last executing test programs: 2m32.863783152s ago: executing program 0 (id=786): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0x4, 0x4, 0x324, 0xffffffff, 0x0, 0xc8, 0xc8, 0xfeffffff, 0xffffffff, 0x25c, 0x25c, 0x25c, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private2, [], [], 'batadv_slave_0\x00', 'team_slave_1\x00', {}, {}, 0x6, 0x0, 0x1, 0x60}, 0x2f2, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, [], [], 'hsr0\x00', 'veth0_macvtap\x00'}, 0x0, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0xffb3) 2m32.679439427s ago: executing program 0 (id=790): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000240)={&(0x7f0000000200)=[{0xfeff, 0x2000, 0x0, 0x0}, {0x7, 0x2000, 0x3, &(0x7f0000000100)="d092e8"}], 0x2}) 2m32.585874165s ago: executing program 0 (id=791): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xe, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc0}}, 0x0) 2m32.475346433s ago: executing program 0 (id=794): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0909, 0x1001ff, '\x00', @value64=0x40}}) 2m32.26825408s ago: executing program 0 (id=800): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17c, &(0x7f0000000500)="$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") open(&(0x7f0000000400)='./file2\x00', 0x40, 0x82) 2m31.314702247s ago: executing program 0 (id=820): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x48, 0x10, 0x403, 0x0, 0x1000, {0x0, 0x0, 0x0, 0x0, 0x88affda4}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x3}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x48}}, 0x0) 2m16.139371704s ago: executing program 32 (id=820): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x48, 0x10, 0x403, 0x0, 0x1000, {0x0, 0x0, 0x0, 0x0, 0x88affda4}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x3}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x48}}, 0x0) 1.37228573s ago: executing program 3 (id=3720): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="28000000240001000000000000000000100000000c"], 0x28}], 0x1}, 0x0) 1.257594939s ago: executing program 3 (id=3724): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000015c0)=@nat={'nat\x00', 0x8, 0x5, 0x490, 0x0, 0x0, 0xffffffff, 0x1e0, 0xf0, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @port=0x4e22}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@local, @icmp_id, @gre_key=0x1}}}, {{@ipv6={@mcast1, @local, [0xffffff00, 0x0, 0x0, 0x445de9688c2ce293], [], 'wg1\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @ipv4=@broadcast, @gre_key=0x1, @gre_key=0x2}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, [], [0x0, 0x0, 0xff000000], 'lo\x00', 'wlan0\x00', {}, {}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @ipv4=@private=0xa010100, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) 1.170578576s ago: executing program 3 (id=3728): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) 1.11473067s ago: executing program 3 (id=3729): r0 = socket$inet_tcp(0x2, 0x1, 0x0) fremovexattr(r0, &(0x7f0000000100)=@known='system.sockprotoname\x00') 1.11453063s ago: executing program 4 (id=3730): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000780)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x3}, @TCA_SKBEDIT_PTYPE={0x6}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x70}}, 0x0) 1.071333544s ago: executing program 5 (id=3731): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) 993.9966ms ago: executing program 3 (id=3734): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aa1d484e242a03000000f7c08bfcd111fbdf23ea32db0e8f21d5bc2721a0e67b0bc3eb57f2a41c80f8e9d85e07751170", 0x30}, {&(0x7f00000002c0)='Z\v', 0x2}], 0x2) 993.93577ms ago: executing program 4 (id=3735): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000340)={[{@usrquota}, {@nojournal_checksum}]}, 0x21, 0x4b2, &(0x7f0000001500)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 967.376202ms ago: executing program 5 (id=3736): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000040)={0x7b, "6a3f034c8a59b0d319e01842ebf291513c2f7cdbcd9d64f6791ddcb7cc233bbd41c4fe069959a9a33d67eecf385addcb49adefc05944b44ac41a8d6d5ac256b3a87551e07c50498594638b56f4e69f8bb31e7c7783359e5b89df52ae9ed260cc4c0286763310628998a09c978abab28e54cf910291767c13ea1a615db9e3326d"}) 923.363696ms ago: executing program 3 (id=3737): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001e00100000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000fcffffffb702000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x0, 0x4f, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000a6ff0540cdabeecdb9050000000109023d0c020000000009049c00030103510009050a00000000000009050313000000000003270103"], 0x0) 830.131413ms ago: executing program 2 (id=3738): r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='changeprofile ://&'], 0x17) 758.035139ms ago: executing program 5 (id=3739): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000200)={'tunl0\x00', &(0x7f00000002c0)=@ethtool_cmd={0x46, 0x4, 0xfffffffc, 0xfffe, 0x0, 0x4, 0xfc, 0xfa, 0x3, 0x9, 0x7, 0x400, 0xfffe, 0x0, 0x0, 0x40000045, [0x2000]}}) 753.7362ms ago: executing program 1 (id=3740): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000000200)) 716.446843ms ago: executing program 1 (id=3741): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_OP={0x8}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x10c}}, 0x0) 633.810489ms ago: executing program 2 (id=3742): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)=0x17) 633.665769ms ago: executing program 5 (id=3743): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x1f) 633.299599ms ago: executing program 1 (id=3744): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) 510.666719ms ago: executing program 2 (id=3745): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_bond\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x2300, 0x0, 0x0, 0x0, 0x1, 0x2}}) 510.230929ms ago: executing program 4 (id=3746): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095", @ANYRES16], &(0x7f0000000300)='GPL\x00', 0x2, 0x1c5, &(0x7f0000002500)=""/4106, 0x0, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffdf8, 0x10, 0x0, 0x34, 0x0, 0x0, 0xfffffffffffffe65}, 0x4a) 491.812211ms ago: executing program 1 (id=3747): r0 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000000)) 491.045171ms ago: executing program 5 (id=3757): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000100001002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="802100000000000014000300776c616e300000000000000000000000080004000e040000300016802c"], 0x6c}}, 0x0) 324.010954ms ago: executing program 2 (id=3748): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE]}, {0xa}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) 309.066695ms ago: executing program 1 (id=3749): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000000200)=[{r0, 0xa0}], 0x1, 0xb8) 226.020761ms ago: executing program 4 (id=3750): r0 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r0, &(0x7f0000000340)=[{{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000400)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}, {{&(0x7f0000000480)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f00000008c0)="771b7f606a815008", 0x8}], 0x1}}], 0x2, 0x4000) 152.534207ms ago: executing program 2 (id=3751): r0 = openat$damon_attrs(0xffffffffffffff9c, &(0x7f0000005840), 0x8000, 0x1) read(r0, 0x0, 0x1d) 142.669858ms ago: executing program 4 (id=3752): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@newae={0x90, 0x1e, 0x1, 0x0, 0x0, {{@in6=@private0}, @in6=@private2}, [@policy_type={0xa}, @replay_val={0x10}, @user_kmaddress={0x2c, 0x13, {@in=@empty, @in=@dev}}, @etimer_thresh={0xfffffffffffffeec}]}, 0x90}}, 0x0) 94.599752ms ago: executing program 2 (id=3753): syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x2000090, &(0x7f00000002c0), 0x1, 0x1108, &(0x7f0000001440)="$eJzs2L+KE0EcB/DvbKJwVWSuXwJaKMhxR3yBKxTSXGFtF2y0M5WSx/Fx5Cr74x4gxYF9ZLO3Kv5BzkRF+Xxg2Z0fM/PdKecXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6IyT20kOm6QOtSZJSdr2fH6ZpB3qd96NmpQ8fT5fPn41e7Lsp6WrNSndqu24ntytdVZn9aQ+Ojy9V5ev37wcfRFZ0ubiarU4OFvv9Shddpez2ex1WwAAAPjnbXY22fYPvrGe/ijyYL/5AAAAwM/8jp4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwK+qw0eTpCRtez6/TNL+3d8CAAAAdlTS5Nnke/W+DfDZw7yflG198KF0c47ztl//4Obpt26+BAAAAP5TJTl7cX0fv5/xp3t5dxefZpyjo358/cr6NBklOf5qn4ur1WL7TFeL8icPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8ZAeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAUwUAAP//lI7U9w==") quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000004240)=@loop={'/dev/loop', 0x0}, 0xee01, 0x0) 25.235448ms ago: executing program 5 (id=3754): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x17, 0xe2, 0xdd, 0x8, 0x763, 0x2080, 0xd940, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xe4, 0x60}}]}}]}}, 0x0) 679.56µs ago: executing program 4 (id=3755): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000100)=@x={0x94, 0x0, "02000000ffd0"}) 0s ago: executing program 1 (id=3766): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000004e0025000307f4f9002304000aa6c504fd5f080001000201000208000380050000", 0x25) kernel console output (not intermixed with test programs): ue to NTFS errors [ 168.826141][ T4187] ntfs3: loop3: ntfs_sync_fs r=9 failed, -22. [ 168.837902][ T4187] ntfs3: loop3: ntfs_evict_inode r=9 failed, -22. [ 168.839846][ T1323] usb 6-1: Using ep0 maxpacket: 8 [ 168.884557][ T9080] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2148'. [ 168.969914][ T7299] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 168.998676][ T9082] netlink: 'syz.3.2147': attribute type 1 has an invalid length. [ 169.021205][ T1323] usb 6-1: unable to get BOS descriptor or descriptor too short [ 169.036871][ T9069] loop4: detected capacity change from 0 to 32768 [ 169.062805][ T9086] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2150'. [ 169.073828][ T9086] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2150'. [ 169.085888][ T9069] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.2141 (9069) [ 169.120407][ T1323] usb 6-1: config 4 has an invalid interface number: 147 but max is 0 [ 169.129212][ T9086] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2150'. [ 169.143658][ T9069] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 169.157521][ T9086] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2150'. [ 169.159969][ T9069] BTRFS info (device loop4): using free space tree [ 169.184439][ T1323] usb 6-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 169.203112][ T9069] BTRFS info (device loop4): has skinny extents [ 169.218209][ T1323] usb 6-1: config 4 has no interface number 0 [ 169.224630][ T9086] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2150'. [ 169.236882][ T9086] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2150'. [ 169.255063][ T9086] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2150'. [ 169.266410][ T9086] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2150'. [ 169.276126][ T9086] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2150'. [ 169.379994][ T1323] usb 6-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 169.380939][ T7301] usb 2-1: USB disconnect, device number 10 [ 169.409395][ T1323] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.425242][ T1323] usb 6-1: Product: syz [ 169.431400][ T9069] BTRFS info (device loop4): enabling ssd optimizations [ 169.439145][ T1323] usb 6-1: Manufacturer: syz [ 169.454141][ T1323] usb 6-1: SerialNumber: syz [ 169.490141][ T4250] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 169.870238][ T4250] usb 4-1: config 0 has an invalid interface number: 239 but max is 0 [ 169.878557][ T4250] usb 4-1: config 0 has no interface number 0 [ 169.885475][ T1323] usb 6-1: Found UVC 0.02 device syz (04f2:b746) [ 169.900178][ T1323] usb 6-1: No valid video chain found. [ 169.900191][ T7302] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 169.919498][ T4250] usb 4-1: config 0 interface 239 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 169.940023][ T1323] usb 6-1: USB disconnect, device number 3 [ 169.996033][ T4250] usb 4-1: config 0 interface 239 altsetting 0 endpoint 0x82 has invalid maxpacket 511, setting to 64 [ 170.081381][ T9125] xt_hashlimit: size too large, truncated to 1048576 [ 170.101814][ T9125] xt_hashlimit: overflow, try lower: 0/0 [ 170.187054][ T4250] usb 4-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 170.209801][ T7299] usb 2-1: Service connection timeout for: 256 [ 170.212249][ T4250] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.216753][ T7302] usb 3-1: Using ep0 maxpacket: 16 [ 170.238258][ T4250] usb 4-1: Product: syz [ 170.239780][ T7299] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 170.243128][ T4250] usb 4-1: Manufacturer: syz [ 170.257929][ T7299] ath9k_htc: Failed to initialize the device [ 170.262202][ T4250] usb 4-1: SerialNumber: syz [ 170.270076][ T7301] usb 2-1: ath9k_htc: USB layer deinitialized [ 170.296851][ T4250] usb 4-1: config 0 descriptor?? [ 170.340140][ T9090] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 170.347315][ T9090] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 170.397936][ T9134] netlink: 'syz.5.2163': attribute type 24 has an invalid length. [ 170.410292][ T7302] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 170.423508][ T7302] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.476766][ T7302] usb 3-1: config 0 has no interface number 0 [ 170.611327][ T9090] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 170.637020][ T9090] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 170.690165][ T7302] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 170.719729][ T7302] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.763968][ T7302] usb 3-1: Product: syz [ 170.768275][ T7302] usb 3-1: Manufacturer: syz [ 170.783492][ T7302] usb 3-1: SerialNumber: syz [ 170.800443][ T7302] usb 3-1: config 0 descriptor?? [ 170.828326][ T9128] loop1: detected capacity change from 0 to 32768 [ 170.854199][ T9128] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.2161 (9128) [ 170.881922][ T7302] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 170.888331][ T7302] usb 3-1: No valid video chain found. [ 170.894883][ T9150] x_tables: unsorted entry at hook 3 [ 170.899149][ T9152] loop4: detected capacity change from 0 to 256 [ 170.907992][ T4250] asix 4-1:0.239 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 170.938461][ T4250] asix: probe of 4-1:0.239 failed with error -71 [ 170.962663][ T4250] usb 4-1: USB disconnect, device number 11 [ 171.028676][ T9128] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 171.069368][ T9128] BTRFS info (device loop1): using free space tree [ 171.107963][ T9128] BTRFS info (device loop1): has skinny extents [ 171.251990][ T4250] usb 3-1: USB disconnect, device number 16 [ 171.393870][ T9128] BTRFS info (device loop1): enabling ssd optimizations [ 171.432417][ T4291] BTRFS warning (device loop1): checksum verify failed on 5308416 wanted 0x1b6f3341d22ee11591937a8410afa2a1fdb62fc15d9a9403e72868eb886a3209 found 0x54bb8c73ccf867fc125156c01418a7379495c0932faa6a0f6ecf4465ca9cd092 level 0 [ 171.740002][ T9199]  (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 172.052309][ T9217] openvswitch: netlink: Missing key (keys=40, expected=80) [ 172.546294][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 172.567735][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 172.577240][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 172.587063][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 172.596479][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 172.605644][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 172.615288][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 172.624771][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 172.634551][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 172.761883][ T9249] loop4: detected capacity change from 0 to 16 [ 172.981451][ T9255] loop2: detected capacity change from 0 to 4096 [ 173.028974][ T9249] erofs: (device loop4): mounted with root inode @ nid 36. [ 173.058494][ T9249] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 173.129220][ T9249] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -57 in[61, 4035] out[1851] [ 173.165516][ T9249] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 173.260027][ T9255] ntfs: volume version 3.1. [ 173.436724][ T9275] loop1: detected capacity change from 0 to 512 [ 173.551973][ T9273] loop5: detected capacity change from 0 to 4096 [ 173.612765][ T9289] overlayfs: missing 'lowerdir' [ 173.637091][ T9275] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 173.675018][ T9273] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 