last executing test programs: 5m31.966377649s ago: executing program 0 (id=12008): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, 0x0, 0xfffffffffffffef7) syz_usb_connect(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d4ee0620cf10618012b70102030109022d00010000100009040600024f1ce8000905020200020200000905820200020700000904"], 0x0) 5m30.963636497s ago: executing program 2 (id=12016): r0 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000040)={0x0, [[0x8000000, 0x0, 0x0, 0x20000000, 0x0, 0xb, 0x2000], [0x10000, 0x0, 0x3, 0x200000, 0x0, 0x0, 0x9], [0x7]], '\x00', [{}, {0xd}, {}, {0x0, 0x8}, {0x3, 0x7}, {0x8000000, 0x4005f, 0x1}, {0x1}, {0x1}, {}, {}, {}, {0x0, 0x400000}], '\x00', 0x1000}) 5m30.782440838s ago: executing program 2 (id=12017): r0 = socket$inet_tcp(0x2, 0x1, 0x0) fsetxattr$system_posix_acl(r0, 0x0, 0x0, 0x0, 0x6) 5m30.590582189s ago: executing program 2 (id=12019): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) 5m30.450026197s ago: executing program 2 (id=12020): syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f0000000500)={[{@noquota}, {@gid}, {@errors_continue}, {@errors_continue}, {@gid={'gid', 0x3d, 0xee00}}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@quota}, {@errors_continue}, {@discard_size}]}, 0x1, 0x61c0, &(0x7f0000006740)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) 5m30.372367992s ago: executing program 0 (id=12022): r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f00000004c0), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_SEND(r0, 0xd0009411, &(0x7f0000000080)={{r0}, 0x0, 0x0, 0xffffffffffffffff}) 5m29.217554559s ago: executing program 2 (id=12032): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xa1, &(0x7f0000000000), &(0x7f0000000280)=0x1a) 5m28.51275486s ago: executing program 0 (id=12039): r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9, 0x8, 0x1, 0x3d4}, &(0x7f0000000040), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000000)={0x8, 0xffffffffffffffff, 0x6, {0x4}}, 0x1) 5m27.435569043s ago: executing program 2 (id=12047): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000030c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)={0xffffffffffffffff, 0x2, 0xffffffff, 0x3}) 5m27.274192702s ago: executing program 0 (id=12050): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x2000004, &(0x7f0000000500)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$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") mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 5m26.635793779s ago: executing program 32 (id=12047): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000030c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)={0xffffffffffffffff, 0x2, 0xffffffff, 0x3}) 5m26.62907194s ago: executing program 0 (id=12052): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/fs/cgroup', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 5m26.246345932s ago: executing program 0 (id=12058): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x46, &(0x7f00000000c0)=0x5, 0x4) 5m25.565951792s ago: executing program 33 (id=12058): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x46, &(0x7f00000000c0)=0x5, 0x4) 2.358069453s ago: executing program 3 (id=16527): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000060000b000000000000000008500000008000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0x8005, 0x0, &(0x7f0000000000)='\a\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.257123549s ago: executing program 4 (id=16529): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0) ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x484, 0x0, 0x8}]}) 2.035741251s ago: executing program 4 (id=16532): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000011c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001200)={@host}) 2.017008583s ago: executing program 3 (id=16533): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000040)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000000)="aa1d484ea0fffb00f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e", 0x2a}], 0x2) 1.802880225s ago: executing program 3 (id=16537): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001c80)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x173b2a7e, @remote, 0x19}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000140)="56501366ff47", 0x6}], 0x1, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000004c0)="13cf2ed58e27d4", 0x7}], 0x1}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001240)="c127afed81fd299442a233452c727bd3d4d832646bc094d9eeabc1b2443a6712f7edd9fe628f3ac554264c8d258476a118c12b0a39dabe", 0x37}, {&(0x7f0000001280)="a48c353171354199c6c7fe99247ec2e76117b1db0fea337d75bd786cc87c2ead2841367e8df4a2cb004050709a9f428a7143d87dfc934b0ffe94", 0x3a}, {&(0x7f00000013c0)="8cc3b3df84eef7496ca0b4fe126a656e0c88a52bce8d1d265839e845c6dd26409388025ed03cbf84e8e167ee0486f94ccbdf14d0c9ed", 0x36}, {&(0x7f0000001400)="4ed7dca15bfbededc205f1c621150e40be4df0d162f5d4da63a7ad91a6ce339f7b62e88c51ef4a456e9ee0ab9808b5c8dd523e2b1dea3773d6538a77b289e0a24140632d5d697d97cc74a5ba6ac692e17ca563fa239abd9d445989f449c541e92c5469f91cb28e71845c201accae01b196852e56178601b6a90940605bffd0eb5d0d39fc0d4a5c13c41b8a7b389f630377ace66b5591153dae473675ed5d639aa19d6d3040d9375fa6d597ee1e0e0c5f8dbd348930a7e7c65830cb168fc35bee77b0c2a2fb3518878d3dceddb5be8a06b4d31066", 0xd4}], 0x4}}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f00000017c0)="359db6a559aae72e61ce3e58493e5e", 0xf}], 0x1}}], 0x4, 0x28048005) 1.72631871s ago: executing program 4 (id=16538): futex(&(0x7f000000cffc)=0x1, 0x6, 0x4, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x5, 0x24, 0x0, &(0x7f0000000140)=0xfffffffe, 0x3000003) 1.569528189s ago: executing program 3 (id=16541): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) setsockopt$ax25_int(r0, 0x101, 0xa, &(0x7f0000000080), 0x4) 1.528618701s ago: executing program 6 (id=16542): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f00000000c0)={0x8, &(0x7f0000000140)=[{0x46, '\x00', @st={0x4, [{0x2, @uvalue=0x2}, {0x0, @uvalue=0x8}, {0x0, @uvalue=0x1}, {0x1, @svalue=0x42429793}]}, 0x809}]}) 1.345248242s ago: executing program 1 (id=16544): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000300)={'dmm32at\x00', [0x400cf7, 0x5, 0xd09a, 0xfff7ffff, 0x3, 0xfffffffe, 0x20000004, 0x6, 0xffe, 0x9, 0x110, 0x1001, 0xc, 0x4, 0xffff, 0x6, 0x5, 0x40000109, 0x830, 0x30000, 0x10003, 0x2, 0x800, 0xe2db, 0x2, 0xd, 0x7, 0x3, 0xc, 0x5, 0x70f]}) 1.286227555s ago: executing program 3 (id=16545): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x1, &(0x7f0000000300)={[{@heartbeat_none}, {@heartbeat_none}, {@acl}, {@barrier={'barrier', 0x3d, 0x2}}, {@coherency_full}, {@localflocks}, {@coherency_full}, {@inode64}]}, 0x1, 0x4421, &(0x7f0000004500)="$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") syz_mount_image$msdos(&(0x7f0000000940), &(0x7f0000001cc0)='.\x00', 0x1a4a438, &(0x7f0000000300)=ANY=[], 0xb, 0x0, &(0x7f0000000300)) 1.277686036s ago: executing program 6 (id=16546): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='uid_map\x00') write$FUSE_BMAP(r0, 0x0, 0x0) 1.228778059s ago: executing program 5 (id=16547): setreuid(0xee01, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"/2750], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1.102283996s ago: executing program 1 (id=16548): r0 = io_uring_setup(0x4053, &(0x7f0000000040)={0x0, 0x2063, 0x0, 0x2, 0x94}) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000000600)={0x43, 0x1, 0x0, 0x0, &(0x7f00000001c0)=[0xffffffffffffff00]}, 0x20) 1.091162587s ago: executing program 6 (id=16549): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x38, 0x3, 0x8, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4305}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0xa080}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8010}, 0x48850) 989.436503ms ago: executing program 5 (id=16550): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x440, 0x260, 0x150, 0x150, 0x0, 0xf8010000, 0x370, 0x238, 0x238, 0x370, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @empty, [], [], 'veth0_to_team\x00', 'macvlan1\x00', {}, {}, 0x84}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@eui64={{0x28}}, @common=@inet=@sctp={{0x148}, {[0x4e21], [0x4e24], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, [{}, {0x0, 0x4}], 0x0, 0xd}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'pim6reg1\x00', 'gre0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0xc, 0xe, 0xfffffffa, 0xfa8, '\x00', 'syz0\x00', {0x100000001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) 934.815655ms ago: executing program 1 (id=16551): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f883b6ff00000000002800008500000036000000850000000700000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 898.847768ms ago: executing program 6 (id=16552): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0x7d, &(0x7f0000000340)={0x8, 0x77, 0x6, 0x10, 0x39c1, 0x4, 0x4}, &(0x7f0000000840)=0x20) 771.529676ms ago: executing program 5 (id=16553): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, 0x0, 0x0, r0) 735.406767ms ago: executing program 4 (id=16554): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x28, 0x0, 0x7, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x300}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040001}, 0x4) 703.582729ms ago: executing program 1 (id=16555): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a80), 0x20100, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000140)={0x15}) 694.25364ms ago: executing program 6 (id=16556): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x4000007ff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000280)={0x0, 0x56595559, 0x1, @stepwise={0x1ff0, 0x8, 0x7, 0x800, 0x4, 0x4}}) 539.062039ms ago: executing program 5 (id=16557): unshare(0x40600) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 507.517861ms ago: executing program 1 (id=16558): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="840000001800010028bd7000ffdbdf251d01020015000400000000800503000001b782cc84b82b9d03"], 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 484.450732ms ago: executing program 6 (id=16559): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file0\x00', 0x40, &(0x7f0000000000)=ANY=[], 0x4, 0xf82, &(0x7f0000003080)="$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") openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x181142, 0x25) 475.096753ms ago: executing program 4 (id=16560): open(0x0, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000480), &(0x7f00000004c0)='./file1\x00', 0x1020, &(0x7f00000005c0)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xee00}}, 0x5, 0x0, 0x0) 266.335165ms ago: executing program 5 (id=16561): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) 245.701356ms ago: executing program 1 (id=16562): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0xa8002, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r0, 0x80045113, &(0x7f00000003c0)) 225.789617ms ago: executing program 4 (id=16563): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000001900)={0x8000011, {{0x29, 0x0, 0x37000000, @private2={0xfc, 0x2, '\x00', 0x1}, 0xff}}}, 0xfd5c) 77.819926ms ago: executing program 5 (id=16564): r0 = socket(0x1e, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000000100)=[{{&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{&(0x7f0000000180)=@pppol2tpv3={0x1e, 0x4, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0}}], 0x2, 0x4048040) 0s ago: executing program 3 (id=16565): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x1c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xcb58c9f2fa78421b}, 0x40c0080) kernel console output (not intermixed with test programs): creating quota [ 1053.406287][ T2977] EXT4-fs error (device loop6): ext4_acquire_dquot:6835: comm syz.6.14255: Failed to acquire dquot type 1 [ 1053.421127][ T27] audit: type=1326 audit(2000000508.766:3207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3016 comm="syz.3.14273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b139bf79 code=0x7ffc0000 [ 1053.550575][ T27] audit: type=1326 audit(2000000508.766:3208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3016 comm="syz.3.14273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b139bf79 code=0x7ffc0000 [ 1053.617603][T30164] EXT4-fs (loop6): unmounting filesystem. [ 1053.665387][ T27] audit: type=1326 audit(2000000508.796:3209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3016 comm="syz.3.14273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f78b139bf79 code=0x7ffc0000 [ 1053.791732][ T27] audit: type=1326 audit(2000000508.796:3210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3016 comm="syz.3.14273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f78b139bce2 code=0x7ffc0000 [ 1054.101552][ T3029] loop3: detected capacity change from 0 to 1024 [ 1054.131359][ T7442] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1054.194142][ T3006] loop1: detected capacity change from 0 to 32768 [ 1054.292546][ T3042] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.14283'. [ 1054.311554][ T3039] IPv6: sit3: Disabled Multicast RS [ 1054.340244][ T3006] XFS (loop1): Mounting V5 Filesystem [ 1054.355123][ T7442] usb 7-1: Using ep0 maxpacket: 32 [ 1054.370825][ T7442] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1054.399519][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.437678][ T3006] XFS (loop1): Ending clean mount [ 1054.474172][ T7442] usb 7-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1054.542508][ T4269] XFS (loop1): Unmounting Filesystem [ 1054.548555][ T7442] usb 7-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1054.564361][ T3047] loop5: detected capacity change from 0 to 2048 [ 1054.577978][ T7442] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.620707][ T7442] usb 7-1: Product: syz [ 1054.630905][ T7442] usb 7-1: Manufacturer: syz [ 1054.639684][ T3047] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1054.666000][ T7442] usb 7-1: SerialNumber: syz [ 1054.906010][ T7442] usb 7-1: Limiting number of CPorts to U8_MAX [ 1054.955465][ T7442] usb 7-1: Not enough endpoints found in device, aborting! [ 1055.134330][T28084] usb 7-1: USB disconnect, device number 11 [ 1055.974722][ T3082] netlink: 'syz.5.14303': attribute type 9 has an invalid length. [ 1056.031367][ T3082] netlink: 399 bytes leftover after parsing attributes in process `syz.5.14303'. [ 1056.289544][ T3098] loop4: detected capacity change from 0 to 256 [ 1056.373958][ T3100] netlink: 'syz.3.14310': attribute type 1 has an invalid length. [ 1056.455447][ T3100] netlink: 'syz.3.14310': attribute type 3 has an invalid length. [ 1056.479569][ T3102] loop6: detected capacity change from 0 to 1024 [ 1056.487674][ T3100] netlink: 224 bytes leftover after parsing attributes in process `syz.3.14310'. [ 1056.626005][ T3102] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1056.660963][ T3102] ext4 filesystem being mounted at /397/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1056.749565][T30164] EXT4-fs (loop6): unmounting filesystem. [ 1057.036218][ T3123] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 1057.348735][ T3141] netlink: 'syz.6.14327': attribute type 8 has an invalid length. [ 1057.438690][ T4377] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1057.618868][ T3150] kAFS: unparsable volume name [ 1057.656827][ T4377] usb 2-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice= 8.8f [ 1057.705899][ T4377] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.755724][ T4377] usb 2-1: config 0 descriptor?? [ 1057.778366][ T4377] gspca_main: pac7311-2.14.0 probing 093a:2601 [ 1058.070144][ T3168] loop3: detected capacity change from 0 to 8 [ 1058.109144][ T3168] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1058.126222][ T3168] /dev/loop3: Can't open blockdev [ 1058.183844][ T4377] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71 [ 1058.225363][ T4377] pac7311: probe of 2-1:0.0 failed with error -71 [ 1058.245457][ T4377] usb 2-1: USB disconnect, device number 58 [ 1058.294426][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 1058.294458][ T27] audit: type=1326 audit(2000000513.636:3214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3171 comm="syz.6.14342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af3f9bf79 code=0x7ffc0000 [ 1058.367067][ T27] audit: type=1326 audit(2000000513.686:3215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3171 comm="syz.6.14342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af3f9bf79 code=0x7ffc0000 [ 1058.444331][ T27] audit: type=1326 