last executing test programs: 1.66456328s ago: executing program 3 (id=2120): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r0, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) 1.460591845s ago: executing program 3 (id=2125): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x4, 0x4, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000240)=@raw=[@map_val={0x18, 0x1, 0x2, 0x0, r0}, @generic={0x61, 0x0, 0x1, 0x3}, @exit], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.374893067s ago: executing program 3 (id=2130): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x28, 0x1, 0x4, 0x3, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x5, 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x48005}, 0x4000800) 1.305434068s ago: executing program 0 (id=2132): r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 1.24613193s ago: executing program 3 (id=2134): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000002fc0)="a6", 0x5dc}], 0xa}}], 0x5, 0x4040000) 1.112983494s ago: executing program 3 (id=2138): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r0, 0xc0045103, 0x0) 975.090666ms ago: executing program 3 (id=2142): syz_mount_image$xfs(&(0x7f00000001c0), &(0x7f0000009640)='./file1\x00', 0x18040, &(0x7f0000000100)={[{@nolazytime}, {@dax_never}, {@inode32}, {@sysvgroups}, {@grpquota}, {@bsdgroups}, {@nouuid}]}, 0x4, 0x9736, &(0x7f0000012d80)="$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") quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000180)) 965.370117ms ago: executing program 0 (id=2144): r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/rt_acct\x00') read$FUSE(r0, &(0x7f0000002380)={0x2020}, 0x2020) 955.585707ms ago: executing program 2 (id=2146): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008"], 0xb4}}, 0x0) 869.622329ms ago: executing program 0 (id=2147): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@getnexthop={0x18, 0x6a, 0x1, 0x0, 0x0, {0x0, 0x2}}, 0x18}}, 0x0) 753.475012ms ago: executing program 2 (id=2151): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 10000000000000004096'], 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 718.749383ms ago: executing program 4 (id=2152): r0 = syz_open_dev$video4linux(&(0x7f0000001140), 0x92e2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x3010}) 714.731763ms ago: executing program 0 (id=2153): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="ec00000021000100feffffff000000000000000000000000000000000000000000000000007c0000000000000000000000000000000000001700a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c00110000000000000000000000000000000000fe8000000000000000000000000000bbac1414210000000000000000000000002001000000000000000000000000000000035000000000000000020000000000000000000000000000000000fe8000000000000000000000000000bb"], 0xec}}, 0x0) 620.021355ms ago: executing program 1 (id=2154): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0xfd37, &(0x7f0000000380), &(0x7f0000000600), &(0x7f0000000400)={0x0, 0x0, 0x0, 0x700}, &(0x7f0000000440)={0x0, 0x989680}, &(0x7f00000004c0)={&(0x7f0000000480), 0x8}) 618.791435ms ago: executing program 2 (id=2155): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb342, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x1ff, 0x645c, 0x2, {0x1, @pix={0x6, 0x8, 0x48524742, 0x9, 0x4, 0x7, 0x8, 0x3ff, 0x1, 0x4, 0x0, 0x2}}, 0x4}) 597.227696ms ago: executing program 4 (id=2156): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000340)=0xc6, 0x4) 522.307548ms ago: executing program 0 (id=2157): syz_mount_image$squashfs(&(0x7f00000005c0), &(0x7f0000000600)='./file0\x00', 0x200004, &(0x7f0000000640)=ANY=[], 0x5, 0x1c3, &(0x7f0000000680)="$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") mount(0x0, &(0x7f0000000380)='./tracing\x00', 0x0, 0x0, 0x0) 522.193108ms ago: executing program 1 (id=2158): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x20, 0x20, 0x0, 0xfe, 0x0, 0x0, 0x7, 0xf5ff}, [@RTA_DST={0x8, 0x1, @remote}]}, 0x24}}, 0xea5bc50b6199d77e) 459.779689ms ago: executing program 2 (id=2159): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xc}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000738affff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 459.663969ms ago: executing program 4 (id=2160): r0 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='source', &(0x7f0000000400)='//\xf2/\x06\b\xa30\\\xea\\\xea\x95\x9a\x82\x10\x97W\x8f7\x98\\\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas\x9d\x14\xe3\v\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7Gl\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\n\x8cffff888060e6f000(4096) [ 91.667528][ T5318] cramfs: Error -3 while decompressing! [ 91.686507][ T4174] udevd[4174]: incorrect cramfs checksum on /dev/loop2 [ 91.690421][ T5318] cramfs: ffffffff97243ea8(27)->ffff888060e6f000(4096) [ 91.721591][ T1110] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 91.735944][ T26] audit: type=1800 audit(1792422476.940:9): pid=5318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.415" name="file2" dev="loop2" ino=348 res=0 errno=0 [ 91.770261][ T1110] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.804663][ T1110] usb 2-1: Product: syz [ 91.808901][ T1110] usb 2-1: Manufacturer: syz [ 91.824380][ T1110] usb 2-1: SerialNumber: syz [ 91.875981][ T4173] r8152-cfgselector 4-1: Unknown version 0x0000 [ 91.884004][ T4173] r8152-cfgselector 4-1: bad CDC descriptors [ 91.892699][ T1110] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 91.920349][ T1110] usb 2-1: selecting invalid altsetting 0 [ 91.941161][ T4173] r8152-cfgselector 4-1: Unknown version 0x0000 [ 91.954544][ T5328] loop2: detected capacity change from 0 to 512 [ 91.964609][ T4173] r8152-cfgselector 4-1: USB disconnect, device number 4 [ 91.972445][ T1110] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 92.032043][ T5328] FAT-fs (loop2): bogus number of FAT sectors [ 92.038182][ T5328] FAT-fs (loop2): Can't find a valid FAT filesystem [ 92.128497][ T4297] usb 2-1: USB disconnect, device number 3 [ 92.204274][ T5332] device wlan0 entered promiscuous mode [ 92.214710][ T5332] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 92.347630][ T5336] loop0: detected capacity change from 0 to 4096 [ 92.427381][ T5336] ntfs3: loop0: Failed to load $Extend. [ 92.513722][ T5348] loop2: detected capacity change from 0 to 64 [ 92.611477][ T4173] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 92.895232][ T5360] loop0: detected capacity change from 0 to 4096 [ 92.928422][ T5360] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 92.951004][ T5369] comedi comedi1: adq12b: I/O port conflict (0x10,16) [ 93.015722][ T5360] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 93.025403][ T4173] usb 5-1: config 0 has an invalid descriptor of length 52, skipping remainder of the config [ 93.046340][ T4173] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 93.075755][ T4173] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 93.098559][ T4173] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 93.109460][ T4173] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.139952][ T4173] usb 5-1: config 0 descriptor?? [ 93.210620][ T5168] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 93.419501][ T4173] ath6kl: Failed to submit usb control message: -71 [ 93.434562][ T4173] ath6kl: unable to send the bmi data to the device: -71 [ 93.448635][ T5394] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.451'. [ 93.459926][ T5394] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 93.468674][ T5168] usb 3-1: Using ep0 maxpacket: 16 [ 93.468762][ T4173] ath6kl: Unable to send get target info: -71 [ 93.506040][ T4173] ath6kl: Failed to init ath6kl core: -71 [ 93.542719][ T4173] ath6kl_usb: probe of 5-1:0.0 failed with error -71 [ 93.565506][ T4173] usb 5-1: USB disconnect, device number 3 [ 93.660543][ T5406] loop1: detected capacity change from 0 to 1024 [ 93.702863][ T5406] EXT4-fs (loop1): Ignoring removed oldalloc option [ 93.728962][ T5406] EXT4-fs (loop1): Ignoring removed orlov option [ 93.755129][ T5168] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 93.780490][ T5168] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.812118][ T5406] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,oldalloc,orlov,dioread_lock,,errors=continue. Quota mode: none. [ 93.828530][ T5168] usb 3-1: Product: syz [ 93.833022][ T5168] usb 3-1: Manufacturer: syz [ 93.837659][ T5168] usb 3-1: SerialNumber: syz [ 93.845778][ T5406] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.865431][ T5168] r8152-cfgselector 3-1: config 0 descriptor?? [ 93.993936][ T5413] loop3: detected capacity change from 0 to 4096 [ 94.032665][ T5413] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 94.116080][ T5413] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 94.350656][ T5168] r8152-cfgselector 3-1: Unknown version 0x0000 [ 94.350799][ T5168] r8152-cfgselector 3-1: bad CDC descriptors [ 94.363717][ T5438] netlink: 76 bytes leftover after parsing attributes in process `syz.4.473'. [ 94.363760][ T5438] netlink: 72 bytes leftover after parsing attributes in process `syz.4.473'. [ 94.363778][ T5438] netlink: 'syz.4.473': attribute type 3 has an invalid length. [ 94.363793][ T5438] netlink: 11 bytes leftover after parsing attributes in process `syz.4.473'. [ 94.370737][ T5168] r8152-cfgselector 3-1: Unknown version 0x0000 [ 94.372140][ T5168] r8152-cfgselector 3-1: USB disconnect, device number 3 [ 94.629549][ T5456] loop3: detected capacity change from 0 to 64 [ 94.797767][ T5464] loop4: detected capacity change from 0 to 64 [ 94.814542][ T5463] netlink: 76 bytes leftover after parsing attributes in process `syz.0.485'. [ 94.827280][ T5463] netlink: 72 bytes leftover after parsing attributes in process `syz.0.485'. [ 94.838016][ T5463] netlink: 'syz.0.485': attribute type 3 has an invalid length. [ 94.900135][ T5463] netlink: 11 bytes leftover after parsing attributes in process `syz.0.485'. [ 94.978807][ T5468] Unsupported ieee802154 address type: 0 [ 95.232263][ T5496] loop2: detected capacity change from 0 to 64 [ 95.405766][ T5508] netlink: 'syz.3.508': attribute type 1 has an invalid length. [ 95.428630][ T5508] netlink: 224 bytes leftover after parsing attributes in process `syz.3.508'. [ 95.500372][ T4255] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 95.567110][ T5524] loop1: detected capacity change from 0 to 64 [ 95.681187][ T5530] ieee802154 phy0 wpan0: encryption failed: -90 [ 95.905139][ T5542] loop4: detected capacity change from 0 to 4096 [ 95.920413][ T4255] usb 1-1: config 1 has an invalid interface number: 69 but max is 0 [ 95.934050][ T4255] usb 1-1: config 1 has no interface number 0 [ 95.944005][ T5551] netlink: 'syz.1.527': attribute type 5 has an invalid length. [ 95.955872][ T4255] usb 1-1: config 1 interface 69 has no altsetting 0 [ 96.186225][ T5558] loop4: detected capacity change from 0 to 64 [ 96.192761][ T4264] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 96.207128][ T4255] usb 1-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=ac.d9 [ 96.234644][ T4255] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.250168][ T4255] usb 1-1: Product: syz [ 96.254468][ T4255] usb 1-1: Manufacturer: syz [ 96.259104][ T4255] usb 1-1: SerialNumber: syz [ 96.335693][ T5566] loop3: detected capacity change from 0 to 512 [ 96.413136][ T5566] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.536: bg 0: block 16: invalid block bitmap [ 96.429575][ T5566] EXT4-fs (loop3): Remounting filesystem read-only [ 96.436827][ T5566] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 96.448529][ T4264] usb 3-1: Using ep0 maxpacket: 16 [ 96.454267][ T5566] EXT4-fs (loop3): Remounting filesystem read-only [ 96.470461][ T5566] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.536: attempt to clear invalid blocks 1669132790 len 1 [ 96.501903][ T5566] EXT4-fs (loop3): Remounting filesystem read-only [ 96.508614][ T5566] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.536: invalid indirect mapped block 4294967295 (level 1) [ 96.529661][ T5566] EXT4-fs (loop3): Remounting filesystem read-only [ 96.536916][ T5566] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.536: invalid indirect mapped block 4294967295 (level 2) [ 96.558152][ T5566] EXT4-fs (loop3): Remounting filesystem read-only [ 96.566325][ T5566] EXT4-fs (loop3): 1 truncate cleaned up [ 96.578563][ T5566] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,errors=remount-ro,. Quota mode: none. [ 96.590951][ T4264] usb 3-1: New USB device found, idVendor=0471, idProduct=0307, bcdDevice=61.a4 [ 96.590985][ T4264] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.597156][ T4264] usb 3-1: config 0 descriptor?? [ 96.663130][ T4264] pwc: Philips PCVC675K (Vesta) USB webcam detected. [ 96.674824][ T5579] netlink: 28 bytes leftover after parsing attributes in process `syz.4.542'. [ 96.766057][ T21] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 96.885884][ T4264] pwc: send_video_command error -71 [ 96.892526][ T4264] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 96.916100][ T4264] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 96.932632][ T4264] usb 3-1: USB disconnect, device number 4 [ 97.026869][ T5596] netlink: 'syz.4.550': attribute type 20 has an invalid length. [ 97.096958][ T5600] netlink: 36 bytes leftover after parsing attributes in process `syz.3.552'. [ 97.122045][ T4255] comedi comedi5: This driver needs USB 2.0 to operate. Aborting... [ 97.130890][ T4255] usbduxfast 1-1:1.69: driver 'usbduxfast' failed to auto-configure device. [ 97.150367][ T21] usb 2-1: config 0 has an invalid descriptor of length 52, skipping remainder of the config [ 97.185409][ T4255] usb 1-1: USB disconnect, device number 4 [ 97.192841][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 97.219254][ T21] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.235546][ T21] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 97.268113][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.286138][ T21] usb 2-1: config 0 descriptor?? [ 97.314641][ T5606] device geneve3 entered promiscuous mode [ 97.373818][ T5609] netlink: 'syz.4.556': attribute type 49 has an invalid length. [ 97.576116][ T21] ath6kl: Failed to submit usb control message: -71 [ 97.610404][ T21] ath6kl: unable to send the bmi data to the device: -71 [ 97.617503][ T21] ath6kl: Unable to send get target info: -71 [ 97.653656][ T21] ath6kl: Failed to init ath6kl core: -71 [ 97.696839][ T21] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 97.733035][ T21] usb 2-1: USB disconnect, device number 4 [ 97.766432][ T5641] loop2: detected capacity change from 0 to 256 [ 98.245531][ T5680] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 98.307281][ T5683] No such timeout policy "syz1" [ 98.451670][ T5699] __nla_validate_parse: 2 callbacks suppressed [ 98.451691][ T5699] netlink: 4 bytes leftover after parsing attributes in process `syz.3.601'. [ 98.507480][ T5701] netlink: 48 bytes leftover after parsing attributes in process `syz.2.602'. [ 98.641323][ T5717] netlink: 52 bytes leftover after parsing attributes in process `syz.0.609'. [ 98.894805][ T5168] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 99.120895][ T5759] loop4: detected capacity change from 0 to 1764 [ 99.147585][ T5761] netlink: 44 bytes leftover after parsing attributes in process `syz.0.628'. [ 99.260374][ T5168] usb 3-1: config 0 has an invalid interface number: 168 but max is 0 [ 99.272244][ T5168] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.295468][ T5168] usb 3-1: config 0 has no interface number 0 [ 99.309744][ T5168] usb 3-1: config 0 interface 168 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 99.334359][ T5168] usb 3-1: config 0 interface 168 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 99.356682][ T5168] usb 3-1: config 0 interface 168 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 99.395921][ T5168] usb 3-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=48.98 [ 99.415660][ T5168] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.457275][ T5168] usb 3-1: config 0 descriptor?? [ 99.513364][ T5168] HFC-S_USB: probe of 3-1:0.168 failed with error -5 [ 99.532708][ T5787] Cannot find del_set index 0 as target [ 99.728320][ T5168] usb 3-1: USB disconnect, device number 5 [ 99.825418][ T5811] netlink: 168 bytes leftover after parsing attributes in process `syz.0.647'. [ 99.885378][ T5817] overlayfs: missing 'lowerdir' [ 99.947903][ T5821] netlink: 144 bytes leftover after parsing attributes in process `syz.3.652'. [ 100.041299][ T5821] team0: Port device team_slave_0 removed [ 100.047750][ T5821] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 100.122251][ T21] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 100.309628][ T5847] netlink: 'syz.2.665': attribute type 16 has an invalid length. [ 100.344579][ T5847] netlink: 'syz.2.665': attribute type 3 has an invalid length. [ 100.375649][ T5847] netlink: 132 bytes leftover after parsing attributes in process `syz.2.665'. [ 100.405547][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 100.556461][ T21] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.587984][ T21] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.660356][ T5168] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 100.730497][ T21] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 100.739606][ T21] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 100.760240][ T21] usb 5-1: Product: syz [ 100.764472][ T21] usb 5-1: Manufacturer: syz [ 100.813325][ T5843] loop1: detected capacity change from 0 to 40427 [ 100.841283][ T5843] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 100.849080][ T5843] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 100.858916][ T21] hub 5-1:4.0: USB hub found [ 100.878230][ T5843] F2FS-fs (loop1): invalid crc value [ 100.918178][ T5843] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 101.035186][ T5168] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.047570][ T5843] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 101.068747][ T5843] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 101.080361][ T21] hub 5-1:4.0: 2 ports detected [ 101.223816][ T5168] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 101.254518][ T5896] netlink: 80 bytes leftover after parsing attributes in process `syz.2.689'. [ 101.265787][ T5168] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.286902][ T5168] usb 1-1: Product: syz [ 101.302554][ T21] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 101.309490][ T21] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 101.327133][ T5168] usb 1-1: Manufacturer: syz [ 101.332373][ T5168] usb 1-1: SerialNumber: syz [ 101.394139][ T5900] netlink: 'syz.3.691': attribute type 1 has an invalid length. [ 101.408259][ T21] usb 5-1: USB disconnect, device number 4 [ 101.425149][ T5900] netlink: 228 bytes leftover after parsing attributes in process `syz.3.691'. [ 101.603100][ T26] audit: type=1326 audit(1792422742.813:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5910 comm="syz.2.696" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a4a118559 code=0x0 [ 101.661511][ T5168] snd-usb-6fire 1-1:1.0: unknown device firmware state received from device: [ 101.681618][ T5168] eb aa 00 00 00 00 00 00 [ 101.686211][ T5168] snd-usb-6fire: probe of 1-1:1.0 failed with error -5 [ 101.870490][ T1107] usb 1-1: USB disconnect, device number 5 [ 101.990871][ T5936] loop3: detected capacity change from 0 to 256 [ 102.093665][ T5936] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 102.130935][ T5947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.713'. [ 102.759309][ T5990] loop1: detected capacity change from 0 to 256 [ 102.822512][ T5990] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 102.878280][ T5990] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 102.905047][ T5990] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 102.928768][ T5990] UDF-fs: Scanning with blocksize 512 failed [ 102.949848][ T5990] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 102.988803][ T5990] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 103.026827][ T6002] tc_dump_action: action bad kind [ 103.398289][ T6029] x_tables: unsorted underflow at hook 3 [ 103.722220][ T6058] netlink: 'syz.4.767': attribute type 2 has an invalid length. [ 103.966324][ T6074] netlink: 'syz.4.775': attribute type 1 has an invalid length. [ 103.984832][ T6074] __nla_validate_parse: 5 callbacks suppressed [ 103.984850][ T6074] netlink: 28 bytes leftover after parsing attributes in process `syz.4.775'. [ 104.007671][ T6074] netlink: 'syz.4.775': attribute type 1 has an invalid length. [ 104.112858][ T6085] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 104.183437][ T5168] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 104.600413][ T5168] usb 3-1: unable to get BOS descriptor or descriptor too short [ 104.634769][ T6096] loop4: detected capacity change from 0 to 32768 [ 104.650734][ T5168] usb 3-1: not running at top speed; connect to a high speed hub [ 104.731709][ T6096] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.785 (6096) [ 104.744252][ T5168] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.765746][ T5168] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 104.789116][ T6096] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 104.815328][ T6096] BTRFS info (device loop4): using free space tree [ 104.829212][ T4264] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 104.859208][ T6096] BTRFS info (device loop4): has skinny extents [ 104.942430][ T6135] loop3: detected capacity change from 0 to 512 [ 105.008327][ T6135] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 105.016562][ T6096] BTRFS info (device loop4): enabling ssd optimizations [ 105.023938][ T5168] usb 3-1: string descriptor 0 read error: -22 [ 105.031197][ T5168] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 105.050286][ T5168] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.074156][ T6135] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 105.114735][ T6135] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 105.131033][ T5168] usb 3-1: 0:1 : does not exist [ 105.137621][ T5168] usb 3-1: 0:2 : does not exist [ 105.200387][ T4264] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 105.369580][ T6135] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3894: comm syz.3.799: Allocating blocks 41-42 which overlap fs metadata [ 105.384083][ T4264] usb 1-1: New USB device found, idVendor=05ac, idProduct=12a8, bcdDevice= 0.01 [ 105.431806][ T4264] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.467401][ T6135] Quota error (device loop3): write_blk: dquota write failed [ 105.490434][ T6135] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 105.495042][ T4264] usb 1-1: Product: syz [ 105.511581][ T6135] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3894: comm syz.3.799: Allocating blocks 41-42 which overlap fs metadata [ 105.544760][ T4264] usb 1-1: Manufacturer: syz [ 105.552522][ T6135] Quota error (device loop3): write_blk: dquota write failed [ 105.560239][ T4264] usb 1-1: SerialNumber: syz [ 105.575559][ T4174] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop4 scanned by udevd (4174) [ 105.582079][ T6135] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 105.588876][ T5168] usb 3-1: USB disconnect, device number 6 [ 105.650236][ T6135] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.799: Failed to acquire dquot type 1 [ 105.656900][ T4264] ipheth 1-1:1.0: Unable to find endpoints [ 105.708356][ T6135] EXT4-fs error (device loop3): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 105.758183][ T6135] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #12: comm syz.3.799: corrupted inode contents [ 105.806364][ T6135] EXT4-fs error (device loop3): ext4_dirty_inode:6087: inode #12: comm syz.3.799: mark_inode_dirty error [ 105.829656][ T6135] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #12: comm syz.3.799: corrupted inode contents [ 105.848728][ T6135] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #12: comm syz.3.799: mark_inode_dirty error [ 105.862068][ T6135] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #12: comm syz.3.799: corrupted inode contents [ 105.884103][ T6135] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 105.896965][ T6135] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #12: comm syz.3.799: corrupted inode contents [ 105.915650][ T6135] EXT4-fs error (device loop3): ext4_truncate:4286: inode #12: comm syz.3.799: mark_inode_dirty error [ 105.931500][ T5168] apple-mfi-fastcharge 1-1: USB disconnect, device number 6 [ 105.951198][ T6135] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 105.951950][ T6135] EXT4-fs (loop3): 1 truncate cleaned up [ 105.951996][ T6135] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,noblock_validity,mblk_io_submit,noinit_itable,noinit_itable,grpjquota=,jqfmt=vfsv1,max_dir_size_kb=0x0000000000000006,barrier=0x00000000000007ff2,errors=continue. Quota mode: writeback. [ 106.064591][ C0] vkms_vblank_simulate: vblank timer overrun [ 106.259775][ T6187] netlink: 'syz.4.812': attribute type 4 has an invalid length. [ 106.295355][ T6187] netlink: 152 bytes leftover after parsing attributes in process `syz.4.812'. [ 106.325055][ T6187] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 106.349417][ T6192] netlink: 'syz.1.814': attribute type 3 has an invalid length. [ 106.366966][ T6192] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.814'. [ 106.533288][ T6205] netlink: 'syz.4.821': attribute type 2 has an invalid length. [ 106.545101][ T6205] netlink: 224 bytes leftover after parsing attributes in process `syz.4.821'. [ 106.749315][ T6223] netlink: 24 bytes leftover after parsing attributes in process `syz.4.829'. [ 106.884564][ T6237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.834'. [ 106.935910][ T6237] batman_adv: Cannot find parent device [ 107.465295][ T6293] sctp: [Deprecated]: syz.1.855 (pid 6293) Use of struct sctp_assoc_value in delayed_ack socket option. [ 107.465295][ T6293] Use struct sctp_sack_info instead [ 107.605606][ T6299] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.612838][ T6299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.620888][ T6299] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.628031][ T6299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.647904][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 107.702487][ T6299] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 107.727426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 107.868712][ T6320] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes [ 107.887874][ T6320] Error parsing options; rc = [-22] [ 107.921652][ T6321] loop0: detected capacity change from 0 to 1024 [ 107.984137][ T6315] loop4: detected capacity change from 0 to 8192 [ 108.061070][ T6331] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 108.068391][ T6331] IPv6: NLM_F_CREATE should be set when creating new route [ 108.075793][ T6331] IPv6: NLM_F_CREATE should be set when creating new route [ 108.105140][ T6315] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 108.207170][ T6337] netlink: 'syz.3.879': attribute type 1 has an invalid length. [ 108.232063][ T6337] netlink: 'syz.3.879': attribute type 3 has an invalid length. [ 108.261559][ T6337] netlink: 224 bytes leftover after parsing attributes in process `syz.3.879'. [ 108.290378][ T6337] NCSI netlink: No device for ifindex 55159 [ 108.599298][ T6367] loop2: detected capacity change from 0 to 8 [ 108.860937][ T6367] SQUASHFS error: Corrupted symlink [ 108.925623][ T6381] ip_tables: iptables: counters copy to user failed while replacing table [ 109.110190][ T1107] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 109.169379][ T6389] delete_channel: no stack [ 109.328464][ T6396] SET target dimension over the limit! [ 109.350215][ T1107] usb 2-1: Using ep0 maxpacket: 8 [ 109.463995][ T6406] netlink: 36 bytes leftover after parsing attributes in process `syz.3.913'. [ 109.471243][ T1107] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 109.504063][ T1107] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 109.510435][ T6406] netlink: 36 bytes leftover after parsing attributes in process `syz.3.913'. [ 109.533314][ T1107] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 109.553637][ T1107] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 109.582646][ T6406] netlink: 31 bytes leftover after parsing attributes in process `syz.3.913'. [ 109.586663][ T1107] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 109.611131][ T1107] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 109.624726][ T1107] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 109.634023][ T6410] netlink: 52 bytes leftover after parsing attributes in process `syz.2.915'. [ 109.635830][ T1107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.711542][ T1107] usbtmc 2-1:16.0: bulk endpoints not found [ 109.963393][ T6426] syz.3.923 uses obsolete (PF_INET,SOCK_PACKET) [ 109.966170][ T4262] usb 2-1: USB disconnect, device number 5 [ 110.124746][ T6435] SET target dimension over the limit! [ 110.304133][ T6452] netlink: 'syz.0.936': attribute type 16 has an invalid length. [ 110.312059][ T6452] netlink: 'syz.0.936': attribute type 3 has an invalid length. [ 110.324124][ T6452] netlink: 132 bytes leftover after parsing attributes in process `syz.0.936'. [ 110.496944][ T6469] netlink: 'syz.4.943': attribute type 5 has an invalid length. [ 110.600765][ T6475] nfs: Unknown parameter 'ntext' [ 110.750800][ T6485] netlink: 'syz.1.951': attribute type 1 has an invalid length. [ 110.768866][ T6485] netlink: 224 bytes leftover after parsing attributes in process `syz.1.951'. [ 110.810255][ T23] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 111.080196][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 111.216879][ T23] usb 4-1: config 0 has an invalid interface number: 49 but max is 0 [ 111.227107][ T23] usb 4-1: config 0 has no interface number 0 [ 111.245855][ T23] usb 4-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 111.258369][ T23] usb 4-1: config 0 interface 49 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.268817][ T23] usb 4-1: config 0 interface 49 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 111.310388][ T4265] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 111.412338][ T1107] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 111.460485][ T23] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 111.479820][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.490281][ T23] usb 4-1: Product: syz [ 111.494496][ T23] usb 4-1: Manufacturer: syz [ 111.499114][ T23] usb 4-1: SerialNumber: syz [ 111.528199][ T23] usb 4-1: config 0 descriptor?? [ 111.571641][ T6471] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 111.590267][ T4265] usb 5-1: Using ep0 maxpacket: 16 [ 111.720422][ T4265] usb 5-1: New USB device found, idVendor=0471, idProduct=0307, bcdDevice=61.a4 [ 111.732999][ T4265] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.747121][ T4265] usb 5-1: config 0 descriptor?? [ 111.780414][ T5168] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 111.802511][ T4265] pwc: Philips PCVC675K (Vesta) USB webcam detected. [ 111.830284][ T1107] usb 3-1: unable to get BOS descriptor or descriptor too short [ 111.870443][ T23] usb 4-1: USB disconnect, device number 5 [ 111.910364][ T1107] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.926448][ T1107] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 112.020370][ T4265] pwc: send_video_command error -71 [ 112.025649][ T4265] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 112.033804][ T4265] Philips webcam: probe of 5-1:0.0 failed with error -71 [ 112.043524][ T4265] usb 5-1: USB disconnect, device number 5 [ 112.140451][ T5168] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 112.150551][ T5168] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 112.160924][ T5168] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 112.171675][ T5168] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 112.183292][ T1107] usb 3-1: string descriptor 0 read error: -22 [ 112.189542][ T1107] usb 3-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 112.198703][ T5168] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 112.208484][ T1107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.216581][ T5168] usb 2-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 112.226473][ T5168] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.250652][ T6522] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 112.257987][ T6522] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 112.266062][ T6522] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 112.275242][ T1107] usb 3-1: MIDIStreaming interface descriptor not found [ 112.294711][ T5168] mos7720 2-1:1.0: Moschip 2 port adapter converter detected [ 112.442806][ T6546] loop3: detected capacity change from 0 to 1024 [ 112.507032][ T5168] usb 2-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 112.541317][ T5168] usb 2-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 112.562132][ T4265] usb 3-1: USB disconnect, device number 7 [ 112.747592][ T5168] usb 2-1: USB disconnect, device number 6 [ 112.775026][ T5168] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 112.826834][ T5168] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 112.866208][ T5168] mos7720 2-1:1.0: device disconnected [ 113.068593][ T6580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.983'. [ 113.174037][ T6586] loop4: detected capacity change from 0 to 64 [ 113.450427][ T6608] netlink: 16 bytes leftover after parsing attributes in process `syz.0.997'. [ 113.469670][ T6608] netlink: 16 bytes leftover after parsing attributes in process `syz.0.997'. [ 113.638097][ T6626] tc_dump_action: action bad kind [ 113.709608][ T6634] loop2: detected capacity change from 0 to 256 [ 113.733084][ T6634] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 113.954213][ T6642] sctp: [Deprecated]: syz.4.1014 (pid 6642) Use of struct sctp_assoc_value in delayed_ack socket option. [ 113.954213][ T6642] Use struct sctp_sack_info instead [ 113.986277][ T6644] loop1: detected capacity change from 0 to 64 [ 114.140430][ T4326] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 114.144792][ T6652] xt_HMARK: spi-set and port-set can't be combined [ 114.310458][ T6658] loop3: detected capacity change from 0 to 4096 [ 114.404358][ T6658] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 114.440542][ T6658] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 114.473012][ T6658] ntfs: volume version 3.1. [ 114.498091][ T6658] ntfs: (device loop3): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4). Marking corrupt inode and base inode 0x1a as bad. Run chkdsk. [ 114.520879][ T6658] ntfs: (device loop3): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute. [ 114.551037][ T6658] ntfs: (device loop3): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 114.570415][ T4326] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 114.614308][ T6677] loop4: detected capacity change from 0 to 128 [ 114.657434][ T6680] loop0: detected capacity change from 0 to 64 [ 114.786104][ T4326] usb 3-1: New USB device found, idVendor=05ac, idProduct=12a8, bcdDevice= 0.01 [ 114.800148][ T4326] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.818475][ T4326] usb 3-1: Product: syz [ 114.828610][ T4326] usb 3-1: Manufacturer: syz [ 114.837061][ T4326] usb 3-1: SerialNumber: syz [ 114.926120][ T4326] ipheth 3-1:1.0: Unable to find endpoints [ 115.084573][ T6700] netlink: 'syz.0.1044': attribute type 1 has an invalid length. [ 115.084599][ T6700] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1044'. [ 115.084628][ T6700] netlink: 'syz.0.1044': attribute type 1 has an invalid length. [ 115.157328][ T4326] apple-mfi-fastcharge 3-1: USB disconnect, device number 8 [ 115.183039][ T6703] vers=2.0 not permitted when mounting with smb3 [ 115.183039][ T6703] [ 115.183333][ T6703] CIFS: VFS: vers=2.0 not permitted when mounting with smb3 [ 115.533840][ T6726] loop0: detected capacity change from 0 to 4096 [ 115.572308][ T6726] ntfs: (device loop0): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 115.583346][ T6726] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 115.598276][ T6726] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 115.611404][ T6726] ntfs: volume version 3.1. [ 115.670754][ T9] ntfs: (device loop0): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 115.682332][ T9] ntfs: (device loop0): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 115.853698][ T6738] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1062'. [ 115.895974][ T6738] device bond_slave_0 entered promiscuous mode [ 115.902776][ T6738] device bond_slave_1 entered promiscuous mode [ 116.286259][ T6732] loop3: detected capacity change from 0 to 32768 [ 116.298738][ T4326] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 116.313655][ T6754] loop0: detected capacity change from 0 to 4096 [ 116.462562][ T6748] loop2: detected capacity change from 0 to 32768 [ 116.470217][ T1107] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 116.492498][ T6732] JBD2: Ignoring recovery information on journal [ 116.585222][ T6732] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 116.595463][ T6748] XFS (loop2): Mounting V5 Filesystem [ 116.767687][ T6748] XFS (loop2): Ending clean mount [ 116.803031][ T6748] XFS (loop2): Quotacheck needed: Please wait. [ 116.830670][ T1107] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 116.875917][ T4326] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 116.906469][ T4186] ocfs2: Unmounting device (7,3) on (node local) [ 116.915419][ T4326] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.937365][ T4326] usb 5-1: Product: syz [ 116.947548][ T4326] usb 5-1: Manufacturer: syz [ 116.952268][ T4326] usb 5-1: SerialNumber: syz [ 116.959454][ T4326] usb 5-1: config 0 descriptor?? [ 116.984440][ T6748] XFS (loop2): Quotacheck: Done. [ 117.007764][ T1107] usb 2-1: New USB device found, idVendor=05ac, idProduct=12a8, bcdDevice= 0.01 [ 117.029333][ T1107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.048443][ T1107] usb 2-1: Product: syz [ 117.058567][ T1107] usb 2-1: Manufacturer: syz [ 117.067904][ T1107] usb 2-1: SerialNumber: syz [ 117.119082][ T6778] program syz.0.1080 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.119545][ T4198] XFS (loop2): Unmounting Filesystem [ 117.141580][ T1107] ipheth 2-1:1.0: Unable to find endpoints [ 117.255819][ T4326] usb 5-1: ignoring: probably an ADSL modem [ 117.366696][ T23] apple-mfi-fastcharge 2-1: USB disconnect, device number 7 [ 117.415169][ T6784] hfsplus: invalid file type 0177777 for inode 2 [ 117.456736][ T6784] hfsplus: failed to load root directory [ 117.496725][ T6790] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 117.514044][ T6790] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 117.550525][ T4326] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 117.565612][ T4326] usb 5-1: USB disconnect, device number 6 [ 117.592005][ T6790] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 117.673552][ T6790] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3894: comm syz.0.1085: Allocating blocks 41-42 which overlap fs metadata [ 117.695988][ T6797] netlink: 'syz.2.1086': attribute type 10 has an invalid length. [ 117.700016][ T6790] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.1085: Failed to acquire dquot type 1 [ 117.727091][ T6790] EXT4-fs error (device loop0): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 117.744779][ T6790] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #12: comm syz.0.1085: corrupted inode contents [ 117.758771][ T6790] EXT4-fs error (device loop0): ext4_dirty_inode:6087: inode #12: comm syz.0.1085: mark_inode_dirty error [ 117.785518][ T6790] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #12: comm syz.0.1085: corrupted inode contents [ 117.798504][ T6797] team0: Device wg1 is of different type [ 117.799014][ T6790] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #12: comm syz.0.1085: mark_inode_dirty error [ 117.822094][ T6790] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #12: comm syz.0.1085: corrupted inode contents [ 117.835694][ T6790] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 117.846645][ T6790] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #12: comm syz.0.1085: corrupted inode contents [ 117.870148][ T4264] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 117.886107][ T6790] EXT4-fs error (device loop0): ext4_truncate:4286: inode #12: comm syz.0.1085: mark_inode_dirty error [ 117.918907][ T6790] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 117.943639][ T6790] EXT4-fs (loop0): 1 truncate cleaned up [ 117.949347][ T6790] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,noblock_validity,mblk_io_submit,noinit_itable,noinit_itable,grpjquota=,jqfmt=vfsv1,max_dir_size_kb=0x0000000000000006,barrier=0x00000000000007ff2,errors=continue. Quota mode: writeback. [ 118.113611][ T4264] usb 4-1: Using ep0 maxpacket: 16 [ 118.230565][ T4264] usb 4-1: config 0 has an invalid descriptor of length 141, skipping remainder of the config [ 118.250337][ T4264] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 33216, setting to 1024 [ 118.254698][ T4326] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 118.269942][ T4264] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 118.307332][ T4264] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 118.401226][ T4264] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 118.415947][ T4264] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 118.424093][ T4264] usb 4-1: Manufacturer: syz [ 118.439596][ T4264] usb 4-1: config 0 descriptor?? [ 118.460425][ T6784] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 118.633564][ T6813] set_capacity_and_notify: 2 callbacks suppressed [ 118.633582][ T6813] loop4: detected capacity change from 0 to 40427 [ 118.688683][ T4297] usb 4-1: USB disconnect, device number 6 [ 118.730380][ T4326] usb 2-1: config 1 has an invalid interface number: 1 but max is 0 [ 118.738996][ T4326] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.753195][ T6813] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 118.761556][ T4326] usb 2-1: config 1 has no interface number 0 [ 118.767808][ T6813] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 118.776474][ T4326] usb 2-1: config 1 interface 1 has no altsetting 0 [ 118.788400][ T6813] F2FS-fs (loop4): invalid crc value [ 118.809298][ T6813] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 118.870725][ T6813] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 118.878033][ T6813] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 118.971320][ T4326] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 118.994418][ T4326] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.013968][ T4326] usb 2-1: Product: syz [ 119.030940][ T4326] usb 2-1: Manufacturer: syz [ 119.057100][ T4326] usb 2-1: SerialNumber: syz [ 119.105537][ T6834] loop2: detected capacity change from 0 to 128 [ 119.385902][ T4326] snd-usb-audio: probe of 2-1:1.1 failed with error -2 [ 119.415499][ T4326] usb 2-1: USB disconnect, device number 8 [ 119.662032][ T4174] udevd[4174]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 119.870588][ T6868] IPv6: sit1: Disabled Multicast RS [ 119.905318][ T6839] loop2: detected capacity change from 0 to 32768 [ 119.943338][ T6870] netlink: 'syz.0.1121': attribute type 1 has an invalid length. [ 119.968920][ T6839] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.1103 (6839) [ 119.985580][ T6870] netlink: 'syz.0.1121': attribute type 2 has an invalid length. [ 120.017367][ T6839] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 120.038502][ T6839] BTRFS info (device loop2): enabling auto defrag [ 120.046455][ T6839] BTRFS info (device loop2): force clearing of disk cache [ 120.090276][ T6839] BTRFS info (device loop2): ignoring data csums [ 120.096722][ T6839] BTRFS info (device loop2): turning on async discard [ 120.129787][ T6839] BTRFS info (device loop2): setting nodatacow, compression disabled [ 120.164775][ T6839] BTRFS info (device loop2): turning off async discard [ 120.176492][ T6881] loop3: detected capacity change from 0 to 512 [ 120.187131][ T6885] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1126'. [ 120.195554][ T6839] BTRFS info (device loop2): disabling free space tree [ 120.222899][ T6839] BTRFS info (device loop2): has skinny extents [ 120.229528][ T6881] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 120.318664][ T6881] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.1125: bg 0: block 104: invalid block bitmap [ 120.401562][ T6881] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 120.417341][ T6881] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1125: invalid indirect mapped block 1 (level 1) [ 120.437685][ T6881] EXT4-fs (loop3): 1 truncate cleaned up [ 120.445462][ T6881] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,,errors=continue. Quota mode: none. [ 120.474618][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 120.474633][ T26] audit: type=1400 audit(1792422761.683:11): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F pid=6904 comm="syz.4.1130" [ 120.534927][ T6912] loop0: detected capacity change from 0 to 164 [ 120.552192][ T26] audit: type=1800 audit(1792422761.713:12): pid=6881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1125" name="file1" dev="loop3" ino=18 res=0 errno=0 [ 120.609778][ T6912] Unable to read rock-ridge attributes [ 120.669416][ T6912] Unable to read rock-ridge attributes [ 120.699499][ T6912] iso9660: Corrupted directory entry in block 1 of inode 1792 [ 120.866885][ T6930] netlink: 'syz.0.1138': attribute type 10 has an invalid length. [ 120.947728][ T6923] xt_ipvs: protocol family 7 not supported [ 120.954036][ T4262] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 120.969877][ T6928] loop4: detected capacity change from 0 to 4096 [ 121.126631][ T6928] ntfs: (device loop4): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 121.154168][ T6928] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 121.172970][ T6930] team0: Device wg1 is of different type [ 121.211750][ T6928] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 121.286173][ T6928] ntfs: volume version 3.1. [ 121.320527][ T4262] usb 2-1: config 26 has an invalid descriptor of length 0, skipping remainder of the config [ 121.356182][ T4262] usb 2-1: config 26 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 121.443135][ T154] ntfs: (device loop4): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 121.470990][ T154] ntfs: (device loop4): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 121.478813][ T4262] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 121.500224][ T4262] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 121.510267][ T4262] usb 2-1: SerialNumber: syz [ 121.515374][ T4194] ntfs: (device loop4): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 121.582048][ T4262] cdc_ether 2-1:26.0: skipping garbage [ 121.587594][ T4262] usb 2-1: bad CDC descriptors [ 121.680301][ T1107] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 121.711872][ T6956] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1150'. [ 121.804232][ T6150] usb 2-1: USB disconnect, device number 9 [ 121.856497][ T6961] loop4: detected capacity change from 0 to 128 [ 121.946063][ T1107] usb 3-1: Using ep0 maxpacket: 16 [ 122.070750][ T1107] usb 3-1: config 0 has an invalid interface number: 98 but max is 0 [ 122.095780][ T1107] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.109518][ T1107] usb 3-1: config 0 has no interface number 0 [ 122.121798][ T1107] usb 3-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 122.136051][ T1107] usb 3-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 122.148979][ T1107] usb 3-1: config 0 interface 98 has no altsetting 0 [ 122.225346][ T6971] netlink: 'syz.3.1157': attribute type 10 has an invalid length. [ 122.292165][ T6971] team0: Device wg1 is of different type [ 122.320536][ T1107] usb 3-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 122.329669][ T1107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.337971][ T4262] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 122.342887][ T6961] loop4: detected capacity change from 0 to 32768 [ 122.369252][ T1107] usb 3-1: Product: syz [ 122.373791][ T1107] usb 3-1: Manufacturer: syz [ 122.378951][ T1107] usb 3-1: SerialNumber: syz [ 122.394350][ T1107] usb 3-1: config 0 descriptor?? [ 122.425984][ T6961] OCFS2: ERROR (device loop4): int ocfs2_validate_extent_block(struct super_block *, struct buffer_head *): Extent block #28672 has bad signature [ 122.431408][ T6944] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 122.470397][ T6961] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 122.490689][ T6944] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 122.499338][ T6961] OCFS2: File system is now read-only. [ 122.512212][ T6961] (syz.4.1152,6961,1):__ocfs2_find_path:1845 ERROR: status = -30 [ 122.542486][ T6961] (syz.4.1152,6961,1):ocfs2_find_leaf:1941 ERROR: status = -30 [ 122.560861][ T6961] (syz.4.1152,6961,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 122.573301][ T6961] (syz.4.1152,6961,1):ocfs2_get_clusters:624 ERROR: status = -30 [ 122.597056][ T6961] (syz.4.1152,6961,1):ocfs2_extent_map_get_blocks:671 ERROR: status = -30 [ 122.615470][ T6961] (syz.4.1152,6961,1):ocfs2_map_slot_buffers:378 ERROR: status = -30 [ 122.624067][ T6961] (syz.4.1152,6961,1):ocfs2_init_slot_info:426 ERROR: status = -30 [ 122.644126][ T6961] (syz.4.1152,6961,1):ocfs2_initialize_super:2303 ERROR: status = -30 [ 122.670137][ T6961] (syz.4.1152,6961,1):ocfs2_fill_super:1177 ERROR: status = -30 [ 122.739713][ T6944] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 122.753106][ T6944] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 122.780832][ T4262] usb 1-1: unable to get BOS descriptor or descriptor too short [ 122.803202][ T6989] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 122.860414][ T4262] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.007046][ T7001] x_tables: duplicate entry at hook 3 [ 123.018042][ T4262] usb 1-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 123.030718][ T1107] asix 3-1:0.98 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 123.050822][ T4262] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 123.059158][ T1107] asix: probe of 3-1:0.98 failed with error -71 [ 123.070291][ T4262] usb 1-1: Product: syz [ 123.078790][ T7003] binder: 7002:7003 ioctl c018620b 0 returned -14 [ 123.079411][ T4262] usb 1-1: Manufacturer: syz [ 123.092099][ T1107] usb 3-1: USB disconnect, device number 9 [ 123.168661][ T4262] usb 1-1: Found UVC 1.00 device syz (8086:0ad2) [ 123.260522][ T5168] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 123.377370][ T7027] loop1: detected capacity change from 0 to 256 [ 123.400536][ T4262] usb 1-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 123.438237][ T7027] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x5955b8de, utbl_chksum : 0xe619d30d) [ 123.450648][ T4262] uvcvideo 1-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 123.467224][ T4262] uvcvideo 1-1:1.1: Failed to initialize the device (-5). [ 123.497374][ T4262] usb 1-1: USB disconnect, device number 7 [ 123.640801][ T5168] usb 5-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0xFF, skipping [ 123.666630][ T5168] usb 5-1: config 0 interface 0 has no altsetting 0 [ 123.728503][ T7043] netlink: 'syz.1.1191': attribute type 10 has an invalid length. [ 123.789539][ T7043] team0: Device wg1 is of different type [ 123.841573][ T5168] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 123.852702][ T5168] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 123.870473][ T5168] usb 5-1: Product: syz [ 123.874691][ T5168] usb 5-1: Manufacturer: syz [ 123.879429][ T5168] usb 5-1: SerialNumber: syz [ 123.920778][ T5168] usb 5-1: config 0 descriptor?? [ 123.983911][ T5168] snd-usb-audio: probe of 5-1:0.0 failed with error -22 [ 124.035299][ T4174] udevd[4174]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.189940][ T1107] usb 5-1: USB disconnect, device number 7 [ 124.268951][ T7078] ecryptfs_parse_options: eCryptfs: unrecognized option [ecryptfs_fnekyptfs_cipher=aes] [ 124.287963][ T7078] ecryptfs_parse_options: eCryptfs: unrecognized option [ecqMã¦ÀìIÑâ¼D¨Ïryptfs_] [ 124.307749][ T7078] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes [ 124.331054][ T7078] Error parsing options; rc = [-22] [ 124.419068][ T7091] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1216'. [ 124.429217][ T7091] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.552556][ T7104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1221'. [ 124.667798][ T7112] loop3: detected capacity change from 0 to 1024 [ 124.766036][ T7120] netlink: 'syz.2.1228': attribute type 21 has an invalid length. [ 124.771068][ T7112] hfsplus: filesystem is marked journaled, leaving read-only. [ 124.795742][ T7120] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1228'. [ 124.895910][ T7125] loop1: detected capacity change from 0 to 2048 [ 124.958359][ T7125] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.027458][ T7133] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.187359][ T7148] netlink: 'syz.0.1243': attribute type 3 has an invalid length. [ 125.200553][ T7149] binder: 7142:7149 ioctl c018620c 2000000025c0 returned -22 [ 125.209665][ T7148] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1243'. [ 125.445348][ T7171] capability: warning: `syz.0.1252' uses 32-bit capabilities (legacy support in use) [ 125.727971][ T7196] netlink: 'syz.1.1263': attribute type 2 has an invalid length. [ 125.930222][ T6150] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 125.945700][ T7215] CacheFiles: No cache directory specified [ 125.979708][ T7218] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1276'. [ 126.201241][ T7241] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 126.331924][ T6150] usb 4-1: not running at top speed; connect to a high speed hub [ 126.387847][ T7259] loop2: detected capacity change from 0 to 512 [ 126.424757][ T7261] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1297'. [ 126.451177][ T6150] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.452147][ T7261] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1297'. [ 126.488786][ T7261] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1297'. [ 126.525871][ T7259] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback. [ 126.569961][ T7259] ext4 filesystem being mounted at /243/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.646462][ T6150] usb 4-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 126.659262][ T7259] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 126.690526][ T6150] usb 4-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 126.698938][ T6150] usb 4-1: Product: syz [ 126.700434][ T5168] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 126.721297][ T6150] usb 4-1: Manufacturer: syz [ 126.816971][ T6150] usb 4-1: Found UVC 1.00 device syz (225a:e1d4) [ 126.832221][ T7288] loop4: detected capacity change from 0 to 256 [ 126.855016][ T7288] exfat: Deprecated parameter 'utf8' [ 126.886525][ T7288] exfat: Deprecated parameter 'utf8' [ 126.949022][ T7288] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x30348f56, utbl_chksum : 0xe619d30d) [ 126.986823][ T7288] exFAT-fs (loop4): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 127.070305][ T6150] usb 4-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 127.112288][ T6150] uvcvideo 4-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 127.121137][ T5168] usb 2-1: unable to get BOS descriptor or descriptor too short [ 127.142706][ T6150] uvcvideo 4-1:1.1: Failed to initialize the device (-5). [ 127.176751][ T6150] usb 4-1: USB disconnect, device number 7 [ 127.205947][ T5168] usb 2-1: config 160 has an invalid interface number: 194 but max is 0 [ 127.224881][ T5168] usb 2-1: config 160 has no interface number 0 [ 127.260245][ T5168] usb 2-1: config 160 interface 194 has no altsetting 0 [ 127.370512][ T6934] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 127.434870][ T5168] usb 2-1: New USB device found, idVendor=8fed, idProduct=88b3, bcdDevice=a4.75 [ 127.454670][ T7300] loop2: detected capacity change from 0 to 32768 [ 127.455611][ T5168] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.475905][ T5168] usb 2-1: Product: syz [ 127.480367][ T5168] usb 2-1: Manufacturer: syz [ 127.485099][ T5168] usb 2-1: SerialNumber: syz [ 127.509130][ T7300] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 127.559671][ T7300] JBD2: Ignoring recovery information on journal [ 127.697544][ T7300] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 127.717786][ T7328] openvswitch: netlink: Actions may not be safe on all matching packets [ 127.785365][ T7332] netlink: 'syz.4.1330': attribute type 12 has an invalid length. [ 127.815499][ T5168] usb 2-1: USB disconnect, device number 10 [ 127.872110][ T7300] syz.2.1315 (7300) used greatest stack depth: 18752 bytes left [ 127.932987][ T4198] ocfs2: Unmounting device (7,2) on (node local) [ 127.943094][ T6934] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 127.957673][ T6934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.975833][ T6934] usb 1-1: Product: syz [ 127.980386][ T6934] usb 1-1: Manufacturer: syz [ 127.985069][ T6934] usb 1-1: SerialNumber: syz [ 127.996691][ T7341] ip6t_rpfilter: unknown options [ 128.013209][ T6934] usb 1-1: config 0 descriptor?? [ 128.080575][ T6934] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 128.151923][ T7350] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1339'. [ 128.287740][ T6934] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 128.298901][ T6934] sq905c 1-1:0.0: Get version command failed [ 128.328091][ T6934] sq905c: probe of 1-1:0.0 failed with error -71 [ 128.350192][ T6934] usb 1-1: USB disconnect, device number 8 [ 128.599838][ T7386] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1354'. [ 128.806271][ T7406] ax25_connect(): syz.2.1366 uses autobind, please contact jreuter@yaina.de [ 129.332224][ T7444] loop4: detected capacity change from 0 to 256 [ 129.401837][ T7444] exfat: Deprecated parameter 'utf8' [ 129.473582][ T7444] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 129.514508][ T7413] loop0: detected capacity change from 0 to 32768 [ 129.659961][ T7413] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 129.877389][ T4184] ocfs2: Unmounting device (7,0) on (node local) [ 129.903462][ T7418] loop3: detected capacity change from 0 to 32768 [ 130.101382][ T7488] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1402'. [ 130.111258][ T7488] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1402'. [ 130.127128][ T7489] loop2: detected capacity change from 0 to 256 [ 130.167089][ T7418] XFS (loop3): Mounting V5 Filesystem [ 130.295825][ T7418] XFS (loop3): Ending clean mount [ 130.424693][ T4186] XFS (loop3): Unmounting Filesystem [ 130.706549][ T7518] netlink: 'syz.2.1414': attribute type 2 has an invalid length. [ 130.748227][ T7518] netlink: 'syz.2.1414': attribute type 1 has an invalid length. [ 130.766160][ T7520] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1416'. [ 130.820342][ T7520] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1416'. [ 130.839798][ T7520] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1416'. [ 130.935041][ T7530] loop3: detected capacity change from 0 to 64 [ 131.080282][ T5168] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 131.105879][ T7541] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1426'. [ 131.209753][ T7548] loop2: detected capacity change from 0 to 512 [ 131.247901][ T7548] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 131.281225][ T7552] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 131.323516][ T7548] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.1429: bg 0: block 4: invalid block bitmap [ 131.344117][ T7548] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 131.379654][ T7548] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1429: invalid indirect mapped block 1 (level 1) [ 131.402371][ T7548] EXT4-fs (loop2): 1 truncate cleaned up [ 131.408113][ T7548] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 131.458883][ T7567] tmpfs: Bad value for 'mpol' [ 131.610631][ T5168] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 131.634607][ T5168] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.660217][ T5168] usb 5-1: Product: syz [ 131.669908][ T5168] usb 5-1: Manufacturer: syz [ 131.690310][ T5168] usb 5-1: SerialNumber: syz [ 131.996068][ T7596] loop1: detected capacity change from 0 to 8192 [ 132.061385][ T7606] netlink: 'syz.0.1456': attribute type 2 has an invalid length. [ 132.320419][ T5168] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 132.554863][ T7642] No such timeout policy "syz1" [ 132.655239][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.661839][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.770022][ T6934] usb 5-1: USB disconnect, device number 8 [ 132.816377][ T7666] loop3: detected capacity change from 0 to 128 [ 132.890539][ T7666] EXT4-fs (loop3): mounted filesystem without journal. Opts: resuid=0x0000000000000000,,errors=continue. Quota mode: none. [ 133.045283][ T7683] loop0: detected capacity change from 0 to 512 [ 133.155398][ T7695] netlink: 'syz.3.1495': attribute type 4 has an invalid length. [ 133.195163][ T7695] netlink: 206236 bytes leftover after parsing attributes in process `syz.3.1495'. [ 133.251873][ T7683] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 133.271963][ T7683] ext4 filesystem being mounted at /305/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.375925][ T5168] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 133.386761][ T5168] ath9k_htc: Failed to initialize the device [ 133.426261][ T6934] usb 5-1: ath9k_htc: USB layer deinitialized [ 133.565643][ T7718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1507'. [ 133.670828][ T7731] netlink: 'syz.3.1514': attribute type 10 has an invalid length. [ 133.725213][ T7734] loop2: detected capacity change from 0 to 2048 [ 133.764212][ T7738] cifs: Unknown parameter 'no'‘a�£Nð[G¶zob,erèèµ;%j¸¼ [ 133.764212][ T7738] ‡üzæ,€@q¬Ú÷ôÐåéJ#³"ŽÚh/.�W1ȱ¨nNCº"†CÙ׈¡E)Ð8+€î¶á÷' [ 133.864652][ T7734] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,auto_da_alloc=0x0000000000000005,errors=remount-ro,sysvgroups,. Quota mode: writeback. [ 133.919212][ T7734] EXT4-fs error (device loop2): ext4_find_extent:929: inode #2: comm syz.2.1517: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 134.070440][ T7734] EXT4-fs (loop2): Remounting filesystem read-only [ 134.276070][ T7778] netlink: 'syz.1.1538': attribute type 1 has an invalid length. [ 134.357219][ T7787] mmap: syz.2.1540 (7787): VmData 49217536 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 134.370375][ T7782] netlink: 'syz.0.1542': attribute type 10 has an invalid length. [ 134.429077][ T7782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.461598][ T7782] team0: Port device bond0 added [ 134.504750][ T7793] deleting an unspecified loop device is not supported. [ 134.519931][ T7794] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1547'. [ 134.588757][ T7799] netlink: 'syz.3.1548': attribute type 10 has an invalid length. [ 135.000313][ T4264] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 135.370394][ T4264] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.398749][ T4264] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.425844][ T4264] usb 5-1: New USB device found, idVendor=08ca, idProduct=0001, bcdDevice= 1.00 [ 135.435651][ T4264] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.873675][ T7908] xt_CT: No such helper "syz0" [ 135.920340][ T4264] aiptek 5-1:1.0: Aiptek using 400 ms programming speed [ 135.930724][ T4264] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input10 [ 135.960709][ T4264] input: failed to attach handler kbd to device input10, error: -5 [ 135.987622][ T7922] loop2: detected capacity change from 0 to 512 [ 136.011690][ T4264] usb 5-1: USB disconnect, device number 9 [ 136.107946][ T7922] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 136.130674][ T7922] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c11d, mo2=0102] [ 136.139735][ T7922] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 136.160585][ T7922] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 136.194949][ T7922] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,abort,noload,noblock_validity,nombcache,usrjquota=,jqfmt=vfsv0,data_err=ignore,nolazytime,,errors=continue. Quota mode: none. [ 136.252177][ T7922] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.1608: dx entry: limit 65535 != root limit 120 [ 136.285312][ T7922] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1608: Corrupt directory, running e2fsck is recommended [ 136.563306][ T7956] loop3: detected capacity change from 0 to 256 [ 136.657867][ T7956] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 136.752051][ T7966] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1623'. [ 137.054145][ T6934] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 137.274572][ T1107] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 137.283301][ T7973] loop2: detected capacity change from 0 to 32768 [ 137.440419][ T6934] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.455975][ T6934] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 137.467900][ T7973] XFS (loop2): Mounting V5 Filesystem [ 137.505522][ T6934] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 137.587198][ T6934] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 137.611748][ T6934] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 137.624598][ T6934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.636061][ T7973] XFS (loop2): Ending clean mount [ 137.650670][ T1107] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 137.661696][ T1107] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xF1, skipping [ 137.676482][ T1107] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 137.702815][ T7973] XFS (loop2): Quotacheck needed: Please wait. [ 137.770643][ T1107] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 137.784355][ T1107] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xF1, skipping [ 137.798305][ T7973] XFS (loop2): Quotacheck: Done. [ 137.820178][ T1107] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 137.902512][ T4198] XFS (loop2): Unmounting Filesystem [ 137.940592][ T1107] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 137.951295][ T1107] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xF1, skipping [ 137.962984][ T1107] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 138.041437][ T5168] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 138.169601][ T6934] usb 5-1: USB disconnect, device number 10 [ 138.215039][ T1107] usb 2-1: string descriptor 0 read error: -22 [ 138.231602][ T1107] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 138.252066][ T1107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.292554][ T8048] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1658'. [ 138.312042][ T1107] adutux 2-1:168.0: interrupt endpoints not found [ 138.403865][ T5168] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.432391][ T5168] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 138.446069][ T5168] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 138.466495][ T5168] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 138.476214][ T5168] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.501982][ T5168] usb 1-1: config 0 descriptor?? [ 138.520755][ T8026] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 138.539278][ T1107] usb 2-1: USB disconnect, device number 11 [ 138.615862][ T8068] loop2: detected capacity change from 0 to 8 [ 138.734085][ T8073] loop3: detected capacity change from 0 to 256 [ 138.762274][ T1107] usb 1-1: USB disconnect, device number 9 [ 138.940839][ T8085] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1677'. [ 138.961822][ T8086] loop3: detected capacity change from 0 to 128 [ 139.284128][ T8109] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1687'. [ 139.602104][ T8130] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.740539][ T8138] tmpfs: Bad value for 'mpol' [ 140.113140][ T8168] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 140.184221][ T8168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1718'. [ 140.518304][ T8190] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 140.550645][ T8190] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 140.764301][ T8198] loop1: detected capacity change from 0 to 4096 [ 140.824191][ T8146] loop3: detected capacity change from 0 to 32768 [ 140.852506][ T8198] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 140.900157][ T8198] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 140.950328][ T8198] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 140.970405][ T8198] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 141.004207][ T8198] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 141.062093][ T8146] XFS (loop3): Mounting V5 Filesystem [ 141.078291][ T8198] ntfs: volume version 3.1. [ 141.102808][ T8198] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 141.156928][ T8220] loop0: detected capacity change from 0 to 2048 [ 141.162885][ T8146] XFS (loop3): Ending clean mount [ 141.206305][ T4186] XFS (loop3): Unmounting Filesystem [ 141.206406][ T8198] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 141.345847][ T8198] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 141.370176][ T8198] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 141.420153][ T8198] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 141.562676][ T8236] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1749'. [ 141.797318][ T8242] loop2: detected capacity change from 0 to 164 [ 141.878606][ T8242] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 141.904229][ T8246] netlink: 'syz.0.1754': attribute type 1 has an invalid length. [ 142.121265][ T8257] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 142.213777][ T8265] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 142.226485][ T8260] loop1: detected capacity change from 0 to 2048 [ 142.283642][ T8260] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 142.347602][ T8266] nvme_fabrics: missing parameter 'traddr=%s' [ 142.742738][ T8286] loop0: detected capacity change from 0 to 16 [ 142.774326][ T8286] erofs: (device loop0): mounted with root inode @ nid 36. [ 143.183946][ T8311] nfs: Unexpected value for 'lock' [ 143.223224][ T8314] ebt_limit: overflow, try lower: 0/0 [ 143.236895][ T8315] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1786'. [ 143.492808][ T8335] kcapi: manufacturer command 256 unknown. [ 143.564106][ T8333] loop4: detected capacity change from 0 to 4096 [ 143.572076][ T8340] loop3: detected capacity change from 0 to 16 [ 143.660523][ T8346] loop1: detected capacity change from 0 to 128 [ 143.713175][ T8333] NILFS (loop4): invalid segment: Checksum error in segment payload [ 143.732831][ T8340] erofs: (device loop3): mounted with root inode @ nid 36. [ 143.790405][ T8333] NILFS (loop4): trying rollback from an earlier position [ 143.876656][ T8346] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,nodelalloc,max_dir_size_kb=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 143.920260][ T8346] ext4 filesystem being mounted at /332/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.991607][ T8354] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1804'. [ 144.029414][ T8333] NILFS (loop4): recovery complete [ 144.107126][ T8357] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 144.390244][ T8368] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 144.772297][ T8393] netlink: 1010 bytes leftover after parsing attributes in process `syz.4.1816'. [ 144.808986][ T8393] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 144.838933][ T8397] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1825'. [ 144.858662][ T8397] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1825'. [ 144.883743][ T8397] tc_dump_action: action bad kind [ 145.346127][ T8438] loop1: detected capacity change from 0 to 16 [ 145.398722][ T8443] netlink: 'syz.4.1848': attribute type 3 has an invalid length. [ 145.419115][ T8438] erofs: (device loop1): mounted with root inode @ nid 36. [ 145.531552][ T8449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1851'. [ 145.801113][ T8463] loop4: detected capacity change from 0 to 2048 [ 145.883530][ T8473] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1863'. [ 145.905102][ T8473] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1863'. [ 145.961036][ T8473] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1863'. [ 146.003300][ T8473] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1863'. [ 146.280203][ T8495] netlink: 'syz.0.1874': attribute type 11 has an invalid length. [ 146.320832][ T8495] netlink: 'syz.0.1874': attribute type 5 has an invalid length. [ 146.590957][ T8510] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 146.665060][ T8510] CIFS: Attempting to mount \\127.0.0.1\test [ 146.698242][ T8510] CIFS: VFS: Error connecting to socket. Aborting operation. [ 146.750806][ T8510] CIFS: VFS: cifs_mount failed w/return code = -111 [ 146.788881][ T8518] [U] „ [ 146.794706][ T8521] comedi comedi4: commands at RT priority not supported in this driver [ 146.918383][ T8481] loop3: detected capacity change from 0 to 32768 [ 146.979126][ T8532] x_tables: duplicate underflow at hook 3 [ 147.041471][ T8481] JBD2: Ignoring recovery information on journal [ 147.258649][ T8481] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 147.478409][ T8557] cgroup: noprefix used incorrectly [ 147.554220][ T4186] ocfs2: Unmounting device (7,3) on (node local) [ 147.901536][ T8584] qrtr: Invalid version 0 [ 148.018354][ T8594] CIFS: Attempting to mount \\127.0.0.1\share [ 148.070480][ T8594] CIFS: VFS: No username specified [ 148.076249][ T6150] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 148.227553][ T8605] program syz.3.1928 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 148.349396][ T8611] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 148.470404][ T6150] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.506044][ T6150] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 148.558863][ T6150] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 148.800530][ T6150] usb 5-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 148.816217][ T8634] loop2: detected capacity change from 0 to 2048 [ 148.826092][ T6150] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.875828][ T6150] usb 5-1: Product: syz [ 148.881518][ T6150] usb 5-1: Manufacturer: syz [ 148.886163][ T6150] usb 5-1: SerialNumber: syz [ 148.940573][ T8634] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 148.995099][ T6150] usb 5-1: Found UVC 1.00 device syz (046d:0821) [ 149.020184][ T8644] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 149.037616][ T6150] usb 5-1: No valid video chain found. [ 149.043895][ T8643] ERROR: device name not specified. [ 149.112312][ T8634] NILFS (loop2): DAT doesn't have a block to manage vblocknr = 147 [ 149.165628][ T8634] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=15) [ 149.246691][ T8634] Remounting filesystem read-only [ 149.277251][ T8634] NILFS (loop2): error -5 truncating bmap (ino=15) [ 149.280904][ T4264] usb 5-1: USB disconnect, device number 11 [ 149.320933][ T8634] attempt to access beyond end of device [ 149.320933][ T8634] loop2: rw=0, want=262218, limit=2048 [ 149.358660][ T8634] NILFS (loop2): I/O error reading meta-data file (ino=6, block-offset=1) [ 149.513471][ T4198] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 149.536442][ T8626] loop3: detected capacity change from 0 to 32768 [ 149.736212][ T8665] __nla_validate_parse: 2 callbacks suppressed [ 149.736229][ T8665] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1953'. [ 149.836256][ T8665] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1953'. [ 149.894690][ T8674] xt_hashlimit: size too large, truncated to 1048576 [ 149.978269][ T8674] xt_hashlimit: max too large, truncated to 1048576 [ 150.010612][ T8671] nvme nvme0: rdma_resolve_addr failed (-99). [ 150.125694][ T8683] 9pnet: p9_fd_create_unix (8683): problem connecting socket: dev: -111 [ 150.393877][ T8699] loop2: detected capacity change from 0 to 128 [ 150.452582][ T8699] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2 [ 150.724190][ T6150] nvmet: connect request for invalid subsystem testsubsys! [ 150.745804][ T8707] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 151.423987][ T8775] trusted_key: encrypted_key: keyword 'new¼°±‹U£_5' not recognized [ 151.512505][ T8782] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2014'. [ 151.667070][ T8793] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2019'. [ 151.906849][ T8812] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2029'. [ 151.967936][ T8815] netlink: 'syz.2.2032': attribute type 2 has an invalid length. [ 152.006668][ T8810] loop3: detected capacity change from 0 to 4096 [ 152.020236][ T8815] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2032'. [ 152.069374][ T8810] __ntfs_error: 6 callbacks suppressed [ 152.069391][ T8810] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 152.116926][ T8810] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 152.171239][ T8810] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 152.207395][ T8810] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 152.250152][ T8810] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 152.288648][ T8830] loop1: detected capacity change from 0 to 2048 [ 152.306963][ T8810] ntfs: volume version 3.1. [ 152.334789][ T8810] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 152.363175][ T8810] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 152.390293][ T6934] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 152.419322][ T8830] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 152.449791][ T8810] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 152.490249][ T8810] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 152.524415][ T8810] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 152.694979][ T8838] ecryptfs_parse_options: eCryptfs: unrecognized option [ecryptfs_key_bytes=-6] [ 152.744918][ T8838] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes [ 152.760323][ T6934] usb 5-1: not running at top speed; connect to a high speed hub [ 152.770499][ T8838] Error parsing options; rc = [-22] [ 152.865979][ T6934] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.896851][ T6934] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 152.916220][ T6934] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 152.947137][ T6934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.040600][ T8851] netlink: 'syz.0.2048': attribute type 6 has an invalid length. [ 153.189649][ T8853] device bond1 entered promiscuous mode [ 153.202428][ T8853] 8021q: adding VLAN 0 to HW filter on device bond1 [ 153.217825][ T8849] loop3: detected capacity change from 0 to 4096 [ 153.275810][ T8856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2050'. [ 153.300426][ T6934] usb 5-1: string descriptor 0 read error: -71 [ 153.311857][ T6934] usb 5-1: Found UVC 1.00 device (0000:0000) [ 153.325039][ T6934] usb 5-1: No valid video chain found. [ 153.342449][ T6934] gspca_main: spca501-2.14.0 probing 0000:0000 [ 153.370225][ T6934] gspca_spca501: reg write: error -71 [ 153.376094][ T6934] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 153.410506][ T6934] spca501: probe of 5-1:1.0 failed with error -22 [ 153.432862][ T6934] usb 5-1: USB disconnect, device number 12 [ 153.507968][ T8849] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 153.862185][ T8846] loop1: detected capacity change from 0 to 32768 [ 153.995606][ T8846] XFS (loop1): Mounting V5 Filesystem [ 154.198669][ T8846] XFS (loop1): Ending clean mount [ 154.486297][ T4185] XFS (loop1): Unmounting Filesystem [ 154.518661][ T8919] netlink: 'syz.2.2077': attribute type 8 has an invalid length. [ 154.576674][ T8919] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2077'. [ 154.601262][ T8926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2081'. [ 154.754219][ T8930] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2083'. [ 154.858583][ T8936] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 154.906498][ T8938] loop2: detected capacity change from 0 to 8 [ 154.945144][ T8936] overlayfs: overlapping lowerdir path [ 155.087650][ T8946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2090'. [ 155.097016][ T8938] squashfs image failed sanity check [ 155.914395][ T9009] overlayfs: missing 'lowerdir' [ 156.650484][ T9062] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2146'. [ 157.001655][ T9085] loop0: detected capacity change from 0 to 8 [ 157.162371][ T9092] ax25_connect(): syz.1.2161 uses autobind, please contact jreuter@yaina.de [ 157.562884][ T9096] [ 157.565280][ T9096] ====================================================== [ 157.572434][ T9096] WARNING: possible circular locking dependency detected [ 157.579497][ T9096] syzkaller #0 Not tainted [ 157.583945][ T9096] ------------------------------------------------------ [ 157.590988][ T9096] syz.0.2162/9096 is trying to acquire lock: [ 157.597000][ T9096] ffff888021b20f98 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 157.607529][ T9096] [ 157.607529][ T9096] but task is already holding lock: [ 157.614921][ T9096] ffff888021b213f0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1020 [ 157.624300][ T9096] [ 157.624300][ T9096] which lock already depends on the new lock. [ 157.624300][ T9096] [ 157.634736][ T9096] [ 157.634736][ T9096] the existing dependency chain (in reverse order) is: [ 157.643775][ T9096] [ 157.643775][ T9096] -> #3 (&hdev->req_lock){+.+.}-{3:3}: [ 157.651477][ T9096] __mutex_lock_common+0x1e5/0x2400 [ 157.657245][ T9096] mutex_lock_nested+0x17/0x20 [ 157.662563][ T9096] hci_dev_do_close+0x5f/0x1020 [ 157.667982][ T9096] hci_rfkill_set_block+0x101/0x180 [ 157.673744][ T9096] rfkill_set_block+0x1c1/0x3c0 [ 157.679161][ T9096] rfkill_fop_write+0x453/0x560 [ 157.684653][ T9096] vfs_write+0x304/0xd70 [ 157.689456][ T9096] ksys_write+0x153/0x260 [ 157.694334][ T9096] do_syscall_64+0x4c/0xa0 [ 157.699312][ T9096] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 157.705781][ T9096] [ 157.705781][ T9096] -> #2 (rfkill_global_mutex){+.+.}-{3:3}: [ 157.713819][ T9096] __mutex_lock_common+0x1e5/0x2400 [ 157.719621][ T9096] mutex_lock_nested+0x17/0x20 [ 157.724941][ T9096] rfkill_register+0x2f/0x970 [ 157.730207][ T9096] hci_register_dev+0x459/0x980 [ 157.735615][ T9096] vhci_create_device+0x32e/0x5c0 [ 157.741203][ T9096] vhci_write+0x389/0x440 [ 157.746091][ T9096] vfs_write+0x748/0xd70 [ 157.750886][ T9096] ksys_write+0x153/0x260 [ 157.755777][ T9096] do_syscall_64+0x4c/0xa0 [ 157.760753][ T9096] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 157.767205][ T9096] [ 157.767205][ T9096] -> #1 (&data->open_mutex){+.+.}-{3:3}: [ 157.775063][ T9096] __mutex_lock_common+0x1e5/0x2400 [ 157.780823][ T9096] mutex_lock_nested+0x17/0x20 [ 157.786142][ T9096] vhci_send_frame+0x88/0x100 [ 157.791583][ T9096] hci_send_frame+0x1a9/0x2e0 [ 157.796840][ T9096] hci_tx_work+0x9b5/0x16d0 [ 157.801903][ T9096] process_one_work+0x867/0xff0 [ 157.807333][ T9096] worker_thread+0xad7/0x12a0 [ 157.812580][ T9096] kthread+0x42e/0x520 [ 157.817199][ T9096] ret_from_fork+0x1f/0x30 [ 157.822171][ T9096] [ 157.822171][ T9096] -> #0 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 157.831418][ T9096] __lock_acquire+0x38f7/0x7d40 [ 157.836848][ T9096] lock_acquire+0x19f/0x400 [ 157.841911][ T9096] __flush_work+0x116/0x210 [ 157.846970][ T9096] hci_dev_do_close+0x201/0x1020 [ 157.852486][ T9096] hci_rfkill_set_block+0x101/0x180 [ 157.858247][ T9096] rfkill_set_block+0x1c1/0x3c0 [ 157.863657][ T9096] rfkill_fop_write+0x453/0x560 [ 157.869063][ T9096] vfs_write+0x304/0xd70 [ 157.873876][ T9096] ksys_write+0x153/0x260 [ 157.878759][ T9096] do_syscall_64+0x4c/0xa0 [ 157.883732][ T9096] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 157.890180][ T9096] [ 157.890180][ T9096] other info that might help us debug this: [ 157.890180][ T9096] [ 157.900436][ T9096] Chain exists of: [ 157.900436][ T9096] (work_completion)(&hdev->tx_work) --> rfkill_global_mutex --> &hdev->req_lock [ 157.900436][ T9096] [ 157.915423][ T9096] Possible unsafe locking scenario: [ 157.915423][ T9096] [ 157.922939][ T9096] CPU0 CPU1 [ 157.928330][ T9096] ---- ---- [ 157.933720][ T9096] lock(&hdev->req_lock); [ 157.934006][ T9114] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2170'. [ 157.938157][ T9096] lock(rfkill_global_mutex); [ 157.938176][ T9096] lock(&hdev->req_lock); [ 157.961455][ T9096] lock((work_completion)(&hdev->tx_work)); [ 157.967468][ T9096] [ 157.967468][ T9096] *** DEADLOCK *** [ 157.967468][ T9096] [ 157.975637][ T9096] 2 locks held by syz.0.2162/9096: [ 157.980864][ T9096] #0: ffffffff8e4d7308 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1ae/0x560 [ 157.991004][ T9096] #1: ffff888021b213f0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1020 [ 158.000805][ T9096] [ 158.000805][ T9096] stack backtrace: [ 158.006736][ T9096] CPU: 1 PID: 9096 Comm: syz.0.2162 Not tainted syzkaller #0 [ 158.014140][ T9096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 158.024469][ T9096] Call Trace: [ 158.027903][ T9096] [ 158.030912][ T9096] dump_stack_lvl+0x188/0x250 [ 158.035632][ T9096] ? load_image+0x410/0x410 [ 158.040186][ T9096] ? show_regs_print_info+0x20/0x20 [ 158.045444][ T9096] ? print_circular_bug+0x12b/0x1a0 [ 158.050689][ T9096] check_noncircular+0x2f8/0x400 [ 158.055674][ T9096] ? look_up_lock_class+0x71/0x110 [ 158.060827][ T9096] ? print_deadlock_bug+0x5d0/0x5d0 [ 158.066076][ T9096] ? lockdep_lock+0xf1/0x1f0 [ 158.070709][ T9096] ? mark_lock+0x94/0x320 [ 158.075077][ T9096] ? _find_first_zero_bit+0xd1/0xf0 [ 158.080324][ T9096] __lock_acquire+0x38f7/0x7d40 [ 158.085234][ T9096] ? mark_lock+0x94/0x320 [ 158.089626][ T9096] ? verify_lock_unused+0x140/0x140 [ 158.094894][ T9096] ? __lock_acquire+0x12df/0x7d40 [ 158.099967][ T9096] ? lockdep_hardirqs_on+0x94/0x140 [ 158.105204][ T9096] ? __schedule+0x11cb/0x4350 [ 158.109917][ T9096] lock_acquire+0x19f/0x400 [ 158.114462][ T9096] ? __flush_work+0xfa/0x210 [ 158.119089][ T9096] ? verify_lock_unused+0x140/0x140 [ 158.124390][ T9096] ? read_lock_is_recursive+0x10/0x10 [ 158.129807][ T9096] ? lockdep_hardirqs_on+0x94/0x140 [ 158.135054][ T9096] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 158.141352][ T9096] ? release_firmware_map_entry+0x190/0x190 [ 158.147390][ T9096] __flush_work+0x116/0x210 [ 158.151942][ T9096] ? __flush_work+0xfa/0x210 [ 158.156578][ T9096] ? flush_work+0x20/0x20 [ 158.160953][ T9096] ? schedule_preempt_disabled+0x20/0x20 [ 158.166625][ T9096] ? rcu_lock_release+0x5/0x20 [ 158.171433][ T9096] ? __lock_acquire+0x7d40/0x7d40 [ 158.176508][ T9096] hci_dev_do_close+0x201/0x1020 [ 158.181492][ T9096] hci_rfkill_set_block+0x101/0x180 [ 158.186736][ T9096] ? rcu_lock_release+0x20/0x20 [ 158.191628][ T9096] rfkill_set_block+0x1c1/0x3c0 [ 158.196560][ T9096] rfkill_fop_write+0x453/0x560 [ 158.201452][ T9096] ? rfkill_fop_read+0x560/0x560 [ 158.206457][ T9096] ? common_file_perm+0x160/0x1c0 [ 158.211521][ T9096] ? fsnotify_perm+0x5d/0x560 [ 158.216238][ T9096] ? security_file_permission+0x75/0xa0 [ 158.221826][ T9096] ? rfkill_fop_read+0x560/0x560 [ 158.226802][ T9096] vfs_write+0x304/0xd70 [ 158.231094][ T9096] ? file_end_write+0x250/0x250 [ 158.235986][ T9096] ? __fget_files+0x402/0x470 [ 158.240708][ T9096] ? __fdget_pos+0x1e2/0x370 [ 158.245339][ T9096] ? ksys_write+0x70/0x260 [ 158.249801][ T9096] ksys_write+0x153/0x260 [ 158.254181][ T9096] ? __ia32_sys_read+0x80/0x80 [ 158.258988][ T9096] ? lockdep_hardirqs_on+0x94/0x140 [ 158.264236][ T9096] do_syscall_64+0x4c/0xa0 [ 158.268689][ T9096] ? clear_bhb_loop+0x30/0x80 [ 158.273403][ T9096] ? clear_bhb_loop+0x30/0x80 [ 158.278148][ T9096] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 158.284095][ T9096] RIP: 0033:0x7fa8fbc67559 [ 158.288540][ T9096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.308179][ T9096] RSP: 002b:00007fa8f9ebf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 158.316637][ T9096] RAX: ffffffffffffffda RBX: 00007fa8fbeeefa0 RCX: 00007fa8fbc67559 [ 158.324650][ T9096] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 158.332656][ T9096] RBP: 00007fa8fbcfead8 R08: 0000000000000000 R09: 0000000000000000 [ 158.340700][ T9096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.348714][ T9096] R13: 00007fa8fbeef038 R14: 00007fa8fbeeefa0 R15: 00007ffcb48d3158 [ 158.356846][ T9096] [ 158.359950][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.389217][ T9056] loop3: detected capacity change from 0 to 32768 [ 158.566856][ T9056] XFS (loop3): Mounting V5 Filesystem [ 158.738740][ T9056] XFS (loop3): Ending clean mount [ 158.749907][ T9056] XFS (loop3): Quotacheck needed: Please wait. [ 158.814938][ T9103] loop2: detected capacity change from 0 to 32768 [ 158.829416][ T9056] XFS (loop3): Quotacheck: Done. [ 158.969293][ T9103] XFS (loop2): Mounting V5 Filesystem [ 158.978068][ T4186] XFS (loop3): Unmounting Filesystem [ 159.101351][ T9103] XFS (loop2): Ending clean mount [ 159.110846][ T9103] XFS (loop2): Quotacheck needed: Please wait. [ 159.137270][ T9103] XFS (loop2): Quotacheck: Done. [ 159.198446][ T4198] XFS (loop2): Unmounting Filesystem