ep0 maxpacket: 8 [ 326.709220][ T4187] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 326.731979][ T4187] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 326.750379][ T4187] usb 4-1: USB disconnect, device number 24 [ 326.761381][T12000] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 326.787884][ T5827] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 326.816600][ T5827] usb 2-1: config 179 has no interface number 0 [ 326.832440][T12000] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 326.852391][ T5827] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 326.867242][T12000] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 326.881792][ T5827] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 326.905850][ T5827] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 326.927993][ T5827] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 326.939090][ T5827] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 326.956654][ T5827] usb 2-1: config 179 interface 65 has no altsetting 0 [ 326.979560][T14621] loop2: detected capacity change from 0 to 4096 [ 326.991294][ T5827] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 327.013456][ T5827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.016659][T14621] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 327.073035][T14623] loop0: detected capacity change from 0 to 1024 [ 327.116538][ T5827] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input21 [ 327.139425][T14621] ntfs3: loop2: Failed to load $Extend. [ 327.168631][ T5830] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 327.292477][ T4918] usb 2-1: USB disconnect, device number 18 [ 327.309506][ T4918] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 327.605492][T14639] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 327.622818][T12000] usb 5-1: USB disconnect, device number 22 [ 327.819078][T14645] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4627'. [ 327.877295][T14645] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4627'. [ 327.880453][ T5621] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 327.893976][T14645] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4627'. [ 328.154720][T14661] No such timeout policy "syz1" [ 328.157835][ T5621] usb 1-1: Using ep0 maxpacket: 8 [ 328.237689][ T5830] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 328.244798][ T5830] ath9k_htc: Failed to initialize the device [ 328.278612][T12000] usb 5-1: ath9k_htc: USB layer deinitialized [ 328.307910][ T5621] usb 1-1: config index 0 descriptor too short (expected 47, got 45) [ 328.326503][ T5621] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 328.367570][ T5621] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 328.401826][ T5621] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 40750, setting to 64 [ 328.418113][T14674] loop4: detected capacity change from 0 to 64 [ 328.617809][ T5621] usb 1-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.7f [ 328.626918][ T5621] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.641102][ T5621] usb 1-1: Product: syz [ 328.657951][ T5621] usb 1-1: Manufacturer: syz [ 328.667901][ T5621] usb 1-1: SerialNumber: syz [ 328.729114][ T5621] usbtouchscreen: probe of 1-1:17.0 failed with error -8 [ 328.770373][T14688] syz.4.4647 (14688): /proc/14686/oom_adj is deprecated, please use /proc/14686/oom_score_adj instead. [ 328.912905][T14683] loop2: detected capacity change from 0 to 4096 [ 328.972076][ T6223] usb 1-1: USB disconnect, device number 17 [ 329.037191][T14683] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 329.202728][T14683] ntfs3: loop2: failed to convert "c46c" to cp850 [ 329.355532][T14696] loop4: detected capacity change from 0 to 8192 [ 329.559640][T14696] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 329.583818][T14696] REISERFS (device loop4): using ordered data mode [ 329.597788][T14696] reiserfs: using flush barriers [ 329.617712][T14696] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 329.665108][T14714] netlink: 332 bytes leftover after parsing attributes in process `syz.2.4661'. [ 329.697844][T14696] REISERFS (device loop4): checking transaction log (loop4) [ 329.706924][T14696] REISERFS (device loop4): Using r5 hash to sort names [ 330.089987][T14736] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4671'. [ 330.404765][T14756] loop1: detected capacity change from 0 to 512 [ 330.477627][T14756] EXT4-fs (loop1): Ignoring removed bh option [ 330.483786][T14756] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 330.560700][T14756] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 330.646378][T14756] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 330.660704][T14756] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 330.699645][T14756] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,bh,noblock_validity,,errors=continue. Quota mode: none. [ 330.793210][T14782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4691'. [ 330.819468][T14782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4691'. [ 330.878215][T14786] netlink: 'syz.4.4692': attribute type 2 has an invalid length. [ 330.889008][T14787] loop2: detected capacity change from 0 to 16 [ 330.926891][T14787] erofs: (device loop2): mounted with root inode @ nid 36. [ 331.302271][ T6223] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 331.406673][T14807] loop3: detected capacity change from 0 to 4096 [ 331.518942][T14807] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 331.557937][ T6223] usb 2-1: Using ep0 