last executing test programs: 3.619873038s ago: executing program 4 (id=7175): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000002800), 0x1, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000002840)=0x3) 3.417727494s ago: executing program 4 (id=7179): r0 = syz_open_dev$video(&(0x7f0000000180), 0x800, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x6, 0x1, {0xa, @pix_mp={0x60000000, 0x2, 0x20363059, 0x6, 0x0, [{0x5, 0x6}, {0x8, 0x4}, {0x4, 0x9}, {0x80000003, 0x5}, {0x5, 0x5}, {0xfffff001, 0x3ff}, {0x7fff, 0x1}, {0x9, 0x3}], 0x4, 0x70, 0x7, 0x2}}}) 3.378671525s ago: executing program 4 (id=7181): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x100}], 0x1, &(0x7f0000000140)={0x0, 0x3938700}, 0x0, 0x0) 3.22803791s ago: executing program 4 (id=7183): r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x28002) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"0400", 0x100, 0x5, 0x4, 0x800, 0x1, "00017555d000", '\x00', "03000606", '\x00', ["8ba8e2bca7cbd6e4af000700", "ca8cacfffffffff4550400", "000000ff0000000000000020", "0000000000000000001000"]}) 3.116725334s ago: executing program 4 (id=7186): socket$inet6_mptcp(0xa, 0x1, 0x106) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052e8e510b1134200c4dc0102030109021b00010000000009044400012eafb2000905810657"], 0x0) 778.779826ms ago: executing program 3 (id=7253): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) write$tun(r0, 0x0, 0xb2) 766.525676ms ago: executing program 1 (id=7255): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/cpuinfo\x00', 0x0, 0x0) lseek(r0, 0x4e5, 0x0) 688.278569ms ago: executing program 3 (id=7256): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x400}, {r0, 0x556}], 0x2, 0x0, 0x0, 0x0) 633.49191ms ago: executing program 1 (id=7258): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000100)=@security={'security\x00', 0xe, 0x2, 0x2b0, 0xffffffff, 0x0, 0x1c8, 0xc0, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28}}, {{@ip={@multicast1, @private, 0x0, 0x0, 'veth1_to_team\x00', 'veth0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@local, @private, 0x0, 0x0, 'team0\x00', 'wlan0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "90617ae6e2ad43980c3bec242f9040a700efba1f7ef6f77096db813f042b"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) 629.36001ms ago: executing program 2 (id=7259): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x5, 0xf36, 0xffffffffffffffff, 0x2, 0x60000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) 582.102642ms ago: executing program 0 (id=7260): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, 0x0, 0xf) 529.847623ms ago: executing program 3 (id=7261): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) eventfd(0xfffffff9) 501.004184ms ago: executing program 2 (id=7262): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000540)={'dummy0\x00', &(0x7f0000000040)=@ethtool_perm_addr={0x4b, 0x2d, "5c76276f6c86622447099377e66e2ebe40decbab5fbe9cc10fa5cb7566d7135e00a137a9440831a7e20e9864cc"}}) 496.611554ms ago: executing program 0 (id=7263): r0 = io_uring_setup(0x21dd, &(0x7f00000001c0)={0x0, 0x1fffff, 0x0, 0x2, 0xd5}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001180)={0xfffffffd, 0x0, &(0x7f0000000040)=[{0x0, 0xffffffff00000005}], &(0x7f0000000180)=[0xffffffff, 0x7fffffff, 0x2, 0x6, 0x101, 0x1], 0x7}, 0x20) 470.101945ms ago: executing program 1 (id=7264): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r0, &(0x7f0000000700)=[{&(0x7f00000003c0)=""/153, 0x99}], 0x1, 0x1fd, 0x0) 382.174858ms ago: executing program 3 (id=7265): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002e00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021840000000c0a0101000000000000d955070000000900020073797a31000000000900010073797a30000000005800038054000080080003400000000248000b80340001800a0001006c696d69740000002400028008000440000000010c00024000000000000000000c000140000000000000000910"], 0x108}}, 0x0) 379.479958ms ago: executing program 2 (id=7266): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) write(r0, 0x0, 0x0) 357.886049ms ago: executing program 0 (id=7267): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="0800a9fc0da6b30a", 0x8}], 0x1, &(0x7f0000001d00)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac1414aa0011000000000000000000000001"], 0x30}, 0x0) 344.379729ms ago: executing program 1 (id=7268): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) socket$xdp(0x2c, 0x3, 0x0) 251.730612ms ago: executing program 2 (id=7269): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e22, 0x8000, @local}}, 0x4, 0x2, 0x0, 0x0, 0x50, 0x5, 0x6}, 0x9c) 251.083502ms ago: executing program 1 (id=7270): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x3a, 0x1, 0x0, &(0x7f0000000100)) 238.656222ms ago: executing program 0 (id=7271): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'unlock', ' ', 'mem'}, 0xb) 178.277854ms ago: executing program 3 (id=7272): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46}, [@call={0x85, 0x0, 0x0, 0x2a}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 177.984974ms ago: executing program 2 (id=7273): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x44b, 0x70bd28, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x4800, 0x54880}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0x8}]}}}]}, 0x3c}}, 0x4) 148.345625ms ago: executing program 1 (id=7274): r0 = syz_io_uring_setup(0xec4, &(0x7f00000003c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x34b}, &(0x7f0000000500), &(0x7f0000000600), &(0x7f0000000000)) io_uring_enter(r0, 0xe7f, 0xe876, 0x3, &(0x7f0000000040)={[0xfffffffffffffffc]}, 0x8) 137.152556ms ago: executing program 0 (id=7275): r0 = syz_socket_connect_nvme_tcp() close(r0) 61.256598ms ago: executing program 2 (id=7276): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 31.954978ms ago: executing program 3 (id=7277): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) 613.21µs ago: executing program 0 (id=7278): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000080000000000000000000000850000002a000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x609, 0xe, 0x0, &(0x7f0000000140)="dd800000000000005d8ec6f10000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 4 (id=7279): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000300)=""/198, 0xc6}, {&(0x7f00000004c0)=""/253, 0xfd}, {&(0x7f0000000400)=""/49, 0x31}, {&(0x7f00000005c0)=""/13, 0xd}, {&(0x7f0000001940)=""/4096, 0x1000}], 0x5) kernel console output (not intermixed with test programs): out_packet - usb_submit_urb failed with result -19 [ 287.283987][T14967] loop1: detected capacity change from 0 to 2048 [ 287.359425][T14972] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 287.384491][T14967] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=104, inode=18446744073709551376, rec_len=255, name_len=5 [ 287.406195][T14945] loop4: detected capacity change from 0 to 32768 [ 287.423137][T14967] Remounting filesystem read-only [ 287.480385][T14945] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 scanned by syz.4.4979 (14945) [ 287.529912][ T8505] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 287.539914][T14945] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 287.573520][T14945] BTRFS info (device loop4): enabling ssd optimizations [ 287.606221][T14980] ieee802154 phy0 wpan0: encryption failed: -22 [ 287.612772][T14945] BTRFS info (device loop4): not using ssd optimizations [ 287.637705][T14945] BTRFS info (device loop4): turning off barriers [ 287.644337][T14945] BTRFS info (device loop4): using free space tree [ 287.686894][T14945] BTRFS info (device loop4): has skinny extents [ 287.762418][T14988] netlink: 800 bytes leftover after parsing attributes in process `syz.1.5000'. [ 287.812721][T14988] netlink: 1301 bytes leftover after parsing attributes in process `syz.1.5000'. [ 288.146748][ T8505] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 288.172338][ T8505] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 288.214746][ T8505] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 288.449404][ T8505] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 288.460687][ T8505] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.484792][ T8505] usb 4-1: Product: syz [ 288.489706][ T8505] usb 4-1: Manufacturer: syz [ 288.494344][ T8505] usb 4-1: SerialNumber: syz [ 288.666670][ T4234] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 288.781508][T15046] netlink: 5 bytes leftover after parsing attributes in process `syz.2.5018'. [ 288.813402][T15046] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 288.871937][ T8505] usb 4-1: Can't get UAC3 power state for id 10 [ 288.936781][ T4234] usb 2-1: Using ep0 maxpacket: 16 [ 288.967259][ T8505] usb 4-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4 [ 288.993763][ T8505] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 289.053335][ T8505] usb 4-1: USB disconnect, device number 21 [ 289.080226][ T4234] usb 2-1: config 0 has no interfaces? [ 289.276918][ T4234] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 289.288179][ T4234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.297422][ T4234] usb 2-1: Product: syz [ 289.301732][ T4234] usb 2-1: Manufacturer: syz [ 289.316793][ T4234] usb 2-1: SerialNumber: syz [ 289.367797][ T4234] r8152-cfgselector 2-1: config 0 descriptor?? [ 289.385594][T15074] ipt_CLUSTERIP: no config found for 127.0.0.1, need 'new' [ 289.423684][ T4517] udevd[4517]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 289.687051][ T4234] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 289.815438][T15096] netlink: 'syz.2.5040': attribute type 8 has an invalid length. [ 289.893108][ T4234] usb 2-1: USB disconnect, device number 22 [ 289.999126][T15111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5049'. [ 290.168088][T15119] loop2: detected capacity change from 0 to 16 [ 290.252223][T15119] erofs: (device loop2): mounted with root inode @ nid 36. [ 290.331028][T15131] loop4: detected capacity change from 0 to 256 [ 290.555693][T15143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5066'. [ 290.596504][ T4234] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 290.671792][ T4233] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 290.707480][T15151] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5069'. [ 290.915797][T15163] UBIFS error (pid: 15163): cannot open "(null)", error -22 [ 290.936655][ T4233] usb 4-1: Using ep0 maxpacket: 32 [ 290.976944][ T4234] usb 3-1: config 1 has an invalid descriptor of length 141, skipping remainder of the config [ 290.996554][ T4234] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 58823, setting to 1024 [ 291.014092][ T4234] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1024 [ 291.024464][ T4234] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 291.086869][ T4233] usb 4-1: config 239 has an invalid descriptor of length 0, skipping remainder of the config [ 291.106724][ T4233] usb 4-1: config 239 has 1 interface, different from the descriptor's value: 3 [ 291.107780][ T4525] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 291.206691][ T4234] usb 3-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40 [ 291.220589][ T4234] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.229264][ T4234] usb 3-1: Product: syz [ 291.233551][ T4234] usb 3-1: Manufacturer: syz [ 291.240933][ T4234] usb 3-1: SerialNumber: syz [ 291.254172][T15175] tmpfs: Bad value for 'mpol' [ 291.277138][T15119] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 291.296684][ T4233] usb 4-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice= 0.40 [ 291.316073][ T4233] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.336719][ T4233] usb 4-1: Product: syz [ 291.340939][ T4233] usb 4-1: Manufacturer: syz [ 291.345563][ T4233] usb 4-1: SerialNumber: syz [ 291.406486][ T4525] usb 2-1: Using ep0 maxpacket: 32 [ 291.536869][ T4525] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 291.565998][ T4525] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 291.583385][ T4525] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 291.591776][T15194] openvswitch: netlink: Actions may not be safe on all matching packets [ 291.608446][ T4525] usb 2-1: config 1 has no interface number 0 [ 291.614748][ T4525] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 291.624936][ T4525] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 291.640704][ T4525] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 291.674177][ T4525] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.715103][T15198] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5092'. [ 291.740818][ T4525] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 291.791603][ T4234] usb 3-1: USB disconnect, device number 23 [ 291.856789][ T4233] usb 4-1: unit 2 not found! [ 291.911654][ T4233] usb 4-1: USB disconnect, device number 22 [ 291.957236][ T4525] snd_usb_pod 2-1:1.1: invalid control EP [ 291.965490][ T4346] udevd[4346]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 291.986736][ T4525] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 292.009167][ T4525] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 292.027257][ T4525] snd_usb_pod: probe of 2-1:1.1 failed with error -22 [ 292.130464][T15213] loop4: detected capacity change from 0 to 512 [ 292.183370][T15217] loop2: detected capacity change from 0 to 256 [ 292.197032][T15213] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 292.206776][ T4515] udevd[4515]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:239.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 292.239711][ T4233] usb 2-1: USB disconnect, device number 23 [ 292.256583][T15213] EXT4-fs (loop4): Mount option "dax=always" incompatible with ext3 [ 292.298880][T15219] netlink: 'syz.0.5102': attribute type 21 has an invalid length. [ 292.315480][T15221] sctp: [Deprecated]: syz.3.5103 (pid 15221) Use of int in maxseg socket option. [ 292.315480][T15221] Use struct sctp_assoc_value instead [ 292.379010][T15217] FAT-fs (loop2): Directory bread(block 64) failed [ 292.417600][T15213] gfs2: Unexpected value for 'barrier' [ 292.436550][T15217] FAT-fs (loop2): Directory bread(block 65) failed [ 292.486507][T15217] FAT-fs (loop2): Directory bread(block 66) failed [ 292.497025][T15217] FAT-fs (loop2): Directory bread(block 67) failed [ 292.503694][T15217] FAT-fs (loop2): Directory bread(block 68) failed [ 292.536013][T15217] FAT-fs (loop2): Directory bread(block 69) failed [ 292.562078][T15217] FAT-fs (loop2): Directory bread(block 70) failed [ 292.596492][T15217] FAT-fs (loop2): Directory bread(block 71) failed [ 292.603528][T15217] FAT-fs (loop2): Directory bread(block 72) failed [ 292.626495][T15217] FAT-fs (loop2): Directory bread(block 73) failed [ 292.897313][T15243] openvswitch: netlink: Missing key (keys=40, expected=100) [ 292.936481][ T4233] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 293.079086][T15258] netlink: 'syz.2.5120': attribute type 1 has an invalid length. [ 293.306753][ T4233] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 293.315114][ T4233] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 293.352007][ T4233] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 293.365506][T15281] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5130'. [ 293.377988][ T4233] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 293.396463][ T4233] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 293.448292][ T4233] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 255, setting to 64 [ 293.478649][ T4233] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 293.509032][T15287] netlink: 'syz.2.5134': attribute type 29 has an invalid length. [ 293.653033][T15297] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5138'. [ 293.696706][ T4233] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 293.719933][ T4233] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.741378][ T4233] usb 4-1: Product: syz [ 293.749348][ T4233] usb 4-1: Manufacturer: syz [ 293.753997][ T4233] usb 4-1: SerialNumber: syz [ 293.804995][T15305] loop2: detected capacity change from 0 to 1024 [ 293.817355][ T4233] usb 4-1: config 0 descriptor?? [ 293.856791][T15231] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 293.877410][ T4233] hub 4-1:0.0: bad descriptor, ignoring hub [ 293.883423][ T4233] hub: probe of 4-1:0.0 failed with error -5 [ 293.894280][T15305] EXT4-fs (loop2): Ignoring removed nobh option [ 293.915352][T15305] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 293.933845][ T4233] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input16 [ 293.973164][T15314] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5146'. [ 294.040232][T15305] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2842c01c, mo2=0003] [ 294.086307][T15305] System zones: 0-1, 3-8 [ 294.097081][T15305] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000007,delalloc,noinit_itable,nogrpid,jqfmt=vfsv0,nobh,grpid,mb_optimize_scan=0x0000000000000000,jqfmt=vfsv0,dioread_nolock,,errors=continue. Quota mode: none. [ 294.122254][T15305] ext4 filesystem being mounted at /938/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.178078][T15305] EXT4-fs error (device loop2): ext4_xattr_block_list:713: inode #15: comm syz.2.5142: corrupted xattr block 128 [ 294.231635][ T4234] usb 4-1: USB disconnect, device number 23 [ 294.425628][ T4522] kernel write not supported for file /1893/net/rt_acct (pid: 4522 comm: kworker/1:12) [ 294.677834][T15356] xt_TCPMSS: Only works on TCP SYN packets [ 294.782156][T15363] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5168'. [ 294.899150][T15372] netlink: 'syz.3.5173': attribute type 1 has an invalid length. [ 294.917729][ T4522] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 295.029015][T15379] loop4: detected capacity change from 0 to 256 [ 295.111169][ T4234] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 295.124198][T15379] FAT-fs (loop4): Directory bread(block 64) failed [ 295.138516][T15379] FAT-fs (loop4): Directory bread(block 65) failed [ 295.145174][T15379] FAT-fs (loop4): Directory bread(block 66) failed [ 295.185310][T15379] FAT-fs (loop4): Directory bread(block 67) failed [ 295.206766][ T4522] usb 1-1: Using ep0 maxpacket: 8 [ 295.212544][T15379] FAT-fs (loop4): Directory bread(block 68) failed [ 295.231284][T15379] FAT-fs (loop4): Directory bread(block 69) failed [ 295.259771][T15379] FAT-fs (loop4): Directory bread(block 70) failed [ 295.259990][ C0] sd 0:0:1:0: tag#6243 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 295.276278][ C0] sd 0:0:1:0: tag#6243 CDB: opcode=0xdf (vendor) [ 295.282813][ C0] sd 0:0:1:0: tag#6243 CDB[00]: df da ea 67 37 29 de ee 3f 2e 48 1d 98 f9 14 a8 [ 295.283733][T15379] FAT-fs (loop4): Directory bread(block 71) failed [ 295.291917][ C0] sd 0:0:1:0: tag#6243 CDB[10]: 69 9e e0 fc 14 85 5a c8 92 10 d9 b6 a2 30 85 8a [ 295.291939][ C0] sd 0:0:1:0: tag#6243 CDB[20]: ba [ 295.356536][T15379] FAT-fs (loop4): Directory bread(block 72) failed [ 295.363131][T15379] FAT-fs (loop4): Directory bread(block 73) failed [ 295.370040][ T4522] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 295.386628][ T4522] usb 1-1: config 1 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 295.419659][ T4522] usb 1-1: config 1 interface 0 has no altsetting 0 [ 295.517054][T15399] comedi comedi1: 8255: I/O port conflict (0x2,4) [ 295.523683][T15399] comedi comedi1: 8255: I/O port conflict (0x4,4) [ 295.547136][T15399] comedi comedi1: 8255: I/O port conflict (0x9,4) [ 295.553645][T15399] comedi comedi1: 8255: I/O port conflict (0x800afa3,4) [ 295.586677][T15399] comedi comedi1: 8255: I/O port conflict (0x3,4) [ 295.606794][ T4234] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 295.617441][T15399] comedi comedi1: 8255: I/O port conflict (0x2,4) [ 295.624769][ T4234] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 0 [ 295.655509][ T4234] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 295.668935][ T4522] usb 1-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.40 [ 295.686570][ T4522] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.694626][ T4522] usb 1-1: Product: syz [ 295.706465][ T4522] usb 1-1: Manufacturer: syz [ 295.711120][ T4522] usb 1-1: SerialNumber: syz [ 295.769713][T15405] device bond2 entered promiscuous mode [ 295.775778][T15405] 8021q: adding VLAN 0 to HW filter on device bond2 [ 295.782990][ T4234] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 295.792314][ T4234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 295.801384][ T4234] usb 3-1: SerialNumber: syz [ 295.990693][ T26] audit: type=1326 audit(1779321308.602:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15419 comm="syz.1.5196" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f661d4e59 code=0x7ffc0000 [ 296.018162][ T4522] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input17 [ 296.063525][ T26] audit: type=1326 audit(1779321308.622:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15419 comm="syz.1.5196" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f661d4e59 code=0x7ffc0000 [ 296.088573][ T3546] bcm5974 1-1:1.0: could not read from device [ 296.097020][ T4234] usbtest 3-1:1.0: Linux user mode ISO test driver [ 296.106156][ T4234] usbtest 3-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 296.132768][ T26] audit: type=1326 audit(1779321308.622:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15419 comm="syz.1.5196" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f661d4e59 code=0x7ffc0000 [ 296.159859][ T4234] usb 3-1: USB disconnect, device number 24 [ 296.167337][ T26] audit: type=1326 audit(1779321308.632:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15419 comm="syz.1.5196" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7f9f661d4e59 code=0x7ffc0000 [ 296.196252][ T4347] udevd[4347]: setting owner of /dev/bus/usb/003/024 to uid=0, gid=0 failed: No such file or directory [ 296.212712][ T4522] usb 1-1: USB disconnect, device number 15 [ 296.221477][ T26] audit: type=1326 audit(1779321308.632:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15419 comm="syz.1.5196" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f661d4e59 code=0x7ffc0000 [ 296.306113][ T26] audit: type=1326 audit(1779321308.632:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15419 comm="syz.1.5196" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f661d4e59 code=0x7ffc0000 [ 296.364908][ T26] audit: type=1326 audit(1779321308.632:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15419 comm="syz.1.5196" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9f661d4e59 code=0x7ffc0000 [ 296.425331][ T26] audit: type=1326 audit(1779321308.642:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15419 comm="syz.1.5196" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9f661d4e59 code=0x7ffc0000 [ 296.830666][T15464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5217'. [ 297.123540][T15482] netlink: 168 bytes leftover after parsing attributes in process `syz.4.5227'. [ 297.132753][ T4522] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 297.172167][T15482] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5227'. [ 297.192139][T15482] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5227'. [ 297.223346][T15482] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5227'. [ 297.417406][ T4522] usb 2-1: Using ep0 maxpacket: 16 [ 297.546771][ T4522] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.566714][ T4522] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 255, changing to 11 [ 297.595124][ T4522] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 57872, setting to 1024 [ 297.636435][ T4522] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 297.677916][ T4522] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 297.723225][ T4522] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 297.760659][ T4522] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 297.793766][ T4522] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.837943][ T4522] usb 2-1: config 0 descriptor?? [ 297.856160][T15511] sctp: [Deprecated]: syz.3.5241 (pid 15511) Use of struct sctp_assoc_value in delayed_ack socket option. [ 297.856160][T15511] Use struct sctp_sack_info instead [ 297.934742][T15514] loop4: detected capacity change from 0 to 256 [ 298.026710][ T4522] rc_core: IR keymap rc-hauppauge not found [ 298.033239][ T4522] Registered IR keymap rc-empty [ 298.060930][ T4522] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 298.077974][T15514] FAT-fs (loop4): Directory bread(block 64) failed [ 298.094831][T15514] FAT-fs (loop4): Directory bread(block 65) failed [ 298.126133][T15514] FAT-fs (loop4): Directory bread(block 66) failed [ 298.133265][ T4522] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 298.151004][T15514] FAT-fs (loop4): Directory bread(block 67) failed [ 298.171494][T15514] FAT-fs (loop4): Directory bread(block 68) failed [ 298.186179][ T4522] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 298.212039][T15514] FAT-fs (loop4): Directory bread(block 69) failed [ 298.227731][ T4522] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input18 [ 298.241488][T15514] FAT-fs (loop4): Directory bread(block 70) failed [ 298.261701][T15514] FAT-fs (loop4): Directory bread(block 71) failed [ 298.279220][T15514] FAT-fs (loop4): Directory bread(block 72) failed [ 298.285986][ T4522] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 298.306441][ C1] mceusb 2-1:0.0: Error: urb status = -75 [ 298.312822][T15514] FAT-fs (loop4): Directory bread(block 73) failed [ 298.346796][ T4522] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 298.386549][ T4233] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 298.416694][ T4522] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 298.456609][ T4522] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 298.496909][ T4522] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 298.536573][ T4522] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 298.566722][ T4522] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 298.605640][ T4522] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 298.637414][T15535] loop4: detected capacity change from 0 to 256 [ 298.647004][ T4522] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 298.667285][T15535] exfat: Deprecated parameter 'utf8' [ 298.676895][ T4233] usb 3-1: too many configurations: 15, using maximum allowed: 8 [ 298.696329][T15535] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x47dfe6af, utbl_chksum : 0xe619d30d) [ 298.696612][ T4522] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 298.788496][ T4522] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 298.806447][ T4522] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 298.829042][ T4522] usb 2-1: USB disconnect, device number 24 [ 298.915098][T15527] loop3: detected capacity change from 0 to 32768 [ 298.951251][T15527] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 scanned by syz.3.5248 (15527) [ 299.003265][T15549] No such timeout policy "syz1" [ 299.035128][T15527] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 299.056852][T15527] BTRFS info (device loop3): enabling ssd optimizations [ 299.063890][T15527] BTRFS info (device loop3): not using ssd optimizations [ 299.119355][T15527] BTRFS info (device loop3): turning off barriers [ 299.149718][T15527] BTRFS info (device loop3): using free space tree [ 299.167889][T15527] BTRFS info (device loop3): has skinny extents [ 299.317265][ T4233] usb 3-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 299.338883][ T4233] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.372265][ T4233] usb 3-1: config 0 descriptor?? [ 299.489657][ T4233] hub 3-1:0.0: Invalid hub with more than one config or interface [ 299.520469][ T4233] hub: probe of 3-1:0.0 failed with error -22 [ 299.554893][ T4233] sierra 3-1:0.0: Sierra USB modem converter detected [ 299.709452][ T4233] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 299.731831][ T4515] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 10 /dev/loop3 scanned by udevd (4515) [ 299.744561][ T4233] usb 3-1: USB disconnect, device number 25 [ 299.761879][ T4233] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 299.780301][ T4233] sierra 3-1:0.0: device disconnected [ 300.054558][T15614] netlink: 'syz.1.5279': attribute type 10 has an invalid length. [ 300.202366][T15614] team0: Device veth1_vlan is already a lower device of the team interface [ 300.388217][T15627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5285'. [ 300.422747][T15634] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 300.430870][T15631] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5284'. [ 300.803396][T15658] netlink: 'syz.2.5297': attribute type 19 has an invalid length. [ 301.102560][T15683] netlink: 1076 bytes leftover after parsing attributes in process `syz.4.5307'. [ 301.627905][T15715] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5321'. [ 301.814306][T15728] tmpfs: Bad value for 'mpol' [ 302.147230][T15751] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5336'. [ 302.427953][T15772] ieee802154 phy0 wpan0: encryption failed: -22 [ 302.499488][T15766] loop3: detected capacity change from 0 to 4096 [ 302.565919][T15779] loop1: detected capacity change from 0 to 256 [ 302.637717][T15766] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 302.687347][T15779] FAT-fs (loop1): Directory bread(block 64) failed [ 302.693952][T15779] FAT-fs (loop1): Directory bread(block 65) failed [ 302.784672][T15779] FAT-fs (loop1): Directory bread(block 66) failed [ 302.846593][T15779] FAT-fs (loop1): Directory bread(block 67) failed [ 302.870856][T15779] FAT-fs (loop1): Directory bread(block 68) failed [ 302.933516][ T154] ntfs3: loop3: ntfs3_write_inode r=3 failed, -22. [ 302.947590][T15779] FAT-fs (loop1): Directory bread(block 69) failed [ 302.954652][T15779] FAT-fs (loop1): Directory bread(block 70) failed [ 302.970164][ T4195] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 302.981260][ T4195] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 303.010467][T15779] FAT-fs (loop1): Directory bread(block 71) failed [ 303.011182][ T4195] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 303.042035][T15779] FAT-fs (loop1): Directory bread(block 72) failed [ 303.096928][ T155] ntfs3: loop3: ntfs3_write_inode r=3 failed, -22. [ 303.107155][ T4195] ntfs3: loop3: ntfs_evict_inode r=3 failed, -22. [ 303.116452][T15779] FAT-fs (loop1): Directory bread(block 73) failed [ 303.534054][T15828] xt_hashlimit: max too large, truncated to 1048576 [ 303.629406][T15833] loop4: detected capacity change from 0 to 64 [ 303.638637][T15836] trusted_key: encrypted_key: master key parameter is missing [ 303.882895][T15850] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (2049) [ 304.115052][T15862] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5381'. [ 304.364251][T15878] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 304.382932][T15878] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 304.426635][T15878] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 304.776586][ T1326] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 305.046724][ T1326] usb 3-1: Using ep0 maxpacket: 16 [ 305.206789][ T1326] usb 3-1: config index 0 descriptor too short (expected 4495, got 71) [ 305.224601][ T1326] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 305.224632][ T1326] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.224653][ T1326] usb 3-1: config 0 has no interface number 0 [ 305.244552][T15928] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5414'. [ 305.346712][T15932] x_tables: duplicate underflow at hook 3 [ 305.416232][ T1326] usb 