last executing test programs: 2m34.68653201s ago: executing program 1 (id=351): r0 = syz_io_uring_setup(0x39ce, &(0x7f0000000080)={0x0, 0xffffffff, 0x40, 0x10002}, &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) 2m34.567720149s ago: executing program 1 (id=354): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x437, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40c89}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e21}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e22}]}}}]}, 0x44}}, 0x0) 2m34.391673553s ago: executing program 1 (id=357): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0x4020565b, &(0x7f0000000040)) 2m34.321718489s ago: executing program 1 (id=358): r0 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\\\xa2\xfc\xe3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) 2m34.1854325s ago: executing program 1 (id=363): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17c, &(0x7f0000000500)="$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") open(&(0x7f0000000400)='./file2\x00', 0x40, 0x82) 2m33.295538781s ago: executing program 1 (id=392): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000080)={0x9}) 2m18.2553804s ago: executing program 32 (id=392): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000080)={0x9}) 1m42.702385576s ago: executing program 2 (id=1406): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newchain={0x24, 0x1e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x4, 0xd}, {0x4}}}, 0x24}}, 0x44004) 1m42.512302812s ago: executing program 2 (id=1411): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x5c}}, 0x80) 1m42.399558801s ago: executing program 2 (id=1413): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto, @func_proto]}}, &(0x7f0000000f40)=""/4089, 0x32, 0xff9, 0x1}, 0x28) 1m42.28673105s ago: executing program 2 (id=1415): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 1m42.16227504s ago: executing program 2 (id=1419): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17c, &(0x7f0000000500)="$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") open(&(0x7f0000000400)='./file2\x00', 0x40, 0x82) 1m41.210522686s ago: executing program 2 (id=1440): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@allocspi={0x114, 0x16, 0x1, 0x0, 0x0, {{{@in6=@private0, @in6=@remote}, {@in6=@loopback, 0x4d3, 0x6c}, @in, {0x0, 0x0, 0x0, 0x7ff, 0x6ef, 0x9, 0x0, 0xffffffffffff1b77}, {0x155, 0x7000000000000000, 0x0, 0x1}, {0x1, 0x8, 0x10000}}, 0x4, 0x4}, [@XFRMA_IF_ID={0x8}, @srcaddr={0x14, 0xd, @in=@remote}]}, 0x114}}, 0x0) 1m26.1135271s ago: executing program 33 (id=1440): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@allocspi={0x114, 0x16, 0x1, 0x0, 0x0, {{{@in6=@private0, @in6=@remote}, {@in6=@loopback, 0x4d3, 0x6c}, @in, {0x0, 0x0, 0x0, 0x7ff, 0x6ef, 0x9, 0x0, 0xffffffffffff1b77}, {0x155, 0x7000000000000000, 0x0, 0x1}, {0x1, 0x8, 0x10000}}, 0x4, 0x4}, [@XFRMA_IF_ID={0x8}, @srcaddr={0x14, 0xd, @in=@remote}]}, 0x114}}, 0x0) 3.593526213s ago: executing program 0 (id=3336): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, 0x0, &(0x7f0000000040)) 3.326627425s ago: executing program 0 (id=3339): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="580000001500192340834b80044d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000b0c10000000224e00000000", 0x58}], 0x1) 3.079583825s ago: executing program 0 (id=3343): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0xa, 0x0, 0x14, 0x2, 0x0, 0x70bd25, 0x25dfdbfc}, 0x10}}, 0x30004000) 2.952763815s ago: executing program 0 (id=3337): syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0x2, 0x232, &(0x7f0000000500)="$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") newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0, 0x2000) 2.422415227s ago: executing program 0 (id=3355): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17c, &(0x7f0000000500)="$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") open(&(0x7f0000000400)='./file2\x00', 0x40, 0x82) 2.113776371s ago: executing program 5 (id=3348): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x5, @mcast2}, 0x20) 2.050449747s ago: executing program 5 (id=3350): syz_mount_image$hfsplus(&(0x7f00000002c0), &(0x7f00000006c0)='./file1\x00', 0x3000c00, &(0x7f0000000200)=ANY=[], 0xff, 0x654, &(0x7f0000000a40)="$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") lgetxattr(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)=@random={'osx.', 'trusted.overlay.upper\x00'}, 0x0, 0x0) 1.737016471s ago: executing program 5 (id=3356): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6d706f6c3d62690bbe608ae7a8e257d632a80e6e643a302d4e3a332f", @ANYRESHEX]) 1.544701247s ago: executing program 5 (id=3359): r0 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000001b00)={&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x80, 0x0}, 0x0) 1.459350624s ago: executing program 5 (id=3360): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newchain={0x24, 0x1e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x4, 0xd}, {0x4}}}, 0x24}}, 0x44004) 1.386854089s ago: executing program 0 (id=3362): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000d40)=@mangle={'mangle\x00', 0x64, 0x6, 0x570, 0xd0, 0x290, 0xd0, 0x1c0, 0x360, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0xc}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'wg1\x00', {0x5}}}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x12}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@hbh={{0x48}, {0x0, 0x7, 0x0, [0x1, 0x8, 0x5, 0x3bdc, 0x3, 0x7ffe, 0x5, 0x6, 0xfff9, 0x7, 0x6, 0xc97, 0x3f, 0xef00, 0x6, 0x4], 0x8}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x2f}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0) 1.303072906s ago: executing program 5 (id=3364): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12015001020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f010000000040000000000904010000020d00000904010102020e"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 737.752881ms ago: executing program 3 (id=3375): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x1, 0x0, 0x0) 668.062067ms ago: executing program 4 (id=3377): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net\x00') getdents(r0, 0xfffffffffffffffd, 0x3b) 664.444997ms ago: executing program 3 (id=3378): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix_mp={0x3, 0x80, 0x32314247, 0x7, 0xc, [{0x7, 0x7c3}, {0x803}, {0x400, 0xe142}, {0x2, 0xc3}, {0x0, 0x4}, {0x4d84, 0x7ff}, {0xe, 0x6}, {0x5, 0x4}], 0xf, 0x92, 0x6, 0x1, 0x7}}) 650.261478ms ago: executing program 6 (id=3379): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000300)=@newtaction={0x94, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x80, 0x1, [@m_bpf={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x9}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4040000}, 0x40) 560.128406ms ago: executing program 3 (id=3380): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f00000001c0)=@ethtool_cmd={0xea5dd02493f30c32, 0x5, 0xfffffffd, 0x2, 0x7, 0x0, 0x3, 0xfc, 0x0, 0xfc, 0x0, 0x0, 0x0, 0xff, 0x0, 0x45}}) 559.925555ms ago: executing program 4 (id=3382): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x258, 0x4c, 0x200, 0x0, 0x0, 0x390, 0x2e8, 0x2e8, 0x390, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_bond\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x3, 0x68}, 0x0, 0x230, 0x258, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@dev, [], @ipv4=@multicast1}, {@ipv4, [], @ipv4=@broadcast}, {@ipv4=@multicast2, [], @ipv6=@mcast1}, {@ipv6=@loopback, [], @ipv6=@private2}], 0x1}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @private1, [], [], 'team_slave_0\x00', 'xfrm0\x00'}, 0x0, 0x100, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@realm={{0x30}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) 541.785947ms ago: executing program 6 (id=3383): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') getdents(r0, 0xffffffffffffffff, 0x5a) 502.25276ms ago: executing program 3 (id=3384): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0x4}]}, 0x24}}, 0x4) 393.324989ms ago: executing program 6 (id=3385): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000002a00090000000000000000000400002c140016"], 0x30}, 0x1, 0x3000000}, 0x0) 393.202829ms ago: executing program 3 (id=3386): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, 0x0, 0x0) 371.45673ms ago: executing program 4 (id=3387): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000040)={0x7ff, 0x2000000, "c629acd501df2a667d5d0f3502755f1b26c703ed17091dac", {0xb8, 0xfffffff7}, 0x80000000}) 300.164746ms ago: executing program 3 (id=3388): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./bus\x00', 0x1800840, &(0x7f0000000300)={[{@utf8}, {@shortname_winnt}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@fat=@gid}, {@utf8no}, {@shortname_win95}]}, 0x1, 0x362, &(0x7f0000000900)="$eJzs3U9oXFUXAPAzfUkmKfRLFh8UBeHpTtDQP7jQVUpJoTgblaHqQhxsqpKJhQwOpotO40ZcCi515UZc6MJF1yIo4s6FWytIVVxodwWLV2bmTeZNZpKmwrQWf7/FcHLuPe/eO3nJvLxkbl5eifXzs3Hhxo3rMT9fiZmV0ytxsxJLkcXAlRg3NyEHANwfbqYUf6S+A5ZUpjwlAGDKeq//rx4pZd7+ar/+yas/ANz3ip//F/brM79Xw8WpTAkAmLKx+/+PjDTPjf6qf6b0VwEAwP3quRdefPpULeLZPJ+P2HinXW/X46lh+6kL8Xo0Yy2OxWLciuhfKHQfKr3HM2drq8fyPO/Ez0tR71a06xEbnXa9f6VwKuvVV+N4LMZSUV9cbaSUsjOf11aP5z0RcaXTGz82Ku36bBwuxv/hcKzFicjj/2P1EWdrqyfy4gD1jUF9J2J7eN+iO//lWIzvXomL0YzzC+cipcFlTW318vE8P51qI/XtejXO7zwLe94BAQAAAAAAAAAAAAAAAAAAAACAf2Q537G0s/9NGu7fs7w8ob23P06/vtgfaLu/P1Cqpkjp97cer7+bxcj+QLv352nXZ+LQvV06AAAAAAAAAAAAAAAAAAAA/Gu0tuai0Wyubba2Lq2Xg85ma+tQRHQzb3zz6ZcLMd7nNsFMMUapKS9Sl9YbKRt0TtlInyLIuoMPMp9c3ZlxuU91ZxUTp1Hdu6nZPPLwTx8MMw9lgyP/NeyTxeQFZrumUQ42/tef0p08UZdOFsGJ23S+llLa6ziXXxqvikrEzJ1/4vYPUjf4+vprD5xsHX2il/ki9T362OK5a+9/9Ot6o9kduav58dxm61ZabxQfTz7Z9g6y0vlTiX5QKZ8JM/uVb49mGtn3vz3/4HvfHmz0VM68OaFP1l/OZ5utrUrxldJrmusH3dyuqoXm2Sxi13FmJ5z8UwiOfrjSuHr5x18OWlX6JmGjDgAAAAAAAAAAAAAAAAAAuCtK7xUvFG/2nd2v6slnpj8zAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALh7hv//vxRsj2UOEvzZifGm6tpmK2LuXi8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/uL8DAAD//2Kpa7U=") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x105042, 0x0) 228.231482ms ago: executing program 6 (id=3389): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x23, 0x0, 0x0) 228.058622ms ago: executing program 4 (id=3390): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x0, 0x0) read$hiddev(r0, &(0x7f00000000c0)=""/4092, 0xffc) 191.746115ms ago: executing program 6 (id=3391): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702500000000fe1f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 158.508117ms ago: executing program 4 (id=3392): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x10, 0x0, 0x0) 198.73µs ago: executing program 6 (id=3393): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x1c, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 0s ago: executing program 4 (id=3394): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000070000000000000000000000850000004100000085000000a000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x27, 0x25, 0x0, &(0x7f00000007c0), 0x0, 0x702, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): e number 7 [ 143.578740][ T4175] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop2 scanned by udevd (4175) [ 144.019209][ T13] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 144.313264][ T13] usb 4-1: Using ep0 maxpacket: 8 [ 144.446400][ T13] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 144.480182][ T13] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.521131][ T13] usb 4-1: config 0 has no interface number 0 [ 144.530578][ T13] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 144.555916][ T13] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0xA has invalid wMaxPacketSize 0 [ 144.577993][ T13] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 144.603895][ T13] usb 4-1: config 0 interface 52 has no altsetting 0 [ 144.788504][ T13] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 144.809640][ T13] usb 4-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 144.831304][ T13] usb 4-1: Product: syz [ 144.843204][ T13] usb 4-1: Manufacturer: syz [ 144.848118][ T13] usb 4-1: SerialNumber: syz [ 144.860532][ T7284] loop0: detected capacity change from 0 to 256 [ 144.878962][ T13] usb 4-1: config 0 descriptor?? [ 144.913423][ T7287] netlink: 'syz.4.1359': attribute type 10 has an invalid length. [ 144.957409][ T7287] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1359'. [ 144.967305][ T7284] FAT-fs (loop0): Directory bread(block 64) failed [ 144.983010][ T7284] FAT-fs (loop0): Directory bread(block 65) failed [ 144.986634][ T7287] batman_adv: batadv0: Adding interface: vlan1 [ 144.993468][ T7284] FAT-fs (loop0): Directory bread(block 66) failed [ 145.023513][ T7284] FAT-fs (loop0): Directory bread(block 67) failed [ 145.036541][ T7284] FAT-fs (loop0): Directory bread(block 68) failed [ 145.049335][ T7287] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.054940][ T7284] FAT-fs (loop0): Directory bread(block 69) failed [ 145.108700][ T7284] FAT-fs (loop0): Directory bread(block 70) failed [ 145.117279][ T7284] FAT-fs (loop0): Directory bread(block 71) failed [ 145.124711][ T7284] FAT-fs (loop0): Directory bread(block 72) failed [ 145.131856][ T7284] FAT-fs (loop0): Directory bread(block 73) failed [ 145.148395][ T7287] batman_adv: batadv0: Interface activated: vlan1 [ 145.183364][ T7289] netlink: 'syz.2.1371': attribute type 10 has an invalid length. [ 145.370416][ T13] usb 4-1: USB disconnect, device number 9 [ 145.476762][ T7309] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request [ 145.492274][ T7305] --map-set only usable from mangle table [ 145.775613][ T7327] xt_hashlimit: size too large, truncated to 1048576 [ 145.814142][ T7327] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 145.864041][ T7333] loop5: detected capacity change from 0 to 256 [ 146.116276][ T7347] loop0: detected capacity change from 0 to 512 [ 146.228288][ T7359] loop2: detected capacity change from 0 to 1024 [ 146.266116][ T7347] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 146.287020][ T7347] ext4 filesystem being mounted at /290/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.292388][ T7366] ip6t_srh: unknown srh invflags 7F00 [ 146.532938][ T7] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 146.672429][ T7379] netlink: 292 bytes leftover after parsing attributes in process `syz.0.1404'. [ 146.713946][ T7382] netlink: 'syz.2.1406': attribute type 13 has an invalid length. [ 146.802801][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 146.929187][ T7389] loop5: detected capacity change from 0 to 2048 [ 146.929880][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.967586][ T7] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 146.992953][ T7394] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1412'. [ 147.021881][ T7] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 147.111463][ T7389] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 147.183372][ T7409] tmpfs: Bad value for 'mpol' [ 147.239521][ T7] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 147.261357][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.285163][ T7] usb 4-1: Product: syz [ 147.289773][ T7] usb 4-1: Manufacturer: syz [ 147.299875][ T7] usb 4-1: SerialNumber: syz [ 147.323126][ T7413] loop2: detected capacity change from 0 to 8 [ 147.376385][ T7] cdc_ncm 4-1:1.0: NCM or ECM functional descriptors missing [ 147.392027][ T7] cdc_ncm 4-1:1.0: bind() failure [ 147.593087][ T7] cdc_mbim 4-1:1.1: CDC Union missing and no IAD found [ 147.603990][ T7] cdc_mbim 4-1:1.1: bind() failure [ 147.687283][ T7433] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1429'. [ 147.840221][ T21] usb 4-1: USB disconnect, device number 10 [ 148.023374][ T7443] loop4: detected capacity change from 0 to 1024 [ 148.117476][ T26] audit: type=1800 audit(1755702263.941:14): pid=7413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1419" name="file2" dev="loop2" ino=6 res=0 errno=0 [ 148.317203][ T7455] netlink: 124 bytes leftover after parsing attributes in process `syz.5.1442'. [ 148.361441][ T7455] netlink: 'syz.5.1442': attribute type 3 has an invalid length. [ 148.410066][ T7457] netlink: 'syz.0.1443': attribute type 2 has an invalid length. [ 148.565292][ T7465] netlink: 'syz.4.1447': attribute type 2 has an invalid length. [ 