last executing test programs: 3.204942712s ago: executing program 0 (id=12522): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x80012, r0, 0x80000000) 3.078300514s ago: executing program 0 (id=12527): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) write$UHID_INPUT(r0, &(0x7f0000001580)={0xfc, {"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", 0x1000}}, 0x1006) 2.80925138s ago: executing program 0 (id=12533): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000003b0007010000000000000000017c00000400fc800c00018006000600800a000008000280040015"], 0x38}}, 0xc000) 2.627179774s ago: executing program 0 (id=12536): mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x1) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 2.445865908s ago: executing program 3 (id=12544): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) write$UHID_INPUT(r0, &(0x7f0000001580)={0xfc, {"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", 0x1000}}, 0x1006) 2.422102318s ago: executing program 0 (id=12545): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2a08086, &(0x7f00000007c0)={[{@quota}]}, 0xfc, 0x49f, &(0x7f0000000ec0)="$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") madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 2.159467214s ago: executing program 3 (id=12548): r0 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40044160, 0x0) 1.986241977s ago: executing program 3 (id=12551): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x33) 1.838768421s ago: executing program 3 (id=12553): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000640)='./file1\x00', 0x0, &(0x7f0000000100)={[{@force}, {@nls={'nls', 0x3d, 'maccenteuro'}}, {}]}, 0x1, 0x5c8, &(0x7f00000006c0)="$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") unlink(&(0x7f0000000580)='./file1\x00') 1.529772307s ago: executing program 0 (id=12555): syz_usb_connect$printer(0x6, 0x2d, 0x0, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="06cb"], 0x0) 1.205061724s ago: executing program 2 (id=12560): r0 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) 1.204182944s ago: executing program 3 (id=12561): r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0x2000007c, 0x0, 0x0) 1.060246877s ago: executing program 2 (id=12564): r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x40902) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 986.570658ms ago: executing program 3 (id=12566): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000a9d8ca08450c038064f9010243010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d80)={0x84, &(0x7f0000000980)={0x40, 0x3, 0x1, 'n'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 905.81052ms ago: executing program 1 (id=12568): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r0, 0x4b52, &(0x7f0000000100)={0xfa, 0x1e, 0x805, 0x10000, 0x5, "0a8e4e3847900464ff0300"}) 848.927961ms ago: executing program 2 (id=12569): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0xffffffff, 0x2, 0x1, 0x9}) 810.032882ms ago: executing program 1 (id=12571): r0 = socket$tipc(0x1e, 0x5, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x8124}], 0x1, 0x0, 0x0, 0x0) 758.997183ms ago: executing program 1 (id=12572): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) 729.373284ms ago: executing program 2 (id=12573): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f0000000480)={[{@lazytime}, {@nogrpid}]}, 0x1, 0x54e, &(0x7f0000001e00)="$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") quotactl$Q_GETQUOTA(0xffffffff80000702, &(0x7f0000000200)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0) 638.982596ms ago: executing program 1 (id=12575): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@alu={0x7, 0x0, 0xdde0e440e894aaa1, 0x9, 0x0, 0x0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x440, &(0x7f0000001cc0)=""/4097, 0x41100, 0x5}, 0x41) 617.415936ms ago: executing program 1 (id=12577): r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, 0x0) 544.763538ms ago: executing program 1 (id=12578): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00446, &(0x7f0000000340)={[{@data_err_ignore}, {@noblock_validity}, {@noload}, {@noquota}, {@data_err_abort}, {@oldalloc}, {@nombcache}]}, 0x1, 0xbbb, &(0x7f0000001800)="$eJzs3M9rHOUbAPBnJpvf+TbpF1FbBANSFcVt2pQKPbWeRQU9eGxMNiVk+8Mkggk9pPWuHkQ8FKR/guDdXjwJHupB619QxCJFL20PK7M/0jWb3cR0s2PTzwfezPvOO9nneTLZzDuwkwCeWJPZlzTiUEScTSLG6/vTiBio9oYi1mvH3b97eTZrSVQq7/6RRBIR9+5enm28VlLfjtYHQxFx840k/v9Ja9zl1bXFmXK5tFQfH105f+no8uraawvnZ86VzpUunJh+/cT0yenpLtZ6+9IHXz3301svXr3+6dTbXx74IYnTMVafa66jWyZjcuNn0qwQETPdDpaTvno9zXUmhRwTAgCgo7RpDfd0jEdfPFy8jcf3P+eaHAAAANAVlb6ICgAAALDPJe7/AQAAYJ9rfA7g3t3Ls42W7ycSeuvOmYiYqNXfeL65NlOI9ep2KPojYuTPJJofa01q3/bIJrNI3/5Yylps9xzycBcCbrJ+JSKe3er8J9X6J6pPcbfWn0bEVBfiT24a9/r371HqP92F+HnXD8CT6caZ2oWs9fqX1tY/g7XR5utfYYtr127kff1rrP/ut6z/0o31X1+b9d87O4xx+MErN9vNNa//3v/s17ksfrZ9pKL+hTtXIg4Xtqo/2ag/aVP/2R3GGJ29fa3dXFZ/Vm+j9br+yvWII9XVXGv9DUmn/090dH6hXJqqfd3i9VdPdo7ffP6zlsVv3Av0Qnb+R2J35//SDmNMPPP7oXZz29ef/jaQvFftDdT3fDyzsrJ0LGIgebN1//HOuTSOabxGVv/LL3R+/29Vf/Y3Yb3+c8h+e67Ut9n46qaYo0eOf7P7+vdWVv/cLs//5zuM8fV31z7ctGvjzZV3/QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8HtKIGIskLW7007RYjBiNiKdiJC1fXF55df7iRxfmsrmIiehP5xfKpamIGK+Nk2x8rNp/OD6+aTwdEQcj4ovx4eq4OHuxPJd38QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGwYjYixSNJiRKQR8dd4mhaLeWcFAAAAdN1E3gkAAAAAe879PwAAAOx/Lff/hX+MhnqZCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPvSwedv3EoiYv3UcLVlBupz/blmBuy1dGeHjex1HkDv9eWdAJCbQlO/UqlUckwF6DH3+ECyzfxQ25nBrucCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwH/XS4du3EoiYv3UcLVlBupz/blmBuy1NO8EgNz0dZpMtt0BPMYKeScA5MY9PlBb2T+o1LTOD7X9zsGH3fXdRQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg8TFWbUlajIi02k/TYjHifxExEf3J/ELEVEQciIhfxvsH5xfKpWN5Jw0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDXLa+uLc6Uy6UlHR2dLnaGo2exhutv5jbHDLaf6tDJ+Q8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC5WF5dW5wpl0tLy3lnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAORteXVtcaZcLi3tYSfvGgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyM/fAQAA///+hAlq") renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) 378.697151ms ago: executing program 2 (id=12580): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000003b0007010000000000000000047c0000ec0000000c0001800600060008"], 0x34}}, 0xc000) 378.180911ms ago: executing program 4 (id=12581): r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000140)=0xfffffffffffffffc) 253.198514ms ago: executing program 4 (id=12582): r0 = syz_open_dev$video(&(0x7f0000000100), 0x49, 0x0) ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f0000000340)={0xa2, 0x0, &(0x7f0000000000), {0xf5c, 0x10025, 0x35315258, 0x7, 0x9b1, 0xffffffff}}) 211.959465ms ago: executing program 4 (id=12583): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) syz_io_uring_setup(0x4b5, &(0x7f0000000180)={0x0, 0x86e1, 0x40, 0x8, 0x3d6}, &(0x7f0000010080), &(0x7f0000000000), &(0x7f0000000000)) 159.143516ms ago: executing program 2 (id=12584): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x4}, @CTA_MARK={0x8, 0x4}]}, 0xa0}, 0x1, 0xfffff000}, 0x0) 106.739108ms ago: executing program 4 (id=12585): mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) 72.399938ms ago: executing program 4 (id=12586): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000040)="39000000130003474cbb65e1c3e4ffff06000d00010000000700000025000000040016000c0014000800001f000006060400180000008cdb25", 0x39}], 0x1) 0s ago: executing program 4 (id=12587): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000003b0007010000000000000000036c0000040000000c0001800600060008060000"], 0x24}}, 0x800) kernel console output (not intermixed with test programs): led to initialize the device [ 916.899350][ T4274] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 916.909516][ T4274] usb 3-1: config 2 interface 0 has no altsetting 0 [ 916.925695][ T6233] usb 1-1: ath9k_htc: USB layer deinitialized [ 917.102596][ T4274] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 917.111716][ T4274] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.177531][ T4274] usb 3-1: Product: syz [ 917.181764][ T4274] usb 3-1: Manufacturer: syz [ 917.186391][ T4274] usb 3-1: SerialNumber: syz [ 917.275534][ T4274] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 917.297829][T27690] netlink: 'syz.0.10454': attribute type 10 has an invalid length. [ 917.326946][ T4274] usb 3-1: selecting invalid altsetting 0 [ 917.343378][ T4274] usb 3-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 917.360589][T27690] team0: Device vxcan1 is of different type [ 917.514267][T27704] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10461'. [ 917.542930][T27704] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10461'. [ 917.546930][ T4274] usb 3-1: USB disconnect, device number 24 [ 917.701885][T27715] loop4: detected capacity change from 0 to 128 [ 917.792699][T27715] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 917.822570][T27715] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 918.214717][T27740] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10472'. [ 918.278357][T27740] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10472'. [ 918.316620][T27740] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10472'. [ 918.765696][T27762] loop0: detected capacity change from 0 to 4096 [ 918.847079][T27774] netlink: 11 bytes leftover after parsing attributes in process `syz.4.10487'. [ 918.953654][T27762] ntfs: volume version 3.1. [ 919.060861][T27783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10489'. [ 919.418492][T27811] kAFS: unable to lookup cell '.,' [ 919.475779][ T6238] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 919.581120][T27806] loop0: detected capacity change from 0 to 8192 [ 919.583302][ T4274] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 919.630825][T27806] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 919.650928][T27806] REISERFS (device loop0): using ordered data mode [ 919.700173][T27806] reiserfs: using flush barriers [ 919.733082][T27806] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 919.786012][T27806] REISERFS (device loop0): checking transaction log (loop0) [ 919.799377][ T6238] usb 2-1: Using ep0 maxpacket: 8 [ 919.975745][T27838] loop3: detected capacity change from 0 to 1024 [ 920.043822][T27841] ipt_ECN: cannot use operation on non-tcp rule [ 920.170799][ T4274] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 920.181567][ T6238] usb 2-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 920.199519][ T4274] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.224365][ T4274] usb 3-1: Product: syz [ 920.228602][ T4274] usb 3-1: Manufacturer: syz [ 920.230262][ T6238] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.233230][ T4274] usb 3-1: SerialNumber: syz [ 920.264489][T27806] REISERFS (device loop0): Using tea hash to sort names [ 920.274287][ T6238] usb 2-1: Product: syz [ 920.278364][T27806] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 920.295925][ T6238] usb 2-1: Manufacturer: syz [ 920.318776][ T6238] usb 2-1: SerialNumber: syz [ 920.694689][ T4274] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 920.726909][ T4274] usb 3-1: unit 4 not found! [ 920.731601][ T4274] usb 3-1: unit 3 not found! [ 920.753882][ T4274] usb 3-1: unit 197 not found! [ 920.841059][ T4274] usb 3-1: USB disconnect, device number 25 [ 920.844662][ T6238] mxuport 2-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 920.865809][ T6238] mxuport: probe of 2-1:254.0 failed with error -5 [ 920.915967][ T6238] usb 2-1: USB disconnect, device number 46 [ 921.144167][ T4541] udevd[4541]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 921.217909][T27896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10529'. [ 921.264014][T27902] deleting an unspecified loop device is not supported. [ 921.314527][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 921.563911][T27925] netlink: 'syz.2.10538': attribute type 10 has an invalid length. [ 921.642903][T27925] team0: Device vxcan1 is of different type [ 922.025113][T27946] CIFS: VFS: Unable to allocate memory for devname [ 922.138932][T27952] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.10552'. [ 922.212983][ T26] audit: type=1400 audit(916.300:50): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=27956 comm="syz.4.10554" [ 922.250944][T27952] openvswitch: netlink: Key 29 has unexpected len 3064 expected 0 [ 922.453968][T27971] netlink: 1244 bytes leftover after parsing attributes in process `syz.3.10559'. [ 922.589494][T18720] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 922.671635][T27928] loop0: detected capacity change from 0 to 32768 [ 922.713345][T27928] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.10540 (27928) [ 922.796983][T27928] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 922.863497][T27928] BTRFS info (device loop0): using free space tree [ 922.896985][ T4274] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 922.904692][T27928] BTRFS info (device loop0): has skinny extents [ 922.966262][T28001] netlink: 56 bytes leftover after parsing attributes in process `syz.2.10568'. [ 922.982479][T18720] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 922.991143][T18720] usb 2-1: config 0 has no interface number 0 [ 923.003954][T18720] usb 2-1: config 0 interface 255 has no altsetting 0 [ 923.055166][T28010] loop3: detected capacity change from 0 to 64 [ 923.100374][T27928] BTRFS info (device loop0): enabling ssd optimizations [ 923.157152][ T4274] usb 5-1: Using ep0 maxpacket: 16 [ 923.239009][T18720] usb 2-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 923.248109][T18720] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.292341][ T4274] usb 5-1: config 0 has no interfaces? [ 923.309733][T18720] usb 2-1: Product: syz [ 923.318001][T18720] usb 2-1: Manufacturer: syz [ 923.322658][T18720] usb 2-1: SerialNumber: syz [ 923.376329][T18720] usb 2-1: config 0 descriptor?? [ 923.463424][ T4274] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 923.472551][ T4274] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.512238][ T4274] usb 5-1: Product: syz [ 923.516482][ T4274] usb 5-1: Manufacturer: syz [ 923.563707][ T4274] usb 5-1: SerialNumber: syz [ 923.591066][ T4274] r8152-cfgselector 5-1: config 0 descriptor?? [ 923.655970][T18720] peak_usb 2-1:0.255 can0: unable to request usb[type=0 value=1] err=-71 [ 923.664478][T18720] peak_usb 2-1:0.255: unable to read PCAN-USB FD firmware info (err -71) [ 923.884239][ T4274] usbip-host 5-1: 5-1 is not in match_busid table... skip! [ 923.944626][T18720] peak_usb: probe of 2-1:0.255 failed with error -71 [ 923.966500][ T144] usb 5-1: config 0 descriptor?? [ 923.974026][T18720] usb 2-1: USB disconnect, device number 47 [ 924.098802][ T4208] usb 5-1: USB disconnect, device number 31 [ 924.105357][ T144] usb 5-1: can't set config #0, error -71 [ 924.179740][ T4243] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 924.224666][ T4274] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 924.289892][T28048] netlink: 'syz.1.10575': attribute type 10 has an invalid length. [ 924.452785][T28048] team0: Device vxcan1 is of different type [ 924.585962][ T4243] usb 4-1: Using ep0 maxpacket: 8 [ 924.658400][ T4274] usb 1-1: unable to get BOS descriptor or descriptor too short [ 924.714348][ T4274] usb 1-1: not running at top speed; connect to a high speed hub [ 924.747028][T28062] loop4: detected capacity change from 0 to 256 [ 924.767755][ T4243] usb 4-1: config 243 has an invalid interface number: 78 but max is 0 [ 924.776134][ T4243] usb 4-1: config 243 has no interface number 0 [ 924.797614][ T4243] usb 4-1: config 243 interface 78 has no altsetting 0 [ 924.822627][ T4274] usb 1-1: config 3 has an invalid interface number: 36 but max is 0 [ 924.830979][ T4274] usb 1-1: config 3 has no interface number 0 [ 924.896447][ T4274] usb 1-1: config 3 interface 36 has no altsetting 0 [ 925.013869][ T4243] usb 4-1: New USB device found, idVendor=2639, idProduct=0011, bcdDevice=69.b0 [ 925.047684][ T4243] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.066674][ T4243] usb 4-1: Product: syz [ 925.067630][ T4274] usb 1-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice=31.fc [ 925.083564][ T4243] usb 4-1: Manufacturer: syz [ 925.104587][ T4274] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.109945][ T4243] usb 4-1: SerialNumber: syz [ 925.138432][ T4274] usb 1-1: Product: syz [ 925.160638][ T4274] usb 