last executing test programs: 3.866457507s ago: executing program 3 (id=24809): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="00020c0000000c0002d6"], 0x0, 0x0, 0x0}, 0x0) 1.566328028s ago: executing program 3 (id=24862): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000580)=[0x16, 0x3, 0x13, 0xffff, 0x0, 0x1ed, 0x2, 0x3, 0xbf, 0x0, 0x2000070, 0x84, 0xfffffff7, 0xfff, 0x10], 0x0, 0x4}) 1.386235958s ago: executing program 3 (id=24869): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x100000000009, 0x80000) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000140)={0x0, 0x0, {0xfffffffd, 0xb77, 0x100a, 0x0, 0x1, 0x9, 0x3, 0xa4de36948e08189d}}) 1.245792775s ago: executing program 3 (id=24871): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b0000000010101040000000200000000020000023c0001802c0001"], 0xb0}}, 0x40b0) 961.168969ms ago: executing program 3 (id=24875): syz_80211_inject_frame(0x0, 0x0, 0xb5) syz_80211_inject_frame(0x0, 0x0, 0x10) 938.792861ms ago: executing program 4 (id=24876): r0 = syz_open_dev$vbi(&(0x7f0000000680), 0x2, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f00000006c0)={0x42, [0xc7, 0x8, 0x8, 0x6, 0x34af, 0x5, 0x0, 0xff77, 0x6c3, 0x6, 0x4, 0x8001, 0x2, 0x7f, 0x800, 0x2, 0x1, 0x1, 0xc, 0x80, 0x2, 0xa, 0x2, 0x8, 0x401, 0x1, 0x8000, 0x1, 0x4008, 0x7f, 0xfffd, 0x8001, 0x6f, 0xd, 0xff, 0x3ff, 0x6e67, 0xe, 0x74b, 0x549e, 0x5, 0x870a, 0xfff, 0x426, 0xc, 0x7, 0x4a], 0x8}) 797.379948ms ago: executing program 4 (id=24879): r0 = socket(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x620, 0x2c8, 0x1d0, 0x468, 0x468, 0x1d0, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) 679.626675ms ago: executing program 2 (id=24880): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="3400000039000900000000000000000001000000040000000c0001802e00000005470000080002"], 0x34}}, 0x0) 677.681765ms ago: executing program 0 (id=24881): mkdir(&(0x7f0000000080)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000001"], 0x1c, 0x0) 661.628645ms ago: executing program 4 (id=24882): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_GET_COMMAND_Q(r0, 0x2205, 0x0) 618.847438ms ago: executing program 1 (id=24883): r0 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x2000, 0x6, 0x0) 572.21196ms ago: executing program 2 (id=24884): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r0, 0xc02864c3, &(0x7f0000000400)={0x0}) 566.14799ms ago: executing program 4 (id=24885): syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000e40)={[{@map_normal}, {@block={'block', 0x3d, 0x400}}, {@unhide}, {@mode={'mode', 0x3d, 0x4}}, {@block={'block', 0x3d, 0x800}}, {@check_strict}, {@showassoc}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@session={'session', 0x3d, 0x36}}, {@block={'block', 0x3d, 0x200}}, {@map_normal}, {@cruft}]}, 0x8, 0xa17, &(0x7f0000000400)="$eJzs3c1vVOe9B/Dv8QsYJwKScHO5KAkDuRAn8TW2uYGLssgFewDn+uXKNlLQXYTcYK4Qvk0bWolElUKkqqtGrdSqi3YXddVuImXTbKrs2l276qJSlX8h6oquXJ2ZMYztGY9NjE3I52PNzHn5nef5nZc5j2fmzDzh62Vp34qxpaXa7T7HL/16GzLmIXZu/IuPP/movH14O7vSnVeK3yZ9SSpJT5KDSe/Y+OzMVIeCbiRXknyeFEl2p/64IVdS/DiP3xv/PMUvy3rb2rXRkulkiW+0nT7+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgYVSMjQ8PjxS7MjF96Y1KXVJZY2x8dqbI0tLaOcvL1H1W6/W7+KxjvUlR3tLXl4P1/sIPHrg3++kklaN5pj72TK1D8vTl/cee3v/qUz1dy8u3y+Yr2b3xYm++9/6NtxYXF95tH7L0QX0dtia3h8yF6vTE3MzE1NkL1crE3EzlzKlTwycunp+rnJ+YrM5dnpuvTlXGZqtn52dmKwNjL1ZGzpw5WakOXZ65NH1hfGiyujzx9L+NDg+fqrw+9N/Vs7NzM9MnXh+aG7s4MTk5MX2hFlPOLmNOlwfif03MV+arZ6cqlWvXFxdOrsqpe/XGLoNGOq1JGTTaKWh0eHR0ZGR0dOTDRu/ZdyeceuXMK6eHh3uGV8maiAd00PJw2dN+N2/9SRzuU1e9/U8mM5HpXMobqbT8G8t4ZjOTqTbzG5bb/2MnquvW29z+N1r5nqbZh8q7o3muMdrXpv1vk8v2/d3Me3k/N/JWFrOYhby74xlt79+FVDOdicxlJhOZytnalEpjSiVnciqnMpw3czGHM5dKzmcik6lmLpczl/lUa0fUWGZTzdnMZyazqWQgY3kxlYzkTM7kZCqpZiiXM5NLmc6FjOdsrZRruV7b7ifXyfFu0MhGgkbXCVrdmJfH+uba/+qj+p8gG7b1J3G4T0uN9n9X59CBse1ICAAAANhy//KH7D3w5O//mhR5tva+/PmJyeprO50WAAAAsIVql+s9Uz70lkPPpihf/w/vdFoAAADAFipq37ErkvTncH1o+ZtQ3gQAAACAR0Tt8//nUhy+N8HrfwAAAHjEdP6N/Y4RxeDyz/9WrtYfrzYi6mNF//mJyerQ2MzkqyM5XvuVgdo3DdaU1p0UvbWvH7yUI/WoI/31x/57JZZ19pVRI0OvjuSlHG2syMDz5cPzAy0iR+uRL9QjX2iO7M6KyJNlJAA86o6u0x5vtP1/KYP1iMFDtSa/51CLNnhYywoAD4u7fez8vdGlWYv2vxHxXLv2/9/Xef1fRjyZa4frlxQM5e28k8VczWAaVxwcXlFqkdxuyq5+GcJgh3cD+huXLPzpdFcG17wf0He3tObYhYxmsOU7Ak3lFss5nKzHdW/99geAnXC0dTu8qfZ/sMPr/36XFALAQ+VuD/abGPhgM8EL797c6XUEAFbSSgMAAAAAAAAAAAAAAAAAAAAAAAAAAMDW29AP+P/xeLK4uJDcR2cB9z3Qt5kM1x/oyoPOec+2bZb1B7qT7FTtr2XTS5X7+CtU+ps9X2lxA+sN7PCJCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG1RJN2tpnclu5MMJzmx/Vk9OLd3OoGtUrm/xYo7uZNb2bvV6QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfNM1fv+/K/XHx+qT0tOVHEtyJcn/7HSOW+nOTiewY/6/dr/UUN/nvVkq0lPf7Sl6x8ZnZ6bK3V/sLud/8fEnH5W3zmWv7VWhLKCsYUXnEo0amqb0rlzqidpS/eMLN298951vV8bP1Q7Mc/PnJ8enLsz+573Ap4tP610gNHeDsJzv94/97idNk3c1Kv+0XNPWVtd7vlbv+Np6/7nV0m3q3YDriwujZU3z1Tfmv/et67eattaTOZI8P5AMrKzp/8pbm5qOrN6eKxVfFj8s9ubnuVLr/6HcGsVSUe6ifbX133Pt+uLC0NvvLF69m9MH1281FbA/h5NcTfo2ntPh2vmkpdpR19Vb1jpcBu0t7w50KG9dTSWONG/XppAnaodM/6bWodJ+HWo6bPdGRidbZvTT7zyV45ve08c71NhS8WXxl+Ji/pwfNPX/0VXu/2Np+exsUUQtsulIaZ634unVVY+srflo84w3V5fZ9lnJlqqdkvOj/G/+4+7+72o6/zf2VZvnzRafj5pqbP28SDb/vPjVvjUtyqrVP7CqRWqcfdot08jzQD2qTZ7/lJeTnkObOqO83OGM8qCe/78oBvK33Nb/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8PArku5W07uSY0n2J9lXjleSpdUxt9cruK/15K7+4n5T3RLr5vzIKNquaHEnd3Ire7c7IwAAAAAAAAAejHPjX3z8yUflrfZ5fHf+tasxp5L0JNlf/Kx3bHx2ZqpDQb3JleWP9Nt85t/OlfLu8Xvjn5djBzsstLOXDwDA19o/AgAA//9chnNk") mkdir(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x22) 515.414373ms ago: executing program 1 (id=24886): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x52, 0x1, 0x3, 0x0, {0x1c}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x1c}}, 0x0) 481.339575ms ago: executing program 0 (id=24887): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xa, 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 466.035546ms ago: executing program 2 (id=24888): r0 = openat$vfio(0xffffffffffffff9c, &(0x7f00000001c0), 0x60000, 0x0) pread64(r0, 0x0, 0x0, 0x3) 432.198407ms ago: executing program 1 (id=24889): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000009c0)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000500, 0x0, 0x0, 0x200000000530, 0x200000000560], 0x0, 0x0, &(0x7f0000000500)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) 427.338098ms ago: executing program 2 (id=24890): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000170000008500000007000000950000000000000014fea3ff2b22f21964e7545c6f9c8ca4a9cc1127f4e691ba6ded9b130675d673531cf2efac11b4f4f677897768de4bbce6240ef0707022914216e76322314953534d805658d29e2ab6d3f99a0af296c62c1d8002ccd1208d156a0cfff8613304c6a2017257c3c2de1214ae133e641cc5b05f30cee47af16b0be8cc3d343c0d8273516a7ba700812f20dfe38c217c16fc1daf198e413d297b22552c6be588312c204986ff8cafa41a00"/220], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 422.536698ms ago: executing program 0 (id=24891): r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="2503000019002551075c0165ff0ffc02802000030004000500e1000cee020f001a000000", 0x33a) 310.170524ms ago: executing program 4 (id=24892): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, 0x0, &(0x7f0000000240)=0x8) 309.658244ms ago: executing program 1 (id=24893): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001200)=@broute={'broute\x00', 0x5e04, 0x0, 0x90, [0x0, 0x0, 0x200000000400], 0x2, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000041000000000000000000000000000000000000000000000000000000000000000000000000000100000000ffffffff00000000000000000000000000000000000062a1fd43c48d810000000000000000000000000000000000000000000000000000fcffffff000000000000"]}, 0x108) 297.733594ms ago: executing program 0 (id=24894): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0x304000, 0xc00, 0x0, 0x3}, 0x1c) 216.501739ms ago: executing program 1 (id=24895): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x1, 0x1, 0x1}) 197.25673ms ago: executing program 3 (id=24896): r0 = syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002000000086624108040000102030109026000030100008409040000000101"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 191.10428ms ago: executing program 0 (id=24897): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0xbc, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @empty}}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x89}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast1}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0xb, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x2400c890}, 0x4) 102.404835ms ago: executing program 1 (id=24898): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000001180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000400)="e4e647c9e0b8e9a2f2ab3026da58", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 101.834135ms ago: executing program 2 (id=24899): r0 = socket$unix(0x1, 0x2, 0x0) listen(r0, 0x0) 44.741948ms ago: executing program 0 (id=24900): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000000206010400000000000000020000000505000400000000000900020073797a30000000000500010007000000050005000a0000000c000780080012000000000012000300686173683a6e6574"], 0x58}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) 8.447329ms ago: executing program 4 (id=24901): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 0s ago: executing program 2 (id=24902): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000000207010100000000000000000a0000060c000340000000000000000534000780080001"], 0x54}}, 0x40010) kernel console output (not intermixed with test programs): 0: f81232_set_register failed status: -71 [ 1306.479375][T13733] f81534a: probe of ttyUSB0 failed with error -5 [ 1306.535959][T13733] usb 4-1: USB disconnect, device number 72 [ 1306.552054][T13733] f81232 4-1:0.0: device disconnected [ 1306.576505][T30832] loop0: detected capacity change from 0 to 40427 [ 1306.623875][T30869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22693'. [ 1306.667813][T30832] F2FS-fs (loop0): invalid crc value [ 1306.693713][T30873] overlayfs: missing 'lowerdir' [ 1306.704595][T30832] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1306.838987][T30886] netlink: 24 bytes leftover after parsing attributes in process `syz.2.22697'. [ 1306.897035][T30832] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1307.006991][T30893] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1307.115604][T30900] loop2: detected capacity change from 0 to 128 [ 1307.123096][T30832] F2FS-fs (loop0): switch extent_cache option is not allowed [ 1307.209673][T30900] affs: No valid root block on device loop2 [ 1307.781170][T30956] ieee802154 phy1 wpan1: encryption failed: -22 [ 1308.058294][T30976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22726'. [ 1308.558095][T31030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22745'. [ 1308.710982][T31046] netlink: 56 bytes leftover after parsing attributes in process `syz.2.22750'. [ 1308.754900][T31052] vivid-001: ================= START STATUS ================= [ 1308.770033][T31052] vivid-001: Test Pattern: 75% Colorbar [ 1308.800402][T31052] vivid-001: Fill Percentage of Frame: 100 [ 1308.816656][T31052] vivid-001: Horizontal Movement: Move Left Slow [ 1308.851649][T31052] vivid-001: Vertical Movement: No Movement [ 1308.874177][T31052] vivid-001: OSD Text Mode: All [ 1308.898254][T31052] vivid-001: Show Border: true [ 1308.927041][T31052] vivid-001: Show Square: true [ 1308.947483][T31052] vivid-001: Sensor Flipped Horizontally: false [ 1308.970223][T31052] vivid-001: Sensor Flipped Vertically: false [ 1308.998525][T31052] vivid-001: Insert SAV Code in Image: false [ 1309.053196][T31052] vivid-001: Insert EAV Code in Image: false [ 1309.072803][T31052] vivid-001: Reduced Framerate: false [ 1309.093047][T31052] vivid-001: Enable Capture Cropping: false [ 1309.102113][T31078] xt_hashlimit: invalid interval [ 1309.110003][T31052] vivid-001: Enable Capture Composing: true [ 1309.133498][T31052] vivid-001: Enable Capture Scaler: true [ 1309.172147][T31052] vivid-001: Timestamp Source: End of Frame [ 1309.229911][T31052] vivid-001: Colorspace: SMPTE 170M [ 1309.235263][T31052] vivid-001: Transfer Function: opRGB [ 1309.254192][T31052] vivid-001: Y'CbCr Encoding: ITU-R 601 [ 1309.304155][T31052] vivid-001: HSV Encoding: Hue 0-256 [ 1309.325935][T31052] vivid-001: Quantization: Default [ 1309.333241][T31052] vivid-001: Apply Alpha To Red Only: true [ 1309.371656][T31052] vivid-001: Standard Aspect Ratio: 4x3 [ 1309.392751][T31052] vivid-001: DV Timings Signal Mode: Current DV Timings inactive [ 1309.439745][T31052] vivid-001: DV Timings: 640x480p59 inactive [ 1309.446721][T31052] vivid-001: DV Timings Aspect Ratio: Source Width x Height [ 1309.462956][T31052] vivid-001: Maximum EDID Blocks: 1 [ 1309.469342][T31052] vivid-001: Limited RGB Range (16-235): true [ 1309.480404][T31052] vivid-001: Rx RGB Quantization Range: Automatic [ 1309.487760][T31052] vivid-001: Power Present: 0x00000001 [ 1309.493501][T31052] tpg source WxH: 720x576 (Y'CbCr) [ 1309.499156][T31052] tpg field: 4 [ 1309.502642][T31052] tpg crop: 720x576@0x0 [ 1309.507022][T31052] tpg compose: 16x8@0x0 [ 1309.539333][T31052] tpg colorspace: 1 [ 1309.543357][T31052] tpg transfer function: 3/0 [ 1309.581736][T31052] tpg Y'CbCr encoding: 1/0 [ 1309.595805][T31052] tpg quantization: 0/0 [ 1309.612860][T31052] tpg RGB range: 0/1 [ 1309.625129][T31052] vivid-001: ================== END STATUS ================== [ 1310.052677][T15668] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 1310.480397][T15668] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1310.512490][T15668] usb 2-1: config 0 has no interface number 0 [ 1310.704955][T15668] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1310.726743][T15668] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.734802][T15668] usb 2-1: Product: syz [ 1310.776897][T15668] usb 2-1: Manufacturer: syz [ 1310.802478][T15668] usb 2-1: SerialNumber: syz [ 1310.823376][T15668] usb 2-1: config 0 descriptor?? [ 1310.868027][T15668] usb 2-1: selecting invalid altsetting 1 [ 1310.889545][T15668] dvb_ttusb_budget: ttusb_init_controller: error [ 1310.895935][T15668] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1311.027961][T31238] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 1311.087551][T31122] udc-core: couldn't find an available UDC or it's busy [ 1311.099820][T15668] DVB: Unable to find symbol stv0299_attach() [ 1311.105976][T31122] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1311.246580][T15668] DVB: Unable to find symbol tda8083_attach() [ 1311.255973][T15668] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1311.317906][T15668] usb 2-1: USB disconnect, device number 63 [ 1311.385717][T31182] loop4: detected capacity change from 0 to 32768 [ 1311.474822][T31182] [ 1311.474822][T31182] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1311.474822][T31182] [ 1311.619467][ T4196] [ 1311.619467][ T4196] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1311.619467][ T4196] [ 1311.661502][ T4196] [ 1311.661502][ T4196] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1311.661502][ T4196] [ 1311.830238][T31303] netlink: 'syz.0.22813': attribute type 4 has an invalid length. [ 1311.913276][T31303] netlink: 206236 bytes leftover after parsing attributes in process `syz.0.22813'. [ 1312.336510][T31347] bridge0: port 1(bridge_slave_0) entered disabled state [ 1312.403181][T31347] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1312.458072][T31357] netlink: 'syz.1.22827': attribute type 12 has an invalid length. [ 1312.867409][T31387] sctp: [Deprecated]: syz.1.22839 (pid 31387) Use of int in max_burst socket option. [ 1312.867409][T31387] Use struct sctp_assoc_value instead [ 1313.011889][T31401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22845'. [ 1313.051098][T31317] loop4: detected capacity change from 0 to 40427 [ 1313.065350][T31401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22845'. [ 1313.088711][T31401] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 1313.117377][T31317] F2FS-fs (loop4): Invalid log blocks per segment (4278190089) [ 1313.142275][T31317] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1313.184066][T31317] F2FS-fs (loop4): invalid crc value [ 1313.231135][T31317] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1313.281155][T13727] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1313.310507][T31433] netlink: 'syz.0.22850': attribute type 2 has an invalid length. [ 1313.394520][T31437] loop3: detected capacity change from 0 to 256 [ 1313.401523][T31317] F2FS-fs (loop4): recover fsync data on readonly fs [ 1313.440819][T31317] F2FS-fs (loop4): Try to recover 