3-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 305.416267][ T1326] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.416288][ T1326] usb 3-1: Product: syz [ 305.416303][ T1326] usb 3-1: Manufacturer: syz [ 305.416319][ T1326] usb 3-1: SerialNumber: syz [ 305.418307][ T1326] usb 3-1: config 0 descriptor?? [ 305.688787][ T1326] usb 3-1: USB disconnect, device number 26 [ 305.941363][T15961] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5430'. [ 305.961086][T15924] loop1: detected capacity change from 0 to 32768 [ 305.967840][T15961] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5430'. [ 306.017761][T15964] netlink: 'syz.0.5432': attribute type 10 has an invalid length. [ 306.074212][T15964] team0: Device veth1_vlan failed to register rx_handler [ 306.137219][T15924] XFS (loop1): Mounting V5 Filesystem [ 306.180359][T15966] netlink: 'syz.4.5431': attribute type 4 has an invalid length. [ 306.236808][T15966] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5431'. [ 306.289469][T15924] XFS (loop1): Ending clean mount [ 306.292237][T15979] loop2: detected capacity change from 0 to 128 [ 306.371998][ T4188] XFS (loop1): Unmounting Filesystem [ 306.737827][T15997] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5445'. [ 306.793176][T16001] loop2: detected capacity change from 0 to 8 [ 306.826735][T15038] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 306.867784][T16001] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 306.907394][T16001] cramfs: bad data blocksize 4294934200 [ 306.924001][T16001] cramfs: bad data blocksize 4294934200 [ 306.937127][ T26] audit: type=1800 audit(1779321319.552:15): pid=16001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5448" name="file1" dev="loop2" ino=33092 res=0 errno=0 [ 306.971008][ T4271] udevd[4271]: incorrect cramfs checksum on /dev/loop2 [ 307.042091][T16013] netlink: 'syz.2.5453': attribute type 1 has an invalid length. [ 307.066669][T15038] usb 1-1: Using ep0 maxpacket: 32 [ 307.186803][T15038] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.227524][T15038] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 307.243492][T16023] netlink: 'syz.4.5457': attribute type 10 has an invalid length. [ 307.262305][T16023] netlink: 'syz.4.5457': attribute type 10 has an invalid length. [ 307.267983][T15038] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 307.308792][T16027] nfs: Unknown parameter '/dev/ocfs2_control' [ 307.310632][T15038] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 307.556676][T15038] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 307.592628][T15038] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 307.637376][T15038] usb 1-1: Product: syz [ 307.651811][T15038] usb 1-1: Manufacturer: syz [ 307.672902][T15038] usb 1-1: SerialNumber: syz [ 307.697541][T15038] usb 1-1: config 0 descriptor?? [ 307.778900][T15038] usb 1-1: no audio or video endpoints found [ 307.821275][T16056] netlink: 'syz.1.5473': attribute type 3 has an invalid length. [ 307.883490][T16056] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.5473'. [ 307.987352][T15038] usb 1-1: USB disconnect, device number 16 [ 308.109072][T16072] bond0: (slave netdevsim0): Error: Device can not be enslaved while up [ 308.264020][T16084] netlink: 'syz.2.5487': attribute type 4 has an invalid length. [ 308.690829][T16114] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5502'. [ 309.051104][T16141] kAFS: No cell specified [ 309.150693][T16148] loop2: detected capacity change from 0 to 128 [ 309.300113][T16155] loop3: detected capacity change from 0 to 24 [ 309.466619][ T4247] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 309.502060][T16155] romfs: read error for inode 0x8000 [ 309.541469][T16171] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5530'. [ 309.682972][T16179] loop2: detected capacity change from 0 to 128 [ 309.700628][T16181] netlink: 'syz.3.5533': attribute type 5 has an invalid length. [ 309.707535][ T4247] usb 1-1: Using ep0 maxpacket: 32 [ 309.814419][T16188] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5538'. [ 309.826685][ T4247] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.846465][ T4247] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 309.855546][T16188] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5538'. [ 310.026723][ T4247] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 310.049005][ T4247] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.058756][T16197] x_tables: duplicate underflow at hook 4 [ 310.096869][ T4247] usb 1-1: Product: syz [ 310.101100][ T4247] usb 1-1: Manufacturer: syz [ 310.147828][ T4247] usb 1-1: SerialNumber: syz [ 310.165036][ T4247] usb 1-1: config 0 descriptor?? [ 310.426868][ T4247] snd-usb-6fire 1-1:0.0: unknown device firmware state received from device: [ 310.445945][ T4247] f0 e4 3d a7 d3 60 4f fe [ 310.458520][T16223] netlink: 'syz.1.5548': attribute type 21 has an invalid length. [ 310.461263][ T4247] snd-usb-6fire: probe of 1-1:0.0 failed with error -5 [ 310.517448][T16228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5550'. [ 310.630189][ T4247] usb 1-1: USB disconnect, device number 17 [ 310.874414][T16246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5558'. [ 310.907393][T16248] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5559'. [ 310.976728][T16248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5559'. [ 310.992966][T16248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5559'. [ 311.334541][T16273] netlink: 'syz.2.5570': attribute type 1 has an invalid length. [ 311.444088][T16280] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 311.543782][T16280] overlayfs: conflicting options: userxattr,metacopy=on [ 311.692427][T16296] xt_ecn: cannot match TCP bits for non-tcp packets [ 311.913434][ T7707] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 312.287583][ T7707] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.306566][ T7707] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 312.315665][ T7707] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.347213][ T7707] usb 4-1: config 0 descriptor?? [ 312.366861][T15038] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 312.514294][T16351] xt_TCPMSS: Only works on TCP SYN packets [ 312.616945][ T4247] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 312.676625][ T4525] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 312.731147][T15038] usb 2-1: config 0 has an invalid interface number: 11 but max is 0 [ 312.759931][T15038] usb 2-1: config 0 has no interface number 0 [ 312.766092][T15038] usb 2-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 312.789878][T15038] usb 2-1: config 0 interface 11 altsetting 253 endpoint 0x87 has invalid maxpacket 65535, setting to 64 [ 312.805319][T15038] usb 2-1: config 0 interface 11 has no altsetting 0 [ 312.815812][T15038] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 312.832404][ T4234] usb 4-1: USB disconnect, device number 24 [ 312.833183][T15038] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.866097][T15038] usb 2-1: config 0 descriptor?? [ 312.906842][T16323] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 312.920553][T16323] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 312.950175][T15038] keyspan 2-1:0.11: Keyspan 2 port adapter converter detected [ 312.960397][T15038] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 81 [ 312.969385][T15038] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 82 [ 312.977857][T15038] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 1 [ 312.985724][T15038] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 2 [ 312.993829][T15038] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 85 [ 313.002294][ T4247] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 71, changing to 10 [ 313.013651][T15038] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 5 [ 313.025799][T15038] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 313.047645][T15038] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 83 [ 313.064082][T15038] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 84 [ 313.074421][T15038] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 3 [ 313.083157][T15038] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 4 [ 313.091241][T15038] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 86 [ 313.099684][T15038] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 6 [ 313.107459][ T4525] usb 3-1: unable to get BOS descriptor or descriptor too short [ 313.115393][T15038] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 313.176833][ T4247] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 313.194551][ T4247] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.203542][ T4247] usb 1-1: Product: syz [ 313.209045][ T4247] usb 1-1: Manufacturer: syz [ 313.213809][ T4247] usb 1-1: SerialNumber: syz [ 313.217615][ T4525] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 313.239490][ T4525] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 313.260444][ T4525] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 313.273110][ T4234] usb 2-1: USB disconnect, device number 25 [ 313.284539][ T4234] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 313.301698][ T4234] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 313.312498][ T4234] keyspan 2-1:0.11: device disconnected [ 313.467095][ T4525] usb 3-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 313.476232][ T4525] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.506476][T15038] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 313.514126][ T4525] usb 3-1: Product: syz [ 313.514149][ T4525] usb 3-1: Manufacturer: syz [ 313.526507][ T4525] usb 3-1: SerialNumber: syz [ 313.533135][T16377] netlink: 'syz.3.5623': attribute type 12 has an invalid length. [ 313.541995][T16377] __nla_validate_parse: 1 callbacks suppressed [ 313.542009][T16377] netlink: 197276 bytes leftover after parsing attributes in process `syz.3.5623'. [ 313.647754][T16381] 8021q: adding VLAN 0 to HW filter on device bond3 [ 313.651913][ T4247] usb 1-1: MIDIStreaming interface descriptor not found [ 313.723442][ T4247] usb 1-1: USB disconnect, device number 18 [ 313.776515][T15038] usb 5-1: Using ep0 maxpacket: 8 [ 313.896624][T15038] usb 5-1: config 0 has an invalid interface number: 33 but max is 1 [ 313.915039][T15038] usb 5-1: config 0 has no interface number 1 [ 313.929339][T15038] usb 5-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 313.942918][T15038] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247 [ 313.973908][ T4525] usb 3-1: USB disconnect, device number 27 [ 313.999995][ T4355] udevd[4355]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 314.026691][ T4522] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 314.106914][T15038] usb 5-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 314.130741][T15038] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.160208][T15038] usb 5-1: Product: syz [ 314.174698][T15038] usb 5-1: Manufacturer: syz [ 314.184811][T15038] usb 5-1: SerialNumber: syz [ 314.195866][T15038] usb 5-1: config 0 descriptor?? [ 314.255774][T15038] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 314.296489][ T4522] usb 4-1: Using ep0 maxpacket: 32 [ 314.318196][ T4523] udevd[4523]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 314.416841][ T4522] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.460621][ T2426] pvrusb2: Invalid read control endpoint [ 314.466711][T15038] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 314.514714][ T2426] usb 5-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 314.536327][ T2426] usb 5-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 314.553288][T15038] usb 5-1: USB disconnect, device number 28 [ 314.637181][ T4522] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 314.665042][ T4522] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 314.703548][ T4522] usb 4-1: Product: syz [ 314.718707][ T4522] usb 4-1: Manufacturer: syz [ 314.723409][ T4522] usb 4-1: SerialNumber: syz [ 314.758320][ T4522] usb 4-1: config 0 descriptor?? [ 314.797361][ T4522] hub 4-1:0.0: bad descriptor, ignoring hub [ 314.803336][ T4522] hub: probe of 4-1:0.0 failed with error -5 [ 314.841358][T16426] loop1: detected capacity change from 0 to 64 [ 314.986286][T16428] loop2: detected capacity change from 0 to 4096 [ 315.146807][ T4247] usb 4-1: USB disconnect, device number 25 [ 315.255514][ T4194] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 315.272543][ T4194] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 315.346244][T16446] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 315.602240][T16461] loop4: detected capacity change from 0 to 2048 [ 315.650060][T16465] device vlan0 entered promiscuous mode [ 315.694573][T16461] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 315.704033][T16468] delete_channel: no stack [ 316.066594][ T4522] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 316.285601][T16501] netlink: 'syz.0.5683': attribute type 8 has an invalid length. [ 316.303967][T16501] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.5683'. [ 316.451781][ T4522] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 316.501005][ T4522] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 316.511151][ T4522] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.606303][T16514] loop0: detected capacity change from 0 to 256 [ 316.620617][ T4522] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 316.749015][T16514] FAT-fs (loop0): error, clusters badly computed (0 != 128) [ 316.796673][T16514] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 316.857694][T16524] usb usb8: usbfs: process 16524 (syz.1.5694) did not claim interface 0 before use [ 316.894610][T16526] netlink: 'syz.4.5695': attribute type 8 has an invalid length. [ 317.052541][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.058991][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.111671][T16536] netlink: 'syz.4.5700': attribute type 32 has an invalid length. [ 317.349733][T16550] loop0: detected capacity change from 0 to 256 [ 317.446668][ T4234] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 317.500023][T16550] FAT-fs (loop0): Directory bread(block 64) failed [ 317.510376][T16550] FAT-fs (loop0): Directory bread(block 65) failed [ 317.531790][T16550] FAT-fs (loop0): Directory bread(block 66) failed [ 317.544209][T16550] FAT-fs (loop0): Directory bread(block 67) failed [ 317.558161][T16550] FAT-fs (loop0): Directory bread(block 68) failed [ 317.571596][T16550] FAT-fs (loop0): Directory bread(block 69) failed [ 317.594257][T16550] FAT-fs (loop0): Directory bread(block 70) failed [ 317.609380][T16550] FAT-fs (loop0): Directory bread(block 71) failed [ 317.640040][T16550] FAT-fs (loop0): Directory bread(block 72) failed [ 317.662417][T16550] FAT-fs (loop0): Directory bread(block 73) failed [ 317.706480][ T4234] usb 2-1: Using ep0 maxpacket: 8 [ 317.726888][ T4522] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 317.885908][T16568] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.897062][ T4234] usb 2-1: unable to get BOS descriptor or descriptor too short [ 317.956735][ T4522] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 317.971758][ T4522] stv0680 3-1:4.0: last error: 86, command = 0x32 [ 318.003850][ T4522] usb 3-1: USB disconnect, device number 28 [ 318.013393][T16576] 9pnet: Insufficient options for proto=fd [ 318.030830][ T4234] usb 2-1: config 6 has an invalid interface number: 4 but max is 1 [ 318.061158][ T4234] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 318.092312][ T4234] usb 2-1: config 6 has 1 interface, different from the descriptor's value: 2 [ 318.111696][ T4234] usb 2-1: config 6 has no interface number 0 [ 318.305756][T16586] loop3: detected capacity change from 0 to 512 [ 318.316769][ T4234] usb 2-1: New USB device found, idVendor=1235, idProduct=0001, bcdDevice= 