maxpacket: 32 [ 331.600421][T14807] ntfs3: loop3: Failed to load $Extend. [ 331.683375][ T6223] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 331.717604][ T6223] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.751783][ T6223] usb 2-1: config 0 descriptor?? [ 331.864256][ T6223] as10x_usb: device has been detected [ 331.879184][ T6223] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 331.920762][T14835] netlink: 'syz.0.4718': attribute type 10 has an invalid length. [ 331.955304][T14835] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4718'. [ 331.978225][T14835] netlink: 'syz.0.4718': attribute type 10 has an invalid length. [ 331.986158][T14835] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4718'. [ 332.024277][ T6223] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 332.086962][T14843] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4722'. [ 332.160797][ T6223] as10x_usb: error during firmware upload part1 [ 332.211681][ T6223] Registered device nBox DVB-T Dongle [ 332.237810][ T6223] usb 2-1: USB disconnect, device number 19 [ 332.342875][ T6223] Unregistered device nBox DVB-T Dongle [ 332.352823][ T6223] as10x_usb: device has been disconnected [ 332.497670][T12000] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 332.873118][T14877] loop4: detected capacity change from 0 to 8192 [ 332.920031][T12000] usb 4-1: config index 0 descriptor too short (expected 29, got 18) [ 332.947729][T12000] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 332.985787][T12000] usb 4-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 333.004760][T12000] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.023747][T14877] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 333.045634][T12000] usb 4-1: config 0 descriptor?? [ 333.048029][T14877] REISERFS (device loop4): using ordered data mode [ 333.057157][T14877] reiserfs: using flush barriers [ 333.116473][T14877] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 333.160647][T14877] REISERFS (device loop4): checking transaction log (loop4) [ 333.202850][T14877] REISERFS (device loop4): Using r5 hash to sort names [ 333.227975][T14877] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 333.337746][T12000] usb 4-1: string descriptor 0 read error: -71 [ 333.355886][T12000] ldusb 4-1:0.0: Interrupt in endpoint not found [ 333.383760][T12000] usb 4-1: USB disconnect, device number 25 [ 333.609047][ T5621] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 333.978030][ T5621] usb 2-1: config 0 has an invalid interface number: 241 but max is 0 [ 334.000209][ T5621] usb 2-1: config 0 has no interface number 0 [ 334.012471][ T5621] usb 2-1: config 0 interface 241 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 334.040339][ T5621] usb 2-1: config 0 interface 241 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 334.111948][T14943] loop3: detected capacity change from 0 to 64 [ 334.135271][T14944] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4771'. [ 334.228003][ T5621] usb 2-1: New USB device found, idVendor=0675, idProduct=1688, bcdDevice=d1.c7 [ 334.246417][ T5621] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.276150][ T5621] usb 2-1: Product: syz [ 334.302813][ T5621] usb 2-1: Manufacturer: syz [ 334.319550][ T5621] usb 2-1: SerialNumber: syz [ 334.335449][ T5621] usb 2-1: config 0 descriptor?? [ 334.358129][T14912] 9pnet: p9_fd_create_tcp (14912): problem connecting socket to 127.0.0.1 [ 334.620158][ T5621] HFC-S_USB: probe of 2-1:0.241 failed with error -5 [ 334.644917][ T5621] usb 2-1: USB disconnect, device number 20 [ 334.674547][T14974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4786'. [ 334.793844][T14982] VFS: could not find a valid V7 on nullb0. [ 334.835701][T14984] qrtr: Invalid version 0 [ 334.880765][ T5830] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 334.921801][T14987] xt_nfacct: accounting object `syz1' does not exist [ 335.147886][ T5830] usb 1-1: Using ep0 maxpacket: 8 [ 335.240784][T14994] loop2: detected capacity change from 0 to 8192 [ 335.295608][ T5830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.353033][T14994] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 335.379562][T14994] REISERFS (device loop2): using ordered data mode [ 335.386169][T14994] reiserfs: using flush barriers [ 335.407953][ T5830] usb 1-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=61.da [ 335.432674][ T5830] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 335.461393][T14994] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 335.479315][ T5830] usb 1-1: Manufacturer: syz [ 335.480364][T14994] REISERFS (device loop2): checking transaction log (loop2) [ 335.499412][T14994] REISERFS (device loop2): Using r5 hash to sort names [ 335.529377][T15017] tmpfs: Bad value for 'mpol' [ 335.538612][ T5830] usb 1-1: config 0 descriptor?? [ 335.579618][ T5830] appledisplay 1-1:0.0: Could not find int-in endpoint [ 335.626028][ T5830] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 335.819884][ T5830] usb 1-1: USB disconnect, device number 18 [ 335.918308][ T4915] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 335.986781][T15035] device veth0_macvtap left promiscuous mode [ 336.011688][T15039] netlink: 'syz.3.4818': attribute type 1 has an invalid length. [ 336.066077][T15039] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.4818'. [ 336.087745][T15039] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4818'. [ 336.177743][ T4915] usb 2-1: Using ep0 maxpacket: 32 [ 336.273216][T15051] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4825'. [ 