last executing test programs: 2.236843617s ago: executing program 2 (id=2562): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0xfffffffffffffffe, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000000)={0xa0, 0x6, 0x321, 0x3, 0x0, 0x101, 0x0}) 2.220628037s ago: executing program 1 (id=2563): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) ioctl$SG_BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x21fd, 0xdd36, 0x80, 0x1df, 0x81}) 2.024447652s ago: executing program 1 (id=2565): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x400002}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'tunl0\x00'}]}, 0x54}}, 0x40080) 1.956208153s ago: executing program 1 (id=2567): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x1, 0x1, 0x1, 0x17, @loopback, @loopback={0x0, 0xffff888101827518}, 0x8000, 0x10, 0xffffffff, 0xa}}) 1.892217025s ago: executing program 1 (id=2569): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x36, 0xffffffffffffffff, &(0x7f0000000340)=0xffffffffffffffe6) 1.860059386s ago: executing program 2 (id=2571): r0 = syz_open_dev$video(&(0x7f0000000040), 0x400, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05640, &(0x7f0000000340)={0x1, @pix={0x0, 0x0, 0x0, 0x8, 0x0, 0x98, 0x6, 0x0, 0x3, 0x2, 0x8002, 0x4}}) 1.859507536s ago: executing program 1 (id=2572): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 1.779438148s ago: executing program 1 (id=2574): r0 = syz_usb_connect$uac1(0x0, 0x85, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000087f0410c040000102030109027300030100200d0904000000010100000a24010800160002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 1.779032728s ago: executing program 2 (id=2576): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000001000/0x4000)=nil, 0x3) 1.416540427s ago: executing program 4 (id=2587): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x800) ioctl$I2C_TIMEOUT(r0, 0x702, 0xfffffffffffff95f) 1.374793958s ago: executing program 4 (id=2589): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffff8}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.28861465s ago: executing program 4 (id=2590): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x1a, 0x801, 0x0, 0x0, {0x80, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x10000814}, 0xc000) 1.251506091s ago: executing program 4 (id=2591): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt(r0, 0x1, 0x43, &(0x7f0000000140)=""/195, &(0x7f0000000040)=0xc3) 1.191876752s ago: executing program 2 (id=2593): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$pppl2tp(r0, 0x0, 0x0) 1.178569852s ago: executing program 4 (id=2595): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000080), 0x1, 0x57c, &(0x7f00000129c0)="$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") llistxattr(&(0x7f0000000700)='./file1\x00', 0x0, 0x0) 1.068412335s ago: executing program 2 (id=2597): syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x10040, &(0x7f00000000c0)=ANY=[@ANYBLOB='heartbeat=none,journal_async_commit,journal_async_commit,coherency=full,coherency=full\x00'], 0x1, 0x4445, &(0x7f00000044c0)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 973.792588ms ago: executing program 4 (id=2601): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c010203010902240001010000000904690202ff5aa3000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 608.883416ms ago: executing program 0 (id=2610): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x45}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x15}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0) 523.684588ms ago: executing program 0 (id=2613): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{0x0, 0x1c}], 0x1, 0x1) 473.235659ms ago: executing program 0 (id=2614): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, 0x0) 460.25066ms ago: executing program 3 (id=2615): r0 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='ip\x00\x03cr\x80e\x83', &(0x7f0000000240)='.\x8bR\xafH\xd6e\x11\'\xec\xbb\xcb\xa0/\x1f\x16\xcf\xe2\xb5\xfc\xeb1\x12\xfdC\xb8\xa0\x01\xa3~\x971W\x96\xec\xaf\x1c\x91\xeb\xa8e\xfe\x17\x02xEA\x0f\x14\r\xae\xc1\xfe\x06\x12\beSb{~R\xf0\x06\x00\x00\x00\xf92\xce\x81p\x1fC\n\x9f(\x00\xc5\x1d\x9c\xccCq\x06\x1b-\f\xc9\xd9+\xa4\x14\xd8\xf4\xef\xf5^2\x14\xb8=\x03\x00\xd5M\x04\xf4{H\xd0\xc8\xf7\x10\xe1R \x9a^\xdfq*L\xc4lP6\x8f\xff&>\x94\x882\x1c\x00\x00\xc5\xbdD(\xa5\x17\x11\xd6\t\x12\x7fe\xba\xfc\x93\xf4\xd8\xb5\x04\xcb\x98\xd1QF\xe5\x1b\xb30x/\x86\x02\x1ct\xc7\x88\xd2\xce\xd5\x9e1\xef`\xad\x05\x11\xc9\xd8<\xc6~\x97\xd5\xde\xe3Eh\\\x84\x14\x9e\b\xe1\x9b\x00\'\xe8!\x8c\xc3\x97\x8a\xcf\xfc\x8fe\xa6\x0f\x8b\x912c\x1b>8\xc5\xa3_\xab\xf1\xf5\r\xb6\xe7\xfcS9\xd1.\x8b\xf3\xbc,?\xb2\x9aBDPY=r\xfa8I\x16\xa2\x18\xd4\xa5\x8b\xaf\xd1\x8a\xbb\x0e\x15O\xc9p@\xadaw\x84\xc9\xdd\x87a[\xdf\xc2\xa4\xf9@T/\xf5\xd1t\xc7\xeb\x04y\rr\xba^\x9f\xf4\xfb\xaa#\xf6lX\'\x03u\xc6XZ\x8eK*Zs\xdb\xcaV\x92\x84\xc5\x05i]\xb6N\xa9&a\xe6\xa1\xedgd\xc2\x8b1Kq\x90U\xe0\x9a\xee\xd6BdU?\r\xd2\x13}u\xf6\x9entz\vW\x04\x968\xc5v\xe0t:\xe0D\xe8\xca\xb8\xd5\xb0\x89\x90\x928\x1d\r\x8b\xf2#8\xf5rI=6\xa1L\x19>I\f\xe7\xab\x98\xd2x\x82\x820\xf6\x8b]T\xd1\xe0\xefD\xc3\x94O\xdd\\\xd6\xb5z.\xc9z>\xdab\xcdw\xbf\x91\x190we\xa5\xfc\xf9\xaf\xedA&\xd50\xa9\xf0\xbeX\xe8\xd0', 0x0) 375.682521ms ago: executing program 0 (id=2616): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@private1, @in6=@private1}}]}, 0xa0}}, 0x0) 349.201932ms ago: executing program 3 (id=2617): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000007c0)=@ethtool_drvinfo={0x3, "afceeb03dcad0c3d385b9d1d57c3ff1f6ad7d540f84de6306783b897769be692", "b43dac8751f5d8cd78fac9c424effa585240135a695e1e33c9ae64fec6e36adc", "644cbcfec6d34d6142ddfd393b7f1d0c23b2e21ed0717f6203058a44a427fb1b", "9313c981621bec72e628cd3c5b21d90945db5c38ca9df508af689aee1a9775bb", "3eb56c5371594cdfa4f964ca8a2044537b971d33ac7c8da8c4aa6adf90eeeea0", "8b151f0600000000000000c3", 0x8, 0x7, 0x2, 0x80000001, 0x3}}) 301.457983ms ago: executing program 0 (id=2618): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080)={0x7, 0x7, 0x7, 0x80, 0x6, 0xe4, 0x5}, 0xc) 300.778443ms ago: executing program 3 (id=2619): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x0, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050011006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) 239.179655ms ago: executing program 2 (id=2620): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)={0x28, 0x2e, 0x503, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0xd}, @typed={0x8, 0x110, 0x0, 0x0, @ipv4=@loopback}]}]}, 0x28}], 0x1}, 0x14008010) 239.024425ms ago: executing program 0 (id=2621): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 238.537685ms ago: executing program 3 (id=2622): syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 71.342499ms ago: executing program 3 (id=2623): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "01"}]}]}}}, {0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x110}}, 0x0) 0s ago: executing program 3 (id=2624): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee20009050b"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): : Mfr=0, Product=0, SerialNumber=0 [ 81.879324][ T4257] cdc_acm: probe of 1-1:1.0 failed with error -22 [ 81.987782][ T5084] netlink: 'syz.1.344': attribute type 10 has an invalid length. [ 82.026242][ T5084] netlink: 'syz.1.344': attribute type 10 has an invalid length. [ 82.127924][ T4257] usb 1-1: string descriptor 0 read error: -71 [ 82.138349][ T4257] cdc_acm: probe of 1-1:1.1 failed with error -22 [ 82.180030][ T4257] usb 1-1: USB disconnect, device number 2 [ 82.204673][ T5103] loop3: detected capacity change from 0 to 8 [ 82.250696][ T5108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.356'. [ 82.510978][ T5129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.367'. [ 82.565561][ T5136] loop3: detected capacity change from 0 to 64 [ 82.620504][ T5142] loop2: detected capacity change from 0 to 512 [ 82.735973][ T5142] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 82.785054][ T5142] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.115536][ T5188] xt_SECMARK: invalid mode: 2 [ 83.316455][ T5210] netlink: 24 bytes leftover after parsing attributes in process `syz.4.405'. [ 83.513747][ T5231] tmpfs: Bad value for 'mpol' [ 83.619649][ T5242] netlink: 5 bytes leftover after parsing attributes in process `syz.0.421'. [ 83.639465][ T5242] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 83.741737][ T5255] netlink: 16 bytes leftover after parsing attributes in process `syz.2.426'. [ 83.794543][ T5260] loop1: detected capacity change from 0 to 256 [ 83.956865][ T5272] netlink: 'syz.2.437': attribute type 1 has an invalid length. [ 83.975101][ T5272] netlink: 'syz.2.437': attribute type 1 has an invalid length. [ 84.173381][ T5292] netlink: 'syz.4.446': attribute type 30 has an invalid length. [ 84.183584][ T5293] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead [ 84.214048][ T5293] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000840: 0x642f instead [ 84.246215][ T5293] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000844: 0x6d2f instead [ 84.265731][ T5293] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000848: 0x0023 instead [ 84.271163][ T5301] loop0: detected capacity change from 0 to 8 [ 84.279052][ T5293] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead [ 84.310475][ T5293] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001984: 0x2000 instead [ 84.326631][ T5293] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001998: 0x00e4 instead [ 84.362576][ T5293] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 84.382211][ T5293] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 84.418361][ T5301] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 84.439346][ T4177] udevd[4177]: incorrect cramfs checksum on /dev/loop0 [ 84.460301][ T5311] netlink: 'syz.4.455': attribute type 1 has an invalid length. [ 84.503171][ T4177] udevd[4177]: incorrect cramfs checksum on /dev/loop0 [ 84.703113][ T5330] netlink: 'syz.0.465': attribute type 20 has an invalid length. [ 84.821663][ T5343] loop1: detected capacity change from 0 to 512 [ 84.945185][ T5343] EXT4-fs (loop1): Ignoring removed oldalloc option [ 84.989660][ T5343] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 85.027618][ T5357] loop3: detected capacity change from 0 to 2048 [ 85.085545][ T5343] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 85.099969][ T5343] EXT4-fs (loop1): orphan cleanup on readonly fs [ 85.129984][ T5343] EXT4-fs error (device loop1): ext4_orphan_get:1436: comm syz.1.471: bad orphan inode 267 [ 85.192479][ T5343] EXT4-fs (loop1): Remounting filesystem read-only [ 85.228363][ T5371] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 85.246100][ T5375] loop4: detected capacity change from 0 to 256 [ 85.252662][ T5343] EXT4-fs (loop1): mounted filesystem without journal. Opts: oldalloc,noblock_validity,discard,errors=remount-ro,lazytime. Quota mode: none. [ 85.303709][ T5357] NILFS (loop3): error -22 preparing GC: cannot read source blocks [ 85.306822][ T5343] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.471: dx entry: limit 0 != root limit 125 [ 85.330391][ T5343] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.471: Corrupt directory, running e2fsck is recommended [ 85.410786][ T5375] FAT-fs (loop4): Directory bread(block 64) failed [ 85.435085][ T5375] FAT-fs (loop4): Directory bread(block 65) failed [ 85.452107][ T5375] FAT-fs (loop4): Directory bread(block 66) failed [ 85.461668][ T5375] FAT-fs (loop4): Directory bread(block 67) failed [ 85.468843][ T5375] FAT-fs (loop4): Directory bread(block 68) failed [ 85.475694][ T5375] FAT-fs (loop4): Directory bread(block 69) failed [ 85.483291][ T5375] FAT-fs (loop4): Directory bread(block 70) failed [ 85.523423][ T5375] FAT-fs (loop4): Directory bread(block 71) failed [ 85.542770][ T5375] FAT-fs (loop4): Directory bread(block 72) failed [ 85.554821][ T5375] FAT-fs (loop4): Directory bread(block 73) failed [ 85.617387][ T5387] loop3: detected capacity change from 0 to 256 [ 85.663545][ T5387] exfat: Deprecated parameter 'utf8' [ 85.704405][ T5387] exfat: Deprecated parameter 'namecase' [ 85.723490][ T5387] exfat: Deprecated parameter 'utf8' [ 85.801736][ T5387] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 85.814039][ T13] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 85.962191][ T5409] ieee802154 phy0 wpan0: encryption failed: -22 [ 86.019533][ T5416] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 86.044858][ T5417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.506'. [ 86.045867][ T5416] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 86.271171][ T5443] netlink: 'syz.4.520': attribute type 21 has an invalid length. [ 86.288154][ T5443] netlink: 164 bytes leftover after parsing attributes in process `syz.4.520'. [ 86.318884][ T13] usb 3-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.02 [ 86.337347][ T13] usb 3-1: New USB device strings: Mfr=0, Product=232, SerialNumber=255 [ 86.347788][ T21] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 86.371858][ T13] usb 3-1: Product: syz [ 86.376043][ T13] usb 3-1: SerialNumber: syz [ 86.390872][ T5453] netlink: 36 bytes leftover after parsing attributes in process `syz.4.525'. [ 86.421294][ T13] usb 3-1: config 0 descriptor?? [ 86.510868][ T1344] cfg80211: failed to load regulatory.db [ 86.697937][ T13] ldusb 3-1:0.0: Interrupt in endpoint not found [ 86.727549][ T5475] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 86.736366][ T13] usb 3-1: USB disconnect, device number 4 [ 86.738725][ T21] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 86.762426][ T21] usb 2-1: config 0 has no interface number 0 [ 86.787726][ T21] usb 2-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 86.799367][ T5475] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 86.829687][ T21] usb 2-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 86.861118][ T21] usb 2-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64 [ 86.897713][ T21] usb 2-1: config 0 interface 2 has no altsetting 0 [ 87.089009][ T5464] loop4: detected capacity change from 0 to 32768 [ 87.108216][ T21] usb 2-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f7.3f [ 87.122679][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.137738][ T21] usb 2-1: Product: syz [ 87.148636][ T21] usb 2-1: Manufacturer: syz [ 87.157968][ T21] usb 2-1: SerialNumber: syz [ 87.176708][ T21] usb 2-1: config 0 descriptor?? [ 87.238720][ T5421] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 87.258287][ T5487] netlink: 'syz.3.540': attribute type 1 has an invalid length. [ 87.268616][ T5421] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 87.310649][ T5473] loop0: detected capacity change from 0 to 32768 [ 87.338152][ T5464] XFS (loop4): Mounting V5 Filesystem [ 87.459903][ T5501] netlink: 'syz.2.545': attribute type 3 has an invalid length. [ 87.484264][ T5464] XFS (loop4): Ending clean mount [ 87.524754][ T5473] JBD2: Ignoring recovery information on journal [ 87.709712][ T4194] XFS (loop4): Unmounting Filesystem [ 87.767635][ T21] usb 2-1: USB disconnect, device number 4 [ 87.799512][ T5473] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 88.098407][ T4184] ocfs2: Unmounting device (7,0) on (node local) [ 88.265470][ T5522] netlink: 'syz.4.548': attribute type 5 has an invalid length. [ 88.293578][ T5505] loop3: detected capacity change from 0 to 32768 [ 88.368271][ T5505] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.546 (5505) [ 88.462824][ T5505] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 88.506959][ T5505] BTRFS info (device loop3): enabling ssd optimizations [ 88.528831][ T5505] BTRFS info (device loop3): using spread ssd allocation scheme [ 88.562289][ T5505] BTRFS info (device loop3): force zlib compression, level 3 [ 88.571210][ T5544] netlink: 'syz.0.561': attribute type 3 has an invalid length. [ 88.594019][ T5505] BTRFS info (device loop3): metadata