1-1: Manufacturer: syz [ 925.187930][ T4274] usb 1-1: SerialNumber: syz [ 925.334896][T28080] loop4: detected capacity change from 0 to 8192 [ 925.435792][T28080] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 925.475272][T28080] REISERFS (device loop4): using ordered data mode [ 925.499050][T28080] reiserfs: using flush barriers [ 925.509792][T28080] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 925.538638][ T4243] usb 4-1: USB disconnect, device number 32 [ 925.572075][ T4274] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:3.36/input/input49 [ 925.577830][T28080] REISERFS (device loop4): checking transaction log (loop4) [ 925.589666][ T4274] usb 1-1: USB disconnect, device number 29 [ 925.602724][ T3547] bcm5974 1-1:3.36: could not read from device [ 925.805149][T28080] REISERFS (device loop4): Using tea hash to sort names [ 925.820812][T28080] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 925.858148][T28099] xt_TCPMSS: Only works on TCP SYN packets [ 926.669882][T28137] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10618'. [ 926.670945][T28129] loop1: detected capacity change from 0 to 8192 [ 926.807023][T28129] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 926.845035][T28129] REISERFS (device loop1): using ordered data mode [ 926.868974][T28129] reiserfs: using flush barriers [ 926.929017][T28150] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10622'. [ 926.938165][T28129] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 926.939163][T28129] REISERFS (device loop1): checking transaction log (loop1) [ 927.004193][T28148] device gtp0 entered promiscuous mode [ 927.157405][T28157] sock: sock_timestamping_bind_phc: sock not bind to device [ 927.208204][T28129] REISERFS (device loop1): Using tea hash to sort names [ 927.244831][T28129] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 927.434916][T28169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10635'. [ 927.483163][ T26] audit: type=1400 audit(921.248:51): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=28172 comm="syz.3.10634" [ 927.629302][T28182] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10639'. [ 927.653496][T28185] netlink: 'syz.0.10642': attribute type 3 has an invalid length. [ 927.692771][T28185] netlink: 'syz.0.10642': attribute type 3 has an invalid length. [ 927.744998][T28189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10644'. [ 927.943367][T28203] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10649'. [ 927.952467][T28203] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10649'. [ 927.995242][T28203] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10649'. [ 928.030802][T28203] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10649'. [ 928.057167][T28206] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 928.258042][T28206] 8021q: adding VLAN 0 to HW filter on device bond2 [ 928.363445][T28234] netlink: 'syz.4.10664': attribute type 11 has an invalid length. [ 928.373855][T28234] __nla_validate_parse: 1 callbacks suppressed [ 928.373870][T28234] netlink: 448 bytes leftover after parsing attributes in process `syz.4.10664'. [ 928.528707][T28246] loop3: detected capacity change from 0 to 16 [ 928.584573][T28246] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 929.021427][ T4243] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 929.031330][T28275] netlink: 'syz.3.10684': attribute type 10 has an invalid length. [ 929.074039][T28275] team0: Device vxcan1 is of different type [ 929.168191][T28281] loop0: detected capacity change from 0 to 8 [ 929.498535][T28241] loop2: detected capacity change from 0 to 32768 [ 929.514622][ T4243] usb 2-1: unable to get BOS descriptor or descriptor too short [ 929.621232][ T4243] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 929.662056][ T4243] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 929.710030][ T4243] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 929.732341][T28280] loop4: detected capacity change from 0 to 32768 [ 929.753756][ T4243] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 929.810618][ T4243] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 929.850537][ T4243] usb 2-1: config 1 interface 1 has no altsetting 0 [ 929.878178][T28280] XFS (loop4): Mounting V5 Filesystem [ 929.896086][T28241] XFS (loop2): Mounting V5 Filesystem [ 930.072006][T28319] loop3: detected capacity change from 0 to 8192 [ 930.116208][T28280] XFS (loop4): Ending clean mount [ 930.138231][T28319] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 930.164710][T28319] REISERFS (device loop3): using ordered data mode [ 930.177303][ T4243] usb 2-1: string descriptor 0 read error: -22 [ 930.183640][ T4243] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 930.199214][T28319] reiserfs: using flush barriers [ 930.229505][ T4243] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.259094][T28319] REISERFS warning (device loop3): sh-457 journal_init_dev: journal_init_dev: Cannot open './file1': -15 [ 930.272170][T28319] REISERFS warning (device loop3): sh-462 journal_init: unable to initialize journal device [ 930.287335][T28241] XFS (loop2): Ending clean mount [ 930.294615][ T4196] XFS (loop4): Unmounting Filesystem [ 930.298248][T28319] REISERFS warning (device loop3): sh-2022 reiserfs_fill_super: unable to initialize journal space [ 930.330468][T28241] XFS (loop2): Quotacheck needed: Please wait. [ 930.443107][T28241] XFS (loop2): Quotacheck: Done. [ 930.510699][ T4205] XFS (loop2): Unmounting Filesystem [ 930.840042][ T4243] usb 2-1: cannot get ctl value: req = 0x82, wValue = 0x201, wIndex = 0x200, type = 4 [ 930.864703][ T4243] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 930.898989][ T4243] usb 2-1: USB disconnect, device number 48 [ 930.997516][ T7978] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 931.114076][T28349] loop0: detected capacity change from 0 to 512 [ 931.174294][ T4541] udevd[4541]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 931.220147][T28349] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 931.310149][ T4274] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 931.384267][T28359] loop2: detected capacity change from 0 to 512 [ 931.429402][ T7978] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 931.443602][ T7978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.467022][ T7978] usb 4-1: config 0 descriptor?? [ 931.492844][T28359] EXT4-fs (loop2): Ignoring removed oldalloc option [ 931.503060][T28359] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 931.505536][ T7978] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 931.535435][ T7978] usb 4-1: Detected FT-X [ 931.565099][T28359] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 931.583713][ T4274] usb 5-1: Using ep0 maxpacket: 16 [ 931.627316][T28359] EXT4-fs (loop2): orphan cleanup on readonly fs [ 931.673044][T28359] EXT4-fs error (device loop2): ext4_orphan_get:1432: comm syz.2.10716: bad orphan inode 267 [ 931.719365][T28359] EXT4-fs (loop2): Remounting filesystem read-only [ 931.725975][T28359] EXT4-fs (loop2): mounted filesystem without journal. Opts: oldalloc,noblock_validity,discard,errors=remount-ro,lazytime. Quota mode: none. [ 931.728293][ T4274] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 931.759571][ T7978] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 931.791239][ T7978] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 931.794385][ T4274] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 931.819588][ T7978] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 931.829125][ T4274] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 931.840295][ T4274] usb 5-1: config 0 interface 0 has no altsetting 0 [ 931.847681][ T4274] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice= 2.eb [ 931.876771][ T4274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.886472][ T7978] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 931.899003][ T4274] usb 5-1: config 0 descriptor?? [ 931.937650][ T7978] usb 4-1: USB disconnect, device number 33 [ 932.006317][ T7978] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 932.032648][ T7978] ftdi_sio 4-1:0.0: device disconnected [ 932.120104][T28390] netlink: 'syz.1.10730': attribute type 5 has an invalid length. [ 932.178676][ T4274] input: USB Synaptics Device 06cb:0006 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input50 [ 932.212758][ T3547] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 932.240735][ T3547] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 932.265616][ T3547] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 932.374954][ T3547] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 932.420107][ T4274] usb 5-1: USB disconnect, device number 32 [ 932.426842][T28409] MTD: Couldn't look up './bus': -15 [ 932.661908][T28423] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10746'. [ 932.790699][T28428] loop0: detected capacity change from 0 to 4096 [ 932.797297][ T4208] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 932.836795][T28431] device xfrm0 entered promiscuous mode [ 932.880917][T28428] ntfs: volume version 3.1. [ 932.889399][T28428] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 932.905239][T28428] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 932.918376][T28428] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 932.964407][T28428] ntfs: (device loop0): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4). Marking corrupt inode and base inode 0x1a as bad. Run chkdsk. [ 933.009465][T28428] ntfs: (device loop0): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute. [ 933.042199][ T7978] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 933.071709][T28428] ntfs: (device loop0): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 933.085054][ T4208] usb 2-1: Using ep0 maxpacket: 32 [ 933.298832][ T4208] usb 2-1: unable to get BOS descriptor or descriptor too short [ 933.320076][ T7978] usb 3-1: Using ep0 maxpacket: 8 [ 933.369997][ T4243] kernel write not supported for file /input/mice (pid: 4243 comm: kworker/0:5) [ 933.396034][ T4208] usb 2-1: config index 0 descriptor too short (expected 321, got 65) [ 933.408118][ T4208] usb 2-1: config 48 has an invalid interface descriptor of length 2, skipping [ 933.427357][ T4208] usb 2-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 933.448265][ T4208] usb 2-1: config 48 has 0 interfaces, different from the descriptor's value: 3 [ 933.469923][ T7978] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 933.641596][ T4208] usb 2-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice= 0.40 [ 933.672395][ T4208] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.683736][ T7978] usb 3-1: New USB device found, idVendor=0582, idProduct=00eb, bcdDevice= 0.40 [ 933.692823][ T7978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.712437][ T4208] usb 2-1: Product: syz [ 933.729261][ T4208] usb 2-1: Manufacturer: syz [ 933.737448][ T7978] usb 3-1: Product: syz [ 933.741676][ T7978] usb 3-1: Manufacturer: syz [ 933.757039][ T4208] usb 2-1: SerialNumber: syz [ 933.762373][ T7978] usb 3-1: SerialNumber: syz [ 933.946127][T28477] netlink: 'syz.4.10774': attribute type 10 has an invalid length. [ 933.968976][T28477] team0: Device vxcan1 is of different type [ 934.099276][T28483] netlink: 'syz.4.10776': attribute type 1 has an invalid length. [ 934.118968][T28483] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10776'. [ 934.128880][ T4208] usb 2-1: USB disconnect, device number 49 [ 934.254745][T28487] cgroup: Unknown subsys name 'noxattr' [ 934.351460][ T7978] usb 3-1: USB disconnect, device number 26 [ 934.537073][T28467] loop3: detected capacity change from 0 to 32768 [ 934.671358][T28507] tmpfs: Bad value for 'mpol' [ 934.716844][T28467] XFS (loop3): Mounting V5 Filesystem [ 934.826839][T28467] XFS (loop3): Ending clean mount [ 934.844516][T28467] XFS (loop3): Quotacheck needed: Please wait. [ 934.952831][T28467] XFS (loop3): Quotacheck: Done. [ 935.103451][ T4204] XFS (loop3): Unmounting Filesystem [ 935.520267][T28561] ieee802154 phy0 wpan0: encryption failed: -22 [ 935.660054][T28569] device caif0 entered promiscuous mode [ 935.979018][T28590] loop1: detected capacity change from 0 to 256 [ 936.135713][T28590] exfat: Deprecated parameter 'utf8' [ 936.155183][T28603] netlink: 52 bytes leftover after parsing attributes in process `syz.4.10833'. [ 936.176488][T28590] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 936.390632][T28619] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.710970][T28646] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (3) [ 936.771203][T28651] loop1: detected capacity change from 0 to 16 [ 936.805453][T28651] erofs: (device loop1): mounted with root inode @ nid 36. [ 936.830948][T28651] attempt to access beyond end of device [ 936.830948][T28651] loop1: rw=524288, want=32, limit=16 [ 936.886035][T28651] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -21 in[49, 4047] out[4096] [ 936.931490][ T26] audit: type=1800 audit(930.079:52): pid=28651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.10857" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 937.078061][T28651] syz.1.10857 (28651) used greatest stack depth: 19184 bytes left [ 937.118982][T28668] netlink: 'syz.2.10865': attribute type 3 has an invalid length. [ 937.146543][T28668] netlink: 232 bytes leftover after parsing attributes in process `syz.2.10865'. [ 937.355056][T28681] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.10871'. [ 938.172002][T28733] usb usb7: usbfs: interface 0 claimed by hub while 'syz.0.10897' sets config #-1 [ 938.338436][T28746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10903'. [ 938.405863][T28746] netlink: 'syz.1.10903': attribute type 1 has an invalid length. [ 938.432692][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 938.439030][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 938.525614][T28758] netlink: 'syz.3.10909': attribute type 1 has an invalid length. [ 938.542100][T28759] netlink: 'syz.4.10910': attribute type 2 has an invalid length. [ 938.554784][T28759] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 938.599662][T28758] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.10909'. [ 938.611874][T28763] netlink: 'syz.1.10912': attribute type 10 has an invalid length. [ 938.630858][T28763] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10912'. [ 938.640196][T28758] netlink: 'syz.3.10909': attribute type 1 has an invalid length. [ 938.664728][T28763] device team0 entered promiscuous mode [ 938.726786][T28763] device team_slave_0 entered promiscuous mode [ 938.733589][T28763] device team_slave_1 entered promiscuous mode [ 938.763562][T28763] device batadv0 entered promiscuous mode [ 938.790437][T28763] bridge0: port 1(team0) entered blocking state [ 938.810896][T28774] ieee802154 phy0 wpan0: encryption failed: -22 [ 938.832851][T28763] bridge0: port 1(team0) entered disabled state [ 938.854886][T28763] bridge0: port 1(team0) entered blocking state [ 938.861320][T28763] bridge0: port 1(team0) entered forwarding state [ 939.127346][T10269] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 939.137674][T10269] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 939.556902][T28818] autofs4:pid:28818:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.768), cmd(0xc0189375) [ 939.608138][T28823] netlink: 'syz.2.10942': attribute type 1 has an invalid length. [ 939.638229][T18724] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 939.651944][T28818] autofs4:pid:28818:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 939.905458][T18724] usb 1-1: Using ep0 maxpacket: 32 [ 939.925284][T28839] loop3: detected capacity change from 0 to 1024 [ 939.951483][T28842] netlink: 'syz.2.10952': attribute type 4 has an invalid length. [ 940.034027][T18724] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 940.053014][T18724] usb 1-1: config 0 has no interface number 0 [ 940.082165][T18724] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 940.125492][T18724] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 940.182122][T18724] usb 1-1: config 0 interface 85 has no altsetting 0 [ 940.326183][T28858] loop3: detected capacity change from 0 to 1764 [ 940.360082][T28862] loop1: detected capacity change from 0 to 512 [ 940.366321][T18724] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 940.366397][T18724] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.366419][T18724] usb 