1th superblock, ret: -30 [ 1313.452513][T31317] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1313.537611][T13727] usb 2-1: Using ep0 maxpacket: 32 [ 1313.558057][T31437] FAT-fs (loop3): Directory bread(block 64) failed [ 1313.573909][T31317] F2FS-fs (loop4): Corrupted max_depth of 3: 255 [ 1313.585076][T31437] FAT-fs (loop3): Directory bread(block 65) failed [ 1313.603061][T31437] FAT-fs (loop3): Directory bread(block 66) failed [ 1313.614073][T31317] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1313.625743][T31437] FAT-fs (loop3): Directory bread(block 67) failed [ 1313.632513][T31437] FAT-fs (loop3): Directory bread(block 68) failed [ 1313.666243][T13727] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 231, changing to 7 [ 1313.681858][T31437] FAT-fs (loop3): Directory bread(block 69) failed [ 1313.711734][T31437] FAT-fs (loop3): Directory bread(block 70) failed [ 1313.718325][T31437] FAT-fs (loop3): Directory bread(block 71) failed [ 1313.735248][T31437] FAT-fs (loop3): Directory bread(block 72) failed [ 1313.742629][T31437] FAT-fs (loop3): Directory bread(block 73) failed [ 1313.880100][T13727] usb 2-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 1313.900098][T13727] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1313.939872][T31466] bridge0: port 1(bridge_slave_0) entered disabled state [ 1313.948532][T13727] usb 2-1: Product: syz [ 1313.952744][T13727] usb 2-1: Manufacturer: syz [ 1313.970741][T13727] usb 2-1: SerialNumber: syz [ 1314.043708][T31466] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1314.284503][T31399] udc-core: couldn't find an available UDC or it's busy [ 1314.328928][T31399] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1314.472640][T13727] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1314.549657][T13727] usb 2-1: USB disconnect, device number 64 [ 1314.604999][T31522] loop3: detected capacity change from 0 to 2048 [ 1314.749979][T31522] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1314.843655][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1314.881734][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1314.913858][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1314.949274][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1314.956773][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1314.974101][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1314.988970][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.013139][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.020593][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.050271][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.060947][T31568] netlink: 'syz.0.22887': attribute type 1 has an invalid length. [ 1315.072583][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.080616][T31568] netlink: 'syz.0.22887': attribute type 3 has an invalid length. [ 1315.092706][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.098676][T31568] netlink: 132 bytes leftover after parsing attributes in process `syz.0.22887'. [ 1315.113719][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.140346][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.150691][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.164150][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.171706][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.183021][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.192210][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.208782][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.224619][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.240706][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.249767][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.257235][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.268452][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.277540][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.288796][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.297870][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.314510][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.325185][T31579] netlink: 44 bytes leftover after parsing attributes in process `syz.0.22892'. [ 1315.329083][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.343451][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.354796][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.363931][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.375236][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.383138][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.391106][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.398977][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.406445][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.414346][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.422090][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.427598][T31582] x_tables: duplicate entry at hook 2 [ 1315.431226][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.442840][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.450350][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.458216][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.465948][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.473759][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.481181][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.489085][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.497185][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.505030][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.512516][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.520352][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.528098][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.535609][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.543425][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.552320][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.563454][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.572308][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.583400][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.591281][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.598760][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.606720][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.614554][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.622525][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.630098][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.638051][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.645801][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.653347][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.661209][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.669029][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.677859][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.685420][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.696712][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.705622][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.716712][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.724644][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.732555][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.740358][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.747788][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.755632][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.763379][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.770880][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.778679][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.786453][ T8872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1315.822039][ T8872] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.03 Device [syz1] on syz1 [ 1315.970821][T31606] netlink: 20 bytes leftover after parsing attributes in process `syz.3.22884'. [ 1316.040072][T31611] netlink: 12 bytes leftover after parsing attributes in process `syz.4.22902'. [ 1316.062623][T31611] netlink: 12 bytes leftover after parsing attributes in process `syz.4.22902'. [ 1316.408907][T31650] netlink: 48 bytes leftover after parsing attributes in process `syz.0.22915'. [ 1316.466328][T31650] netlink: 28 bytes leftover after parsing attributes in process `syz.0.22915'. [ 1316.499830][T31650] netlink: 'syz.0.22915': attribute type 8 has an invalid length. [ 1316.555231][T31667] ceph: No path or : separator in source [ 1316.647514][T31673] openvswitch: netlink: Flow key attribute not present in set flow. [ 1316.787285][T31691] loop2: detected capacity change from 0 to 512 [ 1316.951300][T31691] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1317.213064][T31740] cifs: Unknown parameter 'zsdN#b,IT&:"1:ӭ'4,Zz-#F< [ 1317.213064][T31740] SȘȞZ6' [ 1317.230520][T31718] fido_id[31718]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1317.682707][T31811] netlink: 'syz.3.22953': attribute type 22 has an invalid length. [ 1317.691434][T31806] loop1: detected capacity change from 0 to 4096 [ 1317.717368][T31806] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 1317.737534][T31811] (unnamed net_device) (uninitialized): option ad_select: invalid value (7) [ 1317.821025][T31806] ntfs3: loop1: Failed to load $Extend. [ 1317.873763][T31826] loop2: detected capacity change from 0 to 2048 [ 1317.954112][T31826] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1318.091881][ T8872] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1318.222460][T31843] xt_hashlimit: max too large, truncated to 1048576 [ 1318.229352][T31843] No such timeout policy "syz1" [ 1318.348620][ T8872] usb 5-1: Using ep0 maxpacket: 16 [ 1318.522910][T31864] netlink: 'syz.3.22968': attribute type 1 has an invalid length. [ 1318.658735][ T8872] usb 5-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=41.ba [ 1318.687305][ T8872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.707633][ T8872] usb 5-1: Product: syz [ 1318.722536][ T8872] usb 5-1: Manufacturer: syz [ 1318.733396][ T8872] usb 5-1: SerialNumber: syz [ 1318.747445][ T8872] usb 5-1: config 0 descriptor?? [ 1318.873825][T31874] loop2: detected capacity change from 0 to 4096 [ 1318.922119][T31874] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 1319.029859][ T8872] snd-usb-hiface: probe of 5-1:0.0 failed with error -22 [ 1319.111561][T31903] __nla_validate_parse: 3 callbacks suppressed [ 1319.111579][T31903] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.22981'. [ 1319.287294][ T4406] usb 5-1: USB disconnect, device number 83 [ 1319.383136][T31928] device xfrm0 entered promiscuous mode [ 1319.848805][T31954] loop2: detected capacity change from 0 to 4096 [ 1319.865183][T31896] loop3: detected capacity change from 0 to 32768 [ 1319.941567][T31954] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 1320.011778][T31896] XFS (loop3): Mounting V5 Filesystem [ 1320.076259][T31954] ntfs3: loop2: failed to convert "c46c" to cp1250 [ 1320.148210][T31896] XFS (loop3): Ending clean mount [ 1320.162467][T31896] XFS (loop3): Quotacheck needed: Please wait. [ 1320.325598][T31896] XFS (loop3): Quotacheck: Done. [ 1320.422467][T15668] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1320.472108][ T4192] XFS (loop3): Unmounting Filesystem [ 1320.490829][T32004] loop4: detected capacity change from 0 to 4096 [ 1320.562794][T32004] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1320.626942][T32004] ntfs3: loop4: Failed to load $MFT. [ 1320.681975][T32024] loop1: detected capacity change from 0 to 22 [ 1320.755585][T32024] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1320.812370][T32024] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1320.878946][T15668] usb 1-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e [ 1320.905319][T15668] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1321.012972][T15668] pwc: Logitech/Cisco VT Camera webcam detected. [ 1321.368265][T32004] loop4: detected capacity change from 0 to 32768 [ 1321.438709][T32004] XFS: attr2 mount option is deprecated. [ 1321.459573][T15668] pwc: send_video_command error -71 [ 1321.464838][T15668] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1321.481176][T32004] XFS (loop4): invalid logbufsize: 14336 [not 16k,32k,64k,128k or 256k] [ 1321.512829][T15668] Philips webcam: probe of 1-1:127.0 failed with error -71 [ 1321.532294][T15668] usb 1-1: USB disconnect, device number 66 [ 1321.623959][T32085] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1322.054606][T32130] device batadv_slave_0 entered promiscuous mode [ 1322.074401][T32130] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 1322.128587][T32135] netlink: 'syz.0.23044': attribute type 6 has an invalid length. [ 1322.235602][T32147] delete_channel: no stack [ 1322.314674][ T4406] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 1322.462365][T32170] loop2: detected capacity change from 0 to 128 [ 1322.501089][T32173] loop0: detected capacity change from 0 to 256 [ 1322.611230][T32170] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,,errors=continue. Quota mode: none. [ 1322.700125][ T4406] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1322.723050][T32197] loop4: detected capacity change from 0 to 256 [ 1322.745209][T32170] EXT4-fs warning (device loop2): verify_group_input:147: Cannot add at group 3 (only 1 groups) [ 1322.913632][ T4406] usb 4-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 1322.925467][ T4406] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1322.933527][ T4406] usb 4-1: Product: syz [ 1322.956203][ T4406] usb 4-1: Manufacturer: syz [ 1322.997429][ T4406] usb 4-1: SerialNumber: syz [ 1323.053697][ T4406] usb 4-1: config 0 descriptor?? [ 1323.263972][T32228] damon: invalid nr_regions. min (30786325577728) > max (1023) [ 1323.341577][ T4406] cdc_subset: probe of 4-1:0.0 failed with error -22 [ 1323.573182][ T4406] usb 4-1: USB disconnect, device number 73 [ 1323.899619][T32283] kAFS: No cell specified [ 1324.033858][T32300] netlink: 12 bytes leftover after parsing attributes in process `syz.2.23094'. [ 1324.062275][T32300] tc_dump_action: action bad kind [ 1324.078818][ T4268] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 1324.262902][T32319] netlink: 'syz.4.23100': attribute type 1 has an invalid length. [ 1324.318698][T15668] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1324.528319][ T4268] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 1324.606720][T32335] loop4: detected capacity change from 0 to 8192 [ 1324.666859][T32335] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 1324.690199][T32335] REISERFS (device loop4): using ordered data mode [ 1324.697159][T32335] reiserfs: using flush barriers [ 1324.707896][T32335] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1324.736921][T32335] REISERFS (device loop4): checking transaction log (loop4) [ 1324.746132][T32335] REISERFS (device loop4): Using r5 hash to sort names [ 1324.753563][T32335] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 1324.763351][T15668] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1324.773898][ T4268] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1324.783012][ T4268] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1324.824359][T15668] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1324.844108][ T4268] usb 1-1: Product: syz [ 1324.861862][ T4268] usb 1-1: Manufacturer: syz [ 1324.866933][ T4268] usb 1-1: SerialNumber: syz [ 1324.876534][ T4268] usb 1-1: config 0 descriptor?? [ 1324.913044][T32270] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1325.062625][T15668] usb 2-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 1325.080597][T15668] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.122107][T15668] usb 2-1: Product: syz [ 1325.132267][T15668] usb 2-1: Manufacturer: syz [ 1325.143498][T15668] usb 2-1: SerialNumber: syz [ 1325.221844][ T4919] usb 1-1: USB disconnect, device number 67 [ 1325.281182][T32405] netlink: 20 bytes leftover after parsing attributes in process `syz.4.23123'. [ 1325.308845][T32405] netlink: 36 bytes leftover after parsing attributes in process `syz.4.23123'. [ 1325.338570][T32408] loop3: detected capacity change from 0 to 4096 [ 1325.377007][T32408] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1325.422299][T32408] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue. Quota mode: writeback. [ 1325.559591][T32429] netlink: 'syz.2.23129': attribute type 1 has an invalid length. [ 1325.586532][T15668] usb 2-1: 0:1 : does not exist [ 1325.596020][T15668] usb 2-1: unit 0 not found! [ 1325.612002][T32429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23129'. [ 1325.650287][T15668] usb 2-1: USB disconnect, device