last executing test programs: 2.694946183s ago: executing program 1 (id=2757): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=tcp,nolock,rsize=1024,wsize=1024\x00') 2.532122517s ago: executing program 1 (id=2759): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETS(r0, 0x40045431, 0x0) 2.35897851s ago: executing program 1 (id=2761): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000002c0)={0x10, 0x2}) 2.268128012s ago: executing program 1 (id=2763): munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) 2.190545844s ago: executing program 1 (id=2765): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f0000000140)=[{0x18, '\x00', @buffer={"33e3ee7608f84e1f2aefa327ad62a29457acd30cefa08b03bcaf6821fe4802d4", 0x20}, 0x7ff}, {0x3, '\x00', @st={0x4, [{0x3, @uvalue=0x8}, {0x2, @uvalue=0x2}, {0x2, @svalue=0x1}, {0x3, @svalue=0x7}]}, 0x9}, {0x3d, '\x00', @data=0x2, 0x479a}]}) 1.999223548s ago: executing program 1 (id=2767): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x62, 0x4d, 0x41, 0x40, 0x2040, 0x7500, 0xd883, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x72, 0x6, 0x10, 0x6, "", [{{0x9, 0x4, 0xd8, 0xe8, 0x1, 0xed, 0x71, 0x7c, 0x3, [], [{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0xff, 0x10, 0x3}}]}}]}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x9c, @string={0x9c, 0x3, "2115a206f6af16c7ab69c2e9a712c621313a6e5d019ca62cf867b82a3b168019f80a1383cba36afb137f3c0a969c34cb495a49d760e5c178e7fe0690a0c0206721b38c205e753d9b29d557bc458a087c6b508341e78efb6545084959794b8a11258157d70f2836cecd5d2c2efc2844140d8f78ea2141c2f5dfbf2477e0cfe71d025cfce74d4a5cad27fd78b25ab16abf062884ef07d492dd4734"}}}, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x0, 0x14, 0xd8, "f6461e7db0d76cd446e95e957545a10a8f0703f048dea071489a0aa20eaf7d67dbd88a11e9495a3db1f2fd5cccee8512370533b490380cdac45902896f944c64826bf56f12f9c30c5a9e8cc7450cf3c4f7d0a3f9bd63bbb3e5a963416fc6ce4217bd9142c225dd9032161435e95800b8c610b49abdeac952fd4536d822a4079c8f775825eb91764f6dbd2066559f7232bec56086e1f061988d4abcca810e9328947476ba2f38f66a2b981f98d2987a51ee51023ad9d05acf6ee566f5bd6253b56ed88a0ea180a6be4e5e1fc591d1e1b7d56cbd007f36b13a"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x9e}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000000)=ANY=[@ANYBLOB="264d97d0c76fb9"], &(0x7f0000000500)={0x20, 0x82, 0x1, "b7"}, &(0x7f0000000540)={0x20, 0x83, 0x1, 'G'}, 0x0, &(0x7f00000005c0)={0x20, 0x85, 0x3, "01a75c"}}) 1.732167904s ago: executing program 4 (id=2776): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000280)) 1.610995636s ago: executing program 4 (id=2779): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5800000010001fff00000000fcdbdf2500005865", @ANYRES32=0x0, @ANYBLOB="0000000000000000380012800b0001006d616373656300002800028005000600fc00000005000300f8"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.495905139s ago: executing program 4 (id=2781): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x43, 0x62f8, &(0x7f0000019f80)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x1) 875.285752ms ago: executing program 2 (id=2793): r0 = getpid() process_vm_readv(r0, &(0x7f0000000040)=[{&(0x7f0000000540)=""/212, 0xd4}], 0x1, &(0x7f0000001100)=[{&(0x7f0000000300)=""/75, 0x4b}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 762.439034ms ago: executing program 2 (id=2796): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) 699.166146ms ago: executing program 0 (id=2798): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=0x0], 0x47, 0xc11, &(0x7f0000000d00)="$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") mknod$loop(&(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x0) 699.052226ms ago: executing program 2 (id=2799): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0xf, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20880) 676.139566ms ago: executing program 2 (id=2801): r0 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000100)={0x1, {0xf8000002, 0x9, 0x0, 0xd}}) 583.103008ms ago: executing program 4 (id=2803): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c001a180800020007000200060001c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77cc766307de2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) 583.028848ms ago: executing program 2 (id=2804): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x103902, 0x0) ioctl$RNDZAPENTCNT(r0, 0x5204, 0x0) 501.5313ms ago: executing program 2 (id=2805): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe80000000000000030001", 0x37}], 0x1, 0x0, 0x0, 0x2663}, 0x20050854) syz_usb_connect(0x0, 0x56, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014e2fc203c419b81c0a701020301090244000100000000090400000302060000052406000005240000000d240f"], 0x0) 456.12437ms ago: executing program 0 (id=2806): r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044306, 0x0) 407.122082ms ago: executing program 3 (id=2807): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0xfffffffffffffe50, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) 392.272942ms ago: executing program 3 (id=2808): r0 = socket$kcm(0x10, 0x2, 0x4) getsockopt$sock_int(r0, 0x1, 0x6, 0x0, &(0x7f0000000340)) 289.216194ms ago: executing program 0 (id=2809): r0 = io_uring_setup(0x5013, &(0x7f0000000500)={0x0, 0xfffffffe, 0x1, 0x0, 0x273}) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, '\x00', [{}]}, 0x1) 223.083955ms ago: executing program 3 (id=2810): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000140)={0x89a4, "03a86a2baec3e42a3fe666c12af837c5248fa1e8c743fb1cb44b1879110014a2", 0x3, 0x8, 0x76, 0x7, 0x1, 0x2, 0x109, 0x7fffffff}) 157.965587ms ago: executing program 0 (id=2811): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x6, 0x40, 0x40, 0x41}, 0x48) 136.031008ms ago: executing program 3 (id=2812): socket(0x2, 0x3, 0xff) syz_emit_ethernet(0x46, &(0x7f0000001900)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x38, 0x67, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0xf7, 0x801f, {0x5, 0x4, 0x3, 0x14, 0x7ff, 0x64, 0x1ce2, 0xd9, 0xff, 0xe5c, @loopback, @loopback}, "65b37c42ddedc962"}}}}}, 0x0) 71.207149ms ago: executing program 4 (id=2813): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000000)={0x3, &(0x7f0000000200)=[{0x19, '\x00', @data=0x4e1, 0x2}, {0x13, '\x00', @data, 0x80}, {0xb, '\x00', @data=0x4, 0x4}]}) 71.064949ms ago: executing program 0 (id=2814): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x800, 0x0, 0x6, 0x2, 0x81}, 0x1}}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PROTO={0x6, 0x4, 0x883e}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x74}}, 0x0) 67.320399ms ago: executing program 3 (id=2815): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000004c0)={0xa, @sdr={0x3147504d, 0x8009}}) 30.06643ms ago: executing program 3 (id=2816): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000024c0)={[{@nls={'nls', 0x3d, 'koi8-u'}}, {@nobarrier}, {}, {@force}, {@uid}, {@uid}]}, 0x1, 0x5ee, &(0x7f00000027c0)="$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") symlink(&(0x7f00000003c0)='./file2/../file0\x00', &(0x7f0000000380)='./file0\x00') 26.51021ms ago: executing program 4 (id=2817): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) setitimer(0x2, &(0x7f0000000000)={{0x0, 0x8}, {0xffffffff}}, 0x0) 0s ago: executing program 0 (id=2818): r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x2b8, 0x0, 0xb, 0xd0e0011, 0x148, 0xc6, 0x220, 0x1d8, 0x190, 0x220, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xe0, 0x148, 0x2000000, {}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x8, 0x7, 0x3, {0x42}}}, @common=@unspec=@owner={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x5}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x6, 0xb67f, 0x0, 'snmp_trap\x00', 'syz0\x00', {0x1e}}}}, {{@ip={@remote, @private=0xa010100, 0x0, 0x0, 'xfrm0\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) kernel console output (not intermixed with test programs): 0.453839][ T6432] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,jqfmt=vfsv0,inlinecrypt,noblock_validity,usrjquota=,,errors=continue. Quota mode: none. [ 100.657799][ T6459] x_tables: duplicate underflow at hook 2 [ 100.683650][ T6462] netlink: 'syz.1.877': attribute type 11 has an invalid length. [ 100.737463][ T6462] netlink: 140 bytes leftover after parsing attributes in process `syz.1.877'. [ 100.801789][ T6468] netlink: 140 bytes leftover after parsing attributes in process `syz.2.880'. [ 100.843033][ T6472] loop4: detected capacity change from 0 to 256 [ 100.862097][ T6468] netlink: 56 bytes leftover after parsing attributes in process `syz.2.880'. [ 100.923883][ T6414] loop0: detected capacity change from 0 to 32768 [ 100.942123][ T6472] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d) [ 101.019023][ T6414] JBD2: Ignoring recovery information on journal [ 101.221325][ T6414] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 101.279552][ T6494] hfsplus: keylen 65060 too large [ 101.451178][ T6507] nfs4: Bad value for 'source' [ 101.515915][ T6509] xt_HMARK: spi-set and port-set can't be combined [ 101.717523][ T4186] ocfs2: Unmounting device (7,0) on (node local) [ 101.724243][ T6517] netlink: 'syz.4.901': attribute type 2 has an invalid length. [ 101.751901][ T6517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.901'. [ 102.083102][ T6535] set_capacity_and_notify: 1 callbacks suppressed [ 102.083115][ T6535] loop2: detected capacity change from 0 to 512 [ 102.153310][ T6537] loop1: detected capacity change from 0 to 2048 [ 102.213434][ T6535] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 102.279668][ T6537] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 102.344914][ T6548] loop3: detected capacity change from 0 to 1024 [ 102.422890][ T6537] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 102.429709][ T6535] EXT4-fs error (device loop2): ext4_validate_block_bitmap:420: comm syz.2.908: bg 0: bad block bitmap checksum [ 103.262081][ T6616] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 103.352877][ T6629] ieee802154 phy0 wpan0: encryption failed: -22 [ 103.433318][ T6636] netlink: 'syz.1.949': attribute type 21 has an invalid length. [ 103.488538][ T6636] netlink: 132 bytes leftover after parsing attributes in process `syz.1.949'. [ 103.750657][ T6660] IPv6: sit1: Disabled Multicast RS [ 103.991071][ T6676] loop3: detected capacity change from 0 to 1024 [ 104.013956][ T6679] loop2: detected capacity change from 0 to 256 [ 104.063743][ T6676] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 104.085393][ T6676] EXT4-fs (loop3): inline encryption not supported [ 104.105804][ T6676] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 104.117954][ T6679] exfat: Deprecated parameter 'utf8' [ 104.123304][ T6679] exfat: Deprecated parameter 'namecase' [ 104.140546][ T6676] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 104.146577][ T6679] exfat: Deprecated parameter 'namecase' [ 104.197986][ T6676] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,auto_da_alloc,noblock_validity,nomblk_io_submit,inlinecrypt,min_batch_time=0x0000000000000009,nomblk_io_submit,errors=remount-ro,dioread_nolock,. Quota mode: none. [ 104.227013][ T6676] ext4 filesystem being mounted at /200/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.244904][ T6640] loop0: detected capacity change from 0 to 32768 [ 104.288764][ T6693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.978'. [ 104.312923][ T6676] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.968: bg 0: block 112: padding at end of block bitmap is not set [ 104.339635][ T6679] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 104.357285][ T6676] EXT4-fs (loop3): Remounting filesystem read-only [ 104.374320][ T6697] loop1: detected capacity change from 0 to 2048 [ 104.557976][ T6697] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 104.859620][ T6724] loop3: detected capacity change from 0 to 4096 [ 104.906708][ T6724] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 105.006847][ T21] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 105.133235][ T6741] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1000'. [ 105.187196][ T6745] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1001'. [ 105.256443][ T21] usb 3-1: Using ep0 maxpacket: 32 [ 105.376664][ T21] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 105.408312][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.462645][ T6757] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 105.571784][ T21] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 105.579079][ T6759] program syz.0.1008 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 105.882560][ T6779] tmpfs: Bad value for 'mpol' [ 105.887543][ T5188] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 105.966433][ T21] gspca_nw80x: reg_r err -71 [ 105.971232][ T21] nw80x: probe of 3-1:3.0 failed with error -71 [ 106.000559][ T21] usb 3-1: USB disconnect, device number 8 [ 106.042712][ T6786] overlayfs: missing 'workdir' [ 106.249883][ T5188] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 106.274330][ T5188] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.312141][ T5188] usb 2-1: config 0 descriptor?? [ 106.345891][ T6808] 0x000000000000-0x000000020000 : "" [ 106.370520][ T6808] ftl_cs: FTL header not found. [ 106.377437][ T5188] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 106.501032][ T6819] loop4: detected capacity change from 0 to 256 [ 106.544139][ T6821] xt_hashlimit: size too large, truncated to 1048576 [ 106.668805][ T6825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1040'. [ 106.809894][ T5188] gspca_cpia1: usb_control_msg 03, error -71 [ 106.846418][ T5188] gspca_cpia1: usb_control_msg 01, error -71 [ 106.852573][ T5188] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 106.881809][ T5188] usb 2-1: USB disconnect, device number 7 [ 107.196150][ T6855] loop3: detected capacity change from 0 to 256 [ 107.304899][ T6855] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d) [ 107.590370][ T6881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1069'. [ 107.686499][ T5008] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 107.799361][ T6895] loop0: detected capacity change from 0 to 2048 [ 107.870128][ T6904] loop1: detected capacity change from 0 to 256 [ 107.880083][ T6895] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 107.954144][ T6904] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d) [ 107.966452][ T5008] usb 3-1: Using ep0 maxpacket: 16 [ 108.100124][ T6912] capability: warning: `syz.3.1085' uses deprecated v2 capabilities in a way that may be insecure [ 108.157548][ T5008] usb 3-1: unable to get BOS descriptor or descriptor too short [ 108.271301][ T5008] usb 3-1: config 0 has an invalid interface number: 228 but max is 2 [ 108.290909][ T5008] usb 3-1: config 0 has an invalid interface number: 172 but max is 2 [ 108.324470][ T5008] usb 3-1: config 0 has an invalid interface number: 181 but max is 2 [ 108.360614][ T5008] usb 3-1: config 0 has no interface number 0 [ 108.373925][ T5008] usb 3-1: config 0 has no interface number 1 [ 108.382359][ T5008] usb 3-1: config 0 has no interface number 2 [ 108.392900][ T5008] usb 3-1: config 0 interface 228 has no altsetting 0 [ 108.421548][ T5008] usb 3-1: config 0 interface 172 has no altsetting 0 [ 108.456385][ T5008] usb 3-1: config 0 interface 181 has no altsetting 0 [ 108.486785][ T6934] netlink: 'syz.1.1094': attribute type 27 has an invalid length. [ 108.494737][ T6934] netlink: 'syz.1.1094': attribute type 3 has an invalid length. [ 108.626565][ T4612] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 108.673869][ T6943] loop0: detected capacity change from 0 to 4096 [ 108.696685][ T5008] usb 3-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=f1.7f [ 108.715425][ T5008] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.733793][ T6943] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 108.743351][ T5008] usb 3-1: Product: syz [ 108.756430][ T5008] usb 3-1: Manufacturer: syz [ 108.765412][ T5008] usb 3-1: SerialNumber: syz [ 108.780067][ T5008] usb 3-1: config 0 descriptor?? [ 108.866442][ T4612] usb 4-1: Using ep0 maxpacket: 32 [ 108.990302][ T4612] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 109.010581][ T4612] usb 4-1: config 0 has no interface number 0 [ 109.035088][ T4612] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 109.128265][ T5008] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 109.157823][ T5008] usb 3-1: selecting invalid altsetting 0 [ 109.165520][ T2420] pvrusb2: Invalid write control endpoint [ 109.236579][ T4612] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 109.237959][ T5008] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 109.261556][ T4612] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.274905][ T6982] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1117'. [ 109.286707][ T2420] pvrusb2: Invalid write control endpoint [ 109.292788][ T2420] pvrusb2: Invalid write control endpoint [ 109.295021][ T4612] usb 4-1: Product: syz [ 109.309418][ T5008] usb 3-1: selecting invalid altsetting 0 [ 109.319922][ T4612] usb 4-1: Manufacturer: syz [ 109.329510][ T2420] pvrusb2: Invalid write control endpoint [ 109.334798][ T4612] usb 4-1: SerialNumber: syz [ 109.335265][ T2420] pvrusb2: Invalid write control endpoint [ 109.356473][ T4612] usb 4-1: config 0 descriptor?? [ 109.368134][ T5008] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 109.375759][ T5008] usb 3-1: selecting invalid altsetting 0 [ 109.407371][ T2420] pvrusb2: Invalid write control endpoint [ 109.413141][ T2420] pvrusb2: Invalid write control endpoint [ 109.418634][ T4612] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 109.433469][ T5008] usb 3-1: USB disconnect, device number 9 [ 109.445444][ T6991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1121'. [ 109.456426][ T4612] em28xx 4-1:0.132: Video interface 132 found: [ 109.491198][ T6988] loop1: detected capacity change from 0 to 4096 [ 109.492384][ T2420] pvrusb2: Invalid write control endpoint [ 109.506305][ T2420] pvrusb2: Invalid write control endpoint [ 109.512694][ T2420] pvrusb2: Invalid write control endpoint [ 109.531745][ T2420] pvrusb2: Invalid write control endpoint [ 109.576011][ T2420] pvrusb2: Invalid write control endpoint [ 109.609022][ T2420] pvrusb2: Invalid write control endpoint [ 109.615018][ T2420] pvrusb2: Invalid write control endpoint [ 109.634519][ T6988] ntfs3: loop1: ino=5, "/" directory corrupted [ 109.644336][ T2420] pvrusb2: Invalid write control endpoint [ 109.665103][ T6988] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 109.666319][ T2420] pvrusb2: Invalid write control endpoint [ 109.708970][ T2420] pvrusb2: Invalid write control endpoint [ 109.715062][ T2420] pvrusb2: Invalid write control endpoint [ 109.716487][ T4612] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 109.721089][ T2420] pvrusb2: Invalid write control endpoint [ 109.732706][ T2420] pvrusb2: Invalid write control endpoint [ 109.739383][ T2420] pvrusb2: Invalid write control endpoint [ 109.745125][ T2420] pvrusb2: Invalid write control endpoint [ 109.759147][ T2420] pvrusb2: Invalid write control endpoint [ 109.766480][ T2420] pvrusb2: Invalid write control endpoint [ 109.785849][ T2420] pvrusb2: Invalid write control endpoint [ 109.791650][ T2420] pvrusb2: Invalid write control endpoint [ 109.808142][ T2420] pvrusb2: Invalid write control endpoint [ 109.826495][ T2420] pvrusb2: Invalid write control endpoint [ 109.833837][ T2420] pvrusb2: Invalid write control endpoint [ 109.846125][ T2420] pvrusb2: Invalid write control endpoint [ 109.853424][ T2420] pvrusb2: Invalid write control endpoint [ 109.866538][ T4612] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 109.876464][ T2420] pvrusb2: Invalid write control endpoint [ 109.877207][ T4612] em28xx 4-1:0.132: board has no eeprom [ 109.892144][ T2420] pvrusb2: Invalid write control endpoint [ 109.921734][ T2420] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 109.996523][ T4612] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 110.017455][ T4612] em28xx 4-1:0.132: analog set to bulk mode. [ 110.018143][ T2420] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_a) [ 110.044629][ T21] em28xx 4-1:0.132: Registering V4L2 extension [ 110.049030][ T2420] pvrusb2: Invalid write control endpoint [ 110.079123][ T4612] usb 4-1: USB disconnect, device number 7 [ 110.086640][ T5188] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 110.103764][ T2420] pvrusb2: Invalid write control endpoint [ 110.116009][ T2420] pvrusb2: Invalid write control endpoint [ 110.124038][ T4612] em28xx 4-1:0.132: Disconnecting em28xx [ 110.144251][ T2420] pvrusb2: Invalid write control endpoint [ 110.184730][ T2420] pvrusb2: Invalid write control endpoint [ 110.203058][ T2420] pvrusb2: Invalid write control endpoint [ 110.239537][ T2420] pvrusb2: Invalid write control endpoint [ 110.245680][ T2420] pvrusb2: Invalid write control endpoint [ 110.282380][ T2420] pvrusb2: Invalid write control endpoint [ 110.303191][ T2420] pvrusb2: Invalid write control endpoint [ 110.331344][ T2420] pvrusb2: Invalid write control endpoint [ 110.346234][ T21] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 110.347411][ T2420] pvrusb2: Invalid write control endpoint [ 110.353873][ T21] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 110.414966][ T21] em28xx 4-1:0.132: No AC97 audio processor [ 110.430857][ T2420] pvrusb2: Invalid write control endpoint [ 110.484135][ T2420] pvrusb2: Invalid write control endpoint [ 110.496531][ T5188] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.509520][ T21] usb 4-1: Decoder not found [ 110.514136][ T21] em28xx 4-1:0.132: failed to create media graph [ 110.531013][ T2420] pvrusb2: Invalid write control endpoint [ 110.541134][ T5188] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 110.561363][ T2420] pvrusb2: Invalid write control endpoint [ 110.574038][ T21] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 110.586130][ T5188] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 110.597035][ T2420] pvrusb2: Invalid write control endpoint [ 110.602791][ T2420] pvrusb2: Invalid write control endpoint [ 110.610597][ T5188] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 110.625401][ T21] em28xx 4-1:0.132: Remote control support is not available for this card. [ 110.650838][ T2420] pvrusb2: Invalid write control endpoint [ 110.657359][ T4612] em28xx 4-1:0.132: Closing input extension [ 110.683513][ T2420] pvrusb2: Invalid write control endpoint [ 110.700317][ T5188] usb 5-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c [ 110.709790][ T2420] pvrusb2: Invalid write control endpoint [ 110.729286][ T4612] em28xx 4-1:0.132: Freeing device [ 110.734579][ T2420] pvrusb2: Attached sub-driver cs53l32a [ 110.740673][ T5188] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.771496][ T5188] usb 5-1: config 0 descriptor?? [ 110.829103][ T5188] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input9 [ 110.848654][ T2420] pvrusb2: Invalid write control endpoint [ 110.854883][ T2420] pvrusb2: Invalid write control endpoint [ 110.882648][ T2420] pvrusb2: Invalid write control endpoint [ 110.909426][ T2420] pvrusb2: Invalid write control endpoint [ 110.935667][ T2420] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 110.973086][ T2420] pvrusb2: Device being rendered inoperable [ 111.006214][ T2420] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 111.053311][ T7075] loop0: detected capacity change from 0 to 4096 [ 111.079084][ T4612] usb 5-1: USB disconnect, device number 8 [ 111.099382][ T4612] appletouch 5-1:0.0: input: appletouch disconnected [ 111.109449][ T2420] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 111.123926][ T7082] 0x000000000000-0x000000020000 : "" [ 111.215572][ T2420] pvrusb2: Invalid write control endpoint [ 111.216063][ T7075] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 111.242471][ T7082] ftl_cs: FTL header not found. [ 111.397818][ T2420] pvrusb2: Invalid write control endpoint [ 111.421017][ T2420] pvrusb2: Invalid write control endpoint [ 111.438639][ T2420] pvrusb2: Invalid write control endpoint [ 111.444404][ T2420] pvrusb2: Invalid write control endpoint [ 111.480363][ T2420] pvrusb2: Invalid write control endpoint [ 111.512579][ T2420] pvrusb2: Invalid write control endpoint [ 111.525302][ T2420] pvrusb2: Invalid write control endpoint [ 111.531732][ T2420] pvrusb2: Invalid write control endpoint [ 111.544860][ T2420] pvrusb2: Invalid write control endpoint [ 111.576751][ T2420] pvrusb2: Invalid write control endpoint [ 111.593857][ T2420] pvrusb2: Invalid write control endpoint [ 111.606909][ T2420] pvrusb2: Invalid write control endpoint [ 111.613243][ T2420] pvrusb2: Invalid write control endpoint [ 111.650349][ T2420] pvrusb2: Invalid write control endpoint [ 111.656116][ T2420] pvrusb2: Invalid write control endpoint [ 111.716714][ T2420] pvrusb2: Invalid write control endpoint [ 111.722488][ T2420] pvrusb2: Invalid write control endpoint [ 111.754555][ T2420] pvrusb2: Invalid write control endpoint [ 111.775113][ T2420] pvrusb2: Invalid write control endpoint [ 111.777264][ T7112] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1177'. [ 111.795026][ T2420] pvrusb2: Invalid write control endpoint [ 111.801344][ T7] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 111.816137][ T2420] pvrusb2: Invalid write control endpoint [ 111.842486][ T2420] pvrusb2: Invalid write control endpoint [ 111.862584][ T2420] pvrusb2: Invalid write control endpoint [ 111.878021][ T7120] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1181'. [ 111.885845][ T2420] pvrusb2: Invalid write control endpoint [ 111.892942][ T2420] pvrusb2: Invalid write control endpoint [ 111.917115][ T2420] pvrusb2: Invalid write control endpoint [ 111.922884][ T2420] pvrusb2: Invalid write control endpoint [ 111.928725][ T2420] pvrusb2: Invalid write control endpoint [ 111.951448][ T2420] pvrusb2: Invalid write control endpoint [ 111.965520][ T2420] pvrusb2: Invalid write control endpoint [ 111.988406][ T2420] pvrusb2: Invalid write control endpoint [ 111.996471][ T2420] pvrusb2: Invalid write control endpoint [ 112.043645][ T2420] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 112.080925][ T4612] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 112.096364][ T7130] netlink: 'syz.1.1186': attribute type 1 has an invalid length. [ 112.105691][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 112.119397][ T2420] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_b) [ 112.126072][ T2420] pvrusb2: Invalid write control endpoint [ 112.164476][ T2420] pvrusb2: Invalid write control endpoint [ 112.173476][ T2420] pvrusb2: Invalid write control endpoint [ 112.191750][ T2420] pvrusb2: Invalid write control endpoint [ 112.206896][ T7137] xt_hashlimit: size too large, truncated to 1048576 [ 112.213830][ T7137] xt_hashlimit: max too large, truncated to 1048576 [ 112.231970][ T2420] pvrusb2: Invalid write control endpoint [ 112.240964][ T7] usb 4-1: config 5 has an invalid interface number: 234 but max is 0 [ 112.251540][ T2420] pvrusb2: Invalid write control endpoint [ 112.257735][ T7] usb 4-1: config 5 has no interface number 0 [ 112.257925][ T7137] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old? [ 112.263827][ T7] usb 4-1: config 5 interface 234 has no altsetting 0 [ 112.265949][ T2420] pvrusb2: Invalid write control endpoint [ 112.294365][ T2420] pvrusb2: Invalid write control endpoint [ 112.316644][ T2420] pvrusb2: Invalid write control endpoint [ 112.322416][ T2420] pvrusb2: Invalid write control endpoint [ 112.326364][ T4612] usb 5-1: Using ep0 maxpacket: 16 [ 112.328705][ T2420] pvrusb2: Invalid write control endpoint [ 112.339785][ T2420] pvrusb2: Invalid write control endpoint [ 112.345608][ T2420] pvrusb2: Invalid write control endpoint [ 112.359650][ T2420] pvrusb2: Invalid write control endpoint [ 112.365864][ T2420] pvrusb2: Invalid write control endpoint [ 112.372184][ T2420] pvrusb2: Invalid write control endpoint [ 112.378616][ T2420] pvrusb2: Invalid write control endpoint [ 112.384363][ T2420] pvrusb2: Invalid write control endpoint [ 112.393374][ T2420] pvrusb2: Invalid write control endpoint [ 112.403977][ T2420] pvrusb2: Invalid write control endpoint [ 112.412852][ T2420] pvrusb2: Invalid write control endpoint [ 112.427669][ T2420] pvrusb2: Attached sub-driver cs53l32a [ 112.437248][ T7] usb 4-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=79.2e [ 112.447327][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.455393][ T7] usb 4-1: Product: syz [ 112.464455][ T7] usb 4-1: Manufacturer: syz [ 112.469580][ T2420] pvrusb2: Invalid write control endpoint [ 112.475310][ T2420] pvrusb2: Invalid write control endpoint [ 112.481425][ T7] usb 4-1: SerialNumber: syz [ 112.486611][ T4612] usb 5-1: unable to get BOS descriptor or descriptor too short [ 112.486890][ T2420] pvrusb2: Invalid write control endpoint [ 112.509875][ T7145] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 112.525878][ T2420] pvrusb2: Invalid write control endpoint [ 112.531731][ T2420] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 112.536577][ T21] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 112.549208][ T2420] pvrusb2: Device being rendered inoperable [ 112.565066][ T2420] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 112.566776][ T4612] usb 5-1: config 0 has an invalid interface number: 237 but max is 0 [ 112.583260][ T2420] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 112.603116][ T4612] usb 5-1: config 0 has no interface number 0 [ 112.610042][ T4612] usb 5-1: config 0 interface 237 altsetting 93 endpoint 0x83 has invalid wMaxPacketSize 0 [ 112.625136][ T4612] usb 5-1: config 0 interface 237 altsetting 93 bulk endpoint 0x83 has invalid maxpacket 0 [ 112.628425][ T5008] pvrusb2: Device being rendered inoperable [ 112.638766][ T4612] usb 5-1: config 0 interface 237 has no altsetting 0 [ 112.811410][ T4612] usb 5-1: New USB device found, idVendor=045e, idProduct=0445, bcdDevice=87.ed [ 112.821278][ T4612] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.835254][ T4612] usb 5-1: Product: syz [ 112.839801][ T4612] usb 5-1: Manufacturer: syz [ 112.844411][ T4612] usb 5-1: SerialNumber: syz [ 112.857881][ T4612] usb 5-1: config 0 descriptor?? [ 112.862401][ T7] ipw 4-1:5.234: IPWireless converter converter detected [ 112.879078][ T7] usb 4-1: USB disconnect, device number 8 [ 112.897056][ T7] ipw 4-1:5.234: device disconnected [ 112.956572][ T21] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 112.965175][ T21] usb 2-1: config 0 has no interface number 0 [ 112.976861][ T21] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 113.055795][ T7181] loop0: detected capacity change from 0 to 1024 [ 113.065136][ T5008] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 113.130556][ T7181] attempt to access beyond end of device [ 113.130556][ T7181] loop0: rw=0, want=917506, limit=1024 [ 113.149233][ T21] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 113.154441][ T7181] Buffer I/O error on dev loop0, logical block 458752, async page read [ 113.162574][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.167838][ T7181] attempt to access beyond end of device [ 113.167838][ T7181] loop0: rw=0, want=917506, limit=1024 [ 113.180963][ T4612] ipaq 5-1:0.237: PocketPC PDA converter detected [ 113.187451][ T7181] Buffer I/O error on dev loop0, logical block 458752, async page read [ 113.193042][ T4612] usb 5-1: active config #0 != 1 ?? [ 113.206404][ T21] usb 2-1: Product: syz [ 113.210577][ T21] usb 2-1: Manufacturer: syz [ 113.215177][ T21] usb 2-1: SerialNumber: syz [ 113.225624][ T4612] usb 5-1: USB disconnect, device number 9 [ 113.233027][ T21] usb 2-1: config 0 descriptor?? [ 113.278028][ T21] yurex 2-1:0.50: Could not find endpoints [ 113.496697][ T5008] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 113.506554][ T5008] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.530228][ T5008] usb 3-1: config 0 descriptor?? [ 113.598600][ T4612] usb 2-1: USB disconnect, device number 8 [ 113.906486][ T4684] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 113.915590][ T7221] loop4: detected capacity change from 0 to 8192 [ 113.968255][ T7221] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 113.978792][ T7221] REISERFS (device loop4): using ordered data mode [ 113.985454][ T7221] reiserfs: using flush barriers [ 113.992599][ T7221] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 114.010715][ T7221] REISERFS (device loop4): checking transaction log (loop4) [ 114.026667][ T7221] REISERFS (device loop4): Using r5 hash to sort names [ 114.035940][ T7221] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 