173.695298][ T9275] ext4 filesystem being mounted at /467/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.899297][ T9273] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 173.954943][ T9273] ntfs3: loop5: Failed to load $Extend. [ 174.039501][ T9303] netlink: 'syz.1.2233': attribute type 1 has an invalid length. [ 174.382496][ T9322] netlink: 'syz.5.2244': attribute type 11 has an invalid length. [ 174.521077][ T5883] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 174.712306][ T9342] usb usb8: usbfs: process 9342 (syz.5.2256) did not claim interface 0 before use [ 174.789805][ T5883] usb 3-1: Using ep0 maxpacket: 16 [ 174.910116][ T5883] usb 3-1: config 0 has no interfaces? [ 175.070024][ T5883] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 175.109421][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.140568][ T9365] loop1: detected capacity change from 0 to 256 [ 175.148467][ T5883] usb 3-1: Product: syz [ 175.159801][ T5883] usb 3-1: Manufacturer: syz [ 175.170622][ T9367] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 175.178740][ T5883] usb 3-1: SerialNumber: syz [ 175.201340][ T5883] r8152-cfgselector 3-1: config 0 descriptor?? [ 175.284667][ T9365] FAT-fs (loop1): Directory bread(block 64) failed [ 175.321173][ T9365] FAT-fs (loop1): Directory bread(block 65) failed [ 175.327949][ T9365] FAT-fs (loop1): Directory bread(block 66) failed [ 175.334633][ T9374] __nla_validate_parse: 13 callbacks suppressed [ 175.334653][ T9374] netlink: 212912 bytes leftover after parsing attributes in process `syz.5.2272'. [ 175.386404][ T9365] FAT-fs (loop1): Directory bread(block 67) failed [ 175.443336][ T9365] FAT-fs (loop1): Directory bread(block 68) failed [ 175.480937][ T5883] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 175.517349][ T9365] FAT-fs (loop1): Directory bread(block 69) failed [ 175.556303][ T9365] FAT-fs (loop1): Directory bread(block 70) failed [ 175.567575][ T9365] FAT-fs (loop1): Directory bread(block 71) failed [ 175.574913][ T5883] Bluetooth: hci2: command 0x0406 tx timeout [ 175.579835][ T7301] Bluetooth: hci1: command 0x0406 tx timeout [ 175.590970][ T5883] Bluetooth: hci0: command 0x0406 tx timeout [ 175.600113][ T7301] Bluetooth: hci4: command 0x0406 tx timeout [ 175.600285][ T5883] Bluetooth: hci3: command 0x0406 tx timeout [ 175.626967][ T9365] FAT-fs (loop1): Directory bread(block 72) failed [ 175.633706][ T9382] netlink: 'syz.5.2276': attribute type 3 has an invalid length. [ 175.634876][ T9365] FAT-fs (loop1): Directory bread(block 73) failed [ 175.658392][ T9382] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2276'. [ 175.688308][ T7301] usb 3-1: USB disconnect, device number 17 [ 176.170205][ T9396] loop1: detected capacity change from 0 to 64 [ 176.378284][ T9400] loop1: detected capacity change from 0 to 512 [ 176.456102][ T9358] loop3: detected capacity change from 0 to 32768 [ 176.483692][ T9400] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 176.530756][ T9386] loop5: detected capacity change from 0 to 32768 [ 176.537956][ T9400] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 176.563028][ T9400] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.2285: bad orphan inode 13 [ 176.568204][ T9358] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 176.587544][ T9400] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="data_err=ignore,noload,data_err=ignore,grpjquota="errors=continue,max_dir_size_kb=0x00000000000001ff,nobarrier,,errors=continue. Quota mode: writeback. [ 176.672499][ T9386] ERROR: (device loop5): dbAllocNext: Corrupt dmap page [ 176.672499][ T9386] [ 176.716713][ T9358] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 176.981908][ T9412] loop1: detected capacity change from 0 to 256 [ 177.043359][ T9412] MINIX-fs: mounting file system with errors, running fsck is recommended [ 177.087168][ T9392] loop4: detected capacity change from 0 to 32768 [ 177.155096][ T9358] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 177.185498][ T5218] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 177.209863][ T5218] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 177.251140][ T9414] loop2: detected capacity change from 0 to 4096 [ 177.303835][ T9414] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 177.351974][ T9414] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 177.382076][ T5218] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 172ms [ 177.443139][ T5218] gfs2: fsid=syz:syz.0: jid=0: Done [ 177.458224][ T9358] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 177.470602][ T9414] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 177.495434][ T9414] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 177.509797][ T9414] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 177.526312][ T9416] loop1: detected capacity change from 0 to 4096 [ 177.545799][ T9414] ntfs: volume version 3.1. [ 177.589095][ T9416] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 177.641911][ T9414] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 177.710632][ T9416] ntfs: (device loop1): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 177.728711][ T9414] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 177.781847][ T9416] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 177.887407][ T9416] ntfs: volume version 3.1. [ 178.379298][ T9432] loop2: detected capacity change from 0 to 4096 [ 178.478050][ T9446] netlink: 'syz.4.2306': attribute type 21 has an invalid length. [ 178.506129][ T9446] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2306'. [ 178.560173][ T9432] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 178.685496][ T9432] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 178.793214][ T9457] net_ratelimit: 993 callbacks suppressed [ 178.793232][ T9457] openvswitch: netlink: Actions may not be safe on all matching packets [ 179.042487][ T9464] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2316'. [ 179.177884][ T9472] loop3: detected capacity change from 0 to 64 [ 179.232451][ T9476] deleting an unspecified loop device is not supported. [ 179.502384][ T9493] loop3: detected capacity change from 0 to 128 [ 179.624653][ T9493] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 179.689108][ T9493] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 179.736772][ T9508] netlink: 'syz.4.2336': attribute type 8 has an invalid length. [ 179.760832][ T9510] fuse: Invalid rootmode [ 179.767905][ T9493] EXT4-fs error (device loop3): __ext4_find_entry:1696: inode #2: comm syz.3.2328: checksumming directory block 0 [ 179.791211][ T9508] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 179.878515][ T9512] netlink: 'syz.5.2338': attribute type 10 has an invalid length. [ 179.932800][ T9512] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.942036][ T9512] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.007226][ T9512] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.014870][ T9512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.024623][ T9512] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.032128][ T9512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.161374][ T9512] team0: Port device bridge0 added [ 180.279941][ T7301] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 180.366334][ T9533] Sensor A: ================= START STATUS ================= [ 180.387020][ T9534] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 180.389950][ T9533] Sensor A: Test Pattern: 75% Colorbar [ 180.446585][ T9533] Sensor A: Show Information: All [ 180.482004][ T9533] Sensor A: Vertical Flip: false [ 180.511544][ T9533] Sensor A: Horizontal Flip: false [ 180.544122][ T9533] Sensor A: Brightness: 128 [ 180.548856][ T9533] Sensor A: Contrast: 128 [ 180.560672][ T9533] Sensor A: Hue: 0 [ 180.570533][ T9533] Sensor A: Saturation: 128 [ 180.583687][ T9533] Sensor A: ================== END STATUS ================== [ 180.599897][ T7301] usb 4-1: Using ep0 maxpacket: 32 [ 180.647772][ T9544] loop1: detected capacity change from 0 to 512 [ 180.696807][ T9546] loop4: detected capacity change from 0 to 2048 [ 180.731357][ T7301] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.758916][ T7301] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.775753][ T7301] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 180.789468][ T9554] loop5: detected capacity change from 0 to 256 [ 180.790448][ T9544] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2354: invalid indirect mapped block 10 (level 1) [ 180.819955][ T7301] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.832313][ T9546] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 180.835316][ T9544] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2354: invalid indirect mapped block 8 (level 1) [ 180.859029][ T9544] EXT4-fs (loop1): 1 truncate cleaned up [ 180.877983][ T7301] hub 4-1:4.0: USB hub found [ 180.890287][ T9554] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 180.904128][ T9544] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 180.916342][ T9546] UDF-fs: unknown compression code (0) [ 180.961367][ T9556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2358'. [ 180.987258][ T5218] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 181.003779][ T9544] EXT4-fs error (device loop1): ext4_lookup:1858: inode #12: comm syz.1.2354: unexpected EA_INODE flag [ 181.057687][ T9554] exFAT-fs (loop5): error, invalid access to FAT free cluster (entry 0x00000008) [ 181.100526][ T7301] hub 4-1:4.0: 16 ports detected [ 181.106845][ T7301] usb 4-1: selecting invalid altsetting 1 [ 181.125917][ T7301] hub 4-1:4.0: Using single TT (err -22) [ 181.138262][ T9558] loop4: detected capacity change from 0 to 512 [ 181.146265][ T9554] exFAT-fs (loop5): Filesystem has been set read-only [ 181.161067][ T7301] hub 4-1:4.0: insufficient power available to use all downstream ports [ 181.195039][ T9558] EXT4-fs (loop4): inline encryption not supported [ 181.216971][ T9558] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 181.245248][ T9558] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e12c, mo2=0002] [ 181.261549][ T9558] System zones: 1-12 [ 181.269733][ T5218] usb 3-1: Using ep0 maxpacket: 16 [ 181.272287][ T9558] EXT4-fs (loop4): orphan cleanup on readonly fs [ 181.302656][ T9558] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.2359: invalid indirect mapped block 12 (level 1) [ 181.324838][ T7301] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 181.328207][ T9558] EXT4-fs (loop4): Remounting filesystem read-only [ 181.340583][ T9558] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.2359: invalid indirect mapped block 2 (level 2) [ 181.356480][ T9563] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2362'. [ 181.358794][ T7301] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 181.366115][ T9558] EXT4-fs (loop4): Remounting filesystem read-only [ 181.384581][ T9563] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2362'. [ 181.395202][ T9558] EXT4-fs (loop4): 1 truncate cleaned up [ 181.401216][ T9558] EXT4-fs (loop4): mounted filesystem without journal. Opts: noinit_itable,inlinecrypt,noload,errors=remount-ro,data_err=ignore. Quota mode: none. [ 181.405017][ T9563] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2362'. [ 181.428344][ T5218] usb 3-1: config 0 has an invalid interface number: 237 but max is 0 [ 181.458263][ T5218] usb 3-1: config 0 has no interface number 0 [ 181.463209][ T9563] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 181.485526][ T5218] usb 3-1: config 0 interface 237 has no altsetting 0 [ 181.514274][ T7301] usb 4-1: USB disconnect, device number 12 [ 181.707134][ T5218] usb 3-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 181.739102][ T5218] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.739183][ T9575] netlink: 'syz.5.2368': attribute type 2 has an invalid length. [ 181.768352][ T5218] usb 3-1: Product: syz [ 181.773244][ T9575] netlink: 'syz.5.2368': attribute type 1 has an invalid length. [ 181.782093][ T5218] usb 3-1: Manufacturer: syz [ 181.805787][ T5218] usb 3-1: SerialNumber: syz [ 181.832749][ T5218] usb 3-1: config 0 descriptor?? [ 181.904115][ T5218] snd_usb_podhd 3-1:0.237: Line 6 POD HD300 found [ 181.966896][ T9587] ip6t_srh: unknown srh match flags 5294 [ 182.110923][ T5218] snd_usb_podhd 3-1:0.237: cannot get proper max packet size [ 182.119157][ T5218] snd_usb_podhd 3-1:0.237: Line 6 POD HD300 now disconnected [ 182.150978][ T5218] snd_usb_podhd: probe of 3-1:0.237 failed with error -22 [ 182.198834][ T9599] netlink: 'syz.1.2378': attribute type 15 has an invalid length. [ 182.248675][ T9604] netlink: 'syz.4.2381': attribute type 10 has an invalid length. [ 182.296743][ T9604] team0: Port device virt_wifi0 added [ 182.333045][ T7299] usb 3-1: USB disconnect, device number 18 [ 182.518225][ T9621] netlink: 'syz.5.2391': attribute type 5 has an invalid length. [ 182.633658][ T9631] loop5: detected capacity change from 0 to 164 [ 182.672811][ T9631] Unable to read rock-ridge attributes [ 182.750489][ T9626] loop4: detected capacity change from 0 to 4096 [ 182.865119][ T9626] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 182.951788][ T9626] ntfs3: loop4: failed to convert "c46c" to cp857 [ 183.184803][ T9655] loop1: detected capacity change from 0 to 4096 [ 183.197940][ T9663] netlink: 'syz.5.2412': attribute type 1 has an invalid length. [ 183.213420][ T9666] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2413'. [ 183.235245][ T9663] netlink: 244 bytes leftover after parsing attributes in process `syz.5.2412'. [ 183.248659][ T9666] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2413'. [ 183.261096][ T9655] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 183.306146][ T9666] device bridge1 entered promiscuous mode [ 183.816757][ T9700] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2426'. [ 183.967852][ T9708] loop2: detected capacity change from 0 to 1024 [ 184.026516][ T9714] netlink: 'syz.5.2433': attribute type 10 has an invalid length. [ 184.026958][ T9715] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2434'. [ 184.070018][ T9708] EXT4-fs (loop2): Ignoring removed nobh option [ 184.100349][ T9715] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2434'. [ 184.113779][ T9714] device veth0_macvtap left promiscuous mode [ 184.132611][ T9708] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #11: comm syz.2.2430: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 184.164085][ T9708] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.2430: couldn't read orphan inode 11 (err -117) [ 184.222209][ T9708] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 184.249150][ T9714] batman_adv: batadv0: Adding interface: macvtap0 [ 184.289968][ T9714] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.519414][ T9714] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 184.743865][ T9745] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 184.872129][ T9750] loop1: detected capacity change from 0 to 256 [ 185.006783][ T9750] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 185.127410][ T9766] loop2: detected capacity change from 0 to 256 [ 185.242493][ T9766] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 185.316202][ T9766] attempt to access beyond end of device [ 185.316202][ T9766] loop2: rw=0, want=34359738489, limit=256 [ 185.525522][ T9788] netlink: 'syz.5.2471': attribute type 5 has an invalid length. [ 185.555393][ T9796] loop4: detected capacity change from 0 to 512 [ 185.656633][ T9796] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e028, mo2=0002] [ 185.674007][ T9796] System zones: 1-12 [ 185.686412][ T9796] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.2474: invalid indirect mapped block 8 (level 2) [ 185.730936][ T9796] EXT4-fs (loop4): Remounting filesystem read-only [ 185.738027][ T9796] EXT4-fs (loop4): 1 truncate cleaned up [ 185.760881][ T9796] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_dev=0x0000000000000008,data_err=ignore,noinit_itable,sysvgroups,errors=remount-ro,. Quota mode: none. [ 185.887580][ T9815] loop3: detected capacity change from 0 to 256 [ 185.960609][ T9815] exfat: Deprecated parameter 'utf8' [ 186.034563][ T9824] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2487'. [ 186.057792][ T9815] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 186.079747][ T5218] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 186.329938][ T5218] usb 2-1: Using ep0 maxpacket: 8 [ 186.470299][ T5218] usb 2-1: too many endpoints for config 0 interface 0 altsetting 3: 64, using maximum allowed: 30 [ 186.504493][ T9843] loop4: detected capacity change from 0 to 16 [ 186.510370][ T5218] usb 2-1: config 0 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 