number 65 [ 1325.697944][T32408] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 1325.952051][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1326.871639][T32541] loop2: detected capacity change from 0 to 4096 [ 1327.019299][T32541] EXT4-fs (loop2): inline encryption not supported [ 1327.026211][T32541] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1327.064310][T32572] netlink: 'syz.1.23173': attribute type 1 has an invalid length. [ 1327.074421][T32541] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 1327.087273][T32572] netlink: 224 bytes leftover after parsing attributes in process `syz.1.23173'. [ 1327.117282][T32541] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1327.146843][T32541] System zones: 0-5 [ 1327.160988][T32578] netlink: 'syz.3.23175': attribute type 1 has an invalid length. [ 1327.183617][T32541] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,grpjquota=./file0,,errors=continue. Quota mode: writeback. [ 1327.204001][ C1] vkms_vblank_simulate: vblank timer overrun [ 1327.211419][T32578] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.23175'. [ 1327.266220][T32541] EXT4-fs error (device loop2): ext4_lookup:1858: inode #15: comm syz.2.23162: iget: bad i_size value: -4294967286 [ 1327.386794][T32594] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1327.450287][T32603] overlayfs: workdir and upperdir must be separate subtrees [ 1327.801236][T32637] netlink: 736 bytes leftover after parsing attributes in process `syz.2.23192'. [ 1327.847109][T32644] CIFS mount error: No usable UNC path provided in device string! [ 1327.847109][T32644] [ 1327.905785][T32644] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1328.066444][T32657] Process accounting resumed [ 1328.307673][T32697] netlink: 'syz.4.23213': attribute type 2 has an invalid length. [ 1328.326619][T32697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23213'. [ 1328.472663][ T4919] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1328.900694][ T4919] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1328.941753][ T4919] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 1329.049831][T15668] usb 5-1: new full-speed USB device number 84 using dummy_hcd [ 1329.076348][ T4919] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1329.092667][ T4919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1329.135359][ T4919] usb 2-1: SerialNumber: syz [ 1329.202123][ T4919] cdc_ether 2-1:1.0: skipping garbage [ 1329.207601][ T4919] usb 2-1: bad CDC descriptors [ 1329.222305][ T303] (unnamed net_device) (uninitialized): option lacp_active: invalid value (161) [ 1329.305643][ T312] loop0: detected capacity change from 0 to 256 [ 1329.339328][ T314] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (8) [ 1329.399691][ T312] FAT-fs (loop0): Directory bread(block 1285) failed [ 1329.414426][ T312] FAT-fs (loop0): Directory bread(block 1286) failed [ 1329.431270][ T312] FAT-fs (loop0): Directory bread(block 1287) failed [ 1329.456116][ T4919] usb 2-1: USB disconnect, device number 66 [ 1329.476895][ T312] FAT-fs (loop0): Directory bread(block 1288) failed [ 1329.515231][ T312] FAT-fs (loop0): Directory bread(block 1285) failed [ 1329.521330][T15668] usb 5-1: config 128 interface 0 has no altsetting 0 [ 1329.525582][ T312] FAT-fs (loop0): Directory bread(block 1286) failed [ 1329.536582][T15668] usb 5-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 1329.562806][T15668] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.589065][ T312] FAT-fs (loop0): Directory bread(block 1287) failed [ 1329.614329][ T312] FAT-fs (loop0): Directory bread(block 1288) failed [ 1329.634844][ T312] FAT-fs (loop0): Directory bread(block 1285) failed [ 1329.656212][ T340] netlink: 'syz.2.23246': attribute type 19 has an invalid length. [ 1329.656365][ T312] FAT-fs (loop0): Directory bread(block 1286) failed [ 1329.855951][ T354] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 41864 - 0 [ 1329.875849][T15668] comedi comedi5: could not set alternate setting 3 in high speed [ 1329.883917][ T354] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 41864 - 0 [ 1329.893915][T15668] usbduxsigma 5-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 1329.903107][ T354] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 41864 - 0 [ 1329.933771][T15668] usbduxsigma: probe of 5-1:128.0 failed with error -71 [ 1329.940138][ T354] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 41864 - 0 [ 1329.964486][T15668] usb 5-1: USB disconnect, device number 84 [ 1329.976293][ T354] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 41560 - 0 [ 1330.010538][ T372] overlayfs: empty lowerdir [ 1330.020680][ T354] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 41560 - 0 [ 1330.068152][ T354] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 41560 - 0 [ 1330.094338][ T354] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 41560 - 0 [ 1330.114126][ T354] device geneve5 entered promiscuous mode [ 1330.717154][ T437] loop2: detected capacity change from 0 to 1764 [ 1330.809647][ T437] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 1331.360101][ T482] (syz.3.23288,482,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 1331.394848][ T482] (syz.3.23288,482,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 1331.554250][ T430] loop0: detected capacity change from 0 to 40427 [ 1331.612477][ T430] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(1) root(3) [ 1331.646069][ T501] loop2: detected capacity change from 0 to 512 [ 1331.659306][ T430] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 1331.692376][ T430] F2FS-fs (loop0): Project quota feature not enabled. Cannot enable project quota enforcement. [ 1331.730385][ T501] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1331.846320][ T520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23300'. [ 1331.920133][ T501] EXT4-fs error (device loop2): ext4_find_extent:929: inode #4: comm syz.2.23295: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 1332.066947][ T501] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=-117 [ 1332.096725][ T501] EXT4-fs warning (device loop2): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1332.140115][ T501] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 1332.161477][ T501] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,journal_ioprio=0x0000000000000005,,errors=continue. Quota mode: writeback. [ 1332.262790][ T501] EXT4-fs error (device loop2): ext4_lookup:1855: inode #2: comm syz.2.23295: 'file0' linked to parent dir [ 1332.740364][ T577] trusted_key: encrypted_key: master key parameter '' is invalid [ 1332.920027][ T8872] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1333.141495][ T617] netlink: 20 bytes leftover after parsing attributes in process `syz.3.23331'. [ 1333.180827][ T8872] usb 2-1: Using ep0 maxpacket: 32 [ 1333.186206][ T617] netlink: 12 bytes leftover after parsing attributes in process `syz.3.23331'. [ 1333.218867][ T617] netlink: 31 bytes leftover after parsing attributes in process `syz.3.23331'. [ 1333.231646][ T617] netlink: 'syz.3.23331': attribute type 3 has an invalid length. [ 1333.239575][ T617] netlink: 'syz.3.23331': attribute type 2 has an invalid length. [ 1333.248268][ T617] netlink: 31 bytes leftover after parsing attributes in process `syz.3.23331'. [ 1333.258053][ T617] netlink: 16 bytes leftover after parsing attributes in process `syz.3.23331'. [ 1333.267849][ T617] netlink: 16 bytes leftover after parsing attributes in process `syz.3.23331'. [ 1333.304823][ T8872] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1333.326140][ T8872] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1333.335082][ T8872] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1333.442377][ T638] binder: 637:638 ioctl 400c620e 200000000340 returned -22 [ 1333.476814][ T641] (unnamed net_device) (uninitialized): ARP monitoring cannot be used with MII monitoring [ 1333.561572][ T8872] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1333.580036][ T8872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.602326][ T8872] usb 2-1: Product: syz [ 1333.623744][ T8872] usb 2-1: Manufacturer: syz [ 1333.641298][ T8872] usb 2-1: SerialNumber: syz [ 1333.712275][ T8872] cdc_ncm 2-1:1.0: skipping garbage [ 1333.718446][ T8872] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 1333.740475][ T8872] cdc_ncm 2-1:1.0: bind() failure [ 1333.943340][ T8872] usb 2-1: USB disconnect, device number 67 [ 1333.991347][ T686] binder: Bad value for 'max' [ 1334.051042][ T692] IPVS: stopping backup sync thread 2269 ... [ 1334.494503][ T651] loop3: detected capacity change from 0 to 40427 [ 1334.888430][ T725] syz.4.23365 (725): drop_caches: 2 [ 1334.905223][ T651] F2FS-fs (loop3): build fault injection attr: rate: 14, type: 0x1ffff [ 1334.940202][ T651] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x1c [ 1334.987743][ T651] F2FS-fs (loop3): invalid crc value [ 1335.006905][ T752] loop2: detected capacity change from 0 to 4096 [ 1335.045317][ T651] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1335.182320][ T651] F2FS-fs (loop3) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x43c/0xaa0 [ 1335.312393][ T779] ieee802154 phy1 wpan1: encryption failed: -22 [ 1335.319812][ T651] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1335.494482][ T796] loop1: detected capacity change from 0 to 256 [ 1335.527981][ T798] ieee802154 phy1 wpan1: encryption failed: -22 [ 1335.570537][ T788] loop0: detected capacity change from 0 to 8192 [ 1335.613440][ T4192] attempt to access beyond end of device [ 1335.613440][ T4192] loop3: rw=2049, want=45104, limit=40427 [ 1335.667639][ T788] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 1335.695618][ T796] FAT-fs (loop1): Directory bread(block 64) failed [ 1335.728323][ T788] REISERFS (device loop0): using ordered data mode [ 1335.736884][ T788] reiserfs: using flush barriers [ 1335.753624][ T788] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1335.816684][ T796] FAT-fs (loop1): Directory bread(block 65) failed [ 1335.824035][ T796] FAT-fs (loop1): Directory bread(block 66) failed [ 1335.843410][ T796] FAT-fs (loop1): Directory bread(block 67) failed [ 1335.862883][ T796] FAT-fs (loop1): Directory bread(block 68) failed [ 1335.869490][ T796] FAT-fs (loop1): Directory bread(block 69) failed [ 1335.928739][ T796] FAT-fs (loop1): Directory bread(block 70) failed [ 1335.950970][ T796] FAT-fs (loop1): Directory bread(block 71) failed [ 1335.971264][ T796] FAT-fs (loop1): Directory bread(block 72) failed [ 1335.982850][ T788] REISERFS (device loop0): checking transaction log (loop0) [ 1336.025140][ T796] FAT-fs (loop1): Directory bread(block 73) failed [ 1336.335443][ T788] REISERFS (device loop0): Using tea hash to sort names [ 1336.355988][ T788] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 1336.370938][ T788] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 1336.556261][ T852] netlink: 140 bytes leftover after parsing attributes in process `syz.4.23404'. [ 1336.821426][ T865] xt_CT: No such helper "snmp" [ 1336.933772][ T886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23413'. [ 1336.987945][ T889] loop1: detected capacity change from 0 to 256 [ 1337.521153][ T945] loop3: detected capacity change from 0 to 64 [ 1337.536721][ T947] loop4: detected capacity change from 0 to 64 [ 1337.736967][ T971] loop1: detected capacity change from 0 to 8 [ 1337.907138][ T990] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1338.421717][ T1043] netlink: 'syz.0.23464': attribute type 3 has an invalid length. [ 1338.458306][ T1043] netlink: 'syz.0.23464': attribute type 3 has an invalid length. [ 1338.576721][ T1066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23468'. [ 1338.950289][ T1015] loop4: detected capacity change from 0 to 32768 [ 1339.010538][ T1113] netlink: 12 bytes leftover after parsing attributes in process `syz.3.23482'. [ 1339.129276][ T1122] loop0: detected capacity change from 0 to 1024 [ 1339.285819][ T1139] loop1: detected capacity change from 0 to 2048 [ 1339.290150][ T1122] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1339.304443][ T1146] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1339.315750][ T1122] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1339.351525][ T1122] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm syz.0.23485: Invalid inode table block 0 in block_group 0 [ 1339.386670][ T1122] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 1339.403435][ T1139] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 1339.412147][ T1122] EXT4-fs error (device loop0): ext4_quota_write:6648: inode #3: comm syz.0.23485: mark_inode_dirty error [ 1339.440478][ T1139] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1339.450378][ T1122] Quota error (device loop0): write_blk: dquota write failed [ 1339.466883][ T1157] netlink: 'syz.3.23493': attribute type 1 has an invalid length. [ 1339.484587][ T4406] usb 5-1: new full-speed USB device number 85 using dummy_hcd [ 1339.517596][ T1122] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1339.529263][ T1122] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.23485: Failed to acquire dquot type 0 [ 1339.540671][ T1157] netlink: 224 bytes leftover after parsing attributes in process `syz.3.23493'. [ 1339.540696][ T1157] NCSI netlink: No device for ifindex 0 [ 1339.569358][ T1122] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm syz.0.23485: Invalid inode table block 0 in block_group 0 [ 1339.596171][ T1122] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 1339.635321][ T8872] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1339.665486][ T1122] EXT4-fs error (device loop0): ext4_ext_truncate:4472: inode #15: comm syz.0.23485: mark_inode_dirty error [ 1339.708550][ T1122] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm syz.0.23485: Invalid inode table block 0 in block_group 0 [ 1339.761019][ T1122] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 1339.792644][ T1122] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 1339.806509][ T1175] loop3: detected capacity change from 0 to 512 [ 1339.841837][ T1122] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm syz.0.23485: Invalid inode table block 0 in block_group 0 [ 1339.878825][ T1122] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 1339.879027][ T1122] EXT4-fs error (device loop0): ext4_truncate:4286: inode #15: comm syz.0.23485: mark_inode_dirty error [ 1339.881785][ T1122] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 1339.882074][ T1122] EXT4-fs (loop0): 1 truncate cleaned up [ 1339.882214][ T1122] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1339.890538][ T4406] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1339.890567][ T4406] usb 5-1: config 0 has no interface number 0 [ 1339.890604][ T4406] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1339.890644][ T4406] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1339.890683][ T4406] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1339.890710][ T4406] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1339.890808][ T8872] usb 3-1: Using ep0 maxpacket: 16 [ 1339.904776][ T4406] usb 5-1: config 0 descriptor?? [ 1339.904979][ T1175] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1339.937253][ T1175] fs-verity (loop3, inode 15): Unrecognized descriptor size: 0 bytes [ 1339.946551][ T4406] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1340.023778][ T8872] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 1340.023814][ T8872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1340.025715][ T8872] usb 3-1: config 0 descriptor?? [ 1340.069937][ T8872] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1340.230149][ T4919] usb 5-1: USB disconnect, device number 85 [ 1340.268746][ C1] vkms_vblank_simulate: vblank timer overrun [ 1340.296717][ T8872] usb 3-1: Detected FT232BM [ 1340.301791][ T1207] loop3: detected capacity change from 0 to 2048 [ 1340.372782][ T1207] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1340.451134][ T1222] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1340.534917][ T8872] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1340.558528][ T8872] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1340.574735][ T1207] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 1340.596149][ T8872] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1340.631994][ T8872] usb 3-1: USB disconnect, device number 76 [ 1340.649264][ T1207] NILFS error (device loop3): nilfs_bmap_last_key: broken bmap (inode number=16) [ 1340.697991][ T1207] Remounting filesystem read-only [ 1340.704310][ T8872] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1340.728128][ T1207] NILFS (loop3): error -5 truncating bmap (ino=16) [ 1340.735831][ T8872] ftdi_sio 3-1:0.0: device disconnected [ 1340.922130][ T4192] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 1340.960753][ T1254] netlink: 'syz.1.23508': attribute type 21 has an invalid length. [ 1340.995367][ T1254] netlink: 128 bytes leftover after parsing attributes in process `syz.1.23508'. [ 1341.024764][ T1254] netlink: 'syz.1.23508': attribute type 4 has an invalid length. [ 1341.040437][ T1254] netlink: 3 bytes leftover after parsing attributes in process `syz.1.23508'. [ 1341.207447][ T1274] Sensor A: ================= START STATUS ================= [ 1341.236081][ T1274] Sensor A: Test Pattern: 75% Colorbar [ 1341.261006][ T1274] Sensor A: Show Information: All [ 1341.273796][ T1274] Sensor A: Vertical Flip: false [ 1341.296231][ T1274] Sensor A: Horizontal Flip: true [ 1341.320973][ T1274] Sensor A: Brightness: 128 [ 1341.334565][ T1274] Sensor A: Contrast: 0 [ 1341.359594][ T1274] Sensor A: Hue: 0 [ 1341.363500][ T1274] Sensor A: Saturation: 128 [ 1341.377721][ T1274] Sensor A: ================== END STATUS ================== [ 1341.638288][ T1308] loop1: detected capacity change from 0 to 512 [ 1341.682062][ T1308] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 1341.799883][ T1308] EXT4-fs (loop1): mounted filesystem without journal. Opts: nomblk_io_submit,bsddf,discard,,errors=continue. Quota mode: writeback. [ 1341.876409][ T1308] Quota error (device loop1): find_block_dqentry: Quota for id 0 referenced but not present [ 1341.893183][ T1308] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 1341.903380][ T1308] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.23526: Failed to acquire dquot type 1 [ 1342.443648][ T1320] syz.2.23528 (1320): drop_caches: 2 [ 1342.468137][ T1293] F2FS-fs (loop0): build fault injection attr: rate: 14, type: 0x1ffff [ 1342.476581][ T1293] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x1c [ 1342.490759][ T1293] F2FS-fs (loop0): invalid crc value [ 1342.508737][ T1293] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1342.543135][ T1293] F2FS-fs (loop0) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x43c/0xaa0 [ 1342.562281][ T1293] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1342.636994][ T4194] attempt to access beyond end of device [ 1342.636994][ T4194] loop0: rw=2049, want=45104, limit=40427 [ 1342.672164][ T1341] netlink: set zone limit has 4 unknown bytes [ 1342.810927][ T1349] netlink: 'syz.1.23534': attribute type 29 has an invalid length. [ 1342.818424][ T1346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23536'. [ 1342.831662][ T1348] CIFS mount error: No usable UNC path provided in device string! [ 1342.831662][ T1348] [ 1342.853868][ T1348] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1342.856199][ T1349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23534'. [ 1342.872749][ T1346] bridge7: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1342.889068][ T1346] bridge7: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1342.894709][ T1355] netlink: 4 bytes leftover after parsing attributes in process `syz.4.23537'. [ 1342.910053][ T1346] device bridge7 entered promiscuous mode [ 1342.936244][ T1349] netlink: 'syz.1.23534': attribute type 29 has an invalid length. [ 1342.992455][ T1349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23534'. [ 1343.064253][ T1366] netlink: 16 bytes leftover after parsing attributes in process `syz.4.23541'. [ 1343.202159][ T1379] netlink: 'syz.4.23545': attribute type 16 has an invalid length. [ 1343.286326][ T1386] set_capacity_and_notify: 1 callbacks suppressed [ 1343.286343][ T1386] loop2: detected capacity change from 0 to 8 [ 1343.337116][ T4919] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1343.403007][ T1386] SQUASHFS error: Unable to read inode 0x11f [ 1343.978265][ T4919] usb 4-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=fd.bf [ 1344.006802][ T4919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.040401][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1344.047597][ T4919] usb 4-1: Product: syz [ 1344.066077][ T4919] usb 4-1: Manufacturer: syz [ 1344.081974][ T4919] usb 4-1: SerialNumber: syz [ 1344.111951][ T1447] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1344.163443][ T4919] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 1344.178634][ T4919] dvb-usb: bulk message failed: -22 (3/0) [ 1344.214081][ T1384] loop1: detected capacity change from 0 to 32768 [ 1344.229511][ T4919] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1344.321598][ T4919] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 1344.374759][ T4919] usb 4-1: media controller created [ 1344.396970][ T4919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1344.404694][ T1362] udc-core: couldn't find an available UDC or it's busy [ 1344.493206][ T4919] DVB: Unable to find symbol mt352_attach() [ 1344.499363][ T1362] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1344.508105][ T4919] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 1344.527656][ T1384] XFS (loop1): Mounting V5 Filesystem [ 1344.560759][ T1494] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 1344.570730][ T4919] dvb-usb: bulk message failed: -22 (3/0) [ 1344.615536][ T4919] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 1344.718135][ T4919] usb 4-1: USB disconnect, device number 74 [ 1344.787390][ T1384] XFS (loop1): Starting recovery (logdev: internal) [ 1344.858788][ T4919] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 1344.927988][ T1384] XFS (loop1): Ending recovery (logdev: internal) [ 1345.129613][ T4184] XFS (loop1): Unmounting Filesystem [ 1345.265697][ T26] audit: type=1400 audit(1301.219:86): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=1568 comm="syz.0.23584" [ 1345.727288][ T4406] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1345.857215][ T1564] loop4: detected capacity change from 0 to 40427 [ 1345.912577][ T8872] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1345.926380][ T1564] F2FS-fs (loop4): build fault injection attr: rate: 14, type: 0x1ffff [ 1345.941340][ T1564] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x1c [ 1345.950771][ T1564] F2FS-fs (loop4): invalid crc value [ 1345.981175][ T1564] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1345.983927][ T4406] usb 1-1: Using ep0 maxpacket: 8 [ 1346.118547][ T1564] F2FS-fs (loop4) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x43c/0xaa0 [ 1346.130540][ T4406] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 1346.154955][ T4406] usb 1-1: config 179 has no interface number 0 [ 1346.173032][ T4406] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1346.197750][ T1564] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1346.227613][ T4406] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1346.239495][ T1632] __nla_validate_parse: 2 callbacks suppressed [ 1346.239511][ T1632] netlink: 28 bytes leftover after parsing attributes in process `syz.3.23600'. [ 1346.275361][ T4406] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1346.317926][ T4406] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1346.332614][ T8872] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1346.368005][ T8872] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 0 [ 1346.373608][ T4196] attempt to access beyond end of device [ 1346.373608][ T4196] loop4: rw=2049, want=45104, limit=40427 [ 1346.392162][ T4406] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1346.414544][ T8872] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1346.432803][ T4406] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1346.486560][ T1577] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1346.499585][ T1647] netlink: 'syz.3.23605': attribute type 21 has an invalid length. [ 1346.518720][ T1647] netlink: 132 bytes leftover after parsing attributes in process `syz.3.23605'. [ 1346.539816][ T8872] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1346.548894][ T8872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1346.577124][ T1653] ieee802154 phy1 wpan1: encryption failed: -22 [ 1346.583945][ T8872] usb 3-1: SerialNumber: syz [ 1346.764179][ T4406] usb 1-1: USB disconnect, device number 68 [ 1346.894255][ T8872] usbtest 3-1:1.0: Linux user mode ISO test driver [ 1346.900924][ T8872] usbtest 3-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 1346.942960][ T8872] usb 3-1: USB disconnect, device number 77 [ 1347.245452][T13733] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 1347.264069][ T1709] netlink: 40 bytes leftover after parsing attributes in process `syz.4.23618'. [ 1347.445485][ T1719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1347.512516][ T8872] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1347.651770][T13733] usb 2-1: config index 0 descriptor too short (expected 100, got 36) [ 1347.686107][T13733] usb 2-1: config 2 has an invalid interface number: 174 but max is 0 [ 1347.725466][T13733] usb 2-1: config 2 has no interface number 0 [ 1347.742930][T13733] usb 2-1: config 2 interface 174 altsetting 0 has an invalid endpoint with address 0x9E, skipping [ 1347.779677][ T8872] usb 4-1: Using ep0 maxpacket: 32 [ 1347.795849][T13733] usb 2-1: config 2 interface 174 altsetting 0 endpoint 0x82 has an invalid bInterval 36, changing to 4 [ 1347.836875][T13733] usb 2-1: config 2 interface 174 altsetting 0 endpoint 0x82 has invalid maxpacket 1152, setting to 1023 [ 1347.908064][ T8872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7 [ 1347.921736][ T8872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024 [ 1348.100785][T13733] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 1348.120423][T13733] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.141863][T13733] usb 2-1: Product: syz [ 1348.146765][ T8872] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1348.163944][T13733] usb 2-1: Manufacturer: syz [ 1348.169229][ T8872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.177786][T13733] usb 2-1: SerialNumber: syz [ 1348.204659][ T8872] usb 4-1: Product: syz [ 1348.220204][ T8872] usb 4-1: Manufacturer: syz [ 1348.224882][ T8872] usb 4-1: SerialNumber: syz [ 1348.239747][ T1684] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1348.285977][ T8872] usb 4-1: config 0 descriptor?? [ 1348.372800][ T8872] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1348.389577][ T1795] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23643'. [ 1348.603101][T13733] usb 2-1: probing VID:PID(0424:012C) [ 1348.610168][T13733] usb 2-1: vub300 testing UNKNOWN EndPoint(0) 82 [ 1348.624361][ T9] usb 4-1: Failed to submit usb control message: -71 [ 1348.632104][ T9] usb 4-1: unable to send the bmi data to the device: -71 [ 1348.652739][T13733] usb 2-1: vub300 ignoring EndPoint(0) 82 [ 1348.672460][ T9] usb 4-1: unable to get target info from device [ 1348.676012][ T1811] xt_TCPMSS: Only works on TCP SYN packets [ 1348.683429][T13733] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 1348.702398][ T9] usb 4-1: could not get target info (-71) [ 1348.730791][ T8872] usb 4-1: USB disconnect, device number 75 [ 1348.737941][T13733] vub300: probe of 2-1:2.174 failed with error -22 [ 1348.745718][ T9] usb 4-1: could not probe fw (-71) [ 1348.802180][T13733] usb 2-1: USB disconnect, device number 68 [ 1348.965909][ T1834] device geneve1 entered promiscuous mode [ 1349.007728][ T1841] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1349.179233][ T1852] netlink: 'syz.1.23657': attribute type 2 has an invalid length. [ 1349.226187][ T1852] netlink: 'syz.1.23657': attribute type 5 has an invalid length. [ 1349.273580][ T1860] overlayfs: missing 'workdir' [ 1349.754878][ T1894] loop1: detected capacity change from 0 to 4096 [ 1349.811054][ T4919] usb 3-1: new full-speed USB device number 78 using dummy_hcd [ 1349.833539][ T1894] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 1349.918958][ T1894] ntfs3: loop1: failed to convert "c46c" to maccroatian [ 1350.249434][ T4919] usb 3-1: config 0 has an invalid interface number: 104 but max is 1 [ 1350.264212][ T4919] usb 3-1: config 0 has an invalid interface number: 104 but max is 1 [ 1350.298513][ T4919] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1350.329588][ T4919] usb 3-1: config 0 has no interface number 0 [ 1350.346843][ T4919] usb 3-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid maxpacket 12288, setting to 64 [ 1350.365086][ T1941] netlink: 'syz.3.23685': attribute type 10 has an invalid length. [ 1350.392405][ T4919] usb 3-1: config 0 interface 104 has no altsetting 1 [ 1350.411191][ T1941] device syz_tun entered promiscuous mode [ 1350.448862][ T1941] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1350.545339][T13733] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1350.623939][ T4919] usb 3-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 1350.643972][ T4919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1350.665584][ T4919] usb 3-1: Product: syz [ 1350.670404][ T4919] usb 3-1: Manufacturer: syz [ 1350.675048][ T4919] usb 3-1: SerialNumber: syz [ 1350.690161][ T4919] usb 3-1: config 0 descriptor?? [ 1350.703700][ T1918] loop0: detected capacity change from 0 to 32768 [ 1350.752994][ T4919] asix: probe of 3-1:0.104 failed with error -22 [ 1350.789175][ T1961] netlink: 12 bytes leftover after parsing attributes in process `syz.3.23690'. [ 1350.799462][ T1961] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1350.815905][T13733] usb 2-1: Using ep0 maxpacket: 8 [ 1350.857525][ T1918] XFS (loop0): Mounting V5 Filesystem [ 1350.869205][ T21] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1350.955150][T13733] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 1350.974448][T13733] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 1351.007994][T13733] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1351.066274][T13733] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 214, changing to 11 [ 1351.109000][T13733] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 49299, setting to 1024 [ 1351.143552][ T8872] usb 3-1: USB disconnect, device number 78 [ 1351.168344][ T1918] XFS (loop0): Ending clean mount [ 1351.185383][ T1972] loop3: detected capacity change from 0 to 8192 [ 1351.275648][ T1972] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 1351.286652][ T21] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1351.295414][ T1972] REISERFS (device loop3): using ordered data mode [ 1351.303835][ T1972] reiserfs: using flush barriers [ 1351.309443][T13733] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 1351.319607][T13733] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.329303][ T21] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1351.330514][T13733] usb 2-1: Product: syz [ 1351.342525][ T1972] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1351.358889][T13733] usb 2-1: Manufacturer: syz [ 1351.363641][T13733] usb 2-1: SerialNumber: syz [ 1351.370786][T13733] usb 2-1: config 0 descriptor?? [ 1351.376244][ T1972] REISERFS (device loop3): checking transaction log (loop3) [ 1351.389945][ T4194] XFS (loop0): Unmounting Filesystem [ 1351.441380][T13733] hub 2-1:0.0: bad descriptor, ignoring hub [ 1351.447882][T13733] hub: probe of 2-1:0.0 failed with error -5 [ 1351.457817][T13733] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input104 [ 1351.468254][ T21] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1351.499654][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1351.519816][ T21] usb 5-1: SerialNumber: syz [ 1351.687079][T13733] usb 2-1: USB disconnect, device number 69 [ 1351.692454][ C1] usb_acecad 2-1:0.0: can't resubmit intr, dummy_hcd.1-1/input0, status -19 [ 1351.793037][ T1972] REISERFS (device loop3): Using tea hash to sort names [ 1351.805789][ T1972] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 1351.820238][ T1972] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 1351.891417][ T21] usb 5-1: 0:2 : does not exist [ 1351.937635][ T21] usb 5-1: USB disconnect, device number 86 [ 1352.061224][ T8872] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1352.157028][ T26] audit: type=1326 audit(1307.674:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2029 comm="syz.0.23696" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f74d6273dd9 code=0x0 [ 1352.296056][ T2038] netlink: 132 bytes leftover after parsing attributes in process `syz.0.23697'. [ 1352.344705][ T8872] usb 3-1: Using ep0 maxpacket: 32 [ 1352.471215][ T2052] netlink: 'syz.0.23702': attribute type 3 has an invalid