ratio 1 [ 88.628713][ T5505] BTRFS info (device loop3): turning on flush-on-commit [ 88.657170][ T5505] BTRFS info (device loop3): setting nodatacow [ 88.660545][ T5549] netlink: 24 bytes leftover after parsing attributes in process `syz.4.565'. [ 88.681961][ T5505] BTRFS info (device loop3): using free space tree [ 88.702455][ T5505] BTRFS info (device loop3): has skinny extents [ 88.947283][ T5579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.573'. [ 88.994619][ T21] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 89.028640][ T5542] loop1: detected capacity change from 0 to 32768 [ 89.106188][ T5542] XFS (loop1): Mounting V5 Filesystem [ 89.384054][ T5542] XFS (loop1): Ending clean mount [ 89.393260][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 89.516872][ T4187] XFS (loop1): Unmounting Filesystem [ 89.567977][ T21] usb 1-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 89.583623][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.593576][ T5622] netlink: 28 bytes leftover after parsing attributes in process `syz.2.591'. [ 89.602875][ T21] usb 1-1: Product: syz [ 89.607415][ T5622] netlink: 28 bytes leftover after parsing attributes in process `syz.2.591'. [ 89.616817][ T21] usb 1-1: Manufacturer: syz [ 89.626843][ T21] usb 1-1: SerialNumber: syz [ 89.648694][ T21] usb 1-1: config 0 descriptor?? [ 89.690450][ T21] powermate: probe of 1-1:0.0 failed with error -5 [ 89.713399][ T5627] netlink: 20 bytes leftover after parsing attributes in process `syz.2.592'. [ 89.737839][ T5627] netlink: 36 bytes leftover after parsing attributes in process `syz.2.592'. [ 89.910790][ T21] usb 1-1: USB disconnect, device number 3 [ 90.227252][ T5675] loop3: detected capacity change from 0 to 512 [ 90.255151][ T5679] loop2: detected capacity change from 0 to 512 [ 90.278635][ T5683] netlink: 12 bytes leftover after parsing attributes in process `syz.1.616'. [ 90.293772][ T5683] netlink: 20 bytes leftover after parsing attributes in process `syz.1.616'. [ 90.305484][ T5683] netlink: 20 bytes leftover after parsing attributes in process `syz.1.616'. [ 90.348568][ T5679] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 90.399432][ T5675] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 90.437364][ T5675] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.523621][ T5675] fs-verity (loop3, inode 15): Unrecognized descriptor size: 0 bytes [ 90.578387][ T5705] capability: warning: `syz.4.624' uses deprecated v2 capabilities in a way that may be insecure [ 90.783737][ T5725] netlink: 'syz.4.634': attribute type 1 has an invalid length. [ 90.819653][ T5725] netlink: 'syz.4.634': attribute type 2 has an invalid length. [ 91.083690][ T5743] loop2: detected capacity change from 0 to 1024 [ 91.273188][ T5743] hfsplus: extend alloc file! (16384,256,150995124) [ 91.317861][ T21] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 91.329972][ T5722] loop1: detected capacity change from 0 to 32768 [ 91.445911][ T5757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.649'. [ 91.496264][ T5759] loop3: detected capacity change from 0 to 1024 [ 91.748186][ T21] usb 1-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 91.781650][ T21] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 52, changing to 7 [ 91.807714][ T21] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 9272, setting to 1024 [ 91.825267][ T21] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 91.948933][ T1107] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 92.028153][ T21] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a2, bcdDevice= 0.40 [ 92.037266][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.058105][ T21] usb 1-1: Product: syz [ 92.062338][ T21] usb 1-1: Manufacturer: syz [ 92.066946][ T21] usb 1-1: SerialNumber: syz [ 92.096332][ T5783] netlink: 'syz.4.662': attribute type 21 has an invalid length. [ 92.142549][ T21] cdc_subset: probe of 1-1:1.0 failed with error -22 [ 92.154477][ T21] cdc_ncm 1-1:1.0: NCM or ECM functional descriptors missing [ 92.161894][ T2306] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 92.178652][ T21] cdc_ncm 1-1:1.0: bind() failure [ 92.200281][ T21] cdc_subset: probe of 1-1:1.1 failed with error -22 [ 92.207348][ T21] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 92.208459][ T1107] usb 2-1: Using ep0 maxpacket: 8 [ 92.236636][ T21] cdc_ncm 1-1:1.1: bind() failure [ 92.294376][ T5796] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 92.301198][ T5796] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 92.313418][ T5796] vhci_hcd vhci_hcd.0: Device attached [ 92.328687][ T5796] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 92.335308][ T5796] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 92.347987][ T5796] vhci_hcd vhci_hcd.0: Device attached [ 92.355467][ T1107] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 92.366738][ T5797] vhci_hcd: connection closed [ 92.372835][ T9] vhci_hcd: stop threads [ 92.392282][ T9] vhci_hcd: release socket [ 92.394217][ T1107] usb 2-1: config 0 interface 0 has no altsetting 0 [ 92.404954][ T9] vhci_hcd: disconnect device [ 92.418980][ T5613] usb 1-1: USB disconnect, device number 4 [ 92.436491][ T5800] vhci_hcd: connection closed [ 92.438031][ T9] vhci_hcd: stop threads [ 92.446995][ T9] vhci_hcd: release socket [ 92.455260][ T9] vhci_hcd: disconnect device [ 92.527866][ T2306] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 92.536615][ T2306] usb 4-1: config 0 has no interface number 0 [ 92.543398][ T2306] usb 4-1: config 0 interface 41 has no altsetting 0 [ 92.578052][ T1107] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 92.587992][ T1107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.596032][ T1107] usb 2-1: Product: syz [ 92.600487][ T1107] usb 2-1: Manufacturer: syz [ 92.605288][ T1107] usb 2-1: SerialNumber: syz [ 92.612531][ T1107] usb 2-1: config 0 descriptor?? [ 92.620264][ T5814] loop4: detected capacity change from 0 to 256 [ 92.650966][ T1107] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 92.707877][ T2306] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 92.727221][ T2306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.745184][ T2306] usb 4-1: Product: syz [ 92.750330][ T2306] usb 4-1: Manufacturer: syz [ 92.755313][ T2306] usb 4-1: SerialNumber: syz [ 92.761691][ T2306] usb 4-1: config 0 descriptor?? [ 92.837223][ T5816] loop4: detected capacity change from 0 to 512 [ 92.860311][ T1107] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 92.870254][ T1107] snd_usb_toneport: probe of 2-1:0.0 failed with error -22 [ 92.899786][ T5816] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 92.982957][ T5816] EXT4-fs (loop4): mounted filesystem without journal. Opts: nomblk_io_submit,data_err=ignore,discard,,errors=continue. Quota mode: writeback. [ 93.029640][ T5816] ext4 filesystem being mounted at /152/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 93.086698][ T5613] usb 2-1: USB disconnect, device number 5 [ 93.248048][ T2306] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 93.270878][ T2306] CoreChips: probe of 4-1:0.41 failed with error -71 [ 93.290710][ T2306] usb 4-1: USB disconnect, device number 2 [ 93.629156][ T5613] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 93.677969][ T21] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 93.783677][ T5867] deleting an unspecified loop device is not supported. [ 93.886709][ T5879] netlink: 'syz.0.706': attribute type 1 has an invalid length. [ 93.900258][ T5879] __nla_validate_parse: 1 callbacks suppressed [ 93.900273][ T5879] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.706'. [ 93.924861][ T5879] netlink: 'syz.0.706': attribute type 1 has an invalid length. [ 93.998039][ T5613] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 94.017359][ T5889] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.711'. [ 94.026835][ T5613] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 94.040670][ T5613] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 28009, setting to 64 [ 94.052332][ T5613] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 94.077936][ T21] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.148121][ T5613] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 94.165747][ T5613] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 94.174413][ T5613] usb 3-1: SerialNumber: syz [ 94.229611][ T5851] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 94.248075][ T21] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 94.258563][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.274872][ T21] usb 5-1: Product: syz [ 94.277952][ T1107] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 94.282379][ T21] usb 5-1: Manufacturer: syz [ 94.295391][ T21] usb 5-1: SerialNumber: syz [ 94.329220][ T5908] netlink: 'syz.1.720': attribute type 1 has an invalid length. [ 94.519857][ T1107] usb 4-1: Using ep0 maxpacket: 8 [ 94.533190][ T5613] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 94.559980][ T5613] usb 3-1: USB disconnect, device number 5 [ 94.592329][ T21] snd-usb-6fire 5-1:1.0: unknown device firmware state received from device: [ 94.612494][ T21] eb aa 55 00 00 00 00 00 [ 94.617026][ T21] snd-usb-6fire: probe of 5-1:1.0 failed with error -5 [ 94.636096][ T5936] netlink: 12 bytes leftover after parsing attributes in process `syz.1.734'. [ 94.647264][ T1107] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 94.656455][ T1107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.665621][ T5936] netlink: 40 bytes leftover after parsing attributes in process `syz.1.734'. [ 94.678470][ T1107] usb 4-1: config 0 descriptor?? [ 94.685237][ T5936] netlink: 40 bytes leftover after parsing attributes in process `syz.1.734'. [ 94.729697][ T5938] loop1: detected capacity change from 0 to 2048 [ 94.785665][ T5938] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 94.804549][ T21] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 94.812862][ T5612] usb 5-1: USB disconnect, device number 3 [ 94.958093][ T1107] usb 4-1: string descriptor 0 read error: -71 [ 94.965069][ T1107] uvcvideo 4-1:0.0: Found multiple Units with ID 1 [ 94.972388][ T1107] usb 4-1: Found UVC 0.00 device (2833:0201) [ 94.981688][ T1107] usb 4-1: No valid video chain found. [ 94.990383][ T1107] usb 4-1: USB disconnect, device number 3 [ 95.178549][ T5958] rxe_eth0 speed is unknown, defaulting to 1000 [ 95.267812][ T21] usb 1-1: unable to get BOS descriptor or descriptor too short [ 95.350324][ T21] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.360673][ T5612] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 95.457295][ T5972] loop4: detected capacity change from 0 to 256 [ 95.521148][ T21] usb 1-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 95.549089][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 95.561199][ T21] usb 1-1: Product: syz [ 95.565940][ T21] usb 1-1: Manufacturer: syz [ 95.630991][ T21] usb 1-1: Found UVC 1.00 device syz (8086:0ad2) [ 95.694106][ T5983] netlink: 224 bytes leftover after parsing attributes in process `syz.4.757'. [ 95.711128][ T5986] netlink: 'syz.1.758': attribute type 2 has an invalid length. [ 95.778044][ T5612] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 95.802163][ T5612] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 95.827508][ T5612] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.867896][ T21] usb 1-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 95.910031][ T5612] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 95.917867][ T21] uvcvideo 1-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 95.933181][ T21] uvcvideo 1-1:1.1: Failed to initialize the device (-5). [ 95.948575][ T5992] loop1: detected capacity change from 0 to 4096 [ 95.977440][ T21] usb 1-1: USB disconnect, device number 5 [ 96.033759][ T5992] ntfs: (device loop1): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 96.064938][ T5992] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 96.079790][ T5992] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 96.105183][ T5992] ntfs: volume version 3.1. [ 96.235449][ T6004] netlink: 1244 bytes leftover after parsing attributes in process `syz.3.767'. [ 96.367269][ T154] ntfs: (device loop1): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 96.419391][ T154] ntfs: (device loop1): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 96.476806][ T4187] ntfs: (device loop1): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 96.589865][ T6019] loop3: detected capacity change from 0 to 2048 [ 96.634068][ T6019] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 96.702793][ T6019] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,nomblk_io_submit,stripe=0x000000000004ffff,norecovery,errors=remount-ro,max_batch_time=0x000000000000186b,. Quota mode: writeback. [ 96.862545][ T6019] EXT4-fs error (device loop3): empty_inline_dir:1890: inode #12: block 5: comm syz.3.775: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=7952, size=60 fake=0 [ 96.907924][ T6019] EXT4-fs (loop3): Remounting filesystem read-only [ 96.924857][ T6019] EXT4-fs warning (device loop3): empty_inline_dir:1897: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60 [ 96.976582][ T6031] netlink: 12 bytes leftover after parsing attributes in process `syz.1.778'. [ 97.043314][ T5612] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 97.056663][ T6033] loop4: detected capacity change from 0 to 1024 [ 97.089997][ T1235] block nbd1: Attempted send on invalid socket [ 97.097492][ T1235] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 97.112770][ T6036] hpfs: hpfs_map_sector(): read error [ 97.157791][ T1107] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 97.247994][ T5612] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 97.270804][ T5612] stv0680 3-1:4.0: last error: 0, command = 0x0 [ 97.325352][ T5612] usb 3-1: USB disconnect, device number 6 [ 97.407815][ T1107] usb 1-1: Using ep0 maxpacket: 16 [ 97.687985][ T1107] usb 1-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 97.702741][ T1107] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.717740][ T1107] usb 1-1: Product: syz [ 97.727944][ T1107] usb 1-1: Manufacturer: syz [ 97.737787][ T1107] usb 1-1: SerialNumber: syz [ 97.751234][ T1107] usb 1-1: config 0 descriptor?? [ 97.817832][ T4261] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 98.017985][ T1107] usb 1-1: ignoring: not an USB2CAN converter [ 98.060214][ T4261] usb 2-1: Using ep0 maxpacket: 32 [ 98.177918][ T4261] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 98.192995][ T4261] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.214311][ T4261] usb 2-1: config 0 descriptor?? [ 98.219935][ T6069] loop2: detected capacity change from 0 to 256 [ 98.240281][ T7] usb 1-1: USB disconnect, device number 6 [ 98.265002][ T4261] gspca_main: sunplus-2.14.0 probing 041e:400b [ 98.692673][ T6101] ecryptfs_parse_options: eCryptfs: unrecognized option [ecry/²áº_cipher=aes] [ 98.708678][ T4261] gspca_sunplus: reg_w_riv err -71 [ 98.714571][ T4261] sunplus: probe of 2-1:0.0 failed with error -71 [ 98.753480][ T4261] usb 2-1: USB disconnect, device number 6 [ 98.922815][ T6101] Could not find key with description: [syz ] [ 98.938263][ T6101] process_request_key_err: No key [ 98.963495][ T6101] Could not find valid key in user session keyring for sig specified in mount option: [syz ] [ 98.993225][ T6101] One or more global auth toks could not properly register; rc = [-2] [ 99.015011][ T6101] Error parsing options; rc = [-2] [ 99.097786][ T1107] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 99.144557][ T6127] loop2: detected capacity change from 0 to 256 [ 99.260155][ T6127] FAT-fs (loop2): Directory bread(block 64) failed [ 99.291269][ T6127] FAT-fs (loop2): Directory bread(block 65) failed [ 99.322976][ T6127] FAT-fs (loop2): Directory bread(block 66) failed [ 99.338027][ T1107] usb 4-1: Using ep0 maxpacket: 8 [ 99.344912][ T6127] FAT-fs (loop2): Directory bread(block 67) failed [ 99.363411][ T6138] loop0: detected capacity change from 0 to 512 [ 99.374775][ T6127] FAT-fs (loop2): Directory bread(block 68) failed [ 99.410458][ T6138] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 99.419676][ T6127] FAT-fs (loop2): Directory bread(block 69) failed [ 99.426352][ T6127] FAT-fs (loop2): Directory bread(block 70) failed [ 99.433890][ T6127] FAT-fs (loop2): Directory bread(block 71) failed [ 99.441349][ T6127] FAT-fs (loop2): Directory bread(block 72) failed [ 99.448189][ T6127] FAT-fs (loop2): Directory bread(block 73) failed [ 99.457995][ T1107] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 99.476704][ T1107] usb 4-1: config 0 has no interface number 0 [ 99.493240][ T1107] usb 4-1: config 0 interface 1 has no altsetting 0 [ 99.520779][ T6138] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 99.562283][ T6148] loop1: detected capacity change from 0 to 64 [ 99.573981][ T6138] Quota error (device loop0): write_blk: dquota write failed [ 99.586460][ T6138] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 99.606294][ T6138] Quota error (device loop0): write_blk: dquota write failed [ 99.615808][ T6138] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 99.628001][ T6138] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.825: Failed to acquire dquot type 1 [ 99.667992][ T1107] usb 4-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 99.677117][ T1107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.709862][ T6138] EXT4-fs (loop0): 1 truncate cleaned up [ 99.715547][ T6138] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,noblock_validity,noquota,nouid32,sysvgroups,abort,init_itable=0x0000000000000080,stripe=0x0000000000000001,resuid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 99.722903][ T1107] usb 4-1: Product: syz [ 99.753308][ T1107] usb 4-1: Manufacturer: syz [ 99.759240][ T1107] usb 4-1: SerialNumber: syz [ 99.789959][ T1107] usb 4-1: config 0 descriptor?? [ 99.852260][ T6158] comedi comedi1: comedi_parport: I/O port conflict (0x5,3) [ 99.866017][ T6138] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.825: Failed to acquire dquot type 1 [ 99.992841][ T6166] loop2: detected capacity change from 0 to 4096 [ 100.049033][ T1107] i2c-cp2615: probe of 4-1:0.1 failed with error -22 [ 100.127115][ T6177] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 100.171951][ T6166] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=16, inode=2050, rec_len=0, name_len=2 [ 100.202947][ T5613] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 100.220689][ T6166] Remounting filesystem read-only [ 100.275038][ T1107] usb 4-1: USB disconnect, device number 4 [ 100.416005][ T6193] loop2: detected capacity change from 0 to 256 [ 100.566513][ T6204] netlink: 'syz.0.857': attribute type 21 has an invalid length. [ 100.580619][ T6204] netlink: 164 bytes leftover after parsing attributes in process `syz.0.857'. [ 100.637502][ T6209] netlink: 36 bytes leftover after parsing attributes in process `syz.0.859'. [ 100.767861][ T5613] usb 5-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.02 [ 100.792733][ T5613] usb 5-1: New USB device strings: Mfr=0, Product=232, SerialNumber=255 [ 100.807453][ T5613] usb 5-1: Product: syz [ 100.817647][ T5613] usb 5-1: SerialNumber: syz [ 100.853890][ T5613] usb 5-1: config 0 descriptor?? [ 100.936321][ T6234] netlink: 'syz.1.871': attribute type 1 has an invalid length. [ 101.034722][ T6244] netlink: 'syz.0.875': attribute type 3 has an invalid length. [ 101.052677][ T6245] loop2: detected capacity change from 0 to 256 [ 101.105617][ T6253] netlink: 36 bytes leftover after parsing attributes in process `syz.3.880'. [ 101.180470][ T5613] ldusb 5-1:0.0: Interrupt in endpoint not found [ 101.231478][ T5613] usb 5-1: USB disconnect, device number 4 [ 101.411781][ T6277] xt_SECMARK: invalid mode: 2 [ 101.426645][ T6279] trusted_key: encrypted_key: master key parameter is missing [ 101.525882][ T6290] netlink: 'syz.0.896': attribute type 8 has an invalid length. [ 101.578854][ T6296] netlink: 'syz.1.898': attribute type 10 has an invalid length. [ 101.613872][ T6296] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 101.826646][ T6316] loop1: detected capacity change from 0 to 1024 [ 101.987301][ T6316] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,abort,init_itable,data_err=ignore,lazytime,,errors=continue. Quota mode: writeback. [ 102.236332][ T6315] loop0: detected capacity change from 0 to 32768 [ 102.271370][ T6331] loop2: detected capacity change from 0 to 4096 [ 102.279921][ T6315] XFS (loop0): sunit and swidth must be specified together [ 102.401536][ T6331] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 102.416196][ T6303] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 scanned by syz.3.904 (6303) [ 102.482417][ T6303] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 102.535526][ T6303] BTRFS info (device loop3): enabling ssd optimizations [ 102.542716][ T6331] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 102.557383][ T6337] EXT4-fs (loop1): Test dummy encryption mode enabled [ 102.578887][ T6303] BTRFS info (device loop3): not using ssd optimizations [ 102.587025][ T6331] ntfs3: loop2: mft corrupted [ 102.615071][ T6331] ntfs3: loop2: Failed to load $Extend. [ 102.628165][ T6303] BTRFS info (device loop3): turning off barriers [ 102.637909][ T6303] BTRFS info (device loop3): use no compression [ 102.644193][ T6303] BTRFS info (device loop3): using free space tree [ 102.673424][ T6337] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue. Quota mode: writeback. [ 102.714863][ T6303] BTRFS info (device loop3): has skinny extents [ 102.919593][ T144] ntfs3: loop2: ino=1e, Internal error [ 102.925431][ T144] ntfs3: loop2: ntfs3_write_inode r=1e failed, -22. [ 103.044474][ T6378] netlink: 12 bytes leftover after parsing attributes in process `syz.2.925'. [ 103.302918][ T4177] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 9 /dev/loop3 scanned by udevd (4177) [ 103.434255][ T6407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.937'. [ 103.451942][ T6407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.937'. [ 103.465092][ T6407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.937'. [ 103.474655][ T6407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.937'. [ 103.492824][ T6407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.937'. [ 103.503506][ T6407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.937'. [ 103.519500][ T6407] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 103.530024][ T6407] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 103.544471][ T6407] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 103.683389][ T6415] netlink: 'syz.1.939': attribute type 1 has an invalid length. [ 103.719636][ T6420] set_capacity_and_notify: 2 callbacks suppressed [ 103.719651][ T6420] loop2: detected capacity change from 0 to 64 [ 103.763383][ T6423] loop3: detected capacity change from 0 to 1024 [ 103.796465][ T6420] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 103.827479][ T6426] loop4: detected capacity change from 0 to 512 [ 103.941732][ T6426] EXT4-fs (loop4): Ignoring removed oldalloc option [ 104.019439][ T6426] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,dioread_lock,oldalloc,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 104.055953][ T6436] virt_wifi0 speed is unknown, defaulting to 1000 [ 104.090651][ T6436] virt_wifi0 speed is unknown, defaulting to 1000 [ 104.139055][ T6436] virt_wifi0 speed is unknown, defaulting to 1000 [ 104.150306][ T6436] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 104.164609][ T6436] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 104.196393][ T6436] virt_wifi0 speed is unknown, defaulting to 1000 [ 104.206273][ T6436] virt_wifi0 speed is unknown, defaulting to 1000 [ 104.213938][ T6436] virt_wifi0 speed is unknown, defaulting to 1000 [ 104.221519][ T6436] virt_wifi0 speed is unknown, defaulting to 1000 [ 104.229644][ T6436] virt_wifi0 speed is unknown, defaulting to 1000 [ 104.272483][ T6446] netlink: 'syz.3.952': attribute type 30 has an invalid length. [ 104.304742][ T6446] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 104.332877][ T6446] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 104.463848][ T6459] loop2: detected capacity change from 0 to 1024 [ 104.764919][ T6481] xt_limit: Overflow, try lower: 2/2147483648 [ 105.099923][ T6520] netlink: 'syz.0.989': attribute type 1 has an invalid length. [ 105.112916][ T6520] netlink: 'syz.0.989': attribute type 2 has an invalid length. [ 105.237868][ T6413] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 105.547995][ T5612] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 105.598889][ T6413] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 105.615328][ T6413] usb 5-1: config 1 has no interface number 0 [ 105.627416][ T6413] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 105.639034][ T6413] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0xA has an invalid bInterval 111, changing to 10 [ 105.677757][ T6412] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 105.807950][ T6413] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 105.822455][ T6413] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.844211][ T6413] usb 5-1: Product: syz [ 105.848743][ T6413] usb 5-1: Manufacturer: syz [ 105.857923][ T6413] usb 5-1: SerialNumber: syz [ 105.878114][ T6505] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 105.904693][ T6413] usb 5-1: Error in usbnet_get_endpoints (-22) [ 105.961020][ T5612] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.982863][ T5612] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 106.003355][ T5612] usb 1-1: New USB device found, idVendor=15a4, idProduct=9035, bcdDevice= 2.00 [ 106.015316][ T5612] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.057904][ T6412] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.073680][ T6412] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 106.095472][ T6412] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 106.115700][ T6412] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 106.134562][ T5613] usb 5-1: USB disconnect, device number 5 [ 106.136262][ T6412] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 0 [ 106.161712][ T6412] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 106.193272][ T6412] usb 4-1: New USB device found, idVendor=1608, idProduct=0201, bcdDevice= 1.00 [ 106.210642][ T6412] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.259901][ T6529] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 106.266981][ T6529] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 106.299104][ T6412] io_ti 4-1:1.0: required endpoints missing [ 106.302311][ T5612] usb 1-1: dvb_usb_v2: 2nd usb_bulk_msg() failed=-22 [ 106.322826][ T5612] dvb_usb_af9035: probe of 1-1:1.0 failed with error -22 [ 106.404657][ T6618] loop2: detected capacity change from 0 to 1024 [ 106.453048][ T6618] EXT4-fs (loop2): mounted filesystem without journal. Opts: noinit_itable,,errors=continue. Quota mode: none. [ 106.484953][ T6618] EXT4-fs error (device loop2): ext4_generic_delete_entry:2731: inode #2: block 16: comm syz.2.1036: bad entry in directory: inode out of bounds - offset=0, inode=1538, rec_len=12, size=1024 fake=1 [ 106.523968][ T5613] usb 1-1: USB disconnect, device number 7 [ 106.543229][ T6412] usb 4-1: USB disconnect, device number 5 [ 106.549908][ T6618] EXT4-fs error (device loop2) in ext4_delete_entry:2802: Corrupt filesystem [ 106.571483][ T6618] EXT4-fs warning (device loop2): ext4_rename_delete:3794: inode #2: comm syz.2.1036: Deleting old file: nlink 1, error=-117 [ 106.692268][ T6635] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 106.801232][ T6647] loop2: detected capacity change from 0 to 512 [ 106.823628][ T6647] EXT4-fs (loop2): Ignoring removed oldalloc option [ 106.864573][ T6647] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,dioread_lock,oldalloc,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 106.947918][ T7] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 107.035931][ T6663] __nla_validate_parse: 74 callbacks suppressed [ 107.035944][ T6663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1056'. [ 107.061207][ T6663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1056'. [ 107.071573][ T6663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1056'. [ 107.086071][ T6663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1056'. [ 107.095527][ T6663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1056'. [ 107.107409][ T6663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1056'. [ 107.131531][ T6663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1056'. [ 107.142702][ T6663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1056'. [ 107.152719][ T6663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1056'. [ 107.162428][ T6663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1056'. [ 107.173932][ T6663] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 107.183826][ T6663] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 107.191517][ T6663] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 107.317971][ T7] usb 2-1: config 0 has an invalid interface number: 83 but max is 0 [ 107.326141][ T7] usb 2-1: config 0 has no interface number 0 [ 107.366270][ T7] usb 2-1: config 0 interface 83 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 107.401000][ T7] usb 2-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 107.425795][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.476715][ T7] usb 2-1: config 0 descriptor?? [ 107.519810][ T7] ttusbir 2-1:0.83: cannot find expected altsetting [ 107.593543][ T6699] qrtr: Invalid version 0 [ 107.721709][ T6413] usb 2-1: USB disconnect, device number 7 [ 107.997126][ T6731] loop3: detected capacity change from 0 to 512 [ 108.217928][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 108.217944][ T26] audit: type=1400 audit(1792105216.624:2): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457C51CCA93031D371D06D2E59E880583300E11E8 pid=6740 comm="syz.4.1095" [ 108.367585][ T6747] netlink: 'syz.4.1098': attribute type 2 has an invalid length. [ 108.525210][ T4275] nvme nvme0: rdma_resolve_route failed (-110). [ 108.537629][ T6753] nvme nvme0: rdma connection establishment failed (-19) [ 108.652269][ T6764] loop1: detected capacity change from 0 to 1024 [ 108.733931][ T6768] IPv6: ADDRCONF(NETDEV_CHANGE): batadv0: link becomes ready [ 108.748064][ T6768] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 108.815856][ T6770] futex_wake_op: syz.4.1109 tries to shift op by 144; fix this program [ 108.825121][ T6770] futex_wake_op: syz.4.1109 tries to shift op by 144; fix this program [ 108.890717][ T6731] EXT4-fs (loop3): Ignoring removed oldalloc option [ 108.961146][ T6777] IPVS: length: 93 != 8 [ 108.977821][ T6731] EXT4-fs (loop3): mounted filesystem without journal. Opts: oldalloc,grpquota,noinit_itable,nombcache,abort,,errors=continue. Quota mode: writeback. [ 109.041532][ T6731] ext4 filesystem being mounted at /205/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.098703][ T6764] hfsplus: bad catalog entry type [ 109.106875][ T6781] rxe_eth0 speed is unknown, defaulting to 1000 [ 109.171661][ T6731] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.1090: inode #327680: comm syz.3.1090: iget: illegal inode # [ 109.215166][ T9] hfsplus: b-tree write err: -5, ino 25 [ 109.225140][ T9] hfsplus: b-tree write err: -5, ino 4 [ 109.235831][ T9] hfsplus: b-tree write err: -5, ino 2 [ 109.258045][ T6731] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.1090: error while reading EA inode 327680 err=-117 [ 109.367579][ T6794] loop2: detected capacity change from 0 to 128 [ 109.496999][ T6781] virt_wifi0 speed is unknown, defaulting to 1000 [ 109.952587][ T6838] loop0: detected capacity change from 0 to 512 [ 110.021240][ T6838] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 110.104301][ T6838] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 110.150585][ T6838] EXT4-fs (loop0): 1 truncate cleaned up [ 110.159215][ T6838] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsddf,usrquota,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,journal_ioprio=0x0000000000000004,max_batch_time=0x0000000000000003,,errors=continue. Quota mode: writeback. [ 110.210253][ T6838] Invalid option length (771) for dns_resolver key [ 110.257462][ T6858] trusted_key: encrypted_key: keylen parameter is missing [ 110.740014][ T6902] netlink: 'syz.3.1172': attribute type 71 has an invalid length. [ 111.021148][ T6925] loop3: detected capacity change from 0 to 512 [ 111.124565][ T6925] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 111.149724][ T6925] ext4 filesystem being mounted at /219/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.226553][ T6925] EXT4-fs error (device loop3): ext4_add_entry:2488: inode #12: comm syz.3.1183: Directory hole found for htree leaf block 0 [ 111.239996][ T6412] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 111.257311][ T6937] tmpfs: Bad value for 'mpol' [ 111.333883][ T6903] loop1: detected capacity change from 0 to 32768 [ 111.557906][ T6412] usb 5-1: not running at top speed; connect to a high speed hub [ 111.648091][ T6412] usb 5-1: config 1 has an invalid descriptor of length 175, skipping remainder of the config [ 111.674339][ T6412] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 111.705617][ T6412] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.771317][ T6962] xt_CT: You must specify a L4 protocol and not use inversions on it [ 111.785527][ T6412] uvcvideo 5-1:1.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 111.812725][ T6412] usb 5-1: Found UVC 1.00 device (046d:0825) [ 111.832810][ T6412] uvcvideo 5-1:1.1: No supported video formats found. [ 111.847742][ T6412] uvcvideo 5-1:1.1: Failed to initialize the device (-22). [ 111.998828][ T5617] usb 5-1: USB disconnect, device number 6 [ 112.047925][ T6413] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 112.168426][ T6977] loop3: detected capacity change from 0 to 2048 [ 112.224525][ T6977] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 112.266659][ T6977] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 112.417940][ T6413] usb 1-1: config 26 has an invalid descriptor of length 0, skipping remainder of the config [ 112.447775][ T6413] usb 1-1: config 26 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 112.550733][ T6999] mip6: mip6_destopt_init_state: spi is not 0: 1114112 [ 112.558076][ T6413] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 112.558103][ T6413] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 112.558121][ T6413] usb 1-1: SerialNumber: syz [ 112.580044][ T5617] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 112.598810][ T6413] cdc_ether 1-1:26.0: skipping garbage [ 112.602956][ T7001] __nla_validate_parse: 73 callbacks suppressed [ 112.602984][ T7001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1218'. [ 112.604335][ T6413] usb 1-1: bad CDC descriptors [ 112.736696][ T7006] loop4: detected capacity change from 0 to 512 [ 112.806264][ T6413] usb 1-1: USB disconnect, device number 8 [ 112.827467][ T7006] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 112.857961][ T5617] usb 3-1: Using ep0 maxpacket: 32 [ 112.885646][ T7015] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1223'. [ 112.897949][ T7006] ext4 filesystem being mounted at /251/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.928608][ T7006] EXT4-fs error (device loop4): ext4_add_entry:2488: inode #12: comm syz.4.1220: Directory hole found for htree leaf block 0 [ 112.990720][ T5617] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.027819][ T5617] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.037607][ T5617] usb 3-1: New USB device found, idVendor=046d, idProduct=c11c, bcdDevice= 0.40 [ 113.064041][ T5617] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.104578][ T5617] usb 3-1: config 0 descriptor?? [ 113.169050][ T5617] hub 3-1:0.0: USB hub found [ 113.380371][ T5617] hub 3-1:0.0: 1 port detected [ 113.608008][ T5617] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 113.614825][ T5617] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 113.704254][ T5617] usb 3-1: USB disconnect, device number 7 [ 113.755836][ T7072] loop4: detected capacity change from 0 to 256 [ 114.295438][ T7129] tmpfs: Bad value for 'mpol' [ 114.342762][ T7133] loop2: detected capacity change from 0 to 64 [ 114.505568][ T7133] Bad inode number on dev loop2: 2 is out of range [ 114.531284][ T7149] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1289'. [ 114.683877][ T7154] ERROR: device name not specified. [ 114.737260][ T7161] kAFS: unable to lookup cell 'Þ({^ú@' [ 114.806998][ T7167] netlink: 800 bytes leftover after parsing attributes in process `syz.0.1298'. [ 114.847709][ T7167] netlink: 1301 bytes leftover after parsing attributes in process `syz.0.1298'. [ 114.897318][ T7171] device bridge2 entered promiscuous mode [ 115.004720][ T7143] loop1: detected capacity change from 0 to 32768 [ 115.125059][ T7185] loop2: detected capacity change from 0 to 2048 [ 115.193497][ T7185] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 115.418062][ T7211] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1319'. [ 115.458557][ T7211] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1319'. [ 115.520581][ T7209] ipt_CLUSTERIP: unknown mode 3918972798 [ 115.663005][ T26] audit: type=1400 audit(1792105224.074:3): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=7228 comm="syz.1.1328" [ 115.955238][ T7257] loop0: detected capacity change from 0 to 128 [ 115.986590][ T7259] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 116.029671][ T7257] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 116.068099][ T7257] ext4 filesystem being mounted at /255/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 116.525879][ T7317] xt_CT: You must specify a L4 protocol and not use inversions on it [ 116.536003][ T7319] loop3: detected capacity change from 0 to 64 [ 116.641240][ T7325] xt_CT: You must specify a L4 protocol and not use inversions on it [ 116.751276][ T7335] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 116.866729][ T7349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1387'. [ 116.917761][ T6412] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 116.979873][ T7362] device ip6tnl1 entered promiscuous mode [ 117.004464][ T7351] loop3: detected capacity change from 0 to 4096 [ 117.049355][ T6413] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 117.085022][ T7351] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 117.112194][ T7351] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 117.129234][ T7369] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 117.140495][ T7369] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 117.150586][ T7351] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 117.162799][ T7351] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 117.186509][ T7351] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 117.216647][ T7351] ntfs: volume version 3.1. [ 117.238800][ T7351] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 117.255936][ T7351] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 117.271333][ T7351] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 117.282443][ T7351] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 117.319294][ T6412] usb 3-1: unable to get BOS descriptor or descriptor too short [ 117.354275][ T7380] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 117.364736][ T7380] IPv6: ADDRCONF(NETDEV_CHANGE): batadv0: link becomes ready [ 117.373998][ T7380] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 117.378095][ T6413] usb 1-1: not running at top speed; connect to a high speed hub [ 117.384584][ T7380] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 117.408347][ T6412] usb 3-1: config 1 interface 0 altsetting 99 endpoint 0x81 has an invalid bInterval 176, changing to 11 [ 117.432251][ T6412] usb 3-1: config 1 interface 0 altsetting 99 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 117.458794][ T6412] usb 3-1: config 1 interface 0 has no altsetting 0 [ 117.475873][ T6413] usb 1-1: New USB device found, idVendor=0424, idProduct=5534, bcdDevice= 1.00 [ 117.492247][ T6413] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.548892][ T6413] hub 1-1:1.0: USB hub found [ 117.617917][ T6412] usb 3-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= 0.40 [ 117.637258][ T6412] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.657550][ T6412] usb 3-1: Product: syz [ 117.662993][ T6412] usb 3-1: Manufacturer: syz [ 117.673922][ T6412] usb 3-1: SerialNumber: syz [ 117.693856][ T7392] device wlan0 entered promiscuous mode [ 117.712828][ T7394] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1407'. [ 117.735142][ T7394] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1407'. [ 117.753590][ T7394] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1407'. [ 117.810688][ T6413] hub 1-1:1.0: config failed, can't read hub descriptor (err -22) [ 117.861076][ T6413] usb 1-1: USB disconnect, device number 9 [ 117.996111][ T7412] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1417'. [ 118.007473][ T7412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1417'. [ 118.019820][ T6412] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input10 [ 118.070522][ T3542] bcm5974 3-1:1.0: could not read from device [ 118.087414][ T6412] usb 3-1: USB disconnect, device number 8 [ 118.103514][ T7396] loop3: detected capacity change from 0 to 32768 [ 118.167283][ T7396] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1409 (7396) [ 118.206766][ T7396] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 118.207980][ T7] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 118.231422][ T7396] BTRFS info (device loop3): setting nodatasum [ 118.237611][ T7396] BTRFS info (device loop3): force zlib compression, level 3 [ 118.268167][ T7396] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 118.302994][ T7396] BTRFS info (device loop3): use lzo compression, level 0 [ 118.311335][ T7396] BTRFS info (device loop3): turning on flush-on-commit [ 118.329629][ T7396] BTRFS info (device loop3): enabling auto defrag [ 118.347775][ T7396] BTRFS info (device loop3): max_inline at 4096 [ 118.376518][ T7396] BTRFS info (device loop3): using free space tree [ 118.401866][ T7396] BTRFS info (device loop3): has skinny extents [ 118.533770][ T7447] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1427'. [ 118.553115][ T7447] openvswitch: netlink: Key type 541 is out of range max 29 [ 118.564874][ T7396] BTRFS info (device loop3): enabling ssd optimizations [ 118.597942][ T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.644255][ T7] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.703472][ T7] usb 5-1: config 1 interface 0 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 0 [ 118.741333][ T7] usb 5-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 118.800762][ T7] usb 5-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 118.837999][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.092720][ T7483] loop0: detected capacity change from 0 to 2048 [ 119.118559][ T7] snd-usb-caiaq 5-1:1.0: invalid EPs [ 119.124640][ T7] usb 5-1: unable to init card! (ret=-22) [ 119.143671][ T7] snd-usb-caiaq: probe of 5-1:1.0 failed with error -22 [ 119.175105][ T7483] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 119.334074][ T7491] usb 5-1: USB disconnect, device number 7 [ 119.406064][ T7506] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 119.454319][ T7506] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 119.562430][ T7519] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1456'. [ 119.737904][ T7534] loop1: detected capacity change from 0 to 256 [ 119.807760][ T6412] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 119.879532][ T7534] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 120.024034][ T7550] loop4: detected capacity change from 0 to 512 [ 120.077765][ T6412] usb 1-1: Using ep0 maxpacket: 16 [ 120.175074][ T7550] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 120.188861][ T7550] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz.4.1470: corrupted in-inode xattr [ 120.198626][ T6412] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.216016][ T6412] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 120.233944][ T6412] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 120.243500][ T6412] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.248647][ T7550] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.1470: couldn't read orphan inode 15 (err -117) [ 120.259549][ T6412] usb 1-1: config 0 descriptor?? [ 120.310448][ T6412] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input11 [ 120.321912][ T7550] EXT4-fs (loop4): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000009,jqfmt=vfsv0,max_dir_size_kb=0x0000000000000005,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,nobarrier,errors=continue,,errors=continue. Quota mode: writeback. [ 120.398412][ T7568] xt_CT: You must specify a L4 protocol and not use inversions on it [ 120.570786][ T7491] usb 1-1: USB disconnect, device number 10 [ 120.655877][ T7585] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1486'. [ 120.718183][ T7590] mmap: syz.2.1488 (7590): VmData 49217536 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 120.846896][ T7595] netdevsim netdevsim4: Direct firmware load for ÿÿ failed with error -2 [ 120.870098][ T7595] netdevsim netdevsim4: Falling back to sysfs fallback for: ÿÿ [ 120.871696][ T7599] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1493'. [ 120.904835][ T7599] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1493'. [ 121.411758][ T7642] netlink: 'syz.2.1514': attribute type 1 has an invalid length. [ 121.425261][ T7642] openvswitch: netlink: Actions may not be safe on all matching packets [ 121.540113][ T7653] xt_l2tp: invalid flags combination: 8 [ 121.564803][ T7656] netlink: 'syz.2.1522': attribute type 1 has an invalid length. [ 121.658936][ T7657] loop0: detected capacity change from 0 to 4096 [ 121.705855][ T7657] __ntfs_error: 7 callbacks suppressed [ 121.705869][ T7657] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 121.760747][ T7657] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 121.789821][ T7657] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 121.833581][ T7657] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 121.864135][ T7657] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 121.891347][ T7657] ntfs: volume version 3.1. [ 121.904264][ T7657] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 121.933000][ T7657] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 122.013669][ T7657] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 122.056064][ T7657] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 122.108333][ T7657] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 122.245099][ T7695] loop2: detected capacity change from 0 to 4096 [ 122.274743][ T7695] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 122.427537][ T7695] ntfs3: loop2: failed to convert "c46c" to iso8859-15 [ 122.515347][ T7724] loop1: detected capacity change from 0 to 512 [ 122.612564][ T7732] loop2: detected capacity change from 0 to 256 [ 122.655303][ T7724] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,grpquota,noinit_itable,,errors=continue. Quota mode: writeback. [ 122.697493][ T7724] ext4 filesystem being mounted at /328/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.748257][ T7724] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.1549: inode #327680: comm syz.1.1549: iget: illegal inode # [ 122.772818][ T7724] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1549: error while reading EA inode 327680 err=-117 [ 122.844444][ T7746] loop4: detected capacity change from 0 to 256 [ 122.852546][ T7745] __nla_validate_parse: 5 callbacks suppressed [ 122.852562][ T7745] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1559'. [ 122.868956][ T6412] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 122.876928][ T7745] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 122.885543][ T7745] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 123.069173][ T7758] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1561'. [ 123.107924][ T6412] usb 4-1: Using ep0 maxpacket: 32 [ 123.267949][ T6412] usb 4-1: unable to get BOS descriptor or descriptor too short [ 123.311159][ T7786] loop0: detected capacity change from 0 to 256 [ 123.348044][ T6412] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 73, changing to 7 [ 123.391403][ T7790] loop2: detected capacity change from 0 to 512 [ 123.431225][ T7790] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 123.460931][ T7795] loop4: detected capacity change from 0 to 256 [ 123.469081][ T6413] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 123.506578][ T7790] ext4 filesystem being mounted at /337/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.536072][ T7799] netlink: 'syz.0.1585': attribute type 4 has an invalid length. [ 123.538883][ T6412] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 123.584013][ T7795] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 123.606470][ T6412] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.634502][ T6412] usb 4-1: Product: syz [ 123.641435][ T7790] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.1581: corrupted xattr block 33 [ 123.654279][ T6412] usb 4-1: Manufacturer: syz [ 123.659951][ T6412] usb 4-1: SerialNumber: syz [ 123.837837][ T6413] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.852852][ T6413] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 123.878385][ T6413] usb 2-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 123.897885][ T6413] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.178202][ T6412] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 124.185910][ T6413] usb 2-1: NFC: Can't submit reader poweron cmd response -90 [ 124.206100][ T6413] pn533_usb 2-1:1.0: NFC: Couldn't poweron the reader (error -90) [ 124.228921][ T6413] pn533_usb: probe of 2-1:1.0 failed with error -90 [ 124.281533][ T6412] usb 4-1: USB disconnect, device number 6 [ 124.371204][ T7821] loop2: detected capacity change from 0 to 32768 [ 124.388129][ T7821] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1596 (7821) [ 124.404251][ T6413] usb 2-1: USB disconnect, device number 8 [ 124.444650][ T7821] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 124.455016][ T7821] BTRFS info (device loop2): setting nodatasum [ 124.461823][ T7821] BTRFS info (device loop2): force zlib compression, level 3 [ 124.469421][ T7821] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 124.479982][ T7821] BTRFS info (device loop2): use lzo compression, level 0 [ 124.487134][ T7821] BTRFS info (device loop2): turning on flush-on-commit [ 124.494676][ T7821] BTRFS info (device loop2): enabling auto defrag [ 124.501752][ T7821] BTRFS info (device loop2): max_inline at 4096 [ 124.512126][ T7823] XFS (loop0): Mounting V5 Filesystem [ 124.517868][ T7840] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1603'. [ 124.528076][ T7821] BTRFS info (device loop2): using free space tree [ 124.534735][ T7821] BTRFS info (device loop2): has skinny extents [ 124.541577][ T7840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1603'. [ 124.552577][ T7840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1603'. [ 124.660954][ T7823] XFS (loop0): Ending clean mount [ 124.720534][ T7821] BTRFS info (device loop2): enabling ssd optimizations [ 124.763714][ T4184] XFS (loop0): Unmounting Filesystem [ 124.773460][ T7866] FAT-fs (loop3): Directory bread(block 1285) failed [ 124.849151][ T7866] FAT-fs (loop3): Directory bread(block 1286) failed [ 124.884870][ T7866] FAT-fs (loop3): Directory bread(block 1287) failed [ 124.915906][ T7866] FAT-fs (loop3): Directory bread(block 1288) failed [ 124.997793][ T7870] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 2147483648 out of range (51000..2150000) [ 125.018011][ T7866] FAT-fs (loop3): Directory bread(block 1285) failed [ 125.025069][ T7866] FAT-fs (loop3): Directory bread(block 1286) failed [ 125.138522][ T7866] FAT-fs (loop3): Directory bread(block 1287) failed [ 125.145314][ T7866] FAT-fs (loop3): Directory bread(block 1288) failed [ 125.181826][ T7866] FAT-fs (loop3): Directory bread(block 1285) failed [ 125.214659][ T7866] FAT-fs (loop3): Directory bread(block 1286) failed [ 125.617875][ T7913] capability: warning: `syz.2.1628' uses 32-bit capabilities (legacy support in use) [ 125.668084][ T7915] set_capacity_and_notify: 2 callbacks suppressed [ 125.668107][ T7915] loop4: detected capacity change from 0 to 256 [ 125.891011][ T7936] loop2: detected capacity change from 0 to 1024 [ 126.095596][ T7936] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 126.143624][ T7960] program syz.3.1648 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 126.160626][ T7964] loop1: detected capacity change from 0 to 64 [ 126.168642][ T6412] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 126.331722][ T7974] netlink: 'syz.3.1658': attribute type 8 has an invalid length. [ 126.386947][ T7974] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1658'. [ 126.519663][ T7993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1666'. [ 126.593653][ T8000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1670'. [ 126.674642][ T8007] autofs4:pid:8007:autofs_fill_super: called with bogus options [ 126.697930][ T6412] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 126.711867][ T6412] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.747753][ T6412] usb 5-1: Product: syz [ 126.752055][ T6412] usb 5-1: Manufacturer: syz [ 126.756665][ T6412] usb 5-1: SerialNumber: syz [ 126.819840][ T8022] xt_connbytes: Forcing CT accounting to be enabled [ 126.887907][ T8027] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1683'. [ 126.903253][ T8027] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1683'. [ 126.942607][ T4261] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 127.096582][ T8047] xt_CONNSECMARK: invalid mode: 0 [ 127.202914][ T4261] usb 4-1: Using ep0 maxpacket: 8 [ 127.218048][ T7477] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 127.312832][ T7484] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 127.327820][ T4261] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 127.339426][ T4261] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 127.350273][ T4261] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 127.360389][ T4261] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 127.370384][ T4261] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 127.380592][ T4261] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 127.389877][ T4261] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.406255][ T4261] usb 4-1: config 0 descriptor?? [ 127.437968][ T6413] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 127.458849][ T4186] Bluetooth: hci5: urb ffff88802677e500 submission failed (90) [ 127.543664][ T8077] loop1: detected capacity change from 0 to 256 [ 127.674915][ T4261] usb 4-1: USB disconnect, device number 7 [ 127.768072][ T7484] usb 1-1: unable to get BOS descriptor or descriptor too short [ 127.817973][ T7477] usb 3-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=74.01 [ 127.828871][ T7477] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.839317][ T7477] usb 3-1: config 0 descriptor?? [ 127.845403][ T6412] usb 5-1: USB disconnect, device number 8 [ 127.858044][ T7484] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 32 [ 127.879775][ T7477] ttusbir 3-1:0.0: cannot find expected altsetting [ 127.918254][ T8089] loop1: detected capacity change from 0 to 64 [ 128.081945][ T4261] usb 3-1: USB disconnect, device number 9 [ 128.098001][ T7484] usb 1-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 128.113945][ T7484] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.131319][ T7484] usb 1-1: Product: syz [ 128.135519][ T7484] usb 1-1: Manufacturer: syz [ 128.140381][ T7484] usb 1-1: SerialNumber: syz [ 128.168090][ T8040] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 128.179624][ T8099] netlink: 'syz.1.1715': attribute type 2 has an invalid length. [ 128.187425][ T8099] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1715'. [ 128.251542][ T8105] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1717'. [ 128.263881][ T8105] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1717'. [ 128.368824][ T8113] nvme_tcp: malformed address passed: ::È!Þò1%9OâO6Iw­ð)áâhOÔ|£F˜¬5¡+ÏûÜÉåœÌǠνՊ:8009 [ 128.439883][ T8123] nfs: Unknown parameter 'ntext' [ 128.496641][ T8127] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 128.507857][ T6413] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 128.515447][ T6413] ath9k_htc: Failed to initialize the device [ 128.542229][ T6412] usb 5-1: ath9k_htc: USB layer deinitialized [ 128.549884][ T8129] loop1: detected capacity change from 0 to 1024 [ 128.577362][ T8131] device wlan0 entered promiscuous mode [ 128.609628][ T7484] usb 1-1: MIDIStreaming interface descriptor not found [ 128.634070][ T8129] hfsplus: failed to extend attributes file [ 128.686030][ T7484] usb 1-1: USB disconnect, device number 11 [ 128.785649][ T8139] netlink: 388 bytes leftover after parsing attributes in process `syz.3.1736'. [ 128.862291][ T8143] loop2: detected capacity change from 0 to 1764 [ 128.882288][ T8145] loop1: detected capacity change from 0 to 64 [ 128.906962][ T8147] loop4: detected capacity change from 0 to 512 [ 128.933899][ T8143] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 128.969252][ T8147] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 129.029137][ T8145] Trying to free block not in datazone [ 129.037350][ T5504] udevd[5504]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 129.081456][ T8157] loop0: detected capacity change from 0 to 512 [ 129.096638][ T8147] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.1738: invalid indirect mapped block 32768 (level 2) [ 129.150565][ T8147] EXT4-fs (loop4): 1 orphan inode deleted [ 129.156332][ T8147] EXT4-fs (loop4): 1 truncate cleaned up [ 129.209128][ T8165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1745'. [ 129.229907][ T8147] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 129.306343][ T8169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1748'. [ 129.370240][ T8147] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 129.872756][ T6412] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 129.936252][ T8224] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 129.974666][ T8218] ntfs3: loop1: mft corrupted [ 129.981354][ T8218] ntfs3: loop1: Failed to load $MFT. [ 129.986898][ T8224] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 130.190522][ T8238] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1781'. [ 130.247989][ T6412] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 130.293106][ T8242] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x88000078, utbl_chksum : 0xe619d30d) [ 130.440698][ T6412] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 130.469643][ T6412] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.505894][ T6412] usb 4-1: Product: syz [ 130.520855][ T6412] usb 4-1: Manufacturer: syz [ 130.525916][ T6412] usb 4-1: SerialNumber: syz [ 130.542964][ T6412] usb 4-1: config 0 descriptor?? [ 130.567971][ T8190] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 130.588823][ T6412] port100 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 130.662982][ T8278] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1801'. [ 130.704001][ T4261] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 130.803344][ T6412] usb 4-1: USB disconnect, device number 8 [ 130.896024][ T8289] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 130.947749][ T4261] usb 5-1: Using ep0 maxpacket: 32 [ 130.954753][ T8299] netlink: 'syz.1.1809': attribute type 1 has an invalid length. [ 130.985751][ T8302] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1812'. [ 131.001881][ T8302] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1812'. [ 131.070675][ T4261] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 131.087762][ T4261] usb 5-1: config 0 has no interface number 0 [ 131.136271][ T8306] set_capacity_and_notify: 3 callbacks suppressed [ 131.136286][ T8306] loop2: detected capacity change from 0 to 4096 [ 131.225943][ T8306] EXT4-fs (loop2): Test dummy encryption mode enabled [ 131.247907][ T4261] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 131.250128][ T8306] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 131.267305][ T4261] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.287604][ T4261] usb 5-1: Product: syz [ 131.297930][ T4261] usb 5-1: Manufacturer: syz [ 131.302553][ T4261] usb 5-1: SerialNumber: syz [ 131.307426][ T8306] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 131.337124][ T4261] usb 5-1: config 0 descriptor?? [ 131.370419][ T8300] loop0: detected capacity change from 0 to 32768 [ 131.385931][ T8306] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,test_dummy_encryption=v1,nodioread_nolock,delalloc,max_dir_size_kb=0x0000000000000008,noblock_validity,minixdf,sysvgroups,errors=remount-ro,jqfmt=vfsv0,acl,noinit_itable,jqfmt=vfsv1,. Quota mode: writeback. [ 131.415176][ T4261] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 131.440121][ T8300] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 scanned by syz.0.1811 (8300) [ 131.462577][ T4261] usb 5-1: selecting invalid altsetting 1 [ 131.495559][ T8325] loop3: detected capacity change from 0 to 1024 [ 131.526043][ T4261] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 131.584084][ T4261] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 131.622166][ T4261] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 131.637760][ T4261] usb 5-1: media controller created [ 131.658943][ T4261] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 131.748113][ T8300] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 131.757778][ T4261] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 131.765123][ T4261] zl10353_read_register: readreg error (reg=127, ret==-71) [ 131.778261][ T8300] BTRFS info (device loop0): enabling ssd optimizations [ 131.791827][ T8300] BTRFS info (device loop0): not using ssd optimizations [ 131.817802][ T4261] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 131.825063][ T8300] BTRFS info (device loop0): turning off barriers [ 131.847139][ T8300] BTRFS info (device loop0): use no compression [ 131.872317][ T8300] BTRFS info (device loop0): using free space tree [ 131.894570][ T8300] BTRFS info (device loop0): has skinny extents [ 131.905184][ T4261] usb 5-1: USB disconnect, device number 9 [ 131.987832][ T7477] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 132.347955][ T8377] loop4: detected capacity change from 0 to 512 [ 132.388102][ T7477] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.408272][ T7477] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 132.411927][ T8377] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 132.427579][ T7477] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 132.456188][ T7477] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.493610][ T7477] usb 2-1: config 0 descriptor?? [ 132.506856][ T8377] EXT4-fs (loop4): required journal recovery suppressed and not mounted read-only [ 132.600459][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.607235][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.694357][ T8386] loop0: detected capacity change from 0 to 8192 [ 132.740495][ T8386] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 