1-1: Product: syz [ 940.366435][T18724] usb 1-1: Manufacturer: syz [ 940.366452][T18724] usb 1-1: SerialNumber: syz [ 940.371276][T18724] usb 1-1: config 0 descriptor?? [ 940.428742][T28862] EXT4-fs (loop1): Ignoring removed bh option [ 940.518664][T28862] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2759: inode #11: comm syz.1.10962: corrupted xattr block 95 [ 940.630178][T28862] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2809: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 940.670124][T28877] loop4: detected capacity change from 0 to 1024 [ 940.677259][T28862] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.10962: bg 0: block 7: invalid block bitmap [ 940.695925][T28862] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 940.706158][T28862] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2925: inode #11: comm syz.1.10962: corrupted xattr block 95 [ 940.748147][T28877] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 940.776021][T28877] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 69: comm syz.4.10969: lblock 8 mapped to illegal pblock 69 (length 1) [ 940.776256][T28877] EXT4-fs (loop4): Remounting filesystem read-only [ 940.776276][T28877] Quota error (device loop4): write_blk: dquota write failed [ 940.776307][T28877] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 68: comm syz.4.10969: lblock 7 mapped to illegal pblock 68 (length 1) [ 940.776535][T28877] EXT4-fs (loop4): Remounting filesystem read-only [ 940.776554][T28877] Quota error (device loop4): write_blk: dquota write failed [ 940.776583][T28877] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 67: comm syz.4.10969: lblock 6 mapped to illegal pblock 67 (length 1) [ 940.776797][T28877] EXT4-fs (loop4): Remounting filesystem read-only [ 940.776815][T28877] Quota error (device loop4): write_blk: dquota write failed [ 940.776851][T28877] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 940.776885][T28877] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 48: comm syz.4.10969: lblock 0 mapped to illegal pblock 48 (length 1) [ 940.777071][T28877] EXT4-fs (loop4): Remounting filesystem read-only [ 940.777097][T28877] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 940.777114][T28877] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.10969: Failed to acquire dquot type 0 [ 940.777288][T28877] EXT4-fs (loop4): Remounting filesystem read-only [ 940.777333][T28877] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 940.777511][T28877] EXT4-fs (loop4): Remounting filesystem read-only [ 940.777528][T28877] EXT4-fs error (device loop4): ext4_evict_inode:284: inode #11: comm syz.4.10969: mark_inode_dirty error [ 940.777710][T28877] EXT4-fs (loop4): Remounting filesystem read-only [ 940.777727][T28877] EXT4-fs warning (device loop4): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 940.777785][T28877] EXT4-fs (loop4): 1 orphan inode deleted [ 940.777805][T28877] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,noblock_validity,data_err=ignore,errors=remount-ro,nodiscard,stripe=0x0000000000000001,jqfmt=vfsv1,. Quota mode: none. [ 940.781597][T28877] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 48: comm syz.4.10969: lblock 0 mapped to illegal pblock 48 (length 1) [ 940.853004][T28877] EXT4-fs (loop4): Remounting filesystem read-only [ 940.857190][ T144] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 940.985754][T18724] appletouch 1-1:0.85: Failed to request geyser raw mode [ 941.006711][T28862] EXT4-fs warning (device loop1): ext4_evict_inode:304: xattr delete (err -117) [ 941.022327][T28877] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 941.103733][T18724] appletouch: probe of 1-1:0.85 failed with error -5 [ 941.115043][ T144] EXT4-fs (loop4): Remounting filesystem read-only [ 941.133837][T28862] EXT4-fs (loop1): 1 orphan inode deleted [ 941.153334][T18724] usb 1-1: USB disconnect, device number 30 [ 941.168892][ T144] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 941.180033][T28862] EXT4-fs (loop1): mounted filesystem without journal. Opts: auto_da_alloc,bh,,errors=continue. Quota mode: none. [ 941.196516][T28884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10971'. [ 941.221548][ T144] EXT4-fs error (device loop4): ext4_release_dquot:6272: comm kworker/u4:1: Failed to release dquot type 0 [ 941.227100][T28884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10971'. [ 941.258345][ T144] EXT4-fs (loop4): Remounting filesystem read-only [ 941.285727][ T4196] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 941.346124][ T4196] EXT4-fs (loop4): Remounting filesystem read-only [ 941.392324][ T4196] EXT4-fs error (device loop4): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 941.407820][ T4196] EXT4-fs (loop4): Remounting filesystem read-only [ 941.565033][T28896] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10972'. [ 941.656559][T28900] loop1: detected capacity change from 0 to 512 [ 941.717748][T28900] FAT-fs (loop1): Directory bread(block 199916) failed [ 941.756255][T28900] FAT-fs (loop1): Directory bread(block 199917) failed [ 941.763210][T28900] FAT-fs (loop1): Directory bread(block 199918) failed [ 941.792182][T28900] FAT-fs (loop1): Directory bread(block 199919) failed [ 941.824579][T28900] FAT-fs (loop1): Directory bread(block 199920) failed [ 941.851664][T28900] FAT-fs (loop1): Directory bread(block 199921) failed [ 941.876026][T28900] FAT-fs (loop1): Directory bread(block 199922) failed [ 941.885369][T28915] netlink: 'syz.2.10985': attribute type 4 has an invalid length. [ 941.900013][T28900] FAT-fs (loop1): Directory bread(block 199923) failed [ 941.908340][T28915] netlink: 17 bytes leftover after parsing attributes in process `syz.2.10985'. [ 941.948515][T28900] FAT-fs (loop1): Directory bread(block 199916) failed [ 941.981692][T28900] FAT-fs (loop1): Directory bread(block 199917) failed [ 942.100236][T28923] ipt_REJECT: ECHOREPLY no longer supported. [ 942.288483][T28935] netlink: 512 bytes leftover after parsing attributes in process `syz.4.10994'. [ 942.469491][T28945] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 942.599107][T28955] netlink: 84 bytes leftover after parsing attributes in process `syz.0.11003'. [ 942.768355][T28966] netlink: ct family unspecified [ 942.814040][T28966] openvswitch: netlink: Actions may not be safe on all matching packets [ 942.966904][T28977] ubi0: detaching mtd0 [ 943.037062][T28977] ubi0: mtd0 is detached [ 943.221283][T28992] kAFS: Can only specify source 'none' with -o dyn [ 943.741469][T29035] loop0: detected capacity change from 0 to 512 [ 943.758570][T29031] loop3: detected capacity change from 0 to 1024 [ 943.876053][T29035] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.11042: inode has both inline data and extents flags [ 943.901589][T29035] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.11042: couldn't read orphan inode 15 (err -117) [ 943.915897][T29035] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,debug_want_extra_isize=0x0000000000000008,grpjquota=,abort,barrier=0x0000000000000a65,prjquota,,errors=continue. Quota mode: writeback. [ 943.958362][T29031] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 943.965772][T29031] hfsplus: xattr search failed [ 944.019495][T29031] attempt to access beyond end of device [ 944.019495][T29031] loop3: rw=0, want=917506, limit=1024 [ 944.033524][T29031] Buffer I/O error on dev loop3, logical block 458752, async page read [ 944.041966][T29031] hfsplus: unable to mark blocks free: error -5 [ 944.048844][T29031] hfsplus: can't free extent [ 944.082776][T29046] netlink: 388 bytes leftover after parsing attributes in process `syz.4.11048'. [ 944.419182][T29025] loop1: detected capacity change from 0 to 32768 [ 944.545227][T29025] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.11036 (29025) [ 944.617846][T29025] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 944.662672][T29025] BTRFS info (device loop1): force zlib compression, level 3 [ 944.670127][T29025] BTRFS info (device loop1): turning on flush-on-commit [ 944.731972][T29025] BTRFS info (device loop1): max_inline at 4096 [ 944.768947][T29025] BTRFS info (device loop1): using free space tree [ 944.837438][T29025] BTRFS info (device loop1): has skinny extents [ 944.859615][T18721] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 944.892064][T29067] loop2: detected capacity change from 0 to 4096 [ 944.937327][T29067] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 945.154593][T18721] usb 1-1: Using ep0 maxpacket: 8 [ 945.238199][T29025] BTRFS info (device loop1): enabling ssd optimizations [ 945.258656][T29106] device gre0 entered promiscuous mode [ 945.269993][T29025] BTRFS warning (device loop1): get dev_stats failed, device not found [ 945.283052][T18721] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 945.389690][ T7978] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 945.476299][T18721] usb 1-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 945.505777][T18721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.518243][T18721] usb 1-1: Product: syz [ 945.522462][T18721] usb 1-1: Manufacturer: syz [ 945.527081][T18721] usb 1-1: SerialNumber: syz [ 945.558974][T18721] usb 1-1: config 0 descriptor?? [ 945.615872][T18721] usb 1-1: bad CDC descriptors [ 945.621807][T18721] usb 1-1: unsupported MDLM descriptors [ 945.632449][T18721] cdc_acm 1-1:0.0: Zero length descriptor references [ 945.645892][T18721] cdc_acm: probe of 1-1:0.0 failed with error -22 [ 945.863659][ T7978] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 945.878736][ T7978] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 945.927715][ T7978] usb 5-1: config 0 has no interface number 0 [ 945.968436][ T7978] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 945.989319][T29126] ip6t_srh: unknown srh match flags 4000 [ 946.016690][ T7978] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 946.055970][ T7978] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 946.146665][ T6513] usb 1-1: USB disconnect, device number 31 [ 946.179277][T29134] netlink: 'syz.2.11081': attribute type 21 has an invalid length. [ 946.179355][T29134] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11081'. [ 946.179385][T29134] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11081'. [ 946.277184][ T7978] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 946.277217][ T7978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.277240][ T7978] usb 5-1: Product: syz [ 946.277256][ T7978] usb 5-1: Manufacturer: syz [ 946.277273][ T7978] usb 5-1: SerialNumber: syz [ 946.279032][ T7978] usb 5-1: config 0 descriptor?? [ 946.300185][T29136] loop1: detected capacity change from 0 to 764 [ 946.370171][T29136] Symlink component flag not implemented [ 946.370225][T29136] Symlink component flag not implemented (15) [ 946.487255][T29142] netlink: 72 bytes leftover after parsing attributes in process `syz.1.11085'. [ 946.555260][ T7978] usbtouchscreen: probe of 5-1:0.117 failed with error -71 [ 946.558030][ T7978] usb 5-1: USB disconnect, device number 33 [ 946.651480][T29151] netlink: 'syz.1.11089': attribute type 10 has an invalid length. [ 946.651504][T29151] __nla_validate_parse: 3 callbacks suppressed [ 946.651516][T29151] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11089'. [ 946.651586][T29151] device virt_wifi0 entered promiscuous mode [ 946.651613][T29151] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 946.738079][T29154] hsr0: VLAN not yet supported [ 946.903766][T29160] loop2: detected capacity change from 0 to 1024 [ 946.908064][ T6513] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 947.002676][T29160] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 947.033055][T29160] hfsplus: xattr search failed [ 947.073986][T29160] attempt to access beyond end of device [ 947.073986][T29160] loop2: rw=0, want=917506, limit=1024 [ 947.148024][T29160] Buffer I/O error on dev loop2, logical block 458752, async page read [ 947.169884][T29160] hfsplus: unable to mark blocks free: error -5 [ 947.178233][T29160] hfsplus: can't free extent [ 947.207087][ T6513] usb 1-1: Using ep0 maxpacket: 32 [ 947.337182][ T6513] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 947.345331][ T6513] usb 1-1: config 0 has no interface number 0 [ 947.378189][ T6513] usb 1-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 947.407466][ T6513] usb 1-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 947.436372][ T6513] usb 1-1: config 0 interface 12 has no altsetting 0 [ 947.629757][ T6513] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 947.651247][ T6513] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.679746][ T6513] usb 1-1: Product: syz [ 947.695999][ T6513] usb 1-1: Manufacturer: syz [ 947.705008][ T6513] usb 1-1: SerialNumber: syz [ 947.720727][ T6513] usb 1-1: config 0 descriptor?? [ 947.764595][ T6513] f81534 1-1:0.12: unsupported endpoint max packet size [ 947.880685][T18719] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 948.031083][T29177] loop4: detected capacity change from 0 to 32768 [ 948.059148][T29216] loop2: detected capacity change from 0 to 1024 [ 948.130830][T29216] hfsplus: gid requires an argument [ 948.136991][T29216] hfsplus: unable to parse mount options [ 948.147025][T18719] usb 4-1: Using ep0 maxpacket: 16 [ 948.160741][T29222] xt_hashlimit: size too large, truncated to 1048576 [ 948.201636][T29222] xt_hashlimit: invalid interval [ 948.325431][T29177] XFS (loop4): Mounting V5 Filesystem [ 948.351200][T18719] usb 4-1: unable to get BOS descriptor or descriptor too short [ 948.439527][T18719] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 948.452622][T29177] XFS (loop4): Ending clean mount [ 948.486894][T18719] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 948.533128][ T4196] XFS (loop4): Unmounting Filesystem [ 948.541585][T18719] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 948.786872][T18719] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 948.799837][T18719] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.816786][T18719] usb 4-1: Product: syz [ 948.821011][T18719] usb 4-1: Manufacturer: syz [ 948.840942][T18719] usb 4-1: SerialNumber: syz [ 949.116059][T29258] delete_channel: no stack [ 949.156829][T18719] snd-ua101 4-1:1.1: invalid bNumEndpoints [ 949.169801][T18719] snd-ua101 4-1:1.0: invalid num_altsetting [ 949.205513][T18719] usb 4-1: USB disconnect, device number 34 [ 949.566124][T29274] device syz_tun entered promiscuous mode [ 949.655334][T29257] loop4: detected capacity change from 0 to 32768 [ 949.721999][T29257] (syz.4.11137,29257,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 949.774929][T29257] (syz.4.11137,29257,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 949.797737][T29276] loop1: detected capacity change from 0 to 4096 [ 949.842099][T29276] ntfs3: loop1: ino=3, Correct links count -> 2. [ 949.875836][ T7978] usb 1-1: USB disconnect, device number 32 [ 949.893476][T29257] JBD2: Ignoring recovery information on journal [ 950.061613][T29293] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11152'. [ 950.064985][T29257] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 950.385336][T29309] loop2: detected capacity change from 0 to 128 [ 950.456761][ T4196] ocfs2: Unmounting device (7,4) on (node local) [ 950.513019][T29309] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 950.547224][T29309] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 950.756458][ T6513] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 951.012965][ T6513] usb 4-1: Using ep0 maxpacket: 8 [ 951.056369][ T6513] usb 4-1: too many configurations: 249, using maximum allowed: 8 [ 951.517355][T29380] loop2: detected capacity change from 0 to 1024 [ 951.566158][T29384] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11198'. [ 951.609727][T29380] hfsplus: catalog record size mismatch (type 1, got 62, expected 88) [ 951.720084][ T4208] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 951.748545][T29390] loop1: detected capacity change from 0 to 128 [ 951.841929][T29390] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 951.922013][ T6513] usb 4-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=b3.ff [ 951.943054][ T6513] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2 [ 951.951098][ T6513] usb 4-1: Product: syz [ 952.015634][ T6513] usb 4-1: Manufacturer: syz [ 952.032708][ T6513] usb 4-1: SerialNumber: syz [ 952.061592][ T6513] usb 4-1: config 0 