length. [ 1352.473867][ T8872] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1352.490276][ T2052] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.23702'. [ 1352.511061][ T8872] usb 3-1: config 0 has no interface number 0 [ 1352.531311][ T8872] usb 3-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1352.589768][ T8872] usb 3-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1352.654202][ T2065] device gtp0 entered promiscuous mode [ 1352.783236][ T8872] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1352.792341][ T8872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1352.834835][ T8872] usb 3-1: Product: syz [ 1352.843436][ T2086] QAT: failed to copy from user cfg_data. [ 1352.847336][ T8872] usb 3-1: Manufacturer: syz [ 1352.853814][ T8872] usb 3-1: SerialNumber: syz [ 1352.909482][ T8872] usb 3-1: config 0 descriptor?? [ 1352.971974][ T8872] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1353.015591][ T2105] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 1353.200843][ T8872] usb 3-1: qt2_setup_urbs - submit read urb failed -90 [ 1353.207922][ T8872] quatech2: probe of 3-1:0.51 failed with error -90 [ 1353.300059][ T2130] xt_cluster: node mask cannot exceed total number of nodes [ 1353.465331][ T8872] usb 3-1: USB disconnect, device number 79 [ 1353.764006][ T2167] netlink: 16 bytes leftover after parsing attributes in process `syz.0.23739'. [ 1354.520945][ T2233] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1354.620362][ T2246] netlink: 'syz.3.23764': attribute type 11 has an invalid length. [ 1354.665105][ T2248] netlink: 'syz.4.23766': attribute type 21 has an invalid length. [ 1354.686409][ T2248] netlink: 132 bytes leftover after parsing attributes in process `syz.4.23766'. [ 1354.887310][ T2269] loop4: detected capacity change from 0 to 512 [ 1354.904799][ T2272] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1354.979985][ T2269] EXT4-fs (loop4): Ignoring removed orlov option [ 1355.005271][ T2269] EXT4-fs (loop4): Ignoring removed oldalloc option [ 1355.069695][ T2269] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #2: block 3: comm syz.4.23772: lblock 0 mapped to illegal pblock 3 (length 1) [ 1355.085214][ T2269] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.23772: error -117 reading directory block [ 1355.099113][ T2269] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 1355.107849][ T2269] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,orlov,auto_da_alloc=0x0000000000000001,jqfmt=vfsold,nolazytime,grpjquota=.nouid32,oldalloc,journal_dev=0x0000000000000568,grpid,,,errors=continue. Quota mode: writeback. [ 1355.138811][ T2269] EXT4-fs error (device loop4): ext4_xattr_set_entry:1613: inode #2: comm syz.4.23772: corrupted xattr entries [ 1355.220416][ T2294] netlink: 132 bytes leftover after parsing attributes in process `syz.3.23781'. [ 1355.383546][ T2303] netlink: 'syz.4.23782': attribute type 10 has an invalid length. [ 1355.445328][ T2303] team0: Device hsr_slave_0 failed to register rx_handler [ 1355.549870][ T2318] loop3: detected capacity change from 0 to 512 [ 1355.682873][ T2318] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback. [ 1355.719750][ T2318] EXT4-fs error (device loop3): ext4_get_first_dir_block:3605: inode #12: block 32: comm syz.3.23787: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 1355.732754][ T2320] netlink: 28 bytes leftover after parsing attributes in process `syz.0.23788'. [ 1355.765947][ T2320] netlink: 28 bytes leftover after parsing attributes in process `syz.0.23788'. [ 1355.830106][ T2318] EXT4-fs (loop3): Remounting filesystem read-only [ 1355.851136][ T2318] EXT4-fs error (device loop3): ext4_get_first_dir_block:3608: inode #12: comm syz.3.23787: directory missing '.' [ 1355.884061][ T2318] EXT4-fs (loop3): Remounting filesystem read-only [ 1356.247839][ T2353] loop3: detected capacity change from 0 to 512 [ 1356.279062][ T2353] EXT4-fs (loop3): Ignoring removed orlov option [ 1356.285519][ T2353] EXT4-fs (loop3): Ignoring removed oldalloc option [ 1356.395422][ T2353] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #2: block 3: comm syz.3.23794: lblock 0 mapped to illegal pblock 3 (length 1) [ 1356.418749][ T2353] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.23794: error -117 reading directory block [ 1356.549698][ T2353] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 1356.569300][ T2353] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,orlov,auto_da_alloc=0x0000000000000001,jqfmt=vfsold,nolazytime,grpjquota=.nouid32,oldalloc,journal_dev=0x0000000000000568,grpid,,,errors=continue. Quota mode: writeback. [ 1356.702241][ T2353] EXT4-fs error (device loop3): ext4_xattr_set_entry:1613: inode #2: comm syz.3.23794: corrupted xattr entries [ 1356.727002][ T2392] xt_hashlimit: max too large, truncated to 1048576 [ 1357.053646][ T2424] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1357.372360][ T2451] loop4: detected capacity change from 0 to 64 [ 1357.413298][ T2451] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1357.966770][ T2528] CIFS mount error: No usable UNC path provided in device string! [ 1357.966770][ T2528] [ 1358.005470][ T2528] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1358.062948][ T2539] loop3: detected capacity change from 0 to 512 [ 1358.098368][ T2545] netlink: 52 bytes leftover after parsing attributes in process `syz.2.23855'. [ 1358.160689][ T26] audit: type=1400 audit(1313.295:88): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name=3A3A0AE10CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A552C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=2552 comm="syz.1.23856" [ 1358.191395][ T21] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1358.207236][ T2539] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1358.318198][ T2539] EXT4-fs error (device loop3): ext4_get_first_dir_block:3597: inode #12: comm syz.3.23852: Directory block failed checksum [ 1358.663001][ T21] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 102, changing to 10 [ 1358.694806][ T21] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid maxpacket 24624, setting to 1024 [ 1358.738893][ T21] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1358.838553][ T2624] loop2: detected capacity change from 0 to 2048 [ 1358.921461][ T21] usb 5-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 1358.934322][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1358.958637][ T21] usb 5-1: Product: syz [ 1358.971753][ T21] usb 5-1: Manufacturer: syz [ 1358.983423][ T21] usb 5-1: SerialNumber: syz [ 1359.002527][ T21] usb 5-1: config 0 descriptor?? [ 1359.008476][ T2653] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1359.051678][ T2624] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=203 [ 1359.089164][ T21] keyspan 5-1:0.0: Keyspan 2 port adapter converter detected [ 1359.089365][ T21] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 1359.094745][ T21] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 1359.094800][ T21] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 1359.094847][ T21] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 1359.094899][ T21] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 85 [ 1359.094946][ T21] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 5 [ 1359.116609][ T21] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1359.117712][ T21] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83 [ 1359.117763][ T21] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 3 [ 1359.117812][ T21] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 1359.117864][ T21] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 86 [ 1359.117916][ T21] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 1359.134676][ T21] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1359.154802][ T2624] Remounting filesystem read-only [ 1359.320967][ T21] usb 5-1: USB disconnect, device number 87 [ 1359.354665][ T21] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1359.448016][ T21] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1359.499862][ T21] keyspan 5-1:0.0: device disconnected [ 1359.589843][ T2696] loop1: detected capacity change from 0 to 256 [ 1359.706891][ T2696] FAT-fs (loop1): Directory bread(block 64) failed [ 1359.754197][ T2696] FAT-fs (loop1): Directory bread(block 65) failed [ 1359.791549][ T2696] FAT-fs (loop1): Directory bread(block 66) failed [ 1359.835033][ T2696] FAT-fs (loop1): Directory bread(block 67) failed [ 1359.873094][ T2696] FAT-fs (loop1): Directory bread(block 68) failed [ 1359.912607][ T2696] FAT-fs (loop1): Directory bread(block 69) failed [ 1359.977834][ T2696] FAT-fs (loop1): Directory bread(block 70) failed [ 1359.984465][ T2696] FAT-fs (loop1): Directory bread(block 71) failed [ 1360.028143][ T2696] FAT-fs (loop1): Directory bread(block 72) failed [ 1360.047384][ T2696] FAT-fs (loop1): Directory bread(block 73) failed [ 1360.488739][ T2766] netlink: 20 bytes leftover after parsing attributes in process `syz.3.23905'. [ 1360.810353][ T2809] netlink: 128 bytes leftover after parsing attributes in process `syz.2.23916'. [ 1360.852787][ T2809] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1360.884591][ T2809] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1361.483085][ T2886] mip6: mip6_rthdr_init_state: spi is not 0: 655360 [ 1361.555712][ T2893] netlink: 16 bytes leftover after parsing attributes in process `syz.3.23945'. [ 1361.581397][ T8872] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1361.793900][ T2914] loop1: detected capacity change from 0 to 512 [ 1361.859336][ T8872] usb 5-1: Using ep0 maxpacket: 16 [ 1361.883645][ T2914] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1361.907949][ T2914] Quota error (device loop1): v2_read_file_info: Block with free entry too big (9 >= 6). [ 1361.924564][ T2914] EXT4-fs warning (device loop1): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1361.939969][ T2914] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 1361.949042][ T2914] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.23949: bad orphan inode 14 [ 1361.960744][ T2914] ext4_test_bit(bit=13, block=18) = 1 [ 1361.966429][ T2914] is_bad_inode(inode)=0 [ 1361.970800][ T2914] NEXT_ORPHAN(inode)=0 [ 1361.974977][ T2914] max_ino=32 [ 1361.978280][ T2914] i_nlink=1 [ 1361.981495][ T2914] EXT4-fs (loop1): 1 truncate cleaned up [ 1361.987618][ T8872] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1361.997864][ T2914] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1362.148157][ T21] usb 4-1: new low-speed USB device number 76 using dummy_hcd [ 1362.180120][ T8872] usb 5-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 1362.199997][ T2937] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1362.222691][ T8872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1362.230773][ T8872] usb 5-1: Product: syz [ 1362.244354][ T8872] usb 5-1: Manufacturer: syz [ 1362.272020][ T8872] usb 5-1: SerialNumber: syz [ 1362.284510][ T8872] usb 5-1: config 0 descriptor?? [ 1362.479819][ T2875] loop2: detected capacity change from 0 to 32768 [ 1362.547523][ T8872] usb 5-1: USB disconnect, device number 88 [ 1362.591502][ T2875] XFS (loop2): Mounting V5 Filesystem [ 1362.607818][ T21] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 1362.627405][ T21] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 1362.672515][ T21] usb 4-1: config 0 has no interface number 0 [ 1362.695312][ T21] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 1362.717098][ T21] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1362.783614][ T21] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1362.827483][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1362.869478][ T21] usb 4-1: config 0 descriptor?? [ 1362.883552][ T2875] XFS (loop2): Ending clean mount [ 1362.947012][ T4188] XFS (loop2): Unmounting Filesystem [ 1362.959403][ T3010] loop1: detected capacity change from 0 to 512 [ 1363.032391][ T4919] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1363.122272][ T3010] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1363.170531][ T3010] Quota error (device loop1): find_tree_dqentry: Getting block too big (514 >= 6) [ 1363.237106][ T3010] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 1363.253324][ T3010] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.23969: Failed to acquire dquot type 0 [ 1363.409377][ T3029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23974'. [ 1363.436404][ T21] usb 4-1: USB disconnect, device number 76 [ 1363.512585][ T3037] loop1: detected capacity change from 0 to 8 [ 1363.525460][ T3037] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1363.528426][ T4919] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1363.553744][ T4919] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1363.575395][ T4177] udevd[4177]: incorrect cramfs checksum on /dev/loop1 [ 1363.585549][ T4919] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1363.806703][ T4919] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1363.824414][ T4919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.845974][ T4919] usb 1-1: Product: syz [ 1363.853616][ T4919] usb 1-1: Manufacturer: syz [ 1363.862997][ T4919] usb 1-1: SerialNumber: syz [ 1364.105202][ T3093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23992'. [ 1364.163772][ T3093] netlink: 76 bytes leftover after parsing attributes in process `syz.2.23992'. [ 1364.243678][ T4919] usb 1-1: 0:2 : does not exist [ 1364.320966][ T4919] usb 1-1: USB disconnect, device number 69 [ 1364.365166][ T3106] [U]  [ 1364.391728][ T3121] device ipip1 entered promiscuous mode [ 1364.418013][ T3118] loop2: detected capacity change from 0 to 512 [ 1364.495693][ T3118] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1364.520840][ T3118] EXT4-fs error (device loop2): ext4_get_first_dir_block:3597: inode #12: comm syz.2.23996: Directory block failed checksum [ 1364.657693][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1364.660913][ T3143] dlm: no local IP address has been set [ 1364.699126][ T3151] netlink: 36 bytes leftover after parsing attributes in process `syz.2.24003'. [ 1364.747855][ T3143] dlm: cannot start dlm midcomms -107 [ 1364.826610][ T3156] IPv6: sit5: Disabled Multicast RS [ 1364.934882][ T3174] netlink: 'syz.4.24011': attribute type 1 has an invalid length. [ 1365.062118][ T3190] loop4: detected capacity change from 0 to 64 [ 1365.261101][T13733] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1365.541388][ T3243] loop3: detected capacity change from 0 to 128 [ 1365.611664][ T4919] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 1365.688073][T13733] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1365.783128][T13733] usb 2-1: config 4 has an invalid interface number: 57 but max is 0 [ 1365.815962][T13733] usb 2-1: config 4 has no interface number 0 [ 1365.838569][T13733] usb 2-1: config 4 interface 57 has no altsetting 0 [ 1365.932489][ C0] ip6_tunnel: K xmit: Local address not yet configured! [ 1365.945437][ T3270] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 1366.040279][T13733] usb 2-1: New USB device found, idVendor=061d, idProduct=c120, bcdDevice=5a.ce [ 1366.061190][ T4919] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1366.076275][T13733] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1366.103228][T13733] usb 2-1: Product: syz [ 1366.114567][ T4919] usb 1-1: not running at top speed; connect to a high speed hub [ 1366.121047][T13733] usb 2-1: Manufacturer: syz [ 1366.139059][T13733] usb 2-1: SerialNumber: syz [ 1366.221240][ T4919] usb 1-1: config 2 has an invalid interface number: 226 but max is 1 [ 1366.229478][ T4919] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1366.247875][ T150] block nbd2: Attempted send on invalid socket [ 1366.255304][ T150] blk_update_request: I/O error, dev nbd2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1366.275110][ T3289] VFS: unable to read V7 FS superblock on device nbd2. [ 1366.282023][ T3289] VFS: could not find a valid V7 on nbd2. [ 1366.288342][ T4919] usb 1-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 1366.297873][ T4919] usb 1-1: config 2 has no interface number 0 [ 1366.304200][ T4919] usb 1-1: config 2 interface 226 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1366.316153][ T4919] usb 1-1: config 2 interface 226 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 1366.328012][ T4919] usb 1-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1366.461429][ T4227] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1366.481936][ T3303] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1366.500357][T13733] quatech2 