audit(2000000513.736:3216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3171 comm="syz.6.14342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f7af3f9bf79 code=0x7ffc0000 [ 1058.524241][ T27] audit: type=1326 audit(2000000513.736:3217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3171 comm="syz.6.14342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af3f9bf79 code=0x7ffc0000 [ 1058.573211][ T27] audit: type=1326 audit(2000000513.736:3218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3171 comm="syz.6.14342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af3f9bf79 code=0x7ffc0000 [ 1058.708874][ T3182] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.14346'. [ 1058.762043][ T3182] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 1059.999384][ T3233] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 1060.527179][ T3252] loop3: detected capacity change from 0 to 512 [ 1060.534442][ T3252] /dev/loop3: Can't open blockdev [ 1060.995606][ T27] audit: type=1326 audit(2000000516.346:3219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3269 comm="syz.6.14389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af3f9bf79 code=0x7ffc0000 [ 1061.079895][ T27] audit: type=1326 audit(2000000516.366:3220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3269 comm="syz.6.14389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af3f9bf79 code=0x7ffc0000 [ 1061.200971][ T27] audit: type=1326 audit(2000000516.366:3221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3269 comm="syz.6.14389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af3f9bf79 code=0x7ffc0000 [ 1061.225113][ T3275] netlink: 'syz.5.14392': attribute type 1 has an invalid length. [ 1061.225136][ T3275] netlink: 'syz.5.14392': attribute type 3 has an invalid length. [ 1061.225150][ T3275] netlink: 224 bytes leftover after parsing attributes in process `syz.5.14392'. [ 1061.366822][ T27] audit: type=1326 audit(2000000516.366:3222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3269 comm="syz.6.14389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f7af3f9bf79 code=0x7ffc0000 [ 1061.460710][ T27] audit: type=1326 audit(2000000516.376:3223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3269 comm="syz.6.14389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af3f9bf79 code=0x7ffc0000 [ 1061.679958][ T3293] loop1: detected capacity change from 0 to 764 [ 1062.434504][ T3316] program syz.4.14413 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1062.482965][ T3324] loop5: detected capacity change from 0 to 256 [ 1062.512647][ T3324] exfat: Deprecated parameter 'utf8' [ 1062.576184][ T3324] exfat: Deprecated parameter 'utf8' [ 1062.666655][ T3324] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 1062.689476][ T3329] i2c i2c-0: Invalid block read size 255 [ 1063.151876][ T3343] loop1: detected capacity change from 0 to 2048 [ 1063.166508][ T3343] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1063.666306][ T3367] loop5: detected capacity change from 0 to 512 [ 1063.821977][ T3367] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1063.864426][ T3367] ext4 filesystem being mounted at /467/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1063.937580][ T3367] EXT4-fs error (device loop5): ext4_xattr_block_get:543: inode #15: comm syz.5.14433: corrupted xattr block 33 [ 1063.975529][ T3367] fscrypt (loop5, inode 15): Error -117 getting encryption context [ 1064.014603][ T3383] netlink: 'syz.1.14439': attribute type 1 has an invalid length. [ 1064.122838][T30130] EXT4-fs (loop5): unmounting filesystem. [ 1064.374505][ T3399] netlink: 'syz.3.14445': attribute type 1 has an invalid length. [ 1064.405142][ T3399] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.14445'. [ 1064.535062][ T3403] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1065.204085][ T3433] netlink: 6 bytes leftover after parsing attributes in process `syz.6.14462'. [ 1065.255194][ T3433] netlink: 6 bytes leftover after parsing attributes in process `syz.6.14462'. [ 1065.572459][ T3447] autofs4:pid:3447:autofs_fill_super: called with bogus options [ 1065.585151][ T4377] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1065.775139][ T4377] usb 6-1: Using ep0 maxpacket: 16 [ 1065.784806][ T4377] usb 6-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 1065.814153][ T4377] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.853420][ T4377] usb 6-1: Product: syz [ 1065.873349][ T4377] usb 6-1: Manufacturer: syz [ 1065.895163][ T4377] usb 6-1: SerialNumber: syz [ 1066.001891][ T3463] netlink: 755 bytes leftover after parsing attributes in process `syz.4.14477'. [ 1066.162932][ T4377] snd-usb-audio: probe of 6-1:222.0 failed with error -71 [ 1066.211585][ T4377] usb 6-1: USB disconnect, device number 5 [ 1066.267143][ T4398] udevd[4398]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1066.623162][ T7442] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1066.825158][ T7442] usb 4-1: Using ep0 maxpacket: 32 [ 1066.835823][ T7442] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1066.872498][ T7442] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.913746][ T7442] usb 4-1: config 0 descriptor?? [ 1066.938961][ T7442] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1067.340624][ T7442] gspca_sunplus: reg_w_riv err -71 [ 1067.346064][ T7442] sunplus: probe of 4-1:0.0 failed with error -71 [ 1067.380414][ T7442] usb 4-1: USB disconnect, device number 75 [ 1067.389301][ T3505] loop4: detected capacity change from 0 to 1024 [ 1067.474699][ T3505] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62564!=20869) [ 1067.501979][ T3505] EXT4-fs error (device loop4): __ext4_get_inode_loc:4513: comm syz.4.14497: Invalid inode table block 0 in block_group 0 [ 1067.542551][ T3505] EXT4-fs (loop4): no journal found [ 1068.358383][ T3543] bond0: option miimon: invalid value (18446744073709551615) [ 1068.375045][ T3543] bond0: option miimon: allowed values 0 - 2147483647 [ 1068.822769][ T3559] loop1: detected capacity change from 0 to 1764 [ 1068.833837][ T3561] netlink: 28 bytes leftover after parsing attributes in process `syz.5.14525'. [ 1068.890879][ T3559] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1069.134808][ T3569] loop3: detected capacity change from 0 to 16 [ 1069.164379][ T3569] /dev/loop3: Can't open blockdev [ 1069.366306][T28084] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1069.403120][ T3577] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14533'. [ 1069.442987][ T3577] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14533'. [ 1069.571416][T28084] usb 6-1: config 1 has an invalid interface number: 253 but max is 1 [ 1069.596524][ T3586] loop3: detected capacity change from 0 to 64 [ 1069.603138][T28084] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1069.630653][T28084] usb 6-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 1069.655013][T28084] usb 6-1: config 1 has no interface number 2 [ 1069.676391][T28084] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1069.734856][T28084] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1069.773704][T28084] usb 6-1: config 1 interface 1 has no altsetting 0 [ 1069.814286][T28084] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1069.844472][T28084] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.904692][T28084] usb 6-1: Product: syz [ 1069.911441][T28084] usb 6-1: Manufacturer: syz [ 1069.939994][T28084] usb 6-1: SerialNumber: syz [ 1069.991935][T28084] cdc_ncm 6-1:1.253: CDC Union missing and no IAD found [ 1070.032736][ T3596] loop4: detected capacity change from 0 to 1764 [ 1070.051439][T28084] cdc_ncm 6-1:1.253: bind() failure [ 1070.181260][ T3596] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1070.416318][ T7442] usb 6-1: USB disconnect, device number 6 [ 1070.501813][ T3615] netlink: 'syz.3.14549': attribute type 19 has an invalid length. [ 1070.540695][ T3615] netlink: 5 bytes leftover after parsing attributes in process `syz.3.14549'. [ 1071.068572][ T3641] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14557'. [ 1071.110743][ T3640] ubi: mtd0 is already attached to ubi5 [ 1071.218784][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 1071.218802][ T27] audit: type=1326 audit(2000000526.566:3226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3646 comm="syz.1.14562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f152d39bf79 code=0x7ffc0000 [ 1071.325113][ T27] audit: type=1326 audit(2000000526.596:3227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3646 comm="syz.1.14562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f152d39bf79 code=0x7ffc0000 [ 1071.422765][ T27] audit: type=1326 audit(2000000526.606:3228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3646 comm="syz.1.14562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f152d39bf79 code=0x7ffc0000 [ 1071.505125][ T3651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14565'. [ 1071.554973][ T27] audit: type=1326 audit(2000000526.606:3229): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=3646 comm="syz.1.14562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f152d39bf79 code=0x7ffc0000 [ 1071.695662][ T27] audit: type=1326 audit(2000000526.606:3230): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=3646 comm="syz.1.14562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f152d39bf79 code=0x7ffc0000 [ 1072.223440][ T3679] loop6: detected capacity change from 0 to 256 [ 1072.341535][ T3679] FAT-fs (loop6): Directory bread(block 64) failed [ 1072.386425][ T3679] FAT-fs (loop6): Directory bread(block 65) failed [ 1072.393234][ T3679] FAT-fs (loop6): Directory bread(block 66) failed [ 1072.453581][ T3679] FAT-fs (loop6): Directory bread(block 67) failed [ 1072.487534][ T3679] FAT-fs (loop6): Directory bread(block 68) failed [ 1072.514526][ T3679] FAT-fs (loop6): Directory bread(block 69) failed [ 1072.541197][ T3679] FAT-fs (loop6): Directory bread(block 70) failed [ 1072.580907][ T3679] FAT-fs (loop6): Directory bread(block 71) failed [ 1072.625362][ T3679] FAT-fs (loop6): Directory bread(block 72) failed [ 1072.632437][ T3679] FAT-fs (loop6): Directory bread(block 73) failed [ 1072.936796][ T3667] loop4: detected capacity change from 0 to 32768 [ 1072.995049][ T4377] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1073.063680][ T3667] XFS (loop4): Mounting V5 Filesystem [ 1073.160261][ T3667] XFS (loop4): Ending clean mount [ 1073.182183][ T3667] XFS (loop4): Quotacheck needed: Please wait. [ 1073.216946][ T4377] usb 4-1: config 0 has an invalid interface number: 36 but max is 0 [ 1073.251250][ T4377] usb 4-1: config 0 has no interface number 0 [ 1073.290680][ T4377] usb 4-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=ce.72 [ 1073.320362][ T4377] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.350777][ T4377] usb 4-1: Product: syz [ 1073.360922][ T4377] usb 4-1: Manufacturer: syz [ 1073.371069][ T4377] usb 4-1: SerialNumber: syz [ 1073.385903][ T4377] usb 4-1: config 0 descriptor?? [ 1073.391628][ T3667] XFS (loop4): Quotacheck: Done. [ 1073.404061][ T4377] gspca_main: spca505-2.14.0 probing 0733:0430 [ 1073.520519][T28088] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1073.671744][ T4276] XFS (loop4): Unmounting Filesystem [ 1073.722995][T28088] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 1073.741583][T28088] usb 6-1: config 0 has no interface number 0 [ 1073.755965][T28088] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1073.785249][T28088] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1073.804395][T28088] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.821471][ T4377] gspca_spca505: reg write: error -71 [ 1073.832754][ T4377] spca505: probe of 4-1:0.36 failed with error -5 [ 1073.833118][T28088] usb 6-1: Product: syz [ 1073.857899][ T4377] usb 4-1: USB disconnect, device number 76 [ 1073.874732][T28088] usb 6-1: Manufacturer: syz [ 1073.898469][ T3707] loop1: detected capacity change from 0 to 32768 [ 1073.905172][T28088] usb 6-1: SerialNumber: syz [ 1073.936129][T28088] usb 6-1: config 0 descriptor?? [ 1074.014677][T28088] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 1074.367694][T28088] usb 6-1: USB disconnect, device number 7 [ 1074.381603][T28088] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 1074.650101][ T3721] loop4: detected capacity change from 0 to 8 [ 1074.775253][T28084] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1074.975572][T28088] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1074.985382][T28084] usb 7-1: config 1 has an invalid interface number: 253 but max is 1 [ 1075.012330][T28084] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1075.023783][T28084] usb 7-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 1075.063652][T28084] usb 7-1: config 1 has no interface number 2 [ 1075.080094][T28084] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1075.109441][T28084] usb 7-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1075.152760][T28084] usb 7-1: config 1 interface 1 has no altsetting 0 [ 1075.183245][T28084] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1075.200700][T28088] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1075.224094][T28084] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.235313][T28088] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1075.252570][T28084] usb 7-1: Product: syz [ 1075.259911][T28088] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1075.282964][T28084] usb 7-1: Manufacturer: syz [ 1075.287804][ T3739] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14605'. [ 1075.305108][T28088] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1075.325123][T28084] usb 7-1: SerialNumber: syz [ 1075.330058][T28088] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1075.349452][T28088] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.371478][T28084] cdc_ncm 7-1:1.253: CDC Union missing and no IAD found [ 1075.388581][T28088] usb 2-1: config 0 descriptor?? [ 1075.393831][T28084] cdc_ncm 7-1:1.253: bind() failure [ 1075.620888][T28088] hdpvr 2-1:0.0: firmware version 0x1e dated þÀq|RC¾@µ2£¹ö2[Ì7ÔB½ËDŠ^jvi0ì [ 1075.620888][T28088] †Ã“‘êpY [ 1075.788542][ T3753] netlink: 100 bytes leftover after parsing attributes in process `syz.5.14611'. [ 1075.837171][T28088] hdpvr 2-1:0.0: device init failed [ 1075.849237][T28088] hdpvr: probe of 2-1:0.0 failed with error -12 [ 1075.869964][T28088] usb 2-1: USB disconnect, device number 59 [ 1075.900873][T28084] usb 7-1: USB disconnect, device number 12 [ 1076.525892][ T3780] device netdevsim0 entered promiscuous mode [ 1076.573591][ T3780] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1076.597006][ T27] audit: type=1326 audit(2000000531.946:3231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3783 comm="syz.6.14626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af3f9bf79 code=0x7ffc0000 [ 1076.663502][ T27] audit: type=1326 audit(2000000531.966:3232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3783 comm="syz.6.14626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af3f9bf79 code=0x7ffc0000 [ 1076.687482][ T3786] device netdevsim0 left promiscuous mode [ 1076.693452][ T3786] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1076.705959][ T27] audit: type=1326 audit(2000000531.966:3233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3783 comm="syz.6.14626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f7af3f9bf79 code=0x7ffc0000 [ 1076.790599][ T27] audit: type=1326 audit(2000000531.966:3234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3783 comm="syz.6.14626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af3f9bf79 code=0x7ffc0000 [ 1076.922363][ T27] audit: type=1326 audit(2000000531.966:3235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3783 comm="syz.6.14626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af3f9bf79 code=0x7ffc0000 [ 1076.989384][ T3795] QAT: failed to copy from user cfg_data. [ 1077.133980][ T3800] kAFS: Can only specify source 'none' with -o dyn [ 1077.195074][T28084] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1077.225178][ T4325] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1077.426301][T28084] usb 7-1: Using ep0 maxpacket: 16 [ 1077.431749][ T4325] usb 6-1: Using ep0 maxpacket: 16 [ 1077.443253][ T4325] usb 6-1: config 0 has an invalid interface number: 104 but max is 1 [ 1077.452462][T28084] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 1077.496647][ T4325] usb 6-1: config 0 has an invalid interface number: 104 but max is 1 [ 1077.512198][T28084] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 1077.524455][ T4325] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1077.543261][T28084] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1077.566064][ T3811] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1077.586056][ T4325] usb 6-1: config 0 has no interface number 0 [ 1077.638388][ T4325] usb 6-1: config 0 interface 104 altsetting 0 endpoint 0x8 has an invalid bInterval 48, changing to 9 [ 1077.657551][T28084] usb 7-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 1077.704204][T28084] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.724803][ T4325] usb 6-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid maxpacket 8240, setting to 1024 [ 1077.759218][T28084] usb 7-1: Product: syz [ 1077.774108][T28084] usb 7-1: Manufacturer: syz [ 1077.783779][ T4325] usb 6-1: config 0 interface 104 has no altsetting 1 [ 1077.801774][T28084] usb 7-1: SerialNumber: syz [ 1077.822382][T28084] usb 7-1: config 0 descriptor?? [ 1077.830907][ T4325] usb 6-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 1077.879809][ T3792] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1077.900953][ T4325] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.910550][ T3792] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1077.960978][ C0] port100 7-1:0.0: NFC: Urb failure (status -71) [ 1077.972430][ T4325] usb 6-1: Product: syz [ 1077.979477][ C0] port100 7-1:0.0: NFC: Urb failure (status -71) [ 1078.000627][ T4325] usb 6-1: Manufacturer: syz [ 1078.018517][ T4325] usb 6-1: SerialNumber: syz [ 1078.025901][ T4325] usb 6-1: config 0 descriptor?? [ 1078.045839][ T4325] asix: probe of 6-1:0.104 failed with error -22 [ 1078.103214][T28084] port100 7-1:0.0: NFC: Could not get supported command types [ 1078.215250][ T4377] usb 7-1: USB disconnect, device number 13 [ 1078.288700][ T4325] usb 6-1: USB disconnect, device number 8 [ 1078.651933][ T3843] loop4: detected capacity change from 0 to 16 [ 1078.663347][ T3843] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1078.765207][T28084] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1078.958205][T28084] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1078.973458][ T3851] loop4: detected capacity change from 0 to 512 [ 1078.992133][T28084] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1079.010864][T28084] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1079.032177][ T3851] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1079.064203][ T3851] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1079.078932][ T3851] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.14657: inode #15: comm syz.4.14657: iget: illegal inode # [ 1079.080564][T28084] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1079.097985][ T3851] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.14657: couldn't read orphan inode 15 (err -117) [ 1079.120253][ T3851] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1079.145361][ T3851] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 1079.175245][ T3851] EXT4-fs (loop4): re-mounted. Quota mode: none. [ 1079.209611][T28084] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1079.248591][T28084] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.281087][T28084] usb 4-1: config 0 descriptor?? [ 1079.314239][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 1079.498027][T28084] hdpvr 4-1:0.0: firmware version 0xd dated [ 1079.710047][T28084] hdpvr 4-1:0.0: device init failed [ 1079.716197][T28084] hdpvr: probe of 4-1:0.0 failed with error -12 [ 1079.759627][T28084] usb 4-1: USB disconnect, device number 77 [ 1079.864106][ T3874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14667'. [ 1080.086403][ T3881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14670'. [ 1081.145244][T28084] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1081.210244][ T3925] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14689'. [ 1081.365131][T28084] usb 5-1: Using ep0 maxpacket: 32 [ 1081.376604][T28084] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 1081.404482][T28084] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1081.434562][T28084] usb 5-1: config 0 has no interface number 0 [ 1081.448320][ T3931] loop3: detected capacity change from 0 to 256 [ 1081.458915][T28084] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 642 [ 1081.474372][T28084] usb 5-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1081.494383][T28084] usb 5-1: config 0 interface 196 has no altsetting 0 [ 1081.515461][ T4398] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1081.526259][T28084] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 1081.555014][T28084] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.569677][ T3900] loop1: detected capacity change from 0 to 32768 [ 1081.574015][T28084] usb 5-1: Product: syz [ 1081.595049][T28084] usb 5-1: Manufacturer: syz [ 1081.599738][T28084] usb 5-1: SerialNumber: syz [ 1081.612675][ T3900] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.14680 (3900) [ 1081.640255][T28084] usb 5-1: config 0 descriptor?? [ 1081.645935][T28088] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 1081.671370][ T3914] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1081.728328][ T3900] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1081.758268][ T3900] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1081.797433][ T3900] BTRFS info (device loop1): turning off barriers [ 1081.804340][ T3900] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1081.847156][T28088] usb 6-1: config 0 has an invalid interface number: 29 but max is 0 [ 1081.856973][ T3900] BTRFS info (device loop1): trying to use backup root at mount time [ 1081.876225][T28088] usb 6-1: config 0 has no interface number 0 [ 1081.885777][ T3900] BTRFS info (device loop1): enabling auto defrag [ 1081.892304][ T3900] BTRFS info (device loop1): turning on sync discard [ 1081.917582][T28084] ipheth 5-1:0.196: Unable to find endpoints [ 1081.935035][T28088] usb 6-1: config 0 interface 29 has no altsetting 0 [ 1081.955409][T28084] usb 5-1: USB disconnect, device number 71 [ 1081.960686][ T3900] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1081.983367][T28088] usb 6-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 1081.993204][ T3900] BTRFS info (device loop1): trying to use backup root at mount time [ 1082.014426][ T3900] BTRFS info (device loop1): using free space tree [ 1082.025630][T28088] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.052460][T28088] usb 6-1: Product: syz [ 1082.072892][T28088] usb 6-1: Manufacturer: syz [ 1082.081994][T28088] usb 6-1: SerialNumber: syz [ 1082.094742][T28088] usb 6-1: config 0 descriptor?? [ 1082.337057][T28088] peak_usb 6-1:0.29: PEAK-System PCAN-USB X6 v174 fw v146.0.0 (2 channels) [ 1082.557057][T28088] peak_usb 6-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 1082.581752][ T4269] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1082.593262][T28088] peak_usb 6-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 1082.725826][T28088] peak_usb: probe of 6-1:0.29 failed with error -71 [ 1082.765250][T28088] usb 6-1: USB disconnect, device number 9 [ 1083.358814][ T3989] xt_policy: neither incoming nor outgoing policy selected [ 1083.542266][ T3993] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14713'. [ 1083.563821][ T3993] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14713'. [ 1083.823575][ T3979] loop3: detected capacity change from 0 to 32768 [ 1084.071270][ T7439] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 1084.267243][ T7439] usb 2-1: not running at top speed; connect to a high speed hub [ 1084.288487][ T7439] usb 2-1: config 95 has an invalid interface number: 1 but max is 0 [ 1084.324933][ T7439] usb 2-1: config 95 has no interface number 0 [ 1084.363713][ T7439] usb 2-1: config 95 interface 1 has no altsetting 0 [ 1084.388000][ T7439] usb 2-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 1084.430210][ T7439] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.475844][ T7439] usb 2-1: Product: syz [ 1084.501967][ T7439] usb 2-1: Manufacturer: syz [ 1084.522240][ T7439] usb 2-1: SerialNumber: syz [ 1084.932173][ T7439] usb 2-1: USB disconnect, device number 60 [ 1085.366994][ T4398] udevd[4398]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1085.793999][ T4076] netlink: 'syz.1.14748': attribute type 1 has an invalid length. [ 1085.885044][T28084] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1085.904747][ T4083] netlink: 'syz.6.14751': attribute type 20 has an invalid length. [ 1086.082174][T28084] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.17 [ 1086.119717][T28084] usb 6-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3 [ 1086.168200][T28084] usb 6-1: Product: syz [ 1086.172546][T28084] usb 6-1: Manufacturer: syz [ 1086.179386][ T4091] netlink: 'syz.6.14755': attribute type 1 has an invalid length. [ 1086.184006][T28084] usb 6-1: SerialNumber: syz [ 1086.202776][T28084] usb 6-1: config 0 descriptor?? [ 1086.225255][ T4091] netlink: 'syz.6.14755': attribute type 3 has an invalid length. [ 1086.233426][T28084] ch341 6-1:0.0: ch341-uart converter detected [ 1086.255191][ T4091] netlink: 224 bytes leftover after parsing attributes in process `syz.6.14755'. [ 1086.295035][ T4091] NCSI netlink: No device for ifindex 52229 [ 1086.653353][T28084] usb 6-1: failed to send control message: -71 [ 1086.681146][T28084] ch341-uart: probe of ttyUSB0 failed with error -71 [ 1086.691403][T28084] usb 6-1: USB disconnect, device number 10 [ 1086.723465][T28084] ch341 6-1:0.0: device disconnected [ 1087.234033][ T4100] loop6: detected capacity change from 0 to 32768 [ 1087.322791][ T4100] syz.6.14760: attempt to access beyond end of device [ 1087.322791][ T4100] loop6: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 1087.423452][ T4100] metapage_write_end_io: I/O error [ 1087.445300][ T4100] blkno = 8ed2c, nblocks = 1 [ 1087.449993][ T4100] ERROR: (device loop6): dbUpdatePMap: blocks are outside the map [ 1087.449993][ T4100] [ 1087.514781][ T4100] ERROR: (device loop6): remounting filesystem as read-only [ 1087.546845][ T4100] ERROR: (device loop6): xtSearch: XT_GETPAGE: xtree page corrupt [ 1087.546845][ T4100] [ 1087.575770][ T4130] netlink: 196 bytes leftover after parsing attributes in process `syz.5.14773'. [ 1087.592213][ T4100] ERROR: (device loop6): duplicateIXtree: [ 1087.592213][ T4100] [ 1087.845757][ T108] blkno = 8ed2c, nblocks = 4 [ 1087.850446][ T108] ERROR: (device loop6): dbUpdatePMap: blocks are outside the map [ 1087.850446][ T108] [ 1087.867794][ T4113] loop4: detected capacity change from 0 to 32768 [ 1087.891857][T30164] syz-executor: attempt to access beyond end of device [ 1087.891857][T30164] loop6: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 1087.965179][T30164] metapage_write_end_io: I/O error [ 1087.970779][T30164] JFS: metapage_get_blocks failed [ 1088.006086][T30164] JFS: metapage_get_blocks failed [ 1088.021469][T30164] JFS: metapage_get_blocks failed [ 1088.046088][T30164] JFS: metapage_get_blocks failed [ 1088.141157][ T4141] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1088.208611][ T4143] overlayfs: missing 'lowerdir' [ 1088.433446][ T4147] netlink: 6 bytes leftover after parsing attributes in process `syz.4.14782'. [ 1088.486228][ T4147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14782'. [ 1088.788295][ C1] sd 0:0:1:0: [sda] tag#5843 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1088.798902][ C1] sd 0:0:1:0: [sda] tag#5843 CDB: Read(6) 08 00 00 00 03 44 [ 1089.328514][ T4181] netlink: 'syz.6.14798': attribute type 11 has an invalid length. [ 1089.485298][T28084] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1089.681511][T28084] usb 2-1: Using ep0 maxpacket: 8 [ 1089.703334][T28084] usb 2-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 1089.734847][T28084] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.751652][T28084] usb 2-1: Product: syz [ 1089.762361][T28084] usb 2-1: Manufacturer: syz [ 1089.783157][T28084] usb 2-1: SerialNumber: syz [ 1089.807486][T28084] usb 2-1: config 0 descriptor?? [ 1089.853091][T28084] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 1090.017351][ T4203] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1090.168120][ T4205] loop6: detected capacity change from 0 to 1764 [ 1090.228197][ T4205] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 1090.266095][T28084] gspca_m5602: Failed to find a sensor [ 1090.292386][T28084] ALi m5602 2-1:0.0: ALi m5602 webcam failed [ 1090.321370][T28084] usb 2-1: USB disconnect, device number 61 [ 1090.590970][ T4194] loop5: detected capacity change from 0 to 32768 [ 1090.681178][ T4194] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 1090.749219][ T4194] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1090.845870][ T4194] (syz.5.14803,4194,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=281474976710721, rec_len=32768, name_len=1 [ 1090.896870][ T4194] (syz.5.14803,4194,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 1090.906212][ T4194] (syz.5.14803,4194,0):ocfs2_mknod:298 ERROR: status = -2 [ 1090.913453][ T4194] (syz.5.14803,4194,0):ocfs2_mknod:502 ERROR: status = -2 [ 1090.962135][ T4194] (syz.5.14803,4194,0):ocfs2_create:676 ERROR: status = -2 [ 1091.015075][T28084] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1091.161373][T30130] ocfs2: Unmounting device (7,5) on (node local) [ 1091.214984][T28084] usb 4-1: Using ep0 maxpacket: 8 [ 1091.221996][T28084] usb 4-1: config 1 has an invalid interface number: 128 but max is 1 [ 1091.265036][T28084] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1091.304962][T28084] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1091.356134][T28084] usb 4-1: config 1 has no interface number 0 [ 1091.363157][T28084] usb 4-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1091.430738][T28084] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1091.475024][T28084] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.514181][T28084] usb 4-1: Product: syz [ 1091.524343][T28084] usb 4-1: Manufacturer: syz [ 1091.544657][T28084] usb 4-1: SerialNumber: syz [ 1091.586658][T28084] cdc_wdm 4-1:1.128: skipping garbage [ 1091.592164][T28084] cdc_wdm 4-1:1.128: invalid descriptor buffer length [ 1091.630034][T28084] cdc_wdm: probe of 4-1:1.128 failed with error -22 [ 1091.820966][ T7439] usb 4-1: USB disconnect, device number 78 [ 1091.941693][ T4259] netlink: 52 bytes leftover after parsing attributes in process `syz.1.14833'. [ 1093.060936][ T4344] loop6: detected capacity change from 0 to 256 [ 1093.149052][ T4344] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1093.287222][ T4352] program syz.1.14858 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1093.346117][ T4325] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1093.535277][ T4325] usb 5-1: Using ep0 maxpacket: 8 [ 1093.552462][ T4325] usb 5-1: config 0 has an invalid interface number: 96 but max is 0 [ 1093.599329][ T4325] usb 5-1: config 0 has no interface number 0 [ 1093.638497][ T4325] usb 5-1: config 0 interface 96 altsetting 3 endpoint 0x88 has an invalid bInterval 254, changing to 11 [ 1093.661980][ T4325] usb 5-1: config 0 interface 96 has no altsetting 0 [ 1093.691060][ T4325] usb 5-1: New USB device found, idVendor=0b57, idProduct=2a8d, bcdDevice=33.74 [ 1093.710686][ T4325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.734154][ T4325] usb 5-1: Product: syz [ 1093.790737][ T4325] usb 5-1: Manufacturer: syz [ 1093.802342][ T4325] usb 5-1: SerialNumber: syz [ 1093.852249][ T4325] usb 5-1: config 0 descriptor?? [ 1094.305438][ T4325] usb 5-1: USB disconnect, device number 72 [ 1094.589824][ T4405] netlink: 'syz.3.14881': attribute type 5 has an invalid length. [ 1094.751978][ T4409] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 1094.848341][ T4416] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14883'. [ 1094.896536][ T4416] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14883'. [ 1094.912747][ T4416] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14883'. [ 1095.038145][ T4420] kAFS: unable to lookup cell '@mTsyz0' [ 1095.740112][ T4452] loop1: detected capacity change from 0 to 256 [ 1095.823484][ T4452] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1095.946755][ T4458] netlink: 'syz.3.14905': attribute type 4 has an invalid length. [ 1095.960623][ T4455] loop6: detected capacity change from 0 to 4096 [ 1095.991395][ T4455] ntfs3: loop6: Different NTFS' sector size (1024) and media sector size (512) [ 1096.037834][ T4460] binder: BC_ATTEMPT_ACQUIRE not supported [ 1096.043786][ T4460] binder: 4459:4460 ioctl c0306201 2000000001c0 returned -22 [ 