last executing test programs: 2.322435783s ago: executing program 2 (id=5908): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000002) 2.243030614s ago: executing program 2 (id=5911): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0x541b, 0x0) 2.172795486s ago: executing program 1 (id=5913): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000002840)=""/223, 0xdf}, {0x0}], 0x2, 0x4f, 0x7) 2.083445188s ago: executing program 2 (id=5915): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, 0x3, 0x8, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 2.036672099s ago: executing program 1 (id=5916): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x149800, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/34, 0x22}], 0x1) 1.934285962s ago: executing program 2 (id=5918): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1.880131293s ago: executing program 1 (id=5921): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0xffffffffffffffff) 1.833443804s ago: executing program 2 (id=5922): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x401, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2044}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}]}}}]}, 0x58}}, 0x4014) 1.709697197s ago: executing program 1 (id=5926): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x14, 0x13, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}}, 0x14}}, 0x80) 1.659926899s ago: executing program 2 (id=5929): syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000004480)='./file0\x00', 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="6a6f75726e616c5f6173796e635f636f6d6d69742c6e6f61636c2c636f686572656e63793d66756c6c2c6865617274626561743d6e6f6e652c6a6f75726e616c5f6173796e635f636f6d6d69742c6e6f757365725f78617474722c008e1d54758732e066b2e39f7bd9e6e2dab460"], 0x1, 0x446c, &(0x7f00000044c0)="$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") mknodat$loop(0xffffffffffffff9c, &(0x7f0000002380)='./file0\x00', 0x80, 0x0) 1.60235681s ago: executing program 1 (id=5931): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000d"], 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x1, '\x00', 0x0, r0, 0x1, 0x20002}, 0x50) 1.509595042s ago: executing program 1 (id=5934): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000001440)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRESOCT], 0x0) syz_usb_ep_write(r0, 0x8d, 0x0, 0x0) 1.079928223s ago: executing program 3 (id=5943): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @rand_addr=0xc0586300}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x3}]}}}]}, 0x40}}, 0x0) 1.044152084s ago: executing program 4 (id=5944): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x18, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x4, 0x5}]}, 0x18}}, 0x0) 920.440657ms ago: executing program 3 (id=5946): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff7f, 0xfffffefe, 0xff000000, 0xff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0xb7, 0x0, 0x1}, 0x0, 0x218, 0x238, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x1, 0x3, 0x10001, {0x1}}}, @common=@rt={{0x138}, {0x5, [0x1, 0x4], 0x1, 0x2, 0x2, [@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private2, @mcast1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x44}, @local, @loopback, @remote, @mcast2, @remote], 0x6}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0xffffffffffffffff, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) 903.975578ms ago: executing program 4 (id=5948): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x4b}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) 818.34941ms ago: executing program 4 (id=5950): r0 = openat$dsp(0xffffff9c, &(0x7f0000000ac0), 0x101000, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, 0x0) 768.805001ms ago: executing program 0 (id=5951): r0 = socket(0x40000000015, 0x5, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x4000085}, 0x4000000) 768.246901ms ago: executing program 3 (id=5952): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 662.928483ms ago: executing program 4 (id=5953): r0 = fanotify_init(0x8, 0x2) write$P9_RSYMLINK(r0, &(0x7f0000000340)={0x14, 0x11, 0x0, {0x0, 0x4}}, 0x14) 599.646325ms ago: executing program 0 (id=5954): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r0, 0x0, 0xd1, &(0x7f0000000000)=0xfd, 0x4) 556.581566ms ago: executing program 3 (id=5955): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@bridge_delneigh={0x24, 0x1e, 0x1, 0xfffffffc, 0xffffffff, {0xa}, [@NDA_NH_ID={0x8, 0xd, 0x5c1}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4044010) 461.006758ms ago: executing program 0 (id=5956): munmap(&(0x7f0000aaf000/0x1000)=nil, 0x1000) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x13) 388.24201ms ago: executing program 3 (id=5957): syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000002a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xaf6, &(0x7f0000002b80)="$eJzs3V2IXFcdAPBzd3c2u2lrNjXRNY1tYrWt2m6azRqrQZOSIBiaIL4Uii8h3dZgjNAKaimY5Mk3W0oKPvmBT30pVQQLIqFPvhRsoAh5qoI+NEQs+FCjycjO3DNz78lM7s5md2Zn5/eDu2fuPefO/9zZO3fu17knACNrrPF3YWE2C+HCm68cef+Bf0wvTTnYKjHT+DtRGKuFELJ8fCJ5v/fGm+n1D1482SnNwnzjbxwPx6+25r0jhHA27AoXw0zYceHSy2/PP3Hs3NHzu9957cCVtVl6AAAYLd+4eGBh+1//fM/Wa6/feyhsak2P++czccJUc7//UL7jH/f/x0J5fCndejkJ0n7b0nHD0jA2XS463qFcMU4tKTfRIf7SMJlUodal3KZw6/jjhWmdlhuGWVyPZ0I2NhdC2NwaHxubm2sek4fGcf1kNnfm1Olnnh9QRYFV9+/7Qgi7CsPh8+Xx9TYcXAd1WOFQXwd1GMrhUP9iXas3DXyZ+zTUtwx6CwTQlF4vvMnZbFXjtd5tYnnxrz4+1nl+WAX9Xv97ij95U/zpvsYPA17+dRD/1+dscVg9G3VtissVv0d35uPpdYT0/qVX/1Cery290lGeml6PqC2znt2uIwzL9YVu9Rzvcz1Wqlv90/Vio/pKnsbP4aul3PtK35/0fzos/2Ogsw/T8/8GwxoOj70/+DoM/RBK47Xbea/6gLc/wPqV3jdXj9dHc5MV+Zsq8qcq8qcr8jdX5N9RkQ+j7Lff/2l4KWuf70qP6Xs9Hx7Ps92Vpx/psT7p+che46f3/fbqduOn9xPDevb7E08uPvb0U5ea9/9nrfX/Rr6+x8ONmfy7dTEvEM8XpufV43317YYD5fy03N1Jfe7qUL7xelu5XLat/T6hsJ25qR6z5fm2dCu3s1xuJik3nQ9TSX3T/ZPNyXxx/yNuV+PnNZEsby1ZjsmkHnG7sjVP03rASsT1sXH/f+GiVbz/P66fs6GWPXPq9OKj+XhcT/80Xtu0NH1vPysNrIq0/U97vNz+ZzaU2//c2ZpeGytuF7a0p2fN7cIb+fuVp8+34hSmF37U4u/ct8enG+XnTn7v9NOrvOww6p7/0QvfOXH69OJzXqz4xdfWRzV6eREPW9ZLfbzo9cWutQ4x4A0TsOb2/Li5E/DIqe+eeHbx2cUz+/bv3zc/v/9L+xZCY79+T3HvvujsAGoLrKbmb/2mxec81wMAAAAAAAAAAACGxg+OHrn07ltfvNxs/99u/xfb/8c7f2P7/58k7f/TdvKxHXxsB7i1Q36jTPKA1cmkXC0fPprUd1sSZ3sy38fytNWPX97+P4ZLn+sa6/PxZHqty2jyOIGbnpcymTyDJO0v8FN5ej5PfxVggLLOj/BP19sOz7fOPiys6/H5FIUmvHXPBx4e8f/WWBsKjzSK7b87PtepQ3tthks/WiwOehmBzv45Us///ld7wXuY7+GB13vUhon+xvtZ7+vERhnqXffSl9uDDcDqGHT/n38Pzbjx/OeZP359ammIxa4+Xt5eps8vhV785d3y+Hrvf3Kt46f99vU7/qCXv9/9f7b6v8u3f3G71337l/SYN7OyuP/5+ZXLhbBhx3Ljp8sfnwO9rbf41/L4cWkeDMuLX/9lEj+9ILRM/03ib15m/JuWf+fK4v8vjx8/tofuX278Zo2zsXI9ppPliNf/0vPG0fVk+eOzPW8R/5svdFr+FXbUeCOPD6NsWPqZ7VWyH9Haaa/q/7fX3//b7f+3VdmsXJn0Powv5ONxQxzvc0j7O+m1/vH+ivg7sD15/6zi903/v8Pty3la9X2I/f/G9XEm/8kvjDc+yzhe6/DZbtRtDQyr90bq+l+/hivNw6CVzT81+Pobehjq48sue7z1utVP3IDrX6/X1/aEVoWBBmfgn/+gjxMGHX/Qn3+VtP/fdB8+7f83zU/7/03z0/5/0/zp/D/ULT/t/zf9PNP+f7O04sn7pv0Dz1bkf6Iif0fn/Fb0eyrm31mR/8mK/N2t/IOlEjH/3lvO3y7X7f3vrsi/vyL/0xX5n6nIf6Ai/6FCfrEP6Jj/2WT+LMnf6GJ7lG6fH7Bxpe3zfP9hdMTrP92+/9va+ZPFIv2tJbAWXn197+GnfvOtmWb7/8nW+ZB4He9QPl7Lj41+mI+n171DYXwp7618/G9J/no/3wGjJH1+Rvr7/2BFPjC84n1evt8wgrKpzpPztOq5Vd328xkun8vTz+fpw3n6SJ7O5emePN2bp/N9qh9r4/AbvzvwUtY+3t+S5C/3fvK0PVDpOVEhhH3LrE96fqDX+9nT5/j16nbjr7A5GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMCMNf4uLMxmIVx485UjTx47tWdpysFWiZnG34nCWK01XwiP5ul4nv4if3H9gxdPFtMbeZqF+ZCFrDU9HL/ainRHCOFs2BUuhpmw48Kll9+ef+LYuaPnd7/z2oEra/cJAAAAwMb3/wAAAP//bhYJfg==") open(&(0x7f00000003c0)='./file2\x00', 0x20381, 0x10dd722b6e14c3dd) 387.72463ms ago: executing program 0 (id=5958): r0 = openat$sndseq(0xffffff9c, &(0x7f0000000040), 0x8000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f00000000c0)={0x10, 0x2, 'client0\x00', 0x5, "e1ecc31c66ab98b9", "0af4b7a48facbc69e2606cef3984d524b83675886f962c1b59034a21a24a37a9", 0x7, 0x9}) 302.551352ms ago: executing program 4 (id=5959): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x89}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x125}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}}, 0x0) 162.120366ms ago: executing program 0 (id=5960): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa10001, 0x0, '\x00', @value64}}) 112.643577ms ago: executing program 4 (id=5961): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x42, 0x40, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r0, &(0x7f0000000000), 0x0}, 0x20) 511.6µs ago: executing program 3 (id=5962): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x128}}, 0x0) 0s ago: executing program 0 (id=5963): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x0, 0x53, &(0x7f0000000100)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000200)=0x28) kernel console output (not intermixed with test programs): 11815] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,noblock_validity,discard,nolazytime,data=writeback,errors=continue. Quota mode: none. [ 228.178859][T11815] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.3519: dx entry: limit 0 != root limit 125 [ 228.255800][T11815] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.3519: Corrupt directory, running e2fsck is recommended [ 228.289986][T11826] xt_l2tp: unknown flags: 17 [ 228.370394][T11790] comedi comedi1: reset error (fatal) [ 228.378138][ T4234] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 228.666544][ T4234] usb 5-1: Using ep0 maxpacket: 16 [ 228.786667][ T4234] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 228.798585][ T4234] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.856696][ T4234] usb 5-1: config 1 has no interface number 0 [ 228.889074][ T4234] usb 5-1: config 1 interface 105 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 228.919843][ T4234] usb 5-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 228.969550][ T4234] usb 5-1: config 1 interface 105 has no altsetting 0 [ 229.166685][ T4234] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 229.194528][ T4234] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 229.233998][ T4234] usb 5-1: Product: syz [ 229.244156][ T4234] usb 5-1: Manufacturer: syz [ 229.272898][ T4234] usb 5-1: SerialNumber: syz [ 229.317378][T11874] loop3: detected capacity change from 0 to 4096 [ 229.357590][T11874] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 229.482275][T11874] ntfs: volume version 3.1. [ 229.552638][ T4234] aqc111: probe of 5-1:1.105 failed with error -22 [ 229.586372][ T4985] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 229.805860][ T13] usb 5-1: USB disconnect, device number 14 [ 229.866517][ T4985] usb 3-1: Using ep0 maxpacket: 8 [ 229.959566][ T4234] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 230.156542][ T4985] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 230.175948][ T4985] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.211134][ T4985] usb 3-1: Product: syz [ 230.215421][ T4985] usb 3-1: Manufacturer: syz [ 230.230508][ T4985] usb 3-1: SerialNumber: syz [ 230.244048][ T4985] usb 3-1: config 0 descriptor?? [ 230.323683][ T4985] gspca_main: se401-2.14.0 probing 047d:5003 [ 230.329878][ T4234] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 230.357619][ T4234] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 230.401549][ T4234] usb 1-1: config 0 has an invalid descriptor of length 191, skipping remainder of the config [ 230.442928][ T4234] usb 1-1: config 0 has no interface number 0 [ 230.449750][T11919] loop1: detected capacity change from 0 to 1764 [ 230.540006][T11925] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3569'. [ 230.563748][T11925] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3569'. [ 230.575505][T11925] netlink: 'syz.3.3569': attribute type 3 has an invalid length. [ 230.606541][ T4234] usb 1-1: New USB device found, idVendor=006d, idProduct=0800, bcdDevice= b.28 [ 230.626572][ T4234] usb 1-1: New USB device strings: Mfr=1, Product=26, SerialNumber=3 [ 230.655329][ T4234] usb 1-1: Product: syz [ 230.677069][ T4234] usb 1-1: Manufacturer: syz [ 230.681726][ T4234] usb 1-1: SerialNumber: syz [ 230.706777][T11932] loop1: detected capacity change from 0 to 128 [ 230.715929][ T4234] usb 1-1: config 0 descriptor?? [ 230.756626][ T4985] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 230.764075][ T4985] se401: probe of 3-1:0.0 failed with error -71 [ 230.784532][ T4234] usb 1-1: Found UVC 0.00 device syz (006d:0800) [ 230.816654][ T4234] usb 1-1: No valid video chain found. [ 230.827548][ T4985] usb 3-1: USB disconnect, device number 12 [ 230.881561][T11941] IPv6: NLM_F_CREATE should be specified when creating new route [ 231.020247][ T7] usb 1-1: USB disconnect, device number 17 [ 231.182147][T11955] loop1: detected capacity change from 0 to 8 [ 231.357603][T11965] --map-set only usable from mangle table [ 231.364874][ T26] audit: type=1800 audit(1787906095.920:10): pid=11955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3584" name="file1" dev="loop1" ino=1 res=0 errno=0 [ 231.664292][T11982] loop0: detected capacity change from 0 to 512 [ 231.760758][T11982] EXT4-fs (loop0): Test dummy encryption mode enabled [ 231.793361][T11982] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 231.877991][T11982] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e01c, mo2=0002] [ 231.907695][T11982] EXT4-fs (loop0): orphan cleanup on readonly fs [ 231.928738][T11982] EXT4-fs error (device loop0): ext4_orphan_get:1432: comm syz.0.3596: bad orphan inode 3 [ 231.962186][T11988] loop1: detected capacity change from 0 to 4096 [ 232.025152][T11982] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,noblock_validity,discard,nolazytime,data=writeback,errors=continue. Quota mode: none. [ 232.072653][T11982] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.3596: dx entry: limit 0 != root limit 125 [ 232.092839][T11988] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 232.126770][T11982] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.3596: Corrupt directory, running e2fsck is recommended [ 232.180937][T12005] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3608'. [ 232.226968][T12007] loop4: detected capacity change from 0 to 256 [ 232.776452][ T13] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 232.881602][T12039] loop0: detected capacity change from 0 to 4096 [ 232.997381][T12039] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 233.026386][ T13] usb 3-1: Using ep0 maxpacket: 16 [ 233.060790][T12039] ntfs3: loop0: Failed to load $Extend. [ 233.066997][ T7] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 233.167397][T12047] device ip6gretap2 entered promiscuous mode [ 233.186468][ T13] usb 3-1: unable to get BOS descriptor or descriptor too short [ 233.276665][ T13] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.301731][ T13] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 233.316344][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 233.335984][ T13] usb 3-1: config 1 interface 1 has no altsetting 0 [ 233.446757][ T7] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping [ 233.476586][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 233.496619][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 233.526696][ T13] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 233.536023][T12055] nvme nvme0: rdma connection establishment failed (-104) [ 233.540868][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.562677][ T13] usb 3-1: Product: syz [ 233.572350][ T13] usb 3-1: Manufacturer: syz [ 233.592252][ T13] usb 3-1: SerialNumber: syz [ 233.655601][T12062] loop1: detected capacity change from 0 to 1024 [ 233.678502][ T7] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 233.693531][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.702667][ T7] usb 5-1: Product: syz [ 233.717097][ T7332] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 233.735371][ T7] usb 5-1: Manufacturer: syz [ 233.754078][ T7] usb 5-1: SerialNumber: syz [ 233.765222][ T7] usb 5-1: config 0 descriptor?? [ 233.920171][ T13] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 233.929264][ T13] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 234.014592][T12074] loop3: detected capacity change from 0 to 4096 [ 234.046781][T12074] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 234.145177][ T13] usb 3-1: USB disconnect, device number 13 [ 234.317365][ T7332] usb 1-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=d0.db [ 234.326685][ T7332] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.334736][ T7332] usb 1-1: Product: syz [ 234.339398][ T7332] usb 1-1: Manufacturer: syz [ 234.344117][ T7332] usb 1-1: SerialNumber: syz [ 234.351465][ T7332] usb 1-1: config 0 descriptor?? [ 234.398134][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 234.576350][ T7332] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 234.623796][ T7329] usb 1-1: USB disconnect, device number 18 [ 234.744921][T12079] netlink: 'syz.2.3643': attribute type 275 has an invalid length. [ 234.976561][ T7332] usb 4-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 234.985520][ T7332] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 234.997835][ T7332] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 235.061857][T12104] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 235.213405][T12114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3660'. [ 235.226348][ T7332] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 235.244536][ T7332] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.267626][ T7332] usb 4-1: Product: syz [ 235.271850][ T7332] usb 4-1: Manufacturer: syz [ 235.281990][ T7332] usb 4-1: SerialNumber: syz [ 235.301276][ T7332] usb 4-1: config 0 descriptor?? [ 235.337388][T12076] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 235.355356][T12120] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.369086][ T7332] port100 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 235.613767][ T7332] usb 4-1: USB disconnect, device number 13 [ 235.742941][T12142] nvme nvme0: rdma connection establishment failed (-104) [ 235.801981][ T4263] usb 5-1: USB disconnect, device number 15 [ 235.943694][T12153] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 236.278300][T12171] nvme nvme0: rdma connection establishment failed (-104) [ 236.496903][T12188] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 236.502023][T12190] sctp: [Deprecated]: syz.4.3697 (pid 12190) Use of int in maxseg socket option. [ 236.502023][T12190] Use struct sctp_assoc_value instead [ 236.683345][ T3062] hfsplus: b-tree write err: -5, ino 25 [ 236.713391][ T3062] hfsplus: b-tree write err: -5, ino 4 [ 236.732844][ T3062] hfsplus: b-tree write err: -5, ino 2 [ 236.765424][T12204] netlink: 'syz.0.3705': attribute type 1 has an invalid length. [ 236.934378][T12214] netlink: 'syz.4.3709': attribute type 1 has an invalid length. [ 236.953099][T12215] device vlan0 entered promiscuous mode [ 236.967769][T12214] netlink: 'syz.4.3709': attribute type 2 has an invalid length. [ 236.981632][T12214] netlink: 'syz.4.3709': attribute type 2 has an invalid length. [ 237.006588][T12215] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 237.036687][T12214] netlink: 'syz.4.3709': attribute type 2 has an invalid length. [ 237.044469][T12214] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3709'. [ 237.060299][T12209] loop1: detected capacity change from 0 to 4096 [ 237.188749][T12209] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 237.224085][T12209] ntfs3: loop1: Failed to load $Extend. [ 237.316370][ T4263] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 237.528972][ T7] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 237.606479][ T4263] usb 3-1: Using ep0 maxpacket: 8 [ 237.761777][ T4263] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 237.793208][ T4263] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 237.805819][T12253] xt_CT: You must specify a L4 protocol and not use inversions on it [ 237.822755][ T4263] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 237.842960][ T4263] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 237.892663][ T4263] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 237.896727][ T7] usb 4-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 237.912882][ T4263] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 237.922450][ T7] usb 4-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 237.941697][ T7] usb 4-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 237.953100][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.959899][ T4263] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.023085][ T4263] usb 3-1: config 0 descriptor?? [ 238.130040][ T4193] Bluetooth: hci5: urb ffff888059aed600 submission failed (90) [ 238.226722][ T7] ims_pcu 4-1:1.0: Failed to set line coding, error: -71 [ 238.236343][ T13] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 238.273088][ T7] ims_pcu: probe of 4-1:1.0 failed with error -71 [ 238.293109][ T7] usb 4-1: USB disconnect, device number 14 [ 238.364974][ T4263] usb 3-1: USB disconnect, device number 14 [ 238.409520][T12284] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 238.501000][ T13] usb 5-1: Using ep0 maxpacket: 32 [ 238.736137][T12301] netlink: 'syz.0.3749': attribute type 4 has an invalid length. [ 238.786614][ T13] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 238.813940][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.841320][ T13] usb 5-1: Product: syz [ 238.846180][T12306] netlink: 'syz.0.3752': attribute type 3 has an invalid length. [ 238.861286][ T13] usb 5-1: Manufacturer: syz [ 238.872960][ T13] usb 5-1: SerialNumber: syz [ 238.885073][ T13] usb 5-1: config 0 descriptor?? [ 238.980051][T12313] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3756'. [ 238.984484][T12314] comedi comedi1: dmm32at: I/O port conflict (0x4,16) [ 239.242119][T12332] netlink: 'syz.1.3764': attribute type 1 has an invalid length. [ 239.405603][T12342] 8021q: adding VLAN 0 to HW filter on device bond2 [ 239.408274][ T13] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 239.420881][T12344] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 239.463877][ T13] peak_usb 5-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 239.512650][T12349] netlink: 'syz.2.3772': attribute type 25 has an invalid length. [ 239.526474][T12349] netlink: 'syz.2.3772': attribute type 3 has an invalid length. [ 239.605809][T12357] xt_l2tp: invalid flags combination: 0 [ 239.616891][ T13] peak_usb: probe of 5-1:0.0 failed with error -71 [ 239.651934][ T13] usb 5-1: USB disconnect, device number 16 [ 239.658227][ T4319] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 239.851178][T12369] usb usb8: usbfs: process 12369 (syz.2.3783) did not claim interface 0 before use [ 240.016720][ T4319] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.046381][ T4319] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.076981][ T4319] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 240.218448][ T4319] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 240.244548][ T4319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 240.268030][ T4319] usb 1-1: Product: syz [ 240.322524][ T4319] usb 1-1: Manufacturer: syz [ 240.386275][ T4319] garmin_gps 1-1:1.0: Garmin GPS usb/tty converter detected [ 240.420904][ T4319] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 240.476460][ T4319] garmin_gps: probe of ttyUSB0 failed with error -8 [ 240.590454][ T13] usb 1-1: USB disconnect, device number 19 [ 240.603389][ T13] garmin_gps 1-1:1.0: device disconnected [ 240.685664][T12425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3811'. [ 240.725436][T12425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3811'. [ 240.809027][T12429] dlm: no locking on control device [ 241.108021][T12445] deleting an unspecified loop device is not supported. [ 241.320695][T12460] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3827'. [ 241.403037][T12460] bridge_slave_1: default FDB implementation only supports local addresses [ 241.571102][ T26] audit: type=1400 audit(1787906106.130:11): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name=3A3A0AE10CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A552C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=12469 comm="syz.0.3833" [ 241.783784][T12489] xt_hashlimit: max too large, truncated to 1048576 [ 241.875161][T12485] 8021q: adding VLAN 0 to HW filter on device bond2 [ 242.204361][T12513] loop4: detected capacity change from 0 to 1024 [ 242.373567][T12526] loop2: detected capacity change from 0 to 256 [ 242.490230][T12526] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 242.642518][ T7332] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 242.687733][T12546] openvswitch: netlink: Actions may not be safe on all matching packets [ 242.710863][T12548] validate_nla: 2 callbacks suppressed [ 242.710883][T12548] netlink: 'syz.1.3870': attribute type 1 has an invalid length. [ 242.748584][T12548] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.3870'. [ 242.836355][ T13] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 242.906604][ T7332] usb 5-1: Using ep0 maxpacket: 8 [ 243.109210][ T26] audit: type=1400 audit(1787906107.670:12): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name=3A3A0AE10CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A552C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=12569 comm="syz.3.3882" [ 243.211962][ T3062] hfsplus: b-tree write err: -5, ino 25 [ 243.226986][ T13] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.239962][ T3062] hfsplus: b-tree write err: -5, ino 4 [ 243.246011][ T3062] hfsplus: b-tree write err: -5, ino 2 [ 243.253802][ T13] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 243.263761][ T13] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 243.276679][ T7332] usb 5-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=88.56 [ 243.280704][ T13] usb 1-1: config 1 interface 0 has no altsetting 0 [ 243.302823][ T7332] usb 5-1: New USB device strings: Mfr=102, Product=169, SerialNumber=3 [ 243.313328][ T7332] usb 5-1: Product: syz [ 243.324517][ T7332] usb 5-1: Manufacturer: syz [ 243.330384][ T7332] usb 5-1: SerialNumber: syz [ 243.339005][ T7332] usb 5-1: config 0 descriptor?? [ 243.381576][ T7332] pwc: Logitech ViewPort AV 100 webcam detected. [ 243.494212][T12581] delete_channel: no stack [ 243.499357][ T7329] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 243.536444][ T13] usb 1-1: string descriptor 0 read error: -22 [ 243.542836][ T13] usb 1-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 243.570569][ T13] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 243.648902][ T13] usb 1-1: 0:2 : does not exist [ 243.652567][ T7332] pwc: Failed to set LED on/off time (-71) [ 243.684362][ T13] usb-storage 1-1:1.1: USB Mass Storage device detected [ 243.686377][ T7332] pwc: send_video_command error -71 [ 243.723419][ T7332] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 243.742569][ T7332] Philips webcam: probe of 5-1:0.0 failed with error -71 [ 243.773275][ T7332] usb 5-1: USB disconnect, device number 17 [ 243.876517][ T7329] usb 3-1: not running at top speed; connect to a high speed hub [ 243.924459][T12584] loop1: detected capacity change from 0 to 32768 [ 244.042007][T12584] JBD2: Ignoring recovery information on journal [ 244.086814][T12584] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 244.096707][ T13] us122l: couldn't allocate write buffer [ 244.103016][ T13] snd-usb-us122l: probe of 1-1:1.1 failed with error -22 [ 244.116740][ T13] usb 1-1: USB disconnect, device number 20 [ 244.156460][ T4263] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 244.246427][ T7329] usb 3-1: string descriptor 0 read error: -22 [ 244.253667][ T7329] usb 3-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice= 0.40 [ 244.282082][ T7329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.331738][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 244.355706][T12584] syz.1.3898 (12584) used greatest stack depth: 18272 bytes left [ 244.378069][T12602] loop4: detected capacity change from 0 to 256 [ 244.404807][ T4187] ocfs2: Unmounting device (7,1) on (node local) [ 244.426447][ T4263] usb 4-1: Using ep0 maxpacket: 32 [ 244.450973][T12602] exFAT-fs (loop4): Invalid boot checksum (boot checksum : 0x1119ac00, checksum : 0x901ac400) [ 244.465248][T12602] exFAT-fs (loop4): invalid boot region [ 244.480317][T12602] exFAT-fs (loop4): failed to recognize exfat type [ 244.566803][ T7329] snd-usb-audio: probe of 3-1:1.0 failed with error -2 [ 244.574042][ T4263] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 244.594168][ T4263] usb 4-1: config 0 has no interface number 0 [ 244.636391][ T4263] usb 4-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 244.674469][ T4263] usb 4-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0xD3, skipping [ 244.706157][ T4263] usb 4-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 244.783606][ T13] usb 3-1: USB disconnect, device number 15 [ 244.916559][ T4263] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 244.937053][ T4263] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.945111][ T4263] usb 4-1: Product: syz [ 244.966773][ T4263] usb 4-1: Manufacturer: syz [ 244.971427][ T4263] usb 4-1: SerialNumber: syz [ 245.011617][ T4263] usb 4-1: config 0 descriptor?? [ 245.059559][T12626] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222022 combination not found [ 245.079672][ T4263] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.119/input/input16 [ 245.105349][ T4176] udevd[4176]: inotify_add_watch(7, /dev/nbd0p4, 10) failed: No such file or directory [ 245.310002][ T13] usb 4-1: USB disconnect, device number 15 [ 245.532737][T12644] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3915'. [ 245.793366][T12657] ipt_CLUSTERIP: Please specify destination IP [ 245.896441][T12658] nvme_fabrics: missing parameter 'nqn=%s' [ 246.266901][ T7329] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 246.313659][T12691] loop4: detected capacity change from 0 to 16 [ 246.380064][T12691] erofs: Unknown parameter '5ser_xattr' [ 246.435740][T12691] cifs: Unknown parameter '5ser_xattr' [ 246.526478][ T7329] usb 3-1: Using ep0 maxpacket: 32 [ 246.816592][ T7329] usb 3-1: New USB device found, idVendor=fc08, idProduct=0101, bcdDevice= 0.40 [ 246.843745][ T7329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.862531][ T7329] usb 3-1: Product: syz [ 246.871200][ T7329] usb 3-1: Manufacturer: syz [ 246.886853][ T7329] usb 3-1: SerialNumber: syz [ 247.242932][T12694] loop0: detected capacity change from 0 to 32768 [ 247.296591][ T7329] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 247.326637][ T7329] usb 3-1: 2:1 : unknown format tag 0x804 is detected. processed as MPEG. [ 247.330496][T12694] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.3939 (12694) [ 247.365840][ T7329] usb 3-1: found format II with max.bitrate = 32769, frame size=255 [ 247.396481][ T7329] usb 3-1: 2:1: All rates were zero [ 247.428369][T12694] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 247.455189][T12705] loop4: detected capacity change from 0 to 32768 [ 247.471629][T12694] BTRFS info (device loop0): force zlib compression, level 3 [ 247.477816][ T7329] usb 3-1: USB disconnect, device number 16 [ 247.482179][T12694] BTRFS info (device loop0): turning on flush-on-commit [ 247.521667][T12694] BTRFS info (device loop0): max_inline at 4096 [ 247.534919][T12694] BTRFS info (device loop0): using free space tree [ 247.539907][T12733] vivid-008: ================= START STATUS ================= [ 247.573793][T12705] [ 247.573793][T12705] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 247.573793][T12705] [ 247.615480][T12733] vivid-008: Generate PTS: true [ 247.616416][T12694] BTRFS info (device loop0): has skinny extents [ 247.629247][T12733] vivid-008: Generate SCR: true [ 247.651422][T12733] tpg source WxH: 640x360 (Y'CbCr) [ 247.658154][T12733] tpg field: 1 [ 247.661856][T12733] tpg crop: 640x360@0x0 [ 247.673837][T12733] tpg compose: 640x360@0x0 [ 247.700500][T12705] ialloc: diAlloc returned -5! [ 247.710450][T12733] tpg colorspace: 8 [ 247.714396][T12733] tpg transfer function: 0/0 [ 247.749801][T12733] tpg Y'CbCr encoding: 0/0 [ 247.767790][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 247.793306][T12733] tpg quantization: 0/0 [ 247.801093][ T4195] [ 247.801093][ T4195] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 247.801093][ T4195] [ 247.803465][T12733] tpg RGB range: 0/2 [ 247.821547][T12744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3960'. [ 247.831162][T12733] vivid-008: ================== END STATUS ================== [ 247.849750][ T4195] [ 247.849750][ T4195] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 247.849750][ T4195] [ 248.143399][T12694] BTRFS info (device loop0): enabling ssd optimizations [ 248.240371][T12775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3968'. [ 248.672374][T12795] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3979'. [ 248.882030][T12806] loop2: detected capacity change from 0 to 512 [ 248.998744][T12806] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 249.021347][T12806] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e01c, mo2=0002] [ 249.034934][T12806] EXT4-fs (loop2): orphan cleanup on readonly fs [ 249.058447][T12806] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.3993: attempt to clear invalid blocks 1024 len 1 [ 249.123107][T12806] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.3993: bg 0: block 361: padding at end of block bitmap is not set [ 249.138698][T12806] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 249.149769][T12806] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.3993: invalid indirect mapped block 1811939328 (level 0) [ 249.164868][T12806] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.3993: invalid indirect mapped block 2185560079 (level 1) [ 249.182186][T12806] EXT4-fs (loop2): 1 truncate cleaned up [ 249.191781][T12806] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,init_itable=0x00000000000004ef,noblock_validity,nodioread_nolock,i_version,errors=continue. Quota mode: none. [ 250.003464][T12857] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 250.447735][T12880] netlink: 'syz.4.4015': attribute type 1 has an invalid length. [ 250.477177][T12884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4017'. [ 250.742079][T12892] loop1: detected capacity change from 0 to 4096 [ 250.771090][T12901] MTD: Couldn't look up './bus': -15 [ 250.870896][T12910] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 251.053747][T12916] loop0: detected capacity change from 0 to 1024 [ 251.246526][T12932] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 251.278040][T12916] EXT4-fs (loop0): mounted filesystem without journal. Opts: lazytime,,errors=continue. Quota mode: none. [ 251.438389][T12942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4043'. [ 251.719997][T12954] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4050'. [ 252.136737][T12987] loop3: detected capacity change from 0 to 64 [ 252.399598][T13006] netlink: 'syz.0.4076': attribute type 1 has an invalid length. [ 252.436290][T13006] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4076'. [ 252.464360][T13006] NCSI netlink: No device for ifindex 0 [ 252.554425][T13017] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4081'. [ 252.768901][T13035] loop4: detected capacity change from 0 to 256 [ 252.847794][T13035] exfat: Deprecated parameter 'utf8' [ 252.856405][T13035] exfat: Deprecated parameter 'namecase' [ 252.946585][T13035] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 253.410680][T13086] No such timeout policy "syz0" [ 253.416568][T13087] netlink: 'syz.2.4112': attribute type 1 has an invalid length. [ 253.443987][T13090] netlink: 'syz.3.4117': attribute type 21 has an invalid length. [ 253.476608][T13090] netlink: 'syz.3.4117': attribute type 7 has an invalid length. [ 253.547494][T13096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4121'. [ 253.666059][T13104] loop4: detected capacity change from 0 to 1024 [ 253.955967][T13127] netlink: 'syz.4.4129': attribute type 13 has an invalid length. [ 254.013908][T13127] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 254.061579][T13135] tmpfs: Bad value for 'mpol' [ 254.084363][T13127] gretap0: refused to change device tx_queue_len [ 254.105276][T13127] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 254.178991][T13141] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4141'. [ 254.246318][T13143] loop0: detected capacity change from 0 to 1024 [ 254.413892][T13156] netlink: 'syz.2.4149': attribute type 3 has an invalid length. [ 254.517955][T13143] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 254.986366][ T7329] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 255.026026][T13188] netlink: 'syz.0.4156': attribute type 1 has an invalid length. [ 255.080456][T13190] loop2: detected capacity change from 0 to 256 [ 255.117180][T13193] netlink: 'syz.1.4164': attribute type 1 has an invalid length. [ 255.135414][T13193] netlink: 'syz.1.4164': attribute type 3 has an invalid length. [ 255.150988][T13193] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4164'. [ 255.166172][T13190] exfat: Deprecated parameter 'utf8' [ 255.171716][T13190] exfat: Deprecated parameter 'namecase' [ 255.228444][T13190] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 255.246400][ T7329] usb 5-1: Using ep0 maxpacket: 16 [ 255.376632][ T7329] usb 5-1: config 0 has no interfaces? [ 255.386114][T13207] sctp: [Deprecated]: syz.1.4172 (pid 13207) Use of int in maxseg socket option. [ 255.386114][T13207] Use struct sctp_assoc_value instead [ 255.549264][T13221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4175'. [ 255.576962][ T7329] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 255.599023][ T7329] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.626424][ T7329] usb 5-1: Product: syz [ 255.642158][ T7329] usb 5-1: Manufacturer: syz [ 255.652678][ T7329] usb 5-1: SerialNumber: syz [ 255.690654][ T7329] r8152-cfgselector 5-1: config 0 descriptor?? [ 255.858667][T13237] tc_dump_action: action bad kind [ 255.909042][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.915552][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.967790][T13246] binder: 13243:13246 ioctl c018620b 0 returned -14 [ 255.997555][ T7329] usbip-host 5-1: 5-1 is not in match_busid table... skip! [ 256.110882][T13257] device bond3 entered promiscuous mode [ 256.117418][T13257] 8021q: adding VLAN 0 to HW filter on device bond3 [ 256.219193][T12815] usb 5-1: USB disconnect, device number 18 [ 256.249245][T13267] sctp: [Deprecated]: syz.3.4199 (pid 13267) Use of int in max_burst socket option deprecated. [ 256.249245][T13267] Use struct sctp_assoc_value instead [ 256.414839][T13277] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 256.453316][T13281] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 256.619370][T13291] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 256.900277][T13311] loop1: detected capacity change from 0 to 256 [ 256.924994][T13315] loop0: detected capacity change from 0 to 8 [ 257.004995][T13317] loop4: detected capacity change from 0 to 512 [ 257.026569][T13311] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 257.041729][T13323] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 257.069586][T13315] SQUASHFS error: Unable to read directory block [629:26] [ 257.161539][T13317] EXT4-fs (loop4): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 257.186529][T13317] ext4 filesystem being mounted at /838/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.339345][T13341] 9pnet: Insufficient options for proto=fd [ 257.506614][ T4263] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 257.846520][T13363] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4247'. [ 257.906775][ T4263] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.952378][ T4263] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 257.967897][T13367] xt_connbytes: Forcing CT accounting to be enabled [ 258.010534][ T4263] usb 3-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 258.012261][T13367] set match dimension is over the limit! [ 258.040814][ T4263] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.107256][ T4263] usb 3-1: config 0 descriptor?? [ 258.126623][T13335] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 258.178592][ T4263] usbhid 3-1:0.0: can't add hid device: -22 [ 258.205858][ T4263] usbhid: probe of 3-1:0.0 failed with error -22 [ 258.293647][T13376] netlink: 9412 bytes leftover after parsing attributes in process `syz.0.4253'. [ 258.418311][ T4263] usb 3-1: USB disconnect, device number 17 [ 258.426500][ T7329] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 258.620048][T13379] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 258.846819][ T7329] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c9.98 [ 258.856009][ T7329] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.906622][T12817] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 258.924067][ T7329] usb 5-1: config 0 descriptor?? [ 258.969652][ T7329] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 258.980716][T13389] netlink: del zone limit has 4 unknown bytes [ 259.000464][ T7329] usb 5-1: Detected FT-X [ 259.149663][T12817] usb 4-1: Using ep0 maxpacket: 16 [ 259.260840][T13407] netlink: 300 bytes leftover after parsing attributes in process `syz.0.4269'. [ 259.304054][T13409] loop2: detected capacity change from 0 to 256 [ 259.359531][T12817] usb 4-1: config 4 has an invalid interface number: 251 but max is 0 [ 259.360845][T13413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4272'. [ 259.368503][T12817] usb 4-1: config 4 has no interface number 0 [ 259.384080][T12817] usb 4-1: config 4 interface 251 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 259.395684][T12817] usb 4-1: config 4 interface 251 has no altsetting 0 [ 259.407833][ T7329] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 259.444968][ T7329] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 259.468619][ T7329] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 259.485146][ T7329] usb 5-1: USB disconnect, device number 19 [ 259.530772][ T7329] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 259.552864][ T7329] ftdi_sio 5-1:0.0: device disconnected [ 259.556585][T12817] usb 4-1: New USB device found, idVendor=04e6, idProduct=000a, bcdDevice= 2.00 [ 259.583931][T12817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.635978][T12817] usb 4-1: Product: syz [ 259.641673][T12817] usb 4-1: Manufacturer: syz [ 259.651058][T12817] usb 4-1: SerialNumber: syz [ 259.666355][T13421] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4275'. [ 259.837148][T13431] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 259.868126][T13431] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 259.880593][T13431] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 259.987156][T12817] usb-storage 4-1:4.251: USB Mass Storage device detected [ 260.077764][T12817] usb 4-1: USB disconnect, device number 16 [ 260.133983][T13449] comedi comedi4: commands at RT priority not supported in this driver [ 260.476560][T12816] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 260.553105][T13469] loop4: detected capacity change from 0 to 1764 [ 260.691280][T13469] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 260.756317][T12816] usb 3-1: Using ep0 maxpacket: 8 [ 260.936531][T12816] usb 3-1: unable to get BOS descriptor or descriptor too short [ 261.016560][T12816] usb 3-1: config 4 has an invalid interface number: 112 but max is 0 [ 261.024923][T12816] usb 3-1: config 4 has no interface number 0 [ 261.063344][T12816] usb 3-1: config 4 interface 112 has no altsetting 0 [ 261.099484][T12816] usb 3-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice= 3.40 [ 261.129244][T12816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.417108][T13527] loop3: detected capacity change from 0 to 1024 [ 261.446411][T12816] usb 3-1: string descriptor 0 read error: -71 [ 261.461033][T13529] netlink: 'syz.1.4329': attribute type 11 has an invalid length. [ 261.469592][T12816] pcwd_usb: The device isn't a Human Interface Device [ 261.480733][T13533] binder: 13532:13533 ioctl c018620c 200000000380 returned -22 [ 261.514595][T12816] usb 3-1: USB disconnect, device number 18 [ 261.517528][T13529] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.4329'. [ 262.122548][T13573] netlink: 1076 bytes leftover after parsing attributes in process `syz.2.4350'. [ 262.144792][T13576] x_tables: unsorted entry at hook 4 [ 262.224838][T13581] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4354'. [ 262.264777][T13581] netlink: 'syz.1.4354': attribute type 1 has an invalid length. [ 262.286901][T13584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4357'. [ 262.296637][T13581] netlink: 'syz.1.4354': attribute type 2 has an invalid length. [ 262.320886][T13581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4354'. [ 262.397795][T13592] netlink: 'syz.0.4359': attribute type 1 has an invalid length. [ 262.484879][T13600] ipt_rpfilter: unknown options [ 262.753797][T13620] netlink: 'syz.1.4383': attribute type 1 has an invalid length. [ 262.936584][ T7332] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 263.012465][T13639] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4382'. [ 263.226615][ T7332] usb 3-1: Using ep0 maxpacket: 32 [ 263.252145][T13657] netlink: 'syz.1.4392': attribute type 30 has an invalid length. [ 263.438041][ T7332] usb 3-1: unable to get BOS descriptor or descriptor too short [ 263.516907][ T7332] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 263.708154][ T7332] usb 3-1: New USB device found, idVendor=fc08, idProduct=0101, bcdDevice= 0.40 [ 263.756298][ T7332] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.764522][ T7332] usb 3-1: Product: syz [ 263.794620][ T7332] usb 3-1: Manufacturer: syz [ 263.800619][ T7332] usb 3-1: SerialNumber: syz [ 263.846732][T13614] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 263.871771][T13696] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4410'. [ 263.950747][T13698] netlink: 'syz.4.4412': attribute type 21 has an invalid length. [ 263.997654][T13698] IPv6: NLM_F_CREATE should be specified when creating new route [ 264.027128][T13705] netlink: 'syz.1.4416': attribute type 1 has an invalid length. [ 264.056300][T13705] netlink: 'syz.1.4416': attribute type 2 has an invalid length. [ 264.246642][ T7332] usb 3-1: MIDIStreaming interface descriptor not found [ 264.300961][ T7332] usb 3-1: USB disconnect, device number 19 [ 264.598868][ T4180] udevd[4180]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 264.880567][T13737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.916540][T13737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.333702][T13722] loop3: detected capacity change from 0 to 32768 [ 265.360618][T13763] kernel read not supported for file / 7âW)s!Qfsr)rO2:"T+͟v|ղDvc֠6xc: (pid: 13763 comm: syz.1.4444) [ 265.376092][ T26] audit: type=1800 audit(1787906129.940:13): pid=13763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4444" name=20019C1437B3CFFCC3A25729AB7393A7C721518FF6ECA56673F58772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=62431 res=0 errno=0 [ 265.475494][T13722] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.4422 (13722) [ 265.500298][ T7329] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 265.515389][T13771] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 265.522731][T13771] IPv6: NLM_F_CREATE should be set when creating new route [ 265.530162][T13771] IPv6: NLM_F_CREATE should be set when creating new route [ 265.544792][T13722] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 265.564604][T13722] BTRFS info (device loop3): force zlib compression, level 3 [ 265.584948][T13722] BTRFS info (device loop3): turning on flush-on-commit [ 265.603228][T13722] BTRFS info (device