last executing test programs: 3.786526348s ago: executing program 4 (id=2246): syz_mount_image$exfat(&(0x7f00000024c0), &(0x7f0000001540)='./file0\x00', 0x20010080, &(0x7f0000000440)=ANY=[], 0xfe, 0x14ee, &(0x7f0000002a80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./bus\x00') 3.540454115s ago: executing program 4 (id=2249): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_reply={0x12, 0x0, 0x0, 0x7}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 3.307417361s ago: executing program 4 (id=2252): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0xc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000013da0000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) 3.222673177s ago: executing program 4 (id=2255): r0 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)={0x0, 0xd, 0x2, 'Vx'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 2.963434405s ago: executing program 2 (id=2260): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x6c, r1, 0x1, 0x170bd2b, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @mcast1, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 2.88628073s ago: executing program 2 (id=2262): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 2.795818267s ago: executing program 3 (id=2263): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000b40)={0x54, 0x1, 0x1, {0x0, 0x1}, {0x60, 0x2}, @period={0x59, 0x0, 0x8, 0x2, 0x448, {0x2, 0x8, 0x679c, 0x401}, 0x0, 0x0}}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 2.724081401s ago: executing program 3 (id=2265): memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000340)={{}, {0x0, 0x989680}}, 0x0) 2.671636676s ago: executing program 2 (id=2266): syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='noadinicb,partition=00000000000000000005,noadinicb,mode=00000000000000000003324,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c766f6c756d653d303030303030303030303030302c0000000000000000501cb5d7c12e5184d12ef849f01234cc0632d887ab83b9a499f253a549724d60457bb58a75adb74f3af03ad3ce885b137f28e47a314f31f232c3a9f530c68d8ba34bf01945e243cbc23403afab131b58d3a2aa64136e0a7c462f6b7050c665746acc89d02bf21ece3866519a7826f4e18fda118954b3c6e9738bfb06d6c52c8d07"], 0x1, 0x489, &(0x7f0000000580)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x58) 2.653404556s ago: executing program 3 (id=2268): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001a0001000000000000000a0080", @ANYBLOB='\x00\x00\n'], 0x38}}, 0x94) 2.593133791s ago: executing program 3 (id=2270): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 2.290987011s ago: executing program 2 (id=2272): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bdf7130870270c936a8d010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="001306000000ec19d02303f6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 1.73807167s ago: executing program 3 (id=2280): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x10, &(0x7f0000000040)={[{@commit={'commit', 0x3d, 0x1}}]}, 0x1, 0x559a, &(0x7f0000005680)="$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") fallocate(0xffffffffffffffff, 0x10, 0x4000, 0x8000) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=""/47) 1.537098694s ago: executing program 0 (id=2285): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x80000000, 0x25dfdbfb, {0xa, 0x0, 0x80}, [@RTA_PREFSRC={0x8, 0x7, @loopback}]}, 0x24}, 0x1, 0x0, 0x0, 0x10004004}, 0x20000050) 1.423734352s ago: executing program 1 (id=2286): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75716500"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 1.423450371s ago: executing program 0 (id=2287): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="4300000002"], 0x8) 1.376697185s ago: executing program 0 (id=2288): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000004000)={0xf, {"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", 0xfffffffffffffe59}}, 0xfa) 1.29812056s ago: executing program 0 (id=2289): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x6, 0x61f, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f00000001c0)={0x0, 0x110000002000003, 0x1, 0xa5d}) 1.251697073s ago: executing program 1 (id=2290): r0 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x0, 0xffffefff}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) sendto$inet6(r0, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) 1.186968268s ago: executing program 1 (id=2291): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x4f}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 939.951545ms ago: executing program 1 (id=2292): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000006bc0), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000006cc0)={0x0, 0x0, &(0x7f0000006c80)={&(0x7f0000000580)={0x30, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0x40) 775.803606ms ago: executing program 1 (id=2293): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="99742bbd7000fbdbdf2515001000140001800d000100758379accd797aa5ae"], 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000800) 666.514594ms ago: executing program 1 (id=2294): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 641.608006ms ago: executing program 0 (id=2295): syz_open_dev$sndpcmc(&(0x7f0000000080), 0xb, 0x2) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x40044160, 0x3) 455.715338ms ago: executing program 3 (id=2296): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="aabbcc", 0x3}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)="aabbcc", 0x3}], 0x1}}], 0x2, 0x0) 373.662324ms ago: executing program 4 (id=2297): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={0x14, 0x15, 0x301, 0x0, 0x25dfdbff, {0x1}}, 0x14}}, 0x4000000) 278.737141ms ago: executing program 4 (id=2298): r0 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040), 0x11000}], 0x1}, 0x80) 175.729387ms ago: executing program 0 (id=2299): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000003c0)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="010028bd7000fedbe3250c00000054000380080002000002000044000400d700981b00eb2e2466b3b726c12bfffe5f916f1716088a9129f9d2da6226169a994f49a227f189a859257dea5b53a46afb0f8effa4689efe631ffa5f5e03709c04000100180001801400020076657468305f746f5f626174616476"], 0x80}, 0x1, 0x0, 0x0, 0x881}, 0x8000) 91.343044ms ago: executing program 2 (id=2300): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000a40)='.pending_reads\x00', 0x842, 0x0) ioctl$FICLONE(r0, 0x40049409, r0) 0s ago: executing program 2 (id=2301): syz_mount_image$nilfs2(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x4018400, &(0x7f0000000000)=ANY=[], 0x1, 0xf94, &(0x7f00000011c0)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x4) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x184a438, &(0x7f0000000280)=ANY=[], 0xa, 0x0, &(0x7f0000000180)) kernel console output (not intermixed with test programs): add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 69.410423][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 69.468439][ T4522] udevd[4522]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 69.576714][ T4528] xt_connbytes: Forcing CT accounting to be enabled [ 69.622302][ T4496] udevd[4496]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 69.637400][ T4522] udevd[4522]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 69.665867][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 69.935226][ T4552] loop0: detected capacity change from 0 to 24 [ 70.011269][ T4552] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 70.064396][ T4552] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 70.069739][ T4562] validate_nla: 1 callbacks suppressed [ 70.069755][ T4562] netlink: 'syz.2.140': attribute type 21 has an invalid length. [ 70.109597][ T4564] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 70.115829][ T4562] netlink: 100 bytes leftover after parsing attributes in process `syz.2.140'. [ 70.447810][ T4582] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.150'. [ 70.590833][ T4597] netlink: 44 bytes leftover after parsing attributes in process `syz.2.158'. [ 70.708476][ T4599] IPv6: sit1: Disabled Multicast RS [ 70.724311][ T4601] No such timeout policy "syz1" [ 70.902101][ T4614] comedi comedi0: Minor 8 could not be opened [ 71.011113][ T4626] netlink: 132 bytes leftover after parsing attributes in process `syz.2.171'. [ 71.169210][ T4636] loop2: detected capacity change from 0 to 764 [ 71.220987][ T4642] device ip6tnl2 entered promiscuous mode [ 71.227508][ T4644] QAT: failed to copy from user. [ 71.262179][ T4636] Symlink component flag not implemented [ 71.300345][ T4636] Symlink component flag not implemented (105) [ 71.348208][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.368988][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.527402][ T4663] device xfrm0 entered promiscuous mode [ 71.686074][ T4675] netlink: 'syz.2.196': attribute type 10 has an invalid length. [ 71.718215][ T4675] netlink: 2 bytes leftover after parsing attributes in process `syz.2.196'. [ 71.782451][ T4675] device bond0 entered promiscuous mode [ 71.816845][ T4675] device bond_slave_0 entered promiscuous mode [ 71.894857][ T4675] device bond_slave_1 entered promiscuous mode [ 71.901461][ T4675] bridge0: port 3(bond0) entered blocking state [ 71.961103][ T4675] bridge0: port 3(bond0) entered disabled state [ 72.002107][ T4675] bridge0: port 3(bond0) entered blocking state [ 72.008942][ T4675] bridge0: port 3(bond0) entered forwarding state [ 72.229237][ T4706] netlink: 132 bytes leftover after parsing attributes in process `syz.0.211'. [ 72.791865][ T4748] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.231'. [ 72.841012][ T4748] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 73.321798][ T4775] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 73.384402][ T4775] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 73.517729][ T4733] loop3: detected capacity change from 0 to 32768 [ 73.548762][ T4787] netlink: 16 bytes leftover after parsing attributes in process `syz.1.251'. [ 73.589802][ T4790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.253'. [ 73.723302][ T4733] JBD2: Ignoring recovery information on journal [ 73.726218][ T4793] device bond1 entered promiscuous mode [ 73.791897][ T4793] 8021q: adding VLAN 0 to HW filter on device bond1 [ 73.802101][ T4799] netlink: 'syz.0.256': attribute type 13 has an invalid length. [ 73.879693][ T4805] netlink: 40 bytes leftover after parsing attributes in process `syz.0.259'. [ 73.964870][ T4733] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 74.180395][ T4825] netlink: 'syz.1.268': attribute type 2 has an invalid length. [ 74.210983][ T4825] netlink: 'syz.1.268': attribute type 3 has an invalid length. [ 74.231317][ T4192] ocfs2: Unmounting device (7,3) on (node local) [ 74.520047][ T4845] loop4: detected capacity change from 0 to 128 [ 74.646480][ T4845] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 74.652652][ T4850] loop1: detected capacity change from 0 to 4096 [ 74.687471][ T4845] FAT-fs (loop4): Filesystem has been set read-only [ 74.796280][ T4862] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 74.944369][ T4864] loop4: detected capacity change from 0 to 4096 [ 74.959928][ T4870] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 74.980121][ T4870] [U] J"—e:ÀÆ" [ 75.030449][ T4864] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 75.109991][ T4864] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 75.123870][ T4229] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 75.125723][ T4879] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 75.201927][ T4864] ntfs3: loop4: ino=21, "bus" The size of extended attributes must not exceed 64KiB [ 75.387693][ T4898] xt_l2tp: v2 sid > 0xffff: 262144 [ 75.413843][ T4229] usb 4-1: Using ep0 maxpacket: 16 [ 75.571027][ T4912] netlink: 'syz.0.309': attribute type 12 has an invalid length. [ 75.603917][ T4229] usb 4-1: unable to get BOS descriptor or descriptor too short [ 75.734047][ T4229] usb 4-1: config 7 has an invalid interface number: 192 but max is 0 [ 75.749568][ T4229] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 75.783855][ T4229] usb 4-1: config 7 has no interface number 0 [ 75.797171][ T4229] usb 4-1: config 7 interface 192 has no altsetting 0 [ 75.843846][ T1334] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 75.938528][ T4931] openvswitch: netlink: Actions may not be safe on all matching packets [ 76.004759][ T4229] usb 4-1: New USB device found, idVendor=0421, idProduct=0128, bcdDevice=a6.39 [ 76.020582][ T4935] __nla_validate_parse: 2 callbacks suppressed [ 76.020598][ T4935] netlink: 16 bytes leftover after parsing attributes in process `syz.1.320'. [ 76.024481][ T4229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.070184][ T4935] IPv6: sit1: Disabled Multicast RS [ 76.119520][ T4229] usb 4-1: Product: syz [ 76.124072][ T1334] usb 3-1: Using ep0 maxpacket: 32 [ 76.140298][ T4229] usb 4-1: Manufacturer: syz [ 76.164069][ T4229] usb 4-1: SerialNumber: syz [ 76.217533][ T4941] loop1: detected capacity change from 0 to 512 [ 76.254038][ T1334] usb 3-1: config 15 has an invalid interface number: 78 but max is 1 [ 76.272204][ T1334] usb 3-1: config 15 has an invalid interface number: 2 but max is 1 [ 76.290903][ T4941] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 76.303785][ T1334] usb 3-1: config 15 has no interface number 0 [ 76.314865][ T1334] usb 3-1: config 15 has no interface number 1 [ 76.329870][ T1334] usb 3-1: config 15 interface 78 has no altsetting 0 [ 76.357567][ T1334] usb 3-1: config 15 interface 2 has no altsetting 0 [ 76.415234][ T4956] capability: warning: `syz.0.329' uses deprecated v2 capabilities in a way that may be insecure [ 76.427371][ T4941] EXT4-fs (loop1): mounted filesystem without journal. Opts: nouid32,errors=remount-ro,user_xattr,nodiscard,dioread_nolock,. Quota mode: writeback. [ 76.430612][ T4954] netlink: 'syz.4.328': attribute type 21 has an invalid length. [ 76.451227][ T4954] netlink: 132 bytes leftover after parsing attributes in process `syz.4.328'. [ 76.473300][ T4941] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.527790][ T4229] usb 4-1: bad CDC descriptors [ 76.550021][ T4229] usb 4-1: bad CDC descriptors [ 76.570324][ T4229] usb 4-1: USB disconnect, device number 2 [ 76.588917][ T1334] usb 3-1: New USB device found, idVendor=413c, idProduct=81cf, bcdDevice=d4.09 [ 76.603781][ T1334] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.644630][ T1334] usb 3-1: Product: syz [ 76.648931][ T1334] usb 3-1: Manufacturer: syz [ 76.689906][ T1334] usb 3-1: SerialNumber: syz [ 76.778140][ T4972] netlink: 24 bytes leftover after parsing attributes in process `syz.1.336'. [ 76.862708][ T4979] binder: 4977:4979 ioctl c0306201 2000000001c0 returned -14 [ 76.968150][ T4986] netlink: 32 bytes leftover after parsing attributes in process `syz.0.342'. [ 76.999530][ T4987] x_tables: unsorted underflow at hook 3 [ 77.078079][ T1334] usb 3-1: selecting invalid altsetting 0 [ 77.084308][ T1334] usb 3-1: Could not set interface, error -22 [ 77.136586][ T1334] usb 3-1: USB disconnect, device number 2 [ 77.463780][ T4227] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 77.563109][ T5025] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.362'. [ 77.703810][ T4227] usb 4-1: Using ep0 maxpacket: 16 [ 77.825477][ T4227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.873641][ T4227] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 77.905159][ T5040] loop2: detected capacity change from 0 to 2048 [ 77.926164][ T4227] usb 4-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.00 [ 77.955986][ T4227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.008572][ T4227] usb 4-1: config 0 descriptor?? [ 78.067929][ T4227] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5 [ 78.083072][ T5049] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 78.273775][ T3545] bcm5974 4-1:0.0: could not read from device [ 78.292969][ T4227] usb 4-1: USB disconnect, device number 3 [ 78.589174][ T5073] xt_hashlimit: overflow, try lower: 3/0 [ 78.600871][ T5030] loop0: detected capacity change from 0 to 32768 [ 78.771424][ T5030] [ 78.771424][ T5030] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 78.771424][ T5030] [ 79.036392][ T5094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.397'. [ 79.083678][ T5094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.397'. [ 79.109584][ T4235] read_mapping_page failed! [ 79.120793][ T4235] ERROR: (device loop0): txCommit: [ 79.120793][ T4235] [ 79.146019][ T5101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.400'. [ 79.157067][ T4235] ERROR: (device loop0): remounting filesystem as read-only [ 79.172808][ T5101] openvswitch: netlink: Actions may not be safe on all matching packets [ 79.183086][ T4235] jfs_write_inode: jfs_commit_inode failed! [ 79.204607][ T4184] [ 79.204607][ T4184] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.204607][ T4184] [ 79.221943][ T4184] [ 79.221943][ T4184] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.221943][ T4184] [ 79.318728][ T5113] xt_hashlimit: max too large, truncated to 1048576 [ 79.515047][ T5125] netlink: 28 bytes leftover after parsing attributes in process `syz.3.412'. [ 79.553857][ T5125] netlink: 28 bytes leftover after parsing attributes in process `syz.3.412'. [ 79.573249][ T5127] netlink: 'syz.2.415': attribute type 1 has an invalid length. [ 80.609324][ T5209] loop1: detected capacity change from 0 to 512 [ 80.695589][ T5209] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback. [ 80.719146][ T5209] ext4 filesystem being mounted at /99/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 80.963930][ T5232] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 81.098906][ T5245] loop4: detected capacity change from 0 to 1024 [ 81.283722][ T5260] netlink: 'syz.2.476': attribute type 21 has an invalid length. [ 81.291978][ T5260] IPv6: NLM_F_CREATE should be specified when creating new route [ 81.313673][ T5260] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 81.321355][ T5260] IPv6: NLM_F_CREATE should be set when creating new route [ 81.328658][ T5260] IPv6: NLM_F_CREATE should be set when creating new route [ 81.336149][ T5260] IPv6: NLM_F_CREATE should be set when creating new route [ 81.361379][ T5264] __nla_validate_parse: 9 callbacks suppressed [ 81.361396][ T5264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.481'. [ 81.363415][ T5265] loop3: detected capacity change from 0 to 164 [ 81.555384][ T5276] loop0: detected capacity change from 0 to 64 [ 81.586077][ T23] cfg80211: failed to load regulatory.db [ 81.662738][ T5282] netlink: 'syz.3.485': attribute type 3 has an invalid length. [ 81.712819][ T5282] netlink: 224 bytes leftover after parsing attributes in process `syz.3.485'. [ 81.729358][ T5276] attempt to access beyond end of device [ 81.729358][ T5276] loop0: rw=2049, want=268435470, limit=64 [ 81.767681][ T5276] Buffer I/O error on dev loop0, logical block 134217734, lost async page write [ 81.896082][ T5295] netlink: 2 bytes leftover after parsing attributes in process `syz.4.494'. [ 81.994200][ T5298] xt_hashlimit: size too large, truncated to 1048576 [ 82.000944][ T5298] xt_hashlimit: overflow, try lower: 9223372036854775807/9 [ 82.141595][ T5308] loop0: detected capacity change from 0 to 1024 [ 82.258444][ T5319] netlink: 20 bytes leftover after parsing attributes in process `syz.3.507'. [ 82.273451][ T5321] loop4: detected capacity change from 0 to 512 [ 82.306182][ T5319] netlink: 'syz.3.507': attribute type 1 has an invalid length. [ 82.581921][ T5336] netlink: 20 bytes leftover after parsing attributes in process `syz.3.517'. [ 82.627057][ T5341] loop0: detected capacity change from 0 to 764 [ 82.745689][ T5345] (syz.1.520,5345,1):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 82.784012][ T5348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.521'. [ 82.806062][ T5345] (syz.1.520,5345,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 83.010233][ T5350] loop4: detected capacity change from 0 to 4096 [ 83.126452][ T5350] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 83.163711][ T5364] loop3: detected capacity change from 0 to 1024 [ 83.187914][ T5350] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 83.202826][ T5368] ERROR: device name not specified. [ 83.312667][ T5334] loop2: detected capacity change from 0 to 32768 [ 83.374861][ T5372] loop1: detected capacity change from 0 to 4096 [ 83.437194][ T5334] [ 83.437194][ T5334] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.437194][ T5334] [ 83.452857][ T5373] delete_channel: no stack [ 83.524022][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 83.639535][ T4195] [ 83.639535][ T4195] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.639535][ T4195] [ 83.709636][ T4195] [ 83.709636][ T4195] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.709636][ T4195] [ 83.720677][ T5388] netlink: 'syz.1.541': attribute type 1 has an invalid length. [ 83.745457][ T5388] netlink: 154788 bytes leftover after parsing attributes in process `syz.1.541'. [ 83.782658][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 83.866851][ T5393] netlink: 8 bytes leftover after parsing attributes in process `syz.4.542'. [ 83.923890][ T23] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 83.943981][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.973733][ T5396] program syz.1.543 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 84.017304][ T23] usb 1-1: config 0 has no interface number 0 [ 84.023478][ T23] usb 1-1: config 0 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 84.036860][ T5396] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 84.104301][ T5402] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.133719][ T23] usb 1-1: config 0 interface 1 has no altsetting 0 [ 84.344057][ T23] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 84.372750][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.413289][ T23] usb 1-1: Product: syz [ 84.441796][ T23] usb 1-1: Manufacturer: syz [ 84.466569][ T23] usb 1-1: SerialNumber: syz [ 84.486868][ T23] usb 1-1: config 0 descriptor?? [ 84.601430][ T23] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 84.644196][ T23] cx231xx 1-1:0.1: Not found matching IAD interface [ 84.860361][ T23] usb 1-1: USB disconnect, device number 2 [ 85.093902][ T3520] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 85.129011][ T5450] loop1: detected capacity change from 0 to 256 [ 85.143938][ T4229] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 85.262484][ T5450] FAT-fs (loop1): Directory bread(block 64) failed [ 85.275495][ T5450] FAT-fs (loop1): Directory bread(block 65) failed [ 85.282645][ T5450] FAT-fs (loop1): Directory bread(block 66) failed [ 85.292970][ T5450] FAT-fs (loop1): Directory bread(block 67) failed [ 85.301250][ T5450] FAT-fs (loop1): Directory bread(block 68) failed [ 85.308352][ T5450] FAT-fs (loop1): Directory bread(block 69) failed [ 85.315243][ T5450] FAT-fs (loop1): Directory bread(block 70) failed [ 85.321911][ T5450] FAT-fs (loop1): Directory bread(block 71) failed [ 85.329124][ T5450] FAT-fs (loop1): Directory bread(block 72) failed [ 85.335863][ T3520] usb 5-1: Using ep0 maxpacket: 16 [ 85.336225][ T5450] FAT-fs (loop1): Directory bread(block 73) failed [ 85.433919][ T4227] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 85.454084][ T3520] usb 5-1: config 0 has no interfaces? [ 85.553906][ T4229] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 85.562208][ T4229] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 85.582956][ T4229] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 85.594695][ T4229] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 85.611388][ T4229] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 12408, setting to 8 [ 85.613918][ T3520] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 85.623470][ T4229] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 85.664197][ T3520] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.665777][ T5468] usb usb8: usbfs: process 5468 (syz.0.578) did not claim interface 0 before use [ 85.674659][ T4227] usb 3-1: Using ep0 maxpacket: 32 [ 85.691266][ T5469] device geneve1 entered promiscuous mode [ 85.693010][ T3520] usb 5-1: Product: syz [ 85.702033][ T3520] usb 5-1: Manufacturer: syz [ 85.707350][ T3520] usb 5-1: SerialNumber: syz [ 85.713256][ T3520] r8152-cfgselector 5-1: config 0 descriptor?? [ 85.824009][ T4227] usb 3-1: config 4 has an invalid interface number: 128 but max is 0 [ 85.832600][ T4227] usb 3-1: config 4 has no interface number 0 [ 85.845386][ T4227] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.861596][ T4227] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.879789][ T4227] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 85.905794][ T4227] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.943927][ T4229] usb 4-1: string descriptor 0 read error: -22 [ 85.950246][ T4229] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 85.955194][ T4227] hub 3-1:4.128: USB hub found [ 85.974701][ T3520] usbip-host 5-1: 5-1 is not in match_busid table... skip! [ 85.982196][ T4229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.008502][ T4229] usb 4-1: config 0 descriptor?? [ 86.055454][ T4229] hub 4-1:0.0: bad descriptor, ignoring hub [ 86.067008][ T4229] hub: probe of 4-1:0.0 failed with error -5 [ 86.080734][ T4235] usb 5-1: config 0 descriptor?? [ 86.163882][ T4227] hub 3-1:4.128: 2 ports detected [ 86.169181][ T4227] hub 3-1:4.128: Using single TT (err -22) [ 86.185369][ T5486] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 86.193731][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 86.233427][ T4230] usb 5-1: USB disconnect, device number 2 [ 86.239048][ T5486] process 'syz.1.587' launched '/dev/fd/3/./file0' with NULL argv: empty string added [ 86.252035][ T4235] usb 5-1: can't set config #0, error -71 [ 86.384091][ T4227] hub 3-1:4.128: hub_hub_status failed (err = -71) [ 86.390957][ T4227] hub 3-1:4.128: config failed, can't get hub status (err -71) [ 86.435474][ T4227] usb 3-1: USB disconnect, device number 3 [ 86.490774][ T23] usb 4-1: USB disconnect, device number 4 [ 86.595277][ T5498] set_capacity_and_notify: 2 callbacks suppressed [ 86.595287][ T5498] loop1: detected capacity change from 0 to 2048 [ 86.643893][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.654241][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 86.664522][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 86.675533][ T7] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 86.688627][ T7] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 86.697797][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.724650][ T7] usb 1-1: config 0 descriptor?? [ 86.732368][ T5498] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 86.909331][ T5506] netlink: 'syz.3.598': attribute type 3 has an invalid length. [ 87.010657][ T7] usb 1-1: USB disconnect, device number 3 [ 87.263921][ T4227] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 87.367776][ T5536] openvswitch: netlink: Actions may not be safe on all matching packets [ 87.417763][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 87.417776][ T26] audit: type=1400 audit(1775602877.230:2): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A21D01A0B978D2F2F262D2A83D1 pid=5537 comm="syz.3.613" [ 87.493625][ T4230] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 87.505738][ T5544] netlink: 'syz.3.615': attribute type 19 has an invalid length. [ 87.514018][ T4227] usb 3-1: Using ep0 maxpacket: 16 [ 87.520030][ T5544] netlink: 5 bytes leftover after parsing attributes in process `syz.3.615'. [ 87.644001][ T4227] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.653323][ T5553] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 87.673628][ T4227] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 87.687269][ T5553] CIFS mount error: No usable UNC path provided in device string! [ 87.687269][ T5553] [ 87.719645][ T5553] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 87.749486][ T4230] usb 5-1: Using ep0 maxpacket: 32 [ 87.870257][ T5565] netlink: 'syz.0.627': attribute type 12 has an invalid length. [ 87.878549][ T4227] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 87.887923][ T4230] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 87.904382][ T4230] usb 5-1: config 0 has no interface number 0 [ 87.913772][ T4227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.928162][ T5565] netlink: 'syz.0.627': attribute type 12 has an invalid length. [ 87.943832][ T4227] usb 3-1: Product: syz [ 87.948244][ T4227] usb 3-1: Manufacturer: syz [ 87.952887][ T4227] usb 3-1: SerialNumber: syz [ 87.963865][ T5565] netlink: 'syz.0.627': attribute type 12 has an invalid length. [ 87.976097][ T4227] r8152-cfgselector 3-1: config 0 descriptor?? [ 88.084075][ T4230] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 88.109076][ T4230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.142639][ T4230] usb 5-1: Product: syz [ 88.157194][ T4230] usb 5-1: Manufacturer: syz [ 88.161847][ T4230] usb 5-1: SerialNumber: syz [ 88.182336][ T4230] usb 5-1: config 0 descriptor?? [ 88.231520][ T5588] rtc_cmos 00:00: Alarms can be up to one day in the future [ 88.241389][ T4227] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 88.250798][ T4230] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 88.271196][ T4230] usb 5-1: selecting invalid altsetting 1 [ 88.282810][ T4230] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 88.323432][ T4230] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 88.356290][ T4230] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 88.380781][ T4230] usb 5-1: media controller created [ 88.400588][ T4230] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 88.472578][ T4231] usb 3-1: USB disconnect, device number 4 [ 88.489469][ T5598] netlink: 16 bytes leftover after parsing attributes in process `syz.1.641'. [ 88.494545][ T4230] usb 5-1: DVB: registering adapter 1 frontend 0 (Zarlink ZL10353 DVB-T)... [ 88.508904][ T5598] netlink: 40 bytes leftover after parsing attributes in process `syz.1.641'. [ 88.522167][ T4230] dvbdev: dvb_create_media_entity: media entity 'Zarlink ZL10353 DVB-T' registered. [ 88.567431][ T5603] netlink: 'syz.3.643': attribute type 10 has an invalid length. [ 88.593786][ T5603] openvswitch: netlink: Flow key attr not present in new flow. [ 88.620796][ T4230] DVB: Unable to find symbol mxl5005s_attach() [ 88.679286][ T5609] netlink: 'syz.0.646': attribute type 1 has an invalid length. [ 88.692422][ T5609] netlink: 220 bytes leftover after parsing attributes in process `syz.0.646'. [ 88.713842][ T4230] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 88.760392][ T5613] ieee802154 phy0 wpan0: encryption failed: -22 [ 88.829446][ T4230] usb 5-1: USB disconnect, device number 3 [ 88.892561][ T5619] sctp: [Deprecated]: syz.3.651 (pid 5619) Use of int in max_burst socket option. [ 88.892561][ T5619] Use struct sctp_assoc_value instead [ 89.080689][ T5631] loop2: detected capacity change from 0 to 256 [ 89.145047][ T5629] loop0: detected capacity change from 0 to 4096 [ 89.220323][ T5631] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 89.233286][ T5629] ntfs3: loop0: Failed to load $Extend. [ 89.293364][ T5629] ntfs3: loop0: ino=5, "/" directory corrupted [ 89.319808][ T5631] befs: Unrecognized mount option "umask=00000000000000000000005" or missing value [ 89.434306][ T5631] befs: (nullb0): cannot parse mount options [ 89.961962][ T5687] loop0: detected capacity change from 0 to 1764 [ 90.052392][ T5687] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 90.175311][ T5702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.693'. [ 90.628156][ T5742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.713'. [ 90.881031][ T5752] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.945817][ T5763] program syz.2.722 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 90.949498][ T5752] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.481864][ T5793] netlink: 'syz.0.738': attribute type 15 has an invalid length. [ 91.601224][ T5804] netlink: 16 bytes leftover after parsing attributes in process `syz.1.742'. [ 91.719988][ T7] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 91.834276][ T5820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.749'. [ 92.125769][ T5835] device xfrm0 entered promiscuous mode [ 92.263775][ T5846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.760'. [ 92.324187][ T7] usb 5-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 92.359309][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.383618][ T7] usb 5-1: Product: syz [ 92.388029][ T7] usb 5-1: Manufacturer: syz [ 92.392644][ T7] usb 5-1: SerialNumber: syz [ 92.430806][ T5857] device bond1 entered promiscuous mode [ 92.437466][ T5857] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.690190][ T5873] netlink: 132 bytes leftover after parsing attributes in process `syz.3.774'. [ 92.794082][ T7] usb 5-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 92.845288][ T7] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 92.865864][ T5885] device ip6tnl1 entered promiscuous mode [ 92.932036][ T7] usb 5-1: USB disconnect, device number 4 [ 93.098693][ T5897] loop0: detected capacity change from 0 to 1764 [ 93.164723][ T5897] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 93.205003][ T5905] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 93.211243][ T5905] [U] J"—e:ÀÆ" [ 93.295096][ T4522] udevd[4522]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 93.309906][ T5913] loop3: detected capacity change from 0 to 164 [ 93.360746][ T5917] siw: device registration error -23 [ 93.675112][ T5944] loop4: detected capacity change from 0 to 64 [ 93.798474][ T5944] minix_free_block (loop4:21): bit already cleared [ 93.822065][ T5944] Trying to free block not in datazone [ 93.880924][ T5960] No such timeout policy "syz1" [ 94.038512][ T150] block nbd2: Attempted send on invalid socket [ 94.046217][ T150] blk_update_request: I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 94.059567][ T263] block nbd2: Attempted send on invalid socket [ 94.065960][ T263] blk_update_request: I/O error, dev nbd2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 94.306302][ T5994] ip6t_srh: unknown srh invflags 4000 [ 94.475207][ T6010] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.842'. [ 94.949873][ T6050] loop4: detected capacity change from 0 to 64 [ 94.953406][ T6049] netlink: 5 bytes leftover after parsing attributes in process `syz.3.862'. [ 95.020302][ T6052] netlink: 28 bytes leftover after parsing attributes in process `syz.2.875'. [ 95.046455][ T6050] attempt to access beyond end of device [ 95.046455][ T6050] loop4: rw=0, want=65536, limit=64 [ 95.050571][ T6055] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.865'. [ 95.067383][ T6052] netlink: 28 bytes leftover after parsing attributes in process `syz.2.875'. [ 95.076862][ T6050] Buffer I/O error on dev loop4, logical block 32767, async page read [ 95.088081][ T6050] attempt to access beyond end of device [ 95.088081][ T6050] loop4: rw=0, want=65536, limit=64 [ 95.100178][ T6052] netlink: 28 bytes leftover after parsing attributes in process `syz.2.875'. [ 95.118441][ T6052] netlink: 28 bytes leftover after parsing attributes in process `syz.2.875'. [ 95.127655][ T1334] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 95.135476][ T6050] Buffer I/O error on dev loop4, logical block 32767, async page read [ 95.144467][ T6052] netlink: 28 bytes leftover after parsing attributes in process `syz.2.875'. [ 95.155751][ T6052] netlink: 28 bytes leftover after parsing attributes in process `syz.2.875'. [ 95.386669][ T6068] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 95.410503][ T1334] usb 1-1: Using ep0 maxpacket: 8 [ 95.581854][ T6082] netlink: 'syz.4.879': attribute type 1 has an invalid length. [ 95.700401][ T6090] loop2: detected capacity change from 0 to 512 [ 95.774060][ T1334] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 95.799856][ T1334] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 95.809547][ T1334] usb 1-1: Product: syz [ 95.814060][ T1334] usb 1-1: Manufacturer: syz [ 95.820290][ T1334] usb 1-1: SerialNumber: syz [ 95.850120][ T1334] usb 1-1: config 0 descriptor?? [ 95.859805][ T6090] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 95.879334][ T6090] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.902844][ T6107] loop1: detected capacity change from 0 to 4096 [ 95.906019][ T1334] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 95.962420][ T6111] CIFS mount error: No usable UNC path provided in device string! [ 95.962420][ T6111] [ 95.975111][ T6111] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 96.036145][ T6112] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 96.073127][ T6107] attempt to access beyond end of device [ 96.073127][ T6107] loop1: rw=524288, want=2097328, limit=4096 [ 96.177566][ T6107] attempt to access beyond end of device [ 96.177566][ T6107] loop1: rw=0, want=2097328, limit=4096 [ 96.253035][ T26] audit: type=1800 audit(1775602886.060:3): pid=6107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.889" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 96.363783][ T1334] gspca_zc3xx: reg_r err -71 [ 96.368486][ T1334] gspca_zc3xx: probe of 1-1:0.0 failed with error -71 [ 96.431535][ T1334] usb 1-1: USB disconnect, device number 4 [ 96.968518][ T6148] dlm: no locking on control device [ 97.089119][ T6155] loop1: detected capacity change from 0 to 512 [ 97.145083][ T6152] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.192476][ T6152] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.251456][ T6155] EXT4-fs (loop1): 1 truncate cleaned up [ 97.257205][ T6155] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,stripe=0x000000000000030c,jqfmt=vfsv1,nojournal_checksum,jqfmt=vfsv1,usrjquota=,,errors=continue. Quota mode: none. [ 97.761984][ T6185] loop4: detected capacity change from 0 to 512 [ 97.794074][ T4227] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 97.841290][ T6185] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 97.853886][ T6190] netlink: 'syz.2.927': attribute type 10 has an invalid length. [ 97.911115][ T6185] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.023923][ T6156] loop3: detected capacity change from 0 to 40427 [ 98.038200][ T6195] loop1: detected capacity change from 0 to 512 [ 98.044686][ T4227] usb 1-1: Using ep0 maxpacket: 32 [ 98.093336][ T6156] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 98.112450][ T6156] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 98.121181][ T6195] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 98.163849][ T4227] usb 1-1: config 76 has an invalid descriptor of length 0, skipping remainder of the config [ 98.175570][ T6195] EXT4-fs (loop1): Ignoring removed orlov option [ 98.200045][ T6156] F2FS-fs (loop3): invalid crc value [ 98.227110][ T6195] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,jqfmt=vfsv1,noquota,orlov,,errors=continue. Quota mode: writeback. [ 98.248578][ T6195] ext4 filesystem being mounted at /232/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 98.305424][ T6156] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 98.343842][ T4227] usb 1-1: New USB device found, idVendor=069a, idProduct=0001, bcdDevice=51.c5 [ 98.363146][ T4227] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.383397][ T4227] usb 1-1: Product: syz [ 98.387793][ T4227] usb 1-1: Manufacturer: syz [ 98.392827][ T4227] usb 1-1: SerialNumber: syz [ 98.440420][ T6213] [U] ^C [ 98.448314][ T4227] pwc: Askey VC010 type 1 USB webcam detected. [ 98.549987][ T6156] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 98.568447][ T6156] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 98.600951][ T6156] fscrypt (loop3, inode 3): Error -61 getting encryption context [ 98.693699][ T4227] pwc: send_video_command error -71 [ 98.698942][ T4227] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 98.743270][ T4227] Philips webcam: probe of 1-1:76.0 failed with error -71 [ 98.746353][ T6230] __nla_validate_parse: 47 callbacks suppressed [ 98.746369][ T6230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.944'. [ 98.780246][ T6230] netlink: 6 bytes leftover after parsing attributes in process `syz.2.944'. [ 98.802624][ T4227] usb 1-1: USB disconnect, device number 5 [ 98.812858][ T6232] loop4: detected capacity change from 0 to 64 [ 99.104772][ T6244] netlink: 32 bytes leftover after parsing attributes in process `syz.1.953'. [ 99.140650][ T6244] netlink: 32 bytes leftover after parsing attributes in process `syz.1.953'. [ 99.172680][ T6244] netlink: 20 bytes leftover after parsing attributes in process `syz.1.953'. [ 99.348226][ T6252] loop4: detected capacity change from 0 to 2048 [ 99.390264][ T6252] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 99.470570][ T6262] netlink: 48 bytes leftover after parsing attributes in process `syz.2.960'. [ 99.565631][ T6268] loop1: detected capacity change from 0 to 8 [ 99.641351][ T6274] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.720364][ T6277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.751758][ T6277] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.773367][ T6277] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 99.863507][ T6290] loop0: detected capacity change from 0 to 8 [ 99.924392][ T6290] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 100.000168][ T6300] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 100.183460][ T6317] netlink: 92 bytes leftover after parsing attributes in process `syz.3.986'. [ 100.239506][ T6324] x_tables: ip_tables: osf match: only valid for protocol 6 [ 100.417717][ T6327] device bridge1 left promiscuous mode [ 100.464881][ T6327] device ip6tnl2 left promiscuous mode [ 100.968258][ T6374] device bridge0 entered promiscuous mode [ 101.008397][ T6379] loop4: detected capacity change from 0 to 512 [ 101.014999][ T6374] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 101.040671][ T6380] loop1: detected capacity change from 0 to 2048 [ 101.112353][ T6380] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 101.345951][ T4231] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 101.439453][ T6403] xt_CT: No such helper "pptp" [ 101.604793][ T6416] loop2: detected capacity change from 0 to 1024 [ 101.634032][ T6416] EXT4-fs (loop2): inline encryption not supported [ 101.723856][ T4231] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.739009][ T6416] EXT4-fs error (device loop2): ext4_free_blocks:6232: comm syz.2.1034: Freeing blocks not in datazone - block = 0, count = 4096 [ 101.743894][ T4231] usb 1-1: config 0 interface 0 has no altsetting 0 [ 101.817116][ T6416] EXT4-fs (loop2): Remounting filesystem read-only [ 101.832059][ T6416] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.1034: Invalid inode bitmap blk 0 in block_group 0 [ 101.880008][ T6416] EXT4-fs (loop2): Remounting filesystem read-only [ 101.916852][ T6416] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 101.929220][ T4231] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 101.949176][ T4231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.996144][ T6416] EXT4-fs (loop2): Remounting filesystem read-only [ 102.018825][ T4231] usb 1-1: Product: syz [ 102.023032][ T4231] usb 1-1: Manufacturer: syz [ 102.038067][ T6416] EXT4-fs (loop2): 1 orphan inode deleted [ 102.079212][ T4231] usb 1-1: SerialNumber: syz [ 102.085370][ T6416] EXT4-fs (loop2): mounted filesystem without journal. Opts: €; noblock_validity,nolazytime,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,inlinecrypt,errors=remount-ro,. Quota mode: writeback. [ 102.117724][ T4231] usb 1-1: config 0 descriptor?? [ 102.178512][ T4231] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 102.234542][ T4231] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 102.284020][ T6416] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 102.318963][ T4231] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 102.351742][ T4231] usb 1-1: media controller created [ 102.432185][ T4231] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 102.454984][ T6443] netlink: 'syz.4.1046': attribute type 2 has an invalid length. [ 102.619465][ T4231] DVB: Unable to find symbol tda10046_attach() [ 102.634574][ T4231] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 102.668855][ T4231] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 102.679167][ T6454] loop4: detected capacity change from 0 to 512 [ 102.776750][ T6462] nft_compat: unsupported protocol 5 [ 102.806150][ T6454] EXT4-fs (loop4): mounted filesystem without journal. Opts: nolazytime,,errors=continue. Quota mode: writeback. [ 102.838904][ T6454] ext4 filesystem being mounted at /203/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 102.860904][ T6454] Quota error (device loop4): find_tree_dqentry: Getting block too big (67108869 >= 6) [ 102.874225][ T6454] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 102.888829][ T6454] EXT4-fs error (device loop4): ext4_acquire_dquot:6234: comm syz.4.1052: Failed to acquire dquot type 0 [ 102.915999][ T6468] xt_CONNSECMARK: invalid mode: 0 [ 102.963787][ T4231] dvb_usb_m920x: probe of 1-1:0.0 failed with error -71 [ 103.001552][ T4231] usb 1-1: USB disconnect, device number 6 [ 103.216373][ T6484] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 103.243882][ T6484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 103.288317][ T6484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 103.335247][ T6484] device xfrm0 left promiscuous mode [ 103.768218][ T6504] netlink: 'syz.0.1075': attribute type 5 has an invalid length. [ 104.324912][ T6496] loop1: detected capacity change from 0 to 32768 [ 104.386928][ T6496] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1071 (6496) [ 104.473604][ T7] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 104.547834][ T6496] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 104.594138][ T6496] BTRFS info (device loop1): using free space tree [ 104.600693][ T6496] BTRFS info (device loop1): has skinny extents [ 104.850411][ T6563] nftables ruleset with unbound chain [ 104.871011][ T6548] loop0: detected capacity change from 0 to 4096 [ 104.919368][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.003848][ T6496] BTRFS info (device loop1): enabling ssd optimizations [ 105.143868][ T7] usb 4-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 105.163719][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.223601][ T7] usb 4-1: Product: syz [ 105.243608][ T7] usb 4-1: Manufacturer: syz [ 105.250980][ T7] usb 4-1: SerialNumber: syz [ 105.304820][ T7] usb 4-1: config 0 descriptor?? [ 105.595624][ T7] cdc_subset: probe of 4-1:0.0 failed with error -22 [ 105.608913][ T6590] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 105.625327][ T6590] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 106.145948][ T4968] usb 4-1: USB disconnect, device number 5 [ 106.266020][ T6621] loop1: detected capacity change from 0 to 128 [ 106.278152][ T6622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1118'. [ 106.575362][ T6626] loop2: detected capacity change from 0 to 2048 [ 106.619180][ T6632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1123'. [ 106.663731][ T6632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1123'. [ 106.723696][ T6607] loop4: detected capacity change from 0 to 32768 [ 106.794224][ T6607] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1113 (6607) [ 106.865631][ T6607] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 106.883978][ T4231] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 106.898361][ T6607] BTRFS info (device loop4): using free space tree [ 106.953825][ T6607] BTRFS info (device loop4): has skinny extents [ 106.957031][ T6639] netlink: 'syz.2.1127': attribute type 3 has an invalid length. [ 106.984664][ T6641] tmpfs: Bad value for 'mpol' [ 106.993913][ T6639] netlink: 'syz.2.1127': attribute type 3 has an invalid length. [ 107.029949][ T6617] loop0: detected capacity change from 0 to 32768 [ 107.207281][ T6653] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1128'. [ 107.353804][ T6607] BTRFS info (device loop4): enabling ssd optimizations [ 107.363883][ T4231] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 107.383269][ T4231] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 107.403505][ T4231] usb 4-1: Product: syz [ 107.408062][ T4231] usb 4-1: SerialNumber: syz [ 107.430776][ T4231] usb 4-1: config 0 descriptor?? [ 107.818732][ T6688] loop2: detected capacity change from 0 to 8 [ 107.965886][ T4231] usb 4-1: USB disconnect, device number 6 [ 108.315558][ T6711] loop4: detected capacity change from 0 to 64 [ 108.502901][ T6722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1155'. [ 108.536416][ T6727] netlink: 'syz.1.1156': attribute type 1 has an invalid length. [ 108.549066][ T6728] loop0: detected capacity change from 0 to 2048 [ 108.600452][ T6728] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 108.602626][ T6728] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 109.140562][ T26] audit: type=1326 audit(1775602898.950:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6772 comm="syz.0.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e45cf819 code=0x7ffc0000 [ 109.213829][ T26] audit: type=1326 audit(1775602898.980:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6772 comm="syz.0.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f58e45cf819 code=0x7ffc0000 [ 109.309705][ T26] audit: type=1326 audit(1775602898.980:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6772 comm="syz.0.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e45cf819 code=0x7ffc0000 [ 109.394397][ T26] audit: type=1326 audit(1775602898.980:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6772 comm="syz.0.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e45cf819 code=0x7ffc0000 [ 109.579058][ T4227] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 109.985902][ T4227] usb 5-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 110.024420][ T4227] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 29399, setting to 8 [ 110.071225][ T4227] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 110.102365][ T4227] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.163940][ T6788] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 110.185348][ T6823] loop2: detected capacity change from 0 to 4096 [ 110.214217][ T6823] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 110.293734][ T6823] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 110.355205][ T6808] loop1: detected capacity change from 0 to 32768 [ 110.438789][ T6808] [ 110.438789][ T6808] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 110.438789][ T6808] [ 110.444086][ T4227] usb 5-1: string descriptor 0 read error: -71 [ 110.572108][ T4227] usb 5-1: USB disconnect, device number 5 [ 110.664228][ T4185] [ 110.664228][ T4185] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 110.664228][ T4185] [ 110.668158][ T6843] netlink: 'syz.0.1213': attribute type 21 has an invalid length. [ 110.701771][ T6843] IPv6: NLM_F_CREATE should be specified when creating new route [ 110.709147][ T4185] [ 110.709147][ T4185] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 110.709147][ T4185] [ 110.713428][ T6843] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 110.727273][ T6843] IPv6: NLM_F_CREATE should be set when creating new route [ 110.734558][ T6843] IPv6: NLM_F_CREATE should be set when creating new route [ 110.741789][ T6843] IPv6: NLM_F_CREATE should be set when creating new route [ 110.867316][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 111.130331][ T6864] netlink: 'syz.0.1222': attribute type 10 has an invalid length. [ 111.180729][ T6864] device macvlan0 entered promiscuous mode [ 111.248114][ T6864] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 111.258318][ T6870] ALSA: mixer_oss: invalid OSS volume 'u' [ 111.545501][ T6885] loop1: detected capacity change from 0 to 2048 [ 111.577211][ T6888] loop3: detected capacity change from 0 to 64 [ 111.621257][ T6885] Alternate GPT is invalid, using primary GPT. [ 111.642838][ T6885] loop1: p1 p2 p3 [ 111.909896][ T4522] udevd[4522]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 111.936824][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 111.949676][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 112.085785][ T6872] loop4: detected capacity change from 0 to 32768 [ 112.134366][ T6872] [ 112.134366][ T6872] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 112.134366][ T6872] [ 112.217603][ T4186] [ 112.217603][ T4186] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 112.217603][ T4186] [ 112.228647][ T4186] [ 112.228647][ T4186] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 112.228647][ T4186] [ 112.282250][ T6911] loop3: detected capacity change from 0 to 2048 [ 112.431737][ T6911] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 112.624669][ T6926] loop1: detected capacity change from 0 to 16 [ 112.705972][ T6932] netlink: 'syz.2.1257': attribute type 8 has an invalid length. [ 112.724569][ T6926] erofs: (device loop1): mounted with root inode @ nid 36. [ 112.748171][ T6932] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1257'. [ 112.974192][ T6908] loop0: detected capacity change from 0 to 32768 [ 113.051154][ T6939] loop1: detected capacity change from 0 to 4096 [ 113.082278][ T6908] [ 113.082278][ T6908] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 113.082278][ T6908] [ 113.231203][ T6939] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 113.244358][ T6939] ntfs3: loop1: Failed to load $Extend. [ 113.355772][ T4184] [ 113.355772][ T4184] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 113.355772][ T4184] [ 113.372430][ T4184] [ 113.372430][ T4184] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 113.372430][ T4184] [ 113.783690][ T3520] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 113.844003][ T23] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 113.909921][ T6945] loop3: detected capacity change from 0 to 32768 [ 113.948963][ T6945] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1263 (6945) [ 114.016459][ T6945] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 114.036670][ T6945] BTRFS info (device loop3): using free space tree [ 114.048033][ T6945] BTRFS info (device loop3): has skinny extents [ 114.163924][ T3520] usb 1-1: config 0 has an invalid interface number: 104 but max is 1 [ 114.181150][ T3520] usb 1-1: config 0 has an invalid interface number: 104 but max is 1 [ 114.203874][ T3520] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 114.205320][ T6945] BTRFS info (device loop3): enabling ssd optimizations [ 114.213205][ T3520] usb 1-1: config 0 has no interface number 0 [ 114.231708][ T23] usb 2-1: config 0 has an invalid interface number: 172 but max is 0 [ 114.244022][ T23] usb 2-1: config 0 has no interface number 0 [ 114.252041][ T3520] usb 1-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid maxpacket 12288, setting to 64 [ 114.263595][ T23] usb 2-1: too many endpoints for config 0 interface 172 altsetting 255: 247, using maximum allowed: 30 [ 114.275127][ T3520] usb 1-1: config 0 interface 104 has no altsetting 1 [ 114.282617][ T23] usb 2-1: config 0 interface 172 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 247 [ 114.296936][ T23] usb 2-1: config 0 interface 172 has no altsetting 0 [ 114.405595][ T6996] netlink: 'syz.4.1279': attribute type 8 has an invalid length. [ 114.423288][ T6996] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1279'. [ 114.453867][ T3520] usb 1-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 114.464152][ T23] usb 2-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=d7.23 [ 114.473362][ T3520] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.485936][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.502256][ T3520] usb 1-1: Product: syz [ 114.506988][ T23] usb 2-1: Product: syz [ 114.511166][ T23] usb 2-1: Manufacturer: syz [ 114.519517][ T3520] usb 1-1: Manufacturer: syz [ 114.524799][ T3520] usb 1-1: SerialNumber: syz [ 114.529631][ T23] usb 2-1: SerialNumber: syz [ 114.536853][ T3520] usb 1-1: config 0 descriptor?? [ 114.551469][ T23] usb 2-1: config 0 descriptor?? [ 114.602728][ T3520] asix: probe of 1-1:0.104 failed with error -22 [ 114.638880][ T7001] erofs: (device loop4): mounted with root inode @ nid 36. [ 114.807058][ T7017] netlink: 'syz.4.1282': attribute type 21 has an invalid length. [ 114.844833][ T23] ftdi_sio 2-1:0.172: FTDI USB Serial Device converter detected [ 114.865802][ T23] usb 2-1: Detected FT-X [ 114.879993][ T6613] usb 1-1: USB disconnect, device number 7 [ 114.883814][ T23] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 114.925487][ T23] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 114.983751][ T23] ftdi_sio 2-1:0.172: GPIO initialisation failed: -71 [ 115.001996][ T23] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 115.046621][ T23] usb 2-1: USB disconnect, device number 2 [ 115.069562][ T23] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 115.104818][ T23] ftdi_sio 2-1:0.172: device disconnected [ 115.397199][ T7045] set_capacity_and_notify: 1 callbacks suppressed [ 115.397214][ T7045] loop3: detected capacity change from 0 to 4096 [ 115.555033][ T7045] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 115.582414][ T7045] ntfs3: loop3: Failed to load $Extend. [ 115.800201][ T7063] netlink: 'syz.1.1309': attribute type 10 has an invalid length. [ 115.811905][ T7067] loop2: detected capacity change from 0 to 256 [ 115.823621][ T7063] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1309'. [ 115.863951][ T7063] device bond0 entered promiscuous mode [ 115.869967][ T7063] device bond_slave_0 entered promiscuous mode [ 115.882016][ T7063] device bond_slave_1 entered promiscuous mode [ 115.903191][ T7063] bridge0: port 3(bond0) entered blocking state [ 115.949633][ T7063] bridge0: port 3(bond0) entered disabled state [ 115.980463][ T7063] bridge0: port 3(bond0) entered blocking state [ 115.986917][ T7063] bridge0: port 3(bond0) entered forwarding state [ 116.343691][ T7011] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 116.372221][ T7091] loop4: detected capacity change from 0 to 4096 [ 116.498293][ T7091] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 116.543823][ T7091] ntfs3: loop4: Failed to load $Extend. [ 116.581477][ T7069] loop0: detected capacity change from 0 to 32768 [ 116.658651][ T7106] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1327'. [ 116.703946][ T7011] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.775620][ T7069] JBD2: Ignoring recovery information on journal [ 116.823839][ T7011] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.849992][ T7116] netlink: 'syz.4.1330': attribute type 10 has an invalid length. [ 116.860007][ T7116] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1330'. [ 116.871286][ T7116] device bond0 entered promiscuous mode [ 116.897271][ T7116] device bond_slave_0 entered promiscuous mode [ 116.913747][ T7116] device bond_slave_1 entered promiscuous mode [ 116.914401][ T7011] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.939768][ T7116] bridge0: port 1(bond0) entered blocking state [ 116.957053][ T7116] bridge0: port 1(bond0) entered disabled state [ 116.986450][ T7069] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 116.992894][ T7116] bridge0: port 1(bond0) entered blocking state [ 117.001823][ T7116] bridge0: port 1(bond0) entered forwarding state [ 117.093971][ T7011] usb 4-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 117.103958][ T7011] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.111982][ T7011] usb 4-1: Product: syz [ 117.119541][ T4184] ocfs2: Unmounting device (7,0) on (node local) [ 117.125227][ T7011] usb 4-1: Manufacturer: syz [ 117.152259][ T7011] usb 4-1: SerialNumber: syz [ 117.173131][ T7011] usb 4-1: config 0 descriptor?? [ 117.255248][ T7011] ti_usb_3410_5052 4-1:0.0: required endpoints missing [ 117.303814][ T6689] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 117.466020][ T6613] usb 4-1: USB disconnect, device number 7 [ 117.530790][ T7147] netlink: 34 bytes leftover after parsing attributes in process `syz.2.1346'. [ 117.575577][ T7151] netlink: 'syz.0.1348': attribute type 10 has an invalid length. [ 117.583429][ T7151] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1348'. [ 117.602588][ T7151] device bond0 entered promiscuous mode [ 117.614848][ T7151] device bond_slave_0 entered promiscuous mode [ 117.621176][ T7151] device bond_slave_1 entered promiscuous mode [ 117.649077][ T7151] bridge0: port 3(bond0) entered blocking state [ 117.655874][ T7151] bridge0: port 3(bond0) entered disabled state [ 117.733965][ T6689] usb 2-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 117.754026][ T6689] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 29399, setting to 8 [ 117.783635][ T6689] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 117.816785][ T6689] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.863926][ T7122] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 117.892852][ T7150] loop4: detected capacity change from 0 to 32768 [ 117.971099][ T7161] netlink: 'syz.0.1352': attribute type 21 has an invalid length. [ 118.022522][ T7150] JBD2: Ignoring recovery information on journal [ 118.133740][ T6689] usb 2-1: string descriptor 0 read error: -71 [ 118.142487][ T7150] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 118.165405][ T7154] loop2: detected capacity change from 0 to 32768 [ 118.181492][ T6689] usb 2-1: USB disconnect, device number 3 [ 118.270683][ T7154] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1359 (7154) [ 118.331305][ T7154] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 118.353368][ T4186] ocfs2: Unmounting device (7,4) on (node local) [ 118.379221][ T7154] BTRFS info (device loop2): using free space tree [ 118.416886][ T7154] BTRFS info (device loop2): has skinny extents [ 118.538137][ T7179] loop4: detected capacity change from 0 to 512 [ 118.723669][ T7154] BTRFS info (device loop2): enabling ssd optimizations [ 119.463457][ T7199] loop0: detected capacity change from 0 to 40427 [ 119.556678][ T7199] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 119.587472][ T7199] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 119.640421][ T7199] F2FS-fs (loop0): invalid crc value [ 119.717574][ T7199] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 119.728275][ T7007] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 119.760557][ T7242] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1379'. [ 119.920245][ T7199] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 119.924849][ T7223] loop1: detected capacity change from 0 to 32768 [ 119.937650][ T7199] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 119.996254][ T7223] JBD2: Ignoring recovery information on journal [ 120.047135][ T7199] fscrypt (loop0, inode 3): Error -61 getting encryption context [ 120.103838][ T7007] usb 3-1: config 0 has an invalid interface number: 104 but max is 1 [ 120.112053][ T7007] usb 3-1: config 0 has an invalid interface number: 104 but max is 1 [ 120.122051][ T7223] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 120.130749][ T7007] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 120.145624][ T7007] usb 3-1: config 0 has no interface number 0 [ 120.153699][ T7007] usb 3-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid maxpacket 12288, setting to 64 [ 120.166272][ T7007] usb 3-1: config 0 interface 104 has no altsetting 1 [ 120.299209][ T4185] ocfs2: Unmounting device (7,1) on (node local) [ 120.316862][ T7240] loop4: detected capacity change from 0 to 32768 [ 120.334431][ T7007] usb 3-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 120.339254][ T7240] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1378 (7240) [ 120.363650][ T7007] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.372031][ T7007] usb 3-1: Product: syz [ 120.377265][ T7240] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 120.388971][ T7007] usb 3-1: Manufacturer: syz [ 120.406111][ T7007] usb 3-1: SerialNumber: syz [ 120.415615][ T7007] usb 3-1: config 0 descriptor?? [ 120.440638][ T7240] BTRFS info (device loop4): using free space tree [ 120.455488][ T7240] BTRFS info (device loop4): has skinny extents [ 120.474149][ T7007] asix: probe of 3-1:0.104 failed with error -22 [ 120.548346][ T7254] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1380'. [ 120.557584][ T7254] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1380'. [ 120.564131][ T6689] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 120.684203][ T7265] loop0: detected capacity change from 0 to 512 [ 120.716576][ T7006] usb 3-1: USB disconnect, device number 5 [ 120.738214][ T7275] loop1: detected capacity change from 0 to 8 [ 120.746429][ T7265] EXT4-fs (loop0): Ignoring removed orlov option [ 120.806824][ T7265] EXT4-fs warning (device loop0): ext4_xattr_inode_get:506: inode #11: comm syz.0.1387: EA inode hash validation failed [ 120.834017][ T7240] BTRFS info (device loop4): enabling ssd optimizations [ 120.856813][ T7275] SQUASHFS error: Unable to read directory block [629:26] [ 120.864247][ T7265] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 120.896062][ T7265] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #15: comm syz.0.1387: corrupted inode contents [ 120.912537][ T7265] EXT4-fs error (device loop0): ext4_dirty_inode:6058: inode #15: comm syz.0.1387: mark_inode_dirty error [ 120.930850][ T7265] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #15: comm syz.0.1387: corrupted inode contents [ 120.949578][ T7265] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2952: inode #15: comm syz.0.1387: mark_inode_dirty error [ 120.984165][ T7265] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2955: inode #15: comm syz.0.1387: mark inode dirty (error -117) [ 121.018333][ T7265] EXT4-fs warning (device loop0): ext4_evict_inode:302: xattr delete (err -117) [ 121.038228][ T7265] EXT4-fs (loop0): 1 orphan inode deleted [ 121.048320][ T7265] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x000000000000005c,nouid32,orlov,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 121.194174][ T6689] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 121.214450][ T6689] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.233657][ T6689] usb 4-1: Product: syz [ 121.238061][ T6689] usb 4-1: Manufacturer: syz [ 121.242677][ T6689] usb 4-1: SerialNumber: syz [ 121.325398][ T6689] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 121.513979][ T6689] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 121.933934][ T6689] usb 1-1: config 0 has an invalid interface number: 172 but max is 0 [ 121.948619][ T6689] usb 1-1: config 0 has no interface number 0 [ 121.955476][ T6689] usb 1-1: too many endpoints for config 0 interface 172 altsetting 255: 247, using maximum allowed: 30 [ 121.973869][ T6689] usb 1-1: config 0 interface 172 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 247 [ 121.991800][ T4968] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 121.999535][ T6689] usb 1-1: config 0 interface 172 has no altsetting 0 [ 122.034006][ T6613] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 122.081996][ T7328] xt_CT: You must specify a L4 protocol and not use inversions on it [ 122.144528][ T7007] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 122.194039][ T6689] usb 1-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=d7.23 [ 122.203493][ T6689] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.212295][ T6689] usb 1-1: Product: syz [ 122.217134][ T6689] usb 1-1: Manufacturer: syz [ 122.221762][ T6689] usb 1-1: SerialNumber: syz [ 122.242718][ T6689] usb 1-1: config 0 descriptor?? [ 122.393795][ T7007] usb 3-1: Using ep0 maxpacket: 32 [ 122.393912][ T4968] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 122.411461][ T4968] usb 2-1: config 0 has no interface number 0 [ 122.481452][ T7013] usb 4-1: USB disconnect, device number 8 [ 122.513859][ T7007] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.529712][ T7007] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.546043][ T6689] ftdi_sio 1-1:0.172: FTDI USB Serial Device converter detected [ 122.564256][ T6689] usb 1-1: Detected FT-X [ 122.585552][ T6689] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 122.613773][ T4968] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 122.623029][ T6689] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 122.629993][ T4968] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.639242][ T4968] usb 2-1: Product: syz [ 122.643416][ T4968] usb 2-1: Manufacturer: syz [ 122.648924][ T4968] usb 2-1: SerialNumber: syz [ 122.654010][ T7007] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 122.655412][ T4968] usb 2-1: config 0 descriptor?? [ 122.668721][ T7007] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 122.669583][ T6689] ftdi_sio 1-1:0.172: GPIO initialisation failed: -71 [ 122.677785][ T7007] usb 3-1: Product: syz [ 122.687572][ T6689] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 122.693943][ T7007] usb 3-1: Manufacturer: syz [ 122.700022][ T6689] usb 1-1: USB disconnect, device number 8 [ 122.710211][ T6689] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 122.720877][ T6689] ftdi_sio 1-1:0.172: device disconnected [ 122.729059][ T4968] usb 2-1: selecting invalid altsetting 1 [ 122.747990][ T7007] hub 3-1:4.0: USB hub found [ 122.750724][ T4968] dvb_ttusb_budget: ttusb_init_controller: error [ 122.761495][ T4968] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 122.794828][ T4968] DVB: Unable to find symbol stv0299_attach() [ 122.816723][ T4968] DVB: Unable to find symbol tda8083_attach() [ 122.822858][ T4968] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 122.937293][ T7306] udc-core: couldn't find an available UDC or it's busy [ 122.944480][ T7306] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 122.953351][ T7011] usb 2-1: USB disconnect, device number 4 [ 122.963769][ T7007] hub 3-1:4.0: 8 ports detected [ 122.983728][ T7007] hub 3-1:4.0: insufficient power available to use all downstream ports [ 123.076282][ T7360] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1426'. [ 123.113681][ T6613] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 123.127893][ T6613] ath9k_htc: Failed to initialize the device [ 123.150700][ T7013] usb 4-1: ath9k_htc: USB layer deinitialized [ 123.188290][ T7007] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 123.212233][ T7007] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 123.298406][ T7370] netlink: 'syz.3.1430': attribute type 3 has an invalid length. [ 123.310475][ T7007] usb 3-1: USB disconnect, device number 6 [ 123.316234][ T7370] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1430'. [ 123.433768][ T6689] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 123.673707][ T6689] usb 5-1: Using ep0 maxpacket: 16 [ 123.707667][ T7375] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1433'. [ 123.793876][ T6689] usb 5-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 123.814123][ T6689] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 123.851823][ T6689] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 97, changing to 7 [ 123.903761][ T6689] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24929, setting to 1024 [ 123.952945][ T6689] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 124.074015][ T6689] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 124.093815][ T6689] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 124.101855][ T6689] usb 5-1: Manufacturer: syz [ 124.150255][ T6689] usb 5-1: config 0 descriptor?? [ 124.397539][ T7378] loop2: detected capacity change from 0 to 32768 [ 124.418771][ T6689] usb 5-1: USB disconnect, device number 6 [ 124.535971][ T7378] JBD2: Ignoring recovery information on journal [ 124.605661][ T7428] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1458'. [ 124.643339][ T7430] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1459'. [ 124.722562][ T7378] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 124.788533][ T7440] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1462'. [ 124.912984][ T7444] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1463'. [ 124.934703][ T4195] ocfs2: Unmounting device (7,2) on (node local) [ 125.169816][ T7462] netlink: 'syz.3.1475': attribute type 3 has an invalid length. [ 125.197170][ T7463] QAT: failed to copy from user cfg_data. [ 125.849366][ T7007] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 125.940033][ T7512] netlink: 'syz.2.1494': attribute type 3 has an invalid length. [ 126.099179][ T7467] loop4: detected capacity change from 0 to 32768 [ 126.204121][ T7467] JBD2: Ignoring recovery information on journal [ 126.208987][ T7532] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1504'. [ 126.277196][ T7007] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.319614][ T7467] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 126.373834][ T6689] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 126.435313][ T7007] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.520850][ T4186] ocfs2: Unmounting device (7,4) on (node local) [ 126.554940][ T7007] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.613765][ T6689] usb 4-1: Using ep0 maxpacket: 8 [ 126.764073][ T7007] usb 1-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 126.776886][ T6689] usb 4-1: unable to get BOS descriptor or descriptor too short [ 126.799917][ T7007] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.801610][ T7560] loop2: detected capacity change from 0 to 512 [ 126.810888][ T7007] usb 1-1: Product: syz [ 126.833886][ T7007] usb 1-1: Manufacturer: syz [ 126.838519][ T7007] usb 1-1: SerialNumber: syz [ 126.864041][ T6689] usb 4-1: config 8 has an invalid interface number: 134 but max is 0 [ 126.870497][ T7007] usb 1-1: config 0 descriptor?? [ 126.872681][ T6689] usb 4-1: config 8 has no interface number 0 [ 126.891900][ T6689] usb 4-1: config 8 interface 134 has no altsetting 0 [ 126.935302][ T7007] ti_usb_3410_5052 1-1:0.0: required endpoints missing [ 126.966828][ T7560] EXT4-fs (loop2): Ignoring removed orlov option [ 127.012509][ T7560] EXT4-fs warning (device loop2): ext4_xattr_inode_get:506: inode #11: comm syz.2.1518: EA inode hash validation failed [ 127.062573][ T6689] usb 4-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=36.c5 [ 127.063883][ T7560] EXT4-fs error (device loop2): ext4_do_update_inode:5222: inode #15: comm syz.2.1518: corrupted inode contents [ 127.087287][ T6689] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.107514][ T7560] EXT4-fs error (device loop2): ext4_dirty_inode:6058: inode #15: comm syz.2.1518: mark_inode_dirty error [ 127.140024][ T7560] EXT4-fs error (device loop2): ext4_do_update_inode:5222: inode #15: comm syz.2.1518: corrupted inode contents [ 127.153219][ T6689] usb 4-1: Product: syz [ 127.159102][ T6689] usb 4-1: Manufacturer: syz [ 127.168244][ T6689] usb 4-1: SerialNumber: syz [ 127.173398][ T7560] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2952: inode #15: comm syz.2.1518: mark_inode_dirty error [ 127.173803][ T7576] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1525'. [ 127.194750][ T7560] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2955: inode #15: comm syz.2.1518: mark inode dirty (error -117) [ 127.201442][ T7013] usb 1-1: USB disconnect, device number 9 [ 127.219829][ T7560] EXT4-fs warning (device loop2): ext4_evict_inode:302: xattr delete (err -117) [ 127.231088][ T7560] EXT4-fs (loop2): 1 orphan inode deleted [ 127.237514][ T7560] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x000000000000005c,nouid32,orlov,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 127.493468][ T7568] loop1: detected capacity change from 0 to 32768 [ 127.550352][ T6689] as10x_usb: device has been detected [ 127.557422][ T6689] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 127.581919][ T7568] JBD2: Ignoring recovery information on journal [ 127.626450][ T6689] usb 4-1: DVB: registering adapter 2 frontend 0 (PCTV Systems picoStick (74e))... [ 127.665346][ T6695] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 127.679117][ T7568] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 127.752573][ T6689] as10x_usb: error during firmware upload part1 [ 127.769073][ T6689] Registered device PCTV Systems picoStick (74e) [ 127.794294][ T6689] usb 4-1: USB disconnect, device number 9 [ 127.844934][ T4185] ocfs2: Unmounting device (7,1) on (node local) [ 127.889042][ T6689] Unregistered device PCTV Systems picoStick (74e) [ 127.892140][ T6689] as10x_usb: device has been disconnected [ 128.034210][ T6695] usb 3-1: config 0 has an invalid interface number: 172 but max is 0 [ 128.047386][ T6695] usb 3-1: config 0 has no interface number 0 [ 128.069216][ T6695] usb 3-1: too many endpoints for config 0 interface 172 altsetting 255: 247, using maximum allowed: 30 [ 128.084196][ T6695] usb 3-1: config 0 interface 172 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 247 [ 128.123597][ T6695] usb 3-1: config 0 interface 172 has no altsetting 0 [ 128.294011][ T6695] usb 3-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=d7.23 [ 128.323465][ T6695] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.368614][ T6695] usb 3-1: Product: syz [ 128.372841][ T6695] usb 3-1: Manufacturer: syz [ 128.407745][ T6695] usb 3-1: SerialNumber: syz [ 128.437317][ T6695] usb 3-1: config 0 descriptor?? [ 128.717758][ T6695] ftdi_sio 3-1:0.172: FTDI USB Serial Device converter detected [ 128.755697][ T6695] usb 3-1: Detected FT-X [ 128.773739][ T6695] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 128.804134][ T6695] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 128.833858][ T6695] ftdi_sio 3-1:0.172: GPIO initialisation failed: -71 [ 128.840910][ T1334] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 128.861471][ T6695] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 128.882119][ T6695] usb 3-1: USB disconnect, device number 7 [ 128.956680][ T6695] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 128.977302][ T6695] ftdi_sio 3-1:0.172: device disconnected [ 129.090601][ T7671] loop3: detected capacity change from 0 to 2048 [ 129.134949][ T7671] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=27485, location=27485 [ 129.160510][ T7677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1574'. [ 129.177433][ T7671] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 129.233930][ T1334] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 129.242164][ T1334] usb 5-1: config 0 has no interface number 0 [ 129.432637][ T7689] netlink: 'syz.2.1578': attribute type 46 has an invalid length. [ 129.434004][ T1334] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 129.471530][ T7689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1578'. [ 129.503651][ T1334] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.552708][ T7696] loop0: detected capacity change from 0 to 256 [ 129.559150][ T1334] usb 5-1: Product: syz [ 129.563328][ T1334] usb 5-1: Manufacturer: syz [ 129.583084][ T1334] usb 5-1: SerialNumber: syz [ 129.627888][ T1334] usb 5-1: config 0 descriptor?? [ 129.655600][ T7696] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 129.685509][ T1334] usb 5-1: selecting invalid altsetting 1 [ 129.692986][ T1334] dvb_ttusb_budget: ttusb_init_controller: error [ 129.715041][ T1334] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 129.745593][ T7696] attempt to access beyond end of device [ 129.745593][ T7696] loop0: rw=0, want=34359738489, limit=256 [ 129.880098][ T1334] DVB: Unable to find symbol stv0299_attach() [ 129.891479][ T7641] udc-core: couldn't find an available UDC or it's busy [ 129.901057][ T7641] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 129.974413][ T1334] DVB: Unable to find symbol tda8083_attach() [ 129.980889][ T1334] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 130.023786][ T1334] usb 5-1: USB disconnect, device number 7 [ 130.239456][ T7727] cgroup: none used incorrectly [ 130.246250][ T6695] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 130.347174][ T7729] loop2: detected capacity change from 0 to 2048 [ 130.552540][ T7729] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 130.747736][ T7743] loop4: detected capacity change from 0 to 2048 [ 130.779317][ T6695] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 130.793496][ T6695] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.805497][ T7743] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=27485, location=27485 [ 130.857839][ T6695] usb 2-1: Product: syz [ 130.862052][ T6695] usb 2-1: Manufacturer: syz [ 130.887890][ T7743] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 130.898783][ T6695] usb 2-1: SerialNumber: syz [ 130.979885][ T6695] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 131.050273][ T7761] netlink: 'syz.0.1615': attribute type 46 has an invalid length. [ 131.059490][ T7761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1615'. [ 131.420043][ T7783] netlink: 'syz.2.1626': attribute type 1 has an invalid length. [ 131.583865][ T6695] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 131.671630][ T7805] cgroup: none used incorrectly [ 131.878534][ T7817] netlink: 'syz.3.1643': attribute type 13 has an invalid length. [ 132.017291][ T7831] CIFS mount error: No usable UNC path provided in device string! [ 132.017291][ T7831] [ 132.032417][ T7010] usb 2-1: USB disconnect, device number 5 [ 132.060584][ T7831] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 132.089162][ T7834] netlink: 'syz.2.1651': attribute type 10 has an invalid length. [ 132.107540][ T7834] device veth1_macvtap left promiscuous mode [ 132.125852][ T7836] loop3: detected capacity change from 0 to 256 [ 132.183837][ T4968] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 132.219851][ T7836] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 132.426642][ T7852] ip6t_REJECT: ECHOREPLY is not supported [ 132.443786][ T4968] usb 5-1: Using ep0 maxpacket: 16 [ 132.563809][ T4968] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 132.594351][ T4968] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.623719][ T6695] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 132.630723][ T6695] ath9k_htc: Failed to initialize the device [ 132.645705][ T4968] usb 5-1: config 0 has no interface number 0 [ 132.655359][ T7010] usb 2-1: ath9k_htc: USB layer deinitialized [ 132.683189][ T7868] loop0: detected capacity change from 0 to 256 [ 132.752615][ T7868] FAT-fs (loop0): Directory bread(block 64) failed [ 132.786965][ T7868] FAT-fs (loop0): Directory bread(block 65) failed [ 132.795886][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.802322][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.821688][ T4968] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 132.825676][ T7868] FAT-fs (loop0): Directory bread(block 66) failed [ 132.851404][ T4968] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.864560][ T4968] usb 5-1: Product: syz [ 132.868837][ T4968] usb 5-1: Manufacturer: syz [ 132.874376][ T4968] usb 5-1: SerialNumber: syz [ 132.900363][ T7868] FAT-fs (loop0): Directory bread(block 67) failed [ 132.910487][ T4968] usb 5-1: config 0 descriptor?? [ 132.953744][ T7868] FAT-fs (loop0): Directory bread(block 68) failed [ 132.960606][ T7868] FAT-fs (loop0): Directory bread(block 69) failed [ 132.965829][ T4968] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 132.985770][ T4968] usb 5-1: No valid video chain found. [ 133.019722][ T7868] FAT-fs (loop0): Directory bread(block 70) failed [ 133.051237][ T7868] FAT-fs (loop0): Directory bread(block 71) failed [ 133.070602][ T7868] FAT-fs (loop0): Directory bread(block 72) failed [ 133.107186][ T7889] netlink: 'syz.1.1678': attribute type 13 has an invalid length. [ 133.121088][ T7868] FAT-fs (loop0): Directory bread(block 73) failed [ 133.148111][ T7893] netlink: 'syz.3.1679': attribute type 3 has an invalid length. [ 133.174666][ T7010] usb 5-1: USB disconnect, device number 8 [ 133.241333][ T26] audit: type=1800 audit(1775602923.050:8): pid=7868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1667" name="file1" dev="loop0" ino=1048597 res=0 errno=0 [ 133.276922][ T7898] netlink: 'syz.3.1683': attribute type 10 has an invalid length. [ 133.313576][ T7898] device veth1_macvtap left promiscuous mode [ 133.454051][ T7906] program syz.2.1686 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 133.469020][ T7908] netlink: 'syz.3.1687': attribute type 1 has an invalid length. [ 133.476359][ T7911] loop1: detected capacity change from 0 to 136 [ 133.523434][ T7914] ip6t_REJECT: ECHOREPLY is not supported [ 133.563814][ T7911] rock: directory entry would overflow storage [ 133.582643][ T7911] rock: sig=0x4f50, size=4, remaining=3 [ 133.609355][ T7911] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 133.910802][ T7939] Invalid ELF header magic: != ELF [ 134.004471][ T7933] loop3: detected capacity change from 0 to 4096 [ 134.058963][ T7933] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 134.168314][ T7952] CIFS mount error: No usable UNC path provided in device string! [ 134.168314][ T7952] [ 134.192251][ T7933] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 134.263766][ T7952] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 134.385555][ T7965] loop2: detected capacity change from 0 to 256 [ 134.469038][ T7965] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 134.654108][ T7975] No such timeout policy "syz1" [ 134.841493][ T7990] Invalid ELF header magic: != ELF [ 135.056178][ T8009] loop0: detected capacity change from 0 to 256 [ 135.129846][ T8009] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 135.219445][ T8017] netlink: 'syz.1.1739': attribute type 3 has an invalid length. [ 135.462520][ T8028] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1745'. [ 135.472329][ T8028] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 135.561124][ T8031] loop2: detected capacity change from 0 to 136 [ 135.641778][ T8031] rock: directory entry would overflow storage [ 135.654276][ T8031] rock: sig=0x4f50, size=4, remaining=3 [ 135.659877][ T8031] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 135.771683][ T8051] device vlan0 entered promiscuous mode [ 136.024152][ T8055] loop1: detected capacity change from 0 to 4096 [ 136.073996][ T8055] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 136.148295][ T8055] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 136.431969][ T8096] loop2: detected capacity change from 0 to 64 [ 136.501806][ T8096] hfs: keylen 40 too large [ 136.661869][ T8112] No such timeout policy "syz1" [ 136.694182][ T8068] loop3: detected capacity change from 0 to 32768 [ 136.758066][ T8068] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop3 scanned by syz.3.1764 (8068) [ 136.871699][ T8068] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 136.893189][ T8068] BTRFS info (device loop3): turning on async discard [ 136.918356][ T8068] BTRFS info (device loop3): using free space tree [ 136.950240][ T8068] BTRFS info (device loop3): has skinny extents [ 137.054707][ T8143] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1797'. [ 137.207051][ T8154] netlink: 'syz.1.1801': attribute type 3 has an invalid length. [ 137.320126][ T7010] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 137.390905][ T8068] BTRFS info (device loop3): enabling ssd optimizations [ 137.770117][ T7010] usb 3-1: config index 0 descriptor too short (expected 29, got 18) [ 137.790268][ T7010] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 137.793026][ T4522] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 9 /dev/loop3 scanned by udevd (4522) [ 137.835319][ T7010] usb 3-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 137.867513][ T7010] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.922369][ T7010] usb 3-1: config 0 descriptor?? [ 137.941467][ T8188] set_capacity_and_notify: 1 callbacks suppressed [ 137.941485][ T8188] loop1: detected capacity change from 0 to 256 [ 138.082670][ T8188] FAT-fs (loop1): Directory bread(block 64) failed [ 138.102598][ T8188] FAT-fs (loop1): Directory bread(block 65) failed [ 138.114471][ T8188] FAT-fs (loop1): Directory bread(block 66) failed [ 138.153799][ T8188] FAT-fs (loop1): Directory bread(block 67) failed [ 138.188402][ T8188] FAT-fs (loop1): Directory bread(block 68) failed [ 138.213871][ T7010] usb 3-1: string descriptor 0 read error: -71 [ 138.224349][ T8188] FAT-fs (loop1): Directory bread(block 69) failed [ 138.230989][ T8188] FAT-fs (loop1): Directory bread(block 70) failed [ 138.235226][ T7010] ldusb 3-1:0.0: Interrupt in endpoint not found [ 138.264183][ T8188] FAT-fs (loop1): Directory bread(block 71) failed [ 138.292078][ T8188] FAT-fs (loop1): Directory bread(block 72) failed [ 138.298958][ T7010] usb 3-1: USB disconnect, device number 8 [ 138.309495][ T8203] tipc: Can't bind to reserved service type 2 [ 138.312517][ T8188] FAT-fs (loop1): Directory bread(block 73) failed [ 138.534787][ T26] audit: type=1800 audit(1775602928.350:9): pid=8188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1816" name="file1" dev="loop1" ino=1048600 res=0 errno=0 [ 138.935336][ T8220] comedi comedi1: ni_at_a2150: I/O port conflict (0x28,28) [ 138.985142][ T8195] loop4: detected capacity change from 0 to 32768 [ 139.155536][ T8195] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 139.225107][ T8195] (syz.4.1820,8195,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=16, inode=65, rec_len=16, name_len=64 [ 139.348205][ T8195] (syz.4.1820,8195,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 139.374008][ T8195] (syz.4.1820,8195,1):ocfs2_mknod:298 ERROR: status = -2 [ 139.410887][ T8195] (syz.4.1820,8195,1):ocfs2_mknod:502 ERROR: status = -2 [ 139.445607][ T8195] (syz.4.1820,8195,1):ocfs2_mkdir:659 ERROR: status = -2 [ 139.535876][ T8257] 9pnet: Insufficient options for proto=fd [ 139.579373][ T4186] ocfs2: Unmounting device (7,4) on (node local) [ 140.184835][ T8306] loop4: detected capacity change from 0 to 64 [ 140.243790][ T6600] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 140.301141][ T8311] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 140.613957][ T6600] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 140.632905][ T6600] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 140.636145][ T8296] loop2: detected capacity change from 0 to 32768 [ 140.657812][ T6600] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.725863][ T6600] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 140.851282][ T8336] 9pnet: Insufficient options for proto=fd [ 140.890251][ T8341] netlink: 'syz.2.1889': attribute type 2 has an invalid length. [ 140.918700][ T8341] netlink: 'syz.2.1889': attribute type 4 has an invalid length. [ 140.969528][ T8341] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1889'. [ 141.045640][ T8348] comedi comedi1: ni_at_a2150: I/O port conflict (0x28,28) [ 141.407998][ T8368] xt_CT: No such helper "snmp_trap" [ 141.446385][ T8371] netlink: 'syz.4.1905': attribute type 2 has an invalid length. [ 141.458732][ T8371] netlink: 'syz.4.1905': attribute type 4 has an invalid length. [ 141.486585][ T8371] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1905'. [ 141.520396][ T8377] device sit0 entered promiscuous mode [ 141.546891][ T8377] netlink: 'syz.1.1907': attribute type 1 has an invalid length. [ 141.548612][ T8379] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1908'. [ 141.593926][ T8377] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1907'. [ 141.643347][ T8384] loop4: detected capacity change from 0 to 128 [ 141.783856][ T6600] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 141.869942][ T8389] loop2: detected capacity change from 0 to 2048 [ 141.958435][ T8389] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 141.999057][ T8389] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 142.008338][ T6600] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 142.031126][ T6600] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 142.055355][ T6600] usb 4-1: USB disconnect, device number 10 [ 142.065810][ T8389] UDF-fs: unknown compression code (0) [ 142.217583][ T8415] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1927'. [ 142.256065][ T8415] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1927'. [ 142.271870][ T8419] netlink: 328 bytes leftover after parsing attributes in process `syz.1.1928'. [ 142.284228][ T8415] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1927'. [ 142.405510][ T8426] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 142.513748][ T6599] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 142.577280][ T8435] loop0: detected capacity change from 0 to 1764 [ 142.809041][ T8451] netlink: 'syz.0.1942': attribute type 21 has an invalid length. [ 142.838989][ T8451] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1942'. [ 142.853837][ T6600] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 142.892100][ T6599] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 142.920517][ T6599] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 142.951301][ T8459] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 143.113814][ T6600] usb 4-1: Using ep0 maxpacket: 32 [ 143.133754][ T6599] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 143.142926][ T6599] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.171724][ T6599] usb 3-1: Product: syz [ 143.181853][ T6599] usb 3-1: Manufacturer: syz [ 143.192003][ T6599] usb 3-1: SerialNumber: syz [ 143.213322][ T6599] usb 3-1: config 0 descriptor?? [ 143.243906][ T8417] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 143.250641][ T8479] comedi comedi0: s526: I/O port conflict (0x3,64) [ 143.264075][ T6600] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.275150][ T6599] usb 3-1: ucan: probing device on interface #0 [ 143.297867][ T6599] usb 3-1: ucan: invalid endpoint configuration [ 143.310939][ T6599] usb 3-1: ucan: probe failed; try to update the device firmware [ 143.453911][ T6600] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 143.473283][ T6600] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.508984][ T6600] usb 4-1: Product: syz [ 143.513228][ T6600] usb 4-1: Manufacturer: syz [ 143.531178][ T6600] usb 4-1: SerialNumber: syz [ 143.553791][ T6600] usb 4-1: config 0 descriptor?? [ 143.564280][ T6599] usb 3-1: USB disconnect, device number 9 [ 143.605238][ T6600] quatech2 4-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 143.606402][ T8497] netlink: 'syz.1.1960': attribute type 21 has an invalid length. [ 143.660860][ T8497] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1960'. [ 143.800782][ T8502] xt_CT: No such helper "snmp_trap" [ 143.813836][ T6600] usb 4-1: qt2_setup_urbs - submit read urb failed -8 [ 143.823937][ T6600] quatech2: probe of 4-1:0.0 failed with error -8 [ 143.944195][ T8515] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1966'. [ 144.043894][ T6600] usb 4-1: USB disconnect, device number 11 [ 144.144073][ T8523] device sit0 entered promiscuous mode [ 144.182589][ T8523] netlink: 'syz.2.1971': attribute type 1 has an invalid length. [ 144.229199][ T8523] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1971'. [ 144.359586][ T8529] loop4: detected capacity change from 0 to 1764 [ 144.549352][ T8539] trusted_key: encrypted_key: insufficient parameters specified [ 144.610060][ T8543] netlink: 'syz.3.1984': attribute type 4 has an invalid length. [ 144.675286][ T8517] loop0: detected capacity change from 0 to 32768 [ 144.809067][ T8517] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 144.844079][ T8517] (syz.0.1968,8517,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=16, inode=65, rec_len=16, name_len=64 [ 144.909846][ T8562] netlink: 'syz.4.1993': attribute type 30 has an invalid length. [ 144.919070][ T8562] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1993'. [ 144.929429][ T8562] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 144.939302][ T8560] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1992'. [ 144.940087][ T8562] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 144.962531][ T8517] (syz.0.1968,8517,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 144.982102][ T8517] (syz.0.1968,8517,1):ocfs2_mknod:298 ERROR: status = -2 [ 144.996072][ T8517] (syz.0.1968,8517,1):ocfs2_mknod:502 ERROR: status = -2 [ 145.023798][ T8560] nbd: couldn't find a device at index 1024 [ 145.034777][ T8517] (syz.0.1968,8517,1):ocfs2_mkdir:659 ERROR: status = -2 [ 145.120143][ T4184] ocfs2: Unmounting device (7,0) on (node local) [ 145.658655][ T8608] autofs4:pid:8608:autofs_fill_super: called with bogus options [ 145.683825][ T4968] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 145.693891][ T7004] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 145.887233][ T8624] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.933681][ T4968] usb 2-1: Using ep0 maxpacket: 8 [ 146.083942][ T7004] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.094370][ T4968] usb 2-1: unable to get BOS descriptor or descriptor too short [ 146.108207][ T7004] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 146.128642][ T7004] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 146.138501][ T7004] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.148657][ T7004] usb 4-1: config 0 descriptor?? [ 146.168992][ T8646] validate_nla: 1 callbacks suppressed [ 146.169010][ T8646] netlink: 'syz.2.2033': attribute type 4 has an invalid length. [ 146.173710][ T8645] trusted_key: encrypted_key: insufficient parameters specified [ 146.174980][ T4968] usb 2-1: config 86 has an invalid interface number: 246 but max is 0 [ 146.231945][ T4968] usb 2-1: config 86 has no interface number 0 [ 146.240311][ T4968] usb 2-1: config 86 interface 246 altsetting 128 bulk endpoint 0x88 has invalid maxpacket 1023 [ 146.271227][ T4968] usb 2-1: config 86 interface 246 altsetting 128 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 146.288886][ T4968] usb 2-1: config 86 interface 246 has no altsetting 0 [ 146.453868][ T4968] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0012, bcdDevice=12.36 [ 146.473265][ T4968] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.499641][ T4968] usb 2-1: Product: syz [ 146.521461][ T4968] usb 2-1: Manufacturer: syz [ 146.532380][ T4968] usb 2-1: SerialNumber: syz [ 146.583911][ T8590] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 146.643811][ T7004] Bluetooth: Can't get state to change to load configuration err [ 146.651662][ T7004] Bluetooth: Loading sysconfig file failed [ 146.691717][ T7004] ath3k: probe of 4-1:0.0 failed with error -16 [ 146.719246][ T7004] usb 4-1: USB disconnect, device number 12 [ 146.894130][ T4968] kvaser_usb 2-1:86.246: Cannot get usb endpoint(s) [ 146.925708][ T4968] usb 2-1: USB disconnect, device number 6 [ 146.965998][ T8692] netlink: 'syz.0.2055': attribute type 30 has an invalid length. [ 146.987424][ T8692] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 146.997527][ T8688] loop2: detected capacity change from 0 to 8192 [ 146.998338][ T8692] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 147.105712][ T8688] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 147.128467][ T8688] REISERFS (device loop2): using ordered data mode [ 147.160564][ T8688] reiserfs: using flush barriers [ 147.162935][ T8688] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 147.169717][ T8688] REISERFS (device loop2): checking transaction log (loop2) [ 147.392826][ T8688] REISERFS (device loop2): Using tea hash to sort names [ 147.449767][ T8688] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 147.480410][ T8688] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 147.949821][ T8745] loop0: detected capacity change from 0 to 512 [ 147.962503][ T8746] loop3: detected capacity change from 0 to 512 [ 148.032754][ T8748] loop1: detected capacity change from 0 to 1024 [ 148.073039][ T8745] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 148.096763][ T8751] loop2: detected capacity change from 0 to 4096 [ 148.103699][ T8745] ext4 filesystem being mounted at /433/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.105731][ T8746] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 148.142856][ T8746] EXT4-fs (loop3): orphan cleanup on readonly fs [ 148.183677][ T8751] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 148.217684][ T8746] EXT4-fs error (device loop3): __ext4_iget:4912: inode #11: block 8: comm syz.3.2082: invalid block [ 148.250874][ T8746] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.2082: couldn't read orphan inode 11 (err -117) [ 148.278904][ T8746] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 148.502112][ T8746] EXT4-fs (loop3): ext4_remount: Checksum for group 0 failed (57259!=33349) [ 148.582743][ T8773] loop0: detected capacity change from 0 to 256 [ 148.662888][ T8773] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x5955b8de, utbl_chksum : 0xe619d30d) [ 148.730064][ T8780] loop1: detected capacity change from 0 to 512 [ 148.843719][ T8778] loop2: detected capacity change from 0 to 4096 [ 148.886205][ T8780] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 2: comm syz.1.2097: invalid block [ 148.919015][ T8780] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2097: invalid indirect mapped block 10 (level 1) [ 148.945418][ T8780] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2097: invalid indirect mapped block 8 (level 1) [ 148.953344][ T8793] comedi comedi3: pcl816: I/O port conflict (0xd,16) [ 148.965216][ T8780] EXT4-fs (loop1): 1 truncate cleaned up [ 148.973902][ T8780] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 149.012749][ T8794] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 149.202170][ T6599] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 149.282859][ T8807] comedi comedi0: Minor 3 could not be opened [ 149.553774][ T7007] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 149.594145][ T6599] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 149.615725][ T6599] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 149.634612][ T6599] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 149.658996][ T6599] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.688951][ T6599] usb 5-1: config 0 descriptor?? [ 149.748682][ T8830] netlink: 'syz.2.2120': attribute type 11 has an invalid length. [ 149.847548][ T8835] __nla_validate_parse: 5 callbacks suppressed [ 149.847563][ T8835] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2122'. [ 149.935779][ T8819] set_capacity_and_notify: 1 callbacks suppressed [ 149.935795][ T8819] loop3: detected capacity change from 0 to 32768 [ 149.953403][ T4968] usb 5-1: USB disconnect, device number 9 [ 149.970073][ T8839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2124'. [ 149.997887][ T7007] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 150.013741][ T1107] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 150.034173][ T8841] capability: warning: `syz.2.2125' uses 32-bit capabilities (legacy support in use) [ 150.048968][ T7007] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 150.084174][ T7007] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.185184][ T7007] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 150.384024][ T1107] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 150.403739][ T1107] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 150.453687][ T7004] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 150.523013][ T8865] loop4: detected capacity change from 0 to 256 [ 150.574014][ T1107] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 150.588311][ T1107] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.597442][ T1107] usb 1-1: Product: syz [ 150.602277][ T1107] usb 1-1: Manufacturer: syz [ 150.607475][ T1107] usb 1-1: SerialNumber: syz [ 150.619643][ T1107] usb 1-1: config 0 descriptor?? [ 150.648476][ T8865] FAT-fs (loop4): Directory bread(block 64) failed [ 150.660960][ T8865] FAT-fs (loop4): Directory bread(block 65) failed [ 150.668252][ T8831] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 150.670184][ T8865] FAT-fs (loop4): Directory bread(block 66) failed [ 150.682454][ T8865] FAT-fs (loop4): Directory bread(block 67) failed [ 150.682743][ T8872] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2140'. [ 150.701277][ T8865] FAT-fs (loop4): Directory bread(block 68) failed [ 150.709007][ T7004] usb 3-1: Using ep0 maxpacket: 32 [ 150.715327][ T8865] FAT-fs (loop4): Directory bread(block 69) failed [ 150.722239][ T8865] FAT-fs (loop4): Directory bread(block 70) failed [ 150.726715][ T1107] usb 1-1: ucan: probing device on interface #0 [ 150.731225][ T8865] FAT-fs (loop4): Directory bread(block 71) failed [ 150.742222][ T8865] FAT-fs (loop4): Directory bread(block 72) failed [ 150.745690][ T1107] usb 1-1: ucan: invalid endpoint configuration [ 150.755183][ T8865] FAT-fs (loop4): Directory bread(block 73) failed [ 150.758440][ T1107] usb 1-1: ucan: probe failed; try to update the device firmware [ 150.810211][ T26] audit: type=1800 audit(1775602940.620:10): pid=8865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2137" name="file1" dev="loop4" ino=1048602 res=0 errno=0 [ 150.812960][ T8865] attempt to access beyond end of device [ 150.812960][ T8865] loop4: rw=0, want=1196, limit=256 [ 150.831270][ C0] vkms_vblank_simulate: vblank timer overrun [ 150.833693][ T8874] netlink: 'syz.3.2141': attribute type 2 has an invalid length. [ 150.864040][ T7004] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.922063][ T8876] loop3: detected capacity change from 0 to 1024 [ 150.953265][ T1107] usb 1-1: USB disconnect, device number 10 [ 151.040425][ T8876] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 151.075477][ T7004] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 151.098415][ T8876] EXT4-fs warning (device loop3): empty_inline_dir:1862: bad inline directory (dir #12) - no `..' [ 151.115086][ T7004] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.123227][ T7004] usb 3-1: Product: syz [ 151.151581][ T7004] usb 3-1: Manufacturer: syz [ 151.163666][ T7004] usb 3-1: SerialNumber: syz [ 151.193257][ T7004] usb 3-1: config 0 descriptor?? [ 151.258260][ T7004] quatech2 3-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 151.303787][ T7007] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 151.339706][ T8890] loop3: detected capacity change from 0 to 256 [ 151.374977][ T8890] exfat: Deprecated parameter 'namecase' [ 151.380703][ T8890] exfat: Deprecated parameter 'namecase' [ 151.399040][ T8892] loop4: detected capacity change from 0 to 1024 [ 151.422047][ T8890] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 151.448297][ T8890] exFAT-fs (loop3): invalid start cluster (4278190088) [ 151.493897][ T7004] usb 3-1: qt2_setup_urbs - submit read urb failed -8 [ 151.501160][ T7004] quatech2: probe of 3-1:0.0 failed with error -8 [ 151.514834][ T7007] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 151.523047][ T7007] stv0680 2-1:4.0: last error: 0, command = 0x0 [ 151.532221][ T8892] hfsplus: bad catalog entry type [ 151.582118][ T7007] usb 2-1: USB disconnect, device number 7 [ 151.639836][ T144] hfsplus: b-tree write err: -5, ino 25 [ 151.645804][ T144] hfsplus: b-tree write err: -5, ino 4 [ 151.651579][ T144] hfsplus: b-tree write err: -5, ino 2 [ 151.656633][ T8897] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 151.716560][ T7013] usb 3-1: USB disconnect, device number 10 [ 152.027886][ T8916] loop4: detected capacity change from 0 to 256 [ 152.037252][ T8916] exfat: Deprecated parameter 'utf8' [ 152.042773][ T8916] exfat: Deprecated parameter 'namecase' [ 152.051002][ T8916] exfat: Deprecated parameter 'utf8' [ 152.100184][ T8916] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 152.623194][ T8955] binder: 8953:8955 ioctl c0306201 200000000080 returned -14 [ 152.727480][ T8966] loop4: detected capacity change from 0 to 64 [ 152.830507][ T8972] loop2: detected capacity change from 0 to 64 [ 153.095789][ T8990] netlink: 'syz.0.2193': attribute type 62 has an invalid length. [ 153.172797][ T8993] loop1: detected capacity change from 0 to 2048 [ 153.206366][ T9000] loop0: detected capacity change from 0 to 256 [ 153.288000][ T8993] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 153.347912][ T9012] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 153.389984][ T9014] netlink: 'syz.4.2203': attribute type 30 has an invalid length. [ 153.411723][ T9014] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2203'. [ 153.694642][ T9037] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 153.817092][ T9038] ntfs3: loop0: ino=3, Correct links count -> 2. [ 153.909331][ T9038] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 154.033657][ T6600] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 154.078089][ T9054] Symlink component flag not implemented [ 154.094695][ T9054] Symlink component flag not implemented (116) [ 154.218076][ T9061] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2224'. [ 154.249787][ T9052] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 154.284039][ T9052] REISERFS (device loop2): using ordered data mode [ 154.291264][ T9052] reiserfs: using flush barriers [ 154.317238][ T9052] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 154.353419][ T9062] SQUASHFS error: xz decompression failed, data probably corrupt [ 154.358926][ T9052] REISERFS (device loop2): checking transaction log (loop2) [ 154.372400][ T9052] REISERFS (device loop2): Using r5 hash to sort names [ 154.382934][ T9052] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 154.429006][ T9062] SQUASHFS error: Failed to read block 0x108: -5 [ 154.433907][ T6600] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 154.459068][ T6600] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 154.481906][ T7013] Bluetooth: hci0: command 0x0c1a tx timeout [ 154.488840][ T6600] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 154.492238][ T9062] SQUASHFS error: Unable to read metadata cache entry [106] [ 154.524954][ T6600] usb 4-1: config 220 has no interface number 2 [ 154.573474][ T9062] SQUASHFS error: Unable to read inode 0x11f [ 154.581277][ T6600] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 154.653889][ T6600] usb 4-1: config 220 interface 0 has no altsetting 0 [ 154.661140][ T6600] usb 4-1: config 220 interface 76 has no altsetting 0 [ 154.672403][ T6600] usb 4-1: config 220 interface 1 has no altsetting 0 [ 154.844012][ T6600] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 154.878952][ T6600] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.909291][ T6600] usb 4-1: Product: syz [ 154.919242][ T6600] usb 4-1: Manufacturer: syz [ 154.942975][ T6600] usb 4-1: SerialNumber: syz [ 154.973729][ T4968] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 155.000802][ T9083] set_capacity_and_notify: 7 callbacks suppressed [ 155.000818][ T9083] loop4: detected capacity change from 0 to 128 [ 155.093237][ T9087] program syz.2.2238 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 155.169679][ T9083] FAT-fs (loop4): error, invalid access to FAT (entry 0x0002ffff) [ 155.268189][ T9083] FAT-fs (loop4): Filesystem has been set read-only [ 155.281587][ T9089] loop2: detected capacity change from 0 to 4096 [ 155.341418][ T9093] loop1: detected capacity change from 0 to 64 [ 155.376846][ T4968] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.389342][ T6600] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 155.407112][ T6600] usb 4-1: No valid video chain found. [ 155.421867][ T9095] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 155.443064][ T4968] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.462376][ T6600] usb 4-1: selecting invalid altsetting 0 [ 155.479196][ T4968] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 155.495031][ T4968] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.529654][ T4968] usb 1-1: config 0 descriptor?? [ 155.565138][ T6600] usb 4-1: selecting invalid altsetting 0 [ 155.578285][ T6600] usbtest: probe of 4-1:220.1 failed with error -22 [ 155.593886][ T7004] Bluetooth: hci2: command 0x0811 tx timeout [ 155.614080][ T6600] usb 4-1: USB disconnect, device number 13 [ 155.653062][ T9100] loop4: detected capacity change from 0 to 256 [ 155.837235][ T9107] loop2: detected capacity change from 0 to 128 [ 155.868984][ T9107] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 155.882231][ T9107] hpfs: filesystem error: improperly stopped [ 155.898227][ T9107] hpfs: You really don't want any checks? You are crazy... [ 155.910076][ T9107] hpfs: hpfs_map_sector(): read error [ 155.916264][ T9107] hpfs: code page support is disabled [ 155.922811][ T9107] hpfs: hpfs_map_4sectors(): unaligned read [ 155.933660][ T9107] hpfs: hpfs_map_4sectors(): unaligned read [ 155.939715][ T9107] hpfs: filesystem error: unable to find root dir [ 156.029103][ T4968] playstation 0003:054C:0DF2.0001: unknown main item tag 0x5 [ 156.108615][ T4968] playstation 0003:054C:0DF2.0001: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 156.243719][ T4968] playstation 0003:054C:0DF2.0001: Failed to