336.298035][ T4915] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 336.484762][ T4915] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 336.511618][ T4915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.530084][ T4915] usb 2-1: Product: syz [ 336.547981][ T4915] usb 2-1: Manufacturer: syz [ 336.573483][ T4915] usb 2-1: SerialNumber: syz [ 336.595773][ T4915] usb 2-1: config 0 descriptor?? [ 336.663950][ T4915] usb 2-1: bad CDC descriptors [ 336.671029][ T4915] usb 2-1: unsupported MDLM descriptors [ 336.876050][ T4915] usb 2-1: USB disconnect, device number 21 [ 336.894840][T15078] loop0: detected capacity change from 0 to 4096 [ 336.913615][T15087] netlink: 'syz.2.4841': attribute type 6 has an invalid length. [ 336.971419][T15088] device bond3 entered promiscuous mode [ 336.978091][T15088] 8021q: adding VLAN 0 to HW filter on device bond3 [ 337.025935][T15078] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 337.046692][T15078] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 337.105873][T15096] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 337.210395][T15078] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 337.280153][T15078] Remounting filesystem read-only [ 337.351100][T15098] loop3: detected capacity change from 0 to 8192 [ 337.452976][T15098] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 337.500350][T15098] REISERFS (device loop3): using ordered data mode [ 337.507009][T15098] reiserfs: using flush barriers [ 337.574099][T15098] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 337.598733][T15098] REISERFS (device loop3): checking transaction log (loop3) [ 337.879898][T15098] REISERFS (device loop3): Using tea hash to sort names [ 337.918250][T15098] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 338.135314][T15142] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4867'. [ 338.182365][T15146] xt_TCPMSS: Only works on TCP SYN packets [ 338.188474][T15142] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4867'. [ 338.228245][T15142] netlink: 31 bytes leftover after parsing attributes in process `syz.1.4867'. [ 338.266949][T15142] netlink: 'syz.1.4867': attribute type 2 has an invalid length. [ 338.300787][T15142] netlink: 31 bytes leftover after parsing attributes in process `syz.1.4867'. [ 338.578117][ T6223] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 338.648330][T15168] xt_TCPMSS: Only works on TCP SYN packets [ 338.676118][T15160] loop0: detected capacity change from 0 to 8192 [ 338.723902][T15160] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 338.737577][ T4915] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 338.779861][T15160] REISERFS (device loop0): using ordered data mode [ 338.786443][T15160] reiserfs: using flush barriers [ 338.800429][T15175] netlink: 'syz.1.4881': attribute type 10 has an invalid length. [ 338.808819][T15175] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4881'. [ 338.817810][ T6223] usb 3-1: Using ep0 maxpacket: 32 [ 338.818540][T15160] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 338.823790][T15175] device ipvlan1 entered promiscuous mode [ 338.847423][T15175] bridge0: port 3(ipvlan1) entered blocking state [ 338.855592][T15175] bridge0: port 3(ipvlan1) entered disabled state [ 338.869788][T15160] REISERFS (device loop0): checking transaction log (loop0) [ 338.895470][T15175] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 338.947789][ T6223] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 338.965004][T15160] REISERFS (device loop0): Using r5 hash to sort names [ 338.972568][T15160] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 338.972578][ T6223] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 338.997991][ T4915] usb 4-1: Using ep0 maxpacket: 16 [ 339.023681][ T6223] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 339.043987][ T6223] usb 3-1: config 1 has no interface number 0 [ 339.054160][ T6223] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 339.077779][ T6223] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 339.114392][ T6223] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 339.137690][ T4915] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 339.146468][ T4915] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 339.162752][T15181] loop1: detected capacity change from 0 to 512 [ 339.176360][ T6223] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 339.197689][ T4915] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 339.211479][ T6223] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.247153][T15181] EXT4-fs (loop1): Test dummy encryption mode enabled [ 339.272615][ T6223] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 339.288544][T15181] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 339.315468][T15181] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.4886: attempt to clear invalid blocks 2 len 1 [ 339.389143][ T4915] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 339.403176][T15191] loop0: detected capacity change from 0 to 128 [ 339.407693][ T4915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.417894][T15181] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 339.428057][ T4915] usb 4-1: Product: syz [ 339.438344][T15181] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.4886: invalid indirect mapped block 1819239214 (level 0) [ 339.448181][ T4915] usb 4-1: Manufacturer: syz [ 339.462894][T15181] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.4886: invalid indirect mapped block 