64 [ 186.567242][ T5218] usb 2-1: config 0 interface 0 has no altsetting 0 [ 186.600320][ T9843] erofs: (device loop4): mounted with root inode @ nid 36. [ 186.756927][ T5218] usb 2-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=1b.62 [ 186.794605][ T5218] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.822476][ T5218] usb 2-1: Product: syz [ 186.836363][ T9859] netlink: 6 bytes leftover after parsing attributes in process `syz.5.2502'. [ 186.860278][ T5218] usb 2-1: Manufacturer: syz [ 186.865194][ T5218] usb 2-1: SerialNumber: syz [ 186.890107][ T9859] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 186.911964][ T5218] usb 2-1: config 0 descriptor?? [ 186.953092][ T9859] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 187.099975][ T7301] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 187.242526][ T5218] comedi comedi4: could not set alternate setting 3 in high speed [ 187.292870][ T5218] usbdux 2-1:0.0: driver 'usbdux' failed to auto-configure device. [ 187.323599][ T9883] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 187.339275][ T5218] usbdux: probe of 2-1:0.0 failed with error -71 [ 187.397297][ T5218] usb 2-1: USB disconnect, device number 11 [ 187.493269][ T9892] netlink: 420 bytes leftover after parsing attributes in process `syz.4.2518'. [ 187.519824][ T9894] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2519'. [ 187.557010][ T9894] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2519'. [ 187.617251][ T9896] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2520'. [ 187.709963][ T7301] usb 3-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 187.719558][ T7301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.772071][ T9902] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 187.781003][ T7301] usb 3-1: Product: syz [ 187.798507][ T9902] [U] J"—e:ÀÆ" [ 187.809720][ T7301] usb 3-1: Manufacturer: syz [ 187.814661][ T7301] usb 3-1: SerialNumber: syz [ 187.870232][ T7301] usb 3-1: config 0 descriptor?? [ 187.921990][ T7301] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 187.943784][ T9908] loop1: detected capacity change from 0 to 16 [ 187.969113][ T9908] erofs: (device loop1): mounted with root inode @ nid 36. [ 188.288559][ T9890] loop3: detected capacity change from 0 to 32768 [ 188.349978][ T9890] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 188.352496][ T1323] usb 3-1: USB disconnect, device number 19 [ 188.381389][ T9890] BTRFS info (device loop3): force zlib compression, level 3 [ 188.398857][ T9890] BTRFS info (device loop3): force clearing of disk cache [ 188.438678][ T9890] BTRFS info (device loop3): setting nodatasum [ 188.499884][ T9890] BTRFS info (device loop3): doing ref verification [ 188.517288][ T9890] BTRFS info (device loop3): allowing degraded mounts [ 188.543685][ T9890] BTRFS info (device loop3): using free space tree [ 188.576804][ T9890] BTRFS info (device loop3): has skinny extents [ 188.700931][ T9903] loop5: detected capacity change from 0 to 32768 [ 188.791699][ T9918] loop4: detected capacity change from 0 to 32768 [ 188.817877][ T9890] BTRFS info (device loop3): enabling ssd optimizations [ 188.832330][ T9903] XFS (loop5): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 188.894610][ T9890] BTRFS info (device loop3): clearing free space tree [ 188.902180][ T9890] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 188.913461][ T9890] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 188.978846][ T9890] BTRFS info (device loop3): creating free space tree [ 188.992976][ T9890] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 189.037491][ T9918] JBD2: Ignoring recovery information on journal [ 189.048830][ T9890] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 189.161117][ T6772] XFS (loop5): Unmounting Filesystem [ 189.241420][ T9963] ip6t_rpfilter: unknown options [ 189.255954][ T9918] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 189.432118][ T4191] ocfs2: Unmounting device (7,4) on (node local) [ 190.410528][ T9993] loop1: detected capacity change from 0 to 4096 [ 190.547486][ T9993] __ntfs_error: 15 callbacks suppressed [ 190.547505][ T9993] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 190.574856][T10007] loop4: detected capacity change from 0 to 256 [ 190.589965][ T9993] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 190.620306][T10007] exfat: Deprecated parameter 'namecase' [ 190.626351][T10007] exfat: Deprecated parameter 'utf8' [ 190.660333][ T9993] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 190.693644][ T9993] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 190.758180][ T9993] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 190.789787][T10007] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 190.845275][ T9993] ntfs: volume version 3.1. [ 190.875789][T10011] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 190.886706][ T9993] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 190.930692][ T9993] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 191.031676][ T9993] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 191.084339][ T9993] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 191.137121][ T9993] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 191.191141][ T9989] loop2: detected capacity change from 0 to 32768 [ 191.274503][ T9989] [ 191.274503][ T9989] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 191.274503][ T9989] [ 191.449867][ T4189] [ 191.449867][ T4189] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 191.449867][ T4189] [ 191.557945][ T4189] [ 191.557945][ T4189] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 191.557945][ T4189] [ 191.621946][ T9999] loop3: detected capacity change from 0 to 40427 [ 191.720002][ T9999] F2FS-fs (loop3): invalid crc value [ 191.780854][T10043] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 191.828708][ T9999] F2FS-fs (loop3): Found nat_bits in checkpoint [ 191.867354][T10046] loop5: detected capacity change from 0 to 64 [ 192.024741][T10052] loop2: detected capacity change from 0 to 256 [ 192.139092][ T9999] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 192.193753][T10059] loop4: detected capacity change from 0 to 512 [ 192.204003][T10052] FAT-fs (loop2): Directory bread(block 64) failed [ 192.217816][T10063] netlink: 'syz.5.2584': attribute type 10 has an invalid length. [ 192.229179][T10052] FAT-fs (loop2): Directory bread(block 65) failed [ 192.259951][T10052] FAT-fs (loop2): Directory bread(block 66) failed [ 192.267047][T10052] FAT-fs (loop2): Directory bread(block 67) failed [ 192.284425][T10059] EXT4-fs (loop4): Ignoring removed bh option [ 192.310237][T10052] FAT-fs (loop2): Directory bread(block 68) failed [ 192.352523][T10067] loop1: detected capacity change from 0 to 16 [ 192.359741][T10052] FAT-fs (loop2): Directory bread(block 69) failed [ 192.388368][T10052] FAT-fs (loop2): Directory bread(block 70) failed [ 192.396091][T10059] EXT4-fs (loop4): mounted filesystem without journal. Opts: noquota,barrier=0x0000000000000001,bh,noauto_da_alloc,noblock_validity,,errors=continue. Quota mode: writeback. [ 192.408379][T10052] FAT-fs (loop2): Directory bread(block 71) failed [ 192.423739][T10052] FAT-fs (loop2): Directory bread(block 72) failed [ 192.431883][T10052] FAT-fs (loop2): Directory bread(block 73) failed [ 192.457022][T10067] cramfs: Error -3 while decompressing! [ 192.469709][T10067] cramfs: ffffffff961ea028(27)->ffff88807eefa000(4096) [ 192.476816][T10067] cramfs: Error -3 while decompressing! [ 192.489778][T10067] cramfs: ffffffff961ea043(16)->ffff88807eefb000(4096) [ 192.497612][T10067] cramfs: Error -3 while decompressing! [ 192.503843][T10067] cramfs: ffffffff961ea028(27)->ffff88807eefa000(4096) [ 192.540167][T10059] ext4 filesystem being mounted at /574/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.674730][T10078] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2593'. [ 192.702389][T10059] EXT4-fs error (device loop4): ext4_acquire_dquot:6207: comm syz.4.2586: Failed to acquire dquot type 1 [ 192.794957][T10078] netlink: 31 bytes leftover after parsing attributes in process `syz.1.2593'. [ 192.824021][T10078] netlink: 'syz.1.2593': attribute type 3 has an invalid length. [ 192.853544][T10070] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 192.866301][T10078] netlink: 'syz.1.2593': attribute type 2 has an invalid length. [ 192.885238][T10078] netlink: 31 bytes leftover after parsing attributes in process `syz.1.2593'. [ 193.099890][ T4229] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 193.134049][T10096] overlayfs: unrecognized mount option "\" or missing value [ 193.315472][T10106] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 193.379946][ T4229] usb 3-1: Using ep0 maxpacket: 16 [ 193.520139][ T4229] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 193.730001][ T4229] usb 3-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 193.739520][ T4229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.802483][ T4229] usb 3-1: Product: syz [ 193.806779][ T4229] usb 3-1: Manufacturer: syz [ 193.837523][ T4229] usb 3-1: SerialNumber: syz [ 193.859369][ T4229] usb 3-1: config 0 descriptor?? [ 193.922341][ T4229] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 193.973537][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.125175][ T7298] usb 3-1: USB disconnect, device number 20 [ 194.250007][ T3577] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 194.389303][T10122] loop5: detected capacity change from 0 to 32768 [ 194.499551][T10122] ERROR: (device loop5): diAllocAG: ipimap->i_size is wrong [ 194.499551][T10122] [ 194.519953][ T3577] usb 4-1: Using ep0 maxpacket: 8 [ 194.539099][T10122] ERROR: (device loop5): remounting filesystem as read-only [ 194.571317][T10122] ialloc: diAlloc returned -5! [ 194.719078][T10175] vcan0 speed is unknown, defaulting to 1000 [ 194.751369][T10175] vcan0 speed is unknown, defaulting to 1000 [ 194.780717][T10175] vcan0 speed is unknown, defaulting to 1000 [ 194.840136][ T3577] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 194.854721][ T3577] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.902093][ T3577] usb 4-1: Product: syz [ 194.913362][ T3577] usb 4-1: Manufacturer: syz [ 194.927254][ T3577] usb 4-1: SerialNumber: syz [ 194.955092][ T3577] usb 4-1: config 0 descriptor?? [ 195.030603][ T3577] gspca_main: sq930x-2.14.0 probing 2770:930c [ 195.252116][ T1323] vcan0 speed is unknown, defaulting to 1000 [ 195.252081][T10175] infiniband syz1: set active [ 195.275304][T10175] infiniband syz1: added vcan0 [ 195.409825][ T7298] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 195.431552][T10175] RDS/IB: syz1: added [ 195.435842][T10175] smc: adding ib device syz1 with port count 1 [ 195.468087][T10175] smc: ib device syz1 port 1 has pnetid [ 195.479877][ T3577] gspca_sq930x: ucbus_write failed -71 [ 195.485977][ T3577] sq930x: probe of 4-1:0.0 failed with error -71 [ 195.503489][ T3577] usb 4-1: USB disconnect, device number 13 [ 195.507249][T10175] vcan0 speed is unknown, defaulting to 1000 [ 195.537205][ T5883] vcan0 speed is unknown, defaulting to 1000 [ 195.686319][T10219] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2662'. [ 195.692157][T10175] vcan0 speed is unknown, defaulting to 1000 [ 195.781692][ T7298] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 195.799492][T10175] vcan0 speed is unknown, defaulting to 1000 [ 195.805847][ T7298] usb 2-1: config 0 has no interface number 0 [ 195.812644][ T7298] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 195.839745][ T7298] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 195.851642][ T7298] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 195.879722][ T7298] usb 2-1: config 0 interface 69 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 195.921008][T10175] vcan0 speed is unknown, defaulting to 1000 [ 196.015706][T10175] vcan0 speed is unknown, defaulting to 1000 [ 196.082754][ T7298] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 196.104053][ T7298] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.138136][ T7298] usb 2-1: Product: syz [ 196.154345][ T7298] usb 2-1: Manufacturer: syz [ 196.177716][ T7298] usb 2-1: SerialNumber: syz [ 196.190222][ T7298] usb 2-1: config 0 descriptor?? [ 196.223571][T10195] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 196.235720][T10195] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 196.302825][ T7298] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 196.304207][T10233] netlink: 'syz.3.2669': attribute type 1 has an invalid length. [ 196.350897][ T7298] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 196.375159][T10175] vcan0 speed is unknown, defaulting to 1000 [ 196.457186][T10233] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2669'. [ 196.509131][ T7298] usb 2-1: USB disconnect, device number 12 [ 196.541942][ T7298] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 196.605684][ T7298] cyberjack 2-1:0.69: device disconnected [ 197.044783][T10265] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 197.144530][T10271] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2687'. [ 197.307030][T10277] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 197.342999][T10277] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 197.416175][T10282] loop5: detected capacity change from 0 to 1024 [ 197.486180][T10289] loop4: detected capacity change from 0 to 512 [ 197.488675][T10290] netlink: 212912 bytes leftover after parsing attributes in process `syz.3.2695'. [ 197.488703][T10290] openvswitch: netlink: IP tunnel dst address not specified [ 197.590068][T10282] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 197.669375][T10289] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 197.690142][T10289] ext4 filesystem being mounted at /615/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.760276][T10306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2701'. [ 197.958778][T10318] loop1: detected capacity change from 0 to 256 [ 198.014648][T10320] netlink: 212912 bytes leftover after parsing attributes in process `syz.4.2709'. [ 198.106423][T10320] openvswitch: netlink: IP tunnel dst address not specified [ 198.135316][T10311] loop3: detected capacity change from 0 to 8192 [ 198.243365][T10331] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 198.278522][T10311] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 198.364417][T10333] loop2: detected capacity change from 0 to 1024 [ 198.405081][T10311] REISERFS (device loop3): using ordered data mode [ 198.429807][T10311] reiserfs: using flush barriers [ 198.447936][T10311] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 198.513904][T10340] netlink: 830 bytes leftover after parsing attributes in process `syz.5.2720'. [ 198.562620][T10311] REISERFS (device loop3): checking transaction log (loop3) [ 198.630081][T10311] REISERFS (device loop3): Using r5 hash to sort names [ 198.922824][T10359] loop4: detected capacity change from 0 to 256 [ 199.040432][T10359] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 199.062099][T10365] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2731'. [ 199.079780][ T4250] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 199.091401][T10365] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 199.134903][T10359] exFAT-fs (loop4): error, invalid access to FAT free cluster (entry 0x00000008) [ 199.171133][T10369] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2733'. [ 199.200391][T10359] exFAT-fs (loop4): Filesystem has been set read-only [ 199.220016][T10369] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2733'. [ 199.250266][T10359] exFAT-fs (loop4): error, failed to bmap (inode : ffff88805e213be0 iblock : 8, err : -5) [ 199.331986][T10359] exFAT-fs (loop4): error, invalid access to FAT free cluster (entry 0x00000008) [ 199.387316][T10359] exFAT-fs (loop4): error, invalid access to FAT free cluster (entry 0x00000008) [ 199.439982][ T4250] usb 3-1: descriptor type invalid, skip [ 199.519997][ T4250] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.549766][ T4250] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 199.730726][ T4250] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 199.752292][ T4250] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.786641][T10385] loop3: detected capacity change from 0 to 4096 [ 199.791898][ T4250] usb 3-1: Product: syz [ 199.797492][ T4250] usb 3-1: Manufacturer: syz [ 199.830320][ T4250] usb 3-1: SerialNumber: syz [ 199.865082][ T4250] usb 3-1: config 0 descriptor?? [ 200.124347][ T3577] usb 3-1: USB disconnect, device number 21 [ 200.346823][T10418] tmpfs: Bad value for 'mpol' [ 200.353599][T10416] netlink: 'syz.4.2754': attribute type 2 has an invalid