retrieve feature with reportID 9: -71 [ 156.270192][ T9125] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2257'. [ 156.273139][ T4968] playstation 0003:054C:0DF2.0001: Failed to retrieve DualSense pairing info: -71 [ 156.309658][ T4968] playstation 0003:054C:0DF2.0001: Failed to get MAC address from DualSense [ 156.319914][ T4968] playstation 0003:054C:0DF2.0001: Failed to create dualsense. [ 156.343843][ T4968] playstation: probe of 0003:054C:0DF2.0001 failed with error -71 [ 156.386779][ T4968] usb 1-1: USB disconnect, device number 11 [ 156.432585][ T9135] tipc: Started in network mode [ 156.451349][ T9135] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 156.460850][ T9135] tipc: Enabling of bearer rejected, failed to enable media [ 156.529977][ T9133] fido_id[9133]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 156.533956][ T9139] IPv6: ADDRCONF(NETDEV_CHANGE): vcan1: link becomes ready [ 156.563593][ T7010] Bluetooth: hci0: command 0x0406 tx timeout [ 156.564752][ T1107] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 156.721065][ T9149] loop2: detected capacity change from 0 to 128 [ 156.767167][ T9153] loop1: detected capacity change from 0 to 512 [ 156.808366][ T9157] loop0: detected capacity change from 0 to 512 [ 156.835200][ T9149] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 156.845285][ T9153] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 156.874206][ T9157] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 156.880971][ T9149] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 156.893342][ T9153] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 156.909192][ T9153] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 156.950697][ T9157] EXT4-fs (loop0): orphan cleanup on readonly fs [ 156.958819][ T9157] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:510: comm syz.0.2271: Block bitmap for bg 0 marked uninitialized [ 156.959546][ T9153] EXT4-fs (loop1): orphan cleanup on readonly fs [ 156.983910][ T1107] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 156.998137][ T9153] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 157.007423][ T1107] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 157.007876][ T9153] EXT4-fs warning (device loop1): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 157.020524][ T9157] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 157.031838][ T9153] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 157.051270][ T9157] EXT4-fs (loop0): 1 orphan inode deleted [ 157.055070][ T1107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.072241][ T9153] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2269: bg 0: block 40: padding at end of block bitmap is not set [ 157.075475][ T9157] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 157.111231][ T9157] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 157.125504][ T9153] EXT4-fs (loop1): Remounting filesystem read-only [ 157.130481][ T9157] EXT4-fs (loop0): re-mounted. Opts: . Quota mode: none. [ 157.139870][ T1107] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 157.142941][ T9153] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 157.174743][ T9157] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:510: comm syz.0.2271: Block bitmap for bg 0 marked uninitialized [ 157.200029][ T9153] EXT4-fs (loop1): Remounting filesystem read-only [ 157.208752][ T9153] EXT4-fs (loop1): 1 truncate cleaned up [ 157.218094][ T9157] EXT4-fs error (device loop0): ext4_xattr_block_set:2195: inode #15: comm syz.0.2271: bad block 0 [ 157.223216][ T9153] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,dioread_lock,nouid32,nomblk_io_submit,. Quota mode: writeback. [ 157.285981][ T9153] fscrypt (loop1, inode 16): Error -61 getting encryption context [ 157.426265][ T9166] loop0: detected capacity change from 0 to 4096 [ 157.452785][ T9166] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 157.462838][ T6695] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 157.713785][ T6695] usb 3-1: Using ep0 maxpacket: 8 [ 157.740589][ T9182] xt_policy: neither incoming nor outgoing policy selected [ 157.995270][ T6695] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 158.013301][ T6695] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.037049][ T6695] usb 3-1: Product: syz [ 158.042178][ T6695] usb 3-1: Manufacturer: syz [ 158.052448][ T6695] usb 3-1: SerialNumber: syz [ 158.063194][ T6695] usb 3-1: config 0 descriptor?? [ 158.115764][ T6695] gspca_main: sq930x-2.14.0 probing 2770:930c [ 158.137282][ T9199] loop0: detected capacity change from 0 to 1024 [ 158.162456][ T9201] netlink: 'syz.1.2290': attribute type 4 has an invalid length. [ 158.171334][ T9201] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.2290'. [ 158.241931][ T9180] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.2280 (9180) [ 158.271687][ T9199] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 2: comm syz.0.2289: lblock 2 mapped to illegal pblock 2 (length 1) [ 158.296504][ T9199] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 158.303983][ T1107] gspca_stv0680: usb_control_msg error 2, request = 0x6, error = -32 [ 158.326611][ T9199] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 48: comm syz.0.2289: lblock 0 mapped to illegal pblock 48 (length 1) [ 158.369345][ T9180] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 158.392289][ T9199] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 158.394243][ T9180] BTRFS info (device loop3): using free space tree [ 158.408531][ T9180] BTRFS info (device loop3): has skinny extents [ 158.425265][ T9199] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.2289: Failed to acquire dquot type 0 [ 158.438074][ T9199] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 158.452069][ T9199] EXT4-fs error (device loop0): ext4_evict_inode:282: inode #11: comm syz.0.2289: mark_inode_dirty error [ 158.471849][ T9199] EXT4-fs warning (device loop0): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 158.484677][ T1107] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 158.493142][ T9199] EXT4-fs (loop0): 1 orphan inode deleted [ 158.499715][ T1107] stv0680 5-1:4.0: last error: 86, command = 0x78 [ 158.517885][ T9199] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 158.519306][ T153] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 158.548082][ T1107] usb 5-1: USB disconnect, device number 10 [ 158.636520][ T9199] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #2: block 16: comm syz.0.2289: lblock 262144 mapped to illegal pblock 16 (length 8) [ 158.667573][ T153] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 158.690161][ T153] EXT4-fs error (device loop0): ext4_release_dquot:6270: comm kworker/u4:2: Failed to release dquot type 0 [ 158.738310][ T9180] BTRFS info (device loop3): enabling ssd optimizations [ 158.751894][ T4184] EXT4-fs error (device loop0): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 158.794271][ T4184] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 158.833647][ T6695] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 158.840223][ T4184] EXT4-fs error (device loop0): ext4_quota_off:6540: inode #3: comm syz-executor: mark_inode_dirty error [ 158.849976][ T6695] sq930x: probe of 3-1:0.0 failed with error -71 [ 158.870414][ T6695] usb 3-1: USB disconnect, device number 11 [ 159.474291][ T9230] [ 159.476757][ T9230] ====================================================== [ 159.483782][ T9230] WARNING: possible circular locking dependency detected [ 159.484214][ T9258] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 159.490815][ T9230] syzkaller #0 Not tainted [ 159.490834][ T9230] ------------------------------------------------------ [ 159.490841][ T9230] syz.1.2294/9230 is trying to acquire lock: [ 159.526355][ T9230] ffff8880790c0c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 159.537424][ T9230] [ 159.537424][ T9230] but task is already holding lock: [ 159.544855][ T9230] ffffffff8d6c51a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x18b/0x560 [ 159.554551][ T9230] [ 159.554551][ T9230] which lock already depends on the new lock. [ 159.554551][ T9230] [ 159.564965][ T9230] [ 159.564965][ T9230] the existing dependency chain (in reverse order) is: [ 159.573979][ T9230] [ 159.573979][ T9230] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 159.581989][ T9230] __mutex_lock_common+0x1e3/0x2400 [ 159.587729][ T9230] mutex_lock_nested+0x17/0x20 [ 159.593039][ T9230] rfkill_register+0x33/0x8a0 [ 159.598258][ T9230] hci_register_dev+0x452/0x970 [ 159.603645][ T9230] vhci_create_device+0x32c/0x5c0 [ 159.609208][ T9230] vhci_write+0x391/0x450 [ 159.614075][ T9230] vfs_write+0x745/0xd60 [ 159.619037][ T9230] ksys_write+0x152/0x260 [ 159.624507][ T9230] do_syscall_64+0x4c/0xa0 [ 159.629456][ T9230] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 159.635883][ T9230] [ 159.635883][ T9230] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 159.643714][ T9230] __mutex_lock_common+0x1e3/0x2400 [ 159.649446][ T9230] mutex_lock_nested+0x17/0x20 [ 159.654748][ T9230] vhci_send_frame+0x88/0x100 [ 159.659967][ T9230] hci_send_frame+0x1a9/0x2e0 [ 159.665181][ T9230] hci_tx_work+0x9f9/0x1710 [ 159.670217][ T9230] process_one_work+0x85f/0x1010 [ 159.675694][ T9230] worker_thread+0xaa6/0x1290 [ 159.680904][ T9230] kthread+0x436/0x520 [ 159.685525][ T9230] ret_from_fork+0x1f/0x30 [ 159.689592][ T9261] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 159.690470][ T9230] [ 159.690470][ T9230] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 159.710149][ T9230] __flush_work+0x116/0x210 [ 159.715190][ T9230] hci_dev_do_close+0x1e7/0x1030 [ 159.720659][ T9230] process_one_work+0x85f/0x1010 [ 159.726123][ T9230] worker_thread+0xaa6/0x1290 [ 159.731332][ T9230] kthread+0x436/0x520 [ 159.735937][ T9230] ret_from_fork+0x1f/0x30 [ 159.740886][ T9230] [ 159.740886][ T9230] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 159.748650][ T9230] __mutex_lock_common+0x1e3/0x2400 [ 159.754387][ T9230] mutex_lock_nested+0x17/0x20 [ 159.759686][ T9230] bg_scan_update+0x44/0x3b0 [ 159.761351][ T9254] attempt to access beyond end of device [ 159.761351][ T9254] loop2: rw=0, want=26388279066824, limit=4096 [ 159.764806][ T9230] process_one_work+0x85f/0x1010 [ 159.764832][ T9230] worker_thread+0xaa6/0x1290 [ 159.764848][ T9230] kthread+0x436/0x520 [ 159.776704][ T9254] NILFS (loop2): I/O error reading meta-data file (ino=6, block-offset=1) [ 159.781988][ T9230] ret_from_fork+0x1f/0x30 [ 159.782014][ T9230] [ 159.782014][ T9230] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 159.815057][ T9230] __lock_acquire+0x2c42/0x7d10 [ 159.820448][ T9230] lock_acquire+0x19e/0x400 [ 159.825490][ T9230] __flush_work+0x116/0x210 [ 159.830529][ T9230] __cancel_work_timer+0x3f4/0x560 [ 159.836176][ T9230] hci_request_cancel_all+0xcc/0x300 [ 159.841993][ T9230] hci_dev_do_close+0x4e/0x1030 [ 159.847387][ T9230] hci_rfkill_set_block+0x10a/0x190 [ 159.853121][ T9230] rfkill_set_block+0x1c6/0x420 [ 159.858510][ T9230] rfkill_fop_write+0x452/0x560 [ 159.863900][ T9230] vfs_write+0x30b/0xd60 [ 159.868812][ T9230] ksys_write+0x152/0x260 [ 159.873675][ T9230] do_syscall_64+0x4c/0xa0 [ 159.878624][ T9230] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 159.885050][ T9230] [ 159.885050][ T9230] other info that might help us debug this: [ 159.885050][ T9230] [ 159.895284][ T9230] Chain exists of: [ 159.895284][ T9230] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 159.895284][ T9230] [ 159.911289][ T9230] Possible unsafe locking scenario: [ 159.911289][ T9230] [ 159.918745][ T9230] CPU0 CPU1 [ 159.924119][ T9230] ---- ---- [ 159.929495][ T9230] lock(rfkill_global_mutex); [ 159.934270][ T9230] lock(&data->open_mutex); [ 159.941390][ T9230] lock(rfkill_global_mutex); [ 159.948791][ T9230] lock((work_completion)(&hdev->bg_scan_update)); [ 159.955390][ T9230] [ 159.955390][ T9230] *** DEADLOCK *** [ 159.955390][ T9230] [ 159.963537][ T9230] 1 lock held by syz.1.2294/9230: [ 159.968568][ T9230] #0: ffffffff8d6c51a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x18b/0x560 [ 159.978782][ T9230] [ 159.978782][ T9230] stack backtrace: [ 159.984690][ T9230] CPU: 0 PID: 9230 Comm: syz.1.2294 Not tainted syzkaller #0 [ 159.992069][ T9230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 160.002143][ T9230] Call Trace: [ 160.005428][ T9230] [ 160.008451][ T9230] dump_stack_lvl+0x188/0x250 [ 160.013140][ T9230] ? load_image+0x400/0x400 [ 160.017661][ T9230] ? show_regs_print_info+0x20/0x20 [ 160.022891][ T9230] ? print_circular_bug+0x12b/0x1a0 [ 160.028108][ T9230] check_noncircular+0x296/0x330 [ 160.033069][ T9230] ? look_up_lock_class+0x71/0x110 [ 160.038200][ T9230] ? add_chain_block+0x940/0x940 [ 160.043158][ T9230] ? lockdep_lock+0xf1/0x1f0 [ 160.047769][ T9230] ? __lock_acquire+0x12e8/0x7d10 [ 160.052812][ T9230] ? mark_lock+0x94/0x320 [ 160.057157][ T9230] ? _find_first_zero_bit+0xce/0xf0 [ 160.062375][ T9230] __lock_acquire+0x2c42/0x7d10 [ 160.067255][ T9230] ? verify_lock_unused+0x140/0x140 [ 160.072478][ T9230] ? verify_lock_unused+0x140/0x140 [ 160.077713][ T9230] ? mark_lock+0x94/0x320 [ 160.082071][ T9230] lock_acquire+0x19e/0x400 [ 160.086592][ T9230] ? __flush_work+0xfa/0x210 [ 160.091198][ T9230] ? __lock_acquire+0x7d10/0x7d10 [ 160.096243][ T9230] ? read_lock_is_recursive+0x10/0x10 [ 160.101633][ T9230] ? start_flush_work+0x776/0x820 [ 160.106691][ T9230] __flush_work+0x116/0x210 [ 160.111213][ T9230] ? __flush_work+0xfa/0x210 [ 160.115814][ T9230] ? flush_work+0x20/0x20 [ 160.120157][ T9230] ? try_to_grab_pending+0xfa/0x7f0 [ 160.125369][ T9230] ? mark_lock+0x94/0x320 [ 160.129717][ T9230] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 160.135720][ T9230] ? lock_chain_count+0x20/0x20 [ 160.140768][ T9230] ? mark_lock+0x94/0x320 [ 160.145214][ T9230] ? __cancel_work_timer+0x36a/0x560 [ 160.150515][ T9230] __cancel_work_timer+0x3f4/0x560 [ 160.155648][ T9230] ? cancel_work_sync+0x20/0x20 [ 160.160514][ T9230] ? __cancel_work+0x1f9/0x2e0 [ 160.165292][ T9230] ? lockdep_hardirqs_on+0x94/0x140 [ 160.170507][ T9230] ? __cancel_work+0x27b/0x2e0 [ 160.175287][ T9230] ? cancel_work+0x20/0x20 [ 160.179721][ T9230] ? lock_chain_count+0x20/0x20 [ 160.184600][ T9230] hci_request_cancel_all+0xcc/0x300 [ 160.189913][ T9230] hci_dev_do_close+0x4e/0x1030 [ 160.194806][ T9230] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 160.200814][ T9230] ? _raw_spin_unlock+0x40/0x40 [ 160.205686][ T9230] hci_rfkill_set_block+0x10a/0x190 [ 160.210926][ T9230] ? rcu_lock_release+0x20/0x20 [ 160.215807][ T9230] rfkill_set_block+0x1c6/0x420 [ 160.220725][ T9230] rfkill_fop_write+0x452/0x560 [ 160.225599][ T9230] ? rfkill_fop_read+0x4d0/0x4d0 [ 160.230567][ T9230] ? common_file_perm+0x110/0x1c0 [ 160.235797][ T9230] ? fsnotify_perm+0x5d/0x560 [ 160.240495][ T9230] ? security_file_permission+0x75/0xa0 [ 160.246067][ T9230] ? rfkill_fop_read+0x4d0/0x4d0 [ 160.251045][ T9230] vfs_write+0x30b/0xd60 [ 160.255311][ T9230] ? file_end_write+0x250/0x250 [ 160.260267][ T9230] ? __fget_files+0x40f/0x480 [ 160.265053][ T9230] ? __fdget_pos+0x1e2/0x370 [ 160.269656][ T9230] ? ksys_write+0x71/0x260 [ 160.274188][ T9230] ksys_write+0x152/0x260 [ 160.278538][ T9230] ? __ia32_sys_read+0x80/0x80 [ 160.283314][ T9230] ? lockdep_hardirqs_on+0x94/0x140 [ 160.288546][ T9230] do_syscall_64+0x4c/0xa0 [ 160.292987][ T9230] ? clear_bhb_loop+0x30/0x80 [ 160.298116][ T9230] ? clear_bhb_loop+0x30/0x80 [ 160.302860][ T9230] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 160.308782][ T9230] RIP: 0033:0x7f17ddf93819 [ 160.313207][ T9230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.332828][ T9230] RSP: 002b:00007f17dc1ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 160.341254][ T9230] RAX: ffffffffffffffda RBX: 00007f17de20cfa0 RCX: 00007f17ddf93819 [ 160.349238][ T9230] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 160.357222][ T9230] RBP: 00007f17de029c91 R08: 0000000000000000 R09: 0000000000000000 [ 160.365208][ T9230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.373188][ T9230] R13: 00007f17de20d038 R14: 00007f17de20cfa0 R15: 00007ffca0d6db48 [ 160.381182][ T9230] [ 160.384239][ C0] vkms_vblank_simulate: vblank timer overrun