1819239214 (level 1) [ 339.464850][ T4915] usb 4-1: SerialNumber: syz [ 339.496917][ T6223] snd_usb_pod 3-1:1.1: cannot start listening: -90 [ 339.511226][T15181] EXT4-fs (loop1): 1 truncate cleaned up [ 339.540425][T15181] EXT4-fs (loop1): mounted filesystem without journal. Opts: noinit_itable,init_itable=0x0000000000000007,test_dummy_encryption=v1,minixdf,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 339.540979][ T6223] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 339.569149][T15191] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 339.598834][T15191] ext4 filesystem being mounted at /1000/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 339.637080][T15198] netlink: 'syz.4.4892': attribute type 10 has an invalid length. [ 339.673001][T15191] EXT4-fs warning (device loop0): verify_group_input:147: Cannot add at group 4095 (only 1 groups) [ 339.685759][ T6223] snd_usb_pod: probe of 3-1:1.1 failed with error -90 [ 339.733465][ T6223] usb 3-1: USB disconnect, device number 23 [ 339.756200][T15198] team0: Device veth1_vlan failed to register rx_handler [ 339.967830][ T4915] usb 4-1: 0:2 : does not exist [ 340.191314][ T4915] usb 4-1: USB disconnect, device number 26 [ 340.595855][T15230] device batadv0 entered promiscuous mode [ 340.714771][T15200] loop1: detected capacity change from 0 to 32768 [ 340.857572][ T5830] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 340.887163][T15238] loop4: detected capacity change from 0 to 4096 [ 340.916446][T15200] XFS (loop1): Mounting V5 Filesystem [ 341.025087][T15238] ntfs: volume version 3.1. [ 341.147627][ T5830] usb 3-1: Using ep0 maxpacket: 16 [ 341.208502][T15200] XFS (loop1): Ending clean mount [ 341.230039][T15200] XFS (loop1): Quotacheck needed: Please wait. [ 341.307969][ T5830] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 341.386931][T15200] XFS (loop1): Quotacheck: Done. [ 341.518829][T15269] loop3: detected capacity change from 0 to 256 [ 341.546729][T15271] ieee802154 phy0 wpan0: encryption failed: -22 [ 341.557432][ T5830] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 341.568900][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.576946][ T5830] usb 3-1: Product: syz [ 341.625883][ T4184] XFS (loop1): Unmounting Filesystem [ 341.656507][ T5830] usb 3-1: Manufacturer: syz [ 341.686011][ T5830] usb 3-1: SerialNumber: syz [ 341.718632][ T5830] usb 3-1: config 0 descriptor?? [ 341.788428][ T5830] hub 3-1:0.0: bad descriptor, ignoring hub [ 341.804636][ T5830] hub: probe of 3-1:0.0 failed with error -5 [ 341.827426][ T5830] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input24 [ 342.082469][ T4915] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 342.154684][T15293] loop4: detected capacity change from 0 to 164 [ 342.263527][T15293] iso9660: Corrupted directory entry in block 0 of inode 1920 [ 342.482974][ T4915] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 342.500461][T15304] loop4: detected capacity change from 0 to 256 [ 342.518277][ T4915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 342.542770][ T4915] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 342.570540][ T4915] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 342.585566][ T4915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.604933][ T4915] usb 1-1: config 0 descriptor?? [ 342.881279][ T4250] usb 1-1: USB disconnect, device number 19 [ 342.977971][ T4915] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 343.030124][T15325] device ~ÿ entered promiscuous mode [ 343.286999][T15340] netlink: 'syz.4.4957': attribute type 32 has an invalid length. [ 343.347883][ T4915] usb 4-1: config 0 has an invalid interface number: 84 but max is 0 [ 343.356430][ T4915] usb 4-1: config 0 has no interface number 0 [ 343.524915][T15355] loop0: detected capacity change from 0 to 64 [ 343.540568][T15354] kAFS: Can only specify source 'none' with -o dyn [ 343.558187][ T4915] usb 4-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 343.567388][ T4915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.580305][ T4915] usb 4-1: Product: syz [ 343.585118][ T4915] usb 4-1: Manufacturer: syz [ 343.590356][ T4915] usb 4-1: SerialNumber: syz [ 343.597379][ T4915] usb 4-1: config 0 descriptor?? [ 343.700548][T15365] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4972'. [ 343.794822][T15369] device vlan0 entered promiscuous mode [ 343.905187][ T5827] usb 4-1: USB disconnect, device number 27 [ 343.918858][T15368] loop0: detected capacity change from 0 to 4096 [ 343.993664][T15368] ntfs3: loop0: ino=3, Correct links count -> 2. [ 344.111092][T15368] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 344.414759][T15393] device vti0 entered promiscuous mode [ 344.441971][T15396] loop2: detected capacity change from 0 to 2048 [ 344.592778][T15396] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,errors=remount-ro,. Quota mode: none. [ 344.728552][T15396] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:163: inode #12: comm syz.2.4986: inline data xattr refers to an external xattr inode [ 344.810706][T15396] EXT4-fs (loop2): Remounting filesystem read-only [ 344.957712][ T5827] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 345.536571][T15450] loop2: detected capacity change from 0 to 8 [ 345.570260][T15448] loop0: detected capacity change from 0 to 4096 [ 345.598920][ T5827] usb 2-1: config 0 has an invalid interface number: 113 but max is 0 [ 345.616515][T15448] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 345.637547][ T5827] usb 2-1: config 0 has