last executing test programs: 55.898980823s ago: executing program 2 (id=1091): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) 55.83666891s ago: executing program 2 (id=1093): r0 = socket$netlink(0x10, 0x3, 0x0) fgetxattr(r0, &(0x7f0000000200)=@known='system.sockprotoname\x00', &(0x7f0000000240)=""/4, 0x4) 55.83578406s ago: executing program 2 (id=1094): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x2) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000100)) 55.72483015s ago: executing program 2 (id=1096): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x1210080, &(0x7f0000000140)={[{@uid}, {@creator={'creator', 0x3d, "aa80aaf6"}}, {@dir_umask}, {@creator={'creator', 0x3d, "0de07c34"}}, {@codepage={'codepage', 0x3d, 'cp949'}}, {@dir_umask}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@dir_umask={'dir_umask', 0x3d, 0x200}}, {}, {@umask={'umask', 0x3d, 0x16}}]}, 0x7, 0x318, &(0x7f00000004c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 55.548010528s ago: executing program 2 (id=1098): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @random="8b9c9a92846e"}]}, 0x40}}, 0x800) 54.923256021s ago: executing program 2 (id=1106): madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x16) 54.715957582s ago: executing program 32 (id=1106): madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x16) 43.863066498s ago: executing program 1 (id=1259): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x0) 43.752232969s ago: executing program 1 (id=1262): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000030500dbbb004edbdf2500000001", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000100c28000050006"], 0x48}}, 0x0) 43.603401634s ago: executing program 1 (id=1264): r0 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@mcast2, @in=@rand_addr=0x64010101, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, 0x110, 0x32}, {0x0, 0x0, 0x2000000000000, 0x0, 0xfffffffffffffffd, 0x2000200, 0x2, 0x80000002}, {0x7, 0x0, 0x4}, 0x7, 0xfffffffc, 0x1, 0x0, 0x3, 0x1}, {{@in=@rand_addr=0x64010101, 0x3, 0x6c}, 0x2, @in=@broadcast, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1}}, 0xe8) 43.520441032s ago: executing program 1 (id=1265): syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000040)='./file0\x00', 0x1008408, &(0x7f0000000ac0)=ANY=[@ANYBLOB='nojoliet,dmode=0x000000007fffffff,dmode=0x0000000000000009,check=relaxed,overriderockperm,utf8,mode=0x0000000000000000,nojoliet,hide,nocompress,utf8,norock,overriderockperm,mode=0xffffffffffffffff,cruft,map=off,iocharset=macinuit,fund=BPRM_CHECK,\x00', @ANYRESDEC], 0xff, 0x5ac, &(0x7f0000002940)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) 43.096538835s ago: executing program 1 (id=1269): setresuid(0x0, 0xee01, 0xffffffffffffffff) capset(&(0x7f00000003c0)={0x20071026}, &(0x7f0000000400)={0x646f, 0x6, 0x5a72fb9f, 0xc38, 0x0, 0x7}) 42.702975644s ago: executing program 1 (id=1280): setrlimit(0x8, &(0x7f0000000080)) mlockall(0x7) 42.385335196s ago: executing program 33 (id=1280): setrlimit(0x8, &(0x7f0000000080)) mlockall(0x7) 3.274375522s ago: executing program 5 (id=1936): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000380)={[{@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@utf8}, {@utf8no}, {@uni_xlate}, {@uni_xlateno}, {@uni_xlate}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '857'}}, {@utf8no}, {@shortname_lower}, {@utf8no}, {@fat=@check_strict}, {@iocharset={'iocharset', 0x3d, 'cp932'}}]}, 0x1, 0x36b, &(0x7f0000000500)="$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") openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) 2.406812049s ago: executing program 5 (id=1944): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x29, 0x4, 0x7, "32cf000000000400000000000400000000bf3000d80000000000000000000002", 0x3436324d}) 2.284551091s ago: executing program 5 (id=1946): r0 = syz_open_dev$radio(&(0x7f0000000080), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000600)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f907, 0x0, '\x00', @p_u8=0x0}}) 2.172881722s ago: executing program 5 (id=1947): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x17, 0x0, &(0x7f0000000100)) 2.064481693s ago: executing program 3 (id=1949): r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f0000000040)="7469b18516290b84a83c1a3141668f5864", 0x11) 2.064122413s ago: executing program 3 (id=1950): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000a000200aaaaaaaaaa1bd6000800090004"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.008426559s ago: executing program 5 (id=1952): r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000040), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) 2.008321979s ago: executing program 3 (id=1953): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="100000000000000000e0e100000000001800000000000000100100"], 0x28}, 0x0) 1.963756963s ago: executing program 4 (id=1954): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f000001bb80)={&(0x7f0000000240)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_xt={0x50, 0x1, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0xfffffffffffffc82}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 1.955204754s ago: executing program 3 (id=1955): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000040000000100000080"], 0x1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000690300000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 1.769565152s ago: executing program 3 (id=1956): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 1.672653493s ago: executing program 4 (id=1957): syz_usbip_server_init(0x4) syz_usbip_server_init(0x1) 980.592411ms ago: executing program 6 (id=1967): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/68, 0x44}], 0x1, 0x92, 0x0) 908.584828ms ago: executing program 4 (id=1968): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r0, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) 883.747051ms ago: executing program 6 (id=1970): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x22, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) 772.557492ms ago: executing program 4 (id=1971): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0xffffffda, &(0x7f00000000c0)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x111, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x60}}, 0x0) 752.132334ms ago: executing program 4 (id=1974): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='ip_vti0\x00'}) 702.638679ms ago: executing program 6 (id=1975): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@ipv4_newroute={0x28, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x6}, [@RTA_MULTIPATH={0xc, 0x9, {0x448, 0xf, 0x10}}]}, 0x28}}, 0x0) 702.482789ms ago: executing program 0 (id=1976): r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000100)) 665.364863ms ago: executing program 4 (id=1977): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 657.534564ms ago: executing program 0 (id=1978): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000001380)}}, 0x10) 605.796699ms ago: executing program 6 (id=1979): capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000, 0x9, 0x0, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x7, 0x4, 0x500, 0x20000007}, 0x48) 601.76809ms ago: executing program 5 (id=1980): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ac0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1e8, 0x1e8, 0xd0, 0xffffffff, 0xffffffff, 0x320, 0x320, 0x320, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3, 0x3, 0x4}, {0x0, 0x4, 0x3}}}}, {{@ipv6={@mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0xff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0xff], 'wlan0\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x0, 0x4, 0x6, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x8000}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, [0xffffffff, 0xffffff00, 0xffffff, 0x3cfa071f66be0dd3], [0xff000000, 0xff000000, 0xffffff00, 0xff], 'veth1_to_hsr\x00', 'vlan0\x00', {0xff}, {}, 0x3b, 0x78, 0x2, 0x1}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x20, 'ERROR\x00', 0x0, "9847fdc1479cca6e850542bb97e4096e345c9f1a70b1d8501618472b17cd"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) 539.297775ms ago: executing program 0 (id=1981): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f00000005c0), 0x0, 0x1}, 0x20) 476.725282ms ago: executing program 6 (id=1982): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000080010000060a01040000000000000000010000000900020073797a310000000038000480340001800c00010062697477697365002400028008000340000000040800024000000000080006400000000008000140000000000900010073797a30000000005e0007"], 0x1f4}}, 0x0) 411.453998ms ago: executing program 0 (id=1983): r0 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000080), &(0x7f0000000300)=0x8) 197.78029ms ago: executing program 0 (id=1984): close(0xffffffffffffffff) close(0xffffffffffffffff) 72.304012ms ago: executing program 0 (id=1985): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 58.984274ms ago: executing program 3 (id=1986): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) 0s ago: executing program 6 (id=1987): syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 096) and media sector size (512) [ 88.261578][ T5992] libceph: resolve '. [ 88.261578][ T5992] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 88.261578][ T5992] ' (ret=-3): failed [ 88.336499][ T5971] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 88.410536][ T6001] xt_cluster: you have exceeded the maximum number of cluster nodes (127 > 32) [ 88.473119][ T6006] capability: warning: `syz.4.727' uses 32-bit capabilities (legacy support in use) [ 88.488521][ T6007] loop1: detected capacity change from 0 to 256 [ 88.554002][ T6007] exfat: Deprecated parameter 'namecase' [ 88.599967][ T6007] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1cbb2d6c, utbl_chksum : 0xe619d30d) [ 88.713469][ T6025] loop3: detected capacity change from 0 to 512 [ 88.729862][ T6007] exFAT-fs (loop1): error, found bogus dentry(5) beyond unused empty group(4) (start_clu : 5, cur_clu : 5) [ 88.895169][ T6025] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e028, mo2=0002] [ 88.931645][ T6025] System zones: 1-12 [ 89.002824][ T6025] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.737: invalid indirect mapped block 8 (level 2) [ 89.063795][ T6025] EXT4-fs (loop3): Remounting filesystem read-only [ 89.081077][ T6025] EXT4-fs (loop3): 1 truncate cleaned up [ 89.087084][ T5910] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 89.095672][ T6026] loop2: detected capacity change from 0 to 32768 [ 89.102278][ T6025] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_dev=0x0000000000000008,data_err=ignore,noinit_itable,sysvgroups,errors=remount-ro,. Quota mode: none. [ 89.237608][ T6026] XFS (loop2): Mounting V5 Filesystem [ 89.343427][ T5472] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 89.454310][ T6026] XFS (loop2): Ending clean mount [ 89.455302][ T6034] loop4: detected capacity change from 0 to 32768 [ 89.473594][ T5910] usb 1-1: config 3 has an invalid interface number: 234 but max is 0 [ 89.506316][ T6034] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 89.521184][ T5910] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 89.552062][ T5910] usb 1-1: config 3 has no interface number 0 [ 89.570400][ T5910] usb 1-1: config 3 interface 234 altsetting 0 has an invalid endpoint with address 0x22, skipping [ 89.582158][ T6034] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 89.617828][ T5910] usb 1-1: config 3 interface 234 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 89.648687][ T6034] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 89.682330][ T4183] XFS (loop2): Unmounting Filesystem [ 89.687400][ T4943] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 89.707733][ T4943] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 89.733536][ T5472] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 89.771509][ T5472] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 89.786437][ T5472] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 89.787858][ T4943] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 80ms [ 89.798078][ T5472] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 89.815340][ T5472] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 89.835685][ T4943] gfs2: fsid=syz:syz.0: jid=0: Done [ 89.842273][ T6034] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 89.853411][ T5910] usb 1-1: New USB device found, idVendor=04dd, idProduct=8006, bcdDevice=60.f5 [ 89.862461][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.882713][ T5910] usb 1-1: Product: syz [ 89.899265][ T5910] usb 1-1: Manufacturer: syz [ 89.913414][ T5910] usb 1-1: SerialNumber: syz [ 89.913562][ T5472] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 89.949494][ T5472] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 89.961332][ T5472] usb 2-1: SerialNumber: syz [ 89.964324][ T5910] usb 1-1: bad CDC descriptors [ 90.096692][ T6060] block device autoloading is deprecated and will be removed. [ 90.168805][ T5472] usb 1-1: USB disconnect, device number 7 [ 90.248607][ T6066] loop2: detected capacity change from 0 to 736 [ 90.381639][ T6066] rock: directory entry would overflow storage [ 90.391179][ T6066] rock: sig=0x3b10, size=4, remaining=3 [ 90.462125][ T6074] IPVS: set_ctl: invalid protocol: 135 100.1.1.1:20004 [ 90.703442][ T5473] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 90.759323][ T6093] Sensor A: ================= START STATUS ================= [ 90.774168][ T4943] usb 2-1: USB disconnect, device number 6 [ 90.816319][ T6097] syz.0.765[6097] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.816413][ T6097] syz.0.765[6097] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.822865][ T6093] Sensor A: Test Pattern: 75% Colorbar [ 90.869178][ T6093] Sensor A: Show Information: All [ 90.897431][ T6097] loop0: detected capacity change from 0 to 512 [ 90.904852][ T6093] Sensor A: Vertical Flip: false [ 90.909891][ T6093] Sensor A: Horizontal Flip: false [ 90.915914][ T6093] Sensor A: Brightness: 128 [ 90.920505][ T6093] Sensor A: Contrast: 128 [ 90.925123][ T6101] netlink: 16 bytes leftover after parsing attributes in process `syz.1.769'. [ 90.930316][ T6093] Sensor A: Hue: 0 [ 90.940480][ T6093] Sensor A: Saturation: 128 [ 90.946947][ T6093] Sensor A: ================== END STATUS ================== [ 90.969752][ T6097] EXT4-fs (loop0): #blocks per group too big: 294912 [ 91.003512][ T5473] usb 5-1: Using ep0 maxpacket: 16 [ 91.081469][ T6106] device ip6erspan0 entered promiscuous mode [ 91.133588][ T5473] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 91.142096][ T5473] usb 5-1: config 0 has no interface number 0 [ 91.183584][ T5473] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 91.287815][ T6124] loop1: detected capacity change from 0 to 8 [ 91.344800][ T6124] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 91.365034][ T4412] udevd[4412]: incorrect cramfs checksum on /dev/loop1 [ 91.369691][ T6124] cramfs: Error -5 while decompressing! [ 91.393963][ T4412] udevd[4412]: incorrect cramfs checksum on /dev/loop1 [ 91.407654][ T5473] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 91.423816][ T6124] cramfs: ffffffff961f10a8(26)->ffff888058988000(4096) [ 91.441838][ T5473] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.451585][ T6124] cramfs: Error -3 while decompressing! [ 91.473843][ T5473] usb 5-1: Product: syz [ 91.482477][ T5473] usb 5-1: Manufacturer: syz [ 91.493278][ T6124] cramfs: ffffffff961f10c2(26)->ffff88805a6e0000(4096) [ 91.509815][ T5473] usb 5-1: SerialNumber: syz [ 91.529953][ T5473] usb 5-1: config 0 descriptor?? [ 91.532433][ T6124] cramfs: Error -3 while decompressing! [ 91.556687][ T6124] cramfs: ffffffff961f10dc(16)->ffff888058b1e000(4096) [ 91.577306][ T6140] program syz.2.787 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.578342][ T6141] loop0: detected capacity change from 0 to 256 [ 91.590406][ T6124] cramfs: Error -5 while decompressing! [ 