length. [ 200.379856][T10416] netlink: 'syz.4.2754': attribute type 1 has an invalid length. [ 200.387630][T10416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2754'. [ 200.766751][T10394] loop5: detected capacity change from 0 to 32768 [ 200.840003][T10439] loop4: detected capacity change from 0 to 65 [ 200.906440][T10394] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.2745 (10394) [ 200.931712][T10439] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway [ 200.986456][T10437] loop3: detected capacity change from 0 to 4096 [ 201.055112][T10394] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 201.083891][T10437] __ntfs_error: 9 callbacks suppressed [ 201.083911][T10437] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 201.102922][T10394] BTRFS info (device loop5): using free space tree [ 201.102948][T10394] BTRFS info (device loop5): has skinny extents [ 201.131200][T10437] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 201.163871][T10437] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 201.178354][T10437] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 201.216873][T10437] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 201.219768][ T4250] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 201.241524][T10437] ntfs: volume version 0.0. [ 201.246353][T10437] ntfs: (device loop3): load_system_files(): Disabling sparse support due to NTFS volume version 0.0 (need at least version 3.0). [ 201.305563][T10452] netlink: 'syz.1.2780': attribute type 1 has an invalid length. [ 201.398617][T10437] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 201.435725][T10437] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 201.497425][T10437] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 201.573162][T10394] BTRFS info (device loop5): enabling ssd optimizations [ 201.581780][T10437] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 201.659311][T10476] x_tables: duplicate underflow at hook 2 [ 201.779931][ T4250] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 201.838374][ T4250] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.849731][T10479] loop4: detected capacity change from 0 to 4096 [ 201.857505][ T4250] usb 3-1: Product: syz [ 201.875084][ T4250] usb 3-1: Manufacturer: syz [ 201.899805][ T4250] usb 3-1: SerialNumber: syz [ 201.938046][ T4403] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop5 scanned by udevd (4403) [ 201.960878][ T4250] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 201.983895][T10479] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 202.080542][T10483] loop3: detected capacity change from 0 to 4096 [ 202.264191][T10489] loop1: detected capacity change from 0 to 2048 [ 202.345896][T10483] ntfs: volume version 3.1. [ 202.393342][T10489] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 202.432456][T10494] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 202.590067][ T4250] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 202.695874][T10501] netlink: 'syz.1.2786': attribute type 4 has an invalid length. [ 202.746774][T10501] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2786'. [ 202.750591][T10503] openvswitch: netlink: Missing key (keys=40, expected=80) [ 202.796838][T10505] loop3: detected capacity change from 0 to 512 [ 202.896849][T10505] EXT4-fs (loop3): Ignoring removed orlov option [ 202.944144][T10505] EXT4-fs (loop3): orphan cleanup on readonly fs [ 202.975198][T10505] EXT4-fs warning (device loop3): ext4_enable_quotas:6459: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 203.069784][T10505] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 203.111434][ T5462] usb 3-1: USB disconnect, device number 22 [ 203.120639][T10505] EXT4-fs (loop3): 1 truncate cleaned up [ 203.163637][T10505] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,nodiscard,dax=inode,grpjquota=,grpjquota=,orlov,abort,nombcache,stripe=0x0000000000000010,,errors=continue. Quota mode: writeback. [ 203.270771][T10520] comedi comedi3: rti802: I/O port conflict (0x24f27,4) [ 203.280633][T10505] EXT4-fs (loop3): Ignoring removed orlov option [ 203.329391][T10505] EXT4-fs warning (device loop3): ext4_enable_quotas:6459: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 203.367825][T10525] binder: BC_ATTEMPT_ACQUIRE not supported [ 203.405777][T10525] binder: 10524:10525 ioctl c0306201 200000000340 returned -22 [ 203.546686][T10536] loop3: detected capacity change from 0 to 512 [ 203.598117][T10536] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 203.667904][T10536] EXT4-fs (loop3): orphan cleanup on readonly fs [ 203.702692][T10536] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 203.790662][T10536] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.2801: attempt to clear invalid blocks 2 len 1 [ 203.856413][T10536] EXT4-fs (loop3): Remounting filesystem read-only [ 203.867086][T10536] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 203.941362][T10536] EXT4-fs (loop3): Remounting filesystem read-only [ 203.948326][T10536] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.2801: invalid indirect mapped block 1819239214 (level 0) [ 203.969839][ T4250] usb 3-1: Service connection timeout for: 256 [ 203.976047][ T4250] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 204.000158][ T4250] ath9k_htc: Failed to initialize the device [ 204.029609][ T5462] usb 3-1: ath9k_htc: USB layer deinitialized [ 204.050210][T10536] EXT4-fs (loop3): Remounting filesystem read-only [ 204.068803][T10536] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.2801: invalid indirect mapped block 1819239214 (level 1) [ 204.132809][T10536] EXT4-fs (loop3): Remounting filesystem read-only [ 204.143659][T10536] EXT4-fs (loop3): 1 truncate cleaned up [ 204.149769][T10536] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,init_itable=0x0000000000000004,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=... Quota mode: writeback. [ 204.168969][T10561] loop5: detected capacity change from 0 to 512 [ 204.203611][T10561] EXT4-fs (loop5): Ignoring removed orlov option [ 204.285196][T10561] EXT4-fs (loop5): orphan cleanup on readonly fs [ 204.341366][T10541] loop4: detected capacity change from 0 to 32768 [ 204.345885][T10561] EXT4-fs warning (device loop5): ext4_enable_quotas:6459: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 204.383110][T10561] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 204.394996][T10541] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.2804 (10541) [ 204.452317][T10561] EXT4-fs (loop5): 1 truncate cleaned up [ 204.458889][T10541] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 204.497932][T10561] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsdgroups,nodiscard,dax=inode,grpjquota=,grpjquota=,orlov,abort,nombcache,stripe=0x0000000000000010,,errors=continue. Quota mode: writeback. [ 204.513307][T10541] BTRFS info (device loop4): using free space tree [ 204.537749][T10541] BTRFS info (device loop4): has skinny extents [ 204.644682][T10561] EXT4-fs (loop5): Ignoring removed orlov option [ 204.676857][T10561] EXT4-fs warning (device loop5): ext4_enable_quotas:6459: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 204.875629][T10541] BTRFS info (device loop4): enabling ssd optimizations [ 204.891646][ T144] BTRFS warning (device loop4): checksum verify failed on 5308416 wanted 0x1b6f3341d22ee11591937a8410afa2a1fdb62fc15d9a9403e72868eb886a3209 found 0x54bb8c73ccf867fc125156c01418a7379495c0932faa6a0f6ecf4465ca9cd092 level 0 [ 204.929954][ T5883] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 205.283500][T10611] loop1: detected capacity change from 0 to 4096 [ 205.450239][T10611] ntfs: volume version 3.1. [ 205.479212][ T5883] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 205.508895][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.518772][ T5883] usb 4-1: Product: syz [ 205.528062][ T5883] usb 4-1: Manufacturer: syz [ 205.539098][ T5883] usb 4-1: SerialNumber: syz [ 205.569476][T10625] netlink: 'syz.5.2836': attribute type 5 has an invalid length. [ 205.581956][T10625] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.2836'. [ 205.608010][ T5883] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 205.660578][ T4288] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 205.758700][T10628] QAT: failed to copy from user. [ 206.185540][T10648]  (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 206.192679][ T5886] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 206.230044][ T4288] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 206.266377][ T4288] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.288404][ T4288] usb 3-1: Product: syz [ 206.314448][ T4288] usb 3-1: Manufacturer: syz [ 206.319456][ T4288] usb 3-1: SerialNumber: syz [ 206.339230][ T4288] usb 3-1: config 0 descriptor?? [ 206.344296][T10653] loop4: detected capacity change from 0 to 4096 [ 206.401995][ T4288] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 206.423019][T10653] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 206.492280][T10661] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2852'. [ 206.498608][T10653] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 206.522330][T10653] ntfs3: loop4: Failed to load $Extend. [ 206.617029][T10665] netlink: 'syz.5.2854': attribute type 1 has an invalid length. [ 206.653089][ T5218] usb 4-1: USB disconnect, device number 14 [ 206.739986][ T5462] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 206.835738][T10675] loop5: detected capacity change from 0 to 164 [ 206.842753][ T4288] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 206.860568][ T4288] sq905c 3-1:0.0: Reading version command failed [ 206.883280][ T4288] sq905c: probe of 3-1:0.0 failed with error -71 [ 206.894308][ T4288] usb 3-1: USB disconnect, device number 23 [ 206.998034][T10675] Unsupported NM flag settings (8) [ 207.114828][T10681] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2863'. [ 207.125696][T10681] unsupported nlmsg_type 40 [ 207.150199][ T5462] usb 2-1: config 0 has an invalid interface number: 239 but max is 0 [ 207.190299][ T5462] usb 2-1: config 0 has no interface number 0 [ 207.220754][ T5462] usb 2-1: config 0 interface 239 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 207.261011][ T5462] usb 2-1: config 0 interface 239 altsetting 0 endpoint 0x82 has invalid maxpacket 511, setting to 64 [ 207.462649][ T5462] usb 2-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 207.477149][ T5462] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.489772][ T5886] usb 4-1: Service connection timeout for: 256 [ 207.499114][ T5886] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 207.504008][ T5462] usb 2-1: Product: syz [ 207.517356][ T5886] ath9k_htc: Failed to initialize the device [ 207.524224][ T5218] usb 4-1: ath9k_htc: USB layer deinitialized [ 207.537791][ T5462] usb 2-1: Manufacturer: syz [ 207.549203][ T5462] usb 2-1: SerialNumber: syz [ 207.626885][ T5462] usb 2-1: config 0 descriptor?? [ 207.657516][T10659] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 207.666806][T10659] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 207.764440][T10695] loop2: detected capacity change from 0 to 32768 [ 207.782895][T10695] [ 207.782895][T10695] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 207.782895][T10695] [ 207.794687][ T4250] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 207.808455][T10695] ERROR: (device loop2): ea_get: invalid ea.flag [ 207.808455][T10695] [ 207.827545][T10695] ERROR: (device loop2): remounting filesystem as read-only [ 207.910183][T10659] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 207.917298][T10659] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 207.925454][ T5218] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 208.039913][ T4250] usb 6-1: Using ep0 maxpacket: 16 [ 208.160060][ T4250] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 208.169937][ T5462] asix 2-1:0.239 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 208.171143][ T4250] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 208.186949][ T5462] asix: probe of 2-1:0.239 failed with error -71 [ 208.195493][ T4250] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 208.213506][ T5462] usb 2-1: USB disconnect, device number 13 [ 208.218777][ T4250] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.245169][ T4250] usb 6-1: config 0 descriptor?? [ 208.271716][T10701] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 208.291005][ T4250] pxrc 6-1:0.0: Could not find endpoint [ 208.297524][ T4250] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 208.339913][ T5218] usb 4-1: config index 0 descriptor too short (expected 29, got 18) [ 208.348491][ T5218] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 208.357865][ T5218] usb 4-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 208.367353][ T5218] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.378567][ T5218] usb 4-1: config 0 descriptor?? [ 208.495071][ T4250] usb 6-1: USB disconnect, device number 4 [ 208.679899][ T5218] usb 4-1: string descriptor 0 read error: -71 [ 208.686334][ T5218] ldusb 4-1:0.0: Interrupt in endpoint not found [ 208.705548][ T5218] usb 4-1: USB disconnect, device number 15 [ 208.751078][T10711] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 208.812257][T10713] openvswitch: netlink: Missing key (keys=40, expected=80) [ 209.085453][T10730] cgroup: Invalid name [ 209.315143][T10746] usb usb8: usbfs: process 10746 (syz.3.2896) did not claim interface 0 before use [ 209.489496][T10755] netlink: 'syz.1.2898': attribute type 3 has an invalid length. [ 209.555005][T10755] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2898'. [ 209.580646][T10760] loop3: detected capacity change from 0 to 512 [ 209.668172][T10765] bpf: Bad value for 'mode' [ 209.742709][T10760] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 209.798145][T10760] ext4 filesystem being mounted at /532/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.901920][T10780] loop4: detected capacity change from 0 to 4096 [ 209.970603][T10780] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 210.116768][T10780] ntfs3: loop4: failed to convert "c46c" to maciceland [ 210.161222][T10796] netlink: 'syz.5.2918': attribute type 10 has an invalid length. [ 210.226743][T10801] loop2: detected capacity change from 0 to 64 [ 210.504339][T10820] loop2: detected capacity change from 0 to 64 [ 210.906858][T10849] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 211.260243][ T4288] Bluetooth: hci0: command 0x0c1a tx timeout [ 211.302479][T10872] loop5: detected capacity change from 0 to 64 [ 211.412033][T10877] syz.1.2960 uses obsolete (PF_INET,SOCK_PACKET) [ 211.538867][T10885] loop3: detected capacity change from 0 to 16 [ 211.658163][T10844] loop4: detected capacity change from 0 to 32768 [ 211.677343][T10885] erofs: (device loop3): mounted with root inode @ nid 36. [ 211.716854][T10885] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 211.736784][ T150] block nbd5: Attempted send on invalid socket [ 211.743230][ T150] blk_update_request: I/O error, dev nbd5, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 211.756331][T10895] qnx6: unable to read the first superblock [ 211.765623][T10885] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -57 in[61, 4035] out[1851] [ 211.779510][ T150] block nbd5: Attempted send on invalid socket [ 211.780106][T10885] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 211.786351][ T150] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 211.805154][T10844] ERROR: (device loop4): dbAllocNext: Corrupt dmap page [ 211.805154][T10844] [ 211.825861][T10895] qnx6: unable to read the first superblock [ 211.835408][T10895] qnx6: unable to read the first superblock [ 212.011187][T10903] IPv6: NLM_F_REPLACE set, but no existing node found! [ 212.191482][T10915] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.2977'. [ 212.329270][T10923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2980'. [ 212.719934][ T4250] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 212.743152][T10939] loop2: detected capacity change from 0 to 256 [ 212.853164][T10939] MINIX-fs: mounting file system with errors, running fsck is recommended [ 212.880216][T10948] netlink: 'syz.3.2992': attribute type 21 has an invalid length. [ 212.929917][T10948] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2992'. [ 212.969889][ T4250] usb 5-1: Using ep0 maxpacket: 16 [ 213.026998][T10955] qrtr: Invalid version 179 [ 213.090314][ T4250] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 213.132276][ T4250] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 213.221149][ T4250] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 213.271399][ T4250] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.342153][ T4250] usb 5-1: config 0 descriptor?? [ 213.350914][T10967] loop1: detected capacity change from 0 to 1024 [ 213.359534][T10971] loop2: detected capacity change from 0 to 64 [ 213.370146][T10908] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 213.392459][ T4250] usb 5-1: Found UVC 0.00 device (10c4:ea90) [ 213.410093][ T4250] usb 5-1: No valid video chain found. [ 213.532670][T10975] loop5: detected capacity change from 0 to 512 [ 213.538034][T10973] loop3: detected capacity change from 0 to 4096 [ 213.558701][ T4291] hfsplus: b-tree write err: -5, ino 4 [ 213.626611][T10979] openvswitch: netlink: Actions may not be safe on all matching packets [ 213.640138][T10973] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 213.658387][T10975] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 213.727171][T10975] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 213.736915][T10975] EXT4-fs error (device loop5): ext4_orphan_get:1427: comm syz.5.3016: bad orphan inode 13 [ 213.746565][ T5886] usb 5-1: USB disconnect, device number 13 [ 213.748575][T10975] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="data_err=ignore,noload,data_err=ignore,grpjquota="errors=continue,max_dir_size_kb=0x00000000000001ff,nobarrier,,errors=continue. Quota mode: writeback. [ 213.776698][ C1] vkms_vblank_simulate: vblank timer overrun [ 213.875717][T10973] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 213.884023][T10981] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3005'. [ 214.341343][T10999] tmpfs: Bad value for 'mpol' [ 214.525409][T11011] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3022'. [ 214.568393][T11011] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3022'. [ 214.654932][T11016] loop1: detected capacity change from 0 to 764 [ 215.110069][ T5886] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 215.164446][T11050] overlayfs: missing 'lowerdir' [ 215.248227][T11057] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (1008285695) [ 215.289882][T11057] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 215.316410][T11060] loop5: detected capacity change from 0 to 256 [ 215.346914][T11062] loop1: detected capacity change from 0 to 256 [ 215.374777][T11064] netlink: 'syz.3.3049': attribute type 8 has an invalid length. [ 215.384019][T11064] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 215.391436][ T5886] usb 3-1: Using ep0 maxpacket: 16 [ 215.420270][T11062] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 215.458265][T11060] FAT-fs (loop5): Directory bread(block 64) failed [ 215.470048][T11060] FAT-fs (loop5): Directory bread(block 65) failed [ 215.535341][T11062] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000008) [ 215.555826][T11060] FAT-fs (loop5): Directory bread(block 66) failed [ 215.583497][T11060] FAT-fs (loop5): Directory bread(block 67) failed [ 215.594406][T11062] exFAT-fs (loop1): Filesystem has been set read-only [ 215.629972][T11060] FAT-fs (loop5): Directory bread(block 68) failed [ 215.657306][T11060] FAT-fs (loop5): Directory bread(block 69) failed [ 215.677538][T11069] loop3: detected capacity change from 0 to 512 [ 215.690059][ T5886] usb 3-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice= 2.73 [ 215.697849][T11060] FAT-fs (loop5): Directory bread(block 70) failed [ 215.717132][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.720868][T11060] FAT-fs (loop5): Directory bread(block 71) failed [ 215.747428][T11060] FAT-fs (loop5): Directory bread(block 72) failed [ 215.756541][T11060] FAT-fs (loop5): Directory bread(block 73) failed [ 215.763511][ T5886] usb 3-1: Product: syz [ 215.778001][ T5886] usb 3-1: Manufacturer: syz [ 215.786786][ T5886] usb 3-1: SerialNumber: syz [ 215.803938][T11069] EXT4-fs (loop3): inline encryption not supported [ 215.825823][ T5886] usb 3-1: config 0 descriptor?? [ 215.828233][T11069] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 215.854283][T11075] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3053'. [ 215.900947][T11069] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e12c, mo2=0002] [ 215.907083][T11075] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3053'. [ 215.918734][T11069] System zones: 1-12 [ 215.946305][T11069] EXT4-fs (loop3): orphan cleanup on readonly fs [ 215.956193][T11069] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.3052: invalid indirect mapped block 12 (level 1) [ 215.962605][ T5886] gspca_main: spca501-2.14.0 probing 0497:c001 [ 215.996589][T11069] EXT4-fs (loop3): Remounting filesystem read-only [ 216.025439][T11069] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.3052: invalid indirect mapped block 2 (level 2) [ 216.044593][T11069] EXT4-fs (loop3): Remounting filesystem read-only [ 216.060401][T11075] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3053'. [ 216.082341][T11069] EXT4-fs (loop3): 1 truncate cleaned up [ 216.088660][T11069] EXT4-fs (loop3): mounted filesystem without journal. Opts: noinit_itable,inlinecrypt,noload,errors=remount-ro,data_err=ignore. Quota mode: none. [ 216.088938][T11075] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 216.139858][ T5886] gspca_spca501: reg write: error -71 [ 216.145682][ T5886] spca501 3-1:0.0: Reg write failed for 0x02,0x07,0x05 [ 216.182786][ T5886] spca501: probe of 3-1:0.0 failed with error -22 [ 216.220089][ T5886] usb 3-1: USB disconnect, device number 24 [ 216.382475][T11094] netlink: 'syz.3.3058': attribute type 10 has an invalid length. [ 216.437030][T11094] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.444629][T11094] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.458543][T11098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3065'. [ 216.483277][ T4288] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 216.527976][T11094] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.535849][T11094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.545392][T11094] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.553345][T11094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.673786][T11094] team0: Port device bridge0 added [ 216.902457][ T4288] usb 6-1: config index 0 descriptor too short (expected 3133, got 61) [ 216.916129][ T4288] usb 6-1: config 0 has an invalid interface number: 156 but max is 1 [ 216.946420][ T4288] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.959362][T11122] loop4: detected capacity change from 0 to 128 [ 216.971518][ T4288] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 216.996086][ T4288] usb 6-1: config 0 has no interface number 0 [ 217.024557][ T4288] usb 6-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 217.041220][T11122] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 217.056353][ T4288] usb 6-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 217.085436][T11122] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 217.097707][ T4288] usb 6-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 217.131880][T11122] EXT4-fs error (device loop4): __ext4_find_entry:1696: inode #2: comm syz.4.3076: checksumming directory block 0 [ 217.157995][ T4288] usb 6-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 217.199839][ T4288] usb 6-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 217.209188][ T4288] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.240591][ T4288] usb 6-1: config 0 descriptor?? [ 217.291860][ T4288] gspca_main: spca561-2.14.0 probing abcd:cdee [ 217.298997][T11115] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 217.542966][T11137] dlm: Unknown command passed to DLM device : 0 [ 217.542966][T11137] [ 217.600063][ T4288] spca561: probe of 6-1:0.156 failed with error -22 [ 217.607842][ T4288] usb 6-1: MIDIStreaming interface descriptor not found [ 217.676949][ T4288] usb 6-1: USB disconnect, device number 5 [ 217.924410][T11129] loop1: detected capacity change from 0 to 32768 [ 217.948897][T11149] loop2: detected capacity change from 0 to 4096 [ 217.971751][T11153] netlink: 'syz.4.3092': attribute type 1 has an invalid length. [ 217.980100][T11153] __nla_validate_parse: 1 callbacks suppressed [ 217.980117][T11153] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3092'. [ 218.024355][T11149] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 218.183146][T11162] Sensor A: ================= START STATUS ================= [ 218.193256][T11149] ntfs3: loop2: failed to convert "c46c" to cp857 [ 218.243348][T11162] Sensor A: Test Pattern: 75% Colorbar [ 218.267322][T11162] Sensor A: Show Information: All [ 218.336968][T11162] Sensor A: Vertical Flip: false [ 218.420314][T11162] Sensor A: Horizontal Flip: false [ 218.429818][T11162] Sensor A: Brightness: 128 [ 218.453230][T11162] Sensor A: Contrast: 128 [ 218.486978][T11162] Sensor A: Hue: 0 [ 218.518575][T11162] Sensor A: Saturation: 128 [ 218.537238][T11162] Sensor A: ================== END STATUS ================== [ 218.620547][T11179] loop5: detected capacity change from 0 to 2048 [ 218.689225][T11179] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 218.700689][T11190] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3108'. [ 218.741427][T11192] loop2: detected capacity change from 0 to 512 [ 218.760965][T11179] UDF-fs: unknown compression code (0) [ 218.779458][T11195] netlink: 'syz.1.3112': attribute type 10 has an invalid length. [ 218.789194][T11195] device veth0_macvtap left promiscuous mode [ 218.805036][T11192] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 2: comm syz.2.3109: invalid block [ 218.841354][T11195] batman_adv: batadv0: Adding interface: macvtap0 [ 218.860076][T11195] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.949816][T11195] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 218.963607][T11192] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.3109: invalid indirect mapped block 10 (level 1) [ 218.964770][T11200] loop4: detected capacity change from 0 to 164 [ 219.019864][T11192] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.3109: invalid indirect mapped block 8 (level 1) [ 219.083805][T11192] EXT4-fs (loop2): 1 truncate cleaned up [ 219.106990][T11192] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 219.165031][T11200] Unable to read rock-ridge attributes [ 219.248741][T11192] EXT4-fs error (device loop2): ext4_lookup:1858: inode #12: comm syz.2.3109: unexpected EA_INODE flag [ 219.334962][T11215] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 219.459309][T11219] loop5: detected capacity change from 0 to 256 [ 219.551294][T11219] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 219.697885][T11229] netlink: 'syz.3.3128': attribute type 10 has an invalid length. [ 219.758969][T11237] loop1: detected capacity change from 0 to 256 [ 219.766871][T11229] team0: Port device virt_wifi0 added [ 219.854651][T11237] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 219.876097][T11241] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3134'. [ 219.906978][T11241] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3134'. [ 219.950908][T11237] attempt to access beyond end of device [ 219.950908][T11237] loop1: rw=0, want=34359738489, limit=256 [ 220.179028][T11263] loop5: detected capacity change from 0 to 1024 [ 220.204967][T11265] netlink: 'syz.1.3142': attribute type 5 has an invalid length. [ 220.267461][T11263] EXT4-fs (loop5): Ignoring removed nobh option [ 220.311541][T11263] EXT4-fs error (device loop5): ext4_ext_check_inode:501: inode #11: comm syz.5.3144: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 220.460294][T11263] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.3144: couldn't read orphan inode 11 (err -117) [ 220.482641][T11263] EXT4-fs (loop5): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 220.679442][T11285] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3153'. [ 220.743649][T11281] loop2: detected capacity change from 0 to 4096 [ 220.748623][T11285] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 220.816646][T11281] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 221.190342][T11309] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3176'. [ 221.245363][T11309] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3176'. [ 221.503891][T11329] loop4: detected capacity change from 0 to 256 [ 221.564756][T11329] exfat: Deprecated parameter 'utf8' [ 221.646983][T11329] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 222.039957][ T5883] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 222.364389][T11382] loop2: detected capacity change from 0 to 512 [ 222.503649][T11382] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e028, mo2=0002] [ 222.560793][T11382] System zones: 1-12 [ 222.563240][ T5883] usb 4-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 222.588700][T11382] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.3201: invalid indirect mapped block 8 (level 2) [ 222.589940][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.610173][T11382] EXT4-fs (loop2): Remounting filesystem read-only [ 222.621363][T11382] EXT4-fs (loop2): 1 truncate cleaned up [ 222.637532][T11382] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_dev=0x0000000000000008,data_err=ignore,noinit_itable,sysvgroups,errors=remount-ro,. Quota mode: none. [ 222.688093][ T5883] usb 4-1: Product: syz [ 222.708739][ T5883] usb 4-1: Manufacturer: syz [ 222.724040][ T5883] usb 4-1: SerialNumber: syz [ 222.751482][ T5883] usb 4-1: config 0 descriptor?? [ 222.821702][ T5883] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 222.908432][T11368] loop4: detected capacity change from 0 to 32768 [ 222.942448][T11372] loop1: detected capacity change from 0 to 32768 [ 222.965718][T11394] loop5: detected capacity change from 0 to 256 [ 222.984846][T11368] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.3195 (11368) [ 223.014208][T11368] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 223.046849][T11368] BTRFS info (device loop4): force zlib compression, level 3 [ 223.055786][T11368] BTRFS info (device loop4): force clearing of disk cache [ 223.059623][T11372] JBD2: Ignoring recovery information on journal [ 223.064010][T11368] BTRFS info (device loop4): setting nodatasum [ 223.103207][T11368] BTRFS info (device loop4): doing ref verification [ 223.110293][T11368] BTRFS info (device loop4): allowing degraded mounts [ 223.117243][T11368] BTRFS info (device loop4): using free space tree [ 223.124151][T11368] BTRFS info (device loop4): has skinny extents [ 223.212269][T11394] FAT-fs (loop5): Directory bread(block 64) failed [ 223.219253][T11394] FAT-fs (loop5): Directory bread(block 65) failed [ 223.230263][T11368] BTRFS info (device loop4): enabling ssd optimizations [ 223.248240][T11368] BTRFS info (device loop4): clearing free space tree [ 223.266412][T11368] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 223.287133][T11368] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 223.303199][T11394] FAT-fs (loop5): Directory bread(block 66) failed [ 223.310230][T11394] FAT-fs (loop5): Directory bread(block 67) failed [ 223.317828][T11394] FAT-fs (loop5): Directory bread(block 68) failed [ 223.325154][T11394] FAT-fs (loop5): Directory bread(block 69) failed [ 223.332240][T11394] FAT-fs (loop5): Directory bread(block 70) failed [ 223.339304][T11394] FAT-fs (loop5): Directory bread(block 71) failed [ 223.348422][T11394] FAT-fs (loop5): Directory bread(block 72) failed [ 223.355665][T11394] FAT-fs (loop5): Directory bread(block 73) failed [ 223.363888][T11368] BTRFS info (device loop4): creating free space tree [ 223.367776][T11372] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 223.372150][T11368] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 223.398450][T11368] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 223.486917][ T5883] usb 4-1: USB disconnect, device number 16 [ 223.647846][ T4183] ocfs2: Unmounting device (7,1) on (node local) [ 223.799742][ T5886] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 223.851995][T11425] loop5: detected capacity change from 0 to 16 [ 223.969938][T11425] erofs: (device loop5): mounted with root inode @ nid 36. [ 224.085738][ T5886] usb 3-1: Using ep0 maxpacket: 8 [ 224.227908][ T5886] usb 3-1: too many endpoints for config 0 interface 0 altsetting 3: 64, using maximum allowed: 30 [ 224.251756][T11437] loop3: detected capacity change from 0 to 64 [ 224.255468][ T5886] usb 3-1: config 0 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 64 [ 224.314218][ T5886] usb 3-1: config 0 interface 0 has no altsetting 0 [ 224.438497][T11446] netlink: 'syz.4.3219': attribute type 10 has an invalid length. [ 224.520323][ T5886] usb 3-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=1b.62 [ 224.546980][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.586763][ T5886] usb 3-1: Product: syz [ 224.606732][ T5886] usb 3-1: Manufacturer: syz [ 224.633322][ T5886] usb 3-1: SerialNumber: syz [ 224.697331][ T5886] usb 3-1: config 0 descriptor?? [ 224.810241][T11466] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 224.896567][T11462] loop4: detected capacity change from 0 to 4096 [ 224.922297][T11468] loop1: detected capacity change from 0 to 256 [ 224.941244][T11462] __ntfs_warning: 2 callbacks suppressed [ 224.941260][T11462] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 224.992997][T11468] exfat: Deprecated parameter 'namecase' [ 225.019937][ T5886] comedi comedi4: could not set alternate setting 3 in high speed [ 225.028171][ T5886] usbdux 3-1:0.0: driver 'usbdux' failed to auto-configure device. [ 225.042025][T11468] exfat: Deprecated parameter 'utf8' [ 225.060401][T11462] ntfs: (device loop4): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 225.109578][ T5886] usbdux: probe of 3-1:0.0 failed with error -71 [ 225.121396][T11468] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 225.128092][T11462] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 225.149929][ T5886] usb 3-1: USB disconnect, device number 25 [ 225.234170][T11462] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 225.260249][T11462] ntfs: volume version 3.1. [ 225.387328][T11462] ntfs: (device loop4): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 225.456495][T11486] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3238'. [ 225.497485][T11462] ntfs: (device loop4): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 225.693453][ T9] ntfs: (device loop4): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 225.726838][ T9] ntfs: (device loop4): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 225.765478][ T4191] ntfs: (device loop4): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 225.803275][T11502] netlink: 'syz.1.3246': attribute type 10 has an invalid length. [ 225.812801][T11502] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.821350][T11502] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.847034][T11502] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.854663][T11502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.864949][T11502] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.872487][T11502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.245160][T11502] team0: Port device bridge0 added [ 226.284504][T11522] netlink: 'syz.4.3255': attribute type 5 has an invalid length. [ 226.586105][T11544] loop2: detected capacity change from 0 to 16 [ 226.725779][T11544] cramfs: Error -3 while decompressing! [ 226.758371][T11544] cramfs: ffffffff961ea028(27)->ffff888068d45000(4096) [ 226.783992][T11544] cramfs: Error -3 while decompressing! [ 226.801016][T11544] cramfs: ffffffff961ea043(16)->ffff8880711a6000(4096) [ 226.813418][T11557] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3275'. [ 226.829824][T11544] cramfs: Error -3 while decompressing! [ 226.845858][T11544] cramfs: ffffffff961ea028(27)->ffff888068d45000(4096) [ 226.878311][T11560] loop1: detected capacity change from 0 to 16 [ 226.884865][ T26] audit: type=1800 audit(1755567515.374:16): pid=11544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3269" name="file2" dev="loop2" ino=348 res=0 errno=0 [ 226.956025][T11554] loop3: detected capacity change from 0 to 4096 [ 226.966486][T11560] erofs: (device loop1): mounted with root inode @ nid 36. [ 227.098308][T11564] netlink: 'syz.2.3278': attribute type 10 has an invalid length. [ 227.147303][T11554] ntfs: volume version 3.1. [ 227.177587][T11564] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.185181][T11564] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.287381][T11564] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.295369][T11564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.305566][T11564] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.306570][T11528] loop5: detected capacity change from 0 to 32768 [ 227.312806][T11564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.642344][T11564] team0: Port device bridge0 added [ 227.914606][T11584] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 227.935529][T11588] netlink: 'syz.2.3289': attribute type 1 has an invalid length. [ 227.959977][T11584] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 227.973805][T11588] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.3289'. [ 228.098638][T11566] loop4: detected capacity change from 0 to 32768 [ 228.211463][T11600] overlayfs: unrecognized mount option "\" or missing value [ 228.232689][T11566] XFS (loop4): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 228.270690][T11611] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 228.331261][ T4191] XFS (loop4): Unmounting Filesystem [ 228.561720][T11622] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3302'. [ 228.845574][T11634] netlink: 'syz.4.3307': attribute type 10 has an invalid length. [ 228.874421][T11634] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.882170][T11634] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.968487][T11634] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.976257][T11634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.986741][T11634] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.993911][T11634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.104121][T11634] team0: Port device bridge0 added [ 229.434201][T11656] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3319'. [ 229.440652][T11655] netlink: 'syz.5.3318': attribute type 2 has an invalid length. [ 229.464961][T11619] loop1: detected capacity change from 0 to 32768 [ 229.500920][T11655] netlink: 'syz.5.3318': attribute type 1 has an invalid length. [ 229.554964][T11655] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3318'. [ 229.571809][T11659] tmpfs: Bad value for 'mpol' [ 229.890032][T11676] loop5: detected capacity change from 0 to 1024 [ 229.919899][ T4288] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 230.016559][T11684] netlink: 'syz.2.3332': attribute type 10 has an invalid length. [ 230.039457][T11680] loop4: detected capacity change from 0 to 4096 [ 230.077092][T11684] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.084658][T11684] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.092697][T11686] rdma_rxe: rxe_register_device failed with error -23 [ 230.151776][T11680] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 230.200668][T11686] rdma_rxe: failed to add vcan0 [ 230.274193][T11680] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 230.349918][ T4288] usb 4-1: descriptor type invalid, skip [ 230.431242][ T4288] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.449713][ T4288] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 230.657249][ T4288] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 230.699766][ T4288] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.708055][ T4288] usb 4-1: Product: syz [ 230.722914][ T4288] usb 4-1: Manufacturer: syz [ 230.727655][ T4288] usb 4-1: SerialNumber: syz [ 230.770887][ T4288] usb 4-1: config 0 descriptor?? [ 231.079603][ T4288] usb 4-1: USB disconnect, device number 17 [ 231.088761][T11717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3347'. [ 231.110820][T11717] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3347'. [ 231.147415][T11690] loop2: detected capacity change from 0 to 32768 [ 231.278733][T11723] x_tables: duplicate underflow at hook 2 [ 231.457437][T11729] netlink: 'syz.5.3354': attribute type 4 has an invalid length. [ 231.519927][T11729] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.3354'. [ 231.589122][T11697] loop1: detected capacity change from 0 to 32768 [ 231.597584][T11735] netlink: 'syz.4.3357': attribute type 10 has an invalid length. [ 231.647929][T11735] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.655532][T11735] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.746306][T11697] XFS (loop1): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 231.873174][ T4183] XFS (loop1): Unmounting Filesystem [ 232.155759][T11765] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3370'. [ 232.249968][T11765] netlink: 31 bytes leftover after parsing attributes in process `syz.5.3370'. [ 232.288264][T11765] netlink: 'syz.5.3370': attribute type 3 has an invalid length. [ 232.305991][T11765] netlink: 'syz.5.3370': attribute type 2 has an invalid length. [ 232.329853][T11765] netlink: 31 bytes leftover after parsing attributes in process `syz.5.3370'. [ 232.638672][ T4329] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 232.640413][T11783] loop5: detected capacity change from 0 to 2048 [ 232.687074][T11785] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 232.736850][T11783] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 232.796492][ T5048] udevd[5048]: incorrect nilfs2 checksum on /dev/loop5 [ 232.821085][T11786] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 232.909953][ T4329] usb 3-1: Using ep0 maxpacket: 32 [ 233.036711][T11761] loop4: detected capacity change from 0 to 40427 [ 233.043829][ T4329] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.059014][ T4329] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.073698][ T4329] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 233.124006][T11761] F2FS-fs (loop4): invalid crc value [ 233.130773][ T4329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.189289][T11761] F2FS-fs (loop4): Found nat_bits in checkpoint [ 233.197145][ T4329] hub 3-1:4.0: USB hub found [ 233.299991][ T1335] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 233.327512][T11810] comedi comedi3: rti802: I/O port conflict (0x24f27,4) [ 233.380672][T11761] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 233.420137][ T4329] hub 3-1:4.0: 16 ports detected [ 233.425478][ T4329] usb 3-1: selecting invalid altsetting 1 [ 233.445689][ T4329] hub 3-1:4.0: Using single TT (err -22) [ 233.469929][ T4329] hub 3-1:4.0: insufficient power available to use all downstream ports [ 233.549780][ T1335] usb 4-1: Using ep0 maxpacket: 16 [ 233.629938][ T4329] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 233.636532][ T4329] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 233.680071][ T1335] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 233.701086][ T4329] usb 3-1: USB disconnect, device number 26 [ 233.850186][ T1335] usb 4-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 233.859371][ T1335] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.890050][ T1335] usb 4-1: Product: syz [ 233.894661][ T1335] usb 4-1: Manufacturer: syz [ 233.926300][ T1335] usb 4-1: SerialNumber: syz [ 233.942704][ T1335] usb 4-1: config 0 descriptor?? [ 233.950744][T11829] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 234.007358][ T1335] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 234.251813][ T4288] usb 4-1: USB disconnect, device number 18 [ 234.292341][T11843] netlink: 'syz.1.3415': attribute type 1 has an invalid length. [ 234.331204][T11843] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.3415'. [ 234.507295][T11835] loop5: detected capacity change from 0 to 32768 [ 234.550875][T11835] [ 234.550875][T11835] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 234.550875][T11835] [ 234.601689][T11847] loop4: detected capacity change from 0 to 4096 [ 234.659502][ T6772] [ 234.659502][ T6772] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 234.659502][ T6772] [ 234.690786][ T6772] [ 234.690786][ T6772] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 234.690786][ T6772] [ 235.103458][T11841] loop2: detected capacity change from 0 to 32768 [ 235.197250][T11841] JBD2: Ignoring recovery information on journal [ 235.200252][T11859] loop4: detected capacity change from 0 to 4096 [ 235.219258][T11859] __ntfs_warning: 9 callbacks suppressed [ 235.219273][T11859] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 235.358200][T11841] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 235.542757][ T4189] ocfs2: Unmounting device (7,2) on (node local) [ 235.581839][T11859] ntfs: volume version 3.1. [ 235.808754][T11880] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3422'. [ 235.933374][T11852] loop1: detected capacity change from 0 to 32768 [ 235.995071][T11885] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3425'. [ 236.016728][T11885] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 236.098189][T11889] loop5: detected capacity change from 0 to 256 [ 236.120171][T11852] ERROR: (device loop1): diAllocAG: ipimap->i_size is wrong [ 236.120171][T11852] [ 236.159284][T11852] ERROR: (device loop1): remounting filesystem as read-only [ 236.199794][T11852] ialloc: diAlloc returned -5! [ 236.241126][T11887] loop4: detected capacity change from 0 to 8192 [ 236.271197][T11889] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 236.333111][T11887] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 236.352875][T11887] REISERFS (device loop4): using ordered data mode [ 236.382554][T11887] reiserfs: using flush barriers [ 236.412262][T11887] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 236.421738][T11891] loop2: detected capacity change from 0 to 4096 [ 236.434472][T11887] REISERFS (device loop4): checking transaction log (loop4) [ 236.445094][T11889] exFAT-fs (loop5): error, invalid access to FAT free cluster (entry 0x00000008) [ 236.445113][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 236.454796][T11889] exFAT-fs (loop5): Filesystem has been set read-only [ 236.474114][T11889] exFAT-fs (loop5): error, failed to bmap (inode : ffff88805e2155e0 iblock : 8, err : -5) [ 236.481503][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 236.485489][T11889] exFAT-fs (loop5): error, invalid access to FAT free cluster (entry 0x00000008) [ 236.506537][T11887] REISERFS (device loop4): Using r5 hash to sort names [ 236.510086][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 236.524688][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 236.532597][T11889] exFAT-fs (loop5): error, invalid access to FAT free cluster (entry 0x00000008) [ 236.566860][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 236.576633][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 236.586129][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 236.595828][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 236.607020][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 236.756154][T11874] loop3: detected capacity change from 0 to 32768 [ 236.915137][T11874] [ 236.915137][T11874] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 236.915137][T11874] [ 237.119393][ T4187] [ 237.119393][ T4187] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 237.119393][ T4187] [ 237.143165][ T4187] [ 237.143165][ T4187] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 237.143165][ T4187] [ 237.309830][ T5886] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 237.542934][T11913] cgroup: Invalid name [ 237.550087][ T5886] usb 6-1: Using ep0 maxpacket: 8 [ 237.785655][T11920] loop4: detected capacity change from 0 to 512 [ 237.829893][ T5886] usb 6-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 237.860694][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.869618][ T5886] usb 6-1: Product: syz [ 237.884182][ T5886] usb 6-1: Manufacturer: syz [ 237.888817][ T5886] usb 6-1: SerialNumber: syz [ 237.906328][ T5886] usb 6-1: config 0 descriptor?? [ 237.939874][T11920] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 237.958662][T11920] EXT4-fs (loop4): orphan cleanup on readonly fs [ 237.967763][T11919] loop2: detected capacity change from 0 to 4096 [ 237.968152][ T5886] gspca_main: sq930x-2.14.0 probing 2770:930c [ 237.982643][T11920] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 238.010676][T11920] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.3440: attempt to clear invalid blocks 2 len 1 [ 238.026425][T11920] EXT4-fs (loop4): Remounting filesystem read-only [ 238.033944][T11920] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 238.060929][T11920] EXT4-fs (loop4): Remounting filesystem read-only [ 238.079885][T11920] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.3440: invalid indirect mapped block 1819239214 (level 0) [ 238.100677][T11920] EXT4-fs (loop4): Remounting filesystem read-only [ 238.108402][T11920] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.3440: invalid indirect mapped block 1819239214 (level 1) [ 238.112894][T11919] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 238.124885][T11920] EXT4-fs (loop4): Remounting filesystem read-only [ 238.143712][T11920] EXT4-fs (loop4): 1 truncate cleaned up [ 238.152088][T11904] loop1: detected capacity change from 