last executing test programs: 2.994411096s ago: executing program 4 (id=7913): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x8000000000000040, 0x0) 2.037252501s ago: executing program 0 (id=7919): io_setup(0x7, &(0x7f0000004200)=0x0) io_getevents(r0, 0x6, 0x0, 0x0, 0x0) 1.740137097s ago: executing program 0 (id=7923): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x5, &(0x7f0000001140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b40)={r0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.692735908s ago: executing program 3 (id=7924): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000200)="7d40ff02098aec137e32e1110d846c2ee0ecf8d29bdc13d51b1f0e3b65d0316b829b6ccc9ef7ef6d7b8a7fc8915279100bc0293dcf9e3445a0b9d070702463bf84053411cc9a280c8d231077f1fa89fdbc7d681190ce7978869dcf87429b7ca50f88879cc5e1c607ed60c87b22df0a51621467cdc468c6419cdf4b55605161e999d1a389", 0x84}], 0x1) 1.612494834s ago: executing program 2 (id=7925): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xa8) 1.607580773s ago: executing program 1 (id=7926): r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x42, 0x10) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000302, 0x0, 0x0) 1.606906443s ago: executing program 4 (id=7927): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000640)={0x23, 0x40, 0xb2, 0x2}, 0x10) 1.489887951s ago: executing program 0 (id=7928): r0 = socket(0x23, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) 1.489143432s ago: executing program 3 (id=7929): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc0}}, 0x0) 1.331258572s ago: executing program 4 (id=7930): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xf5, &(0x7f0000000040), &(0x7f0000000280)=0x4) 1.305381378s ago: executing program 2 (id=7931): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="180000008f000000000000000b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000055090100000000009500000000000000bd0afeff20000000d500f4ff0100030018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000006500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2f}, 0x21) 1.277862493s ago: executing program 1 (id=7932): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x114, 0x1e, 0x301, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0xfffffffffffffffd}, @generic="9a8aa489160a11", @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d", @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x14e}], 0x1}, 0x0) 1.219833662s ago: executing program 0 (id=7933): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0x18, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@multicast2, @in6=@private1}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0xa0}}, 0x0) 1.219177162s ago: executing program 3 (id=7934): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0) 1.053038292s ago: executing program 2 (id=7935): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) write$sequencer(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="800357640423a8029403ff"], 0x10) 1.028020137s ago: executing program 4 (id=7936): getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000180)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@dioread_nolock}, {@quota}, {@resgid}, {@test_dummy_encryption_v1}, {@quota}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4ea, &(0x7f00000005c0)="$eJzs3VFrW9cdAPD/lazESZzZYXvIAsvCkuGELZIdL4nZQ7bB2J4C27L3zLNlYyxbxpKT2ITNYR9gUEpb6FOf+lLoByiUfIRSCLTvpS0tpU3ah0LbqOhKThxHih0iS4n9+8GRzj26V/9zJHR0z72XcwPYs06kD9m4X6vVzkTEYLM800yx1kj19e7dvTlZT0nUale+TCKSRll9tWTDex5qbtZ/LOIff434d/J43MrK6txEqVRcai4XqvOLhcrK6tnZ+YmZ4kxxYWxs9ML4xfHz4yMdaedARFz686ev/P/Nv1x697fXP7r6+en/JM3yiIft6LRG03PRv6GsLyKWdiJYj/SlLQQA4EWwvp//q4g4E4ORTffmAAAAgN2k9oeB+D6JqAEAAAC7Via9BjbJ5JvXAQxEJpPPN67h/VkczJTKlepvpsvLC1ONa2WHIpeZni0VR5rXCg9FLqkvj6b5h8vnNi2PRcSRiHh58EC6nJ8sl6Z6ffADAAAA9ohDm8b/3ww2xv8bfNezygEAAACdM9TrCgAAAAA7bqvxf4v5uwEAAIAXjPP/AAAAsKv97fLleqqt3/966trK8lz52tmpYmUuP788mZ8sLy3mZ8rlmXTOvvmt3q9ULi/+LhaWbxSqxUq1UFlZvTpfXl6oXp195BbYAAAAQBcd+eXtD5OIWPv9gTTV7et1pYCu6HualT/ZuXoA3ZftdQWAnnmq/39gV8n1ugJAz201xUfbi3fe63xdAACAnTH889bn/7NbHhtYy3SpisAOcfwP9i7n/2Hvcv4f9q5cZMNAHva2raYAffbz/7XaU1UIAADouIE0JZl8RHocIBuZTD4fcTgdE+SS6dlScSQifhIRHwzm9teXR9MtE7cFBAAAAAAAAAAAAAAAAAAAAAAAAIBtqtWSqAEAAAC7WkTmsySdzT9iePDUwObjA/uSbwfT54i4/vqVV29MVKtLo/Xyrx6UV19rlp/rxREMAAAAYLP1cfr6OB4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOune3ZuT66mbcb/4U0QMtYrfF/3pc3/kIuLg10n0bdguiYhsB+Kv3YqIo63iJ/VqxVCzFq3iH+hx/EMdiA972e16//PHVr+/TJxIn1v//i6kPdSza9//ZR70f9kW8etlh7cZ49idtwtt49+KONbXuv9Zj5+06X9ObjP+v/65utrutdobEcMt/3+SR2IVqvOLhcrK6tnZ+YmZ4kxxYWxs9ML4xfHz4yOF6dlSsfnYMsZLv3jn/pPaf7BN/KEt2n9qm+3/4c6Nuz9tZHMPNk8exj99svX3f7RN/Ezz+/91M19/fXg9v9bIb3T8rfePP6n9U23av9X3f3qb7T/z9/99vM1VAYAuqKyszk2USsWlXmf2R0TPoj/Tp1HfLXo+PsPnMlP/XJ+DarTM/HcH3rm+Z97rdnUi09NuCQAA2AGPj4EBAAAAAAAAAAAAAAAAAACAbuvGdGK5TTHX0sdOzJ4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANA5PwYAAP//5W3QjQ==") 968.134306ms ago: executing program 1 (id=7937): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ppoll(&(0x7f0000000280)=[{r0, 0x640}], 0x1, &(0x7f0000000700)={0x0, 0x989680}, 0x0, 0x0) 931.56481ms ago: executing program 0 (id=7938): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x17, 0xa, 0x2, "b75c89e7a20c8eac1638b5394c000000000006000000000000e8ff00", 0x32314d56}) 907.192715ms ago: executing program 3 (id=7939): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x6, 0x4, 0xf9, 0x7fff0000}]}) process_madvise(r0, 0x0, 0x0, 0x19, 0x0) 746.686306ms ago: executing program 2 (id=7940): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0x990a22, 0xfffffffd}) 700.191758ms ago: executing program 1 (id=7941): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) eventfd(0x7) 636.426096ms ago: executing program 3 (id=7942): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f00000022c0)={0x30, 0x2, 0x3, 0x801, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x1, 0x2}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x26}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xf}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000081}, 0x40000) 623.365243ms ago: executing program 0 (id=7943): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000000000)='./file1\x00', 0x3200041, &(0x7f0000000080)={[{@uid}, {@eas_rw}, {@eas_rw}, {@check_none}]}, 0x1, 0x9e18, &(0x7f000000a040)="$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") 572.199514ms ago: executing program 4 (id=7944): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x14, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 452.677532ms ago: executing program 2 (id=7945): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0xff070000, 0x48050}, 0x0) 346.005113ms ago: executing program 3 (id=7946): syz_mount_image$udf(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x210048, &(0x7f0000001040)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0000005733010312bb6086da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d"], 0xff, 0xc2d, &(0x7f0000001100)="$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") lchown(&(0x7f0000000100)='./file1\x00', 0x0, 0xffffffffffffffff) 344.890073ms ago: executing program 1 (id=7947): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x3000000, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1a}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) 276.06693ms ago: executing program 4 (id=7948): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockname(r0, 0x0, &(0x7f0000001440)) 106.545689ms ago: executing program 2 (id=7949): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=@base={0x5, 0x7fff, 0x5, 0x7}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9, r0}, 0x38) 0s ago: executing program 1 (id=7950): r0 = socket$inet(0x2, 0x1, 0x6) getsockopt(r0, 0x0, 0x15, 0xffffffffffffffff, &(0x7f0000000040)=0xfe) kernel console output (not intermixed with test programs): ut of range [ 482.431174][T16823] netlink: zone id is out of range [ 482.480061][T16823] netlink: zone id is out of range [ 482.485290][T16823] netlink: zone id is out of range [ 482.518820][T16823] netlink: zone id is out of range [ 482.534095][T16823] netlink: zone id is out of range [ 482.580522][T16823] netlink: zone id is out of range [ 482.599376][T16823] netlink: zone id is out of range [ 482.962008][T16839] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 483.012484][T16839] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 483.647313][T16868] netlink: 'syz.1.5744': attribute type 21 has an invalid length. [ 483.676031][T16868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5744'. [ 484.007963][T16879] loop0: detected capacity change from 0 to 64 [ 484.428086][T16894] netlink: 244 bytes leftover after parsing attributes in process `syz.0.5758'. [ 484.643596][T16899] netlink: 'syz.1.5761': attribute type 21 has an invalid length. [ 484.706418][T16899] netlink: 'syz.1.5761': attribute type 6 has an invalid length. [ 484.735009][T16899] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5761'. [ 484.779305][T16901] netlink: 'syz.4.5762': attribute type 21 has an invalid length. [ 484.837727][T16901] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5762'. [ 485.081297][T16916] bond0: Unable to set up delay as MII monitoring is disabled [ 485.405242][T16927] netlink: 108 bytes leftover after parsing attributes in process `syz.4.5774'. [ 485.796619][T16943] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5782'. [ 485.839291][T16943] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5782'. [ 486.056874][T16951] tmpfs: Bad value for 'mpol' [ 486.249352][T16958] loop4: detected capacity change from 0 to 256 [ 486.269073][ T4351] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 486.482375][ T4351] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 486.514800][ T4351] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 486.546073][ T4351] usb 3-1: config 220 has no interface number 2 [ 486.577383][ T4351] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 486.596588][ T4351] usb 3-1: config 220 interface 0 has no altsetting 0 [ 486.596616][ T4351] usb 3-1: config 220 interface 76 has no altsetting 0 [ 486.596638][ T4351] usb 3-1: config 220 interface 1 has no altsetting 0 [ 486.609614][ T4351] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 486.609651][ T4351] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.609673][ T4351] usb 3-1: Product: syz [ 486.609689][ T4351] usb 3-1: Manufacturer: syz [ 486.609706][ T4351] usb 3-1: SerialNumber: syz [ 486.831097][ T4351] usb 3-1: selecting invalid altsetting 0 [ 486.855723][ T4351] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 486.889122][ T4351] usb 3-1: No valid video chain found. [ 486.930812][ T4351] usb 3-1: selecting invalid altsetting 0 [ 486.939218][ T4351] usbtest: probe of 3-1:220.1 failed with error -22 [ 486.955015][T16978] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 486.968602][ T4351] usb 3-1: USB disconnect, device number 26 [ 487.203416][T16982] loop4: detected capacity change from 0 to 4096 [ 487.234007][T16982] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 487.279266][ T5285] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 487.501176][ T5285] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 487.539673][ T5285] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 487.589471][ T5285] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 487.629332][ T5285] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 487.672195][ T5285] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 487.712782][ T5285] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.749109][ T5285] usb 2-1: Product: syz [ 487.765799][ T5285] usb 2-1: Manufacturer: syz [ 487.779195][ T5285] usb 2-1: SerialNumber: syz [ 487.810652][ T5285] usb 2-1: config 0 descriptor?? [ 488.027331][ T5285] adutux 2-1:0.0: Could not retrieve serial number [ 488.041821][ T5285] adutux: probe of 2-1:0.0 failed with error -5 [ 488.241173][ T5285] usb 2-1: USB disconnect, device number 15 [ 488.320836][T17015] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5816'. [ 488.501561][T17021] netlink: 'syz.2.5819': attribute type 5 has an invalid length. [ 488.539940][T17021] device ip6erspan0 entered promiscuous mode [ 489.190482][T17047] netlink: 'syz.2.5832': attribute type 21 has an invalid length. [ 489.227079][T17047] netlink: 'syz.2.5832': attribute type 6 has an invalid length. [ 489.246570][T17047] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5832'. [ 489.319101][ T5285] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 489.521160][ T5285] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 489.539102][ T5285] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 489.552269][T17060] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5838'. [ 489.584434][ T5285] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 489.614310][ T5285] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.655170][ T5285] usb 4-1: Product: syz [ 489.672660][ T5285] usb 4-1: Manufacturer: syz [ 489.677419][ T5285] usb 4-1: SerialNumber: syz [ 489.745714][ T5285] cdc_ncm 4-1:1.0: skipping garbage [ 489.762478][ T5285] cdc_ncm 4-1:1.0: NCM or ECM functional descriptors missing [ 489.786234][ T5285] cdc_ncm 4-1:1.0: bind() failure [ 489.823180][ T5285] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 489.846307][ T5285] cdc_ncm 4-1:1.1: bind() failure [ 489.911967][T17072] binder: 17069:17072 ioctl c0306201 0 returned -14 [ 489.981553][ T5285] usb 4-1: USB disconnect, device number 30 [ 490.393635][T17088] ipt_CLUSTERIP: bad num_local_nodes 32 [ 490.746815][T17098] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5856'. [ 491.447340][T17118] device wg1 entered promiscuous mode [ 491.496088][T17082] loop2: detected capacity change from 0 to 32768 [ 491.598277][T17082] XFS (loop2): Mounting V5 Filesystem [ 491.757629][T17082] XFS (loop2): Ending clean mount [ 491.779441][T17082] XFS (loop2): Quotacheck needed: Please wait. [ 491.857786][T17139] x_tables: duplicate entry at hook 3 [ 491.918615][T17082] XFS (loop2): Quotacheck: Done. [ 491.978376][T17141] Cannot find del_set index 43 as target [ 492.112785][ T4278] XFS (loop2): Unmounting Filesystem [ 492.633798][T17136] loop3: detected capacity change from 0 to 32768 [ 492.685584][T17136] (syz.3.5870,17136,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 492.756937][T17136] (syz.3.5870,17136,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 492.897577][T17136] JBD2: Ignoring recovery information on journal [ 493.047570][T17136] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 493.350952][T17171] net_ratelimit: 111 callbacks suppressed [ 493.350970][T17171] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 493.466727][ T4270] ocfs2: Unmounting device (7,3) on (node local) [ 493.849566][T17185] loop2: detected capacity change from 0 to 64 [ 494.394838][T17200] loop4: detected capacity change from 0 to 8 [ 494.487394][T17202] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 494.554845][T17202] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.606020][T17202] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 494.749574][T17212] x_tables: duplicate underflow at hook 2 [ 495.617793][T17245] SET target dimension over the limit! [ 495.876682][ T14] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 496.079083][ T14] usb 5-1: Using ep0 maxpacket: 16 [ 496.086399][ T14] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 496.109177][ T14] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 496.158598][ T14] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 496.181483][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.202143][ T14] usb 5-1: Product: syz [ 496.226484][ T14] usb 5-1: Manufacturer: syz [ 496.237834][ T14] usb 5-1: SerialNumber: syz [ 496.467410][ T14] usb 5-1: 0:2 : does not exist [ 496.494226][ T14] usb 5-1: MIDIStreaming interface descriptor not found [ 496.585147][ T14] usb 5-1: USB disconnect, device number 20 [ 496.617872][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 496.617889][ T26] audit: type=1326 audit(1772669288.776:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17278 comm="syz.3.5934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13539c799 code=0x7ffc0000 [ 