148.582928][ T7465] netlink: 'syz.4.1447': attribute type 1 has an invalid length. [ 148.595760][ T7467] sctp: [Deprecated]: syz.3.1448 (pid 7467) Use of int in max_burst socket option. [ 148.595760][ T7467] Use struct sctp_assoc_value instead [ 148.974700][ T7487] loop3: detected capacity change from 0 to 1764 [ 149.062334][ T7487] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 149.212137][ T7497] netlink: 6 bytes leftover after parsing attributes in process `syz.5.1463'. [ 149.273331][ T7497] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 149.312960][ T7497] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 149.571129][ T7505] loop5: detected capacity change from 0 to 2048 [ 149.627401][ T7485] loop0: detected capacity change from 0 to 32768 [ 149.662046][ T7505] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 149.798408][ T7485] XFS (loop0): Mounting V5 Filesystem [ 150.013532][ T7515] sock: sock_timestamping_bind_phc: sock not bind to device [ 150.048341][ T7519] loop5: detected capacity change from 0 to 2048 [ 150.090328][ T7485] XFS (loop0): Ending clean mount [ 150.128474][ T7485] XFS (loop0): Quotacheck needed: Please wait. [ 150.206842][ T7501] loop3: detected capacity change from 0 to 32768 [ 150.223496][ T7485] XFS (loop0): Quotacheck: Done. [ 150.304588][ T7501] (syz.3.1465,7501,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 150.350139][ T4183] XFS (loop0): Unmounting Filesystem [ 150.414079][ T7528] device vlan1 entered promiscuous mode [ 150.424527][ T7501] (syz.3.1465,7501,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 150.629004][ T7535] ipt_CLUSTERIP: Please specify destination IP [ 150.678051][ T7501] JBD2: Ignoring recovery information on journal [ 150.695013][ T7538] loop5: detected capacity change from 0 to 16 [ 150.765666][ T7538] erofs: (device loop5): mounted with root inode @ nid 36. [ 150.828433][ T7501] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 150.842038][ T7538] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 150.887043][ T7538] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress -29 in[58, 4038] out[1851] [ 150.983304][ T7538] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 151.067164][ T4193] ocfs2: Unmounting device (7,3) on (node local) [ 151.287523][ T7557] loop4: detected capacity change from 0 to 256 [ 151.479344][ T7570] libceph: resolve '0' (ret=-3): failed [ 151.580561][ T7573] xt_hashlimit: overflow, try lower: 18446744073709551614/15680 [ 151.625241][ T7577] xt_TCPMSS: Only works on TCP SYN packets [ 151.952104][ T7596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1506'. [ 151.982799][ T4283] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 152.345327][ T4283] usb 5-1: config 6 has an invalid interface number: 2 but max is 0 [ 152.368870][ T4283] usb 5-1: config 6 has no interface number 0 [ 152.390851][ T4283] usb 5-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 152.413320][ T4283] usb 5-1: config 6 interface 2 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 152.590826][ T4283] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 152.602852][ T4283] usb 5-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 152.611311][ T4283] usb 5-1: Product: syz [ 152.616107][ T4283] usb 5-1: Manufacturer: syz [ 152.620852][ T4283] usb 5-1: SerialNumber: syz [ 152.664101][ T7628] loop0: detected capacity change from 0 to 4096 [ 152.674423][ T4283] hso 5-1:6.2: Failed to find INT IN ep [ 152.693135][ T7628] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 152.757403][ T7628] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 152.912598][ T4283] usb 5-1: USB disconnect, device number 8 [ 152.953608][ T7640] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1528'. [ 153.831996][ T7672] loop4: detected capacity change from 0 to 4096 [ 153.925527][ T7672] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 153.987881][ T7689] loop5: detected capacity change from 0 to 1024 [ 153.994487][ T7672] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 154.053481][ T7672] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 154.096104][ T7672] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 154.129501][ T302] hfsplus: b-tree write err: -5, ino 4 [ 154.188145][ T7672] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 154.244551][ T7672] ntfs: volume version 3.1. [ 154.266587][ T7672] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 154.289420][ T7672] ntfs: (device loop4): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 154.357689][ T7672] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 154.389949][ T7672] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 154.405060][ T7672] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 154.532966][ T13] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 154.640329][ T7688] loop3: detected capacity change from 0 to 32768 [ 154.760547][ T7709] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1561'. [ 154.779494][ T7709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1561'. [ 154.851917][ T7711] loop4: detected capacity change from 0 to 1764 [ 154.921344][ T7711] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 154.983167][ T13] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.022581][ T7717] loop3: detected capacity change from 0 to 512 [ 155.026623][ T13] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 155.068447][ T7717] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 155.098579][ T7717] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 155.113339][ T7717] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 155.127696][ T7717] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 155.138493][ T7717] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 155.157501][ T7717] EXT4-fs (loop3): failed to initialize system zone (-117) [ 155.168875][ T7717] EXT4-fs (loop3): mount failed [ 155.230718][ T7724] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1580'. [ 155.233445][ T13] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 155.272039][ T13] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.291513][ T13] usb 6-1: Product: syz [ 155.303812][ T13] usb 6-1: Manufacturer: syz [ 155.309450][ T13] usb 6-1: SerialNumber: syz [ 155.445929][ T7730] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 155.619735][ T7742] loop3: detected capacity change from 0 to 16 [ 155.673361][ T13] usb 6-1: 0:2 : does not exist [ 155.707621][ T7742] erofs: (device loop3): mounted with root inode @ nid 36. [ 155.735508][ T4188] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress 6887 in[4096, 0] out[9000] [ 155.769715][ T7742] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress 6887 in[4096, 0] out[8192] [ 155.862956][ T21] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 155.935268][ T13] usb 6-1: USB disconnect, device number 3 [ 156.068446][ T7746] loop3: detected capacity change from 0 to 2048 [ 156.092689][ T7746] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 156.112999][ T21] usb 1-1: Using ep0 maxpacket: 8 [ 156.125982][ T7746] UDF-fs: unknown compression code (0) [ 156.202969][ T6349] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 156.233845][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 156.251365][ T21] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 156.443412][ T21] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 156.469460][ T21] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 156.494505][ T21] usb 1-1: Product: syz [ 156.498954][ T21] usb 1-1: Manufacturer: syz [ 156.513148][ T21] usb 1-1: SerialNumber: syz [ 156.593048][ T6349] usb 5-1: config 0 has an invalid interface number: 152 but max is 0 [ 156.601602][ T6349] usb 5-1: config 0 has no interface number 0 [ 156.642917][ T6349] usb 5-1: config 0 interface 152 altsetting 7 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 156.673896][ T6349] usb 5-1: config 0 interface 152 has no altsetting 0 [ 156.718829][ T7774] netlink: 'syz.3.1604': attribute type 5 has an invalid length. [ 156.788669][ T21] usb 1-1: palm_os_3_probe - error -71 getting connection information [ 156.804844][ T21] visor: probe of 1-1:1.0 failed with error -71 [ 156.838290][ T6349] usb 5-1: New USB device found, idVendor=0e7e, idProduct=1001, bcdDevice=a3.17 [ 156.849876][ T21] usb 1-1: USB disconnect, device number 8 [ 156.865856][ T6349] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.883617][ T6349] usb 5-1: Product: syz [ 156.889818][ T6349] usb 5-1: Manufacturer: syz [ 156.902592][ T6349] usb 5-1: SerialNumber: syz [ 156.938780][ T6349] usb 5-1: config 0 descriptor?? [ 156.963059][ T7744] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 157.197916][ T7744] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 157.229723][ T6349] cdc_subset 5-1:0.152 usb0: register 'cdc_subset' at usb-dummy_hcd.4-1, Yopy, 3a:1c:fd:73:dd:b2 [ 157.454468][ T4283] usb 5-1: USB disconnect, device number 9 [ 157.471835][ T4283] cdc_subset 5-1:0.152 usb0: unregister 'cdc_subset' usb-dummy_hcd.4-1, Yopy [ 157.540266][ T7792] loop5: detected capacity change from 0 to 32768 [ 157.609072][ T7792] XFS (loop5): Mounting V5 Filesystem [ 157.681363][ T7792] XFS (loop5): Ending clean mount [ 157.781127][ T5798] XFS (loop5): Unmounting Filesystem [ 158.228891][ T7834] device bond1 entered promiscuous mode [ 158.235593][ T7834] 8021q: adding VLAN 0 to HW filter on device bond1 [ 158.435042][ T7848] xt_TPROXY: Can be used only with -p tcp or -p udp [ 158.470039][ T7850] netlink: 'syz.0.1626': attribute type 21 has an invalid length. [ 158.523635][ T7850] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1626'. [ 158.736608][ T7864] loop3: detected capacity change from 0 to 512 [ 158.803584][ T7864] EXT4-fs (loop3): Test dummy encryption mode enabled [ 158.820326][ T7864] EXT4-fs (loop3): Test dummy encryption mode enabled [ 158.855203][ T7864] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,inode_readahead_blks=0x0000000000000100,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000. Quota mode: writeback. [ 158.911269][ T7864] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #2: comm syz.3.1618: Directory hole found for htree leaf block 0 [ 158.929800][ T7864] EXT4-fs (loop3): Remounting filesystem read-only [ 159.072969][ T6349] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 159.442968][ T6349] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 159.452527][ T6349] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.483993][ T6349] usb 5-1: config 0 descriptor?? [ 159.524075][ T6349] cp210x 5-1:0.0: cp210x converter detected [ 159.729616][ T7885] device netdevsim0 entered promiscuous mode [ 159.754890][ T7885] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 159.787322][ T7887] netlink: 'syz.5.1631': attribute type 1 has an invalid length. [ 159.973003][ T6349] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 159.992950][ T6349] cp210x 5-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 160.018948][ T6349] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 160.040502][ T6349] usb 5-1: cp210x converter now attached to ttyUSB0 [ 160.099560][ T6349] usb 5-1: USB disconnect, device number 10 [ 160.126990][ T7898] xt_CT: No such helper "netbios-ns" [ 160.193626][ T6349] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 160.223638][ T6349] cp210x 5-1:0.0: device disconnected [ 160.585585][ T7927] netlink: 'syz.0.1650': attribute type 24 has an invalid length. [ 160.825442][ T7937] loop3: detected capacity change from 0 to 2364 [ 160.967952][ T7911] loop5: detected capacity change from 0 to 32768 [ 161.032937][ T7] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 161.106505][ T7911] XFS (loop5): Mounting V5 Filesystem [ 161.303123][ T7911] XFS (loop5): Ending clean mount [ 161.318621][ T7911] XFS (loop5): Quotacheck needed: Please wait. [ 161.371928][ T7911] XFS (loop5): Quotacheck: Done. [ 161.430909][ T7911] loop5: Can't mount, would change RO state [ 161.477732][ T5798] XFS (loop5): Unmounting Filesystem [ 161.483596][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.513473][ T7] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 161.522662][ T7] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 161.543059][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.553679][ T7] usb 1-1: config 0 descriptor?? [ 161.946423][ T7987] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1678'. [ 161.972954][ T7987] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1678'. [ 161.996308][ T7987] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1678'. [ 162.030256][ T7989] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1668'. [ 162.083190][ T7] Bluetooth: Can't get state to change to load configuration err [ 162.100004][ T7] Bluetooth: Loading sysconfig file failed [ 162.108283][ T7] ath3k: probe of 1-1:0.0 failed with error -16 [ 162.116705][ T7] usb 1-1: USB disconnect, device number 9 [ 162.186138][ T7997] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1682'. [ 162.196939][ T7997] netlink: 'syz.4.1682': attribute type 1 has an invalid length. [ 162.291975][ T8001] netlink: 'syz.5.1683': attribute type 10 has an invalid length. [ 162.399247][ T8001] team0: Port device wlan1 added [ 162.500217][ T8011] [U] v3f"S/4:XTzWtlW= [ 162.520534][ T8011] [U] J"e:" [ 162.680900][ T8025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1696'. [ 162.846700][ T8035] netlink: 'syz.0.1700': attribute type 29 has an invalid length. [ 162.861132][ T8035] netlink: 'syz.0.1700': attribute type 3 has an invalid length. [ 162.887161][ T8035] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1700'. [ 162.902608][ T8039] loop5: detected capacity change from 0 to 512 [ 163.056118][ T8041] device bond2 entered promiscuous mode [ 163.062234][ T8041] 8021q: adding VLAN 0 to HW filter on device bond2 [ 163.084663][ T8039] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 163.114838][ T8039] ext4 filesystem being mounted at /223/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 163.275684][ T8051] loop3: detected capacity change from 0 to 4096 [ 163.371146][ T8051] __ntfs_error: 7 callbacks suppressed [ 163.371165][ T8051] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 163.423101][ T8051] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 163.478335][ T8051] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 163.529784][ T8051] ntfs: volume version 3.1. [ 163.571670][ T8051] ntfs: (device loop3): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 163.826196][ T8078] device xfrm0 entered promiscuous mode [ 163.977076][ T8090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1726'. [ 164.018940][ T8092] loop0: detected capacity change from 0 to 256 [ 164.028306][ T8088] loop3: detected capacity change from 0 to 4096 [ 164.120826][ T8095] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 164.162404][ T8088] NILFS error (device loop3): nilfs_find_entry: dir 2 size 34359742464 exceeds block count 1 [ 164.253251][ T8088] Remounting filesystem read-only [ 164.271233][ T8101] loop4: detected capacity change from 0 to 4096 [ 164.359425][ T8101] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 164.372805][ T8101] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 164.417226][ T4193] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 164.433078][ T8101] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 164.449164][ T8075] chnl_net:caif_netlink_parms(): no params data found [ 164.451878][ T8101] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 164.479602][ T8101] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 164.643304][ T8101] ntfs: volume version 3.1. [ 164.694784][ T8101] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 164.774734][ T8122] loop5: detected capacity change from 0 to 16 [ 164.809224][ T8075] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.817442][ T8124] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1748'. [ 164.827329][ T8075] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.827768][ T8122] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 164.853152][ T8075] device bridge_slave_0 entered promiscuous mode [ 164.893722][ T8122] erofs: (device loop5): erofs_read_superblock: blkszbits 9 isn't supported on this platform [ 164.924964][ T8128] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 164.927535][ T8075] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.956849][ T8075] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.986597][ T8075] device bridge_slave_1 entered promiscuous mode [ 165.151508][ T8075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.199175][ T8140] netlink: 'syz.5.1745': attribute type 7 has an invalid length. [ 165.215111][ T8075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.235056][ T8140] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1745'. [ 165.357021][ T8075] team0: Port device team_slave_0 added [ 165.386308][ T8075] team0: Port device team_slave_1 added [ 165.564215][ T8075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.606722][ T8075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.712054][ T8075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.724603][ T21] Bluetooth: hci6: command 0x0409 tx timeout [ 165.755273][ T8075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.784997][ T8075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.850956][ T8075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.026854][ T8075] device hsr_slave_0 entered promiscuous mode [ 166.070030][ T8075] device hsr_slave_1 entered promiscuous mode [ 166.087625][ T8075] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.100844][ T8187] loop0: detected capacity change from 0 to 256 [ 166.119365][ T8075] Cannot create hsr debugfs directory [ 166.264721][ T8197] xt_TCPMSS: Only works on TCP SYN packets [ 166.466452][ T8207] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1781'. [ 166.501838][ T8210] loop5: detected capacity change from 0 to 2048 [ 166.541834][ T8075] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 166.605825][ T8075] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 166.630242][ T8210] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 166.699214][ T8075] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 166.739608][ T8075] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 166.877896][ T8227] loop3: detected capacity change from 0 to 256 [ 167.022867][ T8227] FAT-fs (loop3): Directory bread(block 64) failed [ 167.049703][ T8227] FAT-fs (loop3): Directory bread(block 65) failed [ 167.076536][ T8227] FAT-fs (loop3): Directory bread(block 66) failed [ 167.130055][ T8227] FAT-fs (loop3): Directory bread(block 67) failed [ 167.145808][ T8227] FAT-fs (loop3): Directory bread(block 68) failed [ 167.152506][ T8227] FAT-fs (loop3): Directory bread(block 69) failed [ 167.177294][ T8227] FAT-fs (loop3): Directory bread(block 70) failed [ 167.212381][ T8227] FAT-fs (loop3): Directory bread(block 71) failed [ 167.215839][ T8075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.247334][ T8227] FAT-fs (loop3): Directory bread(block 72) failed [ 167.267348][ T8227] FAT-fs (loop3): Directory bread(block 73) failed [ 167.279320][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 167.315358][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 167.364744][ T8075] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.380549][ T8245] IPv6: sit1: Disabled Multicast RS [ 167.418574][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 167.438069][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 167.465654][ T4312] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.473159][ T4312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.503041][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 167.533301][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 167.562118][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 167.589163][ T4312] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.596583][ T4312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.644507][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 167.654964][ T8255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1802'. [ 167.672161][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 167.681242][ T8247] loop5: detected capacity change from 0 to 8192 [ 167.721882][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 167.746384][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 167.786566][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 167.803047][ T1111] Bluetooth: hci6: command 0x041b tx timeout [ 167.826027][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 167.854162][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 167.874362][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 167.893676][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 167.907363][ T8257] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 167.954070][ T8257] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 167.976906][ T8257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 168.045413][ T8257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 168.166400][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 168.186159][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 168.255242][ T8075] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 168.425813][ T8281] loop4: detected capacity change from 0 to 1024 [ 168.505347][ T8287] loop5: detected capacity change from 0 to 256 [ 168.537916][ T8281] hfsplus: Filesystem is marked locked, mounting read-only. [ 168.575225][ T8281] hfsplus: filesystem is marked locked, leaving read-only. [ 168.750606][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 168.760977][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 168.797838][ T8075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.890429][ T8303] device veth5 entered promiscuous mode [ 169.069073][ T8315] netlink: 'syz.0.1838': attribute type 3 has an invalid length. [ 169.252912][ T8325] ieee802154 phy0 wpan0: encryption failed: -22 [ 169.483100][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 169.517094][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 169.594414][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 169.644126][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 169.682536][ T8075] device veth0_vlan entered promiscuous mode [ 169.713599][ T8075] device veth1_vlan entered promiscuous mode [ 169.728415][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 169.740248][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 169.793990][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 169.883214][ T21] Bluetooth: hci6: command 0x040f tx timeout [ 169.916097][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 169.931065][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 169.970699][ T8302] loop3: detected capacity change from 0 to 32768 [ 169.979005][ T8075] device veth0_macvtap entered promiscuous mode [ 169.982612][ T8075] device veth1_macvtap entered promiscuous mode [ 170.031458][ T8075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.031483][ T8075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.031494][ T8075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.031509][ T8075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.031521][ T8075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.031535][ T8075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.031547][ T8075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.031560][ T8075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.031571][ T8075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.031585][ T8075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.031601][ T8075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.031615][ T8075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.033961][ T8075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.034098][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 170.034739][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 170.035330][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 170.035933][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 170.052351][ T8075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.052376][ T8075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.052386][ T8075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.052399][ T8075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.052411][ T8075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.052424][ T8075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.052435][ T8075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.052448][ T8075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.052458][ T8075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.052471][ T8075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.052487][ T8075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.052500][ T8075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.053883][ T8075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.057141][ T8075] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.057178][ T8075] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.057206][ T8075] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.079733][ T8075] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.083701][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 170.084450][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 170.151183][ T8302] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 170.238868][ T1111] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 170.357613][ T4193] ocfs2: Unmounting device (7,3) on (node local) [ 170.385458][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.385531][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.389374][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 170.623246][ T1111] usb 5-1: config 127 has an invalid interface number: 218 but max is 0 [ 170.711304][ T1111] usb 5-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 170.727012][ T4295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.756469][ T4295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.776904][ T8378] loop0: detected capacity change from 0 to 2048 [ 170.793528][ T1111] usb 5-1: config 127 has no interface number 0 [ 170.830784][ T1111] usb 5-1: config 127 interface 218 altsetting 2 bulk endpoint 0xF has invalid maxpacket 32 [ 170.856014][ T8378] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 170.872854][ T1111] usb 5-1: config 127 interface 218 altsetting 2 endpoint 0x3 has invalid wMaxPacketSize 0 [ 170.913783][ T1111] usb 5-1: config 127 interface 218 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 0 [ 170.963051][ T1111] usb 5-1: config 127 interface 218 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 171.022885][ T1111] usb 5-1: config 127 interface 218 has no altsetting 0 [ 171.063836][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 171.203020][ T1111] usb 5-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 3.5c [ 171.214651][ T1111] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.253124][ T1111] usb 5-1: Product: syz [ 171.276335][ T1111] usb 5-1: Manufacturer: syz [ 171.287473][ T8391] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 8391 comm: syz.6.1711) [ 171.302356][ T1111] usb 5-1: SerialNumber: syz [ 171.336834][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 171.336850][ T26] audit: type=1800 audit(1755702287.161:17): pid=8391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1711" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=46590 res=0 errno=0 [ 171.343337][ T8355] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 171.382230][ C1] vkms_vblank_simulate: vblank timer overrun [ 171.461379][ T8393] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 171.481373][ T8393] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 171.491510][ T8393] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 171.623287][ T8371] loop5: detected capacity change from 0 to 32768 [ 171.874118][ T8371] XFS (loop5): Mounting V5 Filesystem [ 171.883966][ T1111] etas_es58x 5-1:127.218: Starting syz syz (Serial Number syz) driver version 1.00 [ 171.942570][ T1111] usb 5-1: USB disconnect, device number 11 [ 172.003869][ T21] Bluetooth: hci6: command 0x0419 tx timeout [ 172.089486][ T8371] XFS (loop5): Ending clean mount [ 172.119038][ T8371] XFS (loop5): Quotacheck needed: Please wait. [ 172.197715][ T8371] XFS (loop5): Quotacheck: Done. [ 172.432329][ T5798] XFS (loop5): Unmounting Filesystem [ 172.511774][ T8432] program syz.4.1871 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 172.609519][ T8435] netlink: 'syz.3.1877': attribute type 1 has an invalid length. [ 172.646935][ T8435] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.1877'. [ 173.455433][ T8485] netlink: 'syz.3.1900': attribute type 16 has an invalid length. [ 173.467335][ T8489] loop5: detected capacity change from 0 to 256 [ 173.505828][ T8485] netlink: 'syz.3.1900': attribute type 17 has an invalid length. [ 173.519122][ T8485] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 173.546265][ T8485] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 173.554431][ T8489] exfat: Deprecated parameter 'namecase' [ 173.620766][ T8485] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 173.623480][ T8489] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 173.687379][ T8485] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 173.751715][ T8485] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 173.808146][ T8485] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 174.123002][ T4283] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 174.534043][ T4283] usb 7-1: unable to get BOS descriptor or descriptor too short [ 174.573040][ T4283] usb 7-1: not running at top speed; connect to a high speed hub [ 174.634699][ T8549] netlink: 'syz.3.1932': attribute type 2 has an invalid length. [ 174.680874][ T4283] usb 7-1: config 128 has an invalid interface number: 127 but max is 3 [ 174.686322][ T8549] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1932'. [ 174.719960][ T4283] usb 7-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 174.756226][ T4283] usb 7-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 174.790823][ T4283] usb 7-1: config 128 has no interface number 0 [ 174.812909][ T4283] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 174.872291][ T4283] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 174.900726][ T4283] usb 7-1: config 128 interface 127 has no altsetting 0 [ 174.908876][ T8558] libceph: resolve '4..' (ret=-3): failed [ 175.035746][ T8565] damon: invalid nr_regions. min (2047) > max (1) [ 175.093249][ T4283] usb 7-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 175.126795][ T4283] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.160398][ T4283] usb 7-1: Product: syz [ 175.168601][ T8568] netlink: 'syz.4.1942': attribute type 1 has an invalid length. [ 175.184390][ T4283] usb 7-1: Manufacturer: syz [ 175.189149][ T4283] usb 7-1: SerialNumber: syz [ 175.213707][ T8568] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1942'. [ 175.332177][ T8546] loop5: detected capacity change from 0 to 32768 [ 175.392564][ T8577] loop3: detected capacity change from 0 to 2048 [ 175.450484][ T8577] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 175.547832][ T8583] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1947'. [ 175.701913][ T4283] usb 7-1: USB disconnect, device number 2 [ 175.780899][ T8593] netlink: 'syz.0.1949': attribute type 1 has an invalid length. [ 175.833021][ T8593] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.1949'. [ 175.863752][ T8593] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1949'. [ 175.993542][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 176.089675][ T8604] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 176.173587][ T8613] loop5: detected capacity change from 0 to 256 [ 176.245160][ T8616] loop3: detected capacity change from 0 to 512 [ 176.321902][ T8613] FAT-fs (loop5): Directory bread(block 64) failed [ 176.363574][ T8613] FAT-fs (loop5): Directory bread(block 65) failed [ 176.370678][ T8613] FAT-fs (loop5): Directory bread(block 66) failed [ 176.421011][ T8613] FAT-fs (loop5): Directory bread(block 67) failed [ 176.472243][ T8616] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 176.523569][ T6349] Bluetooth: hci6: command 0x0405 tx timeout [ 176.528210][ T8613] FAT-fs (loop5): Directory bread(block 68) failed [ 176.547187][ T8616] ext4 filesystem being mounted at /414/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 176.553685][ T8613] FAT-fs (loop5): Directory bread(block 69) failed [ 176.636967][ T8613] FAT-fs (loop5): Directory bread(block 70) failed [ 176.661818][ T8613] FAT-fs (loop5): Directory bread(block 71) failed [ 176.685552][ T8613] FAT-fs (loop5): Directory bread(block 72) failed [ 176.717656][ T8613] FAT-fs (loop5): Directory bread(block 73) failed [ 177.000107][ T8650] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1980'. [ 177.392224][ T8672] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1989'. [ 177.416729][ T8672] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1989'. [ 177.622938][ T4283] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 177.694165][ T21] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 177.824177][ T8694] xt_connbytes: Forcing CT accounting to be enabled [ 177.829279][ T8696] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 177.905251][ T8698] netlink: 'syz.4.2001': attribute type 10 has an invalid length. [ 177.918764][ T8698] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 177.993061][ T4283] usb 7-1: config 0 has an invalid descriptor of length 91, skipping remainder of the config [ 178.022914][ T4283] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 178.047078][ T8706] netlink: 'syz.3.2003': attribute type 6 has an invalid length. [ 178.055323][ T21] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 178.065078][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.074202][ T4283] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 178.088873][ T4283] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 178.105204][ T21] usb 1-1: config 0 descriptor?? [ 178.127584][ T4283] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 178.143773][ T8708] netlink: 'syz.4.2005': attribute type 4 has an invalid length. [ 178.151861][ T4283] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 178.173385][ T8708] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2005'. [ 178.192804][ T4283] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.210770][ T4283] usb 7-1: config 0 descriptor?? [ 178.220361][ T8710] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2008'. [ 178.222692][ T8708] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 178.412930][ T4283] rc_core: IR keymap rc-hauppauge not found [ 178.419843][ T4283] Registered IR keymap rc-empty [ 178.463190][ T4283] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 178.470139][ T8723] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2016'. [ 178.532839][ T4283] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 178.570387][ T4283] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 178.606468][ T4283] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input13 [ 178.622923][ T21] usb 1-1: Cannot set MAC address [ 178.628386][ T21] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71 [ 178.646635][ T8731] loop3: detected capacity change from 0 to 16 [ 178.663286][ T21] usb 1-1: USB disconnect, device number 10 [ 178.702991][ T4283] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 178.723578][ T8731] erofs: (device loop3): mounted with root inode @ nid 36. [ 178.764640][ T4283] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 178.812891][ T4283] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 178.862913][ T4283] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 178.912953][ T4283] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 178.962947][ T4283] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 179.013122][ T4283] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 179.047926][ T8739] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2021'. [ 179.057617][ T8741] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 179.063028][ T4283] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 179.142875][ T4283] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 179.202883][ T4283] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 179.244441][ T4283] mceusb 7-1:0.0: Registered with mce emulator interface version 1 [ 179.259196][ T8749] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2025'. [ 179.268495][ T4283] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 179.302059][ T4283] usb 7-1: USB disconnect, device number 3 [ 179.434495][ T8758] netlink: 180 bytes leftover after parsing attributes in process `syz.6.2028'. [ 179.479896][ T8761] loop0: detected capacity change from 0 to 16 [ 179.548960][ T8765] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2033'. [ 179.558498][ T8761] erofs: (device loop0): mounted with root inode @ nid 36. [ 179.746050][ T26] audit: type=1400 audit(1755702295.561:18): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=8770 comm="syz.0.2037" [ 179.919425][ T8782] netlink: 'syz.0.2042': attribute type 4 has an invalid length. [ 180.128335][ T8796] loop4: detected capacity change from 0 to 16 [ 180.181439][ T8796] erofs: (device loop4): mounted with root inode @ nid 36. [ 180.578090][ T26] audit: type=1400 audit(1755702296.401:19): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=8801 comm="syz.4.2053" [ 180.680470][ T8814] netlink: 'syz.3.2057': attribute type 4 has an invalid length. [ 180.694037][ T8812] loop5: detected capacity change from 0 to 128 [ 181.284193][ T8852] loop4: detected capacity change from 0 to 128 [ 181.614207][ T8873] ptrace attach of "./syz-executor exec"[4193] was attempted by "./syz-executor exec"[8873] [ 181.825621][ T8892] netlink: 'syz.3.2093': attribute type 13 has an invalid length. [ 181.862816][ T8892] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2093'. [ 181.905589][ T8892] syz_tun: refused to change device tx_queue_len [ 181.939671][ T8892] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 182.014859][ T8906] ptrace attach of "./syz-executor exec"[5798] was attempted by "./syz-executor exec"[8906] [ 182.342973][ T13] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 182.608623][ T13] usb 1-1: Using ep0 maxpacket: 8 [ 182.622574][ T8940] netlink: 'syz.5.2118': attribute type 13 has an invalid length. [ 182.686190][ T8940] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2118'. [ 182.783788][ T13] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.814353][ T8940] syz_tun: refused to change device tx_queue_len [ 182.932614][ T8940] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 182.963113][ T13] usb 1-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 182.982514][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.009495][ T13] usb 1-1: Product: syz [ 183.032824][ T13] usb 1-1: Manufacturer: syz [ 183.037901][ T13] usb 1-1: SerialNumber: syz [ 183.064887][ T13] usb 1-1: config 0 descriptor?? [ 183.123849][ T13] cdc_phonet 1-1:0.0: skipping garbage [ 183.129634][ T13] cdc_phonet 1-1:0.0: invalid descriptor buffer length [ 183.160729][ T13] cdc_phonet: probe of 1-1:0.0 failed with error -22 [ 183.345508][ T4283] usb 1-1: USB disconnect, device number 11 [ 183.524026][ T8972] netlink: zone id is out of range [ 183.570043][ T8972] netlink: set zone limit has 4 unknown bytes [ 184.003828][ T8989] netlink: 'syz.0.2139': attribute type 13 has an invalid length. [ 184.022161][ T8989] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2139'. [ 184.071299][ T8989] syz_tun: refused to change device tx_queue_len [ 184.100027][ T8989] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 184.935653][ T4925] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 185.156669][ T9027] loop4: detected capacity change from 0 to 2048 [ 185.242843][ T4925] usb 7-1: Using ep0 maxpacket: 8 [ 185.249416][ T9027] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 185.382940][ T4925] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.582926][ T4925] usb 7-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 185.592406][ T4925] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.646616][ T4925] usb 7-1: Product: syz [ 185.650845][ T4925] usb 7-1: Manufacturer: syz [ 185.690484][ T4925] usb 7-1: SerialNumber: syz [ 185.734665][ T4925] usb 7-1: config 0 descriptor?? [ 185.773817][ T4925] cdc_phonet 7-1:0.0: skipping garbage [ 185.779583][ T4925] cdc_phonet 7-1:0.0: invalid descriptor buffer length [ 185.797464][ T4925] cdc_phonet: probe of 7-1:0.0 failed with error -22 [ 186.068511][ T4925] usb 7-1: USB disconnect, device number 4 [ 186.730001][ T9045] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2164'. [ 186.739796][ T9045] openvswitch: netlink: Flow key attribute not present in set flow. [ 186.823568][ T9039] loop0: detected capacity change from 0 to 2048 [ 186.960761][ T9039] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 187.554401][ T9070] loop3: detected capacity change from 0 to 8 [ 187.568740][ T9077] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2180'. [ 187.632892][ T9077] openvswitch: netlink: Flow key attribute not present in set flow. [ 187.815415][ T9070] SQUASHFS error: zlib decompression failed, data probably corrupt [ 187.885699][ T9070] SQUASHFS error: Failed to read block 0x9b: -5 [ 187.942888][ T9070] SQUASHFS error: Unable to read metadata cache entry [99] [ 187.950246][ T9070] SQUASHFS error: Unable to read inode 0x127 [ 188.093078][ T13] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 188.563334][ T13] usb 5-1: config 1 interface 0 altsetting 250 endpoint 0x81 has an invalid bInterval 89, changing to 10 [ 188.603044][ T13] usb 5-1: config 1 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 188.665367][ T13] usb 5-1: config 1 interface 0 has no altsetting 0 [ 188.863108][ T13] usb 5-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.40 [ 188.890620][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.932402][ T9113] device ip6gre2 entered promiscuous mode [ 188.942798][ T13] usb 5-1: Product: syz [ 188.947132][ T13] usb 5-1: Manufacturer: syz [ 188.982662][ T13] usb 5-1: SerialNumber: syz [ 189.404689][ T9127] loop6: detected capacity change from 0 to 8 [ 189.453106][ T13] usbhid 5-1:1.0: can't add hid device: -71 [ 189.459343][ T13] usbhid: probe of 5-1:1.0 failed with error -71 [ 189.512229][ T13] usb 5-1: USB disconnect, device number 12 [ 189.521117][ T9127] SQUASHFS error: zlib decompression failed, data probably corrupt [ 189.552928][ T9127] SQUASHFS error: Failed to read block 0x9b: -5 [ 189.559840][ T9127] SQUASHFS error: Unable to read metadata cache entry [99] [ 189.632841][ T9127] SQUASHFS error: Unable to read inode 0x127 [ 190.063532][ T9137] xt_CT: No such helper "snmp_trap" [ 190.194624][ T9148] device ip6gre1 entered promiscuous mode [ 190.494975][ T9166] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2226'. [ 190.608517][ T9172] loop0: detected capacity change from 0 to 512 [ 190.667014][ T9172] EXT4-fs (loop0): Test dummy encryption mode enabled [ 190.686586][ T9172] EXT4-fs (loop0): Ignoring removed oldalloc option [ 190.727267][ T9172] EXT4-fs (loop0): Ignoring removed nobh option [ 190.742994][ T4283] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 190.751132][ T9172] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 190.796683][ T9172] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 190.801624][ T9174] xt_CT: No such helper "snmp_trap" [ 190.821083][ T9172] EXT4-fs (loop0): Remounting filesystem read-only [ 190.842179][ T9172] EXT4-fs (loop0): 1 truncate cleaned up [ 190.869125][ T9172] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,quota,debug_want_extra_isize=0x000000000000002e,oldalloc,errors=remount-ro,nobh,. Quota mode: writeback. [ 191.020427][ T9172] EXT4-fs error (device loop0): ext4_search_dir:1549: inode #2: block 13: comm syz.0.2238: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=16, rec_len=0, size=1024 fake=0 [ 191.078483][ T9172] EXT4-fs (loop0): Remounting filesystem read-only [ 191.273023][ T4283] usb 6-1: config 1 interface 0 altsetting 250 endpoint 0x81 has an invalid bInterval 89, changing to 10 [ 191.313561][ T4283] usb 6-1: config 1 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 191.322955][ T7233] Bluetooth: hci2: command 0x0406 tx timeout [ 191.339447][ T4283] usb 6-1: config 1 interface 0 has no altsetting 0 [ 191.350301][ T6349] Bluetooth: hci1: command 0x0406 tx timeout [ 191.362574][ T6349] Bluetooth: hci3: command 0x0406 tx timeout [ 191.371627][ T6349] Bluetooth: hci4: command 0x0406 tx timeout [ 191.386587][ T6349] Bluetooth: hci0: command 0x0406 tx timeout [ 191.503082][ T4283] usb 6-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.40 [ 191.522845][ T4283] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.530994][ T4283] usb 6-1: Product: syz [ 191.540372][ T4283] usb 6-1: Manufacturer: syz [ 191.552775][ T4283] usb 6-1: SerialNumber: syz [ 192.037866][ T9199] loop3: detected capacity change from 0 to 512 [ 192.073022][ T4283] usbhid 6-1:1.0: can't add hid device: -71 [ 192.082399][ T4283] usbhid: probe of 6-1:1.0 failed with error -71 [ 192.109088][ T9199] EXT4-fs (loop3): Test dummy encryption mode enabled [ 192.131049][ T9199] EXT4-fs (loop3): Ignoring removed oldalloc option [ 192.141246][ T4283] usb 6-1: USB disconnect, device number 4 [ 192.167794][ T9199] EXT4-fs (loop3): Ignoring removed nobh option [ 192.192488][ T9199] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 192.254657][ T9199] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 192.271302][ T9199] EXT4-fs (loop3): Remounting filesystem read-only [ 192.280375][ T9199] EXT4-fs (loop3): 1 truncate cleaned up [ 192.287214][ T9199] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,quota,debug_want_extra_isize=0x000000000000002e,oldalloc,errors=remount-ro,nobh,. Quota mode: writeback. [ 192.321334][ T9199] EXT4-fs error (device loop3): ext4_search_dir:1549: inode #2: block 13: comm syz.3.2250: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=16, rec_len=0, size=1024 fake=0 [ 192.350101][ T9199] EXT4-fs (loop3): Remounting filesystem read-only [ 192.412004][ T9211] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2240'. [ 192.441528][ T9208] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2242'. [ 192.667713][ T9221] netlink: 'syz.5.2247': attribute type 5 has an invalid length. [ 192.694262][ T9221] device ip6erspan0 entered promiscuous mode [ 193.104167][ T9247] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2260'. [ 193.232971][ T21] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 193.331811][ T9256] netlink: 'syz.6.2266': attribute type 5 has an invalid length. [ 193.357396][ T9256] device ip6erspan0 entered promiscuous mode [ 193.492440][ T9267] netlink: 'syz.6.2272': attribute type 4 has an invalid length. [ 193.620054][ T9275] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2276'. [ 193.736582][ T21] usb 1-1: config 1 interface 0 altsetting 250 endpoint 0x81 has an invalid bInterval 89, changing to 10 [ 193.768932][ T26] audit: type=1400 audit(1755702309.591:20): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=9282 comm="syz.6.2279" [ 193.790817][ T21] usb 1-1: config 1 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 193.832797][ T21] usb 1-1: config 1 interface 0 has no altsetting 0 [ 193.924251][ T26] audit: type=1400 audit(1755702309.751:21): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=9288 comm="syz.3.2293" [ 193.941459][ T9285] loop5: detected capacity change from 0 to 4096 [ 193.991858][ T9293] netlink: 'syz.4.2283': attribute type 5 has an invalid length. [ 194.033105][ T21] usb 1-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.40 [ 194.052583][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.063155][ T9285] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 194.072973][ T21] usb 1-1: Product: syz [ 194.078302][ T21] usb 1-1: Manufacturer: syz [ 194.084104][ T21] usb 1-1: SerialNumber: syz [ 194.084414][ T9299] loop6: detected capacity change from 0 to 1024 [ 194.104060][ T9301] netlink: 'syz.4.2286': attribute type 4 has an invalid length. [ 194.159786][ T9285] ntfs3: loop5: failed to convert "c46c" to macinuit [ 194.234553][ T9305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2290'. [ 194.369250][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.375646][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.479321][ T9317] netlink: 'syz.5.2296': attribute type 1 has an invalid length. [ 194.603042][ T21] usbhid 1-1:1.0: can't add hid device: -71 [ 194.609095][ T21] usbhid: probe of 1-1:1.0 failed with error -71 [ 194.624272][ T21] usb 1-1: USB disconnect, device number 12 [ 194.702883][ T6349] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 194.920954][ T9322] netlink: 'syz.0.2298': attribute type 5 has an invalid length. [ 194.930978][ T9323] netlink: 'syz.3.2309': attribute type 1 has an invalid length. [ 195.073000][ T6349] usb 7-1: descriptor type invalid, skip [ 195.159873][ T9331] loop4: detected capacity change from 0 to 4096 [ 195.173080][ T6349] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.199390][ T6349] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 195.208579][ T9337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2305'. [ 195.271674][ T9331] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 195.288140][ T9339] loop3: detected capacity change from 0 to 1024 [ 195.372921][ T9331] ntfs3: loop4: failed to convert "c46c" to macinuit [ 195.373011][ T6349] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 195.443044][ T6349] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.451481][ T6349] usb 7-1: Product: syz [ 195.457735][ T6349] usb 7-1: Manufacturer: syz [ 195.462637][ T6349] usb 7-1: SerialNumber: syz [ 195.508796][ T6349] usb 7-1: config 0 descriptor?? [ 195.762211][ T7233] usb 7-1: USB disconnect, device number 5 [ 196.339176][ T9346] loop4: detected capacity change from 0 to 1024 [ 196.469413][ T9348] loop3: detected capacity change from 0 to 4096 [ 196.495131][ T9348] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 196.592982][ T4253] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 196.644815][ T9348] ntfs3: loop3: failed to convert "c46c" to macinuit [ 196.792843][ T7233] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 196.973187][ T4253] usb 6-1: descriptor type invalid, skip [ 197.052987][ T4253] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.063564][ T4253] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 197.233146][ T7233] usb 7-1: config 1 interface 0 altsetting 250 endpoint 0x81 has an invalid bInterval 89, changing to 10 [ 197.244848][ T4253] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 197.254176][ T4253] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.263128][ T7233] usb 7-1: config 1 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 197.276795][ T4253] usb 6-1: Product: syz [ 197.281057][ T4253] usb 6-1: Manufacturer: syz [ 197.285767][ T7233] usb 7-1: config 1 interface 0 has no altsetting 0 [ 197.292491][ T4253] usb 6-1: SerialNumber: syz [ 197.299464][ T4253] usb 6-1: config 0 descriptor?? [ 197.443192][ T7233] usb 7-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.40 [ 197.452546][ T7233] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.461264][ T7233] usb 7-1: Product: syz [ 197.465509][ T7233] usb 7-1: Manufacturer: syz [ 197.470640][ T7233] usb 7-1: SerialNumber: syz [ 197.550607][ T13] usb 6-1: USB disconnect, device number 5 [ 197.942943][ T7233] usbhid 7-1:1.0: can't add hid device: -71 [ 197.949466][ T7233] usbhid: probe of 7-1:1.0 failed with error -71 [ 197.966562][ T7233] usb 7-1: USB disconnect, device number 6 [ 198.300976][ T9368] loop4: detected capacity change from 0 to 2048 [ 198.388656][ T9376] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 198.572978][ T7233] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 198.742952][ T6349] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 198.982950][ T6349] usb 7-1: Using ep0 maxpacket: 16 [ 199.093191][ T7233] usb 6-1: config 1 interface 0 altsetting 250 endpoint 0x81 has an invalid bInterval 89, changing to 10 [ 199.103237][ T6349] usb 7-1: config index 0 descriptor too short (expected 18, got 14) [ 199.104627][ T7233] usb 6-1: config 1 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 199.121313][ T6349] usb 7-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 199.126742][ T7233] usb 6-1: config 1 interface 0 has no altsetting 0 [ 199.144885][ T6349] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 199.313070][ T6349] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 199.313343][ T7233] usb 6-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.40 [ 199.331171][ T6349] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.331612][ T7233] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.339771][ T6349] usb 7-1: Product: syz [ 199.348423][ T7233] usb 6-1: Product: syz [ 199.356463][ T7233] usb 6-1: Manufacturer: syz [ 199.360192][ T6349] usb 7-1: Manufacturer: syz [ 199.361340][ T7233] usb 6-1: SerialNumber: syz [ 199.366173][ T6349] usb 7-1: SerialNumber: syz [ 199.386301][ T6349] r8152-cfgselector 7-1: config 0 descriptor?? [ 199.653422][ T6349] usbip-host 7-1: 7-1 is not in match_busid table... skip! [ 199.863003][ T7233] usbhid 6-1:1.0: can't add hid device: -71 [ 199.869399][ T7233] usbhid: probe of 6-1:1.0 failed with error -71 [ 199.874334][ T6349] usb 7-1: USB disconnect, device number 7 [ 199.902199][ T7233] usb 6-1: USB disconnect, device number 6 [ 200.267998][ T9393] loop3: detected capacity change from 0 to 2048 [ 200.333903][ T9395] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 200.462293][ T9401] netlink: 'syz.0.2334': attribute type 1 has an invalid length. [ 200.503018][ T7233] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 200.510322][ T9401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2334'. [ 200.607387][ T9404] loop6: detected capacity change from 0 to 4096 [ 200.611121][ T9407] futex_wake_op: syz.3.2336 tries to shift op by 32; fix this program [ 200.702783][ T9404] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 200.804439][ T9416] comedi comedi4: bad chanlist[0]=0x032c0000 chan=0 range length=2 [ 200.850485][ T9404] ntfs3: loop6: failed to convert "c46c" to macinuit [ 200.953182][ T7233] usb 5-1: config 1 interface 0 altsetting 250 endpoint 0x81 has an invalid bInterval 89, changing to 10 [ 200.998660][ T7233] usb 5-1: config 1 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 200.998836][ T9422] comedi comedi4: bad chanlist[0]=0x032c0000 chan=0 range length=2 [ 201.030275][ T7233] usb 5-1: config 1 interface 0 has no altsetting 0 [ 201.093945][ T9423] loop0: detected capacity change from 0 to 4096 [ 201.127478][ T9423] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 201.176310][ T9429] loop6: detected capacity change from 0 to 2048 [ 201.203009][ T7233] usb 5-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.40 [ 201.241406][ T7233] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.270314][ T7233] usb 5-1: Product: syz [ 201.275606][ T9423] ntfs3: loop0: failed to convert "c46c" to macinuit [ 201.296935][ T7233] usb 5-1: Manufacturer: syz [ 201.306255][ T9432] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 201.317086][ T13] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 201.331255][ T7233] usb 5-1: SerialNumber: syz [ 201.487311][ T9439] netlink: 'syz.6.2351': attribute type 1 has an invalid length. [ 201.525166][ T9439] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2351'. [ 201.571362][ T13] usb 6-1: Using ep0 maxpacket: 16 [ 201.696845][ T13] usb 6-1: config index 0 descriptor too short (expected 18, got 14) [ 201.713622][ T9446] futex_wake_op: syz.6.2353 tries to shift op by 32; fix this program [ 201.716869][ T13] usb 6-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 201.746326][ T13] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 201.782901][ T7233] usbhid 5-1:1.0: can't add hid device: -71 [ 201.793242][ T7233] usbhid: probe of 5-1:1.0 failed with error -71 [ 201.820806][ T7233] usb 5-1: USB disconnect, device number 13 [ 201.859590][ T9453] trusted_key: encrypted_key: master key parameter '' is invalid [ 201.934725][ T9449] loop0: detected capacity change from 0 to 4096 [ 201.963316][ T13] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 201.985773][ T13] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.994061][ T9449] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 202.006876][ T13] usb 6-1: Product: syz [ 202.011804][ T13] usb 6-1: Manufacturer: syz [ 202.019738][ T13] usb 6-1: SerialNumber: syz [ 202.052138][ T13] r8152-cfgselector 6-1: config 0 descriptor?? [ 202.078225][ T26] audit: type=1800 audit(1755702317.901:22): pid=9450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.2360" name="/" dev="sockfs" ino=50466 res=0 errno=0 [ 202.128626][ T9459] xt_hashlimit: max too large, truncated to 1048576 [ 202.131726][ T9461] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 202.254734][ T9464] xt_ecn: cannot match TCP bits for non-tcp packets [ 202.308813][ T9465] loop6: detected capacity change from 0 to 1024 [ 202.329544][ T13] usbip-host 6-1: 6-1 is not in match_busid table... skip! [ 202.359833][ T9468] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 202.359851][ T9469] netlink: 'syz.3.2366': attribute type 1 has an invalid length. [ 202.359870][ T9469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2366'. [ 202.592314][ T9475] xt_ecn: cannot match TCP bits for non-tcp packets [ 202.615790][ T21] usb 6-1: USB disconnect, device number 7 [ 202.684920][ T9482] trusted_key: encrypted_key: master key parameter '' is invalid [ 202.868666][ T9488] xt_hashlimit: max too large, truncated to 1048576 [ 202.991243][ T9494] loop6: detected capacity change from 0 to 4096 [ 203.021669][ T26] audit: type=1800 audit(1755702318.841:23): pid=9492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.0.2374" name="/" dev="sockfs" ino=49610 res=0 errno=0 [ 203.081836][ T9500] loop0: detected capacity change from 0 to 64 [ 203.107656][ T9494] ntfs3: loop6: Different NTFS' sector size (2048) and media sector size (512) [ 203.132995][ T13] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 203.186662][ T9502] loop5: detected capacity change from 0 to 1024 [ 203.462769][ T9514] xt_ecn: cannot match TCP bits for non-tcp packets [ 203.585781][ T9517] trusted_key: encrypted_key: master key parameter '' is invalid [ 203.593306][ T13] usb 4-1: config 1 interface 0 altsetting 250 endpoint 0x81 has an invalid bInterval 89, changing to 10 [ 203.642955][ T13] usb 4-1: config 1 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 203.698101][ T13] usb 4-1: config 1 interface 0 has no altsetting 0 [ 203.709182][ T9525] netlink: 'syz.0.2394': attribute type 3 has an invalid length. [ 203.721951][ T9528] loop5: detected capacity change from 0 to 64 [ 203.726602][ T9527] loop6: detected capacity change from 0 to 128 [ 203.839703][ T26] audit: type=1800 audit(1755702319.661:24): pid=9527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2395" name="file1" dev="loop6" ino=1048612 res=0 errno=0 [ 203.916502][ T13] usb 4-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.40 [ 203.941653][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.958299][ T13] usb 4-1: Product: syz [ 203.964823][ T9536] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2409'. [ 203.992897][ T13] usb 4-1: Manufacturer: syz [ 203.998170][ T13] usb 4-1: SerialNumber: syz [ 204.463012][ T13] usbhid 4-1:1.0: can't add hid device: -71 [ 204.469560][ T13] usbhid: probe of 4-1:1.0 failed with error -71 [ 204.478280][ T13] usb 4-1: USB disconnect, device number 11 [ 204.807512][ T9552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2404'. [ 204.845110][ T9554] xt_ecn: cannot match TCP bits for non-tcp packets [ 204.943270][ T9559] netlink: 'syz.5.2407': attribute type 3 has an invalid length. [ 204.955311][ T9560] netlink: zone id is out of range [ 204.977015][ T9560] netlink: zone id is out of range [ 204.987385][ T9564] loop3: detected capacity change from 0 to 128 [ 205.074838][ T9568] loop0: detected capacity change from 0 to 1024 [ 205.120718][ T26] audit: type=1800 audit(1755702320.941:25): pid=9564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2410" name="file1" dev="loop3" ino=1048613 res=0 errno=0 [ 205.142435][ T9573] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2417'. [ 205.197615][ T9568] EXT4-fs (loop0): Ignoring removed nobh option [ 205.222126][ T9568] EXT4-fs (loop0): inline encryption not supported [ 205.242902][ T9568] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 205.372429][ T9585] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2422'. [ 205.400841][ T9568] EXT4-fs (loop0): mounted filesystem without journal. Opts: data_err=abort,nojournal_checksum,barrier=0x0000000000000002,init_itable=0x0000000000000001,data_err=ignore,lazytime,data_err=ignore,journal_dev=0x0000000000000800,nobh,inlinecrypt,data_err=ignore,dioread_nolock,,errors=continue. Quota mode: none. [ 205.404868][ T9589] netlink: zone id is out of range [ 205.437592][ T9589] netlink: zone id is out of range [ 205.563712][ T9594] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2437'. [ 205.784687][ T9603] loop6: detected capacity change from 0 to 1024 [ 205.867345][ T9603] EXT4-fs (loop6): Ignoring removed nobh option [ 205.890489][ T9603] EXT4-fs (loop6): inline encryption not supported [ 205.929046][ T9603] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 206.013921][ T9617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2433'. [ 206.082521][ T9603] EXT4-fs (loop6): mounted filesystem without journal. Opts: data_err=abort,nojournal_checksum,barrier=0x0000000000000002,init_itable=0x0000000000000001,data_err=ignore,lazytime,data_err=ignore,journal_dev=0x0000000000000800,nobh,inlinecrypt,data_err=ignore,dioread_nolock,,errors=continue. Quota mode: none. [ 206.212065][ T9629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2444'. [ 206.427865][ T9645] netlink: 420 bytes leftover after parsing attributes in process `syz.0.2460'. [ 206.616964][ T9658] netlink: 420 bytes leftover after parsing attributes in process `syz.3.2467'. [ 206.954276][ T9681] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.2466'. [ 207.082193][ T9687] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2482'. [ 207.272935][ T9698] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2486'. [ 207.667399][ T9675] loop5: detected capacity change from 0 to 32768 [ 208.242973][ T21] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 208.515128][ T9706] loop3: detected capacity change from 0 to 32768 [ 208.571120][ T9745] netlink: 'syz.4.2501': attribute type 10 has an invalid length. [ 208.613137][ T9747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2500'. [ 208.622436][ T21] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 208.641062][ T21] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 208.651341][ T9745] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2501'. [ 208.667182][ T21] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 208.689583][ T21] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 208.700354][ T9745] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 208.916634][ T21] usb 6-1: New USB device found, idVendor=0bfd, idProduct=0017, bcdDevice=2f.a3 [ 208.955021][ T21] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.981812][ T21] usb 6-1: Product: syz [ 208.991982][ T21] usb 6-1: Manufacturer: syz [ 209.000239][ T21] usb 6-1: SerialNumber: syz [ 209.057402][ T21] usb 6-1: config 0 descriptor?? [ 209.093746][ T21] kvaser_usb 6-1:0.0: Cannot get software info, error -90 [ 209.121816][ T21] kvaser_usb: probe of 6-1:0.0 failed with error -90 [ 209.356178][ T9779] netlink: 'syz.6.2517': attribute type 10 has an invalid length. [ 209.367858][ T13] usb 6-1: USB disconnect, device number 8 [ 209.388831][ T9779] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 209.642929][ T9789] netlink: 'syz.6.2520': attribute type 1 has an invalid length. [ 209.744868][ T9769] loop4: detected capacity change from 0 to 32768 [ 209.753017][ T9795] netlink: 'syz.0.2535': attribute type 1 has an invalid length. [ 209.943517][ T9802] UBIFS error (pid: 9802): cannot open "(null)", error -22 [ 210.722858][ T7233] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 210.916249][ T9827] loop6: detected capacity change from 0 to 32768 [ 211.161240][ T7233] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 211.178333][ T7233] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 211.196661][ T7233] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 211.208114][ T7233] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 211.276784][ T9831] UBIFS error (pid: 9831): cannot open "(null)", error -22 [ 211.373907][ T7233] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0017, bcdDevice=2f.a3 [ 211.404193][ T7233] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.431664][ T7233] usb 4-1: Product: syz [ 211.467445][ T7233] usb 4-1: Manufacturer: syz [ 