descriptor?? [ 952.323617][T29316] udc-core: couldn't find an available UDC or it's busy [ 952.338629][T29316] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 952.360658][ T4208] usb 1-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 952.380811][ T4208] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.384982][ T6513] mdc800 4-1:0.0: probe fails -> wrong Number of Configuration [ 952.409840][ T4208] usb 1-1: Product: syz [ 952.425306][ T4208] usb 1-1: Manufacturer: syz [ 952.439224][ T4208] usb 1-1: SerialNumber: syz [ 952.448648][ T6513] usb 4-1: USB disconnect, device number 35 [ 952.489609][ T4208] usb 1-1: config 0 descriptor?? [ 952.554865][ T4208] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 952.612742][T29420] netlink: 256 bytes leftover after parsing attributes in process `syz.1.11214'. [ 952.612790][T29420] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 952.699859][T29422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11215'. [ 953.044421][ T4208] sonixb 1-1:0.0: Error writing register 01: -71 [ 953.051003][ T4208] sonixb: probe of 1-1:0.0 failed with error -71 [ 953.087529][ T4208] usb 1-1: USB disconnect, device number 33 [ 953.908974][T29495] loop4: detected capacity change from 0 to 256 [ 954.020190][T29501] xt_HMARK: spi-set and port-set can't be combined [ 954.073247][T29505] loop3: detected capacity change from 0 to 164 [ 954.112214][T29509] loop1: detected capacity change from 0 to 512 [ 954.276225][T29509] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.11256: bad orphan inode 11862016 [ 954.331659][T29505] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 954.350022][T29509] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 954.445412][T29513] loop2: detected capacity change from 0 to 32768 [ 954.500599][T29513] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.11259 (29513) [ 954.595660][T29513] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 954.639545][T29513] BTRFS info (device loop2): force zlib compression, level 3 [ 954.647118][T29513] BTRFS info (device loop2): turning on flush-on-commit [ 954.666955][T29526] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11264'. [ 954.685921][T29513] BTRFS info (device loop2): max_inline at 4096 [ 954.711984][T29513] BTRFS info (device loop2): using free space tree [ 954.742809][T29530] loop1: detected capacity change from 0 to 128 [ 954.751812][T29513] BTRFS info (device loop2): has skinny extents [ 954.752356][T29526] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11264'. [ 954.838612][T29531] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 954.921344][T29530] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2 [ 955.056164][T29549] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11268'. [ 955.128426][ T26] audit: type=1326 audit(947.094:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29560 comm="syz.4.11271" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4a4f5e59 code=0x7ffc0000 [ 955.182575][T29513] BTRFS info (device loop2): enabling ssd optimizations [ 955.275990][ T26] audit: type=1326 audit(947.094:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29560 comm="syz.4.11271" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4a4f5e59 code=0x7ffc0000 [ 955.340819][ T26] audit: type=1326 audit(947.094:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29560 comm="syz.4.11271" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7fca4a4f5e59 code=0x7ffc0000 [ 955.461760][ T26] audit: type=1326 audit(947.094:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29560 comm="syz.4.11271" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4a4f5e59 code=0x7ffc0000 [ 955.498839][T29513] BTRFS warning (device loop2): get dev_stats failed, device not found [ 955.638839][ T26] audit: type=1326 audit(947.094:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29560 comm="syz.4.11271" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4a4f5e59 code=0x7ffc0000 [ 955.663767][T29579] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11280'. [ 955.732603][T29579] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11280'. [ 956.016375][T29590] loop1: detected capacity change from 0 to 2048 [ 956.121373][T29590] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 956.197910][T29590] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 956.362886][T29602] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11282'. [ 956.398079][T29602] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11282'. [ 956.796652][T18719] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 957.235321][T18719] usb 4-1: unable to get BOS descriptor or descriptor too short [ 957.260702][T29643] sctp: [Deprecated]: syz.4.11310 (pid 29643) Use of struct sctp_assoc_value in delayed_ack socket option. [ 957.260702][T29643] Use struct sctp_sack_info instead [ 957.288619][T18719] usb 4-1: not running at top speed; connect to a high speed hub [ 957.359402][T29608] loop0: detected capacity change from 0 to 32768 [ 957.374227][T18719] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 957.384374][T18719] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 957.407626][T29647] ceph: No path or : separator in source [ 957.416716][T18719] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 957.484314][T29608] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.11293 (29608) [ 957.507310][T29608] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 957.555582][T29608] BTRFS info (device loop0): force zlib compression, level 3 [ 957.565771][T29608] BTRFS info (device loop0): turning on flush-on-commit [ 957.581289][T29608] BTRFS info (device loop0): max_inline at 4096 [ 957.609279][T18719] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 957.616157][T29608] BTRFS info (device loop0): using free space tree [ 957.630107][T29608] BTRFS info (device loop0): has skinny extents [ 957.659909][T18719] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.689331][T18719] usb 4-1: Product: syz [ 957.713252][T18719] usb 4-1: Manufacturer: syz [ 957.718309][T18719] usb 4-1: SerialNumber: syz [ 957.855088][T29608] BTRFS info (device loop0): enabling ssd optimizations [ 957.884738][T29608] BTRFS warning (device loop0): get dev_stats failed, device not found [ 958.274646][T18719] usb 4-1: USB disconnect, device number 36 [ 958.451637][ T4541] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 9 /dev/loop0 scanned by udevd (4541) [ 958.463552][ T6229] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 958.913530][ T6229] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 958.946036][ T6229] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 958.978841][ T6229] usb 3-1: config 0 has no interface number 0 [ 958.996868][ T6229] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 959.015800][ T6229] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 959.026783][T29727] loop0: detected capacity change from 0 to 256 [ 959.052239][ T6229] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 959.319961][ T6229] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 959.340419][ T6229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.416911][ T6229] usb 3-1: Product: syz [ 959.427117][ T150] block nbd3: Attempted send on invalid socket [ 959.433369][ T150] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 959.445092][T29745] XFS (nbd3): SB validate failed with error -5. [ 959.466887][ T6229] usb 3-1: Manufacturer: syz [ 959.471835][ T6229] usb 3-1: SerialNumber: syz [ 959.518016][ T6229] usb 3-1: config 0 descriptor?? [ 959.715268][ T8307] Bluetooth: hci0: command 0x080f tx timeout [ 959.752027][T29766] loop4: detected capacity change from 0 to 4096 [ 959.843636][ T6229] usbtouchscreen: probe of 3-1:0.117 failed with error -71 [ 959.861706][ T6229] usb 3-1: USB disconnect, device number 27 [ 959.958848][T29766] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 960.048896][T29774] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 960.323889][T29758] loop0: detected capacity change from 0 to 32768 [ 960.469604][T29802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11375'. [ 960.509360][T29800] netlink: 92 bytes leftover after parsing attributes in process `syz.3.11373'. [ 960.537773][T29758] XFS (loop0): Mounting V5 Filesystem [ 960.579645][T29812] loop2: detected capacity change from 0 to 164 [ 960.701898][T29825] loop4: detected capacity change from 0 to 256 [ 960.714904][T29758] XFS (loop0): Ending clean mount [ 960.725312][T29758] XFS (loop0): Quotacheck needed: Please wait. [ 960.856367][T29812] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 960.885332][T29758] XFS (loop0): Quotacheck: Done. [ 960.991067][ T4199] XFS (loop0): Unmounting Filesystem [ 961.279773][T29855] xt_CT: You must specify a L4 protocol and not use inversions on it [ 961.393680][T29860] CIFS: VFS: Unable to allocate memory for devname [ 961.749672][T29883] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11412'. [ 961.790237][T29881] netlink: 'syz.2.11410': attribute type 1 has an invalid length. [ 961.798146][T29881] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.11410'. [ 961.810637][T29883] netlink: 'syz.1.11412': attribute type 1 has an invalid length. [ 962.193057][T29901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11420'. [ 962.202082][T29905] tmpfs: Bad value for 'mpol' [ 962.433492][T29913] comedi comedi2: no devices specified [ 962.530544][T29919] netlink: 'syz.4.11429': attribute type 10 has an invalid length. [ 962.631289][T29925] SET target dimension over the limit! [ 962.675121][T29929] ieee802154 phy0 wpan0: encryption failed: -22 [ 962.759086][T29928] loop0: detected capacity change from 0 to 4096 [ 962.826332][T29928] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 962.895365][T29928] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842e018, mo2=0002] [ 962.922311][T29928] System zones: 0-5 [ 962.932085][T29928] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,stripe=0x0000000000000061,journal_ioprio=0x0000000000000002,nouid32,nodiscard,nomblk_io_submit,acl,nojournal_checksum,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 962.956211][ C0] vkms_vblank_simulate: vblank timer overrun [ 963.264542][T29962] delete_channel: no stack [ 963.474021][T29976] loop0: detected capacity change from 0 to 1024 [ 963.521207][ T6509] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 963.779829][ T6509] usb 5-1: Using ep0 maxpacket: 16 [ 963.912830][ T6509] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 964.109162][ T6509] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 964.118414][ T6509] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.152823][ T6509] usb 5-1: Product: syz [ 964.157058][ T6509] usb 5-1: Manufacturer: syz [ 964.161709][ T6509] usb 5-1: SerialNumber: syz [ 964.198852][ T6509] usb 5-1: config 0 descriptor?? [ 964.233139][T30002] loop0: detected capacity change from 0 to 4096 [ 964.259928][T18719] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 964.277248][ T6509] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 964.410235][T30002] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 964.420619][T30019] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 964.442867][T30002] NILFS (loop0): mounting fs with errors [ 964.476295][ T6508] usb 5-1: USB disconnect, device number 34 [ 964.493932][ T1267] usb 5-1: Failed to submit usb control message: -71 [ 964.501181][ T1267] usb 5-1: unable to send the bmi data to the device: -71 [ 964.515183][T18719] usb 4-1: Using ep0 maxpacket: 16 [ 964.553500][ T1267] usb 5-1: unable to get target info from device [ 964.575556][ T1267] usb 5-1: could not get target info (-71) [ 964.587920][T30027] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11479'. [ 964.607666][ T1267] usb 5-1: could not probe fw (-71) [ 964.654197][T30029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11480'. [ 964.704425][T18719] usb 4-1: unable to get BOS descriptor or descriptor too short [ 964.801653][T30035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11482'. [ 964.859346][ T26] audit: type=1800 audit(956.195:58): pid=30024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.2.11478" name="/" dev="tmpfs" ino=1996 res=0 errno=0 [ 964.975158][T18719] usb 4-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 964.993358][T18719] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.012468][T18719] usb 4-1: Product: syz [ 965.028416][T18719] usb 4-1: Manufacturer: syz [ 965.055009][T18719] usb 4-1: SerialNumber: syz [ 965.108914][T30051] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11491'. [ 965.146104][T30053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11490'. [ 965.344395][T30063] xt_addrtype: ipv6 does not support BROADCAST matching [ 965.394570][T18719] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 965.411079][T30065] openvswitch: netlink: EtherType 0 is less than min 600 [ 965.445579][T18719] usb 4-1: 2:1 : no UAC_FORMAT_TYPE desc [ 965.596697][T18719] usb 4-1: USB disconnect, device number 37 [ 965.641676][T30081] libceph: resolve '400' (ret=-3): failed [ 965.903100][T30102] __nla_validate_parse: 1 callbacks suppressed [ 965.903120][T30102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11515'. [ 965.928631][ T4541] udevd[4541]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 966.009043][T30100] loop2: detected capacity change from 0 to 4096 [ 966.022550][ T4240] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 966.057409][T30110] netlink: 'syz.1.11518': attribute type 21 has an invalid length. [ 966.070483][T30110] IPv6: NLM_F_CREATE should be specified when creating new route [ 966.082859][T30100] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 966.124775][T30100] ntfs3: loop2: mft corrupted [ 966.140220][T30100] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 966.160873][T30100] ntfs3: loop2: Failed to load $BadClus. [ 966.283237][ T4240] usb 5-1: Using ep0 maxpacket: 16 [ 966.390690][T30122] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11525'. [ 966.404278][T30124] loop1: detected capacity change from 0 to 8 [ 966.429033][ T4240] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 966.437266][ T4240] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 966.465660][ T4240] usb 5-1: config 0 has no interface number 0 [ 966.486878][ T6229] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 966.514985][T30124] SQUASHFS error: Unable to read inode 0xe3 [ 966.643257][ T4240] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 966.672582][T30132] loop1: detected capacity change from 0 to 164 [ 966.686285][ T4240] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.694331][ T4240] usb 5-1: Product: syz [ 966.704421][ T4240] usb 5-1: Manufacturer: syz [ 966.709406][ T4240] usb 5-1: SerialNumber: syz [ 966.743355][T30132] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 966.753047][ T4240] usb 5-1: config 0 descriptor?? [ 966.794520][ T4240] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 966.800930][ T4240] usb 5-1: No valid video chain found. [ 966.820785][ T6229] usb 1-1: Using ep0 maxpacket: 32 [ 966.963689][ T6229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 966.995778][ T6229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 967.030677][ T4240] usb 5-1: USB disconnect, device number 35 [ 967.038141][ T6229] usb 1-1: New USB device found, idVendor=046d, idProduct=c11c, bcdDevice= 0.40 [ 967.063607][ T6229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.122196][ T6229] usb 1-1: config 0 descriptor?? [ 967.180217][ T6229] hub 1-1:0.0: USB hub found [ 967.281150][T30158] loop1: detected capacity change from 0 to 4096 [ 967.300503][T30164] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11546'. [ 967.324131][T30158] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 967.357855][T30164] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11546'. [ 967.421175][ T6229] hub 1-1:0.0: 1 port detected [ 967.448877][T30158] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 967.554708][ T4206] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22. [ 967.579929][ T4206] ntfs3: loop1: ntfs_evict_inode r=1a failed, -22. [ 967.639815][ T6229] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 967.646349][ T6229] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 967.687819][T30179] netlink: 'syz.4.11555': attribute type 11 has an invalid length. [ 967.752138][ T6229] usb 1-1: USB disconnect, device number 34 [ 