last executing test programs: 7.178931885s ago: executing program 5 (id=15966): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f00000017c0)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0xb80, &(0x7f0000000c40)="$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") r0 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) pwritev2(r0, &(0x7f00000006c0)=[{&(0x7f0000000200)='%;\t', 0x3}], 0x1, 0x2040, 0x0, 0x1b) 5.712148749s ago: executing program 5 (id=15978): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001100), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000011c0)={0x28, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x24008080) 4.593492487s ago: executing program 5 (id=15989): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) syz_emit_ethernet(0x7e, &(0x7f0000000140)={@local, @random="c6eb8947e4e4", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0xe0dbf46ca9d044ba, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @empty, {[@cipso={0x86, 0x2a, 0x3, [{0x2, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @multicast1, @multicast2]}]}}}}}}}, 0x0) 4.381707833s ago: executing program 0 (id=15991): r0 = syz_io_uring_setup(0x4b6, &(0x7f0000000280)={0x0, 0x0, 0x400, 0x1, 0x199}, &(0x7f0000ff0000), &(0x7f0000000000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000000, 0x200000005c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}, 0x20) 4.367105435s ago: executing program 2 (id=15992): r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c40) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x20}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0) 4.066194579s ago: executing program 0 (id=15995): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x3c, r1, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x2}]}, 0x3c}}, 0x0) 4.013502365s ago: executing program 2 (id=15997): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000100)={0x13, 0x10, 0xfa00, {0x0, r1, 0x3000000}}, 0x18) 3.724401145s ago: executing program 4 (id=16000): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x12}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62043c009e0101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000c00)="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", 0x113}, {&(0x7f0000000a40)="0a985d78", 0x4}], 0x3}, 0x0) 3.654403634s ago: executing program 2 (id=16001): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000540)={0x41c, 0x7d, 0x0, {{0x500, 0x2db, 0x0, 0x5000000, {0xcdb74b01717932d9, 0x400}, 0x10000000, 0x0, 0x0, 0x8000fe, 0x1f, '\x04nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\xff\xff\xff0\xff\xce\xbc\x92\x00\x00\x00', 0x120, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05>\x00\x1e\x00\x00\x18{\x82O^\x97\xe5p\xbeg\xb0^\xb0V\xca|=9\x00\xb5\x00\x00;Y_\xcb\x14\x03\x03\x00\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x1a\xb4\x94\xcc\xe37A\x95\xcc\x90U\xd1\xc8~x\xcdY\x96\xd9\x967\x87\xe7\xb6\x98\"l5\xf0\x17K\r\xf3\xf8\x91\xcf\x99lI\b\xe889d\x01,\xe2\x15]\xd6\xb3\xf4kb\xcay$\xeba\x13\x90\x98\xb2\"\xbc\xf4/\xeah1Z\x81ju\x16i\xd6%\xe5\xe4\xe4_\x96?\x1e\xe2\x1e\xb7N\xf3\xcd\xf9\x8f7\xb2?\r\xac\xc9\xd9\xe5\xd4\xbe\xbf\x91J\x8d,\x9f\x19fxu\xd1\r\xeb\xddkT\x03\xf6j\xe8}\x8a/\x067\xcdH\x82\x8f,W\xc3,\x19\xc3#9(O\xa5\x14\xa9#l\x1b\x17\xe7R\x93^J\xf4v\x86\xa6\xcfHC\x10\xec\xd1\xe8\x98l\x12_\xb7B\xfd2\xfc]\x87\xe0\x8aj\x8e\r\x94X\x02\xd7\x7f\x15\xb4G\t\x8b\xd5c\x9c\x0e\xba\\o\xd2\x132\xf6\xddX\x8b\x17\"=\xa7l-\xf5\x91\v_\xf9\xfc\x01\x9f\xd9&', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x157, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85+\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00\xd0\x02\xaf\x02k\x9en\r\xca\x00\x89\xfdL\xd0\x9c\xf8\r\xbb\xe9Q\xb2\x1f5y\x8b\n\xb6hx\xc0\x9d\"\x8b7\x88\\\x10\x8a\xcb\xee\xcd\xbe\x06Kz\xd8\xd79\x9f\xd5\x18j\'t\x8f$\x88\'\x06\x8f\x89\x0fOPZ\x04\xc4$\xd7%\xc8\x1exa\xe1 --\xc4\xc94\x1dWH\xff\x9eS\x9e\rIT\x8fz\x1c\xcf^\xac\x9a\xa0\x92L\a\x00\x00\x00\xf3|c\xccjn1\xa7}\x1f\xad\x05\x83h\xae\xd5\xe3\xc1M\x89\x96\x87\n\v\t\xd0l\x97\x04\x98\v\xb4GxB\xb1\xed.\x8f%\x01\xb2_\xbc\\^\xe6}\x8bnN\xc7G\xe9]\x03\xf6x\xd7\x1a-\xa34\x92\xf8\xd4\x87\xeeB|Y\xf6\xe7\ni\xa9J}\x987\xd6\x02c\xd68\aM\xfa\x04\xa4V\x04\tD\xb7\x02\"gFh\xc7D\xb7\xba\xda\xad4uXO 5|\x84 \xc1IO\x8d\r4 *\xfb5\xccVp\xe2@\xbe\xba\x96SS\xaf\xe9F\xc0\xc1\xb5\t\x1d9U\xc8\xc8_\xf1\xc7q|\n'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcf\x01.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb49\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0xffffffffffffffff, 0xee00}}, 0x41c) ioctl$SNDCTL_SEQ_PANIC(r0, 0x5111) 3.416894214s ago: executing program 1 (id=16003): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@newlink={0x6c, 0x10, 0x401, 0x70bd28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x10000}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x800}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0xffffff81}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_BROADCAST={0xa, 0x2, @random="af22b952f1f5"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20048000) 3.388964541s ago: executing program 4 (id=16004): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000740)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f00000000c0)=""/160, 0xa0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/99, 0x63}], 0x1, 0x60, 0x99}}, @rdma_args={0x48, 0x114, 0x1, {{0x100, 0x3}, {0x0}, 0x0, 0x0, 0x48, 0x12}}], 0x90, 0x8004}, 0x0) 3.258231977s ago: executing program 2 (id=16005): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 3.079625991s ago: executing program 4 (id=16006): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r0) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x44040) 2.830818126s ago: executing program 4 (id=16008): syz_usb_connect(0x5, 0x27, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2101) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000140)={0x1, 0x0, 0x5, &(0x7f0000000340)={0x7, "732a5473c2bf273690bb713bd646baab088d08b240d1e9ee96e13c49e155462c86"}}) 1.895426763s ago: executing program 3 (id=16009): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0xb940, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.643391241s ago: executing program 3 (id=16010): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000000)={[{@force}, {@umask={'umask', 0x3d, 0x548}}, {@part={'part', 0x3d, 0x9}}, {@nls={'nls', 0x3d, 'cp850'}}]}, 0x1, 0x5f8, &(0x7f00000006c0)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 1.641820853s ago: executing program 5 (id=16011): r0 = io_uring_setup(0x585f, &(0x7f00000001c0)={0x0, 0x2002c28, 0x80, 0x0, 0x10000000}) io_uring_register$IORING_REGISTER_CLOCK(r0, 0x1d, &(0x7f00000006c0)={0x7}, 0x0) io_uring_enter(r0, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) 1.577117539s ago: executing program 0 (id=16012): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x28, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xd}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) 1.550470024s ago: executing program 1 (id=16013): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000040), 0x4) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) 1.457042253s ago: executing program 2 (id=16014): r0 = syz_open_dev$swradio(&(0x7f00000001c0), 0x0, 0x2) read(r0, &(0x7f0000000380)=""/238, 0xee) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0585611, &(0x7f00000000c0)={0x0, 0xb, 0x0, "3e58f67896b2f2098200902177392faff604cb7ef87e7610bc39ef64257f5d33"}) 1.234612586s ago: executing program 1 (id=16015): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8}) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)={0xe0, 0x12, 0x25c8ae48a72191d, 0x0, 0x0, "", [@generic="be60e9dd96bc134d4e792565f61dd171bee0d5ef11f11242ab27ce1d1d845655a80db0e8e60b96a21cb6f1a41105716ac7a9972711f01002bb429fcbf6561afca108539188b82a92927ed6e20293c85ddda8e0a76975ca5d36b2d9f64fc52c4186166d868587bdd8492f3a9ca7ea4e6c9d8f02e5349a322e9ab0a7c2800e1f3707bc1c4bd11748fe7ee91381ebe9716a8dde787ec561f20eca7d82f047111d3fe3dfe0fe9712163a8b19d900b4", @nested={0x20, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @typed={0x8, 0x0, 0x0, 0x0, @fd}]}]}, 0xe0}], 0x1}, 0x0) 1.224826009s ago: executing program 0 (id=16016): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000100)={[{@nls={'nls', 0x3d, 'default'}}, {}, {@part={'part', 0x3d, 0x9}}, {@part={'part', 0x3d, 0x9}}]}, 0x1, 0x5ea, &(0x7f0000002f40)="$eJzs3U1vG8cdB+Df0pJsuqjDJHaSFi0q2IcWMWqLYuLoUKBuURQ6BEWAXnLJQbBpWzCtBBJTKEFR2H299hskRSGfe+qh6MFAe+5HqIAecijQu24udrmUGEuRpVg2qfh5gOHMcHZnZ/7eHXGXMBjgubX4bqYfpMjixbfXy/rmRqe3udG5MywnOZmkkUwNshQrSTGdXM0g5Rvlm3V3xRcd571P3lr4rH3/3qA2Vadq+8Z++x3M3TplNsmJOj+q/q49cX/F9gzLgF0YBg7G7eEudw+z+xNet8AkKAZ/N3dpJaeTnKo/B6ReHRrPdnRH71CrHAAAABxTL2xlK+s5M+5xAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwHFS//5/UafGsDybYvj7/zP1e6nLx9qDcQ8AAAAAAAAAAI7Ad7aylfWcGdYfFtV3/uerytnq9Wv5MGvpZjWXsp6l9NPPatpJWiMdzawv9fur7QPsOb/nnvPPZr4AAAAAAAAA8BX16yzufP8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACToEhODLIqnR2WW2lMJTmVZKbc7m7y92H5OHsw7gEAAADAM/DCVraynjPD+sOiuud/pbrvP5UPs5J+ltNPL91cr54FDO76G5sbnd7mRudOmXb3+6P/HWoYVY8ZPHvY+8hz1RbnqvY/zySL+Wl+nouZzTtZzXJ+kaX0081sflKVllKkVT+9aA3Hufd4r36u9s7jxvpaNZJmbmS5GtulXMv76eV6GtUcqm32P+K9MjrFD2sHjNH1Oi9n9Mc6nwytKiLT2xGZq2NfRuPF/SNxyPPk0SO109h+BnX2KcT8dJ2Xsf79RMd8fuTse2X/SCTn//Ptv97qrdy+dWPt4uRM6Ut6NBKdkUi8+lxFYqaOxmAVHa6Wpcevluerfc9kOT/L+7mebt7MQt7MfN7IG5nLQq6MxPXc46+1m0kOc61d+F5daCb5Q51PhjKuL47EdXSla1Vto+/sROmlo1+Rpr5ZF8pj/KbOJ8OjkWiPROLl/SPxp4fl61pv5fbqraUPDni879Z5edn+bqLW5vJ8ean8x6pqnz87yraX92xrV21nt9sau9rO/fvrddvjrtSZ+jPc7p7mq7ZX92zrVG2vjbTt9SkHgIl3+vXTM83/Nv/V/LT52+at5tunfnxy4eS3ZjL9z6m/nfhL437jB8Xr+TS/2rn/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvry1jz6+vdTrdVcVFI5tYao+mydlPF+FwpgXJuCpu9y/88HltY8+/v7ynaWb3ZvdlU6nfWV+4crC/JXLN5Z73bnB67iHCTwFO3/0xz0SAAAAAAAAAAAA4KCexX8nGPccAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgONt8d1MP0iR9tylubK+udHplWlY3tlyKkkjSfHLpPhHcjWDlNZId8UXHee9T95a+Kx9/95OX1PD7Rv77Xcwd+uU2SQn6vyo+rv2xP0V2zMsA3ZhGDgYt/8HAAD//6ulC6Y=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents(r0, &(0x7f0000000140)=""/50, 0xffa3) 1.064536501s ago: executing program 3 (id=16017): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x848000000015, 0x805, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f00000005c0), 0x10) 1.014261883s ago: executing program 2 (id=16018): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@grpjquota}, {@i_version}, {@nobh}, {@noload}, {@quota}]}, 0x3, 0x4fe, &(0x7f0000000dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086602, &(0x7f0000000080)={@desc={0x84c00, 0x0, @desc2}}) 1.012031663s ago: executing program 4 (id=16019): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@remote, 0x8000000, 0x0, 0xff, 0x1, 0x66}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x1, 0xff, 0x0, 0x0, 0x9}, 0x20) 897.879328ms ago: executing program 1 (id=16020): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000740)={0x1f, @none}, 0x8) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000040)) 769.34605ms ago: executing program 0 (id=16021): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x70bd27, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xdffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80, 0x21}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in6=@dev={0xfe, 0x80, '\x00', 0x28}, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x20, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) 724.829833ms ago: executing program 3 (id=16022): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x24, 0x20, 0x1, 0x70bd29, 0x0, {0xa, 0x0, 0x0, 0x40}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040884}, 0x4008000) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40084) 637.06925ms ago: executing program 1 (id=16023): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x14, r1, 0x311, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20044040}, 0x20040000) 622.92809ms ago: executing program 4 (id=16024): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) remap_file_pages(&(0x7f0000603000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x1) 394.119251ms ago: executing program 5 (id=16025): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0xc) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040) 338.707134ms ago: executing program 0 (id=16026): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x3, 0xf, &(0x7f0000000680)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000840)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 288.65827ms ago: executing program 1 (id=16027): unshare(0x22020600) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f00000058c0)={0x2020}, 0x2020) 280.347193ms ago: executing program 3 (id=16028): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x400, 0x0, 0x3c9}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_FUTEX_WAKE={0x34, 0x0, 0x0, 0x89, 0x12, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x7fff}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 135.144125ms ago: executing program 5 (id=16029): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x51}}) 0s ago: executing program 3 (id=16030): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffe41}}]}, 0x3c}}, 0x0) kernel console output (not intermixed with test programs): , Product=255, SerialNumber=0 [ 1454.900175][T29850] usb 3-1: Product: syz [ 1454.915567][T29850] usb 3-1: Manufacturer: syz [ 1454.943229][T29850] usb 3-1: config 0 descriptor?? [ 1454.971922][T26599] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1454.992804][T29850] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1455.003469][T26603] netlink: 'syz.0.14243': attribute type 13 has an invalid length. [ 1455.030493][T29850] usb 3-1: Detected FT2232C/D [ 1455.035385][T26603] netlink: 'syz.0.14243': attribute type 17 has an invalid length. [ 1455.056597][T26608] loop3: detected capacity change from 0 to 8 [ 1455.068830][T26549] loop5: detected capacity change from 0 to 32768 [ 1455.119057][T26608] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1455.127245][T26608] SQUASHFS error: Failed to read block 0x4e8: -5 [ 1455.143604][ T30] audit: type=1800 audit(1398.897:182): pid=26608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.14246" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 1455.163912][T26549] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1455.258902][T26549] XFS (loop5): invalid iclog size (4096 bytes), using lsunit (32768 bytes) [ 1455.324673][T26549] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 1455.405539][T29850] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1455.418878][T26549] XFS (loop5): Starting recovery (logdev: internal) [ 1455.445227][T29850] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1455.492035][T29850] usb 3-1: USB disconnect, device number 107 [ 1455.511594][T26603] 0·: left allmulticast mode [ 1455.527736][T29850] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1455.541556][T26603] hsr_slave_0: left allmulticast mode [ 1455.556998][T26637] nfs: Unknown parameter 'ntext' [ 1455.563212][T26603] hsr_slave_1: left allmulticast mode [ 1455.588117][T26549] XFS (loop5): Ending recovery (logdev: internal) [ 1455.610282][T29850] ftdi_sio 3-1:0.0: device disconnected [ 1455.619135][T26603] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1455.709945][T26549] XFS (loop5): Quotacheck needed: Please wait. [ 1455.726835][T11645] lo speed is unknown, defaulting to 1000 [ 1455.755954][T11645] sz1: Port: 1 Link ACTIVE [ 1455.779210][T11645] lo speed is unknown, defaulting to 1000 [ 1456.050904][T26549] XFS (loop5): Quotacheck: Done. [ 1456.302094][ T5934] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1456.644703][T26686] netlink: 256 bytes leftover after parsing attributes in process `syz.2.14264'. [ 1458.061250][T26741] netlink: 'syz.5.14280': attribute type 10 has an invalid length. [ 1458.100366][T26741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1458.112370][T26745] netlink: 9 bytes leftover after parsing attributes in process `syz.1.14282'. [ 1458.136164][T26741] team0: Port device bond0 added [ 1458.146749][T26745] netlink: 9 bytes leftover after parsing attributes in process `syz.1.14282'. [ 1458.419316][T26712] loop4: detected capacity change from 0 to 32768 [ 1458.488900][T26712] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1458.683093][T26712] XFS (loop4): invalid iclog size (4096 bytes), using lsunit (32768 bytes) [ 1458.716822][T26712] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 1458.812821][T26712] XFS (loop4): Starting recovery (logdev: internal) [ 1458.963229][T26712] XFS (loop4): Ending recovery (logdev: internal) [ 1459.155145][T26712] XFS (loop4): Quotacheck needed: Please wait. [ 1459.465360][T26712] XFS (loop4): Quotacheck: Done. [ 