0 to 32768 [ 238.158810][T11920] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,init_itable=0x0000000000000004,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=... Quota mode: writeback. [ 238.227370][T11904] [ 238.227370][T11904] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 238.227370][T11904] [ 238.231831][T11919] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 238.263435][T11910] loop3: detected capacity change from 0 to 32768 [ 238.313592][T11919] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 238.325990][T11919] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 238.330130][T11904] ERROR: (device loop1): ea_get: invalid ea.flag [ 238.330130][T11904] [ 238.342464][T11919] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 238.396234][T11919] ntfs: volume version 0.0. [ 238.413789][T11904] ERROR: (device loop1): remounting filesystem as read-only [ 238.420331][T11919] ntfs: (device loop2): load_system_files(): Disabling sparse support due to NTFS volume version 0.0 (need at least version 3.0). [ 238.431587][ T5886] gspca_sq930x: ucbus_write failed -71 [ 238.458416][ T5886] sq930x: probe of 6-1:0.0 failed with error -71 [ 238.481706][ T5886] usb 6-1: USB disconnect, device number 6 [ 238.523976][T11919] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 238.580448][T11919] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 238.670902][T11919] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 239.117017][T11935] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 239.131636][T11937] rdma_rxe: rxe_register_device failed with error -23 [ 239.138878][T11937] rdma_rxe: failed to add vcan0 [ 239.245074][T11943] loop5: detected capacity change from 0 to 1024 [ 239.305413][T11949] binder: BC_ATTEMPT_ACQUIRE not supported [ 239.341440][T11949] binder: 11948:11949 ioctl c0306201 200000000340 returned -22 [ 239.421981][T11952] loop4: detected capacity change from 0 to 1024 [ 239.445496][T11947] loop2: detected capacity change from 0 to 4096 [ 239.449839][ T5218] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 239.485774][ T9] hfsplus: b-tree write err: -5, ino 4 [ 239.545750][T11947] ntfs: volume version 3.1. [ 239.593777][T11952] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 239.725207][T11962] loop5: detected capacity change from 0 to 65 [ 239.732544][ T5218] usb 2-1: Using ep0 maxpacket: 16 [ 239.817592][T11962] BFS-fs: bfs_fill_super(): NOTE: filesystem loop5 was created with 512 inodes, the real maximum is 511, mounting anyway [ 239.823534][T11965] netlink: 'syz.2.3459': attribute type 5 has an invalid length. [ 239.880227][ T5218] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 239.899737][ T5218] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 239.969503][ T5218] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 240.028395][T11970] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3461'. [ 240.039990][ T5218] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.090810][T11970] net_ratelimit: 991 callbacks suppressed [ 240.090827][T11970] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 240.114107][ T5218] usb 2-1: config 0 descriptor?? [ 240.131808][T11939] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 240.169218][T11974] loop2: detected capacity change from 0 to 256 [ 240.171276][ T5218] pxrc 2-1:0.0: Could not find endpoint [ 240.222516][ T5218] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 240.264807][T11974] FAT-fs (loop2): Directory bread(block 64) failed [ 240.298934][T11974] FAT-fs (loop2): Directory bread(block 65) failed [ 240.313145][T11974] FAT-fs (loop2): Directory bread(block 66) failed [ 240.356264][T11974] FAT-fs (loop2): Directory bread(block 67) failed [ 240.385386][T11974] FAT-fs (loop2): Directory bread(block 68) failed [ 240.424628][T11974] FAT-fs (loop2): Directory bread(block 69) failed [ 240.469481][ T1335] usb 2-1: USB disconnect, device number 14 [ 240.483641][T11974] FAT-fs (loop2): Directory bread(block 70) failed [ 240.520573][T11974] FAT-fs (loop2): Directory bread(block 71) failed [ 240.527555][T11974] FAT-fs (loop2): Directory bread(block 72) failed [ 240.569389][T11974] FAT-fs (loop2): Directory bread(block 73) failed [ 240.684777][T11985] loop5: detected capacity change from 0 to 4096 [ 240.771344][T11985] __ntfs_warning: 3 callbacks suppressed [ 240.771360][T11985] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 240.867044][T12002] loop3: detected capacity change from 0 to 65 [ 240.904305][T11985] ntfs: volume version 3.1. [ 240.943111][T12002] BFS-fs: bfs_fill_super(): NOTE: filesystem loop3 was created with 512 inodes, the real maximum is 511, mounting anyway [ 241.151432][T12010] QAT: failed to copy from user. [ 241.176765][T12009] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3480'. [ 241.200144][T12009] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 241.223814][T12009] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 241.307419][T12014] loop1: detected capacity change from 0 to 164 [ 241.367718][T12014] Unsupported NM flag settings (8) [ 241.501469][T12022] netlink: 'syz.4.3491': attribute type 10 has an invalid length. [ 241.575444][T12029] loop2: detected capacity change from 0 to 256 [ 241.652529][T12033] loop1: detected capacity change from 0 to 64 [ 241.674149][T12029] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 241.791531][T12029] exFAT-fs (loop2): error, invalid access to FAT free cluster (entry 0x00000008) [ 241.835309][T12029] exFAT-fs (loop2): Filesystem has been set read-only [ 242.139914][ T7297] Bluetooth: hci5: command 0x0406 tx timeout [ 242.470694][T12066] bpf: Bad value for 'mode' [ 242.599795][ T5218] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 242.677917][T12077] Sensor A: ================= START STATUS ================= [ 242.729949][T12077] Sensor A: Test Pattern: 75% Colorbar [ 242.735988][T12077] Sensor A: Show Information: All [ 242.756205][T12077] Sensor A: Vertical Flip: false [ 242.789952][T12082] netlink: 'syz.1.3520': attribute type 5 has an invalid length. [ 242.792477][T12077] Sensor A: Horizontal Flip: [ 242.798078][T12082] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.3520'. [ 242.829738][T12077] false [ 242.832720][T12077] Sensor A: Brightness: 128 [ 242.859811][ T5218] usb 6-1: Using ep0 maxpacket: 8 [ 242.893206][T12077] Sensor A: Contrast: 128 [ 242.897616][T12077] Sensor A: Hue: 0 [ 242.958770][T12093] loop4: detected capacity change from 0 to 64 [ 242.968566][T12077] Sensor A: Saturation: 128 [ 242.974714][T12077] Sensor A: ================== END STATUS ================== [ 242.990125][ T5218] usb 6-1: too many endpoints for config 0 interface 0 altsetting 3: 64, using maximum allowed: 30 [ 243.069769][ T5218] usb 6-1: config 0 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 64 [ 243.119718][ T5218] usb 6-1: config 0 interface 0 has no altsetting 0 [ 243.287659][T12107] loop3: detected capacity change from 0 to 4096 [ 243.300537][ T5218] usb 6-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=1b.62 [ 243.313248][T12107] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 243.320923][ T5218] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.351028][ T5218] usb 6-1: Product: syz [ 243.362720][ T5218] usb 6-1: Manufacturer: syz [ 243.367490][ T5218] usb 6-1: SerialNumber: syz [ 243.369954][ T4329] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 243.383384][ T5218] usb 6-1: config 0 descriptor?? [ 243.424566][T12107] ntfs3: loop3: failed to convert "c46c" to maciceland [ 243.677567][T12119] IPv6: NLM_F_REPLACE set, but no existing node found! [ 243.720009][ T5218] comedi comedi4: could not set alternate setting 3 in high speed [ 243.750171][ T5218] usbdux 6-1:0.0: driver 'usbdux' failed to auto-configure device. [ 243.784863][ T5218] usbdux: probe of 6-1:0.0 failed with error -71 [ 243.820318][ T5218] usb 6-1: USB disconnect, device number 7 [ 243.893417][T12127] loop3: detected capacity change from 0 to 64 [ 243.910022][ T4329] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 243.947257][ T4329] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.986451][ T4329] usb 2-1: Product: syz [ 243.991099][ T4329] usb 2-1: Manufacturer: syz [ 244.007211][ T4329] usb 2-1: SerialNumber: syz [ 244.013465][ T4329] usb 2-1: config 0 descriptor?? [ 244.071962][ T4329] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 244.138357][T12137] tmpfs: Bad value for 'mpol' [ 244.291423][T12138] loop2: detected capacity change from 0 to 4096 [ 244.333866][T12148] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3552'. [ 244.356545][T12148] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 244.374598][T12138] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 244.490732][ T4329] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 244.505533][ T4329] sq905c 2-1:0.0: Reading version command failed [ 244.520940][ T4329] sq905c: probe of 2-1:0.0 failed with error -71 [ 244.547965][T12138] ntfs3: loop2: failed to convert "c46c" to maciceland [ 244.568061][ T4329] usb 2-1: USB disconnect, device number 15 [ 244.779902][ T1335] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 244.938245][T12174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3567'. [ 245.084508][T12183] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3570'. [ 245.110241][T12183] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 245.163632][ T1335] usb 5-1: config index 0 descriptor too short (expected 29, got 18) [ 245.189747][ T1335] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 245.206337][T12188] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3572'. [ 245.210557][ T1335] usb 5-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 245.227609][ T1335] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.238476][ T1335] usb 5-1: config 0 descriptor?? [ 245.409987][ T5886] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 245.520003][ T1335] usb 5-1: string descriptor 0 read error: -71 [ 245.534649][ T1335] ldusb 5-1:0.0: Interrupt in endpoint not found [ 245.581054][ T1335] usb 5-1: USB disconnect, device number 14 [ 245.598869][T12206] loop3: detected capacity change from 0 to 1024 [ 245.660218][ T5886] usb 2-1: Using ep0 maxpacket: 16 [ 245.780000][ T5886] usb 2-1: config 0 has an invalid interface number: 237 but max is 0 [ 245.824929][ T5886] usb 2-1: config 0 has no interface number 0 [ 245.838043][ T5886] usb 2-1: config 0 interface 237 has no altsetting 0 [ 245.892595][ T144] hfsplus: b-tree write err: -5, ino 4 [ 246.010010][ T5886] usb 2-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 246.022385][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.022501][T12222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3587'. [ 246.038994][T12224] netlink: 'syz.2.3590': attribute type 40 has an invalid length. [ 246.058123][ T5886] usb 2-1: Product: syz [ 246.069190][T12224] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 246.084423][ T5886] usb 2-1: Manufacturer: syz [ 246.099804][ T5886] usb 2-1: SerialNumber: syz [ 246.119606][ T5886] usb 2-1: config 0 descriptor?? [ 246.127459][T12224] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 246.171240][T12229] loop4: detected capacity change from 0 to 512 [ 246.182515][ T5886] snd_usb_podhd 2-1:0.237: Line 6 POD HD300 found [ 246.207402][T12232] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3593'. [ 246.309116][T12229] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.3592: invalid indirect mapped block 10 (level 1) [ 246.391724][T12229] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.3592: invalid indirect mapped block 8 (level 1) [ 246.410187][ T5886] snd_usb_podhd 2-1:0.237: cannot get proper max packet size [ 246.417767][ T5886] snd_usb_podhd 2-1:0.237: Line 6 POD HD300 now disconnected [ 246.446323][ T5886] snd_usb_podhd: probe of 2-1:0.237 failed with error -22 [ 246.479460][T12229] EXT4-fs (loop4): 1 truncate cleaned up [ 246.502615][T12229] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 246.553031][T12229] EXT4-fs error (device loop4): ext4_lookup:1858: inode #12: comm syz.4.3592: unexpected EA_INODE flag [ 246.639742][ T5886] usb 2-1: USB disconnect, device number 16 [ 246.698626][T12254] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3606'. [ 246.892777][T12263] loop2: detected capacity change from 0 to 764 [ 247.176480][T12277] loop5: detected capacity change from 0 to 2048 [ 247.179856][ T5218] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 247.289029][T12277] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 247.366278][T12277] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 247.426949][T12294] ubi31: attaching mtd0 [ 247.459565][T12294] ubi31: scanning is finished [ 247.480028][ T5218] usb 4-1: Using ep0 maxpacket: 16 [ 247.537029][T12294] ubi31: empty MTD device detected [ 247.622208][T12300] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3627'. [ 247.644387][T12303] loop2: detected capacity change from 0 to 128 [ 247.677110][T12294] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 247.694475][T12306] loop5: detected capacity change from 0 to 256 [ 247.701650][T12294] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 247.709404][T12294] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 247.718509][T12294] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 247.739858][T12294] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 247.747166][T12294] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 247.759811][T12294] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2461483153 [ 247.771172][T12303] FAT-fs (loop2): count of clusters too big (2147483774) [ 247.778401][T12303] FAT-fs (loop2): Can't find a valid FAT filesystem [ 247.799979][T12294] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 247.820221][ T5218] usb 4-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice= 2.73 [ 247.848957][T12304] ubi31: background thread "ubi_bgt31d" started, PID 12304 [ 247.849726][ T5218] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.899546][ T5218] usb 4-1: Product: syz [ 247.917178][ T5218] usb 4-1: Manufacturer: syz [ 247.947165][ T5218] usb 4-1: SerialNumber: syz [ 247.950883][T12310] loop1: detected capacity change from 0 to 24 [ 247.980899][ T5218] usb 4-1: config 0 descriptor?? [ 247.990366][T12310] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 248.050165][T12310] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 248.052136][ T5218] gspca_main: spca501-2.14.0 probing 0497:c001 [ 248.099432][T12310] romfs: read error for inode 0x70040 [ 248.112465][ T1335] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 248.223000][T12322] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3638'. [ 248.299931][ T5218] gspca_spca501: reg write: error -71 [ 248.305597][ T5218] spca501 4-1:0.0: Reg write failed for 0x02,0x07,0x05 [ 248.313831][ T5218] spca501: probe of 4-1:0.0 failed with error -22 [ 248.325583][T12322] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 248.335778][ T5218] usb 4-1: USB disconnect, device number 19 [ 248.370000][ T1335] usb 3-1: Using ep0 maxpacket: 16 [ 248.490041][ T1335] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 248.497539][T12330] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3642'. [ 248.515790][ T1335] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 248.588966][ T1335] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 248.610121][ T1335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.652605][ T1335] usb 3-1: config 0 descriptor?? [ 248.668002][T12334] xt_recent: Unsupported userspace flags (000000de) [ 248.710214][T12303] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 248.731897][ T1335] usb 3-1: Found UVC 0.00 device (10c4:ea90) [ 248.739152][ T1335] usb 3-1: No valid video chain found. [ 248.880013][T12341] device netdevsim0 entered promiscuous mode [ 248.984260][ T5883] usb 3-1: USB disconnect, device number 27 [ 249.072726][T12350] netlink: 'syz.1.3651': attribute type 40 has an invalid length. [ 249.090791][T12354] binder: 12351:12354 ioctl c018620b 0 returned -14 [ 249.107267][T12350] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 249.112929][T12353] capability: warning: `syz.4.3653' uses 32-bit capabilities (legacy support in use) [ 249.218869][T12356] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3655'. [ 249.292489][T12360] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3657'. [ 249.358486][T12356] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 249.431934][T12363] netlink: 'syz.4.3658': attribute type 1 has an invalid length. [ 249.450082][T12363] netlink: 'syz.4.3658': attribute type 2 has an invalid length. [ 249.863324][T12392] loop4: detected capacity change from 0 to 1024 [ 