loop3): max_inline at 4096 [ 265.616441][ T7332] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 265.630441][T13722] BTRFS info (device loop3): using free space tree [ 265.652937][T13722] BTRFS info (device loop3): has skinny extents [ 265.707944][T13722] BTRFS info (device loop3): enabling ssd optimizations [ 265.786429][ T7329] usb 3-1: Using ep0 maxpacket: 32 [ 265.936344][ T7332] usb 5-1: Using ep0 maxpacket: 8 [ 266.013020][ T7329] usb 3-1: unable to get BOS descriptor or descriptor too short [ 266.098245][ T7332] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 266.106845][ T7329] usb 3-1: config 12 has an invalid interface number: 183 but max is 1 [ 266.115372][ T7332] usb 5-1: config 0 has no interface number 0 [ 266.122747][ T7329] usb 3-1: config 12 has an invalid interface number: 229 but max is 1 [ 266.133030][ T7332] usb 5-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 266.155653][ T7329] usb 3-1: config 12 has no interface number 0 [ 266.162524][ T7329] usb 3-1: config 12 has no interface number 1 [ 266.169596][ T7332] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 266.181154][ T7329] usb 3-1: config 12 interface 183 has no altsetting 0 [ 266.188688][ T7332] usb 5-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x9A, skipping [ 266.200007][ T7332] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 266.376725][ T7329] usb 3-1: New USB device found, idVendor=1415, idProduct=2000, bcdDevice=2b.98 [ 266.386319][ T7329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.394700][ T7329] usb 3-1: Product: syz [ 266.399234][ T7332] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 266.408487][ T7329] usb 3-1: Manufacturer: syz [ 266.413285][ T7329] usb 3-1: SerialNumber: syz [ 266.418015][ T7332] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.426049][ T7332] usb 5-1: Product: syz [ 266.431190][ T7332] usb 5-1: Manufacturer: syz [ 266.437794][ T7332] usb 5-1: SerialNumber: syz [ 266.446383][ T7332] usb 5-1: config 0 descriptor?? [ 266.488297][ T7332] iowarrior 5-1:0.186: no interrupt-in endpoint found [ 266.805572][ T7329] usb 3-1: USB disconnect, device number 20 [ 267.685141][T13828] loop2: detected capacity change from 0 to 512 [ 267.696610][T13831] netlink: 124 bytes leftover after parsing attributes in process `syz.0.4468'. [ 267.763891][T13834] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4469'. [ 267.795350][T13837] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4470'. [ 267.832980][T13837] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4470'. [ 267.846401][T13837] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4470'. [ 267.856626][T13828] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,. Quota mode: writeback. [ 267.879307][T13828] ext4 filesystem being mounted at /935/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 267.986451][T13828] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.4465: inode #64: comm syz.2.4465: iget: illegal inode # [ 267.999859][T13848] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4475'. [ 268.022312][T13828] EXT4-fs (loop2): Remounting filesystem read-only [ 268.035403][T13828] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.4465: error while reading EA inode 64 err=-117 [ 268.066659][T13828] EXT4-fs (loop2): Remounting filesystem read-only [ 268.079040][T13828] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.4465: inode #64: comm syz.2.4465: iget: illegal inode # [ 268.107277][T13828] EXT4-fs (loop2): Remounting filesystem read-only [ 268.149751][T13828] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.4465: error while reading EA inode 64 err=-117 [ 268.212178][T13828] EXT4-fs (loop2): Remounting filesystem read-only [ 268.414757][T12810] usb 5-1: USB disconnect, device number 20 [ 268.508519][T13871] kernel read not supported for file /!selinuxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 13871 comm: syz.0.4486) [ 268.575216][T13873] Invalid ELF header magic: != ELF [ 268.586001][T13875] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4489'. [ 268.841416][T13886] netlink: 22 bytes leftover after parsing attributes in process `syz.3.4493'. [ 268.886404][T13886] netlink: 22 bytes leftover after parsing attributes in process `syz.3.4493'. [ 268.920932][T13886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4493'. [ 269.235073][T13904] xt_CT: No such helper "snmp_trap" [ 269.477296][T13920] nvme nvme0: failed to connect socket: -111 [ 269.780162][T13951] loop3: detected capacity change from 0 to 164 [ 269.856614][T13957] netlink: zone id is out of range [ 269.935521][T13951] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 270.533298][T14008] netlink: 'syz.4.4553': attribute type 3 has an invalid length. [ 270.662901][T14012] loop1: detected capacity change from 0 to 4096 [ 270.691505][T14014] loop3: detected capacity change from 0 to 4096 [ 270.735238][T14012] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 270.764669][T14014] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 270.988496][T14030] raw_sendmsg: syz.4.4564 forgot to set AF_INET. Fix it! [ 271.108201][T14033] loop2: detected capacity change from 0 to 2048 [ 271.164653][T14039] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 271.246402][T14044] loop1: detected capacity change from 0 to 64 [ 271.258164][ T2425] pvrusb2: request_firmware fatal error with code=-110 [ 271.281196][T14033] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 271.301400][ T2425] pvrusb2: Failure uploading firmware1 [ 271.330170][ T2425] pvrusb2: Device initialization was not successful. [ 271.412762][ T2425] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 271.446296][ T4263] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 271.472861][ T2425] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 271.513604][ T7328] pvrusb2: Device being rendered inoperable [ 271.746291][ T4263] usb 5-1: Using ep0 maxpacket: 32 [ 271.757811][T14068] overlayfs: './file0' not a directory [ 271.886569][ T4263] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 271.895969][T14074] netlink: 'syz.2.4584': attribute type 1 has an invalid length. [ 271.904274][ T4263] usb 5-1: config 0 has no interface number 0 [ 271.920911][ T4263] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 271.952204][ T4263] usb 5-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 272.025321][ T4263] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 272.078681][ T4263] usb 5-1: config 0 interface 196 has no altsetting 0 [ 272.089039][ T7328] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 272.276584][ T4263] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 272.303557][ T4263] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.342280][ T4263] usb 5-1: Product: syz [ 272.368585][ T4263] usb 5-1: Manufacturer: syz [ 272.386283][ T7328] usb 2-1: Using ep0 maxpacket: 32 [ 272.394361][ T4263] usb 5-1: SerialNumber: syz [ 272.416466][ T4974] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 272.445913][ T4263] usb 5-1: config 0 descriptor?? [ 272.486647][T14042] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 272.526677][ T7328] usb 2-1: config 5 has an invalid interface number: 130 but max is 0 [ 272.535094][ T7328] usb 2-1: config 5 has no interface number 0 [ 272.556659][ T7328] usb 2-1: config 5 interface 130 has no altsetting 0 [ 272.714034][T14097] loop0: detected capacity change from 0 to 8 [ 272.757526][ T7328] usb 2-1: New USB device found, idVendor=0711, idProduct=0200, bcdDevice=8b.61 [ 272.767804][ T7328] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.777011][ T7328] usb 2-1: Product: syz [ 272.786616][ T4263] ipheth 5-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 272.795023][ T4263] ipheth: probe of 5-1:0.196 failed with error -71 [ 272.804621][ T7328] usb 2-1: Manufacturer: syz [ 272.814817][ T7328] usb 2-1: SerialNumber: syz [ 272.827354][ T4974] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 272.849775][ T4263] usb 5-1: USB disconnect, device number 21 [ 272.856350][T14097] SQUASHFS error: Unable to read inode 0xe3 [ 272.865961][ T4974] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 272.885747][ T4974] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 273.076554][ T4974] usb 3-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 273.092693][ T4974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.111326][ T4974] usb 3-1: Product: syz [ 273.115854][ T4974] usb 3-1: Manufacturer: syz [ 273.125983][ T4974] usb 3-1: SerialNumber: syz [ 273.227510][ T7328] mct_u232 2-1:5.130: MCT U232 converter detected [ 273.235385][ T7328] mct_u232 ttyUSB0: expected endpoint missing [ 273.273909][ T7328] usb 2-1: USB disconnect, device number 15 [ 273.301321][ T7328] mct_u232 2-1:5.130: device disconnected [ 273.313279][T14117] overlayfs: './file0' not a directory [ 273.406561][ T4974] usb 3-1: 1:1 : no or invalid class specific endpoint descriptor [ 273.429395][ T4974] usb 3-1: 1:1 : format type 0 is detected, processed as PCM [ 273.456503][ T4974] usb 3-1: 1:1 : sample bitwidth 135 in over sample bytes 14 [ 273.474589][ T4974] usb 3-1: 1:1 : unsupported sample bitwidth 135 in 14 bytes [ 273.522249][T14125] loop4: detected capacity change from 0 to 1024 [ 273.548510][ T4974] usb 3-1: USB disconnect, device number 21 [ 273.792347][T14141] __nla_validate_parse: 4 callbacks suppressed [ 273.792366][T14141] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4617'. [ 273.862817][T14145] xt_connbytes: Forcing CT accounting to be enabled [ 273.880887][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 273.906443][T12810] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 274.029544][T14149] loop3: detected capacity change from 0 to 4096 [ 274.075859][T14149] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 274.146524][T12810] usb 1-1: Using ep0 maxpacket: 8 [ 274.306603][T12810] usb 1-1: unable to get BOS descriptor or descriptor too short [ 274.386685][T12810] usb 1-1: config 127 has an invalid interface number: 1 but max is 0 [ 274.395366][T12810] usb 1-1: config 127 has no interface number 0 [ 274.419657][T12810] usb 1-1: config 127 interface 1 altsetting 2 bulk endpoint 0xC has invalid maxpacket 16 [ 274.452576][T12810] usb 1-1: config 127 interface 1 has no altsetting 0 [ 274.616710][T12810] usb 1-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=df.89 [ 274.630601][T12810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.650816][T12810] usb 1-1: Product: syz [ 274.655165][T12810] usb 1-1: Manufacturer: syz [ 274.684120][T12810] usb 1-1: SerialNumber: syz [ 274.690954][T14179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4635'. [ 274.736707][T14131] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 275.039229][T12810] redrat3 1-1:127.1: Couldn't find all endpoints [ 275.073888][T12810] usb 1-1: USB disconnect, device number 21 [ 275.141253][T14163] loop4: detected capacity change from 0 to 32768 [ 275.274961][T14163] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.4628 (14163) [ 275.323281][T14163] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 275.366556][T14163] BTRFS info (device loop4): using free space tree [ 275.401736][T14163] BTRFS info (device loop4): has skinny extents [ 275.726083][T14163] BTRFS info (device loop4): enabling ssd optimizations [ 275.916308][T12810] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 275.925428][ T4179] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 9 /dev/loop4 scanned by udevd (4179) [ 276.030676][T14267] misc userio: The device must be registered before sending interrupts [ 276.176317][T12810] usb 1-1: Using ep0 maxpacket: 8 [ 276.323818][T12810] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 276.355223][T12810] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 276.383954][T12810] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 276.414002][T12810] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 276.444474][T12810] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 276.460776][T14285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4678'. [ 276.471603][T12810] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 276.495514][T12810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.513930][T12810] usb 1-1: config 0 descriptor?? [ 276.779818][T12816] usb 1-1: USB disconnect, device number 22 [ 277.138268][T14318] loop3: detected capacity change from 0 to 8 [ 277.235645][T14318] SQUASHFS error: zlib decompression failed, data probably corrupt [ 277.243994][T14324] netlink: 'syz.4.4697': attribute type 1 has an invalid length. [ 277.254858][T14318] SQUASHFS error: Failed to read block 0x4de: -5 [ 277.270000][T14324] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.4697'. [ 277.273231][T14318] SQUASHFS error: zlib decompression failed, data probably corrupt [ 277.371111][T14318] SQUASHFS error: Failed to read block 0x4df: -5 [ 277.410668][T14318] SQUASHFS error: zlib decompression failed, data probably corrupt [ 277.438828][T14318] SQUASHFS error: Failed to read block 0x4e0: -5 [ 277.472674][T14318] SQUASHFS error: Failed to read block 0x4e4: -5 [ 277.517689][T14318] SQUASHFS error: Failed to read block 0x9cc: -5 [ 277.530191][T14318] SQUASHFS error: Failed to read block 0x2cf4: -5 [ 277.563631][T14318] SQUASHFS error: Failed to read block 0x52cf4: -5 [ 277.595133][T14318] SQUASHFS error: Failed to read block 0x535f4: -5 [ 277.652090][T14344] binder: 14343:14344 ioctl 541b 0 returned -22 [ 277.696387][T14318] SQUASHFS error: zlib decompression failed, data probably corrupt [ 277.732790][T14318] SQUASHFS error: Failed to read block 0x4de: -5 [ 277.765555][ T26] audit: type=1800 audit(1787906142.320:14): pid=14318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4694" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 277.956602][T14362] comedi comedi1: Minor 4 specified more than once! [ 277.965384][T14363] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4712'. [ 279.487273][T14475] overlayfs: conflicting options: nfs_export=on,index=off [ 279.645887][T14485] netlink: zone id is out of range [ 279.674523][T14491] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4778'. [ 279.726993][T14491] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4778'. [ 279.731726][T14495] loop1: detected capacity change from 0 to 256 [ 279.817696][T14495] exfat: Deprecated parameter 'namecase' [ 279.836977][T14495] exfat: Deprecated parameter 'namecase' [ 279.880322][T14495] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0x53f1f8b9, utbl_chksum : 0xe619d300) [ 279.881460][T14489] loop4: detected capacity change from 0 to 8192 [ 280.204419][T14489] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 280.270425][T14489] REISERFS (device loop4): using ordered data mode [ 280.283024][T14512] loop3: detected capacity change from 0 to 16 [ 280.299124][T14489] reiserfs: using flush barriers [ 280.345045][T14489] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 280.417769][T14489] REISERFS (device loop4): checking transaction log (loop4) [ 280.423885][T14512] erofs: (device loop3): mounted with root inode @ nid 36. [ 280.448036][T14514] netlink: 'syz.2.4789': attribute type 8 has an invalid length. [ 280.518951][T14518] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4791'. [ 280.558458][T14514] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4789'. [ 280.603904][T14518] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4791'. [ 280.745541][T14520] loop0: detected capacity change from 0 to 512 [ 280.867572][T14529] loop2: detected capacity change from 0 to 8 [ 280.931290][T14520] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.4792: bg 0: block 16: invalid block bitmap [ 280.963785][T14489] REISERFS (device loop4): Using rupasov hash to sort names [ 281.016475][T14520] EXT4-fs (loop0): Remounting filesystem read-only [ 281.017546][T14489] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 281.034695][T14520] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 