1459.535548][T26815] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1459.562667][T26817] Invalid ELF header magic: != ELF [ 1459.687880][ T5927] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1460.136874][T26843] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 1460.143933][T26843] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1460.204796][T26843] vhci_hcd vhci_hcd.0: Device attached [ 1460.220225][T26848] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(6) [ 1460.227021][T26848] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1460.288359][T26848] vhci_hcd vhci_hcd.0: Device attached [ 1460.342365][T26849] vhci_hcd: connection closed [ 1460.342734][T16086] vhci_hcd vhci_hcd.5: stop threads [ 1460.342834][T26844] vhci_hcd: connection closed [ 1460.351304][T16086] vhci_hcd vhci_hcd.5: release socket [ 1460.431512][T16086] vhci_hcd vhci_hcd.5: disconnect device [ 1460.447453][T16086] vhci_hcd vhci_hcd.5: stop threads [ 1460.463789][ T4836] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 1460.474451][T16086] vhci_hcd vhci_hcd.5: release socket [ 1460.482933][T16086] vhci_hcd vhci_hcd.5: disconnect device [ 1460.658626][T26865] loop3: detected capacity change from 0 to 256 [ 1460.672957][T26865] exfat: Deprecated parameter 'namecase' [ 1460.709079][T26865] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1461.443178][T26909] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 1461.553165][T29850] usb 1-1: new full-speed USB device number 101 using dummy_hcd [ 1461.749724][T29850] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1461.799726][T29850] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1461.851966][T29850] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 1461.884288][T29850] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1461.924886][T29850] usb 1-1: Product: syz [ 1461.943536][T29850] usb 1-1: Manufacturer: syz [ 1461.968074][T29850] usb 1-1: SerialNumber: syz [ 1462.005246][T29850] usb 1-1: config 0 descriptor?? [ 1462.040633][T29850] hub 1-1:0.0: bad descriptor, ignoring hub [ 1462.061574][T29850] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1462.101901][T29850] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input131 [ 1462.237444][T26953] loop5: detected capacity change from 0 to 8 [ 1462.320245][T26958] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 1462.677031][T29850] usb 1-1: USB disconnect, device number 101 [ 1462.856157][ T30] audit: type=1400 audit(1406.116:183): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=26982 comm="syz.1.14349" [ 1463.182815][T26932] loop2: detected capacity change from 0 to 32768 [ 1463.205464][T26932] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.14337 (26932) [ 1463.268024][T26932] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1463.306114][T26932] BTRFS info (device loop2): using sha256 checksum algorithm [ 1463.511226][T26932] BTRFS info (device loop2): enabling ssd optimizations [ 1463.530635][T26932] BTRFS info (device loop2): turning on async discard [ 1463.584213][T26932] BTRFS info (device loop2): enabling free space tree [ 1463.942521][ T5916] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1464.389101][T27067] netlink: 'syz.5.14371': attribute type 13 has an invalid length. [ 1464.459901][T27067] netlink: 'syz.5.14371': attribute type 17 has an invalid length. [ 1464.794289][T27067] 8021q: adding VLAN 0 to HW filter on device team0 [ 1464.811208][T11673] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1464.882512][T27067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1465.014271][T11673] usb 5-1: Using ep0 maxpacket: 16 [ 1465.030009][T11673] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1465.043861][T11673] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1465.082000][T11673] usb 5-1: Product: syz [ 1465.092881][T11673] usb 5-1: Manufacturer: syz [ 1465.119830][T11673] usb 5-1: SerialNumber: syz [ 1465.142034][T27098] netlink: 'syz.3.14380': attribute type 1 has an invalid length. [ 1465.152653][T11673] usb 5-1: config 0 descriptor?? [ 1465.179972][T11673] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 1465.191302][T27098] netlink: 244 bytes leftover after parsing attributes in process `syz.3.14380'. [ 1465.240087][T27098] NCSI netlink: No device for ifindex 0 [ 1465.325452][T27067] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1465.398471][T27067] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1465.424602][T27067] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1465.618240][T11673] usb 5-1: clie_3_5_startup: get interface number failed: -71 [ 1465.643539][T11673] visor 5-1:0.0: probe with driver visor failed with error -71 [ 1465.696061][T11673] usb 5-1: USB disconnect, device number 125 [ 1465.917080][T27126] bond8: Removing last ns target with arp_interval on [ 1465.964968][ T4836] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1466.456536][T27171] loop1: detected capacity change from 0 to 4096 [ 1466.559459][T27171] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 1466.756515][T27191] netlink: 'syz.3.14398': attribute type 32 has an invalid length. [ 1466.795650][T27171] ntfs3(loop1): Failed to load $Extend (-22). [ 1466.832294][T27171] ntfs3(loop1): Failed to initialize $Extend. [ 1467.164005][T27207] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1468.286862][T27270] netlink: 44 bytes leftover after parsing attributes in process `syz.1.14425'. [ 1468.805212][ T4836] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1469.033433][T16086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1469.043795][ T4836] usb 4-1: Using ep0 maxpacket: 8 [ 1469.069562][ T4836] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1469.084304][T16086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1469.112320][ T4836] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1469.149223][ T4836] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1469.197947][ T4836] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1469.240189][ T4836] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1469.272999][ T4836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1469.295429][ T4836] usb 4-1: Product: syz [ 1469.325288][ T4836] usb 4-1: Manufacturer: syz [ 1469.342974][ T4836] usb 4-1: SerialNumber: syz [ 1469.395336][ T4836] usb 4-1: config 0 descriptor?? [ 1469.459725][ T4836] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 1469.472120][T27335] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14446'. [ 1469.484071][T27335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14446'. [ 1469.522102][T27335] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1469.663946][ T4836] snd_usb_toneport 4-1:0.0: cannot get proper max packet size [ 1469.692412][ T4836] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 1469.734800][ T4836] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 1469.976202][ T5901] usb 4-1: USB disconnect, device number 111 [ 1470.108428][T29850] usb 2-1: new full-speed USB device number 99 using dummy_hcd [ 1470.239459][T27377] futex_wake_op: syz.5.14457 tries to shift op by 144; fix this program [ 1470.274170][T27377] futex_wake_op: syz.5.14457 tries to shift op by 144; fix this program [ 1470.310353][T29850] usb 2-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=c7.b3 [ 1470.342339][T29850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1470.363928][T29850] usb 2-1: Product: syz [ 1470.376371][T29850] usb 2-1: Manufacturer: syz [ 1470.393537][T29850] usb 2-1: SerialNumber: syz [ 1470.418936][T29850] usb 2-1: config 0 descriptor?? [ 1470.442711][T29850] cypress_cy7c63 2-1:0.0: Cypress CY7C63xxx device now attached [ 1470.600009][T27399] netlink: 36 bytes leftover after parsing attributes in process `syz.0.14463'. [ 1470.731720][T29850] usb 2-1: USB disconnect, device number 99 [ 1470.747470][T29850] cypress_cy7c63 2-1:0.0: Cypress CY7C63xxx device now disconnected [ 1471.247322][T27437] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 1471.391285][T27445] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 1471.398165][T27445] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1471.487484][T27445] vhci_hcd vhci_hcd.0: Device attached [ 1471.588483][T27449] vhci_hcd vhci_hcd.0: port 0 already used [ 1471.648470][T27446] vhci_hcd: connection closed [ 1471.648857][T21318] vhci_hcd vhci_hcd.2: stop threads [ 1471.708515][T21318] vhci_hcd vhci_hcd.2: release socket [ 1471.737733][T21318] vhci_hcd vhci_hcd.2: disconnect device [ 1472.412222][T27509] netlink: 'syz.0.14495': attribute type 2 has an invalid length. [ 1472.751225][T27526] netlink: 392 bytes leftover after parsing attributes in process `syz.0.14501'. [ 1472.854674][T27532] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14503'. [ 1473.133077][T27551] loop5: detected capacity change from 0 to 64 [ 1473.226718][T27551] syz.5.14510: attempt to access beyond end of device [ 1473.226718][T27551] loop5: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 1473.280593][T27551] Buffer I/O error on dev loop5, logical block 512, async page read [ 1473.314411][T27551] syz.5.14510: attempt to access beyond end of device [ 1473.314411][T27551] loop5: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 1473.358342][T27551] Buffer I/O error on dev loop5, logical block 56576, async page read [ 1473.410191][T27562] netlink: 768 bytes leftover after parsing attributes in process `syz.1.14514'. [ 1473.577132][T27573] loop4: detected capacity change from 0 to 512 [ 1473.672654][T27573] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1473.878113][ T5927] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1474.158274][T27599] loop5: detected capacity change from 0 to 2048 [ 1474.200224][T27599] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1474.221950][T27614] netlink: 'syz.1.14525': attribute type 1 has an invalid length. [ 1474.261944][ T30] audit: type=1800 audit(1416.799:184): pid=27599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.14522" name="file1" dev="loop5" ino=1367 res=0 errno=0 [ 1474.382630][T29850] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1474.439772][T27620] faux_driver vkms: [drm] Unknown color mode 9; guessing buffer size. [ 1474.595086][T29850] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1474.635649][T29850] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1474.669956][T29850] usb 4-1: Product: syz [ 1474.683856][T29850] usb 4-1: Manufacturer: syz [ 1474.699855][T29850] usb 4-1: SerialNumber: syz [ 1474.723599][T27632] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 1474.747267][T29850] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1474.758620][T27632] overlayfs: missing 'lowerdir' [ 1474.764502][T27637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14532'. [ 1474.942607][ T5901] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1475.436555][T27657] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14538'. [ 1475.537608][T29850] usb 4-1: USB disconnect, device number 112 [ 1475.830449][T27675] overlayfs: conflicting options: userxattr,metacopy=on [ 1476.131791][ T5901] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1476.155559][ T5901] ath9k_htc: Failed to initialize the device [ 1476.184151][T29850] usb 4-1: ath9k_htc: USB layer deinitialized [ 1476.346450][T11645] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1476.518713][T11645] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1476.553901][T11645] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1476.591569][T11645] usb 6-1: config 0 descriptor?? [ 1476.846524][T11645] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1477.066978][T11645] [drm:udl_init] *ERROR* Selecting channel failed [ 1477.208073][T11645] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 1477.224210][T11645] [drm] Initialized udl on minor 2 [ 1477.242159][T11645] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1477.277890][T11645] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1477.333795][T11645] usb 6-1: USB disconnect, device number 10 [ 1477.426508][ T5901] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1477.465343][ T5901] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1477.478627][T27749] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1478.011791][ T5901] usb 4-1: new full-speed USB device number 113 using dummy_hcd [ 1478.185296][ T5901] usb 4-1: config 0 has an invalid interface number: 175 but max is 0 [ 1478.208113][ T5901] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1478.228778][ T5901] usb 4-1: config 0 has no interface number 0 [ 1478.246000][ T5901] usb 4-1: config 0 interface 175 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 1478.269154][ T5901] usb 4-1: config 0 interface 175 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 1478.293178][ T5901] usb 4-1: config 0 interface 175 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 1478.325635][ T5901] usb 4-1: config 0 interface 175 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 1478.376583][ T5901] usb 4-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 1478.396906][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1478.408913][ T5901] usb 4-1: Product: syz [ 1478.417711][ T5901] usb 4-1: Manufacturer: syz [ 1478.428113][ T5901] usb 4-1: SerialNumber: syz [ 1478.445380][ T5901] usb 4-1: config 0 descriptor?? [ 1478.460338][ T4836] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1478.469673][ T5901] symbolserial 4-1:0.175: symbol converter detected [ 1478.509149][ T5901] usb 4-1: symbol converter now attached to ttyUSB0 [ 1478.601409][T27769] loop5: detected capacity change from 0 to 32768 [ 1478.641860][ T4836] usb 1-1: Using ep0 maxpacket: 8 [ 1478.664929][ T4836] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1478.713477][ T4836] usb 1-1: config 4 interface 0 has no altsetting 0 [ 1478.749496][ T4836] usb 1-1: string descriptor 0 read error: -22 [ 1478.767005][ T4836] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1478.808506][ T4836] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1478.833108][ T5901] usb 4-1: USB disconnect, device number 113 [ 1478.895079][ T4836] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1478.903786][ T5901] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 1478.934766][ T5901] symbolserial 4-1:0.175: device disconnected [ 1478.960207][ T4836] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1479.007684][ T4836] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1479.071362][ T4836] usb 1-1: media controller created [ 1479.233643][ T4836] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1479.593293][ T4836] usb 1-1: USB disconnect, device number 102 [ 1479.998440][ T5901] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1480.169058][ T5901] usb 3-1: Using ep0 maxpacket: 8 [ 1480.178256][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1480.200557][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1480.219804][ T5901] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1480.251656][ T5901] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 68 [ 1480.272664][ T5901] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1480.292375][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1480.325587][ T5901] usb 3-1: config 0 descriptor?? [ 1480.344277][T27843] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1480.408167][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1480.809343][ T4836] usb 3-1: USB disconnect, device number 108 [ 1480.810114][ T5915] Bluetooth: hci6: Opcode 0x0c03 failed: -71 [ 1481.794980][T29850] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1481.825869][ T4836] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1481.889775][T27931] loop3: detected capacity change from 0 to 256 [ 1481.901313][T27932] netlink: 'syz.1.14597': attribute type 1 has an invalid length. [ 1481.974169][T29850] usb 5-1: Using ep0 maxpacket: 8 [ 1481.992543][T29850] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1482.024505][T29850] usb 5-1: config 179 has no interface number 0 [ 1482.038112][ T4836] usb 6-1: Using ep0 maxpacket: 16 [ 1482.053875][T29850] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1482.056236][ T4836] usb 6-1: config 1 has an invalid interface number: 193 but max is 0 [ 1482.089714][ T4836] usb 6-1: config 1 has no interface number 0 [ 1482.098387][ T4836] usb 6-1: config 1 interface 193 has no altsetting 0 [ 1482.118833][ T4836] usb 6-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice= 3.b3 [ 1482.127428][T29850] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1482.161669][ T4836] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.186970][T29850] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1482.199483][ T4836] usb 6-1: Product: syz [ 1482.217718][ T4836] usb 6-1: Manufacturer: syz [ 1482.224340][T29850] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1482.237709][ T4836] usb 6-1: SerialNumber: syz [ 1482.262910][T29850] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1482.319487][T29850] usb 5-1: config 179 interface 65 has no altsetting 0 [ 1482.348130][T29850] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1482.385368][T29850] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1482.598248][ T4836] usb 6-1: USB disconnect, device number 11 [ 1482.640234][T29850] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input132 [ 1482.776959][T27974] netlink: 'syz.1.14607': attribute type 7 has an invalid length. [ 1482.800761][ T4974] input input132: unable to receive magic message: -110 [ 1482.881584][ T4974] input input132: unable to receive magic message: -32 [ 1482.889628][T21322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1482.958066][T21322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1483.042765][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1483.051209][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1483.061560][T29850] usb 5-1: USB disconnect, device number 126 [ 1483.663688][T28028] sctp: [Deprecated]: syz.1.14619 (pid 28028) Use of int in max_burst socket option deprecated. [ 1483.663688][T28028] Use struct sctp_assoc_value instead [ 1483.853922][T29850] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1484.049748][T29850] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1484.083714][T29850] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1484.121834][T29850] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 1484.158322][T29850] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1484.189382][T29850] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1484.225275][T29850] usb 6-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 1484.251326][T28058] netlink: 768 bytes leftover after parsing attributes in process `syz.4.14629'. [ 1484.263589][T29850] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1484.294059][T29850] usb 6-1: Product: syz [ 1484.304019][T29850] usb 6-1: Manufacturer: syz [ 1484.313049][T29850] usb 6-1: SerialNumber: syz [ 1484.409204][ T5901] usb 1-1: new full-speed USB device number 103 using dummy_hcd [ 1484.627175][ T5901] usb 1-1: config 0 has an invalid interface number: 143 but max is 0 [ 1484.654806][ T5901] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1484.698278][ T5901] usb 1-1: config 0 has no interface number 0 [ 1484.734105][ T5901] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 1484.781186][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1484.811512][ T5901] usb 1-1: Product: syz [ 1484.835018][ T5901] usb 1-1: Manufacturer: syz [ 1484.863284][ T5901] usb 1-1: SerialNumber: syz [ 1484.896637][ T5901] usb 1-1: config 0 descriptor?? [ 1484.990312][T29850] usb 6-1: USB disconnect, device number 12 [ 1485.241222][ T4836] usb 1-1: USB disconnect, device number 103 [ 1485.246105][T24213] udevd[24213]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1485.491016][T28149] ksmbd: Unknown IPC event: 3, ignore. [ 1486.068176][T28170] netlink: 'syz.5.14648': attribute type 1 has an invalid length. [ 1486.278593][T28186] loop4: detected capacity change from 0 to 1024 [ 1486.344206][T28186] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1486.411743][T28194] netlink: 32 bytes leftover after parsing attributes in process `syz.3.14655'. [ 1486.439999][T29850] usb 1-1: new full-speed USB device number 104 using dummy_hcd [ 1486.632859][T29850] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1486.669904][T29850] usb 1-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 1486.695746][T29850] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.698193][T28207] random: crng reseeded on system resumption [ 1486.719624][T29850] usb 1-1: Product: syz [ 1486.733037][T29850] usb 1-1: Manufacturer: syz [ 1486.733085][T29850] usb 1-1: SerialNumber: syz [ 1486.759117][T29850] usb 1-1: config 0 descriptor?? [ 1486.759203][ T4836] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1486.875827][T29850] mvusb_mdio 1-1:0.0: probe with driver mvusb_mdio failed with error -5 [ 1486.926068][ T4836] usb 5-1: config 0 has an invalid interface number: 207 but max is 0 [ 1486.950622][ T4836] usb 5-1: config 0 has an invalid descriptor of length 111, skipping remainder of the config [ 1486.996284][ T4836] usb 5-1: config 0 has no interface number 0 [ 1487.026812][ T4836] usb 5-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd [ 1487.057748][ T4836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.084553][ T4836] usb 5-1: Product: syz [ 1487.102857][ T4836] usb 5-1: Manufacturer: syz [ 1487.119707][ T4836] usb 5-1: SerialNumber: syz [ 1487.148305][ T4836] usb 5-1: config 0 descriptor?? [ 1487.171173][T29850] usb 1-1: USB disconnect, device number 104 [ 1487.392882][ T4836] qmi_wwan 5-1:0.207: probe with driver qmi_wwan failed with error -22 [ 1487.428844][ T4836] usb 5-1: USB disconnect, device number 127 [ 1487.857207][T28268] CIFS: VFS: UNC: missing share name [ 1487.881561][T28268] CIFS: VFS: Malformed UNC in devname [ 1487.927473][T28179] Process accounting paused [ 1488.137954][T28280] vlan0: entered promiscuous mode [ 1488.166871][T28280] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 1488.256790][T28289] loop3: detected capacity change from 0 to 256 [ 1488.285642][T28289] exfat: Deprecated parameter 'namecase' [ 1488.313058][T28289] exfat: Deprecated parameter 'namecase' [ 1488.437310][T28289] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 1489.418129][ T5901] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1489.538646][T28354] openvswitch: netlink: IP tunnel dst address not specified [ 1489.610447][ T5901] usb 1-1: Using ep0 maxpacket: 16 [ 1489.630763][ T5901] usb 1-1: config 251 has an invalid interface number: 202 but max is 0 [ 1489.657882][ T5901] usb 1-1: config 251 has no interface number 0 [ 1489.692007][ T5901] usb 1-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 1489.738604][ T5901] usb 1-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1489.788794][ T5901] usb 1-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1489.831905][ T5901] usb 1-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 1489.864774][ T5901] usb 1-1: config 251 interface 202 altsetting 1 endpoint 0x81 has invalid maxpacket 29440, setting to 1024 [ 1489.919902][ T5901] usb 1-1: config 251 interface 202 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 1024 [ 1489.955302][ T5901] usb 1-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1490.008900][ T5901] usb 1-1: config 251 interface 202 has no altsetting 0 [ 1490.042352][ T5901] usb 1-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 1490.063564][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1490.098953][ T5901] usb 1-1: Product: syz [ 1490.116681][ T5901] usb 1-1: SerialNumber: syz [ 1490.155984][T28332] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1490.179765][T28332] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1490.504797][ T5901] cxacru 1-1:251.202: send of cm 0x90 failed (-71) [ 1490.549522][ T5901] cxacru 1-1:251.202: usbatm_usb_probe: invalid endpoint 02! [ 1490.569819][ T5901] cxacru 1-1:251.202: probe with driver cxacru failed with error -22 [ 1490.612704][ T5901] usb 1-1: USB disconnect, device number 105 [ 1490.666091][T28413] openvswitch: netlink: Actions may not be safe on all matching packets [ 1491.322754][T28452] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1491.764648][T28473] netlink: 44 bytes leftover after parsing attributes in process `syz.3.14733'. [ 1491.904076][T28481] loop5: detected capacity change from 0 to 64 [ 1492.613262][T28516] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1492.635044][ T30] audit: type=1326 audit(1434.009:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28523 comm="syz.2.14751" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f619f99ce59 code=0x7ffc0000 [ 1492.768867][ T30] audit: type=1326 audit(1434.037:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28523 comm="syz.2.14751" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f619f99ce59 code=0x7ffc0000 [ 1492.870232][ T30] audit: type=1326 audit(1434.037:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28523 comm="syz.2.14751" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f619f99ce59 code=0x7ffc0000 [ 1492.972754][ T30] audit: type=1326 audit(1434.037:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28523 comm="syz.2.14751" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f619f99ce59 code=0x7ffc0000 [ 1493.088535][ T30] audit: type=1326 audit(1434.037:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28523 comm="syz.2.14751" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f619f99ce59 code=0x7ffc0000 [ 1493.196962][ T30] audit: type=1326 audit(1434.037:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28523 comm="syz.2.14751" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f619f99ce59 code=0x7ffc0000 [ 1493.305355][ T30] audit: type=1326 audit(1434.037:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28523 comm="syz.2.14751" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f619f99ce59 code=0x7ffc0000 [ 1493.416383][ T30] audit: type=1326 audit(1434.037:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28523 comm="syz.2.14751" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f619f99ce59 code=0x7ffc0000 [ 1493.494827][ T30] audit: type=1326 audit(1434.037:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28523 comm="syz.2.14751" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f619f99ce59 code=0x7ffc0000 [ 1493.605041][T29850] usb 3-1: new full-speed USB device number 109 using dummy_hcd [ 1493.769784][T29850] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1493.796449][T29850] usb 3-1: not running at top speed; connect to a high speed hub [ 1493.829433][T29850] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1493.853526][T28580] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1493.873659][T29850] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1493.927300][T29850] usb 3-1: too many endpoints for config 1 interface 1 altsetting 23: 170, using maximum allowed: 30 [ 1493.959413][T29850] usb 3-1: config 1 interface 1 altsetting 23 has 0 endpoint descriptors, different from the interface descriptor's value: 170 [ 1494.009255][T29850] usb 3-1: config 1 interface 1 has no altsetting 0 [ 1494.040373][T29850] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1494.055127][T29850] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1494.073724][T29850] usb 3-1: Product: syz [ 1494.081405][T29850] usb 3-1: Manufacturer: syz [ 1494.086457][T29850] usb 3-1: SerialNumber: syz [ 1494.115873][T28554] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1494.174535][T28597] loop4: detected capacity change from 0 to 16 [ 1494.201256][T28597] erofs (device loop4): mounted with root inode @ nid 36. [ 1494.300136][ T4836] usb 1-1: new full-speed USB device number 106 using dummy_hcd [ 1494.402361][T29850] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 1494.438504][T11673] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1494.487069][ T4836] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 1494.504763][T29850] usb 3-1: USB disconnect, device number 109 [ 1494.510881][ T4836] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1494.543875][ T4836] usb 1-1: config 0 has no interface number 0 [ 1494.559200][T28623] netlink: 'syz.4.14776': attribute type 1 has an invalid length. [ 1494.569986][ T4836] usb 1-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1494.584692][T28623] netlink: 228 bytes leftover after parsing attributes in process `syz.4.14776'. [ 1494.609946][ T4836] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1494.623957][ T4836] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1494.642439][T11673] usb 6-1: Using ep0 maxpacket: 8 [ 1494.661879][T11673] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1494.674626][ T4836] usb 1-1: config 0 interface 52 has no altsetting 0 [ 1494.683177][T11673] usb 6-1: config 179 has no interface number 0 [ 1494.689983][T28626] loop3: detected capacity change from 0 to 1024 [ 1494.705179][T11673] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1494.721216][ T4836] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 1494.739507][ T4836] usb 1-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 1494.752307][T11673] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1494.778985][ T4836] usb 1-1: Product: syz [ 1494.788732][ T4836] usb 1-1: SerialNumber: syz [ 1494.793860][T11673] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1494.820320][ T4836] usb 1-1: config 0 descriptor?? [ 1494.833189][T11673] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1494.859009][T11673] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1494.874044][T11673] usb 6-1: config 179 interface 65 has no altsetting 0 [ 1494.883454][T11673] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1494.893397][T11673] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1494.949585][T11673] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input134 [ 1495.037992][ T4974] input input134: unable to receive magic message: -110 [ 1495.092215][ T4974] input input134: unable to receive magic message: -32 [ 1495.110918][ T2018] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1495.138303][ T4974] input input134: unable to receive magic message: -32 [ 1495.155965][ T4836] input: syz (Stick) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input135 [ 1495.189713][ T4974] input input134: unable to receive magic message: -32 [ 1495.281771][ T2018] usb 5-1: Using ep0 maxpacket: 8 [ 1495.312852][ T2018] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1495.343798][ T2018] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1495.365563][ T4974] input input134: unable to receive magic message: -32 [ 1495.386873][ T2018] usb 5-1: Product: syz [ 1495.392181][ T2018] usb 5-1: Manufacturer: syz [ 1495.396046][T29850] usb 1-1: USB disconnect, device number 106 [ 1495.396847][ T2018] usb 5-1: SerialNumber: syz [ 1495.435095][ T4974] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -19 [ 1495.480594][ T4974] input input134: unable to receive magic message: -32 [ 1495.496789][ T4836] usb 6-1: USB disconnect, device number 13 [ 1495.496871][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1495.511490][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1495.542480][ T2018] usb 5-1: config 0 descriptor?? [ 1495.572082][ T2018] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1495.850662][T28708] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14788'. [ 1495.861960][T28701] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1495.884747][T28708] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14788'. [ 1496.029857][ T2018] gspca_zc3xx: reg_r err -71 [ 1496.038473][ T2018] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1496.101474][ T2018] usb 5-1: USB disconnect, device number 2 [ 1496.456872][ T4836] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1496.610960][T28745] loop1: detected capacity change from 0 to 2048 [ 1496.648929][ T4836] usb 4-1: Using ep0 maxpacket: 16 [ 1496.666004][T28751] openvswitch: netlink: VXLAN extension 54 out of range max 1 [ 1496.668938][ T4836] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1496.678945][T28745] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1496.703055][ T4836] usb 4-1: config 0 has no interface number 0 [ 1496.730502][ T4836] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1496.773046][ T4836] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1496.806792][ T4836] usb 4-1: Product: syz [ 1496.825180][ T4836] usb 4-1: SerialNumber: syz [ 1496.889871][ T4836] usb 4-1: config 0 descriptor?? [ 1496.947853][ T4836] cm109 4-1:0.8: invalid payload size 32, expected 4 [ 1496.985162][ T4836] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input136 [ 1497.261031][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1497.268341][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1497.272260][T29850] usb 4-1: USB disconnect, device number 114 [ 1497.275319][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1497.302804][T28777] xt_CONNSECMARK: invalid mode: 66 [ 1497.469019][T29850] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1497.603191][T28784] nvme_fabrics: missing parameter 'transport=%s' [ 1497.623591][T28784] nvme_fabrics: missing parameter 'nqn=%s' [ 1497.940259][T28807] loop1: detected capacity change from 0 to 16 [ 1498.014263][T28807] erofs (device loop1): mounted with root inode @ nid 36. [ 1498.392751][T28825] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.14817'. [ 