91.600939][ T6124] cramfs: ffffffff961f10a8(26)->ffff888058988000(4096) [ 91.679914][ T25] audit: type=1800 audit(1763125990.768:2): pid=6124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.779" name="file2" dev="loop1" ino=348 res=0 errno=0 [ 91.689274][ T6145] loop2: detected capacity change from 0 to 16 [ 91.816272][ T4410] udevd[4410]: incorrect erofs checksum on /dev/loop2 [ 91.823856][ T6145] erofs: (device loop2): erofs_superblock_csum_verify: invalid checksum 0x3e7468d6, 0x5438428d expected [ 91.918355][ T6157] loop1: detected capacity change from 0 to 128 [ 91.943996][ T6153] loop3: detected capacity change from 0 to 4096 [ 91.948248][ T6145] CIFS mount error: No usable UNC path provided in device string! [ 91.948248][ T6145] [ 91.983596][ T6157] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 91.997711][ T6157] hpfs: filesystem error: improperly stopped [ 92.013329][ T6145] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 92.022856][ T6157] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 92.035276][ T5473] usbtouchscreen: probe of 5-1:0.214 failed with error -71 [ 92.050637][ T6157] hpfs: You really don't want any checks? You are crazy... [ 92.058216][ T5473] usb 5-1: USB disconnect, device number 6 [ 92.090270][ T6157] hpfs: hpfs_map_sector(): read error [ 92.118965][ T6157] hpfs: code page support is disabled [ 92.159503][ T6157] hpfs: hpfs_map_4sectors(): unaligned read [ 92.191208][ T6157] hpfs: hpfs_map_4sectors(): unaligned read [ 92.213284][ T6157] hpfs: filesystem error: unable to find root dir [ 92.292954][ T6157] hpfs: hpfs_map_4sectors(): unaligned read [ 92.316782][ T6157] hpfs: hpfs_map_sector(): read error [ 92.384680][ T6165] loop2: detected capacity change from 0 to 128 [ 92.445761][ T6165] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 92.503317][ T6165] hpfs: filesystem error: improperly stopped [ 92.511154][ T6165] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 92.543976][ T6165] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 92.582304][ T6151] loop0: detected capacity change from 0 to 32768 [ 92.612294][ T6165] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2 [ 92.668433][ T6175] loop4: detected capacity change from 0 to 1764 [ 92.792728][ T6151] XFS (loop0): Mounting V5 Filesystem [ 92.830737][ T6175] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 92.836265][ T6188] loop1: detected capacity change from 0 to 1024 [ 92.971363][ T6151] XFS (loop0): Ending clean mount [ 93.099797][ T154] hfsplus: b-tree write err: -5, ino 4 [ 93.121346][ T4182] XFS (loop0): Unmounting Filesystem [ 93.232513][ T6209] device ip6erspan0 entered promiscuous mode [ 93.256389][ T6210] loop3: detected capacity change from 0 to 1764 [ 93.361428][ T6210] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 93.468988][ T6215] [U] ^C [ 93.742349][ T6229] netlink: 'syz.3.827': attribute type 1 has an invalid length. [ 93.775721][ T6230] loop4: detected capacity change from 0 to 512 [ 93.782316][ T6229] netlink: 'syz.3.827': attribute type 2 has an invalid length. [ 93.871742][ T6230] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 93.890330][ T6204] loop2: detected capacity change from 0 to 40427 [ 93.910296][ T6230] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.937946][ T6204] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x1ffff [ 93.987413][ T6204] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x35f7 [ 94.005344][ T6204] F2FS-fs (loop2): invalid crc value [ 94.053356][ T5473] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 94.065915][ T6204] F2FS-fs (loop2): Found nat_bits in checkpoint [ 94.194142][ T6248] netlink: 20 bytes leftover after parsing attributes in process `syz.4.833'. [ 94.199529][ T5231] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 94.248591][ T6204] F2FS-fs (loop2): Start checkpoint disabled! [ 94.300436][ T6204] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 94.333325][ T5473] usb 1-1: Using ep0 maxpacket: 32 [ 94.473916][ T5473] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 94.515067][ T5473] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 94.547873][ T5473] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 94.558913][ T5473] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 94.636726][ T5231] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 94.638024][ T6274] loop4: detected capacity change from 0 to 256 [ 94.653514][ T5231] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.688659][ T5231] usb 4-1: config 0 has no interface number 0 [ 94.693907][ T6274] exfat: Deprecated parameter 'namecase' [ 94.704519][ T5231] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 94.736510][ T5231] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 155, setting to 64 [ 94.741024][ T6274] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 94.747701][ T5473] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 94.804231][ T5231] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 94.827601][ T5473] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.843259][ T5473] usb 1-1: Product: syz [ 94.847451][ T5473] usb 1-1: Manufacturer: syz [ 94.852176][ T5231] usb 4-1: config 0 interface 52 has no altsetting 0 [ 94.872511][ T5473] usb 1-1: SerialNumber: syz [ 94.903977][ T5473] usb 1-1: config 0 descriptor?? [ 94.917925][ T6284] ieee802154 phy0 wpan0: encryption failed: -22 [ 94.955366][ T5473] usb 1-1: no audio or video endpoints found [ 94.989102][ T5231] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 94.999484][ T6287] delete_channel: no stack [ 95.018580][ T5231] usb 4-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 95.046013][ T5231] usb 4-1: Manufacturer: syz [ 95.058476][ T5231] usb 4-1: config 0 descriptor?? [ 95.070868][ T6292] autofs4:pid:6292:autofs_fill_super: called with bogus options [ 95.129230][ T5231] hub 4-1:0.52: bad descriptor, ignoring hub [ 95.143809][ T5231] hub: probe of 4-1:0.52 failed with error -5 [ 95.178783][ T4246] usb 1-1: USB disconnect, device number 8 [ 95.179152][ T6300] loop4: detected capacity change from 0 to 16 [ 95.231152][ T6304] loop2: detected capacity change from 0 to 512 [ 95.238275][ T6300] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 95.277048][ T6304] EXT4-fs (loop2): inline encryption not supported [ 95.291583][ T6304] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 95.308824][ T6300] cramfs: Error -3 while decompressing! [ 95.334928][ T5231] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input10 [ 95.340952][ T6304] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 95.353570][ T6300] cramfs: ffffffff961f0f68(453)->ffff888029b21000(4096) [ 95.380826][ T6304] EXT4-fs (loop2): 1 truncate cleaned up [ 95.407431][ T6304] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,jqfmt=vfsv0,inlinecrypt,noblock_validity,usrjquota=,,errors=continue. Quota mode: none. [ 95.429480][ T5473] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 95.606927][ T6312] netlink: 140 bytes leftover after parsing attributes in process `syz.2.863'. [ 95.713626][ T4942] usb 4-1: USB disconnect, device number 4 [ 95.833705][ T5473] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 95.851800][ T5473] usb 2-1: config 0 has no interface number 0 [ 95.868345][ T5473] usb 2-1: config 0 interface 51 has no altsetting 0 [ 96.063455][ T5473] usb 2-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=d9.7a [ 96.078551][ T5473] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.107424][ T5473] usb 2-1: Product: syz [ 96.111622][ T5473] usb 2-1: Manufacturer: syz [ 96.148036][ T6349] loop4: detected capacity change from 0 to 512 [ 96.154882][ T5473] usb 2-1: SerialNumber: syz [ 96.169147][ T5473] usb 2-1: config 0 descriptor?? [ 96.228131][ T5473] gspca_main: mars-2.14.0 probing 093a:050f [ 96.248545][ T6349] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 96.263476][ T6349] ext4 filesystem being mounted at /168/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.521352][ T5231] usb 2-1: USB disconnect, device number 7 [ 96.756499][ T6402] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 96.789008][ T6402] xt_TPROXY: Can be used only with -p tcp or -p udp [ 96.919669][ T6405] loop3: detected capacity change from 0 to 4096 [ 96.963513][ T6405] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 97.183269][ T6422] netlink: 28 bytes leftover after parsing attributes in process `syz.2.917'. [ 97.256766][ T6424] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.918'. [ 97.341198][ T6422] netlink: 28 bytes leftover after parsing attributes in process `syz.2.917'. [ 97.479942][ T6432] netlink: 'syz.1.921': attribute type 8 has an invalid length. [ 97.688016][ T6406] loop0: detected capacity change from 0 to 32768 [ 97.750488][ T6444] loop2: detected capacity change from 0 to 256 [ 97.764582][ T6406] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.909 (6406) [ 97.809161][ T6446] netlink: 24 bytes leftover after parsing attributes in process `syz.3.929'. [ 97.826269][ T6406] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 97.843738][ T6406] BTRFS info (device loop0): using free space tree [ 97.883318][ T6406] BTRFS info (device loop0): has skinny extents [ 98.107176][ T6420] loop4: detected capacity change from 0 to 32768 [ 98.271944][ T6420] XFS (loop4): Mounting V5 Filesystem [ 98.307050][ T6406] BTRFS info (device loop0): enabling ssd optimizations [ 98.435376][ T6420] XFS (loop4): Ending clean mount [ 98.498375][ T6493] netlink: 830 bytes leftover after parsing attributes in process `syz.2.938'. [ 98.554474][ T6493] device bond_slave_0 entered promiscuous mode [ 98.561039][ T6493] device bond_slave_1 entered promiscuous mode [ 98.704126][ T4196] XFS (loop4): Unmounting Filesystem [ 98.979731][ T6514] x_tables: duplicate entry at hook 3 [ 99.112230][ T6519] block nbd1: NBD_DISCONNECT [ 99.284184][ T6530] netlink: 20 bytes leftover after parsing attributes in process `syz.2.955'. [ 99.532920][ T6536] loop4: detected capacity change from 0 to 4096 [ 99.622728][ T6536] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 99.763905][ T6548] loop3: detected capacity change from 0 to 4096 [ 99.805671][ T6548] ntfs3: loop3: ino=3, Correct links count -> 2. [ 99.965333][ T6558] loop2: detected capacity change from 0 to 512 [ 100.093319][ T6558] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 100.129149][ T6522] loop0: detected capacity change from 0 to 32768 [ 100.137162][ T6558] ext4 filesystem being mounted at /248/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.176541][ T6522] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.949 (6522) [ 100.226733][ T6558] EXT4-fs error (device loop2): ext4_xattr_block_list:719: inode #15: comm syz.2.969: corrupted xattr block 13 [ 100.289123][ T6522] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 100.314784][ T6522] BTRFS info (device loop0): using free space tree [ 100.349439][ T6522] BTRFS info (device loop0): has skinny extents [ 100.398287][ T6585] comedi: No check for data length of config insn id 36 is implemented [ 100.411164][ T6585] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 100.421472][ T5475] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 100.431640][ T6585] comedi: Assuming n=15 is correct [ 100.622627][ T6610] loop2: detected capacity change from 0 to 16 [ 100.682021][ T6522] BTRFS info (device loop0): enabling ssd optimizations [ 100.686124][ T6617] loop1: detected capacity change from 0 to 8 [ 100.702424][ T6619] loop3: detected capacity change from 0 to 512 [ 100.731160][ T6610] erofs: (device loop2): mounted with root inode @ nid 36. [ 100.775093][ T6619] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 100.840187][ T5475] usb 5-1: config 0 has an invalid interface number: 130 but max is 0 [ 100.850304][ T5475] usb 5-1: config 0 has no interface number 0 [ 100.862668][ T5475] usb 5-1: config 0 interface 130 altsetting 0 endpoint 0x8B has an invalid bInterval 68, changing to 10 [ 100.874673][ T5475] usb 5-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e2.ca [ 100.889328][ T5475] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.909318][ T5475] usb 5-1: config 0 descriptor?? [ 100.943016][ T4411] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by udevd (4411) [ 100.975160][ T5475] usb 5-1: Found UVC 0.00 device (8086:0b5b) [ 100.983346][ T5475] usb 5-1: No valid video chain found. [ 101.048631][ T6619] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,stripe=0x0000000000000002,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 101.093280][ T5228] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 101.146720][ T6619] ext4 filesystem being mounted at /193/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.184291][ T1108] usb 5-1: USB disconnect, device number 7 [ 101.373437][ T5228] usb 3-1: Using ep0 maxpacket: 8 [ 101.523575][ T5228] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xC7, skipping [ 101.573646][ T6648] loop1: detected capacity change from 0 to 2048 [ 101.615182][ T6648] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 101.713534][ T5228] usb 3-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=14.a8 [ 101.729617][ T5228] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=24 [ 101.773214][ T5228] usb 3-1: Product: syz [ 101.778194][ T5228] usb 3-1: SerialNumber: syz [ 101.808640][ T5228] usb 3-1: config 0 descriptor?? [ 101.853618][ T6610] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 101.875285][ T5228] redrat3 3-1:0.0: Couldn't find all endpoints [ 102.099493][ T5228] usb 3-1: USB disconnect, device number 4 [ 102.438610][ T6710] ipt_REJECT: TCP_RESET invalid for non-tcp [ 102.606815][ T6722] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1033'. [ 102.749020][ T6735] [U]  [ 102.813430][ T4955] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 102.865574][ T6740] loop4: detected capacity change from 0 to 2048 [ 102.939785][ T6740] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 102.960885][ T6746] loop2: detected capacity change from 0 to 1024 [ 103.173683][ T4955] usb 4-1: descriptor type invalid, skip [ 103.257084][ T4955] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.283340][ T4955] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 103.390123][ T6760] loop0: detected capacity change from 0 to 4096 [ 103.463836][ T4955] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 103.483426][ T4955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.504717][ T4955] usb 4-1: Product: syz [ 103.510496][ T4955] usb 4-1: Manufacturer: syz [ 103.519808][ T4955] usb 4-1: SerialNumber: syz [ 103.528051][ T4955] usb 4-1: config 0 descriptor?? [ 103.622343][ T6744] loop1: detected capacity change from 0 to 32768 [ 103.693682][ T4954] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 103.773233][ T6744] ERROR: (device loop1): dbFindCtl: Corrupt dmapctl page [ 103.773233][ T6744] [ 103.791417][ T4955] usb 4-1: USB disconnect, device number 5 [ 103.812063][ T6744] ERROR: (device loop1): remounting filesystem as read-only [ 103.833325][ T6744] ialloc: diAlloc returned -5! [ 103.963697][ T4954] usb 3-1: Using ep0 maxpacket: 32 [ 104.028096][ T6786] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1066'. [ 104.069356][ T6774] loop4: detected capacity change from 0 to 32768 [ 104.086514][ T4954] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 104.110854][ T4954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.125590][ T6788] netlink: zone id is out of range [ 104.134949][ T4954] usb 3-1: config 0 descriptor?? [ 104.158427][ T6774] ERROR: (device loop4): dbAlloc: the hint is outside the map [ 104.158427][ T6774] [ 104.170606][ T6788] netlink: set zone limit has 8 unknown bytes [ 104.184508][ T6774] ialloc: diAlloc returned -5! [ 104.215319][ T4954] gspca_main: sq930x-2.14.0 probing 041e:403c [ 104.653300][ T4954] gspca_sq930x: ucbus_write failed -71 [ 104.658928][ T4954] sq930x: probe of 3-1:0.0 failed with error -71 [ 104.689373][ T4954] usb 3-1: USB disconnect, device number 5 [ 104.883353][ T5228] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 104.916619][ T6818] Unsupported ieee802154 address type: 0 [ 104.918389][ T6799] loop1: detected capacity change from 0 to 40427 [ 104.950563][ T6799] F2FS-fs (loop1): Fix alignment : internally, start(4096) end(16896) block(12288) [ 104.996880][ T6799] F2FS-fs (loop1): invalid crc value [ 105.013629][ T6799] F2FS-fs (loop1): Found nat_bits in checkpoint [ 105.014718][ T6808] loop0: detected capacity change from 0 to 32768 [ 105.055993][ T6808] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.1077 (6808) [ 105.113682][ T6808] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 105.143519][ T6808] BTRFS info (device loop0): force zlib compression, level 3 [ 105.150958][ T6808] BTRFS info (device loop0): force clearing of disk cache [ 105.163339][ T5228] usb 5-1: Using ep0 maxpacket: 16 [ 105.166405][ T6808] BTRFS info (device loop0): setting nodatasum [ 105.190694][ T6799] F2FS-fs (loop1): recover fsync data on readonly fs [ 105.208196][ T6799] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 105.225875][ T6808] BTRFS info (device loop0): allowing degraded mounts [ 105.230072][ T6826] openvswitch: netlink: Missing key (keys=40, expected=100) [ 105.243852][ T6808] BTRFS info (device loop0): enabling disk space caching [ 105.251159][ T6799] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 105.261160][ T6808] BTRFS info (device loop0): disk space caching is enabled [ 105.273946][ T6799] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 105.279100][ T6808] BTRFS info (device loop0): has skinny extents [ 105.324578][ T5228] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 105.354438][ T5228] usb 5-1: config 0 has no interface number 0 [ 105.380925][ T5228] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 105.392943][ T5228] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 105.537728][ T5228] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 105.573372][ T5228] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 105.608338][ T5228] usb 5-1: Manufacturer: syz [ 105.612966][ T5228] usb 5-1: SerialNumber: syz [ 105.679917][ T6808] BTRFS info (device loop0): clearing free space tree [ 105.704811][ T6808] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 105.715555][ T5228] usb 5-1: config 0 descriptor?? [ 105.743639][ T6812] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 105.755848][ T6865] loop2: detected capacity change from 0 to 64 [ 105.767387][ T6808] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 105.789960][ T6866] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 105.993775][ T5228] usbtouchscreen 5-1:0.214: Failed to read FW rev: -71 [ 106.011780][ T5228] usbtouchscreen: probe of 5-1:0.214 failed with error -71 [ 106.049441][ T5228] usb 5-1: USB disconnect, device number 8 [ 106.101353][ T1108] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 106.426946][ T6879] loop0: detected capacity change from 0 to 4096 [ 106.514186][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 106.534996][ T4183] syz-executor (4183) used greatest stack depth: 20928 bytes left [ 106.653431][ T893] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.768658][ T1108] usb 2-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 106.789622][ T893] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.805434][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.828548][ T1108] usb 2-1: Product: syz [ 106.832752][ T1108] usb 2-1: Manufacturer: syz [ 106.847919][ T1108] usb 2-1: SerialNumber: syz [ 106.881883][ T1108] usb 2-1: config 0 descriptor?? [ 106.921172][ T893] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.994328][ T1108] usbtouchscreen: probe of 2-1:0.0 failed with error -32 [ 107.054985][ T893] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.178103][ T4954] usb 2-1: USB disconnect, device number 8 [ 107.375823][ T6921] xt_CT: You must specify a L4 protocol and not use inversions on it [ 107.805873][ T6934] loop0: detected capacity change from 0 to 2048 [ 107.917897][ T6934] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 108.027382][ T6943] netlink: 'syz.1.1128': attribute type 1 has an invalid length. [ 108.132096][ T6945] loop0: detected capacity change from 0 to 512 [ 108.174205][ T6908] chnl_net:caif_netlink_parms(): no params data found [ 108.191960][ T6945] EXT4-fs (loop0): Ignoring removed bh option [ 108.198434][ T6907] loop3: detected capacity change from 0 to 32768 [ 108.234518][ T6907] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 108.247919][ T6945] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 108.255616][ T6907] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 108.261275][ T6945] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 108.330641][ T6907] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 108.377145][ T1111] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 108.384397][ T1111] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 108.412615][ T6952] IPv6: ADDRCONF(NETDEV_CHANGE): rose0: link becomes ready [ 108.463628][ T6945] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 108.483377][ T6945] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 108.554738][ T6945] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,bh,noblock_validity,,errors=continue. Quota mode: none. [ 108.556525][ T1111] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 172ms [ 108.580985][ T6926] loop4: detected capacity change from 0 to 32768 [ 108.633001][ T6945] fscrypt (loop0, inode 12): Error -61 getting encryption context [ 108.672909][ T1111] gfs2: fsid=syz:syz.0: jid=0: Done [ 108.680320][ T6926] XFS (loop4): Mounting V5 Filesystem [ 108.702405][ T6907] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 108.894852][ T6926] XFS (loop4): Ending clean mount [ 108.969144][ T6979] netlink: 'syz.1.1136': attribute type 10 has an invalid length. [ 108.972150][ T6926] XFS (loop4): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_finobt block 0x20 [ 108.996931][ T6979] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1136'. [ 109.014565][ T6926] XFS (loop4): Unmount and run xfs_repair [ 109.020921][ T6926] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 109.033415][ T6926] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 109.042395][ T6926] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 109.051522][ T6926] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 109.060752][ T6926] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 109.071736][ T6926] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 109.080966][ T6926] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 ................ [ 109.090886][ T6926] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 109.140586][ T6926] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 109.164253][ T6926] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1d3/0x2c0" at daddr 0x20 len 8 error 74 [ 109.192365][ T6908] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.203364][ T6908] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.215608][ T6926] XFS (loop4): Failed to initialize disk quotas. [ 109.236693][ T6908] device bridge_slave_0 entered promiscuous mode [ 109.278013][ T6908] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.303275][ T6908] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.303340][ T5475] Bluetooth: hci0: command 0x0409 tx timeout [ 109.311293][ T6908] device bridge_slave_1 entered promiscuous mode [ 109.363293][ T4954] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 109.463080][ T6989] ..: renamed from ipvlan0 [ 109.559521][ T4196] XFS (loop4): Unmounting Filesystem [ 109.644577][ T6908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.656569][ T6908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.773476][ T4954] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 109.782927][ T4954] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.794692][ T4954] usb 1-1: config 0 has no interface number 0 [ 109.800889][ T4954] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 109.812413][ T4954] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 155, setting to 64 [ 109.823882][ T4954] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.855389][ T4954] usb 1-1: config 0 interface 52 has no altsetting 0 [ 109.889359][ T6908] team0: Port device team_slave_0 added [ 109.905532][ T1108] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 109.954332][ T4954] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 109.964730][ T6908] team0: Port device team_slave_1 added [ 109.977345][ T4954] usb 1-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 110.021095][ T4954] usb 1-1: Manufacturer: syz [ 110.037204][ T4954] usb 1-1: config 0 descriptor?? [ 110.087056][ T7017] netlink: 'syz.3.1149': attribute type 21 has an invalid length. [ 110.101969][ T7017] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1149'. [ 110.104236][ T4954] hub 1-1:0.52: bad descriptor, ignoring hub [ 110.111716][ T7017] netlink: 'syz.3.1149': attribute type 5 has an invalid length. [ 110.131405][ T7017] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1149'. [ 110.137582][ T4954] hub: probe of 1-1:0.52 failed with error -5 [ 110.153365][ T6908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.160435][ T6908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.188821][ T6908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.193254][ T1108] usb 2-1: Using ep0 maxpacket: 16 [ 110.243135][ T7022] netlink: 'syz.3.1150': attribute type 16 has an invalid length. [ 110.268321][ T7022] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.1150'. [ 110.314064][ T893] device hsr_slave_0 left promiscuous mode [ 110.321244][ T893] device hsr_slave_1 left promiscuous mode [ 110.325225][ T4954] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input13 [ 110.361645][ T893] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.373832][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 110.381957][ T893] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.398442][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 110.412901][ T893] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.447433][ T893] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.486633][ T893] device bridge_slave_1 left promiscuous mode [ 110.509006][ T893] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.599454][ T893] device bridge_slave_0 left promiscuous mode [ 110.606092][ T893] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.630625][ T893] device veth1_macvtap left promiscuous mode [ 110.648982][ T893] device veth0_macvtap left promiscuous mode [ 110.649962][ T1108] usb 2-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=94.47 [ 110.663910][ T893] device veth1_vlan left promiscuous mode [ 110.673708][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.682759][ T893] device veth0_vlan left promiscuous mode [ 110.685082][ T1108] usb 2-1: Product: syz [ 110.695961][ T1108] usb 2-1: Manufacturer: syz [ 110.706041][ T1108] usb 2-1: SerialNumber: syz [ 110.719882][ T1111] usb 1-1: USB disconnect, device number 9 [ 110.721474][ T1108] usb 2-1: config 0 descriptor?? [ 110.763656][ T7003] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 110.775966][ T7041] loop3: detected capacity change from 0 to 4096 [ 110.801709][ T7041] NILFS: invalid option "cp=0x00aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa": too large checkpoint number [ 110.957386][ T7048] loop3: detected capacity change from 0 to 1024 [ 111.052194][ T1111] usb 2-1: USB disconnect, device number 9 [ 111.080029][ T7048] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,data_err=ignore,,errors=continue. Quota mode: none. [ 111.237071][ T7058] cgroup: subsys name conflicts with all [ 111.389605][ T5475] Bluetooth: hci0: command 0x041b tx timeout [ 111.417665][ T7068] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1165'. [ 111.539749][ T893] team0 (unregistering): Port device team_slave_1 removed [ 111.557997][ T7076] loop4: detected capacity change from 0 to 256 [ 111.572478][ T893] team0 (unregistering): Port device team_slave_0 removed [ 111.603404][ T1111] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 111.644885][ T893] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.659868][ T7076] FAT-fs (loop4): Directory bread(block 64) failed [ 111.666902][ T893] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.693460][ T7076] FAT-fs (loop4): Directory bread(block 65) failed [ 111.721073][ T7076] FAT-fs (loop4): Directory bread(block 66) failed [ 111.736253][ T7076] FAT-fs (loop4): Directory bread(block 67) failed [ 111.745237][ T7076] FAT-fs (loop4): Directory bread(block 68) failed [ 111.745631][ T7080] dlm: no locking on control device [ 111.751779][ T7076] FAT-fs (loop4): Directory bread(block 69) failed [ 111.751878][ T7076] FAT-fs (loop4): Directory bread(block 70) failed [ 111.751906][ T7076] FAT-fs (loop4): Directory bread(block 71) failed [ 111.751968][ T7076] FAT-fs (loop4): Directory bread(block 72) failed [ 111.784535][ T7076] FAT-fs (loop4): Directory bread(block 73) failed [ 111.843711][ T1111] usb 4-1: Using ep0 maxpacket: 8 [ 111.896606][ T893] team0 (unregistering): Port device bond0 removed [ 111.973443][ T1111] usb 4-1: config 0 has an invalid interface number: 122 but max is 0 [ 111.984529][ T1111] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.996925][ T893] bond0 (unregistering): Released all slaves [ 112.031288][ T1111] usb 4-1: config 0 has no interface number 0 [ 112.040731][ T1111] usb 4-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 112.088292][ T1111] usb 4-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 112.104198][ T1111] usb 4-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 255 [ 112.115109][ T1111] usb 4-1: config 0 interface 122 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 8 [ 112.145548][ T7095] xt_l2tp: v2 doesn't support IP mode [ 112.163843][ T6908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.170808][ T6908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.212549][ T6908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.333533][ T1111] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 112.342606][ T1111] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.372236][ T1111] usb 4-1: Product: syz [ 112.377128][ T1111] usb 4-1: Manufacturer: syz [ 112.381731][ T1111] usb 4-1: SerialNumber: syz [ 112.409605][ T1111] usb 4-1: config 0 descriptor?? [ 112.422508][ T6908] device hsr_slave_0 entered promiscuous mode [ 112.429628][ T6908] device hsr_slave_1 entered promiscuous mode [ 112.440049][ T7066] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 112.453361][ T7066] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 112.474620][ T6908] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.482206][ T6908] Cannot create hsr debugfs directory [ 112.515982][ T7111] loop4: detected capacity change from 0 to 512 [ 112.593472][ T4954] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 112.690439][ T7111] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 112.863479][ T4954] usb 1-1: Using ep0 maxpacket: 16 [ 112.914010][ T1111] usb 4-1: NFC: intf ffff8880784d4000 id ffffffff8c94ad60 [ 112.969208][ T6908] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 112.982471][ T1111] nfcmrvl 4-1:0.122: NFC: registered with nci successfully [ 112.988348][ T7132] loop1: detected capacity change from 0 to 2048 [ 113.013488][ T4954] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 113.025961][ T1111] usb 4-1: USB disconnect, device number 6 [ 113.047036][ T6908] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 113.056411][ T1111] usb 4-1: NFC: intf ffff8880784d4000 [ 113.077349][ T4954] usb 1-1: config 0 has no interface number 0 [ 113.102985][ T6908] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 113.113318][ T4954] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 113.145801][ T7132] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 113.216495][ T6908] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 113.227842][ T7143] loop4: detected capacity change from 0 to 64 [ 113.323571][ T4954] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 113.345277][ T4954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.385007][ T4954] usb 1-1: Product: syz [ 113.396877][ T4954] usb 1-1: Manufacturer: syz [ 113.401628][ T4954] usb 1-1: SerialNumber: syz [ 113.419841][ T4954] usb 1-1: config 0 descriptor?? [ 113.476941][ T5228] Bluetooth: hci0: command 0x040f tx timeout [ 113.515270][ T7156] netlink: 'syz.1.1195': attribute type 1 has an invalid length. [ 113.652310][ T6908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.688865][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 113.709250][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 113.742571][ T6908] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.819939][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 113.855603][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 113.894355][ T4316] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.901468][ T4316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.913471][ T4954] usbtouchscreen: probe of 1-1:0.214 failed with error -71 [ 113.936840][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 113.950576][ T4954] usb 1-1: USB disconnect, device number 10 [ 113.987365][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 114.052825][ T4316] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.059984][ T4316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.090912][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 114.152707][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 114.188203][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 114.222697][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 114.251234][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 114.296787][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 114.343694][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 114.379387][ T6908] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 114.428251][ T6908] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 114.443259][ T7199] dlm: no locking on control device [ 114.465047][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 114.484064][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 114.538220][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 114.567963][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 114.606234][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 114.665563][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 115.134763][ T7234] loop1: detected capacity change from 0 to 64 [ 115.260773][ T6908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.277860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 115.304973][ T7234] hfs: unable to locate alternate MDB [ 115.311890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 115.348774][ T7234] hfs: continuing without an alternate MDB [ 115.544951][ T1111] Bluetooth: hci0: command 0x0419 tx timeout [ 116.029480][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 116.074058][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 116.156375][ T6908] device veth0_vlan entered promiscuous mode [ 116.163395][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 116.192062][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 116.239043][ T6908] device veth1_vlan entered promiscuous mode [ 116.274681][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 116.283138][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 116.313053][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 116.386947][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 116.399779][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 116.425958][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 116.469935][ T6908] device veth0_macvtap entered promiscuous mode [ 116.498902][ T6908] device veth1_macvtap entered promiscuous mode [ 116.503255][ T4954] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 116.526821][ T7303] loop4: detected capacity change from 0 to 2048 [ 116.560950][ T6908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.641616][ T6908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.661401][ T6908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.674075][ T7303] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 116.679557][ T6908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.701600][ T6908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.712489][ T6908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.725165][ T6908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.754124][ T4954] usb 4-1: Using ep0 maxpacket: 8 [ 116.761711][ T7243] loop0: detected capacity change from 0 to 32768 [ 116.770865][ T6908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.782258][ T6908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.793786][ T6908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.805367][ T6908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.815964][ T6908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.827312][ T6908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.843323][ T6908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.863671][ T6908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.884621][ T6908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.910209][ T6908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.965704][ T6908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.991185][ T7243] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 117.001224][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 117.023878][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 117.042328][ T7243] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 117.056361][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 117.083520][ T4954] usb 4-1: New USB device found, idVendor=0471, idProduct=0313, bcdDevice=81.d5 [ 117.109581][ T4954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.140053][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 117.153143][ T7243] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 117.161706][ T4954] usb 4-1: Product: syz [ 117.172287][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 117.204427][ T5228] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 117.211810][ T5228] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 117.214306][ T4954] usb 4-1: Manufacturer: syz [ 117.243904][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 117.258524][ T4954] usb 4-1: SerialNumber: syz [ 117.292807][ T4954] usb 4-1: config 0 descriptor?? [ 117.308039][ T6908] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.320282][ T7335] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 117.340939][ T6908] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.341351][ T7336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1256'. [ 117.365280][ T4954] pwc: Philips PCVC720K/40 (ToUCam XS) USB webcam detected. [ 117.369478][ T6908] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.412396][ T6908] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.433741][ T5228] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 221ms [ 117.455558][ T5228] gfs2: fsid=syz:syz.0: jid=0: Done [ 117.472632][ T7243] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 117.643410][ T4954] pwc: send_video_command error -71 [ 117.648840][ T4954] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 117.673902][ T4954] Philips webcam: probe of 4-1:0.0 failed with error -71 [ 117.705031][ T1278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.727092][ T4954] usb 4-1: USB disconnect, device number 7 [ 117.772558][ T1278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.868504][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 117.979463][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.985308][ T7354] loop1: detected capacity change from 0 to 736 [ 118.019556][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.066968][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 118.309644][ T7364] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1268'. [ 118.612745][ T7382] loop5: detected capacity change from 0 to 8 [ 118.692893][ T7388] loop4: detected capacity change from 0 to 64 [ 118.805674][ T154] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.892084][ T7382] SQUASHFS error: Failed to read block 0x1ec: -5 [ 118.923379][ T7382] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 118.968536][ T154] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.138226][ T154] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.182268][ T7409] loop4: detected capacity change from 0 to 1024 [ 119.302380][ T154] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.643307][ T1111] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 119.699672][ T7432] openvswitch: netlink: Message has 4 unknown bytes. [ 119.893240][ T1111] usb 6-1: Using ep0 maxpacket: 8 [ 120.017487][ T1111] usb 6-1: config index 0 descriptor too short (expected 47, got 45) [ 120.034342][ T1111] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 120.065641][ T1111] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 120.096067][ T1111] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 40750, setting to 64 [ 120.133133][ T7458] loop3: detected capacity change from 0 to 8 [ 120.283473][ T1111] usb 6-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.7f [ 120.292545][ T1111] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.325226][ T1111] usb 6-1: Product: syz [ 120.329400][ T1111] usb 6-1: Manufacturer: syz [ 120.335549][ T1111] usb 6-1: SerialNumber: syz [ 120.395332][ T1111] usbtouchscreen: probe of 6-1:17.0 failed with error -8 [ 120.465469][ T4412] udevd[4412]: incorrect cramfs checksum on /dev/loop3 [ 120.480649][ T7458] cramfs: bad data blocksize 3222268820 [ 120.515685][ T7458] cramfs: Error -3 while decompressing! [ 120.532836][ T7458] cramfs: ffffffff961ed0dc(16)->ffff88807220f000(4096) [ 120.540765][ T7458] cramfs: bad data blocksize 3222268820 [ 120.576484][ T4411] udevd[4411]: incorrect cramfs checksum on /dev/loop3 [ 120.588985][ T25] audit: type=1800 audit(1763126019.678:3): pid=7458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1304" name="file2" dev="loop3" ino=348 res=0 errno=0 [ 120.619518][ T1111] usb 6-1: USB disconnect, device number 2 [ 120.912737][ T7486] loop3: detected capacity change from 0 to 128 [ 120.950099][ T7429] chnl_net:caif_netlink_parms(): no params data found [ 121.266963][ T7511] loop4: detected capacity change from 0 to 128 [ 121.374570][ T7429] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.386909][ T7429] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.402037][ T7429] device bridge_slave_0 entered promiscuous mode [ 121.496042][ T7429] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.530765][ T7429] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.550882][ T7429] device bridge_slave_1 entered promiscuous mode [ 121.569122][ T7527] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 121.638161][ T7531] delete_channel: no stack [ 121.679612][ T7534] loop0: detected capacity change from 0 to 128 [ 121.686538][ T7429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.708650][ T1111] Bluetooth: hci3: command 0x0409 tx timeout [ 121.730923][ T7429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.780145][ T7542] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1332'. [ 121.831233][ T7534] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 121.903324][ T7534] ext4 filesystem being mounted at /242/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 121.906157][ T7429] team0: Port device team_slave_0 added [ 121.925039][ T7429] team0: Port device team_slave_1 added [ 121.977431][ T7429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.993255][ T7429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.027849][ T7534] EXT4-fs warning (device loop0): verify_group_input:147: Cannot add at group 4095 (only 1 groups) [ 122.083825][ T7429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.145281][ T7429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.173749][ T7429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.278079][ T7429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.541814][ T154] device hsr_slave_0 left promiscuous mode [ 122.601660][ T7592] loop5: detected capacity change from 0 to 256 [ 122.657714][ T7599] capability: warning: `syz.4.1353' uses deprecated v2 capabilities in a way that may be insecure [ 122.669227][ T154] device hsr_slave_1 left promiscuous mode [ 122.740922][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.779634][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.818075][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.860067][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.889751][ T154] device bridge_slave_1 left promiscuous mode [ 122.912135][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.960164][ T154] device bridge_slave_0 left promiscuous mode [ 122.974876][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.009833][ T154] device veth1_macvtap left promiscuous mode [ 123.016001][ T154] device veth0_macvtap left promiscuous mode [ 123.022036][ T154] device veth1_vlan left promiscuous mode [ 123.031596][ T154] device veth0_vlan left promiscuous mode [ 123.247830][ T154] team0 (unregistering): Port device team_slave_1 removed [ 123.267266][ T154] team0 (unregistering): Port device team_slave_0 removed [ 123.281935][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.296673][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.345527][ T154] team0 (unregistering): Port device bond0 removed [ 123.369925][ T154] bond0 (unregistering): Released all slaves [ 123.419973][ T7429] device hsr_slave_0 entered promiscuous mode [ 123.426784][ T7429] device hsr_slave_1 entered promiscuous mode [ 123.433623][ T7429] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 123.442372][ T7429] Cannot create hsr debugfs directory [ 123.461481][ T7610] netlink: 'syz.3.1358': attribute type 12 has an invalid length. [ 123.473545][ T7612] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1357'. [ 123.784140][ T1111] Bluetooth: hci3: command 0x041b tx timeout [ 123.822584][ T7636] loop0: detected capacity change from 0 to 256 [ 123.912394][ T7639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1370'. [ 123.942011][ T7636] exfat: Deprecated parameter 'utf8' [ 123.947752][ T7636] exfat: Deprecated parameter 'namecase' [ 123.981661][ T7636] exfat: Deprecated parameter 'namecase' [ 123.996844][ T7636] exfat: Deprecated parameter 'utf8' [ 124.073442][ T7636] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 124.094251][ T7429] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 124.120407][ T7429] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 124.156431][ T7429] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 124.222930][ T7429] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 124.313426][ T5228] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 124.445256][ T7662] loop3: detected capacity change from 0 to 4096 [ 124.539123][ T7662] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 124.581131][ T7429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.603460][ T5228] usb 6-1: Using ep0 maxpacket: 16 [ 124.609557][ T7662] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 124.629467][ T7675] loop4: detected capacity change from 0 to 4096 [ 124.658047][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 124.663581][ T7] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 124.676187][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 124.699737][ T7662] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 124.715604][ T7429] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.738406][ T7662] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 124.757777][ T5228] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 124.773571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 124.786203][ T5228] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.803770][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 124.808857][ T7675] NILFS (loop4): mounting unchecked fs [ 124.822131][ T5228] usb 6-1: config 0 has no interface number 0 [ 124.828579][ T7675] NILFS (loop4): recovery required for readonly filesystem [ 124.835992][ T7662] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 124.847194][ T7675] NILFS (loop4): write access will be enabled during recovery [ 124.855374][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.862491][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.885793][ T7675] NILFS (loop4): invalid segment: Checksum error in segment payload [ 124.912152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 124.920593][ T7662] ntfs: volume version 3.1. [ 124.930278][ T7662] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 124.943701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 124.951863][ T7675] NILFS (loop4): trying rollback from an earlier position [ 124.969949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 124.988385][ T7662] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 125.010776][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.017891][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.029675][ T7675] NILFS (loop4): recovery complete [ 125.037615][ T7662] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 125.053355][ T5228] usb 6-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 125.062397][ T5228] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.081810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 125.099506][ T5228] usb 6-1: Product: syz [ 125.104157][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.114786][ T5228] usb 6-1: Manufacturer: syz [ 125.118130][ T7683] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 125.130067][ T7] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 125.143197][ T5228] usb 6-1: SerialNumber: syz [ 125.153029][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 125.172248][ T7662] ntfs: (device loop3): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt. [ 125.189488][ T5228] usb 6-1: config 0 descriptor?? [ 125.196919][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 125.213451][ T7] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 125.250563][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.253014][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 125.265188][ T5228] usb 6-1: Found UVC 0.00 device syz (046c:14e8) [ 125.274271][ T5228] usb 6-1: No valid video chain found. [ 125.299791][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 125.328496][ T7] usb 1-1: config 0 descriptor?? [ 125.344027][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 125.364906][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 125.413431][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 125.439759][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 125.470228][ T5473] usb 6-1: USB disconnect, device number 3 [ 125.484886][ T7429] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 125.507361][ T7429] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 125.537856][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 125.564860][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 125.614409][ T7] Bluetooth: Can't get state to change to load ram patch err [ 125.642322][ T7] Bluetooth: Loading patch file failed [ 125.671181][ T7695] loop3: detected capacity change from 0 to 256 [ 125.677920][ T7] ath3k: probe of 1-1:0.0 failed with error -121 [ 125.867113][ T4954] usb 1-1: USB disconnect, device number 11 [ 125.874073][ T5473] Bluetooth: hci3: command 0x040f tx timeout [ 125.985357][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 126.004438][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 126.051677][ T7429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.272252][ T7718] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 126.335558][ T7718] overlayfs: missing 'lowerdir' [ 126.409236][ T7719] loop3: detected capacity change from 0 to 4096 [ 126.534184][ T7719] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 126.603985][ T7733] loop0: detected capacity change from 0 to 16 [ 126.733144][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 126.742101][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 126.805161][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 126.824356][ T7733] erofs: (device loop0): mounted with root inode @ nid 36. [ 126.864349][ T4189] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -13 in[56, 4040] out[9000] [ 126.887167][ T7733] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -13 in[56, 4040] out[4096] [ 126.893368][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 126.955079][ T7429] device veth0_vlan entered promiscuous mode [ 127.022336][ T25] kauditd_printk_skb: 5 callbacks suppressed [ 127.022350][ T25] audit: type=1800 audit(1763126026.108:4): pid=7733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1395" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 127.059956][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 127.101684][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 127.141478][ T7429] device veth1_vlan entered promiscuous mode [ 127.256574][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 127.269913][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 127.351853][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 127.357328][ T7757] program syz.3.1404 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 127.382101][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 127.448555][ T7690] loop4: detected capacity change from 0 to 65536 [ 127.462665][ T7429] device veth0_macvtap entered promiscuous mode [ 127.494609][ T7429] device veth1_macvtap entered promiscuous mode [ 127.510701][ T7762] loop5: detected capacity change from 0 to 512 [ 127.557878][ T7762] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 127.570504][ T7429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.631259][ T7429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.646721][ T7762] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.1407: iget: bad i_size value: 360287970189639680 [ 127.671389][ T7429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.682136][ T7429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.692490][ T7429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.723237][ T7762] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.1407: couldn't read orphan inode 15 (err -117) [ 127.734551][ T7429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.745248][ T7429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.761060][ T7429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.772396][ T7429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.796498][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 127.814055][ T7762] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 127.819915][ T7690] XFS (loop4): Mounting V5 Filesystem [ 127.835837][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 127.844641][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 127.853668][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 127.895651][ T7429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.953660][ T5473] Bluetooth: hci3: command 0x0419 tx timeout [ 127.970740][ T7429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.003282][ T7762] EXT4-fs error (device loop5): ext4_empty_dir:3145: inode #12: block 13: comm syz.5.1407: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=12, rec_len=0, size=4096 fake=1 [ 128.017474][ T7690] XFS (loop4): Ending clean mount [ 128.041634][ T7690] XFS (loop4): Quotacheck needed: Please wait. [ 128.063944][ T7429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.103134][ T7429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.123707][ T7762] EXT4-fs warning (device loop5): ext4_empty_dir:3147: inode #12: comm syz.5.1407: directory missing '.' [ 128.163289][ T7429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.191448][ T7690] XFS (loop4): Quotacheck: Done. [ 128.213699][ T7429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.269330][ T7429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.288452][ T7793] loop3: detected capacity change from 0 to 256 [ 128.305791][ T7429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.347988][ T7429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.390679][ T7793] FAT-fs (loop3): Directory bread(block 64) failed [ 128.397652][ T7429] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.449888][ T7793] FAT-fs (loop3): Directory bread(block 65) failed [ 128.457051][ T7429] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.468717][ T7793] FAT-fs (loop3): Directory bread(block 66) failed [ 128.482054][ T7429] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.491177][ T7793] FAT-fs (loop3): Directory bread(block 67) failed [ 128.495654][ T7429] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.502305][ T7793] FAT-fs (loop3): Directory bread(block 68) failed [ 128.518738][ T4196] XFS (loop4): Unmounting Filesystem [ 128.547023][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 128.574145][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 128.603943][ T7793] FAT-fs (loop3): Directory bread(block 69) failed [ 128.618330][ T7793] FAT-fs (loop3): Directory bread(block 70) failed [ 128.719165][ T7793] FAT-fs (loop3): Directory bread(block 71) failed [ 128.750793][ T7793] FAT-fs (loop3): Directory bread(block 72) failed [ 128.780503][ T7793] FAT-fs (loop3): Directory bread(block 73) failed [ 128.855585][ T4316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.893880][ T4316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.970024][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 129.000215][ T4315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.023528][ T4315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.077530][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 129.336944][ T7829] netlink: 'syz.3.1428': attribute type 11 has an invalid length. [ 129.400654][ T7829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1428'. [ 129.590558][ T7834] loop6: detected capacity change from 0 to 4096 [ 129.673252][ T7834] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 129.696508][ T7849] loop3: detected capacity change from 0 to 128 [ 129.860989][ T7849] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,init_itable,,errors=continue. Quota mode: writeback. [ 129.940787][ T7849] ext4 filesystem being mounted at /313/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 130.285595][ T7887] loop3: detected capacity change from 0 to 512 [ 130.354690][ T7894] netlink: 10 bytes leftover after parsing attributes in process `syz.6.1453'. [ 130.390573][ T7887] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 130.449385][ T7887] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.1445: iget: bad i_size value: 360287970189639680 [ 130.500012][ T7887] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.1445: couldn't read orphan inode 15 (err -117) [ 130.517278][ T7887] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 130.525121][ T7893] loop4: detected capacity change from 0 to 4096 [ 130.566282][ T7907] loop5: detected capacity change from 0 to 128 [ 130.582330][ T7887] EXT4-fs error (device loop3): ext4_empty_dir:3145: inode #12: block 13: comm syz.3.1445: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=12, rec_len=0, size=4096 fake=1 [ 130.603729][ T7908] loop0: detected capacity change from 0 to 64 [ 130.612265][ T7887] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz.3.1445: directory missing '.' [ 130.640653][ T7907] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 130.651475][ T7893] ntfs: (device loop4): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 130.675289][ T7893] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 130.699888][ T7893] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 130.723437][ T7907] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 130.751348][ T7893] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 130.861199][ T7893] ntfs: volume version 3.1. [ 131.033282][ T4943] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 131.293280][ T4943] usb 7-1: Using ep0 maxpacket: 32 [ 131.413684][ T7957] erofs: (device nullb0): erofs_read_superblock: cannot find valid erofs superblock [ 131.453438][ T4943] usb 7-1: unable to get BOS descriptor or descriptor too short [ 131.543597][ T4943] usb 7-1: config 7 has an invalid interface number: 128 but max is 0 [ 131.563092][ T4943] usb 7-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 131.609765][ T4943] usb 7-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 131.612702][ T7960] loop3: detected capacity change from 0 to 4096 [ 131.660857][ T4943] usb 7-1: config 7 has no interface number 0 [ 131.676033][ T4943] usb 7-1: config 7 interface 128 altsetting 2 has an invalid endpoint with address 0x17, skipping [ 131.711325][ T7960] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 131.744075][ T4943] usb 7-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 131.783915][ T4943] usb 7-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 131.845455][ T4943] usb 7-1: config 7 interface 128 has no altsetting 0 [ 132.003571][ T4943] usb 7-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 132.012649][ T4943] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.020843][ T5909] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 132.041559][ T4943] usb 7-1: Product: syz [ 132.056297][ T4943] usb 7-1: Manufacturer: syz [ 132.071597][ T7979] x_tables: duplicate underflow at hook 2 [ 132.078934][ T4943] usb 7-1: SerialNumber: syz [ 132.123754][ T7913] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 132.311755][ T7990] loop3: detected capacity change from 0 to 512 [ 132.361796][ T7995] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1489'. [ 132.388801][ T7990] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 132.399603][ T5909] usb 5-1: config 0 has an invalid interface number: 189 but max is 0 [ 132.413303][ T5909] usb 5-1: config 0 has no interface number 0 [ 132.421118][ T7990] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ce01c, mo2=0002] [ 132.429471][ T5909] usb 5-1: config 0 interface 189 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 132.440676][ T5909] usb 5-1: config 0 interface 189 altsetting 0 has an invalid endpoint with address 0xE3, skipping [ 132.451805][ T7990] System zones: 1-12 [ 132.454176][ T5909] usb 5-1: config 0 interface 189 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 132.465681][ T5909] usb 5-1: config 0 interface 189 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 132.512299][ T7990] EXT4-fs (loop3): orphan cleanup on readonly fs [ 132.533605][ T4943] usb 7-1: MIDIStreaming interface descriptor not found [ 132.544155][ T7990] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1487: invalid indirect mapped block 12 (level 1) [ 132.550258][ T7969] loop0: detected capacity change from 0 to 40427 [ 132.585490][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.591855][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.594911][ T4943] usb 7-1: USB disconnect, device number 2 [ 132.642685][ T8003] netlink: 'syz.5.1490': attribute type 1 has an invalid length. [ 132.650933][ T5909] usb 5-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 132.660583][ T7990] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1487: invalid indirect mapped block 2 (level 2) [ 132.668313][ T7969] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 132.693255][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.701280][ T5909] usb 5-1: Product: syz [ 132.728747][ T7990] EXT4-fs (loop3): 1 truncate cleaned up [ 132.749255][ T5909] usb 5-1: Manufacturer: syz [ 132.753238][ T7969] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 132.759583][ T7990] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,nobarrier,,,errors=continue. Quota mode: writeback. [ 132.791660][ T5909] usb 5-1: SerialNumber: syz [ 132.816297][ T5909] usb 5-1: config 0 descriptor?? [ 132.833589][ T7964] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 132.841824][ T7969] F2FS-fs (loop0): invalid crc value [ 132.854779][ T5909] ums-alauda 5-1:0.189: USB Mass Storage device detected [ 132.924499][ T7969] F2FS-fs (loop0): Found nat_bits in checkpoint [ 132.924601][ T4197] udevd[4197]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:7.128/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 133.119382][ T1108] usb 5-1: USB disconnect, device number 9 [ 133.128366][ T7969] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 133.165737][ T7969] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 133.569380][ T8029] loop3: detected capacity change from 0 to 4096 [ 133.671334][ T8036] loop5: detected capacity change from 0 to 2048 [ 133.681680][ T8039] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 133.730258][ T8029] ntfs: (device loop3): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 133.766264][ T8036] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 133.796999][ T8029] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 133.828275][ T8036] UDF-fs: Scanning with blocksize 512 failed [ 133.834731][ T8029] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 133.898693][ T8036] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 133.922675][ T8029] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 133.967605][ T8036] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 134.010914][ T8029] ntfs: volume version 3.1. [ 134.040966][ T8029] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 134.100753][ T8029] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 134.168558][ T8029] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 134.280221][ T8029] ntfs: (device loop3): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is missing. [ 134.322447][ T8029] ntfs: (device loop3): ntfs_read_locked_index_inode(): Failed with error code -2 while reading index inode (mft_no 0x0, name_len 2. [ 134.380159][ T8029] ntfs: (device loop3): load_and_init_quota(): Failed to load $Quota/$Q index. [ 134.532883][ T8080] loop5: detected capacity change from 0 to 8 [ 134.684594][ T8073] loop0: detected capacity change from 0 to 8192 [ 134.759320][ T8073] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 134.845447][ T8073] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 134.861411][ T8099] Cannot find del_set index 2 as target [ 134.899707][ T8073] FAT-fs (loop0): Filesystem has been set read-only [ 134.906529][ T8104] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 135.020774][ T4182] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 135.391041][ T8129] syz.4.1535 (8129): drop_caches: 0 [ 135.726722][ T8145] loop0: detected capacity change from 0 to 2048 [ 135.856461][ T8155] x_tables: unsorted underflow at hook 2 [ 135.876742][ T8156] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 135.905153][ T8101] loop5: detected capacity change from 0 to 32768 [ 135.928141][ T8145] NILFS (loop0): error -2 truncating bmap (ino=16) [ 136.081129][ T8166] loop3: detected capacity change from 0 to 1024 [ 136.096881][ T8101] ERROR: (device loop5): duplicateIXtree: [ 136.096881][ T8101] [ 136.154550][ T8166] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 136.169247][ T8101] ERROR: (device loop5): remounting filesystem as read-only [ 136.203498][ T1108] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 136.733411][ T1108] usb 5-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice=40.bf [ 136.753601][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.761622][ T1108] usb 5-1: Product: syz [ 136.806706][ T1108] usb 5-1: Manufacturer: syz [ 136.811326][ T1108] usb 5-1: SerialNumber: syz [ 136.864125][ T1108] usb 5-1: config 0 descriptor?? [ 136.898018][ T8200] loop0: detected capacity change from 0 to 4096 [ 136.916223][ T1108] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input19 [ 137.000755][ T8200] ntfs: volume version 3.1. [ 137.013116][ T8216] loop5: detected capacity change from 0 to 128 [ 137.102670][ T8216] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 137.146123][ T1108] usb 5-1: USB disconnect, device number 10 [ 137.163522][ T3546] bcm5974 5-1:0.0: could not read from device [ 137.169021][ T8221] misc userio: No port type given on /dev/userio [ 137.464512][ T8231] loop5: detected capacity change from 0 to 256 [ 137.567440][ T8231] FAT-fs (loop5): Directory bread(block 64) failed [ 137.610105][ T8181] loop6: detected capacity change from 0 to 32768 [ 137.623337][ T8231] FAT-fs (loop5): Directory bread(block 65) failed [ 137.634107][ T8231] FAT-fs (loop5): Directory bread(block 66) failed [ 137.666465][ T8231] FAT-fs (loop5): Directory bread(block 67) failed [ 137.673102][ T8231] FAT-fs (loop5): Directory bread(block 68) failed [ 137.717863][ T8231] FAT-fs (loop5): Directory bread(block 69) failed [ 137.725094][ T8231] FAT-fs (loop5): Directory bread(block 70) failed [ 137.731879][ T8231] FAT-fs (loop5): Directory bread(block 71) failed [ 137.740714][ T8231] FAT-fs (loop5): Directory bread(block 72) failed [ 137.747711][ T8231] FAT-fs (loop5): Directory bread(block 73) failed [ 137.891993][ T8181] XFS (loop6): Mounting V5 Filesystem [ 137.985768][ T8181] XFS (loop6): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 138.034592][ T8268] loop0: detected capacity change from 0 to 1764 [ 138.042523][ T8181] XFS (loop6): Starting recovery (logdev: internal) [ 138.147982][ T8181] XFS (loop6): Ending recovery (logdev: internal) [ 138.260339][ T7429] XFS (loop6): Unmounting Filesystem [ 138.399073][ T8287] loop4: detected capacity change from 0 to 512 [ 138.473262][ T5909] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 138.519197][ T8287] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 138.534321][ T8287] EXT4-fs (loop4): orphan cleanup on readonly fs [ 138.574556][ T8287] EXT4-fs warning (device loop4): ext4_enable_quotas:6461: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 138.610160][ T8287] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 138.674916][ T8287] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #13: comm syz.4.1590: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 138.725470][ T8287] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.1590: couldn't read orphan inode 13 (err -117) [ 138.739147][ T8287] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,noblock_validity,min_batch_time=0x000000000000082f,grpquota,debug,debug,grpid,,errors=continue. Quota mode: writeback. [ 138.755668][ T8305] netlink: 'syz.5.1599': attribute type 1 has an invalid length. [ 138.773535][ T8287] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 138.797452][ T8287] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 138.855024][ T5909] usb 1-1: config 0 interface 0 altsetting 60 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 138.890035][ T8287] EXT4-fs warning (device loop4): ext4_enable_quotas:6461: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 138.890891][ T5909] usb 1-1: config 0 interface 0 altsetting 60 endpoint 0xD has invalid maxpacket 65278, setting to 1024 [ 138.960998][ T5909] usb 1-1: config 0 interface 0 altsetting 60 bulk endpoint 0xD has invalid maxpacket 1024 [ 138.982741][ T8316] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1603'. [ 138.998250][ T5909] usb 1-1: config 0 interface 0 has no altsetting 0 [ 139.022744][ T5909] usb 1-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=ae.ad [ 139.043548][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.067267][ T5909] usb 1-1: config 0 descriptor?? [ 139.097240][ T8268] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 139.125535][ T8324] loop3: detected capacity change from 0 to 256 [ 139.198803][ T8324] FAT-fs (loop3): Directory bread(block 64) failed [ 139.222659][ T8324] FAT-fs (loop3): Directory bread(block 65) failed [ 139.287574][ T8324] FAT-fs (loop3): Directory bread(block 66) failed [ 139.307602][ T8324] FAT-fs (loop3): Directory bread(block 67) failed [ 139.324587][ T8324] FAT-fs (loop3): Directory bread(block 68) failed [ 139.341765][ T8324] FAT-fs (loop3): Directory bread(block 69) failed [ 139.348699][ T5909] usb 1-1: string descriptor 0 read error: -71 [ 139.369725][ T5909] usb 1-1: ucan: probing device on interface #0 [ 139.383432][ T8324] FAT-fs (loop3): Directory bread(block 70) failed [ 139.391537][ T8337] tc_dump_action: action bad kind [ 139.393520][ T8324] FAT-fs (loop3): Directory bread(block 71) failed [ 139.409386][ T5909] usb 1-1: ucan: invalid endpoint configuration [ 139.443223][ T5909] usb 1-1: ucan: probe failed; try to update the device firmware [ 139.453504][ T8324] FAT-fs (loop3): Directory bread(block 72) failed [ 139.460060][ T8324] FAT-fs (loop3): Directory bread(block 73) failed [ 139.486976][ T5909] usb 1-1: USB disconnect, device number 12 [ 139.689493][ T8353] loop5: detected capacity change from 0 to 164 [ 139.870368][ T8363] loop4: detected capacity change from 0 to 256 [ 139.913462][ T5909] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 140.041203][ T8363] FAT-fs (loop4): Directory bread(block 64) failed [ 140.065385][ T8363] FAT-fs (loop4): Directory bread(block 65) failed [ 140.079694][ T8363] FAT-fs (loop4): Directory bread(block 66) failed [ 140.086868][ T8377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1629'. [ 140.093271][ T8363] FAT-fs (loop4): Directory bread(block 67) failed [ 140.112686][ T8363] FAT-fs (loop4): Directory bread(block 68) failed [ 140.132042][ T8363] FAT-fs (loop4): Directory bread(block 69) failed [ 140.146981][ T8363] FAT-fs (loop4): Directory bread(block 70) failed [ 140.171278][ T8363] FAT-fs (loop4): Directory bread(block 71) failed [ 140.198905][ T8363] FAT-fs (loop4): Directory bread(block 72) failed [ 140.218092][ T8363] FAT-fs (loop4): Directory bread(block 73) failed [ 140.293424][ T5909] usb 7-1: config 0 has an invalid interface number: 17 but max is 1 [ 140.301584][ T5909] usb 7-1: config 0 has an invalid interface number: 135 but max is 1 [ 140.342354][ T8392] vxcan1 speed is unknown, defaulting to 1000 [ 140.373454][ T5909] usb 7-1: config 0 has no interface number 0 [ 140.385885][ T8392] vxcan1 speed is unknown, defaulting to 1000 [ 140.392427][ T8392] vxcan1 speed is unknown, defaulting to 1000 [ 140.393270][ T5909] usb 7-1: config 0 has no interface number 1 [ 140.432457][ T5909] usb 7-1: config 0 interface 17 has no altsetting 0 [ 140.458601][ T5909] usb 7-1: config 0 interface 135 has no altsetting 0 [ 140.553015][ T8400] syz.0.1641 (8400): drop_caches: 0 [ 140.643609][ T5909] usb 7-1: New USB device found, idVendor=413c, idProduct=81cf, bcdDevice=1b.39 [ 140.671452][ T5909] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.703277][ T5909] usb 7-1: Product: syz [ 140.707520][ T5909] usb 7-1: Manufacturer: syz [ 140.741969][ T5909] usb 7-1: SerialNumber: syz [ 140.759783][ T5909] usb 7-1: config 0 descriptor?? [ 140.807937][ T1111] vxcan1 speed is unknown, defaulting to 1000 [ 140.815865][ T8392] infiniband syz2: set active [ 140.820917][ T8392] infiniband syz2: added vxcan1 [ 140.892379][ T8410] loop4: detected capacity change from 0 to 4096 [ 140.899883][ T8392] RDS/IB: syz2: added [ 140.911859][ T8392] smc: adding ib device syz2 with port count 1 [ 140.919065][ T8392] smc: ib device syz2 port 1 has pnetid [ 140.928897][ T5475] vxcan1 speed is unknown, defaulting to 1000 [ 140.940516][ T8392] vxcan1 speed is unknown, defaulting to 1000 [ 140.950920][ T8418] loop5: detected capacity change from 0 to 4096 [ 140.996444][ T8410] __ntfs_error: 17 callbacks suppressed [ 140.996461][ T8410] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 141.047063][ T8392] vxcan1 speed is unknown, defaulting to 1000 [ 141.067658][ T5909] usb 7-1: USB disconnect, device number 3 [ 141.075377][ T7] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 141.095663][ T8410] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. deltaxcn = 0x1, max_cluster = 0x0 [ 141.128263][ T8410] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 141.189021][ T8418] ntfs3: loop5: ino=5, "/" directory corrupted [ 141.203529][ T8418] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 141.214277][ T8410] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 141.295511][ T8410] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. deltaxcn = 0x1, max_cluster = 0x0 [ 141.353275][ T8410] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 141.353327][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 141.401413][ T8410] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 141.406039][ T8392] vxcan1 speed is unknown, defaulting to 1000 [ 141.442900][ T8410] ntfs: (device loop4): check_mft_mirror(): Failed to read $MFTMirr. [ 141.482695][ T8410] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 141.521339][ T8410] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 141.533444][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.542150][ T8410] ntfs: volume version 3.1. [ 141.581937][ T8429] loop5: detected capacity change from 0 to 4096 [ 141.589462][ T7] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 141.601775][ T8392] vxcan1 speed is unknown, defaulting to 1000 [ 141.607930][ T7] usb 1-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 141.643344][ T7] usb 1-1: config 0 interface 0 has no altsetting 1 [ 141.769816][ T8429] ntfs: volume version 3.1. [ 141.843501][ T7] usb 1-1: New USB device found, idVendor=0582, idProduct=0033, bcdDevice=8e.57 [ 141.862767][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.920577][ T7] usb 1-1: Product: syz [ 141.926936][ T8441] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1658'. [ 141.933214][ T7] usb 1-1: Manufacturer: syz [ 141.950687][ T7] usb 1-1: SerialNumber: syz [ 141.974107][ T7] usb 1-1: config 0 descriptor?? [ 142.009730][ T8392] vxcan1 speed is unknown, defaulting to 1000 [ 142.120817][ T7] snd-usb-audio: probe of 1-1:0.0 failed with error -2 [ 142.216002][ T4412] udevd[4412]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.340068][ T7] usb 1-1: USB disconnect, device number 13 [ 142.403314][ T5475] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 142.514588][ T8468] loop3: detected capacity change from 0 to 1024 [ 142.802248][ T8488] loop3: detected capacity change from 0 to 512 [ 142.873552][ T5475] usb 5-1: unable to get BOS descriptor or descriptor too short [ 142.880088][ T8488] EXT4-fs error (device loop3): ext4_acquire_dquot:6209: comm syz.3.1678: Failed to acquire dquot type 1 [ 142.932376][ T8488] EXT4-fs (loop3): 1 truncate cleaned up [ 142.941231][ T8488] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,sysvgroups,,errors=continue. Quota mode: writeback. [ 142.965637][ T8488] ext4 filesystem being mounted at /359/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.013663][ T5475] usb 5-1: config 1 interface 1 has no altsetting 0 [ 143.022779][ T8488] EXT4-fs error (device loop3): ext4_acquire_dquot:6209: comm syz.3.1678: Failed to acquire dquot type 1 [ 143.044865][ T8501] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1682'. [ 143.065747][ T8504] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1684'. [ 143.082959][ T8501] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1682'. [ 143.127134][ T8504] openvswitch: netlink: Key 29 has unexpected len 3064 expected 0 [ 143.194993][ T5475] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 143.212262][ T5475] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.298208][ T5475] usb 5-1: Product: syz [ 143.302415][ T5475] usb 5-1: Manufacturer: syz [ 143.317883][ T5475] usb 5-1: SerialNumber: syz [ 143.399653][ T8524] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1690'. [ 143.523251][ T5909] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 143.582362][ T8538] loop5: detected capacity change from 0 to 136 [ 143.723502][ T5475] usb 5-1: found format II with max.bitrate = 2418, frame size=7 [ 143.739598][ T8549] loop6: detected capacity change from 0 to 16 [ 143.742180][ T5475] usb 5-1: 2:1: All rates were zero [ 143.812291][ T8549] erofs: (device loop6): mounted with root inode @ nid 36. [ 143.850456][ T5475] usb 5-1: USB disconnect, device number 11 [ 143.880232][ T8549] erofs: (device loop6): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 143.893519][ T5909] usb 1-1: config 0 has no interfaces? [ 143.943629][ T8549] erofs: (device loop6): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 89 [ 143.985992][ T8549] erofs: (device loop6): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 144.025738][ T8549] erofs: (device loop6): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 89 [ 144.053412][ T5909] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 144.068647][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.085901][ T5909] usb 1-1: Product: syz [ 144.090351][ T5909] usb 1-1: Manufacturer: syz [ 144.100589][ T8549] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 144.111757][ T5909] usb 1-1: SerialNumber: syz [ 144.125256][ T5909] r8152-cfgselector 1-1: config 0 descriptor?? [ 144.138354][ T8564] loop5: detected capacity change from 0 to 16 [ 144.175021][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 144.220458][ T8564] erofs: (device loop5): erofs_read_superblock: blkszbits 9 isn't supported on this platform [ 144.241202][ T8568] device erspan1 entered promiscuous mode [ 144.395540][ T5909] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 144.477417][ T8585] loop5: detected capacity change from 0 to 164 [ 144.601064][ T5909] usb 1-1: USB disconnect, device number 14 [ 144.628639][ T8595] loop3: detected capacity change from 0 to 1024 [ 144.717254][ T5475] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 144.814850][ T4316] hfsplus: b-tree write err: -5, ino 4 [ 144.861738][ T8601] xt_l2tp: invalid flags combination: 0 [ 144.975028][ T8588] loop6: detected capacity change from 0 to 32768 [ 145.030289][ T8609] program syz.3.1727 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 145.069133][ T8588] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop6 scanned by syz.6.1718 (8588) [ 145.095924][ T8613] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1729'. [ 145.120017][ T8613] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1729'. [ 145.137200][ T8588] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm [ 145.148279][ T5475] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.148318][ T5475] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 145.148345][ T5475] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 145.148380][ T5475] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 145.148403][ T5475] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.154083][ T8613] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1729'. [ 145.211729][ T5475] usb 5-1: config 0 descriptor?? [ 145.230220][ T8588] BTRFS info (device loop6): force zlib compression, level 3 [ 145.247088][ T8588] BTRFS info (device loop6): force clearing of disk cache [ 145.254992][ T8588] BTRFS info (device loop6): setting nodatasum [ 145.261193][ T8588] BTRFS info (device loop6): allowing degraded mounts [ 145.269133][ T8588] BTRFS info (device loop6): enabling disk space caching [ 145.297600][ T8588] BTRFS info (device loop6): disk space caching is enabled [ 145.318636][ T8588] BTRFS info (device loop6): has skinny extents [ 145.327198][ T8613] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 145.473871][ T8630] device syz_tun entered promiscuous mode [ 145.502393][ T5475] usb 5-1: USB disconnect, device number 12 [ 145.644847][ T8588] BTRFS info (device loop6): clearing free space tree [ 145.651749][ T8588] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 145.685855][ T8588] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 145.969243][ T4412] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 10 /dev/loop6 scanned by udevd (4412) [ 146.158708][ T8678] loop5: detected capacity change from 0 to 1024 [ 146.272984][ T8685] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1751'. [ 146.377592][ T8678] EXT4-fs (loop5): mounted filesystem without journal. Opts: noauto_da_alloc,inode_readahead_blks=0x0000000000000000,auto_da_alloc,errors=remount-ro,. Quota mode: none. [ 146.651513][ T8707] device gtp0 entered promiscuous mode [ 146.753325][ T5475] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 147.323538][ T5475] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 147.332639][ T5475] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.383602][ T5475] usb 7-1: Product: syz [ 147.387801][ T5475] usb 7-1: Manufacturer: syz [ 147.392426][ T5475] usb 7-1: SerialNumber: syz [ 147.504087][ T5475] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 147.783863][ T8722] loop4: detected capacity change from 0 to 32768 [ 147.932253][ T8781] device bond1 entered promiscuous mode [ 147.968559][ T8781] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.975812][ T1111] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 148.085067][ T8792] loop5: detected capacity change from 0 to 2048 [ 148.152581][ T8792] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 148.183470][ T5475] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 148.377546][ T1111] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.413295][ T1111] usb 1-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 148.470405][ T1111] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.539515][ T1111] usb 1-1: config 0 descriptor?? [ 148.656149][ T8693] usb 7-1: USB disconnect, device number 4 [ 149.013300][ T4230] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 149.041817][ T1111] usb 1-1: USB disconnect, device number 15 [ 149.117970][ T8832] loop4: detected capacity change from 0 to 32768 [ 149.224055][ T5475] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 149.231055][ T5475] ath9k_htc: Failed to initialize the device [ 149.243833][ T8693] usb 7-1: ath9k_htc: USB layer deinitialized [ 149.380347][ T4230] usb 6-1: config 0 has an invalid interface number: 69 but max is 0 [ 149.393438][ T4230] usb 6-1: config 0 has no interface number 0 [ 149.409786][ T4230] usb 6-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 149.433711][ T4230] usb 6-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 149.633473][ T4230] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 149.642545][ T4230] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.725312][ T8872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1812'. [ 149.734483][ T4230] usb 6-1: Product: syz [ 149.738655][ T4230] usb 6-1: Manufacturer: syz [ 149.775209][ T4230] usb 6-1: SerialNumber: syz [ 149.794809][ T4230] usb 6-1: config 0 descriptor?? [ 149.823724][ T8833] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 149.844357][ T4230] cyberjack 6-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 149.898820][ T4230] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 150.243341][ T4230] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 150.258620][ T8864] loop4: detected capacity change from 0 to 32768 [ 150.265394][ T1111] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 150.328184][ T5473] usb 6-1: USB disconnect, device number 4 [ 150.351327][ T5473] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 150.378810][ T5473] cyberjack 6-1:0.69: device disconnected [ 150.439043][ T8864] XFS (loop4): Mounting V5 Filesystem [ 150.441632][ T8897] loop3: detected capacity change from 0 to 32768 [ 150.472420][ T8897] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1823 (8897) [ 150.493287][ T4230] usb 1-1: Using ep0 maxpacket: 16 [ 150.508730][ T8897] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 150.542702][ T8897] BTRFS info (device loop3): using free space tree [ 150.576976][ T8864] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 150.579100][ T8897] BTRFS info (device loop3): has skinny extents [ 150.655120][ T8864] XFS (loop4): Starting recovery (logdev: internal) [ 150.673352][ T1111] usb 7-1: config 0 has an invalid interface number: 56 but max is 0 [ 150.691763][ T1111] usb 7-1: config 0 has no interface number 0 [ 150.700621][ T8864] XFS (loop4): Ending recovery (logdev: internal) [ 150.773554][ T4230] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 150.791315][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.800898][ T4196] XFS (loop4): Unmounting Filesystem [ 150.845651][ T4230] usb 1-1: Product: syz [ 150.849866][ T4230] usb 1-1: Manufacturer: syz [ 150.886851][ T8938] loop5: detected capacity change from 0 to 64 [ 150.893375][ T1111] usb 7-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 150.898760][ T4230] usb 1-1: SerialNumber: syz [ 150.902984][ T1111] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.915602][ T1111] usb 7-1: Product: syz [ 150.933425][ T1111] usb 7-1: Manufacturer: syz [ 150.938681][ T1111] usb 7-1: SerialNumber: syz [ 150.946187][ T5473] Bluetooth: hci3: command 0x0407 tx timeout [ 150.960162][ T4230] r8152-cfgselector 1-1: config 0 descriptor?? [ 150.964026][ T1111] usb 7-1: config 0 descriptor?? [ 150.971635][ T8938] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 151.002132][ T8897] BTRFS info (device loop3): enabling ssd optimizations [ 151.112345][ T1111] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 151.126823][ T1111] pctv452e: pctv452e_power_ctrl: 1 [ 151.126823][ T1111] [ 151.139432][ T1111] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 151.139432][ T1111] [ 151.166480][ T1111] dvb-usb: bulk message failed: -22 (5/0) [ 151.201009][ T1111] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 151.240328][ T1111] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 151.443426][ T4230] r8152-cfgselector 1-1: Unknown version 0x0000 [ 151.456073][ T4230] r8152-cfgselector 1-1: bad CDC descriptors [ 151.503368][ T4230] r8152-cfgselector 1-1: Unknown version 0x0000 [ 151.506359][ T8947] loop5: detected capacity change from 0 to 4096 [ 151.521817][ T4230] r8152-cfgselector 1-1: USB disconnect, device number 16 [ 151.644825][ T8947] __ntfs_error: 15 callbacks suppressed [ 151.644843][ T8947] ntfs: (device loop5): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 151.741333][ T8947] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 151.770035][ T5908] usb 7-1: USB disconnect, device number 5 [ 151.815653][ T8947] ntfs: volume version 3.1. [ 151.883786][ T8947] ntfs: (device loop5): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4). Marking corrupt inode and base inode 0x1a as bad. Run chkdsk. [ 151.914528][ T8947] ntfs: (device loop5): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute. [ 151.973247][ T8947] ntfs: (device loop5): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 152.063502][ T8947] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Found already allocated name in phase 2. Please run chkdsk and if that doesn't find any errors please report you saw this message to linux-ntfs-dev@lists.sourceforge.net. [ 152.123520][ T8947] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 152.159579][ T8947] ntfs: (device loop5): ntfs_lookup(): ntfs_lookup_ino_by_name() failed with error code 5. [ 152.216277][ T8979] cgroup: No subsys list or none specified [ 152.243028][ T8982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1837'. [ 152.274267][ T8982] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1837'. [ 152.629010][ T9015] loop0: detected capacity change from 0 to 512 [ 152.700819][ T9011] loop3: detected capacity change from 0 to 4096 [ 152.767991][ T9011] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 152.836481][ T9015] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,inode_readahead_blks=0x0000000000010000,,errors=continue. Quota mode: writeback. [ 152.931049][ T9011] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 153.004713][ T9015] ext4 filesystem being mounted at /331/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 153.247000][ T4184] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 153.399313][ T9009] loop5: detected capacity change from 0 to 32768 [ 153.411667][ T9048] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1860'. [ 153.472684][ T9009] ERROR: (device loop5): dtSearch: DT_GETPAGE: dtree page corrupt [ 153.472684][ T9009] [ 153.496066][ T9009] ERROR: (device loop5): remounting filesystem as read-only [ 153.496102][ T9009] jfs_lookup: dtSearch returned -5 [ 153.900643][ T9073] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1869'. [ 154.207780][ T9087] loop0: detected capacity change from 0 to 2048 [ 154.337879][ T9087] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 154.341460][ T9102] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 154.452004][ T9087] UDF-fs: incorrect filename length (10) [ 154.553065][ T9115] loop5: detected capacity change from 0 to 512 [ 154.747947][ T9115] EXT4-fs (loop5): orphan cleanup on readonly fs [ 154.820445][ T9115] Quota error (device loop5): dq_insert_tree: Quota tree root isn't allocated! [ 154.843248][ T9115] Quota error (device loop5): qtree_write_dquot: Error -5 occurred while creating quota [ 154.933260][ T9115] EXT4-fs error (device loop5): ext4_acquire_dquot:6209: comm syz.5.1885: Failed to acquire dquot type 0 [ 155.005890][ T9138] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 155.025314][ T9115] EXT4-fs error (device loop5): ext4_acquire_dquot:6209: comm syz.5.1885: Failed to acquire dquot type 0 [ 155.075499][ T9115] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1885: bg 0: block 64: padding at end of block bitmap is not set [ 155.099428][ T9138] xt_CT: You must specify a L4 protocol and not use inversions on it [ 155.146700][ T9115] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 155.169374][ T9115] EXT4-fs error (device loop5): ext4_acquire_dquot:6209: comm syz.5.1885: Failed to acquire dquot type 0 [ 155.217855][ T9115] EXT4-fs (loop5): 1 orphan inode deleted [ 155.250629][ T9115] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000003,nolazytime,,errors=continue. Quota mode: writeback. [ 155.420328][ T9113] loop4: detected capacity change from 0 to 32768 [ 155.578338][ T4951] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 155.648993][ T9165] loop5: detected capacity change from 0 to 1024 [ 155.708216][ T9165] EXT4-fs (loop5): Ignoring removed nobh option [ 155.729092][ T9165] EXT4-fs error (device loop5): ext4_ext_check_inode:501: inode #11: comm syz.5.1904: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 155.755732][ T9165] EXT4-fs (loop5): Remounting filesystem read-only [ 155.770383][ T9165] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.1904: couldn't read orphan inode 11 (err -117) [ 155.839584][ T9165] EXT4-fs (loop5): Remounting filesystem read-only [ 155.874020][ T9165] EXT4-fs (loop5): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=remount-ro,quota,. Quota mode: writeback. [ 155.885410][ T9149] loop3: detected capacity change from 0 to 32768 [ 155.957428][ T9149] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1896 (9149) [ 155.970056][ T4951] usb 7-1: config 0 has an invalid interface number: 160 but max is 0 [ 155.978987][ T4951] usb 7-1: config 0 has no interface number 0 [ 155.991091][ T4951] usb 7-1: config 0 interface 160 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 156.013929][ T9149] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 156.031996][ T9149] BTRFS info (device loop3): using free space tree [ 156.064158][ T9149] BTRFS info (device loop3): has skinny extents [ 156.141133][ T9149] BTRFS info (device loop3): enabling ssd optimizations [ 156.153648][ T4951] usb 7-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=9e.4e [ 156.165695][ T4951] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.183396][ T4951] usb 7-1: Product: syz [ 156.187598][ T4951] usb 7-1: Manufacturer: syz [ 156.192200][ T4951] usb 7-1: SerialNumber: syz [ 156.208065][ T4951] usb 7-1: config 0 descriptor?? [ 156.213586][ T1111] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 156.258505][ T4951] usb 7-1: Found UVC 0.00 device syz (05ac:8501) [ 156.273001][ T4951] usb 7-1: No valid video chain found. [ 156.364925][ T4949] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 156.490970][ T4239] usb 7-1: USB disconnect, device number 6 [ 156.623645][ T1111] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.651448][ T1111] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 156.667048][ T9196] No such timeout policy "syz0" [ 156.861612][ T1111] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 156.877995][ T9214] sctp: [Deprecated]: syz.3.1916 (pid 9214) Use of struct sctp_assoc_value in delayed_ack socket option. [ 156.877995][ T9214] Use struct sctp_sack_info instead [ 156.891233][ T1111] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.901398][ T4949] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 156.903269][ T1111] usb 1-1: Product: syz [ 156.918596][ T1111] usb 1-1: Manufacturer: syz [ 156.923928][ T1111] usb 1-1: SerialNumber: syz [ 156.933390][ T4949] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.941840][ T4949] usb 6-1: Product: syz [ 156.984466][ T1111] cdc_ncm 1-1:1.0: skipping garbage [ 156.989742][ T4949] usb 6-1: Manufacturer: syz [ 156.992886][ T1111] cdc_ncm 1-1:1.0: NCM or ECM functional descriptors missing [ 156.997382][ T4949] usb 6-1: SerialNumber: syz [ 157.023228][ T1111] cdc_ncm 1-1:1.0: bind() failure [ 157.031412][ T1111] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 157.053979][ T1111] cdc_ncm 1-1:1.1: bind() failure [ 157.192992][ T1111] usb 1-1: USB disconnect, device number 17 [ 157.259676][ T9235] loop6: detected capacity change from 0 to 1024 [ 157.508316][ T154] hfsplus: b-tree write err: -5, ino 4 [ 157.594485][ T4949] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 157.612444][ T4949] usb 6-1: 2:1 : format type 0 is detected, processed as PCM [ 157.636914][ T4949] usb 6-1: 2:1 : sample bitwidth 205 in over sample bytes 2 [ 157.672216][ T4949] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 157.699439][ T9224] loop3: detected capacity change from 0 to 32768 [ 157.752804][ T4949] usb 6-1: USB disconnect, device number 5 [ 157.814803][ T9253] netlink: 'syz.0.1929': attribute type 1 has an invalid length. [ 157.933427][ T9224] XFS (loop3): Mounting V5 Filesystem [ 157.995169][ T4412] udevd[4412]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 158.048729][ T9279] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.1935'. [ 158.062784][ T9278] overlayfs: missing 'workdir' [ 158.063125][ T9275] loop0: detected capacity change from 0 to 2048 [ 158.113586][ T9224] XFS (loop3): Ending clean mount [ 158.153958][ T9224] XFS (loop3): Quotacheck needed: Please wait. [ 158.165509][ T9275] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 158.269340][ T9282] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 158.302384][ T9224] XFS (loop3): Quotacheck: Done. [ 158.309678][ T9286] loop5: detected capacity change from 0 to 256 [ 158.497925][ T9286] FAT-fs (loop5): Directory bread(block 64) failed [ 158.524347][ T9293] netlink: 'syz.4.1940': attribute type 1 has an invalid length. [ 158.532294][ T9286] FAT-fs (loop5): Directory bread(block 65) failed [ 158.539620][ T4184] XFS (loop3): Unmounting Filesystem [ 158.551367][ T9286] FAT-fs (loop5): Directory bread(block 66) failed [ 158.585380][ T9293] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1940'. [ 158.611235][ T9286] FAT-fs (loop5): Directory bread(block 67) failed [ 158.699208][ T9286] FAT-fs (loop5): Directory bread(block 68) failed [ 158.730929][ T9286] FAT-fs (loop5): Directory bread(block 69) failed [ 158.770798][ T9286] FAT-fs (loop5): Directory bread(block 70) failed [ 158.803566][ T9286] FAT-fs (loop5): Directory bread(block 71) failed [ 158.860283][ T9286] FAT-fs (loop5): Directory bread(block 72) failed [ 158.870531][ T9286] FAT-fs (loop5): Directory bread(block 73) failed [ 159.007019][ T9268] loop6: detected capacity change from 0 to 32768 [ 159.053880][ T9268] XFS: noikeep mount option is deprecated. [ 159.242757][ T9268] XFS (loop6): Mounting V5 Filesystem [ 159.287322][ T9314] Scaler: ================= START STATUS ================= [ 159.294915][ T9314] Scaler: ================== END STATUS ================== [ 159.424912][ T9268] XFS (loop6): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 159.545962][ T9325] loop0: detected capacity change from 0 to 1764 [ 159.564269][ T9268] XFS (loop6): Starting recovery (logdev: internal) [ 159.575075][ T9334] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1954'. [ 159.597819][ T9334] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1954'. [ 159.629048][ T9325] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 159.661551][ T9268] XFS (loop6): Ending recovery (logdev: internal) [ 159.703335][ T9325] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 159.766889][ T7429] XFS (loop6): Unmounting Filesystem [ 159.834175][ T9341] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 159.841337][ T9341] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 159.867578][ T9338] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 159.874126][ T9338] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 159.914402][ T9341] vhci_hcd vhci_hcd.0: Device attached [ 159.923620][ T9345] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 159.947914][ T9338] vhci_hcd vhci_hcd.0: Device attached [ 159.992574][ T9342] vhci_hcd: connection closed [ 159.995211][ T9339] vhci_hcd: connection closed [ 160.005987][ T4315] vhci_hcd: stop threads [ 160.026811][ T9347] xt_TCPMSS: Only works on TCP SYN packets [ 160.034935][ T4239] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 160.061488][ T4315] vhci_hcd: release socket [ 160.128967][ T4315] vhci_hcd: disconnect device [ 160.157236][ T4315] vhci_hcd: stop threads [ 160.161534][ T4315] vhci_hcd: release socket [ 160.163510][ T9330] loop5: detected capacity change from 0 to 32768 [ 160.175287][ T4315] vhci_hcd: disconnect device [ 160.236987][ T9330] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.1952 (9330) [ 160.297860][ T9330] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 160.316987][ T9330] BTRFS info (device loop5): using free space tree [ 160.327375][ T4239] usb 4-1: Using ep0 maxpacket: 32 [ 160.333976][ T9330] BTRFS info (device loop5): has skinny extents [ 160.473397][ T4239] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 160.482732][ T4239] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.498020][ T4239] usb 4-1: config 0 descriptor?? [ 160.536917][ T9330] BTRFS info (device loop5): enabling ssd optimizations [ 160.584955][ T4239] as10x_usb: device has been detected [ 160.590722][ T4239] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 160.725933][ T4239] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 160.743683][ T9397] bond0: (slave ip_vti0): Error: Device can not be enslaved while up [ 160.829278][ T4239] as10x_usb: error during firmware upload part1 [ 160.880424][ T4239] Registered device nBox DVB-T Dongle [ 160.893482][ T4239] usb 4-1: USB disconnect, device number 8 [ 161.059119][ T9414] netlink: 188 bytes leftover after parsing attributes in process `syz.6.1982'. [ 161.069662][ T4239] Unregistered device nBox DVB-T Dongle [ 161.094754][ T4239] as10x_usb: device has been disconnected [ 161.499638][ T9404] [ 161.501993][ T9404] ====================================================== [ 161.509015][ T9404] WARNING: possible circular locking dependency detected [ 161.516057][ T9404] syzkaller #0 Not tainted [ 161.520470][ T9404] ------------------------------------------------------ [ 161.527486][ T9404] syz.4.1977/9404 is trying to acquire lock: [ 161.533471][ T9404] ffff88807c5f8c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xc1/0x1b0 [ 161.544531][ T9404] [ 161.544531][ T9404] but task is already holding lock: [ 161.551899][ T9404] ffffffff8d4c0f28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x19e/0x560 [ 161.561573][ T9404] [ 161.561573][ T9404] which lock already depends on the new lock. [ 161.561573][ T9404] [ 161.571973][ T9404] [ 161.571973][ T9404] the existing dependency chain (in reverse order) is: [ 161.580990][ T9404] [ 161.580990][ T9404] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 161.588992][ T9404] __mutex_lock_common+0x1eb/0x2390 [ 161.594724][ T9404] mutex_lock_nested+0x17/0x20 [ 161.600018][ T9404] rfkill_register+0x33/0x8a0 [ 161.605229][ T9404] hci_register_dev+0x452/0x970 [ 161.610608][ T9404] vhci_create_device+0x32c/0x5c0 [ 161.616162][ T9404] vhci_write+0x391/0x450 [ 161.621018][ T9404] vfs_write+0x712/0xd00 [ 161.625791][ T9404] ksys_write+0x14d/0x250 [ 161.630649][ T9404] do_syscall_64+0x4c/0xa0 [ 161.635595][ T9404] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 161.642022][ T9404] [ 161.642022][ T9404] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 161.649849][ T9404] __mutex_lock_common+0x1eb/0x2390 [ 161.655582][ T9404] mutex_lock_nested+0x17/0x20 [ 161.660880][ T9404] vhci_send_frame+0x88/0x100 [ 161.666084][ T9404] hci_send_frame+0x1a9/0x2e0 [ 161.671288][ T9404] hci_tx_work+0x9f9/0x1710 [ 161.676321][ T9404] process_one_work+0x863/0x1000 [ 161.681791][ T9404] worker_thread+0xaa8/0x12a0 [ 161.686993][ T9404] kthread+0x436/0x520 [ 161.691584][ T9404] ret_from_fork+0x1f/0x30 [ 161.696520][ T9404] [ 161.696520][ T9404] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 161.705728][ T9404] __flush_work+0xdd/0x1b0 [ 161.710668][ T9404] hci_dev_do_close+0x1e7/0x1030 [ 161.716131][ T9404] hci_unregister_dev+0x2d7/0x580 [ 161.721677][ T9404] vhci_release+0x73/0xc0 [ 161.726530][ T9404] __fput+0x234/0x930 [ 161.731039][ T9404] task_work_run+0x125/0x1a0 [ 161.736152][ T9404] do_exit+0x61e/0x20a0 [ 161.740832][ T9404] do_group_exit+0x12e/0x300 [ 161.745947][ T9404] __x64_sys_exit_group+0x3b/0x40 [ 161.751498][ T9404] do_syscall_64+0x4c/0xa0 [ 161.756431][ T9404] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 161.762846][ T9404] [ 161.762846][ T9404] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 161.770485][ T9404] __mutex_lock_common+0x1eb/0x2390 [ 161.776208][ T9404] mutex_lock_nested+0x17/0x20 [ 161.781491][ T9404] bg_scan_update+0x44/0x3b0 [ 161.786605][ T9404] process_one_work+0x863/0x1000 [ 161.792063][ T9404] worker_thread+0xaa8/0x12a0 [ 161.797255][ T9404] kthread+0x436/0x520 [ 161.801838][ T9404] ret_from_fork+0x1f/0x30 [ 161.806771][ T9404] [ 161.806771][ T9404] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 161.816591][ T9404] __lock_acquire+0x2c33/0x7c60 [ 161.821969][ T9404] lock_acquire+0x197/0x3f0 [ 161.827002][ T9404] __flush_work+0xdd/0x1b0 [ 161.831942][ T9404] __cancel_work_timer+0x3ac/0x520 [ 161.837570][ T9404] hci_request_cancel_all+0xcc/0x300 [ 161.843382][ T9404] hci_dev_do_close+0x4e/0x1030 [ 161.848751][ T9404] hci_rfkill_set_block+0x10a/0x190 [ 161.854470][ T9404] rfkill_set_block+0x1c6/0x420 [ 161.859846][ T9404] rfkill_fop_write+0x458/0x560 [ 161.865223][ T9404] vfs_write+0x300/0xd00 [ 161.869987][ T9404] ksys_write+0x14d/0x250 [ 161.874834][ T9404] do_syscall_64+0x4c/0xa0 [ 161.879769][ T9404] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 161.886181][ T9404] [ 161.886181][ T9404] other info that might help us debug this: [ 161.886181][ T9404] [ 161.896403][ T9404] Chain exists of: [ 161.896403][ T9404] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 161.896403][ T9404] [ 161.912139][ T9404] Possible unsafe locking scenario: [ 161.912139][ T9404] [ 161.919585][ T9404] CPU0 CPU1 [ 161.924947][ T9404] ---- ---- [ 161.930311][ T9404] lock(rfkill_global_mutex); [ 161.935078][ T9404] lock(&data->open_mutex); [ 161.942197][ T9404] lock(rfkill_global_mutex); [ 161.949495][ T9404] lock((work_completion)(&hdev->bg_scan_update)); [ 161.956093][ T9404] [ 161.956093][ T9404] *** DEADLOCK *** [ 161.956093][ T9404] [ 161.964238][ T9404] 1 lock held by syz.4.1977/9404: [ 161.969268][ T9404] #0: ffffffff8d4c0f28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x19e/0x560 [ 161.979389][ T9404] [ 161.979389][ T9404] stack backtrace: [ 161.985295][ T9404] CPU: 0 PID: 9404 Comm: syz.4.1977 Not tainted syzkaller #0 [ 161.992787][ T9404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 162.002864][ T9404] Call Trace: [ 162.006151][ T9404] [ 162.009088][ T9404] dump_stack_lvl+0x168/0x230 [ 162.013782][ T9404] ? load_image+0x3b0/0x3b0 [ 162.018293][ T9404] ? show_regs_print_info+0x20/0x20 [ 162.023508][ T9404] ? print_circular_bug+0x12b/0x1a0 [ 162.028710][ T9404] check_noncircular+0x274/0x310 [ 162.033656][ T9404] ? add_chain_block+0x940/0x940 [ 162.038617][ T9404] ? lockdep_lock+0xdc/0x1e0 [ 162.043224][ T9404] ? __lock_acquire+0x12d9/0x7c60 [ 162.048259][ T9404] ? lockdep_lock+0x1e0/0x1e0 [ 162.052947][ T9404] ? mark_lock+0x94/0x320 [ 162.057411][ T9404] ? _find_first_zero_bit+0xce/0xf0 [ 162.062618][ T9404] __lock_acquire+0x2c33/0x7c60 [ 162.067483][ T9404] ? verify_lock_unused+0x140/0x140 [ 162.072689][ T9404] ? verify_lock_unused+0x140/0x140 [ 162.077907][ T9404] lock_acquire+0x197/0x3f0 [ 162.082416][ T9404] ? __flush_work+0xc1/0x1b0 [ 162.087013][ T9404] ? __lock_acquire+0x7c60/0x7c60 [ 162.092132][ T9404] ? read_lock_is_recursive+0x10/0x10 [ 162.097512][ T9404] ? start_flush_work+0x776/0x820 [ 162.102543][ T9404] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 162.108436][ T9404] ? _raw_spin_unlock+0x40/0x40 [ 162.113292][ T9404] __flush_work+0xdd/0x1b0 [ 162.117716][ T9404] ? __flush_work+0xc1/0x1b0 [ 162.122309][ T9404] ? flush_work+0x20/0x20 [ 162.126646][ T9404] ? try_to_grab_pending+0xf3/0x7e0 [ 162.131844][ T9404] ? lockdep_hardirqs_off+0x70/0x100 [ 162.137137][ T9404] ? mark_lock+0x94/0x320 [ 162.141476][ T9404] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 162.147472][ T9404] ? lock_chain_count+0x20/0x20 [ 162.152343][ T9404] ? mark_lock+0x94/0x320 [ 162.156682][ T9404] ? __cancel_work_timer+0x331/0x520 [ 162.161974][ T9404] __cancel_work_timer+0x3ac/0x520 [ 162.167095][ T9404] ? cancel_work_sync+0x20/0x20 [ 162.171950][ T9404] ? __cancel_work+0x1f4/0x2d0 [ 162.176720][ T9404] ? lockdep_hardirqs_on+0x94/0x140 [ 162.181925][ T9404] ? __cancel_work+0x26f/0x2d0 [ 162.186696][ T9404] ? cancel_work+0x20/0x20 [ 162.191114][ T9404] ? lock_chain_count+0x20/0x20 [ 162.195972][ T9404] hci_request_cancel_all+0xcc/0x300 [ 162.201271][ T9404] hci_dev_do_close+0x4e/0x1030 [ 162.206137][ T9404] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 162.212039][ T9404] ? _raw_spin_unlock+0x40/0x40 [ 162.216896][ T9404] hci_rfkill_set_block+0x10a/0x190 [ 162.222108][ T9404] ? rcu_lock_release+0x20/0x20 [ 162.226968][ T9404] rfkill_set_block+0x1c6/0x420 [ 162.231834][ T9404] rfkill_fop_write+0x458/0x560 [ 162.236700][ T9404] ? rfkill_fop_read+0x4b0/0x4b0 [ 162.241660][ T9404] ? common_file_perm+0x130/0x1c0 [ 162.246700][ T9404] ? fsnotify_perm+0x5d/0x560 [ 162.251480][ T9404] ? security_file_permission+0x75/0xa0 [ 162.257042][ T9404] ? rfkill_fop_read+0x4b0/0x4b0 [ 162.261987][ T9404] vfs_write+0x300/0xd00 [ 162.266234][ T9404] ? file_end_write+0x250/0x250 [ 162.271092][ T9404] ? __fget_files+0x40f/0x480 [ 162.275864][ T9404] ? __fdget_pos+0x1e2/0x370 [ 162.280454][ T9404] ? ksys_write+0x71/0x250 [ 162.284877][ T9404] ksys_write+0x14d/0x250 [ 162.289217][ T9404] ? __ia32_sys_read+0x80/0x80 [ 162.293991][ T9404] ? lockdep_hardirqs_on+0x94/0x140 [ 162.299199][ T9404] do_syscall_64+0x4c/0xa0 [ 162.303619][ T9404] ? clear_bhb_loop+0x30/0x80 [ 162.308308][ T9404] ? clear_bhb_loop+0x30/0x80 [ 162.312998][ T9404] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 162.318931][ T9404] RIP: 0033:0x7fc82639b6c9 [ 162.323351][ T9404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.342968][ T9404] RSP: 002b:00007fc824602038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 162.351393][ T9404] RAX: ffffffffffffffda RBX: 00007fc8265f1fa0 RCX: 00007fc82639b6c9 [ 162.359370][ T9404] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 162.367344][ T9404] RBP: 00007fc82641df91 R08: 0000000000000000 R09: 0000000000000000 [ 162.375315][ T9404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.383291][ T9404] R13: 00007fc8265f2038 R14: 00007fc8265f1fa0 R15: 00007ffd7b80f1d8 [ 162.391286][ T9404]