2-1:4.57: Quatech 2nd gen USB to Serial Driver converter detected [ 1366.510112][ T4919] usb 1-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 1366.519204][ T4919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1366.542223][T13733] usb 2-1: qt2_attach - failed to power on unit: -71 [ 1366.551178][ T4919] usb 1-1: Product: syz [ 1366.556348][ T4919] usb 1-1: Manufacturer: syz [ 1366.560985][ T4919] usb 1-1: SerialNumber: syz [ 1366.567180][T13733] quatech2: probe of 2-1:4.57 failed with error -71 [ 1366.592165][T13733] usb 2-1: USB disconnect, device number 70 [ 1366.619639][ T3315] netlink: 16 bytes leftover after parsing attributes in process `syz.3.24054'. [ 1366.734309][ T4227] usb 5-1: Using ep0 maxpacket: 8 [ 1366.862607][ T4227] usb 5-1: config 6 has an invalid interface number: 2 but max is 0 [ 1366.872643][ T4227] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1366.910331][ T4227] usb 5-1: config 6 has no interface number 0 [ 1366.927560][ T4227] usb 5-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1366.945357][ T4919] usb 1-1: USB disconnect, device number 70 [ 1366.956558][ T3344] 9pnet: Insufficient options for proto=fd [ 1367.129933][ T4227] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1367.145387][ T4227] usb 5-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 1367.172101][ T4227] usb 5-1: Product: syz [ 1367.182267][ T3367] cifs: Unknown parameter 'h}# [ 1367.182267][ T3367] [bIT&:"1:ӭ'4,Zz-#F<]%gC [ 1367.182267][ T3367] SȘȞZ6' [ 1367.189398][ T4227] usb 5-1: Manufacturer: syz [ 1367.235058][ T4227] usb 5-1: SerialNumber: syz [ 1367.283452][ T3374] IPv6: sit6: Disabled Multicast RS [ 1367.307643][ T4227] hso 5-1:6.2: Failed to find INT IN ep [ 1367.557533][ T4227] usb 5-1: USB disconnect, device number 89 [ 1367.603063][ T3410] netlink: 'syz.2.24080': attribute type 11 has an invalid length. [ 1367.611465][ T3410] netlink: 140 bytes leftover after parsing attributes in process `syz.2.24080'. [ 1367.644279][ T3413] usb usb7: usbfs: process 3413 (syz.1.24081) did not claim interface 0 before use [ 1367.759754][ T3425] netlink: 12 bytes leftover after parsing attributes in process `syz.2.24085'. [ 1367.850425][ T3433] loop1: detected capacity change from 0 to 128 [ 1367.890448][ T3433] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1367.913048][ T3433] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1367.958064][ T4402] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1368.051236][ T3445] sctp: [Deprecated]: syz.2.24092 (pid 3445) Use of int in max_burst socket option. [ 1368.051236][ T3445] Use struct sctp_assoc_value instead [ 1368.348701][ T4402] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1368.369447][ T4402] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1368.408030][ T4402] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1368.464951][ T4402] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1368.493924][ T4402] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1368.541312][ T4402] usb 1-1: config 0 descriptor?? [ 1368.584516][ T4402] hub 1-1:0.0: USB hub found [ 1368.823179][ T4402] hub 1-1:0.0: 14 ports detected [ 1368.851044][ T4402] hub 1-1:0.0: insufficient power available to use all downstream ports [ 1368.992743][ T3547] netlink: 36 bytes leftover after parsing attributes in process `syz.2.24120'. [ 1369.039454][ T3553] netlink: 24 bytes leftover after parsing attributes in process `syz.1.24121'. [ 1369.050248][ T4402] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 1369.066055][ T4402] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 1369.129949][ T4402] usb 1-1: USB disconnect, device number 71 [ 1369.191098][ T3572] netlink: 'syz.1.24126': attribute type 9 has an invalid length. [ 1369.203645][ T4919] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1369.221232][ T3572] netlink: 'syz.1.24126': attribute type 7 has an invalid length. [ 1369.244832][ T3572] netlink: 'syz.1.24126': attribute type 8 has an invalid length. [ 1369.492892][ T4919] usb 4-1: Using ep0 maxpacket: 16 [ 1369.527310][ T3600] bond0: Error: Cannot enslave bond to itself. [ 1369.653008][ T4919] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 255 [ 1369.703735][ T3616] netlink: 56 bytes leftover after parsing attributes in process `syz.4.24141'. [ 1369.863059][ T3632] loop4: detected capacity change from 0 to 1024 [ 1369.888072][ T4919] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1369.903265][ T4919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1369.933329][ T4919] usb 4-1: Product: syz [ 1369.937552][ T4919] usb 4-1: Manufacturer: syz [ 1369.961526][ T4919] usb 4-1: SerialNumber: syz [ 1369.978802][ T4919] usb 4-1: config 0 descriptor?? [ 1370.028467][ T3530] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1370.073479][ T4919] mcba_usb 4-1:0.0: Microchip CAN BUS Analyzer connected [ 1370.098491][ T9] hfsplus: b-tree write err: -5, ino 25 [ 1370.104682][ T9] hfsplus: b-tree write err: -5, ino 4 [ 1370.110272][ T9] hfsplus: b-tree write err: -5, ino 2 [ 1370.116750][ T9] hfsplus: b-tree write err: -5, ino 26 [ 1370.208587][ T4402] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1370.278974][ T4227] usb 2-1: new low-speed USB device number 71 using dummy_hcd [ 1370.326502][T13733] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1370.340036][ T4919] usb 4-1: USB disconnect, device number 77 [ 1370.354503][ T3669] loop4: detected capacity change from 0 to 64 [ 1370.361080][ C1] mcba_usb 4-1:0.0 can0: Tx URB aborted (-108) [ 1370.361145][ C1] mcba_usb 4-1:0.0 can0: Tx URB aborted (-108) [ 1370.379220][ T4919] mcba_usb 4-1:0.0 can0: device disconnected [ 1370.465614][ T4402] usb 1-1: Using ep0 maxpacket: 8 [ 1370.593779][ T4402] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1370.605119][T13733] usb 3-1: Using ep0 maxpacket: 8 [ 1370.630240][ T3691] loop4: detected capacity change from 0 to 256 [ 1370.642136][ T4402] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1370.653822][ T4402] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1370.663739][ T4402] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1370.675849][ T4227] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1370.698575][ T4227] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1370.709333][ T4402] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1370.722710][ T4227] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1370.733649][T13733] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1370.745411][T13733] usb 3-1: config 179 has no interface number 0 [ 1370.759537][ T4402] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1370.775162][ T4227] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1370.788719][T13733] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1370.800913][ T3691] FAT-fs (loop4): Directory bread(block 64) failed [ 1370.814673][ T4402] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1370.834065][T13733] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1370.846778][ T3691] FAT-fs (loop4): Directory bread(block 65) failed [ 1370.847380][ T4227] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1370.869953][ T3691] FAT-fs (loop4): Directory bread(block 66) failed [ 1370.879139][ T4402] usb 1-1: config 0 descriptor?? [ 1370.888672][ T3691] FAT-fs (loop4): Directory bread(block 67) failed [ 1370.901533][ T3691] FAT-fs (loop4): Directory bread(block 68) failed [ 1370.904179][T13733] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1370.909447][ T3691] FAT-fs (loop4): Directory bread(block 69) failed [ 1370.926186][ T3637] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1370.935485][ T4227] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1370.957402][T13733] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1370.971757][ T3691] FAT-fs (loop4): Directory bread(block 70) failed [ 1370.998491][ T3691] FAT-fs (loop4): Directory bread(block 71) failed [ 1371.003903][ T4227] hub 2-1:1.0: bad descriptor, ignoring hub [ 1371.026360][T13733] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1371.047849][ T3691] FAT-fs (loop4): Directory bread(block 72) failed [ 1371.068227][ T4227] hub: probe of 2-1:1.0 failed with error -5 [ 1371.081904][ T3691] FAT-fs (loop4): Directory bread(block 73) failed [ 1371.128594][ T4227] cdc_wdm 2-1:1.0: skipping garbage [ 1371.150730][ T4227] cdc_wdm 2-1:1.0: invalid descriptor buffer length [ 1371.160518][T13733] usb 3-1: config 179 interface 65 has no altsetting 0 [ 1371.167448][T13733] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1371.200137][ T4227] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 1371.218715][ T3706] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 1371.229901][T13733] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1371.291278][ T4227] usb 2-1: USB disconnect, device number 71 [ 1371.351456][T13733] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input107 [ 1371.442649][ T8872] usb 1-1: USB disconnect, device number 72 [ 1371.545011][ T4919] usb 3-1: USB disconnect, device number 80 [ 1371.566309][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1371.600732][ T4919] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1371.807256][ T3773] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1372.525505][ T3842] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1372.552196][ T3842] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1372.836903][ T3873] loop0: detected capacity change from 0 to 8 [ 1372.879361][ T3876] loop4: detected capacity change from 0 to 512 [ 1372.940870][ T3873] SQUASHFS error: Unable to read directory block [629:0] [ 1373.015999][ T3876] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1373.155807][ T3876] Quota error (device loop4): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 1373.191749][ T4402] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1373.227989][ T3876] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1373.239365][ T3876] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.24200: Failed to acquire dquot type 0 [ 1373.405837][ T4406] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1373.458941][ T4402] usb 2-1: Using ep0 maxpacket: 8 [ 1373.492480][ T3932] loop3: detected capacity change from 0 to 256 [ 1373.519374][ T3932] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1373.672767][ T4406] usb 3-1: Using ep0 maxpacket: 16 [ 1373.726285][ T3950] loop0: detected capacity change from 0 to 8 [ 1373.758899][ T4402] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1373.779042][ T4402] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1373.801070][ T4406] usb 3-1: config index 0 descriptor too short (expected 176, got 162) [ 1373.809397][ T4406] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1373.836319][ T4402] usb 2-1: Product: syz [ 1373.840559][ T4402] usb 2-1: Manufacturer: syz [ 1373.870404][ T4406] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1373.880865][ T4402] usb 2-1: SerialNumber: syz [ 1373.900170][ T4402] usb 2-1: config 0 descriptor?? [ 1373.907201][ T3967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24223'. [ 1373.922476][ T4406] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1373.929447][ T3967] device netdevsim0 entered promiscuous mode [ 1373.947969][ T4402] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1374.121681][ T4406] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1374.143222][ T4406] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1374.151277][ T4406] usb 3-1: Product: syz [ 1374.166714][ T4406] usb 3-1: Manufacturer: syz [ 1374.171387][ T4406] usb 3-1: SerialNumber: syz [ 1374.290219][ T4006] netlink: 256 bytes leftover after parsing attributes in process `syz.0.24231'. [ 1374.399362][ T4402] gspca_zc3xx: reg_r err -71 [ 1374.404088][ T4402] gspca_zc3xx: probe of 2-1:0.0 failed with error -71 [ 1374.446630][ T4402] usb 2-1: USB disconnect, device number 72 [ 1374.469788][ T4020] netlink: 24 bytes leftover after parsing attributes in process `syz.4.24236'. [ 1374.559813][ T4031] xt_HMARK: spi-set and port-set can't be combined [ 1374.559851][ T4406] usb 3-1: 0:2 : does not exist [ 1374.805848][ T4406] usb 3-1: 5:0: cannot get min/max values for control 4 (id 5) [ 1374.857859][ T4406] usb 3-1: USB disconnect, device number 81 [ 1375.004285][ T4077] netlink: 'syz.3.24249': attribute type 10 has an invalid length. [ 1375.023441][ T4077] netlink: 40 bytes leftover after parsing attributes in process `syz.3.24249'. [ 1375.054476][ T4077] device team0 entered promiscuous mode [ 1375.090265][ T4077] device team_slave_0 entered promiscuous mode [ 1375.108408][ T4077] device team_slave_1 entered promiscuous mode [ 1375.131892][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1375.137940][ T4077] device macvlan0 entered promiscuous mode [ 1375.187044][ T4077] device geneve1 entered promiscuous mode [ 1375.202285][ T4077] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1375.362412][ T4106] netlink: 20 bytes leftover after parsing attributes in process `syz.2.24258'. [ 1375.388282][ T4108] (syz.1.24260,4108,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 1375.423607][ T4108] (syz.1.24260,4108,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 1375.510115][ T4122] netlink: 'syz.0.24263': attribute type 3 has an invalid length. [ 1375.543343][ T4125] netlink: 28 bytes leftover after parsing attributes in process `syz.2.24264'. [ 1375.596332][ T4125] netlink: 28 bytes leftover after parsing attributes in process `syz.2.24264'. [ 1375.882206][ T4157] x_tables: duplicate underflow at hook 2 [ 1376.141205][ T4159] loop0: detected capacity change from 0 to 4096 [ 1376.178867][ T4195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24284'. [ 1376.259087][ T4159] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1376.341536][ T4159] ntfs3: loop0: Failed to load $Extend. [ 1376.468447][ T4245] netlink: 'syz.3.24290': attribute type 1 has an invalid length. [ 1376.842887][ T4275] loop2: detected capacity change from 0 to 256 [ 1377.054357][ T4285] loop0: detected capacity change from 0 to 4096 [ 1377.210673][ T4311] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1377.391087][ T4322] sp0: Synchronizing with TNC [ 1377.604685][ T4339] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1377.766902][ T4351] netlink: 'syz.4.24321': attribute type 1 has an invalid length. [ 1377.927244][ T4227] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1378.055623][ T4377] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1378.183743][ T4227] usb 2-1: Using ep0 maxpacket: 32 [ 1378.282960][ T4404] netlink: 'syz.3.24335': attribute type 1 has an invalid length. [ 1378.323072][ T4227] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 1378.331248][ T4227] usb 2-1: config 0 has no interface number 0 [ 1378.382978][ T4413] loop4: detected capacity change from 0 to 2048 [ 1378.389555][ T4227] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1378.404447][ T4420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24340'. [ 1378.424297][ T4227] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1378.435833][ T4420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24340'. [ 1378.495935][ T4413] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1378.622307][ T4227] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1378.651782][ T4227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1378.684660][ T4227] usb 2-1: Product: syz [ 1378.689008][ T4227] usb 2-1: Manufacturer: syz [ 1378.695416][ T4440] netlink: 44 bytes leftover after parsing attributes in process `syz.0.24345'. [ 1378.719526][ T4227] usb 2-1: SerialNumber: syz [ 1378.732851][ T4227] usb 2-1: config 0 descriptor?? [ 1378.747176][ T4440] netlink: 16 bytes leftover after parsing attributes in process `syz.0.24345'. [ 1378.775286][ T4440] netlink: 16 bytes leftover after parsing attributes in process `syz.0.24345'. [ 1379.017929][ T4227] radio-si470x 2-1:0.35: this is not a si470x device. [ 1379.197627][ T4481] befs: Unrecognized mount option "f2fs" or missing value [ 1379.242626][ T4227] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 1379.252557][ T4479] loop2: detected capacity change from 0 to 4096 [ 1379.306497][ T21] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1379.318001][ T4227] usb 2-1: USB disconnect, device number 73 [ 1379.376497][ T4479] ntfs: volume version 3.1. [ 1379.605719][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 1379.755612][ T21] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 255 [ 1379.948035][ T21] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1379.971560][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1380.012084][ T21] usb 5-1: Product: syz [ 1380.016337][ T21] usb 5-1: Manufacturer: syz [ 1380.053460][ T21] usb 5-1: SerialNumber: syz [ 1380.073859][ T21] usb 5-1: config 0 descriptor?? [ 1380.119500][ T4464] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1380.168830][ T21] mcba_usb 5-1:0.0: Microchip CAN BUS Analyzer connected [ 1380.202529][ T4562] loop2: detected capacity change from 0 to 512 [ 1380.261496][ T4562] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.24378: inode has both inline data and extents flags [ 1380.280055][ T4227] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1380.410717][ T4406] usb 5-1: USB disconnect, device number 90 [ 1380.429757][ T4562] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.24378: couldn't read orphan inode 15 (err -117) [ 1380.439630][ C1] mcba_usb 5-1:0.0 can0: Tx URB aborted (-108) [ 1380.447979][ C1] mcba_usb 5-1:0.0 can0: Tx URB aborted (-108) [ 1380.454667][ T4406] mcba_usb 5-1:0.0 can0: device disconnected [ 1380.500358][ T4562] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,resgid=0x000000000000ee00,acl,noload,journal_dev=0x0000000000000003,nodiscard,,errors=continue. Quota mode: none. [ 1380.685427][ T4227] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 1380.703466][ T4227] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1380.731985][ T4227] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1380.765747][ T4598] netlink: 'syz.3.24384': attribute type 32 has an invalid length. [ 1380.910187][ T4227] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1380.925424][ T4227] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1380.952439][ T4227] usb 2-1: Product: syz [ 1380.964877][ T4227] usb 2-1: Manufacturer: syz [ 1380.986442][ T4227] usb 2-1: SerialNumber: syz [ 1381.015273][ T4227] usb 2-1: config 0 descriptor?? [ 1381.103435][ T4227] hub 2-1:0.0: bad descriptor, ignoring hub [ 1381.116163][ T4227] hub: probe of 2-1:0.0 failed with error -5 [ 1381.157958][ T4227] usb 2-1: selecting invalid altsetting 0 [ 1381.323537][ T4227] usb 2-1: USB disconnect, device number 74 [ 1381.403301][ T5608] udevd[5608]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1381.930894][ T4691] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1382.325186][ T4729] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1382.478536][ T4744] netlink: 'syz.4.24415': attribute type 5 has an invalid length. [ 1382.512997][ T4744] netlink: 'syz.4.24415': attribute type 11 has an invalid length. [ 1382.530210][ T4745] netlink: 64 bytes leftover after parsing attributes in process `syz.1.24418'. [ 1382.650603][ T4754] netlink: 'syz.1.24420': attribute type 1 has an invalid length. [ 1382.692286][ T4754] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.24420'. [ 1382.707465][ T4758] x_tables: unsorted entry at hook 2 [ 1382.748723][ T8872] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1382.842814][ T4760] loop2: detected capacity change from 0 to 4096 [ 1382.994906][ T4779] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1383.015892][ T8872] usb 1-1: Using ep0 maxpacket: 8 [ 1383.145024][ T8872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1383.169245][ T8872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1383.195870][ T4796] nvme_fabrics: unknown parameter or missing value 'Y' in ctrl creation request [ 1383.218786][ T8872] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1383.230209][ T8872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1383.295526][ T8872] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1383.347485][ T8872] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1383.370470][ T8872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1383.424164][ T8872] usb 1-1: config 0 descriptor?? [ 1383.439660][ T4815] netlink: 20 bytes leftover after parsing attributes in process `syz.2.24438'. [ 1383.456204][ T4681] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1383.495193][ T4815] netlink: 16 bytes leftover after parsing attributes in process `syz.2.24438'. [ 1383.555061][ T4831] tmpfs: Bad value for 'mpol' [ 1383.591891][ T4834] netlink: 'syz.4.24443': attribute type 3 has an invalid length. [ 1383.600232][ T4834] netlink: 766 bytes leftover after parsing attributes in process `syz.4.24443'. [ 1383.778351][ T4849] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.24449'. [ 1383.824724][ T4849] openvswitch: netlink: Key 29 has unexpected len 3064 expected 0 [ 1383.879446][ T4859] loop3: detected capacity change from 0 to 1024 [ 1383.975004][ T4919] usb 1-1: USB disconnect, device number 73 [ 1383.996032][ T4859] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,bsddf,quota,noauto_da_alloc,debug_want_extra_isize=0x0000000000000080,nodelalloc,noauto_da_alloc,stripe=0x0000000000000005,barrier,,errors=continue. Quota mode: writeback. [ 1384.801337][ T4406] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1385.012845][ T4968] kernel profiling enabled (shift: 25) [ 1385.069352][ T4406] usb 2-1: Using ep0 maxpacket: 8 [ 1385.117052][ T4974] loop0: detected capacity change from 0 to 2048 [ 1385.198034][ T4406] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 1385.218331][ T8872] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1385.228049][ T4406] usb 2-1: config 0 has no interface number 0 [ 1385.234577][ T4402] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1385.253217][ T4983] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1385.269805][ T4406] usb 2-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1385.284746][ T4974] attempt to access beyond end of device [ 1385.284746][ T4974] loop0: rw=0, want=2198922592330, limit=2048 [ 1385.297299][ T4974] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=1) [ 1385.310544][ T4406] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 1385.324154][ T4406] usb 2-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x9A, skipping [ 1385.347465][ T4406] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1385.496161][ T4402] usb 5-1: Using ep0 maxpacket: 16 [ 1385.501504][ T8872] usb 3-1: Using ep0 maxpacket: 8 [ 1385.533145][ T4406] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1385.547482][ T4406] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1385.569381][ T4406] usb 2-1: Product: syz [ 1385.577746][ T4406] usb 2-1: Manufacturer: syz [ 1385.585846][ T4406] usb 2-1: SerialNumber: syz [ 1385.593931][ T4406] usb 2-1: config 0 descriptor?? [ 1385.624813][ T4402] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1385.637061][ T4406] iowarrior 2-1:0.186: no interrupt-in endpoint found [ 1385.646356][ T8872] usb 3-1: config 0 has an invalid interface number: 33 but max is 1 [ 1385.655933][ T8872] usb 3-1: config 0 has no interface number 1 [ 1385.667325][ T4402] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 255, changing to 11 [ 1385.691093][ T8872] usb 3-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 1385.708871][ T4402] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 57872, setting to 1024 [ 1385.722310][ T8872] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247 [ 1385.733428][ T4402] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1385.745056][ T4402] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1385.755140][ T4402] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1385.769040][ T4402] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1385.778975][ T4402] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1385.797427][ T4402] usb 5-1: config 0 descriptor?? [ 1385.913546][ T8872] usb 3-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 1385.922851][ T8872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1385.938363][ T8872] usb 3-1: Product: syz [ 1385.942918][ T8872] usb 3-1: Manufacturer: syz [ 1385.954753][ T8872] usb 3-1: SerialNumber: syz [ 1385.976167][ T8872] usb 3-1: config 0 descriptor?? [ 1385.981502][ T4402] rc_core: IR keymap rc-hauppauge not found [ 1385.988099][ T4402] Registered IR keymap rc-empty [ 1385.993071][ T4402] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1386.030704][ T4402] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1386.043882][ T8872] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 1386.074220][ T4402] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1386.103018][ T4402] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input109 [ 1386.159979][ T4402] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1386.178539][ T5039] netlink: 100 bytes leftover after parsing attributes in process `syz.3.24501'. [ 1386.180511][ C0] mceusb 5-1:0.0: Error: urb status = -75 [ 1386.195399][ T4402] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1386.249097][ T4402] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1386.280176][ T8872] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 1386.298060][ T4402] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1386.338616][ T4402] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1386.347798][ T8872] usb 3-1: USB disconnect, device number 82 [ 1386.356576][ T2426] pvrusb2: Invalid read control endpoint [ 1386.404901][ T4402] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1386.412506][ T2426] usb 3-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 1386.432503][ T2426] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 1386.447628][ T4402] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1386.490696][ T4402] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1386.519275][ T5056] loop3: detected capacity change from 0 to 4096 [ 1386.534227][ T4402] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1386.565564][ T4402] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1386.599635][ T4402] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 1386.612433][ T4402] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1386.641200][ T5056] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 1386.691685][ T4402] usb 5-1: USB disconnect, device number 91 [ 1386.739321][ T5056] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1386.820661][ T5056] ntfs3: loop3: ino=21, "bus" The size of extended attributes must not exceed 64KiB [ 1387.747937][ T4402] usb 2-1: USB disconnect, device number 75 [ 1387.928029][ T5122] loop4: detected capacity change from 0 to 32768 [ 1388.006298][ T5122] jfs_lookup: dtSearch returned -5 [ 1388.076334][ T5191] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 1388.368770][ T5144] 9pnet: p9_fd_create_tcp (5144): problem connecting socket to 127.0.0.1 [ 1388.738011][ T5237] nvme_fabrics: missing parameter 'transport=%s' [ 1388.744632][ T5237] nvme_fabrics: missing parameter 'nqn=%s' [ 1388.881137][ T5259] loop1: detected capacity change from 0 to 256 [ 1389.072455][ T5277] loop4: detected capacity change from 0 to 1024 [ 1389.135500][ T5277] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 1389.159176][ T5277] EXT4-fs (loop4): Ignoring removed orlov option [ 1389.249502][ T5277] EXT4-fs (loop4): mounted filesystem without journal. Opts: nomblk_io_submit,nojournal_checksum,nombcache,inode_readahead_blks=0x0000000000002000,debug_want_extra_isize=0x0000000000000080,orlov,data_err=abort,sb=0x0000000000000080,grpjquota=,,errors=continue. Quota mode: none. [ 1389.275890][ C0] vkms_vblank_simulate: vblank timer overrun [ 1389.695043][ T5327] ipt_CLUSTERIP: bad num_local_nodes 18 [ 1389.867544][ T5343] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.24593'. [ 1390.145206][ T5363] device bond6 entered promiscuous mode [ 1390.196541][ T5410] loop0: detected capacity change from 0 to 8 [ 1390.203362][ T5363] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1390.408909][ T5427] loop0: detected capacity change from 0 to 64 [ 1390.440975][ T5432] loop2: detected capacity change from 0 to 512 [ 1390.575771][ T5445] ALSA: mixer_oss: invalid OSS volume 'u' [ 1390.607948][ T5432] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 1390.641205][ T5432] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 1390.709391][ T5432] EXT4-fs error (device loop2): ext4_orphan_get:1432: comm syz.2.24609: bad orphan inode 13 [ 1390.788274][ T5432] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="data_err=ignore,noload,data_err=ignore,grpjquota="errors=continue,max_dir_size_kb=0x00000000000001ff,nobarrier,,errors=continue. Quota mode: writeback. [ 1390.820873][ T5465] loop0: detected capacity change from 0 to 256 [ 1391.802138][ T5540] netlink: 76 bytes leftover after parsing attributes in process `syz.1.24642'. [ 1392.267238][ T5576] netlink: 'syz.3.24656': attribute type 1 has an invalid length. [ 1392.435323][ T5593] dlm: Unknown command passed to DLM device : 132 [ 1392.435323][ T5593] [ 1392.572085][ T5598] openvswitch: netlink: Actions may not be safe on all matching packets [ 1393.106694][ T5554] kexec: Could not allocate control_code_buffer [ 1393.399641][ T5671] x_tables: duplicate entry at hook 2 [ 1393.514136][ T4402] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1393.714647][ T5706] loop0: detected capacity change from 0 to 8 [ 1393.771945][ T5706] SQUASHFS error: xz decompression failed, data probably corrupt [ 1393.780989][ T5706] SQUASHFS error: Failed to read block 0xfc: -5 [ 1393.782314][ T4402] usb 4-1: Using ep0 maxpacket: 32 [ 1393.797377][ T5706] SQUASHFS error: Unable to read data cache entry [fc] [ 1393.804953][ T5706] SQUASHFS error: Unable to read page, block fc, size a [ 1393.812879][ T5706] SQUASHFS error: Unable to read data cache entry [fc] [ 1393.820079][ T5706] SQUASHFS error: Unable to read page, block fc, size a [ 1393.828402][ T5706] SQUASHFS error: Unable to read data cache entry [fc] [ 1393.835616][ T5706] SQUASHFS error: Unable to read page, block fc, size a [ 1393.848302][ T5706] SQUASHFS error: xz decompression failed, data probably corrupt [ 1393.856593][ T5706] SQUASHFS error: Failed to read block 0xfc: -5 [ 1393.863791][ T5706] SQUASHFS error: xz decompression failed, data probably corrupt [ 1393.871983][ T5706] SQUASHFS error: Failed to read block 0xfc: -5 [ 1393.877959][ T4227] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1393.881476][ T26] audit: type=1800 audit(1346.708:89): pid=5706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.24697" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 1393.952645][ T4268] usb 5-1: new full-speed USB device number 92 using dummy_hcd [ 1393.974054][ T4402] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1394.070230][ T4402] usb 4-1: config 1 has an invalid interface number: 255 but max is 2 [ 1394.091216][ T4402] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1394.102732][ T4402] usb 4-1: config 1 has no interface number 2 [ 1394.108889][ T4402] usb 4-1: config 1 interface 255 has no altsetting 0 [ 1394.261117][ T5729] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.24704'. [ 1394.276622][ T4227] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1394.287281][ T4402] usb 4-1: New USB device found, idVendor=0582, idProduct=0009, bcdDevice= 0.40 [ 1394.305485][ T4402] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1394.314424][ T4227] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1394.323707][ T4402] usb 4-1: Product: syz [ 1394.333032][ T4227] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1394.341996][ T4402] usb 4-1: Manufacturer: syz [ 1394.346639][ T4402] usb 4-1: SerialNumber: syz [ 1394.393055][ T4227] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1394.439064][ T4268] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1394.452644][ T4268] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1394.484304][ T4268] usb 5-1: config 0 descriptor?? [ 1394.542517][ T4268] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1394.675147][ T4402] usb 4-1: USB disconnect, device number 78 [ 1394.942320][ T5608] udevd[5608]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1395.010925][ T4268] gp8psk: usb in 128 operation failed. [ 1395.036208][ T4268] gp8psk: usb in 137 operation failed. [ 1395.041711][ T4268] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1395.066334][ T4268] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1395.094720][ T4268] usb 5-1: USB disconnect, device number 92 [ 1395.326196][ T5831] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19971 - 0 [ 1395.336701][ T5831] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19971 - 0 [ 1395.354803][ T5831] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19971 - 0 [ 1395.364024][ T5831] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19971 - 0 [ 1395.566972][ T4227] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 1395.668932][ T5862] netlink: 'syz.0.24732': attribute type 10 has an invalid length. [ 1395.801994][ T4227] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1395.828550][ T4227] stv0680 2-1:4.0: last error: 0, command = 0x0 [ 1395.841875][ T4227] usb 2-1: USB disconnect, device number 76 [ 1395.917200][ T5885] x_tables: unsorted entry at hook 3 [ 1396.092471][ T5907] xt_l2tp: invalid flags combination: c [ 1396.162751][ T5915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24748'. [ 1396.379382][ T4268] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1396.528346][ T26] audit: type=1400 audit(1349.168:90): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=5943 comm="syz.3.24758" [ 1396.707364][ T5963] netlink: 'syz.3.24764': attribute type 1 has an invalid length. [ 1396.727515][ T5963] netlink: 'syz.3.24764': attribute type 3 has an invalid length. [ 1396.760872][ T5963] netlink: 224 bytes leftover after parsing attributes in process `syz.3.24764'. [ 1397.010157][ T4268] usb 5-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 1397.037541][ T4268] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1397.078494][ T4268] usb 5-1: Product: syz [ 1397.082726][ T4268] usb 5-1: Manufacturer: syz [ 1397.104986][ T4268] usb 5-1: SerialNumber: syz [ 1397.127358][ T5993] netlink: 'syz.2.24774': attribute type 3 has an invalid length. [ 1397.145236][ T4268] usb 5-1: config 0 descriptor?? [ 1397.191761][ T5993] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 1397.218282][ T146] Bluetooth: hci5: urb ffff888142d91700 submission failed (2) [ 1397.352254][ T6017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24781'. [ 1397.361308][ T6017] netlink: 24 bytes leftover after parsing attributes in process `syz.3.24781'. [ 1397.423244][ T6024] loop1: detected capacity change from 0 to 736 [ 1397.439614][ T4268] usb 5-1: USB disconnect, device number 93 [ 1397.631788][ T6044] tmpfs: Bad value for 'mpol' [ 1397.998670][ T6078] netlink: 32 bytes leftover after parsing attributes in process `syz.3.24797'. [ 1398.046844][ T6078] netlink: 32 bytes leftover after parsing attributes in process `syz.3.24797'. [ 1398.077128][ T6078] netlink: 24 bytes leftover after parsing attributes in process `syz.3.24797'. [ 1398.224691][ T6092] Option '2 OǗWz [ 1398.224691][ T6092] f:5A- [ 1398.224691][ T6092] )d::l]GY;m~R N+o{j\' to dns_resolver key: bad/missing value [ 1398.538717][ T4227] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1398.688702][ T4268] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1398.923843][ T4227] usb 1-1: config 0 has an invalid descriptor of length 167, skipping remainder of the config [ 1398.962136][ T4227] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 201, changing to 11 [ 1398.977248][ T4268] usb 4-1: Using ep0 maxpacket: 32 [ 1398.995461][ T4227] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 9543, setting to 1024 [ 1399.037007][ T4227] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1399.131520][ T4268] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1399.152199][ T4268] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1399.159838][ T4227] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1399.178982][ T4227] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=192 [ 1399.198561][ T4227] usb 1-1: SerialNumber: syz [ 1399.214921][ T4227] usb 1-1: config 0 descriptor?? [ 1399.245027][ T6096] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1399.330112][ T4268] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1399.361494][ T4268] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1399.426262][ T4268] usb 4-1: Product: syz [ 1399.430495][ T4268] usb 4-1: Manufacturer: syz [ 1399.490307][ T4227] ath6kl: Failed to submit usb control message: -71 [ 1399.498665][ T4227] ath6kl: unable to send the bmi data to the device: -71 [ 1399.515013][ T6218] sctp: [Deprecated]: syz.4.24839 (pid 6218) Use of int in maxseg socket option. [ 1399.515013][ T6218] Use struct sctp_assoc_value instead [ 1399.534306][ T4268] hub 4-1:4.0: USB hub found [ 1399.539129][ T4227] ath6kl: Unable to send get target info: -71 [ 1399.578258][ T4227] ath6kl: Failed to init ath6kl core: -71 [ 1399.646699][ T4227] ath6kl_usb: probe of 1-1:0.0 failed with error -71 [ 1399.693376][ T4227] usb 1-1: USB disconnect, device number 74 [ 1399.757652][ T4268] hub 4-1:4.0: 2 ports detected [ 1399.772015][ T6240] xt_TCPMSS: Only works on TCP SYN packets [ 1399.945071][ T6249] sock: sock_timestamping_bind_phc: sock not bind to device [ 1399.992982][ T4268] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 1400.006570][ T4268] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 1400.087378][ T4268] usb 4-1: USB disconnect, device number 79 [ 1400.119634][ T6219] loop1: detected capacity change from 0 to 32768 [ 1400.194546][ T6219] (syz.1.24840,6219,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1400.250798][ T6219] (syz.1.24840,6219,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1400.316475][ T6278] netlink: 5 bytes leftover after parsing attributes in process `syz.2.24854'. [ 1400.339259][ T6219] JBD2: Ignoring recovery information on journal [ 1400.346047][ T6278] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1400.384300][ T6278] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1400.407242][ T6278] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1400.536366][ T6219] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1400.793612][ T4184] ocfs2: Unmounting device (7,1) on (node local) [ 1400.867488][ T6312] loop0: detected capacity change from 0 to 512 [ 1400.999665][ T6312] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 1401.067740][ T6327] netlink: 96 bytes leftover after parsing attributes in process `syz.3.24871'. [ 1401.085582][ T6327] netlink: 12 bytes leftover after parsing attributes in process `syz.3.24871'. [ 1401.340457][ T6337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1401.445432][ T6354] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1401.554450][ T6363] __nla_validate_parse: 2 callbacks suppressed [ 1401.554468][ T6363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24880'. [ 1401.693529][ T6375] loop4: detected capacity change from 0 to 1764 [ 1401.802964][ T6375] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1401.825793][ T6390] netlink: 'syz.0.24891': attribute type 15 has an invalid length. [ 1401.844922][ T6390] netlink: 25 bytes leftover after parsing attributes in process `syz.0.24891'. [ 1402.041753][ T6407] sctp: [Deprecated]: syz.4.24892 (pid 6407) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1402.041753][ T6407] Use struct sctp_sack_info instead [ 1402.059638][ T6409] netlink: 28 bytes leftover after parsing attributes in process `syz.0.24897'. [ 1402.230531][ T6426] [ 1402.232909][ T6426] ====================================================== [ 1402.239941][ T6426] WARNING: possible circular locking dependency detected [ 1402.246996][ T6426] syzkaller #0 Not tainted [ 1402.251442][ T6426] ------------------------------------------------------ [ 1402.258514][ T6426] syz.4.24901/6426 is trying to acquire lock: [ 1402.264601][ T6426] ffff88807a73cc28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 1402.275701][ T6426] [ 1402.275701][ T6426] but task is already holding lock: [ 1402.283084][ T6426] ffffffff8d6c5de8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x18b/0x560 [ 1402.292792][ T6426] [ 1402.292792][ T6426] which lock already depends on the new lock. [ 1402.292792][ T6426] [ 1402.303224][ T6426] [ 1402.303224][ T6426] the existing dependency chain (in reverse order) is: [ 1402.312265][ T6426] [ 1402.312265][ T6426] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 1402.320293][ T6426] __mutex_lock_common+0x1e3/0x2400 [ 1402.326061][ T6426] mutex_lock_nested+0x17/0x20 [ 1402.331389][ T6426] rfkill_register+0x33/0x980 [ 1402.336635][ T6426] hci_register_dev+0x452/0x970 [ 1402.342132][ T6426] vhci_create_device+0x32c/0x5c0 [ 1402.347719][ T6426] vhci_write+0x391/0x450 [ 1402.352606][ T6426] vfs_write+0x745/0xd60 [ 1402.357403][ T6426] ksys_write+0x152/0x260 [ 1402.362287][ T6426] do_syscall_64+0x4c/0xa0 [ 1402.367253][ T6426] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1402.367261][ T4402] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1402.381258][ T6426] [ 1402.381258][ T6426] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 1402.389210][ T6426] __mutex_lock_common+0x1e3/0x2400 [ 1402.394989][ T6426] mutex_lock_nested+0x17/0x20 [ 1402.400316][ T6426] vhci_send_frame+0x88/0x100 [ 1402.405552][ T6426] hci_send_frame+0x1a9/0x2e0 [ 1402.410792][ T6426] hci_tx_work+0x9f9/0x1710 [ 1402.415882][ T6426] process_one_work+0x85f/0x1010 [ 1402.421378][ T6426] worker_thread+0xaa6/0x1290 [ 1402.426614][ T6426] kthread+0x436/0x520 [ 1402.431248][ T6426] ret_from_fork+0x1f/0x30 [ 1402.436267][ T6426] [ 1402.436267][ T6426] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 1402.445511][ T6426] __flush_work+0x116/0x210 [ 1402.450613][ T6426] hci_dev_do_open+0xc58/0x1270 [ 1402.456024][ T6426] hci_power_on+0x1c1/0x610 [ 1402.461085][ T6426] process_one_work+0x85f/0x1010 [ 1402.466579][ T6426] worker_thread+0xaa6/0x1290 [ 1402.471812][ T6426] kthread+0x436/0x520 [ 1402.476431][ T6426] ret_from_fork+0x1f/0x30 [ 1402.481430][ T6426] [ 1402.481430][ T6426] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 1402.489118][ T6426] __mutex_lock_common+0x1e3/0x2400 [ 1402.494878][ T6426] mutex_lock_nested+0x17/0x20 [ 1402.500318][ T6426] bg_scan_update+0x44/0x3b0 [ 1402.505467][ T6426] process_one_work+0x85f/0x1010 [ 1402.510965][ T6426] worker_thread+0xaa6/0x1290 [ 1402.516200][ T6426] kthread+0x436/0x520 [ 1402.520827][ T6426] ret_from_fork+0x1f/0x30 [ 1402.525810][ T6426] [ 1402.525810][ T6426] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 1402.535785][ T6426] __lock_acquire+0x2c42/0x7d10 [ 1402.541214][ T6426] lock_acquire+0x19e/0x400 [ 1402.546301][ T6426] __flush_work+0x116/0x210 [ 1402.551370][ T6426] __cancel_work_timer+0x3f4/0x560 [ 1402.557072][ T6426] hci_request_cancel_all+0xcc/0x300 [ 1402.562942][ T6426] hci_dev_do_close+0x4e/0x1030 [ 1402.568352][ T6426] hci_rfkill_set_block+0x10a/0x190 [ 1402.574114][ T6426] rfkill_set_block+0x1c9/0x3d0 [ 1402.579521][ T6426] rfkill_fop_write+0x452/0x560 [ 1402.584937][ T6426] vfs_write+0x30b/0xd60 [ 1402.589739][ T6426] ksys_write+0x152/0x260 [ 1402.594815][ T6426] do_syscall_64+0x4c/0xa0 [ 1402.599792][ T6426] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1402.606249][ T6426] [ 1402.606249][ T6426] other info that might help us debug this: [ 1402.606249][ T6426] [ 1402.616502][ T6426] Chain exists of: [ 1402.616502][ T6426] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 1402.616502][ T6426] [ 1402.623957][ T4402] usb 4-1: Using ep0 maxpacket: 8 [ 1402.632273][ T6426] Possible unsafe locking scenario: [ 1402.632273][ T6426] [ 1402.632282][ T6426] CPU0 CPU1 [ 1402.650188][ T6426] ---- ---- [ 1402.655586][ T6426] lock(rfkill_global_mutex); [ 1402.660385][ T6426] lock(&data->open_mutex); [ 1402.667523][ T6426] lock(rfkill_global_mutex); [ 1402.674838][ T6426] lock((work_completion)(&hdev->bg_scan_update)); [ 1402.681464][ T6426] [ 1402.681464][ T6426] *** DEADLOCK *** [ 1402.681464][ T6426] [ 1402.689632][ T6426] 1 lock held by syz.4.24901/6426: [ 1402.694776][ T6426] #0: ffffffff8d6c5de8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x18b/0x560 [ 1402.704926][ T6426] [ 1402.704926][ T6426] stack backtrace: [ 1402.710834][ T6426] CPU: 1 PID: 6426 Comm: syz.4.24901 Not tainted syzkaller #0 [ 1402.718322][ T6426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1402.728411][ T6426] Call Trace: [ 1402.731721][ T6426] [ 1402.734688][ T6426] dump_stack_lvl+0x188/0x250 [ 1402.739409][ T6426] ? load_image+0x400/0x400 [ 1402.743946][ T6426] ? show_regs_print_info+0x20/0x20 [ 1402.749187][ T6426] ? print_circular_bug+0x12b/0x1a0 [ 1402.754426][ T6426] check_noncircular+0x296/0x330 [ 1402.759398][ T6426] ? add_chain_block+0x940/0x940 [ 1402.764395][ T6426] ? lockdep_lock+0xf1/0x1f0 [ 1402.769024][ T6426] ? __lock_acquire+0x12e8/0x7d10 [ 1402.774092][ T6426] ? mark_lock+0x94/0x320 [ 1402.778460][ T6426] __lock_acquire+0x2c42/0x7d10 [ 1402.783367][ T6426] ? verify_lock_unused+0x140/0x140 [ 1402.788611][ T6426] ? verify_lock_unused+0x140/0x140 [ 1402.793867][ T6426] ? mark_lock+0x94/0x320 [ 1402.798235][ T6426] lock_acquire+0x19e/0x400 [ 1402.802769][ T6426] ? __flush_work+0xfa/0x210 [ 1402.807393][ T6426] ? __lock_acquire+0x7d10/0x7d10 [ 1402.812462][ T6426] ? read_lock_is_recursive+0x10/0x10 [ 1402.817873][ T6426] ? start_flush_work+0x776/0x820 [ 1402.822932][ T6426] __flush_work+0x116/0x210 [ 1402.827462][ T6426] ? __flush_work+0xfa/0x210 [ 1402.832084][ T6426] ? flush_work+0x20/0x20 [ 1402.836448][ T6426] ? try_to_grab_pending+0xfa/0x7f0 [ 1402.841714][ T6426] ? mark_lock+0x94/0x320 [ 1402.846091][ T6426] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1402.852099][ T6426] ? lock_chain_count+0x20/0x20 [ 1402.856990][ T6426] ? mark_lock+0x94/0x320 [ 1402.858478][ T4402] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1402.861354][ T6426] ? __cancel_work_timer+0x36a/0x560 [ 1402.861382][ T6426] __cancel_work_timer+0x3f4/0x560 [ 1402.879431][ T6426] ? cancel_work_sync+0x20/0x20 [ 1402.884307][ T6426] ? __cancel_work+0x1f9/0x2e0 [ 1402.889102][ T6426] ? lockdep_hardirqs_on+0x94/0x140 [ 1402.894337][ T6426] ? __cancel_work+0x27b/0x2e0 [ 1402.899136][ T6426] ? cancel_work+0x20/0x20 [ 1402.903582][ T6426] ? lock_chain_count+0x20/0x20 [ 1402.908492][ T6426] hci_request_cancel_all+0xcc/0x300 [ 1402.913858][ T6426] hci_dev_do_close+0x4e/0x1030 [ 1402.918744][ T6426] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1402.924680][ T6426] ? _raw_spin_unlock+0x40/0x40 [ 1402.929563][ T6426] hci_rfkill_set_block+0x10a/0x190 [ 1402.934801][ T6426] ? rcu_lock_release+0x20/0x20 [ 1402.939693][ T6426] rfkill_set_block+0x1c9/0x3d0 [ 1402.944587][ T6426] rfkill_fop_write+0x452/0x560 [ 1402.949469][ T6426] ? rfkill_fop_read+0x520/0x520 [ 1402.954450][ T6426] ? common_file_perm+0x140/0x1c0 [ 1402.959519][ T6426] ? fsnotify_perm+0x5d/0x560 [ 1402.964232][ T6426] ? security_file_permission+0x75/0xa0 [ 1402.969815][ T6426] ? rfkill_fop_read+0x520/0x520 [ 1402.974788][ T6426] vfs_write+0x30b/0xd60 [ 1402.979064][ T6426] ? file_end_write+0x250/0x250 [ 1402.983952][ T6426] ? __fget_files+0x40f/0x480 [ 1402.986684][ T4402] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1402.988670][ T6426] ? __fdget_pos+0x1e2/0x370 [ 1403.003330][ T6426] ? ksys_write+0x71/0x260 [ 1403.007785][ T6426] ksys_write+0x152/0x260 [ 1403.012157][ T6426] ? __ia32_sys_read+0x80/0x80 [ 1403.016952][ T6426] ? lockdep_hardirqs_on+0x94/0x140 [ 1403.022183][ T6426] do_syscall_64+0x4c/0xa0 [ 1403.026648][ T6426] ? clear_bhb_loop+0x30/0x80 [ 1403.031363][ T6426] ? clear_bhb_loop+0x30/0x80 [ 1403.036205][ T6426] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1403.042133][ T6426] RIP: 0033:0x7efeb05afdd9 [ 1403.046577][ T6426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1403.066220][ T6426] RSP: 002b:00007efeae809028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1403.069351][ T4402] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1403.074671][ T6426] RAX: ffffffffffffffda RBX: 00007efeb0828fa0 RCX: 00007efeb05afdd9 [ 1403.074692][ T6426] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 1403.074706][ T6426] RBP: 00007efeb0645d69 R08: 0000000000000000 R09: 0000000000000000 [ 1403.074719][ T6426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1403.074732][ T6426] R13: 00007efeb0829038 R14: 00007efeb0828fa0 R15: 00007ffff4237858 [ 1403.074755][ T6426] [ 1403.074807][ C1] vkms_vblank_simulate: vblank timer overrun [ 1403.132714][ C1] vkms_vblank_simulate: vblank timer overrun [ 1403.144478][ T6447] loop2: detected capacity change from 0 to 1764 [ 1403.211533][ T6447] ISO 9660 Extensions: Microsoft Joliet Level 3 [ 1403.223689][ T6447] ISOFS: changing to secondary root [ 1403.262581][ T6445] loop1: detected capacity change from 0 to 4096 [ 1403.403141][ T4402] usb 4-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 1403.412255][ T4402] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1403.421312][ T4402] usb 4-1: Product: syz [ 1403.426242][ T4402] usb 4-1: Manufacturer: syz [ 1403.430879][ T4402] usb 4-1: SerialNumber: syz [ 1404.012525][ T4402] usb 4-1: cannot find UAC_HEADER [ 1404.024952][ T4402] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 1404.039999][ T4402] usb 4-1: USB disconnect, device number 80 [ 1404.045372][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1409.722594][ T1422] ieee802154 phy1 wpan1: encryption failed: -22