6.d0 [ 318.346251][ T4234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.365128][ T4234] usb 2-1: Product: syz [ 318.373349][ T4234] usb 2-1: Manufacturer: syz [ 318.391116][ T4234] usb 2-1: SerialNumber: syz [ 318.411427][T16586] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 318.544010][T16586] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.5726: casefold flag without casefold feature [ 318.575414][T16586] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.5726: couldn't read orphan inode 15 (err -117) [ 318.626531][T16586] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x0000000000000000,dioread_nolock,init_itable,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 318.678587][T16607] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5733'. [ 318.782231][ T4234] usb 2-1: USB disconnect, device number 26 [ 318.948303][T16623] netlink: 'syz.4.5743': attribute type 7 has an invalid length. [ 318.991212][T16623] netlink: 'syz.4.5743': attribute type 1 has an invalid length. [ 319.017534][T16623] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.5743'. [ 319.036107][T16627] netlink: 220 bytes leftover after parsing attributes in process `syz.2.5744'. [ 319.050524][T16621] loop0: detected capacity change from 0 to 4096 [ 319.081253][ T4355] udevd[4355]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:6.4/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 319.131606][T16621] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 319.266774][T16621] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 319.378479][ T154] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22. [ 319.388593][ T4193] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 319.394937][ T4193] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 319.465060][ T4193] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 319.478292][ T1281] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22. [ 319.501173][ T4193] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 319.528557][ T4193] ntfs3: loop0: ntfs_evict_inode r=3 failed, -22. [ 319.685913][T16661] loop4: detected capacity change from 0 to 2048 [ 319.734684][T16661] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 319.764202][T16661] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 319.980463][T16682] device vlan0 entered promiscuous mode [ 320.000034][T16683] loop2: detected capacity change from 0 to 512 [ 320.011880][T16682] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 320.505864][T16725] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 320.673295][T16737] loop4: detected capacity change from 0 to 256 [ 320.813195][T16748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5803'. [ 320.820959][T16737] FAT-fs (loop4): Directory bread(block 64) failed [ 320.853229][T16737] FAT-fs (loop4): Directory bread(block 65) failed [ 320.864710][T16737] FAT-fs (loop4): Directory bread(block 66) failed [ 320.900697][T16737] FAT-fs (loop4): Directory bread(block 67) failed [ 320.926799][T16737] FAT-fs (loop4): Directory bread(block 68) failed [ 320.933420][T16737] FAT-fs (loop4): Directory bread(block 69) failed [ 320.985924][T16737] FAT-fs (loop4): Directory bread(block 70) failed [ 321.006110][T16737] FAT-fs (loop4): Directory bread(block 71) failed [ 321.027784][T16737] FAT-fs (loop4): Directory bread(block 72) failed [ 321.034387][T16737] FAT-fs (loop4): Directory bread(block 73) failed [ 321.542537][T16798] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5827'. [ 321.556590][ T4234] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 321.584574][T16798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5827'. [ 321.613220][T16798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5827'. [ 321.642559][T16804] loop3: detected capacity change from 0 to 16 [ 321.735504][T16804] erofs: (device loop3): mounted with root inode @ nid 36. [ 321.743532][T16809] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 321.986696][ T4234] usb 1-1: config 128 interface 0 has no altsetting 0 [ 321.993550][ T4234] usb 1-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 322.022639][ T4234] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.049200][T16827] netlink: 'syz.2.5842': attribute type 21 has an invalid length. [ 322.086625][T16827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5842'. [ 322.306643][ T4234] comedi comedi4: could not set alternate setting 3 in high speed [ 322.322623][ T4234] usbduxsigma 1-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 322.353804][ T4234] usbduxsigma: probe of 1-1:128.0 failed with error -71 [ 322.376826][ T4234] usb 1-1: USB disconnect, device number 19 [ 322.494859][T16851] ip6t_rpfilter: unknown options [ 322.613504][T16860] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5859'. [ 322.676600][ T4522] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 322.839531][T16872] ax25_connect(): syz.4.5865 uses autobind, please contact jreuter@yaina.de [ 322.946602][ T4522] usb 3-1: Using ep0 maxpacket: 32 [ 323.096826][ T4522] usb 3-1: config 4 has an invalid interface number: 128 but max is 0 [ 323.106458][ T4522] usb 3-1: config 4 has no interface number 0 [ 323.115709][ T4522] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.158779][ T4522] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.200127][ T4522] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 323.212748][T16890] netlink: 'syz.4.5874': attribute type 10 has an invalid length. [ 323.236589][ T4522] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.266469][T16890] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5874'. [ 323.314843][ T4522] hub 3-1:4.128: USB hub found [ 323.316962][T16890] netlink: 'syz.4.5874': attribute type 10 has an invalid length. [ 323.464070][T16868] loop1: detected capacity change from 0 to 32768 [ 323.536683][ T4522] hub 3-1:4.128: 19 ports detected [ 323.542052][ T4522] hub 3-1:4.128: Using single TT (err -22) [ 323.603681][T16868] XFS (loop1): Mounting V5 Filesystem [ 323.608220][ T4522] hub 3-1:4.128: insufficient power available to use all downstream ports [ 323.706846][T16868] XFS (loop1): Ending clean mount [ 323.758375][ T4522] hub 3-1:4.128: hub_hub_status failed (err = -71) [ 323.764961][ T4522] hub 3-1:4.128: config failed, can't get hub status (err -71) [ 323.844670][ T4522] usb 3-1: USB disconnect, device number 29 [ 323.881776][ T4188] XFS (loop1): Unmounting Filesystem [ 324.129153][T16946] __nla_validate_parse: 1 callbacks suppressed [ 324.129172][T16946] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5899'. [ 324.149965][T16946] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5899'. [ 324.159830][T16946] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5899'. [ 324.170422][T16946] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5899'. [ 324.212529][T16949] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5901'. [ 324.224148][T16950] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5900'. [ 324.232784][T16946] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5899'. [ 324.257045][T16946] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5899'. [ 324.298592][T16946] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5899'. [ 324.341252][T16946] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5899'. [ 324.561668][ T26] audit: type=1326 audit(1779321337.172:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16962 comm="syz.4.5905" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0daa2dbe59 code=0x0 [ 324.766555][ T7698] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 324.874861][T16980] loop1: detected capacity change from 0 to 4096 [ 324.936574][ T4247] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 324.952489][T16980] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 324.967637][T16980] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 325.013323][T16992] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 325.080297][T16980] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 325.119376][T16980] Remounting filesystem read-only [ 325.256840][ T7698] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 325.297108][ T7698] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 325.305166][ T7698] usb 4-1: Product: syz [ 325.330474][ T7698] usb 4-1: SerialNumber: syz [ 325.384096][ T7698] usb 4-1: config 0 descriptor?? [ 325.466636][ T4247] usb 1-1: New USB device found, idVendor=1235, idProduct=8002, bcdDevice= 0.40 [ 325.480605][ T4247] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.529888][ T4247] usb 1-1: Product: syz [ 325.534116][ T4247] usb 1-1: Manufacturer: syz [ 325.551477][ T4247] usb 1-1: SerialNumber: syz [ 325.657478][ T7698] hso 4-1:0.0: Can't find BULK IN endpoint [ 325.879809][ T7698] usb 4-1: USB disconnect, device number 26 [ 325.946662][ T4247] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 325.976540][ T4247] usb 1-1: unit 10 not found! [ 326.099673][ T4247] snd-usb-audio: probe of 1-1:1.0 failed with error -71 [ 326.156668][ T4247] usb 1-1: USB disconnect, device number 20 [ 326.437016][ T4523] udevd[4523]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 326.778364][T17042] CIFS: VFS: Malformed UNC in devname [ 326.985101][T17050] netlink: 'syz.3.5948': attribute type 9 has an invalid length. [ 327.053926][T17050] netlink: 'syz.3.5948': attribute type 7 has an invalid length. [ 327.087731][T17050] netlink: 'syz.3.5948': attribute type 8 has an invalid length. [ 327.119839][T17049] loop0: detected capacity change from 0 to 4096 [ 327.137521][T17054] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.326436][T17063] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 327.405637][T17049] NILFS error (device loop0): nilfs_find_entry: dir 2 size 2147487744 exceeds block count 1 [ 327.458893][T17049] Remounting filesystem read-only [ 327.807956][T17079] loop3: detected capacity change from 0 to 256 [ 327.965356][T17079] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 327.995388][T17079] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 328.021759][T17079] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 328.046642][ T7698] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 328.065068][T17079] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 328.093602][T17093] netlink: 'syz.1.5969': attribute type 10 has an invalid length. [ 328.110494][T17079] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 328.133929][T17079] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 328.156788][T17093] batman_adv: batadv0: Adding interface: virt_wifi0 [ 328.182487][T17093] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.208153][ C0] vkms_vblank_simulate: vblank timer overrun [ 328.229490][T17079] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 328.263925][T17079] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 328.274649][T17079] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 328.306315][T17093] batman_adv: batadv0: Interface activated: virt_wifi0 [ 328.330542][T17079] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 328.393311][ T26] audit: type=1800 audit(1779321341.002:17): pid=17079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5961" name="file1" dev="loop3" ino=1048625 res=0 errno=0 [ 328.459848][T17101] netlink: 'syz.4.5973': attribute type 1 has an invalid length. [ 328.506741][ T7698] usb 3-1: unable to get BOS descriptor or descriptor too short [ 328.581000][T17107] loop1: detected capacity change from 0 to 256 [ 328.596732][ T7698] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 328.626657][ T7698] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 328.668675][T17107] FAT-fs (loop1): Directory bread(block 64) failed [ 328.691975][T17107] FAT-fs (loop1): Directory bread(block 65) failed [ 328.721429][T17107] FAT-fs (loop1): Directory bread(block 66) failed [ 328.769721][T17107] FAT-fs (loop1): Directory bread(block 67) failed [ 328.785053][T17107] FAT-fs (loop1): Directory bread(block 68) failed [ 328.824374][T17107] FAT-fs (loop1): Directory bread(block 69) failed [ 328.847098][T17107] FAT-fs (loop1): Directory bread(block 70) failed [ 328.884231][T17107] FAT-fs (loop1): Directory bread(block 71) failed [ 328.911324][T17107] FAT-fs (loop1): Directory bread(block 72) failed [ 328.928164][ T7698] usb 3-1: string descriptor 0 read error: -22 [ 328.944706][ T7698] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 328.962417][T17107] FAT-fs (loop1): Directory bread(block 73) failed [ 328.996716][ T7698] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.070390][ T7698] usb 3-1: selecting invalid altsetting 1 [ 329.092021][T17123] loop0: detected capacity change from 0 to 512 [ 329.108723][ T7698] usb 3-1: unit 3 not found! [ 329.286690][ T7698] usb 3-1: unit 0 not found! [ 329.310239][T17123] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,mb_optimize_scan=0x0000000000000001,stripe=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 329.437006][T17123] ext4 filesystem being mounted at /1317/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 329.486294][ T4515] udevd[4515]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 329.537695][ T4525] usb 3-1: USB disconnect, device number 30 [ 329.598799][ T1092] block nbd3: Attempted send on invalid socket [ 329.605119][ T1092] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 329.634529][T17139] XFS (nbd3): SB validate failed with error -5. [ 330.006470][T17166] __nla_validate_parse: 20 callbacks suppressed [ 330.006487][T17166] netlink: 292 bytes leftover after parsing attributes in process `syz.0.6001'. [ 330.400065][T17188] --map-set only usable from mangle table [ 330.556556][T17197] netlink: 'syz.2.6015': attribute type 11 has an invalid length. [ 330.586226][T17197] netlink: 140 bytes leftover after parsing attributes in process `syz.2.6015'. [ 330.778925][T17208] netlink: 'syz.2.6021': attribute type 21 has an invalid length. [ 330.811457][T17203] loop4: detected capacity change from 0 to 4096 [ 330.826855][T17208] netlink: 100 bytes leftover after parsing attributes in process `syz.2.6021'. [ 330.894574][T17203] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 330.976129][T17203] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 330.994456][T17219] netlink: 'syz.3.6025': attribute type 1 has an invalid length. [ 331.038642][T17219] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6025'. [ 331.066987][T17219] nbd: couldn't find a device at index 1024 [ 331.117924][ T1281] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 331.124927][ T4192] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 331.135637][ T4192] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 331.165046][ T4192] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 331.177379][ T1281] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 331.184592][ T4192] ntfs3: loop4: ntfs_evict_inode r=3 failed, -22. [ 331.192389][T17221] loop2: detected capacity change from 0 to 4096 [ 331.307009][T17221] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 331.456225][T17221] ntfs: (device loop2): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 331.513089][T17221] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 331.543837][T17221] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 331.605186][T17221] ntfs: volume version 3.1. [ 331.744980][T17252] Sensor A: ================= START STATUS ================= [ 331.770635][T17252] Sensor A: Test Pattern: 75% Colorbar [ 331.815293][ T4194] ntfs: (device loop2): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 331.853347][T17252] Sensor A: Show Information: All [ 331.902257][T17252] Sensor A: Vertical Flip: false [ 331.966995][T17252] Sensor A: Horizontal Flip: false [ 331.972287][T17252] Sensor A: Brightness: 128 [ 332.005377][T17265] netlink: 'syz.1.6050': attribute type 10 has an invalid length. [ 