no interface number 0 [ 345.666197][ T5827] usb 2-1: config 0 interface 113 altsetting 2 has an invalid endpoint with address 0x14, skipping [ 345.702147][ T26] audit: type=1800 audit(1761158279.357:17): pid=15450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5011" name="file0" dev="loop2" ino=1 res=0 errno=0 [ 345.704236][ T5827] usb 2-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 345.777442][ T5827] usb 2-1: config 0 interface 113 has no altsetting 0 [ 345.798583][T15450] syz.2.5011 (15450) used greatest stack depth: 19944 bytes left [ 345.999072][ T5827] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 346.014903][ T5827] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.033906][ T5827] usb 2-1: Product: syz [ 346.044028][ T5827] usb 2-1: Manufacturer: syz [ 346.054185][ T5827] usb 2-1: SerialNumber: syz [ 346.071885][ T5827] usb 2-1: config 0 descriptor?? [ 346.078633][T15466] loop4: detected capacity change from 0 to 128 [ 346.110225][ T5827] pn533_usb 2-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 346.147571][T15466] affs: Error parsing options [ 346.381706][ T5827] usb 2-1: USB disconnect, device number 22 [ 346.576725][T15480] loop4: detected capacity change from 0 to 256 [ 346.601397][T15483] netlink: 'syz.3.5028': attribute type 3 has an invalid length. [ 346.602610][T15484] loop0: detected capacity change from 0 to 256 [ 346.626804][ T5830] usb 3-1: USB disconnect, device number 24 [ 346.674193][T15486] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 346.980554][T15494] loop4: detected capacity change from 0 to 64 [ 347.074917][T15494] Trying to free block not in datazone [ 347.302142][T15518] netlink: 'syz.0.5045': attribute type 1 has an invalid length. [ 347.330501][T15518] netlink: 212908 bytes leftover after parsing attributes in process `syz.0.5045'. [ 347.457742][ T6223] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 347.590047][T15530] loop0: detected capacity change from 0 to 4096 [ 347.697729][ T6223] usb 3-1: Using ep0 maxpacket: 16 [ 347.779680][T15540] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 347.781402][T15530] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 347.790732][ T5830] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 347.818054][ T6223] usb 3-1: config 0 has no interfaces? [ 347.883006][T15530] NILFS (loop0): mounting fs with errors [ 347.954220][T15548] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20002 [ 347.985882][ T6223] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 347.997130][ T6223] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.017735][ T6223] usb 3-1: Product: syz [ 348.021968][ T6223] usb 3-1: Manufacturer: syz [ 348.039250][ T6223] usb 3-1: SerialNumber: syz [ 348.051172][ T6223] r8152-cfgselector 3-1: config 0 descriptor?? [ 348.358098][ T6223] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 348.388037][ T5830] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 348.407626][ T5827] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 348.415615][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.433987][ T5830] usb 2-1: Product: syz [ 348.439512][ T5830] usb 2-1: Manufacturer: syz [ 348.444328][ T5830] usb 2-1: SerialNumber: syz [ 348.463098][ T5830] usb 2-1: config 0 descriptor?? [ 348.568936][ T6223] usb 3-1: USB disconnect, device number 25 [ 348.607698][ T4915] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 348.711489][ T5830] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 348.830736][T15576] xt_CT: No such helper "snmp_trap" [ 348.857655][ T4915] usb 4-1: Using ep0 maxpacket: 32 [ 348.895721][T15581] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5074'. [ 348.905573][T15581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5074'. [ 348.956207][T15583] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 349.067967][ T4915] usb 4-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 349.083982][T15589] loop0: detected capacity change from 0 to 1024 [ 349.099520][ T4915] usb 4-1: New USB device strings: Mfr=0, Product=3, SerialNumber=0 [ 349.119325][ T4915] usb 4-1: Product: syz [ 349.146458][ T4915] usb 4-1: config 0 descriptor?? [ 349.157810][ T5830] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 349.165000][ T5830] sq905c 2-1:0.0: Reading version command failed [ 349.187699][ T5827] usb 5-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice=40.bf [ 349.200295][ T5827] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.226436][ T5830] sq905c: probe of 2-1:0.0 failed with error -71 [ 349.233669][ T4281] hfsplus: b-tree write err: -5, ino 4 [ 349.245337][ T5827] usb 5-1: Product: syz [ 349.250211][ T5830] usb 2-1: USB disconnect, device number 23 [ 349.264291][ T5827] usb 5-1: Manufacturer: syz [ 349.272260][ T5827] usb 5-1: SerialNumber: syz [ 349.305944][ T5827] usb 5-1: config 0 descriptor?? [ 349.354578][ T5827] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input26 [ 349.418853][ T4915] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input25 [ 349.535584][T15605] netlink: 'syz.2.5086': attribute type 13 has an invalid length. [ 349.567818][ T3546] bcm5974 5-1:0.0: could not read from device [ 349.579123][ T5827] usb 5-1: USB disconnect, device number 23 [ 349.591897][ T3546] bcm5974 5-1:0.0: could not read from device [ 349.637951][ T4915] usb 4-1: USB disconnect, device number 28 [ 349.903261][ T5830] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 350.198012][ T5830] usb 1-1: Using ep0 maxpacket: 16 [ 350.322405][ T5830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 