968.165904][T30200] loop2: detected capacity change from 0 to 4096 [ 968.240868][T30200] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 968.327500][T30200] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 968.359120][T30212] loop1: detected capacity change from 0 to 4096 [ 968.418515][T30212] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 968.428368][T30217] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 968.445646][ T4205] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22. [ 968.461296][T30212] NILFS (loop1): mounting fs with errors [ 968.470018][ T4205] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22. [ 968.471321][ T4240] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 968.549092][T30219] --map-set only usable from mangle table [ 968.767717][T30225] loop1: detected capacity change from 0 to 128 [ 968.778293][ T4240] usb 5-1: Using ep0 maxpacket: 16 [ 968.840629][T30225] affs: No valid root block on device loop1 [ 969.090942][ T4240] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 969.108648][ T4240] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.150682][ T4240] usb 5-1: Product: syz [ 969.170924][ T4240] usb 5-1: Manufacturer: syz [ 969.175597][ T4240] usb 5-1: SerialNumber: syz [ 969.215981][T30245] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11586'. [ 969.225901][ T4240] r8152-cfgselector 5-1: config 0 descriptor?? [ 969.255548][T30216] loop0: detected capacity change from 0 to 32768 [ 969.279916][T30245] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11586'. [ 969.302428][T30245] netlink: 5 bytes leftover after parsing attributes in process `syz.3.11586'. [ 969.344950][T30251] loop2: detected capacity change from 0 to 764 [ 969.406575][T30216] XFS (loop0): Mounting V5 Filesystem [ 969.424898][T30251] rock: directory entry would overflow storage [ 969.433061][T30251] rock: sig=0x4654, size=5, remaining=4 [ 969.558354][T30216] XFS (loop0): Ending clean mount [ 969.594433][T30216] XFS (loop0): Quotacheck needed: Please wait. [ 969.726729][T30280] netlink: 'syz.2.11598': attribute type 3 has an invalid length. [ 969.766772][ T4240] r8152-cfgselector 5-1: Unknown version 0x0000 [ 969.783816][ T4240] r8152-cfgselector 5-1: USB disconnect, device number 36 [ 969.830498][T30216] XFS (loop0): Quotacheck: Done. [ 969.901698][ T4199] XFS (loop0): Unmounting Filesystem [ 970.146162][T30297] netlink: 'syz.2.11608': attribute type 1 has an invalid length. [ 970.202846][T30297] netlink: 224 bytes leftover after parsing attributes in process `syz.2.11608'. [ 970.378373][T30300] loop3: detected capacity change from 0 to 4096 [ 970.529294][T30300] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 970.539687][T30314] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 970.556839][T30312] netlink: 'syz.2.11616': attribute type 4 has an invalid length. [ 970.577117][T30300] NILFS (loop3): mounting fs with errors [ 970.713434][T30324] loop2: detected capacity change from 0 to 512 [ 970.778123][T30324] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 970.812508][T30324] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (35405!=33349) [ 970.829039][T30332] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.11624'. [ 970.849709][T30324] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002] [ 970.862360][T30324] System zones: 1-12 [ 970.877247][T30324] EXT4-fs (loop2): orphan cleanup on readonly fs [ 970.884205][T30330] netlink: 'syz.4.11623': attribute type 4 has an invalid length. [ 970.911625][T30337] --map-set only usable from mangle table [ 970.915365][T30324] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:510: comm syz.2.11619: Block bitmap for bg 0 marked uninitialized [ 970.960865][T30324] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:510: comm syz.2.11619: Block bitmap for bg 0 marked uninitialized [ 971.047737][T30324] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:510: comm syz.2.11619: Block bitmap for bg 0 marked uninitialized [ 971.072619][T30324] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 971.135096][T30343] SET target dimension over the limit! [ 971.144956][T30324] EXT4-fs (loop2): 1 truncate cleaned up [ 971.150654][T30324] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,jqfmt=vfsv0,debug_want_extra_isize=0x0000000000000068,debug,data=journal,quota,nolazytime,,errors=continue. Quota mode: writeback. [ 971.424444][ T4243] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 971.558462][T30369] blktrace: Concurrent blktraces are not allowed on sg0 [ 971.641088][T30373] loop2: detected capacity change from 0 to 256 [ 971.698552][ T4243] usb 5-1: Using ep0 maxpacket: 32 [ 971.700341][T30373] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 971.760839][T30373] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 971.803023][T30373] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5817f139, utbl_chksum : 0xe619d30d) [ 971.846016][ T4243] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 971.864856][ T4243] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 971.896581][ T4243] usb 5-1: New USB device found, idVendor=046d, idProduct=c11c, bcdDevice= 0.40 [ 971.927850][ T4243] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.967729][ T4243] usb 5-1: config 0 descriptor?? [ 972.028042][ T4243] hub 5-1:0.0: USB hub found [ 972.216445][T30406] netlink: 192 bytes leftover after parsing attributes in process `syz.3.11660'. [ 972.241798][T30408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11661'. [ 972.255232][T30406] netlink: 192 bytes leftover after parsing attributes in process `syz.3.11660'. [ 972.255423][ T4243] hub 5-1:0.0: 1 port detected [ 972.287689][T30406] netlink: 192 bytes leftover after parsing attributes in process `syz.3.11660'. [ 972.319803][T30406] netlink: 192 bytes leftover after parsing attributes in process `syz.3.11660'. [ 972.343713][T30406] netlink: 192 bytes leftover after parsing attributes in process `syz.3.11660'. [ 972.365212][T30406] netlink: 192 bytes leftover after parsing attributes in process `syz.3.11660'. [ 972.401330][T30406] netlink: 192 bytes leftover after parsing attributes in process `syz.3.11660'. [ 972.433031][T30406] netlink: 192 bytes leftover after parsing attributes in process `syz.3.11660'. [ 972.444922][T30406] netlink: 192 bytes leftover after parsing attributes in process `syz.3.11660'. [ 972.519502][ T4243] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 972.528813][ T4243] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 972.587366][ T4243] usb 5-1: USB disconnect, device number 37 [ 972.699758][T30421] netlink: 'syz.2.11668': attribute type 13 has an invalid length. [ 973.015335][T30397] loop1: detected capacity change from 0 to 32768 [ 973.171978][T30397] XFS (loop1): Mounting V5 Filesystem [ 973.178140][T30443] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 973.270529][T30397] XFS (loop1): Ending clean mount [ 973.287140][T30397] XFS (loop1): Quotacheck needed: Please wait. [ 973.372155][T30397] XFS (loop1): Quotacheck: Done. [ 973.398382][T30460] netlink: 'syz.4.11684': attribute type 3 has an invalid length. [ 973.452586][ T8307] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 973.494628][T30466] CIFS mount error: No usable UNC path provided in device string! [ 973.494628][T30466] [ 973.507103][ T4206] XFS (loop1): Unmounting Filesystem [ 973.556372][T30466] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 973.590777][T30471] loop4: detected capacity change from 0 to 256 [ 973.696542][T30474] loop3: detected capacity change from 0 to 512 [ 973.741339][T30471] FAT-fs (loop4): Directory bread(block 64) failed [ 973.747952][T30471] FAT-fs (loop4): Directory bread(block 65) failed [ 973.767808][T30471] FAT-fs (loop4): Directory bread(block 66) failed [ 973.816006][T30471] FAT-fs (loop4): Directory bread(block 67) failed [ 973.822663][T30471] FAT-fs (loop4): Directory bread(block 68) failed [ 973.852303][T30471] FAT-fs (loop4): Directory bread(block 69) failed [ 973.862341][ C0] vkms_vblank_simulate: vblank timer overrun [ 973.864003][T30471] FAT-fs (loop4): Directory bread(block 70) failed [ 973.957375][T30474] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 974.008678][ T8307] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 974.018076][T30471] FAT-fs (loop4): Directory bread(block 71) failed [ 974.040497][ T8307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.048546][ T8307] usb 3-1: Product: syz [ 974.075066][T30471] FAT-fs (loop4): Directory bread(block 72) failed [ 974.081673][T30471] FAT-fs (loop4): Directory bread(block 73) failed [ 974.102441][T30474] Quota error (device loop3): find_tree_dqentry: Getting block too big (2382364675 >= 6) [ 974.132107][ T8307] usb 3-1: Manufacturer: syz [ 974.136983][ T8307] usb 3-1: SerialNumber: syz [ 974.156283][T30474] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 974.169224][ T8307] usb 3-1: config 0 descriptor?? [ 974.195239][T30474] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.11692: Failed to acquire dquot type 1 [ 974.213866][ T8307] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 974.682237][ T8307] gspca_sunplus: reg_w_riv err -71 [ 974.687476][ T8307] sunplus: probe of 3-1:0.0 failed with error -71 [ 974.714039][ T8307] usb 3-1: USB disconnect, device number 28 [ 975.172057][ T1200] block nbd4: Attempted send on invalid socket [ 975.179141][ T1200] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 975.184502][ T7980] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 975.197995][T30531] hpfs: hpfs_map_sector(): read error [ 975.312826][ T6229] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 975.804943][ T6229] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 975.824047][ T6229] usb 1-1: config 0 has no interface number 0 [ 975.847676][ T7980] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 975.857007][ T6229] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 975.878608][ T7980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.886874][ T6229] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 975.898921][ T7980] usb 2-1: Product: syz [ 975.922041][ T7980] usb 2-1: Manufacturer: syz [ 975.926709][ T7980] usb 2-1: SerialNumber: syz [ 975.956180][ T7980] usb 2-1: config 0 descriptor?? [ 976.008693][ T7980] hub 2-1:0.0: bad descriptor, ignoring hub [ 976.015527][ T7980] hub: probe of 2-1:0.0 failed with error -5 [ 976.049754][T30547] loop4: detected capacity change from 0 to 32768 [ 976.128280][T30547] JBD2: Ignoring recovery information on journal [ 976.168159][ T6229] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 976.177716][ T6229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.185833][ T6229] usb 1-1: Product: syz [ 976.190319][ T6229] usb 1-1: Manufacturer: syz [ 976.194957][ T6229] usb 1-1: SerialNumber: syz [ 976.200958][T30547] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 976.220525][ T6229] usb 1-1: config 0 descriptor?? [ 976.242819][ T7980] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 976.275945][T30547] (syz.4.11725,30547,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #4097: rec_len % 4 != 0 - offset=0, inode=18446673704965378049, rec_len=255, name_len=1 [ 976.293702][T30521] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 976.298722][T30547] (syz.4.11725,30547,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 976.311040][T30547] (syz.4.11725,30547,0):ocfs2_mknod:298 ERROR: status = -2 [ 976.320002][ T7980] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 976.330006][T30567] xt_hashlimit: max too large, truncated to 1048576 [ 976.340362][ T6229] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 976.350081][ T7980] dib0700: firmware download failed at 7 with -22 [ 976.361306][ T6229] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 976.372206][T30547] (syz.4.11725,30547,0):ocfs2_mknod:502 ERROR: status = -2 [ 976.379847][T30547] (syz.4.11725,30547,0):ocfs2_create:676 ERROR: status = -2 [ 976.398193][T30569] loop2: detected capacity change from 0 to 256 [ 976.435899][ T7980] usb 2-1: USB disconnect, device number 50 [ 976.517370][ T4196] ocfs2: Unmounting device (7,4) on (node local) [ 976.797100][ T7980] usb 1-1: USB disconnect, device number 35 [ 976.839377][ T7980] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 976.876211][ T7980] cyberjack 1-1:0.69: device disconnected [ 976.919597][T30586] loop1: detected capacity change from 0 to 256 [ 977.070463][T30586] FAT-fs (loop1): Directory bread(block 64) failed [ 977.114095][T30586] FAT-fs (loop1): Directory bread(block 65) failed [ 977.152752][T30586] FAT-fs (loop1): Directory bread(block 66) failed [ 977.159362][T30586] FAT-fs (loop1): Directory bread(block 67) failed [ 977.203937][T30586] FAT-fs (loop1): Directory bread(block 68) failed [ 977.203997][T30586] FAT-fs (loop1): Directory bread(block 69) failed [ 977.204092][T30586] FAT-fs (loop1): Directory bread(block 70) failed [ 977.204126][T30586] FAT-fs (loop1): Directory bread(block 71) failed [ 977.204216][T30586] FAT-fs (loop1): Directory bread(block 72) failed [ 977.204269][T30586] FAT-fs (loop1): Directory bread(block 73) failed [ 977.965893][T30634] loop4: detected capacity change from 0 to 4096 [ 977.999778][T30646] bond0: option use_carrier: invalid value (9) [ 978.017351][T30634] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 978.072126][T18500] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 978.098666][T30634] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 978.115391][T30649] device xfrm0 entered promiscuous mode [ 978.274058][T18719] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 978.520186][T18500] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 978.538814][T18500] usb 3-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 978.554229][T18500] usb 3-1: config 2 interface 0 has no altsetting 0 [ 978.628342][ T7980] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 978.659037][T18719] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 978.692854][T18719] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 978.720130][T18719] usb 4-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 978.729352][T18719] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.746617][T18719] usb 4-1: config 0 descriptor?? [ 978.766049][T30645] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 978.766361][T18500] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 978.795060][T18500] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.796092][T18719] usbhid 4-1:0.0: can't add hid device: -22 [ 978.798671][ T6229] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 978.817004][T18719] usbhid: probe of 4-1:0.0 failed with error -22 [ 978.824766][T18500] usb 3-1: Product: syz [ 978.828971][T18500] usb 3-1: Manufacturer: syz [ 978.846528][T18500] usb 3-1: SerialNumber: syz [ 979.004965][ T8307] usb 4-1: USB disconnect, device number 38 [ 979.065409][ T7980] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 979.086499][ T7980] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 979.095794][ T7980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.104037][ T6229] usb 1-1: Using ep0 maxpacket: 32 [ 979.131574][ T7980] usb 2-1: config 0 descriptor?? [ 979.206154][T18500] ims_pcu: probe of 3-1:2.0 failed with error -22 [ 979.215342][T18500] usb 3-1: USB disconnect, device number 29 [ 979.304235][ T6229] usb 1-1: unable to get BOS descriptor or descriptor too short [ 979.587143][T30704] loop3: detected capacity change from 0 to 256 [ 979.599831][ T6229] usb 1-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 979.609764][ T6229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.618051][ T6229] usb 1-1: Product: syz [ 979.622649][ T6229] usb 1-1: Manufacturer: syz [ 979.627278][ T6229] usb 1-1: SerialNumber: syz [ 979.656905][T30706] usb usb7: usbfs: process 30706 (syz.4.11802) did not claim interface 0 before use [ 979.663433][ T8307] usb 2-1: USB disconnect, device number 51 [ 979.716639][T30704] FAT-fs (loop3): Directory bread(block 64) failed [ 979.733224][T30704] FAT-fs (loop3): Directory bread(block 65) failed [ 979.754776][T30704] FAT-fs (loop3): Directory bread(block 66) failed [ 979.775046][T30704] FAT-fs (loop3): Directory bread(block 67) failed [ 979.787240][T30704] FAT-fs (loop3): Directory bread(block 68) failed [ 979.799380][T30704] FAT-fs (loop3): Directory bread(block 69) failed [ 979.812132][T30704] FAT-fs (loop3): Directory bread(block 70) failed [ 979.823522][T30704] FAT-fs (loop3): Directory bread(block 71) failed [ 979.834026][T30704] FAT-fs (loop3): Directory bread(block 72) failed [ 979.864512][T30704] FAT-fs (loop3): Directory bread(block 73) failed [ 980.101471][ T6229] usb 1-1: MIDIStreaming interface descriptor not found [ 980.187105][ T6229] usb 1-1: USB disconnect, device number 36 [ 980.495983][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 980.616437][T30748] loop0: detected capacity change from 0 to 256 [ 980.711063][T30748] FAT-fs (loop0): Directory bread(block 64) failed [ 980.741241][T30748] FAT-fs (loop0): Directory bread(block 65) failed [ 980.758558][T30748] FAT-fs (loop0): Directory bread(block 66) failed [ 980.765730][T30748] FAT-fs (loop0): Directory bread(block 67) failed [ 980.786374][T30748] FAT-fs (loop0): Directory bread(block 68) failed [ 980.793155][T30748] FAT-fs (loop0): Directory bread(block 69) failed [ 980.825601][T30748] FAT-fs (loop0): Directory bread(block 70) failed [ 980.847022][T30748] FAT-fs (loop0): Directory bread(block 71) failed [ 980.858138][ T6229] usb 2-1: new low-speed USB device number 52 using dummy_hcd [ 980.869408][T30748] FAT-fs (loop0): Directory bread(block 72) failed [ 980.882121][T30748] FAT-fs (loop0): Directory bread(block 73) failed [ 981.199225][T30728] loop3: detected capacity change from 0 to 32768 [ 981.268330][T30764] trusted_key: encrypted_key: master key parameter '' is invalid [ 981.376088][ T6229] usb 2-1: unable to get BOS descriptor or descriptor too short [ 981.409659][T30774] __nla_validate_parse: 20 callbacks suppressed [ 981.409678][T30774] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11835'. [ 981.445877][T30728] XFS (loop3): Mounting V5 Filesystem [ 981.504466][ T6229] usb 2-1: config 172 has an invalid interface number: 190 but max is 1 [ 981.512964][ T6229] usb 2-1: config 172 has an invalid descriptor of length 0, skipping remainder of the config [ 981.545463][ T6229] usb 2-1: config 172 has no interface number 1 [ 981.551788][ T6229] usb 2-1: config 172 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 981.564941][ T6229] usb 2-1: config 172 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 981.616700][T30728] XFS (loop3): Ending clean mount [ 981.639476][T30728] XFS (loop3): Quotacheck needed: Please wait. [ 981.750523][T30728] XFS (loop3): Quotacheck: Done. [ 981.837065][ T4204] XFS (loop3): Unmounting Filesystem [ 981.898450][ T6229] usb 2-1: string descriptor 0 read error: -22 [ 981.905074][ T6229] usb 2-1: New USB device found, idVendor=04cb, idProduct=0127, bcdDevice=3a.be [ 981.941460][ T6229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.037964][ T6229] gspca_main: finepix-2.14.0 probing 04cb:0127 [ 982.172347][T30805] loop2: detected capacity change from 0 to 4096 [ 982.216356][T30805] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 982.254580][T30814] kAFS: No cell specified [ 982.343117][T30805] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 982.344449][ T8307] usb 2-1: USB disconnect, device number 52 [ 982.522127][T30823] netlink: 260 bytes leftover after parsing attributes in process `syz.0.11856'. [ 982.698211][ T26] audit: type=1400 audit(972.883:59): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=262620FFFFFFFFFFFFFFFF pid=30827 comm="syz.0.11859" [ 982.826012][T30840] netlink: 4844 bytes leftover after parsing attributes in process `syz.0.11863'. [ 983.117247][T30856] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11872'. [ 983.221190][T30858] xt_CT: No such helper "syz0" [ 983.555316][ T4208] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 983.752018][T30894] loop2: detected capacity change from 0 to 2048 [ 983.854441][ T4208] usb 4-1: Using ep0 maxpacket: 32 [ 984.004602][ T4208] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 984.036195][ T4208] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.066798][ T4208] usb 4-1: config 0 descriptor?? [ 984.109717][T30881] loop4: detected capacity change from 0 to 32768 [ 984.134863][ T4208] gspca_main: sunplus-2.14.0 probing 041e:400b [ 984.146197][T30913] loop2: detected capacity change from 0 to 512 [ 984.181711][T30881] ERROR: (device loop4): diAllocAG: numfree > numinos [ 984.181711][T30881] [ 984.217941][T30881] ERROR: (device loop4): remounting filesystem as read-only [ 984.237184][T30881] ialloc: diAlloc returned -5! [ 984.244540][T30913] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.11900: bg 0: block 5: invalid block bitmap [ 984.269119][T30913] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 984.293882][T30913] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.11900: invalid indirect mapped block 3 (level 2) [ 984.308096][T30913] EXT4-fs (loop2): 1 orphan inode deleted [ 984.313872][T30913] EXT4-fs (loop2): 1 truncate cleaned up [ 984.320109][T30913] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 984.572316][T30931] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 984.593323][ T4208] gspca_sunplus: reg_w_riv err -71 [ 984.598533][ T4208] sunplus: probe of 4-1:0.0 failed with error -71 [ 984.613945][T30932] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 984.652142][ T4208] usb 4-1: USB disconnect, device number 39 [ 984.890782][T30947] netlink: 'syz.0.11914': attribute type 2 has an invalid length. [ 985.019934][T30955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11918'. [ 985.216311][T30966] loop0: detected capacity change from 0 to 2048 [ 985.444108][T30988] comedi comedi4: bad chanlist[0]=0x01400000 chan=0 range length=2 [ 985.793495][T31016] loop2: detected capacity change from 0 to 64 [ 985.803231][T31018] overlayfs: './file0' not a directory [ 985.815402][T31019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11947'. [ 986.145585][T31042] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.11960'. [ 986.408284][T31063] netlink: 'syz.0.11970': attribute type 20 has an invalid length. [ 986.661098][T31069] loop1: detected capacity change from 0 to 4096 [ 986.721257][T31086] netlink: 'syz.2.11982': attribute type 3 has an invalid length. [ 986.770662][T31069] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 986.797972][T31069] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 986.839908][T31069] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 986.858014][ T7980] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 986.881317][T31069] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 986.942468][T31069] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 986.961379][T31069] ntfs: volume version 3.1. [ 986.998972][T31069] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 987.014170][T31069] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 987.034641][T31069] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 987.074199][T31069] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 987.240818][T31112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11995'. [ 987.277366][T31114] netlink: 68 bytes leftover after parsing attributes in process `syz.0.11997'. [ 987.318499][ T7980] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 987.327378][ T7980] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 987.350284][ T7980] usb 5-1: config 0 has an invalid descriptor of length 191, skipping remainder of the config [ 987.393101][ T7980] usb 5-1: config 0 has no interface number 0 [ 987.596475][ T7980] usb 5-1: New USB device found, idVendor=006d, idProduct=0800, bcdDevice= b.28 [ 987.621113][ T7980] usb 5-1: New USB device strings: Mfr=1, Product=26, SerialNumber=3 [ 987.671658][ T7980] usb 5-1: Product: syz [ 987.696248][ T7980] usb 5-1: Manufacturer: syz [ 987.700912][ T7980] usb 5-1: SerialNumber: syz [ 987.735507][T31137] loop0: detected capacity change from 0 to 128 [ 987.758960][ T7980] usb 5-1: config 0 descriptor?? [ 987.823034][ T7980] usb 5-1: Found UVC 0.00 device syz (006d:0800) [ 987.838423][ T7980] usb 5-1: No valid video chain found. [ 987.900722][T31129] loop1: detected capacity change from 0 to 4096 [ 987.962487][T31141] loop3: detected capacity change from 0 to 64 [ 988.052457][T31129] __ntfs_error: 7 callbacks suppressed [ 988.052484][T31129] ntfs: (device loop1): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 988.065823][T18500] usb 5-1: USB disconnect, device number 38 [ 988.075048][ T6229] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 988.123322][T31129] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 988.187188][T31129] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 988.272127][T31129] ntfs: volume version 3.1. [ 988.371367][ T4206] ntfs: (device loop1): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 988.384001][T31151] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.12015'. [ 988.404645][ T26] audit: type=1400 audit(978.224:60): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=31152 comm="syz.3.12016" [ 988.537209][ T6229] usb 3-1: config 5 has an invalid interface number: 123 but max is 0 [ 988.546070][ T6229] usb 3-1: config 5 has no interface number 0 [ 988.561660][ T6229] usb 3-1: config 5 interface 123 altsetting 7 endpoint 0x1 has invalid wMaxPacketSize 0 [ 988.622437][ T6229] usb 3-1: config 5 interface 123 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 988.686625][ T6229] usb 3-1: config 5 interface 123 has no altsetting 0 [ 988.810076][T31173] x_tables: ip_tables: ah match: only valid for protocol 51 [ 988.840437][T31177] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12028'. [ 988.900650][ T6229] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 988.932519][ T6229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.940564][ T6229] usb 3-1: Product: syz [ 988.985415][ T6229] usb 3-1: Manufacturer: syz [ 988.996820][ T6229] usb 3-1: SerialNumber: syz [ 989.325809][T31206] netlink: 'syz.1.12041': attribute type 20 has an invalid length. [ 989.338874][ T6229] ni6501 3-1:5.123: driver 'ni6501' failed to auto-configure device. [ 989.357446][T18719] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 989.390223][ T6229] usb 3-1: USB disconnect, device number 30 [ 989.539762][T31216] loop1: detected capacity change from 0 to 512 [ 989.643655][T31216] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c02c, mo2=0002] [ 989.675998][T31216] System zones: 1-12 [ 989.703892][T31216] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.12047: error while reading EA inode 32 err=-116 [ 989.724020][T31216] EXT4-fs (loop1): Remounting filesystem read-only [ 989.741572][T31216] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 989.755429][T31216] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.12047: error while reading EA inode 32 err=-116 [ 989.761513][T18719] usb 5-1: config 4 has an invalid interface number: 128 but max is 0 [ 989.776648][T31216] EXT4-fs (loop1): Remounting filesystem read-only [ 989.794424][T31216] EXT4-fs (loop1): 1 orphan inode deleted [ 989.800605][T31216] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,debug,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsddf,jqfmt=vfsv1,grpid,. Quota mode: none. [ 989.809451][T18719] usb 5-1: config 4 has no interface number 0 [ 989.845373][T18719] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 989.857004][T18719] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 989.867251][T18719] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 989.879199][T18719] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.938660][T18719] hub 5-1:4.128: USB hub found [ 990.148701][T31229] loop0: detected capacity change from 0 to 4096 [ 990.169218][T31213] loop3: detected capacity change from 0 to 32768 [ 990.176042][T18719] hub 5-1:4.128: 27 ports detected [ 990.181222][T18719] hub 5-1:4.128: Using single TT (err -22) [ 990.202284][T31229] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 990.236904][T18719] hub 5-1:4.128: insufficient power available to use all downstream ports [ 990.279372][T31213] ERROR: (device loop3): diAllocAG: numfree > numinos [ 990.279372][T31213] [ 990.309385][T31213] ERROR: (device loop3): remounting filesystem as read-only [ 990.327963][T31213] ialloc: diAlloc returned -5! [ 990.408007][T18719] hub 5-1:4.128: hub_hub_status failed (err = -71) [ 990.414588][T18719] hub 5-1:4.128: config failed, can't get hub status (err -71) [ 990.504803][T18719] usb 5-1: USB disconnect, device number 39 [ 990.513035][T31247] netlink: 'syz.0.12060': attribute type 1 has an invalid length. [ 990.685939][ T8307] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 990.733141][T31257] Restarting kernel threads ... done. [ 990.956366][ T8307] usb 2-1: Using ep0 maxpacket: 32 [ 990.961919][T31267] libceph: resolve '. [ 990.961919][T31267] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 990.961919][T31267] ' (ret=-3): failed [ 991.163963][ T8307] usb 2-1: unable to get BOS descriptor or descriptor too short [ 991.274704][ T8307] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 991.455763][ T8307] usb 2-1: New USB device found, idVendor=fc08, idProduct=0101, bcdDevice= 0.40 [ 991.475581][ T8307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.485094][ T8307] usb 2-1: Product: syz [ 991.497908][ T8307] usb 2-1: Manufacturer: syz [ 991.502931][ T8307] usb 2-1: SerialNumber: syz [ 991.512732][T31294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12085'. [ 991.530379][ T4208] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 991.562839][T31240] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 991.706550][T31272] loop3: detected capacity change from 0 to 32768 [ 991.861808][ T4208] usb 5-1: Using ep0 maxpacket: 32 [ 991.964044][T31318] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 991.969532][ T8307] usb 2-1: MIDIStreaming interface descriptor not found [ 992.064066][ T8307] usb 2-1: USB disconnect, device number 53 [ 992.066163][ T4208] usb 5-1: unable to get BOS descriptor or descriptor too short [ 992.396596][ T4208] usb 5-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 992.407955][ T7992] udevd[7992]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 992.437249][ T4208] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.464705][ T4208] usb 5-1: Product: syz [ 992.472672][T31332] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12104'. [ 992.478341][ T4208] usb 5-1: Manufacturer: syz [ 992.492331][ T4208] usb 5-1: SerialNumber: syz [ 992.612210][T31339] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12108'. [ 992.635399][T31340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12107'. [ 992.663578][T18500] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 992.934695][ T4208] usb 5-1: USB disconnect, device number 40 [ 992.960155][T18500] usb 1-1: Using ep0 maxpacket: 8 [ 992.973784][ T4243] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 993.155388][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 993.163329][T18500] usb 1-1: unable to get BOS descriptor or descriptor too short [ 993.223542][ T4552] udevd[4552]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 993.294679][T18500] usb 1-1: config 1 has an invalid interface number: 1 but max is 0 [ 993.303113][T18500] usb 1-1: config 1 has no interface number 0 [ 993.309692][T18500] usb 1-1: config 1 interface 1 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 993.332398][T18500] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 993.379936][ T4243] usb 3-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e [ 993.389118][ T4243] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.473963][T31360] loop1: detected capacity change from 0 to 8192 [ 993.487044][ T8307] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 993.492920][ T4243] pwc: Logitech/Cisco VT Camera webcam detected. [ 993.551078][T31360] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 993.570516][T31360] REISERFS (device loop1): using ordered data mode [ 993.586741][T31360] reiserfs: using flush barriers [ 993.593554][T18500] usb 1-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 0.40 [ 993.602622][T18500] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.611114][T31360] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 993.649373][T31360] REISERFS (device loop1): checking transaction log (loop1) [ 993.658851][T18500] usb 1-1: Product: syz [ 993.673180][T18500] usb 1-1: Manufacturer: syz [ 993.732801][T18500] usb 1-1: SerialNumber: syz [ 993.764976][T31326] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 993.842875][T31360] REISERFS (device loop1): Using rupasov hash to sort names [ 993.861390][T31360] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 993.914642][ T8307] usb 4-1: unable to get BOS descriptor or descriptor too short [ 993.946842][ T4243] pwc: send_video_command error -71 [ 993.956971][ T4243] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 993.986791][ T4243] Philips webcam: probe of 3-1:127.0 failed with error -71 [ 994.005012][ T4243] usb 3-1: USB disconnect, device number 31 [ 994.021504][ T8307] usb 4-1: config 4 has an invalid interface number: 67 but max is 0 [ 994.040523][ T8307] usb 4-1: config 4 has no interface number 0 [ 994.052224][ T8307] usb 4-1: config 4 interface 67 has no altsetting 0 [ 994.148363][T18500] usb 1-1: USB disconnect, device number 37 [ 994.329222][T31386] loop4: detected capacity change from 0 to 2048 [ 994.354842][T31386] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=301132, location=301132 [ 994.406352][ T8307] usb 4-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 994.425024][T31386] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 994.437383][ T8307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.464465][ T8307] usb 4-1: Product: syz [ 994.468692][ T8307] usb 4-1: Manufacturer: syz [ 994.487909][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 994.507824][ T8307] usb 4-1: SerialNumber: syz [ 994.620758][T31396] netlink: 'syz.2.12135': attribute type 30 has an invalid length. [ 994.662793][T31396] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12135'. [ 994.790542][T31405] loop4: detected capacity change from 0 to 8 [ 994.813439][T31405] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 994.824577][ T8307] usb-storage 4-1:4.67: USB Mass Storage device detected [ 994.868143][ T4541] udevd[4541]: incorrect cramfs checksum on /dev/loop4 [ 994.909680][T31413] netlink: 'syz.2.12141': attribute type 49 has an invalid length. [ 994.951534][ T8307] usb 4-1: USB disconnect, device number 40 [ 995.100116][T31413] device ip6gretap0 entered promiscuous mode [ 995.124554][T31425] loop1: detected capacity change from 0 to 128 [ 995.132705][T31421] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12147'. [ 995.295244][T31425] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 995.343550][T31434] loop2: detected capacity change from 0 to 1024 [ 995.434322][T31425] EXT4-fs warning (device loop1): ext4_group_extend:1852: can't read last block, resize aborted [ 996.099091][T31476] x_tables: duplicate underflow at hook 3 [ 996.267495][T31478] loop0: detected capacity change from 0 to 4096 [ 996.346536][T31478] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 996.373302][T31478] EXT4-fs (loop0): Test dummy encryption mode enabled [ 996.413902][T31478] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,nodioread_nolock,test_dummy_encryption,nombcache,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 996.470283][T31474] loop2: detected capacity change from 0 to 8192 [ 996.544009][T31474] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 996.583349][T31464] loop1: detected capacity change from 0 to 32768 [ 996.604876][T31481] loop3: detected capacity change from 0 to 4096 [ 996.611809][T31474] REISERFS (device loop2): using ordered data mode [ 996.618458][T31474] reiserfs: using flush barriers [ 996.631406][T31474] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 996.680665][T31481] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 996.849185][T31474] REISERFS (device loop2): checking transaction log (loop2) [ 997.256911][T31474] REISERFS (device loop2): Using rupasov hash to sort names [ 997.293134][T31474] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 997.485221][ T4240] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 997.553950][T31519] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12183'. [ 997.619807][ T6508] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 997.773690][ T4240] usb 5-1: Using ep0 maxpacket: 16 [ 997.880709][ T6508] usb 2-1: Using ep0 maxpacket: 16 [ 997.902281][ T4240] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 997.912468][ T4240] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 997.968815][ T4240] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 998.095111][ T4240] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 998.115126][ T4240] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 998.145244][ T4240] usb 5-1: Manufacturer: syz [ 998.159832][ T4240] usb 5-1: config 0 descriptor?? [ 998.180193][ T6508] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 998.200173][ T6508] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.224272][T31549] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12199'. [ 998.243496][ T6508] usb 2-1: Product: syz [ 998.254282][ T6508] usb 2-1: Manufacturer: syz [ 998.265061][ T6508] usb 2-1: SerialNumber: syz [ 998.266550][T31549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12199'. [ 998.287424][ T6508] r8152-cfgselector 2-1: config 0 descriptor?? [ 998.348662][T31552] UBIFS error (pid: 31552): cannot open "(null)", error -22 [ 998.621509][T31536] loop2: detected capacity change from 0 to 32768 [ 998.665667][T31565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12206'. [ 998.720751][ T4240] usb 5-1: USB disconnect, device number 41 [ 998.800259][ T6508] r8152-cfgselector 2-1: Unknown version 0x0000 [ 998.807350][ T6508] r8152-cfgselector 2-1: bad CDC descriptors [ 998.856005][T31536] XFS (loop2): Mounting V5 Filesystem [ 998.876603][ T6508] r8152-cfgselector 2-1: Unknown version 0x0000 [ 998.943738][ T6508] r8152-cfgselector 2-1: USB disconnect, device number 54 [ 999.002903][T31536] XFS (loop2): Ending clean mount [ 999.105140][ T4205] XFS (loop2): Unmounting Filesystem [ 999.452341][T31609] netlink: 'syz.3.12224': attribute type 21 has an invalid length. [ 999.460470][T31609] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12224'. [ 999.501406][T31611] loop4: detected capacity change from 0 to 256 [ 999.803382][T31624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12233'. [ 999.844865][ T26] audit: type=1400 audit(988.925:61): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=31625 comm="syz.4.12232" [ 999.917590][T31631] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12217'. [ 999.947708][T31633] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12236'. [ 1000.087450][T31645] loop0: detected capacity change from 0 to 512 [ 1000.203919][T31645] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 1000.224745][T31645] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 1000.246362][T31645] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 1000.289522][T31645] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 1000.326593][T31645] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1000.343459][T31645] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1000.351976][T31645] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.12242: bg 0: block 34: padding at end of block bitmap is not set [ 1000.385368][T31645] Quota error (device loop0): write_blk: dquota write failed [ 1000.403672][T31645] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 1000.413721][T31645] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.12242: Failed to acquire dquot type 1 [ 1000.434940][T31645] EXT4-fs (loop0): 1 truncate cleaned up [ 1000.449178][T31645] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,bsddf,mb_optimize_scan=0x0000000000000000,acl,max_dir_size_kb=0x0000000000000001,noblock_validity,usrjquota=,jqfmt=vfsv0,inode_readahead_blks=0x0000000000001000,resgid=0x000000000000000a,sysvgroups,,errors=continue. Quota mode: writeback. [ 1000.986724][T31678] loop4: detected capacity change from 0 to 8192 [ 1001.147781][T31678] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 1001.184057][T31678] REISERFS (device loop4): using ordered data mode [ 1001.195406][T31678] reiserfs: using flush barriers [ 1001.217372][T31678] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1001.238179][T31678] REISERFS (device loop4): checking transaction log (loop4) [ 1001.588788][T31678] REISERFS (device loop4): Using rupasov hash to sort names [ 1001.622829][T31678] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 1002.015058][T31708] loop0: detected capacity change from 0 to 32768 [ 1002.110218][T31707] loop3: detected capacity change from 0 to 32768 [ 1002.167927][T31708] XFS (loop0): Mounting V5 Filesystem [ 1002.330612][T31707] XFS (loop3): Mounting V5 Filesystem [ 1002.369824][T31708] XFS (loop0): Ending clean mount [ 1002.383944][ T4243] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1002.462236][T31746] loop2: detected capacity change from 0 to 256 [ 1002.472522][ T4199] XFS (loop0): Unmounting Filesystem [ 1002.551654][T31707] XFS (loop3): Ending clean mount [ 1002.615480][T31707] XFS (loop3): Quotacheck needed: Please wait. [ 1002.791253][T31707] XFS (loop3): Quotacheck: Done. [ 1002.837809][ T4243] usb 2-1: config 7 descriptor has 1 excess byte, ignoring [ 1002.853878][T31759] netlink: 'syz.2.12285': attribute type 1 has an invalid length. [ 1002.867953][ T4243] usb 2-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 1002.935224][ T4204] XFS (loop3): Unmounting Filesystem [ 1003.097730][ T4243] usb 2-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 1003.106830][ T4243] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.147940][ T4243] usb 2-1: Product: syz [ 1003.153008][ T4243] usb 2-1: Manufacturer: syz [ 1003.157656][ T4243] usb 2-1: SerialNumber: syz [ 1003.292569][ T4243] rndis_wlan 2-1:7.0: skipping garbage [ 1003.298100][ T4243] usb 2-1: bad CDC descriptors [ 1003.317534][ T4243] rndis_host 2-1:7.0: skipping garbage [ 1003.339529][ T4243] usb 2-1: bad CDC descriptors [ 1003.362377][ T4243] option 2-1:7.0: GSM modem (1-port) converter detected [ 1003.494411][T18719] usb 2-1: USB disconnect, device number 55 [ 1003.501121][T18719] option 2-1:7.0: device disconnected [ 1004.048768][T31815] loop0: detected capacity change from 0 to 64 [ 1004.104940][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 1004.111288][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 1004.235647][T31829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12318'. [ 1004.246383][T31829] netlink: 540 bytes leftover after parsing attributes in process `syz.1.12318'. [ 1004.553885][T31854] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1005.114242][T31888] loop4: detected capacity change from 0 to 8 [ 1005.212144][T31888] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1005.242339][T31888] cramfs: unsupported filesystem features [ 1005.479808][T31848] loop2: detected capacity change from 0 to 32768 [ 1005.545954][T18500] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1005.553746][T31848] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 scanned by syz.2.12329 (31848) [ 1005.623380][T31848] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1005.660373][T31848] BTRFS info (device loop2): enabling ssd optimizations [ 1005.695436][T31848] BTRFS info (device loop2): not using ssd optimizations [ 1005.724325][T31848] BTRFS info (device loop2): turning off barriers [ 1005.766334][T31848] BTRFS info (device loop2): using free space tree [ 1005.779865][T31848] BTRFS info (device loop2): has skinny extents [ 1005.793898][T31920] ieee802154 phy0 wpan0: encryption failed: -22 [ 1005.867765][T18500] usb 1-1: Using ep0 maxpacket: 16 [ 1006.027053][T18500] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1006.048595][T18500] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1006.070427][T18500] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1006.230116][T18500] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1006.245598][T18500] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1006.275751][T18500] usb 1-1: Manufacturer: syz [ 1006.286805][T18500] usb 1-1: config 0 descriptor?? [ 1006.646944][ T4243] usb 2-1: new low-speed USB device number 56 using dummy_hcd [ 1006.751255][T31982] loop4: detected capacity change from 0 to 512 [ 1006.791141][ T4208] usb 1-1: USB disconnect, device number 38 [ 1006.889786][T31982] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.12380: invalid indirect mapped block 10 (level 1) [ 1006.990103][T31982] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.12380: invalid indirect mapped block 8 (level 1) [ 1007.005176][T31996] netlink: 'syz.2.12385': attribute type 1 has an invalid length. [ 1007.015306][T31982] EXT4-fs (loop4): 1 truncate cleaned up [ 1007.032493][T31982] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 1007.074806][ T4243] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 1007.106293][ T4243] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 1007.123726][ T4243] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1007.135146][ T4243] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1007.459653][ T4243] usb 2-1: string descriptor 0 read error: -22 [ 1007.465956][ T4243] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1007.480862][ T6513] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1007.493236][ T4243] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.546275][ T4243] usb 2-1: config 0 descriptor?? [ 1007.588628][ T4243] hub 2-1:0.0: bad descriptor, ignoring hub [ 1007.594665][ T4243] hub: probe of 2-1:0.0 failed with error -5 [ 1007.720488][T32032] loop0: detected capacity change from 0 to 8 [ 1007.737481][ T6513] usb 4-1: Using ep0 maxpacket: 32 [ 1007.858031][T32032] SQUASHFS error: Failed to read block 0x6de: -5 [ 1007.865432][T32032] SQUASHFS error: Unable to read metadata cache entry [6dc] [ 1007.868131][ T6513] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1007.930620][T32032] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1008.026619][ T4240] usb 2-1: USB disconnect, device number 56 [ 1008.069072][ T6513] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1008.114119][ T6513] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.135823][ T6513] usb 4-1: Product: syz [ 1008.140062][ T6513] usb 4-1: Manufacturer: syz [ 1008.176112][ T6513] usb 4-1: SerialNumber: syz [ 1008.204421][ T6513] usb 4-1: config 0 descriptor?? [ 1008.284755][ T6513] usb 4-1: bad CDC descriptors [ 1008.290033][ T6513] usb 4-1: unsupported MDLM descriptors [ 1008.530931][ T4208] usb 4-1: USB disconnect, device number 41 [ 1009.294591][T32126] loop1: detected capacity change from 0 to 1024 [ 1009.326681][T32135] ieee802154 phy0 wpan0: encryption failed: -90 [ 1009.516090][T32147] netlink: 'syz.3.12453': attribute type 10 has an invalid length. [ 1009.580071][T32147] team0: Device nlmon0 is of different type [ 1009.725901][ T6513] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 1010.127246][ T6513] usb 3-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 1010.182457][ T6513] usb 3-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1010.239128][ T6513] usb 3-1: config 253 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1010.388807][ T6513] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1010.397915][ T6513] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1010.436785][ T6513] usb 3-1: SerialNumber: syz [ 1010.474296][ T8307] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1010.486352][T32196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12471'. [ 1010.523470][ T6513] usb-storage 3-1:253.0: USB Mass Storage device detected [ 1010.560593][ T6513] usb-storage 3-1:253.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1010.580328][T32201] loop4: detected capacity change from 0 to 16 [ 1010.703213][T32206] loop3: detected capacity change from 0 to 512 [ 1010.775677][T32156] loop1: detected capacity change from 0 to 32768 [ 1010.787580][ T4208] usb 3-1: USB disconnect, device number 32 [ 1010.866620][T32156] XFS (loop1): Mounting V5 Filesystem [ 1010.891495][T32206] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,. Quota mode: writeback. [ 1010.950466][T32206] EXT4-fs error (device loop3): ext4_xattr_block_list:713: inode #12: comm syz.3.12474: corrupted xattr block 6 [ 1011.009783][T32206] EXT4-fs (loop3): Remounting filesystem read-only [ 1011.062369][ T8307] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1011.071500][ T8307] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.129284][ T8307] usb 1-1: Product: syz [ 1011.133505][ T8307] usb 1-1: Manufacturer: syz [ 1011.169041][ T8307] usb 1-1: SerialNumber: syz [ 1011.188714][T32156] XFS (loop1): Ending clean mount [ 1011.200099][T32156] XFS (loop1): Quotacheck needed: Please wait. [ 1011.243345][ T8307] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1011.324794][T32156] XFS (loop1): Quotacheck: Done. [ 1011.423061][ T4206] XFS (loop1): Unmounting Filesystem [ 1011.447202][ T7980] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1011.756938][ T7980] usb 5-1: Using ep0 maxpacket: 8 [ 1011.896279][ T8307] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1011.917764][ T7980] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1011.939171][ T7980] usb 5-1: New USB device found, idVendor=05a9, idProduct=2630, bcdDevice=55.12 [ 1011.965552][ T7980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.012112][ T7980] usb 5-1: config 0 descriptor?? [ 1012.015781][T32261] loop2: detected capacity change from 0 to 8 [ 1012.090747][ T7980] usb 5-1: Found UVC 0.00 device (05a9:2630) [ 1012.123055][ T7980] usb 5-1: No valid video chain found. [ 1012.343000][ T4243] usb 5-1: USB disconnect, device number 42 [ 1012.350120][ T4240] usb 1-1: USB disconnect, device number 39 [ 1012.391603][T32282] netlink: 'syz.3.12505': attribute type 17 has an invalid length. [ 1012.420424][T32282] netlink: 5 bytes leftover after parsing attributes in process `syz.3.12505'. [ 1012.467851][T32282] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 1012.854105][T32308] netlink: 72 bytes leftover after parsing attributes in process `syz.1.12519'. [ 1012.988780][T32317] netlink: 'syz.3.12523': attribute type 3 has an invalid length. [ 1013.018879][T32317] netlink: 'syz.3.12523': attribute type 1 has an invalid length. [ 1013.082857][ T8307] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1013.089869][ T8307] ath9k_htc: Failed to initialize the device [ 1013.114261][ T4240] usb 1-1: ath9k_htc: USB layer deinitialized [ 1013.371031][T32339] netlink: 'syz.1.12542': attribute type 17 has an invalid length. [ 1013.390216][T32338] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12533'. [ 1013.402594][T32340] loop4: detected capacity change from 0 to 1024 [ 1013.424197][T32339] netlink: 5 bytes leftover after parsing attributes in process `syz.1.12542'. [ 1013.434680][T32338] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1013.453947][T32339] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 1013.804068][T32361] loop0: detected capacity change from 0 to 512 [ 1013.919028][T32361] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 2: comm syz.0.12545: invalid block [ 1014.095731][T32361] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.12545: invalid indirect mapped block 10 (level 1) [ 1014.227654][T32361] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.12545: invalid indirect mapped block 8 (level 1) [ 1014.242296][T32365] loop2: detected capacity change from 0 to 32768 [ 1014.288845][T32361] EXT4-fs (loop0): 1 truncate cleaned up [ 1014.344121][T32361] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 1014.345606][T32365] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 1014.380788][T32365] JBD2: Ignoring recovery information on journal [ 1014.456682][T32385] loop3: detected capacity change from 0 to 1024 [ 1014.490228][T32381] loop1: detected capacity change from 0 to 8192 [ 1014.509302][T32365] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1014.547780][T32381] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 1014.593979][T32381] REISERFS (device loop1): using ordered data mode [ 1014.601085][T32381] reiserfs: using flush barriers [ 1014.608242][T32381] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1014.640330][T32381] REISERFS (device loop1): checking transaction log (loop1) [ 1014.685174][T32381] REISERFS (device loop1): Using r5 hash to sort names [ 1014.718222][T32390] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12557'. [ 1014.746836][ T4205] ocfs2: Unmounting device (7,2) on (node local) [ 1014.761849][T32381] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1015.124572][ T8307] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1015.382380][ T8307] usb 1-1: Using ep0 maxpacket: 16 [ 1015.471883][T32426] loop2: detected capacity change from 0 to 512 [ 1015.515706][ T8307] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 1015.524008][ T4240] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1015.541779][ T8307] usb 1-1: config 0 has no interface number 0 [ 1015.570812][ T8307] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 1015.605028][ T8307] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1015.660476][T32426] EXT4-fs (loop2): mounted filesystem without journal. Opts: lazytime,nogrpid,,errors=continue. Quota mode: writeback. [ 1015.772549][ T8307] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1015.790976][ T8307] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1015.799613][ T4240] usb 4-1: Using ep0 maxpacket: 8 [ 1015.830459][ T8307] usb 1-1: Product: syz [ 1015.834693][ T8307] usb 1-1: SerialNumber: syz [ 1015.856424][ T8307] usb 1-1: config 0 descriptor?? [ 1015.876641][T32443] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12580'. [ 1015.898601][ T8307] usbhid 1-1:0.8: couldn't find an input interrupt endpoint [ 1015.915367][T32443] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1015.958987][T32435] EXT4-fs (loop1): Ignoring removed oldalloc option [ 1016.005341][T32435] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=ignore,noblock_validity,noload,noquota,data_err=abort,oldalloc,nombcache,,errors=continue. Quota mode: writeback. [ 1016.049533][T32450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12584'. [ 1016.088923][T32454] netlink: 5 bytes leftover after parsing attributes in process `syz.4.12586'. [ 1016.099682][T32454] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1016.109416][ T4240] usb 4-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 1016.153839][T32456] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1016.169515][ T4240] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 1016.206384][T32435] [ 1016.208898][T32435] ====================================================== [ 1016.216040][T32435] WARNING: possible circular locking dependency detected [ 1016.222303][ T4240] usb 4-1: Product: syz [ 1016.223121][T32435] syzkaller #0 Not tainted [ 1016.231681][T32435] ------------------------------------------------------ [ 1016.236552][ T4240] usb 4-1: Manufacturer: syz [ 1016.238719][T32435] syz.1.12578/32435 is trying to acquire lock: [ 1016.243323][ T4240] usb 4-1: SerialNumber: syz [ 1016.249480][T32435] ffff888060ffcea8 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x5a/0x410 [ 1016.249634][T32435] [ 1016.249634][T32435] but task is already holding lock: [ 1016.270468][T32435] ffff88807f05c840 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_truncate+0x994/0x1190 [ 1016.279920][T32435] [ 1016.279920][T32435] which lock already depends on the new lock. [ 1016.279920][T32435] [ 1016.290347][T32435] [ 1016.290347][T32435] the existing dependency chain (in reverse order) is: [ 1016.299388][T32435] [ 1016.299388][T32435] -> #2 (&ei->i_data_sem/2){++++}-{3:3}: [ 1016.301830][ T4240] usb 4-1: config 0 descriptor?? [ 1016.307250][T32435] down_write+0x38/0x60 [ 1016.316880][T32435] ext4_map_blocks+0x8c4/0x1a50 [ 1016.322292][T32435] ext4_getblk+0x176/0x670 [ 1016.327264][T32435] ext4_bread+0x26/0x180 [ 1016.332068][T32435] ext4_quota_write+0x237/0x580 [ 1016.337572][T32435] do_insert_tree+0x1193/0x19c0 [ 1016.342974][T32435] do_insert_tree+0x5c4/0x19c0 [ 1016.346658][ T8307] usb 1-1: USB disconnect, device number 40 [ 1016.348289][T32435] do_insert_tree+0x5c4/0x19c0 [ 1016.359485][T32435] do_insert_tree+0x5c4/0x19c0 [ 1016.364803][T32435] qtree_write_dquot+0x354/0x4a0 [ 1016.370300][T32435] v2_write_dquot+0x108/0x190 [ 1016.375536][T32435] dquot_acquire+0x2d5/0x520 [ 1016.380776][T32435] ext4_acquire_dquot+0x2e3/0x4a0 [ 1016.386361][T32435] dqget+0x713/0xbb0 [ 1016.388188][ T4240] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 1016.390804][T32435] __dquot_initialize+0x3a9/0xd00 [ 1016.390831][T32435] ext4_process_orphan+0x4c/0x2e0 [ 1016.408295][T32435] ext4_orphan_cleanup+0xad8/0x1320 [ 1016.414144][T32435] ext4_fill_super+0x8c65/0x93f0 [ 1016.419647][T32435] mount_bdev+0x28a/0x3c0 [ 1016.424532][T32435] legacy_get_tree+0xe6/0x180 [ 1016.429856][T32435] vfs_get_tree+0x88/0x270 [ 1016.434831][T32435] do_new_mount+0x247/0xa40 [ 1016.439896][T32435] __se_sys_mount+0x2e3/0x3d0 [ 1016.445400][T32435] do_syscall_64+0x4c/0xa0 [ 1016.450375][T32435] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1016.456839][T32435] [ 1016.456839][T32435] -> #1 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 1016.464957][T32435] down_read+0x44/0x2e0 [ 1016.469739][T32435] v2_read_dquot+0x4a/0x110 [ 1016.474797][T32435] dquot_acquire+0x152/0x520 [ 1016.479961][T32435] ext4_acquire_dquot+0x2e3/0x4a0 [ 1016.485546][T32435] dqget+0x713/0xbb0 [ 1016.489996][T32435] __dquot_initialize+0x3a9/0xd00 [ 1016.495578][T32435] ext4_process_orphan+0x4c/0x2e0 [ 1016.501156][T32435] ext4_orphan_cleanup+0xad8/0x1320 [ 1016.506912][T32435] ext4_fill_super+0x8c65/0x93f0 [ 1016.512451][T32435] mount_bdev+0x28a/0x3c0 [ 1016.517338][T32435] legacy_get_tree+0xe6/0x180 [ 1016.522581][T32435] vfs_get_tree+0x88/0x270 [ 1016.527553][T32435] do_new_mount+0x247/0xa40 [ 1016.532617][T32435] __se_sys_mount+0x2e3/0x3d0 [ 1016.537852][T32435] do_syscall_64+0x4c/0xa0 [ 1016.542822][T32435] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1016.549277][T32435] [ 1016.549277][T32435] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 1016.558389][T32435] __lock_acquire+0x2c66/0x7b50 [ 1016.563811][T32435] lock_acquire+0x19e/0x400 [ 1016.569575][T32435] __mutex_lock_common+0x1e5/0x2400 [ 1016.575336][T32435] mutex_lock_nested+0x17/0x20 [ 1016.580718][T32435] dquot_commit+0x5a/0x410 [ 1016.585692][T32435] ext4_write_dquot+0x1f0/0x360 [ 1016.591095][T32435] mark_all_dquot_dirty+0xf9/0x400 [ 1016.596759][T32435] __dquot_free_space+0x7c3/0xb80 [ 1016.602346][T32435] ext4_free_blocks+0x1b1b/0x24c0 [ 1016.608003][T32435] ext4_ext_remove_space+0x22bd/0x41a0 [ 1016.614076][T32435] ext4_ext_truncate+0x182/0x230 [ 1016.619572][T32435] ext4_truncate+0xa41/0x1190 [ 1016.624813][T32435] ext4_evict_inode+0xb0f/0x1050 [ 1016.630311][T32435] evict+0x4b6/0x8b0 [ 1016.634760][T32435] __dentry_kill+0x412/0x630 [ 1016.639899][T32435] dentry_kill+0xb8/0x290 [ 1016.644786][T32435] dput+0xd8/0x1a0 [ 1016.649068][T32435] do_renameat2+0x9f9/0xf70 [ 1016.654133][T32435] __x64_sys_renameat2+0xce/0xe0 [ 1016.659627][T32435] do_syscall_64+0x4c/0xa0 [ 1016.664592][T32435] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1016.671045][T32435] [ 1016.671045][T32435] other info that might help us debug this: [ 1016.671045][T32435] [ 1016.681317][T32435] Chain exists of: [ 1016.681317][T32435] &dquot->dq_lock --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2 [ 1016.681317][T32435] [ 1016.695005][T32435] Possible unsafe locking scenario: [ 1016.695005][T32435] [ 1016.702479][T32435] CPU0 CPU1 [ 1016.707867][T32435] ---- ---- [ 1016.713249][T32435] lock(&ei->i_data_sem/2); [ 1016.717879][T32435] lock(&s->s_dquot.dqio_sem); [ 1016.725285][T32435] lock(&ei->i_data_sem/2); [ 1016.732430][T32435] lock(&dquot->dq_lock); [ 1016.736878][T32435] [ 1016.736878][T32435] *** DEADLOCK *** [ 1016.736878][T32435] [ 1016.745044][T32435] 5 locks held by syz.1.12578/32435: [ 1016.750357][T32435] #0: ffff88807daf2460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 1016.759558][T32435] #1: ffff88807f05f198 (&type->i_mutex_dir_key#4/1){+.+.}-{3:3}, at: do_renameat2+0x57c/0xf70 [ 1016.769980][T32435] #2: ffff88807daf2650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x41f/0x1050 [ 1016.779510][T32435] #3: ffff88807f05c840 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_truncate+0x994/0x1190 [ 1016.789312][T32435] #4: ffffffff8c441798 (dquot_srcu){....}-{0:0}, at: rcu_lock_acquire+0x5/0x30 [ 1016.798434][T32435] [ 1016.798434][T32435] stack backtrace: [ 1016.804346][T32435] CPU: 0 PID: 32435 Comm: syz.1.12578 Not tainted syzkaller #0 [ 1016.812011][T32435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1016.822098][T32435] Call Trace: [ 1016.825419][T32435] [ 1016.828380][T32435] dump_stack_lvl+0x188/0x250 [ 1016.833098][T32435] ? load_image+0x410/0x410 [ 1016.837635][T32435] ? show_regs_print_info+0x20/0x20 [ 1016.842871][T32435] ? print_circular_bug+0x12b/0x1a0 [ 1016.848192][T32435] check_noncircular+0x296/0x330 [ 1016.853165][T32435] ? kmem_cache_alloc+0x15d/0x280 [ 1016.858296][T32435] ? xas_create+0x5bd/0x15a0 [ 1016.863126][T32435] ? add_chain_block+0x9b0/0x9b0 [ 1016.868093][T32435] ? lockdep_lock+0xf1/0x1f0 [ 1016.872733][T32435] ? mark_lock+0x94/0x320 [ 1016.877094][T32435] ? _find_first_zero_bit+0xd1/0xf0 [ 1016.882339][T32435] __lock_acquire+0x2c66/0x7b50 [ 1016.887247][T32435] ? verify_lock_unused+0x140/0x140 [ 1016.892479][T32435] ? check_path+0x21/0x40 [ 1016.896843][T32435] ? check_noncircular+0x189/0x330 [ 1016.901984][T32435] ? add_chain_block+0x9b0/0x9b0 [ 1016.906957][T32435] ? lockdep_lock+0xf1/0x1f0 [ 1016.911595][T32435] lock_acquire+0x19e/0x400 [ 1016.916128][T32435] ? dquot_commit+0x5a/0x410 [ 1016.920758][T32435] ? __might_sleep+0xf0/0xf0 [ 1016.925485][T32435] ? read_lock_is_recursive+0x10/0x10 [ 1016.930898][T32435] __mutex_lock_common+0x1e5/0x2400 [ 1016.936148][T32435] ? dquot_commit+0x5a/0x410 [ 1016.940798][T32435] ? dquot_commit+0x5a/0x410 [ 1016.945436][T32435] ? __might_sleep+0xf0/0xf0 [ 1016.950064][T32435] ? mutex_lock_io_nested+0x60/0x60 [ 1016.955323][T32435] mutex_lock_nested+0x17/0x20 [ 1016.960127][T32435] dquot_commit+0x5a/0x410 [ 1016.964587][T32435] ext4_write_dquot+0x1f0/0x360 [ 1016.969490][T32435] mark_all_dquot_dirty+0xf9/0x400 [ 1016.974643][T32435] __dquot_free_space+0x7c3/0xb80 [ 1016.979713][T32435] ext4_free_blocks+0x1b1b/0x24c0 [ 1016.984791][T32435] ? ext4_mb_discard_preallocations_should_retry+0x690/0x690 [ 1016.992202][T32435] ? do_raw_read_unlock+0x39/0x70 [ 1016.997256][T32435] ? _raw_read_unlock+0x24/0x40 [ 1017.002145][T32435] ? ext4_is_pending+0x176/0x1c0 [ 1017.007133][T32435] ext4_ext_remove_space+0x22bd/0x41a0 [ 1017.012652][T32435] ? ext4_ext_index_trans_blocks+0xf0/0xf0 [ 1017.018493][T32435] ? ext4_es_remove_extent+0x29f/0x430 [ 1017.023988][T32435] ext4_ext_truncate+0x182/0x230 [ 1017.028959][T32435] ext4_truncate+0xa41/0x1190 [ 1017.033675][T32435] ? __ext4_mark_inode_dirty+0x6c0/0x6c0 [ 1017.039341][T32435] ? __ext4_mark_inode_dirty+0x4b4/0x6c0 [ 1017.045017][T32435] ext4_evict_inode+0xb0f/0x1050 [ 1017.049995][T32435] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 1017.055924][T32435] ? do_raw_spin_unlock+0x11d/0x230 [ 1017.061159][T32435] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 1017.067096][T32435] evict+0x4b6/0x8b0 [ 1017.071036][T32435] ? proc_nr_inodes+0x320/0x320 [ 1017.075924][T32435] ? do_raw_spin_unlock+0x11d/0x230 [ 1017.081153][T32435] ? _raw_spin_unlock+0x24/0x40 [ 1017.081256][ T4240] gspca_sn9c2028: read1 error -71 [ 1017.086031][T32435] ? iput+0x6ea/0x880 [ 1017.086061][T32435] __dentry_kill+0x412/0x630 [ 1017.099702][T32435] dentry_kill+0xb8/0x290 [ 1017.104072][T32435] dput+0xd8/0x1a0 [ 1017.107858][T32435] do_renameat2+0x9f9/0xf70 [ 1017.112405][T32435] ? fsnotify_move+0x4e0/0x4e0 [ 1017.115197][ T4240] gspca_sn9c2028: read1 error -71 [ 1017.117199][T32435] ? __phys_addr_symbol+0x2b/0x70 [ 1017.122325][ T4240] sn9c2028: probe of 4-1:0.0 failed with error -71 [ 1017.127265][T32435] ? getname_flags+0x1f9/0x4f0 [ 1017.127291][T32435] __x64_sys_renameat2+0xce/0xe0 [ 1017.127317][T32435] do_syscall_64+0x4c/0xa0 [ 1017.147979][T32435] ? clear_bhb_loop+0x30/0x80 [ 1017.152691][T32435] ? clear_bhb_loop+0x30/0x80 [ 1017.157399][T32435] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1017.163382][T32435] RIP: 0033:0x7f690ff0be59 [ 1017.167831][T32435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1017.187548][T32435] RSP: 002b:00007f690e165028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 1017.193587][ T4240] usb 4-1: USB disconnect, device number 42 [ 1017.195992][T32435] RAX: ffffffffffffffda RBX: 00007f6910184fa0 RCX: 00007f690ff0be59 [ 1017.196013][T32435] RDX: ffffffffffffff9c RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1017.217881][T32435] RBP: 00007f690ffa1e6f R08: 0000000000000000 R09: 0000000000000000 [ 1017.225883][T32435] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000000 [ 1017.233891][T32435] R13: 00007f6910185038 R14: 00007f6910184fa0 R15: 00007ffd65293fa8 [ 1017.241905][T32435]