last executing test programs: 2.776590383s ago: executing program 0 (id=13753): r0 = syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x13f) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000c00)) 2.609562928s ago: executing program 0 (id=13757): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[{0x10, 0x108, 0x5}, {0x10, 0x84, 0x1}], 0x20}, 0x40005) 2.453467984s ago: executing program 0 (id=13760): r0 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000040)={'bond0\x00', @ifru_names='veth1_vlan\x00'}) 2.391570345s ago: executing program 4 (id=13761): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2713, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 2.287957739s ago: executing program 0 (id=13763): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000010640)={'tunl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x3a, 0x5, 0x0, 0x5, 0x7, 0x0, 0x3, 0xfc, 0x0, 0xfc, 0x3, 0xfffffbfc, 0x4, 0xff, 0x0, 0x45, [0x2, 0x2]}}) 2.271190759s ago: executing program 4 (id=13764): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)={0x44, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x6, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xd}]}]}, 0x44}}, 0x0) 2.139077053s ago: executing program 0 (id=13766): syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff"], 0x0) io_submit(0x0, 0x0, 0x0) 2.053507776s ago: executing program 4 (id=13769): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000000)='./file0\x00', 0x180c850, &(0x7f0000000140)=ANY=[@ANYBLOB="636865636b3d7374726963742c73686f72746e616d653d77696e6e742c6e6f6e756d7461696c3d302c756e695f786c6174653d312c73686f72746e616d653d6c6f7765722c726f6469722c696f636861727365743d6d61636963656c616e642c73686f72746e616d653d77696e39352c6572726f72733d72656d6f756e742d726f2c636f6465706167653d3836332c726f6469722c757466383d302c73686f72746e616d653d77696e6e742c0062d6fd2a89e2aca5ccf6f29530d9b6c21d6649d162c50ed9b7138bdcd549ab6b69d0559b7227a5cb9711a3f072f63f72ac3620d96b0b8bd39edf6868223732981b1004a8139d5c768e33f8fa65cf12d619a373d748bdeb144ce2224f19fc053dc7075d53fc0d22500c479b9dbd94035c9f2dcfc6731caeb45f63c87dff51a54ed7fb05d253390e84c7f6699a268861ff1cdbc08954624090b95d9d6059f3c973acef3482c102f1ba79f3d0e2a7391f5daef89a118259c981cc5b93e835b06322885476c91fc39c56aa497b"], 0x1, 0x371, &(0x7f0000002980)="$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") chdir(&(0x7f00000002c0)='./file1\x00') 1.409853526s ago: executing program 4 (id=13776): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000070900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800a0001006c696d69740000001c0002800c000240000000fa000000030c00014000000000000001"], 0xe8}}, 0x0) 1.042315417s ago: executing program 4 (id=13783): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000005d40)={0x5, 0x7fff, 0xfffff800, 0x8, 0x1, "816ae8db66173adf4bd440c7fc9b1cbb340fe9", 0x4, 0x7}) 915.854621ms ago: executing program 4 (id=13786): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001030000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 873.927583ms ago: executing program 3 (id=13788): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000007600090702000000ffffffff07020000", @ANYRES32=0x0, @ANYBLOB='\f\x00\x00'], 0x24}, 0x1, 0x5502000000000000}, 0x4000) 747.856037ms ago: executing program 3 (id=13790): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x38, 0x0, &(0x7f0000000240)) 573.051632ms ago: executing program 3 (id=13793): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000400)='./file1\x00', 0x40, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYRESHEX], 0x1, 0x1e2, &(0x7f0000000480)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x111) 572.964532ms ago: executing program 1 (id=13794): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e23, @multicast1}}, 0x4, 0xa}, &(0x7f0000000740)=0x90) 508.748754ms ago: executing program 2 (id=13795): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x1f) 503.176345ms ago: executing program 1 (id=13796): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0xa01) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f00000002c0)) 413.588387ms ago: executing program 2 (id=13797): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e20, 0x80000, @local, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000840)=[@dstopts_2292={{0x18, 0x29, 0x34, {0x3a}}}], 0x18}, 0x440e0) 376.103838ms ago: executing program 1 (id=13798): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={@mcast1, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5, 0x4, 0xfff2, 0x100, 0x4, 0x80108}) 359.729909ms ago: executing program 2 (id=13799): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x51a23}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xfec0ffffffffffff, 0xfffffffffffffffe}}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x6}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x40044) 331.727439ms ago: executing program 3 (id=13800): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000000)={0x28, 0x2, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x8b, 0x2}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x23}}]}, 0x28}, 0x1, 0x0, 0x0, 0x240480c1}, 0x40480c0) 244.609362ms ago: executing program 2 (id=13801): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x80040) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={0x0}) 238.150332ms ago: executing program 1 (id=13802): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, 0x0, 0x0) 200.947854ms ago: executing program 3 (id=13803): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') setns(r0, 0x20000000) 138.979396ms ago: executing program 1 (id=13804): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x13, 0x4f, 0x1}, 0x14}}, 0x0) 124.278466ms ago: executing program 2 (id=13805): r0 = syz_io_uring_setup(0x131, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0x4, 0xfffffffd}, &(0x7f0000000140), &(0x7f0000000280), &(0x7f0000000000)) io_uring_enter(r0, 0x1e76, 0x0, 0x6, 0x0, 0x0) 64.004658ms ago: executing program 3 (id=13806): r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r0, 0x0, &(0x7f0000000180)=0x40) 1.14659ms ago: executing program 0 (id=13807): sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x885) syz_usb_connect(0x5, 0x24, &(0x7f00000006c0)={{0x12, 0x1, 0x110, 0x93, 0x23, 0xe7, 0x10, 0x5e1, 0x893, 0xffe5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x80, 0x20, 0x7, "", [{{0x9, 0x4, 0x23, 0x7, 0x0, 0xc6, 0xf3, 0x9f, 0x7}}]}}]}}, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0}) 711.69µs ago: executing program 2 (id=13808): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d423000000000000002900000002000000", 0xfe60) 0s ago: executing program 1 (id=13809): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) kernel console output (not intermixed with test programs): as an invalid length. [ 606.471110][T21802] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 606.578914][T28773] user_cmd nlpid 4965 [ 606.654676][T28776] netlink: 'syz.4.11520': attribute type 1 has an invalid length. [ 606.698787][T28776] netlink: 244 bytes leftover after parsing attributes in process `syz.4.11520'. [ 606.720968][T21802] usb 1-1: Using ep0 maxpacket: 32 [ 607.032415][T21802] usb 1-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 607.080925][T21802] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.100338][T21802] usb 1-1: Product: syz [ 607.119535][T21802] usb 1-1: Manufacturer: syz [ 607.137578][T21802] usb 1-1: SerialNumber: syz [ 607.421031][T21802] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 607.444691][T21802] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 607.511300][T21802] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 607.632256][T21802] usb 1-1: USB disconnect, device number 51 [ 607.641722][T21802] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 607.675101][T21802] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 607.727522][T21802] visor 1-1:1.0: device disconnected [ 607.809876][T28846] loop4: detected capacity change from 0 to 1024 [ 608.033222][T28846] EXT4-fs (loop4): orphan cleanup on readonly fs [ 608.111584][T28846] EXT4-fs warning (device loop4): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 608.156318][T28846] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 608.211519][T28846] EXT4-fs (loop4): 1 truncate cleaned up [ 608.230881][T28846] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 608.302158][T28877] batman_adv: Cannot find parent device [ 608.416976][T21799] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 608.657377][T28895] [U] fGmڞrGf׊7 eMIC/nzUT7M͂Sv +`w%k,kAq폓،ȴ-G?ݖáN7]TA,gm.*j6_FxX(_Wg_%Z u2 [ 608.724836][T28895] [U] dېy{H_jAj:HMF;AM [ 608.768336][T28895] [U] ۈr, ->Cbz_Rd"dQU&KFXف] Ab.R獣{2HPB ``V 3Yōy [ 608.817001][T28895] [U] &'Dp\ReˮNtE#qrusm|:j~s}jC2d+r>+D# [ 608.846598][T28895] [U] @vu҃9{o+bQ౛9|"oaHƀL" {SjFKMm(qogG|H@-N!ftF5@V?G2Sh`:JZrgyRNBCuR;Ē'{Ce>=YTĴKq0JgLoSr|us=9GWg ;CbZ_l [ 608.901080][T21799] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 608.980856][T28895] [U] ߉cU|Cth\7h^|Wƙd;r+JuBhRR˓$[H!z~p{$mˇ#AWд[U [ 609.018580][T28895] [U] ˬܚ'$U80lFUD{i6:@pnuSFrREtC2~"_? 4.nyk ۵^APAm:_1&'©FC:L8_D\3 [ 609.090850][T28895] [U] :h(FE^|F,|c.;*[x W)[͗P~b[zGӆN]eVnE]  [ 609.281041][T21799] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 609.328728][T28908] loop3: detected capacity change from 0 to 4096 [ 609.335658][T28922] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 609.451098][T28908] ntfs3: Unexpected value for 'discard' [ 609.794088][T28939] netlink: 76 bytes leftover after parsing attributes in process `syz.2.11591'. [ 609.880483][T28945] usb usb9: usbfs: process 28945 (syz.3.11589) did not claim interface 0 before use [ 610.168988][T28962] loop3: detected capacity change from 0 to 128 [ 610.283911][T28968] overlayfs: conflicting options: userxattr,redirect_dir=follow [ 610.321141][T21799] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 610.350429][T21799] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 610.443507][T28974] loop4: detected capacity change from 0 to 1024 [ 610.490991][T21802] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 610.504425][T28973] loop0: detected capacity change from 0 to 4096 [ 610.520898][T28974] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 610.605411][T28973] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 610.949949][T28988] loop1: detected capacity change from 0 to 1024 [ 611.003377][T28991] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 611.028696][T28997] overlayfs: missing 'lowerdir' [ 611.481843][T29014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11627'. [ 611.515591][T29014] device vlan0 entered promiscuous mode [ 611.576870][T29018] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (2049) [ 611.645467][T29020] netlink: 'syz.3.11628': attribute type 1 has an invalid length. [ 611.673894][T29020] netlink: 224 bytes leftover after parsing attributes in process `syz.3.11628'. [ 611.681285][T21800] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 611.970895][T21800] usb 3-1: Using ep0 maxpacket: 32 [ 612.091047][T21802] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 612.111472][T21800] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 612.125730][T21800] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.158179][T21800] usb 3-1: config 0 descriptor?? [ 612.198371][T29046] program syz.1.11642 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 612.238389][T21800] as10x_usb: device has been detected [ 612.251364][T21800] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 612.317870][T21800] usb 3-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)... [ 612.351565][T21800] as10x_usb: error during firmware upload part1 [ 612.361702][T29054] loop1: detected capacity change from 0 to 256 [ 612.369150][T21800] Registered device nBox DVB-T Dongle [ 612.380992][T21802] usb 1-1: Using ep0 maxpacket: 8 [ 612.471924][T29054] FAT-fs (loop1): Directory bread(block 64) failed [ 612.478552][T29054] FAT-fs (loop1): Directory bread(block 65) failed [ 612.493868][T21800] usb 3-1: USB disconnect, device number 43 [ 612.514089][T29054] FAT-fs (loop1): Directory bread(block 66) failed [ 612.529624][T21800] Unregistered device nBox DVB-T Dongle [ 612.531703][T21802] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 612.544209][T29054] FAT-fs (loop1): Directory bread(block 67) failed [ 612.552998][T21800] as10x_usb: device has been disconnected [ 612.590790][T21802] usb 1-1: config 0 interface 0 has no altsetting 0 [ 612.621104][T29054] FAT-fs (loop1): Directory bread(block 68) failed [ 612.648120][T29054] FAT-fs (loop1): Directory bread(block 69) failed [ 612.676977][T29054] FAT-fs (loop1): Directory bread(block 70) failed [ 612.686497][T29054] FAT-fs (loop1): Directory bread(block 71) failed [ 612.701205][T29054] FAT-fs (loop1): Directory bread(block 72) failed [ 612.710538][T29054] FAT-fs (loop1): Directory bread(block 73) failed [ 612.801230][T21802] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 612.824049][T29064] netlink: 'syz.3.11651': attribute type 3 has an invalid length. [ 612.832570][T21802] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.852700][T29064] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 612.871103][T21802] usb 1-1: Product: syz [ 612.875377][T21802] usb 1-1: Manufacturer: syz [ 612.900493][T21802] usb 1-1: SerialNumber: syz [ 612.923734][T21802] usb 1-1: config 0 descriptor?? [ 612.974061][T21802] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 613.192874][T21802] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 613.223508][T21802] snd_usb_toneport: probe of 1-1:0.0 failed with error -22 [ 613.436862][T21802] usb 1-1: USB disconnect, device number 52 [ 613.768181][T29099] netlink: 72 bytes leftover after parsing attributes in process `syz.4.11666'. [ 614.033022][T29107] netlink: 'syz.2.11672': attribute type 10 has an invalid length. [ 614.071583][T29107] device hsr0 entered promiscuous mode [ 614.096278][T29107] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 614.134186][T29107] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 614.161045][T29107] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 614.194876][T29107] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 614.254232][ T4177] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 614.490867][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 614.811053][ T4177] usb 2-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 614.820447][ T4177] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.899658][ T4177] usb 2-1: Product: syz [ 614.910902][ T4177] usb 2-1: Manufacturer: syz [ 614.915583][ T4177] usb 2-1: SerialNumber: syz [ 614.948150][ T4177] usb 2-1: config 0 descriptor?? [ 614.948567][T29150] loop4: detected capacity change from 0 to 512 [ 615.018624][ T4205] Bluetooth: hci5: urb ffff8880247b7d00 submission failed (2) [ 615.185364][T29150] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 615.246268][T21802] usb 2-1: USB disconnect, device number 52 [ 615.256957][T29150] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 615.338038][T29150] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.11689: attempt to clear invalid blocks 2 len 1 [ 615.421607][T29150] EXT4-fs (loop4): Remounting filesystem read-only [ 615.479716][T29150] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 615.573052][T29180] netlink: 'syz.0.11705': attribute type 3 has an invalid length. [ 615.645897][T29150] EXT4-fs (loop4): Remounting filesystem read-only [ 615.684063][T29150] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.11689: invalid indirect mapped block 1819239214 (level 0) [ 615.733789][T12781] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 615.790855][T29150] EXT4-fs (loop4): Remounting filesystem read-only [ 615.810910][T29150] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.11689: invalid indirect mapped block 1819239214 (level 1) [ 615.852148][T29150] EXT4-fs (loop4): Remounting filesystem read-only [ 615.870112][T29150] EXT4-fs (loop4): 1 truncate cleaned up [ 615.889587][T29150] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,init_itable=0x0000000000000004,mblk_io_submit,errors=remount-ro,jqfmt=vfsv0,usrjquota=... Quota mode: writeback. [ 615.931162][T21802] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 616.024792][T29190] devtmpfs: Unknown parameter 'debug' [ 616.033869][T29150] EXT4-fs (loop4): Quota file not on filesystem root. Journaled quota will not work [ 616.100815][T21800] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 616.291195][T12781] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 616.310437][T29195] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11713'. [ 616.319986][T12781] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 616.328739][T12781] usb 3-1: Product: syz [ 616.333308][T12781] usb 3-1: SerialNumber: syz [ 616.348003][T12781] usb 3-1: config 0 descriptor?? [ 616.371419][T21802] usb 4-1: unable to get BOS descriptor or descriptor too short [ 616.390935][T21800] usb 1-1: Using ep0 maxpacket: 32 [ 616.481396][T21802] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 616.523683][T29200] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11715'. [ 616.541700][T29200] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 616.611198][T12781] hso 3-1:0.0: Can't find BULK IN endpoint [ 616.681224][T21802] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 616.716852][T21802] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.725795][T21800] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 616.736209][T21800] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.744739][T21802] usb 4-1: Product: syz [ 616.759332][T21800] usb 1-1: Product: syz [ 616.764293][T21802] usb 4-1: Manufacturer: syz [ 616.768945][T21802] usb 4-1: SerialNumber: syz [ 616.774098][T21800] usb 1-1: Manufacturer: syz [ 616.778746][T21800] usb 1-1: SerialNumber: syz [ 616.822647][T21800] usb 1-1: config 0 descriptor?? [ 616.841598][ T4177] usb 3-1: USB disconnect, device number 44 [ 617.087464][T29186] udc-core: couldn't find an available UDC or it's busy [ 617.099590][T29186] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 617.112762][T21802] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 617.140942][T21800] airspy 1-1:0.0: usb_control_msg() failed -71 request 09 [ 617.151376][T21800] airspy 1-1:0.0: Could not detect board [ 617.164413][T21800] airspy: probe of 1-1:0.0 failed with error -71 [ 617.180944][T21802] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 617.201065][T21800] usb 1-1: USB disconnect, device number 53 [ 617.207948][T21802] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 617.335128][T21802] usb 4-1: USB disconnect, device number 58 [ 617.692017][T10793] udevd[10793]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 617.711490][T29252] program syz.1.11740 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 617.801733][T29254] loop3: detected capacity change from 0 to 2048 [ 617.883906][T29261] netlink: 72 bytes leftover after parsing attributes in process `syz.1.11743'. [ 617.894898][T29254] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 617.921267][T29261] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11743'. [ 617.930576][T29261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11743'. [ 618.011331][T29261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11743'. [ 618.489669][T29299] xt_cgroup: path and classid specified [ 618.722976][T29304] loop4: detected capacity change from 0 to 2048 [ 618.783139][T29304] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 619.056879][T29327] ip6t_srh: unknown srh invflags 4000 [ 619.074919][T29322] loop3: detected capacity change from 0 to 2048 [ 619.098944][T29330] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.11776'. [ 619.109074][T29330] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 619.227946][T29322] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 619.294009][T29339] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 619.326081][T29322] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 619.347911][ T26] audit: type=1400 audit(1781336372.276:36): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="#(%#{//(@\)//&@},['%%&\#*" pid=29340 comm="syz.4.11781" [ 619.428737][T29322] Remounting filesystem read-only [ 619.455582][T29343] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 619.500964][ T4198] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 619.881271][T29368] MTD: Couldn't look up './bus': -15 [ 620.007278][T29372] loop0: detected capacity change from 0 to 512 [ 620.101590][T29372] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 620.266767][T29381] loop1: detected capacity change from 0 to 8192 [ 620.273409][ T4265] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 620.311800][T29389] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11804'. [ 620.572091][T29401] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 620.593948][T29400] usb usb8: usbfs: process 29400 (syz.3.11810) did not claim interface 0 before use [ 620.650876][ T4265] usb 3-1: config 1 has an invalid descriptor of length 190, skipping remainder of the config [ 620.673942][ T4265] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 116, changing to 10 [ 620.726130][ T4265] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 51186, setting to 1024 [ 620.931499][ T4265] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 620.958530][ T4265] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.987452][ T4265] usb 3-1: Product: syz [ 621.014865][ T4265] usb 3-1: Manufacturer: syz [ 621.019817][ T4265] usb 3-1: SerialNumber: syz [ 621.044566][T29423] loop0: detected capacity change from 0 to 164 [ 621.081090][T29373] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 621.146698][T29427] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (2) [ 621.157861][T29423] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 621.591147][ T4265] snd-usb-audio: probe of 3-1:1.0 failed with error -71 [ 621.610551][T29444] netlink: 'syz.0.11831': attribute type 6 has an invalid length. [ 621.621208][ T4265] usb 3-1: USB disconnect, device number 45 [ 621.759731][T29414] loop3: detected capacity change from 0 to 32768 [ 621.891304][T29414] XFS (loop3): Mounting V5 Filesystem [ 621.910822][ T4177] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 621.938606][T29465] netlink: 68 bytes leftover after parsing attributes in process `syz.0.11837'. [ 621.991892][T29414] XFS (loop3): Ending clean mount [ 622.119313][T29472] netlink: 830 bytes leftover after parsing attributes in process `syz.2.11842'. [ 622.131463][ T4198] XFS (loop3): Unmounting Filesystem [ 622.320964][ T4177] usb 5-1: config 1 has an invalid interface number: 188 but max is 0 [ 622.329273][ T4177] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 622.386291][ T4177] usb 5-1: config 1 has no interface number 0 [ 622.393653][ T4177] usb 5-1: config 1 interface 188 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 622.421198][ T4177] usb 5-1: config 1 interface 188 has no altsetting 0 [ 622.621435][ T4177] usb 5-1: New USB device found, idVendor=2040, idProduct=7200, bcdDevice=5b.6b [ 622.630684][ T4177] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.640880][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 622.656772][ T4177] usb 5-1: Product: syz [ 622.671024][ T4177] usb 5-1: Manufacturer: syz [ 622.675703][ T4177] usb 5-1: SerialNumber: syz [ 622.754398][ T4177] usb 5-1: cannot find UAC_HEADER [ 622.765513][T29500] ipt_CLUSTERIP: Please specify destination IP [ 622.832671][ T4177] snd-usb-audio: probe of 5-1:1.188 failed with error -22 [ 622.841049][T29504] tmpfs: Bad value for 'mpol' [ 622.949556][ T4345] udevd[4345]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.188/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 623.026305][ T4177] usb 5-1: USB disconnect, device number 50 [ 623.157921][T29521] netlink: 'syz.1.11863': attribute type 2 has an invalid length. [ 623.750523][T29556] loop1: detected capacity change from 0 to 64 [ 623.771066][T21802] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 623.839650][T29554] loop4: detected capacity change from 0 to 4096 [ 623.946005][T29554] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 623.988764][T29554] EXT4-fs (loop4): inline encryption not supported [ 624.021933][T29554] EXT4-fs (loop4): Test dummy encryption mode enabled [ 624.135396][T29554] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 624.161051][T29554] System zones: 0-5 [ 624.181018][T21802] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 624.192623][T21802] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.203160][T21802] usb 1-1: config 0 descriptor?? [ 624.231926][T29554] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,inlinecrypt,errors=remount-ro,test_dummy_encryption=v1,norecovery,delalloc,nogrpid,minixdf,. Quota mode: writeback. [ 624.572761][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.785018][T29602] loop3: detected capacity change from 0 to 256 [ 624.791526][T21802] usb 1-1: Cannot read MAC address [ 624.797268][T21802] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71 [ 624.858195][T21802] usb 1-1: USB disconnect, device number 54 [ 625.611174][T21802] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 625.656973][ T26] audit: type=1107 audit(1781336378.586:37): pid=29659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 625.794362][T29671] xt_TCPMSS: Only works on TCP SYN packets [ 625.931021][T21802] usb 4-1: Using ep0 maxpacket: 8 [ 626.081096][T29684] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 626.121842][T21802] usb 4-1: unable to get BOS descriptor or descriptor too short [ 626.221354][T21802] usb 4-1: config 4 has an invalid interface number: 147 but max is 0 [ 626.231423][T21802] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 626.292549][T21802] usb 4-1: config 4 has no interface number 0 [ 626.485907][T29707] libceph: resolve '400' (ret=-3): failed [ 626.581075][T21802] usb 4-1: string descriptor 0 read error: -22 [ 626.590880][T21802] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 626.662104][T21802] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.743713][T21802] uvcvideo 4-1:4.147: Found multiple Units with ID 6 [ 626.768666][T21802] usb 4-1: Found UVC 0.02 device (04f2:b746) [ 626.802046][T21802] usb 4-1: No valid video chain found. [ 626.855999][T29731] xt_hashlimit: max too large, truncated to 1048576 [ 626.951624][T29735] netlink: 'syz.2.11970': attribute type 5 has an invalid length. [ 626.967700][T21802] usb 4-1: USB disconnect, device number 59 [ 627.152143][T29749] netlink: 'syz.1.11977': attribute type 1 has an invalid length. [ 627.250390][T29756] netlink: 11 bytes leftover after parsing attributes in process `syz.1.11980'. [ 627.311874][T21800] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 627.439395][T29763] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11984'. [ 627.520972][T21802] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 627.693760][T29779] CIFS mount error: No usable UNC path provided in device string! [ 627.693760][T29779] [ 627.741175][T29779] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 627.752766][T21800] usb 1-1: unable to get BOS descriptor or descriptor too short [ 627.777168][T29783] netlink: 'syz.4.11994': attribute type 8 has an invalid length. [ 627.861368][T21800] usb 1-1: config 3 has an invalid interface number: 249 but max is 0 [ 627.891140][T21800] usb 1-1: config 3 has no interface number 0 [ 627.901167][T21800] usb 1-1: config 3 interface 249 has no altsetting 0 [ 627.940939][T21802] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 627.954644][T21802] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.991731][T21802] usb 3-1: config 0 descriptor?? [ 628.053581][T21802] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 628.156098][T21800] usb 1-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=5a.9d [ 628.170524][T21800] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.180764][T21800] usb 1-1: Product: syz [ 628.185401][T21800] usb 1-1: Manufacturer: syz [ 628.190081][T21800] usb 1-1: SerialNumber: syz [ 628.358062][T29815] xt_TCPMSS: Only works on TCP SYN packets [ 628.369649][T29813] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12010'. [ 628.471213][T21802] gp8psk: usb in 128 operation failed. [ 628.491520][T21802] gp8psk: usb in 137 operation failed. [ 628.504431][T21802] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 628.539152][T21802] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 628.550687][T21800] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 628.577091][T29817] loop3: detected capacity change from 0 to 2048 [ 628.585073][T21800] gspca_sn9c2028: read1 error -71 [ 628.601005][T21800] gspca_sn9c2028: read1 error -71 [ 628.617491][T21802] usb 3-1: USB disconnect, device number 46 [ 628.646177][T21800] gspca_sn9c2028: read1 error -71 [ 628.651595][T21800] sn9c2028: probe of 1-1:3.249 failed with error -71 [ 628.680417][T21800] usb 1-1: USB disconnect, device number 55 [ 628.784704][T29817] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 628.964402][T29846] x_tables: unsorted underflow at hook 4 [ 629.030353][T29845] loop3: detected capacity change from 0 to 1024 [ 629.401021][T21800] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 629.670798][T21800] usb 3-1: Using ep0 maxpacket: 32 [ 629.821213][T21800] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 629.829572][T21800] usb 3-1: config 0 has no interface number 0 [ 629.860834][T21800] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 629.874817][T29901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12049'. [ 629.891052][T21800] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 629.921298][T21800] usb 3-1: config 0 interface 85 has no altsetting 0 [ 630.101136][T21800] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 630.116123][T29908] loop3: detected capacity change from 0 to 4096 [ 630.137442][T21800] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.156023][T21800] usb 3-1: Product: syz [ 630.162789][T21800] usb 3-1: Manufacturer: syz [ 630.167456][T21800] usb 3-1: SerialNumber: syz [ 630.175059][T21800] usb 3-1: config 0 descriptor?? [ 630.187953][T29908] ntfs: (device loop3): is_boot_sector_ntfs(): Invalid end of sector marker. [ 630.239356][T29908] ntfs: (device loop3): check_mft_mirror(): Incomplete multi sector transfer detected in mft mirror record 10. [ 630.277026][T29908] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 630.350017][T29908] ntfs: (device loop3): ntfs_read_locked_inode(): $STANDARD_INFORMATION attribute is missing. [ 630.368851][T29908] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 630.416731][T29908] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 630.461960][T29908] ntfs: volume version 3.1. [ 630.702881][T29908] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 630.713076][T21800] appletouch 3-1:0.85: Failed to request geyser raw mode [ 630.720433][T21800] appletouch: probe of 3-1:0.85 failed with error -5 [ 630.742741][T29908] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x18 as bad. Run chkdsk. [ 630.801293][T29908] ntfs: (device loop3): load_and_init_quota(): Failed to load $Quota. [ 630.808355][T21800] usb 3-1: USB disconnect, device number 47 [ 630.842537][T29908] ntfs: (device loop3): load_system_files(): Failed to load $Quota. Will not be able to remount read-write. Run chkdsk. [ 630.860817][T12781] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 631.150489][T29950] xt_hashlimit: max too large, truncated to 1048576 [ 631.159094][T29950] No such timeout policy "syz1" [ 631.281133][T12781] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 631.315863][T12781] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 631.349090][T12781] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 631.359421][T29955] loop1: detected capacity change from 0 to 8 [ 631.380911][T12781] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 631.405489][T12781] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 631.420456][T12781] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.492583][T12781] usb 1-1: config 0 descriptor?? [ 631.625916][T29942] loop4: detected capacity change from 0 to 32768 [ 631.781195][T12781] hdpvr 1-1:0.0: unexpected answer of status request, len -71 [ 631.806787][T29942] XFS (loop4): Mounting V5 Filesystem [ 631.810609][T12781] hdpvr 1-1:0.0: device init failed [ 631.828264][T12781] hdpvr: probe of 1-1:0.0 failed with error -12 [ 631.855474][T12781] usb 1-1: USB disconnect, device number 56 [ 631.857111][T29983] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12088'. [ 631.983222][T29942] XFS (loop4): Ending clean mount [ 632.001058][T29942] XFS (loop4): Quotacheck needed: Please wait. [ 632.157146][T29942] XFS (loop4): Quotacheck: Done. [ 632.300964][ T4199] XFS (loop4): Unmounting Filesystem [ 632.348578][T30003] [U] ^C [ 632.755241][T30023] device bridge0 entered promiscuous mode [ 632.819681][T30023] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 632.849897][T29998] loop1: detected capacity change from 0 to 32768 [ 632.973561][T29998] ea_get: invalid extended attribute [ 632.980041][T29998] ffff88805f0c2830: 04 00 00 00 .... [ 633.629402][T30072] netlink: 76 bytes leftover after parsing attributes in process `syz.3.12129'. [ 633.771008][T21800] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 634.200262][T30097] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 634.222462][T30097] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 634.343134][T30097] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 634.362197][T21800] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 634.377821][T21800] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.387157][T30097] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 634.410830][T21800] usb 1-1: Product: syz [ 634.421267][T30097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 634.438247][T21800] usb 1-1: Manufacturer: syz [ 634.445862][T30097] 8021q: adding VLAN 0 to HW filter on device team0 [ 634.448579][T21800] usb 1-1: SerialNumber: syz [ 634.510302][T30113] netlink: 'syz.3.12149': attribute type 1 has an invalid length. [ 634.528758][T30113] netlink: 228 bytes leftover after parsing attributes in process `syz.3.12149'. [ 634.534565][T21800] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 634.569563][T30097] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 634.602108][T30107] netlink: 'syz.1.12145': attribute type 21 has an invalid length. [ 634.631559][T30107] IPv6: NLM_F_CREATE should be specified when creating new route [ 634.849330][T30124] netlink: 'syz.4.12155': attribute type 1 has an invalid length. [ 634.941052][T30129] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12158'. [ 635.126101][T30141] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 635.211472][T21802] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 635.655567][T30167] netlink: 'syz.2.12175': attribute type 1 has an invalid length. [ 635.670826][T30167] netlink: 'syz.2.12175': attribute type 2 has an invalid length. [ 635.683124][T12781] usb 1-1: USB disconnect, device number 57 [ 635.779598][T30139] loop1: detected capacity change from 0 to 32768 [ 635.855325][T30139] JBD2: Ignoring recovery information on journal [ 636.002182][T30186] mip6: mip6_rthdr_init_state: spi is not 0: 655360 [ 636.013558][T30139] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 636.136173][T30139] (syz.1.12162,30139,0):ocfs2_find_entry:1075 ERROR: status = -117 [ 636.181919][T30139] (syz.1.12162,30139,0):ocfs2_find_entry:1075 ERROR: status = -117 [ 636.260963][T30139] (syz.1.12162,30139,0):ocfs2_mknod:502 ERROR: status = -117 [ 636.321045][T21802] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 636.328146][T21802] ath9k_htc: Failed to initialize the device [ 636.343619][T30139] (syz.1.12162,30139,0):ocfs2_create:676 ERROR: status = -117 [ 636.360974][T30200] device netdevsim0 entered promiscuous mode [ 636.382730][T12781] usb 1-1: ath9k_htc: USB layer deinitialized [ 636.412471][T30200] netlink: 64 bytes leftover after parsing attributes in process `syz.0.12192'. [ 636.461134][T30200] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 636.505547][ T4188] ocfs2: Unmounting device (7,1) on (node local) [ 636.701293][T30217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12201'. [ 636.848194][T30223] loop4: detected capacity change from 0 to 1024 [ 636.874509][T30225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12205'. [ 637.041090][T30235] netlink: 'syz.2.12209': attribute type 1 has an invalid length. [ 637.060829][T30235] netlink: 224 bytes leftover after parsing attributes in process `syz.2.12209'. [ 637.371072][T30257] loop4: detected capacity change from 0 to 16 [ 637.446196][T30257] erofs: (device loop4): mounted with root inode @ nid 36. [ 637.971230][T30284] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 638.010912][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 638.126089][T30296] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 638.191131][T30301] loop0: detected capacity change from 0 to 64 [ 638.580303][T30312] netlink: 'syz.3.12247': attribute type 3 has an invalid length. [ 638.663573][T30321] netlink: 184 bytes leftover after parsing attributes in process `syz.1.12251'. [ 638.993673][T30343] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12263'. [ 639.062157][T30347] netlink: 'syz.2.12264': attribute type 2 has an invalid length. [ 639.251100][ T4265] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 639.251744][T21802] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 639.314784][T30357] loop4: detected capacity change from 0 to 256 [ 639.503739][T30365] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12273'. [ 639.531067][T21802] usb 1-1: Using ep0 maxpacket: 32 [ 639.560004][T30369] netlink: 'syz.1.12276': attribute type 2 has an invalid length. [ 639.578597][T30369] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12276'. [ 639.624284][ T4265] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 639.671513][ T4265] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 639.758331][T30377] binder: 30376:30377 ioctl c018620c 0 returned -14 [ 639.780990][T21802] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 250, changing to 7 [ 639.801125][T21802] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 72, changing to 7 [ 639.851195][ T4265] usb 4-1: New USB device found, idVendor=2184, idProduct=001c, bcdDevice=e3.03 [ 639.889390][ T4265] usb 4-1: New USB device strings: Mfr=1, Product=22, SerialNumber=3 [ 639.899239][ T4265] usb 4-1: Product: syz [ 639.912669][ T4265] usb 4-1: Manufacturer: syz [ 639.917492][ T4265] usb 4-1: SerialNumber: syz [ 639.960236][ T4265] usb 4-1: config 0 descriptor?? [ 639.996932][T30387] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12285'. [ 640.011277][T21802] usb 1-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 1.05 [ 640.036687][T21802] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.047520][T21802] usb 1-1: Product: syz [ 640.065249][T21802] usb 1-1: Manufacturer: syz [ 640.075554][T21802] usb 1-1: SerialNumber: syz [ 640.084819][T30387] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12285'. [ 640.144638][T21802] snd-usb-audio: probe of 1-1:1.0 failed with error -2 [ 640.196713][T21802] snd-usb-audio: probe of 1-1:1.1 failed with error -2 [ 640.265050][T12781] usb 4-1: USB disconnect, device number 60 [ 640.291367][T30393] netlink: 64 bytes leftover after parsing attributes in process `syz.4.12288'. [ 640.310663][T21802] snd-usb-audio: probe of 1-1:1.2 failed with error -2 [ 640.322587][T30393] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 640.382375][T21802] usb 1-1: USB disconnect, device number 58 [ 640.433715][ T4851] udevd[4851]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 640.773612][T30379] loop1: detected capacity change from 0 to 32768 [ 641.311159][T30436] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 641.468820][T30447] netlink: 96 bytes leftover after parsing attributes in process `syz.3.12314'. [ 641.608829][T30457] xt_nat: multiple ranges no longer supported [ 641.922124][T30476] loop1: detected capacity change from 0 to 64 [ 642.311791][T30503] loop3: detected capacity change from 0 to 256 [ 642.992326][T30556] device lo entered promiscuous mode [ 643.030203][T30556] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 643.271723][T30578] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 643.502912][T30593] netlink: 68 bytes leftover after parsing attributes in process `syz.1.12387'. [ 643.530561][T30593] netlink: 96 bytes leftover after parsing attributes in process `syz.1.12387'. [ 643.557795][T30593] tc_dump_action: action bad kind [ 643.582455][T30596] loop4: detected capacity change from 0 to 512 [ 643.695880][T30596] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 643.720155][T30596] ext4 filesystem being mounted at /2526/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 643.945873][ T263] block nbd3: Attempted send on invalid socket [ 643.952492][ T263] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 643.970891][T30624] hpfs: hpfs_map_sector(): read error [ 644.058696][T30634] loop4: detected capacity change from 0 to 256 [ 644.111162][T30634] FAT-fs (loop4): Directory bread(block 64) failed [ 644.117932][T30634] FAT-fs (loop4): Directory bread(block 65) failed [ 644.125411][T30634] FAT-fs (loop4): Directory bread(block 66) failed [ 644.132921][T30634] FAT-fs (loop4): Directory bread(block 67) failed [ 644.140405][T30634] FAT-fs (loop4): Directory bread(block 68) failed [ 644.147630][T30634] FAT-fs (loop4): Directory bread(block 69) failed [ 644.154906][T30634] FAT-fs (loop4): Directory bread(block 70) failed [ 644.187786][T30634] FAT-fs (loop4): Directory bread(block 71) failed [ 644.201303][T30634] FAT-fs (loop4): Directory bread(block 72) failed [ 644.237895][T30634] FAT-fs (loop4): Directory bread(block 73) failed [ 644.315751][T30637] loop3: detected capacity change from 0 to 4096 [ 644.332955][T30648] __nla_validate_parse: 1 callbacks suppressed [ 644.332972][T30648] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12413'. [ 644.374148][T30648] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12413'. [ 644.403741][T30648] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12413'. [ 644.422172][T30637] ntfs: volume version 3.1. [ 644.429482][T30637] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 644.458691][T30648] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12413'. [ 644.480875][T30637] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 644.493544][T30648] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12413'. [ 644.510228][T30648] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12413'. [ 644.519967][T30637] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 644.544681][T30648] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12413'. [ 644.569818][T30637] ntfs: (device loop3): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4). Marking corrupt inode and base inode 0x1a as bad. Run chkdsk. [ 644.616679][T30648] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12413'. [ 644.641503][T30648] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12413'. [ 644.682360][T30648] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12413'. [ 644.692008][T30637] ntfs: (device loop3): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute. [ 644.751906][T30637] ntfs: (device loop3): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 645.012529][ T150] block nbd0: Attempted send on invalid socket [ 645.019012][ T150] blk_update_request: I/O error, dev nbd0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 645.066539][T30670] VFS: unable to read V7 FS superblock on device nbd0. [ 645.096325][T30670] VFS: could not find a valid V7 on nbd0. [ 645.329755][T30685] netlink: 'syz.0.12431': attribute type 6 has an invalid length. [ 645.408907][T30688] ipt_CLUSTERIP: bad num_local_nodes 18 [ 645.437535][T30692] loop4: detected capacity change from 0 to 512 [ 645.639814][T30701] loop3: detected capacity change from 0 to 8 [ 645.661962][T30692] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 645.695382][T30692] ext4 filesystem being mounted at /2535/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 645.753833][T30706] loop0: detected capacity change from 0 to 512 [ 645.807423][T30692] EXT4-fs error (device loop4): ext4_empty_dir:3145: inode #12: block 32: comm syz.4.12432: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=12, rec_len=106, size=2048 fake=1 [ 645.863033][T30706] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 645.875383][T30692] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #12: comm syz.4.12432: directory missing '.' [ 645.878039][T30701] SQUASHFS error: Failed to read block 0x2d7: -5 [ 645.951527][T30701] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 645.967985][T30706] EXT4-fs (loop0): 1 orphan inode deleted [ 645.974198][T22630] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 645.993636][T30706] EXT4-fs (loop0): 1 truncate cleaned up [ 645.999489][T30706] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,jqfmt=vfsv0,quota,. Quota mode: writeback. [ 646.022073][ T26] audit: type=1800 audit(1781336398.956:38): pid=30701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.12437" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 646.035980][T30706] EXT4-fs error (device loop0): ext4_append:79: inode #2: comm syz.0.12436: Logical block already allocated [ 646.054741][T30706] EXT4-fs (loop0): Remounting filesystem read-only [ 646.255664][T30719] comedi comedi0: comedi_config --init_data is deprecated [ 646.391408][T22630] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 646.411534][T22630] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.471605][T22630] usb 2-1: config 0 descriptor?? [ 646.818057][T30743] loop0: detected capacity change from 0 to 4096 [ 646.953256][T22630] usb 2-1: Cannot set MAC address [ 646.958603][T22630] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71 [ 647.031228][T22630] usb 2-1: USB disconnect, device number 53 [ 647.154183][T30767] bond0: (slave netdevsim0): Error: Device can not be enslaved while up [ 647.649164][ T9496] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 647.775730][T30804] ieee802154 phy1 wpan1: encryption failed: -90 [ 647.951116][T30814] loop0: detected capacity change from 0 to 1764 [ 648.022554][ T9496] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 648.058189][ T9496] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.079531][ T9496] usb 5-1: config 0 descriptor?? [ 648.274517][T30820] loop3: detected capacity change from 0 to 8192 [ 648.346178][T30820] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 648.366163][T30820] REISERFS (device loop3): using ordered data mode [ 648.411234][ T9496] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 648.419911][ T9496] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 648.420992][T21802] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 648.449856][T30820] reiserfs: using flush barriers [ 648.490198][T30820] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 648.531187][ T9496] [drm:udl_init] *ERROR* Selecting channel failed [ 648.572339][T30820] REISERFS (device loop3): checking transaction log (loop3) [ 648.597338][T30820] REISERFS (device loop3): Using r5 hash to sort names [ 648.610102][T30820] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 648.628006][ T9496] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 648.700292][ T9496] [drm] Initialized udl on minor 2 [ 648.742061][ T9496] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 648.774801][ T9496] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 648.870864][ T9496] usb 5-1: USB disconnect, device number 51 [ 648.877548][T21802] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 648.889128][ T4265] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 648.927201][T21802] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 648.951004][T21802] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 648.970187][T21802] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.001398][ T4265] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 649.042008][ T4265] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 649.062718][T30866] tmpfs: Bad value for 'mpol' [ 649.501078][T21802] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 649.513751][T21802] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input38 [ 649.586965][T21802] input: failed to attach handler kbd to device input38, error: -5 [ 649.641448][T21802] usb 2-1: USB disconnect, device number 54 [ 649.711383][T30906] __nla_validate_parse: 12 callbacks suppressed [ 649.711405][T30906] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.12535'. [ 649.791142][T30908] No source specified [ 649.941956][T21800] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 650.108852][T30924] loop4: detected capacity change from 0 to 128 [ 650.351041][T21800] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 650.551858][T21800] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 650.590767][T21800] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.615003][T30946] device geneve1 entered promiscuous mode [ 650.621192][T21800] usb 1-1: Product: syz [ 650.621217][T21800] usb 1-1: Manufacturer: syz [ 650.621235][T21800] usb 1-1: SerialNumber: syz [ 650.799688][T30952] loop1: detected capacity change from 0 to 2048 [ 650.887485][T30960] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 651.062279][T21800] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 651.095733][T21800] usb 1-1: unit 2 not found! [ 651.158428][T21800] snd-usb-audio: probe of 1-1:1.2 failed with error -16 [ 651.221071][T21800] usb 1-1: USB disconnect, device number 59 [ 651.340880][T30983] loop4: detected capacity change from 0 to 8 [ 651.370582][T30985] netlink: 88 bytes leftover after parsing attributes in process `syz.2.12573'. [ 651.454110][T30989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12575'. [ 651.463465][T30989] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12575'. [ 651.504565][T30983] SQUASHFS error: Unable to read directory block [629:26] [ 651.739685][T31002] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12582'. [ 651.902184][T31014] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.12587'. [ 652.060929][T21800] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 652.170985][T31026] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12593'. [ 652.190861][T31026] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12593'. [ 652.360864][T21800] usb 1-1: Using ep0 maxpacket: 32 [ 652.531057][T21800] usb 1-1: unable to get BOS descriptor or descriptor too short [ 652.631063][T21800] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 186, changing to 7 [ 652.861164][T21800] usb 1-1: New USB device found, idVendor=0644, idProduct=8020, bcdDevice= 0.40 [ 652.884690][T21800] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.923973][T21800] usb 1-1: Product: syz [ 652.928307][T21800] usb 1-1: Manufacturer: syz [ 652.964503][T21800] usb 1-1: SerialNumber: syz [ 653.376738][T21800] usb 1-1: unit 255 not found! [ 653.412603][T21800] disable ehci-hcd to run US-144 [ 653.458102][T21800] disable ehci-hcd to run US-144 [ 653.494217][T21800] usb 1-1: USB disconnect, device number 60 [ 653.631071][T31094] loop4: detected capacity change from 0 to 4096 [ 653.732619][T31094] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x0000000000000005,,errors=continue. Quota mode: writeback. [ 653.781403][ T4345] udevd[4345]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 653.887737][ C0] sd 0:0:1:0: tag#70 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 653.898115][ C0] sd 0:0:1:0: tag#70 CDB: opcode=0xdf (vendor) [ 653.904383][ C0] sd 0:0:1:0: tag#70 CDB[00]: df da ea 67 37 29 de ee 3f 2e 48 1d 98 f9 14 a8 [ 653.913348][ C0] sd 0:0:1:0: tag#70 CDB[10]: 69 9e e0 fc 14 85 5a c8 92 10 d9 b6 a2 30 85 8a [ 653.922314][ C0] sd 0:0:1:0: tag#70 CDB[20]: ba [ 654.162162][ T4265] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 654.277239][T31126] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 654.310945][T21800] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 654.526711][ T4265] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 654.567321][ T4265] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.589656][ T4265] usb 2-1: config 0 descriptor?? [ 654.600800][T21800] usb 1-1: Using ep0 maxpacket: 16 [ 654.726506][T31151] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12653'. [ 654.737389][T21800] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 654.756640][T21800] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 654.799906][T31153] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12654'. [ 654.824367][T21800] usb 1-1: config 0 has no interface number 0 [ 654.914809][ T4265] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 654.929510][ T4265] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 654.961305][ T4265] [drm:udl_init] *ERROR* Selecting channel failed [ 654.987788][ T4265] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 655.004137][ T4265] [drm] Initialized udl on minor 2 [ 655.026612][ T4265] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 655.041248][T21800] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 655.056033][ T4265] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 655.058521][T21800] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.091513][ T4265] usb 2-1: USB disconnect, device number 55 [ 655.098450][ T4177] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 655.108783][T21800] usb 1-1: Product: syz [ 655.120929][T21800] usb 1-1: Manufacturer: syz [ 655.129522][ T4177] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 655.146545][ T4177] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 655.158771][T21800] usb 1-1: SerialNumber: syz [ 655.203625][T21800] usb 1-1: config 0 descriptor?? [ 655.265607][T21800] sr9700: probe of 1-1:0.41 failed with error -22 [ 655.499192][T21800] usb 1-1: USB disconnect, device number 61 [ 655.638291][T31190] bond0: (slave ip6tnl0): refused to change device type [ 655.658764][T31194] netlink: 'syz.3.12674': attribute type 1 has an invalid length. [ 655.898282][T31206] netlink: 'syz.4.12681': attribute type 3 has an invalid length. [ 655.939024][T31206] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12681'. [ 655.960111][T31209] binfmt_misc: register: failed to install interpreter file ./file2 [ 655.968998][T31210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12684'. [ 656.069369][T31216] netlink: 'syz.4.12686': attribute type 9 has an invalid length. [ 656.124492][T31219] loop3: detected capacity change from 0 to 128 [ 656.173663][T31224] netlink: 'syz.2.12689': attribute type 1 has an invalid length. [ 656.392285][T31236] fuse: blksize only supported for fuseblk [ 656.660111][T31252] loop1: detected capacity change from 0 to 128 [ 656.666764][ T9496] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 656.688376][T31253] netlink: 244 bytes leftover after parsing attributes in process `syz.0.12703'. [ 656.918505][T31260] loop0: detected capacity change from 0 to 2048 [ 657.018581][T31260] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 657.041323][ T9496] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 657.058943][T31272] netlink: 48 bytes leftover after parsing attributes in process `syz.2.12714'. [ 657.073776][ T9496] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 657.106871][T31260] Invalid option length (0) for dns_resolver key [ 657.121039][ T9496] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.203277][ T9496] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 657.263222][T31278] SET target dimension over the limit! [ 657.841777][T31305] loop0: detected capacity change from 0 to 4096 [ 657.938691][T31305] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 657.970651][T31305] NILFS (loop0): mounting unchecked fs [ 657.977023][T31305] NILFS (loop0): recovery required for readonly filesystem [ 658.003008][T31305] NILFS (loop0): write access will be enabled during recovery [ 658.077019][ T4345] udevd[4345]: incorrect nilfs2 checksum on /dev/loop0 [ 658.094377][T31305] NILFS (loop0): norecovery option specified, skipping roll-forward recovery [ 658.177908][T31325] netlink: 236 bytes leftover after parsing attributes in process `syz.2.12739'. [ 658.201451][T31305] NILFS (loop0): couldn't remount because the filesystem is in an incomplete recovery state [ 658.262114][T31326] loop3: detected capacity change from 0 to 1764 [ 658.277771][ T4345] udevd[4345]: incorrect nilfs2 checksum on /dev/loop0 [ 658.285304][ T9496] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 658.490971][ T9496] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 658.520106][ T9496] stv0680 5-1:4.0: last error: 0, command = 0x0 [ 658.581555][ T9496] usb 5-1: USB disconnect, device number 52 [ 659.029777][T31371] netlink: 52 bytes leftover after parsing attributes in process `syz.0.12762'. [ 659.113823][T31375] loop4: detected capacity change from 0 to 736 [ 659.587738][T31390] loop0: detected capacity change from 0 to 4096 [ 659.742310][T31390] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 659.840447][T31390] ntfs: (device loop0): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 659.887494][T31390] ntfs: (device loop0): read_ntfs_boot_sector(): Hot-fix: Recovery of primary boot sector failed: Read-only mount. [ 659.916539][T31390] ntfs: (device loop0): read_ntfs_boot_sector(): Using backup boot sector. [ 659.952313][T31390] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 659.975846][T31390] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 660.031702][T31390] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 660.057706][T31390] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 660.124982][T31390] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 660.175462][T31390] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 660.212404][T31390] ntfs: volume version 3.1. [ 660.725776][T31452] rtc_cmos 00:00: Alarms can be up to one day in the future [ 660.850955][ T4177] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 660.953248][T21802] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 661.226084][ T4177] usb 5-1: config 7 descriptor has 1 excess byte, ignoring [ 661.243398][ T4177] usb 5-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 661.421266][ T4177] usb 5-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 661.430585][ T4177] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.450989][ T4177] usb 5-1: Product: syz [ 661.455359][ T4177] usb 5-1: Manufacturer: syz [ 661.460000][ T4177] usb 5-1: SerialNumber: syz [ 661.531011][T21802] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 661.540315][T21802] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.541457][ T4177] rndis_wlan 5-1:7.0: skipping garbage [ 661.570834][ T4177] usb 5-1: bad CDC descriptors [ 661.591401][ T4177] rndis_host 5-1:7.0: skipping garbage [ 661.597157][ T4177] usb 5-1: bad CDC descriptors [ 661.598401][T21802] usb 4-1: Product: syz [ 661.611006][T21802] usb 4-1: Manufacturer: syz [ 661.615679][T21802] usb 4-1: SerialNumber: syz [ 661.635622][ T4177] option 5-1:7.0: GSM modem (1-port) converter detected [ 661.693411][T31500] netlink: 44 bytes leftover after parsing attributes in process `syz.2.12826'. [ 661.704240][T21802] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 661.737546][T31500] netlink: 43 bytes leftover after parsing attributes in process `syz.2.12826'. [ 661.751917][ T4177] usb 5-1: USB disconnect, device number 53 [ 661.758786][ T4177] option 5-1:7.0: device disconnected [ 661.772260][T31500] netlink: 'syz.2.12826': attribute type 5 has an invalid length. [ 661.800496][T31500] netlink: 43 bytes leftover after parsing attributes in process `syz.2.12826'. [ 661.960448][T31483] loop1: detected capacity change from 0 to 32768 [ 662.081825][T31483] XFS (loop1): Mounting V5 Filesystem [ 662.131589][T31517] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12831'. [ 662.232233][T31524] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12834'. [ 662.237351][T31483] XFS (loop1): Ending clean mount [ 662.411059][T21802] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 662.499064][ T4188] XFS (loop1): Unmounting Filesystem [ 662.674462][T22630] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 662.853378][T21799] usb 4-1: USB disconnect, device number 61 [ 662.885220][T31550] netlink: 'syz.4.12848': attribute type 1 has an invalid length. [ 662.893651][T31550] netlink: 'syz.4.12848': attribute type 3 has an invalid length. [ 662.901804][T31550] netlink: 224 bytes leftover after parsing attributes in process `syz.4.12848'. [ 662.912523][T31550] NCSI netlink: No device for ifindex 55159 [ 662.950849][T22630] usb 3-1: Using ep0 maxpacket: 32 [ 663.049991][T31556] loop4: detected capacity change from 0 to 256 [ 663.081281][T22630] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 62 [ 663.091480][T21800] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 663.148291][T31556] FAT-fs (loop4): Directory bread(block 64) failed [ 663.155975][T31556] FAT-fs (loop4): Directory bread(block 65) failed [ 663.163160][T31556] FAT-fs (loop4): Directory bread(block 66) failed [ 663.169999][T31556] FAT-fs (loop4): Directory bread(block 67) failed [ 663.177674][T31556] FAT-fs (loop4): Directory bread(block 68) failed [ 663.184769][T31556] FAT-fs (loop4): Directory bread(block 69) failed [ 663.192097][T31556] FAT-fs (loop4): Directory bread(block 70) failed [ 663.198928][T31556] FAT-fs (loop4): Directory bread(block 71) failed [ 663.206113][T31556] FAT-fs (loop4): Directory bread(block 72) failed [ 663.213986][T31556] FAT-fs (loop4): Directory bread(block 73) failed [ 663.254456][T22630] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 663.265080][T22630] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.273561][T22630] usb 3-1: Product: syz [ 663.278017][T22630] usb 3-1: Manufacturer: syz [ 663.283798][T22630] usb 3-1: SerialNumber: syz [ 663.299108][T22630] usb 3-1: config 0 descriptor?? [ 663.321311][T31530] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 663.341000][T21800] usb 1-1: Using ep0 maxpacket: 8 [ 663.341007][ T4177] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 663.440945][T21802] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 663.458310][T21802] ath9k_htc: Failed to initialize the device [ 663.485339][T21799] usb 4-1: ath9k_htc: USB layer deinitialized [ 663.511315][T21800] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 663.536162][T21800] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 663.554168][T21800] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 663.580846][ T4177] usb 2-1: Using ep0 maxpacket: 32 [ 663.597791][ T4265] usb 3-1: USB disconnect, device number 48 [ 663.607601][T21800] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 663.623802][T21800] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.633603][T31565] ksmbd: Unknown IPC event: 10, ignore. [ 663.647197][T21800] usb 1-1: config 0 descriptor?? [ 663.701053][ T4177] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 663.717506][ T4177] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 663.911162][ T4177] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 663.944189][ T4177] usb 2-1: New USB device strings: Mfr=229, Product=129, SerialNumber=131 [ 663.967326][ T4177] usb 2-1: Product: syz [ 663.971684][ T4177] usb 2-1: Manufacturer: syz [ 663.973209][T21800] usb 1-1: USB disconnect, device number 62 [ 663.985329][ T4177] usb 2-1: SerialNumber: syz [ 664.031244][T31584] loop4: detected capacity change from 0 to 64 [ 664.054302][ T4177] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input40 [ 664.101266][T31584] MINIX-fs: mounting file system with errors, running fsck is recommended [ 664.234021][T31592] netlink: 5 bytes leftover after parsing attributes in process `syz.2.12868'. [ 664.333500][T31592] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 664.366643][T31596] netlink: 'syz.3.12870': attribute type 4 has an invalid length. [ 664.378095][ T4265] usb 2-1: USB disconnect, device number 56 [ 664.384188][ C1] appletouch 2-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 664.401519][T31596] netlink: 152 bytes leftover after parsing attributes in process `syz.3.12870'. [ 664.428195][ T4265] appletouch 2-1:1.0: input: appletouch disconnected [ 664.512440][T31600] netlink: 8752 bytes leftover after parsing attributes in process `syz.2.12872'. [ 664.576482][T31606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12875'. [ 665.050892][ T4177] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 665.200055][T31642] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 665.308404][T31640] loop4: detected capacity change from 0 to 4096 [ 665.376555][T31640] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 665.430427][T31640] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 665.480332][T31640] ntfs3: loop4: mft corrupted [ 665.581238][ T4177] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 665.610789][ T4177] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.639760][ T4177] usb 3-1: Product: syz [ 665.650921][ T4177] usb 3-1: Manufacturer: syz [ 665.675998][ T4177] usb 3-1: SerialNumber: syz [ 665.697217][ T4177] usb 3-1: config 0 descriptor?? [ 665.762265][ T4177] ch341 3-1:0.0: ch341-uart converter detected [ 665.880677][T31674] netlink: 'syz.0.12907': attribute type 21 has an invalid length. [ 666.004087][T31683] device bridge_slave_0 left promiscuous mode [ 666.029796][T31683] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.112035][T31683] bond0: (slave bond_slave_0): Releasing backup interface [ 666.141669][T31683] bond0: (slave bond_slave_1): Releasing backup interface [ 666.165603][T31683] team0: Port device team_slave_0 removed [ 666.201058][ T4177] usb 3-1: failed to send control message: -71 [ 666.212735][T31683] team0: Port device team_slave_1 removed [ 666.213526][ T4177] ch341-uart: probe of ttyUSB0 failed with error -71 [ 666.219333][T31683] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 666.272282][ T4177] usb 3-1: USB disconnect, device number 49 [ 666.300644][ T4177] ch341 3-1:0.0: device disconnected [ 666.341409][T31683] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 666.411117][T21800] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 666.419100][T21802] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 666.625343][T21800] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 666.690924][T21802] usb 1-1: Using ep0 maxpacket: 8 [ 666.732874][T31717] netlink: 'syz.4.12929': attribute type 4 has an invalid length. [ 666.751120][T31717] __nla_validate_parse: 7 callbacks suppressed [ 666.751137][T31717] netlink: 152 bytes leftover after parsing attributes in process `syz.4.12929'. [ 666.784408][T31717] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 666.841151][T21802] usb 1-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 666.870980][T21802] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.914761][T21802] usb 1-1: config 0 descriptor?? [ 667.044048][T31721] loop3: detected capacity change from 0 to 8192 [ 667.081789][T31736] netlink: 'syz.1.12935': attribute type 1 has an invalid length. [ 667.136456][T31721] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 667.154836][T31721] REISERFS (device loop3): using ordered data mode [ 667.171586][T31721] reiserfs: using flush barriers [ 667.187352][T31721] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 667.204053][T21802] usb 1-1: string descriptor 0 read error: -71 [ 667.210297][T21802] uvcvideo 1-1:0.0: Found multiple Units with ID 1 [ 667.242647][T21802] usb 1-1: Found UVC 0.00 device (2833:0201) [ 667.251071][T21800] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 667.262495][T31721] REISERFS (device loop3): checking transaction log (loop3) [ 667.336731][T21802] usb 1-1: No valid video chain found. [ 667.398084][T21802] usb 1-1: USB disconnect, device number 63 [ 667.492543][T31721] REISERFS (device loop3): Using tea hash to sort names [ 667.499960][T31721] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 667.509976][T21800] usb 5-1: Using ep0 maxpacket: 16 [ 667.656590][T21800] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 667.705191][T21800] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 255, changing to 11 [ 667.780186][T21800] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 57872, setting to 1024 [ 667.833351][T21800] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 667.870779][T21800] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 667.880513][T21800] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 667.950907][T21800] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 667.987945][T21800] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.021446][T21800] usb 5-1: config 0 descriptor?? [ 668.051407][T31777] bond0: (slave syz_tun): Releasing backup interface [ 668.071791][T31777] device syz_tun left promiscuous mode [ 668.122237][T31777] device batadv0 left promiscuous mode [ 668.157273][T31777] bridge0: port 1(batadv0) entered disabled state [ 668.197643][T31784] loop1: detected capacity change from 0 to 1024 [ 668.218977][T31777] bond0: (slave bond_slave_0): Releasing backup interface [ 668.261663][T31777] device bond_slave_0 left promiscuous mode [ 668.282025][T31777] bond0: (slave bond_slave_1): Releasing backup interface [ 668.286723][T21800] rc_core: IR keymap rc-hauppauge not found [ 668.313279][T31784] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 668.323150][T31777] device bond_slave_1 left promiscuous mode [ 668.324557][T21800] Registered IR keymap rc-empty [ 668.388956][T21800] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 668.401824][T31777] team0: Port device team_slave_0 removed [ 668.447134][T31777] team0: Port device team_slave_1 removed [ 668.453572][T21800] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 668.475334][T31777] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 668.494199][T31784] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 69: comm syz.1.12952: lblock 8 mapped to illegal pblock 69 (length 1) [ 668.511600][T31784] EXT4-fs (loop1): Remounting filesystem read-only [ 668.519007][T21800] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 668.539377][T31784] __quota_error: 19 callbacks suppressed [ 668.539398][T31784] Quota error (device loop1): write_blk: dquota write failed [ 668.557440][T31777] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 668.566722][T21800] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input41 [ 668.567312][T31784] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 68: comm syz.1.12952: lblock 7 mapped to illegal pblock 68 (length 1) [ 668.586687][T31777] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 668.607679][T31784] EXT4-fs (loop1): Remounting filesystem read-only [ 668.629489][T31784] Quota error (device loop1): write_blk: dquota write failed [ 668.639290][T31797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12948'. [ 668.663182][T31797] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12948'. [ 668.671608][T31784] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 67: comm syz.1.12952: lblock 6 mapped to illegal pblock 67 (length 1) [ 668.673594][T31784] EXT4-fs (loop1): Remounting filesystem read-only [ 668.711265][T31784] Quota error (device loop1): write_blk: dquota write failed [ 668.729103][T31784] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 668.730381][T21800] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 668.793439][T31784] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 48: comm syz.1.12952: lblock 0 mapped to illegal pblock 48 (length 1) [ 668.811090][T21800] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 668.861013][T21800] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 668.881851][T31784] EXT4-fs (loop1): Remounting filesystem read-only [ 668.900945][T21800] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 668.909756][T31784] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 668.931366][T21800] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 668.971703][T31784] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.12952: Failed to acquire dquot type 0 [ 668.990874][T21800] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 669.001407][T31784] EXT4-fs (loop1): Remounting filesystem read-only [ 669.008020][T31784] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 669.021028][T21800] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 669.071735][T21800] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 669.098302][T31784] EXT4-fs (loop1): Remounting filesystem read-only [ 669.110880][T21800] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 669.127849][T31784] EXT4-fs error (device loop1): ext4_evict_inode:284: inode #11: comm syz.1.12952: mark_inode_dirty error [ 669.140911][T21800] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 669.184708][T21800] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 669.200902][T31784] EXT4-fs (loop1): Remounting filesystem read-only [ 669.213666][T21800] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 669.221270][T31784] EXT4-fs warning (device loop1): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 669.259989][T21800] usb 5-1: USB disconnect, device number 54 [ 669.280899][T31784] EXT4-fs (loop1): 1 orphan inode deleted [ 669.286843][T31784] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,noblock_validity,data_err=ignore,errors=remount-ro,nodiscard,stripe=0x0000000000000001,jqfmt=vfsv1,. Quota mode: none. [ 669.305951][ T4429] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 669.347022][T31830] netlink: 'syz.3.12965': attribute type 30 has an invalid length. [ 669.415086][ T4429] EXT4-fs (loop1): Remounting filesystem read-only [ 669.437039][ T4429] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 669.446075][T31795] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 669.500958][ T4429] EXT4-fs error (device loop1): ext4_release_dquot:6272: comm kworker/u4:12: Failed to release dquot type 0 [ 669.519509][T31784] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 48: comm syz.1.12952: lblock 0 mapped to illegal pblock 48 (length 1) [ 669.541128][T31795] EXT4-fs (loop1): Remounting filesystem read-only [ 669.570854][ T4429] EXT4-fs (loop1): Remounting filesystem read-only [ 669.650041][T31784] EXT4-fs (loop1): Remounting filesystem read-only [ 669.690984][T31784] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 669.700194][T31842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12970'. [ 669.800331][ T4188] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 669.857542][ T4188] EXT4-fs (loop1): Remounting filesystem read-only [ 669.857612][ T4188] EXT4-fs error (device loop1): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 669.866527][ T4188] EXT4-fs (loop1): Remounting filesystem read-only [ 670.000884][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 670.190406][T31866] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12979'. [ 670.250615][T31866] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 670.388772][T31878] loop0: detected capacity change from 0 to 1024 [ 670.452914][T31883] netlink: 'syz.2.12987': attribute type 5 has an invalid length. [ 670.466721][T31878] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 670.510841][ T1110] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 670.553913][T31878] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 69: comm syz.0.12984: lblock 8 mapped to illegal pblock 69 (length 1) [ 670.572977][T31878] EXT4-fs (loop0): Remounting filesystem read-only [ 670.579579][T31878] Quota error (device loop0): write_blk: dquota write failed [ 670.587781][T31878] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 68: comm syz.0.12984: lblock 7 mapped to illegal pblock 68 (length 1) [ 670.610782][T31878] EXT4-fs (loop0): Remounting filesystem read-only [ 670.617511][T31878] Quota error (device loop0): write_blk: dquota write failed [ 670.626124][T31878] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 67: comm syz.0.12984: lblock 6 mapped to illegal pblock 67 (length 1) [ 670.652370][T31878] EXT4-fs (loop0): Remounting filesystem read-only [ 670.659094][T31878] Quota error (device loop0): write_blk: dquota write failed [ 670.667579][T31878] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 48: comm syz.0.12984: lblock 0 mapped to illegal pblock 48 (length 1) [ 670.691140][T31878] EXT4-fs (loop0): Remounting filesystem read-only [ 670.701076][T31878] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.12984: Failed to acquire dquot type 0 [ 670.731280][T31878] EXT4-fs (loop0): Remounting filesystem read-only [ 670.738119][T31878] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 670.758970][T31894] tmpfs: Bad value for 'uid' [ 670.781177][ T1110] usb 4-1: Using ep0 maxpacket: 8 [ 670.784479][T31878] EXT4-fs (loop0): Remounting filesystem read-only [ 670.799055][T31878] EXT4-fs error (device loop0): ext4_evict_inode:284: inode #11: comm syz.0.12984: mark_inode_dirty error [ 670.820952][T31897] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 670.840772][T31878] EXT4-fs (loop0): Remounting filesystem read-only [ 670.868910][T31878] EXT4-fs warning (device loop0): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 670.901366][ T1110] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 670.911657][T31878] EXT4-fs (loop0): 1 orphan inode deleted [ 670.918298][T31878] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,noblock_validity,data_err=ignore,errors=remount-ro,nodiscard,stripe=0x0000000000000001,jqfmt=vfsv1,. Quota mode: none. [ 670.933099][ T1110] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 670.944440][ T4421] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 670.996692][ T1110] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 671.012417][ T1110] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 671.022853][ T4421] EXT4-fs (loop0): Remounting filesystem read-only [ 671.028886][ T1110] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 671.043416][ T1110] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 671.059992][ T4421] EXT4-fs error (device loop0): ext4_release_dquot:6272: comm kworker/u4:10: Failed to release dquot type 0 [ 671.063480][ T1110] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.091077][ T4421] EXT4-fs (loop0): Remounting filesystem read-only [ 671.126760][T31878] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 48: comm syz.0.12984: lblock 0 mapped to illegal pblock 48 (length 1) [ 671.134002][ T1110] usb 4-1: config 0 descriptor?? [ 671.171577][T31869] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 671.188709][T31878] EXT4-fs (loop0): Remounting filesystem read-only [ 671.298961][ T4190] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 671.372521][ T4190] EXT4-fs (loop0): Remounting filesystem read-only [ 671.379110][ T4190] EXT4-fs error (device loop0): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 671.489630][T31917] xt_CT: No such helper "netbios-ns" [ 671.490935][ T4190] EXT4-fs (loop0): Remounting filesystem read-only [ 671.599482][T31923] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 671.710310][ T4177] usb 4-1: USB disconnect, device number 62 [ 671.790345][T31937] x_tables: ip6_tables: SNAT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING [ 671.940843][ T1110] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 672.057580][T31949] netlink: 44 bytes leftover after parsing attributes in process `syz.2.13016'. [ 672.091766][T31949] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13016'. [ 672.116570][T31949] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13016'. [ 672.164839][T31955] loop4: detected capacity change from 0 to 256 [ 672.195881][T31957] netlink: 'syz.2.13020': attribute type 6 has an invalid length. [ 672.230865][T31957] netlink: 168 bytes leftover after parsing attributes in process `syz.2.13020'. [ 672.311085][ T1110] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 672.341127][ T1110] usb 2-1: config 0 has no interface number 0 [ 672.347322][ T1110] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 672.388706][ T1110] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 672.577955][T31975] loop3: detected capacity change from 0 to 256 [ 672.595923][ T1110] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 672.619226][ T1110] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.650088][ T1110] usb 2-1: Product: syz [ 672.687319][ T1110] usb 2-1: Manufacturer: syz [ 672.712072][ T1110] usb 2-1: SerialNumber: syz [ 672.720614][ T1110] usb 2-1: config 0 descriptor?? [ 672.763765][ T1110] yurex 2-1:0.50: Could not submitting URB [ 672.771948][ T1110] yurex: probe of 2-1:0.50 failed with error -5 [ 673.005470][T21802] usb 2-1: USB disconnect, device number 57 [ 673.257193][T32016] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13050'. [ 673.428199][T32028] netlink: 'syz.4.13055': attribute type 4 has an invalid length. [ 673.460953][T32028] netlink: 206236 bytes leftover after parsing attributes in process `syz.4.13055'. [ 673.628697][T32044] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13062'. [ 673.660101][T32044] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13062'. [ 673.984196][T32070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13076'. [ 674.088165][T32070] netlink: 540 bytes leftover after parsing attributes in process `syz.1.13076'. [ 674.244271][T32067] loop4: detected capacity change from 0 to 8192 [ 674.391061][T32067] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 674.400358][T32067] REISERFS (device loop4): using ordered data mode [ 674.428108][T32067] reiserfs: using flush barriers [ 674.466325][T32067] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 674.561188][T32067] REISERFS (device loop4): checking transaction log (loop4) [ 674.892122][T32067] REISERFS (device loop4): Using tea hash to sort names [ 674.899520][T32067] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 675.541390][ T9496] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 675.945408][ T9496] usb 3-1: unable to get BOS descriptor or descriptor too short [ 675.954654][T21800] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 676.051116][ T9496] usb 3-1: config 63 has an invalid interface number: 66 but max is 0 [ 676.059376][ T9496] usb 3-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 676.080957][T32172] nft_compat: unsupported protocol 5 [ 676.124781][ T9496] usb 3-1: config 63 has no interface number 0 [ 676.148950][T32174] SET target dimension over the limit! [ 676.155741][ T9496] usb 3-1: config 63 interface 66 has no altsetting 0 [ 676.203055][T32178] netlink: 'syz.1.13130': attribute type 1 has an invalid length. [ 676.239169][T32180] loop4: detected capacity change from 0 to 128 [ 676.323500][T32180] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 676.333549][ T9496] usb 3-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 676.358024][T32180] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 676.365215][ T9496] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.420934][ T9496] usb 3-1: Product: syz [ 676.425812][ T9496] usb 3-1: Manufacturer: syz [ 676.431762][ T9496] usb 3-1: SerialNumber: syz [ 676.556791][T32192] openvswitch: netlink: IP tunnel dst address not specified [ 676.562331][T21800] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 676.580758][T21800] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.610543][T21800] usb 1-1: Product: syz [ 676.615019][T21800] usb 1-1: Manufacturer: syz [ 676.619658][T21800] usb 1-1: SerialNumber: syz [ 676.635123][T21800] usb 1-1: config 0 descriptor?? [ 676.640959][T21799] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 676.702745][T21800] ch341 1-1:0.0: ch341-uart converter detected [ 676.871116][T32206] loop4: detected capacity change from 0 to 4096 [ 676.900928][ T9496] usb 3-1: Found UVC 0.07 device syz (174f:8acf) [ 676.907362][ T9496] usb 3-1: No valid video chain found. [ 676.921916][T32206] __ntfs_warning: 4 callbacks suppressed [ 676.921933][T32206] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 676.923545][T21800] usb 1-1: short control message received (0 < 2) [ 676.948120][ C0] vkms_vblank_simulate: vblank timer overrun [ 676.957022][ T9496] usb 3-1: USB disconnect, device number 50 [ 677.023534][T21800] usb 1-1: failed to receive control message: -5 [ 677.023605][T32206] ntfs: (device loop4): parse_options(): NLS character set macgre not found. Using previous one utf8. [ 677.030664][T21800] ch341-uart: probe of ttyUSB0 failed with error -5 [ 677.088265][T32206] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 677.099072][T32206] ntfs: (device loop4): read_ntfs_boot_sector(): Hot-fix: Recovery of primary boot sector failed: Read-only mount. [ 677.112411][T32206] ntfs: (device loop4): read_ntfs_boot_sector(): Using backup boot sector. [ 677.152858][T32206] ntfs: volume version 3.1. [ 677.161254][T21799] usb 2-1: unable to get BOS descriptor or descriptor too short [ 677.181779][T21802] usb 1-1: USB disconnect, device number 64 [ 677.190611][T21802] ch341 1-1:0.0: device disconnected [ 677.231087][T21799] usb 2-1: not running at top speed; connect to a high speed hub [ 677.322141][T21799] usb 2-1: config 4 has an invalid interface number: 76 but max is 0 [ 677.338644][T21799] usb 2-1: config 4 has no interface number 0 [ 677.347941][T21799] usb 2-1: config 4 interface 76 has no altsetting 0 [ 677.383850][T32210] ieee802154 phy1 wpan1: encryption failed: -22 [ 677.509325][T32216] loop4: detected capacity change from 0 to 512 [ 677.541172][T21799] usb 2-1: New USB device found, idVendor=19d2, idProduct=1283, bcdDevice=c0.77 [ 677.571175][T21799] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.589885][T21799] usb 2-1: Product: syz [ 677.600116][T32222] xt_CT: You must specify a L4 protocol and not use inversions on it [ 677.639995][T21799] usb 2-1: Manufacturer: syz [ 677.657047][T32216] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 677.657447][T21799] usb 2-1: SerialNumber: syz [ 677.681330][T32216] ext4 filesystem being mounted at /2660/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 677.977240][T32239] netlink: 'syz.4.13158': attribute type 4 has an invalid length. [ 677.986670][T32239] netlink: 'syz.4.13158': attribute type 30 has an invalid length. [ 678.100998][T21799] uvcvideo 2-1:4.76: Found multiple Units with ID 1 [ 678.150915][T21799] usb 2-1: Found UVC 0.00 device syz (19d2:1283) [ 678.157443][T21799] usb 2-1: No valid video chain found. [ 678.196092][T21799] usb 2-1: USB disconnect, device number 58 [ 678.235692][T32253] loop0: detected capacity change from 0 to 8 [ 678.281473][T32253] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 678.305319][T10794] udevd[10794]: incorrect cramfs checksum on /dev/loop0 [ 678.313429][T32257] xt_l2tp: missing protocol rule (udp|l2tpip) [ 678.375094][T10794] udevd[10794]: incorrect cramfs checksum on /dev/loop0 [ 678.551173][T32267] QAT: Device 1 not found [ 678.703591][T32274] misc userio: Invalid payload size [ 679.556998][T32330] loop0: detected capacity change from 0 to 512 [ 679.579105][T32333] loop4: detected capacity change from 0 to 128 [ 679.598985][T32333] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 679.620194][T32333] hpfs: filesystem error: improperly stopped [ 679.639717][T32333] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 679.648169][T32333] hpfs: You really don't want any checks? You are crazy... [ 679.663164][T32330] EXT4-fs (loop0): orphan cleanup on readonly fs [ 679.667095][T32333] hpfs: Code page index out of array [ 679.683058][T32333] hpfs: code page support is disabled [ 679.696786][T32330] Quota error (device loop0): v2_read_file_info: Block with free entry too big (9 >= 6). [ 679.708251][T32333] hpfs: hpfs_map_4sectors(): unaligned read [ 679.731068][T21800] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 679.739495][T32333] hpfs: hpfs_map_4sectors(): unaligned read [ 679.776071][T32333] hpfs: filesystem error: unable to find root dir [ 679.803155][T32330] EXT4-fs warning (device loop0): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 679.880089][T32330] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 679.919146][T32330] EXT4-fs error (device loop0): ext4_orphan_get:1432: comm syz.0.13203: bad orphan inode 14 [ 679.941457][T32330] ext4_test_bit(bit=13, block=18) = 1 [ 679.946919][T32330] is_bad_inode(inode)=0 [ 679.978150][T32330] NEXT_ORPHAN(inode)=0 [ 679.990828][T32330] max_ino=32 [ 680.030908][T21800] usb 3-1: Using ep0 maxpacket: 16 [ 680.043405][T32330] i_nlink=1 [ 680.046661][T32330] EXT4-fs (loop0): 1 truncate cleaned up [ 680.061212][T32330] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 680.151202][T21800] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 680.180252][T21800] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 255, changing to 11 [ 680.221744][T21800] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 57872, setting to 1024 [ 680.253452][T21800] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 680.289160][T21800] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 680.324305][T21800] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 680.359921][T32362] __nla_validate_parse: 3 callbacks suppressed [ 680.359940][T32362] netlink: 64 bytes leftover after parsing attributes in process `syz.3.13220'. [ 680.383276][T21800] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 680.408304][T21800] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.430340][T32362] netlink: 64 bytes leftover after parsing attributes in process `syz.3.13220'. [ 680.465882][T21800] usb 3-1: config 0 descriptor?? [ 680.535675][T32366] netlink: 168 bytes leftover after parsing attributes in process `syz.1.13222'. [ 680.558652][T32370] netlink: 'syz.3.13224': attribute type 1 has an invalid length. [ 680.653717][T32375] netlink: 56 bytes leftover after parsing attributes in process `syz.4.13225'. [ 680.670858][T21800] rc_core: IR keymap rc-hauppauge not found [ 680.676959][T21800] Registered IR keymap rc-empty [ 680.698822][T21800] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 680.750990][T21800] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 680.803611][T21800] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 680.828757][T21800] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input42 [ 680.898892][T21800] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 680.941016][T21800] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 680.962268][T32393] netlink: 72 bytes leftover after parsing attributes in process `syz.1.13233'. [ 680.980985][T21800] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 681.021048][T21800] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 681.036798][T32398] xt_bpf: check failed: parse error [ 681.078315][T32400] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.13236'. [ 681.081636][T21800] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 681.095502][T21802] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 681.116979][T32400] bridge_slave_1: default FDB implementation only supports local addresses [ 681.131699][T21800] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 681.181021][T21800] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 681.221127][T21800] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 681.280870][T21800] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 681.320962][T21800] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 681.353037][T21800] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 681.379728][T21800] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 681.421321][T21800] usb 3-1: USB disconnect, device number 51 [ 681.511049][T21802] usb 1-1: config 1 has an invalid interface number: 128 but max is 1 [ 681.528542][T21802] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 681.551218][T21802] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 681.560329][T21802] usb 1-1: config 1 has no interface number 0 [ 681.567067][T21802] usb 1-1: config 1 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 681.578744][T21802] usb 1-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 681.724468][T32428] netlink: 'syz.4.13250': attribute type 41 has an invalid length. [ 681.751134][T21802] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 681.800920][T21802] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.827731][T21802] usb 1-1: Product: syz [ 681.836271][T21802] usb 1-1: Manufacturer: syz [ 681.854160][T21802] usb 1-1: SerialNumber: syz [ 681.869651][T32436] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 681.932139][T21802] cdc_wdm 1-1:1.128: skipping garbage [ 681.942316][T21802] cdc_wdm 1-1:1.128: cdc-wdm0: USB WDM device [ 681.968927][T21802] cdc_wdm 1-1:1.128: Unknown control protocol [ 682.142181][T22630] usb 1-1: USB disconnect, device number 65 [ 682.161126][T21802] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 682.171152][T32449] ax25_connect(): syz.3.13260 uses autobind, please contact jreuter@yaina.de [ 682.318113][T32461] netlink: 14 bytes leftover after parsing attributes in process `syz.2.13266'. [ 682.335320][T32461] device hsr_slave_0 left promiscuous mode [ 682.368479][T32461] device hsr_slave_1 left promiscuous mode [ 682.411919][T32465] loop3: detected capacity change from 0 to 1024 [ 682.450878][T21802] usb 2-1: Using ep0 maxpacket: 32 [ 682.621089][T21802] usb 2-1: unable to get BOS descriptor or descriptor too short [ 682.722033][T21802] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7 [ 682.780786][ T1110] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 682.885200][T32490] netlink: 92 bytes leftover after parsing attributes in process `syz.2.13279'. [ 682.950592][T21802] usb 2-1: New USB device found, idVendor=1235, idProduct=8215, bcdDevice= 0.40 [ 682.963353][T21802] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.005397][T21802] usb 2-1: Product: syz [ 683.009687][T21802] usb 2-1: Manufacturer: syz [ 683.045312][T21802] usb 2-1: SerialNumber: syz [ 683.050904][ T1110] usb 4-1: Using ep0 maxpacket: 8 [ 683.189285][T32506] netlink: 'syz.0.13288': attribute type 3 has an invalid length. [ 683.331064][ T1110] usb 4-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=88.56 [ 683.349916][ T1110] usb 4-1: New USB device strings: Mfr=102, Product=169, SerialNumber=3 [ 683.370832][ T1110] usb 4-1: Product: syz [ 683.375098][ T1110] usb 4-1: Manufacturer: syz [ 683.379755][ T1110] usb 4-1: SerialNumber: syz [ 683.419926][ T1110] usb 4-1: config 0 descriptor?? [ 683.421218][T21799] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 683.473219][ T1110] pwc: Logitech ViewPort AV 100 webcam detected. [ 683.480647][T21802] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 683.492520][T32520] netlink: 'syz.4.13295': attribute type 12 has an invalid length. [ 683.516390][T21802] usb 2-1: Focusrite Scarlett Gen 2/3 Mixer Driver disabled; use options snd_usb_audio vid=0x1235 pid=0x8215 device_setup=1 to enable and report any issues to g@b4.vu [ 683.569687][T32524] bad cache= option: nonw [ 683.569687][T32524] [ 683.578068][T32524] CIFS: VFS: bad cache= option: nonw [ 683.609545][T21802] usb 2-1: USB disconnect, device number 59 [ 683.726728][T32531] xt_socket: unknown flags 0x48 [ 683.731703][ T1110] pwc: Failed to set LED on/off time (-71) [ 683.751072][ T1110] pwc: send_video_command error -71 [ 683.757042][ T1110] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 683.774811][ T1110] Philips webcam: probe of 4-1:0.0 failed with error -71 [ 683.802919][T32535] netdevsim netdevsim0: Firmware load for './file0/file0/..' refused, path contains '..' component [ 683.821082][ T1110] usb 4-1: USB disconnect, device number 63 [ 683.841137][T21799] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 683.887478][T21799] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 683.911302][T32538] CIFS mount error: No usable UNC path provided in device string! [ 683.911302][T32538] [ 683.915647][ T4345] udevd[4345]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 683.984501][T32538] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 684.021056][T21799] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 684.030326][T21799] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 684.080955][T21799] usb 3-1: SerialNumber: syz [ 684.163888][T21799] usb 3-1: 0:2 : does not exist [ 684.230188][ T4246] hfsplus: b-tree write err: -5, ino 25 [ 684.236220][ T4246] hfsplus: b-tree write err: -5, ino 4 [ 684.241713][T32553] netlink: 72 bytes leftover after parsing attributes in process `syz.1.13311'. [ 684.295191][ T4246] hfsplus: b-tree write err: -5, ino 2 [ 684.367271][T21799] usb 3-1: USB disconnect, device number 52 [ 684.453499][T32564] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13316'. [ 684.481016][T32566] loop1: detected capacity change from 0 to 256 [ 684.532817][T32570] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 685.370856][T21799] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 685.419684][T32638] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 685.584241][T32647] loop0: detected capacity change from 0 to 256 [ 685.705931][T32647] FAT-fs (loop0): Directory bread(block 64) failed [ 685.721489][T32647] FAT-fs (loop0): Directory bread(block 65) failed [ 685.765225][T32647] FAT-fs (loop0): Directory bread(block 66) failed [ 685.784791][T32647] FAT-fs (loop0): Directory bread(block 67) failed [ 685.792387][T21799] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 685.810936][T21799] usb 5-1: config 0 has no interface number 0 [ 685.817538][T32647] FAT-fs (loop0): Directory bread(block 68) failed [ 685.837733][T21799] usb 5-1: config 0 interface 41 has no altsetting 0 [ 685.867450][T32647] FAT-fs (loop0): Directory bread(block 69) failed [ 685.886955][T32647] FAT-fs (loop0): Directory bread(block 70) failed [ 685.945590][T32647] FAT-fs (loop0): Directory bread(block 71) failed [ 686.002867][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.013870][T32647] FAT-fs (loop0): Directory bread(block 72) failed [ 686.020483][T32647] FAT-fs (loop0): Directory bread(block 73) failed [ 686.071143][T21799] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 686.103735][T21799] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.150912][T21799] usb 5-1: Product: syz [ 686.197875][T21799] usb 5-1: Manufacturer: syz [ 686.221196][T21799] usb 5-1: SerialNumber: syz [ 686.261884][T21799] usb 5-1: config 0 descriptor?? [ 686.551100][T21799] CoreChips: probe of 5-1:0.41 failed with error -71 [ 686.568313][T21799] usb 5-1: USB disconnect, device number 55 [ 686.664156][T32693] __nla_validate_parse: 1 callbacks suppressed [ 686.664174][T32693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13380'. [ 686.882271][T32706] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13385'. [ 686.961321][T32706] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13385'. [ 686.992351][T32706] netlink: 80 bytes leftover after parsing attributes in process `syz.2.13385'. [ 687.270239][T32723] netlink: 22 bytes leftover after parsing attributes in process `syz.1.13395'. [ 687.319211][T32731] netlink: 'syz.2.13399': attribute type 4 has an invalid length. [ 687.550863][ T9496] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 687.761018][T32759] tmpfs: Bad value for 'mpol' [ 687.801187][ T9496] usb 5-1: Using ep0 maxpacket: 8 [ 688.088244][ T9496] usb 5-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 688.098391][ T9496] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.125530][ T9496] usb 5-1: Product: syz [ 688.129998][ T9496] usb 5-1: Manufacturer: syz [ 688.160823][ T9496] usb 5-1: SerialNumber: syz [ 688.537185][ T340] sctp: [Deprecated]: syz.2.13437 (pid 340) Use of int in max_burst socket option. [ 688.537185][ T340] Use struct sctp_assoc_value instead [ 688.655380][ T9496] mxuport 5-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 688.688591][ T9496] mxuport: probe of 5-1:254.0 failed with error -5 [ 688.702520][ T348] netlink: 14 bytes leftover after parsing attributes in process `syz.2.13438'. [ 688.725461][ T9496] usb 5-1: USB disconnect, device number 56 [ 689.111630][ T371] 9pnet: Insufficient options for proto=fd [ 689.126732][ T369] netlink: 236 bytes leftover after parsing attributes in process `syz.3.13450'. [ 689.650919][T21800] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 690.061090][T21800] usb 5-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e [ 690.078196][T21800] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.163323][T21800] pwc: Logitech/Cisco VT Camera webcam detected. [ 690.591018][T21800] pwc: send_video_command error -71 [ 690.596370][T21800] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 690.615400][ T456] loop0: detected capacity change from 0 to 512 [ 690.634631][T21800] Philips webcam: probe of 5-1:127.0 failed with error -71 [ 690.658267][T21800] usb 5-1: USB disconnect, device number 57 [ 690.773287][ T456] EXT4-fs (loop0): 1 truncate cleaned up [ 690.779166][ T456] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 691.191637][ T486] loop4: detected capacity change from 0 to 22 [ 691.199126][ T487] netlink: 'syz.0.13506': attribute type 28 has an invalid length. [ 691.218511][ T486] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 691.229563][ T487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13506'. [ 691.274898][ T486] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 691.634648][ T470] loop1: detected capacity change from 0 to 32768 [ 691.719691][ T26] audit: type=1800 audit(1781336444.646:46): pid=470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.13496" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 691.820987][T21800] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 692.063731][ T523] netlink: 76 bytes leftover after parsing attributes in process `syz.3.13524'. [ 692.101046][ T523] netlink: 72 bytes leftover after parsing attributes in process `syz.3.13524'. [ 692.113397][ T523] netlink: 'syz.3.13524': attribute type 3 has an invalid length. [ 692.122296][ T523] netlink: 11 bytes leftover after parsing attributes in process `syz.3.13524'. [ 692.229017][T21800] usb 5-1: config 0 has no interfaces? [ 692.235324][ T530] netlink: 'syz.2.13528': attribute type 16 has an invalid length. [ 692.251117][T21800] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 692.260271][T21800] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.279030][ T9496] kernel write not supported for file /5141/net/rt_acct (pid: 9496 comm: kworker/1:9) [ 692.292489][ T536] netlink: 'syz.0.13529': attribute type 3 has an invalid length. [ 692.302464][ T530] netlink: 'syz.2.13528': attribute type 3 has an invalid length. [ 692.311269][ T530] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13528'. [ 692.327445][ T536] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.13529'. [ 692.338153][T21800] usb 5-1: config 0 descriptor?? [ 692.587539][ T550] loop3: detected capacity change from 0 to 16 [ 692.616856][ T9496] usb 5-1: USB disconnect, device number 58 [ 692.654511][ T550] erofs: (device loop3): mounted with root inode @ nid 36. [ 693.219232][ T578] loop3: detected capacity change from 0 to 164 [ 693.261412][ T573] loop1: detected capacity change from 0 to 4096 [ 693.332130][ T573] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 693.510610][ T573] ntfs: (device loop1): parse_options(): NLS character set macgre not found. Using previous one utf8. [ 693.553828][ T573] ntfs: (device loop1): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 693.593140][ T573] ntfs: (device loop1): read_ntfs_boot_sector(): Hot-fix: Recovery of primary boot sector failed: Read-only mount. [ 693.665598][ T573] ntfs: (device loop1): read_ntfs_boot_sector(): Using backup boot sector. [ 693.747007][ T573] ntfs: volume version 3.1. [ 694.191655][ T625] loop0: detected capacity change from 0 to 8 [ 694.329910][ T625] SQUASHFS error: Failed to read block 0x636: -5 [ 694.389253][ T625] SQUASHFS error: Unable to read metadata cache entry [634] [ 694.535167][ T641] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 641 comm: syz.3.13580) [ 694.611338][ T26] audit: type=1800 audit(1781336447.546:47): pid=641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.13580" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=125960 res=0 errno=0 [ 694.645631][ T649] nfs4: Bad value for 'source' [ 694.979520][ T673] netlink: 44 bytes leftover after parsing attributes in process `syz.3.13594'. [ 695.011216][ T673] netlink: 51 bytes leftover after parsing attributes in process `syz.3.13594'. [ 695.020496][ T673] netlink: 'syz.3.13594': attribute type 4 has an invalid length. [ 695.286203][ T1110] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 695.355226][ T693] x_tables: duplicate entry at hook 2 [ 695.541320][ T1110] usb 3-1: Using ep0 maxpacket: 16 [ 695.710960][ T1110] usb 3-1: unable to get BOS descriptor or descriptor too short [ 695.731007][ T719] CIFS mount error: No usable UNC path provided in device string! [ 695.731007][ T719] [ 695.742480][ T719] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 695.791286][ T1110] usb 3-1: config 5 has an invalid interface number: 141 but max is 0 [ 695.799690][ T1110] usb 3-1: config 5 has no interface number 0 [ 695.842662][ T724] loop1: detected capacity change from 0 to 64 [ 695.852912][ T721] loop4: detected capacity change from 0 to 2048 [ 695.860791][ T1110] usb 3-1: config 5 interface 141 altsetting 0 endpoint 0xD has an invalid bInterval 64, changing to 10 [ 695.952191][ T724] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 695.961182][T22630] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 695.976200][ T721] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 696.050898][ T1110] usb 3-1: New USB device found, idVendor=06cd, idProduct=0102, bcdDevice=1b.38 [ 696.070502][ T1110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.091403][ T732] openvswitch: netlink: Flow actions attr not present in new flow. [ 696.106161][ T1110] usb 3-1: Product: syz [ 696.125408][ T1110] usb 3-1: Manufacturer: syz [ 696.130093][ T1110] usb 3-1: SerialNumber: syz [ 696.280926][T22630] usb 4-1: Using ep0 maxpacket: 16 [ 696.367450][ T742] dlm: no local IP address has been set [ 696.386386][ T742] dlm: cannot start dlm midcomms -107 [ 696.411286][T22630] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 696.440069][T22630] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 696.457845][ T1110] keyspan 3-1:5.141: Keyspan - (without firmware) converter detected [ 696.468944][T22630] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 696.492549][ T1110] usb 3-1: USB disconnect, device number 53 [ 696.513273][T22630] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 696.524768][ T1110] keyspan 3-1:5.141: device disconnected [ 696.554693][T22630] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 696.588450][T22630] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 696.648086][T22630] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.691825][T22630] usb 4-1: config 0 descriptor?? [ 696.827895][ T763] loop1: detected capacity change from 0 to 512 [ 696.880914][T22630] rc_core: IR keymap rc-hauppauge not found [ 696.891336][T22630] Registered IR keymap rc-empty [ 696.896343][T22630] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 696.912021][ T763] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c02c, mo2=0002] [ 696.935439][ T763] System zones: 1-12 [ 696.937791][ T770] netlink: 64 bytes leftover after parsing attributes in process `syz.4.13641'. [ 696.987444][ T763] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.13638: error while reading EA inode 32 err=-116 [ 697.032408][T22630] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 697.056504][ T763] EXT4-fs (loop1): Remounting filesystem read-only [ 697.070141][ T763] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.13638: error while reading EA inode 32 err=-116 [ 697.084351][ T763] EXT4-fs (loop1): Remounting filesystem read-only [ 697.092006][ T763] EXT4-fs (loop1): 1 orphan inode deleted [ 697.097754][T22630] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 697.098464][ T763] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,debug,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsddf,jqfmt=vfsv1,grpid,. Quota mode: none. [ 697.146386][T22630] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input45 [ 697.235541][T22630] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 697.311140][T22630] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 697.351198][T22630] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 697.401093][T22630] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 697.445339][T22630] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 697.511087][T22630] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 697.552304][T22630] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 697.603422][ T803] netlink: 288 bytes leftover after parsing attributes in process `syz.4.13657'. [ 697.611262][T22630] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 697.651138][T22630] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 697.701109][T22630] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 697.732230][T22630] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 697.748188][T22630] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 697.794802][ T814] loop4: detected capacity change from 0 to 256 [ 697.899294][ T814] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 697.963523][T22630] usb 4-1: USB disconnect, device number 64 [ 698.057404][ T814] exFAT-fs (loop4): error, invalid size(size(0) > aligned(9223372036854777344) [ 698.057404][ T814] [ 698.057490][ T826] netlink: 3 bytes leftover after parsing attributes in process `syz.2.13668'. [ 698.095206][ T828] tc_dump_action: action bad kind [ 698.140532][ T814] exFAT-fs (loop4): Filesystem has been set read-only [ 698.222438][ T835] netlink: 'syz.2.13672': attribute type 5 has an invalid length. [ 698.627783][ T860] netlink: 'syz.0.13685': attribute type 32 has an invalid length. [ 698.790461][ T868] loop1: detected capacity change from 0 to 512 [ 698.928566][ T868] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 698.974997][ T868] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 698.993786][ T868] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 699.029929][ T868] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 699.128564][ T886] loop3: detected capacity change from 0 to 2048 [ 699.136156][ T868] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 699.147922][ T868] EXT4-fs (loop1): orphan cleanup on readonly fs [ 699.166831][ T868] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.13689: bg 0: block 34: padding at end of block bitmap is not set [ 699.193763][ T868] Quota error (device loop1): write_blk: dquota write failed [ 699.207893][ T868] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 699.249467][ T868] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.13689: Failed to acquire dquot type 1 [ 699.264665][ T886] loop3: p3 < > p4 < > [ 699.268998][ T886] loop3: partition table partially beyond EOD, truncated [ 699.291179][ T886] loop3: p3 start 4284289 is beyond EOD, truncated [ 699.347111][ T868] EXT4-fs (loop1): 1 truncate cleaned up [ 699.367435][ T868] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,bsddf,mb_optimize_scan=0x0000000000000000,acl,max_dir_size_kb=0x0000000000000001,noblock_validity,usrjquota=,jqfmt=vfsv0,inode_readahead_blks=0x0000000000001000,resgid=0x000000000000000a,sysvgroups,,errors=continue. Quota mode: writeback. [ 699.396914][ C0] vkms_vblank_simulate: vblank timer overrun [ 699.448047][ T909] netlink: 'syz.2.13707': attribute type 12 has an invalid length. [ 699.580917][ T1110] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 699.706324][ T4177] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 699.951055][ T1110] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 699.965801][ T1110] usb 4-1: config 220 descriptor has 1 excess byte, ignoring [ 699.976239][ T1110] usb 4-1: config 220 has no interface number 2 [ 699.983372][ T1110] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 699.998014][ T1110] usb 4-1: config 220 interface 0 has no altsetting 0 [ 700.005261][ T1110] usb 4-1: config 220 interface 76 has no altsetting 0 [ 700.011456][T21800] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 700.015912][ T1110] usb 4-1: config 220 interface 1 has no altsetting 0 [ 700.079126][ T934] netlink: 'syz.2.13719': attribute type 8 has an invalid length. [ 700.191197][ T1110] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 700.223432][ T1110] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.236364][ T1110] usb 4-1: Product: syz [ 700.241224][ T1110] usb 4-1: Manufacturer: syz [ 700.246060][ T1110] usb 4-1: SerialNumber: syz [ 700.261262][ T4177] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 700.270395][ T4177] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.280053][ T4177] usb 5-1: Product: syz [ 700.284543][ T4177] usb 5-1: Manufacturer: syz [ 700.289364][ T4177] usb 5-1: SerialNumber: syz [ 700.296584][ T4177] usb 5-1: config 0 descriptor?? [ 700.343574][ T4177] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 700.441182][T21800] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 700.470182][T21800] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.473157][ T952] sctp: [Deprecated]: syz.2.13728 (pid 952) Use of int in max_burst socket option deprecated. [ 700.473157][ T952] Use struct sctp_assoc_value instead [ 700.490090][T21800] usb 1-1: config 0 descriptor?? [ 700.501126][T21802] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 700.651299][ T1110] usb 4-1: selecting invalid altsetting 0 [ 700.657733][ T1110] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 700.675161][ T1110] usb 4-1: No valid video chain found. [ 700.760872][T21802] usb 2-1: Using ep0 maxpacket: 16 [ 700.771180][T21800] hackrf 1-1:0.0: usb_control_msg() failed -71 request 0e [ 700.773821][ T4177] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 700.791070][T21800] hackrf 1-1:0.0: Could not detect board [ 700.794293][ T1110] usb 4-1: selecting invalid altsetting 0 [ 700.803278][T21800] hackrf: probe of 1-1:0.0 failed with error -71 [ 700.812764][T21800] usb 1-1: USB disconnect, device number 66 [ 700.831069][ T4177] sq905c 5-1:0.0: Reading version command failed [ 700.847237][ T1110] usbtest: probe of 4-1:220.1 failed with error -22 [ 700.854917][ T4177] sq905c: probe of 5-1:0.0 failed with error -71 [ 700.870983][ T1110] usb 4-1: USB disconnect, device number 65 [ 700.882411][ T4177] usb 5-1: USB disconnect, device number 59 [ 700.951201][T21802] usb 2-1: unable to get BOS descriptor or descriptor too short [ 701.058709][T21802] usb 2-1: config 4 has an invalid interface number: 127 but max is 0 [ 701.077805][T21802] usb 2-1: config 4 has no interface number 0 [ 701.092502][T21802] usb 2-1: config 4 interface 127 has no altsetting 0 [ 701.155294][T21802] usb 2-1: language id specifier not provided by device, defaulting to English [ 701.263351][ T974] netlink: 'syz.3.13739': attribute type 13 has an invalid length. [ 701.501064][T21802] usb 2-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=2b.48 [ 701.520468][T21802] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.553661][T21802] usb 2-1: Product: syz [ 701.558110][T21802] usb 2-1: SerialNumber: syz [ 701.944128][T21802] usb 2-1: USB disconnect, device number 60 [ 702.134627][ T1017] bond0: (slave veth1_vlan): Error: Device is in use and cannot be enslaved [ 702.225437][ T1021] tmpfs: Bad value for 'mpol' [ 702.349259][ T1024] netlink: 'syz.4.13764': attribute type 2 has an invalid length. [ 702.527728][ T1035] loop4: detected capacity change from 0 to 256 [ 702.668014][ T1040] netlink: 'syz.3.13771': attribute type 21 has an invalid length. [ 702.681657][ T1035] FAT-fs (loop4): Directory bread(block 64) failed [ 702.698564][ T1035] FAT-fs (loop4): Directory bread(block 65) failed [ 702.708779][ T1040] netlink: 128 bytes leftover after parsing attributes in process `syz.3.13771'. [ 702.738362][ T1035] FAT-fs (loop4): Directory bread(block 66) failed [ 702.747143][ T1040] netlink: 'syz.3.13771': attribute type 5 has an invalid length. [ 702.760888][ T1035] FAT-fs (loop4): Directory bread(block 67) failed [ 702.767675][ T1035] FAT-fs (loop4): Directory bread(block 68) failed [ 702.780875][T21802] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 702.791342][ T1040] netlink: 3 bytes leftover after parsing attributes in process `syz.3.13771'. [ 702.810923][ T1035] FAT-fs (loop4): Directory bread(block 69) failed [ 702.817750][ T1035] FAT-fs (loop4): Directory bread(block 70) failed [ 702.879654][ T1035] FAT-fs (loop4): Directory bread(block 71) failed [ 702.908325][ T1035] FAT-fs (loop4): Directory bread(block 72) failed [ 702.911879][ T1043] loop1: detected capacity change from 0 to 64 [ 702.931119][ T1035] FAT-fs (loop4): Directory bread(block 73) failed [ 703.191069][T21802] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 703.216274][T21802] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 703.235112][T21802] usb 1-1: config 0 has no interface number 0 [ 703.268301][T21802] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 255 [ 703.285826][T21802] usb 1-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 703.333708][ T1069] netlink: 68 bytes leftover after parsing attributes in process `syz.3.13780'. [ 703.414223][ T1061] xt_CT: No such helper "syz0" [ 703.551524][T21802] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 703.572703][T21802] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.605062][T21802] usb 1-1: Product: syz [ 703.620862][T21802] usb 1-1: Manufacturer: syz [ 703.643775][T21802] usb 1-1: SerialNumber: syz [ 703.701948][T21802] usb 1-1: config 0 descriptor?? [ 703.731241][ T1029] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 703.752240][T21802] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 703.778307][T21802] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 703.818670][T21802] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 703.957554][ T1102] loop3: detected capacity change from 0 to 16 [ 703.974990][T22630] usb 1-1: USB disconnect, device number 67 [ 704.013911][T22630] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 704.035901][T22630] cyberjack 1-1:0.69: device disconnected [ 704.042411][T21802] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 704.095179][ T1102] erofs: (device loop3): mounted with root inode @ nid 36. [ 704.350896][T21802] usb 5-1: Using ep0 maxpacket: 32 [ 704.481295][T21802] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 704.490542][T21802] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.590160][ T1134] [ 704.593484][ T1134] ====================================================== [ 704.600685][ T1134] WARNING: possible circular locking dependency detected [ 704.607842][ T1134] syzkaller #0 Not tainted [ 704.612292][ T1134] ------------------------------------------------------ [ 704.619428][ T1134] syz.1.13809/1134 is trying to acquire lock: [ 704.625535][ T1134] ffff88801f005028 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 704.636669][ T1134] [ 704.636669][ T1134] but task is already holding lock: [ 704.644238][ T1134] ffffffff8d6c73e8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x18b/0x560 [ 704.654065][ T1134] [ 704.654065][ T1134] which lock already depends on the new lock. [ 704.654065][ T1134] [ 704.664502][ T1134] [ 704.664502][ T1134] the existing dependency chain (in reverse order) is: [ 704.673561][ T1134] [ 704.673561][ T1134] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 704.681618][ T1134] __mutex_lock_common+0x1e3/0x2400 [ 704.687389][ T1134] mutex_lock_nested+0x17/0x20 [ 704.692804][ T1134] rfkill_register+0x33/0x980 [ 704.698062][ T1134] hci_register_dev+0x452/0x970 [ 704.703991][ T1134] vhci_create_device+0x32c/0x5c0 [ 704.709595][ T1134] vhci_write+0x391/0x450 [ 704.714498][ T1134] vfs_write+0x745/0xd60 [ 704.719306][ T1134] ksys_write+0x152/0x260 [ 704.724293][ T1134] do_syscall_64+0x4c/0xa0 [ 704.729365][ T1134] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 704.735855][ T1134] [ 704.735855][ T1134] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 704.743721][ T1134] __mutex_lock_common+0x1e3/0x2400 [ 704.749496][ T1134] mutex_lock_nested+0x17/0x20 [ 704.754864][ T1134] vhci_send_frame+0x88/0x100 [ 704.760101][ T1134] hci_send_frame+0x1a9/0x2e0 [ 704.765553][ T1134] hci_tx_work+0x9f9/0x1710 [ 704.770724][ T1134] process_one_work+0x85f/0x1010 [ 704.776230][ T1134] worker_thread+0xaa6/0x1290 [ 704.781508][ T1134] kthread+0x436/0x520 [ 704.786155][ T1134] ret_from_fork+0x1f/0x30 [ 704.791145][ T1134] [ 704.791145][ T1134] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 704.800576][ T1134] __flush_work+0x116/0x210 [ 704.805645][ T1134] hci_dev_do_close+0x1e7/0x1030 [ 704.811151][ T1134] hci_dev_close+0xd9/0x180 [ 704.816412][ T1134] sock_do_ioctl+0xfb/0x320 [ 704.821575][ T1134] sock_ioctl+0x4d2/0x710 [ 704.826556][ T1134] __se_sys_ioctl+0xfa/0x170 [ 704.831719][ T1134] do_syscall_64+0x4c/0xa0 [ 704.836698][ T1134] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 704.843296][ T1134] [ 704.843296][ T1134] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 704.851025][ T1134] __mutex_lock_common+0x1e3/0x2400 [ 704.857030][ T1134] mutex_lock_nested+0x17/0x20 [ 704.862449][ T1134] bg_scan_update+0x44/0x3b0 [ 704.867740][ T1134] process_one_work+0x85f/0x1010 [ 704.873364][ T1134] worker_thread+0xaa6/0x1290 [ 704.878669][ T1134] kthread+0x436/0x520 [ 704.883276][ T1134] ret_from_fork+0x1f/0x30 [ 704.888255][ T1134] [ 704.888255][ T1134] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 704.898116][ T1134] __lock_acquire+0x2c42/0x7d10 [ 704.903513][ T1134] lock_acquire+0x19e/0x400 [ 704.908687][ T1134] __flush_work+0x116/0x210 [ 704.913861][ T1134] __cancel_work_timer+0x3f4/0x560 [ 704.919520][ T1134] hci_request_cancel_all+0xcc/0x300 [ 704.925354][ T1134] hci_dev_do_close+0x4e/0x1030 [ 704.930855][ T1134] hci_rfkill_set_block+0x10a/0x190 [ 704.936655][ T1134] rfkill_set_block+0x1c9/0x3d0 [ 704.942082][ T1134] rfkill_fop_write+0x452/0x560 [ 704.947630][ T1134] vfs_write+0x30b/0xd60 [ 704.952441][ T1134] ksys_write+0x152/0x260 [ 704.957338][ T1134] do_syscall_64+0x4c/0xa0 [ 704.962328][ T1134] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 704.968883][ T1134] [ 704.968883][ T1134] other info that might help us debug this: [ 704.968883][ T1134] [ 704.979277][ T1134] Chain exists of: [ 704.979277][ T1134] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 704.979277][ T1134] [ 704.995307][ T1134] Possible unsafe locking scenario: [ 704.995307][ T1134] [ 705.002796][ T1134] CPU0 CPU1 [ 705.008194][ T1134] ---- ---- [ 705.013614][ T1134] lock(rfkill_global_mutex); [ 705.018421][ T1134] lock(&data->open_mutex); [ 705.025574][ T1134] lock(rfkill_global_mutex); [ 705.032996][ T1134] lock((work_completion)(&hdev->bg_scan_update)); [ 705.039823][ T1134] [ 705.039823][ T1134] *** DEADLOCK *** [ 705.039823][ T1134] [ 705.048000][ T1134] 1 lock held by syz.1.13809/1134: [ 705.053355][ T1134] #0: ffffffff8d6c73e8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x18b/0x560 [ 705.064215][ T1134] [ 705.064215][ T1134] stack backtrace: [ 705.070318][ T1134] CPU: 0 PID: 1134 Comm: syz.1.13809 Not tainted syzkaller #0 [ 705.077817][ T1134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 705.087912][ T1134] Call Trace: [ 705.091288][ T1134] [ 705.094266][ T1134] dump_stack_lvl+0x188/0x250 [ 705.099003][ T1134] ? load_image+0x400/0x400 [ 705.103548][ T1134] ? show_regs_print_info+0x20/0x20 [ 705.108881][ T1134] ? print_circular_bug+0x12b/0x1a0 [ 705.114228][ T1134] check_noncircular+0x296/0x330 [ 705.119214][ T1134] ? add_chain_block+0x940/0x940 [ 705.124212][ T1134] ? lockdep_lock+0xf1/0x1f0 [ 705.129002][ T1134] ? __lock_acquire+0x12e8/0x7d10 [ 705.134061][ T1134] ? mark_lock+0x94/0x320 [ 705.138440][ T1134] ? _find_first_zero_bit+0xce/0xf0 [ 705.143870][ T1134] __lock_acquire+0x2c42/0x7d10 [ 705.148977][ T1134] ? mark_lock+0x94/0x320 [ 705.153624][ T1134] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 705.159808][ T1134] ? verify_lock_unused+0x140/0x140 [ 705.165042][ T1134] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 705.170733][ T1134] lock_acquire+0x19e/0x400 [ 705.175516][ T1134] ? __flush_work+0xfa/0x210 [ 705.180223][ T1134] ? __lock_acquire+0x7d10/0x7d10 [ 705.185381][ T1134] ? read_lock_is_recursive+0x10/0x10 [ 705.190801][ T1134] ? start_flush_work+0x776/0x820 [ 705.195961][ T1134] __flush_work+0x116/0x210 [ 705.200499][ T1134] ? __flush_work+0xfa/0x210 [ 705.205233][ T1134] ? flush_work+0x20/0x20 [ 705.209602][ T1134] ? try_to_grab_pending+0xfa/0x7f0 [ 705.214834][ T1134] ? mark_lock+0x94/0x320 [ 705.219200][ T1134] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 705.225218][ T1134] ? lock_chain_count+0x20/0x20 [ 705.230117][ T1134] ? mark_lock+0x94/0x320 [ 705.234473][ T1134] ? __cancel_work_timer+0x36a/0x560 [ 705.239894][ T1134] __cancel_work_timer+0x3f4/0x560 [ 705.245034][ T1134] ? cancel_work_sync+0x20/0x20 [ 705.249921][ T1134] ? __cancel_work+0x1f9/0x2e0 [ 705.254693][ T1134] ? lockdep_hardirqs_on+0x94/0x140 [ 705.259913][ T1134] ? __cancel_work+0x27b/0x2e0 [ 705.264704][ T1134] ? cancel_work+0x20/0x20 [ 705.269162][ T1134] ? lock_chain_count+0x20/0x20 [ 705.274035][ T1134] hci_request_cancel_all+0xcc/0x300 [ 705.279376][ T1134] hci_dev_do_close+0x4e/0x1030 [ 705.284268][ T1134] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 705.290290][ T1134] ? _raw_spin_unlock+0x40/0x40 [ 705.295155][ T1134] hci_rfkill_set_block+0x10a/0x190 [ 705.300391][ T1134] ? rcu_lock_release+0x20/0x20 [ 705.305293][ T1134] rfkill_set_block+0x1c9/0x3d0 [ 705.310322][ T1134] rfkill_fop_write+0x452/0x560 [ 705.315337][ T1134] ? rfkill_fop_read+0x520/0x520 [ 705.320335][ T1134] ? common_file_perm+0xb0/0x1c0 [ 705.325733][ T1134] ? fsnotify_perm+0x5d/0x560 [ 705.330460][ T1134] ? security_file_permission+0x75/0xa0 [ 705.336061][ T1134] ? rfkill_fop_read+0x520/0x520 [ 705.341035][ T1134] vfs_write+0x30b/0xd60 [ 705.345327][ T1134] ? file_end_write+0x250/0x250 [ 705.350363][ T1134] ? __fget_files+0x40f/0x480 [ 705.355120][ T1134] ? __fdget_pos+0x1e2/0x370 [ 705.359840][ T1134] ? ksys_write+0x71/0x260 [ 705.364448][ T1134] ksys_write+0x152/0x260 [ 705.368838][ T1134] ? __ia32_sys_read+0x80/0x80 [ 705.373656][ T1134] ? lockdep_hardirqs_on+0x94/0x140 [ 705.378931][ T1134] do_syscall_64+0x4c/0xa0 [ 705.383479][ T1134] ? clear_bhb_loop+0x30/0x80 [ 705.388208][ T1134] ? clear_bhb_loop+0x30/0x80 [ 705.392935][ T1134] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 705.398875][ T1134] RIP: 0033:0x7f9f43acee59 [ 705.403446][ T1134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 705.423362][ T1134] RSP: 002b:00007f9f41d28028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 705.431826][ T1134] RAX: ffffffffffffffda RBX: 00007f9f43d47fa0 RCX: 00007f9f43acee59 [ 705.439868][ T1134] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 705.447860][ T1134] RBP: 00007f9f43b64d6f R08: 0000000000000000 R09: 0000000000000000 [ 705.455844][ T1134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 705.463932][ T1134] R13: 00007f9f43d48038 R14: 00007f9f43d47fa0 R15: 00007ffdb1da83e8 [ 705.472163][ T1134] [ 705.482200][T21802] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 705.640801][T21800] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 705.741021][T21802] gspca_nw80x: reg_r err -71 [ 705.745870][T21802] nw80x: probe of 5-1:3.0 failed with error -71 [ 705.753932][T21802] usb 5-1: USB disconnect, device number 60 [ 705.901028][T21800] usb 1-1: Using ep0 maxpacket: 16 [ 706.041615][T21800] usb 1-1: config 4 has an invalid interface number: 35 but max is 0 [ 706.049944][T21800] usb 1-1: config 4 has no interface number 0 [ 706.056109][T21800] usb 1-1: config 4 interface 35 has no altsetting 0 [ 706.221047][T21800] usb 1-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=ff.e5 [ 706.230238][T21800] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.246287][T21800] usb 1-1: Product: syz [ 706.250526][T21800] usb 1-1: Manufacturer: syz [ 706.261158][T21800] usb 1-1: SerialNumber: syz [ 706.592265][T21800] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 706.598497][T21800] usb 1-1: selecting invalid altsetting 1 [ 706.620909][T21800] gspca_stk014: reg_r err -71 [ 706.625762][T21800] stk014: probe of 1-1:4.35 failed with error -71 [ 706.635633][T21800] usb 1-1: USB disconnect, device number 68