350.499243][T15611] loop2: detected capacity change from 0 to 40427 [ 350.547999][ T5830] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 350.552954][T15611] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 350.581069][T15611] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 350.581883][ T5830] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.616379][T15611] F2FS-fs (loop2): invalid crc value [ 350.658618][ T5830] usb 1-1: Product: syz [ 350.660592][T15611] F2FS-fs (loop2): Found nat_bits in checkpoint [ 350.676585][ T5830] usb 1-1: Manufacturer: syz [ 350.691827][ T5830] usb 1-1: SerialNumber: syz [ 350.720832][ T5830] usb 1-1: config 0 descriptor?? [ 350.732382][T15635] infiniband syz1: set active [ 350.738648][T15635] infiniband syz1: added bond0 [ 350.758465][ T5830] hub 1-1:0.0: bad descriptor, ignoring hub [ 350.775468][ T5830] hub: probe of 1-1:0.0 failed with error -5 [ 350.801301][ T5830] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input27 [ 350.815273][T15635] RDS/IB: syz1: added [ 350.822907][T15635] smc: adding ib device syz1 with port count 1 [ 350.829868][T15635] smc: ib device syz1 port 1 has pnetid [ 350.969361][T15611] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 351.039339][T15611] F2FS-fs (loop2): Start checkpoint disabled! [ 351.090154][T15611] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 351.115442][T15611] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 351.152849][T15659] IPv6: NLM_F_REPLACE set, but no existing node found! [ 351.318454][ T7] usb 1-1: USB disconnect, device number 20 [ 351.677733][T15673] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5118'. [ 351.806505][T15679] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.5120'. [ 352.100516][T15690] loop2: detected capacity change from 0 to 256 [ 352.219892][T15690] FAT-fs (loop2): Directory bread(block 64) failed [ 352.238404][T15690] FAT-fs (loop2): Directory bread(block 65) failed [ 352.259831][T15690] FAT-fs (loop2): Directory bread(block 66) failed [ 352.268590][T15690] FAT-fs (loop2): Directory bread(block 67) failed [ 352.275964][T15690] FAT-fs (loop2): Directory bread(block 68) failed [ 352.283265][T15690] FAT-fs (loop2): Directory bread(block 69) failed [ 352.290439][T15690] FAT-fs (loop2): Directory bread(block 70) failed [ 352.298268][T15690] FAT-fs (loop2): Directory bread(block 71) failed [ 352.305464][T15690] FAT-fs (loop2): Directory bread(block 72) failed [ 352.335764][T15690] FAT-fs (loop2): Directory bread(block 73) failed [ 352.451220][T15695] loop3: detected capacity change from 0 to 4096 [ 352.591130][T15702] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 352.718054][T15695] NILFS error (device loop3): nilfs_dotdot: directory #12 missing '.' [ 352.826477][T15695] Remounting filesystem read-only [ 352.955146][T15714] netlink: set zone limit has 8 unknown bytes [ 353.074232][ T264] block nbd3: Attempted send on invalid socket [ 353.080638][ T264] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 353.108821][T15717] hpfs: hpfs_map_sector(): read error [ 353.358712][T15740] loop3: detected capacity change from 0 to 64 [ 353.361422][T15739] netlink: 'syz.4.5148': attribute type 3 has an invalid length. [ 353.412228][T15733] loop1: detected capacity change from 0 to 4096 [ 353.627403][T15733] ntfs: volume version 3.1. [ 353.978321][T15769] netlink: 'syz.0.5161': attribute type 7 has an invalid length. [ 354.106916][T15778] loop2: detected capacity change from 0 to 1024 [ 354.218111][T15786] loop0: detected capacity change from 0 to 256 [ 354.639275][T15811] ieee802154 phy0 wpan0: encryption failed: -22 [ 354.802525][T15822] program syz.2.5183 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 354.997780][ T5827] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 355.071168][T15830] ipt_CLUSTERIP: bad num_local_nodes 18 [ 355.119964][T15833] loop4: detected capacity change from 0 to 8 [ 355.277769][T15833] SQUASHFS error: lzo decompression failed, data probably corrupt [ 355.287740][ T5827] usb 2-1: Using ep0 maxpacket: 16 [ 355.306389][T15833] SQUASHFS error: Failed to read block 0x1c0: -5 [ 355.329108][T15844] loop0: detected capacity change from 0 to 1764 [ 355.337949][T15833] SQUASHFS error: Unable to read metadata cache entry [1be] [ 355.437980][ T5827] usb 2-1: config 0 has an invalid interface number: 36 but max is 0 [ 355.464604][ T5827] usb 2-1: config 0 has no interface number 0 [ 355.658031][ T5827] usb 2-1: New USB device found, idVendor=0af0, idProduct=d157, bcdDevice=51.ca [ 355.687995][ T5827] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.696061][ T5827] usb 2-1: Product: syz [ 355.701477][T15854] loop3: detected capacity change from 0 to 4096 [ 355.755588][T15866] netdevsim netdevsim4: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 355.770447][ T5827] usb 2-1: Manufacturer: syz [ 355.775115][ T5827] usb 2-1: SerialNumber: syz [ 355.790357][T15871] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 355.822211][ T5827] usb 2-1: config 0 descriptor?? [ 356.048208][T15876] netlink: 'syz.2.5204': attribute type 1 has an invalid length. [ 356.118560][ T5827] hso 2-1:0.36: Not our interface [ 356.131050][ T5827] usb 2-1: USB disconnect, device number 24 [ 356.198469][T15884] netlink: 22 bytes leftover after parsing attributes in process `syz.0.5206'. [ 356.532179][T15897] loop3: detected capacity change from 0 to 8 [ 356.577892][ T4686] udevd[4686]: incorrect cramfs checksum on /dev/loop3 [ 356.592281][T15897] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 