249.926416][T12402] rdma_rxe: ignoring netdev event = 9 for ipvlan1 [ 249.956510][T12402] rdma_rxe: ignoring netdev event = 8 for ipvlan1 [ 250.063950][T12409] loop1: detected capacity change from 0 to 256 [ 250.155686][T12402] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 250.552473][T12436] __nla_validate_parse: 3 callbacks suppressed [ 250.552494][T12436] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3695'. [ 250.656303][ T5883] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 251.050030][ T5883] usb 3-1: config index 0 descriptor too short (expected 29, got 18) [ 251.069809][ T5883] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 251.093155][ T5883] usb 3-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 251.133744][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.147723][T12468] netlink: 'syz.5.3721': attribute type 1 has an invalid length. [ 251.175715][ T5883] usb 3-1: config 0 descriptor?? [ 251.184903][T12468] netlink: 'syz.5.3721': attribute type 2 has an invalid length. [ 251.207631][T12472] device netdevsim0 entered promiscuous mode [ 251.255385][T12471] netlink: 'syz.1.3712': attribute type 21 has an invalid length. [ 251.279945][T12471] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3712'. [ 251.444877][T12483] loop5: detected capacity change from 0 to 164 [ 251.470182][ T5883] usb 3-1: string descriptor 0 read error: -71 [ 251.476823][ T5883] ldusb 3-1:0.0: Interrupt in endpoint not found [ 251.481842][T12488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3720'. [ 251.506920][ T5883] usb 3-1: USB disconnect, device number 28 [ 251.873228][T12513] loop4: detected capacity change from 0 to 512 [ 251.886794][T12516] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3733'. [ 251.981309][T12516] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 252.002888][T12513] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 252.046262][T12513] ext4 filesystem being mounted at /828/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.165754][T12513] fscrypt (loop4, inode 15): Error -61 getting encryption context [ 252.243719][T12534] binder: 12533:12534 ioctl c018620b 0 returned -14 [ 252.257668][T12536] ubi: mtd0 is already attached to ubi31 [ 252.297237][ T5883] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 252.550981][T12543] device wlan0 entered promiscuous mode [ 252.597089][T12543] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 252.633012][T12549] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3748'. [ 252.669811][ T5883] usb 4-1: config index 0 descriptor too short (expected 3133, got 61) [ 252.692385][ T5883] usb 4-1: config 0 has an invalid interface number: 156 but max is 1 [ 252.725551][ T5883] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.748985][T12555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3752'. [ 252.759079][ T5883] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 252.799474][ T5883] usb 4-1: config 0 has no interface number 0 [ 252.811507][ T5883] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 252.849960][ T5883] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 252.855695][ T27] INFO: task syz-executor:4192 blocked for more than 143 seconds. [ 252.889523][ T5883] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 252.902215][T12563] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3766'. [ 252.906140][ T27] Not tainted 5.15.189-syzkaller #0 [ 252.917773][ T5883] usb 4-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 252.933217][ T5883] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 252.946799][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 252.962080][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.965821][ T27] task:syz-executor state:D [ 252.979946][ T5883] usb 4-1: config 0 descriptor?? [ 252.992690][ T27] stack:21152 pid: 4192 ppid: 1 flags:0x00004004 [ 253.015795][ T27] Call Trace: [ 253.019232][ T27] [ 253.021432][T12557] loop2: detected capacity change from 0 to 8192 [ 253.028752][ T27] __schedule+0x11b8/0x43b0 [ 253.036189][ T27] ? verify_lock_unused+0x140/0x140 [ 253.041802][ T5883] gspca_main: spca561-2.14.0 probing abcd:cdee [ 253.050191][ T27] ? release_firmware_map_entry+0x190/0x190 [ 253.056626][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 253.063340][ T27] ? lock_chain_count+0x20/0x20 [ 253.068519][ T27] ? _raw_spin_lock_irq+0xab/0xe0 [ 253.074045][ T27] schedule+0x11b/0x1e0 [ 253.079336][ T27] io_schedule+0x7c/0xd0 [ 253.084268][ T27] wait_on_page_bit_common+0x815/0xe00 [ 253.090783][ T27] ? wait_on_page_bit+0x50/0x50 [ 253.096133][ T27] ? rcu_lock_release+0x20/0x20 [ 253.101618][ T27] truncate_inode_pages_range+0x97f/0xef0 [ 253.107748][ T27] ? invalidate_inode_page+0x360/0x360 [ 253.113600][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 253.123610][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 253.129365][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 253.135394][ T5218] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 253.139779][ T27] evict+0x498/0x870 [ 253.148269][ T27] ? proc_nr_inodes+0x320/0x320 [ 253.153533][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 253.159537][ T27] evict_inodes+0x604/0x690 [ 253.164531][ T27] ? __dentry_kill+0x530/0x650 [ 253.170166][ T27] ? clear_inode+0x150/0x150 [ 253.175769][ T27] ? sync_filesystem+0x103/0x220 [ 253.181170][ T27] generic_shutdown_super+0x93/0x300 [ 253.186709][ T27] kill_block_super+0x7c/0xe0 [ 253.191530][ T27] deactivate_locked_super+0x93/0xf0 [ 253.197174][ T27] cleanup_mnt+0x418/0x4d0 [ 253.201996][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 253.207490][ T27] task_work_run+0x125/0x1a0 [ 253.212361][ T27] exit_to_user_mode_loop+0x10f/0x130 [ 253.218000][ T27] exit_to_user_mode_prepare+0xb1/0x140 [ 253.225401][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 253.232025][ T27] do_syscall_64+0x58/0xa0 [ 253.236877][ T27] ? clear_bhb_loop+0x30/0x80 [ 253.243959][ T27] ? clear_bhb_loop+0x30/0x80 [ 253.249235][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 253.256370][ T27] RIP: 0033:0x7f8b3dd38f17 [ 253.262363][ T27] RSP: 002b:00007fffa80edb08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 253.271333][ T27] RAX: 0000000000000000 RBX: 00007f8b3ddbac05 RCX: 00007f8b3dd38f17 [ 253.279941][ T27] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa80edbc0 [ 253.288272][ T27] RBP: 00007fffa80edbc0 R08: 0000000000000000 R09: 0000000000000000 [ 253.297097][ T27] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffa80eec50 [ 253.305597][ T27] R13: 00007f8b3ddbac05 R14: 0000000000018c2a R15: 00007fffa80eec90 [ 253.314206][ T27] [ 253.317995][ T27] [ 253.317995][ T27] Showing all locks held in the system: [ 253.327075][ T5883] spca561: probe of 4-1:0.156 failed with error -22 [ 253.331235][ T27] 1 lock held by khungtaskd/27: [ 253.335500][ T5883] usb 4-1: MIDIStreaming interface descriptor not found [ 253.343302][ T27] #0: ffffffff8c11c360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 253.377048][ T27] 2 locks held by kworker/u4:2/154: [ 253.389824][ T5218] usb 6-1: Using ep0 maxpacket: 8 [ 253.395334][ T27] #0: ffff8880b913a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 253.396734][ T5883] usb 4-1: USB disconnect, device number 20 [ 253.406847][ T27] #1: ffff8880b9127848 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x4d6/0x810 [ 253.425498][ T27] 1 lock held by udevd/3561: [ 253.434451][ T27] #0: ffff888020892d18 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x157/0xa60 [ 253.446680][ T27] 2 locks held by getty/3950: [ 253.457618][ T27] #0: ffff88814ce24098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 253.471148][ T27] #1: ffffc900026562e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5ba/0x1a30 [ 253.485272][ T27] 1 lock held by syz-executor/4192: [ 253.491659][ T27] #0: ffff88814c7680e0 (&type->s_umount_key#91){+.+.}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 253.503039][ T27] 2 locks held by kworker/u4:5/4263: [ 253.508648][ T27] #0: ffff8880b903a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 253.519417][ T27] #1: ffff8880b9027848 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x495/0x810 [ 253.532231][ T27] 1 lock held by udevd/4403: [ 253.537104][ T27] #0: ffff888020892d18 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x157/0xa60 [ 253.547770][ T27] 3 locks held by kworker/1:10/5218: [ 253.553258][ T27] #0: ffff888142591138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 [ 253.565871][ T27] #1: ffffc9000357fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 [ 253.578957][ T27] #2: ffff888148069220 (&dev->mutex){....}-{3:3}, at: hub_event+0x18f/0x4fa0 [ 253.589212][ T27] 3 locks held by kworker/0:15/5883: [ 253.596455][ T27] #0: ffff888142591138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 [ 253.609203][ T27] #1: ffffc900047afd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 [ 253.622445][ T27] #2: ffff888148059220 (&dev->mutex){....}-{3:3}, at: hub_event+0x18f/0x4fa0 [ 253.631768][ T27] 2 locks held by syz.2.3753/12557: [ 253.637344][ T27] #0: ffff888020892d18 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xf9/0x7d0 [ 253.647835][ T27] #1: ffff88814778d468 (&lo->lo_mutex){+.+.}-{3:3}, at: lo_release+0x4d/0x1f0 [ 253.658191][ T27] [ 253.660806][ T27] ============================================= [ 253.660806][ T27] [ 253.697118][ T4346] udevd[4346]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 253.699895][T12557] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 253.716106][ T5218] usb 6-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d9.40 [ 253.739814][T12557] REISERFS (device loop2): using ordered data mode [ 253.746553][T12557] reiserfs: using flush barriers [ 253.761985][ T27] NMI backtrace for cpu 1 [ 253.766689][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.189-syzkaller #0 [ 253.774923][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 253.785262][ T27] Call Trace: [ 253.788880][ T27] [ 253.792103][ T27] dump_stack_lvl+0x168/0x230 [ 253.797184][ T27] ? show_regs_print_info+0x20/0x20 [ 253.802526][ T27] ? load_image+0x3b0/0x3b0 [ 253.807530][ T27] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 253.813604][ T27] ? nmi_cpu_backtrace+0x1b6/0x3d0 [ 253.819214][ T27] nmi_cpu_backtrace+0x397/0x3d0 [ 253.824462][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 253.831743][ T27] ? _printk+0xcc/0x110 [ 253.837072][ T27] ? load_image+0x3b0/0x3b0 [ 253.841989][ T27] ? load_image+0x3b0/0x3b0 [ 253.846994][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 253.854113][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 253.860891][ T27] watchdog+0xe0f/0xe50 [ 253.861024][T12557] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 253.865100][ T27] kthread+0x436/0x520 [ 253.865124][ T27] ? hungtask_pm_notify+0x40/0x40 [ 253.891485][ T27] ? kthread_blkcg+0xd0/0xd0 [ 253.895793][T12557] REISERFS (device loop2): checking transaction log (loop2) [ 253.896826][ T27] ret_from_fork+0x1f/0x30 [ 253.896874][ T27] [ 253.896922][ C1] vkms_vblank_simulate: vblank timer overrun [ 253.920111][ T27] Sending NMI from CPU 1 to CPUs 0: [ 253.926098][ C0] NMI backtrace for cpu 0 [ 253.926112][ C0] CPU: 0 PID: 4291 Comm: kworker/u4:7 Not tainted 5.15.189-syzkaller #0 [ 253.926130][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 253.926139][ C0] Workqueue: phy10 ieee80211_iface_work [ 253.926161][ C0] RIP: 0010:unwind_next_frame+0x1b5/0x1d90 [ 253.926181][ C0] Code: 49 89 ee 49 29 c6 49 c1 ee 08 8b 15 45 75 87 0a 8d 42 ff 44 39 f0 0f 86 f5 14 00 00 44 89 f0 4c 8d 24 85 6c 13 7d 8e 4c 89 e0 <48> c1 e8 03 42 0f b6 04 28 84 c0 0f 85 8b 16 00 00 45 8b 24 24 44 [ 253.926194][ C0] RSP: 0018:ffffc900033eeee8 EFLAGS: 00000206 [ 253.926206][ C0] RAX: ffffffff8e7ea2b4 RBX: ffffc900033eefa8 RCX: ffffffff960bdf00 [ 253.926217][ C0] RDX: 000000000008e07f RSI: ffffffff8163d2ea RDI: 0000000000000001 [ 253.926227][ C0] RBP: ffffffff8163d2e9 R08: ffffc900033ef070 R09: 0000000000000002 [ 253.926236][ C0] R10: fffff5200067de01 R11: 1ffff9200067ddff R12: ffffffff8e7ea2b4 [ 253.926246][ C0] R13: dffffc0000000000 R14: 00000000000063d2 R15: ffffc900033eeff0 [ 253.926256][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 253.926268][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 253.926279][ C0] CR2: 00007fd791537000 CR3: 000000002a4de000 CR4: 00000000003506f0 [ 253.926293][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 253.926301][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 253.926310][ C0] Call Trace: [ 253.926315][ C0] [ 253.926324][ C0] ? kvfree_call_rcu+0x10a/0x7c0 [ 253.926341][ C0] ? stack_trace_save+0xe0/0xe0 [ 253.926354][ C0] arch_stack_walk+0x10c/0x140 [ 253.926371][ C0] ? kvfree_call_rcu+0x10a/0x7c0 [ 253.926386][ C0] stack_trace_save+0x98/0xe0 [ 253.926398][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 253.926410][ C0] ? mark_lock+0x94/0x320 [ 253.926427][ C0] ? __lock_acquire+0x13ad/0x7c60 [ 253.926443][ C0] kasan_save_stack+0x35/0x60 [ 253.926457][ C0] ? kasan_save_stack+0x35/0x60 [ 253.926469][ C0] ? kasan_record_aux_stack+0xb8/0x100 [ 253.926484][ C0] ? kvfree_call_rcu+0x10a/0x7c0 [ 253.926516][ C0] kasan_record_aux_stack+0xb8/0x100 [ 253.926531][ C0] kvfree_call_rcu+0x10a/0x7c0 [ 253.926546][ C0] ? call_rcu+0x930/0x930 [ 253.926558][ C0] ? do_raw_spin_lock+0x11d/0x280 [ 253.926571][ C0] ? cmp_bss+0x27a/0xe00 [ 253.926587][ C0] cfg80211_update_known_bss+0x177/0x9d0 [ 253.926603][ C0] cfg80211_bss_update+0x15f/0x2250 [ 253.926762][ C0] cfg80211_inform_bss_frame_data+0x873/0x1f30 [ 253.926784][ C0] ? verify_lock_unused+0x140/0x140 [ 253.926803][ C0] ? cfg80211_parse_mbssid_data+0x3140/0x3140 [ 253.926824][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 253.926845][ C0] ieee80211_bss_info_update+0x6c2/0xaa0 [ 253.926864][ C0] ? ieee80211_rx_bss_put+0x60/0x60 [ 253.926883][ C0] ? ieee80211_mandatory_rates+0x1c8/0x230 [ 253.926900][ C0] ieee80211_ibss_rx_queued_mgmt+0x16d0/0x29c0 [ 253.926924][ C0] ? ieee80211_ibss_rx_no_sta+0x730/0x730 [ 253.926937][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 253.926953][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 253.926969][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 253.926983][ C0] ? _raw_spin_unlock+0x40/0x40 [ 253.926997][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 253.927016][ C0] ? kcov_remote_start+0xea/0x4a0 [ 253.927032][ C0] ieee80211_iface_work+0x70e/0xc60 [ 253.927049][ C0] process_one_work+0x863/0x1000 [ 253.927070][ C0] ? worker_detach_from_pool+0x240/0x240 [ 253.927084][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 253.927099][ C0] ? _raw_spin_lock_irq+0xab/0xe0 [ 253.927113][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 253.927129][ C0] ? wq_worker_running+0x97/0x170 [ 253.927143][ C0] worker_thread+0xaa8/0x12a0 [ 253.927158][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 253.927173][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 253.927187][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 253.927207][ C0] kthread+0x436/0x520 [ 253.927219][ C0] ? rcu_lock_release+0x20/0x20 [ 253.927232][ C0] ? kthread_blkcg+0xd0/0xd0 [ 253.927245][ C0] ret_from_fork+0x1f/0x30 [ 253.927265][ C0] [ 254.062398][T12557] REISERFS (device loop2): Using tea hash to sort names [ 254.069270][ C1] vkms_vblank_simulate: vblank timer overrun [ 254.083188][ T5218] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.087007][T12557] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 254.090872][ T5218] usb 6-1: Product: syz [ 254.103111][T12557] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 254.105879][ T5218] usb 6-1: Manufacturer: syz [ 254.274233][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 254.275359][ T5218] usb 6-1: SerialNumber: syz [ 254.280934][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.189-syzkaller #0 [ 254.280959][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 254.280969][ T27] Call Trace: [ 254.280977][ T27] [ 254.280986][ T27] dump_stack_lvl+0x168/0x230 [ 254.281015][ T27] ? show_regs_print_info+0x20/0x20 [ 254.281034][ T27] ? load_image+0x3b0/0x3b0 [ 254.281063][ T27] panic+0x2c9/0x7f0 [ 254.281080][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 254.281103][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 254.281122][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 254.281149][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 254.281176][ T27] watchdog+0xe4e/0xe50 [ 254.281205][ T27] kthread+0x436/0x520 [ 254.281222][ T27] ? hungtask_pm_notify+0x40/0x40 [ 254.281239][ T27] ? kthread_blkcg+0xd0/0xd0 [ 254.281258][ T27] ret_from_fork+0x1f/0x30 [ 254.281290][ T27] [ 254.281382][ T27] Kernel Offset: disabled [ 254.537152][ T27] Rebooting in 86400 seconds..