281.054703][T14520] EXT4-fs (loop0): Remounting filesystem read-only [ 281.099463][T14529] SQUASHFS error: zlib decompression failed, data probably corrupt [ 281.120656][T14520] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.4792: attempt to clear invalid blocks 1669132790 len 1 [ 281.128226][T14529] SQUASHFS error: Failed to read block 0x4de: -5 [ 281.185848][T14520] EXT4-fs (loop0): Remounting filesystem read-only [ 281.186441][T14529] SQUASHFS error: zlib decompression failed, data probably corrupt [ 281.222785][T14520] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.4792: invalid indirect mapped block 4294967295 (level 1) [ 281.241262][T14529] SQUASHFS error: Failed to read block 0x4df: -5 [ 281.259766][T14543] syz.3.4802 uses old SIOCAX25GETINFO [ 281.281229][T14529] SQUASHFS error: zlib decompression failed, data probably corrupt [ 281.306904][T14529] SQUASHFS error: Failed to read block 0x4e0: -5 [ 281.325840][T14529] SQUASHFS error: Failed to read block 0x4e4: -5 [ 281.334296][T14520] EXT4-fs (loop0): Remounting filesystem read-only [ 281.352539][T14520] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.4792: invalid indirect mapped block 4294967295 (level 2) [ 281.376945][T14529] SQUASHFS error: Failed to read block 0x9cc: -5 [ 281.383798][T14529] SQUASHFS error: Failed to read block 0x2cf4: -5 [ 281.391259][T14529] SQUASHFS error: Failed to read block 0x52cf4: -5 [ 281.398648][T14547] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4805'. [ 281.400490][T14520] EXT4-fs (loop0): Remounting filesystem read-only [ 281.417161][T14520] EXT4-fs (loop0): 1 truncate cleaned up [ 281.423082][T14520] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,errors=remount-ro,. Quota mode: none. [ 281.436956][T14529] SQUASHFS error: Failed to read block 0x535f4: -5 [ 281.447310][T14529] SQUASHFS error: zlib decompression failed, data probably corrupt [ 281.449851][T14547] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4805'. [ 281.475560][T14529] SQUASHFS error: Failed to read block 0x4de: -5 [ 281.484717][ T26] audit: type=1800 audit(1787906146.040:15): pid=14529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4795" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 281.515036][T14547] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4805'. [ 281.606566][ T4974] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 282.058168][ T4974] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 282.104538][ T4974] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 282.216718][ T4974] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 282.236245][ T4974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 282.267501][ T4974] usb 2-1: SerialNumber: syz [ 282.310682][T14591] x_tables: duplicate entry at hook 3 [ 282.327592][ T4974] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 282.334697][ T4974] usb-storage 2-1:1.0: USB Mass Storage device detected [ 282.407758][ T4974] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 282.425380][ T4974] scsi host1: usb-storage 2-1:1.0 [ 282.483020][T14602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4831'. [ 282.695820][T14618] loop0: detected capacity change from 0 to 16 [ 282.741549][T14618] erofs: (device loop0): mounted with root inode @ nid 36. [ 283.258688][T14648] loop2: detected capacity change from 0 to 16 [ 283.296115][T14648] erofs: (device loop2): mounted with root inode @ nid 36. [ 283.579572][T14667] x_tables: duplicate underflow at hook 4 [ 283.712884][T14675] IPVS: set_ctl: invalid protocol: 135 172.20.20.50:20000 [ 283.760359][T12813] usb 2-1: USB disconnect, device number 16 [ 283.863431][T14686] netlink: 'syz.2.4869': attribute type 21 has an invalid length. [ 283.885917][T14686] netlink: 120 bytes leftover after parsing attributes in process `syz.2.4869'. [ 283.906592][T14686] netlink: 'syz.2.4869': attribute type 1 has an invalid length. [ 284.130904][T14700] loop2: detected capacity change from 0 to 1764 [ 284.196460][T12817] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 284.562934][T14718] loop4: detected capacity change from 0 to 4096 [ 284.570378][T12817] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 284.658673][T14718] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 284.756680][T12817] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 284.796749][T12817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.821508][T12817] usb 1-1: Product: syz [ 284.853010][T12817] usb 1-1: Manufacturer: syz [ 284.874018][T12817] usb 1-1: SerialNumber: syz [ 284.947832][T14742] __nla_validate_parse: 1 callbacks suppressed [ 284.947851][T14742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4894'. [ 285.154748][T14754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4899'. [ 285.166640][T12817] snd-usb-6fire 1-1:1.0: unknown device firmware state received from device: [ 285.193783][T12817] eb aa 00 00 00 00 00 00 [ 285.207682][T12817] snd-usb-6fire: probe of 1-1:1.0 failed with error -5 [ 285.369771][ T4263] usb 1-1: USB disconnect, device number 23 [ 285.465861][T14771] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4907'. [ 285.745492][T14787] loop3: detected capacity change from 0 to 1024 [ 285.912587][ T9] hfsplus: b-tree write err: -5, ino 25 [ 285.929988][ T9] hfsplus: b-tree write err: -5, ino 4 [ 285.960431][ T9] hfsplus: b-tree write err: -5, ino 2 [ 286.184505][T14801] device vlan0 left promiscuous mode [ 286.212622][T14801] device macsec0 left promiscuous mode [ 286.240807][T14812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4924'. [ 286.242756][T14801] device wlan0 left promiscuous mode [ 286.259065][T14801] device geneve2 left promiscuous mode [ 286.266077][T14801] device bond1 left promiscuous mode [ 286.285154][T14769] loop4: detected capacity change from 0 to 32768 [ 286.387891][T14769] JBD2: Ignoring recovery information on journal [ 286.692751][T14769] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 286.748043][T14769] ocfs2: Unmounting device (7,4) on (node local) [ 286.859077][T14840] loop1: detected capacity change from 0 to 4096 [ 286.905576][T14853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4941'. [ 286.915515][T14853] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 287.161289][ T4263] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 287.169201][ T4974] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 287.244630][T14861] sctp: [Deprecated]: syz.4.4945 (pid 14861) Use of int in max_burst socket option. [ 287.244630][T14861] Use struct sctp_assoc_value instead [ 287.376569][ T7328] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 287.568585][ T4263] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 287.581644][ T4263] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 287.601120][T14840] loop1: detected capacity change from 0 to 32768 [ 287.604328][ T4263] usb 3-1: config 1 has no interface number 0 [ 287.703610][T14840] XFS (loop1): Mounting V5 Filesystem [ 287.736954][ T4974] usb 4-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00 [ 287.746888][ T4974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.755006][ T4974] usb 4-1: Product: syz [ 287.760147][ T4974] usb 4-1: Manufacturer: syz [ 287.764914][ T4974] usb 4-1: SerialNumber: syz [ 287.776646][ T7328] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 287.784792][ T7328] usb 1-1: config 0 has no interface number 0 [ 287.796380][ T4263] usb 3-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40 [ 287.805663][ T4263] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.815517][ T4974] ums_eneub6250 4-1:1.0: USB Mass Storage device detected [ 287.836432][ T7328] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 287.847216][ T4263] usb 3-1: Product: syz [ 287.851428][ T4263] usb 3-1: Manufacturer: syz [ 287.856078][ T4263] usb 3-1: SerialNumber: syz [ 287.862452][ T7328] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 287.875512][T14840] XFS (loop1): Ending clean mount [ 287.880622][ T4974] scsi host1: usb-storage 4-1:1.0 [ 287.981247][ T4187] XFS (loop1): Unmounting Filesystem [ 288.002775][T14896] loop4: detected capacity change from 0 to 256 [ 288.078459][T14896] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010895, chksum : 0x816c887a, utbl_chksum : 0xe619d30d) [ 288.093878][ T7328] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 288.111462][ T7328] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.121856][ T7328] usb 1-1: Product: syz [ 288.126105][ T7328] usb 1-1: Manufacturer: syz [ 288.141441][ T7328] usb 1-1: SerialNumber: syz [ 288.167206][ T7328] usb 1-1: config 0 descriptor?? [ 288.196946][T14859] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 288.234746][ T7328] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 288.269842][ T7328] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 288.280057][ T4263] usb 3-1: 1:0 : does not exist [ 288.284964][ T4263] usb 3-1: 1:2 : does not exist [ 288.299265][ T4263] usb 3-1: 1:3 : does not exist [ 288.304452][ T4263] usb 3-1: BAAD HEADPHONE p_chmask mismatch [ 288.347624][ T4974] ums_eneub6250: probe of 4-1:1.0 failed with error 3 [ 288.401517][ T4263] snd-usb-audio: probe of 3-1:1.1 failed with error -22 [ 288.416454][ T4974] usb 4-1: USB disconnect, device number 17 [ 288.436424][ T4263] usb 3-1: USB disconnect, device number 22 [ 288.476639][ C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 288.624879][T14910] device geneve1 entered promiscuous mode [ 288.675650][ T4984] usb 1-1: USB disconnect, device number 24 [ 288.687370][ T4984] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 288.696046][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 288.698884][ T4984] cyberjack 1-1:0.69: device disconnected [ 288.996781][T14919] loop3: detected capacity change from 0 to 512 [ 289.063005][T14919] EXT4-fs (loop3): Ignoring removed orlov option [ 289.096565][T14919] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 289.096565][T14919] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 289.096565][T14919] [ 289.132131][T14924] xt_TCPMSS: Only works on TCP SYN packets [ 289.256593][T14933] loop2: detected capacity change from 0 to 1024 [ 289.284238][T14919] EXT4-fs (loop3): mounted filesystem without journal. Opts: orlov,nouser_xattr,,errors=continue. Quota mode: writeback. [ 289.299763][T14919] ext4 filesystem being mounted at /992/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.308825][T14908] loop4: detected capacity change from 0 to 32768 [ 289.417416][ T9] hfsplus: b-tree write err: -5, ino 25 [ 289.429138][ T9] hfsplus: b-tree write err: -5, ino 4 [ 289.435227][ T9] hfsplus: b-tree write err: -5, ino 2 [ 289.503613][T14908] XFS (loop4): Mounting V5 Filesystem [ 289.624798][T14959] loop3: detected capacity change from 0 to 128 [ 289.716320][T12817] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 289.734662][T14966] tmpfs: Bad value for 'mpol' [ 289.756131][T14959] EXT4-fs (loop3): mounted filesystem without journal. Opts: data_err=ignore,,errors=continue. Quota mode: none. [ 289.780864][T14908] XFS (loop4): Ending clean mount [ 289.800232][T14959] ext4 filesystem being mounted at /994/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 289.879738][T14959] EXT4-fs warning (device loop3): verify_group_input:147: Cannot add at group 524405 (only 1 groups) [ 289.909109][ T4195] XFS (loop4): Unmounting Filesystem [ 289.958916][T12817] usb 2-1: Using ep0 maxpacket: 8 [ 290.246614][T12817] usb 2-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 290.266788][T12817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 290.305482][T14984] netlink: 'syz.2.4996': attribute type 1 has an invalid length. [ 290.316660][ T4263] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 290.319457][T12817] usb 2-1: Product: syz [ 290.339924][T12817] usb 2-1: Manufacturer: syz [ 290.344576][T12817] usb 2-1: SerialNumber: syz [ 290.389857][T12817] usb 2-1: config 0 descriptor?? [ 290.431475][T12817] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 290.596451][ T4263] usb 4-1: Using ep0 maxpacket: 8 [ 290.724997][ T4263] usb 4-1: config 0 has an invalid interface number: 32 but max is 0 [ 290.725585][T14994] loop2: detected capacity change from 0 to 8192 [ 290.744155][ T4263] usb 4-1: config 0 has no interface number 0 [ 290.773647][ T4263] usb 4-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 290.793287][ T4263] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.815329][ T4263] usb 4-1: config 0 descriptor?? [ 290.856560][T12817] gspca_sn9c2028: read1 error -71 [ 290.876381][T12817] gspca_sn9c2028: read1 error -71 [ 290.877191][ T4263] usb-storage 4-1:0.32: USB Mass Storage device detected [ 290.881511][T12817] sn9c2028: probe of 2-1:0.0 failed with error -71 [ 290.896864][T14994] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 290.908444][T12817] usb 2-1: USB disconnect, device number 17 [ 290.953154][T14994] REISERFS (device loop2): using ordered data mode [ 290.982443][T14994] reiserfs: using flush barriers [ 290.986754][ T4263] usb-storage 4-1:0.32: device ignored [ 291.014092][T14994] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 291.031307][T14994] REISERFS (device loop2): checking transaction log (loop2) [ 291.080374][ T4263] usb 4-1: USB disconnect, device number 18 [ 291.277941][T14994] REISERFS (device loop2): Using tea hash to sort names [ 291.291909][T14994] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 291.622216][T15025] loop1: detected capacity change from 0 to 256 [ 291.632192][T15027] loop0: detected capacity change from 0 to 512 [ 291.716156][T15027] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 291.739650][T15011] loop4: detected capacity change from 0 to 32768 [ 291.825594][T15027] ext4 filesystem being mounted at /999/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.879702][T15040] netlink: 'syz.3.5018': attribute type 1 has an invalid length. [ 291.898943][T15040] netlink: 'syz.3.5018': attribute type 2 has an invalid length. [ 291.921570][T15011] XFS (loop4): Mounting V5 Filesystem [ 291.973921][T15027] EXT4-fs error (device loop0): ext4_xattr_block_get:543: inode #15: comm syz.0.5016: corrupted xattr block 33 [ 291.984054][T15011] XFS (loop4): Ending clean mount [ 291.993383][T15040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5018'. [ 292.010492][T15046] openvswitch: netlink: Key type 2481 is out of range max 29 [ 292.164460][T15052] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5022'. [ 292.195666][T15052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5022'. [ 292.215089][ T4195] XFS (loop4): Unmounting Filesystem [ 292.297546][T15056] libceph: Failed to parse secret: -22 [ 292.532132][T15059] device veth1_vlan left promiscuous mode [ 292.688436][T15070] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 292.730927][T15071] overlayfs: missing 'lowerdir' [ 292.770763][T15075] unsupported nla_type 39 [ 293.145750][T15091] netlink: 'syz.2.5042': attribute type 2 has an invalid length. [ 293.317338][T15100] netlink: 'syz.2.5044': attribute type 27 has an invalid length. [ 293.547408][T15112] netlink: 'syz.1.5048': attribute type 1 has an invalid length. [ 293.596365][T15112] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5048'. [ 293.645445][T15112] nbd: couldn't find a device at index 1024 [ 294.024302][T15077] loop0: detected capacity change from 0 to 32768 [ 294.117341][T15141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5060'. [ 294.263923][T15154] sctp: [Deprecated]: syz.4.5063 (pid 15154) Use of struct sctp_assoc_value in delayed_ack socket option. [ 294.263923][T15154] Use struct sctp_sack_info instead [ 294.317752][T15077] XFS (loop0): Mounting V5 Filesystem [ 294.326394][ T4263] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 294.493271][T15077] XFS (loop0): Ending clean mount [ 294.600714][T15170] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 294.622095][ T4186] XFS (loop0): Unmounting Filesystem [ 294.726718][ T4263] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 294.748662][ T4263] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 294.790787][ T4263] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 295.014486][T15194] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 295.063013][ T4263] usb 3-1: New USB device found, idVendor=0582, idProduct=0145, bcdDevice= 0.40 [ 295.086727][ T4263] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.126143][ T4263] usb 3-1: Product: syz [ 295.131520][ T4263] usb 3-1: Manufacturer: syz [ 295.152446][ T4263] usb 3-1: SerialNumber: syz [ 295.206728][T15139] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 295.216549][T15201] program syz.1.5083 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 295.264807][T15201] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 295.385805][T15210] netlink: 92 bytes leftover after parsing attributes in process `syz.0.5072'. [ 295.453903][T15213] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 295.467531][T15210] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5072'. [ 295.479144][T15213] comedi comedi3: 8255: I/O port conflict (0xd,4) [ 295.532249][T15213] comedi comedi3: 8255: I/O port conflict (0x8f,4) [ 295.535121][T15210] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5072'. [ 295.563424][T15210] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5072'. [ 295.574070][T15213] comedi comedi3: 8255: I/O port conflict (0x80000,4) [ 295.581779][T15213] comedi comedi3: 8255: I/O port conflict (0x10,4) [ 295.594062][T15213] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 295.627254][T15213] comedi comedi3: 8255: I/O port conflict (0xfffffffff7fffffc,4) [ 295.635274][T15213] comedi comedi3: 8255: I/O port conflict (0x2000080,4) [ 295.644331][ T4263] usb 3-1: MIDIStreaming interface descriptor not found [ 295.710671][ T4263] usb 3-1: USB disconnect, device number 23 [ 295.745387][T15213] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff9,4) [ 295.789961][T15213] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 295.820601][T15213] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 295.839396][T15213] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 295.878396][T15213] comedi comedi3: 8255: I/O port conflict (0x40000009,4) [ 295.907179][T15213] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 295.931397][T15213] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 295.961247][T15213] comedi comedi3: 8255: I/O port conflict (0xffffffffffffffff,4) [ 296.007611][T13732] udevd[13732]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 296.010899][T15213] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 296.122257][T15213] comedi comedi3: 8255: I/O port conflict (0x80,4) [ 296.554934][T15272] xt_ecn: cannot match TCP bits for non-tcp packets [ 297.343260][T15319] loop2: detected capacity change from 0 to 512 [ 297.552800][T15319] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 297.556735][T15337] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.5146'. [ 297.581962][T15319] EXT4-fs (loop2): Remounting filesystem read-only [ 297.589458][T15319] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.5139: invalid indirect mapped block 4278190080 (level 0) [ 297.621730][T15337] openvswitch: netlink: Key type 541 is out of range max 29 [ 297.646356][T15319] EXT4-fs (loop2): Remounting filesystem read-only [ 297.682727][T15319] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.5139: invalid indirect mapped block 1 (level 1) [ 297.707265][T15319] EXT4-fs (loop2): Remounting filesystem read-only [ 297.766672][T12816] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 297.776748][T15319] EXT4-fs (loop2): 1 truncate cleaned up [ 297.787259][T15319] EXT4-fs (loop2): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000009,errors=continue,inode_readahead_blks=0x0000000000000040,errors=remount-ro,barrier=0x0000000000001000,resgid=0x0000000000000000,nolazytime,noquota,auto_da_alloc=0x0000000000000006,data=journal. Quota mode: none. [ 297.935531][T15351] loop1: detected capacity change from 0 to 64 [ 297.953979][T15319] EXT4-fs error (device loop2): ext4_lookup:1850: inode #2: comm syz.2.5139: bad inode number: 1 [ 297.978010][T15356] xt_CT: You must specify a L4 protocol and not use inversions on it [ 297.988238][T15319] EXT4-fs (loop2): Remounting filesystem read-only [ 298.016320][T12816] usb 1-1: Using ep0 maxpacket: 32 [ 298.162603][T12816] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 298.197477][T12816] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 59391, setting to 1024 [ 298.212929][ T4187] hfs: node 4:3 still has 1 user(s)! [ 298.396616][T12816] usb 1-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 298.406000][T12816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.439990][T12816] usb 1-1: Product: syz [ 298.470398][T12816] usb 1-1: Manufacturer: syz [ 298.486934][T12816] usb 1-1: SerialNumber: syz [ 298.503994][T12816] usb 1-1: config 0 descriptor?? [ 298.516332][T12813] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 298.546852][T15334] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 298.786596][T12816] usbtouchscreen: probe of 1-1:0.0 failed with error -71 [ 298.806634][T15362] loop3: detected capacity change from 0 to 32768 [ 298.813297][T12816] usb 1-1: USB disconnect, device number 25 [ 298.826432][T12817] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 298.886690][T12813] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 298.898138][T12813] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 298.912784][T12813] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 298.920355][T15362] JBD2: Ignoring recovery information on journal [ 298.923869][T12813] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 298.940244][T12813] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 298.950662][T12813] usb 3-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 298.959943][T12813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.986682][T15365] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 298.996533][T15365] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 299.007853][T15365] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 299.027835][T12813] mos7720 3-1:1.0: Moschip 2 port adapter converter detected [ 299.075922][T15362] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 299.084915][T15394] sock: sock_timestamping_bind_phc: sock not bind to device [ 299.109857][T15362] ocfs2: Unmounting device (7,3) on (node local) [ 299.188546][T12817] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.205117][T12817] usb 5-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=9e.06 [ 299.215307][T12817] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.243228][T12817] usb 5-1: config 0 descriptor?? [ 299.326098][T12817] gspca_main: kinect-2.14.0 probing 045e:02bf [ 299.462317][T12813] usb 3-1: mos7720: usb_control_msg() failed: -71 [ 299.486703][T12813] usb 3-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 299.542624][T12816] usb 5-1: USB disconnect, device number 22 [ 299.549563][T12813] usb 3-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 299.591249][T12813] usb 3-1: USB disconnect, device number 24 [ 299.597731][ C0] usb 3-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 299.626795][T12813] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 299.671551][T12813] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 299.700564][T12813] mos7720 3-1:1.0: device disconnected [ 299.974475][T15431] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 300.449282][T15462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5205'. [ 300.488135][T15464] loop4: detected capacity change from 0 to 16 [ 300.566869][T15464] erofs: (device loop4): mounted with root inode @ nid 36. [ 300.782526][ T4234] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 301.162314][ T4234] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.165279][T15500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5225'. [ 301.358531][ T4234] usb 2-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 301.396383][ T4234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.404611][ T4234] usb 2-1: Product: syz [ 301.426663][ T4234] usb 2-1: Manufacturer: syz [ 301.442563][ T4234] usb 2-1: SerialNumber: syz [ 301.468776][ T4234] usb 2-1: config 0 descriptor?? [ 301.508705][ T4234] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 301.616122][T15474] loop3: detected capacity change from 0 to 32768 [ 301.830198][T15474] XFS (loop3): Mounting V5 Filesystem [ 301.867787][T15530] netlink: 'syz.2.5237': attribute type 8 has an invalid length. [ 301.946347][ T4234] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 301.953332][ T4234] gspca_pac7302: probe of 2-1:0.0 failed with error -71 [ 301.970363][ T4234] usb 2-1: USB disconnect, device number 18 [ 302.020217][T15474] XFS (loop3): Ending clean mount [ 302.149450][ T4197] XFS (loop3): Unmounting Filesystem [ 302.163987][T15544] netlink: 'syz.4.5242': attribute type 1 has an invalid length. [ 302.351356][T15550] loop2: detected capacity change from 0 to 2048 [ 302.354087][T15512] loop0: detected capacity change from 0 to 32768 [ 302.474957][T15550] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 302.576106][T15563] loop1: detected capacity change from 0 to 16 [ 302.594362][T15563] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 302.655320][T15512] XFS (loop0): Mounting V5 Filesystem [ 302.888013][T15512] XFS (loop0): Ending clean mount [ 303.045797][ T4186] XFS (loop0): Unmounting Filesystem [ 303.173464][T15588] openvswitch: netlink: Message has 8 unknown bytes. [ 303.227822][T15588] openvswitch: netlink: Actions may not be safe on all matching packets [ 303.406486][T15603] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5265'. [ 303.974759][T15637] netlink: 'syz.0.5284': attribute type 11 has an invalid length. [ 303.991917][T15637] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5284'. [ 304.083634][T15645] device bridge3 entered promiscuous mode [ 304.275358][T15655] tmpfs: Bad value for 'uid' [ 304.570599][T15677] loop0: detected capacity change from 0 to 128 [ 304.621691][T15682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5306'. [ 304.638080][T15685] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 304.785698][T15692] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.842705][T15698] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5315'. [ 305.183264][T15719] netlink: 'syz.2.5323': attribute type 5 has an invalid length. [ 305.191182][T15721] loop3: detected capacity change from 0 to 1024 [ 305.268666][T15727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5326'. [ 305.321973][T15721] hfsplus: keylen 65060 too large [ 305.346694][T15721] hfsplus: keylen 65060 too large [ 305.475555][T15741] x_tables: unsorted underflow at hook 1 [ 305.606419][T12813] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 305.721201][T15755] loop3: detected capacity change from 0 to 64 [ 305.977839][T12813] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 306.014929][T12813] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.056383][T12813] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 306.109696][T12813] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 306.149836][T12813] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.198281][T12813] usb 5-1: config 0 descriptor?? [ 306.257546][T12813] usb-storage 5-1:0.0: USB Mass Storage device detected [ 306.335243][T12813] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 306.475530][T12813] usb 5-1: USB disconnect, device number 23 [ 306.776360][ T4974] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 306.908433][T15766] loop2: detected capacity change from 0 to 32768 [ 307.000945][T15812] loop1: detected capacity change from 0 to 4096 [ 307.059020][T15812] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 307.169140][ T4974] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.219845][T15812] ntfs: volume version 3.1. [ 307.393655][ T4974] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 307.436493][ T4974] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.445485][ T4974] usb 1-1: Product: syz [ 307.469929][ T4974] usb 1-1: Manufacturer: syz [ 307.479070][ T4974] usb 1-1: SerialNumber: syz [ 307.497385][ T4974] usb 1-1: config 0 descriptor?? [ 307.507973][T15835] device gtp0 entered promiscuous mode [ 307.520657][T15834] loop2: detected capacity change from 0 to 1024 [ 307.591940][ T4974] ims_pcu 1-1:0.0: Missing CDC union descriptor [ 307.621196][ T4974] ims_pcu: probe of 1-1:0.0 failed with error -22 [ 307.631264][T15840] netlink: 136 bytes leftover after parsing attributes in process `syz.3.5369'. [ 307.676892][ T6158] hfsplus: b-tree write err: -5, ino 25 [ 307.683962][ T6158] hfsplus: b-tree write err: -5, ino 4 [ 307.689961][T15840] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5369'. [ 307.707129][ T6158] hfsplus: b-tree write err: -5, ino 2 [ 307.756447][T15840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5369'. [ 307.782152][T15840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5369'. [ 307.823096][T15796] loop0: detected capacity change from 0 to 24 [ 307.903943][T12816] usb 1-1: USB disconnect, device number 26 [ 307.995891][T15854] loop3: detected capacity change from 0 to 256 [ 308.123575][T15854] FAT-fs (loop3): Directory bread(block 64) failed [ 308.149921][T15854] FAT-fs (loop3): Directory bread(block 65) failed [ 308.183084][T15854] FAT-fs (loop3): Directory bread(block 66) failed [ 308.230267][T15854] FAT-fs (loop3): Directory bread(block 67) failed [ 308.247533][T15854] FAT-fs (loop3): Directory bread(block 68) failed [ 308.281307][T15854] FAT-fs (loop3): Directory bread(block 69) failed [ 308.356636][T15854] FAT-fs (loop3): Directory bread(block 70) failed [ 308.385339][T15854] FAT-fs (loop3): Directory bread(block 71) failed [ 308.422657][T15854] FAT-fs (loop3): Directory bread(block 72) failed [ 308.432727][T15854] FAT-fs (loop3): Directory bread(block 73) failed [ 308.791179][ T1323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.840580][T15897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 308.859228][ T1323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.890688][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 308.927291][T15899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 309.226362][T12817] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 309.386402][T12816] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 309.596661][T12817] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.609003][T15935] comedi comedi1: pcl816: I/O port conflict (0x100,16) [ 309.616525][T12817] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 309.628984][ T4263] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 309.638110][T12816] usb 2-1: Using ep0 maxpacket: 32 [ 309.643561][T12817] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 309.656704][T12817] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 309.670568][T12817] usb 4-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c [ 309.680854][T12813] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 309.691959][T15937] device bridge5 entered promiscuous mode [ 309.698138][T12817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.710496][T12817] usb 4-1: config 0 descriptor?? [ 309.749867][T12817] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input21 [ 309.759823][T12816] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 309.776225][T12816] usb 2-1: config 0 has no interface number 0 [ 309.866054][T15945] nft_compat: unsupported protocol 5 [ 309.916387][ T4263] usb 3-1: Using ep0 maxpacket: 32 [ 309.936793][T12816] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 309.966624][T12813] usb 1-1: Using ep0 maxpacket: 32 [ 309.992470][T12816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.001110][T12816] usb 2-1: Product: syz [ 310.005778][T12816] usb 2-1: Manufacturer: syz [ 310.013403][T12816] usb 2-1: SerialNumber: syz [ 310.019860][T12816] usb 2-1: config 0 descriptor?? [ 310.033845][ T4234] usb 4-1: USB disconnect, device number 19 [ 310.057781][T12816] smsc95xx v2.0.0 [ 310.066815][ T4263] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.077209][T15951] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5423'. [ 310.087533][T12813] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 310.089376][ T4263] usb 3-1: New USB device found, idVendor=0525, idProduct=2888, bcdDevice=d0.43 [ 310.097351][ T4234] appletouch 4-1:0.0: input: appletouch disconnected [ 310.106203][ T4263] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.115435][T12813] usb 1-1: config 0 has no interface number 0 [ 310.134000][T12813] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 310.157706][ T4263] usb 3-1: config 0 descriptor?? [ 310.286341][T12816] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 310.297685][T12813] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 310.316220][T12813] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.324795][T12816] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 310.335726][T12813] usb 1-1: Product: syz [ 310.344726][T12816] usb 2-1: USB disconnect, device number 19 [ 310.351381][T12813] usb 1-1: Manufacturer: syz [ 310.356877][T12813] usb 1-1: SerialNumber: syz [ 310.387977][T12813] usb 1-1: config 0 descriptor?? [ 310.426677][ T4263] cdc_subset: probe of 3-1:0.0 failed with error -22 [ 310.433838][T15933] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 310.697670][T12816] usb 3-1: USB disconnect, device number 25 [ 310.706723][T12813] asix: probe of 1-1:0.188 failed with error -71 [ 310.730385][T12813] usb 1-1: USB disconnect, device number 27 [ 311.105535][T15998] loop3: detected capacity change from 0 to 256 [ 311.532565][ T7329] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 311.614042][T16031] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 311.635020][ T26] audit: type=1400 audit(1787906176.190:16): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="#(%#{//(@\)//&@},['%%&\#*" pid=16029 comm="syz.4.5462" [ 311.936629][ T7329] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 311.962361][ T7329] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 312.071499][T16060] loop3: detected capacity change from 0 to 128 [ 312.093698][T16062] loop0: detected capacity change from 0 to 64 [ 312.152731][T16062] attempt to access beyond end of device [ 312.152731][T16062] loop0: rw=0, want=45068, limit=64 [ 312.177228][ T7329] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 312.197319][T16060] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: none. [ 312.231097][ T7329] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.270368][T16060] ext4 filesystem being mounted at /1095/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 312.287975][ T7329] usb 2-1: Product: syz [ 312.303240][ T7329] usb 2-1: Manufacturer: syz [ 312.309998][ T4263] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 312.327032][ T7329] usb 2-1: SerialNumber: syz [ 312.332337][T16062] Buffer I/O error on dev loop0, logical block 22533, async page read [ 312.381126][T16062] attempt to access beyond end of device [ 312.381126][T16062] loop0: rw=0, want=45068, limit=64 [ 312.436691][T16062] Buffer I/O error on dev loop0, logical block 22533, async page read [ 312.583467][T16078] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5485'. [ 312.623390][T16078] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5485'. [ 312.692606][ T7329] usb 2-1: 0:2 : does not exist [ 312.706528][ T7329] usb 2-1: unit 9 not found! [ 312.722290][T16086] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5487'. [ 312.742304][ T7329] usb 2-1: USB disconnect, device number 20 [ 312.743291][T16086] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5487'. [ 312.866563][ T4263] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 312.886489][ T4263] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 312.906243][ T4263] usb 5-1: Product: syz [ 312.916302][ T4263] usb 5-1: SerialNumber: syz [ 312.932526][ T4263] usb 5-1: config 0 descriptor?? [ 313.019061][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 313.166659][T16102] openvswitch: netlink: Missing key (keys=48, expected=10000000) [ 313.316790][T16085] loop3: detected capacity change from 0 to 32768 [ 313.451893][T12816] usb 5-1: USB disconnect, device number 24 [ 313.576317][T12813] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 313.623001][T16119] [U]  [ 314.106480][T12813] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 314.121307][T12813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.133518][T12813] usb 2-1: Product: syz [ 314.141990][T12813] usb 2-1: Manufacturer: syz [ 314.154583][T12813] usb 2-1: SerialNumber: syz [ 314.366640][ T4234] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 314.752946][ T4234] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 314.806467][ T4234] usb 5-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 314.851921][T12813] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 314.996613][ T4234] usb 5-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 315.012866][ T4234] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.033166][ T4234] usb 5-1: Product: syz [ 315.043291][ T4234] usb 5-1: Manufacturer: syz [ 315.053302][T16168] loop2: detected capacity change from 0 to 512 [ 315.053421][ T4234] usb 5-1: SerialNumber: syz [ 315.139483][T16174] loop0: detected capacity change from 0 to 8 [ 315.193426][T16168] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 315.206631][T16168] ext4 filesystem being mounted at /1157/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 315.243245][T16174] SQUASHFS error: Unknown inode type 0 in squashfs_iget! [ 315.377003][ T4319] usb 2-1: USB disconnect, device number 21 [ 315.566286][ C0] usb 5-1: received EP1 urb->status = -71 [ 315.572417][ T4234] usb 5-1: unable to init card! (ret=-110) [ 315.579151][ T4234] snd-usb-caiaq: probe of 5-1:1.0 failed with error -110 [ 315.602685][ T4234] usb 5-1: USB disconnect, device number 25 [ 315.743429][T16201] xt_TCPMSS: Only works on TCP SYN packets [ 315.896386][T12813] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 315.903569][T16208] loop2: detected capacity change from 0 to 64 [ 315.904647][T12813] ath9k_htc: Failed to initialize the device [ 315.940206][ T4319] usb 2-1: ath9k_htc: USB layer deinitialized [ 316.354598][T16237] loop0: detected capacity change from 0 to 1024 [ 316.436809][T16237] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 316.456925][T16244] loop2: detected capacity change from 0 to 256 [ 316.515363][T16248] netlink: 92 bytes leftover after parsing attributes in process `syz.4.5567'. [ 316.583345][T16237] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 316.806780][T16260] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5571'. [ 316.833473][T16261] netlink: 'syz.2.5572': attribute type 1 has an invalid length. [ 316.872930][T16260] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5571'. [ 316.910056][T16261] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.5572'. [ 317.091701][T16264] loop3: detected capacity change from 0 to 4096 [ 317.177337][T16278] x_tables: duplicate underflow at hook 3 [ 317.195047][T16264] ntfs: volume version 3.1. [ 317.196763][T16280] loop1: detected capacity change from 0 to 8 [ 317.202900][T16276] xt_socket: unknown flags 0x48 [ 317.253771][T16282] loop2: detected capacity change from 0 to 1024 [ 317.277549][T16280] squashfs: Bad value for 'errors' [ 317.285131][T16264] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 317.309505][T16264] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 317.342836][T16264] ntfs: (device loop3): __ntfs_bitmap_set_bits_in_run(): Failed to map first page (error -5), aborting. [ 317.357087][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.357327][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.375144][T16264] ntfs: (device loop3): __ntfs_cluster_free(): Failed to clear first run (error -5), aborting. [ 317.419434][T16282] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 317.437703][T16264] ntfs: (device loop3): ntfs_truncate(): Failed to release cluster(s) (error code -5). Unmount and run chkdsk to recover the lost cluster(s). [ 317.497856][T16282] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 317.580870][ T4197] ntfs: (device loop3): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 317.839241][T16313] openvswitch: netlink: Missing valid actions attribute. [ 317.877012][T16313] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 318.266539][ T4974] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 318.393617][T16345] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5612'. [ 318.536511][ T4974] usb 1-1: Using ep0 maxpacket: 16 [ 318.566109][T16342] loop4: detected capacity change from 0 to 4096 [ 318.610801][T16342] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 318.648863][ T26] audit: type=1800 audit(1787906183.210:17): pid=16337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.2.5609" name="/" dev="tmpfs" ino=1192 res=0 errno=0 [ 318.691433][ T4974] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 318.716225][ T4974] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 318.916456][ T4974] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 318.936659][ T4974] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.944990][ T4974] usb 1-1: Product: syz [ 318.989896][ T4974] usb 1-1: Manufacturer: syz [ 319.006826][ T4974] usb 1-1: SerialNumber: syz [ 319.051100][T16362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5621'. [ 319.356684][ T4974] usb 1-1: 0:2 : does not exist [ 319.401246][T16379] loop1: detected capacity change from 0 to 256 [ 319.423244][ T4974] usb 1-1: USB disconnect, device number 28 [ 319.492866][T16379] FAT-fs (loop1): Directory bread(block 64) failed [ 319.535224][T16379] FAT-fs (loop1): Directory bread(block 65) failed [ 319.574595][T16385] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5633'. [ 319.575951][T16379] FAT-fs (loop1): Directory bread(block 66) failed [ 319.627189][T16385] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5633'. [ 319.642239][T16387] loop3: detected capacity change from 0 to 2048 [ 319.642641][T16379] FAT-fs (loop1): Directory bread(block 67) failed [ 319.667739][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 319.711258][T16387] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 319.738252][T16379] FAT-fs (loop1): Directory bread(block 68) failed [ 319.773301][T16379] FAT-fs (loop1): Directory bread(block 69) failed [ 319.780911][T16379] FAT-fs (loop1): Directory bread(block 70) failed [ 319.796144][T16387] UDF-fs: error (device loop3): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1376) [ 319.820894][T16379] FAT-fs (loop1): Directory bread(block 71) failed [ 319.854818][T16379] FAT-fs (loop1): Directory bread(block 72) failed [ 319.867095][T16387] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 1376) has too big (3368) entry at pos 0 [ 319.875020][T16379] FAT-fs (loop1): Directory bread(block 73) failed [ 319.901986][T16397] xt_CT: You must specify a L4 protocol and not use inversions on it [ 320.103425][T16405] xt_TCPMSS: Only works on TCP SYN packets [ 320.224725][T16409] loop0: detected capacity change from 0 to 512 [ 320.286474][ T4974] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 320.371330][T16409] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 320.394001][T16420] netlink: 'syz.1.5646': attribute type 3 has an invalid length. [ 320.432882][T16409] ext4 filesystem being mounted at /1104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 320.617845][T16432] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 320.718228][ T4974] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 320.777963][T16442] netlink: 'syz.3.5658': attribute type 21 has an invalid length. [ 320.814989][T16442] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5658'. [ 320.922302][ T4974] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 320.938449][ T4974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.961536][T16451] No such timeout policy "syz1" [ 320.966364][ T4974] usb 5-1: Product: syz [ 320.973361][T16452] loop3: detected capacity change from 0 to 736 [ 320.982179][T16454] netlink: 'syz.0.5664': attribute type 2 has an invalid length. [ 320.994007][ T4974] usb 5-1: Manufacturer: syz [ 321.017569][ T4974] usb 5-1: SerialNumber: syz [ 321.041086][ T4974] usb 5-1: config 0 descriptor?? [ 321.128386][ T4974] ims_pcu 5-1:0.0: Missing CDC union descriptor [ 321.144974][ T4974] ims_pcu: probe of 5-1:0.0 failed with error -22 [ 321.234357][T16465] netlink: 'syz.3.5669': attribute type 1 has an invalid length. [ 321.252062][T16468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5671'. [ 321.417027][T16400] set_capacity_and_notify: 1 callbacks suppressed [ 321.417046][T16400] loop4: detected capacity change from 0 to 24 [ 321.445238][T16477] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 321.502528][ T4974] usb 5-1: USB disconnect, device number 26 [ 321.746972][ T150] block nbd0: Attempted send on invalid socket [ 321.753451][ T150] blk_update_request: I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 321.776469][ T1092] block nbd0: Attempted send on invalid socket [ 321.782701][ T1092] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 321.796575][ T150] block nbd0: Attempted send on invalid socket [ 321.796637][ T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 321.797138][ T150] block nbd0: Attempted send on invalid socket [ 321.797160][ T150] blk_update_request: I/O error, dev nbd0, sector 18 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 321.797479][ T150] block nbd0: Attempted send on invalid socket [ 321.797499][ T150] blk_update_request: I/O error, dev nbd0, sector 30 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 321.797730][ T150] block nbd0: Attempted send on invalid socket [ 321.797750][ T150] blk_update_request: I/O error, dev nbd0, sector 36 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 321.797810][T16498] VFS: unable to find oldfs superblock on device nbd0 [ 322.183809][T16515] loop4: detected capacity change from 0 to 512 [ 322.291827][T16515] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 322.291937][T16515] ext4 filesystem being mounted at /1130/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 322.313343][T16515] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #2: block 18: comm syz.4.5693: lblock 23 mapped to illegal pblock 18 (length 1) [ 322.518718][T16530] __nla_validate_parse: 2 callbacks suppressed [ 322.518738][T16530] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5701'. [ 322.904330][T16558] netlink: 'syz.1.5714': attribute type 2 has an invalid length. [ 323.591115][T16604] netlink: 'syz.0.5737': attribute type 16 has an invalid length. [ 323.603603][T16604] netlink: 'syz.0.5737': attribute type 17 has an invalid length. [ 323.693869][ T4234] libceph: connect (1)127.0.0.1:6789 error -101 [ 323.716104][ T4234] libceph: mon0 (1)127.0.0.1:6789 connect error [ 323.731415][T16610] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5739'. [ 323.770269][T16610] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5739'. [ 323.781100][ T4234] libceph: connect (1)127.0.0.1:6789 error -101 [ 323.805942][ T4234] libceph: mon0 (1)127.0.0.1:6789 connect error [ 323.817245][ T4263] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 324.080322][ T4234] libceph: connect (1)127.0.0.1:6789 error -101 [ 324.102524][ T4234] libceph: mon0 (1)127.0.0.1:6789 connect error [ 324.158523][T16631] loop1: detected capacity change from 0 to 256 [ 324.202290][ T4263] usb 3-1: config 0 has an invalid interface number: 13 but max is 0 [ 324.240752][ T4263] usb 3-1: config 0 has no interface number 0 [ 324.258107][ T4263] usb 3-1: too many endpoints for config 0 interface 13 altsetting 233: 211, using maximum allowed: 30 [ 324.260449][T16631] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 324.317717][ T4263] usb 3-1: config 0 interface 13 altsetting 233 has 0 endpoint descriptors, different from the interface descriptor's value: 211 [ 324.354207][ T4263] usb 3-1: config 0 interface 13 has no altsetting 0 [ 324.466537][T16606] ceph: No mds server is up or the cluster is laggy [ 324.480971][T16648] damon: min_nr_regions (0) must be at least 3 [ 324.547374][ T4263] usb 3-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice= 2.23 [ 324.572016][ T4263] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.596383][ T4263] usb 3-1: Product: syz [ 324.609743][ T4263] usb 3-1: Manufacturer: syz [ 324.622054][ T4263] usb 3-1: SerialNumber: syz [ 324.627429][ T4234] libceph: connect (1)127.0.0.1:6789 error -101 [ 324.633815][ T4234] libceph: mon0 (1)127.0.0.1:6789 connect error [ 324.665278][ T4263] usb 3-1: config 0 descriptor?? [ 324.727876][ T4263] ftdi_sio 3-1:0.13: FTDI USB Serial Device converter detected [ 324.745760][ T4263] usb 3-1: Detected FT8U232AM [ 324.765561][ T4263] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 324.956042][ T4319] usb 3-1: USB disconnect, device number 26 [ 324.973249][ T4319] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 325.006392][ T4234] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 325.020040][T16670] netlink: 'syz.3.5769': attribute type 3 has an invalid length. [ 325.025100][ T4319] ftdi_sio 3-1:0.13: device disconnected [ 325.139240][T16674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5771'. [ 325.366511][ T4234] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 325.393705][ T4234] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 325.543657][T16654] loop4: detected capacity change from 0 to 40427 [ 325.576928][ T4234] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 325.602995][ T4234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.626316][ T4234] usb 2-1: Product: syz [ 325.630714][ T4234] usb 2-1: Manufacturer: syz [ 325.647340][T16654] F2FS-fs (loop4): invalid crc value [ 325.651085][ T4234] usb 2-1: SerialNumber: syz [ 325.665212][ T4234] usb 2-1: config 0 descriptor?? [ 325.706627][T16658] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 325.723999][T16658] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 325.744732][T16654] F2FS-fs (loop4): Found nat_bits in checkpoint [ 325.993818][T16654] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 326.006551][ T4234] dm9601: probe of 2-1:0.0 failed with error -71 [ 326.065976][ T4234] usb 2-1: USB disconnect, device number 22 [ 326.606458][T16744] netlink: 'syz.3.5804': attribute type 1 has an invalid length. [ 327.081432][T16768] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5816'. [ 327.155824][T16776] netlink: 'syz.0.5819': attribute type 4 has an invalid length. [ 327.183131][T16776] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5819'. [ 327.268218][T16776] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 327.304316][T16778] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5820'. [ 327.346674][T16782] device vti0 entered promiscuous mode [ 327.724121][T16806] loop3: detected capacity change from 0 to 2048 [ 327.832996][T16806] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 327.903828][T16824] program syz.4.5843 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 327.916430][T16825] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 328.004696][T16806] NILFS (loop3): error -2 truncating bmap (ino=16) [ 328.139220][T16841] loop4: detected capacity change from 0 to 24 [ 328.585673][T16867] loop1: detected capacity change from 0 to 512 [ 328.715140][T16865] loop3: detected capacity change from 0 to 4096 [ 328.804660][T16867] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 328.890224][T16867] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #16: comm syz.1.5862: corrupted inode contents [ 328.910902][T16867] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #16: comm syz.1.5862: mark_inode_dirty error [ 328.924627][T16867] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #16: comm syz.1.5862: corrupted inode contents [ 328.953184][T16867] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.5862: mark_inode_dirty error [ 329.001483][T16867] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #16: comm syz.1.5862: corrupted inode contents [ 329.035950][T16867] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 329.077865][T16867] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #16: comm syz.1.5862: corrupted inode contents [ 329.168897][T16867] EXT4-fs error (device loop1): ext4_truncate:4286: inode #16: comm syz.1.5862: mark_inode_dirty error [ 329.236378][T16867] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 329.276411][T16895] netlink: 'syz.2.5876': attribute type 4 has an invalid length. [ 329.284557][T16895] netlink: 17 bytes leftover after parsing attributes in process `syz.2.5876'. [ 329.307648][T16867] EXT4-fs (loop1): 1 truncate cleaned up [ 329.357101][T16867] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 329.428285][T16867] ext4 filesystem being mounted at /1141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 329.809939][T16911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5884'. [ 330.036485][T12816] libceph: connect (1)127.0.0.1:6789 error -101 [ 330.042963][T12816] libceph: mon0 (1)127.0.0.1:6789 connect error [ 330.061136][T12816] libceph: connect (1)127.0.0.1:6789 error -101 [ 330.071708][T12816] libceph: mon0 (1)127.0.0.1:6789 connect error [ 330.223396][T16921] loop0: detected capacity change from 0 to 8192 [ 330.287066][T16921] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 330.346842][T16921] REISERFS (device loop0): using ordered data mode [ 330.351401][ T4234] libceph: connect (1)127.0.0.1:6789 error -101 [ 330.353444][T16921] reiserfs: using flush barriers [ 330.367091][T16921] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 330.397652][T16921] REISERFS (device loop0): checking transaction log (loop0) [ 330.406663][T16921] REISERFS (device loop0): Using r5 hash to sort names [ 330.428258][ T4234] libceph: mon0 (1)127.0.0.1:6789 connect error [ 330.612971][T16960] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 330.810602][T16926] ceph: No mds server is up or the cluster is laggy [ 330.911088][T16974] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5912'. [ 330.924270][T16976] loop0: detected capacity change from 0 to 164 [ 331.092155][T16976] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 331.554527][T17017] netlink: 'syz.0.5933': attribute type 1 has an invalid length. [ 331.826805][ T7328] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 331.975854][T17035] IPv6: sit2: Disabled Multicast RS [ 332.116433][ T7328] usb 2-1: Using ep0 maxpacket: 8 [ 332.152217][T17045] SET target dimension over the limit! [ 332.223104][T17005] loop2: detected capacity change from 0 to 32768 [ 332.251607][ T7328] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 332.284573][ T7328] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 332.344353][T17005] JBD2: Ignoring recovery information on journal [ 332.353660][ T7328] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 332.442174][ T7328] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 332.522673][ T7328] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 332.535257][ T7328] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 332.556436][T17005] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 332.588203][ T7328] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.643657][ T7328] usb 2-1: config 0 descriptor?? [ 332.659494][T17005] (syz.2.5929,17005,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #4097: rec_len % 4 != 0 - offset=0, inode=18446673704965378049, rec_len=255, name_len=1 [ 332.683250][T17065] loop3: detected capacity change from 0 to 2048 [ 332.713050][T17016] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 332.793316][T17005] (syz.2.5929,17005,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 332.806700][T17070] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 332.865100][T17005] (syz.2.5929,17005,1):ocfs2_mknod:298 ERROR: status = -2 [ 332.868972][T17065] NILFS (loop3): error -2 truncating bmap (ino=16) [ 332.898705][T17005] (syz.2.5929,17005,1):ocfs2_mknod:502 ERROR: status = -2 [ 332.905891][T17005] (syz.2.5929,17005,1):ocfs2_create:676 ERROR: status = -2 [ 333.007560][T17070] ------------[ cut here ]------------ [ 333.014230][T17070] WARNING: CPU: 1 PID: 17070 at fs/nilfs2/dat.c:200 nilfs_dat_commit_end+0x5ac/0x6b0 [ 333.024186][T17070] Modules linked in: [ 333.028166][T17070] CPU: 1 PID: 17070 Comm: segctord Not tainted syzkaller #0 [ 333.035519][T17070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 333.045726][T17070] RIP: 0010:nilfs_dat_commit_end+0x5ac/0x6b0 [ 333.051793][T17070] Code: 8b 34 24 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b8 54 03 00 e8 53 27 65 fe e8 be 94 ec fd e9 b8 fc ff ff e8 44 27 65 fe <0f> 0b e9 16 fc ff ff e8 38 27 65 fe e8 a3 94 ec fd e9 74 fe ff ff [ 333.071681][T17070] RSP: 0018:ffffc9000326f3c0 EFLAGS: 00010293 [ 333.077924][T17070] RAX: ffffffff8313e85c RBX: ffff88807b5de1a0 RCX: ffff88802a49bb80 [ 333.086180][T17070] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 00000000003f0002 [ 333.094292][T17070] RBP: 0000000000000003 R08: ffff8880214511d7 R09: 1ffff1100428a23a [ 333.102359][T17070] R10: dffffc0000000000 R11: ffffed100428a23b R12: ffff88802a49d308 [ 333.110515][T17070] R13: ffff8880555029e0 R14: 00000000003f0002 R15: ffff88805651bcb0 [ 333.118748][T17070] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 333.127758][T17070] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 333.134555][T17070] CR2: 00007f937ab736c8 CR3: 0000000061658000 CR4: 00000000003506e0 [ 333.142662][T17070] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 333.150785][T17070] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 333.159160][T17070] Call Trace: [ 333.162455][T17070] [ 333.165416][T17070] nilfs_dat_commit_update+0x24/0x40 [ 333.170762][T17070] nilfs_btree_commit_update_v+0x93/0x410 [ 333.176550][T17070] nilfs_btree_propagate+0x8fe/0xcb0 [ 333.179511][ T4319] usb 2-1: USB disconnect, device number 23 [ 333.181913][T17070] nilfs_bmap_propagate+0x70/0x120 [ 333.192976][T17070] nilfs_segctor_apply_buffers+0x15d/0x320 [ 333.198991][T17070] ? nilfs_collect_file_data+0xc0/0xc0 [ 333.204462][T17070] nilfs_segctor_scan_file+0x7af/0x9d0 [ 333.209985][T17070] ? trace_nilfs2_collection_stage_transition+0x1a0/0x1a0 [ 333.217689][T17070] ? rcu_is_watching+0x11/0xa0 [ 333.222590][T17070] nilfs_segctor_do_construct+0x1c0c/0x6c10 [ 333.228683][T17070] ? verify_lock_unused+0x140/0x140 [ 333.233954][T17070] ? nilfs_transaction_unlock+0x210/0x210 [ 333.239715][T17070] ? nilfs_bmap_test_and_clear_dirty+0x4c/0x70 [ 333.245938][T17070] ? clear_nonspinnable+0x60/0x60 [ 333.251256][T17070] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 333.256883][T17070] ? __lock_acquire+0x7b50/0x7b50 [ 333.262026][T17070] ? __rwlock_init+0x140/0x140 [ 333.266922][T17070] ? do_raw_spin_unlock+0x11d/0x230 [ 333.272251][T17070] ? _raw_spin_unlock+0x24/0x40 [ 333.277222][T17070] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 333.282750][T17070] nilfs_segctor_construct+0x170/0x690 [ 333.288364][T17070] nilfs_segctor_thread+0x533/0x1100 [ 333.293954][T17070] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 333.299976][T17070] ? nilfs_iput_work_func+0x70/0x70 [ 333.305219][T17070] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 333.311182][T17070] ? _raw_spin_unlock+0x40/0x40 [ 333.316080][T17070] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 333.322119][T17070] ? init_wait_entry+0xd0/0xd0 [ 333.327031][T17070] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 333.332976][T17070] ? __kthread_parkme+0x14e/0x1b0 [ 333.338110][T17070] kthread+0x42e/0x520 [ 333.342315][T17070] ? nilfs_iput_work_func+0x70/0x70 [ 333.347914][T17070] ? kthread_blkcg+0xd0/0xd0 [ 333.352592][T17070] ret_from_fork+0x1f/0x30 [ 333.357209][T17070] [ 333.360253][T17070] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 333.367535][T17070] CPU: 1 PID: 17070 Comm: segctord Not tainted syzkaller #0 [ 333.375029][T17070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 333.385088][T17070] Call Trace: [ 333.388470][T17070] [ 333.391444][T17070] dump_stack_lvl+0x188/0x250 [ 333.396210][T17070] ? show_regs_print_info+0x20/0x20 [ 333.401451][T17070] ? load_image+0x410/0x410 [ 333.406264][T17070] panic+0x2f8/0x850 [ 333.410385][T17070] ? bpf_jit_dump+0xd0/0xd0 [ 333.415001][T17070] ? ret_from_fork+0x1f/0x30 [ 333.419866][T17070] ? nilfs_dat_commit_end+0x5ac/0x6b0 [ 333.425367][T17070] __warn+0x248/0x2b0 [ 333.429358][T17070] ? nilfs_dat_commit_end+0x5ac/0x6b0 [ 333.434752][T17070] report_bug+0x1b9/0x2e0 [ 333.439156][T17070] handle_bug+0x3a/0x70 [ 333.443347][T17070] exc_invalid_op+0x16/0x40 [ 333.447875][T17070] asm_exc_invalid_op+0x16/0x20 [ 333.452932][T17070] RIP: 0010:nilfs_dat_commit_end+0x5ac/0x6b0 [ 333.459174][T17070] Code: 8b 34 24 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b8 54 03 00 e8 53 27 65 fe e8 be 94 ec fd e9 b8 fc ff ff e8 44 27 65 fe <0f> 0b e9 16 fc ff ff e8 38 27 65 fe e8 a3 94 ec fd e9 74 fe ff ff [ 333.478807][T17070] RSP: 0018:ffffc9000326f3c0 EFLAGS: 00010293 [ 333.485183][T17070] RAX: ffffffff8313e85c RBX: ffff88807b5de1a0 RCX: ffff88802a49bb80 [ 333.493196][T17070] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 00000000003f0002 [ 333.501282][T17070] RBP: 0000000000000003 R08: ffff8880214511d7 R09: 1ffff1100428a23a [ 333.509447][T17070] R10: dffffc0000000000 R11: ffffed100428a23b R12: ffff88802a49d308 [ 333.517529][T17070] R13: ffff8880555029e0 R14: 00000000003f0002 R15: ffff88805651bcb0 [ 333.525636][T17070] ? nilfs_dat_commit_end+0x5ac/0x6b0 [ 333.531153][T17070] nilfs_dat_commit_update+0x24/0x40 [ 333.536484][T17070] nilfs_btree_commit_update_v+0x93/0x410 [ 333.542417][T17070] nilfs_btree_propagate+0x8fe/0xcb0 [ 333.547720][T17070] nilfs_bmap_propagate+0x70/0x120 [ 333.552850][T17070] nilfs_segctor_apply_buffers+0x15d/0x320 [ 333.558652][T17070] ? nilfs_collect_file_data+0xc0/0xc0 [ 333.564299][T17070] nilfs_segctor_scan_file+0x7af/0x9d0 [ 333.569786][T17070] ? trace_nilfs2_collection_stage_transition+0x1a0/0x1a0 [ 333.577032][T17070] ? rcu_is_watching+0x11/0xa0 [ 333.581916][T17070] nilfs_segctor_do_construct+0x1c0c/0x6c10 [ 333.588006][T17070] ? verify_lock_unused+0x140/0x140 [ 333.593264][T17070] ? nilfs_transaction_unlock+0x210/0x210 [ 333.599149][T17070] ? nilfs_bmap_test_and_clear_dirty+0x4c/0x70 [ 333.605349][T17070] ? clear_nonspinnable+0x60/0x60 [ 333.610479][T17070] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 333.616183][T17070] ? __lock_acquire+0x7b50/0x7b50 [ 333.621250][T17070] ? __rwlock_init+0x140/0x140 [ 333.626100][T17070] ? do_raw_spin_unlock+0x11d/0x230 [ 333.631305][T17070] ? _raw_spin_unlock+0x24/0x40 [ 333.636179][T17070] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 333.641867][T17070] nilfs_segctor_construct+0x170/0x690 [ 333.647567][T17070] nilfs_segctor_thread+0x533/0x1100 [ 333.653008][T17070] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 333.659001][T17070] ? nilfs_iput_work_func+0x70/0x70 [ 333.664290][T17070] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 333.670184][T17070] ? _raw_spin_unlock+0x40/0x40 [ 333.675172][T17070] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 333.681222][T17070] ? init_wait_entry+0xd0/0xd0 [ 333.686030][T17070] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 333.692037][T17070] ? __kthread_parkme+0x14e/0x1b0 [ 333.697097][T17070] kthread+0x42e/0x520 [ 333.701193][T17070] ? nilfs_iput_work_func+0x70/0x70 [ 333.706421][T17070] ? kthread_blkcg+0xd0/0xd0 [ 333.711154][T17070] ret_from_fork+0x1f/0x30 [ 333.715705][T17070] [ 333.718988][T17070] Kernel Offset: disabled [ 333.723602][T17070] Rebooting in 86400 seconds..