356.697407][T15897] cramfs: Error -3 while decompressing! [ 356.748383][T15897] cramfs: ffffffff961f00a8(26)->ffff888053fe5000(4096) [ 356.755173][T15912] (unnamed net_device) (uninitialized): ARP monitoring cannot be used with MII monitoring [ 356.803136][ T4176] udevd[4176]: incorrect cramfs checksum on /dev/loop3 [ 356.810614][T15897] cramfs: Error -3 while decompressing! [ 356.846211][T15897] cramfs: ffffffff961f00c2(26)->ffff888052f7c000(4096) [ 356.905685][ T4176] udevd[4176]: incorrect cramfs checksum on /dev/loop3 [ 356.923920][T15897] cramfs: Error -3 while decompressing! [ 356.989926][T15897] cramfs: ffffffff961f00dc(16)->ffff888055e43000(4096) [ 357.038290][T15897] cramfs: Error -3 while decompressing! [ 357.069799][T15897] cramfs: ffffffff961f00a8(26)->ffff888053fe5000(4096) [ 357.444025][T15948] autofs4:pid:15948:autofs_fill_super: called with bogus options [ 357.481985][T15951] loop1: detected capacity change from 0 to 1024 [ 357.697838][T12000] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 357.698162][T15961] [ 357.707808][T15961] ====================================================== [ 357.714843][T15961] WARNING: possible circular locking dependency detected [ 357.721896][T15961] syzkaller #0 Not tainted [ 357.726332][T15961] ------------------------------------------------------ [ 357.733371][T15961] syz.3.5238/15961 is trying to acquire lock: [ 357.739461][T15961] ffff888079ce4b98 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: __flush_work+0xc1/0x1b0 [ 357.749948][T15961] [ 357.749948][T15961] but task is already holding lock: [ 357.757336][T15961] ffff888079ce4ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1030 [ 357.766712][T15961] [ 357.766712][T15961] which lock already depends on the new lock. [ 357.766712][T15961] [ 357.777140][T15961] [ 357.777140][T15961] the existing dependency chain (in reverse order) is: [ 357.779265][T15969] loop0: detected capacity change from 0 to 256 [ 357.786177][T15961] [ 357.786177][T15961] -> #3 (&hdev->req_lock){+.+.}-{3:3}: [ 357.786214][T15961] __mutex_lock_common+0x1eb/0x2390 [ 357.809465][T15961] mutex_lock_nested+0x17/0x20 [ 357.814798][T15961] hci_dev_do_close+0x5f/0x1030 [ 357.820209][T15961] hci_rfkill_set_block+0x10a/0x190 [ 357.825987][T15961] rfkill_set_block+0x1c6/0x420 [ 357.831400][T15961] rfkill_fop_write+0x458/0x560 [ 357.836812][T15961] vfs_write+0x300/0xd00 [ 357.841614][T15961] ksys_write+0x14d/0x250 [ 357.846506][T15961] do_syscall_64+0x4c/0xa0 [ 357.851481][T15961] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 357.857937][T15961] [ 357.857937][T15961] -> #2 (rfkill_global_mutex){+.+.}-{3:3}: [ 357.865970][T15961] __mutex_lock_common+0x1eb/0x2390 [ 357.871730][T15961] mutex_lock_nested+0x17/0x20 [ 357.877051][T15961] rfkill_register+0x33/0x8a0 [ 357.882294][T15961] hci_register_dev+0x452/0x970 [ 357.887709][T15961] vhci_create_device+0x32c/0x5c0 [ 357.893291][T15961] vhci_write+0x391/0x450 [ 357.898178][T15961] vfs_write+0x712/0xd00 [ 357.902969][T15961] ksys_write+0x14d/0x250 [ 357.907859][T15961] do_syscall_64+0x4c/0xa0 [ 357.912828][T15961] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 357.919305][T15961] [ 357.919305][T15961] -> #1 (&data->open_mutex){+.+.}-{3:3}: [ 357.927159][T15961] __mutex_lock_common+0x1eb/0x2390 [ 357.932921][T15961] mutex_lock_nested+0x17/0x20 [ 357.938253][T15961] vhci_send_frame+0x88/0x100 [ 357.943505][T15961] hci_send_frame+0x1a9/0x2e0 [ 357.948754][T15961] hci_tx_work+0x9f9/0x1710 [ 357.953813][T15961] process_one_work+0x863/0x1000 [ 357.959308][T15961] worker_thread+0xaa8/0x12a0 [ 357.964539][T15961] kthread+0x436/0x520 [ 357.969155][T15961] ret_from_fork+0x1f/0x30 [ 357.974130][T15961] [ 357.974130][T15961] -> #0 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 357.983381][T15961] __lock_acquire+0x2c33/0x7c60 [ 357.988795][T15961] lock_acquire+0x197/0x3f0 [ 357.993857][T15961] __flush_work+0xdd/0x1b0 [ 357.998834][T15961] hci_dev_do_close+0x1e7/0x1030 [ 358.004340][T15961] hci_rfkill_set_block+0x10a/0x190 [ 358.010093][T15961] rfkill_set_block+0x1c6/0x420 [ 358.015506][T15961] rfkill_fop_write+0x458/0x560 [ 358.020928][T15961] vfs_write+0x300/0xd00 [ 358.025730][T15961] ksys_write+0x14d/0x250 [ 358.030612][T15961] do_syscall_64+0x4c/0xa0 [ 358.035579][T15961] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 358.042033][T15961] [ 358.042033][T15961] other info that might help us debug this: [ 358.042033][T15961] [ 358.052296][T15961] Chain exists of: [ 358.052296][T15961] (work_completion)(&hdev->tx_work) --> rfkill_global_mutex --> &hdev->req_lock [ 358.052296][T15961] [ 358.067295][T15961] Possible unsafe locking scenario: [ 358.067295][T15961] [ 358.074773][T15961] CPU0 CPU1 [ 358.080164][T15961] ---- ---- [ 358.085550][T15961] lock(&hdev->req_lock); [ 358.090003][T15961] lock(rfkill_global_mutex); [ 358.097317][T15961] lock(&hdev->req_lock); [ 358.104294][T15961] lock((work_completion)(&hdev->tx_work)); [ 358.110311][T15961] [ 358.110311][T15961] *** DEADLOCK *** [ 358.110311][T15961] [ 358.118480][T15961] 2 locks held by syz.3.5238/15961: [ 358.123708][T15961] #0: ffffffff8d4c0c68 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x19e/0x560 [ 358.133959][T15961] #1: ffff888079ce4ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1030 [ 358.143763][T15961] [ 358.143763][T15961] stack backtrace: [ 358.149681][T15961] CPU: 1 PID: 15961 Comm: syz.3.5238 Not tainted syzkaller #0 [ 358.157174][T15961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 358.167289][T15961] Call