last executing test programs: 1.816493408s ago: executing program 3 (id=2020): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x80000000, {0x0, 0x100}, {}, {0x0, 0xfffffffc}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}) 1.748010225s ago: executing program 3 (id=2025): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f00000000c0)={0x2, 0x0, 0xd, 0xe, 0x165, &(0x7f0000000340)="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"}) 1.628176995s ago: executing program 2 (id=2029): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="200100003000010026bd700000000000050119800c00bf000000000000000000140004"], 0x120}], 0x1}, 0x4) 1.628017225s ago: executing program 3 (id=2030): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0xe}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}]}, 0x50}}, 0x40) 1.5757796s ago: executing program 3 (id=2032): r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/route\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000480)=""/178, 0xb2}], 0x1, 0x0, 0x0) 1.481380458s ago: executing program 2 (id=2035): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x404, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x87}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x3c}}}], 0x30}, 0x0) 1.407632195s ago: executing program 3 (id=2037): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000005000000000000000000000d0a000000010000000300000d"], &(0x7f0000000f40)=""/4089, 0x4d, 0xff9, 0x1}, 0x28) 1.392982956s ago: executing program 2 (id=2038): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1) writev(r0, &(0x7f0000001240)=[{&(0x7f0000001140)="6385d6eb73ff64c5ad11599df61a643cc5584c5fff395b515fa0cb2268fa823cbde0e9571c5ccdee460cd909", 0x2c}], 0x1) 1.355051149s ago: executing program 3 (id=2039): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000240)=ANY=[@ANYBLOB='check=strict,session=0x0000000000000024,iocharset=ascii,overriderockperm,overriderockperm,gid=', @ANYRESOCT=0x0, @ANYRES16=0x0], 0xf6, 0xa1a, &(0x7f0000000d00)="$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") syz_usb_connect(0x5, 0x4c, &(0x7f0000000240)=ANY=[@ANYBLOB="1201100335fe6510ca1a8eb232920102030109023a00010d019002090432a70201039e08090588061000060408082387ac33afe3410725010305f804090507020002040266072501"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) 1.315751593s ago: executing program 2 (id=2040): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x3b, 0x4, 0x4c8, 0x3e0, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x3e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x520) 1.22944297s ago: executing program 1 (id=2041): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00', @ANYRES32], 0x47, 0xc24, &(0x7f0000004280)="$eJzs3V1sZOdZB/DnnWPHHymt07SbFpoyUlG7ctnVfnXX1aLK27iGSttNVa8rclWPP3Y7ine8sr10U6AyoILETUVuEDfIokQg9YIrwiUuDVIrhISqXpQLJEu0US648EUlBCg1Omfesccbbzzpfti7+f2iyf/MzHPG78f4zLG075wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACI++7lLp06nw24FAPAwXZn60qmzKYYPux0AwMNz1d//AAAAAAAAAAAAAABw1KUo4likGH51K81U99sGLzdbt25PT0zuv9tQihS1KKr68jZ4+szZc586f2Gsk2+///324Xh+6uql+nNLN24uL6ysLMzXp1vNuaX5hZ5f4V73v9NoNQD1Gy/emr92baV+5uTZPU/fHnl94MljIxcvnDg/1qmdnpicnOqq6ev/hX/6W9xthccTUUQjUrw58kZqREQt7n0sDnjvPGhDVSdGq05MT0xWHVlsNlqr5ZOplqtqEfWuncY7Y/QQ5uKejEeslc0vGzxadm/qZmO5Mbu4UP9iY3m1udpcaqVau7Vlf+pRi7EUsR4RmwNvfbn+KOKjkeLlU1tpNiKKzjh8sloYfHB7ag+gjz0o21nvj1ivPQJzdoQNRBFXIsXPXjsec+WY5Vt8POILZb4a8UqZn4lI5RvjXMRP93kf8WjqiyL+NVIspa00Xx0POseVy1+uf751bamrtnNceeQ/Hx6mI35sGowiZqsj/lb6xU92AAAAAAAAAAAAAAAAALjfhqKIb0eKP3r2d6p1xVGtS3/fxbH3vPCb3WvGnzngdcrakxGxVuttTW5/XjqcauV/D6Bj9GQwivhGXv/3B4fdGAAAAAAAAAAAAAAAAAAAgHe1Il6IFF85cTytR/c1xZut6/WrjdnF9lVhO9f+7VwzfXt7e7ue2jmecybnWs71nBs5N3NGLe+fczznTM61nOs5N3Ju5owi759zPOdMzrWc6zk3cm7mjL68f87xnDM513Ku59zIuZkzjsi1ewEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHie1KOLnkeJbX9tKkSJiPGIm2rkxcNitAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABKg6mIk5Fi44XB6v56LeJqRPx8e3u7uv3P9vZ2xFa5fa8Ou68AAAAAAAAAAAAAAAAAAABwZKUiPhYpnv7frVSPiNsjrw88eWzk4oUT58eKKCKVJd31z09dvVR/bunGzeWFlZWF+fp0qzm3NL/Q648bvNxs3bo9PTH5QDpzoKEH3P6hweeWbr603Lz+1dV9nx8evDS7srrcmNv/6RiKWsRM9yOjVYOnJyarRi82G61q11S7SwNrEeO9dgYAAAAAAAAAAAAAAAAAAIAjYzgV8blI8ZP/OJc668b72mv+f6l9r9ipfeX3dr8LYPGO7Oj+/oBetlOvDR2tFt7XpycmJ6e6Hu7rf2tp2aaUingmUnzi5Q9V6+FTDO+7Nr6se29Zd+Ncrhv5lbJubU/V4Oj0xGT9ylLrxKXFxaW5xmpjdnGhPnWzMdfzFwcAAAAAAAAAAAAAAAAAAADA2xhORfwoUvzX3/5b6lx3Pq//72vf61r//xvVEvrKYNqbO6q1/e+t1va3t993cWz4o8/e7fEHsf6/bFNKRXwzUpz90Yeq6+l31v/P3FFb1v1JpHjj2Y/kutoTZV2j0532K15rLi6cKmv/MlL86pud2qhqr+fap3drT5e1Q5Hiz7f21n41135gt/ZMWXs8UnzvP/ev/eBu7dmy9ieR4h/+pt6pHS5rfzfXHtutPTm3tDh/0LCW8/+dSPHXV34rdfp81/nv+v6HtTtyx1vm/O2379f8j3Q9tpbn9Y/z/DcOmP/zkeI7gx/Jde2xn83PP1X9f3f+PxEp/v1f9tZey7Xv36093Wu3Dls5/9+OFN/9ix/v9DnPfx7Z3Rnqnv9f7tubO++SQ5r/p7oeG8ntmnuHY/FutPLS119sLC4uLNuwYeNx2Kjdn9c57CMTD0P5+f+nkeL/jhWpcx6TP//f0763e/7339/Y/fy/eEfuOKTP//d3PXYxn7X090UMrt642f9MxODKS18/0bzRuL5wfaF15vSpT3/6/OlTp8/3P9E5udvd6nnsHgfl/P8gUvzw736483fM3vO//c//h+/IHYc0/09392nPeU3PQ/GuVM7/X0WKpz77452/N9/u/L/z9//xj+3Nnd+/Q5r/D3Q9NpLb1XyHYwEAAAAAAAAAAPAoGU5F/Fmk+O0//PXUWUPUy7//6ywsKu58wUP691/Huh6bf0jrGnoeZACAI6Q8//tgpPjH7e/vrOXee/4Xv9ap7T7/u5ujcP1/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB41KUo4vcjxfCrW2ljoLzfNni52bp1e3picv/dhlKkqEVR1Ze3wdNnzp771PkLY528PNDDTx++X934cDw/dfVS/bmlGzeXF1ZWFubr063m3NL8Qs+vcK/7Rzyx595oNYD1Gy/emr92baV+5uTZPU/fHnl94MljIxcvnDg/1qmdnpicnOqq6et/Bz/9AOmujS7i+5HizZE30ncHImpx72NxwHvnQRuqOjFadWJ6YrLqyGKz0Votn0y1XFWLqHftNN4Zo4cwF/dkPGKtbH7Z4NGye1M3G8uN2cWF+hcby6vN1eZSK9XarS37U49ajKWI9YjY3OdXsj+K+GakePnUVvqngYiiMw6fvDL1pVNnD25P7QH0sQdlO+v9Eeu1R2DOjrCBKOLvI8XPXjse3xuI6Iv2LT4e8YUyX414pczPRKTyjXEu4qe9HNp5JPRFEecixVLaSq8NlMeDznHl8pfrn29dW+qq7RxXHvnPh4fpiB+bBqOIH1RH/K30z36vAQAAAAAAAAAAAAAAAI6QItYjxVdOHE/V+uCdNcXN1vX61cbsYntZX2ftX2fN9Pb29nY9tXM850zOtZzrOTdybuaMWt4/53jOmZxrOddzbuTczBlF3j/neM6ZnGs513Nu5NzMGX15/5zjOWdyruVcz7mRczNnHJG1ewAAAAAAAAAAAAAAAAAAwOOlFkV1FfdvfW0rbQ+0ry89E+3ccD3Qx97/BwAA///ninKq") openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x59b801, 0x1ce) 1.219680321s ago: executing program 2 (id=2042): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='dctcp', 0x5) 1.087652363s ago: executing program 2 (id=2045): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bec9ff10cd0631016016af02030109021b00010000000009046b00016a93f000090588", @ANYRES16=r0], 0x0) 886.893361ms ago: executing program 1 (id=2050): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newsa={0x16c, 0x10, 0x1, 0x70bd2c, 0x8, {{@in=@multicast1, @in=@private=0xa010100}, {@in=@empty, 0x0, 0x32}, @in6=@loopback, {}, {}, {}, 0x70bd29, 0x0, 0xa, 0x0, 0x0, 0xad}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x2, [0x40000000]}}, @replay_thresh={0x8, 0xb, 0x8}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x48001}, 0x0) 756.668272ms ago: executing program 1 (id=2053): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000140)={0x1, &(0x7f0000000500)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) clock_getres(0x3, 0x0) 665.86238ms ago: executing program 1 (id=2055): syz_mount_image$hfs(&(0x7f0000001600), &(0x7f0000000000)='./file1\x00', 0x2000000, &(0x7f0000000180)={[{@file_umask={'file_umask', 0x3d, 0x80004}}, {}, {@codepage={'codepage', 0x3d, 'cp866'}}, {}, {}]}, 0x1, 0x305, &(0x7f0000000200)="$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") chroot(&(0x7f0000000a00)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') 539.706752ms ago: executing program 0 (id=2056): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x8) 537.619672ms ago: executing program 4 (id=2057): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a00", @ANYRES32, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a4000"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 475.928197ms ago: executing program 1 (id=2058): r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001580)={&(0x7f0000001340)=@hci={0x1f, 0xd00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='b', 0x48}], 0x1}, 0x60085) 425.033212ms ago: executing program 4 (id=2059): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)={0x1c, 0x2a, 0x1, 0x0, 0x0, "", [@typed={0x4, 0x2e}, @nested={0x6, 0x18, 0x0, 0x1, [@generic="73e8"]}]}, 0x1c}], 0x1}, 0x0) 424.411812ms ago: executing program 0 (id=2069): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) utimes(0x0, 0x0) 347.353869ms ago: executing program 0 (id=2060): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x3, 0x0) 327.731ms ago: executing program 4 (id=2061): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000035c0)={'veth0_vlan\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x3b, 0x2, [{0x3, 0x120000}, {0xf8ed, 0x3}]}}) 294.038743ms ago: executing program 1 (id=2062): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 243.335178ms ago: executing program 4 (id=2063): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) 227.277719ms ago: executing program 0 (id=2064): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x7800, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @private, @broadcast}}}}) 83.426062ms ago: executing program 4 (id=2065): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000001340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000600008d8500000073000000850000000500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 59.825544ms ago: executing program 0 (id=2066): r0 = syz_socket_connect_nvme_tcp() close(r0) 21.552358ms ago: executing program 4 (id=2067): syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x300c001, &(0x7f0000000180)={[{@bsdgroups}]}, 0x2c, 0x528, &(0x7f0000000840)="$eJzs3c9ro2kdAPBv0l+ZTmfb1T2Mou64ro4yTNKmu2XZi+tFkGVZYfUkMlvaTClNmtKk67YW7J69Ci540j/Bg+BBmJN3b3rzMh6EUQdlKohkeZM3M2mbdMK0aWaazwde8rw/mu/3CbzP0zxv3vcJYGTdiIiDiJiMiA8jYjbdnkmXeKe1JMc9eri/cvhwfyUTjcYH/xxPj9xfaR/fdjV9z1zE+8n6VJe4td29jeVyubSdrhfqla1CbXfv9nplea20VtosFpcWlubfWnyzeG51fbXy2wffXX/3h3/4/Zfv/+ngWz9Ncv52ui+p27kF6tD6XCZipmNb8sm9O4hgQzCW1mdy2InwTLIR8bmIeC0tP5YbXk4AwGA1GrPRmO1c7y3TxzEAwPMv+c4/E5lsPv3+PxPZbD7fHMPLvRLT2XK1Vr91t7qzuRrNMay5mMjeXS+X5tOxwrmYyCTrC83yk/XisfXFiHg5In4xdaW5nl+plleH9U8PAIy4q8f6//9Mtfr/PrhCAAAvMj05AIyek/3/xFDyAAAuju//ADB6Ovr/bvfqAgCXUO7Yvf8AwOX31PH/6/GzH19MKgDABXH9HwBGyvffey9ZGofp869XP9rd2ah+dHu1VNvIV3ZW8ivV7a38WrW61nxmT+Vp71euVrcW3oidjwv1Uq1eqO3u3alUdzbrd5rP9b5TcmMBAAzfy6/e+0smIg7evtJcoj2Xgx8EwKXnNIfRNTbsBIChGR92AsDQGI8HOufv7XYPcM+fCH3a+z2vnDEnYLBufqHH+P/p/xv8v3Ex6QEDZPwfRtfZxv+NHsCLzPg/jK5GI2M+fwAYMX18g/cTQbjkOq7/d70k4BEhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcNJMc8lk8+nEHzORzebzEdciYi4mMnfXy6X5iHgpIv48NTGVrC8MO2kA4Iyyf8+k83/dnH195vjeycx/p5qvEfGTX33wy4+X6/XthWT7vx5vr3+abi92DTA1+DoAAB3Gj29o99Ptfrw9v++jh/sr7eUiE3zwndbkokncw3Rpp95KPhcTETH978yRymTOaWLig08i4vrx+j+ZAnUunfm0M3477rWBxY9mDWeOxM8eqX+2ua/1mnwWnz+HXGDU3Evan3e6nX/ZuNF8Tc+/zNHGNBc/P9m4PoN2+3fYON7+tc7396/lmu1Nt/bvRr8x3vjj93ru+2Ss8cXxiMMT7W97Ruhcs9Qt/ut9xv/rl77yWq99jV9H3IzT4rdKhXplq1Db3bu9XlleK62VNovFpYWl+bcW3ywWmmPUhfZI9Un/ePvWS73rHzHdI37uKfX/ep/1/83/PvzRV0+J/82vdYufjVdOiZ/0id/oM/7y9O96Tt+dxF/tUf/xI/Enj/xdsu1Wn/Hv/21vtc9DAYALUNvd21gul0vbCn0Uri+e8onlBhX96nNRd4VTC2NRbo8LPRf5nLkw5IYJGLgnJ/2wMwEAAAAAAAAAAAAAAHqp/SB95N8530XUeTPcsOsIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA5fVZAAAA///xp8hO") bpf$OBJ_GET_MAP(0x7, &(0x7f0000000ec0)=@generic={&(0x7f0000000e80)='./file0\x00', 0x0, 0x10}, 0x18) 0s ago: executing program 0 (id=2068): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x1a) kernel console output (not intermixed with test programs): ommand 0x041b tx timeout [ 48.922372][ T4235] Bluetooth: hci1: command 0x041b tx timeout [ 48.926131][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.933838][ T4235] Bluetooth: hci3: command 0x041b tx timeout [ 48.944664][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.955514][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.970007][ T4184] device veth0_vlan entered promiscuous mode [ 48.984105][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.992384][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.001179][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.009920][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.020024][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.041153][ T4184] device veth1_vlan entered promiscuous mode [ 49.059625][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.069643][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.078413][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.087021][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.095104][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.103958][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.143857][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.153596][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.166626][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.201888][ T4191] device veth0_vlan entered promiscuous mode [ 49.214172][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.224053][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.240301][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.249799][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.258801][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.267507][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.276781][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.290279][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.298503][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.306446][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.315479][ T4186] device veth0_vlan entered promiscuous mode [ 49.345350][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.354009][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.363908][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.372860][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.382333][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.390372][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.401622][ T4184] device veth0_macvtap entered promiscuous mode [ 49.411552][ T4191] device veth1_vlan entered promiscuous mode [ 49.419602][ T4185] device veth0_vlan entered promiscuous mode [ 49.428679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.438836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.447707][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.457173][ T4186] device veth1_vlan entered promiscuous mode [ 49.467871][ T4184] device veth1_macvtap entered promiscuous mode [ 49.484016][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.531456][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.540023][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.548963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.560330][ T4185] device veth1_vlan entered promiscuous mode [ 49.569565][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.581840][ T4191] device veth0_macvtap entered promiscuous mode [ 49.589639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.598111][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.607984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.617034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.626082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.636207][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.645144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.653775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.664746][ T4186] device veth0_macvtap entered promiscuous mode [ 49.687379][ T4191] device veth1_macvtap entered promiscuous mode [ 49.697510][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.707621][ T4186] device veth1_macvtap entered promiscuous mode [ 49.723173][ T4189] device veth0_vlan entered promiscuous mode [ 49.735190][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.744078][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.753796][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.763493][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.774506][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.783630][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.791632][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.799952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.808459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.817116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.826389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.835058][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.844040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.852143][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.870769][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.880171][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.901883][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.913397][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.927647][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.938979][ T4189] device veth1_vlan entered promiscuous mode [ 49.952388][ T4185] device veth0_macvtap entered promiscuous mode [ 49.966624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.976820][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.985794][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.994235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.006180][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.017592][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.028807][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.038282][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.049196][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.059306][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.070895][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.082042][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.091764][ T4185] device veth1_macvtap entered promiscuous mode [ 50.109041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.120164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.129297][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.139176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.148120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.160156][ T4191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.170685][ T4191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.180151][ T4191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.188995][ T4191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.220941][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.231923][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.242450][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.253348][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.263397][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.273930][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.286510][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.294105][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.305641][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.315686][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.327174][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.337969][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.351131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 50.359702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.368371][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.377496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.386522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.413929][ T4189] device veth0_macvtap entered promiscuous mode [ 50.431134][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.440288][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.449340][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.458826][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.473718][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.482651][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.492066][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.508301][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.519070][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.529484][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.540205][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.550332][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.561036][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.573170][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.598334][ T4189] device veth1_macvtap entered promiscuous mode [ 50.608734][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.616785][ T4268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.617621][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.631746][ T4268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.636624][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.649762][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.678791][ T4185] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.687949][ T4185] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.697004][ T4185] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.706350][ T4185] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.740926][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.752821][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.763701][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.774435][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.785327][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.796080][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.806224][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.816841][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.827893][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.860791][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.870945][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.883183][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.894981][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.905208][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.916301][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.926372][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.936893][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.947128][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.958477][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.970309][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.975318][ T4292] Bluetooth: hci3: command 0x040f tx timeout [ 50.996216][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.996642][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.004228][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.018192][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.024953][ T4292] Bluetooth: hci1: command 0x040f tx timeout [ 51.034368][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.035003][ T4292] Bluetooth: hci0: command 0x040f tx timeout [ 51.042671][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.061176][ T4189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.063355][ T4292] Bluetooth: hci2: command 0x040f tx timeout [ 51.075027][ T4189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.077441][ T4292] Bluetooth: hci4: command 0x040f tx timeout [ 51.089387][ T4189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.099578][ T4189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.125355][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.133254][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.191143][ T4268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.212558][ T4268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.244177][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.258497][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.274062][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.294218][ T477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.325549][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.355093][ T477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.365601][ T4268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.373525][ T4268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.381172][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.405441][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.486018][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.493953][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.541954][ T1278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.557746][ T1278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.581125][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.612336][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.641893][ T4306] overlayfs: missing 'lowerdir' [ 51.662939][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.691219][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.712968][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.266772][ T4355] netlink: 'syz.1.31': attribute type 1 has an invalid length. [ 52.530614][ T26] audit: type=1400 audit(1771430871.409:2): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=4375 comm="syz.1.41" [ 52.575624][ T3520] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 52.895545][ T4235] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 52.994909][ T3520] usb 1-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e [ 53.025277][ T3520] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.058930][ T4293] Bluetooth: hci1: command 0x0419 tx timeout [ 53.066770][ T4293] Bluetooth: hci3: command 0x0419 tx timeout [ 53.139506][ T3520] pwc: Logitech/Cisco VT Camera webcam detected. [ 53.155919][ T4293] Bluetooth: hci4: command 0x0419 tx timeout [ 53.169933][ T4293] Bluetooth: hci2: command 0x0419 tx timeout [ 53.177421][ T4235] usb 4-1: Using ep0 maxpacket: 8 [ 53.197646][ T4293] Bluetooth: hci0: command 0x0419 tx timeout [ 53.304979][ T4235] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 53.344752][ T3520] pwc: Failed to set LED on/off time (-71) [ 53.359677][ T4235] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.369055][ T3520] pwc: send_video_command error -71 [ 53.383228][ T3520] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 53.403553][ T4235] usb 4-1: config 0 descriptor?? [ 53.418019][ T3520] Philips webcam: probe of 1-1:127.0 failed with error -71 [ 53.433095][ T3520] usb 1-1: USB disconnect, device number 2 [ 53.571093][ T4442] device wireguard0 entered promiscuous mode [ 53.729487][ T4235] usb 4-1: string descriptor 0 read error: -71 [ 53.739979][ T4235] usb 4-1: Found UVC 0.00 device (2833:0201) [ 53.771059][ T4235] usb 4-1: No valid video chain found. [ 53.804730][ T4235] usb 4-1: USB disconnect, device number 2 [ 53.879824][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.940066][ T4463] syz.2.83 (4463) used greatest stack depth: 20528 bytes left [ 54.181031][ T4480] capability: warning: `syz.4.91' uses deprecated v2 capabilities in a way that may be insecure [ 54.362743][ T4495] netlink: 'syz.3.98': attribute type 3 has an invalid length. [ 54.388360][ T4495] netlink: 12 bytes leftover after parsing attributes in process `syz.3.98'. [ 54.461012][ T4497] loop0: detected capacity change from 0 to 512 [ 54.526426][ T4499] netlink: 72 bytes leftover after parsing attributes in process `syz.3.100'. [ 54.546771][ T4499] netlink: 12 bytes leftover after parsing attributes in process `syz.3.100'. [ 54.573120][ T4499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.100'. [ 54.596778][ T4499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.100'. [ 54.611566][ T4505] netlink: 'syz.2.103': attribute type 11 has an invalid length. [ 54.717488][ T4497] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 54.744192][ T4497] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 54.761711][ T4497] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.99: Failed to acquire dquot type 1 [ 54.780527][ T4497] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 54.791046][ T4497] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 54.802590][ T4497] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.99: Failed to acquire dquot type 1 [ 54.828752][ T4497] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.99: bg 0: block 248: padding at end of block bitmap is not set [ 54.853426][ T4497] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 54.878599][ T4497] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 54.915120][ T4497] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 54.953373][ T4497] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.99: Failed to acquire dquot type 1 [ 54.993438][ T4497] EXT4-fs (loop0): 1 orphan inode deleted [ 55.024887][ T4497] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 55.067979][ T4534] loop2: detected capacity change from 0 to 256 [ 55.082418][ T4497] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.103541][ T4534] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 55.492366][ T4560] netlink: 'syz.1.130': attribute type 3 has an invalid length. [ 55.524702][ T4560] netlink: 132 bytes leftover after parsing attributes in process `syz.1.130'. [ 55.816472][ T4591] netlink: 'syz.1.144': attribute type 10 has an invalid length. [ 55.876094][ T4591] netlink: 156 bytes leftover after parsing attributes in process `syz.1.144'. [ 55.921158][ T4594] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 55.945519][ T4600] netlink: 'syz.2.149': attribute type 1 has an invalid length. [ 55.998927][ T4598] netlink: 192 bytes leftover after parsing attributes in process `syz.4.148'. [ 56.054210][ T4605] loop2: detected capacity change from 0 to 256 [ 56.064692][ T4598] netlink: 192 bytes leftover after parsing attributes in process `syz.4.148'. [ 56.073843][ T4598] netlink: 192 bytes leftover after parsing attributes in process `syz.4.148'. [ 56.257784][ T4605] FAT-fs (loop2): Directory bread(block 64) failed [ 56.264365][ T4605] FAT-fs (loop2): Directory bread(block 65) failed [ 56.274838][ T4605] FAT-fs (loop2): Directory bread(block 66) failed [ 56.283889][ T4605] FAT-fs (loop2): Directory bread(block 67) failed [ 56.313887][ T4605] FAT-fs (loop2): Directory bread(block 68) failed [ 56.333436][ T4624] loop4: detected capacity change from 0 to 128 [ 56.334454][ T4605] FAT-fs (loop2): Directory bread(block 69) failed [ 56.362314][ T4605] FAT-fs (loop2): Directory bread(block 70) failed [ 56.377193][ T4605] FAT-fs (loop2): Directory bread(block 71) failed [ 56.401553][ T4605] FAT-fs (loop2): Directory bread(block 72) failed [ 56.415639][ T4605] FAT-fs (loop2): Directory bread(block 73) failed [ 56.502977][ T4634] No such timeout policy "syz1" [ 56.532077][ T26] audit: type=1800 audit(1771430875.409:3): pid=4624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.159" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 56.623363][ T4638] netlink: 'syz.1.167': attribute type 3 has an invalid length. [ 56.711486][ C0] vkms_vblank_simulate: vblank timer overrun [ 57.247139][ T4672] loop4: detected capacity change from 0 to 2048 [ 57.256761][ T4676] netlink: 'syz.3.186': attribute type 1 has an invalid length. [ 57.303004][ T4676] netlink: 'syz.3.186': attribute type 2 has an invalid length. [ 57.317417][ T4672] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 57.414651][ T7] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 57.657740][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 57.696453][ T4695] comedi comedi0: dac02: I/O port conflict (0x3,8) [ 57.779190][ T4700] loop0: detected capacity change from 0 to 2048 [ 57.815595][ T7] usb 2-1: unable to get BOS descriptor or descriptor too short [ 57.870123][ T4700] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 57.918409][ T7] usb 2-1: config 3 has an invalid interface number: 224 but max is 0 [ 57.945916][ T7] usb 2-1: config 3 has no interface number 0 [ 57.973377][ T7] usb 2-1: config 3 interface 224 altsetting 9 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 58.013212][ T7] usb 2-1: config 3 interface 224 has no altsetting 0 [ 58.206957][ T7] usb 2-1: New USB device found, idVendor=1199, idProduct=9055, bcdDevice=35.1f [ 58.243094][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.264730][ T7] usb 2-1: Product: syz [ 58.268963][ T7] usb 2-1: Manufacturer: syz [ 58.273563][ T7] usb 2-1: SerialNumber: syz [ 58.290451][ T4719] loop0: detected capacity change from 0 to 8192 [ 58.379299][ T4719] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 58.440485][ T4731] loop4: detected capacity change from 0 to 4096 [ 58.449124][ T4719] REISERFS (device loop0): using ordered data mode [ 58.457424][ T4719] reiserfs: using flush barriers [ 58.471732][ T4719] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 58.489304][ T4742] loop3: detected capacity change from 0 to 256 [ 58.510916][ T4719] REISERFS (device loop0): checking transaction log (loop0) [ 58.571250][ T4731] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 58.615687][ T4719] REISERFS (device loop0): Using r5 hash to sort names [ 58.625546][ T7] rndis_host 2-1:3.224: invalid descriptor buffer length [ 58.632614][ T7] usb 2-1: bad CDC descriptors [ 58.639126][ T4719] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 58.682916][ T7] usb 2-1: USB disconnect, device number 2 [ 58.751360][ T4719] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 58.782391][ T4747] loop2: detected capacity change from 0 to 764 [ 58.811716][ T4268] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 58.835237][ T4186] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 58.841745][ T4186] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 58.866479][ T4747] rock: directory entry would overflow storage [ 58.901684][ T4747] rock: sig=0x4654, size=5, remaining=4 [ 58.904797][ T4186] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 58.912804][ T4747] overlayfs: option "workdir=./file1\" is useless in a non-upper mount, ignore [ 58.939232][ T144] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 58.948764][ T4186] ntfs3: loop4: ntfs_evict_inode r=3 failed, -22. [ 58.952687][ T4747] overlayfs: missing 'lowerdir' [ 59.738221][ T4814] netlink: 'syz.0.252': attribute type 12 has an invalid length. [ 59.780219][ T4817] xt_bpf: check failed: parse error [ 59.846276][ T4823] set_capacity_and_notify: 1 callbacks suppressed [ 59.846291][ T4823] loop0: detected capacity change from 0 to 64 [ 59.962316][ T4825] device wlan0 entered promiscuous mode [ 60.098258][ T4833] __nla_validate_parse: 25 callbacks suppressed [ 60.098274][ T4833] netlink: 28 bytes leftover after parsing attributes in process `syz.3.262'. [ 60.104739][ T4825] syz.1.257 (4825) used greatest stack depth: 20304 bytes left [ 60.131172][ T4790] loop4: detected capacity change from 0 to 32768 [ 60.146616][ T4833] netlink: 28 bytes leftover after parsing attributes in process `syz.3.262'. [ 60.218197][ T4842] (unnamed net_device) (uninitialized): peer notification delay (1025) is not a multiple of miimon (12650), value rounded to 0 ms [ 60.242554][ T4840] xt_l2tp: wrong L2TP version: 0 [ 60.249397][ T4790] [ 60.249397][ T4790] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 60.249397][ T4790] [ 60.284097][ T4842] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 60.361831][ T4848] loop0: detected capacity change from 0 to 1024 [ 60.400179][ T4186] [ 60.400179][ T4186] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 60.400179][ T4186] [ 60.472227][ T4186] [ 60.472227][ T4186] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 60.472227][ T4186] [ 60.516409][ T4268] hfsplus: b-tree write err: -5, ino 4 [ 60.774687][ T3520] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 60.858940][ T4869] loop1: detected capacity change from 0 to 16 [ 60.962738][ T4869] erofs: (device loop1): mounted with root inode @ nid 36. [ 61.019952][ T4869] erofs: (device loop1): z_erofs_readpage: failed to read, err [-95] [ 61.101547][ T4875] loop4: detected capacity change from 0 to 256 [ 61.174874][ T3520] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 61.201594][ T3520] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.219312][ T3520] usb 3-1: config 0 descriptor?? [ 61.300343][ T4883] netlink: 48 bytes leftover after parsing attributes in process `syz.0.285'. [ 61.689061][ T4913] loop0: detected capacity change from 0 to 256 [ 61.715245][ T4913] exfat: Deprecated parameter 'utf8' [ 61.720714][ T4913] exfat: Deprecated parameter 'namecase' [ 61.744806][ T3520] hackrf 3-1:0.0: usb_control_msg() failed -71 request 0f [ 61.752018][ T3520] hackrf 3-1:0.0: Could not detect board [ 61.758058][ T3520] hackrf: probe of 3-1:0.0 failed with error -71 [ 61.764195][ T4916] overlayfs: unrecognized mount option "\" or missing value [ 61.771088][ T3520] usb 3-1: USB disconnect, device number 2 [ 61.800401][ T4913] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 61.909893][ T4927] netlink: 92 bytes leftover after parsing attributes in process `syz.3.307'. [ 62.388219][ T4958] loop0: detected capacity change from 0 to 4096 [ 62.470706][ T4970] netlink: 2 bytes leftover after parsing attributes in process `syz.2.327'. [ 62.479670][ T4958] ntfs3: loop0: ino=3, Correct links count -> 2. [ 62.507983][ T4972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.328'. [ 62.524753][ T21] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 62.833365][ T4988] loop2: detected capacity change from 0 to 736 [ 62.968792][ T21] usb 2-1: config 252 has an invalid interface number: 107 but max is 0 [ 62.989339][ T21] usb 2-1: config 252 has no interface number 0 [ 63.014708][ T21] usb 2-1: config 252 interface 107 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 63.053938][ T21] usb 2-1: config 252 interface 107 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 63.157740][ T5000] netlink: 'syz.0.343': attribute type 30 has an invalid length. [ 63.264293][ T5008] xt_CT: You must specify a L4 protocol and not use inversions on it [ 63.296433][ T21] usb 2-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=d7.67 [ 63.314615][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.353304][ T21] usb 2-1: Product: syz [ 63.363500][ T21] usb 2-1: Manufacturer: syz [ 63.369390][ T21] usb 2-1: SerialNumber: syz [ 63.469822][ T4981] loop3: detected capacity change from 0 to 32768 [ 63.554394][ T4981] [ 63.554394][ T4981] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 63.554394][ T4981] [ 63.655191][ T21] usb 2-1: USB disconnect, device number 3 [ 63.697268][ T1278] read_mapping_page failed! [ 63.702168][ T1278] ERROR: (device loop3): txCommit: [ 63.702168][ T1278] [ 63.749639][ T1278] jfs_write_inode: jfs_commit_inode failed! [ 63.759930][ T4191] [ 63.759930][ T4191] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 63.759930][ T4191] [ 63.784891][ T4191] [ 63.784891][ T4191] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 63.784891][ T4191] [ 63.870469][ T5042] misc userio: The device must be registered before sending interrupts [ 64.034874][ T5053] usb usb8: usbfs: process 5053 (syz.0.368) did not claim interface 0 before use [ 64.381119][ T5078] netlink: 'syz.3.380': attribute type 3 has an invalid length. [ 64.427857][ T5081] loop4: detected capacity change from 0 to 512 [ 64.453092][ T5083] device geneve2 entered promiscuous mode [ 64.496736][ T5081] ======================================================= [ 64.496736][ T5081] WARNING: The mand mount option has been deprecated and [ 64.496736][ T5081] and is ignored by this kernel. Remove the mand [ 64.496736][ T5081] option from the mount to silence this warning. [ 64.496736][ T5081] ======================================================= [ 64.499571][ T26] audit: type=1400 audit(1771430883.379:4): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=5085 comm="syz.1.386" [ 64.531845][ C1] vkms_vblank_simulate: vblank timer overrun [ 64.558973][ T13] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 64.586882][ T5081] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 64.612493][ T5081] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 64.669333][ T5081] EXT4-fs (loop4): orphan cleanup on readonly fs [ 64.681986][ T5081] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.382: bad orphan inode 267 [ 64.736026][ T5081] EXT4-fs (loop4): Remounting filesystem read-only [ 64.742666][ T5081] EXT4-fs (loop4): mounted filesystem without journal. Opts: resuid=0x0000000000000000,noblock_validity,discard,errors=remount-ro,inode_readahead_blks=0x0000000000080000. Quota mode: none. [ 64.801521][ T5081] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.382: dx entry: limit 0 != root limit 125 [ 64.857779][ T5101] loop1: detected capacity change from 0 to 512 [ 64.872947][ T5081] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.382: Corrupt directory, running e2fsck is recommended [ 64.924903][ T5104] delete_channel: no stack [ 64.954070][ T5107] netlink: 'syz.2.397': attribute type 1 has an invalid length. [ 64.976277][ T5101] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 65.004744][ T13] usb 1-1: unable to get BOS descriptor or descriptor too short [ 65.054990][ T13] usb 1-1: not running at top speed; connect to a high speed hub [ 65.079668][ T5101] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 65.139177][ T13] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 65.161001][ T5101] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.392: bg 0: block 104: invalid block bitmap [ 65.238887][ T5101] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 65.278281][ T5101] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.392: invalid indirect mapped block 1 (level 1) [ 65.344745][ T13] usb 1-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 65.360674][ T5101] EXT4-fs (loop1): 1 truncate cleaned up [ 65.368310][ T5101] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 65.370307][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.425368][ T13] usb 1-1: Product: syz [ 65.429657][ T13] usb 1-1: Manufacturer: syz [ 65.444631][ T13] usb 1-1: SerialNumber: syz [ 65.749958][ T13] vmk80xx 1-1:8.0: driver 'vmk80xx' failed to auto-configure device. [ 65.824013][ T5146] loop4: detected capacity change from 0 to 64 [ 65.832743][ T13] usb 1-1: USB disconnect, device number 3 [ 66.028159][ T5158] netlink: 20 bytes leftover after parsing attributes in process `syz.1.419'. [ 66.136235][ T4294] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 66.232975][ T5170] loop2: detected capacity change from 0 to 1024 [ 66.346847][ T5170] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 66.359334][ T5183] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 66.371916][ T5170] EXT4-fs (loop2): orphan cleanup on readonly fs [ 66.385040][ T4294] usb 4-1: Using ep0 maxpacket: 8 [ 66.392099][ T5170] EXT4-fs error (device loop2): __ext4_get_inode_loc:4327: comm syz.2.425: Invalid inode table block 0 in block_group 0 [ 66.413609][ T5170] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 66.429729][ T5170] EXT4-fs error (device loop2): ext4_quota_write:6646: inode #3: comm syz.2.425: mark_inode_dirty error [ 66.442255][ T5170] Quota error (device loop2): write_blk: dquota write failed [ 66.450543][ T5170] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 66.460841][ T5170] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.425: Failed to acquire dquot type 0 [ 66.478961][ T5170] EXT4-fs error (device loop2): __ext4_get_inode_loc:4327: comm syz.2.425: Invalid inode table block 0 in block_group 0 [ 66.500824][ T5170] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 66.504886][ T4294] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.525322][ T5170] EXT4-fs error (device loop2): ext4_ext_truncate:4456: inode #15: comm syz.2.425: mark_inode_dirty error [ 66.544782][ T5189] loop1: detected capacity change from 0 to 1024 [ 66.547460][ T5170] EXT4-fs error (device loop2): __ext4_get_inode_loc:4327: comm syz.2.425: Invalid inode table block 0 in block_group 0 [ 66.565801][ T4294] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 66.580478][ T4294] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 66.599891][ T5195] xt_l2tp: wrong L2TP version: 0 [ 66.607351][ T5170] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 66.641085][ T5170] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 66.670962][ T5170] EXT4-fs error (device loop2): __ext4_get_inode_loc:4327: comm syz.2.425: Invalid inode table block 0 in block_group 0 [ 66.685987][ T5189] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 66.708633][ T5170] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 66.759847][ T5170] EXT4-fs error (device loop2): ext4_truncate:4279: inode #15: comm syz.2.425: mark_inode_dirty error [ 66.774814][ T5170] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 66.794790][ T4294] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 66.805562][ T4294] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.817428][ T4294] usb 4-1: Product: syz [ 66.821811][ T4294] usb 4-1: Manufacturer: syz [ 66.826478][ T4294] usb 4-1: SerialNumber: syz [ 66.844245][ T5170] EXT4-fs (loop2): 1 truncate cleaned up [ 66.850680][ T5170] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 66.855239][ T5206] netlink: 28 bytes leftover after parsing attributes in process `syz.4.443'. [ 66.865504][ T4294] cdc_ncm 4-1:1.0: NCM or ECM functional descriptors missing [ 66.878506][ T4294] cdc_ncm 4-1:1.0: bind() failure [ 66.898547][ T5206] netlink: 28 bytes leftover after parsing attributes in process `syz.4.443'. [ 67.058873][ T5216] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 67.080293][ T5209] Cannot find add_set index 0 as target [ 67.104986][ T4294] cdc_mbim 4-1:1.1: CDC Union missing and no IAD found [ 67.114842][ T4294] cdc_mbim 4-1:1.1: bind() failure [ 67.366017][ T4235] usb 4-1: USB disconnect, device number 3 [ 67.847966][ T5265] loop1: detected capacity change from 0 to 128 [ 67.893059][ T5265] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 67.916547][ T5265] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 68.047603][ T5276] loop4: detected capacity change from 0 to 1024 [ 68.224816][ T5289] netlink: 244 bytes leftover after parsing attributes in process `syz.3.481'. [ 68.389679][ T5302] loop0: detected capacity change from 0 to 256 [ 68.491225][ T5310] netlink: 'syz.2.491': attribute type 10 has an invalid length. [ 68.524013][ T5310] netlink: 156 bytes leftover after parsing attributes in process `syz.2.491'. [ 68.580955][ T5316] CIFS: VFS: Malformed UNC in devname [ 68.784005][ T5338] loop4: detected capacity change from 0 to 512 [ 68.869144][ T5338] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 68.920673][ T5338] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 68.970384][ T5338] System zones: 0-1, 15-15, 18-18, 34-34 [ 68.980732][ T5338] EXT4-fs (loop4): orphan cleanup on readonly fs [ 68.992835][ T5338] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 69.002996][ T5338] EXT4-fs warning (device loop4): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 69.023005][ T5338] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 69.038230][ T5338] EXT4-fs (loop4): 1 truncate cleaned up [ 69.044191][ T5338] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,,errors=continue. Quota mode: writeback. [ 69.084760][ T5338] fscrypt (loop4, inode 16): Error -61 getting encryption context [ 69.207781][ T5375] loop2: detected capacity change from 0 to 22 [ 69.246388][ T5367] loop3: detected capacity change from 0 to 4096 [ 69.262843][ T5375] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 69.302555][ T5375] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 69.347128][ T5367] ntfs: volume version 3.1. [ 69.370698][ T5367] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 69.399237][ T5367] ntfs: (device loop3): load_and_init_quota(): Failed to find inode number for $Quota. [ 69.406678][ T5387] device gtp0 entered promiscuous mode [ 69.416226][ T5367] ntfs: (device loop3): load_system_files(): Failed to load $Quota. Mounting read-only. Run chkdsk. [ 69.432455][ T5367] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 69.464277][ T26] audit: type=1326 audit(1771430888.339:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5391 comm="syz.1.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d728b629 code=0x7ffc0000 [ 69.479473][ T5367] ntfs: (device loop3): load_and_init_usnjrnl(): Failed to find inode number for $UsnJrnl. [ 69.544493][ T5367] ntfs: (device loop3): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 69.573324][ T26] audit: type=1326 audit(1771430888.409:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5391 comm="syz.1.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f74d728b629 code=0x7ffc0000 [ 69.685633][ T26] audit: type=1326 audit(1771430888.409:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5391 comm="syz.1.