114.106639][ T5008] usb 3-1: Cannot read MAC address [ 114.115606][ T7226] netlink: 'syz.3.1232': attribute type 1 has an invalid length. [ 114.115742][ T5008] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71 [ 114.186351][ T4684] usb 1-1: Using ep0 maxpacket: 8 [ 114.203419][ T7230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1233'. [ 114.207849][ T5008] usb 3-1: USB disconnect, device number 10 [ 114.258533][ T7230] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1233'. [ 114.316981][ T4684] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.361715][ T4684] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.380532][ T7234] loop3: detected capacity change from 0 to 2048 [ 114.387723][ T4684] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 114.435550][ T4684] usb 1-1: config 0 interface 0 has no altsetting 0 [ 114.446818][ T4684] usb 1-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 3.00 [ 114.455947][ T4684] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.477163][ T7234] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 114.525799][ T4684] usb 1-1: config 0 descriptor?? [ 114.574344][ T7238] loop4: detected capacity change from 0 to 4096 [ 114.613112][ T7238] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 114.642840][ T4684] usbhid 1-1:0.0: can't add hid device: -22 [ 114.666098][ T4684] usbhid: probe of 1-1:0.0 failed with error -22 [ 114.848234][ T5008] usb 1-1: USB disconnect, device number 9 [ 115.093986][ T7270] loop2: detected capacity change from 0 to 2048 [ 115.230645][ T7270] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 115.332138][ T7282] xt_TCPMSS: Only works on TCP SYN packets [ 115.478865][ T7288] netlink: 'syz.3.1263': attribute type 1 has an invalid length. [ 115.516347][ T7288] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1263'. [ 115.937041][ T7308] loop4: detected capacity change from 0 to 2048 [ 116.036886][ T7308] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 116.389107][ T7342] loop2: detected capacity change from 0 to 1024 [ 116.470305][ T7342] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 116.536230][ T7352] loop3: detected capacity change from 0 to 256 [ 116.557294][ T7352] exfat: Deprecated parameter 'namecase' [ 116.573272][ T7352] exfat: Deprecated parameter 'namecase' [ 116.636432][ T7352] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0x53f1f8b9, utbl_chksum : 0xe619d300) [ 116.692842][ T7361] loop4: detected capacity change from 0 to 1024 [ 116.740364][ T7366] loop0: detected capacity change from 0 to 736 [ 116.782462][ T7361] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 116.812484][ T7361] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 116.822688][ T7361] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 116.855542][ T7318] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.1277 (7318) [ 116.880433][ T7361] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 116.905374][ T7367] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 116.955650][ T7361] System zones: 0-1, 3-36 [ 117.034490][ T7379] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1307'. [ 117.076470][ T7361] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsold,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noquota,,errors=continue. Quota mode: writeback. [ 117.096136][ C1] vkms_vblank_simulate: vblank timer overrun [ 117.125796][ T7318] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 117.207839][ T7318] BTRFS info (device loop1): enabling auto defrag [ 117.214513][ T7318] BTRFS info (device loop1): force clearing of disk cache [ 117.296404][ T7318] BTRFS info (device loop1): ignoring data csums [ 117.324909][ T7318] BTRFS info (device loop1): turning on async discard [ 117.378040][ T7318] BTRFS info (device loop1): setting nodatacow, compression disabled [ 117.453378][ T7318] BTRFS info (device loop1): turning off async discard [ 117.498462][ T7318] BTRFS info (device loop1): disabling free space tree [ 117.515085][ T7318] BTRFS info (device loop1): has skinny extents [ 117.786322][ T5008] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 117.982697][ T7318] BTRFS error (device loop1): ignoredatacsums must be used with ro mount option [ 117.993581][ T7434] netlink: 'syz.4.1324': attribute type 1 has an invalid length. [ 118.012911][ T7434] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.1324'. [ 118.066639][ T5008] usb 4-1: Using ep0 maxpacket: 32 [ 118.190306][ T5008] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 118.208725][ T5008] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.228495][ T5008] usb 4-1: config 0 descriptor?? [ 118.278228][ T5008] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 118.435412][ T7405] set_capacity_and_notify: 2 callbacks suppressed [ 118.435427][ T7405] loop0: detected capacity change from 0 to 32768 [ 118.506357][ T5008] gspca_nw80x: reg_w err -71 [ 118.511061][ T5008] nw80x: probe of 4-1:0.0 failed with error -71 [ 118.523898][ T5008] usb 4-1: USB disconnect, device number 9 [ 118.635054][ T7456] loop1: detected capacity change from 0 to 1024 [ 118.700735][ T7456] EXT4-fs (loop1): inline encryption not supported [ 118.733176][ T7456] EXT4-fs (loop1): orphan cleanup on readonly fs [ 118.843645][ T7456] EXT4-fs (loop1): 1 truncate cleaned up [ 118.859609][ T7456] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug_want_extra_isize=0x00000000000000ca,noauto_da_alloc,inlinecrypt,,errors=continue. Quota mode: writeback. [ 119.147700][ T7479] loop1: detected capacity change from 0 to 1764 [ 119.404116][ T7494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1353'. [ 119.497698][ T7465] loop4: detected capacity change from 0 to 32768 [ 119.581342][ T7465] ERROR: (device loop4): dbAlloc: the hint is outside the map [ 119.581342][ T7465] [ 119.633950][ T7465] ERROR: (device loop4): remounting filesystem as read-only [ 119.835913][ T7525] misc userio: Invalid payload size [ 120.363718][ T7573] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.1391' sets config #1 [ 120.411125][ T5008] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 120.496063][ T7583] netlink: 'syz.0.1395': attribute type 10 has an invalid length. [ 120.526993][ T7583] device hsr0 entered promiscuous mode [ 120.574634][ T7583] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 120.631517][ T7590] xt_ipcomp: unknown flags 12 [ 120.639196][ T7583] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 120.692843][ T7583] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 120.718522][ T5008] usb 3-1: Using ep0 maxpacket: 32 [ 120.766158][ T7583] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 120.852431][ T5008] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.872934][ T5008] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 120.905206][ T7603] netlink: 'syz.3.1404': attribute type 4 has an invalid length. [ 120.910690][ T7605] process 'syz.1.1406' launched '/dev/fd/3' with NULL argv: empty string added [ 120.948081][ T7603] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1404'. [ 121.023136][ T7603] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 121.068213][ T7616] jffs2: notice: (7616) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 121.098463][ T5008] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=21.11 [ 121.117432][ T7618] loop4: detected capacity change from 0 to 8 [ 121.128720][ T5008] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.150311][ T5008] usb 3-1: Product: syz [ 121.154547][ T5008] usb 3-1: Manufacturer: syz [ 121.162932][ T7622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1413'. [ 121.176132][ T5008] usb 3-1: SerialNumber: syz [ 121.214249][ T5008] usb 3-1: config 0 descriptor?? [ 121.406735][ T7637] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1419'. [ 121.495727][ T5001] usb 3-1: USB disconnect, device number 11 [ 121.571617][ T7648] jffs2: notice: (7648) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 121.796154][ T7667] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 121.838771][ T7673] loop3: detected capacity change from 0 to 256 [ 121.886756][ T7677] Cannot find add_set index 0 as target [ 121.966589][ T7673] FAT-fs (loop3): Directory bread(block 64) failed [ 121.973168][ T7673] FAT-fs (loop3): Directory bread(block 65) failed [ 121.994037][ T7685] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1443'. [ 121.996176][ T7673] FAT-fs (loop3): Directory bread(block 66) failed [ 122.036837][ T7673] FAT-fs (loop3): Directory bread(block 67) failed [ 122.045553][ T7684] xt_CT: No such helper "snmp" [ 122.076070][ T7673] FAT-fs (loop3): Directory bread(block 68) failed [ 122.106582][ T7673] FAT-fs (loop3): Directory bread(block 69) failed [ 122.113211][ T7673] FAT-fs (loop3): Directory bread(block 70) failed [ 122.144452][ T7673] FAT-fs (loop3): Directory bread(block 71) failed [ 122.168334][ T7673] FAT-fs (loop3): Directory bread(block 72) failed [ 122.175219][ T7673] FAT-fs (loop3): Directory bread(block 73) failed [ 122.323587][ T150] block nbd2: Attempted send on invalid socket [ 122.330991][ T150] blk_update_request: I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 122.346853][ T150] block nbd2: Attempted send on invalid socket [ 122.353050][ T150] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 122.366547][ T263] block nbd2: Attempted send on invalid socket [ 122.372738][ T263] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 122.389198][ T263] block nbd2: Attempted send on invalid socket [ 122.395422][ T263] blk_update_request: I/O error, dev nbd2, sector 18 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 122.407364][ T263] block nbd2: Attempted send on invalid socket [ 122.413592][ T263] blk_update_request: I/O error, dev nbd2, sector 30 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 122.425190][ T263] block nbd2: Attempted send on invalid socket [ 122.431475][ T263] blk_update_request: I/O error, dev nbd2, sector 36 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 122.442782][ T7700] VFS: unable to find oldfs superblock on device nbd2 [ 122.488797][ T7679] loop0: detected capacity change from 0 to 32768 [ 122.499438][ T7703] x_tables: duplicate underflow at hook 4 [ 122.583515][ T7679] add_index: next_index = 0. Resetting! [ 122.608085][ T7679] find_entry called with index >= next_index [ 122.619339][ T7679] find_entry called with index >= next_index [ 122.882348][ T7725] loop2: detected capacity change from 0 to 128 [ 122.957505][ T7725] FAT-fs (loop2): bogus logical sector size 65535 [ 122.981412][ T7725] FAT-fs (loop2): Can't find a valid FAT filesystem [ 123.128535][ T7732] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1465'. [ 123.164356][ T7719] loop4: detected capacity change from 0 to 32768 [ 123.186695][ T21] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 123.231744][ T7719] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 scanned by syz.4.1460 (7719) [ 123.307777][ T7719] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 123.325369][ T7719] BTRFS info (device loop4): enabling ssd optimizations [ 123.345836][ T7719] BTRFS info (device loop4): not using ssd optimizations [ 123.354857][ T7719] BTRFS info (device loop4): turning off barriers [ 123.389512][ T7719] BTRFS info (device loop4): use no compression [ 123.396142][ T7719] BTRFS info (device loop4): using free space tree [ 123.410802][ T7745] netlink: 'syz.2.1472': attribute type 1 has an invalid length. [ 123.432920][ T7719] BTRFS info (device loop4): has skinny extents [ 123.446428][ T21] usb 4-1: Using ep0 maxpacket: 32 [ 123.487348][ T7750] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 123.498304][ T7750] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 123.615889][ T7771] loop0: detected capacity change from 0 to 164 [ 123.616519][ T21] usb 4-1: unable to get BOS descriptor or descriptor too short [ 123.697896][ T7771] rock: directory entry would overflow storage [ 123.726663][ T21] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 123.757654][ T7771] rock: sig=0x4f50, size=4, remaining=3 [ 123.763984][ T21] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 49556, setting to 1024 [ 123.764489][ T7771] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 123.941261][ T21] usb 4-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 123.965667][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.981968][ T7799] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1490'. [ 124.020483][ T21] usb 4-1: Product: syz [ 124.030440][ T7719] BTRFS info (device loop4): balance: start -f [ 124.034956][ T21] usb 4-1: Manufacturer: syz [ 124.054345][ T21] usb 4-1: SerialNumber: syz [ 124.077972][ T7719] BTRFS info (device loop4): balance: ended with status: 0 [ 124.153144][ T7809] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1494'. [ 124.446733][ T21] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 124.476089][ T21] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 124.528561][ T7823] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1502'. [ 124.564561][ T21] usb 4-1: USB disconnect, device number 10 [ 124.571074][ T4612] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 124.689799][ T7836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1507'. [ 124.872581][ T7080] udevd[7080]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.949715][ T4612] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.970103][ T4612] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 125.071354][ T4612] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 125.096607][ T4612] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 125.104637][ T4612] usb 1-1: SerialNumber: syz [ 125.181432][ T4612] usb 1-1: 0:2 : does not exist [ 125.211455][ C0] sd 0:0:1:0: tag#3536 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 125.221421][ C0] sd 0:0:1:0: tag#3536 CDB: Mode Sense(10) [ 125.227303][ C0] sd 0:0:1:0: tag#3536 CDB[00]: 5a 88 f4 74 3a 27 ba 79 f3 26 e7 a4 89 c9 13 2e [ 125.236358][ C0] sd 0:0:1:0: tag#3536 CDB[10]: bd 0d 92 db 40 a2 20 7d 0f ed a1 f0 60 0c 33 30 [ 125.245389][ C0] sd 0:0:1:0: tag#3536 CDB[20]: 8b 52 18 [ 125.263511][ T7876] tipc: Can't bind to reserved service type 0 [ 125.294522][ T7878] device ip6gretap1 entered promiscuous mode [ 125.384056][ T4612] usb 1-1: USB disconnect, device number 10 [ 125.400452][ T7886] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 125.490235][ T7890] netlink: 'syz.1.1533': attribute type 10 has an invalid length. [ 125.512993][ T7890] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.1533'. [ 125.546538][ T7894] netlink: 'syz.4.1535': attribute type 1 has an invalid length. [ 125.830762][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 125.832190][ T7909] ip_tables: iptables: counters copy to user failed while replacing table [ 126.056469][ T4612] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 126.072703][ T7919] overlayfs: unrecognized mount option "smackfsfloor=\{" or missing value [ 126.312307][ T4612] usb 4-1: Using ep0 maxpacket: 16 [ 126.486573][ T4612] usb 4-1: unable to get BOS descriptor or descriptor too short [ 126.566665][ T4612] usb 4-1: config 0 has an invalid interface number: 228 but max is 2 [ 126.575461][ T4612] usb 4-1: config 0 has an invalid interface number: 172 but max is 2 [ 126.599501][ T4612] usb 4-1: config 0 has an invalid interface number: 181 but max is 2 [ 126.622014][ T4612] usb 4-1: config 0 has no interface number 0 [ 126.635181][ T4612] usb 4-1: config 0 has no interface number 1 [ 126.649416][ T4612] usb 4-1: config 0 has no interface number 2 [ 126.673319][ T4612] usb 4-1: config 0 interface 228 has no altsetting 0 [ 126.687903][ T4612] usb 4-1: config 0 interface 172 has no altsetting 0 [ 126.694897][ T4612] usb 4-1: config 0 interface 181 has no altsetting 0 [ 126.812115][ T7964] loop1: detected capacity change from 0 to 256 [ 126.843352][ T7967] loop0: detected capacity change from 0 to 512 [ 126.860670][ T4612] usb 4-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=f1.7f [ 126.871227][ T4612] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.894236][ T4612] usb 4-1: Product: syz [ 126.897506][ T7969] __nla_validate_parse: 1 callbacks suppressed [ 126.897520][ T7969] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1572'. [ 126.898586][ T4612] usb 4-1: Manufacturer: syz [ 126.927710][ T4612] usb 4-1: SerialNumber: syz [ 126.950003][ T4612] usb 4-1: config 0 descriptor?? [ 127.003619][ T7967] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 127.049655][ T7967] ext4 filesystem being mounted at /323/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.278388][ T4612] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 127.286018][ T4612] usb 4-1: selecting invalid altsetting 0 [ 127.310596][ T2420] pvrusb2: Invalid write control endpoint [ 127.340989][ T7992] loop4: detected capacity change from 0 to 64 [ 127.348970][ T4612] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 127.376995][ T4612] usb 4-1: selecting invalid altsetting 0 [ 127.382229][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 127.390341][ T7994] i2c i2c-0: Invalid block write size 253 [ 127.418620][ T4612] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 127.428461][ T4612] usb 4-1: selecting invalid altsetting 0 [ 127.433078][ T7993] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 127.477899][ T4612] usb 4-1: USB disconnect, device number 11 [ 127.513797][ T2420] pvrusb2: Invalid write control endpoint [ 127.537461][ T2420] pvrusb2: Invalid write control endpoint [ 127.557534][ T2420] pvrusb2: Invalid write control endpoint [ 127.560553][ T7997] device vti0 entered promiscuous mode [ 127.593756][ T7999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1585'. [ 127.599029][ T2420] pvrusb2: Invalid write control endpoint [ 127.635245][ T2420] pvrusb2: Invalid write control endpoint [ 127.647813][ T2420] pvrusb2: Invalid write control endpoint [ 127.653722][ T2420] pvrusb2: Invalid write control endpoint [ 127.662972][ T2420] pvrusb2: Invalid write control endpoint [ 127.706536][ T2420] pvrusb2: Invalid write control endpoint [ 127.712315][ T2420] pvrusb2: Invalid write control endpoint [ 127.729167][ T2420] pvrusb2: Invalid write control endpoint [ 127.735925][ T2420] pvrusb2: Invalid write control endpoint [ 127.766063][ T2420] pvrusb2: Invalid write control endpoint [ 127.778531][ T2420] pvrusb2: Invalid write control endpoint [ 127.784684][ T2420] pvrusb2: Invalid write control endpoint [ 127.797099][ T2420] pvrusb2: Invalid write control endpoint [ 127.803306][ T2420] pvrusb2: Invalid write control endpoint [ 127.854044][ T2420] pvrusb2: Invalid write control endpoint [ 127.880407][ T2420] pvrusb2: Invalid write control endpoint [ 127.886183][ T2420] pvrusb2: Invalid write control endpoint [ 127.924783][ T8024] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1597'. [ 127.925635][ T2420] pvrusb2: Invalid write control endpoint [ 127.940635][ T8021] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.960622][ T2420] pvrusb2: Invalid write control endpoint [ 127.974184][ T2420] pvrusb2: Invalid write control endpoint [ 128.007017][ T2420] pvrusb2: Invalid write control endpoint [ 128.012822][ T2420] pvrusb2: Invalid write control endpoint [ 128.026395][ T4614] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 128.067551][ T2420] pvrusb2: Invalid write control endpoint [ 128.087191][ T2420] pvrusb2: Invalid write control endpoint [ 128.093334][ T2420] pvrusb2: Invalid write control endpoint [ 128.124366][ T2420] pvrusb2: Invalid write control endpoint [ 128.146345][ T2420] pvrusb2: Invalid write control endpoint [ 128.166327][ T2420] pvrusb2: Invalid write control endpoint [ 128.172500][ T2420] pvrusb2: Invalid write control endpoint [ 128.206513][ T2420] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 128.247605][ T8046] set match dimension is over the limit! [ 128.334025][ T2420] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_a) [ 128.356744][ T4614] usb 2-1: not running at top speed; connect to a high speed hub [ 128.380564][ T2420] pvrusb2: Invalid write control endpoint [ 128.394818][ T2420] pvrusb2: Invalid write control endpoint [ 128.410199][ T2420] pvrusb2: Invalid write control endpoint [ 128.436561][ T2420] pvrusb2: Invalid write control endpoint [ 128.455687][ T2420] pvrusb2: Invalid write control endpoint [ 128.461645][ T8061] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1616'. [ 128.473722][ T2420] pvrusb2: Invalid write control endpoint [ 128.483993][ T2420] pvrusb2: Invalid write control endpoint [ 128.496424][ T2420] pvrusb2: Invalid write control endpoint [ 128.502177][ T2420] pvrusb2: Invalid write control endpoint [ 128.516385][ T2420] pvrusb2: Invalid write control endpoint [ 128.532371][ T2420] pvrusb2: Invalid write control endpoint [ 128.555176][ T2420] pvrusb2: Invalid write control endpoint [ 128.584814][ T2420] pvrusb2: Invalid write control endpoint [ 128.603788][ T2420] pvrusb2: Invalid write control endpoint [ 128.606766][ T4614] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 128.626532][ T2420] pvrusb2: Invalid write control endpoint [ 128.639365][ T4614] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.654159][ T2420] pvrusb2: Invalid write control endpoint [ 128.663405][ T8078] netlink: 'syz.0.1624': attribute type 32 has an invalid length. [ 128.671886][ T4614] usb 2-1: Product: syz [ 128.675484][ T2420] pvrusb2: Invalid write control endpoint [ 128.676055][ T4614] usb 2-1: Manufacturer: syz [ 128.712259][ T2420] pvrusb2: Invalid write control endpoint [ 128.726344][ T4614] usb 2-1: SerialNumber: syz [ 128.731867][ T2420] pvrusb2: Invalid write control endpoint [ 128.749287][ T2420] pvrusb2: Invalid write control endpoint [ 128.782269][ T2420] pvrusb2: Invalid write control endpoint [ 128.797920][ T4614] keyspan 2-1:1.0: Keyspan 4 port adapter converter detected [ 128.841414][ T8085] openvswitch: netlink: Actions may not be safe on all matching packets [ 128.856592][ T2420] pvrusb2: Attached sub-driver cs53l32a [ 128.863082][ T4614] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 128.921567][ T4614] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 128.922615][ T8097] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 128.959783][ T4614] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 128.990307][ T2420] pvrusb2: Invalid write control endpoint [ 128.996203][ T2420] pvrusb2: Invalid write control endpoint [ 129.002955][ T4614] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 129.035048][ T2420] pvrusb2: Invalid write control endpoint [ 129.086329][ T2420] pvrusb2: Invalid write control endpoint [ 129.092126][ T2420] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 129.209775][ T2420] pvrusb2: Device being rendered inoperable [ 129.224343][ T4989] usb 2-1: USB disconnect, device number 9 [ 129.215726][ T2420] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 129.295397][ T4989] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 129.332573][ T4989] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 129.345676][ T2420] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 129.385451][ T4989] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 129.420123][ T2420] pvrusb2: Invalid write control endpoint [ 129.436103][ T4989] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 129.469239][ T4989] keyspan 2-1:1.0: device disconnected [ 129.475836][ T8123] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1644'. [ 129.528719][ T2420] pvrusb2: Invalid write control endpoint [ 129.541846][ T2420] pvrusb2: Invalid write control endpoint [ 129.548327][ T2420] pvrusb2: Invalid write control endpoint [ 129.562867][ T8133] loop2: detected capacity change from 0 to 64 [ 129.579547][ T2420] pvrusb2: Invalid write control endpoint [ 129.585330][ T2420] pvrusb2: Invalid write control endpoint [ 129.603941][ T2420] pvrusb2: Invalid write control endpoint [ 129.609795][ T2420] pvrusb2: Invalid write control endpoint [ 129.634318][ T2420] pvrusb2: Invalid write control endpoint [ 129.655341][ T2420] pvrusb2: Invalid write control endpoint [ 129.680643][ T2420] pvrusb2: Invalid write control endpoint [ 129.711077][ T2420] pvrusb2: Invalid write control endpoint [ 129.729914][ T2420] pvrusb2: Invalid write control endpoint [ 129.735691][ T2420] pvrusb2: Invalid write control endpoint [ 129.808143][ T2420] pvrusb2: Invalid write control endpoint [ 129.813950][ T2420] pvrusb2: Invalid write control endpoint [ 129.857494][ T2420] pvrusb2: Invalid write control endpoint [ 129.863324][ T2420] pvrusb2: Invalid write control endpoint [ 129.886476][ T2420] pvrusb2: Invalid write control endpoint [ 129.902470][ T2420] pvrusb2: Invalid write control endpoint [ 129.918773][ T2420] pvrusb2: Invalid write control endpoint [ 129.925159][ T2420] pvrusb2: Invalid write control endpoint [ 129.977561][ T2420] pvrusb2: Invalid write control endpoint [ 129.983359][ T2420] pvrusb2: Invalid write control endpoint [ 130.022274][ T8168] loop4: detected capacity change from 0 to 512 [ 130.036323][ T2420] pvrusb2: Invalid write control endpoint [ 130.042121][ T2420] pvrusb2: Invalid write control endpoint [ 130.056706][ T2420] pvrusb2: Invalid write control endpoint [ 130.062502][ T2420] pvrusb2: Invalid write control endpoint [ 130.106336][ T2420] pvrusb2: Invalid write control endpoint [ 130.128397][ T2420] pvrusb2: Invalid write control endpoint [ 130.146349][ T2420] pvrusb2: Invalid write control endpoint [ 130.162782][ T2420] pvrusb2: Invalid write control endpoint [ 130.190836][ T8168] EXT4-fs error (device loop4): ext4_orphan_get:1432: comm syz.4.1665: bad orphan inode 13 [ 130.252752][ T8168] ext4_test_bit(bit=12, block=4) = 1 [ 130.264262][ T2420] pvrusb2: Invalid write control endpoint [ 130.292754][ T2420] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 130.293037][ T8168] is_bad_inode(inode)=0 [ 130.314876][ T8168] NEXT_ORPHAN(inode)=0 [ 130.319421][ T8168] max_ino=32 [ 130.322831][ T8168] i_nlink=1 [ 130.328695][ T8168] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 130.397197][ T8168] EXT4-fs warning (device loop4): dx_probe:845: inode #2: comm syz.4.1665: Hash code is SIPHASH, but hash not in dirent [ 130.411198][ T2420] cs53l32a 2-0011: chip found @ 0x22 (pvrusb2_b) [ 130.417318][ T8168] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1665: Corrupt directory, running e2fsck is recommended [ 130.424931][ T2420] pvrusb2: Invalid write control endpoint [ 130.440108][ T8168] EXT4-fs warning (device loop4): dx_probe:845: inode #2: comm syz.4.1665: Hash code is SIPHASH, but hash not in dirent [ 130.467144][ T2420] pvrusb2: Invalid write control endpoint [ 130.474163][ T8168] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1665: Corrupt directory, running e2fsck is recommended [ 130.477255][ T2420] pvrusb2: Invalid write control endpoint [ 130.506367][ T21] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 130.517336][ T8168] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #2: block 13: comm syz.4.1665: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=0, rec_len=6, size=1024 fake=0 [ 130.540531][ T2420] pvrusb2: Invalid write control endpoint [ 130.579785][ T2420] pvrusb2: Invalid write control endpoint [ 130.622568][ T2420] pvrusb2: Invalid write control endpoint [ 130.656565][ T4989] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 130.683244][ T2420] pvrusb2: Invalid write control endpoint [ 130.690500][ T2420] pvrusb2: Invalid write control endpoint [ 130.696362][ T2420] pvrusb2: Invalid write control endpoint [ 130.702205][ T2420] pvrusb2: Invalid write control endpoint [ 130.708905][ T2420] pvrusb2: Invalid write control endpoint [ 130.714783][ T2420] pvrusb2: Invalid write control endpoint [ 130.720640][ T2420] pvrusb2: Invalid write control endpoint [ 130.726550][ T2420] pvrusb2: Invalid write control endpoint [ 130.733760][ T2420] pvrusb2: Invalid write control endpoint [ 130.740871][ T2420] pvrusb2: Invalid write control endpoint [ 130.754064][ T2420] pvrusb2: Invalid write control endpoint [ 130.760599][ T2420] pvrusb2: Invalid write control endpoint [ 130.766554][ T2420] pvrusb2: Invalid write control endpoint [ 130.823038][ T2420] pvrusb2: Invalid write control endpoint [ 130.867750][ T2420] pvrusb2: Invalid write control endpoint [ 130.883311][ T2420] pvrusb2: Attached sub-driver cs53l32a [ 130.891957][ T8210] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1683'. [ 130.901884][ T8210] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1683'. [ 130.910975][ T8210] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1683'. [ 130.916310][ T4989] usb 1-1: Using ep0 maxpacket: 16 [ 130.992663][ T8210] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1683'. [ 131.006690][ T8215] xt_time: unknown flags 0x4 [ 131.033303][ T2420] pvrusb2: Invalid write control endpoint [ 131.039698][ T2420] pvrusb2: Invalid write control endpoint [ 131.056610][ T21] usb 3-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 131.079121][ T2420] pvrusb2: Invalid write control endpoint [ 131.084896][ T2420] pvrusb2: Invalid write control endpoint [ 131.091319][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.096611][ T4989] usb 1-1: config 1 has an invalid interface number: 19 but max is 0 [ 131.121435][ T21] usb 3-1: Product: syz [ 131.131543][ T21] usb 3-1: Manufacturer: syz [ 131.136174][ T21] usb 3-1: SerialNumber: syz [ 131.142740][ T2420] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 131.146651][ T4989] usb 1-1: config 1 has no interface number 0 [ 131.188092][ T21] usb 3-1: config 0 descriptor?? [ 131.194113][ T2420] pvrusb2: Device being rendered inoperable [ 131.200801][ T2420] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 131.214353][ T2420] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 131.233466][ T4989] usb 1-1: config 1 interface 19 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.255771][ T4612] pvrusb2: Device being rendered inoperable [ 131.280112][ T4989] usb 1-1: config 1 interface 19 has no altsetting 0 [ 131.329441][ T8231] tmpfs: Bad value for 'mpol' [ 131.466490][ T21] peak_usb 3-1:0.0: PEAK-System PCAN-USB FD v23 fw v38.6.0 (1 channels) [ 131.506607][ T4989] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 7.c9 [ 131.516347][ T4989] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.524410][ T4989] usb 1-1: Product: syz [ 131.528861][ T4989] usb 1-1: Manufacturer: syz [ 131.533550][ T4989] usb 1-1: SerialNumber: syz [ 131.627247][ T4989] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 131.681863][ T8244] loop1: detected capacity change from 0 to 32768 [ 131.686476][ T21] peak_usb 3-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 131.698444][ T21] peak_usb 3-1:0.0: unable to tell PCAN-USB FD driver is loaded (err -71) [ 131.746689][ T21] peak_usb: probe of 3-1:0.0 failed with error -71 [ 131.760858][ T21] usb 3-1: USB disconnect, device number 12 [ 131.786424][ T4612] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 131.822292][ T5006] usb 1-1: USB disconnect, device number 11 [ 131.826954][ T606] usb 1-1: Failed to submit usb control message: -71 [ 131.835821][ T606] usb 1-1: unable to send the bmi data to the device: -71 [ 131.873597][ T606] usb 1-1: unable to get target info from device [ 131.886882][ T606] usb 1-1: could not get target info (-71) [ 131.902502][ T606] usb 1-1: could not probe fw (-71) [ 132.166653][ T4612] usb 4-1: config 4 has an invalid interface number: 128 but max is 0 [ 132.187331][ T4612] usb 4-1: config 4 has no interface number 0 [ 132.207415][ T4612] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 132.227908][ T8265] IPv6: Can't replace route, no match found [ 132.228323][ T4612] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.251041][ T4612] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 132.261541][ T4612] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.339968][ T8273] loop2: detected capacity change from 0 to 8 [ 132.352853][ T4612] hub 4-1:4.128: USB hub found [ 132.576907][ T4612] hub 4-1:4.128: 27 ports detected [ 132.590613][ T4612] hub 4-1:4.128: Using single TT (err -22) [ 132.602886][ T8290] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 132.628578][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.634895][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.686523][ T4612] hub 4-1:4.128: insufficient power available to use all downstream ports [ 132.755612][ T8297] netlink: 'syz.4.1724': attribute type 1 has an invalid length. [ 132.786477][ T4612] hub 4-1:4.128: hub_hub_status failed (err = -71) [ 132.793566][ T4612] hub 4-1:4.128: config failed, can't get hub status (err -71) [ 132.876548][ T4612] usb 4-1: USB disconnect, device number 12 [ 132.916813][ T8308] trusted_key: encrypted_key: master key parameter is missing [ 132.992159][ T8311] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1731'. [ 133.464218][ T8352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1749'. [ 133.982015][ T25] audit: type=1400 audit(1788261015.609:4): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=8377 comm="syz.1.1764" [ 134.069817][ T5188] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 134.115116][ T8384] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1767'. [ 134.165300][ T8358] loop2: detected capacity change from 0 to 32768 [ 134.173158][ T150] block nbd1: Attempted send on invalid socket [ 134.179380][ T150] blk_update_request: I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 134.206119][ T263] block nbd1: Attempted send on invalid socket [ 134.212440][ T263] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 134.224285][ T263] block nbd1: Attempted send on invalid socket [ 134.230593][ T263] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 134.244416][ T263] block nbd1: Attempted send on invalid socket [ 134.250664][ T263] blk_update_request: I/O error, dev nbd1, sector 18 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 134.262039][ T150] block nbd1: Attempted send on invalid socket [ 134.268783][ T150] blk_update_request: I/O error, dev nbd1, sector 30 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 134.283229][ T150] block nbd1: Attempted send on invalid socket [ 134.289492][ T150] blk_update_request: I/O error, dev nbd1, sector 36 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 134.301453][ T8386] VFS: unable to find oldfs superblock on device nbd1 [ 134.327955][ T8358] JBD2: Ignoring recovery information on journal [ 134.408713][ T8358] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 134.456624][ T5188] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 134.480645][ T5188] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 134.484361][ T8405] trusted_key: encrypted_key: insufficient parameters specified [ 134.537286][ T8358] syz.2.1754 (8358) used greatest stack depth: 18272 bytes left [ 134.563796][ T5188] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 134.595209][ T5188] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 134.650942][ T4190] ocfs2: Unmounting device (7,2) on (node local) [ 134.706657][ T5188] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 134.714197][ T5006] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 134.735665][ T5188] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 134.757786][ T5188] usb 1-1: SerialNumber: syz [ 134.822250][ T5188] cdc_acm 1-1:1.0: invalid descriptor buffer length [ 134.829137][ T5188] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 134.853961][ T5188] cdc_acm 1-1:1.0: This needs exactly 3 endpoints [ 134.869514][ T5188] cdc_acm: probe of 1-1:1.0 failed with error -22 [ 135.030031][ T5188] usb 1-1: USB disconnect, device number 12 [ 135.054005][ T8437] tmpfs: Bad value for 'mpol' [ 135.136440][ T5006] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.167933][ T5006] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 135.199726][ T5006] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 135.212851][ T5006] usb 4-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 135.239006][ T5006] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.516581][ T5006] ttusb_dec_send_command: result bulk message failed: error -8 [ 135.525852][ T5006] ttusb-dec: probe of 4-1:1.0 failed with error -8 [ 135.542174][ T5006] usb 4-1: USB disconnect, device number 13 [ 135.616204][ T8470] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1809'. [ 135.724752][ T8446] loop1: detected capacity change from 0 to 32768 [ 135.796732][ T8446] ERROR: (device loop1): dbAlloc: the hint is outside the map [ 135.796732][ T8446] [ 135.844401][ T8446] ERROR: (device loop1): remounting filesystem as read-only [ 136.048548][ T8488] device bridge2 entered promiscuous mode [ 136.298279][ T8509] netlink: 'syz.3.1829': attribute type 21 has an invalid length. [ 136.302736][ T4606] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 136.326525][ T8509] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1829'. [ 136.336082][ T8509] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1829'. [ 136.365037][ T8510] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1828'. [ 136.464324][ T8520] netlink: 'syz.4.1834': attribute type 21 has an invalid length. [ 136.496519][ T8520] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1834'. [ 136.526131][ T8523] netlink: 'syz.2.1836': attribute type 21 has an invalid length. [ 136.552310][ T8523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1836'. [ 136.676612][ T4606] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.707154][ T4606] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 136.752778][ T4606] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 136.796644][ T4606] usb 2-1: config 1 interface 1 has no altsetting 0 [ 136.956457][ T4606] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 136.974358][ T4606] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.996358][ T4606] usb 2-1: Product: syz [ 137.008499][ T4606] usb 2-1: Manufacturer: syz [ 137.030882][ T4606] usb 2-1: SerialNumber: syz [ 137.092819][ T4606] cdc_ncm 2-1:1.0: skipping garbage [ 137.112763][ T4606] cdc_ncm 2-1:1.0: NCM or ECM functional descriptors missing [ 137.136937][ T4606] cdc_ncm 2-1:1.0: bind() failure [ 137.385271][ T8580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1864'. [ 137.419003][ T8584] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 137.463359][ T8580] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 137.498161][ T8580] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 137.511844][ T4606] usb 2-1: USB disconnect, device number 10 [ 137.541921][ T8580] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 137.600038][ T8542] loop0: detected capacity change from 0 to 32768 [ 137.635340][ T8592] loop2: detected capacity change from 0 to 16 [ 137.671008][ T8592] erofs: (device loop2): mounted with root inode @ nid 36. [ 137.681370][ T8542] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 137.723585][ T8542] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 137.724924][ T8592] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 137.788587][ T8592] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 137.823829][ T8542] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 137.826645][ T5188] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 137.856924][ T4996] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 137.865810][ T4996] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 137.962881][ T4996] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 97ms [ 137.995622][ T4996] gfs2: fsid=syz:syz.0: jid=0: Done [ 138.007331][ T8542] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 138.096393][ T5188] usb 5-1: Using ep0 maxpacket: 32 [ 138.152465][ T8614] __nla_validate_parse: 75 callbacks suppressed [ 138.152483][ T8614] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1879'. [ 138.211506][ T8614] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1879'. [ 138.215860][ T8616] netlink: 'syz.1.1881': attribute type 29 has an invalid length. [ 138.229016][ T5188] usb 5-1: config 0 has an invalid descriptor of length 254, skipping remainder of the config [ 138.256575][ T8616] netlink: 'syz.1.1881': attribute type 6 has an invalid length. [ 138.294028][ T8616] netlink: 'syz.1.1881': attribute type 15 has an invalid length. [ 138.328428][ T8618] xt_ecn: cannot match TCP bits for non-tcp packets [ 138.335713][ T8616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1881'. [ 138.362301][ T8542] gfs2: fsid=syz:syz.0: found 1 quota changes [ 138.436633][ T5188] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 138.458233][ T5188] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.482307][ T5188] usb 5-1: Product: syz [ 138.500457][ T5188] usb 5-1: Manufacturer: syz [ 138.518686][ T5188] usb 5-1: SerialNumber: syz [ 138.528377][ T8622] loop1: detected capacity change from 0 to 8 [ 138.536108][ T5188] usb 5-1: config 0 descriptor?? [ 138.597263][ T5188] usb 5-1: bad CDC descriptors [ 138.616632][ T5188] usb 5-1: unsupported MDLM descriptors [ 138.637886][ T8610] loop2: detected capacity change from 0 to 32768 [ 138.654688][ T25] audit: type=1800 audit(1788261020.279:5): pid=8622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1884" name="file1" dev="loop1" ino=1 res=0 errno=0 [ 138.672878][ T4186] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 138.688697][ T4186] CPU: 0 PID: 4186 Comm: syz-executor Not tainted syzkaller #0 [ 138.696257][ T4186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 138.706324][ T4186] Call Trace: [ 138.709600][ T4186] [ 138.712528][ T4186] dump_stack_lvl+0x188/0x250 [ 138.717207][ T4186] ? show_regs_print_info+0x20/0x20 [ 138.722396][ T4186] ? load_image+0x410/0x410 [ 138.726891][ T4186] ? do_raw_spin_unlock+0x11d/0x230 [ 138.732095][ T4186] gfs2_assert_warn_i+0x187/0x2c0 [ 138.737116][ T4186] gfs2_quota_cleanup+0x48c/0x670 [ 138.742134][ T4186] gfs2_make_fs_ro+0x523/0x620 [ 138.746912][ T4186] ? do_raw_spin_unlock+0x11d/0x230 [ 138.752098][ T4186] ? gfs2_dinode_out+0xb00/0xb00 [ 138.757021][ T4186] ? __lock_acquire+0x7b50/0x7b50 [ 138.762030][ T4186] ? do_raw_spin_lock+0x128/0x2f0 [ 138.767037][ T4186] ? __rwlock_init+0x140/0x140 [ 138.771782][ T4186] ? do_raw_spin_unlock+0x11d/0x230 [ 138.776964][ T4186] gfs2_put_super+0x1d2/0x7c0 [ 138.781648][ T4186] ? gfs2_evict_inode+0x1340/0x1340 [ 138.786827][ T4186] generic_shutdown_super+0x130/0x300 [ 138.792190][ T4186] kill_block_super+0x7c/0xe0 [ 138.796854][ T4186] deactivate_locked_super+0x93/0xf0 [ 138.802120][ T4186] cleanup_mnt+0x426/0x4d0 [ 138.806527][ T4186] task_work_run+0x125/0x1a0 [ 138.811106][ T4186] exit_to_user_mode_loop+0x10f/0x130 [ 138.816462][ T4186] exit_to_user_mode_prepare+0xee/0x180 [ 138.821991][ T4186] syscall_exit_to_user_mode+0x16/0x40 [ 138.827437][ T4186] do_syscall_64+0x58/0xa0 [ 138.831835][ T4186] ? clear_bhb_loop+0x30/0x80 [ 138.836496][ T4186] ? clear_bhb_loop+0x30/0x80 [ 138.841165][ T4186] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 138.847050][ T4186] RIP: 0033:0x7fb71fc20397 [ 138.851451][ T4186] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 138.871038][ T4186] RSP: 002b:00007ffc4571cae8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 138.879437][ T4186] RAX: 0000000000000000 RBX: 00007fb71fcb5474 RCX: 00007fb71fc20397 [ 138.887393][ T4186] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc4571cba0 [ 138.895345][ T4186] RBP: 00007ffc4571cba0 R08: 00007ffc4571dba0 R09: 00000000ffffffff [ 138.903298][ T4186] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc4571dc30 [ 138.911251][ T4186] R13: 00007fb71fcb5474 R14: 0000000000021d15 R15: 00007ffc4571dc70 [ 138.919217][ T4186] [ 138.961598][ T5188] usb 5-1: USB disconnect, device number 10 [ 138.987832][ T21] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 138.997437][ T8610] XFS (loop2): Mounting V5 Filesystem [ 139.103273][ T8610] XFS (loop2): Ending clean mount [ 139.285601][ T4190] XFS (loop2): Unmounting Filesystem [ 139.362594][ T21] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 139.379711][ T21] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 139.401726][ T21] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 139.412810][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.620579][ T8655] loop1: detected capacity change from 0 to 4096 [ 139.680684][ T8664] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.683935][ T8655] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 139.713965][ T21] usb 4-1: USB disconnect, device number 14 [ 140.063565][ T8682] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1911'. [ 140.253252][ T8691] loop2: detected capacity change from 0 to 4096 [ 140.315521][ T8695] device bond1 entered promiscuous mode [ 140.336647][ T8695] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.366613][ T8691] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 140.617166][ T8691] ntfs3: loop2: ntfs_sync_inode r=1e failed, -22. [ 140.623993][ T8691] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 140.814028][ T4992] ntfs3: loop2: ntfs3_write_inode r=1e failed, -22. [ 140.851766][ T4190] ntfs3: loop2: ntfs_evict_inode r=1e failed, -22. [ 140.968556][ T8741] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 141.054018][ T8741] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 141.126414][ T8751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1941'. [ 141.211219][ T8755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1944'. [ 141.458221][ T8773] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1953'. [ 141.623776][ T8785] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 141.649515][ T8785] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 141.675945][ T8737] loop4: detected capacity change from 0 to 32768 [ 141.687011][ T8785] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 141.694722][ T8785] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 141.725101][ T8785] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 141.741540][ T8785] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 141.750369][ T8737] XFS: ikeep mount option is deprecated. [ 141.811857][ T8737] XFS (loop4): Mounting V5 Filesystem [ 141.833449][ T8804] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 141.856964][ T4612] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 141.912225][ T8737] XFS (loop4): Ending clean mount [ 141.919487][ T8737] XFS (loop4): Quotacheck needed: Please wait. [ 142.007765][ T8737] XFS (loop4): Quotacheck: Done. [ 142.097206][ T4194] XFS (loop4): Unmounting Filesystem [ 142.216723][ T4612] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.230474][ T4612] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 142.254399][ T4612] usb 3-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 142.268932][ T4612] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.321430][ T8826] nvme_rdma: malformed address passed: 172.20.20.24:0Æý [ 142.340604][ T4612] opticon 3-1:1.0: opticon converter detected [ 142.381219][ T8829] loop1: detected capacity change from 0 to 2048 [ 142.385616][ T4612] usb 3-1: opticon converter now attached to ttyUSB0 [ 142.464002][ T8829] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 142.545500][ T5188] usb 3-1: USB disconnect, device number 13 [ 142.582480][ T5188] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 142.605903][ T5188] opticon 3-1:1.0: device disconnected [ 142.796526][ T4612] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 142.937707][ T8857] loop4: detected capacity change from 0 to 16 [ 142.990618][ T8857] erofs: (device loop4): mounted with root inode @ nid 36. [ 143.009138][ T8861] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1993'. [ 143.023249][ T8857] erofs: (device loop4): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 143.034618][ T4606] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 143.045406][ T8861] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1993'. [ 143.054906][ T4612] usb 1-1: Using ep0 maxpacket: 8 [ 143.081551][ T8857] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 89 [ 143.096224][ T8857] erofs: (device loop4): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 143.111656][ T8857] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 89 [ 143.126698][ T8863] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.134759][ T8857] erofs: (device loop4): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 143.170520][ T8865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1994'. [ 143.180213][ T8857] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 89 [ 143.202538][ T8857] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 143.213084][ T8865] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.215518][ T25] audit: type=1800 audit(1788261024.849:6): pid=8857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1991" name="file3" dev="loop4" ino=89 res=0 errno=0 [ 143.336673][ T4612] usb 1-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 143.355793][ T4612] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.373829][ T4612] usb 1-1: Product: syz [ 143.378597][ T4612] usb 1-1: Manufacturer: syz [ 143.392501][ T4612] usb 1-1: SerialNumber: syz [ 143.427157][ T4606] usb 4-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 143.444453][ T4606] usb 4-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.456925][ T4606] usb 4-1: config 1 interface 0 has no altsetting 0 [ 143.616564][ T4606] usb 4-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice= 0.40 [ 143.644094][ T8894] netlink: 'syz.2.2010': attribute type 1 has an invalid length. [ 143.646704][ T4606] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.656961][ T8894] netlink: 'syz.2.2010': attribute type 2 has an invalid length. [ 143.675009][ T4606] usb 4-1: Product: syz [ 143.678001][ T8894] netlink: 'syz.2.2010': attribute type 2 has an invalid length. [ 143.680465][ T4606] usb 4-1: Manufacturer: syz [ 143.695214][ T4606] usb 4-1: SerialNumber: syz [ 143.701109][ T8894] netlink: 'syz.2.2010': attribute type 2 has an invalid length. [ 143.714144][ T8894] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2010'. [ 143.739190][ T8897] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2011'. [ 143.831252][ T4996] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 143.906859][ T4612] mxuport 1-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 143.928674][ T4612] mxuport: probe of 1-1:254.0 failed with error -5 [ 143.955143][ T4612] usb 1-1: USB disconnect, device number 13 [ 144.033479][ T4606] vmk80xx 4-1:1.0: driver 'vmk80xx' failed to auto-configure device. [ 144.086163][ T4606] usb 4-1: USB disconnect, device number 15 [ 144.101443][ T4996] usb 2-1: Using ep0 maxpacket: 16 [ 144.421311][ T4996] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 144.436289][ T4996] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.451743][ T4996] usb 2-1: Product: syz [ 144.466301][ T4996] usb 2-1: Manufacturer: syz [ 144.470952][ T4996] usb 2-1: SerialNumber: syz [ 144.487160][ T4996] usb 2-1: config 0 descriptor?? [ 144.576328][ T8947] CIFS: VFS: Unable to allocate memory for devname [ 144.743622][ T8955] netlink: 372 bytes leftover after parsing attributes in process `syz.4.2040'. [ 144.756200][ T8955] netlink: 'syz.4.2040': attribute type 3 has an invalid length. [ 144.767063][ T8955] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2040'. [ 144.770376][ T4996] speedtch 2-1:0.0: speedtch_bind: data interface not found! [ 144.816142][ T4996] speedtch 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 144.944374][ T8936] loop2: detected capacity change from 0 to 32768 [ 144.975948][ T4996] usb 2-1: USB disconnect, device number 11 [ 145.000356][ T8967] Timeout policy `syz1' can only be used by L3 protocol number 34825 [ 145.031270][ T8936] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 scanned by syz.2.2030 (8936) [ 145.050260][ T8969] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2047'. [ 145.081734][ T8936] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 145.107726][ T8971] loop4: detected capacity change from 0 to 512 [ 145.109609][ T8936] BTRFS info (device loop2): enabling ssd optimizations [ 145.140308][ T8936] BTRFS info (device loop2): not using ssd optimizations [ 145.148703][ T8936] BTRFS info (device loop2): turning off barriers [ 145.185033][ T8936] BTRFS info (device loop2): use no compression [ 145.185055][ T8936] BTRFS info (device loop2): using free space tree [ 145.185070][ T8936] BTRFS info (device loop2): has skinny extents [ 145.236506][ T8997] rdma_rxe: rxe creation allowed on top of a real device only [ 145.285437][ T8971] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 145.285542][ T8971] ext4 filesystem being mounted at /464/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.340781][ T8971] Quota error (device loop4): do_check_range: Getting dqdh_next_free 2741 out of range 0-6 [ 145.340969][ T8971] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 145.341027][ T8971] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.2048: Failed to acquire dquot type 0 [ 145.456611][ T8936] BTRFS info (device loop2): balance: start -f [ 145.462926][ T8936] BTRFS info (device loop2): balance: ended with status: 0 [ 145.638309][ T4606] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 145.683205][ T4179] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 11 /dev/loop2 scanned by udevd (4179) [ 145.885890][ T9019] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2059'. [ 145.922028][ T9019] netlink: 252 bytes leftover after parsing attributes in process `syz.1.2059'. [ 145.932683][ T9019] netlink: 'syz.1.2059': attribute type 1 has an invalid length. [ 145.945838][ T9019] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2059'. [ 146.016512][ T4606] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.031986][ T9025] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 146.050404][ T4606] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 146.082061][ T9028] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 146.089956][ T4606] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 146.090171][ T9029] kAFS: unable to lookup cell '.,' [ 146.105915][ T9025] overlayfs: overlapping lowerdir path [ 146.207992][ T9032] program syz.1.2066 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 146.269814][ T9032] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 146.306907][ T4606] usb 1-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 146.326999][ T4606] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.335013][ T4606] usb 1-1: Product: syz [ 146.359962][ T4606] usb 1-1: Manufacturer: syz [ 146.386303][ T4606] usb 1-1: SerialNumber: syz [ 146.397451][ T4606] usb 1-1: config 0 descriptor?? [ 146.674573][ T4606] usb 1-1: USB disconnect, device number 14 [ 146.989892][ T9035] loop3: detected capacity change from 0 to 32768 [ 147.220845][ T21] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 147.306377][ T4606] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 147.488390][ T21] usb 3-1: Using ep0 maxpacket: 32 [ 147.606715][ T21] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 147.617336][ T21] usb 3-1: config 0 has no interface number 0 [ 147.623462][ T21] usb 3-1: config 0 interface 132 has no altsetting 0 [ 147.686547][ T4606] usb 2-1: config 4 has an invalid interface number: 128 but max is 0 [ 147.701846][ T4606] usb 2-1: config 4 has no interface number 0 [ 147.716697][ T4606] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 147.741861][ T4606] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.765242][ T4606] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 147.770760][ T9108] loop0: detected capacity change from 0 to 8192 [ 147.788702][ T4606] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.816587][ T21] usb 3-1: New USB device found, idVendor=0525, idProduct=9901, bcdDevice=39.75 [ 147.825656][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.843845][ T21] usb 3-1: Product: syz [ 147.858387][ T21] usb 3-1: Manufacturer: syz [ 147.867396][ T4606] hub 2-1:4.128: USB hub found [ 147.886316][ T21] usb 3-1: SerialNumber: syz [ 147.904557][ T21] usb 3-1: config 0 descriptor?? [ 148.057417][ T9133] bridge0: port 2(bond0) entered blocking state [ 148.076371][ T9133] bridge0: port 2(bond0) entered disabled state [ 148.076429][ T4606] hub 2-1:4.128: 27 ports detected [ 148.103118][ T4606] hub 2-1:4.128: Using single TT (err -22) [ 148.103559][ T9133] device bond0 entered promiscuous mode [ 148.131653][ T9133] device bond_slave_0 entered promiscuous mode [ 148.146489][ T4606] hub 2-1:4.128: insufficient power available to use all downstream ports [ 148.156910][ T9133] device bond_slave_1 entered promiscuous mode [ 148.163544][ T9133] device bridge_slave_1 entered promiscuous mode [ 148.177007][ T9133] bridge0: port 2(bond0) entered blocking state [ 148.183324][ T9133] bridge0: port 2(bond0) entered forwarding state [ 148.186510][ T21] cdc_subset: probe of 3-1:0.132 failed with error -71 [ 148.221400][ T21] usb 3-1: USB disconnect, device number 14 [ 148.298397][ T4606] hub 2-1:4.128: hub_hub_status failed (err = -71) [ 148.324423][ T4606] hub 2-1:4.128: config failed, can't get hub status (err -71) [ 148.372032][ T9144] loop0: detected capacity change from 0 to 512 [ 148.397787][ T4606] usb 2-1: USB disconnect, device number 12 [ 148.441387][ T9151] binder: 9150:9151 ioctl c018620b 0 returned -14 [ 148.493541][ T9144] EXT4-fs (loop0): Ignoring removed oldalloc option [ 148.516433][ T9144] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 148.552793][ T9144] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 148.565373][ T9144] EXT4-fs (loop0): orphan cleanup on readonly fs [ 148.565392][ T9144] EXT4-fs error (device loop0): ext4_orphan_get:1432: comm syz.0.2121: bad orphan inode 267 [ 148.566159][ T9144] EXT4-fs (loop0): Remounting filesystem read-only [ 148.566189][ T9144] EXT4-fs (loop0): mounted filesystem without journal. Opts: oldalloc,noblock_validity,discard,errors=remount-ro,lazytime. Quota mode: none. [ 148.570587][ T9144] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.2121: dx entry: limit 0 != root limit 125 [ 148.570650][ T9144] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.2121: Corrupt directory, running e2fsck is recommended [ 148.726719][ T9165] netlink: 'syz.2.2131': attribute type 1 has an invalid length. [ 148.742341][ T9166] netlink: 'syz.0.2130': attribute type 11 has an invalid length. [ 148.867085][ T21] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 148.881945][ T9174] IPv6: NLM_F_CREATE should be specified when creating new route [ 148.896642][ T9174] IPv6: Can't replace route, no match found [ 149.226580][ T21] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.257161][ T21] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 149.321520][ T21] usb 4-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 149.333183][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.457149][ T9213] nvme_rdma: malformed src address passed: 1270.0.1 [ 149.600511][ T21] ttusb_dec_send_command: result bulk message failed: error -22 [ 149.616428][ T21] ttusb-dec: probe of 4-1:1.0 failed with error -22 [ 149.626525][ T21] usb 4-1: USB disconnect, device number 16 [ 149.840745][ T9236] device bond1 entered promiscuous mode [ 149.875138][ T9236] 8021q: adding VLAN 0 to HW filter on device bond1 [ 150.354493][ T9224] loop2: detected capacity change from 0 to 32768 [ 150.396115][ T9262] bond0: (slave bridge0): Error: Slave device does not support XDP [ 150.423173][ T9224] jfs_lookup: iget failed on inum 4 [ 150.727230][ T9286] ax25_connect(): syz.2.2188 uses autobind, please contact jreuter@yaina.de [ 150.763489][ T9289] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2190'. [ 150.796494][ T9289] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 151.003295][ T9310] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2200'. [ 151.035144][ T9310] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2200'. [ 151.218915][ T9325] netlink: 'syz.0.2207': attribute type 1 has an invalid length. [ 151.246327][ T9325] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2207'. [ 151.300316][ T9329] loop1: detected capacity change from 0 to 128 [ 151.460076][ T9329] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 151.519137][ T9329] ext4 filesystem being mounted at /459/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 151.842305][ T9376] netlink: 'syz.1.2228': attribute type 1 has an invalid length. [ 151.861446][ T9376] openvswitch: netlink: Actions may not be safe on all matching packets [ 151.939099][ T9380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2232'. [ 151.948298][ T4678] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 151.976282][ T9380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2232'. [ 151.985185][ T9380] netlink: 'syz.3.2232': attribute type 6 has an invalid length. [ 152.072521][ T9390] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2235'. [ 152.164477][ T9394] loop3: detected capacity change from 0 to 512 [ 152.229976][ T9394] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 152.264922][ T9394] ext4 filesystem being mounted at /421/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.317926][ T9394] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 152.396411][ T4678] usb 1-1: unable to get BOS descriptor or descriptor too short [ 152.506664][ T4678] usb 1-1: config 114 has an invalid interface number: 216 but max is 0 [ 152.515075][ T4678] usb 1-1: config 114 has no interface number 0 [ 152.553263][ T4678] usb 1-1: config 114 interface 216 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 152.582700][ T4678] usb 1-1: config 114 interface 216 has no altsetting 0 [ 152.793987][ T4678] usb 1-1: New USB device found, idVendor=2040, idProduct=7500, bcdDevice=d8.83 [ 152.821837][ T9424] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2250'. [ 152.832993][ T4678] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.845872][ T4678] usb 1-1: Product: syz [ 152.856313][ T4678] usb 1-1: Manufacturer: syz [ 152.866955][ T4678] usb 1-1: SerialNumber: syz [ 152.906581][ T9362] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 153.021887][ T9441] loop3: detected capacity change from 0 to 256 [ 153.328395][ T9461] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2265'. [ 153.368031][ T9461] netlink: 'syz.3.2265': attribute type 1 has an invalid length. [ 153.388172][ T4678] pvrusb2: Hardware description: WinTV HVR-1950 Model 750xx [ 153.395740][ T4678] usb 1-1: selecting invalid altsetting 0 [ 153.448146][ T2420] pvrusb2: Invalid read control endpoint [ 153.455462][ T4678] usb 1-1: USB disconnect, device number 15 [ 153.530168][ T2420] usb 1-1: Direct firmware load for v4l-pvrusb2-73xxx-01.fw failed with error -2 [ 153.573721][ T2420] usb 1-1: Falling back to sysfs fallback for: v4l-pvrusb2-73xxx-01.fw [ 153.681261][ T9480] loop4: detected capacity change from 0 to 256 [ 153.724772][ T9439] loop1: detected capacity change from 0 to 32768 [ 153.777948][ T9480] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 153.843447][ T9439] XFS (loop1): Mounting V5 Filesystem [ 153.935361][ T9498] loop0: detected capacity change from 0 to 764 [ 153.936106][ T9439] XFS (loop1): Ending clean mount [ 154.096395][ T4198] XFS (loop1): Unmounting Filesystem [ 154.500953][ T9519] loop4: detected capacity change from 0 to 64 [ 154.540926][ T9523] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2294'. [ 154.648140][ T9529] netlink: 'syz.3.2296': attribute type 3 has an invalid length. [ 154.862562][ T9535] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 155.028445][ T9552] xt_socket: unknown flags 0x48 [ 155.307655][ T9561] loop3: detected capacity change from 0 to 4096 [ 155.391697][ T9561] EXT4-fs (loop3): Test dummy encryption mode enabled [ 155.425603][ T9561] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue. Quota mode: writeback. [ 155.619292][ T9561] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 155.664597][ T9531] loop0: detected capacity change from 0 to 32768 [ 155.769684][ T9564] loop2: detected capacity change from 0 to 32768 [ 155.830372][ T9588] loop3: detected capacity change from 0 to 256 [ 155.893070][ T9531] XFS (loop0): Mounting V5 Filesystem [ 155.960680][ T9531] XFS (loop0): Ending clean mount [ 155.972280][ T9593] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 156.008412][ T9593] ntfs: (device loop1): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 156.030392][ T9593] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 156.039546][ T9593] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 156.059457][ C1] vkms_vblank_simulate: vblank timer overrun [ 156.071365][ T9602] netlink: 'syz.2.2325': attribute type 1 has an invalid length. [ 156.079254][ T9602] netlink: 'syz.2.2325': attribute type 2 has an invalid length. [ 156.087357][ T9602] netlink: 'syz.2.2325': attribute type 1 has an invalid length. [ 156.095127][ T9602] netlink: 'syz.2.2325': attribute type 2 has an invalid length. [ 156.103292][ T9602] netlink: 'syz.2.2325': attribute type 2 has an invalid length. [ 156.127749][ T9602] netlink: 'syz.2.2325': attribute type 1 has an invalid length. [ 156.160977][ T9593] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 156.203613][ T9593] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 156.257849][ T4186] XFS (loop0): Unmounting Filesystem [ 156.336988][ T9593] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 156.371547][ T9593] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 156.530037][ T9593] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 156.572004][ T9593] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 156.680919][ T9626] netlink: 'syz.2.2336': attribute type 10 has an invalid length. [ 156.730916][ T9626] __nla_validate_parse: 1 callbacks suppressed [ 156.730930][ T9626] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2336'. [ 156.769015][ T9593] ntfs: volume version 3.1. [ 156.894515][ T9634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2340'. [ 157.039073][ T9643] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2342'. [ 157.691161][ T9689] xt_CT: You must specify a L4 protocol and not use inversions on it [ 157.736565][ T9687] set_capacity_and_notify: 2 callbacks suppressed [ 157.736582][ T9687] loop2: detected capacity change from 0 to 1764 [ 157.755120][ T9632] loop4: detected capacity change from 0 to 32768 [ 157.791370][ T9695] device ip6tnl2 entered promiscuous mode [ 157.845788][ T9687] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 157.921946][ T9632] XFS (loop4): Mounting V5 Filesystem [ 158.054579][ T9632] XFS (loop4): Ending clean mount [ 158.170298][ T9721] loop3: detected capacity change from 0 to 512 [ 158.203776][ T4194] XFS (loop4): Unmounting Filesystem [ 158.242108][ T9729] netlink: 'syz.1.2383': attribute type 21 has an invalid length. [ 158.251049][ T9729] netlink: 'syz.1.2383': attribute type 6 has an invalid length. [ 158.256368][ T4612] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 158.258893][ T9729] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2383'. [ 158.284007][ T9721] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 158.399507][ T9721] EXT4-fs (loop3): mounted filesystem without journal. Opts: mblk_io_submit,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 158.537891][ T9721] ext4 filesystem being mounted at /453/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.548894][ T4612] usb 3-1: Using ep0 maxpacket: 32 [ 158.666484][ T4612] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 158.685063][ T4612] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 158.717285][ T4612] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 158.735889][ T4612] usb 3-1: config 1 has no interface number 0 [ 158.744370][ T4612] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 158.784113][ T4612] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 158.810952][ T4612] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 158.825406][ T4612] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.887277][ T9763] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2396'. [ 158.889652][ T4612] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 159.096908][ T4612] snd_usb_pod 3-1:1.1: endpoint not available, using fallback values [ 159.117050][ T4612] snd_usb_pod 3-1:1.1: invalid control EP [ 159.122812][ T4612] snd_usb_pod 3-1:1.1: cannot start listening: -22 [ 159.180859][ T4612] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 159.227412][ T4612] snd_usb_pod: probe of 3-1:1.1 failed with error -22 [ 159.313396][ T4606] usb 3-1: USB disconnect, device number 15 [ 159.601498][ T9818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2424'. [ 159.620793][ T9818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2424'. [ 159.641454][ T9821] xt_TPROXY: Can be used only with -p tcp or -p udp [ 159.648653][ T4999] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 159.703391][ T9822] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222022 combination not found [ 160.112210][ T9857] validate_nla: 4 callbacks suppressed [ 160.112227][ T9857] netlink: 'syz.4.2443': attribute type 10 has an invalid length. [ 160.126541][ T4999] usb 2-1: unable to get BOS descriptor or descriptor too short [ 160.151428][ T9857] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2443'. [ 160.192209][ T4999] usb 2-1: not running at top speed; connect to a high speed hub [ 160.218531][ T9865] loop2: detected capacity change from 0 to 64 [ 160.272723][ T9872] gre0: Master is either lo or non-ether device [ 160.279450][ T4999] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.301377][ T4999] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 160.351366][ T9873] loop3: detected capacity change from 0 to 1024 [ 160.425448][ T9873] EXT4-fs (loop3): #clusters per group too big: 24576 [ 160.641303][ T4999] usb 2-1: string descriptor 0 read error: -22 [ 160.651383][ T4999] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 160.684871][ T4999] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.740736][ T9899] loop4: detected capacity change from 0 to 1024 [ 160.751055][ T4999] usb 2-1: 0:1 : does not exist [ 160.755949][ T4999] usb 2-1: 0:2 : does not exist [ 160.871603][ T4992] hfsplus: b-tree write err: -5, ino 25 [ 160.882186][ T4992] hfsplus: b-tree write err: -5, ino 4 [ 160.894855][ T4992] hfsplus: b-tree write err: -5, ino 2 [ 160.906512][ T4606] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 160.916624][ T4612] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 160.989559][ T7] usb 2-1: USB disconnect, device number 13 [ 161.077646][ T9915] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2472'. [ 161.129025][ T9919] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2474'. [ 161.148530][ T9921] sctp: [Deprecated]: syz.0.2475 (pid 9921) Use of int in max_burst socket option. [ 161.148530][ T9921] Use struct sctp_assoc_value instead [ 161.166408][ T4612] usb 3-1: Using ep0 maxpacket: 32 [ 161.176471][ T4606] usb 4-1: Using ep0 maxpacket: 8 [ 161.286657][ T4612] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 161.306512][ T4606] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.324484][ T4606] usb 4-1: New USB device found, idVendor=05a9, idProduct=2630, bcdDevice=55.12 [ 161.334660][ T4612] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 59391, setting to 1024 [ 161.356075][ T4606] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.371895][ T4606] usb 4-1: config 0 descriptor?? [ 161.418666][ T4606] usb 4-1: Found UVC 0.00 device (05a9:2630) [ 161.429843][ T4606] usb 4-1: No valid video chain found. [ 161.520705][ T4612] usb 3-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 161.535146][ T21] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 161.543331][ T4612] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.571471][ T4612] usb 3-1: Product: syz [ 161.575821][ T4612] usb 3-1: Manufacturer: syz [ 161.581311][ T4612] usb 3-1: SerialNumber: syz [ 161.612358][ T4612] usb 3-1: config 0 descriptor?? [ 161.621703][ T4999] usb 4-1: USB disconnect, device number 17 [ 161.636607][ T9895] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 161.668479][ T9946] loop1: detected capacity change from 0 to 4096 [ 161.776369][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 161.876668][ T4612] usbtouchscreen: probe of 3-1:0.0 failed with error -71 [ 161.906635][ T21] usb 5-1: config 8 has an invalid interface number: 206 but max is 0 [ 161.925767][ T4612] usb 3-1: USB disconnect, device number 16 [ 161.932734][ T21] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 161.959345][ T21] usb 5-1: config 8 has no interface number 0 [ 161.971416][ T21] usb 5-1: config 8 interface 206 altsetting 1 has an invalid endpoint with address 0xF7, skipping [ 161.984209][ T21] usb 5-1: config 8 interface 206 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 162.018125][ T9964] sctp: [Deprecated]: syz.1.2496 (pid 9964) Use of int in max_burst socket option deprecated. [ 162.018125][ T9964] Use struct sctp_assoc_value instead [ 162.019038][ T21] usb 5-1: config 8 interface 206 has no altsetting 0 [ 162.119834][ T9970] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 162.220525][ T21] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 162.248112][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.275255][ T9981] device bridge1 entered promiscuous mode [ 162.281401][ T21] usb 5-1: Product: syz [ 162.292756][ T21] usb 5-1: Manufacturer: syz [ 162.311146][ T21] usb 5-1: SerialNumber: syz [ 162.617415][ T21] garmin_gps 5-1:8.206: Garmin GPS usb/tty converter detected [ 162.630715][ T21] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 162.632524][T10004] loop3: detected capacity change from 0 to 4096 [ 162.656374][ T21] garmin_gps: probe of ttyUSB0 failed with error -22 [ 162.693251][T10004] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 162.693849][ T21] usb 5-1: USB disconnect, device number 11 [ 162.760769][ T21] garmin_gps 5-1:8.206: device disconnected [ 162.970385][T10023] netlink: 'syz.3.2523': attribute type 12 has an invalid length. [ 163.125141][T10038] loop2: detected capacity change from 0 to 4096 [ 163.151319][T10038] EXT4-fs (loop2): Test dummy encryption mode enabled [ 163.179788][T10042] loop4: detected capacity change from 0 to 256 [ 163.235518][T10038] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue. Quota mode: writeback. [ 163.504922][T10034] loop1: detected capacity change from 0 to 32768 [ 163.594543][T10034] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.2527 (10034) [ 163.645489][T10034] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 163.690670][T10034] BTRFS info (device loop1): enabling auto defrag [ 163.711279][T10034] BTRFS info (device loop1): max_inline at 0 [ 163.765238][T10064] loop4: detected capacity change from 0 to 1024 [ 163.775339][T10034] BTRFS info (device loop1): using free space tree [ 163.792822][T10034] BTRFS info (device loop1): has skinny extents [ 163.811733][T10068] loop2: detected capacity change from 0 to 1024 [ 163.888705][T10082] __nla_validate_parse: 2 callbacks suppressed [ 163.888723][T10082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2545'. [ 164.088480][T10034] BTRFS info (device loop1): enabling ssd optimizations [ 164.926545][ T25] kauditd_printk_skb: 9 callbacks suppressed [ 164.926560][ T25] audit: type=1400 audit(1788261046.604:7): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name=3A3A0AE10CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A552C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=10107 comm="syz.3.2551" [ 165.482141][T10123] nvme_fabrics: missing parameter 'nqn=%s' [ 165.680393][T10137] netlink: 'syz.0.2561': attribute type 10 has an invalid length. [ 165.686167][T10113] loop2: detected capacity change from 0 to 32768 [ 165.708262][T10137] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2561'. [ 165.736607][T10137] device bond0 entered promiscuous mode [ 165.747487][T10137] device bond_slave_0 entered promiscuous mode [ 165.763528][T10137] device bond_slave_1 entered promiscuous mode [ 165.773025][T10137] device bridge0 entered promiscuous mode [ 165.781214][T10137] device bridge_slave_1 entered promiscuous mode [ 165.802878][T10113] XFS (loop2): Mounting V5 Filesystem [ 165.807011][T10137] bridge0: port 2(bond0) entered blocking state [ 165.818941][T10137] bridge0: port 2(bond0) entered disabled state [ 165.829423][T10137] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 165.944654][T10113] XFS (loop2): Ending clean mount [ 165.994395][T10162] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 166.103293][ T4190] XFS (loop2): Unmounting Filesystem [ 166.234663][T10176] libceph: resolve '0' (ret=-3): failed [ 166.399438][T10187] loop3: detected capacity change from 0 to 512 [ 166.440296][T10191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2586'. [ 166.468331][T10187] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 166.548764][T10187] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.2584: bg 0: block 4: invalid block bitmap [ 166.580484][T10187] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 166.592425][T10187] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2584: invalid indirect mapped block 1 (level 1) [ 166.608676][T10187] EXT4-fs (loop3): 1 truncate cleaned up [ 166.626507][T10187] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 166.686336][ T21] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 166.850170][T10213] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.2595'. [ 166.945680][T10219] loop3: detected capacity change from 0 to 1024 [ 166.952347][ T1108] Bluetooth: hci0: command 0x0c1a tx timeout [ 167.054077][T10219] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 167.086610][ T21] usb 5-1: unable to get BOS descriptor or descriptor too short [ 167.094344][T10219] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. leaving read-only. [ 167.122766][T10234] ipt_CLUSTERIP: Please specify destination IP [ 167.171537][T10237] netlink: 'syz.1.2607': attribute type 21 has an invalid length. [ 167.204966][T10237] netlink: 'syz.1.2607': attribute type 7 has an invalid length. [ 167.221361][ T21] usb 5-1: config 114 has an invalid interface number: 216 but max is 0 [ 167.233309][ T21] usb 5-1: config 114 has no interface number 0 [ 167.272340][ T21] usb 5-1: config 114 interface 216 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 167.309205][ T21] usb 5-1: config 114 interface 216 has no altsetting 0 [ 167.476517][ T21] usb 5-1: New USB device found, idVendor=2040, idProduct=7500, bcdDevice=d8.83 [ 167.501233][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.521986][ T21] usb 5-1: Product: syz [ 167.526195][ T21] usb 5-1: Manufacturer: syz [ 167.548677][T10263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2621'. [ 167.554661][T10265] loop3: detected capacity change from 0 to 256 [ 167.563789][ T21] usb 5-1: SerialNumber: syz [ 167.596783][T10189] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 167.641992][T10265] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011e7e, chksum : 0x04bede55, utbl_chksum : 0xe619d30d) [ 167.730432][T10275] loop2: detected capacity change from 0 to 256 [ 168.078039][ T21] pvrusb2: Hardware description: WinTV HVR-1950 Model 750xx [ 168.089759][ T21] usb 5-1: selecting invalid altsetting 0 [ 168.111313][ T21] usb 5-1: USB disconnect, device number 12 [ 168.136201][ T21] pvrusb2: Device being rendered inoperable [ 168.348139][T10318] loop1: detected capacity change from 0 to 64 [ 168.370789][T10318] MINIX-fs: mounting file system with errors, running fsck is recommended [ 168.519477][ T4614] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 168.754038][T10344] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2660'. [ 168.766471][ T4258] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 168.889527][ T4614] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 168.909836][ T4614] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.932134][ T4614] usb 3-1: config 0 has no interface number 0 [ 168.942880][ T4614] usb 3-1: config 0 interface 1 has no altsetting 0 [ 168.963420][ T4614] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 168.978295][ T4614] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.003765][ T4614] usb 3-1: config 0 descriptor?? [ 169.017655][T10340] loop4: detected capacity change from 0 to 32768 [ 169.027071][ T4258] usb 2-1: Using ep0 maxpacket: 8 [ 169.059941][T10340] XFS: attr2 mount option is deprecated. [ 169.082299][T10340] XFS (loop4): Mounting V5 Filesystem [ 169.113927][T10340] XFS (loop4): Ending clean mount [ 169.132480][T10340] XFS (loop4): Quotacheck needed: Please wait. [ 169.161647][T10366] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2667'. [ 169.176501][ T4258] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 169.194496][ T4258] usb 2-1: config 179 has no interface number 0 [ 169.201543][ T4258] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 169.202232][T10340] XFS (loop4): Quotacheck: Done. [ 169.213097][ T4258] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 169.230584][ T4258] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 169.244290][T10368] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2668'. [ 169.250112][ T4614] usb 3-1: USB disconnect, device number 17 [ 169.253355][ T4258] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 169.269556][ T4258] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 169.283171][ T4258] usb 2-1: config 179 interface 65 has no altsetting 0 [ 169.291036][ T4258] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 169.308729][ T4258] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.328081][ T4194] XFS (loop4): Unmounting Filesystem [ 169.406754][ T4258] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input14 [ 169.601295][ T4258] usb 2-1: USB disconnect, device number 14 [ 169.622581][ T4258] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 169.812155][T10384] netlink: 'syz.2.2675': attribute type 1 has an invalid length. [ 170.180905][T10412] netlink: 'syz.2.2689': attribute type 1 has an invalid length. [ 170.207409][T10412] netlink: 'syz.2.2689': attribute type 3 has an invalid length. [ 170.215169][T10412] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2689'. [ 170.267452][T10412] NCSI netlink: No device for ifindex 55159 [ 170.411844][T10432] loop1: detected capacity change from 0 to 1764 [ 170.632781][ T1108] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 170.718145][T10461] MTD: Couldn't look up './bus': -15 [ 170.773747][T10466] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 170.789042][T10454] loop3: detected capacity change from 0 to 4096 [ 170.899729][ T1108] usb 5-1: Using ep0 maxpacket: 8 [ 170.954455][T10484] xt_recent: Unsupported userspace flags (000000b1) [ 170.982147][T10454] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 171.061635][ T1108] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.072023][ T1108] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 171.127899][T10497] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 171.246707][ T1108] usb 5-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 171.255816][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.275240][T10507] netlink: 'syz.2.2733': attribute type 49 has an invalid length. [ 171.284403][ T1108] usb 5-1: Product: syz [ 171.321875][ T1108] usb 5-1: Manufacturer: syz [ 171.328059][T10509] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 171.331232][ T1108] usb 5-1: SerialNumber: syz [ 171.348288][T10509] [U] J"—e:ÀÆ" [ 171.409224][T10507] device ip6gretap0 entered promiscuous mode [ 171.565134][T10529] loop3: detected capacity change from 0 to 256 [ 171.682610][T10537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2750'. [ 171.776620][ T1108] usb 5-1: unit 5 not found! [ 171.781279][ T1108] usb 5-1: unit 0 not found! [ 171.823620][ T1108] usb 5-1: USB disconnect, device number 13 [ 172.026381][ T4258] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 172.099069][ T4341] udevd[4341]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 172.220177][T10557] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2758'. [ 172.377596][T10562] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2760'. [ 172.431525][ T4258] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.452134][ T4258] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 172.656595][ T4258] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0014, bcdDevice= 0.40 [ 172.686085][ T4258] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.720307][ T4258] usb 3-1: Product: syz [ 172.724821][ T4258] usb 3-1: Manufacturer: syz [ 172.750275][ T4258] usb 3-1: SerialNumber: syz [ 172.829292][T10549] loop3: detected capacity change from 0 to 32768 [ 172.942110][T10549] ialloc: diAlloc returned -5! [ 172.988583][ T4614] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 173.144119][T10611] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2779'. [ 173.149679][T10613] loop0: detected capacity change from 0 to 1024 [ 173.165024][ T4258] usb 3-1: 0:1 : does not exist [ 173.191420][ T4258] usb 3-1: cannot request logical cluster ID: 0 (err: -71) [ 173.205961][ T4258] usb 3-1: unit 80 not found! [ 173.260121][T10613] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 173.293230][ T4258] usb 3-1: USB disconnect, device number 18 [ 173.358719][ T7080] udevd[7080]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 173.396566][ T4614] usb 2-1: unable to get BOS descriptor or descriptor too short [ 173.414046][T10613] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 173.476674][ T4614] usb 2-1: config 114 has an invalid interface number: 216 but max is 0 [ 173.530234][ T4614] usb 2-1: config 114 has no interface number 0 [ 173.577281][ T4614] usb 2-1: config 114 interface 216 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 173.649363][ T4614] usb 2-1: config 114 interface 216 has no altsetting 0 [ 173.695799][T10636] xt_CT: You must specify a L4 protocol and not use inversions on it [ 173.836725][ T4614] usb 2-1: New USB device found, idVendor=2040, idProduct=7500, bcdDevice=d8.83 [ 173.866359][ T4614] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.874435][ T4614] usb 2-1: Product: syz [ 173.879769][ T4614] usb 2-1: Manufacturer: syz [ 173.888216][ T4614] usb 2-1: SerialNumber: syz [ 173.916557][T10583] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 173.925234][T10618] loop4: detected capacity change from 0 to 32768 [ 174.039411][T10618] [ 174.039411][T10618] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 174.039411][T10618] [ 174.050258][T10657] loop0: detected capacity change from 0 to 2048 [ 174.103738][ T144] [ 174.103738][ T144] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 174.103738][ T144] [ 174.116131][ T144] [ 174.116131][ T144] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 174.116131][ T144] [ 174.149917][T10657] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 174.159102][ T276] [ 174.159102][ T276] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 174.159102][ T276] [ 174.170136][ T4194] [ 174.170136][ T4194] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 174.170136][ T4194] [ 174.202563][ T4194] [ 174.202563][ T4194] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 174.202563][ T4194] [ 174.293159][T10673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2807'. [ 174.388023][ T4614] pvrusb2: Hardware description: WinTV HVR-1950 Model 750xx [ 174.407744][ T4614] usb 2-1: selecting invalid altsetting 0 [ 174.456483][ T4614] usb 2-1: USB disconnect, device number 15 [ 174.483888][ T4614] pvrusb2: Device being rendered inoperable [ 174.556496][ T4258] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 174.742595][T10697] loop3: detected capacity change from 0 to 1024 [ 174.793460][T10697] [ 174.795824][T10697] ====================================================== [ 174.802843][T10697] WARNING: possible circular locking dependency detected [ 174.809877][T10697] syzkaller #0 Not tainted [ 174.814297][T10697] ------------------------------------------------------ [ 174.821309][T10697] syz.3.2816/10697 is trying to acquire lock: [ 174.827375][T10697] ffff88805ca9b708 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_get_block+0x38f/0x1520 [ 174.838261][T10697] [ 174.838261][T10697] but task is already holding lock: [ 174.845625][T10697] ffff8880240890f8 (&sbi->alloc_mutex){+.+.}-{3:3}, at: hfsplus_block_allocate+0x92/0x8d0 [ 174.855558][T10697] [ 174.855558][T10697] which lock already depends on the new lock. [ 174.855558][T10697] [ 174.865963][T10697] [ 174.865963][T10697] the existing dependency chain (in reverse order) is: [ 174.874980][T10697] [ 174.874980][T10697] -> #1 (&sbi->alloc_mutex){+.+.}-{3:3}: [ 174.882806][T10697] __mutex_lock_common+0x1e5/0x2400 [ 174.888647][T10697] mutex_lock_nested+0x17/0x20 [ 174.893944][T10697] hfsplus_block_allocate+0x92/0x8d0 [ 174.899755][T10697] hfsplus_file_extend+0xb17/0x1a40 [ 174.905484][T10697] hfsplus_bmap_reserve+0x107/0x510 [ 174.911209][T10697] hfsplus_delete_attr+0x157/0x4b0 [ 174.916850][T10697] __hfsplus_setxattr+0x797/0x1ee0 [ 174.922489][T10697] hfsplus_setxattr+0xac/0xe0 [ 174.927696][T10697] hfsplus_user_setxattr+0x3c/0x50 [ 174.933334][T10697] __vfs_removexattr+0x3b1/0x3f0 [ 174.938798][T10697] __vfs_removexattr_locked+0x1e4/0x230 [ 174.944871][T10697] vfs_removexattr+0x7d/0x1b0 [ 174.950075][T10697] path_removexattr+0x222/0x480 [ 174.955448][T10697] __x64_sys_lremovexattr+0x59/0x70 [ 174.961166][T10697] do_syscall_64+0x4c/0xa0 [ 174.966110][T10697] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 174.972539][T10697] [ 174.972539][T10697] -> #0 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}: [ 174.981575][T10697] __lock_acquire+0x2c66/0x7b50 [ 174.987063][T10697] lock_acquire+0x19e/0x400 [ 174.992094][T10697] __mutex_lock_common+0x1e5/0x2400 [ 174.997812][T10697] mutex_lock_nested+0x17/0x20 [ 175.003100][T10697] hfsplus_get_block+0x38f/0x1520 [ 175.008640][T10697] block_read_full_page+0x308/0xd20 [ 175.014356][T10697] do_read_cache_page+0x882/0x1010 [ 175.020082][T10697] hfsplus_block_allocate+0xdc/0x8d0 [ 175.025884][T10697] hfsplus_file_extend+0xb17/0x1a40 [ 175.031589][T10697] hfsplus_get_block+0x41d/0x1520 [ 175.037122][T10697] __block_write_begin_int+0x565/0x15d0 [ 175.043177][T10697] cont_write_begin+0x598/0x7b0 [ 175.048538][T10697] hfsplus_write_begin+0x92/0xe0 [ 175.053979][T10697] __page_symlink+0x102/0x200 [ 175.059159][T10697] hfsplus_symlink+0xc6/0x230 [ 175.064336][T10697] vfs_symlink+0x245/0x3d0 [ 175.069262][T10697] do_symlinkat+0x1ab/0x6b0 [ 175.074312][T10697] __x64_sys_symlink+0x7a/0x90 [ 175.079587][T10697] do_syscall_64+0x4c/0xa0 [ 175.084512][T10697] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 175.090912][T10697] [ 175.090912][T10697] other info that might help us debug this: [ 175.090912][T10697] [ 175.101128][T10697] Possible unsafe locking scenario: [ 175.101128][T10697] [ 175.108574][T10697] CPU0 CPU1 [ 175.113922][T10697] ---- ---- [ 175.119269][T10697] lock(&sbi->alloc_mutex); [ 175.123849][T10697] lock(&HFSPLUS_I(inode)->extents_lock); [ 175.132154][T10697] lock(&sbi->alloc_mutex); [ 175.139246][T10697] lock(&HFSPLUS_I(inode)->extents_lock); [ 175.145143][T10697] [ 175.145143][T10697] *** DEADLOCK *** [ 175.145143][T10697] [ 175.153274][T10697] 5 locks held by syz.3.2816/10697: [ 175.158448][T10697] #0: ffff888024ef8460 (sb_writers#25){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 175.167657][T10697] #1: ffff88805ca9bfc0 (&type->i_mutex_dir_key#19/1){+.+.}-{3:3}, at: filename_create+0x20b/0x450 [ 175.178342][T10697] #2: ffff888024089198 (&sbi->vh_mutex){+.+.}-{3:3}, at: hfsplus_symlink+0x7d/0x230 [ 175.187806][T10697] #3: ffff88805ca9cb48 (&hip->extents_lock){+.+.}-{3:3}, at: hfsplus_file_extend+0x1ca/0x1a40 [ 175.198162][T10697] #4: ffff8880240890f8 (&sbi->alloc_mutex){+.+.}-{3:3}, at: hfsplus_block_allocate+0x92/0x8d0 [ 175.208512][T10697] [ 175.208512][T10697] stack backtrace: [ 175.214393][T10697] CPU: 0 PID: 10697 Comm: syz.3.2816 Not tainted syzkaller #0 [ 175.221836][T10697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 175.231875][T10697] Call Trace: [ 175.235151][T10697] [ 175.238065][T10697] dump_stack_lvl+0x188/0x250 [ 175.242731][T10697] ? load_image+0x410/0x410 [ 175.247218][T10697] ? show_regs_print_info+0x20/0x20 [ 175.252402][T10697] ? print_circular_bug+0x12b/0x1a0 [ 175.257582][T10697] check_noncircular+0x296/0x330 [ 175.262512][T10697] ? look_up_lock_class+0x71/0x110 [ 175.267622][T10697] ? add_chain_block+0x9b0/0x9b0 [ 175.272542][T10697] ? lockdep_lock+0xf1/0x1f0 [ 175.277118][T10697] ? mark_lock+0x94/0x320 [ 175.281436][T10697] ? _find_first_zero_bit+0xd1/0xf0 [ 175.286634][T10697] __lock_acquire+0x2c66/0x7b50 [ 175.291484][T10697] ? verify_lock_unused+0x140/0x140 [ 175.296674][T10697] ? check_path+0x21/0x40 [ 175.300984][T10697] ? check_noncircular+0x189/0x330 [ 175.306088][T10697] ? look_up_lock_class+0x71/0x110 [ 175.311195][T10697] ? add_chain_block+0x9b0/0x9b0 [ 175.316118][T10697] ? lockdep_lock+0xf1/0x1f0 [ 175.320704][T10697] lock_acquire+0x19e/0x400 [ 175.325202][T10697] ? hfsplus_get_block+0x38f/0x1520 [ 175.330389][T10697] ? __might_sleep+0xf0/0xf0 [ 175.334969][T10697] ? read_lock_is_recursive+0x10/0x10 [ 175.340323][T10697] ? hfsplus_file_extend+0xb17/0x1a40 [ 175.345678][T10697] ? cont_write_begin+0x598/0x7b0 [ 175.350688][T10697] ? vfs_symlink+0x245/0x3d0 [ 175.355263][T10697] __mutex_lock_common+0x1e5/0x2400 [ 175.360448][T10697] ? hfsplus_get_block+0x38f/0x1520 [ 175.365641][T10697] ? hfsplus_get_block+0x38f/0x1520 [ 175.370832][T10697] ? mutex_lock_io_nested+0x60/0x60 [ 175.376016][T10697] ? lockdep_init_map_type+0x98/0x900 [ 175.381373][T10697] ? slab_post_alloc_hook+0x2aa/0x380 [ 175.386729][T10697] mutex_lock_nested+0x17/0x20 [ 175.391478][T10697] hfsplus_get_block+0x38f/0x1520 [ 175.396489][T10697] ? hfsplus_ext_write_extent+0x230/0x230 [ 175.402202][T10697] ? do_raw_spin_unlock+0x11d/0x230 [ 175.407396][T10697] ? create_page_buffers+0x238/0x320 [ 175.412667][T10697] block_read_full_page+0x308/0xd20 [ 175.417855][T10697] ? hfsplus_ext_write_extent+0x230/0x230 [ 175.423563][T10697] ? block_is_partially_uptodate+0x2d0/0x2d0 [ 175.429543][T10697] ? add_to_page_cache_lru+0x2ad/0x4a0 [ 175.434987][T10697] ? hfsplus_writepage+0x30/0x30 [ 175.439909][T10697] do_read_cache_page+0x882/0x1010 [ 175.445007][T10697] hfsplus_block_allocate+0xdc/0x8d0 [ 175.450276][T10697] ? create_page_buffers+0x1c4/0x320 [ 175.455543][T10697] hfsplus_file_extend+0xb17/0x1a40 [ 175.460725][T10697] ? verify_lock_unused+0x140/0x140 [ 175.465914][T10697] ? hfsplus_get_block+0x1520/0x1520 [ 175.471180][T10697] ? memset+0x1e/0x40 [ 175.475142][T10697] ? lockdep_init_map_type+0x98/0x900 [ 175.480504][T10697] ? slab_post_alloc_hook+0x2aa/0x380 [ 175.485859][T10697] hfsplus_get_block+0x41d/0x1520 [ 175.490866][T10697] ? __lock_acquire+0x7b50/0x7b50 [ 175.495874][T10697] ? hfsplus_ext_write_extent+0x230/0x230 [ 175.501577][T10697] ? do_raw_spin_unlock+0x11d/0x230 [ 175.506764][T10697] ? create_page_buffers+0x238/0x320 [ 175.512032][T10697] __block_write_begin_int+0x565/0x15d0 [ 175.517564][T10697] ? hfsplus_ext_write_extent+0x230/0x230 [ 175.523265][T10697] ? page_zero_new_buffers+0x490/0x490 [ 175.528708][T10697] ? wait_for_stable_page+0xd9/0x110 [ 175.533977][T10697] cont_write_begin+0x598/0x7b0 [ 175.538813][T10697] ? generic_cont_expand_simple+0x1a0/0x1a0 [ 175.544691][T10697] hfsplus_write_begin+0x92/0xe0 [ 175.549618][T10697] ? hfsplus_ext_write_extent+0x230/0x230 [ 175.555320][T10697] __page_symlink+0x102/0x200 [ 175.560004][T10697] ? page_readlink+0x1a0/0x1a0 [ 175.564752][T10697] ? _raw_spin_unlock+0x24/0x40 [ 175.569584][T10697] ? hfsplus_new_inode+0x5aa/0x700 [ 175.574678][T10697] ? page_symlink+0x21/0x90 [ 175.579164][T10697] hfsplus_symlink+0xc6/0x230 [ 175.583821][T10697] ? bpf_lsm_inode_symlink+0x5/0x10 [ 175.589002][T10697] vfs_symlink+0x245/0x3d0 [ 175.593435][T10697] do_symlinkat+0x1ab/0x6b0 [ 175.597935][T10697] ? vfs_symlink+0x3d0/0x3d0 [ 175.602511][T10697] ? getname_flags+0x1f9/0x4f0 [ 175.607261][T10697] __x64_sys_symlink+0x7a/0x90 [ 175.612013][T10697] do_syscall_64+0x4c/0xa0 [ 175.616440][T10697] ? clear_bhb_loop+0x30/0x80 [ 175.621106][T10697] ? clear_bhb_loop+0x30/0x80 [ 175.625797][T10697] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 175.631678][T10697] RIP: 0033:0x7f35ec0f8159 [ 175.636076][T10697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.655774][T10697] RSP: 002b:00007f35ea350028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 175.664181][T10697] RAX: ffffffffffffffda RBX: 00007f35ec37ffa0 RCX: 00007f35ec0f8159 [ 175.672144][T10697] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 00002000000003c0 [ 175.680109][T10697] RBP: 00007f35ec18f024 R08: 0000000000000000 R09: 0000000000000000 [ 175.688072][T10697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.696028][T10697] R13: 00007f35ec380038 R14: 00007f35ec37ffa0 R15: 00007fff72e463a8 [ 175.703993][T10697] [ 175.710146][ T4995] Bluetooth: hci1: command 0x0406 tx timeout [ 175.714852][ T4614] Bluetooth: hci3: command 0x0406 tx timeout [ 175.716152][ T4995] Bluetooth: hci4: command 0x0406 tx timeout [ 175.739120][ T4614] Bluetooth: hci2: command 0x0406 tx timeout [ 175.756296][ T4258] usb 3-1: Using ep0 maxpacket: 32 [ 175.773236][ T4995] Bluetooth: hci0: command 0x0406 tx timeout [ 175.876568][ T4258] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.887534][ T4258] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 176.086407][ T4258] usb 3-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0 [ 176.095460][ T4258] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.103828][ T4258] usb 3-1: Product: syz [ 176.108035][ T4258] usb 3-1: Manufacturer: syz [ 176.112620][ T4258] usb 3-1: SerialNumber: syz [ 176.118614][ T4258] usb 3-1: config 0 descriptor?? [ 176.158222][ T4258] qmi_wwan: probe of 3-1:0.0 failed with error -22 [ 176.360608][ T21] usb 3-1: USB disconnect, device number 19