Trace: [ 358.170607][T15961] [ 358.173713][T15961] dump_stack_lvl+0x168/0x230 [ 358.178438][T15961] ? load_image+0x3b0/0x3b0 [ 358.182995][T15961] ? show_regs_print_info+0x20/0x20 [ 358.188249][T15961] ? print_circular_bug+0x12b/0x1a0 [ 358.193480][T15961] check_noncircular+0x274/0x310 [ 358.198452][T15961] ? add_chain_block+0x940/0x940 [ 358.203421][T15961] ? lockdep_lock+0xdc/0x1e0 [ 358.208050][T15961] ? mark_lock+0x94/0x320 [ 358.212414][T15961] __lock_acquire+0x2c33/0x7c60 [ 358.217304][T15961] ? lockdep_unlock+0x134/0x2d0 [ 358.222191][T15961] ? lockdep_lock+0x1e0/0x1e0 [ 358.226913][T15961] ? mark_lock+0x94/0x320 [ 358.231282][T15961] ? verify_lock_unused+0x140/0x140 [ 358.236652][T15961] ? __lock_acquire+0x12d9/0x7c60 [ 358.241727][T15961] lock_acquire+0x197/0x3f0 [ 358.246265][T15961] ? __flush_work+0xc1/0x1b0 [ 358.250888][T15961] ? __mutex_trylock_common+0x14f/0x250 [ 358.256473][T15961] ? read_lock_is_recursive+0x10/0x10 [ 358.262088][T15961] __flush_work+0xdd/0x1b0 [ 358.266540][T15961] ? __flush_work+0xc1/0x1b0 [ 358.271165][T15961] ? flush_work+0x20/0x20 [ 358.275535][T15961] ? hci_leds_update_powered+0x148/0x160 [ 358.281301][T15961] ? rcu_lock_release+0x5/0x20 [ 358.286106][T15961] ? __lock_acquire+0x7c60/0x7c60 [ 358.291184][T15961] hci_dev_do_close+0x1e7/0x1030 [ 358.296166][T15961] ? _raw_spin_unlock+0x40/0x40 [ 358.301057][T15961] hci_rfkill_set_block+0x10a/0x190 [ 358.306308][T15961] ? rcu_lock_release+0x20/0x20 [ 358.311201][T15961] rfkill_set_block+0x1c6/0x420 [ 358.316096][T15961] rfkill_fop_write+0x458/0x560 [ 358.321010][T15961] ? rfkill_fop_read+0x4b0/0x4b0 [ 358.325987][T15961] ? common_file_perm+0x90/0x1c0 [ 358.330964][T15961] ? fsnotify_perm+0x5d/0x560 [ 358.335685][T15961] ? security_file_permission+0x75/0xa0 [ 358.341271][T15961] ? rfkill_fop_read+0x4b0/0x4b0 [ 358.346257][T15961] vfs_write+0x300/0xd00 [ 358.350560][T15961] ? file_end_write+0x250/0x250 [ 358.355462][T15961] ? __fget_files+0x40f/0x480 [ 358.360184][T15961] ? __fdget_pos+0x1e2/0x370 [ 358.364810][T15961] ? ksys_write+0x71/0x250 [ 358.369261][T15961] ksys_write+0x14d/0x250 [ 358.373635][T15961] ? __ia32_sys_read+0x80/0x80 [ 358.378436][T15961] ? lockdep_hardirqs_on+0x94/0x140 [ 358.383674][T15961] do_syscall_64+0x4c/0xa0 [ 358.388121][T15961] ? clear_bhb_loop+0x30/0x80 [ 358.392833][T15961] ? clear_bhb_loop+0x30/0x80 [ 358.397548][T15961] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 358.404279][T15961] RIP: 0033:0x7f8844258fc9 [ 358.409511][T15961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.430468][T15961] RSP: 002b:00007f88424c0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 358.439482][T15961] RAX: ffffffffffffffda RBX: 00007f88444affa0 RCX: 00007f8844258fc9 [ 358.448029][T15961] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 358.456158][T15961] RBP: 00007f88442dbf91 R08: 0000000000000000 R09: 0000000000000000 [ 358.464176][T15961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 358.472228][T15961] R13: 00007f88444b0038 R14: 00007f88444affa0 R15: 00007fff22915df8 [ 358.480254][T15961] [ 358.495172][T12000] usb 5-1: unable to get BOS descriptor or descriptor too short [ 358.583364][T15969] FAT-fs (loop0): Directory bread(block 64) failed [ 358.601518][T16009] loop1: detected capacity change from 0 to 256 [ 358.605822][T15969] FAT-fs (loop0): Directory bread(block 65) failed [ 358.617794][T12000] usb 5-1: config 1 has an invalid interface number: 91 but max is 0 [ 358.626092][T12000] usb 5-1: config 1 has no interface number 0 [ 358.636308][T12000] usb 5-1: config 1 interface 91 has no altsetting 0 [ 358.641515][T15969] FAT-fs (loop0): Directory bread(block 66) failed [ 358.669222][T15969] FAT-fs (loop0): Directory bread(block 67) failed [ 358.675940][T15969] FAT-fs (loop0): Directory bread(block 68) failed [ 358.696456][T15969] FAT-fs (loop0): Directory bread(block 69) failed [ 358.723572][T16009] FAT-fs (loop1): Directory bread(block 64) failed [ 358.741551][T15969] FAT-fs (loop0): Directory bread(block 70) failed [ 358.749264][T16009] FAT-fs (loop1): Directory bread(block 65) failed [ 358.777793][T15969] FAT-fs (loop0): Directory bread(block 71) failed [ 358.785725][T16009] FAT-fs (loop1): Directory bread(block 66) failed [ 358.813312][T16009] FAT-fs (loop1): Directory bread(block 67) failed [ 358.820583][T12000] usb 5-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=15.18 [ 358.834625][T15969] FAT-fs (loop0): Directory bread(block 72) failed [ 358.844372][T12000] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.854415][T16009] FAT-fs (loop1): Directory bread(block 68) failed [ 358.861233][T15969] FAT-fs (loop0): Directory bread(block 73) failed [ 358.869224][T12000] usb 5-1: Product: syz [ 358.873565][T16009] FAT-fs (loop1): Directory bread(block 69) failed [ 358.891034][T12000] usb 5-1: Manufacturer: syz [ 358.908416][T12000] usb 5-1: SerialNumber: syz [ 358.913630][T16009] FAT-fs (loop1): Directory bread(block 70) failed [ 358.950695][T16009] FAT-fs (loop1): Directory bread(block 71) failed [ 358.965233][T16009] FAT-fs (loop1): Directory bread(block 72) failed [ 358.982423][T16009] FAT-fs (loop1): Directory bread(block 73) failed [ 358.990306][T12000] kl5kusb105 5-1:1.91: KL5KUSB105D / PalmConnect converter detected [ 359.006977][T12000] usb 5-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 359.199718][ T4915] usb 5-1: USB disconnect, device number 24 [ 359.207103][ T4915] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 359.219612][ T4915] kl5kusb105 5-1:1.91: device disconnected