332.014317][T17252] Sensor A: Contrast: 128 [ 332.019056][T17252] Sensor A: Hue: 0 [ 332.022850][T17252] Sensor A: Saturation: 0 [ 332.029828][T17252] Sensor A: ================== END STATUS ================== [ 332.037921][T17265] bridge0: port 3(team0) entered disabled state [ 332.044480][T17265] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.051975][T17265] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.149124][T17268] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6051'. [ 332.230450][T17265] team0: Device bridge0 is already an upper device of the team interface [ 332.612174][ T7698] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 332.664491][T17300] netlink: 'syz.4.6067': attribute type 21 has an invalid length. [ 332.737102][T17300] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6067'. [ 332.938632][T17316] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6075'. [ 333.026976][ T7698] usb 4-1: unable to get BOS descriptor or descriptor too short [ 333.068154][T17325] netlink: 'syz.0.6077': attribute type 2 has an invalid length. [ 333.130248][ T7698] usb 4-1: config 1 has an invalid interface number: 10 but max is 2 [ 333.148726][ T7698] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 333.186630][ T7698] usb 4-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 333.224189][ T7698] usb 4-1: config 1 has no interface number 3 [ 333.313435][T17327] loop1: detected capacity change from 0 to 4096 [ 333.388579][T17346] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6087'. [ 333.398059][ T7698] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 333.423134][T17327] EXT4-fs (loop1): fragment/cluster size (1024) != block size (4096) [ 333.425583][T17346] netlink: 51 bytes leftover after parsing attributes in process `syz.4.6087'. [ 333.451124][ T7698] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.460883][ T7698] usb 4-1: Product: syz [ 333.465259][T17346] netlink: 'syz.4.6087': attribute type 4 has an invalid length. [ 333.473548][ T7698] usb 4-1: Manufacturer: syz [ 333.497546][ T7698] usb 4-1: SerialNumber: syz [ 333.593814][T17351] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 333.619966][ C0] vkms_vblank_simulate: vblank timer overrun [ 333.657471][T17351] CIFS mount error: No usable UNC path provided in device string! [ 333.657471][T17351] [ 333.668390][T17351] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 333.764036][T17359] openvswitch: netlink: IP tunnel dst address not specified [ 333.779276][ T7698] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 333.813306][ T4525] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 333.865124][ T7698] usb 4-1: USB disconnect, device number 27 [ 333.883887][T17357] loop4: detected capacity change from 0 to 2048 [ 334.047506][T17357] EXT4-fs (loop4): mounted filesystem without journal. Opts: min_batch_time=0x000000000000002d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 334.137694][ T4515] udevd[4515]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 334.219406][ T4525] usb 2-1: config index 0 descriptor too short (expected 7768, got 18) [ 334.228071][ T4525] usb 2-1: config 0 has an invalid interface number: 39 but max is 0 [ 334.239314][ T4525] usb 2-1: config 0 has no interface number 0 [ 334.246043][ T4525] usb 2-1: too many endpoints for config 0 interface 39 altsetting 147: 48, using maximum allowed: 30 [ 334.246087][ T4525] usb 2-1: config 0 interface 39 altsetting 147 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 334.271971][ T4525] usb 2-1: config 0 interface 39 has no altsetting 0 [ 334.279009][ T4525] usb 2-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 334.322974][ T4525] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.380295][ T4525] usb 2-1: config 0 descriptor?? [ 334.586742][T17396] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6110'. [ 334.610119][T17395] netlink: 'syz.2.6108': attribute type 1 has an invalid length. [ 334.620739][T17396] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 334.656873][ T4525] usb 2-1: string descriptor 0 read error: -71 [ 334.664140][ T4525] ftdi_sio 2-1:0.39: FTDI USB Serial Device converter detected [ 334.703972][ T4525] usb 2-1: Detected FT-X [ 334.746617][ T4525] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 334.781327][ T4525] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 334.813451][ T4525] ftdi_sio 2-1:0.39: GPIO initialisation failed: -71 [ 334.832690][ T4525] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 334.867787][T17411] loop4: detected capacity change from 0 to 64 [ 334.898163][ T4525] usb 2-1: USB disconnect, device number 27 [ 334.918150][ T4525] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 334.951859][ T4525] ftdi_sio 2-1:0.39: device disconnected [ 335.082302][T17422] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6124'. [ 335.111943][T17422] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6124'. [ 335.151444][T17428] bond0: (slave bond0): Error: Device is in use and cannot be enslaved [ 335.285986][T17433] affs: No valid root block on device nbd0 [ 335.548748][T17454] loop1: detected capacity change from 0 to 256 [ 335.613588][T17459] netlink: 'syz.4.6141': attribute type 6 has an invalid length. [ 335.666786][T17459] netlink: 168 bytes leftover after parsing attributes in process `syz.4.6141'. [ 336.109176][T17493] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 336.463640][T17518] loop4: detected capacity change from 0 to 8 [ 336.528027][T17518] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 336.562069][ T4515] udevd[4515]: incorrect cramfs checksum on /dev/loop4 [ 336.575523][T17518] cramfs: empty filesystem [ 336.605968][T17529] loop3: detected capacity change from 0 to 128 [ 336.642793][ T4515] udevd[4515]: incorrect cramfs checksum on /dev/loop4 [ 336.673420][T17529] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 336.732970][T17529] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 336.823675][T17539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6176'. [ 337.502215][T17570] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6191'. [ 337.526659][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 337.720727][ T26] audit: type=1326 audit(1779321350.332:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17581 comm="syz.1.6197" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f661d4e59 code=0x0 [ 337.744319][ C1] vkms_vblank_simulate: vblank timer overrun [ 337.763032][T17588] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 337.866552][ T7698] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 338.069917][T17605] fuse: Invalid rootmode [ 338.106601][ T7698] usb 1-1: Using ep0 maxpacket: 32 [ 338.226689][ T7698] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 338.243144][ T7698] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.280602][T17618] netlink: 'syz.1.6214': attribute type 3 has an invalid length. [ 338.303981][ T7698] usb 1-1: config 0 descriptor?? [ 338.358914][ T7698] gspca_main: sq930x-2.14.0 probing 041e:403c [ 338.786632][ T7698] gspca_sq930x: ucbus_write failed -71 [ 338.792242][ T7698] sq930x: probe of 1-1:0.0 failed with error -71 [ 338.808041][ T7698] usb 1-1: USB disconnect, device number 21 [ 338.818845][T17648] loop3: detected capacity change from 0 to 64 [ 338.865689][T17650] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6231'. [ 339.060568][T17664] netlink: 11 bytes leftover after parsing attributes in process `syz.1.6239'. [ 339.246515][T17679] ceph: No source [ 339.390068][T17691] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6251'. [ 339.416241][T17691] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6251'. [ 339.476267][T17694] devtmpfs: Unknown parameter 'debug' [ 339.629528][T17708] netlink: 25 bytes leftover after parsing attributes in process `syz.2.6257'. [ 339.811096][T17720] ip6gretap5: default qdisc (pfifo_fast) fail, fallback to noqueue [ 340.044937][T17737] No such timeout policy "syz0" [ 340.666070][T17784] loop1: detected capacity change from 0 to 64 [ 340.716590][ T13] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 341.003013][ T13] usb 3-1: Using ep0 maxpacket: 32 [ 341.146563][ T13] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.166850][ T13] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.190612][T17802] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.224261][T17802] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.231533][T17802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.306416][T17806] xt_bpf: check failed: parse error [ 341.336803][ T13] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 341.345909][ T13] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 341.376459][ T13] usb 3-1: Product: syz [ 341.396031][ T13] usb 3-1: Manufacturer: syz [ 341.447779][ T13] hub 3-1:4.0: USB hub found [ 341.666682][ T13] hub 3-1:4.0: 8 ports detected [ 341.686586][ T13] hub 3-1:4.0: insufficient power available to use all downstream ports [ 341.876832][T15037] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 341.886605][ T13] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 341.893003][ T13] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 341.952150][ T13] usb 3-1: USB disconnect, device number 31 [ 341.996566][ T4247] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 342.102828][T17842] loop3: detected capacity change from 0 to 764 [ 342.171094][T17842] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 342.236591][ T4247] usb 2-1: Using ep0 maxpacket: 16 [ 342.306885][T15037] usb 1-1: unable to get BOS descriptor or descriptor too short [ 342.346636][T15037] usb 1-1: not running at top speed; connect to a high speed hub [ 342.356698][ T4247] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 342.446886][T15037] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 342.457750][T15037] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 342.486938][T15037] usb 1-1: too many endpoints for config 1 interface 1 altsetting 23: 170, using maximum allowed: 30 [ 342.498709][T15037] usb 1-1: config 1 interface 1 altsetting 23 has 0 endpoint descriptors, different from the interface descriptor's value: 170 [ 342.512456][T15037] usb 1-1: config 1 interface 1 has no altsetting 0 [ 342.546482][ T4247] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 342.555579][ T4247] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.575486][ T4247] usb 2-1: Product: syz [ 342.581229][ T4247] usb 2-1: Manufacturer: syz [ 342.588422][ T4247] usb 2-1: SerialNumber: syz [ 342.594714][ T4247] r8152-cfgselector 2-1: config 0 descriptor?? [ 342.635198][T17858] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 342.686815][T15037] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 342.700075][T17858] exFAT-fs (nullb0): invalid boot record signature [ 342.716531][T15037] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 342.724926][T17858] exFAT-fs (nullb0): failed to read boot sector [ 342.735047][T17858] exFAT-fs (nullb0): failed to recognize exfat type [ 342.742406][T15037] usb 1-1: Product: syz [ 342.751377][T15037] usb 1-1: Manufacturer: syz [ 342.767272][T15037] usb 1-1: SerialNumber: syz [ 342.807215][T17822] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 342.881034][T17870] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6336'. [ 342.920443][T17870] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6336'. [ 343.067675][T15037] cdc_acm: probe of 1-1:1.0 failed with error -22 [ 343.106721][ T4247] r8152-cfgselector 2-1: Unknown version 0x0000 [ 343.127415][T15037] usb 1-1: USB disconnect, device number 22 [ 343.169142][ T4247] r8152-cfgselector 2-1: USB disconnect, device number 28 [ 343.170186][T17881] netlink: 'syz.3.6342': attribute type 11 has an invalid length. [ 343.228117][T17881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6342'. [ 343.687873][T17909] loop0: detected capacity change from 0 to 256 [ 343.723850][T17914] netlink: 312 bytes leftover after parsing attributes in process `syz.3.6359'. [ 343.785456][T17909] FAT-fs (loop0): Directory bread(block 64) failed [ 343.817478][T17909] FAT-fs (loop0): Directory bread(block 65) failed [ 343.841137][T17909] FAT-fs (loop0): Directory bread(block 66) failed [ 343.887112][T17909] FAT-fs (loop0): Directory bread(block 67) failed [ 343.893790][T17909] FAT-fs (loop0): Directory bread(block 68) failed [ 343.955825][T17909] FAT-fs (loop0): Directory bread(block 69) failed [ 343.989946][T17925] netlink: 'syz.2.6364': attribute type 21 has an invalid length. [ 343.998396][T17909] FAT-fs (loop0): Directory bread(block 70) failed [ 344.004982][T17909] FAT-fs (loop0): Directory bread(block 71) failed [ 344.015558][T17925] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6364'. [ 344.025174][T17909] FAT-fs (loop0): Directory bread(block 72) failed [ 344.047859][T17925] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6364'. [ 344.067768][T17909] FAT-fs (loop0): Directory bread(block 73) failed [ 344.198613][T17934] loop4: detected capacity change from 0 to 256 [ 344.308284][T17934] FAT-fs (loop4): Directory bread(block 64) failed [ 344.322769][T17934] FAT-fs (loop4): Directory bread(block 65) failed [ 344.339671][T17934] FAT-fs (loop4): Directory bread(block 66) failed [ 344.357505][T17934] FAT-fs (loop4): Directory bread(block 67) failed [ 344.382693][T17934] FAT-fs (loop4): Directory bread(block 68) failed [ 344.412103][T17934] FAT-fs (loop4): Directory bread(block 69) failed [ 344.441306][T17934] FAT-fs (loop4): Directory bread(block 70) failed [ 344.477993][T17934] FAT-fs (loop4): Directory bread(block 71) failed [ 344.500053][T17934] FAT-fs (loop4): Directory bread(block 72) failed [ 344.544275][T17934] FAT-fs (loop4): Directory bread(block 73) failed [ 344.577445][T17951] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 344.669432][T17956] vivid-001: ================= START STATUS ================= [ 344.715473][T17956] vivid-001: Enable Output Cropping: true [ 344.754516][T17956] vivid-001: Enable Output Composing: true [ 344.786488][T17956] vivid-001: Enable Output Scaler: true [ 344.792124][T17956] vivid-001: Tx RGB Quantization Range: Automatic [ 344.855113][T17958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6380'. [ 344.892261][T17956] vivid-001: Transmit Mode: HDMI [ 344.929062][T17956] vivid-001: Display Present: true inactive [ 344.935056][T17956] vivid-001: Hotplug Present: 0x00000001 [ 345.035097][T17956] vivid-001: RxSense Present: 0x00000001 [ 345.055903][T17956] vivid-001: EDID Present: 0x00000001 [ 345.106662][T17956] vivid-001: ================== END STATUS ================== [ 345.231746][T17970] loop1: detected capacity change from 0 to 512 [ 345.263669][T17974] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6386'. [ 345.370161][T17970] EXT4-fs (loop1): orphan cleanup on readonly fs [ 345.424098][T17970] Quota error (device loop1): v2_read_file_info: Block with free entry too big (9 >= 6). [ 345.455820][T17982] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6392'. [ 345.483261][T17970] EXT4-fs warning (device loop1): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 345.498179][T17970] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 345.533724][T17970] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.6385: bad orphan inode 14 [ 345.566629][ T13] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 345.597081][T17970] ext4_test_bit(bit=13, block=18) = 1 [ 345.602528][T17970] is_bad_inode(inode)=0 [ 345.632516][T17970] NEXT_ORPHAN(inode)=0 [ 345.644915][T17970] max_ino=32 [ 345.676460][T17970] i_nlink=1 [ 345.681876][T17970] EXT4-fs (loop1): 1 truncate cleaned up [ 345.725700][T17970] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 345.797431][T18000] trusted_key: encrypted_key: master key parameter is missing [ 345.844239][T18002] netlink: 'syz.2.6400': attribute type 30 has an invalid length. [ 345.870154][T18002] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6400'. [ 345.886960][T18002] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 345.898914][T18002] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 346.096772][ T13] usb 1-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 346.105879][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.151865][ T13] usb 1-1: Product: syz [ 346.156099][ T13] usb 1-1: Manufacturer: syz [ 346.181454][ T13] usb 1-1: SerialNumber: syz [ 346.199524][ T13] usb 1-1: config 0 descriptor?? [ 346.278711][ T13] usb 1-1: selecting invalid altsetting 1 [ 346.284499][ T13] technisat-usb2: could not set alternate setting to 0 [ 346.361383][T18028] netlink: 'syz.4.6413': attribute type 13 has an invalid length. [ 346.401122][T18028] gretap0: refused to change device tx_queue_len [ 346.417272][T18028] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 346.497001][ T13] technisat-usb2: firmware version: 0.0 [ 346.502739][ T13] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 346.511381][T15037] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 346.586093][T18042] netlink: 'syz.1.6420': attribute type 9 has an invalid length. [ 346.594848][T18042] netlink: 'syz.1.6420': attribute type 7 has an invalid length. [ 346.604325][T18042] netlink: 'syz.1.6420': attribute type 8 has an invalid length. [ 346.621271][T18042] netlink: 'syz.1.6420': attribute type 13 has an invalid length. [ 346.731071][ T13] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 346.759670][T15037] usb 4-1: Using ep0 maxpacket: 16 [ 346.788835][T18050] overlayfs: missing 'lowerdir' [ 346.811949][ T13] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) error while loading driver (-19) [ 346.861752][ T13] usb 1-1: USB disconnect, device number 23 [ 346.876868][T15037] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 346.925777][T15037] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.943847][T15037] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 347.087056][T18060] SET target dimension over the limit! [ 347.107903][T15037] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 347.129520][T15037] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.168765][T15037] usb 4-1: Product: syz [ 347.173007][T15037] usb 4-1: Manufacturer: syz [ 347.226749][T15037] usb 4-1: SerialNumber: syz [ 347.248653][T15037] usb 4-1: config 0 descriptor?? [ 347.666543][ T4525] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 347.838553][T18104] netlink: 'syz.2.6451': attribute type 3 has an invalid length. [ 347.970335][ T4525] usb 1-1: Using ep0 maxpacket: 16 [ 348.062210][T18116] damon: min_nr_regions (0) must be at least 3 [ 348.131695][T18118] NILFS (nullb0): couldn't find nilfs on the device [ 348.308042][ T4525] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 348.336610][ T4525] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.344795][ T26] audit: type=1400 audit(1779321360.952:19): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=18130 comm="syz.1.6463" [ 348.375186][ T4525] usb 1-1: Product: syz [ 348.382328][ T4525] usb 1-1: Manufacturer: syz [ 348.390779][ T4525] usb 1-1: SerialNumber: syz [ 348.411015][ T4525] r8152-cfgselector 1-1: config 0 descriptor?? [ 348.738885][T18150] loop2: detected capacity change from 0 to 128 [ 348.753335][T18149] __nla_validate_parse: 1 callbacks suppressed [ 348.753352][T18149] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6473'. [ 348.780420][T18150] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 348.840975][T18150] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 348.906539][ T4525] r8152-cfgselector 1-1: Unknown version 0x0000 [ 348.924555][ T4525] r8152-cfgselector 1-1: USB disconnect, device number 24 [ 349.182731][ T4525] usb 4-1: USB disconnect, device number 28 [ 349.309726][T18174] netlink: 'syz.1.6485': attribute type 1 has an invalid length. [ 349.367626][T18174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6485'. [ 349.611280][T18193] loop0: detected capacity change from 0 to 8 [ 350.106681][T18220] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6507'. [ 350.395623][T18239] loop2: detected capacity change from 0 to 512 [ 350.589335][T18239] Quota error (device loop2): do_check_range: Getting dqdh_next_free 256 out of range 0-7 [ 350.624373][T18239] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 350.638853][T18239] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.6517: Failed to acquire dquot type 1 [ 350.669506][T18239] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #16: comm syz.2.6517: corrupted inode contents [ 350.670158][T18260] delete_channel: no stack [ 350.689035][T18239] EXT4-fs error (device loop2): ext4_dirty_inode:6077: inode #16: comm syz.2.6517: mark_inode_dirty error [ 350.701078][T18239] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #16: comm syz.2.6517: corrupted inode contents [ 350.714057][T18239] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #16: comm syz.2.6517: mark_inode_dirty error [ 350.759763][T18239] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #16: comm syz.2.6517: corrupted inode contents [ 350.890486][T18239] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 350.910916][T18239] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #16: comm syz.2.6517: corrupted inode contents [ 350.933437][T18239] EXT4-fs error (device loop2): ext4_truncate:4286: inode #16: comm syz.2.6517: mark_inode_dirty error [ 351.021033][T18239] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 351.062724][T18239] EXT4-fs (loop2): 1 truncate cleaned up [ 351.068960][T18239] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 351.315206][T18284] loop4: detected capacity change from 0 to 4096 [ 351.633100][T18305] netlink: 'syz.2.6545': attribute type 2 has an invalid length. [ 351.641880][T18305] netlink: 'syz.2.6545': attribute type 5 has an invalid length. [ 351.807962][T18315] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6553'. [ 351.901251][T18318] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6555'. [ 351.932533][T18318] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 352.163458][T18336] loop4: detected capacity change from 0 to 128 [ 352.389994][T18350] netlink: 'syz.2.6569': attribute type 12 has an invalid length. [ 352.478138][T18354] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 352.702004][T18365] netlink: zone id is out of range [ 352.725352][T18365] netlink: zone id is out of range [ 353.015281][T18382] loop0: detected capacity change from 0 to 1024 [ 353.065587][T18384] 8021q: adding VLAN 0 to HW filter on device bond3 [ 353.209991][T18382] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 2: comm syz.0.6586: lblock 2 mapped to illegal pblock 2 (length 1) [ 353.239515][T18382] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 353.274042][T18382] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 48: comm syz.0.6586: lblock 0 mapped to illegal pblock 48 (length 1) [ 353.295965][T18382] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 353.305830][T18382] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.6586: Failed to acquire dquot type 0 [ 353.324075][T18382] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 353.341850][T18382] EXT4-fs error (device loop0): ext4_evict_inode:284: inode #11: comm syz.0.6586: mark_inode_dirty error [ 353.353806][T18382] EXT4-fs warning (device loop0): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 353.364614][T18382] EXT4-fs (loop0): 1 orphan inode deleted [ 353.370772][T18382] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,noblock_validity,quota,max_batch_time=0x0000000000000009,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 353.393508][ T4262] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 353.425730][ T4262] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 353.465026][ T4262] EXT4-fs error (device loop0): ext4_release_dquot:6272: comm kworker/u4:6: Failed to release dquot type 0 [ 353.500292][T18382] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm syz.0.6586: Invalid inode table block 1 in block_group 0 [ 353.548714][T18382] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 353.579016][T18382] EXT4-fs error (device loop0): ext4_quota_off:6542: inode #3: comm syz.0.6586: mark_inode_dirty error [ 353.590467][T15037] usb 4-1: new low-speed USB device number 29 using dummy_hcd [ 353.740182][T18415] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6601'. [ 354.018671][T15037] usb 4-1: unable to get BOS descriptor or descriptor too short [ 354.116777][T15037] usb 4-1: config 100 has an invalid interface number: 173 but max is 0 [ 354.135500][T15037] usb 4-1: config 100 has no interface number 0 [ 354.152664][T15037] usb 4-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 354.193149][T15037] usb 4-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid maxpacket 1024, setting to 8 [ 354.229534][T15037] usb 4-1: config 100 interface 173 has no altsetting 0 [ 354.365095][T18452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6619'. [ 354.486743][T15037] usb 4-1: string descriptor 0 read error: -22 [ 354.495303][T15037] usb 4-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 354.543331][T15037] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.557544][T18462] loop4: detected capacity change from 0 to 2048 [ 354.580073][T18466] netlink: 'syz.2.6624': attribute type 1 has an invalid length. [ 354.607042][T18401] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 354.614170][T18401] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 354.648466][T15037] metro_usb 4-1:100.173: Metrologic USB to Serial converter detected [ 354.648469][T18468] netlink: 'syz.0.6626': attribute type 12 has an invalid length. [ 354.674315][T18462] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 354.695903][T15037] usb 4-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 354.876559][T15037] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 354.917758][ T7698] usb 4-1: USB disconnect, device number 29 [ 354.935212][ T7698] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 354.986848][ T7698] metro_usb 4-1:100.173: device disconnected [ 355.136576][T15037] usb 2-1: Using ep0 maxpacket: 8 [ 355.185264][T18493] netlink: 'syz.4.6638': attribute type 3 has an invalid length. [ 355.193977][T18493] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6638'. [ 355.243911][T18497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6640'. [ 355.256626][T15037] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 355.267472][T15037] usb 2-1: config 2 has no interface number 0 [ 355.285567][T15037] usb 2-1: config 2 interface 31 has no altsetting 0 [ 355.396467][ T4247] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 355.467812][T15037] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 355.481484][T15037] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.496238][T15037] usb 2-1: Product: syz [ 355.502393][T15037] usb 2-1: Manufacturer: syz [ 355.522218][T15037] usb 2-1: SerialNumber: syz [ 355.539338][T18510] overlayfs: unrecognized mount option "\{\" or missing value [ 355.574971][T18513] xt_l2tp: v2 sid > 0xffff: 262144 [ 355.767016][ T4247] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 355.806447][ T4247] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 355.816204][ T4247] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 355.837951][ T4247] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 355.870138][ T4247] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 355.894640][ T4247] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.957928][ T4247] usb 1-1: config 0 descriptor?? [ 356.049052][T18536] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6659'. [ 356.096895][T18536] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 356.105336][T18536] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 356.216657][ T4247] hdpvr 1-1:0.0: firmware version 0xd dated ­";W|۱adTUK> }1vN`Y# [ 356.266919][T15037] ch9200: probe of 2-1:2.31 failed with error -22 [ 356.296618][T15037] usb 2-1: USB disconnect, device number 29 [ 356.333515][T18551] IPv6: NLM_F_REPLACE set, but no existing node found! [ 356.436683][ T4247] hdpvr 1-1:0.0: device init failed [ 356.442044][ T4247] hdpvr: probe of 1-1:0.0 failed with error -12 [ 356.468594][ T4247] usb 1-1: USB disconnect, device number 25 [ 356.936766][T18589] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6685'. [ 357.016726][T18589] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6685'. [ 357.426014][T18622] netlink: 45 bytes leftover after parsing attributes in process `syz.3.6701'. [ 357.691731][T18642] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6711'. [ 357.937448][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 357.940064][T18664] loop4: detected capacity change from 0 to 256 [ 357.965459][T18665] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (3) [ 357.981342][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 357.996009][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 358.025172][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 358.044729][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 358.075267][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 358.091647][T18664] FAT-fs (loop4): Directory bread(block 64) failed [ 358.104659][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 358.124116][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 358.126813][T18664] FAT-fs (loop4): Directory bread(block 65) failed [ 358.142599][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 358.150643][T18664] FAT-fs (loop4): Directory bread(block 66) failed [ 358.160625][T18664] FAT-fs (loop4): Directory bread(block 67) failed [ 358.176817][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 358.184540][T18664] FAT-fs (loop4): Directory bread(block 68) failed [ 358.204705][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 358.213530][T18664] FAT-fs (loop4): Directory bread(block 69) failed [ 358.230694][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 358.239048][T18664] FAT-fs (loop4): Directory bread(block 70) failed [ 358.259256][T18664] FAT-fs (loop4): Directory bread(block 71) failed [ 358.276143][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 358.309623][T18664] FAT-fs (loop4): Directory bread(block 72) failed [ 358.316612][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 358.327060][T18664] FAT-fs (loop4): Directory bread(block 73) failed [ 358.338015][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 358.345456][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 358.373397][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 358.402190][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 358.430532][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 358.446488][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 358.466531][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 358.490098][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 358.523448][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 358.536693][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 358.544836][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 358.552499][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 358.560133][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 358.572552][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 358.586594][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 358.600814][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 358.613842][T18689] xt_nfacct: accounting object `syz1' does not exist [ 358.615237][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 358.630433][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 358.638337][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 358.645962][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 358.653991][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 358.661834][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 358.670382][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 358.678391][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 358.685914][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 358.693859][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 358.701486][T18691] netlink: 'syz.1.6735': attribute type 1 has an invalid length. [ 358.709669][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 358.726213][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 358.741792][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 358.758350][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 358.773690][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 358.783299][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 358.794874][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 358.811658][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 358.824854][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 358.838067][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 358.851143][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 358.870426][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 358.886646][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 358.896685][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 358.906013][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 358.913952][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 358.922124][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 358.937877][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 358.945466][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 358.953108][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 358.960722][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 358.972407][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 358.986667][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 358.999813][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 359.011547][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 359.019675][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 359.028137][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 359.036277][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 359.043883][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 359.051666][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 359.068001][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 359.075574][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 359.083283][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 359.098405][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 359.113722][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 359.130243][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 359.152654][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 359.167903][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 359.176223][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 359.184010][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 359.192862][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 359.200468][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 359.208542][ T4234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 359.273538][ T4234] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.03 Device [syz1] on syz1 [ 359.382152][T18719] loop3: detected capacity change from 0 to 512 [ 359.470001][T18719] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0022] [ 359.548756][T18719] System zones: 1-12 [ 359.574714][T18719] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.6747: Directory hole found for htree index block 0 [ 359.634800][T18719] EXT4-fs (loop3): Remounting filesystem read-only [ 359.635131][T18719] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 359.635213][T18719] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.6747: Directory hole found for htree index block 0 [ 359.636731][T18719] EXT4-fs (loop3): Remounting filesystem read-only [ 359.636787][T18719] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 359.636812][T18719] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,dax=never,bsdgroups,usrjquota="nojournal_checksum,errors=remount-ro,,. Quota mode: writeback. [ 359.677047][T18719] EXT4-fs (loop3): re-mounted. Opts: grpjquota=Jdebug,jqfmt=vfsold,dax=never,bsdgroups,usrjquota="nojournal_checksum,errors=remount-ro,,. Quota mode: writeback. [ 359.969125][T18753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6763'. [ 360.009611][T18753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6763'. [ 360.264825][T18772] xt_TPROXY: Can be used only with -p tcp or -p udp [ 360.303828][T18762] fido_id[18762]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 360.336257][T18771] device geneve1 entered promiscuous mode [ 360.580173][T18792] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6782'. [ 360.632869][T18796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6784'. [ 360.656845][T18792] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6782'. [ 360.711570][T18802] x_tables: unsorted underflow at hook 2 [ 360.743667][T18804] loop0: detected capacity change from 0 to 16 [ 360.835330][T18804] erofs: (device loop0): mounted with root inode @ nid 36. [ 360.971269][T18818] libceph: resolve '.RHe'ˠ/1C~1WexEAeSb{~R' (ret=-3): failed [ 361.155773][T18828] loop2: detected capacity change from 0 to 2048 [ 361.272873][T18828] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 361.476673][ T4525] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 361.519329][T18844] loop1: detected capacity change from 0 to 4096 [ 361.689851][T18844] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 362.028570][ T4525] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 362.084631][ T4525] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.117029][ T4525] usb 4-1: Product: syz [ 362.121308][ T4525] usb 4-1: Manufacturer: syz [ 362.141783][ T4525] usb 4-1: SerialNumber: syz [ 362.227829][ T4525] usb 4-1: config 0 descriptor?? [ 362.267952][ T4525] ch341 4-1:0.0: ch341-uart converter detected [ 362.383486][T18870] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6818'. [ 362.496558][ T4525] usb 4-1: short control message received (0 < 2) [ 362.503054][ T4525] usb 4-1: failed to receive control message: -5 [ 362.524186][ T4525] ch341-uart: probe of ttyUSB0 failed with error -5 [ 362.588072][T18855] loop0: detected capacity change from 0 to 32768 [ 362.640482][T18855] [ 362.640482][T18855] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 362.640482][T18855] [ 362.699254][ T4525] usb 4-1: USB disconnect, device number 30 [ 362.722894][ T4525] ch341 4-1:0.0: device disconnected [ 362.854027][ T4193] [ 362.854027][ T4193] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 362.854027][ T4193] [ 362.884674][ T4193] [ 362.884674][ T4193] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 362.884674][ T4193] [ 363.008427][T18894] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6830'. [ 363.064222][T18894] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6830'. [ 363.075645][T18894] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6830'. [ 363.101198][T18894] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6830'. [ 363.534357][T18912] loop2: detected capacity change from 0 to 4096 [ 363.643016][T18912] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 363.789475][T18930] loop0: detected capacity change from 0 to 2048 [ 363.848221][T18930] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 364.166551][T15037] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 364.536563][T15037] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 364.539337][T18975] netlink: 'syz.0.6870': attribute type 21 has an invalid length. [ 364.567424][T15037] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 364.623214][T18978] binder: 18977:18978 ioctl c018620b 0 returned -14 [ 364.697813][T15037] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 364.724303][T15037] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 364.753362][T15037] usb 4-1: SerialNumber: syz [ 364.793742][T18989] netlink: 'syz.2.6877': attribute type 1 has an invalid length. [ 364.847532][T15037] usb 4-1: bad CDC descriptors [ 365.025031][ T26] audit: type=1400 audit(364.972:20): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=19001 comm="syz.2.6884" [ 365.137122][T15037] usb 4-1: USB disconnect, device number 31 [ 365.362670][T19020] loop1: detected capacity change from 0 to 22 [ 365.377351][T19020] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 365.452548][T19020] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 365.511919][T19025] loop4: detected capacity change from 0 to 164 [ 365.794717][T19031] netlink: 'syz.4.6898': attribute type 9 has an invalid length. [ 365.857121][T19031] __nla_validate_parse: 2 callbacks suppressed [ 365.857141][T19031] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.6898'. [ 366.011258][T19009] loop2: detected capacity change from 0 to 32768 [ 366.097860][T19009] [ 366.097860][T19009] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 366.097860][T19009] [ 366.121795][T19040] vxcan1 speed is unknown, defaulting to 1000 [ 366.418296][ T4194] [ 366.418296][ T4194] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 366.418296][ T4194] [ 366.463651][ T4194] [ 366.463651][ T4194] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 366.463651][ T4194] [ 366.478281][T19023] loop0: detected capacity change from 0 to 32768 [ 366.563918][T19023] [ 366.563918][T19023] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 366.563918][T19023] [ 366.725664][ T4193] [ 366.725664][ T4193] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 366.725664][ T4193] [ 366.786772][ T4193] [ 366.786772][ T4193] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 366.786772][ T4193] [ 366.847281][T19065] x_tables: duplicate entry at hook 3 [ 367.343411][T19089] netlink: 'syz.1.6925': attribute type 41 has an invalid length. [ 367.461317][T19089] netlink: 'syz.1.6925': attribute type 41 has an invalid length. [ 367.518186][T19101] loop4: detected capacity change from 0 to 512 [ 367.584439][T19101] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 49) [ 367.612201][T19101] FAT-fs (loop4): Filesystem has been set read-only [ 367.935665][T19129] binder: 19127:19129 ioctl c018620c 200000000100 returned -22 [ 368.113193][T19138] netlink: 'syz.0.6949': attribute type 1 has an invalid length. [ 368.134909][T19138] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6949'. [ 368.146438][T19140] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6950'. [ 368.199628][T19142] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6951'. [ 368.540384][T19167] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6965'. [ 368.686549][T19176] loop2: detected capacity change from 0 to 16 [ 368.812336][T19176] erofs: (device loop2): mounted with root inode @ nid 36. [ 368.899369][T19170] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 369.034195][T19192] loop0: detected capacity change from 0 to 1024 [ 369.179057][T19192] hfsplus: catalog name length corrupted [ 369.421705][T19206] loop4: detected capacity change from 0 to 64 [ 370.194415][T19188] loop1: detected capacity change from 0 to 32768 [ 370.355556][T19246] loop2: detected capacity change from 0 to 256 [ 370.384024][T19188] XFS (loop1): Mounting V5 Filesystem [ 370.618403][T19188] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 370.730886][T19188] XFS (loop1): Tail block (0x29) overwrite detected. Updated to 0x30 [ 370.835019][T19188] XFS (loop1): Ending clean mount [ 370.984254][T19281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7004'. [ 371.038075][ T4188] XFS (loop1): Unmounting Filesystem [ 371.152339][T19286] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7007'. [ 371.313085][T19286] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7007'. [ 371.427271][T19293] loop2: detected capacity change from 0 to 512 [ 371.470858][T19293] EXT4-fs error (device loop2): ext4_get_journal_inode:5187: comm syz.2.7010: inode #1792: comm syz.2.7010: iget: illegal inode # [ 371.615752][T19293] EXT4-fs (loop2): Remounting filesystem read-only [ 371.636058][T19293] EXT4-fs (loop2): no journal found [ 371.671175][T19293] EXT4-fs (loop2): can't get journal size [ 371.711973][T19293] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 371.769595][T19308] lo speed is unknown, defaulting to 1000 [ 371.776272][T19308] lo speed is unknown, defaulting to 1000 [ 371.795006][T19293] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 371.806766][T19293] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="grpquota,jqfmt=vfsold,noblock_validity,. Quota mode: writeback. [ 371.826632][ C1] vkms_vblank_simulate: vblank timer overrun [ 371.855393][T19308] lo speed is unknown, defaulting to 1000 [ 371.867791][T19308] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 371.888656][T19308] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 371.932363][T19293] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 223 vs 220 free clusters [ 372.009928][T19308] lo speed is unknown, defaulting to 1000 [ 372.033538][T19293] EXT4-fs (loop2): Remounting filesystem read-only [ 372.076782][T19308] lo speed is unknown, defaulting to 1000 [ 372.083903][T19308] lo speed is unknown, defaulting to 1000 [ 372.147632][T19308] lo speed is unknown, defaulting to 1000 [ 372.184449][T19308] lo speed is unknown, defaulting to 1000 [ 372.312022][T19329] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 372.763618][T19353] ieee802154 phy0 wpan0: encryption failed: -22 [ 372.776600][ T4525] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 373.036616][ T4525] usb 1-1: Using ep0 maxpacket: 16 [ 373.186752][ T4525] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 373.367287][ T13] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 373.369613][ T4525] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 373.415248][ T4525] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.434225][ T4525] usb 1-1: Product: syz [ 373.438837][ T4525] usb 1-1: Manufacturer: syz [ 373.446922][ T4525] usb 1-1: SerialNumber: syz [ 373.485712][ T4525] usb 1-1: config 0 descriptor?? [ 373.568042][ T4525] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 373.598011][ T4525] usb 1-1: Detected FT232BM [ 373.608179][T19340] loop1: detected capacity change from 0 to 32768 [ 373.639576][ T13] usb 4-1: Using ep0 maxpacket: 32 [ 373.725063][T19394] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 373.756635][ T13] usb 4-1: config 0 has an invalid interface number: 16 but max is 0 [ 373.781215][ T13] usb 4-1: config 0 has no interface number 0 [ 373.806491][ T13] usb 4-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 373.846941][ T13] usb 4-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 48 [ 373.872234][T19340] XFS (loop1): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 373.996692][ T4525] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 374.015370][ T4525] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 374.026731][ T13] usb 4-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 374.035828][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.062010][ T4525] usb 1-1: USB disconnect, device number 26 [ 374.098860][ T4525] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 374.099145][ T13] usb 4-1: Product: syz [ 374.113141][ T4525] ftdi_sio 1-1:0.0: device disconnected [ 374.155530][ T13] usb 4-1: Manufacturer: syz [ 374.171201][ T13] usb 4-1: SerialNumber: syz [ 374.180551][T19417] netlink: 'syz.2.7050': attribute type 1 has an invalid length. [ 374.183309][ T13] usb 4-1: config 0 descriptor?? [ 374.192328][T19417] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7050'. [ 374.255781][T19369] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 374.271216][T19369] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 374.301181][ T4188] XFS (loop1): Unmounting Filesystem [ 374.500969][ T13] usb 4-1: USB disconnect, device number 32 [ 375.057293][T19440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7057'. [ 375.781889][T19493] cgroup: name respecified [ 375.905988][T19502] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7082'. [ 375.995822][T19508] netlink: 'syz.0.7085': attribute type 1 has an invalid length. [ 376.031052][T19508] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7085'. [ 376.645863][T19551] xt_l2tp: invalid flags combination: 0 [ 376.834887][T19559] loop4: detected capacity change from 0 to 512 [ 376.919904][ T4525] usb 4-1: new low-speed USB device number 33 using dummy_hcd [ 376.946731][T19559] EXT4-fs (loop4): inline encryption not supported [ 376.953897][T19559] EXT4-fs (loop4): Test dummy encryption mode enabled [ 377.048790][T19559] EXT4-fs error (device loop4): __ext4_iget:4919: inode #11: block 1: comm syz.4.7107: invalid block [ 377.094139][T19571] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 377.111190][T19559] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.7107: couldn't read orphan inode 11 (err -117) [ 377.184766][T19559] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,journal_dev=0x0000000000000005,max_dir_size_kb=0x0000000000000004,noquota,nodiscard,sb=0x00000000000000ff,inlinecrypt,debug_want_extra_isize=0x0000000000000004,test_dummy_encryption,,errors=continue. Quota mode: none. [ 377.379090][T19582] loop1: detected capacity change from 0 to 512 [ 377.416843][ T4525] usb 4-1: config 8 has an invalid interface number: 137 but max is 0 [ 377.442001][ T4525] usb 4-1: config 8 has no interface number 0 [ 377.493592][T19582] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,noload,,errors=continue. Quota mode: writeback. [ 377.736752][ T4525] usb 4-1: string descriptor 0 read error: -22 [ 377.743106][ T4525] usb 4-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=14.6e [ 377.774813][ T4525] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.883360][ T4525] ttusb_dec_send_command: command bulk message failed: error -22 [ 377.921258][ T4525] ttusb-dec: probe of 4-1:8.137 failed with error -22 [ 378.002064][T19615] netlink: 'syz.4.7134': attribute type 21 has an invalid length. [ 378.026976][T19615] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7134'. [ 378.114834][ T4525] usb 4-1: USB disconnect, device number 33 [ 378.211169][T19625] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.291944][T19625] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 378.324268][T19627] netlink: 80 bytes leftover after parsing attributes in process `syz.1.7139'. [ 378.378923][T19631] netlink: 'syz.0.7141': attribute type 1 has an invalid length. [ 378.483707][T19638] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 378.499839][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.509958][ T2426] pvrusb2: request_firmware fatal error with code=-110 [ 378.517205][T19639] netlink: 'syz.1.7145': attribute type 21 has an invalid length. [ 378.525144][T19639] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7145'. [ 378.532347][ T2426] pvrusb2: Failure uploading firmware1 [ 378.558788][ T2426] pvrusb2: Device initialization was not successful. [ 378.575897][ T2426] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 378.612526][ T2426] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 378.675641][ T2426] pvrusb2: Failed to submit write-control URB status=-19 [ 378.677651][T15038] pvrusb2: Device being rendered inoperable [ 378.725312][ T2426] usb 5-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 378.763524][T19651] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7150'. [ 378.775752][ T2426] usb 5-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 378.891825][T19646] loop2: detected capacity change from 0 to 4096 [ 379.068154][T19646] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 379.092183][T19646] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 379.146750][T19646] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 379.158429][T19646] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 379.173638][T19646] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 379.197859][T19646] ntfs: volume version 3.1. [ 379.205224][T19646] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 379.224891][T19646] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 379.262732][T19646] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 379.280447][T19665] netlink: 11 bytes leftover after parsing attributes in process `syz.1.7158'. [ 379.292692][T19646] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 379.319879][T19646] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 379.618106][T19679] loop3: detected capacity change from 0 to 16 [ 379.857840][T19679] erofs: (device loop3): mounted with root inode @ nid 36. [ 379.938415][T19697] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 379.945950][T19697] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.013919][T19698] [U] ^C [ 380.039895][T19697] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.071652][T19697] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.109283][T19706] loop2: detected capacity change from 0 to 256 [ 380.128480][T19697] batman_adv: batadv0: Removing interface: virt_wifi0 [ 380.186563][ T4247] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 380.232716][T19706] FAT-fs (loop2): Directory bread(block 64) failed [ 380.243145][T19706] FAT-fs (loop2): Directory bread(block 65) failed [ 380.268985][T19706] FAT-fs (loop2): Directory bread(block 66) failed [ 380.281288][T19706] FAT-fs (loop2): Directory bread(block 67) failed [ 380.292586][T19706] FAT-fs (loop2): Directory bread(block 68) failed [ 380.328022][T19706] FAT-fs (loop2): Directory bread(block 69) failed [ 380.358393][T19706] FAT-fs (loop2): Directory bread(block 70) failed [ 380.384960][T19706] FAT-fs (loop2): Directory bread(block 71) failed [ 380.409441][T19706] FAT-fs (loop2): Directory bread(block 72) failed [ 380.433779][T19706] FAT-fs (loop2): Directory bread(block 73) failed [ 380.441038][ T4247] usb 1-1: Using ep0 maxpacket: 16 [ 380.558007][ T4247] usb 1-1: config 252 has an invalid interface number: 15 but max is 0 [ 380.589083][ T4247] usb 1-1: config 252 has no interface number 0 [ 380.756700][ T4247] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 380.780918][ T4247] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.795275][ T4247] usb 1-1: Product: syz [ 380.806479][ T4247] usb 1-1: Manufacturer: syz [ 380.814846][ T4247] usb 1-1: SerialNumber: syz [ 380.885114][ T4247] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 381.083314][ T4247] usb 1-1: USB disconnect, device number 27 [ 381.096683][ T155] usb 1-1: Failed to submit usb control message: -71 [ 381.114450][ T155] usb 1-1: unable to send the bmi data to the device: -71 [ 381.151670][ T155] usb 1-1: unable to get target info from device [ 381.176403][ T155] usb 1-1: could not get target info (-71) [ 381.199040][ T155] usb 1-1: could not probe fw (-71) [ 381.641499][T19794] loop1: detected capacity change from 0 to 256 [ 381.964689][T19811] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.7228'. [ 382.008869][T19811] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 382.165811][T19823] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 382.313119][T19828] loop0: detected capacity change from 0 to 512 [ 382.424447][T19828] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,noload,,errors=continue. Quota mode: writeback. [ 382.482497][T19844] 9pnet: p9_fd_create_unix (19844): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 382.542411][T19845] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 382.908831][T19870] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7257'. [ 383.443234][T19906] netlink: 'syz.2.7273': attribute type 8 has an invalid length. [ 383.553636][T19912] [ 383.556035][T19912] ====================================================== [ 383.563079][T19912] WARNING: possible circular locking dependency detected [ 383.570141][T19912] syzkaller #0 Not tainted [ 383.574583][T19912] ------------------------------------------------------ [ 383.581625][T19912] syz.2.7276/19912 is trying to acquire lock: [ 383.587723][T19912] ffff88802c4e0b98 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 383.598225][T19912] [ 383.598225][T19912] but task is already holding lock: [ 383.605617][T19912] ffff88802c4e0ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1030 [ 383.614986][T19912] [ 383.614986][T19912] which lock already depends on the new lock. [ 383.614986][T19912] [ 383.625416][T19912] [ 383.625416][T19912] the existing dependency chain (in reverse order) is: [ 383.634455][T19912] [ 383.634455][T19912] -> #3 (&hdev->req_lock){+.+.}-{3:3}: [ 383.642142][T19912] __mutex_lock_common+0x1e3/0x2400 [ 383.647901][T19912] mutex_lock_nested+0x17/0x20 [ 383.653222][T19912] hci_dev_do_close+0x5f/0x1030 [ 383.658631][T19912] hci_rfkill_set_block+0x10a/0x190 [ 383.664381][T19912] rfkill_set_block+0x1c9/0x3d0 [ 383.669784][T19912] rfkill_fop_write+0x452/0x560 [ 383.675176][T19912] vfs_write+0x30b/0xd60 [ 383.679953][T19912] ksys_write+0x152/0x260 [ 383.684816][T19912] do_syscall_64+0x4c/0xa0 [ 383.689830][T19912] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 383.696295][T19912] [ 383.696295][T19912] -> #2 (rfkill_global_mutex){+.+.}-{3:3}: [ 383.704307][T19912] __mutex_lock_common+0x1e3/0x2400 [ 383.710048][T19912] mutex_lock_nested+0x17/0x20 [ 383.715347][T19912] rfkill_register+0x33/0x980 [ 383.720568][T19912] hci_register_dev+0x452/0x970 [ 383.725957][T19912] vhci_create_device+0x32c/0x5c0 [ 383.731520][T19912] vhci_write+0x391/0x450 [ 383.736384][T19912] vfs_write+0x745/0xd60 [ 383.741159][T19912] ksys_write+0x152/0x260 [ 383.746037][T19912] do_syscall_64+0x4c/0xa0 [ 383.750986][T19912] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 383.757417][T19912] [ 383.757417][T19912] -> #1 (&data->open_mutex){+.+.}-{3:3}: [ 383.765249][T19912] __mutex_lock_common+0x1e3/0x2400 [ 383.770994][T19912] mutex_lock_nested+0x17/0x20 [ 383.776296][T19912] vhci_send_frame+0x88/0x100 [ 383.781516][T19912] hci_send_frame+0x1a9/0x2e0 [ 383.786730][T19912] hci_tx_work+0x9f9/0x1710 [ 383.791778][T19912] process_one_work+0x85f/0x1010 [ 383.797348][T19912] worker_thread+0xaa6/0x1290 [ 383.802561][T19912] kthread+0x436/0x520 [ 383.807163][T19912] ret_from_fork+0x1f/0x30 [ 383.812116][T19912] [ 383.812116][T19912] -> #0 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 383.821375][T19912] __lock_acquire+0x2c42/0x7d10 [ 383.826774][T19912] lock_acquire+0x19e/0x400 [ 383.831820][T19912] __flush_work+0x116/0x210 [ 383.836853][T19912] hci_dev_do_close+0x1e7/0x1030 [ 383.842329][T19912] hci_rfkill_set_block+0x10a/0x190 [ 383.848066][T19912] rfkill_set_block+0x1c9/0x3d0 [ 383.853456][T19912] rfkill_fop_write+0x452/0x560 [ 383.861798][T19912] vfs_write+0x30b/0xd60 [ 383.866574][T19912] ksys_write+0x152/0x260 [ 383.871439][T19912] do_syscall_64+0x4c/0xa0 [ 383.876393][T19912] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 383.882825][T19912] [ 383.882825][T19912] other info that might help us debug this: [ 383.882825][T19912] [ 383.893060][T19912] Chain exists of: [ 383.893060][T19912] (work_completion)(&hdev->tx_work) --> rfkill_global_mutex --> &hdev->req_lock [ 383.893060][T19912] [ 383.908151][T19912] Possible unsafe locking scenario: [ 383.908151][T19912] [ 383.915631][T19912] CPU0 CPU1 [ 383.921023][T19912] ---- ---- [ 383.926404][T19912] lock(&hdev->req_lock); [ 383.930840][T19912] lock(rfkill_global_mutex); [ 383.938132][T19912] lock(&hdev->req_lock); [ 383.945087][T19912] lock((work_completion)(&hdev->tx_work)); [ 383.951080][T19912] [ 383.951080][T19912] *** DEADLOCK *** [ 383.951080][T19912] [ 383.959245][T19912] 2 locks held by syz.2.7276/19912: [ 383.964447][T19912] #0: ffffffff8d6c65a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x18b/0x560 [ 383.974563][T19912] #1: ffff88802c4e0ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1030 [ 383.984327][T19912] [ 383.984327][T19912] stack backtrace: [ 383.990382][T19912] CPU: 1 PID: 19912 Comm: syz.2.7276 Not tainted syzkaller #0 [ 383.997857][T19912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 384.008008][T19912] Call Trace: [ 384.011298][T19912] [ 384.014242][T19912] dump_stack_lvl+0x188/0x250 [ 384.018936][T19912] ? load_image+0x400/0x400 [ 384.023454][T19912] ? show_regs_print_info+0x20/0x20 [ 384.028670][T19912] ? print_circular_bug+0x12b/0x1a0 [ 384.033886][T19912] check_noncircular+0x296/0x330 [ 384.038832][T19912] ? look_up_lock_class+0x71/0x110 [ 384.044051][T19912] ? add_chain_block+0x940/0x940 [ 384.049000][T19912] ? lockdep_lock+0xf1/0x1f0 [ 384.053616][T19912] ? mark_lock+0x94/0x320 [ 384.057953][T19912] ? _find_first_zero_bit+0xce/0xf0 [ 384.063170][T19912] __lock_acquire+0x2c42/0x7d10 [ 384.068049][T19912] ? lockdep_unlock+0x143/0x2e0 [ 384.072918][T19912] ? mark_lock+0x94/0x320 [ 384.077262][T19912] ? verify_lock_unused+0x140/0x140 [ 384.082478][T19912] ? __lock_acquire+0x12e8/0x7d10 [ 384.087528][T19912] lock_acquire+0x19e/0x400 [ 384.092045][T19912] ? __flush_work+0xfa/0x210 [ 384.096651][T19912] ? verify_lock_unused+0x140/0x140 [ 384.101874][T19912] ? __mutex_trylock_common+0x155/0x260 [ 384.107440][T19912] ? read_lock_is_recursive+0x10/0x10 [ 384.112837][T19912] __flush_work+0x116/0x210 [ 384.117354][T19912] ? __flush_work+0xfa/0x210 [ 384.121963][T19912] ? flush_work+0x20/0x20 [ 384.126314][T19912] ? hci_leds_update_powered+0x148/0x160 [ 384.131961][T19912] ? rcu_lock_release+0x5/0x20 [ 384.136743][T19912] ? __lock_acquire+0x7d10/0x7d10 [ 384.141804][T19912] hci_dev_do_close+0x1e7/0x1030 [ 384.146762][T19912] ? _raw_spin_unlock+0x40/0x40 [ 384.151629][T19912] hci_rfkill_set_block+0x10a/0x190 [ 384.156839][T19912] ? rcu_lock_release+0x20/0x20 [ 384.161712][T19912] rfkill_set_block+0x1c9/0x3d0 [ 384.166589][T19912] rfkill_fop_write+0x452/0x560 [ 384.171458][T19912] ? rfkill_fop_read+0x520/0x520 [ 384.176418][T19912] ? common_file_perm+0xc0/0x1c0 [ 384.181367][T19912] ? fsnotify_perm+0x5d/0x560 [ 384.186058][T19912] ? security_file_permission+0x75/0xa0 [ 384.191616][T19912] ? rfkill_fop_read+0x520/0x520 [ 384.196569][T19912] vfs_write+0x30b/0xd60 [ 384.200850][T19912] ? file_end_write+0x250/0x250 [ 384.205712][T19912] ? __fget_files+0x40f/0x480 [ 384.210411][T19912] ? __fdget_pos+0x1e2/0x370 [ 384.215018][T19912] ? ksys_write+0x71/0x260 [ 384.219452][T19912] ksys_write+0x152/0x260 [ 384.223794][T19912] ? __ia32_sys_read+0x80/0x80 [ 384.228580][T19912] ? lockdep_hardirqs_on+0x94/0x140 [ 384.233799][T19912] do_syscall_64+0x4c/0xa0 [ 384.238228][T19912] ? clear_bhb_loop+0x30/0x80 [ 384.242916][T19912] ? clear_bhb_loop+0x30/0x80 [ 384.247606][T19912] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 384.253518][T19912] RIP: 0033:0x7fada410be59 [ 384.257948][T19912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.277656][T19912] RSP: 002b:00007fada2365028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 384.286093][T19912] RAX: ffffffffffffffda RBX: 00007fada4384fa0 RCX: 00007fada410be59 [ 384.294079][T19912] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 384.302060][T19912] RBP: 00007fada41a1d6f R08: 0000000000000000 R09: 0000000000000000 [ 384.310043][T19912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 384.318023][T19912] R13: 00007fada4385038 R14: 00007fada4384fa0 R15: 00007fffe11799e8 [ 384.326014][T19912] [ 384.329118][ C1] vkms_vblank_simulate: vblank timer overrun [ 387.492210][ T3561] udevd[3561]: worker [4271] /devices/platform/dummy_hcd.4/usb5/5-1 is taking a long time