211.473262][ T7233] usb 4-1: SerialNumber: syz [ 211.492647][ T7233] usb 4-1: config 0 descriptor?? [ 211.554060][ T7233] kvaser_usb 4-1:0.0: Cannot get software info, error -90 [ 211.568254][ T7233] kvaser_usb: probe of 4-1:0.0 failed with error -90 [ 211.571067][ T9841] loop4: detected capacity change from 0 to 4096 [ 211.659944][ T9841] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 211.699504][ T9841] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 211.763332][ T9841] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 211.802802][ T9841] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 211.810002][ T21] usb 4-1: USB disconnect, device number 12 [ 211.841870][ T9841] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 211.901192][ T9841] ntfs: volume version 3.1. [ 211.927679][ T9841] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 211.957835][ T1111] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 211.966234][ T9841] ntfs: (device loop4): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 212.032091][ T9841] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 212.063943][ T9841] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 212.087482][ T9841] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 212.214460][ T1111] usb 6-1: Using ep0 maxpacket: 8 [ 212.334284][ T1111] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 [ 212.342421][ T1111] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.388705][ T1111] usb 6-1: config 0 has no interface number 0 [ 212.418931][ T1111] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 212.471472][ T1111] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0xA has invalid wMaxPacketSize 0 [ 212.503532][ T1111] usb 6-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 212.540118][ T1111] usb 6-1: config 0 interface 52 has no altsetting 0 [ 212.713084][ T1111] usb 6-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 212.736539][ T1111] usb 6-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 212.761225][ T1111] usb 6-1: Product: syz [ 212.766484][ T1111] usb 6-1: Manufacturer: syz [ 212.781672][ T1111] usb 6-1: SerialNumber: syz [ 212.803789][ T1111] usb 6-1: config 0 descriptor?? [ 212.837342][ T6335] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 212.862054][ T9887] loop3: detected capacity change from 0 to 4096 [ 212.895819][ T9887] ntfs: volume version 3.1. [ 213.202983][ T6335] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 213.213182][ T6335] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 213.223309][ T6335] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 213.233679][ T6335] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 213.275426][ T4283] usb 6-1: USB disconnect, device number 9 [ 213.443102][ T6335] usb 7-1: New USB device found, idVendor=0bfd, idProduct=0017, bcdDevice=2f.a3 [ 213.453217][ T6335] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.461400][ T6335] usb 7-1: Product: syz [ 213.465897][ T6335] usb 7-1: Manufacturer: syz [ 213.470527][ T6335] usb 7-1: SerialNumber: syz [ 213.478365][ T6335] usb 7-1: config 0 descriptor?? [ 213.523579][ T6335] kvaser_usb 7-1:0.0: Cannot get software info, error -90 [ 213.531070][ T6335] kvaser_usb: probe of 7-1:0.0 failed with error -90 [ 213.734395][ T6335] usb 7-1: USB disconnect, device number 8 [ 214.603091][ T21] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 214.837589][ T9923] loop5: detected capacity change from 0 to 4096 [ 214.863078][ T21] usb 1-1: Using ep0 maxpacket: 8 [ 214.903249][ T9923] ntfs: volume version 3.1. [ 215.006289][ T21] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 215.028701][ T21] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.064926][ T21] usb 1-1: config 0 has no interface number 0 [ 215.086472][ T21] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 215.121859][ T21] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0xA has invalid wMaxPacketSize 0 [ 215.157300][ T21] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 215.190460][ T21] usb 1-1: config 0 interface 52 has no altsetting 0 [ 215.365752][ T9943] netlink: 'syz.5.2610': attribute type 10 has an invalid length. [ 215.388020][ T9943] __nla_validate_parse: 6 callbacks suppressed [ 215.388038][ T9943] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2610'. [ 215.415232][ T9943] batman_adv: batadv0: Adding interface: vlan1 [ 215.422085][ T9943] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.423020][ T21] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 215.452865][ T9943] batman_adv: batadv0: Interface activated: vlan1 [ 215.465121][ T21] usb 1-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 215.475191][ T21] usb 1-1: Product: syz [ 215.480253][ T21] usb 1-1: Manufacturer: syz [ 215.494916][ T21] usb 1-1: SerialNumber: syz [ 215.520857][ T21] usb 1-1: config 0 descriptor?? [ 215.591169][ T9953] loop4: detected capacity change from 0 to 256 [ 215.668897][ T9959] netlink: 'syz.3.2618': attribute type 10 has an invalid length. [ 215.687662][ T9959] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2618'. [ 215.709050][ T9959] batman_adv: batadv0: Adding interface: vlan1 [ 215.728531][ T9959] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.732597][ T9953] FAT-fs (loop4): Directory bread(block 64) failed [ 215.761199][ T9953] FAT-fs (loop4): Directory bread(block 65) failed [ 215.776872][ T9953] FAT-fs (loop4): Directory bread(block 66) failed [ 215.789675][ T9953] FAT-fs (loop4): Directory bread(block 67) failed [ 215.801697][ T9953] FAT-fs (loop4): Directory bread(block 68) failed [ 215.819172][ T9953] FAT-fs (loop4): Directory bread(block 69) failed [ 215.834428][ T9953] FAT-fs (loop4): Directory bread(block 70) failed [ 215.841357][ T9953] FAT-fs (loop4): Directory bread(block 71) failed [ 215.850153][ T9959] batman_adv: batadv0: Interface activated: vlan1 [ 215.890132][ T9953] FAT-fs (loop4): Directory bread(block 72) failed [ 215.903463][ T9961] loop6: detected capacity change from 0 to 4096 [ 215.912949][ T9953] FAT-fs (loop4): Directory bread(block 73) failed [ 215.949162][ T9961] ntfs: volume version 3.1. [ 216.053619][ T9965] --map-set only usable from mangle table [ 216.111258][ T21] usb 1-1: USB disconnect, device number 13 [ 216.570515][ T9991] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request [ 216.767662][T10002] netlink: 'syz.3.2626': attribute type 10 has an invalid length. [ 216.796865][T10005] loop6: detected capacity change from 0 to 256 [ 216.826144][T10002] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 216.903500][T10005] FAT-fs (loop6): Directory bread(block 64) failed [ 216.962636][T10005] FAT-fs (loop6): Directory bread(block 65) failed [ 217.022481][T10005] FAT-fs (loop6): Directory bread(block 66) failed [ 217.080917][T10005] FAT-fs (loop6): Directory bread(block 67) failed [ 217.131257][T10011] loop5: detected capacity change from 0 to 4096 [ 217.137807][T10005] FAT-fs (loop6): Directory bread(block 68) failed [ 217.154836][T10005] FAT-fs (loop6): Directory bread(block 69) failed [ 217.165703][T10020] loop3: detected capacity change from 0 to 128 [ 217.199078][T10005] FAT-fs (loop6): Directory bread(block 70) failed [ 217.209840][T10020] EXT4-fs (loop3): Test dummy encryption mode enabled [ 217.230318][T10020] EXT4-fs (loop3): Test dummy encryption mode enabled [ 217.237684][T10005] FAT-fs (loop6): Directory bread(block 71) failed [ 217.253569][T10005] FAT-fs (loop6): Directory bread(block 72) failed [ 217.269257][T10020] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 217.282071][T10011] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 217.291560][T10005] FAT-fs (loop6): Directory bread(block 73) failed [ 217.309279][T10020] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 217.414209][T10020] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,nomblk_io_submit,,errors=continue. Quota mode: none. [ 217.456643][T10020] ext4 filesystem being mounted at /551/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 217.469409][T10011] ntfs3: loop5: failed to convert "c46c" to cp874 [ 217.744518][T10037] netlink: 'syz.5.2647': attribute type 4 has an invalid length. [ 217.781076][T10037] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.2647'. [ 217.812797][ T13] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 218.040243][T10051] loop4: detected capacity change from 0 to 128 [ 218.062773][ T13] usb 1-1: Using ep0 maxpacket: 8 [ 218.103138][T10051] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 218.176700][T10060] loop5: detected capacity change from 0 to 256 [ 218.183012][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 218.193819][T10061] delete_channel: no stack [ 218.219855][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 218.231449][ T13] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 218.242251][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 218.254086][ T13] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 218.264963][ T13] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 218.289279][T10063] netlink: 'syz.3.2660': attribute type 4 has an invalid length. [ 218.300052][T10060] FAT-fs (loop5): Directory bread(block 64) failed [ 218.316673][T10060] FAT-fs (loop5): Directory bread(block 65) failed [ 218.320090][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.330267][T10060] FAT-fs (loop5): Directory bread(block 66) failed [ 218.344674][T10060] FAT-fs (loop5): Directory bread(block 67) failed [ 218.383677][ T13] usb 1-1: config 0 descriptor?? [ 218.392333][T10060] FAT-fs (loop5): Directory bread(block 68) failed [ 218.407643][T10060] FAT-fs (loop5): Directory bread(block 69) failed [ 218.413647][T10031] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 218.422365][T10060] FAT-fs (loop5): Directory bread(block 70) failed [ 218.462972][T10060] FAT-fs (loop5): Directory bread(block 71) failed [ 218.470273][T10060] FAT-fs (loop5): Directory bread(block 72) failed [ 218.498435][T10063] device veth1_macvtap left promiscuous mode [ 218.503395][T10060] FAT-fs (loop5): Directory bread(block 73) failed [ 218.552926][ T7233] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 218.763554][T10073] netlink: 'syz.5.2664': attribute type 28 has an invalid length. [ 218.831368][T10069] loop3: detected capacity change from 0 to 4096 [ 218.868246][T10069] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 218.879037][ T4924] usb 1-1: USB disconnect, device number 14 [ 218.912995][ T7233] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 218.963395][ T7233] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 219.012975][ T7233] usb 7-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 219.022403][ T7233] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.070083][ T7233] usb 7-1: config 0 descriptor?? [ 219.266188][T10091] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2673'. [ 219.316965][ T7233] usb 7-1: USB disconnect, device number 9 [ 219.589671][T10112] loop5: detected capacity change from 0 to 256 [ 219.641052][T10112] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 219.717294][T10118] netlink: 'syz.0.2686': attribute type 1 has an invalid length. [ 219.792825][ T21] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 219.912249][T10127] device bridge2 entered promiscuous mode [ 220.076974][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 220.219825][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 220.283219][ T13] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 220.433027][ T21] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 220.461617][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.478411][ T21] usb 5-1: Product: syz [ 220.483511][ T21] usb 5-1: Manufacturer: syz [ 220.493527][ T21] usb 5-1: SerialNumber: syz [ 220.503973][T10160] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2705'. [ 220.513244][T10163] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2704'. [ 220.530521][ T21] usb 5-1: config 0 descriptor?? [ 220.600635][ T21] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 220.673021][ T13] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 220.683668][ T13] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 220.693709][ T13] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 220.704780][ T13] usb 6-1: config 220 has no interface number 2 [ 220.711610][ T13] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 220.726742][ T13] usb 6-1: config 220 interface 0 has no altsetting 0 [ 220.734117][ T13] usb 6-1: config 220 interface 76 has no altsetting 0 [ 220.741708][ T13] usb 6-1: config 220 interface 1 has no altsetting 0 [ 220.903076][ T13] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 220.920426][ T13] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.948464][ T13] usb 6-1: Product: syz [ 220.954596][T10189] loop6: detected capacity change from 0 to 64 [ 220.965358][ T13] usb 6-1: Manufacturer: syz [ 220.974700][ T13] usb 6-1: SerialNumber: syz [ 221.331303][ T21] usb 5-1: USB disconnect, device number 14 [ 221.345569][ T4295] usb 5-1: Failed to submit usb control message: -71 [ 221.371146][ T4295] usb 5-1: unable to send the bmi data to the device: -71 [ 221.383355][ T13] usb 6-1: selecting invalid altsetting 0 [ 221.391077][ T13] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 221.417078][ T4295] usb 5-1: unable to get target info from device [ 221.419719][ T13] usb 6-1: No valid video chain found. [ 221.450552][ T4295] usb 5-1: could not get target info (-71) [ 221.478700][ T4295] usb 5-1: could not probe fw (-71) [ 221.564704][ T13] usb 6-1: selecting invalid altsetting 0 [ 221.570886][ T13] usbtest: probe of 6-1:220.1 failed with error -22 [ 221.637301][ T13] usb 6-1: USB disconnect, device number 10 [ 222.328959][T10271] netlink: 'syz.4.2750': attribute type 1 has an invalid length. [ 222.431763][T10274] loop3: detected capacity change from 0 to 16 [ 222.486363][T10274] erofs: (device loop3): check_layout_compatibility: unidentified incompatible feature 8, please upgrade kernel version [ 223.305674][T10312] --map-set only usable from mangle table [ 223.427531][T10274] loop3: detected capacity change from 0 to 32768 [ 223.433009][ T1111] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 223.462267][T10274] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.2752 (10274) [ 223.537476][T10274] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 223.573318][T10274] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 223.605389][T10274] BTRFS info (device loop3): use lzo compression, level 0 [ 223.629855][T10274] BTRFS info (device loop3): setting nodatasum [ 223.652867][T10274] BTRFS info (device loop3): force zlib compression, level 3 [ 223.680481][T10274] BTRFS info (device loop3): use lzo compression, level 0 [ 223.707365][T10274] BTRFS info (device loop3): turning on async discard [ 223.731622][T10328] xt_hashlimit: size too large, truncated to 1048576 [ 223.749622][T10274] BTRFS info (device loop3): unrecognized rescue option 'imetacsums' [ 223.770498][T10328] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 223.778376][T10274] BTRFS error (device loop3): unrecognized rescue value imetacsums [ 223.817354][T10274] BTRFS error (device loop3): open_ctree failed: -22 [ 223.853205][ T1111] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 223.897184][ T1111] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.928574][ T1111] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 224.012993][ T1111] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 224.041954][ T1111] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.085787][ T1111] usb 5-1: config 0 descriptor?? [ 224.121074][T10343] netlink: 'syz.5.2784': attribute type 1 has an invalid length. [ 224.154008][ T1111] usb-storage 5-1:0.0: USB Mass Storage device detected [ 224.241904][ T1111] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 224.364974][ T1111] usb 5-1: USB disconnect, device number 15 [ 224.628512][T10375] netlink: 'syz.6.2799': attribute type 1 has an invalid length. [ 225.883634][T10467] loop3: detected capacity change from 0 to 64 [ 226.163492][T10485] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2854'. [ 226.263387][T10491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2852'. [ 226.534834][T10515] device bridge2 entered promiscuous mode [ 226.691630][T10527] netlink: 'syz.6.2874': attribute type 1 has an