132.764677][ T8392] netlink: 'syz.3.1846': attribute type 1 has an invalid length. [ 132.821950][ T8392] block nbd0: not configured, cannot reconfigure [ 132.830015][ T8390] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.871952][ T8390] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.901788][ T8390] bond0 (unregistering): Released all slaves [ 132.988176][ T7477] Bluetooth: Can't get state to change to load configuration err [ 132.996344][ T7477] Bluetooth: Loading sysconfig file failed [ 133.016459][ T7477] ath3k: probe of 2-1:0.0 failed with error -16 [ 133.045652][ T7477] usb 2-1: USB disconnect, device number 9 [ 133.099033][ T8408] x_tables: duplicate underflow at hook 4 [ 133.107848][ T7] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 133.188850][ T8416] CIFS: bad ip= option (::.) [ 133.428937][ T8406] loop2: detected capacity change from 0 to 32768 [ 133.437961][ T7] usb 5-1: not running at top speed; connect to a high speed hub [ 133.502541][ T8415] loop3: detected capacity change from 0 to 32768 [ 133.509190][ T8406] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 scanned by syz.2.1853 (8406) [ 133.528503][ T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.546271][ T7] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 133.580625][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.627167][ T8406] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 133.654164][ T8406] BTRFS info (device loop2): enabling ssd optimizations [ 133.664139][ T7] usb 5-1: Found UVC 1.00 device (046d:0825) [ 133.679552][ T8406] BTRFS info (device loop2): not using ssd optimizations [ 133.686618][ T8406] BTRFS info (device loop2): turning off barriers [ 133.693617][ T8406] BTRFS info (device loop2): use no compression [ 133.700018][ T8406] BTRFS info (device loop2): using free space tree [ 133.713464][ T8406] BTRFS info (device loop2): has skinny extents [ 133.897937][ T7] usb 5-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 133.927894][ T7] uvcvideo 5-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 133.936945][ T7] uvcvideo 5-1:1.1: Failed to initialize the device (-5). [ 134.060179][ T7] usb 5-1: USB disconnect, device number 10 [ 134.076935][ T8468] __nla_validate_parse: 5 callbacks suppressed [ 134.076951][ T8468] netlink: 209772 bytes leftover after parsing attributes in process `syz.1.1873'. [ 134.112917][ T8468] openvswitch: netlink: Message has 80 unknown bytes. [ 134.148406][ T8470] IPv6: ADDRCONF(NETDEV_CHANGE): vcan1: link becomes ready [ 134.346065][ T4177] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 9 /dev/loop2 scanned by udevd (4177) [ 134.370182][ T8486] netlink: 'syz.1.1884': attribute type 2 has an invalid length. [ 134.409746][ T8486] netlink: 119 bytes leftover after parsing attributes in process `syz.1.1884'. [ 134.526609][ T8494] ALSA: mixer_oss: invalid OSS volume 'u' [ 134.611165][ T8500] loop3: detected capacity change from 0 to 1764 [ 134.770125][ T8511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1895'. [ 134.788660][ T8500] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 134.854835][ T8511] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1895'. [ 134.967429][ T8520] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1900'. [ 135.086682][ T8529] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1903'. [ 135.115268][ T8501] loop1: detected capacity change from 0 to 32768 [ 135.132046][ T8529] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1903'. [ 135.144915][ T8529] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1903'. [ 135.222969][ T8501] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.1890 (8501) [ 135.262754][ T8538] netlink: 'syz.0.1906': attribute type 5 has an invalid length. [ 135.275255][ T8501] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 135.291208][ T4263] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 135.312270][ T8501] BTRFS info (device loop1): setting nodatacow, compression disabled [ 135.334756][ T8501] BTRFS info (device loop1): setting datasum, datacow enabled [ 135.359911][ T8501] BTRFS info (device loop1): disabling tree log [ 135.366193][ T8501] BTRFS info (device loop1): enabling ssd optimizations [ 135.406932][ T8501] BTRFS info (device loop1): using spread ssd allocation scheme [ 135.435151][ T8501] BTRFS info (device loop1): turning on sync discard [ 135.462967][ T8501] BTRFS info (device loop1): turning off barriers [ 135.481604][ T8501] BTRFS info (device loop1): setting nodatacow, compression disabled [ 135.500087][ T8501] BTRFS info (device loop1): allowing degraded mounts [ 135.506893][ T8501] BTRFS info (device loop1): enabling tree log [ 135.513877][ T8552] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1913'. [ 135.546586][ T8501] BTRFS info (device loop1): using free space tree [ 135.568864][ T8501] BTRFS info (device loop1): has skinny extents [ 135.738004][ T4263] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.749343][ T4263] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 135.759757][ T4263] usb 5-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 135.773030][ T4263] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.836725][ T8587] loop3: detected capacity change from 0 to 1024 [ 135.877977][ T8587] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 135.909539][ T4263] opticon 5-1:1.0: opticon converter detected [ 135.973541][ T8587] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,nodelalloc,barrier=0x0000000000000007. Quota mode: none. [ 135.988357][ T4263] usb 5-1: opticon converter now attached to ttyUSB0 [ 136.113496][ T4263] usb 5-1: USB disconnect, device number 11 [ 136.123799][ T8587] EXT4-fs (loop3): Online resizing not supported with bigalloc [ 136.160039][ T4263] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 136.192620][ T4263] opticon 5-1:1.0: device disconnected [ 136.462498][ T8616] netlink: 'syz.1.1935': attribute type 21 has an invalid length. [ 136.480737][ T8616] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1935'. [ 136.722560][ T8640] SET target dimension over the limit! [ 136.780154][ T8648] loop1: detected capacity change from 0 to 16 [ 136.843522][ T8648] erofs: (device loop1): mounted with root inode @ nid 36. [ 136.926593][ T8659] netlink: 'syz.0.1951': attribute type 1 has an invalid length. [ 137.082789][ T8675] tipc: Can't bind to reserved service type 0 [ 137.161203][ T8677] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.175228][ T8679] ALSA: mixer_oss: invalid OSS volume 'u' [ 137.207431][ T8677] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.247405][ T8677] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 137.278439][ T8677] bond0 (unregistering): Released all slaves [ 137.315054][ T8689] netlink: 'syz.2.1963': attribute type 10 has an invalid length. [ 137.348531][ T8689] device hsr0 entered promiscuous mode [ 137.365571][ T8693] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 137.630058][ T8672] loop4: detected capacity change from 0 to 32768 [ 137.673868][ T8715] device veth3 entered promiscuous mode [ 137.786047][ T8672] XFS (loop4): Mounting V5 Filesystem [ 137.884192][ T8672] XFS (loop4): Ending clean mount [ 137.927804][ T4295] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 137.957105][ T4194] XFS (loop4): Unmounting Filesystem [ 137.986688][ T8722] loop3: detected capacity change from 0 to 32768 [ 138.142209][ T8743] 9pnet: p9_fd_create_unix (8743): problem connecting socket: dev: -111 [ 138.197693][ T4295] usb 1-1: Using ep0 maxpacket: 8 [ 138.319863][ T4295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 138.354810][ T4295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 138.391552][ T4295] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 138.435433][ T4295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 138.478871][ T4295] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 138.513766][ T4295] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 138.545303][ T4295] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.579260][ T4295] usb 1-1: config 0 descriptor?? [ 138.630186][ T4186] Bluetooth: hci5: urb ffff88802b99f400 submission failed (90) [ 138.843624][ T4262] usb 1-1: USB disconnect, device number 12 [ 139.218394][ T8834] xt_policy: output policy not valid in PREROUTING and INPUT [ 139.235451][ T8836] openvswitch: netlink: Message has 4 unknown bytes. [ 139.597788][ T4262] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 139.683103][ T8876] usb usb8: usbfs: process 8876 (syz.1.2052) did not claim interface 0 before use [ 139.697914][ T7] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 139.722342][ T8852] loop3: detected capacity change from 0 to 32768 [ 139.841513][ T8888] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 139.877880][ T4262] usb 5-1: Using ep0 maxpacket: 8 [ 140.022550][ T4294] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 140.028266][ T4262] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.056508][ T4262] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 140.077794][ T4262] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.082477][ T7] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 140.091863][ T4262] usb 5-1: config 0 descriptor?? [ 140.103668][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.123976][ T7] usb 3-1: config 0 descriptor?? [ 140.143740][ T4262] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 140.171587][ T7] cp210x 3-1:0.0: cp210x converter detected [ 140.257815][ T2306] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 140.287832][ T4294] usb 2-1: Using ep0 maxpacket: 8 [ 140.380069][ T7] usb 3-1: cp210x converter now attached to ttyUSB0 [ 140.408001][ T4294] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 140.430938][ T4294] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 140.455461][ T4294] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 140.465767][ T4294] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 140.476122][ T4294] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 140.486667][ T4294] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 140.496009][ T4294] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.515086][ T4294] usb 2-1: config 0 descriptor?? [ 140.581167][ T4186] Bluetooth: hci5: urb ffff88801a99a900 submission failed (90) [ 140.597897][ T4262] gspca_vc032x: reg_w err -71 [ 140.602789][ T4262] vc032x: probe of 5-1:0.0 failed with error -71 [ 140.605017][ T4294] usb 3-1: USB disconnect, device number 10 [ 140.619947][ T2306] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 140.633666][ T4294] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 140.645006][ T4294] cp210x 3-1:0.0: device disconnected [ 140.650836][ T4262] usb 5-1: USB disconnect, device number 12 [ 140.770540][ T4295] usb 2-1: USB disconnect, device number 10 [ 140.787944][ T2306] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 140.801432][ T2306] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.817187][ T2306] usb 1-1: Product: syz [ 140.821849][ T2306] usb 1-1: Manufacturer: syz [ 140.826530][ T2306] usb 1-1: SerialNumber: syz [ 140.856604][ T2306] usb 1-1: config 0 descriptor?? [ 140.882707][ T8896] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 140.898830][ T2306] port100 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 141.115918][ T7477] usb 1-1: USB disconnect, device number 13 [ 141.337425][ T8921] __nla_validate_parse: 4 callbacks suppressed [ 141.337442][ T8921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2073'. [ 141.763433][ T8970] device vti0 entered promiscuous mode [ 141.859386][ T8983] netlink: 'syz.2.2103': attribute type 2 has an invalid length. [ 141.880986][ T8983] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2103'. [ 141.960359][ T8991] netlink: 'syz.0.2108': attribute type 30 has an invalid length. [ 142.190882][ T9012] loop2: detected capacity change from 0 to 64 [ 142.210451][ T9013] netlink: 210620 bytes leftover after parsing attributes in process `syz.0.2120'. [ 142.434716][ T9027] loop4: detected capacity change from 0 to 2048 [ 142.483978][ T9027] NILFS (loop4): invalid segment: Magic number mismatch [ 142.517745][ T9027] NILFS (loop4): trying rollback from an earlier position [ 142.547180][ T8977] loop3: detected capacity change from 0 to 32768 [ 142.568303][ T9027] NILFS (loop4): recovery complete [ 142.595664][ T9038] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 142.666784][ T9044] loop1: detected capacity change from 0 to 256 [ 142.683357][ T8977] (syz.3.2102,8977,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 142.731624][ T8977] (syz.3.2102,8977,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 142.747444][ T8977] (syz.3.2102,8977,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0x8514aa1d. Applying ECC. [ 142.791874][ T8977] JBD2: Ignoring recovery information on journal [ 142.826022][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 142.834300][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 142.842145][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 142.849840][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 142.857238][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 142.865047][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 142.872628][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 142.880312][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 142.887914][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 142.895444][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 142.903077][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 142.911435][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 142.918027][ T8977] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 142.919477][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 142.935478][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 142.955637][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 142.965542][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 142.978141][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 142.985683][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.000868][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.011250][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.018893][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.026290][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.092361][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.112656][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.137351][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.151038][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.162647][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.183204][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.199733][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.211116][ T9062] loop0: detected capacity change from 0 to 512 [ 143.239819][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.251355][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.261150][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.273236][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.280945][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.288751][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.296322][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.304059][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.321085][ T9070] tmpfs: Bad value for 'mpol' [ 143.327945][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.340912][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.351792][ T9062] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 143.357781][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.379580][ T9062] ext4 filesystem being mounted at /415/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 143.407707][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.425446][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.461616][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.487482][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.502297][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.527392][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.540504][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.551183][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.562240][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.572142][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.583170][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.615240][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.629215][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.636623][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.650174][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.657941][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.673866][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.681729][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.697623][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.705305][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.718325][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.726158][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.734275][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.741970][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.749680][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.757085][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.772205][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.782372][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.794645][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.802431][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.810382][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.818230][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.825889][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.834393][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.842332][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.850074][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.857566][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.866026][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.882515][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.896476][ T9097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2161'. [ 143.906193][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.913949][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.925516][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.935875][ T7477] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.959849][ T7477] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.03 Device [syz1] on syz1 [ 144.082025][ T4189] ocfs2: Unmounting device (7,3) on (node local) [ 144.156720][ T9108] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2167'. [ 144.263722][ T9104] fido_id[9104]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 144.529485][ T9139] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2178'. [ 144.593851][ T9140] nvme_rdma: malformed address passed: 1:4420 [ 144.880134][ T9177] binder: 9176:9177 ioctl c018620c 200000000040 returned -1 [ 144.908464][ T9181] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2199'. [ 144.989929][ T4294] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 145.130807][ T9195] loop1: detected capacity change from 0 to 8192 [ 145.263022][ T9214] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 145.277989][ T7477] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 145.369133][ T4294] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.393819][ T4294] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 145.424454][ T4294] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.449393][ T4294] usb 5-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 145.458964][ T4294] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.519217][ T4294] pegasus 5-1:1.0: Missing or invalid endpoints [ 145.527846][ T4262] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 145.582701][ T9228] loop2: detected capacity change from 0 to 256 [ 145.628924][ T9228] exfat: Deprecated parameter 'namecase' [ 145.634678][ T9228] exfat: Deprecated parameter 'namecase' [ 145.682758][ T9228] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xef5d2b8f, utbl_chksum : 0xe619d30d) [ 145.723299][ T4294] usb 5-1: USB disconnect, device number 13 [ 145.733793][ T7477] usb 4-1: unable to get BOS descriptor or descriptor too short [ 145.844410][ T9236] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 145.856136][ T7477] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 145.870177][ T7477] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 145.914866][ T9241] AppArmor: change_hat: Invalid input '0' [ 146.038413][ T4262] usb 1-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 146.059773][ T4262] usb 1-1: config 1 interface 0 has no altsetting 0 [ 146.073295][ T9257] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2237'. [ 146.085458][ T9257] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2237'. [ 146.168279][ T7477] usb 4-1: string descriptor 0 read error: -22 [ 146.175064][ T7477] usb 4-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 146.195301][ T7477] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.239148][ T9187] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 146.260576][ T9272] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2244'. [ 146.272725][ T7477] usb 4-1: MIDIStreaming interface descriptor not found [ 146.315416][ T9274] loop4: detected capacity change from 0 to 8 [ 146.331300][ T4262] usb 1-1: string descriptor 0 read error: -22 [ 146.350481][ T4262] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.40 [ 146.382685][ T9276] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 146.404818][ T4262] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.437999][ T9213] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 146.448543][ T9274] SQUASHFS error: Corrupted symlink [ 146.616893][ T9294] netlink: 'syz.1.2256': attribute type 39 has an invalid length. [ 146.689508][ T9298] loop2: detected capacity change from 0 to 2048 [ 146.721940][ T9299] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 146.807958][ T4262] usbhid 1-1:1.0: can't add hid device: -71 [ 146.808039][ T4262] usbhid: probe of 1-1:1.0 failed with error -71 [ 146.818743][ T4262] usb 1-1: USB disconnect, device number 14 [ 146.944743][ T9312] openvswitch: netlink: Missing valid actions attribute. [ 146.952270][ T9312] openvswitch: netlink: Actions may not be safe on all matching packets [ 147.024402][ T2306] usb 4-1: USB disconnect, device number 9 [ 147.094841][ T9323] netlink: 'syz.3.2270': attribute type 39 has an invalid length. [ 147.111912][ T9325] netlink: 'syz.4.2271': attribute type 1 has an invalid length. [ 147.240553][ T9336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2277'. [ 147.317514][ T9343] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 147.347004][ T9346] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2281'. [ 147.492573][ T4295] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 147.664875][ T9365] netlink: 'syz.2.2290': attribute type 39 has an invalid length. [ 147.857899][ T4295] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 147.877779][ T4295] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.905532][ T4295] usb 2-1: config 0 descriptor?? [ 147.943290][ T9351] loop0: detected capacity change from 0 to 32768 [ 147.953256][ T4295] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 148.137770][ T4262] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 148.392611][ T4295] gp8psk: usb in 128 operation failed. [ 148.417786][ T4295] gp8psk: usb in 137 operation failed. [ 148.427343][ T4295] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 148.456573][ T4295] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 148.495469][ T4295] usb 2-1: USB disconnect, device number 11 [ 148.599687][ T4262] usb 3-1: unable to get BOS descriptor or descriptor too short [ 148.713114][ T4262] usb 3-1: config 160 has an invalid interface number: 194 but max is 0 [ 148.732918][ T4262] usb 3-1: config 160 has no interface number 0 [ 148.751376][ T4262] usb 3-1: config 160 interface 194 has no altsetting 0 [ 148.890736][ T9424] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 148.898578][ T9424] IPv6: NLM_F_CREATE should be set when creating new route [ 148.905858][ T9424] IPv6: NLM_F_CREATE should be set when creating new route [ 148.940205][ T9426] loop4: detected capacity change from 0 to 256 [ 148.977875][ T4262] usb 3-1: New USB device found, idVendor=8fed, idProduct=88b3, bcdDevice=a4.75 [ 148.987069][ T4262] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.047164][ T4262] usb 3-1: Product: syz [ 149.061912][ T4262] usb 3-1: Manufacturer: syz [ 149.076850][ T4262] usb 3-1: SerialNumber: syz [ 149.425231][ T4262] usb 3-1: USB disconnect, device number 11 [ 149.521744][ T9454] loop4: detected capacity change from 0 to 4096 [ 149.598652][ T9454] NILFS (loop4): invalid segment: Checksum error in segment payload [ 149.647862][ T9454] NILFS (loop4): trying rollback from an earlier position [ 149.697356][ T9454] NILFS (loop4): recovery complete [ 149.772656][ T9470] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 149.854093][ T9432] loop0: detected capacity change from 0 to 32768 [ 149.931863][ T9432] gfs2: fsid=Ô±rÐÛ»ð_î [ 149.931863][ T9432] ˜b‚ç€: Trying to join cluster "lock_nolock", "Ô±rÐÛ»ð_î [ 149.931863][ T9432] ˜b‚ç€" [ 149.963995][ T9482] autofs4:pid:9482:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(768.1), cmd(0xc0189375) [ 149.994658][ T9482] autofs4:pid:9482:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 150.024262][ T9432] gfs2: fsid=Ô±rÐÛ»ð_î [ 150.024262][ T9432] ˜b‚ç€: Now mounting FS (format 1801)... [ 150.102833][ T9488] loop1: detected capacity change from 0 to 16 [ 150.179445][ T9488] erofs: (device loop1): mounted with root inode @ nid 36. [ 150.197265][ T9432] gfs2: fsid=Ô±rÐÛ»ð_î [ 150.197265][ T9432] ˜b‚ç€.s: journal 0 mapped with 5 extents in 0ms [ 150.234988][ T9488] attempt to access beyond end of device [ 150.234988][ T9488] loop1: rw=0, want=15300821032, limit=16 [ 150.292721][ T9496] loop2: detected capacity change from 0 to 256 [ 150.347313][ T9488] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 150.355685][ T9432] gfs2: fsid=Ô±rÐÛ»ð_î [ 150.355685][ T9432] ˜b‚ç€.s: first mount done, others may mount [ 150.477389][ T9497] loop4: detected capacity change from 0 to 4096 [ 150.787309][ T9515] netlink: 'syz.3.2361': attribute type 10 has an invalid length. [ 150.813795][ T9515] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2361'. [ 150.865926][ T9523] netlink: 'syz.0.2366': attribute type 4 has an invalid length. [ 150.967857][ T9531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2364'. [ 151.216655][ T9559] loop0: detected capacity change from 0 to 512 [ 151.236695][ T9562] loop3: detected capacity change from 0 to 256 [ 151.362092][ T9568] openvswitch: netlink: Key 2 has unexpected len 2 expected 4 [ 151.407716][ T1235] block nbd4: Attempted send on invalid socket [ 151.414034][ T1235] blk_update_request: I/O error, dev nbd4, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 151.427939][ T9571] VFS: unable to read V7 FS superblock on device nbd4. [ 151.435144][ T9571] VFS: could not find a valid V7 on nbd4. [ 151.654276][ T9589] netlink: 'syz.2.2399': attribute type 1 has an invalid length. [ 151.760410][ T9596] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2401'. [ 151.770848][ T9597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2403'. [ 152.224548][ T9647] netlink: 'syz.1.2428': attribute type 2 has an invalid length. [ 152.347195][ T9662] loop1: detected capacity change from 0 to 512 [ 152.420352][ T9662] EXT4-fs error (device loop1): ext4_orphan_get:1410: inode #15: comm syz.1.2435: inode has both inline data and extents flags [ 152.449009][ T9671] openvswitch: netlink: Flow actions attr not present in new flow. [ 152.475116][ T9662] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.2435: couldn't read orphan inode 15 (err -117) [ 152.522683][ T9662] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 152.608986][ T9662] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.2435: inode #255: comm syz.1.2435: iget: illegal inode # [ 152.663274][ T9662] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.2435: error while reading EA inode 255 err=-117 [ 152.711135][ T9662] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2812: Unable to expand inode 2. Delete some EAs or run e2fsck. [ 152.750303][ T9697] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 152.906472][ T9710] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 152.957350][ T9709] loop3: detected capacity change from 0 to 2048 [ 153.036810][ T9702] loop4: detected capacity change from 0 to 4096 [ 153.100275][ T9702] __ntfs_error: 6 callbacks suppressed [ 153.100289][ T9702] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 153.186833][ T9702] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 153.291712][ T9702] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 153.334638][ T9702] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 153.382217][ T9739] loop1: detected capacity change from 0 to 256 [ 153.414354][ T9702] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 153.446830][ T9739] exfat: Deprecated parameter 'utf8' [ 153.462222][ T9739] exfat: Deprecated parameter 'utf8' [ 153.487754][ T9739] exfat: Deprecated parameter 'namecase' [ 153.499123][ T9702] ntfs: volume version 3.1. [ 153.503875][ T9739] exfat: Deprecated parameter 'namecase' [ 153.526187][ T9702] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 153.598799][ T9702] ntfs: (device loop4): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 153.636607][ T9739] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 153.657829][ T9702] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 153.699692][ T9702] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 153.763108][ T9702] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 153.854058][ T9764] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2481'. [ 153.883538][ T9764] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2481'. [ 154.064776][ T9783] loop3: detected capacity change from 0 to 256 [ 154.092210][ T9784] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2485'. [ 154.140517][ T9783] exfat: Deprecated parameter 'namecase' [ 154.156324][ T9792] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2495'. [ 154.165558][ T9783] exfat: Deprecated parameter 'namecase' [ 154.212159][ T9795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2496'. [ 154.224660][ T9783] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 154.238938][ T9795] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2496'. [ 154.535602][ T9807] loop3: detected capacity change from 0 to 4096 [ 154.552054][ T9807] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 154.648109][ T9807] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 154.675867][ T9807] ntfs3: loop3: Failed to load $Extend. [ 154.876192][ T9838] loop4: detected capacity change from 0 to 128 [ 155.038289][ T9849] CIFS: Attempting to mount \\127.0.0.1\share [ 155.066757][ T9849] CIFS: VFS: No username specified [ 155.081424][ T9812] loop2: detected capacity change from 0 to 32768 [ 155.108831][ T9838] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 155.138338][ T9812] XFS: ikeep mount option is deprecated. [ 155.164866][ T9838] ext4 filesystem being mounted at /445/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 155.230262][ T9812] XFS (loop2): Mounting V5 Filesystem [ 155.239878][ T9859] IPv6: sit1: Disabled Multicast RS [ 155.337747][ T4262] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 155.394363][ T9812] XFS (loop2): Ending clean mount [ 155.447213][ T9872] tc_dump_action: action bad kind [ 