1096.125170][ T4377] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 1096.155157][T21857] Bluetooth: hci2: command 0x0401 tx timeout [ 1096.185036][ T4455] ntfs3: loop6: ntfs3_write_inode r=1e failed, -22. [ 1096.318241][ T4377] usb 6-1: not running at top speed; connect to a high speed hub [ 1096.351582][ T4377] usb 6-1: config 95 has an invalid interface number: 1 but max is 0 [ 1096.370867][T30164] ntfs3: loop6: ntfs_evict_inode r=1e failed, -22. [ 1096.375023][ T4377] usb 6-1: config 95 has no interface number 0 [ 1096.395344][T30164] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 1096.405310][ T4377] usb 6-1: config 95 interface 1 has no altsetting 0 [ 1096.426905][ T4377] usb 6-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 1096.429120][ T4464] loop3: detected capacity change from 0 to 4096 [ 1096.456174][ T4464] /dev/loop3: Can't open blockdev [ 1096.461984][ T4377] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.500949][ T4398] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1096.522196][ T4377] usb 6-1: Product: syz [ 1096.532574][ T4377] usb 6-1: Manufacturer: syz [ 1096.565114][ T4377] usb 6-1: SerialNumber: syz [ 1096.623610][ T4470] netlink: 36 bytes leftover after parsing attributes in process `syz.6.14911'. [ 1096.669416][ T4472] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 1096.960041][ T4377] usb 6-1: USB disconnect, device number 11 [ 1097.097791][ T4510] udevd[4510]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1097.214413][ T27] audit: type=1326 audit(2000000552.556:3236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4485 comm="syz.6.14920" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7af3f9bf79 code=0x0 [ 1097.645158][ T4347] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1097.814176][ T4508] loop4: detected capacity change from 0 to 16 [ 1097.839971][ T4347] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1097.851912][ T4508] erofs: (device loop4): mounted with root inode @ nid 36. [ 1097.865010][ T4347] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1097.874002][ T4347] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1097.965912][ T4347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.003941][ T4347] usb 4-1: config 0 descriptor?? [ 1098.143977][ T4520] netlink: 28 bytes leftover after parsing attributes in process `syz.6.14936'. [ 1098.214623][ T4520] netlink: 28 bytes leftover after parsing attributes in process `syz.6.14936'. [ 1098.245288][ T4520] netlink: 'syz.6.14936': attribute type 6 has an invalid length. [ 1098.464459][ T4347] Bluetooth: Can't get state to change to load configuration err [ 1098.483253][ T4347] Bluetooth: Loading sysconfig file failed [ 1098.525074][ T4347] ath3k: probe of 4-1:0.0 failed with error -16 [ 1098.548352][ T4347] usb 4-1: USB disconnect, device number 79 [ 1098.636177][ T4529] loop6: detected capacity change from 0 to 4096 [ 1098.663083][ T4529] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 1099.191395][ T4550] loop5: detected capacity change from 0 to 1024 [ 1099.333962][ T4556] program syz.1.14954 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1099.353549][ T4550] hfsplus: trying to free free bnode 0(1) [ 1099.625722][ T1118] hfsplus: b-tree write err: -5, ino 4 [ 1100.128541][ T4584] netlink: 308 bytes leftover after parsing attributes in process `syz.1.14968'. [ 1101.120093][ T4325] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1101.270228][ T4626] loop1: detected capacity change from 0 to 16 [ 1101.295351][ T4626] erofs: (device loop1): mounted with root inode @ nid 36. [ 1101.315126][ T4325] usb 6-1: Using ep0 maxpacket: 16 [ 1101.324395][ T4325] usb 6-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 1101.364995][ T4325] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.373270][ T4325] usb 6-1: Product: syz [ 1101.385234][ T4325] usb 6-1: Manufacturer: syz [ 1101.390036][ T4325] usb 6-1: SerialNumber: syz [ 1101.426591][ T4325] usb 6-1: config 0 descriptor?? [ 1101.449798][ T4325] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 1101.564945][ T4347] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 1101.581636][ T4633] program syz.4.14992 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1101.756877][ T4347] usb 4-1: config index 0 descriptor too short (expected 897, got 27) [ 1101.774926][ T4347] usb 4-1: config 2 has an invalid interface number: 1 but max is -1 [ 1101.783119][ T4347] usb 4-1: config 2 has an invalid interface number: 1 but max is -1 [ 1101.834423][ T4347] usb 4-1: config 2 has 1 interface, different from the descriptor's value: 0 [ 1101.850978][ T4325] gspca_sn9c2028: read1 error -71 [ 1101.870677][ T4325] gspca_sn9c2028: read1 error -71 [ 1101.871214][ T4642] netlink: 192 bytes leftover after parsing attributes in process `syz.6.14997'. [ 1101.886307][ T4347] usb 4-1: config 2 has no interface number 0 [ 1101.887332][ T4325] sn9c2028: probe of 6-1:0.0 failed with error -71 [ 1101.916897][ T4347] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=20.da [ 1101.929278][ T4325] usb 6-1: USB disconnect, device number 12 [ 1101.953699][ T4347] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.000131][ T4347] usb 4-1: Product: syz [ 1102.004398][ T4347] usb 4-1: Manufacturer: syz [ 1102.055095][ T4347] usb 4-1: SerialNumber: syz [ 1102.273196][ T4347] cdc_ncm 4-1:2.1: CDC Union missing and no IAD found [ 1102.299215][ T4347] cdc_ncm 4-1:2.1: bind() failure [ 1102.317348][ T4347] usb 4-1: no audio or video endpoints found [ 1102.341556][ T4347] usb 4-1: USB disconnect, device number 80 [ 1102.713302][ T4669] netlink: 28 bytes leftover after parsing attributes in process `syz.6.15010'. [ 1102.744737][ T4669] netlink: 28 bytes leftover after parsing attributes in process `syz.6.15010'. [ 1103.009179][ T4325] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 1103.237944][ T4325] usb 5-1: not running at top speed; connect to a high speed hub [ 1103.275085][ T4325] usb 5-1: config 95 has an invalid interface number: 1 but max is 0 [ 1103.311059][ T4325] usb 5-1: config 95 has no interface number 0 [ 1103.332310][ T4325] usb 5-1: config 95 interface 1 has no altsetting 0 [ 1103.359214][ T4325] usb 5-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 1103.391450][ T4325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.418617][ T4693] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1103.432183][ T4325] usb 5-1: Product: syz [ 1103.441355][ T4325] usb 5-1: Manufacturer: syz [ 1103.472676][ T4325] usb 5-1: SerialNumber: syz [ 1103.826369][ T4325] usb 5-1: USB disconnect, device number 73 [ 1104.212997][ T4398] udevd[4398]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1104.353560][ T4729] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1104.374626][ T4728] netlink: 'syz.6.15040': attribute type 1 has an invalid length. [ 1104.383044][ T4728] netlink: 216 bytes leftover after parsing attributes in process `syz.6.15040'. [ 1104.763271][ T4741] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15046'. [ 1105.101037][ T4756] device sit0 entered promiscuous mode [ 1105.158455][ T4756] netlink: 1 bytes leftover after parsing attributes in process `syz.5.15054'. [ 1105.207587][ T4758] loop4: detected capacity change from 0 to 2048 [ 1105.272111][ T4761] loop1: detected capacity change from 0 to 512 [ 1105.278876][ T4758] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1105.359297][ T4761] EXT4-fs: Ignoring removed bh option [ 1105.409536][ T4766] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 1105.435764][ T4761] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1105.453762][ T4761] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #11: block 1: comm syz.1.15056: lblock 0 mapped to illegal pblock 1 (length 1) [ 1105.574290][ T4761] EXT4-fs (loop1): Remounting filesystem read-only [ 1105.587414][ T4761] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1105.623143][ T4761] EXT4-fs error (device loop1): ext4_xattr_inode_update_ref:984: inode #11: comm syz.1.15056: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 1105.725169][ T4761] EXT4-fs (loop1): Remounting filesystem read-only [ 1105.744983][ T4761] EXT4-fs warning (device loop1): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.1.15056: ea_inode dec ref err=-117 [ 1105.785151][ T4761] EXT4-fs (loop1): 1 orphan inode deleted [ 1105.845466][ T4761] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1105.939853][ T4778] ax25_connect(): syz.6.15064 uses autobind, please contact jreuter@yaina.de [ 1106.061621][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 1106.285462][ T4792] netlink: 'syz.6.15070': attribute type 1 has an invalid length. [ 1106.293395][ T4792] netlink: 'syz.6.15070': attribute type 2 has an invalid length. [ 1106.351131][ T4792] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15070'. [ 1107.024975][ T4377] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 1107.086467][ T4817] netdevsim netdevsim3: Firmware load for '..' refused, path contains '..' component [ 1107.227052][ T4377] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1107.257662][ T4377] usb 2-1: not running at top speed; connect to a high speed hub [ 1107.295866][ T4377] usb 2-1: config 12 has an invalid interface number: 184 but max is 0 [ 1107.304278][ T4377] usb 2-1: config 12 has no interface number 0 [ 1107.323025][ T4825] 9p: Unknown access argument z: -22 [ 1107.340525][ T4377] usb 2-1: config 12 interface 184 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 1107.378897][ T4377] usb 2-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2 [ 1107.419619][ T4377] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.442289][ T4377] usb 2-1: Product: syz [ 1107.467247][ T4377] usb 2-1: Manufacturer: syz [ 1107.471989][ T4377] usb 2-1: SerialNumber: syz [ 1107.758129][ T4377] usb 2-1: USB disconnect, device number 62 [ 1107.995196][ T4845] netlink: 'syz.6.15095': attribute type 1 has an invalid length. [ 1108.056272][ T7604] udevd[7604]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:12.184/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1108.225496][ T4849] autofs4:pid:4849:autofs_fill_super: called with bogus options [ 1108.481300][ T4853] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15100'. [ 1108.668820][ T4835] loop4: detected capacity change from 0 to 32768 [ 1108.724683][ T4835] jfs_strtoUCS: char2uni returned -22. [ 1108.761426][ T4835] charset = cp936, char = 0xd4 [ 1109.103504][T21857] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1109.154280][ T4872] netlink: 180900 bytes leftover after parsing attributes in process `syz.3.15109'. [ 1109.164087][ T4872] openvswitch: netlink: Flow actions attr not present in new flow. [ 1109.224741][T28084] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1109.403707][ T4878] netlink: 124 bytes leftover after parsing attributes in process `syz.5.15112'. [ 1109.414545][T28084] usb 2-1: Using ep0 maxpacket: 16 [ 1109.421894][T28084] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 1109.450600][T28084] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 1109.471555][ T4878] netlink: 'syz.5.15112': attribute type 3 has an invalid length. [ 1109.485386][T28084] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 1109.512747][T28084] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 1109.541712][T28084] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1109.564808][T28084] usb 2-1: config 0 has no interface number 0 [ 1109.571022][T28084] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1109.605278][T28084] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1109.615790][T28084] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1109.650636][T28084] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1109.667875][T28084] usb 2-1: config 0 interface 125 has no altsetting 0 [ 1109.675509][T28084] usb 2-1: config 0 interface 125 has no altsetting 2 [ 1109.714902][T28084] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1109.744463][T28084] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.761999][T28084] usb 2-1: Product: syz [ 1109.774623][T28084] usb 2-1: Manufacturer: syz [ 1109.784973][T28084] usb 2-1: SerialNumber: syz [ 1109.810884][T28084] usb 2-1: config 0 descriptor?? [ 1109.851484][T28084] usb 2-1: selecting invalid altsetting 2 [ 1110.014874][ T4892] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15120'. [ 1110.101769][ T4897] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 1110.265456][ C0] usb 2-1: async_complete: urb error -71 [ 1110.271284][ C0] usb 2-1: async_complete: urb error -71 [ 1110.277026][ C0] usb 2-1: async_complete: urb error -71 [ 1110.285644][T28084] get_1284_register: usb error -71 [ 1110.290928][T28084] uss720: probe of 2-1:0.125 failed with error -71 [ 1110.302185][T28084] usb 2-1: USB disconnect, device number 63 [ 1110.595997][ T27] audit: type=1326 audit(2000000565.947:3237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4909 comm="syz.4.15128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f321d19bf79 code=0x7ffc0000 [ 1110.678763][ T27] audit: type=1326 audit(2000000565.957:3238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4909 comm="syz.4.15128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f321d19bf79 code=0x7ffc0000 [ 1110.771714][ T27] audit: type=1326 audit(2000000565.967:3239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4909 comm="syz.4.15128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f321d19bf79 code=0x7ffc0000 [ 1110.859692][ T27] audit: type=1326 audit(2000000565.967:3240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4909 comm="syz.4.15128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f321d19bf79 code=0x7ffc0000 [ 1110.921471][ T4916] loop3: detected capacity change from 0 to 4096 [ 1110.945340][ T27] audit: type=1326 audit(2000000565.967:3241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4909 comm="syz.4.15128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f321d19bf79 code=0x7ffc0000 [ 1111.136545][ T4926] loop1: detected capacity change from 0 to 256 [ 1111.174548][ T4377] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 1111.376172][ T4377] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 1111.394960][ T4377] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1111.434475][ T4377] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 1111.470136][ T4934] xt_connbytes: Forcing CT accounting to be enabled [ 1111.484593][ T4377] usb 6-1: config 1 has no interface number 1 [ 1111.501254][ T4377] usb 6-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1111.573719][ T4377] usb 6-1: config 1 interface 105 has no altsetting 0 [ 1111.624481][ T4377] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1111.654466][ T4377] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.662601][ T4377] usb 6-1: Product: syz [ 1111.677899][ T4377] usb 6-1: Manufacturer: syz [ 1111.682608][ T4377] usb 6-1: SerialNumber: syz [ 1111.764586][ T4942] netlink: 'syz.4.15144': attribute type 4 has an invalid length. [ 1111.843741][ T4948] netlink: 'syz.3.15147': attribute type 3 has an invalid length. [ 1111.940485][ T4377] aqc111: probe of 6-1:1.105 failed with error -22 [ 1112.175468][ T4377] usb 6-1: USB disconnect, device number 13 [ 1112.259828][ T4959] loop4: detected capacity change from 0 to 512 [ 1112.282739][ T4959] EXT4-fs (loop4): failed to initialize system zone (-117) [ 1112.298609][ T4959] EXT4-fs (loop4): mount failed [ 1112.357313][ T4962] netlink: 'syz.1.15152': attribute type 5 has an invalid length. [ 1112.390010][ T4962] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15152'. [ 1112.633115][ T4971] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 1113.351449][ T4996] loop4: detected capacity change from 0 to 64 [ 1113.742216][ T5007] netlink: 'syz.3.15177': attribute type 10 has an invalid length. [ 1113.814378][ T5007] netlink: 40 bytes leftover after parsing attributes in process `syz.3.15177'. [ 1113.844733][ T5007] bridge0: port 3(dummy0) entered blocking state [ 1113.861619][ T5007] bridge0: port 3(dummy0) entered disabled state [ 1113.913243][ T5007] device dummy0 entered promiscuous mode [ 1113.930142][ T5007] bridge0: port 3(dummy0) entered blocking state [ 1113.936719][ T5007] bridge0: port 3(dummy0) entered forwarding state [ 1114.224224][ T7439] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1114.381681][ T4999] loop1: detected capacity change from 0 to 32768 [ 1114.426793][ T7439] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 1114.444247][ T7439] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1114.464309][ T7439] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1114.477238][ T7439] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1114.489663][ T7439] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1114.498405][ T7439] usb 5-1: Product: syz [ 1114.503597][ T7439] usb 5-1: Manufacturer: syz [ 1114.548471][ T4999] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 1114.592055][ T7439] usb 5-1: SerialNumber: syz [ 1114.616253][ T7439] usb 5-1: config 0 descriptor?? [ 1114.655104][ T4999] XFS (loop1): Mounting V5 Filesystem [ 1114.659760][ T7439] hub 5-1:0.0: bad descriptor, ignoring hub [ 1114.687670][ T7439] hub: probe of 5-1:0.0 failed with error -5 [ 1114.703626][ T7439] usb 5-1: selecting invalid altsetting 0 [ 1114.857634][ T4999] XFS (loop1): Ending clean mount [ 1115.049649][ T4269] XFS (loop1): Unmounting Filesystem [ 1115.061372][ T5048] loop3: detected capacity change from 0 to 65 [ 1115.252998][ T4325] usb 5-1: USB disconnect, device number 74 [ 1115.472452][ T5059] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15199'. [ 1115.791360][ T5067] kernel profiling enabled (shift: 9) [ 1115.837983][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.746455][ T5100] loop3: detected capacity change from 0 to 16 [ 1116.804987][ T5100] /dev/loop3: Can't open blockdev [ 1117.072123][ T5107] netlink: 'syz.4.15221': attribute type 1 has an invalid length. [ 1117.098596][ T5107] netlink: 224 bytes leftover after parsing attributes in process `syz.4.15221'. [ 1117.230748][ T5074] loop6: detected capacity change from 0 to 40427 [ 1117.284640][ T5074] F2FS-fs (loop6): build fault injection attr: rate: 684, type: 0x3ffff [ 1117.293142][ T5074] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0x35f7 [ 1117.328813][ T5074] F2FS-fs (loop6): invalid crc value [ 1117.350293][ T5074] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1117.571884][ T5074] F2FS-fs (loop6): Start checkpoint disabled! [ 1117.625447][ T5074] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 1117.821819][ T5074] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=72656c6c, run fsck to fix. [ 1117.891256][ T5130] device veth5 entered promiscuous mode [ 1117.912870][ T5134] ipt_CLUSTERIP: Please specify an interface name [ 1118.451863][ T5149] loop6: detected capacity change from 0 to 736 [ 1118.702162][ T5160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15246'. [ 1118.719858][ T5164] loop6: detected capacity change from 0 to 64 [ 1119.000100][ T27] audit: type=1326 audit(2000000574.347:3242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5171 comm="syz.6.15251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af3f9bf79 code=0x7ffc0000 [ 1119.097501][ T27] audit: type=1326 audit(2000000574.367:3243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5171 comm="syz.6.15251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af3f9bf79 code=0x7ffc0000 [ 1119.233341][ T27] audit: type=1326 audit(2000000574.387:3244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5171 comm="syz.6.15251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f7af3f9bf79 code=0x7ffc0000 [ 1119.296141][ T5178] netlink: 16 bytes leftover after parsing attributes in process `syz.6.15255'. [ 1119.352949][ T27] audit: type=1326 audit(2000000574.387:3245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5171 comm="syz.6.15251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af3f9bf79 code=0x7ffc0000 [ 1119.455829][ T27] audit: type=1326 audit(2000000574.387:3246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5171 comm="syz.6.15251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af3f9bf79 code=0x7ffc0000 [ 1119.666008][ T5184] loop5: detected capacity change from 0 to 4096 [ 1119.702652][ T5184] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 1119.811886][ T5184] ntfs3: loop5: Failed to load $Extend. [ 1119.844626][ T5196] ip6t_srh: unknown srh invflags 4000 [ 1120.324136][T28084] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1120.514044][T28084] usb 6-1: Using ep0 maxpacket: 16 [ 1120.521979][T28084] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 1120.559023][T28084] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1120.590514][T28084] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1120.607588][T28084] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1120.622687][T28084] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1120.643104][T28084] usb 6-1: config 0 has no interface number 0 [ 1120.669191][T28084] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1120.707628][T28084] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1120.720014][T28084] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1120.730834][T28084] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1120.798023][T28084] usb 6-1: config 0 interface 125 has no altsetting 0 [ 1120.809840][T28084] usb 6-1: config 0 interface 125 has no altsetting 2 [ 1120.836760][T28084] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1120.853893][T28084] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.864726][T28084] usb 6-1: Product: syz [ 1120.869085][T28084] usb 6-1: Manufacturer: syz [ 1120.903902][T28084] usb 6-1: SerialNumber: syz [ 1120.925430][T28084] usb 6-1: config 0 descriptor?? [ 1120.979099][T28084] usb 6-1: selecting invalid altsetting 2 [ 1121.000814][ T5235] netlink: 'syz.1.15282': attribute type 3 has an invalid length. [ 1121.010628][ T5235] netlink: 'syz.1.15282': attribute type 3 has an invalid length. [ 1121.030304][ T5235] netlink: 'syz.1.15282': attribute type 3 has an invalid length. [ 1121.055795][ T5235] netlink: 'syz.1.15282': attribute type 3 has an invalid length. [ 1121.073238][ T5235] netlink: 'syz.1.15282': attribute type 3 has an invalid length. [ 1121.082228][ T5235] netlink: 'syz.1.15282': attribute type 3 has an invalid length. [ 1121.094796][ T4325] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1121.111800][ T5235] netlink: 'syz.1.15282': attribute type 3 has an invalid length. [ 1121.122764][ T5235] netlink: 'syz.1.15282': attribute type 3 has an invalid length. [ 1121.150844][ T5235] netlink: 'syz.1.15282': attribute type 3 has an invalid length. [ 1121.211260][ T5236] loop4: detected capacity change from 0 to 4096 [ 1121.244750][ T5236] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 1121.301801][ T4325] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1121.317123][ T4325] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1121.327397][ T4325] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1121.339064][ T4325] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1121.352841][ C0] usb 6-1: async_complete: urb error -71 [ 1121.358674][ C0] usb 6-1: async_complete: urb error -71 [ 1121.364457][ C0] usb 6-1: async_complete: urb error -71 [ 1121.370973][T28084] get_1284_register: usb error -71 [ 1121.376274][T28084] uss720: probe of 6-1:0.125 failed with error -71 [ 1121.390478][T28084] usb 6-1: USB disconnect, device number 14 [ 1121.416543][ T4325] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1121.451570][ T4325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.486563][ T4325] usb 4-1: config 0 descriptor?? [ 1121.698679][ T4325] hdpvr 4-1:0.0: firmware version 0x15 dated Š–¸&S¶3;¨“Ãx&X^„œ wÒÎ–Š g/ƒ µn#»† [ 1121.907005][ T4325] hdpvr 4-1:0.0: device init failed [ 1121.913917][ T4325] hdpvr: probe of 4-1:0.0 failed with error -12 [ 1121.955028][ T4325] usb 4-1: USB disconnect, device number 81 [ 1121.981011][ T4398] udevd[4398]: setting mode of /dev/bus/usb/004/081 to 020664 failed: No such file or directory [ 1122.030355][ T4398] udevd[4398]: setting owner of /dev/bus/usb/004/081 to uid=0, gid=0 failed: No such file or directory [ 1122.202589][ T5262] loop6: detected capacity change from 0 to 64 [ 1122.273319][ T5262] Trying to free block not in datazone [ 1122.283051][ T5262] minix_free_block (loop6:21): bit already cleared [ 1122.309638][ T5262] Trying to free block not in datazone [ 1122.726578][ T5280] loop3: detected capacity change from 0 to 1024 [ 1122.764941][ T5280] /dev/loop3: Can't open blockdev [ 1122.990195][ T7439] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 1123.206581][ T7439] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1123.224661][ T7439] usb 2-1: not running at top speed; connect to a high speed hub [ 1123.254386][ T7439] usb 2-1: config 106 has an invalid interface number: 8 but max is 0 [ 1123.270172][ T7439] usb 2-1: config 106 has no interface number 0 [ 1123.285481][ T7439] usb 2-1: config 106 interface 8 has no altsetting 0 [ 1123.320252][ T7439] usb 2-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=93.dd [ 1123.350316][ T7439] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.369068][ T7439] usb 2-1: Product: syz [ 1123.373352][ T7439] usb 2-1: Manufacturer: syz [ 1123.389025][ T7439] usb 2-1: SerialNumber: syz [ 1123.397575][ T5302] validate_nla: 36 callbacks suppressed [ 1123.397611][ T5302] netlink: 'syz.4.15316': attribute type 3 has an invalid length. [ 1123.421157][ T5302] netlink: 'syz.4.15316': attribute type 3 has an invalid length. [ 1123.429720][ T5302] netlink: 'syz.4.15316': attribute type 3 has an invalid length. [ 1123.438326][ T5302] netlink: 'syz.4.15316': attribute type 3 has an invalid length. [ 1123.446738][ T5302] netlink: 'syz.4.15316': attribute type 3 has an invalid length. [ 1123.455977][ T5302] netlink: 'syz.4.15316': attribute type 3 has an invalid length. [ 1123.465880][ T5302] netlink: 'syz.4.15316': attribute type 3 has an invalid length. [ 1123.483714][ T4325] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1123.494143][ T5302] netlink: 'syz.4.15316': attribute type 3 has an invalid length. [ 1123.502233][ T5302] netlink: 'syz.4.15316': attribute type 3 has an invalid length. [ 1123.529378][ T5302] netlink: 'syz.4.15316': attribute type 3 has an invalid length. [ 1123.635191][ T7439] kalmia 2-1:106.8 (unnamed net_device) (uninitialized): Error sending init packet. Status -22 [ 1123.656349][ T7439] kalmia: probe of 2-1:106.8 failed with error -22 [ 1123.694572][ T7439] usb 2-1: USB disconnect, device number 64 [ 1123.697776][ T4325] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1123.749681][ T4325] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 1123.781805][ T5307] loop5: detected capacity change from 0 to 164 [ 1123.802412][ T4325] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1123.854906][ T4325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1123.863146][ T4325] usb 4-1: SerialNumber: syz [ 1123.900163][ T5307] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1123.931067][ T4325] usb 4-1: bad CDC descriptors [ 1123.949112][ T5312] xt_recent: Unsupported userspace flags (000000de) [ 1124.318264][ T5326] loop1: detected capacity change from 0 to 128 [ 1124.405061][ T5326] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 1124.737363][ T5340] netlink: 24 bytes leftover after parsing attributes in process `syz.5.15335'. [ 1125.287960][ T5360] loop6: detected capacity change from 0 to 512 [ 1125.417549][ T5360] EXT4-fs error (device loop6): __ext4_fill_super:5423: inode #2: comm syz.6.15345: casefold flag without casefold feature [ 1125.469276][ T5360] EXT4-fs (loop6): get root inode failed [ 1125.476776][ T5360] EXT4-fs (loop6): mount failed [ 1126.094567][ T5384] team0: Port device syz_tun added [ 1126.299232][ T7439] usb 4-1: USB disconnect, device number 82 [ 1126.373582][ T4377] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1126.586040][ T4377] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1126.603574][ T4377] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.613678][ T4377] usb 6-1: config 0 descriptor?? [ 1126.713833][ T4347] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1126.772672][ T5392] loop4: detected capacity change from 0 to 32768 [ 1126.835802][ T5392] (syz.4.15360,5392,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1126.859901][ T5392] (syz.4.15360,5392,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1126.903745][ T4347] usb 2-1: Using ep0 maxpacket: 8 [ 1126.917969][ T4347] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1126.932484][ T5392] JBD2: Ignoring recovery information on journal [ 1126.967568][ T5412] loop3: detected capacity change from 0 to 16 [ 1126.975070][ T4347] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1126.984931][ T5412] /dev/loop3: Can't open blockdev [ 1127.030332][ T4377] ath6kl: Failed to submit usb control message: -71 [ 1127.038046][ T4377] ath6kl: unable to send the bmi data to the device: -71 [ 1127.069838][ T4347] usb 2-1: Product: syz [ 1127.076722][ T5392] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1127.093854][ T4377] ath6kl: Unable to send get target info: -71 [ 1127.138142][ T4347] usb 2-1: Manufacturer: syz [ 1127.150971][ T4377] ath6kl: Failed to init ath6kl core: -71 [ 1127.158147][ T4347] usb 2-1: SerialNumber: syz [ 1127.208137][ T4347] usb 2-1: config 0 descriptor?? [ 1127.248408][ T4347] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1127.327464][ T4377] ath6kl_usb: probe of 6-1:0.0 failed with error -71 [ 1127.352368][ T4377] usb 6-1: USB disconnect, device number 15 [ 1127.369227][ T4276] ocfs2: Unmounting device (7,4) on (node local) [ 1127.421064][ T27] audit: type=1800 audit(2000000582.748:3247): pid=5405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.6.15366" name="/" dev="sockfs" ino=140850 res=0 errno=0 [ 1127.451000][ T4347] gspca_zc3xx: reg_w_i err -71 [ 1127.458147][ T4347] gspca_zc3xx: probe of 2-1:0.0 failed with error -71 [ 1127.495152][ T4347] usb 2-1: USB disconnect, device number 65 [ 1127.618464][ T5418] loop4: detected capacity change from 0 to 2048 [ 1127.717872][ T5422] loop6: detected capacity change from 0 to 128 [ 1127.724339][ T5424] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1127.755712][ T5422] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1127.769666][ T5418] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=0, inode=7, rec_len=16, name_len=1 [ 1127.832852][ T5422] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1127.898461][ T5418] Remounting filesystem read-only [ 1127.910637][ T5422] ext4 filesystem being mounted at /627/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1128.145717][T30164] EXT4-fs (loop6): unmounting filesystem. [ 1128.758511][ T5454] loop4: detected capacity change from 0 to 4096 [ 1128.873677][ T5454] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1129.071914][ T4276] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 1129.716142][ T5491] validate_nla: 39 callbacks suppressed [ 1129.716164][ T5491] netlink: 'syz.3.15405': attribute type 1 has an invalid length. [ 1129.768334][ T5491] netlink: 134744 bytes leftover after parsing attributes in process `syz.3.15405'. [ 1130.743473][ T5525] x_tables: unsorted underflow at hook 1 [ 1131.221737][ T5548] loop5: detected capacity change from 0 to 136 [ 1131.463285][T28084] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1131.489173][T30130] rock: directory entry would overflow storage [ 1131.503572][T30130] rock: sig=0x4f50, size=4, remaining=3 [ 1131.509221][T30130] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 1131.578746][T30130] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 1131.653236][T28084] usb 2-1: Using ep0 maxpacket: 32 [ 1131.662793][T28084] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1131.723659][T28084] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.731787][T28084] usb 2-1: Product: syz [ 1131.760562][T28084] usb 2-1: Manufacturer: syz [ 1131.774991][T28084] usb 2-1: SerialNumber: syz [ 1131.804232][T28084] usb 2-1: config 0 descriptor?? [ 1132.239726][T28084] airspy 2-1:0.0: usb_control_msg() failed -71 request 0a [ 1132.253263][T28084] airspy 2-1:0.0: Could not detect board [ 1132.259057][T28084] airspy: probe of 2-1:0.0 failed with error -71 [ 1132.265317][ T5531] loop4: detected capacity change from 0 to 32768 [ 1132.310565][T28084] usb 2-1: USB disconnect, device number 66 [ 1132.320447][ T5572] binfmt_misc: register: failed to install interpreter file ./file0 [ 1132.501114][ T5531] XFS (loop4): Mounting V5 Filesystem [ 1132.705803][ T5531] XFS (loop4): Ending clean mount [ 1132.883325][ T4276] XFS (loop4): Unmounting Filesystem [ 1132.943853][ T5593] xt_l2tp: v2 doesn't support IP mode [ 1133.647416][ T5616] loop1: detected capacity change from 0 to 164 [ 1133.721837][ T5616] isofs: Unable to find the ".." directory for NFS. [ 1134.107712][ T5620] loop3: detected capacity change from 0 to 4096 [ 1134.256143][ T5632] loop5: detected capacity change from 0 to 256 [ 1134.276672][ T5631] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15468'. [ 1134.558078][ T5644] netlink: 'syz.5.15474': attribute type 12 has an invalid length. [ 1134.634955][ T5644] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 1135.029442][ T5652] loop1: detected capacity change from 0 to 4096 [ 1135.089768][ T5652] ntfs: volume version 3.1. [ 1135.569144][ T5676] netlink: 'syz.3.15490': attribute type 21 has an invalid length. [ 1136.038272][ T5688] loop5: detected capacity change from 0 to 256 [ 1136.070318][ T5688] exfat: Deprecated parameter 'utf8' [ 1136.090939][ T5690] netlink: 'syz.6.15497': attribute type 2 has an invalid length. [ 1136.118935][ T5688] exfat: Deprecated parameter 'utf8' [ 1136.147329][ T5688] exfat: Deprecated parameter 'namecase' [ 1136.168802][ T5688] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5f26ded4, utbl_chksum : 0xe619d30d) [ 1136.712121][ T5701] loop6: detected capacity change from 0 to 8192 [ 1136.792618][ T5701] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1136.833139][ T5701] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 1136.848606][ T5701] REISERFS (device loop6): using ordered data mode [ 1136.862903][ T5701] reiserfs: using flush barriers [ 1136.869316][ T5701] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1136.886190][ T5701] REISERFS (device loop6): checking transaction log (loop6) [ 1136.906998][ T5701] REISERFS (device loop6): Using r5 hash to sort names [ 1136.914568][ T5701] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 1137.383283][ T5729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15513'. [ 1137.423113][T28084] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1137.617071][T28084] usb 5-1: Using ep0 maxpacket: 32 [ 1137.628234][T28084] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1137.682580][T28084] usb 5-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=58.d6 [ 1137.715941][T28084] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1137.729208][T28084] usb 5-1: Product: syz [ 1137.736910][T28084] usb 5-1: Manufacturer: syz [ 1137.741591][T28084] usb 5-1: SerialNumber: syz [ 1137.798001][ T5737] cgroup: Invalid name [ 1137.803624][T28084] usb 5-1: config 0 descriptor?? [ 1137.825222][T28084] snd_usb_variax 5-1:0.0: Line 6 Variax Workbench found [ 1137.832323][T28084] usb 5-1: selecting invalid altsetting 1 [ 1137.855717][T28084] snd_usb_variax 5-1:0.0: set_interface failed [ 1137.862264][T28084] snd_usb_variax 5-1:0.0: Line 6 Variax Workbench now disconnected [ 1137.881447][T28084] snd_usb_variax: probe of 5-1:0.0 failed with error -22 [ 1137.918755][ T5734] loop1: detected capacity change from 0 to 8192 [ 1137.980586][ T5734] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1137.991871][ T5738] loop3: detected capacity change from 0 to 4096 [ 1138.028076][ T5738] /dev/loop3: Can't open blockdev [ 1138.054698][ T5734] FAT-fs (loop1): error, clusters badly computed (1 != 0) [ 1138.063826][ T7439] usb 5-1: USB disconnect, device number 75 [ 1138.076628][ T5742] loop6: detected capacity change from 0 to 764 [ 1138.114733][ T5734] FAT-fs (loop1): Filesystem has been set read-only [ 1138.142408][ T5734] FAT-fs (loop1): error, clusters badly computed (2 != 1) [ 1138.183693][ T5734] FAT-fs (loop1): error, clusters badly computed (3 != 2) [ 1138.211463][ T5734] FAT-fs (loop1): error, clusters badly computed (4 != 3) [ 1138.291347][ T5744] dlm: plock device version mismatch: kernel (1.2.0), user (1.512.4294901762) [ 1138.416517][ T5748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1138.542345][ T5750] overlayfs: bad mount option "redirect_dir=nofollow:/" [ 1141.319467][ T5863] loop4: detected capacity change from 0 to 1024 [ 1141.575868][ T5871] loop6: detected capacity change from 0 to 16 [ 1141.614021][ T5871] erofs: (device loop6): mounted with root inode @ nid 36. [ 1141.663568][ T5871] erofs: (device loop6): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1141.688053][ T5871] erofs: (device loop6): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1141.708581][ T5871] erofs: (device loop6): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1141.732835][ T5871] erofs: (device loop6): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1141.742896][T28084] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1141.765243][ T5871] erofs: (device loop6): z_erofs_read_folio: failed to read, err [-117] [ 1141.925399][T28084] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1141.956232][T28084] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1142.007527][T28084] usb 6-1: config 1 has no interface number 0 [ 1142.030062][T28084] usb 6-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1142.127970][T28084] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1142.155957][T28084] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.238492][T28084] usb 6-1: Product: syz [ 1142.248334][T28084] usb 6-1: Manufacturer: syz [ 1142.256522][T28084] usb 6-1: SerialNumber: syz [ 1142.333392][T28084] usb 6-1: selecting invalid altsetting 1 [ 1142.386573][ T5891] ax25_connect(): syz.4.15594 uses autobind, please contact jreuter@yaina.de [ 1142.739483][T28084] cdc_ncm 6-1:1.1: failed GET_NTB_PARAMETERS [ 1142.761783][T28084] cdc_ncm 6-1:1.1: bind() failure [ 1142.772633][ T7439] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 1142.799017][T28084] usb 6-1: USB disconnect, device number 16 [ 1142.884855][ T5907] netlink: 'syz.3.15601': attribute type 4 has an invalid length. [ 1142.912696][ T5907] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.15601'. [ 1142.994808][ T7439] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1143.014908][ T7439] usb 7-1: not running at top speed; connect to a high speed hub [ 1143.044137][ T7439] usb 7-1: config 4 has an invalid interface number: 32 but max is 0 [ 1143.069084][ T7439] usb 7-1: config 4 has no interface number 0 [ 1143.094822][ T7439] usb 7-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=f1.50 [ 1143.124477][ T7439] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.162900][ T7439] usb 7-1: Product: syz [ 1143.172901][ T7439] usb 7-1: Manufacturer: syz [ 1143.187397][ T7439] usb 7-1: SerialNumber: syz [ 1143.283779][ T27] audit: type=1326 audit(2000000598.639:3248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5918 comm="syz.3.15607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b139bf79 code=0x7ffc0000 [ 1143.306365][ C0] vkms_vblank_simulate: vblank timer overrun [ 1143.407161][ T27] audit: type=1326 audit(2000000598.639:3249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5918 comm="syz.3.15607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b139bf79 code=0x7ffc0000 [ 1143.447607][ T7439] usb 7-1: Found UVC 0.02 device syz (17dc:0202) [ 1143.467065][ T7439] uvcvideo 7-1:4.32: Entity type for entity Output 4 was not initialized! [ 1143.532635][ T7439] usb 7-1: Failed to create links for entity 4 [ 1143.538987][ T7439] usb 7-1: Failed to register entities (-22). [ 1143.553312][ T27] audit: type=1326 audit(2000000598.679:3250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5918 comm="syz.3.15607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f78b139bf79 code=0x7ffc0000 [ 1143.610960][ T7439] usb 7-1: USB disconnect, device number 14 [ 1143.650768][ T27] audit: type=1326 audit(2000000598.679:3251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5918 comm="syz.3.15607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b139bf79 code=0x7ffc0000 [ 1143.754253][ T27] audit: type=1326 audit(2000000598.679:3252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5918 comm="syz.3.15607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b139bf79 code=0x7ffc0000 [ 1144.010839][ T5940] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1144.181029][ T5947] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.15620'. [ 1144.706147][ T5967] loop5: detected capacity change from 0 to 64 [ 1144.735054][ T5970] comedi comedi0: Minor -2147483647 is invalid! [ 1145.091413][ T5977] loop4: detected capacity change from 0 to 2048 [ 1145.177377][ T5987] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1145.264617][ T5977] NILFS (loop4): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3) [ 1145.312124][ T5977] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=16) [ 1145.361681][ T5977] Remounting filesystem read-only [ 1145.375335][ T5977] NILFS (loop4): error -5 truncating bmap (ino=16) [ 1145.545953][ T4276] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 1146.110649][ T6013] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 1146.413736][ T6025] loop3: detected capacity change from 0 to 256 [ 1146.448901][ T6025] /dev/loop3: Can't open blockdev [ 1146.751772][ T6035] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15663'. [ 1147.610295][ T6059] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15674'. [ 1147.662830][ T6059] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15674'. [ 1147.679196][ T6060] ALSA: mixer_oss: invalid OSS volume 'u' [ 1148.582715][ T6087] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1148.670413][ T6091] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1149.491684][ T6120] loop3: detected capacity change from 0 to 4096 [ 1149.531932][ T6120] /dev/loop3: Can't open blockdev [ 1149.711390][ T27] audit: type=1326 audit(2000000605.049:3253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.5.15709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284fd9bf79 code=0x7ffc0000 [ 1149.821998][ T27] audit: type=1326 audit(2000000605.089:3254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.5.15709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f284fd9bf79 code=0x7ffc0000 [ 1149.910130][ T27] audit: type=1326 audit(2000000605.089:3255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.5.15709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284fd9bf79 code=0x7ffc0000 [ 1150.035516][ T27] audit: type=1326 audit(2000000605.089:3256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.5.15709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284fd9bf79 code=0x7ffc0000 [ 1150.255172][ T6146] loop5: detected capacity change from 0 to 1024 [ 1150.298807][ T6150] overlayfs: missing 'lowerdir' [ 1150.947258][ T6166] loop5: detected capacity change from 0 to 4096 [ 1151.004597][ T6166] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512) [ 1151.369709][ T6188] binder: 6187:6188 ioctl c00c6211 0 returned -14 [ 1152.316736][ T6224] loop3: detected capacity change from 0 to 512 [ 1152.353010][ T6224] /dev/loop3: Can't open blockdev [ 1152.655487][ T6236] netlink: 'syz.3.15758': attribute type 30 has an invalid length. [ 1152.955810][ T6253] netlink: 'syz.6.15767': attribute type 3 has an invalid length. [ 1152.982156][ T6253] netlink: 'syz.6.15767': attribute type 3 has an invalid length. [ 1153.046312][ T6253] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15767'. [ 1153.364957][ T6265] loop4: detected capacity change from 0 to 256 [ 1153.417170][ T6267] MPI: mpi too large (107144 bits) [ 1153.483668][ T6265] FAT-fs (loop4): Directory bread(block 64) failed [ 1153.490370][ T6265] FAT-fs (loop4): Directory bread(block 65) failed [ 1153.522792][ T6265] FAT-fs (loop4): Directory bread(block 66) failed [ 1153.529438][ T6265] FAT-fs (loop4): Directory bread(block 67) failed [ 1153.545094][ T6265] FAT-fs (loop4): Directory bread(block 68) failed [ 1153.559013][ T6265] FAT-fs (loop4): Directory bread(block 69) failed [ 1153.567729][ T6265] FAT-fs (loop4): Directory bread(block 70) failed [ 1153.588830][ T6265] FAT-fs (loop4): Directory bread(block 71) failed [ 1153.607297][ T6265] FAT-fs (loop4): Directory bread(block 72) failed [ 1153.617496][ T6265] FAT-fs (loop4): Directory bread(block 73) failed [ 1153.812812][ T7439] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1153.930360][ T6280] usb usb8: usbfs: process 6280 (syz.5.15782) did not claim interface 0 before use [ 1154.072346][ T7439] usb 7-1: Using ep0 maxpacket: 32 [ 1154.079902][ T7439] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1154.129929][ T7439] usb 7-1: config 1 has no interface number 1 [ 1154.152833][ T7439] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1154.184826][ T7439] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.232340][ T7439] usb 7-1: Product: syz [ 1154.246846][ T7439] usb 7-1: Manufacturer: syz [ 1154.251650][ T7439] usb 7-1: SerialNumber: syz [ 1154.512311][ T7439] usb 7-1: 2:1 : no or invalid class specific endpoint descriptor [ 1154.535585][ T7439] usb 7-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 1154.551720][ T7439] usb 7-1: 2:1 : unsupported sample bitwidth 71 in 38 bytes [ 1154.600381][ T7439] usb 7-1: USB disconnect, device number 15 [ 1154.790216][ T27] audit: type=1326 audit(2000000610.129:3257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6306 comm="syz.3.15793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b139bf79 code=0x7ffc0000 [ 1154.851955][ T27] audit: type=1326 audit(2000000610.169:3258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6306 comm="syz.3.15793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b139bf79 code=0x7ffc0000 [ 1154.912923][ T27] audit: type=1326 audit(2000000610.169:3259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6306 comm="syz.3.15793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f78b139bf79 code=0x7ffc0000 [ 1154.998309][ T27] audit: type=1326 audit(2000000610.179:3260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6306 comm="syz.3.15793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b139bf79 code=0x7ffc0000 [ 1155.041957][ T4377] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1155.062032][ T27] audit: type=1326 audit(2000000610.179:3261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6306 comm="syz.3.15793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b139bf79 code=0x7ffc0000 [ 1155.261984][ T4377] usb 2-1: Using ep0 maxpacket: 8 [ 1155.269176][ T4377] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1155.297388][ T6317] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15799'. [ 1155.317830][ T4377] usb 2-1: config 0 has no interface number 0 [ 1155.326971][ T4377] usb 2-1: config 0 interface 1 has no altsetting 0 [ 1155.363973][ T4377] usb 2-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 1155.384512][ T4377] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.402253][ T4377] usb 2-1: Product: syz [ 1155.411408][ T4377] usb 2-1: Manufacturer: syz [ 1155.440227][ T4377] usb 2-1: SerialNumber: syz [ 1155.476454][ T4377] usb 2-1: config 0 descriptor?? [ 1155.571381][ T6301] loop4: detected capacity change from 0 to 32768 [ 1155.680619][ T6301] ERROR: (device loop4): dbAlloc: unable to allocate blocks [ 1155.680619][ T6301] [ 1155.704199][ T4377] i2c-cp2615: probe of 2-1:0.1 failed with error -22 [ 1155.920418][ T4347] usb 2-1: USB disconnect, device number 67 [ 1156.858072][ T6365] netlink: 'syz.3.15823': attribute type 13 has an invalid length. [ 1157.170975][ T6369] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1158.413447][ T6419] loop5: detected capacity change from 0 to 4096 [ 1158.447070][ T6419] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 1158.544931][ T6419] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 1158.999989][ T6442] loop6: detected capacity change from 0 to 1024 [ 1159.256340][ T4353] hfsplus: b-tree write err: -5, ino 4 [ 1159.621891][ T4377] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1159.827169][ T4377] usb 2-1: Using ep0 maxpacket: 16 [ 1159.840398][ T4377] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1159.869597][ T4377] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.900641][ T4377] usb 2-1: Product: syz [ 1159.915850][ T4377] usb 2-1: Manufacturer: syz [ 1159.920554][ T4377] usb 2-1: SerialNumber: syz [ 1159.965920][ T4377] usb 2-1: config 0 descriptor?? [ 1160.189414][ T4377] speedtch 2-1:0.0: speedtch_bind: wrong device class 68 [ 1160.201790][ T4377] speedtch 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1160.406172][ T4377] usb 2-1: USB disconnect, device number 68 [ 1160.747588][ T6497] netlink: 463 bytes leftover after parsing attributes in process `syz.4.15886'. [ 1161.582767][ T6525] tmpfs: Bad value for 'mpol' [ 1162.521235][ T6563] xt_l2tp: invalid flags combination: 4 [ 1163.136634][ T6585] loop5: detected capacity change from 0 to 16 [ 1163.194939][ T6585] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1163.497330][ T6567] loop3: detected capacity change from 0 to 32768 [ 1163.591892][ T6593] loop6: detected capacity change from 0 to 2048 [ 1163.599678][ T6593] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=27485, location=27485 [ 1163.612883][ T4398] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1163.661455][ T6593] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1163.891534][ T4377] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1164.091507][ T4377] usb 2-1: Using ep0 maxpacket: 16 [ 1164.098958][ T4377] usb 2-1: config 254 has an invalid interface number: 235 but max is 0 [ 1164.128468][ T4377] usb 2-1: config 254 has no interface number 0 [ 1164.149785][ T4377] usb 2-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 1164.149952][ T6601] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15939'. [ 1164.193269][ T4377] usb 2-1: config 254 interface 235 altsetting 2 endpoint 0x82 has an invalid bInterval 97, changing to 7 [ 1164.247059][ T4377] usb 2-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid maxpacket 24929, setting to 1024 [ 1164.279357][ T4377] usb 2-1: config 254 interface 235 has no altsetting 0 [ 1164.316382][ T4377] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1164.347245][ T4377] usb 2-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 1164.372269][ T4377] usb 2-1: Product: syz [ 1164.381822][ T4377] usb 2-1: Manufacturer: syz [ 1164.391654][ T4377] usb 2-1: SerialNumber: syz [ 1164.413890][ T6595] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1164.570894][ T6612] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15944'. [ 1164.637775][ T6612] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15944'. [ 1164.656167][ T6612] netlink: 7 bytes leftover after parsing attributes in process `syz.5.15944'. [ 1164.664683][ T4377] usbtest 2-1:254.235: couldn't get endpoints, -71 [ 1164.666520][ T6617] netlink: 32 bytes leftover after parsing attributes in process `syz.3.15946'. [ 1164.700367][ T4377] usbtest: probe of 2-1:254.235 failed with error -71 [ 1164.704538][ T6617] netlink: 32 bytes leftover after parsing attributes in process `syz.3.15946'. [ 1164.744602][ T4377] usb 2-1: USB disconnect, device number 69 [ 1165.325944][ T6639] netlink: 'syz.5.15958': attribute type 32 has an invalid length. [ 1165.671030][ T6656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15967'. [ 1165.678394][ T6655] loop6: detected capacity change from 0 to 256 [ 1165.943470][ T6663] loop4: detected capacity change from 0 to 256 [ 1166.099598][ T6663] FAT-fs (loop4): Directory bread(block 64) failed [ 1166.121807][ T6663] FAT-fs (loop4): Directory bread(block 65) failed [ 1166.128962][ T6663] FAT-fs (loop4): Directory bread(block 66) failed [ 1166.170419][ T6669] netlink: 5 bytes leftover after parsing attributes in process `syz.5.15973'. [ 1166.201872][ T6663] FAT-fs (loop4): Directory bread(block 67) failed [ 1166.223308][ T6669] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1166.244429][ T6663] FAT-fs (loop4): Directory bread(block 68) failed [ 1166.268363][ T6663] FAT-fs (loop4): Directory bread(block 69) failed [ 1166.295677][ T6663] FAT-fs (loop4): Directory bread(block 70) failed [ 1166.331471][ T6663] FAT-fs (loop4): Directory bread(block 71) failed [ 1166.363789][ T6663] FAT-fs (loop4): Directory bread(block 72) failed [ 1166.388566][ T6663] FAT-fs (loop4): Directory bread(block 73) failed [ 1166.565801][ T6680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15978'. [ 1166.611338][ T6680] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15978'. [ 1166.620614][ T6680] netlink: 40 bytes leftover after parsing attributes in process `syz.1.15978'. [ 1166.911824][ T6691] binder: 6690:6691 ioctl c0046209 0 returned -22 [ 1167.527001][ T6717] netlink: 96 bytes leftover after parsing attributes in process `syz.4.15996'. [ 1168.291500][ T6747] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1168.530442][ T6759] loop5: detected capacity change from 0 to 256 [ 1168.802262][ T27] audit: type=1326 audit(2000000624.150:3262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6763 comm="syz.6.16021" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7af3f9bf79 code=0x0 [ 1168.913994][ T6768] overlayfs: unrecognized mount option "obj_role=(‹&À!+/$:\(" or missing value [ 1169.066819][ T6775] netlink: 36 bytes leftover after parsing attributes in process `syz.6.16026'. [ 1169.148281][ T6778] netlink: 32 bytes leftover after parsing attributes in process `syz.5.16028'. [ 1169.664837][ T6797] xt_l2tp: v2 sid > 0xffff: 117440512 [ 1169.672861][ T4347] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1169.884450][ T4347] usb 4-1: Using ep0 maxpacket: 16 [ 1169.898437][ T4347] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1169.949591][ T4347] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1169.989000][ T4347] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1170.011139][ T4347] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1170.033152][ T4347] usb 4-1: Product: syz [ 1170.037425][ T4347] usb 4-1: Manufacturer: syz [ 1170.051201][ T4347] usb 4-1: SerialNumber: syz [ 1170.097527][ T6813] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1170.127967][ T6813] overlayfs: missing 'lowerdir' [ 1170.140135][ T6815] affs: No valid root block on device nbd5 [ 1170.274982][ T4347] usb 4-1: 0:2 : does not exist [ 1170.287698][ T4347] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1170.353283][ T4347] usb 4-1: USB disconnect, device number 83 [ 1170.639574][ T6829] loop1: detected capacity change from 0 to 4096 [ 1170.663169][ T4398] udevd[4398]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1170.685372][ T6832] loop6: detected capacity change from 0 to 128 [ 1170.754902][ T6836] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1170.776292][ T6832] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1171.087483][ T6844] loop5: detected capacity change from 0 to 16 [ 1171.122514][ T6844] erofs: (device loop5): mounted with root inode @ nid 36. [ 1171.415167][ T6852] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16064'. [ 1171.445459][ T6852] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16064'. [ 1171.731130][ T6865] futex_wake_op: syz.3.16071 tries to shift op by 32; fix this program [ 1172.028841][ T6877] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16076'. [ 1172.412757][T21857] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 1173.322468][ T6880] loop1: detected capacity change from 0 to 40427 [ 1173.446197][ T6880] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1173.635327][ T6880] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1174.669235][ T6966] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1174.680080][ T6970] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1174.687418][ T6970] IPv6: NLM_F_CREATE should be set when creating new route [ 1174.694991][ T6970] IPv6: NLM_F_CREATE should be set when creating new route [ 1174.702323][ T6970] IPv6: NLM_F_CREATE should be set when creating new route [ 1174.792194][ T4347] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1174.951039][ T4377] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1175.012901][ T4347] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1175.030943][ T4347] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1175.069165][ T4347] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.089093][ T4347] usb 5-1: config 0 descriptor?? [ 1175.173363][ T4377] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1175.191942][ T4377] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.203116][ T4377] usb 2-1: config 0 descriptor?? [ 1175.469925][ T6995] netlink: 16 bytes leftover after parsing attributes in process `syz.5.16133'. [ 1175.509541][ T4347] ath6kl: Failed to read usb control message: -71 [ 1175.527974][ T4347] ath6kl: Unable to read the bmi data from the device: -71 [ 1175.545208][ T4347] ath6kl: Unable to recv target info: -71 [ 1175.558701][ T4347] ath6kl: Failed to init ath6kl core: -71 [ 1175.627502][ T4377] ath6kl: Failed to submit usb control message: -71 [ 1175.634594][ T4377] ath6kl: unable to send the bmi data to the device: -71 [ 1175.650808][ T4377] ath6kl: Unable to send get target info: -71 [ 1175.666599][ T4377] ath6kl: Failed to init ath6kl core: -71 [ 1175.738711][ T4347] ath6kl_usb: probe of 5-1:0.0 failed with error -71 [ 1175.759195][ T4347] usb 5-1: USB disconnect, device number 76 [ 1175.774816][ T4377] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 1175.809557][ T4377] usb 2-1: USB disconnect, device number 70 [ 1175.979345][ T7007] loop3: detected capacity change from 0 to 4096 [ 1176.003680][ T7007] /dev/loop3: Can't open blockdev [ 1176.104893][ T7011] netlink: 'syz.6.16140': attribute type 1 has an invalid length. [ 1176.431065][ T7021] Cannot find del_set index 4 as target [ 1176.453888][ T7023] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16146'. [ 1176.724475][ T7033] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1176.996125][ T7043] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551614) [ 1177.010825][ T7043] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 1177.275076][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.454660][ T7054] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1177.656054][ T7063] netlink: 5 bytes leftover after parsing attributes in process `syz.3.16164'. [ 1177.894803][ T7069] netlink: 'syz.3.16168': attribute type 2 has an invalid length. [ 1177.930694][ T7069] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.16168'. [ 1178.349637][ T7042] loop5: detected capacity change from 0 to 40427 [ 1178.457285][ T7042] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1178.640882][ T7042] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1178.776803][ T7093] sctp: [Deprecated]: syz.1.16178 (pid 7093) Use of int in maxseg socket option. [ 1178.776803][ T7093] Use struct sctp_assoc_value instead [ 1179.199644][ T7107] loop3: detected capacity change from 0 to 512 [ 1179.218575][ T7107] /dev/loop3: Can't open blockdev [ 1179.598266][ T7113] loop4: detected capacity change from 0 to 8192 [ 1179.633608][ T7113] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1179.660794][ T7113] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 1179.670156][ T7113] REISERFS (device loop4): using ordered data mode [ 1179.724238][ T7113] reiserfs: using flush barriers [ 1179.762970][ T7113] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1179.932844][ T7113] REISERFS (device loop4): checking transaction log (loop4) [ 1180.093830][ T7132] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1180.124299][ T7130] VFS: could not find a valid V7 on nullb0. [ 1180.206170][ T7113] REISERFS (device loop4): Using tea hash to sort names [ 1180.234947][ T7113] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 1180.260481][ T7113] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 1180.598965][ T7142] dlm: non-version read from control device 0 [ 1180.665849][ T7119] loop1: detected capacity change from 0 to 32768 [ 1181.067349][ T7148] loop6: detected capacity change from 0 to 4096 [ 1181.141512][ T7148] EXT4-fs: Ignoring removed mblk_io_submit option [ 1181.211785][ T7148] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1181.273106][ T7148] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1181.531939][T30164] EXT4-fs (loop6): unmounting filesystem. [ 1181.553832][ T7165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16212'. [ 1182.296566][ T7190] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1182.997762][ T7206] loop3: detected capacity change from 0 to 8192 [ 1183.499259][ T7235] netlink: 'syz.1.16246': attribute type 2 has an invalid length. [ 1183.550578][ T7235] netlink: 44 bytes leftover after parsing attributes in process `syz.1.16246'. [ 1183.709379][ T7243] netlink: 'syz.5.16250': attribute type 8 has an invalid length. [ 1183.759552][ T7243] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1183.800787][ T7243] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1184.001743][ T7255] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16255'. [ 1184.057899][T28088] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1184.163554][ T7260] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16257'. [ 1184.282154][T28088] usb 7-1: config 0 has an invalid interface number: 69 but max is 0 [ 1184.301887][T28088] usb 7-1: config 0 has no interface number 0 [ 1184.318619][ T7265] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16260'. [ 1184.329671][T28088] usb 7-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1184.340372][T14585] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 1184.350432][T28088] usb 7-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1184.363548][ T7265] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16260'. [ 1184.375906][T28088] usb 7-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1184.385341][ T7265] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16260'. [ 1184.396599][T28088] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1184.414452][T28088] usb 7-1: Product: syz [ 1184.424555][T28088] usb 7-1: Manufacturer: syz [ 1184.444044][T28088] usb 7-1: SerialNumber: syz [ 1184.460812][T28088] usb 7-1: config 0 descriptor?? [ 1184.466546][ T7249] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1184.485514][T28088] cyberjack 7-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1184.512664][T28088] usb 7-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1184.538353][T14585] usb 6-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 1184.570585][T14585] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1184.578758][T14585] usb 6-1: Product: syz [ 1184.620209][T14585] usb 6-1: Manufacturer: syz [ 1184.624903][T14585] usb 6-1: SerialNumber: syz [ 1184.659885][ T7270] loop4: detected capacity change from 0 to 2048 [ 1184.665129][T14585] usb 6-1: config 0 descriptor?? [ 1184.709433][ T7270] EXT4-fs: Ignoring removed bh option [ 1184.722133][ T7270] EXT4-fs: Ignoring removed nobh option [ 1184.871673][ T7270] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1184.880960][ T7270] ext4 filesystem being mounted at /3214/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1184.924861][T14585] usb 6-1: ignoring: not an USB2CAN converter [ 1184.932003][ T4377] usb 7-1: USB disconnect, device number 16 [ 1184.941225][ T7270] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #15: comm syz.4.16263: corrupted xattr block 128 [ 1184.956131][ T7270] EXT4-fs (loop4): Remounting filesystem read-only [ 1185.003934][ T4377] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1185.041874][ T4377] cyberjack 7-1:0.69: device disconnected [ 1185.123732][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 1185.145815][T14585] usb 6-1: USB disconnect, device number 17 [ 1185.847724][ T7301] program syz.3.16276 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1186.007449][ T7297] loop1: detected capacity change from 0 to 8192 [ 1186.072560][ T7297] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1186.086070][ T7297] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 1186.095960][ T7297] REISERFS (device loop1): using ordered data mode [ 1186.103129][ T7297] reiserfs: using flush barriers [ 1186.128162][ T7297] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1186.160781][ T7297] REISERFS (device loop1): checking transaction log (loop1) [ 1186.175187][ T7297] REISERFS (device loop1): Using r5 hash to sort names [ 1186.183046][ T7297] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1186.206649][ T7297] REISERFS warning (device loop1): super-6502 reiserfs_getopt: unknown mount option "reiserfs" [ 1186.229231][ T7305] loop5: detected capacity change from 0 to 4096 [ 1186.292196][ T7305] ntfs: (device loop5): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 1186.354059][ T7305] ntfs: (device loop5): ntfs_read_locked_inode(): $DATA attribute is missing. [ 1186.438396][ T7305] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 1186.527406][ T7305] ntfs: (device loop5): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1186.620116][ T7305] ntfs: volume version 3.1. [ 1186.813385][ T7327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16288'. [ 1186.984831][ T7330] netlink: 45 bytes leftover after parsing attributes in process `syz.1.16290'. [ 1187.098953][ T27] audit: type=1326 audit(2000000642.441:3263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7334 comm="syz.3.16293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b139bf79 code=0x7ffc0000 [ 1187.180351][ T27] audit: type=1326 audit(2000000642.441:3264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7334 comm="syz.3.16293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b139bf79 code=0x7ffc0000 [ 1187.313736][ T27] audit: type=1326 