invalid length. [ 226.988113][T10554] loop6: detected capacity change from 0 to 256 [ 227.078072][T10554] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 227.431745][T10584] netlink: 'syz.5.2903': attribute type 1 has an invalid length. [ 227.452972][T10587] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2904'. [ 227.494306][T10589] netlink: 'syz.3.2916': attribute type 28 has an invalid length. [ 227.874368][T10621] loop3: detected capacity change from 0 to 256 [ 227.881266][T10620] netlink: 'syz.4.2922': attribute type 28 has an invalid length. [ 227.989149][T10621] FAT-fs (loop3): Directory bread(block 64) failed [ 228.005863][T10621] FAT-fs (loop3): Directory bread(block 65) failed [ 228.036141][T10627] netlink: 'syz.6.2925': attribute type 4 has an invalid length. [ 228.047898][T10621] FAT-fs (loop3): Directory bread(block 66) failed [ 228.066701][T10629] delete_channel: no stack [ 228.071297][T10621] FAT-fs (loop3): Directory bread(block 67) failed [ 228.077839][T10619] loop5: detected capacity change from 0 to 4096 [ 228.099041][T10621] FAT-fs (loop3): Directory bread(block 68) failed [ 228.109127][T10627] device veth1_macvtap left promiscuous mode [ 228.145992][T10621] FAT-fs (loop3): Directory bread(block 69) failed [ 228.153710][T10621] FAT-fs (loop3): Directory bread(block 70) failed [ 228.163038][T10619] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 228.214035][T10621] FAT-fs (loop3): Directory bread(block 71) failed [ 228.244632][T10621] FAT-fs (loop3): Directory bread(block 72) failed [ 228.251336][T10621] FAT-fs (loop3): Directory bread(block 73) failed [ 228.712194][T10657] netlink: 'syz.6.2940': attribute type 4 has an invalid length. [ 228.767211][T10657] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.2940'. [ 229.168416][T10678] loop0: detected capacity change from 0 to 4096 [ 229.227156][T10678] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 229.365951][T10693] loop3: detected capacity change from 0 to 256 [ 229.379288][T10678] ntfs3: loop0: failed to convert "c46c" to cp874 [ 229.451512][T10703] netlink: 'syz.6.2960': attribute type 10 has an invalid length. [ 229.500582][T10693] FAT-fs (loop3): Directory bread(block 64) failed [ 229.519904][T10693] FAT-fs (loop3): Directory bread(block 65) failed [ 229.563371][T10693] FAT-fs (loop3): Directory bread(block 66) failed [ 229.570033][T10693] FAT-fs (loop3): Directory bread(block 67) failed [ 229.606991][T10693] FAT-fs (loop3): Directory bread(block 68) failed [ 229.632908][T10693] FAT-fs (loop3): Directory bread(block 69) failed [ 229.664305][T10693] FAT-fs (loop3): Directory bread(block 70) failed [ 229.671405][T10693] FAT-fs (loop3): Directory bread(block 71) failed [ 229.721298][T10693] FAT-fs (loop3): Directory bread(block 72) failed [ 229.748269][T10693] FAT-fs (loop3): Directory bread(block 73) failed [ 230.117341][T10742] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2978'. [ 230.381777][T10747] loop5: detected capacity change from 0 to 4096 [ 230.417618][T10754] loop0: detected capacity change from 0 to 4096 [ 230.442558][T10747] __ntfs_error: 54 callbacks suppressed [ 230.442578][T10747] ntfs: (device loop5): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 230.491825][T10747] ntfs: (device loop5): ntfs_read_locked_inode(): $DATA attribute is missing. [ 230.501578][T10747] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 230.515641][T10747] ntfs: (device loop5): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 230.537230][T10754] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 230.584836][T10747] ntfs: volume version 3.1. [ 230.895864][T10761] xt_connbytes: Forcing CT accounting to be enabled [ 231.442946][T10791] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 231.557500][T10798] netlink: 'syz.3.3006': attribute type 10 has an invalid length. [ 231.609447][T10798] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 231.676960][T10801] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3009'. [ 231.762792][T10801] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3009'. [ 231.831379][T10808] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3015'. [ 232.139745][T10827] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 232.460157][T10843] loop6: detected capacity change from 0 to 512 [ 232.648822][T10843] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 232.661529][T10843] ext4 filesystem being mounted at /256/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 232.682187][T10863] loop3: detected capacity change from 0 to 256 [ 232.709055][T10860] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3048'. [ 232.832559][T10863] FAT-fs (loop3): Directory bread(block 64) failed [ 232.851798][T10863] FAT-fs (loop3): Directory bread(block 65) failed [ 232.901827][T10863] FAT-fs (loop3): Directory bread(block 66) failed [ 232.961858][T10863] FAT-fs (loop3): Directory bread(block 67) failed [ 233.000814][T10863] FAT-fs (loop3): Directory bread(block 68) failed [ 233.029808][T10863] FAT-fs (loop3): Directory bread(block 69) failed [ 233.036903][T10863] FAT-fs (loop3): Directory bread(block 70) failed [ 233.052515][T10879] netlink: 'syz.6.3044': attribute type 1 has an invalid length. [ 233.077416][T10863] FAT-fs (loop3): Directory bread(block 71) failed [ 233.096233][T10863] FAT-fs (loop3): Directory bread(block 72) failed [ 233.103645][T10879] netlink: 112860 bytes leftover after parsing attributes in process `syz.6.3044'. [ 233.118517][T10863] FAT-fs (loop3): Directory bread(block 73) failed [ 233.125970][T10879] netlink: 9 bytes leftover after parsing attributes in process `syz.6.3044'. [ 233.420560][T10900] netlink: 'syz.6.3056': attribute type 1 has an invalid length. [ 233.438607][T10900] netlink: 220 bytes leftover after parsing attributes in process `syz.6.3056'. [ 233.610580][T10902] libceph: resolve '4..' (ret=-3): failed [ 233.712573][T10913] damon: invalid nr_regions. min (2047) > max (1) [ 233.740541][T10918] netlink: 'syz.5.3063': attribute type 2 has an invalid length. [ 233.762825][T10918] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3063'. [ 234.028710][T10928] loop0: detected capacity change from 0 to 2048 [ 234.117566][T10928] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 234.543275][T10964] netlink: 'syz.0.3097': attribute type 16 has an invalid length. [ 234.562468][T10964] netlink: 'syz.0.3097': attribute type 17 has an invalid length. [ 234.581982][T10969] loop4: detected capacity change from 0 to 256 [ 234.618268][T10964] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 234.623765][T10969] exfat: Deprecated parameter 'namecase' [ 234.631914][T10964] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 234.688144][T10964] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 234.704118][T10969] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 234.754137][T10964] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 235.533143][T11026] program syz.0.3127 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 235.572287][T11032] netlink: 'syz.6.3116': attribute type 16 has an invalid length. [ 235.618667][T11032] netlink: 'syz.6.3116': attribute type 17 has an invalid length. [ 235.661974][T11032] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 235.703628][T11032] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 235.758842][T11032] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 235.820745][T11032] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 235.976449][T11033] netlink: 'syz.4.3117': attribute type 1 has an invalid length. [ 235.984522][T11033] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.3117'. [ 236.791275][T11093] loop6: detected capacity change from 0 to 2048 [ 236.903183][T11093] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 237.229015][T11123] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 237.268061][T11123] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 237.312542][T11123] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 237.319528][T11125] netlink: 'syz.5.3164': attribute type 3 has an invalid length. [ 237.402812][ T1111] Bluetooth: hci5: command 0x0406 tx timeout [ 238.364048][T11176] loop0: detected capacity change from 0 to 256 [ 238.432622][T11181] loop5: detected capacity change from 0 to 1024 [ 238.438960][T11178] device veth3 entered promiscuous mode [ 238.446191][T11182] ieee802154 phy0 wpan0: encryption failed: -22 [ 238.455702][T11184] netlink: 'syz.3.3191': attribute type 3 has an invalid length. [ 238.517380][T11181] hfsplus: Filesystem is marked locked, mounting read-only. [ 238.584548][T11181] hfsplus: filesystem is marked locked, leaving read-only. [ 239.005317][T11216] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3208'. [ 239.092015][T11220] loop4: detected capacity change from 0 to 256 [ 239.260430][T11226] device veth3 entered promiscuous mode [ 239.686353][T11234] xt_TCPMSS: Only works on TCP SYN packets [ 239.767732][T11230] loop4: detected capacity change from 0 to 8192 [ 239.814514][T11236] loop3: detected capacity change from 0 to 2048 [ 239.893006][T11236] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 239.984822][T11203] loop0: detected capacity change from 0 to 32768 [ 240.172620][T11222] loop6: detected capacity change from 0 to 32768 [ 240.182188][T11240] device bond2 entered promiscuous mode [ 240.193398][T11240] 8021q: adding VLAN 0 to HW filter on device bond2 [ 240.231449][T11203] XFS (loop0): Mounting V5 Filesystem [ 240.366378][ T26] audit: type=1400 audit(1755702356.191:26): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3AF4F9904E7FDB3635A70D23C73EEAF23A2F503280080CA26230668AD9DCF8B061228F8599D34E45087D21AA56759E1651B3DD467BDEF390C76D pid=11254 comm="syz.4.3223" [ 240.396200][T11222] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 240.475550][T11203] XFS (loop0): Ending clean mount [ 240.484391][T11203] XFS (loop0): Quotacheck needed: Please wait. [ 240.555598][T11203] XFS (loop0): Quotacheck: Done. [ 240.619405][ T8075] ocfs2: Unmounting device (7,6) on (node local) [ 240.739950][T11275] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3230'. [ 240.749800][ T4183] XFS (loop0): Unmounting Filesystem [ 240.813351][T11270] loop4: detected capacity change from 0 to 4096 [ 240.970845][T11283] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 241.012409][T11270] NILFS error (device loop4): nilfs_find_entry: dir 2 size 34359742464 exceeds block count 1 [ 241.031581][T11285] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3237'. [ 241.050664][T11270] Remounting filesystem read-only [ 241.066549][T11285] netlink: 'syz.6.3237': attribute type 1 has an invalid length. [ 241.186066][ T4187] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 241.293564][T11296] loop0: detected capacity change from 0 to 512 [ 241.436116][T11296] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 241.489799][T11296] ext4 filesystem being mounted at /655/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 241.922932][ T4283] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 242.029901][T11337] xt_TPROXY: Can be used only with -p tcp or -p udp [ 242.155354][T11340] xt_CT: No such helper "netbios-ns" [ 242.316104][T11354] netlink: 'syz.6.3264': attribute type 21 has an invalid length. [ 242.333224][T11354] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3264'. [ 242.353238][ T4283] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.383082][ T1111] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 242.401053][ T4283] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 242.429758][T11356] loop0: detected capacity change from 0 to 512 [ 242.438892][ T4283] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 242.466581][ T4283] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.489725][ T4283] usb 4-1: config 0 descriptor?? [ 242.524104][T11356] EXT4-fs (loop0): Test dummy encryption mode enabled [ 242.548966][T11356] EXT4-fs (loop0): Test dummy encryption mode enabled [ 242.568771][T11356] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,inode_readahead_blks=0x0000000000000100,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000. Quota mode: writeback. [ 242.598938][ C0] vkms_vblank_simulate: vblank timer overrun [ 242.699785][T11356] EXT4-fs error (device loop0): ext4_add_entry:2486: inode #2: comm syz.0.3267: Directory hole found for htree leaf block 0 [ 242.714677][T11356] EXT4-fs (loop0): Remounting filesystem read-only [ 242.819491][ T1111] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 242.851411][ T1111] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.887487][ T1111] usb 6-1: config 0 descriptor?? [ 242.935721][ T1111] cp210x 6-1:0.0: cp210x converter detected [ 242.983021][ T4283] Bluetooth: Can't get state to change to load configuration err [ 243.001427][ T4283] Bluetooth: Loading sysconfig file failed [ 243.052483][ T4283] ath3k: probe of 4-1:0.0 failed with error -16 [ 243.081289][ T4283] usb 4-1: USB disconnect, device number 13 [ 243.128348][T11389] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3286'. [ 243.234781][T11397] loop4: detected capacity change from 0 to 16 [ 243.252553][T11397] erofs: (device loop4): mounted with root inode @ nid 36. [ 243.272209][ T4192] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress 6887 in[4096, 0] out[9000] [ 243.290839][T11396] loop6: detected capacity change from 0 to 2048 [ 243.310196][T11397] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress 6887 in[4096, 0] out[8192] [ 243.340405][ T26] audit: type=1800 audit(1755702359.161:27): pid=11397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3290" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 243.392896][ T1111] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 243.422867][ T1111] cp210x 6-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 243.430667][ T1111] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 243.430803][T11396] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 243.453501][ T1111] usb 6-1: cp210x converter now attached to ttyUSB0 [ 243.472806][ T21] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 243.493382][ T1111] usb 6-1: USB disconnect, device number 11 [ 243.516785][ T1111] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 243.581902][T11396] UDF-fs: unknown compression code (0) [ 243.589102][ T1111] cp210x 6-1:0.0: device disconnected [ 243.871887][T11409] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 243.933254][ T21] usb 1-1: config 0 has an invalid interface number: 152 but max is 0 [ 243.945478][ T21] usb 1-1: config 0 has no interface number 0 [ 243.953037][ T4253] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 243.959868][ T21] usb 1-1: config 0 interface 152 altsetting 7 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 244.002065][ T21] usb 1-1: config 0 interface 152 has no altsetting 0 [ 244.102085][T11417] loop5: detected capacity change from 0 to 512 [ 244.192875][ T4253] usb 5-1: Using ep0 maxpacket: 8 [ 244.216754][ T21] usb 1-1: New USB device found, idVendor=0e7e, idProduct=1001, bcdDevice=a3.17 [ 244.240168][T11417] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 244.240591][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.270918][T11417] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 244.307110][ T21] usb 1-1: Product: syz [ 244.313157][ T4253] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 244.325998][ T21] usb 1-1: Manufacturer: syz [ 244.330838][ T21] usb 1-1: SerialNumber: syz [ 244.335995][T11417] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 244.363202][T11417] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 244.371160][T11417] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 244.406292][ T21] usb 1-1: config 0 descriptor?? [ 244.433377][T11391] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 244.473962][T11417] EXT4-fs (loop5): failed to initialize system zone (-117) [ 244.481412][T11417] EXT4-fs (loop5): mount failed [ 244.505620][T11438] loop6: detected capacity change from 0 to 4096 [ 244.505943][ T4253] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 244.522345][ T4253] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 244.531184][ T4253] usb 5-1: Product: syz [ 244.536539][ T4253] usb 5-1: Manufacturer: syz [ 244.541516][ T4253] usb 5-1: SerialNumber: syz [ 244.557539][T11438] ntfs: (device