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f74d728b629 code=0x7ffc0000 [ 69.938461][ T5430] set_capacity_and_notify: 1 callbacks suppressed [ 69.938476][ T5430] loop4: detected capacity change from 0 to 16 [ 70.002800][ T5430] erofs: (device loop4): mounted with root inode @ nid 36. [ 70.253583][ T5450] syz.2.560 uses obsolete (PF_INET,SOCK_PACKET) [ 70.996952][ T5436] loop3: detected capacity change from 0 to 32768 [ 71.152458][ T5436] XFS (loop3): Mounting V5 Filesystem [ 71.161336][ T5442] loop1: detected capacity change from 0 to 32768 [ 71.289734][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.296620][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.503161][ T5442] XFS (loop1): Mounting V5 Filesystem [ 71.538091][ T5514] comedi comedi0: dac02: I/O port conflict (0x3,8) [ 71.554522][ T5436] XFS (loop3): Ending clean mount [ 71.653129][ T5436] XFS (loop3): Quotacheck needed: Please wait. [ 71.760475][ T5436] XFS (loop3): Quotacheck: Done. [ 71.891191][ T5442] XFS (loop1): Ending clean mount [ 72.004289][ T5532] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 72.018778][ T4189] XFS (loop1): Unmounting Filesystem [ 72.049070][ T4191] XFS (loop3): Unmounting Filesystem [ 72.111494][ T5532] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 72.531879][ T5550] loop0: detected capacity change from 0 to 256 [ 72.672496][ T5550] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 72.894166][ T5559] loop1: detected capacity change from 0 to 764 [ 73.043758][ T5559] rock: directory entry would overflow storage [ 73.053213][ T5559] rock: sig=0x4654, size=5, remaining=4 [ 73.077000][ T5573] xt_bpf: check failed: parse error [ 73.126249][ T5559] overlayfs: option "workdir=./file1\" is useless in a non-upper mount, ignore [ 73.194635][ T5559] overlayfs: missing 'lowerdir' [ 73.226058][ T5581] netlink: 48 bytes leftover after parsing attributes in process `syz.3.623'. [ 73.320585][ T5585] netlink: 28 bytes leftover after parsing attributes in process `syz.2.612'. [ 73.335954][ T5585] netlink: 28 bytes leftover after parsing attributes in process `syz.2.612'. [ 73.402138][ T5590] loop3: detected capacity change from 0 to 512 [ 73.478554][ T5590] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 73.533181][ T5599] program syz.1.622 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 73.552644][ T5596] loop4: detected capacity change from 0 to 1024 [ 73.584914][ T5590] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.616: bg 0: block 104: invalid block bitmap [ 73.674154][ T5590] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 73.767006][ T5590] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.616: invalid indirect mapped block 1 (level 1) [ 73.777930][ T1278] hfsplus: b-tree write err: -5, ino 4 [ 73.793823][ T5618] netlink: 48 bytes leftover after parsing attributes in process `syz.1.631'. [ 73.811379][ T5615] device wlan0 entered promiscuous mode [ 73.863002][ T5590] EXT4-fs (loop3): 1 truncate cleaned up [ 73.868980][ T5590] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 73.925820][ T5623] loop2: detected capacity change from 0 to 16 [ 73.994713][ T5623] erofs: (device loop2): mounted with root inode @ nid 36. [ 74.046451][ T5623] erofs: (device loop2): z_erofs_readpage: failed to read, err [-95] [ 74.394160][ T5641] loop2: detected capacity change from 0 to 256 [ 74.656575][ T5636] loop3: detected capacity change from 0 to 8192 [ 74.701917][ T5636] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 74.748662][ T5636] REISERFS (device loop3): using ordered data mode [ 74.793108][ T5636] reiserfs: using flush barriers [ 74.853910][ T5636] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 74.965382][ T5636] REISERFS (device loop3): checking transaction log (loop3) [ 74.983581][ T5662] loop0: detected capacity change from 0 to 4096 [ 75.007820][ T5636] REISERFS (device loop3): Using r5 hash to sort names [ 75.056072][ T5672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.659'. [ 75.057801][ T5636] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 75.087832][ T5662] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 75.264610][ T5636] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 75.354235][ T477] ntfs3: loop0: ino=1b, Internal error [ 75.395555][ T477] ntfs3: loop0: ntfs3_write_inode r=1b failed, -22. [ 75.410259][ T5686] netlink: 28 bytes leftover after parsing attributes in process `syz.1.665'. [ 75.426923][ T477] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 75.700459][ T5700] netlink: 2 bytes leftover after parsing attributes in process `syz.1.671'. [ 75.847352][ T5704] device bridge1 entered promiscuous mode [ 76.194622][ T3520] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 76.298966][ T150] block nbd2: Attempted send on invalid socket [ 76.306780][ T150] blk_update_request: I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 76.336266][ T5735] vxfs: unable to read disk superblock at 1 [ 76.343116][ T263] block nbd2: Attempted send on invalid socket [ 76.349444][ T263] blk_update_request: I/O error, dev nbd2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 76.374764][ T5735] vxfs: unable to read disk superblock at 8 [ 76.408357][ T23] cfg80211: failed to load regulatory.db [ 76.408862][ T5735] vxfs: can't find superblock. [ 76.424693][ T5741] netlink: 'syz.0.690': attribute type 32 has an invalid length. [ 76.494375][ T5745] device batadv0 entered promiscuous mode [ 76.565935][ T5751] netlink: 40 bytes leftover after parsing attributes in process `syz.0.697'. [ 76.594997][ T5751] netlink: 40 bytes leftover after parsing attributes in process `syz.0.697'. [ 76.624836][ T3520] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 76.633907][ T3520] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.692006][ T3520] usb 2-1: config 0 descriptor?? [ 76.751187][ T5761] loop2: detected capacity change from 0 to 256 [ 76.767259][ T3520] cp210x 2-1:0.0: cp210x converter detected [ 76.851186][ T5761] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001206f, chksum : 0x2f6ca0a4, utbl_chksum : 0xe619d30d) [ 76.971491][ T5770] ieee802154 phy0 wpan0: encryption failed: -22 [ 77.131484][ T5779] loop4: detected capacity change from 0 to 256 [ 77.211090][ T3520] cp210x 2-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 77.230070][ T3520] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 77.247804][ T5787] loop0: detected capacity change from 0 to 1024 [ 77.258884][ T3520] usb 2-1: cp210x converter now attached to ttyUSB0 [ 77.302225][ T3520] usb 2-1: USB disconnect, device number 4 [ 77.344419][ T3520] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 77.379330][ T3520] cp210x 2-1:0.0: device disconnected [ 77.387624][ T5793] usb usb1: usbfs: process 5793 (syz.3.718) did not claim interface 0 before use [ 77.513917][ T5799] loop3: detected capacity change from 0 to 512 [ 77.529699][ T5801] netlink: 20 bytes leftover after parsing attributes in process `syz.4.721'. [ 77.677158][ T5799] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 77.677266][ T5799] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.790441][ T5799] EXT4-fs error (device loop3): ext4_get_first_dir_block:3597: inode #12: comm syz.3.722: Directory hole found for htree leaf block 0 [ 77.929974][ T5832] netlink: 'syz.2.736': attribute type 10 has an invalid length. [ 78.031351][ T5838] device geneve2 entered promiscuous mode [ 78.272544][ T5858] x_tables: duplicate entry at hook 3 [ 78.403931][ T5867] __nla_validate_parse: 1 callbacks suppressed [ 78.403946][ T5867] netlink: 168 bytes leftover after parsing attributes in process `syz.1.752'. [ 78.410177][ T13] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 78.698512][ T5877] loop0: detected capacity change from 0 to 512 [ 78.704635][ T13] usb 3-1: Using ep0 maxpacket: 32 [ 78.824884][ T13] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.837729][ T5877] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 78.853405][ T5877] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 78.872608][ T13] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 78.890540][ T13] usb 3-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 78.911503][ T5877] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 78.920932][ T13] usb 3-1: config 0 interface 0 has no altsetting 1 [ 78.928650][ T5877] System zones: 1-12 [ 78.945738][ T5877] EXT4-fs error (device loop0): ext4_iget_extra_inode:4566: inode #15: comm syz.0.758: corrupted in-inode xattr [ 78.970055][ T5877] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.758: couldn't read orphan inode 15 (err -117) [ 78.992118][ T5877] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue. Quota mode: none. [ 79.097808][ T13] usb 3-1: New USB device found, idVendor=0582, idProduct=0033, bcdDevice=8e.57 [ 79.109471][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.136765][ T13] usb 3-1: Product: syz [ 79.145474][ T13] usb 3-1: Manufacturer: syz [ 79.152611][ T13] usb 3-1: SerialNumber: syz [ 79.182703][ T13] usb 3-1: config 0 descriptor?? [ 79.300363][ T5895] openvswitch: netlink: Actions may not be safe on all matching packets [ 79.334145][ T13] snd-usb-audio: probe of 3-1:0.0 failed with error -2 [ 79.451493][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 79.456342][ T3520] usb 3-1: USB disconnect, device number 3 [ 79.930437][ T5938] xt_l2tp: v2 sid > 0xffff: 262144 [ 80.093245][ T5952] cifs: Unknown parameter 'no'aN[Gzob,er;%j [ 80.093245][ T5952] z,@qJ#"h/.W1ȱnNC"C׈E)8+' [ 80.193635][ T5959] loop0: detected capacity change from 0 to 1024 [ 80.567539][ T5992] loop1: detected capacity change from 0 to 512 [ 80.588702][ T5996] loop3: detected capacity change from 0 to 64 [ 80.660520][ T5992] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 80.743075][ T5992] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1048578 out of range 0-7 [ 80.838945][ T5992] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 80.873890][ T6018] Cannot find del_set index 286 as target [ 80.892523][ T5992] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.811: Failed to acquire dquot type 1 [ 80.974340][ T5992] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #16: comm syz.1.811: corrupted inode contents [ 81.097151][ T5992] EXT4-fs error (device loop1): ext4_dirty_inode:6058: inode #16: comm syz.1.811: mark_inode_dirty error [ 81.180999][ T5992] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #16: comm syz.1.811: corrupted inode contents [ 81.219984][ T6036] netlink: 256 bytes leftover after parsing attributes in process `syz.3.833'. [ 81.259703][ T5992] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.811: mark_inode_dirty error [ 81.283067][ T6036] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 81.291449][ T5992] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #16: comm syz.1.811: corrupted inode contents [ 81.314077][ T5992] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 81.374842][ T5992] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #16: comm syz.1.811: corrupted inode contents [ 81.389714][ T5992] EXT4-fs error (device loop1): ext4_truncate:4279: inode #16: comm syz.1.811: mark_inode_dirty error [ 81.403033][ T6043] usb usb8: check_ctrlrecip: process 6043 (syz.3.838) requesting ep 01 but needs 81 [ 81.403369][ T5992] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 81.427246][ T5992] EXT4-fs (loop1): 1 truncate cleaned up [ 81.463972][ T6043] usb usb8: usbfs: process 6043 (syz.3.838) did not claim interface 0 before use [ 81.470511][ T5992] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 81.544646][ T5992] ext4 filesystem being mounted at /154/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.643922][ T5992] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1048578 out of range 0-7 [ 81.689490][ T5992] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 81.714659][ T5992] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.811: Failed to acquire dquot type 1 [ 81.808431][ T6070] loop0: detected capacity change from 0 to 128 [ 81.886544][ T6070] ufs: You didn't specify the type of your ufs filesystem [ 81.886544][ T6070] [ 81.886544][ T6070] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 81.886544][ T6070] [ 81.886544][ T6070] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 81.900711][ T6075] capability: warning: `syz.3.853' uses 32-bit capabilities (legacy support in use) [ 81.918175][ C1] vkms_vblank_simulate: vblank timer overrun [ 81.992811][ T6070] ufs: ufstype=old is supported read-only [ 82.032758][ T6070] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2 [ 82.227518][ T6094] loop0: detected capacity change from 0 to 4096 [ 82.280722][ T6094] EXT4-fs (loop0): Mount option "nouser_xattr" will be removed by 3.5 [ 82.280722][ T6094] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 82.280722][ T6094] [ 82.318828][ T6104] loop3: detected capacity change from 0 to 8 [ 82.376102][ T6109] loop1: detected capacity change from 0 to 64 [ 82.391574][ T6094] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 82.391574][ T6094] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 82.391574][ T6094] [ 82.411904][ T6104] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 82.422174][ T6094] EXT4-fs (loop0): Ignoring removed oldalloc option [ 82.485623][ T6094] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,commit=0x0000000000000000,nouser_xattr,noacl,nombcache,nodelalloc,minixdf,oldalloc,,errors=continue. Quota mode: writeback. [ 82.513970][ T6112] loop4: detected capacity change from 0 to 8192 [ 82.514882][ T6104] process 'syz.3.866' launched './file2' with NULL argv: empty string added [ 82.543672][ T4177] udevd[4177]: incorrect cramfs checksum on /dev/loop3 [ 82.546488][ T6104] cramfs: Error -3 while decompressing! [ 82.571331][ T6104] cramfs: ffffffff964010a8(26)->ffff888056648000(4096) [ 82.578727][ T6104] cramfs: Error -3 while decompressing! [ 82.584474][ T6104] cramfs: ffffffff964010c2(26)->ffff888056649000(4096) [ 82.599971][ T6104] cramfs: Error -3 while decompressing! [ 82.608199][ T6104] cramfs: ffffffff964010dc(16)->ffff88805664a000(4096) [ 82.623294][ T6104] cramfs: Error -3 while decompressing! [ 82.645507][ T6112] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 82.656430][ T6104] cramfs: ffffffff964010a8(26)->ffff888056648000(4096) [ 82.671436][ T6112] REISERFS (device loop4): using ordered data mode [ 82.732407][ T4178] udevd[4178]: incorrect cramfs checksum on /dev/loop3 [ 82.743995][ T6112] reiserfs: using flush barriers [ 82.758152][ T4178] udevd[4178]: incorrect cramfs checksum on /dev/loop3 [ 82.794947][ T7] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 82.798073][ T6112] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 82.891525][ T6112] REISERFS (device loop4): checking transaction log (loop4) [ 82.946481][ T6128] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 82.951357][ T6112] REISERFS (device loop4): Using r5 hash to sort names [ 82.995558][ T6112] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 83.034709][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 83.077123][ T6112] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 83.155995][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 83.215795][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 83.254611][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 83.384705][ T4235] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 83.445047][ T7] usb 3-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=f6.82 [ 83.454393][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.488832][ T7] usb 3-1: Product: syz [ 83.493345][ T7] usb 3-1: Manufacturer: syz [ 83.547312][ T7] usb 3-1: SerialNumber: syz [ 83.569622][ T7] usb 3-1: config 0 descriptor?? [ 83.669498][ T6164] netlink: 'syz.4.894': attribute type 1 has an invalid length. [ 83.684470][ T6164] netlink: 'syz.4.894': attribute type 3 has an invalid length. [ 83.719703][ T6164] netlink: 132 bytes leftover after parsing attributes in process `syz.4.894'. [ 83.794810][ T4235] usb 4-1: config 252 has an invalid interface number: 107 but max is 0 [ 83.803235][ T4235] usb 4-1: config 252 has no interface number 0 [ 83.824152][ T4235] usb 4-1: config 252 interface 107 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 83.851750][ T7] usb 3-1: USB disconnect, device number 4 [ 83.855575][ T4235] usb 4-1: config 252 interface 107 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 83.868133][ T6176] netlink: 32 bytes leftover after parsing attributes in process `syz.4.900'. [ 83.974477][ T6184] loop4: detected capacity change from 0 to 22 [ 84.037932][ T6184] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 84.050740][ T6184] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 84.087560][ T6194] loop0: detected capacity change from 0 to 64 [ 84.096512][ T4235] usb 4-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=d7.67 [ 84.112377][ T4235] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.123929][ T4235] usb 4-1: Product: syz [ 84.129493][ T4235] usb 4-1: Manufacturer: syz [ 84.137716][ T4235] usb 4-1: SerialNumber: syz [ 84.361720][ T6206] openvswitch: netlink: Actions may not be safe on all matching packets [ 84.465948][ T3520] usb 4-1: USB disconnect, device number 4 [ 84.565826][ T6220] netlink: 'syz.1.923': attribute type 21 has an invalid length. [ 84.583506][ T6212] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 84.597767][ T6220] netlink: 'syz.1.923': attribute type 1 has an invalid length. [ 84.615055][ T6214] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 84.625716][ T6222] netlink: 11 bytes leftover after parsing attributes in process `syz.2.924'. [ 84.722066][ T6214] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 85.220336][ T6258] netlink: 24 bytes leftover after parsing attributes in process `syz.3.942'. [ 85.298564][ T6251] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 85.317422][ T6251] ext4 filesystem being mounted at /206/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.389436][ T6267] set_capacity_and_notify: 3 callbacks suppressed [ 85.389450][ T6267] loop1: detected capacity change from 0 to 4096 [ 85.410196][ T6273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.947'. [ 85.430894][ T6271] loop0: detected capacity change from 0 to 8 [ 85.480270][ T3520] kernel write not supported for file /376/net/fib_triestat (pid: 3520 comm: kworker/1:2) [ 85.530687][ T6267] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 85.595882][ T6267] ntfs: (device loop1): check_mft_mirror(): $MFTMirr location mismatch. Run chkdsk. [ 85.602729][ T6271] SQUASHFS error: Unknown inode type 0 in squashfs_iget! [ 85.630714][ T6283] loop2: detected capacity change from 0 to 256 [ 85.648536][ T6267] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 85.749523][ T6267] ntfs: volume version 3.1. [ 85.793256][ T6283] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 85.831284][ T6291] xt_TCPMSS: Only works on TCP SYN packets [ 85.858743][ T6283] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 85.866969][ T6293] netlink: 12 bytes leftover after parsing attributes in process `syz.3.958'. [ 85.916832][ T6283] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 85.951626][ T6283] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 85.998409][ T6297] netlink: 36 bytes leftover after parsing attributes in process `syz.1.960'. [ 86.021164][ T6283] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 86.051461][ T6283] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 86.124737][ T6283] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 86.162466][ T6283] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 86.170145][ T6308] netlink: 'syz.0.964': attribute type 21 has an invalid length. [ 86.203277][ T6283] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 86.222689][ T6308] netlink: 144 bytes leftover after parsing attributes in process `syz.0.964'. [ 86.232082][ T6283] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 86.265886][ T26] audit: type=1800 audit(1771430905.139:8): pid=6283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.954" name="file1" dev="loop2" ino=1048600 res=0 errno=0 [ 86.330221][ T6283] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 86.410818][ T6325] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 86.415267][ T6324] netlink: 'syz.1.973': attribute type 13 has an invalid length. [ 86.652282][ T6339] loop0: detected capacity change from 0 to 512 [ 86.736093][ T6339] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 86.750019][ T6339] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 86.759838][ T6339] System zones: 0-1, 15-15, 18-18, 34-34 [ 86.768050][ T6339] EXT4-fs (loop0): orphan cleanup on readonly fs [ 86.778021][ T6339] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 86.788137][ T6339] EXT4-fs warning (device loop0): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 86.802971][ T6339] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 86.812876][ T6339] EXT4-fs (loop0): 1 truncate cleaned up [ 86.884659][ T6339] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrjquota=,,errors=continue. Quota mode: writeback. [ 86.979478][ T6339] fscrypt (loop0, inode 16): Error -61 getting encryption context [ 87.480977][ T6329] loop2: detected capacity change from 0 to 40427 [ 87.568681][ T6329] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x1ffff [ 87.569921][ T6401] CIFS: VFS: Malformed UNC in devname [ 87.606064][ T6329] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x2 [ 87.684006][ T6329] F2FS-fs (loop2): invalid crc value [ 87.726968][ T6329] F2FS-fs (loop2): Found nat_bits in checkpoint [ 87.836622][ T6420] overlayfs: './file0' not a directory [ 87.862146][ T6422] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1018'. [ 87.910436][ T6329] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 88.007949][ T6428] device gtp0 entered promiscuous mode [ 88.060267][ T6432] loop1: detected capacity change from 0 to 16 [ 88.114767][ T6432] erofs: (device loop1): mounted with root inode @ nid 36. [ 88.336818][ T6449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1032'. [ 88.444452][ T6456] loop3: detected capacity change from 0 to 64 [ 88.547697][ T6462] netlink: 'syz.1.1038': attribute type 1 has an invalid length. [ 88.843899][ T6480] loop1: detected capacity change from 0 to 1024 [ 88.932957][ T4282] hfsplus: b-tree write err: -5, ino 4 [ 89.062602][ T6492] device gtp0 entered promiscuous mode [ 89.159211][ T6496] overlayfs: workdir and upperdir must be separate subtrees [ 89.455691][ T6509] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 89.505486][ T6513] __nla_validate_parse: 2 callbacks suppressed [ 89.505502][ T6513] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1061'. [ 89.564779][ T6513] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1061'. [ 89.859692][ T6523] loop0: detected capacity change from 0 to 2048 [ 89.970452][ T6523] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 89.999428][ T6523] NILFS (loop0): unrecognized mount option "" [ 90.007773][ T6532] loop3: detected capacity change from 0 to 1764 [ 90.031782][ T6523] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 90.265543][ T6501] XFS (loop2): Mounting V5 Filesystem [ 90.313615][ T6546] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 90.383827][ T6501] XFS (loop2): Ending clean mount [ 90.399957][ T6501] XFS (loop2): Quotacheck needed: Please wait. [ 90.539891][ T6501] XFS (loop2): Quotacheck: Done. [ 90.591616][ T6555] device bridge1 entered promiscuous mode [ 90.663871][ T4185] XFS (loop2): Unmounting Filesystem [ 92.110402][ T6635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1114'. [ 92.153452][ T6634] netdevsim netdevsim0: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 92.940771][ T6678] set_capacity_and_notify: 2 callbacks suppressed [ 92.940786][ T6678] loop0: detected capacity change from 0 to 256 [ 93.101417][ T6645] loop1: detected capacity change from 0 to 32768 [ 93.119698][ T6678] FAT-fs (loop0): Directory bread(block 64) failed [ 93.140367][ T6678] FAT-fs (loop0): Directory bread(block 65) failed [ 93.197175][ T6678] FAT-fs (loop0): Directory bread(block 66) failed [ 93.290827][ T6678] FAT-fs (loop0): Directory bread(block 67) failed [ 93.301992][ T6696] openvswitch: netlink: Actions may not be safe on all matching packets [ 93.317030][ T6678] FAT-fs (loop0): Directory bread(block 68) failed [ 93.317070][ T6678] FAT-fs (loop0): Directory bread(block 69) failed [ 93.317134][ T6678] FAT-fs (loop0): Directory bread(block 70) failed [ 93.317158][ T6678] FAT-fs (loop0): Directory bread(block 71) failed [ 93.317219][ T6678] FAT-fs (loop0): Directory bread(block 72) failed [ 93.317243][ T6678] FAT-fs (loop0): Directory bread(block 73) failed [ 93.335626][ T6645] XFS (loop1): Mounting V5 Filesystem [ 93.463663][ T6645] XFS (loop1): Ending clean mount [ 93.575013][ T6645] XFS (loop1): Quotacheck needed: Please wait. [ 93.620973][ T6708] loop3: detected capacity change from 0 to 1024 [ 93.659167][ T6645] XFS (loop1): Quotacheck: Done. [ 93.785377][ T6708] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 93.988280][ T4189] XFS (loop1): Unmounting Filesystem [ 94.013407][ T6722] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1151'. [ 94.201215][ T6731] loop3: detected capacity change from 0 to 8 [ 94.341853][ T6731] SQUASHFS error: Corrupted symlink [ 94.436015][ T6739] xt_l2tp: v2 sid > 0xffff: 262144 [ 94.702663][ T6752] loop3: detected capacity change from 0 to 1024 [ 94.773068][ T6752] hfsplus: session requires an argument [ 94.795589][ T6752] hfsplus: unable to parse mount options [ 95.161348][ T6777] loop3: detected capacity change from 0 to 8 [ 95.186970][ T6777] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 95.202763][ T6778] loop1: detected capacity change from 0 to 1764 [ 95.213854][ T6780] loop4: detected capacity change from 0 to 512 [ 95.245114][ T6777] cramfs: Error -3 while decompressing! [ 95.259244][ T6777] cramfs: ffffffff964050a8(1306)->ffff888058709000(4096) [ 95.287687][ T6777] cramfs: bad data blocksize 3221485966 [ 95.307860][ T6777] cramfs: Error -3 while decompressing! [ 95.316807][ T6778] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 95.328781][ T6747] loop2: detected capacity change from 0 to 32768 [ 95.342286][ T6777] cramfs: ffffffff964050a8(1306)->ffff888058709000(4096) [ 95.347600][ T4177] udevd[4177]: incorrect cramfs checksum on /dev/loop3 [ 95.361577][ T26] audit: type=1800 audit(1771430914.239:9): pid=6777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1179" name="file2" dev="loop3" ino=348 res=0 errno=0 [ 95.399541][ T4177] udevd[4177]: incorrect cramfs checksum on /dev/loop3 [ 95.417391][ T6780] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 95.442241][ T6780] ext4 filesystem being mounted at /268/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.501452][ T6780] EXT4-fs error (device loop4): ext4_get_first_dir_block:3597: inode #12: comm syz.4.1181: Directory hole found for htree leaf block 0 [ 95.540172][ T6788] loop3: detected capacity change from 0 to 1024 [ 95.565094][ T6747] XFS (loop2): Mounting V5 Filesystem [ 95.733568][ T6747] XFS (loop2): Ending clean mount [ 95.808163][ T6747] XFS (loop2): Quotacheck needed: Please wait. [ 95.902227][ T6747] XFS (loop2): Quotacheck: Done. [ 95.923874][ T26] audit: type=1800 audit(1771430914.799:10): pid=6806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1189" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 96.053263][ T4185] XFS (loop2): Unmounting Filesystem [ 96.514231][ T6832] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 96.586810][ T6832] REISERFS (device loop3): using ordered data mode [ 96.652154][ T6832] reiserfs: using flush barriers [ 96.717187][ T6832] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 96.796730][ T6832] REISERFS (device loop3): checking transaction log (loop3) [ 96.820970][ T6832] REISERFS (device loop3): Using r5 hash to sort names [ 96.852941][ T6832] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 96.901436][ T6832] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 97.003982][ T6827] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x35f7 [ 97.036266][ T6827] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x1ffff [ 97.121884][ T6827] F2FS-fs (loop4): invalid crc value [ 97.200531][ T6827] F2FS-fs (loop4): Found nat_bits in checkpoint [ 97.396336][ T6827] F2FS-fs (loop4): Start checkpoint disabled! [ 97.470023][ T6827] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 97.537221][ T6827] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x35f7 [ 97.565456][ T6827] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x1ffff [ 97.825085][ T6871] erofs: (device loop0): mounted with root inode @ nid 36. [ 97.840319][ T6873] erofs: (device loop3): mounted with root inode @ nid 36. [ 97.913279][ T6873] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 97.966941][ T6877] trusted_key: encrypted_key: master key parameter is missing [ 97.974845][ T6873] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 98.220487][ T6888] xt_TPROXY: Can be used only with -p tcp or -p udp [ 98.289922][ T6895] set_capacity_and_notify: 5 callbacks suppressed [ 98.289935][ T6895] loop4: detected capacity change from 0 to 8 [ 98.408805][ T6895] SQUASHFS error: Unknown inode type 0 in squashfs_iget! [ 98.767345][ T6921] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1243'. [ 99.154409][ T6938] ipt_CLUSTERIP: bad local_nodes[1] 0 [ 99.291716][ T6943] loop2: detected capacity change from 0 to 1024 [ 99.391003][ T6943] hfsplus: Filesystem is marked locked, mounting read-only. [ 99.552728][ T6943] hfsplus: filesystem is marked locked, leaving read-only. [ 100.234656][ T6993] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1277'. [ 100.409333][ T7003] loop4: detected capacity change from 0 to 8 [ 100.511092][ T7012] loop3: detected capacity change from 0 to 256 [ 100.513647][ T7008] loop2: detected capacity change from 0 to 16 [ 100.536226][ T7011] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 100.637513][ T7003] cramfs: bad data blocksize 3222268820 [ 100.645174][ T7008] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 100.682808][ T7003] cramfs: Error -3 while decompressing! [ 100.704763][ T7003] cramfs: ffffffff964050dc(16)->ffff888055f0e000(4096) [ 100.815000][ T7003] cramfs: bad data blocksize 4165569313 [ 100.820736][ T7003] cramfs: bad data blocksize 3825676623 [ 100.854716][ T7003] cramfs: bad data blocksize 4294480561 [ 100.880832][ T7003] cramfs: bad data blocksize 1076736 [ 100.908477][ T7003] cramfs: bad data blocksize 485460736 [ 100.940521][ T7003] cramfs: bad data blocksize 3808479469 [ 100.971771][ T7003] cramfs: bad data blocksize 3222268820 [ 100.992108][ T26] audit: type=1800 audit(1771430919.869:11): pid=7003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1283" name="file2" dev="loop4" ino=348 res=0 errno=0 [ 101.414356][ T7043] loop2: detected capacity change from 0 to 1024 [ 101.554687][ T4294] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 101.733141][ T7055] loop4: detected capacity change from 0 to 4096 [ 101.805748][ T4294] usb 4-1: Using ep0 maxpacket: 8 [ 101.812192][ T477] hfsplus: b-tree write err: -5, ino 4 [ 101.838288][ T7055] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 101.910006][ T7055] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 101.932269][ T4294] usb 4-1: config 7 interface 0 has no altsetting 0 [ 102.028710][ T7068] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1315'. [ 102.051610][ T7055] ntfs3: loop4: ino=21, "bus" The size of extended attributes must not exceed 64KiB [ 102.104812][ T4294] usb 4-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=58.70 [ 102.152795][ T4294] usb 4-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3 [ 102.174714][ T4294] usb 4-1: Product: syz [ 102.178917][ T4294] usb 4-1: Manufacturer: syz [ 102.219198][ T4294] usb 4-1: SerialNumber: syz [ 102.297254][ T7075] openvswitch: netlink: Actions may not be safe on all matching packets [ 102.329764][ T7078] No such timeout policy "syz1" [ 102.340623][ T7071] loop0: detected capacity change from 0 to 4096 [ 102.431524][ T7071] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 102.518292][ T7071] ntfs3: loop0: failed to convert "c46c" to euc-jp [ 102.528331][ T4294] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 102.593283][ T7088] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 102.605013][ T4294] pwc: Failed to set LED on/off time (-71) [ 102.624661][ T4294] pwc: send_video_command error -71 [ 102.630420][ T4294] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 102.734688][ T4294] Philips webcam: probe of 4-1:7.0 failed with error -71 [ 102.829995][ T4294] usb 4-1: USB disconnect, device number 5 [ 103.023630][ T7114] loop4: detected capacity change from 0 to 128 [ 103.074399][ T7114] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 103.112741][ T7104] loop1: detected capacity change from 0 to 4096 [ 103.257908][ T7104] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 103.307936][ T23] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 103.506314][ T7104] ntfs3: loop1: failed to convert "c46c" to maccenteuro [ 103.710090][ T23] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 103.722800][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.774590][ T23] usb 1-1: config 0 has no interface number 0 [ 103.796545][ T7146] xt_connbytes: Forcing CT accounting to be enabled [ 103.803306][ T23] usb 1-1: config 0 interface 1 has no altsetting 0 [ 103.831543][ T23] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 103.856947][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.895479][ T23] usb 1-1: config 0 descriptor?? [ 104.174797][ T4235] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 104.203513][ T23] usb 1-1: USB disconnect, device number 4 [ 104.434591][ T4235] usb 4-1: Using ep0 maxpacket: 16 [ 104.577658][ T4235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.595270][ T7183] netlink: 'syz.1.1370': attribute type 6 has an invalid length. [ 104.609149][ T4235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.619904][ T21] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 104.650332][ T4235] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 104.681098][ T4235] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 104.723603][ T4235] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.785949][ T4235] usb 4-1: config 0 descriptor?? [ 104.847964][ T4235] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input10 [ 104.907402][ T3546] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 104.932984][ T7197] netlink: 'syz.0.1376': attribute type 3 has an invalid length. [ 104.980155][ T3546] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 105.037414][ T3546] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 105.074710][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 105.106996][ T7203] loop4: detected capacity change from 0 to 128 [ 105.114249][ T7151] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 105.131756][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 105.164731][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 105.193028][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 105.212933][ T4177] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 105.226729][ T13] usb 4-1: USB disconnect, device number 6 [ 105.243795][ T7203] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 105.262123][ T3546] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 105.293986][ T7203] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 105.415063][ T21] usb 3-1: New USB device found, idVendor=0738, idProduct=a2c5, bcdDevice=1e.ce [ 105.434718][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.452005][ T21] usb 3-1: Product: syz [ 105.474135][ T7207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1382'. [ 105.483022][ T21] usb 3-1: Manufacturer: syz [ 105.488997][ T21] usb 3-1: SerialNumber: syz [ 105.509924][ T4235] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 105.523461][ T21] usb 3-1: config 0 descriptor?? [ 105.611297][ T21] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 105.649895][ T21] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input11 [ 105.782967][ T7205] loop1: detected capacity change from 0 to 32768 [ 105.820889][ T4256] usb 3-1: USB disconnect, device number 5 [ 105.839683][ T4256] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 105.945043][ T4235] usb 1-1: config 0 has an invalid interface number: 199 but max is 1 [ 105.953808][ T4235] usb 1-1: config 0 has no interface number 1 [ 105.992975][ T4235] usb 1-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 106.024083][ T4235] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 106.115635][ T4235] usb 1-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 106.145067][ T4235] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 106.173862][ T4235] usb 1-1: SerialNumber: syz [ 106.195766][ T4235] usb 1-1: config 0 descriptor?? [ 106.431514][ T7240] openvswitch: netlink: EtherType 0 is less than min 600 [ 106.479434][ T4235] usb 1-1: Found UVC 0.00 device (0002:0000) [ 106.498269][ T4235] usb 1-1: No valid video chain found. [ 106.539598][ T4235] usb 1-1: USB disconnect, device number 5 [ 106.568017][ T7236] loop1: detected capacity change from 0 to 4096 [ 106.623437][ T7246] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 106.638494][ T7236] ntfs: (device loop1): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 106.720345][ T7236] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 106.765557][ T7236] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 106.834690][ T7236] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 106.853915][ T7256] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 45552 - 0 [ 106.888256][ T7256] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 45552 - 0 [ 106.910036][ T7236] ntfs: volume version 3.1. [ 106.919367][ T7256] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 45552 - 0 [ 106.936800][ T7259] loop3: detected capacity change from 0 to 1764 [ 106.947073][ T7256] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 45552 - 0 [ 106.957064][ T7256] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 54792 - 0 [ 106.966367][ T7256] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 54792 - 0 [ 106.977343][ T7256] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 54792 - 0 [ 106.988727][ T7256] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 54792 - 0 [ 107.014766][ T7256] device geneve2 entered promiscuous mode [ 107.030026][ T7259] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 107.322682][ T7281] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1418'. [ 107.484748][ T7295] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1425'. [ 107.501256][ T7297] netlink: 'syz.2.1426': attribute type 12 has an invalid length. [ 107.548006][ T7297] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1426'. [ 107.653349][ T7303] loop1: detected capacity change from 0 to 24 [ 107.696217][ T7303] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 107.728793][ T7303] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 107.736825][ T21] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 107.835827][ T4256] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 107.989141][ T7287] loop3: detected capacity change from 0 to 40427 [ 108.001505][ T7313] kAFS: unable to lookup cell '' [ 108.083718][ T7287] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 108.113270][ T7287] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 108.114607][ T4256] usb 5-1: Using ep0 maxpacket: 32 [ 108.160074][ T7321] loop1: detected capacity change from 0 to 2048 [ 108.171702][ T7287] F2FS-fs (loop3): invalid crc value [ 108.199913][ T7287] F2FS-fs (loop3): Found nat_bits in checkpoint [ 108.245126][ T21] usb 1-1: unable to get BOS descriptor or descriptor too short [ 108.272644][ T7287] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 108.290555][ T7287] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 108.323491][ T4256] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.339717][ T21] usb 1-1: config 160 has an invalid interface number: 40 but max is 0 [ 108.347070][ T7321] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 108.363608][ T21] usb 1-1: config 160 has no interface number 0 [ 108.391518][ T4256] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 108.420631][ T21] usb 1-1: config 160 interface 40 has no altsetting 0 [ 108.453977][ T4256] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.472419][ T4256] usb 5-1: config 0 descriptor?? [ 108.537227][ T4256] gspca_main: spca501-2.14.0 probing 0000:0000 [ 108.645044][ T21] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=2a.c1 [ 108.662889][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.697784][ T21] usb 1-1: Product: syz [ 108.709603][ T21] usb 1-1: Manufacturer: syz [ 108.724483][ T21] usb 1-1: SerialNumber: syz [ 108.742373][ T7350] loop1: detected capacity change from 0 to 1024 [ 108.764074][ T7350] EXT4-fs (loop1): Ignoring removed nobh option [ 108.772397][ T7350] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 108.809575][ T7350] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=4842c018, mo2=0102] [ 108.836771][ T7350] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,jqfmt=vfsold,abort,data_err=ignore,discard,debug,noinit_itable,noblock_validity,user_xattr,lazytime,nobh,,errors=continue. Quota mode: none. [ 108.966278][ T4256] gspca_spca501: reg write: error -71 [ 108.971907][ T4256] spca501 5-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 108.989785][ T4256] spca501: probe of 5-1:0.0 failed with error -22 [ 109.016794][ T4256] usb 5-1: USB disconnect, device number 2 [ 109.046060][ T21] usb 1-1: bad CDC descriptors [ 109.051308][ T21] usb 1-1: unsupported MDLM descriptors [ 109.113888][ T21] usb 1-1: USB disconnect, device number 6 [ 109.598465][ T7400] ieee802154 phy0 wpan0: encryption failed: -90 [ 109.611667][ T7405] loop4: detected capacity change from 0 to 8 [ 109.632194][ T7406] loop1: detected capacity change from 0 to 256 [ 109.673058][ T7405] SQUASHFS error: lzo decompression failed, data probably corrupt [ 109.683415][ T7405] SQUASHFS error: Failed to read block 0x1d2: -5 [ 109.754978][ T7405] SQUASHFS error: Unable to read metadata cache entry [1d0] [ 109.762911][ T7405] SQUASHFS error: Unable to read directory block [1d0:26] [ 109.959478][ T7432] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1485'. [ 110.004964][ T7432] openvswitch: netlink: Missing key (keys=40, expected=80) [ 110.217268][ T7458] tmpfs: Bad value for 'mpol' [ 110.279074][ T150] block nbd4: Attempted send on invalid socket [ 110.285527][ T150] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 110.322459][ T7464] hpfs: hpfs_map_sector(): read error [ 110.696222][ T7492] xt_TPROXY: Can be used only with -p tcp or -p udp [ 110.794948][ T7501] usb usb8: usbfs: process 7501 (syz.2.1518) did not claim interface 32 before use [ 110.859888][ T7508] loop2: detected capacity change from 0 to 128 [ 110.976931][ T7508] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 111.071844][ T7526] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 111.170086][ T7537] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1535'. [ 111.172728][ T7538] loop1: detected capacity change from 0 to 512 [ 111.186476][ T7537] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1535'. [ 111.249442][ T7538] EXT4-fs (loop1): inline encryption not supported [ 111.266619][ T7538] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 111.279897][ T7538] EXT4-fs (loop1): Ignoring removed bh option [ 111.426770][ T7558] cgroup: Name too long [ 111.505802][ T7538] EXT4-fs (loop1): Test dummy encryption mode enabled [ 111.521083][ T7569] loop3: detected capacity change from 0 to 1024 [ 111.534011][ T7568] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 111.540379][ T7538] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 111.554611][ T4294] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 111.650654][ T7538] EXT4-fs (loop1): 1 truncate cleaned up [ 111.704927][ T7538] EXT4-fs (loop1): mounted filesystem without journal. Opts: inlinecrypt,mblk_io_submit,bh,auto_da_alloc,barrier,test_dummy_encryption,nogrpid,,errors=continue. Quota mode: none. [ 111.782921][ T4282] hfsplus: b-tree write err: -5, ino 4 [ 111.945325][ T4294] usb 3-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 111.979165][ T4294] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 111.991840][ T7578] netlink: 'syz.3.1555': attribute type 1 has an invalid length. [ 112.009350][ T4294] usb 3-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 112.036704][ T7578] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1555'. [ 112.060457][ T4294] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.126568][ T4294] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 112.351204][ T7570] loop4: detected capacity change from 0 to 32768 [ 112.389559][ T13] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 112.534150][ T7570] XFS (loop4): Mounting V5 Filesystem [ 112.565030][ T4294] gspca_sn9c2028: read1 error -71 [ 112.585086][ T4294] gspca_sn9c2028: read1 error -71 [ 112.590358][ T4294] sn9c2028: probe of 3-1:220.0 failed with error -71 [ 112.634771][ T13] usb 2-1: Using ep0 maxpacket: 32 [ 112.668458][ T4294] usb 3-1: USB disconnect, device number 6 [ 112.738123][ T7570] XFS (loop4): Ending clean mount [ 112.759097][ T7570] XFS (loop4): Quotacheck needed: Please wait. [ 112.764903][ T13] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.794342][ T7598] loop0: detected capacity change from 0 to 32768 [ 112.811029][ T13] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.835793][ T7570] XFS (loop4): Quotacheck: Done. [ 112.863807][ T7598] [ 112.863807][ T7598] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 112.863807][ T7598] [ 112.879154][ T7612] device wlan0 entered promiscuous mode [ 112.910593][ T4186] XFS (loop4): Unmounting Filesystem [ 112.922904][ T7598] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 112.922904][ T7598] [ 112.954905][ T13] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 112.971312][ T13] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 112.971930][ T7598] xtLookup: xtSearch returned -5 [ 112.987425][ T13] usb 2-1: Product: syz [ 112.991817][ T13] usb 2-1: Manufacturer: syz [ 113.021559][ T7598] ERROR: (device loop0): xtTruncate: XT_GETPAGE: xtree page corrupt [ 113.021559][ T7598] [ 113.067849][ T13] hub 2-1:4.0: USB hub found [ 113.166363][ T5507] [ 113.166363][ T5507] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 113.166363][ T5507] [ 113.197574][ T5507] [ 113.197574][ T5507] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 113.197574][ T5507] [ 113.209569][ T4184] [ 113.209569][ T4184] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 113.209569][ T4184] [ 113.275584][ T276] [ 113.275584][ T276] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 113.275584][ T276] [ 113.292871][ T13] hub 2-1:4.0: 2 ports detected [ 113.310284][ T4184] [ 113.310284][ T4184] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 113.310284][ T4184] [ 113.515162][ T13] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 113.522462][ T13] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 113.626470][ T13] usb 2-1: USB disconnect, device number 5 [ 114.048436][ T7683] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1603'. [ 114.121489][ T7683] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1603'. [ 114.154650][ T7683] tc_dump_action: action bad kind [ 114.180215][ T7688] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1605'. [ 114.371105][ T7692] loop4: detected capacity change from 0 to 4096 [ 114.479805][ T7692] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 114.518993][ T7692] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 114.575943][ T7692] ntfs: volume version 3.1. [ 114.623316][ T7692] ntfs: (device loop4): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4). Marking corrupt inode and base inode 0x1a as bad. Run chkdsk. [ 114.676972][ T7728] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1626'. [ 114.696787][ T7728] openvswitch: netlink: Flow key attribute not present in set flow. [ 114.698614][ T7731] loop0: detected capacity change from 0 to 256 [ 114.721220][ T7692] ntfs: (device loop4): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute. [ 114.742033][ T7692] ntfs: (device loop4): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 114.797480][ T7692] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Found already allocated name in phase 2. Please run chkdsk and if that doesn't find any errors please report you saw this message to linux-ntfs-dev@lists.sourceforge.net. [ 114.831943][ T7731] FAT-fs (loop0): Directory bread(block 64) failed [ 114.844036][ T7738] netlink: 'syz.2.1630': attribute type 3 has an invalid length. [ 114.853268][ T7731] FAT-fs (loop0): Directory bread(block 65) failed [ 114.868230][ T7731] FAT-fs (loop0): Directory bread(block 66) failed [ 114.879708][ T7731] FAT-fs (loop0): Directory bread(block 67) failed [ 114.893844][ T7731] FAT-fs (loop0): Directory bread(block 68) failed [ 114.908667][ T7692] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 114.953082][ T7731] FAT-fs (loop0): Directory bread(block 69) failed [ 114.965078][ T7692] ntfs: (device loop4): ntfs_lookup(): ntfs_lookup_ino_by_name() failed with error code 5. [ 114.979247][ T7731] FAT-fs (loop0): Directory bread(block 70) failed [ 115.002179][ T7731] FAT-fs (loop0): Directory bread(block 71) failed [ 115.030095][ T7731] FAT-fs (loop0): Directory bread(block 72) failed [ 115.050151][ T7731] FAT-fs (loop0): Directory bread(block 73) failed [ 115.096882][ T7750] trusted_key: encrypted_key: insufficient parameters specified [ 115.161176][ T7754] loop3: detected capacity change from 0 to 1024 [ 115.255704][ T7754] hfsplus: request for non-existent node 33423360 in B*Tree [ 115.288371][ T7761] loop4: detected capacity change from 0 to 16 [ 115.299964][ T7754] hfsplus: request for non-existent node 33423360 in B*Tree [ 115.365405][ T7761] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 115.474156][ T7773] netlink: zone id is out of range [ 115.504695][ T7773] netlink: zone id is out of range [ 115.514276][ T7763] loop1: detected capacity change from 0 to 8192 [ 115.542868][ T7776] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1648'. [ 115.608645][ T7763] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 115.645555][ T7763] REISERFS (device loop1): using ordered data mode [ 115.678113][ T7763] reiserfs: using flush barriers [ 115.732962][ T7763] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 115.751253][ T7763] REISERFS (device loop1): checking transaction log (loop1) [ 115.765362][ T7794] netlink: 'syz.3.1656': attribute type 21 has an invalid length. [ 115.773632][ T7794] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1656'. [ 115.814352][ T7763] REISERFS (device loop1): Using r5 hash to sort names [ 115.833916][ T7763] REISERFS (device loop1): using 3.5.x disk format [ 116.254798][ T4256] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 116.514718][ T4256] usb 5-1: Using ep0 maxpacket: 8 [ 116.564773][ T23] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 116.572596][ T7850] tmpfs: Bad value for 'mpol' [ 116.630784][ T7855] loop1: detected capacity change from 0 to 128 [ 116.654800][ T4256] usb 5-1: config 0 has an invalid interface number: 176 but max is 0 [ 116.671330][ T4256] usb 5-1: config 0 has no interface number 0 [ 116.686092][ T4256] usb 5-1: config 0 interface 176 altsetting 56 bulk endpoint 0x8 has invalid maxpacket 32 [ 116.698422][ T7859] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 116.733396][ T4256] usb 5-1: config 0 interface 176 altsetting 56 endpoint 0x7 has invalid maxpacket 16416, setting to 1024 [ 116.766404][ T7855] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 116.769589][ T4256] usb 5-1: config 0 interface 176 altsetting 56 bulk endpoint 0x7 has invalid maxpacket 1024 [ 116.794481][ T7855] ext4 filesystem being mounted at /308/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 116.852471][ T4256] usb 5-1: config 0 interface 176 has no altsetting 0 [ 116.995139][ T23] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 117.016127][ T7879] netlink: 'syz.3.1696': attribute type 4 has an invalid length. [ 117.023954][ T7879] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1696'. [ 117.044769][ T23] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 117.058858][ T4256] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=68.dc [ 117.060540][ T7881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1697'. [ 117.075218][ T4256] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.092390][ T23] usb 1-1: config 220 has no interface number 2 [ 117.100786][ T4256] usb 5-1: Product: syz [ 117.114615][ T23] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 117.140602][ T4256] usb 5-1: Manufacturer: syz [ 117.150421][ T4256] usb 5-1: SerialNumber: syz [ 117.164323][ T23] usb 1-1: config 220 interface 0 has no altsetting 0 [ 117.181677][ T4256] usb 5-1: config 0 descriptor?? [ 117.191394][ T23] usb 1-1: config 220 interface 76 has no altsetting 0 [ 117.203724][ T23] usb 1-1: config 220 interface 1 has no altsetting 0 [ 117.215894][ T7805] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 117.230509][ T7805] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 117.406369][ T23] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 117.424543][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.432886][ T23] usb 1-1: Product: syz [ 117.444750][ T7] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 117.449826][ T23] usb 1-1: Manufacturer: syz [ 117.461590][ T23] usb 1-1: SerialNumber: syz [ 117.664760][ T4256] usb 5-1: probing VID:PID(0424:012C) [ 117.681868][ T4256] usb 5-1: vub300 testing BULK OUT EndPoint(0) 08 [ 117.685678][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 117.692612][ T4256] usb 5-1: vub300 testing BULK OUT EndPoint(1) 07 [ 117.703339][ T4256] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 117.729734][ T4256] vub300: probe of 5-1:0.176 failed with error -22 [ 117.754225][ T4256] usb 5-1: USB disconnect, device number 3 [ 117.848016][ T7] usb 4-1: unable to get BOS descriptor or descriptor too short [ 117.898203][ T7889] loop1: detected capacity change from 0 to 1764 [ 117.918758][ T23] usb 1-1: selecting invalid altsetting 0 [ 117.926329][ T23] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 117.932668][ T23] usb 1-1: No valid video chain found. [ 117.956860][ T7] usb 4-1: config 1 interface 0 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 64 [ 117.961505][ T7889] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 117.976566][ T7] usb 4-1: config 1 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 118.013040][ T7] usb 4-1: config 1 interface 0 has no altsetting 0 [ 118.013919][ T7893] netlink: 'syz.2.1703': attribute type 1 has an invalid length. [ 118.028823][ T7893] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.1703'. [ 118.039989][ T7893] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1703'. [ 118.050620][ T23] usb 1-1: selecting invalid altsetting 0 [ 118.057859][ T23] usbtest: probe of 1-1:220.1 failed with error -22 [ 118.094124][ T23] usb 1-1: USB disconnect, device number 7 [ 118.130145][ T7895] netlink: 'syz.4.1705': attribute type 1 has an invalid length. [ 118.137564][ T7898] xt_CT: You must specify a L4 protocol and not use inversions on it [ 118.184925][ T7] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 118.203775][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.230304][ T7] usb 4-1: Product: syz [ 118.254115][ T7] usb 4-1: Manufacturer: syz [ 118.275354][ T7] usb 4-1: SerialNumber: syz [ 118.314853][ T7883] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 118.387217][ T7911] mmap: syz.2.1712 (7911): VmData 49217536 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 118.509570][ T7922] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1717'. [ 118.582409][ T7] usb 4-1: bad CDC descriptors [ 118.604029][ T7926] MTD: Couldn't look up './bus': -15 [ 118.610227][ T7] usb 4-1: USB disconnect, device number 7 [ 118.766859][ T7935] openvswitch: netlink: EtherType 0 is less than min 600 [ 119.020960][ T7943] loop0: detected capacity change from 0 to 4096 [ 119.090602][ T7956] loop3: detected capacity change from 0 to 256 [ 119.121520][ T7943] ntfs: volume version 3.1. [ 119.574810][ T23] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 119.943695][ T8019] loop2: detected capacity change from 0 to 1024 [ 119.954919][ T4293] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 119.979972][ T8019] EXT4-fs (loop2): Ignoring removed nobh option [ 119.984935][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 119.998319][ T8019] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 120.005090][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 120.057337][ T8019] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=4842c018, mo2=0102] [ 120.129859][ T8019] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,jqfmt=vfsold,abort,data_err=ignore,discard,debug,noinit_itable,noblock_validity,user_xattr,lazytime,nobh,,errors=continue. Quota mode: none. [ 120.249959][ T23] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 120.273639][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.330052][ T23] usb 4-1: Product: syz [ 120.334268][ T23] usb 4-1: Manufacturer: syz [ 120.359182][ T23] usb 4-1: SerialNumber: syz [ 120.379318][ T23] usb 4-1: config 0 descriptor?? [ 120.394870][ T4293] usb 5-1: config 0 has an invalid interface number: 195 but max is 0 [ 120.414144][ T4293] usb 5-1: config 0 has no interface number 0 [ 120.430716][ T23] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input14 [ 120.453494][ T4293] usb 5-1: New USB device found, idVendor=05ac, idProduct=0243, bcdDevice=75.f1 [ 120.466951][ T4293] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.514425][ T4293] usb 5-1: config 0 descriptor?? [ 120.579884][ T4293] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.195/input/input15 [ 120.684768][ T4292] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 120.780782][ T7] usb 5-1: USB disconnect, device number 4 [ 120.794819][ T3546] bcm5974 5-1:0.195: could not read from device [ 120.795022][ T21] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 120.816074][ T7968] bcm5974 5-1:0.195: could not read from device [ 120.828086][ T4177] bcm5974 5-1:0.195: could not read from device [ 120.861010][ T4293] usb 4-1: USB disconnect, device number 8 [ 120.944666][ T4292] usb 1-1: Using ep0 maxpacket: 16 [ 121.074942][ T4292] usb 1-1: config 1 has an invalid descriptor of length 60, skipping remainder of the config [ 121.085281][ T4292] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 121.164809][ T4292] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 121.174273][ T4292] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 121.182436][ T4292] usb 1-1: SerialNumber: syz [ 121.187181][ T21] usb 3-1: config 0 has an invalid interface number: 199 but max is 1 [ 121.195775][ T21] usb 3-1: config 0 has no interface number 1 [ 121.201862][ T21] usb 3-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 121.214405][ T21] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 121.256750][ T4292] usb 1-1: 0:2 : does not exist [ 121.314827][ T21] usb 3-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 121.333874][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 121.366810][ T21] usb 3-1: SerialNumber: syz [ 121.375678][ T8052] netlink: 'syz.4.1778': attribute type 1 has an invalid length. [ 121.383724][ T8052] netlink: 'syz.4.1778': attribute type 2 has an invalid length. [ 121.404314][ T21] usb 3-1: config 0 descriptor?? [ 121.413722][ T8052] netlink: 'syz.4.1778': attribute type 1 has an invalid length. [ 121.466446][ T7] usb 1-1: USB disconnect, device number 8 [ 121.538911][ T8063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1784'. [ 121.644062][ T8070] loop3: detected capacity change from 0 to 1024 [ 121.679343][ T4292] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 121.699469][ T8070] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 121.707728][ T21] usb 3-1: Found UVC 0.00 device (0002:0000) [ 121.724817][ T21] usb 3-1: No valid video chain found. [ 121.738700][ T8070] JBD2: no valid journal superblock found [ 121.744466][ T8070] EXT4-fs (loop3): error loading journal [ 121.759741][ T21] usb 3-1: USB disconnect, device number 7 [ 121.971284][ T8087] loop4: detected capacity change from 0 to 512 [ 122.120266][ T8087] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fffff05) [ 122.134730][ T8087] FAT-fs (loop4): Filesystem has been set read-only [ 122.171074][ T4292] usb 2-1: unable to get BOS descriptor or descriptor too short [ 122.195891][ T8103] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 122.294632][ T4292] usb 2-1: config 160 has an invalid interface number: 40 but max is 0 [ 122.308456][ T4292] usb 2-1: config 160 has no interface number 0 [ 122.345036][ T4292] usb 2-1: config 160 interface 40 has no altsetting 0 [ 122.535068][ T4292] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=2a.c1 [ 122.548284][ T4292] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.575475][ T4292] usb 2-1: Product: syz [ 122.579704][ T4292] usb 2-1: Manufacturer: syz [ 122.584306][ T4292] usb 2-1: SerialNumber: syz [ 122.652163][ T8132] loop2: detected capacity change from 0 to 4096 [ 122.726873][ T8132] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 122.746479][ T8132] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 122.771771][ T8132] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 122.820738][ T8132] ntfs: volume version 3.1. [ 122.910843][ T8150] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 122.939393][ T4292] usb 2-1: bad CDC descriptors [ 122.960003][ T4292] usb 2-1: unsupported MDLM descriptors [ 122.976467][ T8150] CIFS mount error: No usable UNC path provided in device string! [ 122.976467][ T8150] [ 122.983896][ T4292] usb 2-1: USB disconnect, device number 6 [ 123.014976][ T4185] ntfs: (device loop2): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 123.038262][ T8150] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 123.072104][ T8154] netlink: 'syz.2.1827': attribute type 21 has an invalid length. [ 123.219942][ T8162] program syz.0.1832 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 123.271431][ T8160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 123.272051][ T8123] loop4: detected capacity change from 0 to 40427 [ 123.307700][ T8160] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.308194][ T8123] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 123.366399][ T8123] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 123.378223][ T8160] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 123.419767][ T8123] F2FS-fs (loop4): invalid crc value [ 123.472891][ T8168] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1834'. [ 123.494808][ T8123] F2FS-fs (loop4): Found nat_bits in checkpoint [ 123.616550][ T8123] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 123.623711][ T8123] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 123.690271][ T8179] netlink: 'syz.1.1839': attribute type 3 has an invalid length. [ 123.734135][ T8158] loop2: detected capacity change from 0 to 32768 [ 123.863148][ T8158] blkno = 8ed2c, nblocks = 1 [ 123.890703][ T8158] ERROR: (device loop2): dbFree: block to be freed is outside the map [ 123.890703][ T8158] [ 123.964715][ T8158] ERROR: (device loop2): remounting filesystem as read-only [ 123.989370][ T8158] ialloc: diAlloc returned -17! [ 124.055069][ T8198] ip6t_rpfilter: unknown options [ 124.171866][ T8204] device gretap1 entered promiscuous mode [ 124.202396][ T8209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1853'. [ 124.234006][ T8209] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1853'. [ 124.282247][ T8212] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 124.594787][ T21] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 124.654196][ T8235] RDS: rds_bind could not find a transport for ae0c:91e3:ccfb:11d2:0:5efe:150.125.240.108, load rds_tcp or rds_rdma? [ 124.763344][ T8245] overlayfs: './file0' not a directory [ 124.824166][ T8249] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1872'. [ 124.862661][ T8252] loop0: detected capacity change from 0 to 256 [ 124.875793][ T8253] loop2: detected capacity change from 0 to 256 [ 124.910619][ T8252] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 124.981188][ T8259] netlink: 'syz.1.1877': attribute type 1 has an invalid length. [ 124.994782][ T21] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 124.999509][ T8259] netlink: 'syz.1.1877': attribute type 9 has an invalid length. [ 125.010968][ T21] usb 4-1: config 0 has no interface number 0 [ 125.038750][ T21] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 125.074065][ T21] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 125.324850][ T21] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 125.333269][ T8283] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1889'. [ 125.343163][ T8283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1889'. [ 125.344137][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.364686][ T8283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1889'. [ 125.404701][ T21] usb 4-1: Product: syz [ 125.429403][ T21] usb 4-1: Manufacturer: syz [ 125.434044][ T21] usb 4-1: SerialNumber: syz [ 125.482569][ T21] usb 4-1: config 0 descriptor?? [ 125.524838][ T8214] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 125.545858][ T21] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 125.596501][ T21] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 125.706541][ T8307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1901'. [ 125.774665][ T8307] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1901'. [ 125.842458][ T8319] loop1: detected capacity change from 0 to 256 [ 125.891436][ T8324] device ip6tnl2 entered promiscuous mode [ 125.915385][ T8319] FAT-fs (loop1): Unrecognized mount option "nonumail=0" or missing value [ 126.028017][ T8339] trusted_key: encrypted_key: hex blob is missing [ 126.070317][ T8319] devtmpfs: Unknown parameter 'shortname' [ 126.115864][ T4263] usb 4-1: USB disconnect, device number 9 [ 126.134639][ T4263] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 126.180274][ T4263] cyberjack 4-1:0.69: device disconnected [ 126.213436][ T8350] loop1: detected capacity change from 0 to 128 [ 126.254176][ T8353] libceph: resolve '0' (ret=-3): failed [ 126.307086][ T8350] ADFS-fs (loop1): error: can't find an ADFS filesystem on dev loop1. [ 126.597926][ T8375] netlink: 'syz.1.1934': attribute type 6 has an invalid length. [ 126.714770][ T8379] usb usb9: usbfs: process 8379 (syz.4.1936) did not claim interface 0 before use [ 126.721004][ T8372] loop0: detected capacity change from 0 to 4096 [ 126.832480][ T8372] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 126.882575][ T8394] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.1941'. [ 126.907133][ T8372] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 127.054761][ T8404] netlink: 'syz.1.1947': attribute type 3 has an invalid length. [ 127.150163][ T8408] Process accounting resumed [ 127.253046][ T26] audit: type=1400 audit(1771430946.129:12): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A21D01A0B978D2F2F262D2A83D1 pid=8419 comm="syz.3.1958" [ 127.423342][ T8439] kAFS: unable to lookup cell ' [ 127.423342][ T8439] $)-.