audit(2000000642.441:3265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7334 comm="syz.3.16293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f78b139bf79 code=0x7ffc0000 [ 1187.440177][ T27] audit: type=1326 audit(2000000642.441:3266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7334 comm="syz.3.16293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b139bf79 code=0x7ffc0000 [ 1187.550204][ T27] audit: type=1326 audit(2000000642.441:3267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7334 comm="syz.3.16293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b139bf79 code=0x7ffc0000 [ 1187.910756][ T7359] SET target dimension over the limit! [ 1188.346609][ T7376] netlink: 'syz.6.16314': attribute type 12 has an invalid length. [ 1188.447948][ T7372] loop1: detected capacity change from 0 to 4096 [ 1188.468212][ T7372] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1188.488688][ C1] vkms_vblank_simulate: vblank timer overrun [ 1188.640149][T28088] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1188.678756][ T7372] ntfs: volume version 3.1. [ 1188.800354][ T7390] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16319'. [ 1188.840278][ T7390] netlink: 48 bytes leftover after parsing attributes in process `syz.4.16319'. [ 1188.850426][T28088] usb 4-1: Using ep0 maxpacket: 32 [ 1188.857898][T28088] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 1188.872228][T28084] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 1188.891684][T28088] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1188.922486][T28088] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1188.939990][T28088] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1188.962757][T28088] usb 4-1: Product: syz [ 1188.967032][T28088] usb 4-1: Manufacturer: syz [ 1189.000014][T28088] usb 4-1: SerialNumber: syz [ 1189.020838][T28088] usb 4-1: config 0 descriptor?? [ 1189.043184][T28088] usb 4-1: no audio or video endpoints found [ 1189.081161][T28084] usb 6-1: not running at top speed; connect to a high speed hub [ 1189.117456][T28084] usb 6-1: config 95 has an invalid interface number: 1 but max is 0 [ 1189.140337][T28084] usb 6-1: config 95 has no interface number 0 [ 1189.156907][T28084] usb 6-1: config 95 interface 1 has no altsetting 0 [ 1189.174851][T28084] usb 6-1: string descriptor 0 read error: -22 [ 1189.190169][T28084] usb 6-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 1189.218969][T28084] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1189.249337][T14585] usb 4-1: USB disconnect, device number 84 [ 1189.728479][T28084] usb 6-1: USB disconnect, device number 18 [ 1190.369231][ T7410] loop1: detected capacity change from 0 to 32768 [ 1190.444670][ T7438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16343'. [ 1190.454381][ T7437] xt_cgroup: path and classid specified [ 1190.940410][ T7457] netlink: 'syz.6.16351': attribute type 1 has an invalid length. [ 1191.976628][ T7490] netlink: 'syz.1.16366': attribute type 2 has an invalid length. [ 1192.000860][ T7494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16368'. [ 1192.029938][ T7494] netlink: 660 bytes leftover after parsing attributes in process `syz.4.16368'. [ 1192.254452][ T7501] bond0: (slave veth0_to_hsr): Error: Device can not be enslaved while up [ 1192.737673][ T7517] loop3: detected capacity change from 0 to 64 [ 1193.029820][T14585] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1193.219903][T14585] usb 2-1: Using ep0 maxpacket: 16 [ 1193.227397][T14585] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1193.256483][T14585] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 1193.295257][T14585] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1193.323066][T14585] usb 2-1: config 0 descriptor?? [ 1193.389910][T14585] xbox_remote_probe: Unexpected endpoint_in [ 1193.396694][T14585] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1193.408094][ T7536] xt_TCPMSS: Only works on TCP SYN packets [ 1193.447394][ T7539] netlink: 'syz.5.16391': attribute type 2 has an invalid length. [ 1193.485467][ T7539] netlink: 'syz.5.16391': attribute type 8 has an invalid length. [ 1193.521819][ T7539] netlink: 132 bytes leftover after parsing attributes in process `syz.5.16391'. [ 1193.580517][T14585] usb 2-1: USB disconnect, device number 71 [ 1193.835250][ T7552] qrtr: Invalid version 0 [ 1194.072588][ T7558] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1194.312354][ T7565] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1194.379734][ T7565] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1194.416687][ T7565] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1194.616610][ T7575] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16408'. [ 1194.633289][ T7575] netlink: 'syz.6.16408': attribute type 1 has an invalid length. [ 1194.647036][ T7575] netlink: 31 bytes leftover after parsing attributes in process `syz.6.16408'. [ 1194.664765][ T7575] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16408'. [ 1195.373234][ T7598] device bond0 entered promiscuous mode [ 1195.397965][ T7598] device bond_slave_0 entered promiscuous mode [ 1195.424642][ T7598] device bond_slave_1 entered promiscuous mode [ 1195.625624][ T7608] netlink: 'syz.5.16423': attribute type 2 has an invalid length. [ 1195.647602][ T7608] netlink: 'syz.5.16423': attribute type 1 has an invalid length. [ 1195.840709][ T7612] loop1: detected capacity change from 0 to 128 [ 1195.887698][ T7612] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1195.956574][ T7612] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1196.230960][ T7592] loop6: detected capacity change from 0 to 32768 [ 1196.262426][ T7620] loop1: detected capacity change from 0 to 16 [ 1196.289380][ T7620] erofs: (device loop1): mounted with root inode @ nid 36. [ 1196.310510][ T7620] erofs: (device loop1): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 32768 [ 1196.349772][ T7620] erofs: (device loop1): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 32768 [ 1196.410117][ T7592] XFS (loop6): Mounting V5 Filesystem [ 1196.416646][ T7620] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 1196.510631][ T7592] XFS (loop6): Ending clean mount [ 1196.702387][T30164] XFS (loop6): Unmounting Filesystem [ 1196.796460][ T7638] netlink: 'syz.1.16433': attribute type 3 has an invalid length. [ 1197.234871][ T7649] loop3: detected capacity change from 0 to 1024 [ 1197.254690][ T7653] loop1: detected capacity change from 0 to 256 [ 1197.278779][ T7649] /dev/loop3: Can't open blockdev [ 1197.411416][ T7653] FAT-fs (loop1): Directory bread(block 64) failed [ 1197.449052][ T7653] FAT-fs (loop1): Directory bread(block 65) failed [ 1197.492520][ T7653] FAT-fs (loop1): Directory bread(block 66) failed [ 1197.499150][ T7653] FAT-fs (loop1): Directory bread(block 67) failed [ 1197.558282][ T7653] FAT-fs (loop1): Directory bread(block 68) failed [ 1197.579730][ T7653] FAT-fs (loop1): Directory bread(block 69) failed [ 1197.586615][ T7653] FAT-fs (loop1): Directory bread(block 70) failed [ 1197.659335][ T7653] FAT-fs (loop1): Directory bread(block 71) failed [ 1197.680006][ T7653] FAT-fs (loop1): Directory bread(block 72) failed [ 1197.686665][ T7653] FAT-fs (loop1): Directory bread(block 73) failed [ 1198.119354][ T7671] netlink: 'syz.5.16450': attribute type 11 has an invalid length. [ 1198.127626][ T7671] netlink: 224 bytes leftover after parsing attributes in process `syz.5.16450'. [ 1199.329703][T14585] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1199.458644][ T27] kauditd_printk_skb: 26 callbacks suppressed [ 1199.458663][ T27] audit: type=1326 audit(2000000654.802:3273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7725 comm="syz.3.16477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b139bf79 code=0x7ffc0000 [ 1199.539519][ T27] audit: type=1326 audit(2000000654.822:3274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7725 comm="syz.3.16477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b139bf79 code=0x7ffc0000 [ 1199.573880][T14585] usb 7-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e [ 1199.609632][T14585] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.635035][ T27] audit: type=1326 audit(2000000654.842:3275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7725 comm="syz.3.16477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f78b139bf79 code=0x7ffc0000 [ 1199.659428][T14585] usb 7-1: Product: syz [ 1199.663679][T14585] usb 7-1: Manufacturer: syz [ 1199.668331][T14585] usb 7-1: SerialNumber: syz [ 1199.720257][T14585] usb 7-1: config 0 descriptor?? [ 1199.751311][ T27] audit: type=1326 audit(2000000654.842:3276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7725 comm="syz.3.16477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b139bf79 code=0x7ffc0000 [ 1199.779516][T14585] usbsevseg 7-1:0.0: USB 7 Segment device now attached [ 1199.852342][ T27] audit: type=1326 audit(2000000654.842:3277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7725 comm="syz.3.16477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b139bf79 code=0x7ffc0000 [ 1199.939622][ T27] audit: type=1326 audit(2000000655.082:3278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7731 comm="syz.3.16480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b139bf79 code=0x7ffc0000 [ 1200.003659][T14585] usb 7-1: USB disconnect, device number 17 [ 1200.012400][T14585] usbsevseg 7-1:0.0: USB 7 Segment now disconnected [ 1200.026332][ T27] audit: type=1326 audit(2000000655.092:3279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7731 comm="syz.3.16480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f78b139bf79 code=0x7ffc0000 [ 1200.119872][ T27] audit: type=1326 audit(2000000655.092:3280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7731 comm="syz.3.16480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b139bf79 code=0x7ffc0000 [ 1200.217710][ T27] audit: type=1326 audit(2000000655.092:3281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7731 comm="syz.3.16480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b139bf79 code=0x7ffc0000 [ 1200.482127][ T7758] loop5: detected capacity change from 0 to 64 [ 1200.516385][ T7753] [U] ^C [ 1200.992647][ T7775] netlink: 'syz.1.16501': attribute type 1 has an invalid length. [ 1201.093599][ T27] audit: type=1400 audit(2000000656.442:3282): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=7778 comm="syz.4.16503" [ 1201.285755][ T7787] netlink: 'syz.1.16507': attribute type 33 has an invalid length. [ 1201.310075][ T7787] netlink: 152 bytes leftover after parsing attributes in process `syz.1.16507'. [ 1202.188746][ T7822] i2c i2c-0: Invalid block write size 34 [ 1202.453600][ T7832] netlink: 'syz.5.16528': attribute type 95 has an invalid length. [ 1202.755697][ T7843] netlink: 'syz.5.16535': attribute type 2 has an invalid length. [ 1202.799403][ T7843] netlink: 25 bytes leftover after parsing attributes in process `syz.5.16535'. [ 1203.311639][ T7863] comedi comedi1: dmm32at: I/O port conflict (0x400cf7,16) [ 1204.179758][ T7892] netlink: 88 bytes leftover after parsing attributes in process `syz.1.16558'. [ 1204.268431][ T7866] loop3: detected capacity change from 0 to 32768 [ 1204.297595][ T7894] loop6: detected capacity change from 0 to 4096 [ 1204.372455][ T7866] ocfs2: Readonly device (7,3) detected. Cluster services will not be used for this mount. Recovery will be skipped. [ 1204.395126][ T7866] ocfs2: Mounting device (7,3) on (node local, slot 65535) with ordered data mode. [ 1204.494122][ T7899] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1204.532746][ T7894] syz.6.16559: attempt to access beyond end of device [ 1204.532746][ T7894] loop6: rw=524288, sector=2097320, nr_sectors = 8 limit=4096 [ 1204.571884][ T4272] INFO: trying to register non-static key. [ 1204.577796][ T4272] The code is fine but needs lockdep annotation, or maybe [ 1204.585211][ T4272] you didn't initialize this object before use? [ 1204.591485][ T4272] turning off the locking correctness validator. [ 1204.597969][ T4272] CPU: 1 PID: 4272 Comm: syz-executor Not tainted syzkaller #0 [ 1204.605568][ T4272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1204.615680][ T4272] Call Trace: [ 1204.619003][ T4272] [ 1204.621981][ T4272] dump_stack_lvl+0x188/0x24e [ 1204.626731][ T4272] ? show_regs_print_info+0x12/0x12 [ 1204.631993][ T4272] ? load_image+0x400/0x400 [ 1204.636561][ T4272] ? _find_next_bit+0x11e/0x130 [ 1204.641480][ T4272] ? __is_module_percpu_address+0x279/0x3b0 [ 1204.647487][ T4272] ? is_kernel_percpu_address+0x18f/0x1b0 [ 1204.653296][ T4272] assign_lock_key+0x201/0x230 [ 1204.658134][ T4272] ? SOFTIRQ_verbose+0x10/0x10 [ 1204.662963][ T4272] ? verify_lock_unused+0x140/0x140 [ 1204.668232][ T4272] ? deref_stack_reg+0x19f/0x230 [ 1204.673240][ T4272] register_lock_class+0x21d/0x870 [ 1204.678434][ T4272] ? mark_lock+0x94/0x320 [ 1204.682846][ T4272] ? is_dynamic_key+0x260/0x260 [ 1204.687726][ T4272] ? __lock_acquire+0x13cf/0x7d10 [ 1204.692893][ T4272] ? __lock_acquire+0x7d10/0x7d10 [ 1204.697990][ T4272] __lock_acquire+0x16f/0x7d10 [ 1204.699626][ T7894] syz.6.16559: attempt to access beyond end of device [ 1204.699626][ T7894] loop6: rw=0, sector=2097320, nr_sectors = 8 limit=4096 [ 1204.702867][ T4272] ? is_bpf_text_address+0x28b/0x2a0 [ 1204.702911][ T4272] ? kernel_text_address+0x9c/0xd0 [ 1204.727224][ T4272] ? verify_lock_unused+0x140/0x140 [ 1204.732524][ T4272] ? stack_trace_save+0xf0/0xf0 [ 1204.737693][ T4272] ? arch_stack_walk+0xf2/0x140 [ 1204.742813][ T4272] ? verify_lock_unused+0x140/0x140 [ 1204.748084][ T4272] ? stack_trace_save+0xa6/0xf0 [ 1204.753008][ T4272] lock_acquire+0x1bb/0x4a0 [ 1204.757570][ T4272] ? ocfs2_mark_lockres_freeing+0x159/0x600 [ 1204.763527][ T4272] ? memset+0x1e/0x40 [ 1204.767566][ T4272] ? read_lock_is_recursive+0x10/0x10 [ 1204.772994][ T4272] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 1204.779295][ T4272] ? lockdep_hardirqs_on+0x94/0x140 [ 1204.784553][ T4272] _raw_spin_lock_irqsave+0xb0/0x100 [ 1204.789892][ T4272] ? ocfs2_mark_lockres_freeing+0x159/0x600 [ 1204.795843][ T4272] ? _raw_spin_lock+0x40/0x40 [ 1204.800582][ T4272] ? ktime_get+0x247/0x270 [ 1204.805063][ T4272] ocfs2_mark_lockres_freeing+0x159/0x600 [ 1204.810839][ T4272] ? kasan_quarantine_put+0xd4/0x220 [ 1204.816178][ T4272] ? ocfs2_dlm_shutdown+0x240/0x240 [ 1204.821444][ T4272] ? ocfs2_journal_shutdown+0x673/0xc20 [ 1204.827060][ T4272] ? ocfs2_journal_init+0xdb0/0xdb0 [ 1204.832317][ T4272] ? __kmem_cache_free+0xb6/0x1f0 [ 1204.837399][ T4272] ocfs2_dlm_shutdown+0x36/0x240 [ 1204.839255][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 1204.839297][ T27] audit: type=1800 audit(2000000660.112:3288): pid=7894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.16559" name="file2" dev="loop6" ino=16 res=0 errno=0 [ 1204.842391][ T4272] ocfs2_dismount_volume+0x47f/0x940 [ 1204.842422][ T4272] ? ocfs2_enable_quotas+0x490/0x490 [ 1204.878890][ T4272] ? clear_inode+0x150/0x150 [ 1204.883554][ T4272] ? ocfs2_free_inode+0x20/0x20 [ 1204.888467][ T4272] generic_shutdown_super+0x130/0x340 [ 1204.893911][ T4272] kill_block_super+0x7c/0xe0 [ 1204.898641][ T4272] deactivate_locked_super+0x93/0xf0 [ 1204.903981][ T4272] cleanup_mnt+0x42c/0x4b0 [ 1204.908447][ T4272] ? lockdep_hardirqs_on+0x94/0x140 [ 1204.913705][ T4272] task_work_run+0x1d0/0x260 [ 1204.918358][ T4272] ? task_work_cancel+0x220/0x220 [ 1204.923441][ T4272] ? exit_to_user_mode_loop+0x3b/0x110 [ 1204.928994][ T4272] exit_to_user_mode_loop+0xe6/0x110 [ 1204.934366][ T4272] exit_to_user_mode_prepare+0xee/0x180 [ 1204.940013][ T4272] syscall_exit_to_user_mode+0x16/0x40 [ 1204.945529][ T4272] do_syscall_64+0x58/0xa0 [ 1204.950004][ T4272] ? clear_bhb_loop+0x60/0xb0 [ 1204.954740][ T4272] ? clear_bhb_loop+0x60/0xb0 [ 1204.959492][ T4272] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1204.965549][ T4272] RIP: 0033:0x7f78b139d1d7 [ 1204.970022][ T4272] Code: a2 c7 05 bc e3 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1204.989811][ T4272] RSP: 002b:00007ffd1a493508 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1204.998285][ T4272] RAX: 0000000000000000 RBX: 00007f78b1431c3b RCX: 00007f78b139d1d7 [ 1205.006309][ T4272] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd1a4935c0 [ 1205.014341][ T4272] RBP: 00007ffd1a4935c0 R08: 00007ffd1a4945c0 R09: 00000000ffffffff [ 1205.022387][ T4272] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd1a494650 [ 1205.030420][ T4272] R13: 00007f78b1431c3b R14: 00000000001260b3 R15: 00007ffd1a494690 [ 1205.038457][ T4272] [ 1205.204488][ T4272] ocfs2: Unmounting device (7,3) on (node local)