496.646707][ C1] vkms_vblank_simulate: vblank timer overrun [ 496.769206][ T26] audit: type=1326 audit(1772669288.826:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17278 comm="syz.3.5934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7fc13539c799 code=0x7ffc0000 [ 496.829535][ T26] audit: type=1326 audit(1772669288.826:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17278 comm="syz.3.5934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13539c799 code=0x7ffc0000 [ 496.906873][ T26] audit: type=1326 audit(1772669288.826:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17278 comm="syz.3.5934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13539c799 code=0x7ffc0000 [ 497.109718][ T4674] udevd[4674]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 497.129212][ T4351] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 497.329112][ T4351] usb 2-1: Using ep0 maxpacket: 16 [ 497.336310][ T4351] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 497.368453][ T4351] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 497.410796][ T4351] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 497.433134][T17301] kAFS: unable to lookup cell '(/' [ 497.438531][ T4351] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.457287][ T4351] usb 2-1: Product: syz [ 497.462069][ T4351] usb 2-1: Manufacturer: syz [ 497.466739][ T4351] usb 2-1: SerialNumber: syz [ 497.480621][ T4351] r8152-cfgselector 2-1: config 0 descriptor?? [ 497.710228][ T4351] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 497.943055][ T4351] usb 2-1: USB disconnect, device number 16 [ 498.006312][T17315] SET target dimension over the limit! [ 498.320232][T17323] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5955'. [ 498.349101][T17323] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5955'. [ 498.358437][T17323] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5955'. [ 498.467534][T17329] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5958'. [ 498.599112][ T4351] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 498.792366][ T4351] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 498.812998][ T4351] usb 5-1: config 0 has no interface number 0 [ 498.829103][ T4351] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 498.846827][ T4351] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 498.877680][ T4351] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 498.888776][T17342] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5963'. [ 498.898304][ T4351] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.916395][ T4351] usb 5-1: config 0 descriptor?? [ 498.963429][ T4351] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.120/input/input22 [ 499.197257][ T4351] usb 5-1: USB disconnect, device number 21 [ 499.599927][ T26] audit: type=1326 audit(1772669291.766:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17359 comm="syz.0.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b199c799 code=0x7ffc0000 [ 499.657324][ T26] audit: type=1326 audit(1772669291.766:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17359 comm="syz.0.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b199c799 code=0x7ffc0000 [ 499.765972][ T26] audit: type=1326 audit(1772669291.766:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17359 comm="syz.0.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b199c799 code=0x7ffc0000 [ 499.906777][T17369] loop3: detected capacity change from 0 to 128 [ 499.919077][ T26] audit: type=1326 audit(1772669291.766:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17359 comm="syz.0.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f76b199c799 code=0x7ffc0000 [ 499.945145][T17371] xt_TCPMSS: Only works on TCP SYN packets [ 500.014939][ T26] audit: type=1326 audit(1772669291.766:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17359 comm="syz.0.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b199c799 code=0x7ffc0000 [ 500.039204][T17369] omfs: Invalid superblock (7b3184f9) [ 500.167452][ T26] audit: type=1326 audit(1772669291.766:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17359 comm="syz.0.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b199c799 code=0x7ffc0000 [ 500.569569][T17385] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5985'. [ 500.809729][T17350] loop2: detected capacity change from 0 to 32768 [ 500.829279][ T4351] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 500.955138][T17350] XFS (loop2): Mounting V5 Filesystem [ 501.031593][ T4351] usb 4-1: unable to get BOS descriptor or descriptor too short [ 501.046600][ T4351] usb 4-1: not running at top speed; connect to a high speed hub [ 501.066891][ T4351] usb 4-1: config 4 has an invalid interface number: 175 but max is 0 [ 501.079218][ T4351] usb 4-1: config 4 has no interface number 0 [ 501.091926][ T4351] usb 4-1: New USB device found, idVendor=0403, idProduct=da73, bcdDevice=dc.17 [ 501.121697][ T4351] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.140258][T17350] XFS (loop2): Ending clean mount [ 501.146107][T17410] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5993'. [ 501.149216][ T4351] usb 4-1: Product: syz [ 501.179281][T17410] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5993'. [ 501.209314][ T4351] usb 4-1: Manufacturer: syz [ 501.213998][ T4351] usb 4-1: SerialNumber: syz [ 501.223373][T17410] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5993'. [ 501.359855][ T4278] XFS (loop2): Unmounting Filesystem [ 501.459647][ T4351] usb 4-1: NDI device with a latency value of 1 [ 501.488452][ T4351] ftdi_sio 4-1:4.175: FTDI USB Serial Device converter detected [ 501.519399][ T4351] ftdi_sio ttyUSB0: unknown device type: 0xdc17 [ 501.532841][T17417] netlink: 204 bytes leftover after parsing attributes in process `syz.1.5997'. [ 501.558651][ T4351] usb 4-1: USB disconnect, device number 31 [ 501.581312][ T4351] ftdi_sio 4-1:4.175: device disconnected [ 501.652415][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.676603][T17420] loop0: detected capacity change from 0 to 512 [ 501.765982][T17422] openvswitch: netlink: Message has 48126 unknown bytes. [ 501.833346][T17420] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 501.842833][T17420] ext4 filesystem being mounted at /1146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 502.496333][T17444] loop3: detected capacity change from 0 to 164 [ 502.578618][T17448] netlink: 'syz.1.6010': attribute type 30 has an invalid length. [ 502.589095][ T5285] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 502.809233][ T5285] usb 5-1: Using ep0 maxpacket: 16 [ 502.816785][ T5285] usb 5-1: config 252 has an invalid interface number: 15 but max is 0 [ 502.865953][ T5285] usb 5-1: config 252 has no interface number 0 [ 502.877216][ T5285] usb 5-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 502.906363][ T5285] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 502.922186][ T5285] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.930555][ T5285] usb 5-1: Product: syz [ 502.934792][ T5285] usb 5-1: Manufacturer: syz [ 502.949880][ T5285] usb 5-1: SerialNumber: syz [ 502.996880][ T5285] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 503.213521][ T7876] usb 5-1: Failed to submit usb control message: -71 [ 503.213735][ T5285] usb 5-1: USB disconnect, device number 22 [ 503.236545][ T7876] usb 5-1: unable to send the bmi data to the device: -71 [ 503.279711][ T7876] usb 5-1: unable to get target info from device [ 503.286304][ T7876] usb 5-1: could not get target info (-71) [ 503.300270][ T7876] usb 5-1: could not probe fw (-71) [ 503.700672][T17482] loop3: detected capacity change from 0 to 128 [ 503.830050][T17487] __nla_validate_parse: 1 callbacks suppressed [ 503.830068][T17487] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6025'. [ 503.862957][T17487] netlink: 10 bytes leftover after parsing attributes in process `syz.2.6025'. [ 504.207156][T17493] lo speed is unknown, defaulting to 1000 [ 504.263368][T17497] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 504.285723][T17499] netlink: 'syz.1.6031': attribute type 1 has an invalid length. [ 504.328583][T17501] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6032'. [ 504.357591][T17501] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6032'. [ 504.511289][T17505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6034'. [ 504.585423][T17505] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 504.652682][T17505] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 504.673945][T17507] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6035'. [ 504.698170][T17505] device bridge2 entered promiscuous mode [ 504.711641][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 504.754609][T17509] netlink: 'syz.1.6036': attribute type 3 has an invalid length. [ 505.033770][T17518] sctp: [Deprecated]: syz.1.6040 (pid 17518) Use of struct sctp_assoc_value in delayed_ack socket option. [ 505.033770][T17518] Use struct sctp_sack_info instead [ 505.478497][T17529] comedi comedi4: bad chanlist[0]=0xfffffffa chan=65530 range length=2 [ 505.545989][T17534] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6048'. [ 505.845391][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 505.845406][ T26] audit: type=1326 audit(1772669298.006:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17544 comm="syz.2.6053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439239c799 code=0x7ffc0000 [ 505.874051][ C1] vkms_vblank_simulate: vblank timer overrun [ 505.880806][T17543] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.6052'. [ 505.959889][ T26] audit: type=1326 audit(1772669298.006:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17544 comm="syz.2.6053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439239c799 code=0x7ffc0000 [ 506.044744][T17548] netlink: 'syz.0.6054': attribute type 1 has an invalid length. [ 506.069749][ T26] audit: type=1326 audit(1772669298.056:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17544 comm="syz.2.6053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f439239c799 code=0x7ffc0000 [ 506.092207][ C1] vkms_vblank_simulate: vblank timer overrun [ 506.207662][ T26] audit: type=1326 audit(1772669298.056:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17544 comm="syz.2.6053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439239c799 code=0x7ffc0000 [ 506.239239][T17555] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6058'. [ 506.269109][T17555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6058'. [ 506.299924][ T26] audit: type=1326 audit(1772669298.056:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17544 comm="syz.2.6053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439239c799 code=0x7ffc0000 [ 506.322298][ C1] vkms_vblank_simulate: vblank timer overrun [ 506.385844][T17564] netlink: 'syz.4.6062': attribute type 1 has an invalid length. [ 506.399574][T17563] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551489) [ 506.429285][T17563] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 506.776905][T17574] netlink: 'syz.2.6067': attribute type 13 has an invalid length. [ 506.869361][T17574] netlink: 'syz.2.6067': attribute type 17 has an invalid length. [ 506.877388][T17574] device lo left promiscuous mode [ 506.967847][T17574] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 507.015793][T17574] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 507.057261][T17582] loop0: detected capacity change from 0 to 1024 [ 507.148887][T17574] device syz_tun left promiscuous mode [ 507.517426][T17574] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 507.546883][T17574] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 507.601064][T17585] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 508.369993][T17619] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 508.809096][T17637] netlink: 'syz.0.6098': attribute type 21 has an invalid length. [ 508.817003][T17637] IPv6: NLM_F_CREATE should be specified when creating new route [ 508.848881][T17637] __nla_validate_parse: 4 callbacks suppressed [ 508.848899][T17637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6098'. [ 508.981636][ T14] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 509.009389][T17645] netlink: 'syz.3.6102': attribute type 27 has an invalid length. [ 509.169450][ T14] usb 3-1: Using ep0 maxpacket: 8 [ 509.199108][ T14] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 509.233543][ T14] usb 3-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 509.283797][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.334726][ T14] usb 3-1: Product: syz [ 509.360353][ T14] usb 3-1: Manufacturer: syz [ 509.373310][ T14] usb 3-1: SerialNumber: syz [ 509.400238][ T14] usb 3-1: config 0 descriptor?? [ 509.419117][ T14] cdc_phonet 3-1:0.0: skipping garbage [ 509.443908][ T14] cdc_phonet: probe of 3-1:0.0 failed with error -22 [ 509.625654][ T14] usb 3-1: USB disconnect, device number 27 [ 509.826770][T17666] xt_CT: No such helper "snmp_trap" [ 510.269592][T17685] loop4: detected capacity change from 0 to 1024 [ 510.277040][T17685] EXT4-fs: Ignoring removed nobh option [ 510.333858][T17685] EXT4-fs: Ignoring removed oldalloc option [ 510.369964][T17685] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 510.386454][T17694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6123'. [ 510.493831][T17685] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 510.658322][T17703] QAT: failed to copy from user. [ 510.807444][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 511.033903][T17711] loop4: detected capacity change from 0 to 2048 [ 511.141886][T17711] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 511.319777][T17719] loop3: detected capacity change from 0 to 256 [ 512.682760][T17760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6155'. [ 512.762254][T17762] netlink: 'syz.4.6156': attribute type 1 has an invalid length. [ 512.799388][T17764] netlink: 'syz.1.6157': attribute type 21 has an invalid length. [ 512.882414][T17764] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.892084][T17764] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.900896][T17764] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.909806][T17764] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.415732][T17785] netlink: 'syz.0.6167': attribute type 11 has an invalid length. [ 513.439105][T17785] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6167'. [ 513.870872][T17799] loop3: detected capacity change from 0 to 256 [ 514.039886][T17799] FAT-fs (loop3): Directory bread(block 64) failed [ 514.046505][T17799] FAT-fs (loop3): Directory bread(block 65) failed [ 514.109858][T17799] FAT-fs (loop3): Directory bread(block 66) failed [ 514.116475][T17799] FAT-fs (loop3): Directory bread(block 67) failed [ 514.159159][T17799] FAT-fs (loop3): Directory bread(block 68) failed [ 514.186612][T17799] FAT-fs (loop3): Directory bread(block 69) failed [ 514.226618][T17799] FAT-fs (loop3): Directory bread(block 70) failed [ 514.249111][T17799] FAT-fs (loop3): Directory bread(block 71) failed [ 514.269215][T17799] FAT-fs (loop3): Directory bread(block 72) failed [ 514.275890][T17799] FAT-fs (loop3): Directory bread(block 73) failed [ 514.368244][T17811] unsupported nla_type 34 [ 514.482675][T17815] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6181'. [ 514.553693][T17815] netlink: 7 bytes leftover after parsing attributes in process `syz.2.6181'. [ 515.416758][T17849] loop4: detected capacity change from 0 to 164 [ 515.502237][T17849] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 516.317483][T17872] netlink: 'syz.1.6208': attribute type 1 has an invalid length. [ 517.058516][T17854] loop2: detected capacity change from 0 to 40427 [ 517.086864][T17854] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 517.129760][T17854] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 517.181861][T17854] F2FS-fs (loop2): invalid crc_offset: 33558524 [ 517.261038][T17854] F2FS-fs (loop2): Found nat_bits in checkpoint [ 517.495916][T17854] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 517.539197][T17854] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 518.449133][T17939] netlink: 'syz.0.6238': attribute type 1 has an invalid length. [ 518.982697][ T26] audit: type=1400 audit(1772669311.146:260): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=17957 comm="syz.3.6246" [ 519.348179][T17967] 8021q: adding VLAN 0 to HW filter on device bond1 [ 519.426908][T17979] loop4: detected capacity change from 0 to 256 [ 519.452416][T17979] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d) [ 519.992833][T17993] ieee802154 phy1 wpan1: encryption failed: -22 [ 520.224783][T18003] loop3: detected capacity change from 0 to 64 [ 521.331676][T18042] QAT: Stopping all acceleration devices. [ 521.843516][T18052] device team0 entered promiscuous mode [ 521.859166][T18052] device team_slave_0 entered promiscuous mode [ 521.909902][T18052] device team_slave_1 entered promiscuous mode [ 521.946906][T18052] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 522.015657][T18052] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 522.361497][T18068] netlink: 'syz.4.6299': attribute type 15 has an invalid length. [ 522.404234][T18068] netlink: 666 bytes leftover after parsing attributes in process `syz.4.6299'. [ 522.659176][ T128] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 522.858391][ T128] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 522.876081][T18082] binder: 18081:18082 ioctl 400c620e 0 returned -14 [ 522.878239][ T128] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 522.878269][ T128] usb 3-1: config 0 has no interface number 0 [ 522.881071][ T128] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 522.881103][ T128] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.881126][ T128] usb 3-1: Product: syz [ 522.881142][ T128] usb 3-1: Manufacturer: syz [ 522.881159][ T128] usb 3-1: SerialNumber: syz [ 522.883147][ T128] usb 3-1: config 0 descriptor?? [ 523.092876][ T128] usb 3-1: Found UVC 0.00 device syz (046d:0823) [ 523.190057][ T128] usb 3-1: No valid video chain found. [ 523.297967][T18093] loop3: detected capacity change from 0 to 512 [ 523.412826][T18093] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.6311: Invalid inode bitmap blk 4 in block_group 0 [ 523.443562][ T128] usb 3-1: USB disconnect, device number 28 [ 523.528470][T18093] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 523.691716][ T4270] EXT4-fs (loop3): unmounting filesystem. [ 524.570152][T18138] loop4: detected capacity change from 0 to 256 [ 525.088545][T18155] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6340'. [ 525.146399][T18155] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6340'. [ 525.466106][T18167] ieee802154 phy1 wpan1: encryption failed: -22 [ 525.928677][T18188] openvswitch: netlink: Message has 1 unknown bytes. [ 526.266943][T18199] xt_hashlimit: overflow, rate too high: 0 [ 526.550219][T18205] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.493012][T18240] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6381'. [ 528.161464][T18268] netlink: 'syz.3.6394': attribute type 27 has an invalid length. [ 528.663118][T18287] delete_channel: no stack [ 528.859092][ T14] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 529.059343][ T14] usb 3-1: Using ep0 maxpacket: 8 [ 529.067350][ T14] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 529.083094][T18305] trusted_key: encrypted_key: hex blob is missing [ 529.119510][ T14] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 529.137661][ T14] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 529.156079][ T14] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 529.196534][ T14] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 529.279355][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.287502][ T14] usb 3-1: Product: syz [ 529.299173][ T14] usb 3-1: Manufacturer: syz [ 529.303853][ T14] usb 3-1: SerialNumber: syz [ 529.350568][T18284] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 529.361791][ T14] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 529.399404][ T14] usbtest 3-1:1.0: Linux user mode ISO test driver [ 529.406068][ T14] usbtest 3-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 529.425079][T18312] syz.3.6415 (18312): drop_caches: 2 [ 529.640102][ T14] usb 3-1: USB disconnect, device number 29 [ 530.147583][T18325] loop3: detected capacity change from 0 to 8192 [ 530.181953][T18327] loop4: detected capacity change from 0 to 4096 [ 530.228839][T18325] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 530.230519][T18327] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 530.346633][T18313] loop0: detected capacity change from 0 to 40427 [ 530.412374][T18313] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 530.451758][T18313] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 530.474377][T18332] loop2: detected capacity change from 0 to 64 [ 530.501080][T18313] F2FS-fs (loop0): invalid crc_offset: 33558524 [ 530.621883][T18313] F2FS-fs (loop0): Found nat_bits in checkpoint [ 530.629707][T18335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6425'. [ 530.908836][ T26] audit: type=1326 audit(1772669323.066:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18340 comm="syz.4.6427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f1a19c799 code=0x7ffc0000 [ 530.934347][T18313] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 530.979025][T18313] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 531.000739][ T26] audit: type=1326 audit(1772669323.076:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18340 comm="syz.4.6427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f5f1a19c799 code=0x7ffc0000 [ 531.129215][ T26] audit: type=1326 audit(1772669323.076:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18340 comm="syz.4.6427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f1a19c799 code=0x7ffc0000 [ 531.240444][ T26] audit: type=1326 audit(1772669323.076:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18340 comm="syz.4.6427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f1a19c799 code=0x7ffc0000 [ 531.719487][T18363] xt_CT: You must specify a L4 protocol and not use inversions on it [ 531.730031][T18359] syz.4.6437 (18359): drop_caches: 2 [ 532.471929][T18379] loop4: detected capacity change from 0 to 4096 [ 532.492214][ T4313] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 532.510614][T18379] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 532.694496][ T4313] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 532.729116][ T4313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.777272][ T4313] usb 3-1: config 0 descriptor?? [ 532.802854][ T4313] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 533.203728][ T4313] gspca_cpia1: usb_control_msg 03, error -71 [ 533.219280][ T4313] gspca_cpia1: usb_control_msg 01, error -71 [ 533.241316][ T4313] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 533.270834][ T4313] usb 3-1: USB disconnect, device number 30 [ 533.326269][T18375] loop3: detected capacity change from 0 to 40427 [ 533.337509][T18405] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6457'. [ 533.352539][T18375] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 533.359100][T18405] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6457'. [ 533.371166][T18375] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 533.391832][T18375] F2FS-fs (loop3): invalid crc_offset: 33558524 [ 533.404526][T18405] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6457'. [ 533.429367][T18405] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6457'. [ 533.437873][T18375] F2FS-fs (loop3): Found nat_bits in checkpoint [ 533.592331][T18375] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 533.615070][T18375] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 534.404347][T18433] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 534.665569][T18443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6474'. [ 537.062495][T18514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6508'. [ 537.427075][T18481] kexec: Could not allocate control_code_buffer [ 537.785640][T18508] loop4: detected capacity change from 0 to 32768 [ 537.812792][T18508] (syz.4.6505,18508,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 537.875890][T18508] (syz.4.6505,18508,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 537.945843][T18508] JBD2: Ignoring recovery information on journal [ 538.048772][T18508] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 538.332860][T18550] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6525'. [ 538.391366][ T4280] ocfs2: Unmounting device (7,4) on (node local) [ 538.864299][T18564] comedi comedi1: dmm32at: I/O port conflict (0x10003c4,16) [ 539.408262][T18584] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6539'. [ 539.485278][T18584] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6539'. [ 539.783633][T18599] nfs: Unknown parameter 'ntext' [ 541.023868][T18644] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6569'. [ 541.044336][T18644] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6569'. [ 541.287137][T18654] device wlan0 entered promiscuous mode [ 541.680767][T18667] loop3: detected capacity change from 0 to 2048 [ 541.717601][T18667] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 541.797557][T18667] UDF-fs: bad mount option "nicb" or missing value [ 543.150825][T18718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6605'. [ 543.201899][T18718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6605'. [ 543.418579][ T26] audit: type=1326 audit(1772669335.576:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18726 comm="syz.4.6612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f1a19c799 code=0x7ffc0000 [ 543.469654][ T26] audit: type=1326 audit(1772669335.586:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18726 comm="syz.4.6612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f5f1a19c799 code=0x7ffc0000 [ 543.542664][ T26] audit: type=1326 audit(1772669335.586:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18726 comm="syz.4.6612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f1a19c799 code=0x7ffc0000 [ 543.964027][ T14] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 544.149844][ T14] usb 4-1: too many configurations: 129, using maximum allowed: 8 [ 544.180383][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 544.229075][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 14336, setting to 64 [ 544.280611][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 544.309430][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 14336, setting to 64 [ 544.346724][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 544.346763][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 14336, setting to 64 [ 544.361036][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 544.361072][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 14336, setting to 64 [ 544.362165][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 544.362196][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 14336, setting to 64 [ 544.368855][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 544.368891][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 14336, setting to 64 [ 544.377878][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 544.377916][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 14336, setting to 64 [ 544.379192][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 544.379223][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 14336, setting to 64 [ 544.382100][ T14] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 544.382134][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 544.382156][ T14] usb 4-1: Product: syz [ 544.382173][ T14] usb 4-1: Manufacturer: syz [ 544.382190][ T14] usb 4-1: SerialNumber: syz [ 544.389659][ T14] usb 4-1: config 0 descriptor?? [ 544.391398][ T14] hub 4-1:0.0: Invalid hub with more than one config or interface [ 544.391426][ T14] hub: probe of 4-1:0.0 failed with error -22 [ 544.394043][ T14] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input25 [ 544.398990][ C1] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 544.645011][ T14] usb 4-1: USB disconnect, device number 32 [ 545.237789][T18776] tmpfs: Bad value for 'mpol' [ 545.422401][T18782] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6636'. [ 545.439316][T18782] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6636'. [ 545.489198][ T5285] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 545.589511][T18789] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 545.676594][ T5285] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 545.723383][ T5285] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 545.749117][ T5285] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 545.758144][ T5285] usb 5-1: config 1 has no interface number 0 [ 545.802494][ T5285] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 545.811968][T18794] netlink: 209848 bytes leftover after parsing attributes in process `syz.0.6642'. [ 545.834719][ T5285] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 545.860555][T18794] netlink: zone id is out of range [ 545.897930][ T5285] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 545.914278][ T5285] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.967817][ T5285] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 546.151051][T18804] loop3: detected capacity change from 0 to 512 [ 546.156412][ T5285] snd_usb_pod 5-1:1.1: endpoint not available, using fallback values [ 546.189995][ T5285] snd_usb_pod 5-1:1.1: invalid control EP [ 546.195805][ T5285] snd_usb_pod 5-1:1.1: cannot start listening: -22 [ 546.253195][ T5285] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 546.269877][ T5285] snd_usb_pod: probe of 5-1:1.1 failed with error -22 [ 546.304701][T18804] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 546.334129][T18804] ext4 filesystem being mounted at /1299/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 546.415298][ T14] usb 5-1: USB disconnect, device number 23 [ 546.493454][T18815] netlink: 6 bytes leftover after parsing attributes in process `syz.2.6650'. [ 546.529342][T18815] netlink: 6 bytes leftover after parsing attributes in process `syz.2.6650'. [ 546.544997][ T4270] EXT4-fs (loop3): unmounting filesystem. [ 546.652447][T18817] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6651'. [ 547.072617][T18828] loop3: detected capacity change from 0 to 4096 [ 547.110651][T18828] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 547.187217][T18834] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 547.253970][T18828] ntfs3: loop3: failed to convert "c46c" to cp850 [ 547.477593][T18844] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6663'. [ 547.489327][T18843] netlink: 'syz.1.6664': attribute type 21 has an invalid length. [ 547.497332][T18843] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6664'. [ 547.959781][T18860] loop3: detected capacity change from 0 to 64 [ 548.017153][T18860] syz.3.6673: attempt to access beyond end of device [ 548.017153][T18860] loop3: rw=0, sector=16777216, nr_sectors = 2 limit=64 [ 548.074102][T18860] Buffer I/O error on dev loop3, logical block 8388608, async page read [ 548.126895][T18860] syz.3.6673: attempt to access beyond end of device [ 548.126895][T18860] loop3: rw=0, sector=16777216, nr_sectors = 2 limit=64 [ 548.222574][T18860] Buffer I/O error on dev loop3, logical block 8388608, async page read [ 548.494490][ T5285] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 548.676795][T18886] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6684'. [ 548.695838][ T5285] usb 2-1: Using ep0 maxpacket: 32 [ 548.703052][ T5285] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 548.729270][ T5285] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 548.751177][ T5285] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 548.789117][ T5285] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 548.818071][ T5285] usb 2-1: Product: syz [ 548.822414][ T5285] usb 2-1: Manufacturer: syz [ 548.842746][ T5285] hub 2-1:4.0: USB hub found [ 549.070220][ T5285] hub 2-1:4.0: 5 ports detected [ 549.076516][ T5285] hub 2-1:4.0: insufficient power available to use all downstream ports [ 549.276956][ T5285] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 549.291013][ T5285] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 549.359767][ T5285] usb 2-1: USB disconnect, device number 17 [ 549.397160][T18883] loop2: detected capacity change from 0 to 32768 [ 549.477612][T18883] JBD2: Ignoring recovery information on journal [ 549.569327][T18883] (syz.2.6683,18883,1):ocfs2_clear_journal_error:1114 ERROR: File system error 33023 recorded in journal 0. [ 549.581756][T18883] (syz.2.6683,18883,1):ocfs2_clear_journal_error:1116 ERROR: File system on device loop2 needs checking. [ 549.597048][T18883] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 549.622796][ T7876] (kworker/u4:8,7876,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #4104: rec_len is smaller than minimal - offset=0, inode=4104, rec_len=8, name_len=0 [ 549.646677][T18883] (syz.2.6683,18883,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #4097: rec_len is smaller than minimal - offset=0, inode=397313, rec_len=0, name_len=1 [ 549.668644][T18883] (syz.2.6683,18883,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 549.677665][T18883] (syz.2.6683,18883,1):ocfs2_mknod:298 ERROR: status = -2 [ 549.685023][T18883] (syz.2.6683,18883,1):ocfs2_mknod:502 ERROR: status = -2 [ 549.692836][T18883] (syz.2.6683,18883,1):ocfs2_mkdir:659 ERROR: status = -2 [ 549.695850][T18911] loop3: detected capacity change from 0 to 512 [ 549.757792][ T4278] ocfs2: Unmounting device (7,2) on (node local) [ 549.775521][T18911] EXT4-fs: Ignoring removed nomblk_io_submit option [ 549.890642][T18911] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 549.955075][T18911] ext4 filesystem being mounted at /1311/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 550.226102][ T4270] EXT4-fs (loop3): unmounting filesystem. [ 550.304414][T18926] kernel profiling enabled (shift: 15) [ 550.527416][T18932] netlink: 'syz.4.6704': attribute type 4 has an invalid length. [ 550.537061][T18933] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6705'. [ 550.545638][T18932] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6704'. [ 551.447521][T18965] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 551.454889][T18965] IPv6: NLM_F_CREATE should be set when creating new route [ 551.462247][T18965] IPv6: NLM_F_CREATE should be set when creating new route [ 551.563105][T18959] loop2: detected capacity change from 0 to 4096 [ 551.622292][T18959] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 551.820417][T18959] ntfs3: loop2: failed to convert "c46c" to iso8859-6 [ 551.846853][T18959] ntfs3: loop2: failed to convert "0030" to iso8859-6 [ 551.855096][ T26] audit: type=1326 audit(1772669344.016:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18976 comm="syz.0.6725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b199c799 code=0x50000 [ 551.894477][T18959] ntfs3: loop2: failed to convert "0031" to iso8859-6 [ 551.914711][ T26] audit: type=1326 audit(1772669344.036:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18976 comm="syz.0.6725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b199c799 code=0x50000 [ 551.971146][ T26] audit: type=1326 audit(1772669344.036:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18976 comm="syz.0.6725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b199c799 code=0x50000 [ 552.067744][ T26] audit: type=1326 audit(1772669344.036:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18976 comm="syz.0.6725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b199c799 code=0x50000 [ 552.143877][ T26] audit: type=1326 audit(1772669344.036:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18976 comm="syz.0.6725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b199c799 code=0x50000 [ 552.347725][ T26] audit: type=1326 audit(1772669344.036:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18976 comm="syz.0.6725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b199c799 code=0x50000 [ 552.476657][ T26] audit: type=1326 audit(1772669344.036:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18976 comm="syz.0.6725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b199c799 code=0x50000 [ 552.479558][T18996] dns_resolver: Unsupported content type (240) [ 552.498908][ C0] vkms_vblank_simulate: vblank timer overrun [ 552.568731][ T26] audit: type=1326 audit(1772669344.036:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18976 comm="syz.0.6725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b199c799 code=0x50000 [ 552.641021][ T26] audit: type=1326 audit(1772669344.046:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18976 comm="syz.0.6725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b199c799 code=0x50000 [ 552.663161][ C0] vkms_vblank_simulate: vblank timer overrun [ 552.739318][ T26] audit: type=1326 audit(1772669344.046:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18976 comm="syz.0.6725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b199c799 code=0x50000 [ 552.762302][ C0] vkms_vblank_simulate: vblank timer overrun [ 553.569829][T18997] loop3: detected capacity change from 0 to 32768 [ 553.648206][T18997] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 553.711608][T18997] (syz.3.6730,18997,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=16, name_len=1 [ 553.799162][T18997] (syz.3.6730,18997,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 553.825072][T18997] (syz.3.6730,18997,0):ocfs2_mknod:298 ERROR: status = -2 [ 553.849129][T18997] (syz.3.6730,18997,0):ocfs2_mknod:502 ERROR: status = -2 [ 553.900813][T18997] (syz.3.6730,18997,0):ocfs2_create:676 ERROR: status = -2 [ 554.124075][ T4270] ocfs2: Unmounting device (7,3) on (node local) [ 554.275019][T19050] netlink: 'syz.0.6757': attribute type 30 has an invalid length. [ 554.958199][T19074] ALSA: mixer_oss: invalid OSS volume 'u' [ 555.072945][T19079] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 555.672917][T19098] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6779'. [ 555.731749][T19104] loop3: detected capacity change from 0 to 128 [ 556.057545][T19116] loop3: detected capacity change from 0 to 256 [ 556.219378][T19116] FAT-fs (loop3): Directory bread(block 64) failed [ 556.225993][T19116] FAT-fs (loop3): Directory bread(block 65) failed [ 556.268051][T19116] FAT-fs (loop3): Directory bread(block 66) failed [ 556.289842][T19116] FAT-fs (loop3): Directory bread(block 67) failed [ 556.319939][T19116] FAT-fs (loop3): Directory bread(block 68) failed [ 556.359187][T19116] FAT-fs (loop3): Directory bread(block 69) failed [ 556.365887][T19116] FAT-fs (loop3): Directory bread(block 70) failed [ 556.395044][T19116] FAT-fs (loop3): Directory bread(block 71) failed [ 556.424329][T19129] xt_l2tp: wrong L2TP version: 0 [ 556.449440][T19116] FAT-fs (loop3): Directory bread(block 72) failed [ 556.460148][T19116] FAT-fs (loop3): Directory bread(block 73) failed [ 557.236610][ T128] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 557.437115][ T128] usb 3-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 557.466702][ T128] usb 3-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 557.491795][ T128] usb 3-1: Product: syz [ 557.507179][ T128] usb 3-1: Manufacturer: syz [ 557.520188][ T128] usb 3-1: SerialNumber: syz [ 557.563296][ T128] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 557.966244][ T128] vp7045: USB control message 'in' went wrong. [ 557.979137][ T128] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 558.010326][ T128] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 558.063268][ T128] usb 3-1: USB disconnect, device number 31 [ 558.083111][T19169] loop3: detected capacity change from 0 to 4096 [ 558.160074][T19169] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 558.195133][T19169] __quota_error: 70 callbacks suppressed [ 558.195154][T19169] Quota error (device loop3): do_check_range: Getting block 517 out of range 1-5 [ 558.239646][T19169] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 558.254541][T19169] EXT4-fs error (device loop3): ext4_acquire_dquot:6835: comm syz.3.6812: Failed to acquire dquot type 0 [ 558.420851][ T4270] EXT4-fs (loop3): unmounting filesystem. [ 559.283843][T19206] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6829'. [ 559.475510][T19172] loop4: detected capacity change from 0 to 40427 [ 559.539107][T19172] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 559.547053][T19172] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 559.575111][T19215] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 559.612881][T19172] F2FS-fs (loop4): invalid crc value [ 559.671132][T19172] F2FS-fs (loop4): Found nat_bits in checkpoint [ 559.895432][T19172] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 559.933476][T19172] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 560.097235][T19228] loop0: detected capacity change from 0 to 8192 [ 560.226167][T19228] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 560.274560][T19228] FAT-fs (loop0): Filesystem has been set read-only [ 560.309518][T19228] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 560.318649][T19228] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 560.396193][T19228] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 560.456941][T19228] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 560.526915][T19228] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 560.582205][T19228] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 560.668883][ T26] audit: type=1800 audit(1772669352.826:348): pid=19228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6838" name="file2" dev="loop0" ino=1048644 res=0 errno=0 [ 560.993034][T19253] loop3: detected capacity change from 0 to 128 [ 561.059392][T19253] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 561.101506][T19253] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 561.229211][ T128] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 561.431689][ T128] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 561.481549][ T128] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 561.523863][ T128] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.545047][ T128] usb 3-1: Product: syz [ 561.564457][ T128] usb 3-1: Manufacturer: syz [ 561.570625][ T26] audit: type=1326 audit(1772669353.736:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19267 comm="syz.0.6857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b199c799 code=0x7ffc0000 [ 561.579060][ T128] usb 3-1: SerialNumber: syz [ 561.637139][ T128] usb 3-1: config 0 descriptor?? [ 561.669372][ T26] audit: type=1326 audit(1772669353.756:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19267 comm="syz.0.6857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f76b199c799 code=0x7ffc0000 [ 561.769299][ T26] audit: type=1326 audit(1772669353.756:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19267 comm="syz.0.6857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b199c799 code=0x7ffc0000 [ 561.869650][ T26] audit: type=1326 audit(1772669353.756:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19267 comm="syz.0.6857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76b199c799 code=0x7ffc0000 [ 561.895060][ T128] snd-usb-audio: probe of 3-1:0.0 failed with error -2 [ 561.906814][T19277] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 561.996296][ T4257] udevd[4257]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 562.101670][ T128] usb 3-1: USB disconnect, device number 32 [ 563.032881][T19314] xt_TCPMSS: Only works on TCP SYN packets [ 563.064037][ T6634] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 563.091610][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.279130][ T6634] usb 3-1: Using ep0 maxpacket: 32 [ 563.286430][ T6634] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 563.319169][ T6634] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.346267][ T6634] usb 3-1: config 0 descriptor?? [ 563.371070][ T6634] gspca_main: sq930x-2.14.0 probing 041e:403c [ 563.606413][T19332] libceph: secret too big 31 [ 563.609604][T19333] cgroup: name respecified [ 563.767797][ T6634] gspca_sq930x: ucbus_write failed -71 [ 563.774095][ T6634] sq930x: probe of 3-1:0.0 failed with error -71 [ 563.809235][ T6634] usb 3-1: USB disconnect, device number 33 [ 564.338794][T19355] overlayfs: conflicting options: userxattr,metacopy=on [ 564.890324][T19372] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6907'. [ 565.247173][T19385] loop0: detected capacity change from 0 to 256 [ 565.368319][T19385] FAT-fs (loop0): Directory bread(block 64) failed [ 565.419632][T19385] FAT-fs (loop0): Directory bread(block 65) failed [ 565.446511][T19393] loop4: detected capacity change from 0 to 128 [ 565.453110][T19385] FAT-fs (loop0): Directory bread(block 66) failed [ 565.467408][T19385] FAT-fs (loop0): Directory bread(block 67) failed [ 565.496753][T19385] FAT-fs (loop0): Directory bread(block 68) failed [ 565.524347][T19393] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 565.539097][ T6634] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 565.544888][T19385] FAT-fs (loop0): Directory bread(block 69) failed [ 565.591466][T19385] FAT-fs (loop0): Directory bread(block 70) failed [ 565.598067][T19385] FAT-fs (loop0): Directory bread(block 71) failed [ 565.614205][T19393] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 565.669662][T19385] FAT-fs (loop0): Directory bread(block 72) failed [ 565.676560][T19385] FAT-fs (loop0): Directory bread(block 73) failed [ 565.739219][ T6634] usb 2-1: Using ep0 maxpacket: 8 [ 565.781774][ T6634] usb 2-1: unable to get BOS descriptor or descriptor too short [ 565.826106][ T6634] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 565.864331][ T6634] usb 2-1: config 0 has no interface number 0 [ 565.888290][T19399] netlink: 2072 bytes leftover after parsing attributes in process `syz.3.6920'. [ 565.901475][ T6634] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 565.934039][T19399] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6920'. [ 565.963694][ T6634] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 565.977969][T19399] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6920'. [ 566.001734][ T6634] usb 2-1: config 0 interface 88 has no altsetting 0 [ 566.008684][T19399] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6920'. [ 566.064475][ T6634] usb 2-1: string descriptor 0 read error: -22 [ 566.096131][ T6634] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 566.137102][ T6634] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 566.183697][ T6634] usb 2-1: config 0 descriptor?? [ 566.192882][T19406] loop4: detected capacity change from 0 to 1024 [ 566.200325][ T6634] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input27 [ 566.436527][ T6634] usb 2-1: USB disconnect, device number 18 [ 566.459378][ T5463] udevd[5463]: Error opening device "/dev/input/event4": Input/output error [ 566.484251][T19415] netlink: 'syz.2.6928': attribute type 30 has an invalid length. [ 566.499150][ T5463] udevd[5463]: Unable to EVIOCGABS device "/dev/input/event4" [ 566.517099][T19415] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6928'. [ 566.535074][ T5463] udevd[5463]: Unable to EVIOCGABS device "/dev/input/event4" [ 566.549281][T19415] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 566.605080][T19415] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 566.679617][T19421] bond0: (slave rose0): Enslaving as an active interface with an up link [ 566.936525][ T26] audit: type=1326 audit(1772669359.096:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19430 comm="syz.4.6936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f1a19c799 code=0x7ffc0000 [ 567.009980][ T26] audit: type=1326 audit(1772669359.136:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19430 comm="syz.4.6936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f1a19c799 code=0x7ffc0000 [ 567.096887][ T26] audit: type=1326 audit(1772669359.136:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19430 comm="syz.4.6936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f1a19c799 code=0x7ffc0000 [ 567.179045][ T26] audit: type=1326 audit(1772669359.136:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19430 comm="syz.4.6936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f5f1a19c799 code=0x7ffc0000 [ 567.300876][ T26] audit: type=1326 audit(1772669359.196:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19430 comm="syz.4.6936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5f1a15cfce code=0x7ffc0000 [ 567.417674][ T26] audit: type=1326 audit(1772669359.196:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19430 comm="syz.4.6936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5f1a15cfce code=0x7ffc0000 [ 567.475027][T19446] netlink: 'syz.1.6942': attribute type 21 has an invalid length. [ 567.528368][T19446] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6942'. [ 567.529037][ T26] audit: type=1326 audit(1772669359.196:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19430 comm="syz.4.6936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5f1a15cfce code=0x7ffc0000 [ 567.585798][T19446] netlink: 'syz.1.6942': attribute type 4 has an invalid length. [ 567.627132][T19446] netlink: 'syz.1.6942': attribute type 3 has an invalid length. [ 567.661355][ T26] audit: type=1326 audit(1772669359.206:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19430 comm="syz.4.6936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5f1a15cfce code=0x7ffc0000 [ 567.679023][T19446] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6942'. [ 567.763996][ T26] audit: type=1326 audit(1772669359.206:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19430 comm="syz.4.6936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5f1a15cfce code=0x7ffc0000 [ 567.866637][ T26] audit: type=1326 audit(1772669359.206:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19430 comm="syz.4.6936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5f1a15cfce code=0x7ffc0000 [ 567.867989][T19459] netlink: 'syz.0.6949': attribute type 11 has an invalid length. [ 567.933129][T19459] netlink: 140 bytes leftover after parsing attributes in process `syz.0.6949'. [ 568.377611][T19478] 8021q: VLANs not supported on hsr0 [ 568.482455][T19477] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.509792][T19477] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 568.804670][T19490] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 570.036407][T19534] netlink: 'syz.1.6984': attribute type 12 has an invalid length. [ 570.133439][T19536] loop0: detected capacity change from 0 to 1764 [ 570.284745][T19540] loop2: detected capacity change from 0 to 128 [ 570.462309][T19540] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 570.520757][T19540] ext4 filesystem being mounted at /1387/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 570.605331][T19540] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.6988: No space for directory leaf checksum. Please run e2fsck -D. [ 570.700206][T19540] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.6988: checksumming directory block 0 [ 570.707254][T19556] dlm: no locking on control device [ 570.926626][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 571.019123][ T4313] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 571.230866][ T4313] usb 5-1: config 0 has an invalid interface number: 176 but max is 2 [ 571.256944][ T4313] usb 5-1: config 0 has no interface number 1 [ 571.265738][ T4313] usb 5-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 571.310876][ T4313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.367175][ T4313] usb 5-1: config 0 descriptor?? [ 571.562889][T19583] comedi comedi0: Cannot bond this driver to itself! [ 571.592145][ T4313] qcserial 5-1:0.2: Qualcomm USB modem converter detected [ 571.741434][T19589] netlink: 340 bytes leftover after parsing attributes in process `syz.0.7011'. [ 571.756958][T19589] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7011'. [ 571.867448][ T4313] usb 5-1: USB disconnect, device number 24 [ 571.889678][ T4313] qcserial 5-1:0.2: device disconnected [ 572.041809][T19601] (syz.1.7017,19601,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 572.079106][T19601] (syz.1.7017,19601,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 572.929298][ T4313] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 573.129112][ T4313] usb 3-1: Using ep0 maxpacket: 16 [ 573.135833][ T4313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 573.178018][ T4313] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 573.229208][ T4313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.257587][ T4313] usb 3-1: Product: syz [ 573.272320][ T4313] usb 3-1: Manufacturer: syz [ 573.277071][ T4313] usb 3-1: SerialNumber: syz [ 573.321767][ T4313] usb 3-1: config 0 descriptor?? [ 573.350745][ T4313] hub 3-1:0.0: bad descriptor, ignoring hub [ 573.356810][ T4313] hub: probe of 3-1:0.0 failed with error -5 [ 573.404912][ T4313] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input28 [ 573.965762][T19657] vxcan1 speed is unknown, defaulting to 1000 [ 573.996657][T19657] vxcan1 speed is unknown, defaulting to 1000 [ 574.034679][T19657] vxcan1 speed is unknown, defaulting to 1000 [ 574.269363][T19663] netlink: 830 bytes leftover after parsing attributes in process `syz.3.7046'. [ 574.304039][T19665] netlink: 'syz.1.7047': attribute type 15 has an invalid length. [ 574.495966][T19657] infiniband syz2: set active [ 574.501154][ T6634] vxcan1 speed is unknown, defaulting to 1000 [ 574.539119][T19657] infiniband syz2: added vxcan1 [ 574.719746][T19657] RDS/IB: syz2: added [ 574.739212][T19657] smc: adding ib device syz2 with port count 1 [ 574.745443][T19657] smc: ib device syz2 port 1 has pnetid [ 574.775091][ T4313] usb 3-1: USB disconnect, device number 34 [ 574.859156][ T6634] vxcan1 speed is unknown, defaulting to 1000 [ 574.909757][T19657] vxcan1 speed is unknown, defaulting to 1000 [ 575.209059][ T6634] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 575.334037][T19689] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7059'. [ 575.419014][ T6634] usb 2-1: Using ep0 maxpacket: 32 [ 575.430635][ T6634] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.454376][T19657] vxcan1 speed is unknown, defaulting to 1000 [ 575.493784][ T6634] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 575.541157][ T6634] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 575.571446][ T6634] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 575.609097][ T6634] usb 2-1: Product: syz [ 575.613413][ T6634] usb 2-1: Manufacturer: syz [ 575.661063][ T6634] hub 2-1:4.0: USB hub found [ 575.837379][T19696] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7062'. [ 575.871033][ T6634] hub 2-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 575.897183][T19657] vxcan1 speed is unknown, defaulting to 1000 [ 576.085076][T19701] autofs4:pid:19701:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(40960.1), cmd(0xc0189374) [ 576.137667][T19701] autofs4:pid:19701:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 576.235517][ T6634] usb 2-1: USB disconnect, device number 19 [ 576.310421][T19657] vxcan1 speed is unknown, defaulting to 1000 [ 576.324556][T19705] loop4: detected capacity change from 0 to 2048 [ 576.386286][T19705] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 576.410867][T19709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7068'. [ 576.612846][T19657] vxcan1 speed is unknown, defaulting to 1000 [ 576.645702][T19711] xt_TCPMSS: Only works on TCP SYN packets [ 577.996502][T19720] loop4: detected capacity change from 0 to 32768 [ 578.058357][T19720] ea_get: extended attribute size too large: 2617245744 > INT_MAX [ 578.742508][T19733] loop2: detected capacity change from 0 to 32768 [ 578.813193][T19733] jfs_strtoUCS: char2uni returned -22. [ 578.836255][T19733] charset = utf8, char = 0xc5 [ 579.065988][T19766] nvme_fabrics: missing parameter 'transport=%s' [ 579.099241][T19766] nvme_fabrics: missing parameter 'nqn=%s' [ 579.213820][T19749] loop0: detected capacity change from 0 to 32768 [ 579.882049][T19795] netlink: 88 bytes leftover after parsing attributes in process `syz.0.7104'. [ 580.347942][T19810] netlink: 'syz.1.7114': attribute type 4 has an invalid length. [ 580.359050][T19810] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7114'. [ 580.491024][T19812] loop0: detected capacity change from 0 to 764 [ 581.195538][ T26] kauditd_printk_skb: 43 callbacks suppressed [ 581.195554][ T26] audit: type=1326 audit(1772669373.356:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19829 comm="syz.3.7126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13539c799 code=0x7ffc0000 [ 581.319039][ T26] audit: type=1326 audit(1772669373.396:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19829 comm="syz.3.7126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13539c799 code=0x7ffc0000 [ 581.417306][ T26] audit: type=1326 audit(1772669373.406:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19829 comm="syz.3.7126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7fc13539c799 code=0x7ffc0000 [ 581.527015][ T26] audit: type=1326 audit(1772669373.406:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19829 comm="syz.3.7126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13539c799 code=0x7ffc0000 [ 581.640225][ T26] audit: type=1326 audit(1772669373.406:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19829 comm="syz.3.7126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13539c799 code=0x7ffc0000 [ 581.721717][T19849] loop4: detected capacity change from 0 to 256 [ 581.781724][T19844] loop2: detected capacity change from 0 to 128 [ 581.834090][T19849] FAT-fs (loop4): Directory bread(block 64) failed [ 581.854944][T19849] FAT-fs (loop4): Directory bread(block 65) failed [ 581.882206][T19849] FAT-fs (loop4): Directory bread(block 66) failed [ 581.909107][T19849] FAT-fs (loop4): Directory bread(block 67) failed [ 581.915808][T19849] FAT-fs (loop4): Directory bread(block 68) failed [ 581.938557][T19844] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 581.965150][T19849] FAT-fs (loop4): Directory bread(block 69) failed [ 581.974533][T19849] FAT-fs (loop4): Directory bread(block 70) failed [ 581.981287][T19849] FAT-fs (loop4): Directory bread(block 71) failed [ 581.988177][T19849] FAT-fs (loop4): Directory bread(block 72) failed [ 581.995264][T19849] FAT-fs (loop4): Directory bread(block 73) failed [ 582.013470][T19844] ext4 filesystem being mounted at /1410/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 582.032110][T19844] EXT4-fs warning (device loop2): verify_group_input:151: Cannot add at group 5 (only 1 groups) [ 582.061856][ T26] audit: type=1800 audit(1772669374.226:411): pid=19849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7135" name="file2" dev="loop4" ino=1048645 res=0 errno=0 [ 582.156625][T19859] loop3: detected capacity change from 0 to 512 [ 582.270803][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 582.281268][T19859] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 582.339330][T19859] ext4 filesystem being mounted at /1412/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 582.699269][ T128] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 582.733190][T19877] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7146'. [ 582.890936][ T128] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 582.911829][ T128] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 200, setting to 64 [ 582.924471][T19882] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (34) [ 582.991445][ T128] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 583.059053][ T128] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 583.080115][ T128] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 583.143878][ T128] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 583.187696][ T128] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.245897][ T128] usb 4-1: config 0 descriptor?? [ 583.279323][T19859] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 583.556507][ T128] usb 4-1: USB disconnect, device number 33 [ 583.817197][ T26] audit: type=1326 audit(1772669375.976:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19911 comm="syz.4.7164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f1a19c799 code=0x7ffc0000 [ 583.886153][ T26] audit: type=1326 audit(1772669376.006:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19911 comm="syz.4.7164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f1a19c799 code=0x7ffc0000 [ 584.003268][ T26] audit: type=1326 audit(1772669376.006:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19911 comm="syz.4.7164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f1a19c799 code=0x7ffc0000 [ 584.107572][ T26] audit: type=1326 audit(1772669376.016:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19911 comm="syz.4.7164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f5f1a19c799 code=0x7ffc0000 [ 584.167515][ T4270] EXT4-fs (loop3): unmounting filesystem. [ 584.242474][T19926] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 584.315456][T19926] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 584.516292][T19935] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7174'. [ 584.593207][T19935] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7174'. [ 584.675906][T19937] loop3: detected capacity change from 0 to 1024 [ 584.752813][T19937] EXT4-fs error (device loop3): ext4_acquire_dquot:6835: comm syz.3.7176: Failed to acquire dquot type 0 [ 584.790672][T19937] EXT4-fs error (device loop3): mb_free_blocks:1824: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 584.866317][T19937] EXT4-fs (loop3): 1 truncate cleaned up [ 584.872403][T19937] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 584.884030][T19937] EXT4-fs (loop3): unmounting filesystem. [ 585.050701][T19946] Invalid option length (0) for dns_resolver key [ 585.488904][T19965] xt_TCPMSS: Only works on TCP SYN packets [ 585.673485][T19971] binder: 19969:19971 ioctl c00c620f 0 returned -14 [ 586.354050][T19997] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7203'. [ 586.399219][T19997] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7203'. [ 586.619571][T20001] netlink: 'syz.4.7206': attribute type 49 has an invalid length. [ 586.801907][T20008] loop3: detected capacity change from 0 to 4096 [ 586.890272][T20012] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 586.906068][T20008] syz.3.7209: attempt to access beyond end of device [ 586.906068][T20008] loop3: rw=0, sector=26388279066816, nr_sectors = 8 limit=4096 [ 587.006573][T20008] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=1) [ 587.267996][T20018] loop2: detected capacity change from 0 to 4096 [ 587.319285][T20018] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 587.770253][T20033] netlink: 'syz.4.7221': attribute type 3 has an invalid length. [ 587.885592][T20041] loop3: detected capacity change from 0 to 256 [ 588.020564][T20041] FAT-fs (loop3): Directory bread(block 64) failed [ 588.057524][T20041] FAT-fs (loop3): Directory bread(block 65) failed [ 588.095099][T20041] FAT-fs (loop3): Directory bread(block 66) failed [ 588.129335][T20041] FAT-fs (loop3): Directory bread(block 67) failed [ 588.136143][T20041] FAT-fs (loop3): Directory bread(block 68) failed [ 588.169097][T20041] FAT-fs (loop3): Directory bread(block 69) failed [ 588.205390][T20041] FAT-fs (loop3): Directory bread(block 70) failed [ 588.229217][T20041] FAT-fs (loop3): Directory bread(block 71) failed [ 588.235920][T20041] FAT-fs (loop3): Directory bread(block 72) failed [ 588.289400][T20041] FAT-fs (loop3): Directory bread(block 73) failed [ 589.202990][T20084] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7246'. [ 589.347588][T20082] loop3: detected capacity change from 0 to 4096 [ 589.435129][T20082] ntfs3: loop3: ino=5, "/" directory corrupted [ 589.831956][T20104] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7255'. [ 590.399030][ T128] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 590.597144][ T128] usb 2-1: config index 0 descriptor too short (expected 897, got 27) [ 590.609431][ T128] usb 2-1: config 2 has an invalid interface number: 1 but max is -1 [ 590.638809][ T128] usb 2-1: config 2 has an invalid interface number: 1 but max is -1 [ 590.659068][ T128] usb 2-1: config 2 has 1 interface, different from the descriptor's value: 0 [ 590.680481][ T128] usb 2-1: config 2 has no interface number 0 [ 590.711483][ T128] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=20.da [ 590.729021][T20135] loop2: detected capacity change from 0 to 128 [ 590.749970][ T128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.790194][ T128] usb 2-1: Product: syz [ 590.794421][ T128] usb 2-1: Manufacturer: syz [ 590.810469][ T128] usb 2-1: SerialNumber: syz [ 590.833672][T20139] xt_limit: Overflow, try lower: 65536/2147483648 [ 591.024175][T20143] netlink: 'syz.0.7275': attribute type 1 has an invalid length. [ 591.045254][T20143] netlink: 192 bytes leftover after parsing attributes in process `syz.0.7275'. [ 591.056824][ T128] cdc_ncm 2-1:2.1: CDC Union missing and no IAD found [ 591.074152][ T128] cdc_ncm 2-1:2.1: bind() failure [ 591.082024][T20146] cgroup: none used incorrectly [ 591.088848][ T128] usb 2-1: no audio or video endpoints found [ 591.128247][ T128] usb 2-1: USB disconnect, device number 20 [ 591.292786][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 591.292804][ T26] audit: type=1326 audit(1772669383.456:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20150 comm="syz.2.7280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439239c799 code=0x7ffc0000 [ 591.381746][ T26] audit: type=1326 audit(1772669383.456:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20150 comm="syz.2.7280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7f439239c799 code=0x7ffc0000 [ 591.412299][ T26] audit: type=1326 audit(1772669383.456:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20150 comm="syz.2.7280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439239c799 code=0x7ffc0000 [ 591.509572][ T26] audit: type=1326 audit(1772669383.456:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20150 comm="syz.2.7280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439239c799 code=0x7ffc0000 [ 591.550631][T20162] netlink: 'syz.3.7284': attribute type 1 has an invalid length. [ 593.133455][T20211] netlink: 88 bytes leftover after parsing attributes in process `syz.2.7308'. [ 593.159054][ T4313] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 593.216823][T20213] loop3: detected capacity change from 0 to 2048 [ 593.289622][T20213] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 593.314488][T20215] loop4: detected capacity change from 0 to 256 [ 593.359189][ T4313] usb 2-1: Using ep0 maxpacket: 16 [ 593.373771][ T4313] usb 2-1: config 0 has no interfaces? [ 593.423161][ T4313] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 593.432649][T20221] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 593.479096][ T4313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.487200][ T4313] usb 2-1: Product: syz [ 593.536838][ T4313] usb 2-1: Manufacturer: syz [ 593.539180][T20223] binder: 20222:20223 ioctl c018620c 200000000040 returned -1 [ 593.559303][ T4313] usb 2-1: SerialNumber: syz [ 593.572921][ T4313] r8152-cfgselector 2-1: config 0 descriptor?? [ 593.808563][ T4313] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 594.014690][ T4313] usb 2-1: USB disconnect, device number 21 [ 594.179403][T20240] netlink: 'syz.0.7321': attribute type 4 has an invalid length. [ 594.202098][T20240] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.7321'. [ 594.449463][ T128] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 594.639183][ T128] usb 5-1: Using ep0 maxpacket: 16 [ 594.647277][ T128] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 594.701541][ T128] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 594.713602][T20260] netlink: 'syz.2.7330': attribute type 1 has an invalid length. [ 594.733774][ T128] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 594.753436][ T128] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.765298][ T128] usb 5-1: Product: syz [ 594.774033][T20260] netlink: 'syz.2.7330': attribute type 1 has an invalid length. [ 594.775329][ T128] usb 5-1: Manufacturer: syz [ 594.815792][ T128] usb 5-1: SerialNumber: syz [ 594.850768][T20260] netlink: 180 bytes leftover after parsing attributes in process `syz.2.7330'. [ 594.878671][T20260] NCSI netlink: No device for ifindex 2151022881 [ 594.886018][T20266] cgroup: Invalid name [ 595.055966][ T128] usb 5-1: 0:2 : does not exist [ 595.061635][ T128] usb 5-1: unit 3 not found! [ 595.129523][ T128] usb 5-1: USB disconnect, device number 25 [ 595.165352][T20271] loop3: detected capacity change from 0 to 2048 [ 595.263462][T20275] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 595.337460][T20277] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 595.847633][T20293] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 595.994977][ T26] audit: type=1326 audit(1772669388.156:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20295 comm="syz.2.7348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439239c799 code=0x7ffc0000 [ 596.073237][ T26] audit: type=1326 audit(1772669388.186:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20295 comm="syz.2.7348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f439239c799 code=0x7ffc0000 [ 596.130481][ T26] audit: type=1326 audit(1772669388.186:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20295 comm="syz.2.7348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439239c799 code=0x7ffc0000 [ 596.236494][ T26] audit: type=1326 audit(1772669388.186:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20295 comm="syz.2.7348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439239c799 code=0x7ffc0000 [ 596.549378][ T128] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 596.761276][ T128] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 596.799899][ T128] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 596.841916][ T128] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 596.842787][T20325] device vlan0 entered promiscuous mode [ 596.856680][ T128] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.875686][ T128] usb 4-1: Product: syz [ 596.882192][ T128] usb 4-1: Manufacturer: syz [ 596.891522][T20327] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 596.902504][ T128] usb 4-1: SerialNumber: syz [ 596.918404][ T128] usb 4-1: config 0 descriptor?? [ 596.924546][T20306] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 596.933036][T20306] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 597.219825][T20306] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 597.227173][T20306] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 597.473586][ T128] Error reading MAC address [ 597.509980][ T128] usb 4-1: USB disconnect, device number 34 [ 598.039336][T20362] loop0: detected capacity change from 0 to 256 [ 598.131606][ T4313] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 598.339290][ T4313] usb 5-1: Using ep0 maxpacket: 16 [ 598.356210][ T4313] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 598.383665][ T4313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.417295][ T4313] usb 5-1: Product: syz [ 598.432701][ T4313] usb 5-1: Manufacturer: syz [ 598.437466][ T4313] usb 5-1: SerialNumber: syz [ 598.458626][T20375] bad cache= option: nonw [ 598.458626][T20375] [ 598.484490][ T4313] usb 5-1: config 0 descriptor?? [ 598.502898][T20375] CIFS: VFS: bad cache= option: nonw [ 598.728530][ T4313] speedtch 5-1:0.0: speedtch_bind: data interface not found! [ 598.759375][ T4313] speedtch 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 598.945218][ T4313] usb 5-1: USB disconnect, device number 26 [ 599.072297][T20393] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7395'. [ 599.183162][T20399] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7398'. [ 599.208089][T20399] netlink: 'syz.0.7398': attribute type 8 has an invalid length. [ 599.364436][T20403] netlink: 830 bytes leftover after parsing attributes in process `syz.3.7400'. [ 599.533365][T20410] siw: device registration error -23 [ 599.694518][T20415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7406'. [ 600.249672][T20437] loop4: detected capacity change from 0 to 1024 [ 600.330105][T20437] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 600.507160][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 600.946800][T20465] netlink: 'syz.0.7426': attribute type 21 has an invalid length. [ 600.999505][T20465] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7426'. [ 601.039328][T20465] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7426'. [ 601.229666][T20474] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7433'. [ 602.192472][T20507] loop4: detected capacity change from 0 to 128 [ 602.285473][T20507] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 602.405720][T20515] ipt_CLUSTERIP: Please specify destination IP [ 602.659394][T20524] autofs4:pid:20524:validate_dev_ioctl: path string terminator missing for cmd(0xc018937e) [ 602.811261][T20529] netlink: 88 bytes leftover after parsing attributes in process `syz.1.7460'. [ 603.479059][ T4313] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 603.669597][ T4313] usb 2-1: Using ep0 maxpacket: 32 [ 603.676873][ T4313] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 603.708160][T20562] xt_TCPMSS: Only works on TCP SYN packets [ 603.712845][ T4313] usb 2-1: config 0 has no interface number 0 [ 603.736797][ T4313] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 603.775983][ T4313] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 603.801564][ T4313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.811974][ T4313] usb 2-1: Product: syz [ 603.816349][ T4313] usb 2-1: Manufacturer: syz [ 603.832775][ T4313] usb 2-1: SerialNumber: syz [ 603.862929][ T4313] usb 2-1: config 0 descriptor?? [ 603.872030][T20544] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 604.044113][T20572] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 604.108673][T20544] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 604.218540][T20579] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 604.333618][ T4313] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 604.356656][ T4313] asix: probe of 2-1:0.188 failed with error -71 [ 604.377273][ T4313] usb 2-1: USB disconnect, device number 22 [ 605.188176][T20613] loop4: detected capacity change from 0 to 128 [ 605.312221][T20620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7504'. [ 605.727686][T20632] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7510'. [ 605.946039][ T26] audit: type=1326 audit(1772669398.106:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20635 comm="syz.1.7512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4a19c799 code=0x7ffc0000 [ 606.049588][ T26] audit: type=1326 audit(1772669398.146:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20635 comm="syz.1.7512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7fdf4a19c799 code=0x7ffc0000 [ 606.146030][ T26] audit: type=1326 audit(1772669398.146:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20635 comm="syz.1.7512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4a19c799 code=0x7ffc0000 [ 606.174259][T20640] 9pnet_fd: p9_fd_create_tcp (20640): problem connecting socket to 127.0.0.1 [ 606.245119][ T26] audit: type=1326 audit(1772669398.146:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20635 comm="syz.1.7512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4a19c799 code=0x7ffc0000 [ 606.356975][T20645] device bridge_slave_1 left promiscuous mode [ 606.397716][T20645] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.400624][T20616] loop2: detected capacity change from 0 to 32768 [ 606.448525][T20645] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 606.484064][T20616] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 606.541807][T20616] JBD2: Ignoring recovery information on journal [ 606.616775][T20652] netlink: 'syz.4.7519': attribute type 2 has an invalid length. [ 606.629986][T20616] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 606.712511][T20616] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has an invalid fs_generation of #1 [ 606.787309][T20616] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 606.819055][T20616] OCFS2: File system is now read-only. [ 606.848644][T20616] (syz.2.7503,20616,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 606.899036][T20616] (syz.2.7503,20616,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 606.907119][T20616] (syz.2.7503,20616,0):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 606.959062][T20616] (syz.2.7503,20616,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 606.998331][T20616] (syz.2.7503,20616,0):__ocfs2_claim_clusters:2365 ERROR: status = -30 [ 607.004593][T20626] loop3: detected capacity change from 0 to 40427 [ 607.035843][T20616] (syz.2.7503,20616,0):__ocfs2_claim_clusters:2373 ERROR: status = -30 [ 607.045844][T20626] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 607.078677][T20665] sctp: [Deprecated]: syz.4.7525 (pid 20665) Use of struct sctp_assoc_value in delayed_ack socket option. [ 607.078677][T20665] Use struct sctp_sack_info instead [ 607.083117][T20663] loop0: detected capacity change from 0 to 512 [ 607.101979][T20616] (syz.2.7503,20616,0):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 607.112174][T20616] (syz.2.7503,20616,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 607.112312][T20626] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 607.127493][T20616] (syz.2.7503,20616,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 607.145374][T20616] (syz.2.7503,20616,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 607.158863][T20616] (syz.2.7503,20616,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 607.178407][T20616] (syz.2.7503,20616,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 607.192227][T20626] F2FS-fs (loop3): build fault injection attr: rate: 2, type: 0x3ffff [ 607.198121][T20616] (syz.2.7503,20616,0):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 607.219224][T20616] (syz.2.7503,20616,1):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 607.228627][T20616] (syz.2.7503,20616,1):ocfs2_mknod:357 ERROR: status = -30 [ 607.229001][T20626] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x1f8 [ 607.236325][T20616] (syz.2.7503,20616,1):ocfs2_mknod:502 ERROR: status = -30 [ 607.251852][T20616] (syz.2.7503,20616,1):ocfs2_mkdir:659 ERROR: status = -30 [ 607.275259][T20663] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 607.342026][T20670] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7526'. [ 607.344891][T20663] ext4 filesystem being mounted at /1397/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 607.361790][T20670] netlink: 658 bytes leftover after parsing attributes in process `syz.1.7526'. [ 607.382671][T20626] F2FS-fs (loop3): invalid crc value [ 607.449077][T20626] F2FS-fs (loop3): Found nat_bits in checkpoint [ 607.510477][ T4278] ocfs2: Unmounting device (7,2) on (node local) [ 607.656980][T20626] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 607.681127][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 607.689073][T20626] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 607.917399][T20626] F2FS-fs (loop3) : inject too big dir depth in f2fs_add_regular_entry of f2fs_add_dentry+0xd6/0x1c0 [ 608.081975][T20683] loop0: detected capacity change from 0 to 2048 [ 608.140528][T20683] NILFS (loop0): invalid segment: Inconsistency found [ 608.179194][T20683] NILFS (loop0): trying rollback from an earlier position [ 608.258650][T20683] NILFS (loop0): norecovery option specified, skipping roll-forward recovery [ 608.415686][T20683] NILFS (loop0): couldn't remount because the filesystem is in an incomplete recovery state [ 608.869230][T20710] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7542'. [ 609.058311][T20717] netlink: 'syz.3.7545': attribute type 21 has an invalid length. [ 609.109216][T20717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7545'. [ 609.149042][ T6634] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 609.339021][ T6634] usb 5-1: Using ep0 maxpacket: 32 [ 609.346143][ T6634] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 609.399303][ T6634] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 609.419204][ T6634] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 609.482288][ T6634] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 609.543639][ T6634] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 609.569463][ T6634] usb 5-1: Product: syz [ 609.573786][ T6634] usb 5-1: Manufacturer: syz [ 609.578516][ T6634] usb 5-1: SerialNumber: syz [ 609.617087][ T6634] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input33 [ 609.882366][ T5285] usb 5-1: USB disconnect, device number 27 [ 609.929605][ T5285] appletouch 5-1:1.0: input: appletouch disconnected [ 610.025956][T20745] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7559'. [ 610.511570][T20762] xt_hashlimit: overflow, try lower: 5/0 [ 611.059559][T20782] loop3: detected capacity change from 0 to 64 [ 611.729574][T20775] loop2: detected capacity change from 0 to 32768 [ 611.798100][T20775] jfs_strtoUCS: char2uni returned -22. [ 611.807313][T20775] charset = cp949, char = 0xd4 [ 611.843932][ T5285] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 612.041175][ T5285] usb 4-1: Using ep0 maxpacket: 8 [ 612.048545][ T5285] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 612.079059][ T5285] usb 4-1: config 0 has no interface number 0 [ 612.096653][ T5285] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 612.143475][ T5285] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.159779][ T5285] usb 4-1: Product: syz [ 612.174346][ T5285] usb 4-1: Manufacturer: syz [ 612.183864][ T5285] usb 4-1: SerialNumber: syz [ 612.216561][ T5285] usb 4-1: config 0 descriptor?? [ 612.435003][ T5285] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 612.449445][ T5285] usb 4-1: No valid video chain found. [ 612.499178][ T5285] usb 4-1: USB disconnect, device number 35 [ 613.337105][ T26] audit: type=1326 audit(1772669405.496:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20846 comm="syz.2.7608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439239c799 code=0x7ffc0000 [ 613.388623][T20850] netlink: 92 bytes leftover after parsing attributes in process `syz.1.7609'. [ 613.449033][ T26] audit: type=1326 audit(1772669405.496:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20846 comm="syz.2.7608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439239c799 code=0x7ffc0000 [ 613.479383][T20850] netlink: 'syz.1.7609': attribute type 1 has an invalid length. [ 613.610131][ T26] audit: type=1326 audit(1772669405.546:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20846 comm="syz.2.7608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439239c799 code=0x7ffc0000 [ 613.695547][ T26] audit: type=1326 audit(1772669405.546:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20846 comm="syz.2.7608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439239c799 code=0x7ffc0000 [ 613.822476][ T26] audit: type=1326 audit(1772669405.546:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20846 comm="syz.2.7608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f439239c799 code=0x7ffc0000 [ 613.911276][T20866] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 613.918242][T20868] loop3: detected capacity change from 0 to 16 [ 613.942227][ T26] audit: type=1326 audit(1772669405.546:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20846 comm="syz.2.7608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439239c799 code=0x7ffc0000 [ 613.982997][T20868] erofs: (device loop3): mounted with root inode @ nid 36. [ 614.011806][T20868] erofs: (device loop3): erofs_find_target_block: corrupted dir block 0 @ nid 36 [ 614.036124][ T26] audit: type=1326 audit(1772669405.546:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20846 comm="syz.2.7608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439239c799 code=0x7ffc0000 [ 614.105683][ T26] audit: type=1326 audit(1772669405.566:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20846 comm="syz.2.7608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f439239c799 code=0x7ffc0000 [ 614.264970][ T26] audit: type=1326 audit(1772669405.566:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20846 comm="syz.2.7608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f439239c799 code=0x7ffc0000 [ 614.842335][T20896] loop3: detected capacity change from 0 to 4096 [ 614.873831][T20896] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 614.990044][T20896] ntfs: volume version 3.1. [ 615.231034][T20911] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.7638'. [ 615.286640][T20911] netlink: zone id is out of range [ 615.324064][T20911] netlink: del zone limit has 4 unknown bytes [ 615.519370][T20921] netlink: 'syz.0.7643': attribute type 1 has an invalid length. [ 615.877323][T20935] netlink: 196 bytes leftover after parsing attributes in process `syz.1.7650'. [ 615.920584][T20935] netlink: 196 bytes leftover after parsing attributes in process `syz.1.7650'. [ 615.940550][T20935] netlink: 19 bytes leftover after parsing attributes in process `syz.1.7650'. [ 615.962184][T20939] netlink: 'syz.4.7651': attribute type 21 has an invalid length. [ 615.979270][T20939] IPv6: NLM_F_CREATE should be specified when creating new route [ 617.030617][T20942] loop0: detected capacity change from 0 to 32768 [ 617.121452][T20942] ERROR: (device loop0): dbAllocNext: Corrupt dmap page [ 617.121452][T20942] [ 617.169331][T20942] ERROR: (device loop0): remounting filesystem as read-only [ 617.178618][T20942] ialloc: diAlloc returned -5! [ 617.827639][T20986] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.7675' sets config #0 [ 617.919502][T20993] cgroup: subsys name conflicts with all [ 618.168857][T21002] loop2: detected capacity change from 0 to 256 [ 618.588091][T21005] loop0: detected capacity change from 0 to 4096 [ 618.999024][ T5285] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 619.201243][ T5285] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 619.219427][ T5285] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 619.263736][ T5285] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 619.300954][ T5285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 619.357091][ T5285] usb 2-1: SerialNumber: syz [ 619.390023][ T5285] usb 2-1: 0:2 : does not exist [ 619.637211][ T6634] usb 2-1: USB disconnect, device number 23 [ 620.070671][T21058] netlink: 'syz.0.7707': attribute type 8 has an invalid length. [ 620.650420][T21076] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7717'. [ 620.741638][T21078] binder: binder_mmap: 21077 200000ffb000-200000ffd000 bad vm_flags failed -1 [ 620.935752][T21082] loop2: detected capacity change from 0 to 1024 [ 621.105715][T21082] hfsplus: invalid length 32517 has been corrected to 255 [ 621.314638][T21056] loop3: detected capacity change from 0 to 32768 [ 621.403782][T21088] loop4: detected capacity change from 0 to 2048 [ 621.417456][ T2954] hfsplus: b-tree write err: -5, ino 20 [ 621.576111][T21056] XFS (loop3): Mounting V5 Filesystem [ 621.594778][T21088] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 621.653116][T21073] loop0: detected capacity change from 0 to 32768 [ 621.758861][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 621.814724][T21073] XFS (loop0): Mounting V5 Filesystem [ 621.878781][T21056] XFS (loop3): Ending clean mount [ 622.013608][T21073] XFS (loop0): Ending clean mount [ 622.049183][ T6634] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 622.079220][T21073] XFS (loop0): Quotacheck needed: Please wait. [ 622.089127][ T4270] XFS (loop3): Unmounting Filesystem [ 622.241397][T21073] XFS (loop0): Quotacheck: Done. [ 622.248123][ T6634] usb 3-1: unable to get BOS descriptor or descriptor too short [ 622.293018][ T6634] usb 3-1: not running at top speed; connect to a high speed hub [ 622.317371][T21122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7731'. [ 622.327675][ T6634] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 622.374507][ T6634] usb 3-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 622.439780][ T4274] XFS (loop0): Unmounting Filesystem [ 622.450996][ T6634] usb 3-1: New USB device found, idVendor=798d, idProduct=9787, bcdDevice=fc.51 [ 622.466163][ T6634] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.499136][ T6634] usb 3-1: Product: syz [ 622.503369][ T6634] usb 3-1: Manufacturer: syz [ 622.508008][ T6634] usb 3-1: SerialNumber: syz [ 622.752161][ T6634] usb 3-1: USB disconnect, device number 35 [ 622.938236][T21132] netlink: 'syz.4.7736': attribute type 2 has an invalid length. [ 622.966524][T21132] netlink: 'syz.4.7736': attribute type 1 has an invalid length. [ 622.992240][T21132] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.7736'. [ 623.707937][T21156] loop3: detected capacity change from 0 to 736 [ 623.851051][T21156] tmpfs: Unknown parameter 'ö$TñaFm´éIÊ(9»ôטÁÞzñ6m›+N`1x¦†*‹40œ« Ó?·W‘ Ì„ ' [ 624.013128][T21162] loop2: detected capacity change from 0 to 16 [ 624.083029][T21162] erofs: (device loop2): mounted with root inode @ nid 36. [ 624.130647][T21162] erofs: (device loop2): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 624.151170][ T26] kauditd_printk_skb: 21 callbacks suppressed [ 624.151187][ T26] audit: type=1326 audit(1772669416.316:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21165 comm="syz.3.7751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13539c799 code=0x7ffc0000 [ 624.259937][T21162] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 624.279000][ T26] audit: type=1326 audit(1772669416.366:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21165 comm="syz.3.7751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7fc13539c799 code=0x7ffc0000 [ 624.302435][T21162] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 624.388995][ T26] audit: type=1326 audit(1772669416.366:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21165 comm="syz.3.7751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13539c799 code=0x7ffc0000 [ 624.506825][ T26] audit: type=1326 audit(1772669416.366:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21165 comm="syz.3.7751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13539c799 code=0x7ffc0000 [ 624.531870][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.064243][T21192] netlink: 'syz.1.7762': attribute type 10 has an invalid length. [ 625.079160][T21192] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7762'. [ 625.120675][T21192] bridge0: port 4(dummy0) entered blocking state [ 625.127286][T21192] bridge0: port 4(dummy0) entered disabled state [ 625.150577][T21192] device dummy0 entered promiscuous mode [ 625.283298][T21200] loop4: detected capacity change from 0 to 2048 [ 625.357999][T21200] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 625.557678][T21210] openvswitch: netlink: Missing key (keys=40, expected=80) [ 626.523767][T21239] erofs: (device loop5): erofs_read_superblock: cannot find valid erofs superblock [ 626.994234][T21259] loop0: detected capacity change from 0 to 256 [ 627.018329][T21259] exfat: Deprecated parameter 'utf8' [ 627.082927][T21259] exfat: Deprecated parameter 'namecase' [ 627.112095][T21259] exfat: Deprecated parameter 'namecase' [ 627.137081][T21259] exfat: Deprecated parameter 'utf8' [ 627.194601][T21259] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 628.311630][ T26] audit: type=1326 audit(1772669420.476:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21295 comm="syz.3.7812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13539c799 code=0x7ffc0000 [ 628.375078][ T26] audit: type=1326 audit(1772669420.496:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21295 comm="syz.3.7812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13539c799 code=0x7ffc0000 [ 628.479118][ T26] audit: type=1326 audit(1772669420.496:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21295 comm="syz.3.7812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fc13539c799 code=0x7ffc0000 [ 628.488304][T21290] loop0: detected capacity change from 0 to 4096 [ 628.584593][ T26] audit: type=1326 audit(1772669420.496:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21295 comm="syz.3.7812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc13539c502 code=0x7ffc0000 [ 628.639580][T21290] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 628.669376][ T26] audit: type=1326 audit(1772669420.506:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21295 comm="syz.3.7812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc13539c502 code=0x7ffc0000 [ 628.714437][T21303] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7815'. [ 628.799729][T21290] ntfs: volume version 3.1. [ 628.967522][T21310] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 629.077938][T21314] netlink: 'syz.4.7819': attribute type 11 has an invalid length. [ 629.121580][T21314] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7819'. [ 629.409582][ T26] kauditd_printk_skb: 23 callbacks suppressed [ 629.409600][ T26] audit: type=1326 audit(1772669421.576:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21323 comm="syz.4.7825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f1a19c799 code=0x7ffc0000 [ 629.526172][ T26] audit: type=1326 audit(1772669421.626:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21323 comm="syz.4.7825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f5f1a19c799 code=0x7ffc0000 [ 629.586229][ T26] audit: type=1326 audit(1772669421.626:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21323 comm="syz.4.7825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f1a19c799 code=0x7ffc0000 [ 629.709071][ T26] audit: type=1326 audit(1772669421.626:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21323 comm="syz.4.7825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f1a19c799 code=0x7ffc0000 [ 629.800951][T21334] futex_wake_op: syz.1.7830 tries to shift op by 32; fix this program [ 630.065761][T21307] loop2: detected capacity change from 0 to 32768 [ 630.162765][T21307] JBD2: Ignoring recovery information on journal [ 630.334254][T21307] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 630.615783][ T4278] ocfs2: Unmounting device (7,2) on (node local) [ 630.969126][ T14] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 631.109010][ T5285] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 631.167386][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 631.209011][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 4 [ 631.247533][ T14] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 631.285049][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.300695][ T14] usb 2-1: Product: syz [ 631.304932][ T14] usb 2-1: Manufacturer: syz [ 631.319671][ T14] usb 2-1: SerialNumber: syz [ 631.321481][ T5285] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 631.347835][ T14] usb 2-1: config 0 descriptor?? [ 631.361892][ T5285] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 631.372413][ T5285] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.377542][ T14] usb 2-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress 07 [ 631.390910][ T5285] usb 5-1: config 0 descriptor?? [ 631.618030][T21386] netlink: 148 bytes leftover after parsing attributes in process `syz.2.7853'. [ 631.659101][T21369] loop3: detected capacity change from 0 to 32768 [ 631.659917][ T14] usb 2-1: USB disconnect, device number 24 [ 631.768179][T21369] XFS (loop3): Mounting V5 Filesystem [ 631.802710][ T5285] ath6kl: Failed to read usb control message: -71 [ 631.818862][ T5285] ath6kl: Unable to read the bmi data from the device: -71 [ 631.881992][ T5285] ath6kl: Unable to recv target info: -71 [ 631.913702][T21386] netlink: 148 bytes leftover after parsing attributes in process `syz.2.7853'. [ 631.923139][ T5285] ath6kl: Failed to init ath6kl core: -71 [ 631.964073][T21369] XFS (loop3): Ending clean mount [ 631.999368][ T5285] ath6kl_usb: probe of 5-1:0.0 failed with error -71 [ 632.029269][ T5285] usb 5-1: USB disconnect, device number 28 [ 632.181594][ T4270] XFS (loop3): Unmounting Filesystem [ 632.527048][T21407] loop0: detected capacity change from 0 to 8 [ 632.809461][ T4313] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 633.000895][ T4313] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 633.030813][ T4313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.071191][ T4313] usb 5-1: config 0 descriptor?? [ 633.088627][ T4313] cp210x 5-1:0.0: cp210x converter detected [ 633.237944][T21431] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 633.519273][ T4313] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 633.529354][ T4313] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 633.537175][ T4313] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 633.588222][ T4313] usb 5-1: cp210x converter now attached to ttyUSB0 [ 633.616078][ T4313] usb 5-1: USB disconnect, device number 29 [ 633.657584][ T4313] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 633.694919][ T4313] cp210x 5-1:0.0: device disconnected [ 634.279318][T21435] loop2: detected capacity change from 0 to 32768 [ 634.365936][T21435] XFS (loop2): Mounting V5 Filesystem [ 634.499306][T21435] XFS (loop2): Ending clean mount [ 634.520962][T21435] XFS (loop2): Quotacheck needed: Please wait. [ 634.603306][T21435] XFS (loop2): Quotacheck: Done. [ 634.903343][ T4278] XFS (loop2): Unmounting Filesystem [ 635.254121][T21477] netlink: 'syz.4.7890': attribute type 3 has an invalid length. [ 635.289838][T21477] netlink: 'syz.4.7890': attribute type 3 has an invalid length. [ 635.314917][T21477] netlink: 'syz.4.7890': attribute type 3 has an invalid length. [ 635.339445][T21477] netlink: 'syz.4.7890': attribute type 3 has an invalid length. [ 635.368001][T21477] netlink: 'syz.4.7890': attribute type 3 has an invalid length. [ 635.393547][T21477] netlink: 'syz.4.7890': attribute type 3 has an invalid length. [ 635.458634][T21477] netlink: 'syz.4.7890': attribute type 3 has an invalid length. [ 635.469263][T21477] netlink: 'syz.4.7890': attribute type 3 has an invalid length. [ 635.499096][T21477] netlink: 'syz.4.7890': attribute type 3 has an invalid length. [ 635.506977][T21477] netlink: 'syz.4.7890': attribute type 3 has an invalid length. [ 636.179314][ T4313] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 636.320581][T21501] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.7901'. [ 636.370071][ T4313] usb 2-1: Using ep0 maxpacket: 32 [ 636.377293][ T4313] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 636.427634][ T4313] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 256 [ 636.458199][ T4313] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 636.526354][ T4313] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 636.543197][ T4313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 636.554565][ T4313] usb 2-1: SerialNumber: syz [ 636.594288][T21492] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 636.620703][ T4313] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 636.838996][ T4313] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 636.860193][ T4313] usb 2-1: USB disconnect, device number 25 [ 636.959240][ T4316] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 637.077856][T21522] loop0: detected capacity change from 0 to 512 [ 637.146479][T21522] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 637.159421][ T4316] usb 3-1: Using ep0 maxpacket: 32 [ 637.169182][ T4316] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 637.178484][T21522] ext4 filesystem being mounted at /1459/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 637.200801][ T4316] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 637.232267][ T4316] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 637.236868][T21522] EXT4-fs error (device loop0): ext4_get_first_dir_block:3583: inode #12: comm syz.0.7911: Attempting to read directory block (0) that is past i_size (3) [ 637.262624][ T4316] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 637.297218][ T4316] usb 3-1: Product: syz [ 637.298579][T21525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 637.303671][ T4316] usb 3-1: Manufacturer: syz [ 637.316131][T21522] EXT4-fs (loop0): Remounting filesystem read-only [ 637.331079][T21525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 637.340969][T21525] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 637.350217][ T4316] hub 3-1:4.0: USB hub found [ 637.390990][T21525] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 637.423157][T21525] device team0 left promiscuous mode [ 637.429109][T21525] device team_slave_0 left promiscuous mode [ 637.436573][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 637.455594][T21525] device team_slave_1 left promiscuous mode [ 637.497155][T21525] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 637.559736][T21525] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 637.572929][ T4316] hub 3-1:4.0: 2 ports detected [ 637.606013][T21525] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 637.792008][ T4316] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 637.798477][ T4316] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 637.900079][ T4316] usb 3-1: USB disconnect, device number 36 [ 638.923716][T21569] netlink: 244 bytes leftover after parsing attributes in process `syz.1.7932'. [ 639.209964][T21579] loop4: detected capacity change from 0 to 512 [ 639.269397][T21579] EXT4-fs: test_dummy_encryption requires encrypt feature [ 639.457316][ T26] audit: type=1326 audit(1772669431.616:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21586 comm="syz.1.7941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4a19c799 code=0x7ffc0000 [ 639.547293][ T26] audit: type=1326 audit(1772669431.616:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21586 comm="syz.1.7941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4a19c799 code=0x7ffc0000 [ 639.621663][T21590] loop0: detected capacity change from 0 to 128 [ 639.665163][ T26] audit: type=1326 audit(1772669431.676:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21586 comm="syz.1.7941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7fdf4a19c799 code=0x7ffc0000 [ 639.673474][T21590] hpfs: filesystem error: invalid number of hotfixes: 256, used: 2066844985; already mounted read-only [ 639.799086][T21590] hpfs: filesystem error: improperly stopped [ 639.805254][T21590] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 639.819057][ T26] audit: type=1326 audit(1772669431.676:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21586 comm="syz.1.7941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4a19c799 code=0x7ffc0000 [ 639.904706][T21590] hpfs: You really don't want any checks? You are crazy... [ 639.956813][T21590] hpfs: hpfs_map_sector(): read error [ 639.969036][ T26] audit: type=1326 audit(1772669431.676:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21586 comm="syz.1.7941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4a19c799 code=0x7ffc0000 [ 640.018811][T21601] loop3: detected capacity change from 0 to 2048 [ 640.029116][T21590] hpfs: code page support is disabled [ 640.066112][T21590] ================================================================== [ 640.074432][T21590] BUG: KASAN: use-after-free in strcmp+0x67/0xb0 [ 640.080803][T21590] Read of size 1 at addr ffff888049a99fa6 by task syz.0.7943/21590 [ 640.088721][T21590] [ 640.091059][T21590] CPU: 0 PID: 21590 Comm: syz.0.7943 Not tainted syzkaller #0 [ 640.098532][T21590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 640.108725][T21590] Call Trace: [ 640.112106][T21590] [ 640.115044][T21590] dump_stack_lvl+0x188/0x24e [ 640.119747][T21590] ? read_lock_is_recursive+0x10/0x10 [ 640.125138][T21590] ? show_regs_print_info+0x12/0x12 [ 640.130354][T21590] ? load_image+0x400/0x400 [ 640.134867][T21590] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 640.140338][T21590] ? __virt_addr_valid+0x188/0x540 [ 640.145491][T21590] ? __virt_addr_valid+0x465/0x540 [ 640.150613][T21590] ? strcmp+0x67/0xb0 [ 640.154603][T21590] print_report+0xa8/0x210 [ 640.159043][T21590] kasan_report+0x10b/0x140 [ 640.163565][T21590] ? strcmp+0x67/0xb0 [ 640.167555][T21590] strcmp+0x67/0xb0 [ 640.171461][T21590] hpfs_get_ea+0x132/0xde0 [ 640.175905][T21590] ? hpfs_read_ea+0xc20/0xc20 [ 640.180597][T21590] ? __getblk_gfp+0x4f/0xb20 [ 640.185199][T21590] ? asm_common_interrupt+0x22/0x40 [ 640.190501][T21590] ? __bread_gfp+0x60/0x330 [ 640.195014][T21590] ? hpfs_map_sector+0x14a/0x2e0 [ 640.200022][T21590] ? hpfs_map_fnode+0x27a/0x690 [ 640.204885][T21590] hpfs_read_inode+0x1a3/0x1050 [ 640.209756][T21590] ? __lock_acquire+0x7d10/0x7d10 [ 640.214807][T21590] ? hpfs_init_inode+0x2c0/0x2c0 [ 640.219760][T21590] ? preempt_schedule_thunk+0x16/0x18 [ 640.225151][T21590] ? hpfs_init_inode+0x1cc/0x2c0 [ 640.230107][T21590] hpfs_fill_super+0x135a/0x1fd0 [ 640.235066][T21590] ? hpfs_mount+0x40/0x40 [ 640.239490][T21590] ? snprintf+0xe5/0x140 [ 640.243747][T21590] ? set_blocksize+0x1d0/0x470 [ 640.248545][T21590] ? sb_set_blocksize+0xa5/0xe0 [ 640.253405][T21590] mount_bdev+0x287/0x3c0 [ 640.257747][T21590] ? hpfs_mount+0x40/0x40 [ 640.262090][T21590] legacy_get_tree+0xe6/0x180 [ 640.266859][T21590] ? hpfs_ioctl+0x260/0x260 [ 640.271367][T21590] vfs_get_tree+0x88/0x270 [ 640.275791][T21590] do_new_mount+0x24a/0xa40 [ 640.280299][T21590] __se_sys_mount+0x2e3/0x3d0 [ 640.285020][T21590] ? __x64_sys_mount+0xc0/0xc0 [ 640.289794][T21590] ? lockdep_hardirqs_on+0x94/0x140 [ 640.294997][T21590] ? __x64_sys_mount+0x1c/0xc0 [ 640.299770][T21590] do_syscall_64+0x4c/0xa0 [ 640.304196][T21590] ? clear_bhb_loop+0x60/0xb0 [ 640.308880][T21590] ? clear_bhb_loop+0x60/0xb0 [ 640.313569][T21590] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 640.319480][T21590] RIP: 0033:0x7f76b199da0a [ 640.323905][T21590] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 640.343516][T21590] RSP: 002b:00007f76b292fe58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 640.351937][T21590] RAX: ffffffffffffffda RBX: 00007f76b292fee0 RCX: 00007f76b199da0a [ 640.359927][T21590] RDX: 000020000000a000 RSI: 0000200000000000 RDI: 00007f76b292fea0 [ 640.367911][T21590] RBP: 000020000000a000 R08: 00007f76b292fee0 R09: 0000000003200041 [ 640.375887][T21590] R10: 0000000003200041 R11: 0000000000000246 R12: 0000200000000000 [ 640.383952][T21590] R13: 00007f76b292fea0 R14: 0000000000009e18 R15: 0000200000000080 [ 640.391938][T21590] [ 640.394963][T21590] [ 640.397298][T21590] The buggy address belongs to the physical page: [ 640.403716][T21590] page:ffffea000126a640 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x49a99 [ 640.413872][T21590] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 640.420994][T21590] raw: 00fff00000000000 dead000000000100 dead000000000122 0000000000000000 [ 640.429580][T21590] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 640.438248][T21590] page dumped because: kasan: bad access detected [ 640.444662][T21590] page_owner tracks the page as freed [ 640.450033][T21590] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 21369, tgid 21368 (syz.3.7847), ts 631270713204, free_ts 632797354099 [ 640.467924][T21590] post_alloc_hook+0x173/0x1a0 [ 640.472703][T21590] get_page_from_freelist+0x1a1e/0x1ab0 [ 640.478357][T21590] __alloc_pages+0x1ec/0x4f0 [ 640.483050][T21590] __folio_alloc+0xe/0x30 [ 640.487389][T21590] vma_alloc_folio+0x4a3/0x900 [ 640.492160][T21590] shmem_alloc_and_acct_folio+0x463/0xbc0 [ 640.497892][T21590] shmem_get_folio_gfp+0x1361/0x3400 [ 640.503186][T21590] shmem_write_begin+0xee/0x3f0 [ 640.508043][T21590] generic_perform_write+0x2fa/0x5c0 [ 640.513337][T21590] __generic_file_write_iter+0x148/0x2a0 [ 640.518980][T21590] generic_file_write_iter+0xab/0x2e0 [ 640.524373][T21590] vfs_write+0x4b1/0xa30 [ 640.528629][T21590] ksys_write+0x14c/0x250 [ 640.533022][T21590] do_syscall_64+0x4c/0xa0 [ 640.537539][T21590] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 640.543443][T21590] page last free stack trace: [ 640.548215][T21590] free_unref_page_prepare+0x8b4/0x9a0 [ 640.553703][T21590] free_unref_page_list+0xbb/0x8e0 [ 640.558937][T21590] release_pages+0x1fa6/0x2220 [ 640.563713][T21590] __pagevec_release+0x6d/0xe0 [ 640.568501][T21590] shmem_undo_range+0x7c2/0x20c0 [ 640.573445][T21590] shmem_evict_inode+0x25b/0xa80 [ 640.578398][T21590] evict+0x4c9/0x8d0 [ 640.582297][T21590] __dentry_kill+0x431/0x650 [ 640.586908][T21590] dentry_kill+0xb8/0x290 [ 640.591250][T21590] dput+0xfa/0x1d0 [ 640.594979][T21590] __fput+0x5e0/0x920 [ 640.598973][T21590] task_work_run+0x1d0/0x260 [ 640.603745][T21590] exit_to_user_mode_loop+0xe6/0x110 [ 640.609132][T21590] exit_to_user_mode_prepare+0xee/0x180 [ 640.614689][T21590] syscall_exit_to_user_mode+0x16/0x40 [ 640.620166][T21590] do_syscall_64+0x58/0xa0 [ 640.624606][T21590] [ 640.626935][T21590] Memory state around the buggy address: [ 640.632566][T21590] ffff888049a99e80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 640.640640][T21590] ffff888049a99f00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 640.648706][T21590] >ffff888049a99f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 640.656771][T21590] ^ [ 640.661884][T21590] ffff888049a9a000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 640.669947][T21590] ffff888049a9a080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 640.678005][T21590] ================================================================== [ 640.723455][T21601] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 640.758611][T21590] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 640.765964][T21590] CPU: 1 PID: 21590 Comm: syz.0.7943 Not tainted syzkaller #0 [ 640.773474][T21590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 640.783684][T21590] Call Trace: [ 640.787084][T21590] [ 640.790046][T21590] dump_stack_lvl+0x188/0x24e [ 640.794775][T21590] ? memcpy+0x3c/0x60 [ 640.798799][T21590] ? show_regs_print_info+0x12/0x12 [ 640.804059][T21590] ? load_image+0x400/0x400 [ 640.808625][T21590] panic+0x2e5/0x730 [ 640.812834][T21590] ? bpf_jit_dump+0xd0/0xd0 [ 640.817392][T21590] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 640.823434][T21590] ? _raw_spin_unlock+0x40/0x40 [ 640.828332][T21590] check_panic_on_warn+0x80/0xa0 [ 640.833307][T21590] ? strcmp+0x67/0xb0 [ 640.837337][T21590] end_report+0x66/0x110 [ 640.841629][T21590] kasan_report+0x118/0x140 [ 640.846176][T21590] ? strcmp+0x67/0xb0 [ 640.850192][T21590] strcmp+0x67/0xb0 [ 640.854044][T21590] hpfs_get_ea+0x132/0xde0 [ 640.858507][T21590] ? hpfs_read_ea+0xc20/0xc20 [ 640.863661][T21590] ? __getblk_gfp+0x4f/0xb20 [ 640.868301][T21590] ? asm_common_interrupt+0x22/0x40 [ 640.873558][T21590] ? __bread_gfp+0x60/0x330 [ 640.878110][T21590] ? hpfs_map_sector+0x14a/0x2e0 [ 640.883098][T21590] ? hpfs_map_fnode+0x27a/0x690 [ 640.887986][T21590] hpfs_read_inode+0x1a3/0x1050 [ 640.892893][T21590] ? __lock_acquire+0x7d10/0x7d10 [ 640.897962][T21590] ? hpfs_init_inode+0x2c0/0x2c0 [ 640.902955][T21590] ? preempt_schedule_thunk+0x16/0x18 [ 640.908647][T21590] ? hpfs_init_inode+0x1cc/0x2c0 [ 640.913634][T21590] hpfs_fill_super+0x135a/0x1fd0 [ 640.918620][T21590] ? hpfs_mount+0x40/0x40 [ 640.922987][T21590] ? snprintf+0xe5/0x140 [ 640.927268][T21590] ? set_blocksize+0x1d0/0x470 [ 640.932070][T21590] ? sb_set_blocksize+0xa5/0xe0 [ 640.936967][T21590] mount_bdev+0x287/0x3c0 [ 640.941722][T21590] ? hpfs_mount+0x40/0x40 [ 640.946096][T21590] legacy_get_tree+0xe6/0x180 [ 640.950921][T21590] ? hpfs_ioctl+0x260/0x260 [ 640.955482][T21590] vfs_get_tree+0x88/0x270 [ 640.959945][T21590] do_new_mount+0x24a/0xa40 [ 640.964582][T21590] __se_sys_mount+0x2e3/0x3d0 [ 640.969329][T21590] ? __x64_sys_mount+0xc0/0xc0 [ 640.974145][T21590] ? lockdep_hardirqs_on+0x94/0x140 [ 640.979377][T21590] ? __x64_sys_mount+0x1c/0xc0 [ 640.984203][T21590] do_syscall_64+0x4c/0xa0 [ 640.988666][T21590] ? clear_bhb_loop+0x60/0xb0 [ 640.993385][T21590] ? clear_bhb_loop+0x60/0xb0 [ 640.998074][T21590] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 641.004340][T21590] RIP: 0033:0x7f76b199da0a [ 641.008774][T21590] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 641.028760][T21590] RSP: 002b:00007f76b292fe58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 641.037227][T21590] RAX: ffffffffffffffda RBX: 00007f76b292fee0 RCX: 00007f76b199da0a [ 641.045295][T21590] RDX: 000020000000a000 RSI: 0000200000000000 RDI: 00007f76b292fea0 [ 641.053364][T21590] RBP: 000020000000a000 R08: 00007f76b292fee0 R09: 0000000003200041 [ 641.061355][T21590] R10: 0000000003200041 R11: 0000000000000246 R12: 0000200000000000 [ 641.069331][T21590] R13: 00007f76b292fea0 R14: 0000000000009e18 R15: 0000200000000080 [ 641.077342][T21590] [ 641.080856][T21590] Kernel Offset: disabled [ 641.085181][T21590] Rebooting in 86400 seconds..