ײfYǝa2s [ 127.423342][ T8439] ' [ 127.573672][ T8453] netlink: 'syz.4.1973': attribute type 3 has an invalid length. [ 127.665255][ T8463] netlink: 'syz.1.1977': attribute type 1 has an invalid length. [ 127.832820][ T8477] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 4, id = 0 [ 127.876740][ T8469] loop2: detected capacity change from 0 to 8192 [ 127.914482][ T8469] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 127.941194][ T8469] REISERFS (device loop2): using ordered data mode [ 127.954619][ T8469] reiserfs: using flush barriers [ 127.964831][ T8469] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 128.020739][ T8469] REISERFS (device loop2): checking transaction log (loop2) [ 128.057549][ T8469] REISERFS (device loop2): Using r5 hash to sort names [ 128.125215][ T8469] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 128.501986][ T8475] loop4: detected capacity change from 0 to 32768 [ 128.584156][ T8521] loop1: detected capacity change from 0 to 1764 [ 128.705488][ T8475] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 128.740993][ T8533] __nla_validate_parse: 1 callbacks suppressed [ 128.741010][ T8533] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2012'. [ 128.793700][ T8536] netlink: 'syz.3.2011': attribute type 32 has an invalid length. [ 128.895396][ T8545] netlink: 'syz.2.2018': attribute type 32 has an invalid length. [ 129.098065][ T4186] ocfs2: Unmounting device (7,4) on (node local) [ 129.182379][ T8568] netlink: 'syz.2.2029': attribute type 4 has an invalid length. [ 129.195353][ T8568] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2029'. [ 129.273092][ T8576] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 129.294813][ T8576] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 129.301404][ T8576] comedi comedi3: 8255: I/O port conflict (0xffffffffffffffff,4) [ 129.344974][ T8576] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 129.376133][ T8576] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 129.411338][ T8576] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 129.434986][ T8576] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 129.441650][ T8576] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 129.465325][ T8586] loop3: detected capacity change from 0 to 1764 [ 129.471800][ T8588] x_tables: unsorted entry at hook 1 [ 129.480596][ T8584] loop0: detected capacity change from 0 to 4096 [ 129.550209][ T8584] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 129.588379][ T8592] loop1: detected capacity change from 0 to 2048 [ 129.661972][ T8592] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 129.834711][ T4292] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 129.930930][ T4187] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 130.001628][ T8614] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2052'. [ 130.059571][ T8614] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2052'. [ 130.105167][ T8614] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2052'. [ 130.115995][ T4292] usb 4-1: Using ep0 maxpacket: 16 [ 130.160331][ T8620] loop1: detected capacity change from 0 to 64 [ 130.236892][ T8623] netlink: 592 bytes leftover after parsing attributes in process `syz.4.2057'. [ 130.304983][ T4292] usb 4-1: unable to get BOS descriptor or descriptor too short [ 130.395019][ T4187] usb 3-1: config 0 has an invalid interface number: 107 but max is 0 [ 130.403310][ T4187] usb 3-1: config 0 has no interface number 0 [ 130.424736][ T4292] usb 4-1: config 13 has an invalid interface number: 50 but max is 0 [ 130.433043][ T4292] usb 4-1: config 13 has no interface number 0 [ 130.456632][ T4187] usb 3-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 130.478453][ T4292] usb 4-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 130.516791][ T4187] usb 3-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 130.538634][ T4292] usb 4-1: config 13 interface 50 has no altsetting 0 [ 130.719044][ T8637] [ 130.721580][ T8637] ====================================================== [ 130.728593][ T8637] WARNING: possible circular locking dependency detected [ 130.735621][ T8637] syzkaller #0 Not tainted [ 130.740037][ T8637] ------------------------------------------------------ [ 130.747053][ T8637] syz.1.2062/8637 is trying to acquire lock: [ 130.753121][ T8637] ffff88807b484b98 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 130.763583][ T8637] [ 130.763583][ T8637] but task is already holding lock: [ 130.770939][ T8637] ffff88807b484ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1030 [ 130.780244][ T8637] [ 130.780244][ T8637] which lock already depends on the new lock. [ 130.780244][ T8637] [ 130.790634][ T8637] [ 130.790634][ T8637] the existing dependency chain (in reverse order) is: [ 130.799630][ T8637] [ 130.799630][ T8637] -> #3 (&hdev->req_lock){+.+.}-{3:3}: [ 130.807257][ T8637] __mutex_lock_common+0x1e3/0x2400 [ 130.812965][ T8637] mutex_lock_nested+0x17/0x20 [ 130.818235][ T8637] hci_dev_do_close+0x5f/0x1030 [ 130.823595][ T8637] hci_rfkill_set_block+0x10a/0x190 [ 130.829292][ T8637] rfkill_set_block+0x1c6/0x420 [ 130.834671][ T8637] rfkill_fop_write+0x452/0x560 [ 130.840034][ T8637] vfs_write+0x30b/0xd60 [ 130.844772][ T8637] ksys_write+0x152/0x260 [ 130.849598][ T8637] do_syscall_64+0x4c/0xa0 [ 130.854516][ T8637] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 130.860913][ T8637] [ 130.860913][ T8637] -> #2 (rfkill_global_mutex){+.+.}-{3:3}: [ 130.868879][ T8637] __mutex_lock_common+0x1e3/0x2400 [ 130.874609][ T8637] mutex_lock_nested+0x17/0x20 [ 130.879877][ T8637] rfkill_register+0x33/0x8a0 [ 130.885057][ T8637] hci_register_dev+0x452/0x970 [ 130.890407][ T8637] vhci_create_device+0x32c/0x5c0 [ 130.895942][ T8637] vhci_write+0x391/0x450 [ 130.900768][ T8637] vfs_write+0x745/0xd60 [ 130.905539][ T8637] ksys_write+0x152/0x260 [ 130.910453][ T8637] do_syscall_64+0x4c/0xa0 [ 130.915373][ T8637] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 130.921935][ T8637] [ 130.921935][ T8637] -> #1 (&data->open_mutex){+.+.}-{3:3}: [ 130.929828][ T8637] __mutex_lock_common+0x1e3/0x2400 [ 130.935526][ T8637] mutex_lock_nested+0x17/0x20 [ 130.940799][ T8637] vhci_send_frame+0x88/0x100 [ 130.945995][ T8637] hci_send_frame+0x1a9/0x2e0 [ 130.951311][ T8637] hci_tx_work+0x9f9/0x1710 [ 130.956412][ T8637] process_one_work+0x85f/0x1010 [ 130.961865][ T8637] worker_thread+0xaa6/0x1290 [ 130.967584][ T8637] kthread+0x436/0x520 [ 130.972189][ T8637] ret_from_fork+0x1f/0x30 [ 130.977108][ T8637] [ 130.977108][ T8637] -> #0 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 130.986305][ T8637] __lock_acquire+0x2c42/0x7d10 [ 130.991750][ T8637] lock_acquire+0x19e/0x400 [ 130.996749][ T8637] __flush_work+0x116/0x210 [ 131.001925][ T8637] hci_dev_do_close+0x1e7/0x1030 [ 131.007362][ T8637] hci_rfkill_set_block+0x10a/0x190 [ 131.013067][ T8637] rfkill_set_block+0x1c6/0x420 [ 131.018421][ T8637] rfkill_fop_write+0x452/0x560 [ 131.023770][ T8637] vfs_write+0x30b/0xd60 [ 131.028601][ T8637] ksys_write+0x152/0x260 [ 131.033426][ T8637] do_syscall_64+0x4c/0xa0 [ 131.038434][ T8637] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 131.044912][ T8637] [ 131.044912][ T8637] other info that might help us debug this: [ 131.044912][ T8637] [ 131.055117][ T8637] Chain exists of: [ 131.055117][ T8637] (work_completion)(&hdev->tx_work) --> rfkill_global_mutex --> &hdev->req_lock [ 131.055117][ T8637] [ 131.071187][ T8637] Possible unsafe locking scenario: [ 131.071187][ T8637] [ 131.078731][ T8637] CPU0 CPU1 [ 131.084574][ T8637] ---- ---- [ 131.090374][ T8637] lock(&hdev->req_lock); [ 131.094771][ T8637] lock(rfkill_global_mutex); [ 131.102321][ T8637] lock(&hdev->req_lock); [ 131.109842][ T8637] lock((work_completion)(&hdev->tx_work)); [ 131.115806][ T8637] [ 131.115806][ T8637] *** DEADLOCK *** [ 131.115806][ T8637] [ 131.123921][ T8637] 2 locks held by syz.1.2062/8637: [ 131.129010][ T8637] #0: ffffffff8d6c4a48 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x18b/0x560 [ 131.140168][ T8637] #1: ffff88807b484ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1030 [ 131.149914][ T8637] [ 131.149914][ T8637] stack backtrace: [ 131.155890][ T8637] CPU: 1 PID: 8637 Comm: syz.1.2062 Not tainted syzkaller #0 [ 131.163334][ T8637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 131.173378][ T8637] Call Trace: [ 131.176641][ T8637] [ 131.179555][ T8637] dump_stack_lvl+0x188/0x250 [ 131.184234][ T8637] ? load_image+0x400/0x400 [ 131.188805][ T8637] ? show_regs_print_info+0x20/0x20 [ 131.194170][ T8637] ? print_circular_bug+0x12b/0x1a0 [ 131.199344][ T8637] check_noncircular+0x296/0x330 [ 131.204355][ T8637] ? look_up_lock_class+0x71/0x110 [ 131.209446][ T8637] ? add_chain_block+0x940/0x940 [ 131.214373][ T8637] ? lockdep_lock+0xf1/0x1f0 [ 131.218943][ T8637] ? mark_lock+0x94/0x320 [ 131.223341][ T8637] __lock_acquire+0x2c42/0x7d10 [ 131.228286][ T8637] ? lockdep_unlock+0x143/0x2e0 [ 131.233380][ T8637] ? mark_lock+0x94/0x320 [ 131.237692][ T8637] ? verify_lock_unused+0x140/0x140 [ 131.242901][ T8637] ? __lock_acquire+0x12e8/0x7d10 [ 131.248099][ T8637] lock_acquire+0x19e/0x400 [ 131.252602][ T8637] ? __flush_work+0xfa/0x210 [ 131.257269][ T8637] ? verify_lock_unused+0x140/0x140 [ 131.262638][ T8637] ? __mutex_trylock_common+0x155/0x260 [ 131.268365][ T8637] ? read_lock_is_recursive+0x10/0x10 [ 131.273739][ T8637] __flush_work+0x116/0x210 [ 131.278234][ T8637] ? __flush_work+0xfa/0x210 [ 131.282809][ T8637] ? flush_work+0x20/0x20 [ 131.287117][ T8637] ? hci_leds_update_powered+0x148/0x160 [ 131.292731][ T8637] ? rcu_lock_release+0x5/0x20 [ 131.297659][ T8637] ? __lock_acquire+0x7d10/0x7d10 [ 131.302698][ T8637] hci_dev_do_close+0x1e7/0x1030 [ 131.307638][ T8637] ? _raw_spin_unlock+0x40/0x40 [ 131.312597][ T8637] hci_rfkill_set_block+0x10a/0x190 [ 131.317869][ T8637] ? rcu_lock_release+0x20/0x20 [ 131.322703][ T8637] rfkill_set_block+0x1c6/0x420 [ 131.327550][ T8637] rfkill_fop_write+0x452/0x560 [ 131.332528][ T8637] ? rfkill_fop_read+0x4d0/0x4d0 [ 131.337449][ T8637] ? common_file_perm+0x150/0x1c0 [ 131.342597][ T8637] ? fsnotify_perm+0x5d/0x560 [ 131.347252][ T8637] ? security_file_permission+0x75/0xa0 [ 131.352785][ T8637] ? rfkill_fop_read+0x4d0/0x4d0 [ 131.357708][ T8637] vfs_write+0x30b/0xd60 [ 131.361933][ T8637] ? file_end_write+0x250/0x250 [ 131.366761][ T8637] ? __fget_files+0x40f/0x480 [ 131.371522][ T8637] ? __fdget_pos+0x1e2/0x370 [ 131.376099][ T8637] ? ksys_write+0x71/0x260 [ 131.380492][ T8637] ksys_write+0x152/0x260 [ 131.384808][ T8637] ? __ia32_sys_read+0x80/0x80 [ 131.389561][ T8637] ? lockdep_hardirqs_on+0x94/0x140 [ 131.394756][ T8637] do_syscall_64+0x4c/0xa0 [ 131.399163][ T8637] ? clear_bhb_loop+0x30/0x80 [ 131.403874][ T8637] ? clear_bhb_loop+0x30/0x80 [ 131.408552][ T8637] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 131.414452][ T8637] RIP: 0033:0x7f74d728b629 [ 131.418866][ T8637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.438452][ T8637] RSP: 002b:00007f74d54e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 131.446844][ T8637] RAX: ffffffffffffffda RBX: 00007f74d7504fa0 RCX: 00007f74d728b629 [ 131.454810][ T8637] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 131.462768][ T8637] RBP: 00007f74d7321b39 R08: 0000000000000000 R09: 0000000000000000 [ 131.471282][ T8637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.479231][ T8637] R13: 00007f74d7505038 R14: 00007f74d7504fa0 R15: 00007ffddb3e8c58 [ 131.487203][ T8637] [ 131.493068][ T4292] usb 4-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 131.503806][ T8653] loop4: detected capacity change from 0 to 512 [ 131.518447][ T4292] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.527028][ T4187] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 131.540713][ T4187] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 131.554559][ T4292] usb 4-1: Product: syz [ 131.558822][ T4187] usb 3-1: Product: syz [ 131.563176][ T4292] usb 4-1: Manufacturer: syz [ 131.568328][ T4187] usb 3-1: Manufacturer: syz [ 131.573009][ T4292] usb 4-1: SerialNumber: syz [ 131.578605][ T8653] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 131.580537][ T4187] usb 3-1: SerialNumber: syz [ 131.614789][ T8586] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 131.622378][ T4187] usb 3-1: config 0 descriptor?? [ 131.636500][ T8653] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 131.649593][ T8653] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 131.658053][ T8653] System zones: 0-2, 18-18, 34-35 [ 131.663987][ T8653] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,,errors=continue. Quota mode: none. [ 131.676651][ T4187] keyspan 3-1:0.107: Keyspan 4 port adapter converter detected [ 131.685315][ T4187] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 81 [ 131.693879][ T4187] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 1 [ 131.704730][ T4187] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 131.713913][ T4187] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 2 [ 131.728574][ T4187] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 131.737908][ T4187] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 4 [ 131.752884][ T4187] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 131.762044][ T4187] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 6 [ 131.774775][ T4187] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 131.882309][ T4187] usb 3-1: USB disconnect, device number 8 [ 131.896853][ T4187] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 131.913090][ T4187] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 131.931019][ T4187] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 131.947545][ T4187] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 131.959797][ T4187] keyspan 3-1:0.107: device disconnected [ 132.004808][ T4292] usb 4-1: MIDIStreaming interface descriptor not found [ 132.023103][ T4292] usb 4-1: USB disconnect, device number 10 [ 132.725761][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.732360][ T1422] ieee802154 phy1 wpan1: encryption failed: -22