1498.445670][T28825] openvswitch: netlink: Message has 512 unknown bytes. [ 1498.638676][T28836] netlink: 68 bytes leftover after parsing attributes in process `syz.0.14821'. [ 1498.688632][T28836] netlink: 68 bytes leftover after parsing attributes in process `syz.0.14821'. [ 1498.828029][T28848] netlink: 'syz.4.14825': attribute type 1 has an invalid length. [ 1499.081190][T28859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14828'. [ 1499.227278][T28875] xt_l2tp: v2 doesn't support IP mode [ 1499.914068][T28930] loop3: detected capacity change from 0 to 1024 [ 1499.946479][T28930] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1500.046577][T28944] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14845'. [ 1500.084051][T28944] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14845'. [ 1500.128840][T28944] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14845'. [ 1500.163047][T29850] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1500.174760][T28944] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14845'. [ 1500.194670][T28944] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14845'. [ 1500.259031][T28944] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14845'. [ 1500.301709][ T4836] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1500.365459][T29850] usb 1-1: Using ep0 maxpacket: 32 [ 1500.390046][T29850] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1500.423893][T28961] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 1500.426214][T29850] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1500.464822][T29850] usb 1-1: Product: syz [ 1500.474087][T29850] usb 1-1: Manufacturer: syz [ 1500.492081][T29850] usb 1-1: SerialNumber: syz [ 1500.509905][ T4836] usb 4-1: config 0 has an invalid interface number: 207 but max is 0 [ 1500.517920][T29850] usb 1-1: config 0 descriptor?? [ 1500.545352][T29850] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1500.567805][ T4836] usb 4-1: config 0 has an invalid descriptor of length 111, skipping remainder of the config [ 1500.602459][ T4836] usb 4-1: config 0 has no interface number 0 [ 1500.632246][ T4836] usb 4-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd [ 1500.658383][ T4836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1500.689571][ T4836] usb 4-1: Product: syz [ 1500.702478][ T4836] usb 4-1: Manufacturer: syz [ 1500.717396][ T4836] usb 4-1: SerialNumber: syz [ 1500.752996][ T4836] usb 4-1: config 0 descriptor?? [ 1500.991085][ T4836] qmi_wwan 4-1:0.207: probe with driver qmi_wwan failed with error -22 [ 1500.996339][T29850] gspca_ov534_9: reg_w failed -71 [ 1501.031511][ T4836] usb 4-1: USB disconnect, device number 115 [ 1501.155826][ T10] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1501.303419][T29008] cgroup: release_agent respecified [ 1501.342320][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1501.354054][ T10] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1501.371133][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1501.380850][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1501.389083][ T10] usb 6-1: Product: syz [ 1501.394503][ T10] usb 6-1: Manufacturer: syz [ 1501.399211][ T10] usb 6-1: SerialNumber: syz [ 1501.436467][ T10] cdc_ncm 6-1:1.0: skipping garbage [ 1501.448787][ T10] cdc_ncm 6-1:1.0: NCM or ECM functional descriptors missing [ 1501.457687][T29850] gspca_ov534_9: Unknown sensor 0000 [ 1501.457787][T29850] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 1501.481333][ T10] cdc_ncm 6-1:1.0: bind() failure [ 1501.506192][T29850] usb 1-1: USB disconnect, device number 107 [ 1501.535815][ T10] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 1501.574733][ T10] cdc_ncm 6-1:1.1: bind() failure [ 1501.777419][ T4836] usb 6-1: USB disconnect, device number 14 [ 1502.025079][T29048] loop1: detected capacity change from 0 to 16 [ 1502.057578][T29048] erofs (device loop1): mounted with root inode @ nid 36. [ 1502.131880][T29048] syz.1.14867: attempt to access beyond end of device [ 1502.131880][T29048] loop1: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1502.205009][T29056] Unsupported ieee802154 address type: 0 [ 1502.281175][T29048] erofs (device loop1): bogus lookback distance 0 @ lcn 8 of nid 89 [ 1502.309763][T29048] erofs (device loop1): readahead error at folio 8 @ nid 89 [ 1502.335891][T29048] syz.1.14867: attempt to access beyond end of device [ 1502.335891][T29048] loop1: rw=524288, sector=16, nr_sectors = 8 limit=16 [ 1502.403569][T29048] syz.1.14867: attempt to access beyond end of device [ 1502.403569][T29048] loop1: rw=524288, sector=32, nr_sectors = 24 limit=16 [ 1502.594878][T29048] erofs (device loop1): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 1502.639736][T29074] netlink: 'syz.5.14874': attribute type 3 has an invalid length. [ 1502.649453][T29048] erofs (device loop1): read error -117 @ 1 of nid 89 [ 1502.682586][T29074] netlink: 'syz.5.14874': attribute type 1 has an invalid length. [ 1502.690449][ T30] audit: type=1800 audit(1443.418:194): pid=29048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.14867" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 1503.041110][T29086] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1503.061128][T29086] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1503.086745][T29086] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1503.097200][T29094] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1503.121983][T29086] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1504.453532][T29161] vti0: entered promiscuous mode [ 1504.462563][T29161] vti0: entered allmulticast mode [ 1504.636514][T29176] xt_hashlimit: max too large, truncated to 1048576 [ 1504.690305][T29179] __nla_validate_parse: 16 callbacks suppressed [ 1504.690334][T29179] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14906'. [ 1504.744455][T29179] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14906'. [ 1505.017345][T29195] misc userio: The device must be registered before sending interrupts [ 1505.783079][T29226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14922'. [ 1506.974916][T29295] new mount options do not match the existing superblock, will be ignored [ 1507.051418][ T10] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1507.083443][T29850] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1507.237108][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1507.269079][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1507.286457][T29850] usb 1-1: Using ep0 maxpacket: 8 [ 1507.327192][T29850] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1507.340123][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1507.364976][T29850] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1507.389611][ T10] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1507.404328][T29850] usb 1-1: Product: syz [ 1507.409910][T29850] usb 1-1: Manufacturer: syz [ 1507.417986][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1507.433005][T29850] usb 1-1: SerialNumber: syz [ 1507.446382][ T10] usb 4-1: Product: syz [ 1507.458650][ T10] usb 4-1: Manufacturer: syz [ 1507.465008][T29850] usb 1-1: config 0 descriptor?? [ 1507.475022][ T10] usb 4-1: SerialNumber: syz [ 1507.495372][T29850] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1507.524021][ T10] usb 4-1: config 0 descriptor?? [ 1507.528734][T29316] ip6t_srh: unknown srh match flags 4000 [ 1507.533921][T29281] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1507.562759][T29281] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1507.598057][ T10] usb 4-1: ucan: probing device on interface #0 [ 1507.956330][T29850] gspca_sq930x: ucbus_write failed -71 [ 1507.978145][T29850] sq930x 1-1:0.0: probe with driver sq930x failed with error -71 [ 1508.022634][T29850] usb 1-1: USB disconnect, device number 108 [ 1508.072242][ T10] usb 4-1: ucan: failed to retrieve device info [ 1508.109877][ T10] usb 4-1: ucan: probe failed; try to update the device firmware [ 1508.123653][T29350] loop1: detected capacity change from 0 to 256 [ 1508.155884][T29350] exfat: Deprecated parameter 'utf8' [ 1508.164248][ T10] usb 4-1: USB disconnect, device number 116 [ 1508.176285][T29350] exfat: Deprecated parameter 'namecase' [ 1508.252245][T29350] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 1508.609269][T29377] xt_bpf: check failed: parse error [ 1508.781031][T29390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14968'. [ 1508.890086][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1509.084027][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 1509.107118][ T10] usb 5-1: config 251 has an invalid interface number: 202 but max is 0 [ 1509.116060][T29850] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1509.143198][ T10] usb 5-1: config 251 has no interface number 0 [ 1509.161718][ T10] usb 5-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 1509.194540][ T10] usb 5-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1509.237571][ T10] usb 5-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1509.269030][ T10] usb 5-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 1509.288958][ T10] usb 5-1: config 251 interface 202 altsetting 1 endpoint 0x81 has invalid maxpacket 29440, setting to 1024 [ 1509.315361][ T10] usb 5-1: config 251 interface 202 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 1024 [ 1509.332348][T29850] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1509.352929][T29850] usb 6-1: config index 0 descriptor too short (expected 40961, got 257) [ 1509.365403][ T10] usb 5-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1509.383486][T29850] usb 6-1: config 216 has too many interfaces: 155, using maximum allowed: 32 [ 1509.401944][T29850] usb 6-1: config 216 has an invalid descriptor of length 0, skipping remainder of the config [ 1509.422885][ T10] usb 5-1: config 251 interface 202 has no altsetting 0 [ 1509.434167][T29850] usb 6-1: config 216 has 1 interface, different from the descriptor's value: 155 [ 1509.448954][ T10] usb 5-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 1509.459322][ T10] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1509.470118][T29850] usb 6-1: string descriptor 0 read error: -22 [ 1509.480098][T29850] usb 6-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 1509.490260][ T10] usb 5-1: Product: syz [ 1509.504415][ T10] usb 5-1: SerialNumber: syz [ 1509.517101][T29850] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1509.535399][T29379] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1509.555067][T29379] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1509.867101][ T10] cxacru 5-1:251.202: send of cm 0x90 failed (-71) [ 1509.884582][ T10] cxacru 5-1:251.202: usbatm_usb_probe: invalid endpoint 02! [ 1509.908888][ T10] cxacru 5-1:251.202: probe with driver cxacru failed with error -22 [ 1509.947954][T29450] loop2: detected capacity change from 0 to 512 [ 1509.949030][ T10] usb 5-1: USB disconnect, device number 3 [ 1510.016010][T29450] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1510.043981][T29450] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1510.118325][T29450] EXT4-fs warning (device loop2): ext4_enable_quotas:7272: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 1510.222156][T29450] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 1510.278928][T29450] EXT4-fs error (device loop2): ext4_validate_block_bitmap:440: comm syz.2.14986: bg 0: block 64: padding at end of block bitmap is not set [ 1510.326149][T29450] loop2: lost filesystem error report for type 5 error -117 [ 1510.326697][T29450] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1510.328076][T29850] snd-usb-audio 6-1:216.0: probe with driver snd-usb-audio failed with error -71 [ 1510.334216][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1510.334254][ C1] EXT4-fs (loop2): initial error at time 1450: ext4_validate_block_bitmap:440 [ 1510.334299][ C1] EXT4-fs (loop2): last error at time 1450: ext4_validate_block_bitmap:440 [ 1510.424671][T18694] udevd[18694]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:216.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1510.441576][T29450] loop2: lost filesystem error report for type 5 error -117 [ 1510.456145][T29450] EXT4-fs (loop2): 1 truncate cleaned up [ 1510.476574][T29484] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14992'. [ 1510.496852][T29850] usb 6-1: USB disconnect, device number 15 [ 1510.550219][T29450] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1510.787056][ T5916] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1511.067819][T29512] ieee802154 phy1 wpan1: encryption failed: -22 [ 1511.398324][ T4836] usb 3-1: new full-speed USB device number 110 using dummy_hcd [ 1511.589467][ T4836] usb 3-1: config 0 has an invalid interface number: 176 but max is 2 [ 1511.621839][ T4836] usb 3-1: config 0 has no interface number 1 [ 1511.643979][ T4836] usb 3-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 1511.696487][ T4836] usb 3-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1511.751424][ T4836] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1511.771880][ T4836] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 1511.814153][ T4836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1511.853553][ T4836] usb 3-1: config 0 descriptor?? [ 1511.882136][T29560] autofs4:pid:29560:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.768), cmd(0xc0189375) [ 1511.937897][T29560] autofs4:pid:29560:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 1512.130298][ T4836] usb 3-1: Could not set interface, error -71 [ 1512.197864][ T4836] qmi_wwan 3-1:0.0: probe with driver qmi_wwan failed with error -22 [ 1512.205721][T29575] netlink: 768 bytes leftover after parsing attributes in process `syz.0.15018'. [ 1512.270969][ T4836] usb 3-1: USB disconnect, device number 110 [ 1512.692628][T29604] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1513.993606][T29850] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1514.021110][T29663] xt_socket: unknown flags 0x48 [ 1514.160831][T29850] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1514.200724][T29850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1514.239236][T29850] usb 2-1: Product: syz [ 1514.253180][T29850] usb 2-1: Manufacturer: syz [ 1514.271447][T29850] usb 2-1: SerialNumber: syz [ 1514.302118][T29850] usb 2-1: config 0 descriptor?? [ 1514.479044][T29640] loop4: detected capacity change from 0 to 32768 [ 1514.549552][T29640] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1514.552147][T29685] netlink: 'syz.3.15053': attribute type 12 has an invalid length. [ 1514.747449][T29640] XFS (loop4): Ending clean mount [ 1514.815714][T29850] usb 2-1: f81604_write: reg: 105 data: 0 failed: -EPROTO [ 1514.832520][T29850] f81604 2-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 1514.853577][T29850] f81604 2-1:0.0: probe with driver f81604 failed with error -71 [ 1514.870781][T29850] usb 2-1: USB disconnect, device number 100 [ 1514.978844][ T5927] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1515.286000][T29722] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1515.468021][ T4836] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1515.689170][ T4836] usb 6-1: Using ep0 maxpacket: 16 [ 1515.730836][ T4836] usb 6-1: config 251 has an invalid interface number: 202 but max is 0 [ 1515.764111][ T4836] usb 6-1: config 251 has no interface number 0 [ 1515.798771][ T4836] usb 6-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 1515.820272][ T4836] usb 6-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1515.857189][ T4836] usb 6-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1515.905203][ T4836] usb 6-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 1515.941122][ T4836] usb 6-1: config 251 interface 202 altsetting 1 endpoint 0x81 has invalid maxpacket 29440, setting to 1024 [ 1516.005457][ T4836] usb 6-1: config 251 interface 202 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 1024 [ 1516.026335][ T4836] usb 6-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1516.056099][ T4836] usb 6-1: config 251 interface 202 has no altsetting 0 [ 1516.077105][ T4836] usb 6-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 1516.093009][ T4836] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1516.097774][ T10] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1516.143951][ T4836] usb 6-1: Product: syz [ 1516.157475][ T4836] usb 6-1: SerialNumber: syz [ 1516.210515][T29715] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1516.234223][T29715] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1516.279771][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1516.295691][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1516.334879][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1516.375876][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1516.404710][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1516.434002][ T10] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1516.452070][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1516.470912][ T10] usb 4-1: Product: syz [ 1516.489209][ T10] usb 4-1: Manufacturer: syz [ 1516.505031][ T10] usb 4-1: SerialNumber: syz [ 1516.530686][ T4836] cxacru 6-1:251.202: send of cm 0x90 failed (-71) [ 1516.560274][ T10] usb 4-1: config 0 descriptor?? [ 1516.562933][ T4836] cxacru 6-1:251.202: usbatm_usb_probe: invalid endpoint 02! [ 1516.611047][ T4836] cxacru 6-1:251.202: probe with driver cxacru failed with error -22 [ 1516.700450][ T4836] usb 6-1: USB disconnect, device number 16 [ 1516.939017][ T2018] usb 4-1: USB disconnect, device number 117 [ 1517.132688][T29799] loop2: detected capacity change from 0 to 256 [ 1517.318020][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1517.512142][ T10] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1517.550793][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1517.597641][ T10] usb 5-1: config 0 descriptor?? [ 1517.638369][ T10] cp210x 5-1:0.0: cp210x converter detected [ 1518.040470][T29847] netlink: 'syz.3.15094': attribute type 1 has an invalid length. [ 1518.118581][ T10] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1518.164066][ T10] usb 5-1: USB disconnect, device number 4 [ 1518.273297][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1518.288299][T29862] netlink: 'syz.1.15095': attribute type 1 has an invalid length. [ 1518.296690][ T10] cp210x 5-1:0.0: device disconnected [ 1518.336344][T29862] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15095'. [ 1518.541880][T29885] xt_l2tp: invalid flags combination: c [ 1518.608179][ T4836] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1518.806071][ T4836] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1518.833542][ T4836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1518.862806][ T4836] usb 1-1: Product: syz [ 1518.878228][ T4836] usb 1-1: Manufacturer: syz [ 1518.894349][ T4836] usb 1-1: SerialNumber: syz [ 1518.950687][ T4836] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1518.970789][ T2018] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1519.517869][T29850] usb 1-1: USB disconnect, device number 109 [ 1519.739946][ T10] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1519.921753][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1519.941692][ T10] usb 4-1: config 0 has an invalid interface number: 107 but max is 0 [ 1519.960501][ T10] usb 4-1: config 0 has no interface number 0 [ 1519.984147][ T10] usb 4-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 55, changing to 9 [ 1520.028443][ T10] usb 4-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 8496, setting to 1024 [ 1520.069702][ T10] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 1520.103257][ T10] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1520.135465][ T10] usb 4-1: Product: syz [ 1520.141186][ T2018] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1520.150692][ T10] usb 4-1: Manufacturer: syz [ 1520.166215][ T10] usb 4-1: SerialNumber: syz [ 1520.178900][ T2018] ath9k_htc: Failed to initialize the device [ 1520.186303][T29972] netlink: 'syz.1.15124': attribute type 31 has an invalid length. [ 1520.202563][ T10] usb 4-1: config 0 descriptor?? [ 1520.214941][T29869] Process accounting resumed [ 1520.220980][T29850] usb 1-1: ath9k_htc: USB layer deinitialized [ 1520.239797][ T10] keyspan 4-1:0.107: Keyspan 4 port adapter converter detected [ 1520.275817][ T10] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 81 [ 1520.324076][ T10] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 1 [ 1520.385478][ T10] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1520.429122][ T10] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 2 [ 1520.484428][ T10] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1520.526646][ T10] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 4 [ 1520.588169][ T10] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1520.612221][ T10] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 6 [ 1520.645182][ T10] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1520.688005][ T10] usb 4-1: USB disconnect, device number 118 [ 1520.752842][ T10] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1520.833857][ T10] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1520.937835][ T10] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1521.043709][ T10] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1521.079999][ T10] keyspan 4-1:0.107: device disconnected [ 1521.875061][T30085] loop5: detected capacity change from 0 to 1024 [ 1521.921821][T30085] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1522.713609][T30125] ip6t_REJECT: ECHOREPLY is not supported [ 1523.003644][T30137] bond0: Error: CAN devices cannot be enslaved [ 1523.320228][T30155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15169'. [ 1523.343357][T30155] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1524.578710][ T10] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1524.788627][ T10] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1524.809306][T30171] loop5: detected capacity change from 0 to 32768 [ 1524.823762][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1524.848644][T30171] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.15179 (30171) [ 1524.862370][ T10] usb 3-1: Product: syz [ 1524.883710][ T10] usb 3-1: Manufacturer: syz [ 1524.907194][ T10] usb 3-1: SerialNumber: syz [ 1524.917562][T30171] BTRFS info (device loop5): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1524.951610][T30171] BTRFS info (device loop5): using sha256 checksum algorithm [ 1524.967595][ T10] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1525.001635][T11645] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1525.189265][T30171] BTRFS info (device loop5): turning off barriers [ 1525.248907][T30171] BTRFS info (device loop5): enabling free space tree [ 1525.616366][T11673] usb 3-1: USB disconnect, device number 111 [ 1525.667963][ T5934] BTRFS info (device loop5): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1526.287889][T11645] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1526.295077][T11645] ath9k_htc: Failed to initialize the device [ 1526.315447][T11673] usb 3-1: ath9k_htc: USB layer deinitialized [ 1526.577905][T30309] netdevsim netdevsim2: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 1526.707880][T30312] geneve3: entered promiscuous mode [ 1526.725121][T30312] geneve3: entered allmulticast mode [ 1527.569012][T11645] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1527.585074][T29850] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1528.540509][T11645] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1528.732848][T11645] usb 2-1: Using ep0 maxpacket: 32 [ 1528.751689][T11645] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 1528.788451][T11645] usb 2-1: config 0 has no interface number 0 [ 1528.808053][T11645] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1528.836923][T11645] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1528.850229][T11645] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1528.862396][T11645] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1528.880474][T11645] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1528.931126][T11645] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1528.986098][T11645] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1529.025750][T11645] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 65024, setting to 1024 [ 1529.060283][T11645] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1529.081518][T30427] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1529.087035][T11645] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1529.124273][T11645] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1529.156777][T11645] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1529.177773][T11645] usb 2-1: Product: syz [ 1529.190079][T11645] usb 2-1: Manufacturer: syz [ 1529.200076][T11645] usb 2-1: SerialNumber: syz [ 1529.227428][T11645] usb 2-1: config 0 descriptor?? [ 1529.240351][T30384] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1529.253391][T30384] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1529.266565][T29850] usb 3-1: new full-speed USB device number 112 using dummy_hcd [ 1529.286849][T11645] usb 2-1: will this work? Response EP is not usually 3 [ 1529.306514][T11645] usb 2-1: will this work? Image data EP is not usually 2 [ 1529.319977][T11673] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1529.338429][T11645] scsi host1: microtekX6 [ 1529.445028][T29850] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1529.470888][T29850] usb 3-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=87.bd [ 1529.501528][T11673] usb 5-1: Using ep0 maxpacket: 8 [ 1529.506436][T29850] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1529.514559][T11673] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1529.537290][T29850] usb 3-1: Product: syz [ 1529.545269][T29850] usb 3-1: Manufacturer: syz [ 1529.555247][T29850] usb 3-1: SerialNumber: syz [ 1529.570337][T11673] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1529.571024][T29850] usb 3-1: config 0 descriptor?? [ 1529.606129][T11673] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1529.606512][T29850] ums_eneub6250 3-1:0.0: USB Mass Storage device detected [ 1529.624832][ T4836] usb 2-1: USB disconnect, device number 101 [ 1529.649451][T11673] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1529.704549][T11673] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1529.721804][T11673] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1529.732385][T11673] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1529.766226][ T2018] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1529.812466][T11673] usb 5-1: config 0 descriptor?? [ 1529.819364][T30426] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1529.918960][T29850] usb 3-1: USB disconnect, device number 112 [ 1530.001986][ T2018] usb 1-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 1530.032355][ T2018] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1530.050992][ T2018] usb 1-1: Product: syz [ 1530.079217][ T2018] usb 1-1: Manufacturer: syz [ 1530.098390][ T2018] usb 1-1: SerialNumber: syz [ 1530.159008][ T2018] usb 1-1: config 0 descriptor?? [ 1530.350572][ T5915] Bluetooth: hci6: Opcode 0x0c03 failed: -71 [ 1530.367266][ T10] usb 5-1: USB disconnect, device number 5 [ 1530.430114][ T2018] int51x1 1-1:0.0: probe with driver int51x1 failed with error -22 [ 1530.685571][ T2018] usb 1-1: USB disconnect, device number 110 [ 1530.827860][T30522] netlink: 'syz.3.15264': attribute type 6 has an invalid length. [ 1531.809074][ T10] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1531.982172][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 1532.007378][ T10] usb 1-1: config 4 has an invalid interface number: 202 but max is 2 [ 1532.038566][ T10] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1532.077781][ T10] usb 1-1: config 4 has 1 interface, different from the descriptor's value: 3 [ 1532.107227][ T10] usb 1-1: config 4 has no interface number 0 [ 1532.132972][ T10] usb 1-1: too many endpoints for config 4 interface 202 altsetting 31: 115, using maximum allowed: 30 [ 1532.184586][ T10] usb 1-1: config 4 interface 202 altsetting 31 has 0 endpoint descriptors, different from the interface descriptor's value: 115 [ 1532.226281][ T10] usb 1-1: config 4 interface 202 has no altsetting 0 [ 1532.256434][ T10] usb 1-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice=9a.c8 [ 1532.285914][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1532.300291][ T4836] usb 6-1: new low-speed USB device number 17 using dummy_hcd [ 1532.314599][ T10] usb 1-1: Product: syz [ 1532.321601][T30609] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1532.334182][ T10] usb 1-1: Manufacturer: syz [ 1532.359578][ T10] usb 1-1: SerialNumber: syz [ 1532.477979][ T4836] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1532.501259][ T4836] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1023, setting to 0 [ 1532.543294][ T4836] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 241, changing to 4 [ 1532.592720][ T4836] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 16, setting to 0 [ 1532.632961][ T4836] usb 6-1: string descriptor 0 read error: -22 [ 1532.655391][ T4836] usb 6-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 1532.699256][ T4836] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1532.740952][ T10] usb 1-1: USB disconnect, device number 111 [ 1532.762842][ T4836] usb 6-1: low speed audio streaming not supported [ 1532.798175][ T4836] usb 6-1: low speed audio streaming not supported [ 1533.019263][ T4836] usb 6-1: selecting invalid altsetting 1 [ 1533.029055][T30655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15297'. [ 1533.044050][ T4836] snd-usb-us122l 6-1:1.1: usb_set_interface error [ 1533.065963][ T4836] snd-usb-us122l 6-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 1533.149360][ T4836] usb 6-1: USB disconnect, device number 17 [ 1533.265356][T30665] loop3: detected capacity change from 0 to 2048 [ 1533.294899][T30665] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=2362, location=2362 [ 1533.348620][T30665] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1533.410162][T30665] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 1533.457580][T30665] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1533.581706][T30690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15304'. [ 1533.621960][T30696] binder: 30693:30696 ioctl c0306201 200000000040 returned -22 [ 1533.948077][T30710] openvswitch: netlink: VXLAN extension message has 4096 unknown bytes. [ 1534.344573][T30733] loop5: detected capacity change from 0 to 512 [ 1534.422038][T30733] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1534.613059][T30733] Quota error (device loop5): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 1534.636915][T30733] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1534.660416][T30733] EXT4-fs error (device loop5): ext4_acquire_dquot:7039: comm syz.5.15318: Failed to acquire dquot type 0 [ 1534.999295][ T5934] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1535.192954][T30769] loop1: detected capacity change from 0 to 2048 [ 1535.272605][T30769] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1535.881288][T30808] SET target dimension over the limit! [ 1536.198108][ T2018] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1536.394315][ T2018] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1536.451321][ T2018] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1536.453298][T30843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15352'. [ 1536.469685][ T2018] usb 6-1: Product: syz [ 1536.476197][ T2018] usb 6-1: Manufacturer: syz [ 1536.485642][ T2018] usb 6-1: SerialNumber: syz [ 1536.495391][T30844] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15351'. [ 1536.506178][T30845] ALSA: mixer_oss: invalid OSS volume 'u' [ 1536.539429][ T2018] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1536.609021][ T4836] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1536.871724][ C1] usb 6-1: ath: unknown panic pattern! [ 1537.281934][ T2018] usb 6-1: USB disconnect, device number 18 [ 1537.425647][T30883] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1537.432224][T30885] netlink: 'syz.2.15363': attribute type 21 has an invalid length. [ 1537.454978][T30885] netlink: 156 bytes leftover after parsing attributes in process `syz.2.15363'. [ 1537.822163][ T4836] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1537.822786][T11645] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1537.855895][ T4836] ath9k_htc: Failed to initialize the device [ 1537.892328][ T2018] usb 6-1: ath9k_htc: USB layer deinitialized [ 1538.827439][T30965] netlink: 'syz.5.15390': attribute type 1 has an invalid length. [ 1539.010352][T11645] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1539.070137][T30978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15394'. [ 1539.202224][T11645] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1539.203671][T11645] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 1539.203739][T11645] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 1539.218230][T11645] usb 4-1: string descriptor 0 read error: -22 [ 1539.218391][T11645] usb 4-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40 [ 1539.218436][T11645] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1539.479671][T31000] loop1: detected capacity change from 0 to 64 [ 1539.534856][T31000] Trying to free block not in datazone [ 1539.582752][T31000] minix_free_block (loop1:21): bit already cleared [ 1539.648885][ T6263] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1539.672958][T31012] xt_bpf: check failed: parse error [ 1539.830204][ T6263] usb 6-1: Using ep0 maxpacket: 16 [ 1539.859465][T11645] usb 4-1: USB disconnect, device number 119 [ 1539.865852][ T6263] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 1539.909120][ T6263] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1539.949128][ T6263] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1539.982377][ T6263] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1540.010632][ T6263] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1540.050009][ T6263] usb 6-1: config 0 has no interface number 0 [ 1540.086311][ T6263] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1540.123750][ T6263] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1540.150569][ T6263] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1540.188677][ T6263] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1540.216672][ T6263] usb 6-1: config 0 interface 125 has no altsetting 0 [ 1540.227591][ T6263] usb 6-1: config 0 interface 125 has no altsetting 2 [ 1540.261974][ T6263] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1540.281422][ T6263] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1540.313319][ T6263] usb 6-1: Product: syz [ 1540.327403][ T6263] usb 6-1: Manufacturer: syz [ 1540.345697][ T6263] usb 6-1: SerialNumber: syz [ 1540.361734][ T6263] usb 6-1: config 0 descriptor?? [ 1540.394041][ T6263] usb 6-1: selecting invalid altsetting 2 [ 1540.627116][ C1] usb 6-1: async_complete: urb error -71 [ 1540.632946][ C1] usb 6-1: async_complete: urb error -71 [ 1540.638783][ C1] usb 6-1: async_complete: urb error -71 [ 1540.644500][ C1] usb 6-1: async_complete: urb error -71 [ 1540.670935][ T6263] get_1284_register: usb error -71 [ 1540.717587][ T6263] usb 6-1: USB disconnect, device number 19 [ 1540.819185][T31080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15416'. [ 1540.884232][T31078] erspan2: entered promiscuous mode [ 1540.905027][T31078] erspan2: entered allmulticast mode [ 1540.939539][T31080] gre0: Master is either lo or non-ether device [ 1541.220477][T31106] netlink: 'syz.1.15425': attribute type 10 has an invalid length. [ 1541.250909][T31106] netlink: 152 bytes leftover after parsing attributes in process `syz.1.15425'. [ 1541.464539][T31115] loop2: detected capacity change from 0 to 512 [ 1541.555268][T31115] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1541.676371][T31115] Quota error (device loop2): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 1541.690151][T31115] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1541.701793][T31115] EXT4-fs error (device loop2): ext4_acquire_dquot:7039: comm syz.2.15427: Failed to acquire dquot type 0 [ 1541.838373][ T5916] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1541.872317][T11645] usb 2-1: new low-speed USB device number 102 using dummy_hcd [ 1542.075116][T11645] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1542.098417][T11645] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 0 [ 1542.120890][T11645] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 8, setting to 0 [ 1542.155681][T11645] usb 2-1: string descriptor 0 read error: -22 [ 1542.163532][T11645] usb 2-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 1542.195375][T11645] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1542.254860][ T2018] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1542.461347][ T2018] usb 5-1: config 0 has an invalid interface number: 197 but max is 0 [ 1542.485673][ T2018] usb 5-1: config 0 has no interface number 0 [ 1542.501142][ T2018] usb 5-1: config 0 has an invalid interface number: 197 but max is 0 [ 1542.516741][ T2018] usb 5-1: config 0 has no interface number 0 [ 1542.536643][ T2018] usb 5-1: config 0 has an invalid interface number: 197 but max is 0 [ 1542.557274][ T2018] usb 5-1: config 0 has no interface number 0 [ 1542.577049][ T2018] usb 5-1: config 0 has an invalid interface number: 197 but max is 0 [ 1542.605356][ T2018] usb 5-1: config 0 has no interface number 0 [ 1542.636954][ T2018] usb 5-1: config 0 has an invalid interface number: 197 but max is 0 [ 1542.668217][ T2018] usb 5-1: config 0 has no interface number 0 [ 1542.693342][ T2018] usb 5-1: config 0 has an invalid interface number: 197 but max is 0 [ 1542.707670][T11645] usb 2-1: low speed audio streaming not supported [ 1542.722794][ T2018] usb 5-1: config 0 has no interface number 0 [ 1542.752417][ T2018] usb 5-1: config 0 has an invalid interface number: 197 but max is 0 [ 1542.783420][ T2018] usb 5-1: config 0 has no interface number 0 [ 1542.810909][ T2018] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 1542.843064][ T2018] usb 5-1: New USB device strings: Mfr=32, Product=187, SerialNumber=229 [ 1542.895479][ T2018] usb 5-1: Product: syz [ 1542.913798][ T2018] usb 5-1: Manufacturer: syz [ 1542.935110][ T2018] usb 5-1: SerialNumber: syz [ 1542.982802][ T2018] usb 5-1: config 0 descriptor?? [ 1543.002785][ T2018] ftdi_sio 5-1:0.197: FTDI USB Serial Device converter detected [ 1543.036083][ T2018] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 1543.057568][T11645] usb 2-1: USB disconnect, device number 102 [ 1543.259023][ T2018] usb 5-1: USB disconnect, device number 6 [ 1543.303324][ T2018] ftdi_sio 5-1:0.197: device disconnected [ 1543.610239][ T4836] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1543.754055][T31262] netlink: 'syz.0.15462': attribute type 3 has an invalid length. [ 1543.784365][ T4836] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1543.821182][ T4836] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1543.822019][T31268] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15464'. [ 1543.856424][ T4836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1543.913643][ T4836] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1544.257485][T31289] tmpfs: Bad value for 'mpol' [ 1544.427614][T31298] sctp: [Deprecated]: syz.4.15473 (pid 31298) Use of int in maxseg socket option. [ 1544.427614][T31298] Use struct sctp_assoc_value instead [ 1544.596746][T31306] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1544.804292][T31315] netlink: 45 bytes leftover after parsing attributes in process `syz.5.15480'. [ 1545.000341][ T4836] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 1545.215847][ T4836] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1545.242258][ T4836] stv0680 4-1:4.0: last error: 86, command = 0x0 [ 1545.276427][ T4836] usb 4-1: USB disconnect, device number 120 [ 1546.030989][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.533061][T31408] bpf: Bad value for 'mode' [ 1546.726013][T31410] loop4: detected capacity change from 0 to 256 [ 1547.324511][T31383] loop1: detected capacity change from 0 to 32768 [ 1547.350681][T31383] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.15501 (31383) [ 1547.388072][T31383] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1547.423964][ T10] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1547.441618][T31383] BTRFS info (device loop1): using sha256 checksum algorithm [ 1547.610468][T31383] BTRFS info (device loop1): enabling ssd optimizations [ 1547.619064][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1547.638376][ T10] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 1547.654438][T31383] BTRFS info (device loop1): turning on async discard [ 1547.658359][ T10] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 1547.687418][T31383] BTRFS info (device loop1): enabling free space tree [ 1547.692814][ T10] usb 6-1: string descriptor 0 read error: -22 [ 1547.701169][ T10] usb 6-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40 [ 1547.723544][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1547.984679][ T5911] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1548.076061][T11645] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1548.081495][T29850] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1548.335500][ T10] usb 6-1: USB disconnect, device number 20 [ 1548.694509][ T2018] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1548.767996][T31517] loop4: detected capacity change from 0 to 256 [ 1548.897241][ T2018] usb 4-1: Using ep0 maxpacket: 32 [ 1548.935637][ T2018] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1548.968402][ T2018] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1549.024219][ T2018] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1549.066706][ T2018] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1549.096860][ T2018] usb 4-1: Product: syz [ 1549.112348][ T2018] usb 4-1: Manufacturer: syz [ 1549.132736][ T2018] usb 4-1: SerialNumber: syz [ 1549.435984][ T2018] usb 4-1: Invalid number of CPorts: 0 [ 1549.458716][ T2018] es2_ap_driver 4-1:7.0: probe with driver es2_ap_driver failed with error -22 [ 1549.493950][T31553] tc_dump_action: action bad kind [ 1549.727522][ T2018] usb 4-1: USB disconnect, device number 121 [ 1552.170427][T31697] netlink: 148 bytes leftover after parsing attributes in process `syz.3.15587'. [ 1552.248122][T31703] loop1: detected capacity change from 0 to 512 [ 1552.321683][T31703] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1552.375695][T31696] Process accounting paused [ 1552.512611][ T5911] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1552.817263][T29850] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1552.998852][T29850] usb 1-1: Using ep0 maxpacket: 32 [ 1553.037659][T29850] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1553.058958][T29850] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1553.101833][T29850] usb 1-1: New USB device found, idVendor=3b82, idProduct=00eb, bcdDevice= 0.40 [ 1553.136279][T29850] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=8 [ 1553.165742][T29850] usb 1-1: Product: syz [ 1553.181416][T29850] usb 1-1: Manufacturer: syz [ 1553.199968][T29850] usb 1-1: SerialNumber: syz [ 1553.414304][T31767] Scaler: ================= START STATUS ================= [ 1553.423476][T31768] netlink: 'syz.5.15609': attribute type 1 has an invalid length. [ 1553.446085][T31767] Scaler: ================== END STATUS ================== [ 1553.518968][T29850] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1553.530155][T31778] binder: 31773:31778 ioctl c0306201 0 returned -14 [ 1553.545695][T29850] usb 1-1: MIDIStreaming interface descriptor not found [ 1553.783812][T29850] usb 1-1: USB disconnect, device number 112 [ 1554.015827][T31813] netlink: 'syz.3.15618': attribute type 3 has an invalid length. [ 1554.063606][T31813] netlink: 224 bytes leftover after parsing attributes in process `syz.3.15618'. [ 1554.112477][T31827] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15621'. [ 1554.488018][T18527] udevd[18527]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1554.941225][T31885] loop5: detected capacity change from 0 to 8 [ 1555.029450][T31885] SQUASHFS error: Failed to read block 0x636: -5 [ 1555.054001][ T30] audit: type=1326 audit(1492.452:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31902 comm="syz.2.15636" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f619f99ce59 code=0x7ffc0000 [ 1555.092166][T31885] SQUASHFS error: Unable to read metadata cache entry [634] [ 1555.162911][ T30] audit: type=1326 audit(1492.490:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31902 comm="syz.2.15636" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f619f99ce59 code=0x7ffc0000 [ 1555.288776][ T30] audit: type=1326 audit(1492.499:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31902 comm="syz.2.15636" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f619f99ce59 code=0x7ffc0000 [ 1555.353534][ T30] audit: type=1326 audit(1492.499:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31902 comm="syz.2.15636" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f619f99ce59 code=0x7ffc0000 [ 1555.467341][ T30] audit: type=1326 audit(1492.499:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31902 comm="syz.2.15636" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f619f99ce59 code=0x7ffc0000 [ 1555.584984][T31930] /dev/nullb0: Can't open blockdev [ 1555.815081][T31936] bridge9: entered promiscuous mode [ 1556.130802][T31956] tmpfs: User quota block hardlimit too large. [ 1556.642944][ T30] audit: type=1326 audit(1493.941:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31974 comm="syz.2.15659" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f619f99ce59 code=0x7ffc0000 [ 1556.675308][T31935] loop3: detected capacity change from 0 to 32768 [ 1556.700721][T31935] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.15649 (31935) [ 1556.723470][ T30] audit: type=1326 audit(1493.941:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31974 comm="syz.2.15659" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f619f99ce59 code=0x7ffc0000 [ 1556.749973][T31947] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 1556.801324][ T30] audit: type=1326 audit(1493.969:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31974 comm="syz.2.15659" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f619f99ce59 code=0x7ffc0000 [ 1556.830338][T31935] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1556.845464][T31935] BTRFS info (device loop3): using sha256 checksum algorithm [ 1556.887831][ T30] audit: type=1326 audit(1493.969:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31974 comm="syz.2.15659" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f619f99ce59 code=0x7ffc0000 [ 1557.084338][T31935] BTRFS info (device loop3): enabling ssd optimizations [ 1557.152587][T31935] BTRFS info (device loop3): turning on async discard [ 1557.207854][T31935] BTRFS info (device loop3): enabling free space tree [ 1557.513649][ T5921] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1557.593935][T32027] lo speed is unknown, defaulting to 1000 [ 1557.606401][T32025] loop2: detected capacity change from 0 to 1764 [ 1557.631075][T32027] lo speed is unknown, defaulting to 1000 [ 1557.681802][T32025] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1557.722576][T32027] lo speed is unknown, defaulting to 1000 [ 1557.833735][T32035] netlink: 60 bytes leftover after parsing attributes in process `syz.0.15676'. [ 1557.876734][T32035] netlink: 60 bytes leftover after parsing attributes in process `syz.0.15676'. [ 1557.972252][ T30] audit: type=1326 audit(1495.168:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32040 comm="syz.1.15678" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c2d9ce59 code=0x7ffc0000 [ 1558.338357][T29850] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1558.992045][T32073] vxcan3: entered promiscuous mode [ 1558.997240][T32073] vxcan3: entered allmulticast mode [ 1559.330156][T32027] infiniband syz2: set active [ 1559.335022][T29850] lo speed is unknown, defaulting to 1000 [ 1559.353282][T32027] infiniband syz2: added lo [ 1559.392731][T32027] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1559.402774][T32027] infiniband syz2: Couldn't open port 1 [ 1559.462514][T32027] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1559.533242][T32027] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1559.601751][T32027] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1559.620940][T32098] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15694'. [ 1559.640470][T32054] loop1: detected capacity change from 0 to 32768 [ 1559.684674][T32054] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.15682 (32054) [ 1559.733219][T32027] RDS/IB: syz2: added [ 1559.754163][T32027] smc: adding ib device syz2 with port count 1 [ 1559.769025][T32054] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1559.794481][T32027] smc: ib device syz2 port 1 has no pnetid [ 1559.817272][ T4836] lo speed is unknown, defaulting to 1000 [ 1559.829560][T32054] BTRFS info (device loop1): using sha256 checksum algorithm [ 1559.836239][T32027] lo speed is unknown, defaulting to 1000 [ 1560.062674][T32054] BTRFS info (device loop1): enabling ssd optimizations [ 1560.107188][T32054] BTRFS info (device loop1): turning on async discard [ 1560.132893][T32054] BTRFS info (device loop1): enabling free space tree [ 1560.318935][T32134] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1560.393710][ T5911] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1560.902052][ T4836] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1561.116839][ T4836] usb 4-1: Using ep0 maxpacket: 32 [ 1561.151788][ T4836] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1561.178021][ T4836] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1561.194044][T32027] lo speed is unknown, defaulting to 1000 [ 1561.216764][ T4836] usb 4-1: New USB device found, idVendor=3b82, idProduct=00eb, bcdDevice= 0.40 [ 1561.258721][ T4836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=8 [ 1561.300384][ T4836] usb 4-1: Product: syz [ 1561.317774][ T4836] usb 4-1: Manufacturer: syz [ 1561.340899][ T4836] usb 4-1: SerialNumber: syz [ 1561.362235][T32174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15712'. [ 1561.696220][ T4836] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1561.722889][ T4836] usb 4-1: MIDIStreaming interface descriptor not found [ 1562.043251][ T4836] usb 4-1: USB disconnect, device number 122 [ 1562.117742][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1562.117770][ T30] audit: type=1326 audit(1499.063:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32212 comm="syz.4.15722" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ed19ce59 code=0x7ffc0000 [ 1562.218591][ T30] audit: type=1326 audit(1499.100:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32212 comm="syz.4.15722" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ed19ce59 code=0x7ffc0000 [ 1562.283584][T21108] udevd[21108]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1562.340942][ T30] audit: type=1326 audit(1499.100:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32212 comm="syz.4.15722" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ed19ce59 code=0x7ffc0000 [ 1562.411019][ T30] audit: type=1326 audit(1499.100:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32212 comm="syz.4.15722" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f78ed19ce59 code=0x7ffc0000 [ 1562.525694][T32233] loop2: detected capacity change from 0 to 4096 [ 1562.530843][ T30] audit: type=1326 audit(1499.100:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32212 comm="syz.4.15722" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ed19ce59 code=0x7ffc0000 [ 1562.687995][ T30] audit: type=1326 audit(1499.100:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32212 comm="syz.4.15722" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ed19ce59 code=0x7ffc0000 [ 1562.796639][ T30] audit: type=1326 audit(1499.100:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32212 comm="syz.4.15722" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ed19ce59 code=0x7ffc0000 [ 1562.897343][ T30] audit: type=1326 audit(1499.100:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32212 comm="syz.4.15722" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f78ed19ce59 code=0x7ffc0000 [ 1562.931418][T32249] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1562.992154][ T30] audit: type=1326 audit(1499.100:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32212 comm="syz.4.15722" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f78ed19ce59 code=0x7ffc0000 [ 1563.268030][ T30] audit: type=1800 audit(1500.139:218): pid=32233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.15723" name="file0" dev="loop2" ino=13 res=0 errno=0 [ 1563.290386][T32027] lo speed is unknown, defaulting to 1000 [ 1563.352433][T32259] mac80211_hwsim hwsim38 wlan0: entered promiscuous mode [ 1563.415981][T32259] mac80211_hwsim hwsim38 wlan0: entered allmulticast mode [ 1563.984371][T32286] dvmrp0: left allmulticast mode [ 1564.255348][ T4836] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1564.295260][T32303] wlan0: mtu less than device minimum [ 1564.302909][T32303] bond0: (slave wlan0): Error -22 calling dev_set_mtu [ 1564.451487][ T4836] usb 3-1: Using ep0 maxpacket: 32 [ 1564.485041][ T4836] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1564.507397][T32027] lo speed is unknown, defaulting to 1000 [ 1564.521587][ T4836] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1564.563591][ T4836] usb 3-1: New USB device found, idVendor=3b82, idProduct=00eb, bcdDevice= 0.40 [ 1564.605049][ T4836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=8 [ 1564.633688][ T4836] usb 3-1: Product: syz [ 1564.646559][ T4836] usb 3-1: Manufacturer: syz [ 1564.660161][ T4836] usb 3-1: SerialNumber: syz [ 1564.985116][ T4836] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1565.027083][ T4836] usb 3-1: MIDIStreaming interface descriptor not found [ 1565.090904][T32322] bond4: up delay (7) is not a multiple of miimon (100), value rounded to 0 ms [ 1565.115791][T32322] bond4: entered allmulticast mode [ 1565.378793][ T4836] usb 3-1: USB disconnect, device number 113 [ 1565.597714][T24213] udevd[24213]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1565.809219][T32027] lo speed is unknown, defaulting to 1000 [ 1566.418689][T32440] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1566.474438][T32440] overlayfs: overlapping lowerdir path [ 1566.915252][T32027] lo speed is unknown, defaulting to 1000 [ 1567.161739][T32487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15783'. [ 1567.189615][T32487] netlink: 312 bytes leftover after parsing attributes in process `syz.0.15783'. [ 1567.202034][T11645] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1567.229047][T32487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15783'. [ 1567.231210][T32493] SET target dimension over the limit! [ 1567.417131][T11645] usb 5-1: Using ep0 maxpacket: 32 [ 1567.428620][T11645] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1567.451806][T11645] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1567.487406][T11645] usb 5-1: New USB device found, idVendor=3b82, idProduct=00eb, bcdDevice= 0.40 [ 1567.505440][T11645] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=8 [ 1567.551350][T11645] usb 5-1: Product: syz [ 1567.564407][T11645] usb 5-1: Manufacturer: syz [ 1567.583107][T11645] usb 5-1: SerialNumber: syz [ 1567.886783][T11645] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1567.918053][T11645] usb 5-1: MIDIStreaming interface descriptor not found [ 1568.154524][T11645] usb 5-1: USB disconnect, device number 7 [ 1568.415716][T32564] netlink: 'syz.0.15803': attribute type 8 has an invalid length. [ 1568.418942][T18547] udevd[18547]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1568.585479][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1568.597618][T29850] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1568.639144][T21308] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1568.860476][ T4836] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1569.021565][ T4836] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1569.030779][T32595] ip6t_srh: unknown srh invflags 4000 [ 1569.047775][T32593] netlink: 'syz.4.15811': attribute type 10 has an invalid length. [ 1569.072773][T32593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1569.078414][ T4836] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1569.102020][T32593] team0: Port device netdevsim1 added [ 1569.110477][ T4836] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 49, changing to 7 [ 1569.166161][ T4836] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 25964, setting to 1024 [ 1569.207248][ T4836] usb 4-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 1569.236884][ T4836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1569.267716][ T4836] usb 4-1: Product: syz [ 1569.293383][ T4836] usb 4-1: Manufacturer: syz [ 1569.316495][ T4836] usb 4-1: SerialNumber: syz [ 1569.593931][ T4836] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1569.612590][ T4836] usb 4-1: 0:2 : does not exist [ 1569.800209][ T4836] usb 4-1: USB disconnect, device number 123 [ 1570.723793][T32696] netlink: 'syz.1.15840': attribute type 21 has an invalid length. [ 1570.775435][T32696] netlink: 'syz.1.15840': attribute type 1 has an invalid length. [ 1570.834731][T32696] netlink: 144 bytes leftover after parsing attributes in process `syz.1.15840'. [ 1571.401019][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1571.515905][T32741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15855'. [ 1571.582308][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 1571.604355][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1571.622301][ T10] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1571.667531][ T10] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1571.699755][ T10] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1571.730367][ T10] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 1571.776279][ T10] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1571.801814][ T10] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1571.834391][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1571.898489][ T10] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 1571.986809][T32753] vlan0: entered allmulticast mode [ 1572.004773][T32753] bond0: entered allmulticast mode [ 1572.017026][T32753] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 1572.083947][ T4836] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1572.132424][ T10] scsi host1: usb-storage 5-1:1.0 [ 1572.187845][ T317] netlink: 'syz.3.15866': attribute type 1 has an invalid length. [ 1572.279972][ T4836] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1572.316101][ T4836] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1572.339141][ T4836] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1572.360596][ T4836] usb 3-1: config 220 has no interface number 2 [ 1572.369215][ T4836] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1572.372003][T29850] usb 5-1: USB disconnect, device number 8 [ 1572.389349][ T2018] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1572.417157][ T4836] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1572.440255][ T4836] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1572.459419][ T4836] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1572.481015][ T10] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1572.481809][ T4836] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1572.508249][ T4836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1572.527564][ T4836] usb 3-1: Product: syz [ 1572.531987][ T4836] usb 3-1: Manufacturer: syz [ 1572.542785][ T4836] usb 3-1: SerialNumber: syz [ 1572.588056][ T2018] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1572.614194][ T2018] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1572.656056][ T2018] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1572.661682][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 1572.734442][ T2018] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1572.763449][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1572.798477][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1572.805421][ T4836] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1572.836249][ T4836] uvcvideo 3-1:220.0: No valid video chain found. [ 1572.851099][ T10] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1572.854868][ T4836] usb 3-1: selecting invalid altsetting 0 [ 1572.889906][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1572.910722][ T10] usb 2-1: Product: syz [ 1572.915970][ T10] usb 2-1: Manufacturer: syz [ 1572.921472][ T10] usb 2-1: SerialNumber: syz [ 1572.947694][ T10] usb 2-1: config 0 descriptor?? [ 1572.972618][ T4836] usb 3-1: selecting invalid altsetting 0 [ 1572.985235][ T4836] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 1573.017911][ T4836] usb 3-1: USB disconnect, device number 114 [ 1573.163970][ T5901] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1573.341059][ T5901] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1573.362410][ T384] netlink: 'syz.4.15877': attribute type 1 has an invalid length. [ 1573.372015][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1573.387287][ T5901] usb 4-1: Product: syz [ 1573.391795][ T5901] usb 4-1: Manufacturer: syz [ 1573.396933][ T5901] usb 4-1: SerialNumber: syz [ 1573.411408][ T5901] usb 4-1: config 0 descriptor?? [ 1573.479760][ T4836] usb 2-1: USB disconnect, device number 103 [ 1573.613611][ T404] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1573.661514][ T403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15879'. [ 1573.676173][ T5901] usb 4-1: ignoring: probably an ADSL modem [ 1573.896054][ T5901] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1573.934571][ T5901] usb 4-1: USB disconnect, device number 124 [ 1574.101977][ T2018] gspca_stv0680: usb_control_msg error 2, request = 0x6, error = -71 [ 1574.126679][ T2018] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1574.155183][ T2018] stv0680 1-1:4.0: last error: 86, command = 0x78 [ 1574.198302][ T2018] usb 1-1: USB disconnect, device number 113 [ 1574.420678][ T441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15887'. [ 1574.740580][ T465] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 1574.747310][ T465] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1574.755698][T21324] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1574.770315][ T468] loop3: detected capacity change from 0 to 512 [ 1574.799730][ T465] vhci_hcd vhci_hcd.0: Device attached [ 1574.863194][ T468] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1575.063943][ T2018] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 1575.117973][ T5901] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1575.278392][ T10] usb 4-1: new full-speed USB device number 125 using dummy_hcd [ 1575.299428][ T5901] usb 3-1: Using ep0 maxpacket: 16 [ 1575.315063][ T5901] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 8 [ 1575.335569][ T5901] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 1575.359698][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1575.393911][ T5901] usb 3-1: Product: syz [ 1575.399144][ T5901] usb 3-1: Manufacturer: syz [ 1575.407491][ T5901] usb 3-1: SerialNumber: syz [ 1575.436918][ T5901] usb 3-1: config 0 descriptor?? [ 1575.483873][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 57890, setting to 64 [ 1575.515937][ T10] usb 4-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 1575.532778][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1575.568520][ T10] usb 4-1: Product: syz [ 1575.587688][ T10] usb 4-1: Manufacturer: syz [ 1575.600859][ T10] usb 4-1: SerialNumber: syz [ 1575.654428][ T10] usb 4-1: config 0 descriptor?? [ 1575.684798][ T468] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1575.716304][ T10] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -71 [ 1575.748215][ T466] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 1575.763656][ T10] usb 3-1: USB disconnect, device number 115 [ 1575.787817][ T13] vhci_hcd vhci_hcd.2: stop threads [ 1575.809452][ T13] vhci_hcd vhci_hcd.2: release socket [ 1575.833330][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 1575.987916][ T4836] usb 4-1: USB disconnect, device number 125 [ 1576.234191][ T550] loop4: detected capacity change from 0 to 64 [ 1576.285989][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1576.286016][ T30] audit: type=1400 audit(1512.330:220): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200D3AFF20B9DAC6B98850DD7E2AABD6BB0ED3E1FBFE95AF7DEBBE7B052583C2B8BB3F852755C2BBD37D5F3DF1CCB21D8C19D799701EB3C61CEA508FB554741E pid=548 comm="syz.4.15913" [ 1576.685512][ T5921] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1576.805026][ T4836] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1576.981353][ T4836] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1577.000379][ T4836] usb 5-1: config 114 has an invalid interface number: 240 but max is 0 [ 1577.008188][ T586] loop2: detected capacity change from 0 to 1024 [ 1577.028744][ T4836] usb 5-1: config 114 has no interface number 0 [ 1577.060307][ T4836] usb 5-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 1577.119327][ T4836] usb 5-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 1577.154448][ T4836] usb 5-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 1577.191209][ T4836] usb 5-1: config 114 interface 240 has no altsetting 0 [ 1577.231893][ T4836] usb 5-1: string descriptor 0 read error: -22 [ 1577.258886][ T4836] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 1577.308352][ T4836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1577.357800][ T563] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1577.390723][ T563] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1577.433572][ T4836] ir_usb 5-1:114.240: IR Dongle converter detected [ 1577.529769][ T604] loop3: detected capacity change from 0 to 128 [ 1577.714876][ T4836] usb 5-1: IR Dongle converter now attached to ttyUSB0 [ 1577.930196][ T622] loop5: detected capacity change from 0 to 1764 [ 1577.972832][ T622] iso9660: Unknown parameter 'utT8' [ 1577.994904][ T4836] usb 5-1: USB disconnect, device number 9 [ 1578.061267][ T4836] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 1578.094227][ T4836] ir_usb 5-1:114.240: device disconnected [ 