155.503413][ T4191] XFS (loop2): Unmounting Filesystem [ 155.573843][ T9876] comedi comedi1: pcl730: I/O port conflict (0x2,4) [ 155.759079][ T4262] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 155.808346][ T4262] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 155.847736][ T4262] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 155.856815][ T4262] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.101018][ T9910] loop0: detected capacity change from 0 to 1024 [ 156.176741][ T9910] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 2: comm syz.0.2549: lblock 2 mapped to illegal pblock 2 (length 1) [ 156.192484][ T4262] cxacru 2-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 156.205521][ T4262] cxacru: probe of 2-1:1.0 failed with error -22 [ 156.271866][ T4262] usb 2-1: USB disconnect, device number 12 [ 156.298064][ T9910] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 48: comm syz.0.2549: lblock 0 mapped to illegal pblock 48 (length 1) [ 156.353206][ T9910] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.2549: Failed to acquire dquot type 0 [ 156.377029][ T9910] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 156.415306][ T9910] EXT4-fs error (device loop0): ext4_evict_inode:284: inode #11: comm syz.0.2549: mark_inode_dirty error [ 156.437810][ T4295] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 156.446842][ T9910] EXT4-fs warning (device loop0): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 156.464037][ T9910] EXT4-fs (loop0): 1 orphan inode deleted [ 156.482341][ T9910] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 156.485899][ T144] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 156.544552][ T144] EXT4-fs error (device loop0): ext4_release_dquot:6272: comm kworker/u4:1: Failed to release dquot type 0 [ 156.583866][ T9931] loop4: detected capacity change from 0 to 256 [ 156.596556][ T144] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 2: comm kworker/u4:1: lblock 2 mapped to illegal pblock 2 (length 1) [ 156.652082][ T144] EXT4-fs error (device loop0): ext4_write_dquot:6216: comm kworker/u4:1: Failed to commit dquot type 0 [ 156.674492][ T4184] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 156.713693][ T4184] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 156.725029][ T4184] EXT4-fs error (device loop0): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 156.798549][ T4295] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.816634][ T4295] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.844713][ T4295] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 156.865720][ T4295] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 156.906297][ T4295] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 156.915746][ T9942] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2560'. [ 156.933775][ T4295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.989541][ T4295] cxacru 4-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 157.007792][ T4295] cxacru: probe of 4-1:1.0 failed with error -22 [ 157.077998][ T9946] nvme_fc: nvme_fc_create_ctrl: nn-0x1000000044001122:pn-0x2000000044001122 - nn-0x1000000044001123:pn-0x2000000044001123 combination not found [ 157.103513][ T9956] netem: change failed [ 157.169606][ T9963] vivid-004: disconnect [ 157.194911][ T2306] usb 4-1: USB disconnect, device number 10 [ 157.201809][ T9960] vivid-004: reconnect [ 157.299211][ T9974] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 157.392022][ T9981] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2583'. [ 157.457915][ T4294] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 157.488726][ T9985] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2585'. [ 157.703026][ T4294] usb 2-1: Using ep0 maxpacket: 8 [ 157.784204][T10004] loop4: detected capacity change from 0 to 1024 [ 157.828030][ T4294] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.848673][ T4294] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 157.863624][T10004] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 157.958031][T10019] sctp: [Deprecated]: syz.0.2600 (pid 10019) Use of struct sctp_assoc_value in delayed_ack socket option. [ 157.958031][T10019] Use struct sctp_sack_info instead [ 158.006532][T10021] netlink: 'syz.0.2602': attribute type 1 has an invalid length. [ 158.014582][T10021] netlink: 'syz.0.2602': attribute type 9 has an invalid length. [ 158.024860][ T4294] usb 2-1: New USB device found, idVendor=047f, idProduct=c010, bcdDevice= 0.40 [ 158.065437][ T4294] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.083980][ T4294] usb 2-1: Product: syz [ 158.101688][ T4294] usb 2-1: Manufacturer: syz [ 158.106426][ T4294] usb 2-1: SerialNumber: syz [ 158.271907][T10038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2609'. [ 158.285041][T10037] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0 [ 158.362468][T10011] loop2: detected capacity change from 0 to 32768 [ 158.384782][ T4263] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 158.425805][T10011] JBD2: Ignoring recovery information on journal [ 158.486489][T10050] CIFS: bad ip= option (.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð) [ 158.567001][T10011] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 158.651479][T10011] syz.2.2597 (10011) used greatest stack depth: 17536 bytes left [ 158.680965][ T4191] ocfs2: Unmounting device (7,2) on (node local) [ 158.705053][ T4294] usb 2-1: USB disconnect, device number 13 [ 158.817992][ T4263] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 158.834225][ T4263] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.866692][ T4263] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 158.892727][ T4263] usb 5-1: config 1 has no interface number 1 [ 158.906817][ T4263] usb 5-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 158.950489][ T4263] usb 5-1: config 1 interface 105 has no altsetting 0 [ 159.026328][T10062] [ 159.028722][T10062] ====================================================== [ 159.035845][T10062] WARNING: possible circular locking dependency detected [ 159.042891][T10062] syzkaller #0 Not tainted [ 159.047323][T10062] ------------------------------------------------------ [ 159.054351][T10062] syz.0.2621/10062 is trying to acquire lock: [ 159.060425][T10062] ffff888024c05028 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 159.071514][T10062] [ 159.071514][T10062] but task is already holding lock: [ 159.078880][T10062] ffffffff8e4d7308 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1ae/0x560 [ 159.088557][T10062] [ 159.088557][T10062] which lock already depends on the new lock. [ 159.088557][T10062] [ 159.098967][T10062] [ 159.098967][T10062] the existing dependency chain (in reverse order) is: [ 159.107983][T10062] [ 159.107983][T10062] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 159.116026][T10062] __mutex_lock_common+0x1e5/0x2400 [ 159.121827][T10062] mutex_lock_nested+0x17/0x20 [ 159.127133][T10062] rfkill_register+0x2f/0x970 [ 159.132378][T10062] hci_register_dev+0x459/0x980 [ 159.137771][T10062] vhci_create_device+0x32e/0x5c0 [ 159.143338][T10062] vhci_write+0x389/0x440 [ 159.148202][T10062] vfs_write+0x748/0xd70 [ 159.153334][T10062] ksys_write+0x153/0x260 [ 159.158202][T10062] do_syscall_64+0x4c/0xa0 [ 159.163158][T10062] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 159.169589][T10062] [ 159.169589][T10062] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 159.177429][T10062] __mutex_lock_common+0x1e5/0x2400 [ 159.183164][T10062] mutex_lock_nested+0x17/0x20 [ 159.188466][T10062] vhci_send_frame+0x88/0x100 [ 159.193680][T10062] hci_send_frame+0x1a9/0x2e0 [ 159.198913][T10062] hci_tx_work+0x9b5/0x16d0 [ 159.203965][T10062] process_one_work+0x867/0xff0 [ 159.209355][T10062] worker_thread+0xad7/0x12a0 [ 159.214574][T10062] kthread+0x42e/0x520 [ 159.219181][T10062] ret_from_fork+0x1f/0x30 [ 159.224175][T10062] [ 159.224175][T10062] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 159.233400][T10062] __flush_work+0x116/0x210 [ 159.237878][ T4294] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 159.238438][T10062] hci_dev_do_close+0x201/0x1020 [ 159.251440][T10062] hci_dev_close+0xd9/0x180 [ 159.256484][T10062] sock_do_ioctl+0xfb/0x320 [ 159.261529][T10062] sock_ioctl+0x48a/0x700 [ 159.266398][T10062] __se_sys_ioctl+0xfa/0x170 [ 159.271532][T10062] do_syscall_64+0x4c/0xa0 [ 159.276492][T10062] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 159.282935][T10062] [ 159.282935][T10062] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 159.290597][T10062] __mutex_lock_common+0x1e5/0x2400 [ 159.296333][T10062] mutex_lock_nested+0x17/0x20 [ 159.301641][T10062] bg_scan_update+0x44/0x3b0 [ 159.306799][T10062] process_one_work+0x867/0xff0 [ 159.312202][T10062] worker_thread+0xad7/0x12a0 [ 159.317420][T10062] kthread+0x42e/0x520 [ 159.322026][T10062] ret_from_fork+0x1f/0x30 [ 159.326980][T10062] [ 159.326980][T10062] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 159.336826][T10062] __lock_acquire+0x38f7/0x7d40 [ 159.342228][T10062] lock_acquire+0x19f/0x400 [ 159.347294][T10062] __flush_work+0x116/0x210 [ 159.352360][T10062] __cancel_work_timer+0x3f4/0x560 [ 159.358010][T10062] hci_request_cancel_all+0xcc/0x300 [ 159.363840][T10062] hci_dev_do_close+0x4e/0x1020 [ 159.369237][T10062] hci_rfkill_set_block+0x101/0x180 [ 159.374979][T10062] rfkill_set_block+0x1c1/0x3c0 [ 159.380370][T10062] rfkill_fop_write+0x453/0x560 [ 159.385760][T10062] vfs_write+0x304/0xd70 [ 159.390543][T10062] ksys_write+0x153/0x260 [ 159.395431][T10062] do_syscall_64+0x4c/0xa0 [ 159.400393][T10062] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 159.406835][T10062] [ 159.406835][T10062] other info that might help us debug this: [ 159.406835][T10062] [ 159.417078][T10062] Chain exists of: [ 159.417078][T10062] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 159.417078][T10062] [ 159.432835][T10062] Possible unsafe locking scenario: [ 159.432835][T10062] [ 159.440324][T10062] CPU0 CPU1 [ 159.445696][T10062] ---- ---- [ 159.451071][T10062] lock(rfkill_global_mutex); [ 159.455849][T10062] lock(&data->open_mutex); [ 159.462968][T10062] lock(rfkill_global_mutex); [ 159.470265][T10062] lock((work_completion)(&hdev->bg_scan_update)); [ 159.476876][T10062] [ 159.476876][T10062] *** DEADLOCK *** [ 159.476876][T10062] [ 159.485027][T10062] 1 lock held by syz.0.2621/10062: [ 159.487753][ T4294] usb 4-1: Using ep0 maxpacket: 32 [ 159.490142][T10062] #0: ffffffff8e4d7308 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1ae/0x560 [ 159.505357][T10062] [ 159.505357][T10062] stack backtrace: [ 159.511264][T10062] CPU: 1 PID: 10062 Comm: syz.0.2621 Not tainted syzkaller #0 [ 159.518737][T10062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 159.528818][T10062] Call Trace: [ 159.532114][T10062] [ 159.535059][T10062] dump_stack_lvl+0x188/0x250 [ 159.539762][T10062] ? load_image+0x410/0x410 [ 159.544289][T10062] ? show_regs_print_info+0x20/0x20 [ 159.549512][T10062] ? print_circular_bug+0x12b/0x1a0 [ 159.554754][T10062] check_noncircular+0x2f8/0x400 [ 159.559717][T10062] ? print_deadlock_bug+0x5d0/0x5d0 [ 159.564934][T10062] ? lockdep_lock+0xf1/0x1f0 [ 159.569543][T10062] ? __lock_acquire+0x12df/0x7d40 [ 159.574592][T10062] ? mark_lock+0x94/0x320 [ 159.578941][T10062] ? _find_first_zero_bit+0xd1/0xf0 [ 159.584159][T10062] __lock_acquire+0x38f7/0x7d40 [ 159.589051][T10062] ? verify_lock_unused+0x140/0x140 [ 159.594282][T10062] ? verify_lock_unused+0x140/0x140 [ 159.599596][T10062] lock_acquire+0x19f/0x400 [ 159.604121][T10062] ? __flush_work+0xfa/0x210 [ 159.608735][T10062] ? __lock_acquire+0x7d40/0x7d40 [ 159.613805][T10062] ? read_lock_is_recursive+0x10/0x10 [ 159.618084][ T4294] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 159.619201][T10062] ? start_flush_work+0x784/0x830 [ 159.619231][T10062] __flush_work+0x116/0x210 [ 159.632657][ T4294] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 159.637058][T10062] ? __flush_work+0xfa/0x210 [ 159.637086][T10062] ? flush_work+0x20/0x20 [ 159.654582][T10062] ? try_to_grab_pending+0xfb/0x820 [ 159.659804][T10062] ? mark_lock+0x94/0x320 [ 159.664149][T10062] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 159.665826][ T4294] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 159.670151][T10062] ? lock_chain_count+0x20/0x20 [ 159.670179][T10062] ? mark_lock+0x94/0x320 [ 159.670196][T10062] ? __cancel_work_timer+0x36a/0x560 [ 159.693595][T10062] __cancel_work_timer+0x3f4/0x560 [ 159.697330][ T4294] usb 4-1: config 1 has no interface number 0 [ 159.698729][T10062] ? cancel_work_sync+0x20/0x20 [ 159.698753][T10062] ? __cancel_work+0x1f9/0x2e0 [ 159.698772][T10062] ? lockdep_hardirqs_on+0x94/0x140 [ 159.707129][ T4294] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 159.709694][T10062] ? __cancel_work+0x27b/0x2e0 [ 159.709717][T10062] ? cancel_work+0x20/0x20 [ 159.709736][T10062] hci_request_cancel_all+0xcc/0x300 [ 159.715410][ T4294] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 159.719693][T10062] hci_dev_do_close+0x4e/0x1020 [ 159.719719][T10062] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 159.719742][T10062] ? _raw_spin_unlock+0x40/0x40 [ 159.730393][ T4294] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 159.734108][T10062] hci_rfkill_set_block+0x101/0x180 [ 159.734135][T10062] ? rcu_lock_release+0x20/0x20 [ 159.739327][ T4294] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.743804][T10062] rfkill_set_block+0x1c1/0x3c0 [ 159.743831][T10062] rfkill_fop_write+0x453/0x560 [ 159.808960][T10062] ? rfkill_fop_read+0x560/0x560 [ 159.813914][T10062] ? common_file_perm+0x160/0x1c0 [ 159.818983][T10062] ? fsnotify_perm+0x5d/0x560 [ 159.823686][T10062] ? security_file_permission+0x75/0xa0 [ 159.829249][T10062] ? rfkill_fop_read+0x560/0x560 [ 159.834233][T10062] vfs_write+0x304/0xd70 [ 159.838507][T10062] ? file_end_write+0x250/0x250 [ 159.843378][T10062] ? __fget_files+0x402/0x470 [ 159.848074][T10062] ? __fdget_pos+0x1e2/0x370 [ 159.852702][T10062] ? ksys_write+0x70/0x260 [ 159.852901][ T4294] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 159.857152][T10062] ksys_write+0x153/0x260 [ 159.857175][T10062] ? __ia32_sys_read+0x80/0x80 [ 159.857217][T10062] ? lockdep_hardirqs_on+0x94/0x140 [ 159.857274][T10062] do_syscall_64+0x4c/0xa0 [ 159.882181][T10062] ? clear_bhb_loop+0x30/0x80 [ 159.886879][T10062] ? clear_bhb_loop+0x30/0x80 [ 159.891584][T10062] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 159.897508][T10062] RIP: 0033:0x7f7ac5225559 [ 159.901938][T10062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.921553][T10062] RSP: 002b:00007f7ac347d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 159.930102][T10062] RAX: ffffffffffffffda RBX: 00007f7ac54acfa0 RCX: 00007f7ac5225559 [ 159.938089][T10062] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 159.946075][T10062] RBP: 00007f7ac52bc8b0 R08: 0000000000000000 R09: 0000000000000000 [ 159.954089][T10062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.962091][T10062] R13: 00007f7ac54ad038 R14: 00007f7ac54acfa0 R15: 00007ffd3d5b6e98 [ 159.970190][T10062] [ 160.057823][ T4263] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 160.069411][ T4294] snd_usb_pod 4-1:1.1: endpoint not available, using fallback values [ 160.071712][ T4263] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.084553][ T4294] snd_usb_pod 4-1:1.1: invalid control EP [ 160.086481][ T4263] usb 5-1: Product: syz [ 160.096064][ T4263] usb 5-1: Manufacturer: syz [ 160.100889][ T4263] usb 5-1: SerialNumber: syz [ 160.101185][ T4294] snd_usb_pod 4-1:1.1: cannot start listening: -22 [ 160.113529][ T4294] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 160.121156][ T4294] snd_usb_pod: probe of 4-1:1.1 failed with error -22 [ 160.285832][ T4294] usb 4-1: USB disconnect, device number 11 [ 160.399857][ T4263] aqc111: probe of 5-1:1.105 failed with error -22 [ 160.613371][ T4263] usb 5-1: USB disconnect, device number 14