loop6): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 244.572558][T11438] ntfs: (device loop6): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 244.589290][T11438] ntfs: (device loop6): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 244.601866][T11438] ntfs: (device loop6): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 244.615539][T11438] ntfs: (device loop6): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 244.632232][T11438] ntfs: volume version 3.1. [ 244.641350][T11438] ntfs: (device loop6): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 244.654051][T11438] ntfs: (device loop6): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 244.681825][T11391] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 244.690040][ T1111] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 244.718936][T11438] ntfs: (device loop6): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 244.735514][ T21] cdc_subset 1-1:0.152 usb0: register 'cdc_subset' at usb-dummy_hcd.0-1, Yopy, fe:45:0b:7b:7c:d4 [ 244.792921][ T4253] usb 5-1: palm_os_3_probe - error -71 getting connection information [ 244.819546][ T4253] visor: probe of 5-1:1.0 failed with error -71 [ 244.853022][ T4253] usb 5-1: USB disconnect, device number 16 [ 244.956664][ T7233] usb 1-1: USB disconnect, device number 15 [ 244.966029][ T7233] cdc_subset 1-1:0.152 usb0: unregister 'cdc_subset' usb-dummy_hcd.0-1, Yopy [ 245.104842][ T1111] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 245.158698][ T1111] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 245.402999][ T1111] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 245.433118][ T1111] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.462880][ T1111] usb 4-1: Product: syz [ 245.467113][ T1111] usb 4-1: Manufacturer: syz [ 245.472030][ T1111] usb 4-1: SerialNumber: syz [ 245.485178][T11471] loop4: detected capacity change from 0 to 1024 [ 245.701329][T11475] loop6: detected capacity change from 0 to 4096 [ 245.767077][ T154] hfsplus: b-tree write err: -5, ino 4 [ 245.779601][T11475] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 245.864290][T11475] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 245.883138][ T1111] usb 4-1: 0:2 : does not exist [ 246.087819][ T1111] usb 4-1: USB disconnect, device number 14 [ 246.295942][T11505] libceph: resolve '0' (ret=-3): failed [ 246.377540][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 246.428456][T11514] loop3: detected capacity change from 0 to 256 [ 246.468615][T11519] loop0: detected capacity change from 0 to 16 [ 246.532478][T11522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:aa) already exists on: vlan1 [ 246.550846][T11522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.563489][T11519] erofs: (device loop0): mounted with root inode @ nid 36. [ 246.595818][T11522] device vlan1 entered promiscuous mode [ 246.615273][T11519] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 246.642912][ T1111] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 246.643578][T11519] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -29 in[58, 4038] out[1851] [ 246.713226][T11519] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 247.031576][T11537] sctp: [Deprecated]: syz.5.3344 (pid 11537) Use of int in max_burst socket option. [ 247.031576][T11537] Use struct sctp_assoc_value instead [ 247.033001][T11536] netlink: 'syz.3.3345': attribute type 2 has an invalid length. [ 247.048167][ T1111] usb 7-1: config 6 has an invalid interface number: 2 but max is 0 [ 247.085899][T11539] loop0: detected capacity change from 0 to 8 [ 247.099572][ T1111] usb 7-1: config 6 has no interface number 0 [ 247.116945][ T1111] usb 7-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 247.137041][ T1111] usb 7-1: config 6 interface 2 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 247.161713][T11536] netlink: 'syz.3.3345': attribute type 1 has an invalid length. [ 247.343389][ T1111] usb 7-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 247.359751][ T1111] usb 7-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 247.391331][ T1111] usb 7-1: Product: syz [ 247.402487][T11549] loop5: detected capacity change from 0 to 1024 [ 247.406401][ T1111] usb 7-1: Manufacturer: syz [ 247.418598][T11551] ip6t_srh: unknown srh invflags 7F00 [ 247.436305][T11553] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3352'. [ 247.438679][ T1111] usb 7-1: SerialNumber: syz [ 247.521524][ T1111] hso 7-1:6.2: Failed to find INT IN ep [ 247.762298][T11563] tmpfs: Bad value for 'mpol' [ 247.766062][ T4925] usb 7-1: USB disconnect, device number 10 [ 247.825873][T11560] loop4: detected capacity change from 0 to 2048 [ 247.907216][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 247.907234][ T26] audit: type=1800 audit(1755702363.731:28): pid=11539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3355" name="file2" dev="loop0" ino=6 res=0 errno=0 [ 247.955426][T11560] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 248.026628][T11572] netlink: 'syz.5.3360': attribute type 13 has an invalid length. [ 248.372912][ T21] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 248.561733][T11594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3371'. [ 248.662965][ T21] usb 6-1: Using ep0 maxpacket: 8 [ 248.793212][ T21] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 248.814225][ T21] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 248.842412][ T21] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 248.950738][T11616] netlink: 'syz.6.3385': attribute type 11 has an invalid length. [ 248.972099][T11616] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3385'. [ 249.027176][ T21] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 249.063158][ T21] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.071431][ T21] usb 6-1: Product: syz [ 249.081085][ T21] usb 6-1: Manufacturer: syz [ 249.101679][T11622] loop3: detected capacity change from 0 to 256 [ 249.113122][ T21] usb 6-1: SerialNumber: syz [ 249.164186][ T21] cdc_ncm 6-1:1.0: NCM or ECM functional descriptors missing [ 249.193536][ T21] cdc_ncm 6-1:1.0: bind() failure [ 249.239765][T11622] FAT-fs (loop3): Directory bread(block 64) failed [ 249.257671][T11622] FAT-fs (loop3): Directory bread(block 65) failed [ 249.277267][T11622] FAT-fs (loop3): Directory bread(block 66) failed [ 249.307214][T11622] FAT-fs (loop3): Directory bread(block 67) failed [ 249.346187][T11622] FAT-fs (loop3): Directory bread(block 68) failed [ 249.372957][ T21] cdc_mbim 6-1:1.1: CDC Union missing and no IAD found [ 249.380662][T11622] FAT-fs (loop3): Directory bread(block 69) failed [ 249.389017][ T21] cdc_mbim 6-1:1.1: bind() failure [ 249.403387][ T27] INFO: task syz-executor:4184 blocked for more than 143 seconds. [ 249.408832][T11622] FAT-fs (loop3): Directory bread(block 70) failed [ 249.411572][ T27] Not tainted 5.15.189-syzkaller #0 [ 249.419429][T11622] FAT-fs (loop3): Directory bread(block 71) failed [ 249.432197][T11622] FAT-fs (loop3): Directory bread(block 72) failed [ 249.447593][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 249.460799][ T27] task:syz-executor state:D stack:21504 pid: 4184 ppid: 1 flags:0x00004004 [ 249.483392][T11622] FAT-fs (loop3): Directory bread(block 73) failed [ 249.486788][ T27] Call Trace: [ 249.515099][ T27] [ 249.527665][ T27] __schedule+0x11b8/0x43b0 [ 249.539705][ T27] ? verify_lock_unused+0x140/0x140 [ 249.551133][ T27] ? release_firmware_map_entry+0x190/0x190 [ 249.559793][ T26] audit: type=1800 audit(1755702365.391:29): pid=11622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3388" name="file3" dev="loop3" ino=1048621 res=0 errno=0 [ 249.569567][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 249.608546][ T27] ? lock_chain_count+0x20/0x20 [ 249.619300][ T27] ? _raw_spin_lock_irq+0xab/0xe0 [ 249.624758][ T6335] usb 6-1: USB disconnect, device number 12 [ 249.629104][ T27] schedule+0x11b/0x1e0 [ 249.640690][ T27] io_schedule+0x7c/0xd0 [ 249.650559][ T27] wait_on_page_bit_common+0x815/0xe00 [ 249.661796][ T27] ? wait_on_page_bit+0x50/0x50 [ 249.667297][ T27] ? rcu_lock_release+0x20/0x20 [ 249.672559][ T27] truncate_inode_pages_range+0x97f/0xef0 [ 249.678953][ T27] ? invalidate_inode_page+0x360/0x360 [ 249.685162][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 249.691430][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 249.697228][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 249.704561][ T27] evict+0x498/0x870 [ 249.708526][ T27] ? proc_nr_inodes+0x320/0x320 [ 249.713670][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 249.719167][ T27] evict_inodes+0x604/0x690 [ 249.725087][ T27] ? __dentry_kill+0x530/0x650 [ 249.730538][ T27] ? clear_inode+0x150/0x150 [ 249.735804][ T27] ? sync_filesystem+0x103/0x220 [ 249.740962][ T27] generic_shutdown_super+0x93/0x300 [ 249.746435][ T27] kill_block_super+0x7c/0xe0 [ 249.751421][ T27] deactivate_locked_super+0x93/0xf0 [ 249.757092][ T27] cleanup_mnt+0x418/0x4d0 [ 249.762197][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 249.767626][ T27] task_work_run+0x125/0x1a0 [ 249.772652][ T27] exit_to_user_mode_loop+0x10f/0x130 [ 249.778698][ T27] exit_to_user_mode_prepare+0xb1/0x140 [ 249.784792][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 249.790341][ T27] do_syscall_64+0x58/0xa0 [ 249.794946][ T27] ? clear_bhb_loop+0x30/0x80 [ 249.799955][ T27] ? clear_bhb_loop+0x30/0x80 [ 249.805112][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 249.811156][ T27] RIP: 0033:0x7f0881607f17 [ 249.816988][ T27] RSP: 002b:00007ffefa4634a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 249.826151][ T27] RAX: 0000000000000000 RBX: 00007f0881689c05 RCX: 00007f0881607f17 [ 249.835501][ T27] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffefa463560 [ 249.844301][ T27] RBP: 00007ffefa463560 R08: 0000000000000000 R09: 0000000000000000 [ 249.852338][ T27] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffefa4645f0 [ 249.861488][ T27] R13: 00007f0881689c05 R14: 00000000000176d7 R15: 00007ffefa464630 [ 249.869806][ T27] [ 249.873546][ T27] [ 249.873546][ T27] Showing all locks held in the system: [ 249.881822][ T27] 1 lock held by khungtaskd/27: [ 249.888051][ T27] #0: ffffffff8c11c360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 249.897993][ T27] 1 lock held by klogd/3551: [ 249.905625][ T27] #0: ffff8880b903a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 249.916011][ T27] 2 locks held by getty/3947: [ 249.920708][ T27] #0: ffff88807f088098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 249.931061][ T27] #1: ffffc900026562e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5ba/0x1a30 [ 249.942347][ T27] 1 lock held by syz-executor/4183: [ 249.948184][ T27] #0: ffff888050f5a0e0 (&type->s_umount_key#76){+.+.}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 249.958637][ T27] 1 lock held by syz-executor/4184: [ 249.972421][ T27] #0: ffff88805c93c0e0 (&type->s_umount_key#76){+.+.}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 249.983381][ T27] 2 locks held by syz-executor/4193: [ 249.988821][ T27] #0: ffff8880204ab918 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xf9/0x7d0 [ 249.999877][ T27] #1: ffff888020463468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 250.009419][ T27] 1 lock held by syz-executor/4194: [ 250.014831][ T27] #0: ffff8880533fa0e0 (&type->s_umount_key#76){+.+.}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 250.025377][ T27] [ 250.027992][ T27] ============================================= [ 250.027992][ T27] [ 250.038432][ T27] NMI backtrace for cpu 1 [ 250.042972][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.189-syzkaller #0 [ 250.051084][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 250.061255][ T27] Call Trace: [ 250.064742][ T27] [ 250.067715][ T27] dump_stack_lvl+0x168/0x230 [ 250.072535][ T27] ? show_regs_print_info+0x20/0x20 [ 250.077820][ T27] ? load_image+0x3b0/0x3b0 [ 250.082553][ T27] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 250.087967][ T27] ? nmi_cpu_backtrace+0x1b6/0x3d0 [ 250.093118][ T27] nmi_cpu_backtrace+0x397/0x3d0 [ 250.098272][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 250.104637][ T27] ? _printk+0xcc/0x110 [ 250.109178][ T27] ? load_image+0x3b0/0x3b0 [ 250.113965][ T27] ? load_image+0x3b0/0x3b0 [ 250.118511][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 250.124624][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 250.130662][ T27] watchdog+0xe0f/0xe50 [ 250.135033][ T27] kthread+0x436/0x520 [ 250.139295][ T27] ? hungtask_pm_notify+0x40/0x40 [ 250.144445][ T27] ? kthread_blkcg+0xd0/0xd0 [ 250.149179][ T27] ret_from_fork+0x1f/0x30 [ 250.153652][ T27] [ 250.157636][ T27] Sending NMI from CPU 1 to CPUs 0: [ 250.163024][ C0] NMI backtrace for cpu 0 [ 250.163036][ C0] CPU: 0 PID: 154 Comm: kworker/u4:2 Not tainted 5.15.189-syzkaller #0 [ 250.163055][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 250.163066][ C0] Workqueue: bat_events batadv_nc_worker [ 250.163090][ C0] RIP: 0010:__lock_acquire+0x597/0x7c60 [ 250.163113][ C0] Code: df af 14 00 0f 84 fe 01 00 00 31 db 48 81 c3 b8 00 00 00 48 89 d8 48 c1 e8 03 0f b6 04 10 84 c0 0f 85 97 61 00 00 44 0f b6 33 <48> 8b 44 24 58 0f b6 04 10 84 c0 0f 85 a6 61 00 00 41 8b 04 24 89 [ 250.163128][ C0] RSP: 0018:ffffc90001ff7820 EFLAGS: 00000046 [ 250.163141][ C0] RAX: 0000000000000000 RBX: ffffffff8f93fff8 RCX: ffffffff815bffcb [ 250.163154][ C0] RDX: dffffc0000000000 RSI: 0000000000000008 RDI: ffffffff8ffb70c0 [ 250.163166][ C0] RBP: ffffc90001ff7a70 R08: dffffc0000000000 R09: fffffbfff1ff6e19 [ 250.163178][ C0] R10: fffffbfff1ff6e19 R11: 1ffffffff1ff6e18 R12: ffff88801d3764a0 [ 250.163191][ C0] R13: ffff88801d375940 R14: 0000000000000002 R15: ffff88801d376480 [ 250.163203][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 250.163217][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 250.163229][ C0] CR2: 00007f1b3e5b5198 CR3: 000000007e15e000 CR4: 00000000003506f0 [ 250.163244][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 250.163254][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 250.163264][ C0] Call Trace: [ 250.163270][ C0] [ 250.163278][ C0] ? mark_lock+0x94/0x320 [ 250.163305][ C0] ? verify_lock_unused+0x140/0x140 [ 250.163323][ C0] ? mark_lock+0x94/0x320 [ 250.163341][ C0] ? __lock_acquire+0x13ad/0x7c60 [ 250.163360][ C0] ? verify_lock_unused+0x140/0x140 [ 250.163384][ C0] lock_acquire+0x197/0x3f0 [ 250.163401][ C0] ? rcu_lock_acquire+0x5/0x30 [ 250.163422][ C0] ? rcu_lock_release+0x5/0x20 [ 250.163440][ C0] ? read_lock_is_recursive+0x10/0x10 [ 250.163458][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 250.163476][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 250.163499][ C0] rcu_lock_acquire+0x2a/0x30 [ 250.163516][ C0] ? rcu_lock_acquire+0x5/0x30 [ 250.163533][ C0] batadv_nc_worker+0xc9/0x5c0 [ 250.163554][ C0] process_one_work+0x863/0x1000 [ 250.163578][ C0] ? worker_detach_from_pool+0x240/0x240 [ 250.163594][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 250.163613][ C0] ? _raw_spin_lock_irq+0xab/0xe0 [ 250.163632][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 250.163651][ C0] ? wq_worker_running+0x97/0x170 [ 250.163674][ C0] worker_thread+0xaa8/0x12a0 [ 250.163702][ C0] kthread+0x436/0x520 [ 250.163716][ C0] ? rcu_lock_release+0x20/0x20 [ 250.163731][ C0] ? kthread_blkcg+0xd0/0xd0 [ 250.163747][ C0] ret_from_fork+0x1f/0x30 [ 250.163770][ C0] [ 250.169726][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 250.448629][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.189-syzkaller #0 [ 250.456994][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 250.467557][ T27] Call Trace: [ 250.470844][ T27] [ 250.473780][ T27] dump_stack_lvl+0x168/0x230 [ 250.478583][ T27] ? show_regs_print_info+0x20/0x20 [ 250.483918][ T27] ? load_image+0x3b0/0x3b0 [ 250.488443][ T27] panic+0x2c9/0x7f0 [ 250.492363][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 250.498481][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 250.503017][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 250.509594][ T27] watchdog+0xe4e/0xe50 [ 250.513894][ T27] kthread+0x436/0x520 [ 250.518151][ T27] ? hungtask_pm_notify+0x40/0x40 [ 250.523193][ T27] ? kthread_blkcg+0xd0/0xd0 [ 250.527799][ T27] ret_from_fork+0x1f/0x30 [ 250.532266][ T27] [ 250.538635][ T27] Kernel Offset: disabled [ 250.543111][ T27] Rebooting in 86400 seconds..