1578.694015][ T670] netlink: 32 bytes leftover after parsing attributes in process `syz.3.15941'. [ 1579.606739][T29850] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1579.752123][ T713] CIFS mount error: No usable UNC path provided in device string! [ 1579.752123][ T713] [ 1579.799827][ T713] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1579.801218][T29850] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1579.854721][T29850] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1579.887938][T29850] usb 5-1: Product: syz [ 1579.892943][T29850] usb 5-1: Manufacturer: syz [ 1579.905781][T29850] usb 5-1: SerialNumber: syz [ 1579.938466][T29850] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1579.992864][ T10] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1580.193101][ T709] can0: slcan on ptm0. [ 1580.204806][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1580.554487][ T2018] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1580.607147][ T741] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15962'. [ 1580.711272][T29850] usb 5-1: USB disconnect, device number 10 [ 1581.163475][ T708] can0 (unregistered): slcan off ptm0. [ 1581.308579][ T763] loop5: detected capacity change from 0 to 4096 [ 1581.469019][ T763] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1581.578297][ T10] usb 5-1: Service connection timeout for: 256 [ 1581.622909][ T10] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1581.671741][ T10] ath9k_htc: Failed to initialize the device [ 1581.706184][T29850] usb 5-1: ath9k_htc: USB layer deinitialized [ 1581.777766][ T791] loop3: detected capacity change from 0 to 512 [ 1581.814925][ T791] EXT4-fs: Ignoring removed i_version option [ 1581.848792][ T791] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1582.039389][ T791] EXT4-fs error (device loop3): ext4_free_branches:1020: inode #11: comm syz.3.15972: invalid indirect mapped block 4294967295 (level 1) [ 1582.084907][ T791] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1582.085807][ T30] audit: type=1800 audit(1517.761:221): pid=763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.15966" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 1582.095156][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 1582.095191][ C0] EXT4-fs (loop3): initial error at time 1517: ext4_free_branches:1020: inode 11 [ 1582.095246][ C0] EXT4-fs (loop3): last error at time 1517: ext4_free_branches:1020: inode 11 [ 1582.153724][ T791] EXT4-fs error (device loop3): ext4_free_branches:1020: inode #11: comm syz.3.15972: invalid indirect mapped block 4294967295 (level 1) [ 1582.187837][ T791] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1582.198988][ T791] EXT4-fs (loop3): 2 truncates cleaned up [ 1582.228324][ T791] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1582.425481][ T791] EXT4-fs error (device loop3): ext4_get_parent:1831: inode #11: comm syz.3.15972: bad parent inode number: 3 [ 1582.498626][ T5934] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1582.730994][ T823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15981'. [ 1582.773168][ T5921] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1583.232936][ T851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15987'. [ 1583.270707][ T851] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15987'. [ 1583.302524][ T851] netlink: 'syz.0.15987': attribute type 12 has an invalid length. [ 1583.322035][ T851] netlink: 'syz.0.15987': attribute type 13 has an invalid length. [ 1583.688631][ T867] netlink: 'syz.5.15989': attribute type 13 has an invalid length. [ 1584.029819][ T881] support for cryptoloop has been removed. Use dm-crypt instead. [ 1584.236654][ T867] bridge0: port 1(syz_tun) entered disabled state [ 1584.270833][ T894] loop3: detected capacity change from 0 to 8 [ 1584.391802][ T894] SQUASHFS error: Unable to read directory block [629:46] [ 1584.818299][ T923] netlink: 'syz.3.16002': attribute type 1 has an invalid length. [ 1585.541155][ T2018] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1585.727956][ T2018] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1585.744006][ T2018] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1585.765363][ T2018] usb 5-1: Product: syz [ 1585.769666][ T2018] usb 5-1: Manufacturer: syz [ 1585.774300][ T2018] usb 5-1: SerialNumber: syz [ 1585.789850][ T2018] usb 5-1: config 0 descriptor?? [ 1585.803353][ T2018] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1585.832515][ T2018] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1585.851468][ T2018] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1585.862399][ T2018] usb 5-1: media controller created [ 1585.893943][ T2018] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1586.076284][ T2018] DVB: Unable to find symbol mt352_attach() [ 1586.202877][ T2018] DVB: Unable to find symbol nxt6000_attach() [ 1586.224635][ T2018] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1586.240959][ T2018] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input137 [ 1586.266166][T29850] lo speed is unknown, defaulting to 1000 [ 1586.289811][T29850] syz2: Port: 1 Link DOWN [ 1586.292345][ T2018] dvb-usb: schedule remote query interval to 1000 msecs. [ 1586.317562][ T2018] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1586.324525][ T929] batadv_slave_1: entered promiscuous mode [ 1586.349976][ T2018] dvb-usb: bulk message failed: -22 (7/0) [ 1586.358020][ T2018] dvb-usb: bulk message failed: -22 (7/0) [ 1586.371461][T16086] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1586.402627][ T2018] usb 5-1: USB disconnect, device number 11 [ 1586.404846][ T885] Process accounting resumed [ 1586.462636][T29850] lo speed is unknown, defaulting to 1000 [ 1586.601485][ T980] loop3: detected capacity change from 0 to 1024 [ 1586.839753][ T2018] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1587.213873][ T1017] loop2: detected capacity change from 0 to 512 [ 1587.257532][ T1017] EXT4-fs: Ignoring removed i_version option [ 1587.286603][ T1017] EXT4-fs: Ignoring removed nobh option [ 1587.313111][ T1017] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1587.359174][ T1017] EXT4-fs error (device loop2): ext4_free_branches:1020: inode #11: comm syz.2.16018: invalid indirect mapped block 4294967295 (level 1) [ 1587.489622][ T1017] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1587.490180][ T1017] EXT4-fs error (device loop2): ext4_free_branches:1020: inode #11: comm syz.2.16018: invalid indirect mapped block 4294967295 (level 1) [ 1587.499623][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1587.499667][ C0] EXT4-fs (loop2): initial error at time 1522: ext4_free_branches:1020: inode 11 [ 1587.499735][ C0] EXT4-fs (loop2): last error at time 1522: ext4_free_branches:1020: inode 11 [ 1587.549874][ T1017] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1587.550888][ T1017] EXT4-fs (loop2): 2 truncates cleaned up [ 1587.624039][ T1017] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1587.639754][ T1037] netlink: 56 bytes leftover after parsing attributes in process `syz.3.16022'. [ 1588.032309][ T1017] [ 1588.034687][ T1017] ====================================================== [ 1588.041807][ T1017] WARNING: possible circular locking dependency detected [ 1588.049022][ T1017] syzkaller #0 Tainted: G L [ 1588.055037][ T1017] ------------------------------------------------------ [ 1588.062241][ T1017] syz.2.16018/1017 is trying to acquire lock: [ 1588.068508][ T1017] ffff888030de0640 (sb_internal){.+.+}-{0:0}, at: evict+0x3c2/0xad0 [ 1588.076600][ T1017] [ 1588.076600][ T1017] but task is already holding lock: [ 1588.084043][ T1017] ffff888030de2c18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x3bf/0x2000 [ 1588.094464][ T1017] [ 1588.094464][ T1017] which lock already depends on the new lock. [ 1588.094464][ T1017] [ 1588.104878][ T1017] [ 1588.104878][ T1017] the existing dependency chain (in reverse order) is: [ 1588.113989][ T1017] [ 1588.113989][ T1017] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 1588.122553][ T1017] lock_acquire+0x1b9/0x370 [ 1588.127629][ T1017] ext4_writepages+0x21d/0x750 [ 1588.132968][ T1017] do_writepages+0x278/0x600 [ 1588.138302][ T1017] __writeback_single_inode+0x164/0x1300 [ 1588.144492][ T1017] writeback_single_inode+0x51c/0xfc0 [ 1588.150447][ T1017] write_inode_now+0x174/0x1f0 [ 1588.155786][ T1017] iput.part.0+0x62a/0x1050 [ 1588.160900][ T1017] iput+0x35/0x40 [ 1588.165076][ T1017] ext4_xattr_block_set+0x6f7/0x3660 [ 1588.170990][ T1017] ext4_expand_extra_isize_ea+0x17c6/0x1d70 [ 1588.177619][ T1017] __ext4_expand_extra_isize+0x346/0x480 [ 1588.183857][ T1017] __ext4_mark_inode_dirty+0x668/0x880 [ 1588.190134][ T1017] ext4_evict_inode+0x835/0x1960 [ 1588.195636][ T1017] evict+0x3c2/0xad0 [ 1588.200072][ T1017] iput.part.0+0x989/0x1050 [ 1588.205205][ T1017] iput+0x35/0x40 [ 1588.209419][ T1017] ext4_orphan_cleanup+0x71e/0x11e0 [ 1588.215264][ T1017] ext4_fill_super+0x917f/0xb470 [ 1588.220770][ T1017] get_tree_bdev_flags+0x38c/0x620 [ 1588.226477][ T1017] vfs_get_tree+0x92/0x320 [ 1588.231529][ T1017] path_mount+0x7d0/0x23d0 [ 1588.236702][ T1017] __x64_sys_mount+0x293/0x310 [ 1588.242016][ T1017] do_syscall_64+0x115/0x870 [ 1588.247190][ T1017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1588.253693][ T1017] [ 1588.253693][ T1017] -> #0 (sb_internal){.+.+}-{0:0}: [ 1588.261028][ T1017] check_prev_add+0xeb/0xe60 [ 1588.266167][ T1017] __lock_acquire+0x136c/0x1a40 [ 1588.271568][ T1017] lock_acquire+0x1b9/0x370 [ 1588.276813][ T1017] ext4_evict_inode+0xf1b/0x1960 [ 1588.282410][ T1017] evict+0x3c2/0xad0 [ 1588.286922][ T1017] iput.part.0+0x989/0x1050 [ 1588.291971][ T1017] iput+0x35/0x40 [ 1588.296227][ T1017] ext4_ext_migrate+0xd5b/0x2000 [ 1588.301716][ T1017] ext4_fileattr_set+0xed1/0x17d0 [ 1588.307384][ T1017] vfs_fileattr_set+0x783/0xd70 [ 1588.312982][ T1017] ioctl_setflags+0x1af/0x1e0 [ 1588.318302][ T1017] do_vfs_ioctl+0x705/0x13e0 [ 1588.323478][ T1017] __x64_sys_ioctl+0x114/0x210 [ 1588.328976][ T1017] do_syscall_64+0x115/0x870 [ 1588.334846][ T1017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1588.341293][ T1017] [ 1588.341293][ T1017] other info that might help us debug this: [ 1588.341293][ T1017] [ 1588.351610][ T1017] Possible unsafe locking scenario: [ 1588.351610][ T1017] [ 1588.359067][ T1017] CPU0 CPU1 [ 1588.364435][ T1017] ---- ---- [ 1588.369800][ T1017] lock(&sbi->s_writepages_rwsem); [ 1588.375109][ T1017] lock(sb_internal); [ 1588.381722][ T1017] lock(&sbi->s_writepages_rwsem); [ 1588.389552][ T1017] rlock(sb_internal); [ 1588.393750][ T1017] [ 1588.393750][ T1017] *** DEADLOCK *** [ 1588.393750][ T1017] [ 1588.401902][ T1017] 3 locks held by syz.2.16018/1017: [ 1588.407292][ T1017] #0: ffff888030de0450 (sb_writers#4){.+.+}-{0:0}, at: ioctl_setflags+0x136/0x1e0 [ 1588.416879][ T1017] #1: ffff888076924520 (&type->i_mutex_dir_key#3){++++}-{4:4}, at: vfs_fileattr_set+0x14d/0xd70 [ 1588.427643][ T1017] #2: ffff888030de2c18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x3bf/0x2000 [ 1588.438434][ T1017] [ 1588.438434][ T1017] stack backtrace: [ 1588.444560][ T1017] CPU: 0 UID: 0 PID: 1017 Comm: syz.2.16018 Tainted: G L syzkaller #0 PREEMPT(full) [ 1588.444614][ T1017] Tainted: [L]=SOFTLOCKUP [ 1588.444634][ T1017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1588.444656][ T1017] Call Trace: [ 1588.444670][ T1017] [ 1588.444684][ T1017] dump_stack_lvl+0x100/0x190 [ 1588.444735][ T1017] print_circular_bug.cold+0x178/0x1c7 [ 1588.444799][ T1017] check_noncircular+0x146/0x160 [ 1588.444846][ T1017] check_prev_add+0xeb/0xe60 [ 1588.444889][ T1017] __lock_acquire+0x136c/0x1a40 [ 1588.444941][ T1017] lock_acquire+0x1b9/0x370 [ 1588.444981][ T1017] ? evict+0x3c2/0xad0 [ 1588.445018][ T1017] ? __pfx___might_resched+0x10/0x10 [ 1588.445060][ T1017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1588.445109][ T1017] ext4_evict_inode+0xf1b/0x1960 [ 1588.445160][ T1017] ? evict+0x3c2/0xad0 [ 1588.445193][ T1017] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 1588.445249][ T1017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1588.445297][ T1017] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1588.445346][ T1017] ? evict+0x37e/0xad0 [ 1588.445379][ T1017] ? evict+0x37e/0xad0 [ 1588.445410][ T1017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1588.445459][ T1017] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1588.445509][ T1017] evict+0x3c2/0xad0 [ 1588.445548][ T1017] ? __pfx_evict+0x10/0x10 [ 1588.445595][ T1017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1588.445810][ T1017] ? iput.part.0+0x981/0x1050 [ 1588.445846][ T1017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1588.445897][ T1017] iput.part.0+0x989/0x1050 [ 1588.445939][ T1017] iput+0x35/0x40 [ 1588.445971][ T1017] ext4_ext_migrate+0xd5b/0x2000 [ 1588.446029][ T1017] ? __pfx_ext4_ext_migrate+0x10/0x10 [ 1588.446073][ T1017] ? ext4_mark_iloc_dirty+0x961/0x1d50 [ 1588.446126][ T1017] ? __pfx_inode_maybe_inc_iversion+0x10/0x10 [ 1588.446178][ T1017] ? ext4_fc_track_inode+0x16b/0x360 [ 1588.446229][ T1017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1588.446274][ T1017] ? ext4_change_inode_journal_flag+0x4a5/0x740 [ 1588.446333][ T1017] ext4_fileattr_set+0xed1/0x17d0 [ 1588.446394][ T1017] ? __pfx_ext4_fileattr_set+0x10/0x10 [ 1588.446452][ T1017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1588.446499][ T1017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1588.446543][ T1017] ? fileattr_fill_flags+0x363/0x3e0 [ 1588.446600][ T1017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1588.446651][ T1017] ? ext4_fileattr_get+0x179/0x280 [ 1588.446703][ T1017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1588.446753][ T1017] vfs_fileattr_set+0x783/0xd70 [ 1588.446811][ T1017] ? __pfx_vfs_fileattr_set+0x10/0x10 [ 1588.446870][ T1017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1588.446913][ T1017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1588.446958][ T1017] ? mnt_get_write_access+0x1e9/0x2f0 [ 1588.447004][ T1017] ioctl_setflags+0x1af/0x1e0 [ 1588.447059][ T1017] ? __pfx_ioctl_setflags+0x10/0x10 [ 1588.447115][ T1017] ? __pfx_futex_wait+0x10/0x10 [ 1588.447159][ T1017] do_vfs_ioctl+0x705/0x13e0 [ 1588.447202][ T1017] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1588.447250][ T1017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1588.447294][ T1017] ? find_held_lock+0x2b/0x80 [ 1588.447351][ T1017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1588.447396][ T1017] ? hook_file_ioctl_common+0x140/0x440 [ 1588.447463][ T1017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1588.447507][ T1017] ? __fget_files+0x21f/0x3d0 [ 1588.447565][ T1017] __x64_sys_ioctl+0x114/0x210 [ 1588.447609][ T1017] do_syscall_64+0x115/0x870 [ 1588.447666][ T1017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1588.447703][ T1017] RIP: 0033:0x7f619f99ce59 [ 1588.447733][ T1017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1588.447768][ T1017] RSP: 002b:00007f61a0789028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1588.447802][ T1017] RAX: ffffffffffffffda RBX: 00007f619fc15fa0 RCX: 00007f619f99ce59 [ 1588.447826][ T1017] RDX: 0000200000000080 RSI: 0000000040086602 RDI: 0000000000000004 [ 1588.447850][ T1017] RBP: 00007f619fa32e6f R08: 0000000000000000 R09: 0000000000000000 [ 1588.447873][ T1017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1588.447895][ T1017] R13: 00007f619fc16038 R14: 00007f619fc15fa0 R15: 00007fff54d4ea48 [ 1588.447932][ T1017] [ 1588.959276][ T1025] EXT4-fs error (device loop2): ext4_validate_block_bitmap:431: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 1589.017134][ T1081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16030'. [ 1589.043766][ T5916] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1589.090092][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1589.162617][T29850] usb 1-1: new low-speed USB device number 114 using dummy_hcd [ 1589.334103][T29850] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1589.345594][T29850] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1589.355447][T29850] usb 1-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 1589.364783][T29850] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1589.374389][T29850] usb 1-1: config 0 descriptor?? [ 1589.818433][T29850] aquacomputer_d5next 0003:0C70:F0B6.0002: item fetching failed at offset 5/7 [ 1589.828375][T29850] aquacomputer_d5next 0003:0C70:F0B6.0002: probe with driver aquacomputer_d5next failed with error -22 [ 1590.044107][ T2018] usb 1-1: USB disconnect, device number 114 [ 1591.821976][T21308] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1597.973519][T16086] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration