last executing test programs: 2.522620967s ago: executing program 3 (id=8455): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_TUN_ID={0xc, 0x14}, @FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}]}, 0x30}}, 0x0) 2.360118038s ago: executing program 3 (id=8457): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x180000c, &(0x7f0000000540)=ANY=[@ANYBLOB='nls=ascii,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c706172743d3078303030303030303030303030303062622c6e6f626172726965722c6e6f626172726965722c63726561746f723d7fcfb5b72c706172743d3078303030303030303030303030303130312c6769643d", @ANYRESHEX=0x0, @ANYRES64=0x0, @ANYRES16, @ANYBLOB="2c747970653d0b3cbf82440a104ab956f2ba5e36e41ccb1b040fa8b829b0b87078de654c66ac22aebaa2ef127e38e0aa2229f9cf6a850300"/71, @ANYRES64, @ANYRES8, @ANYRES32=0x0, @ANYRES8=0x0], 0x1, 0x6e6, &(0x7f0000001640)="$eJzs3UtoHOcdAPD/rFarXRUcOfEjLYEsMaSlorZkobTqpW4pRYdQQnroebHlWHgtB0kpsimN0se9h5x6Sg+6hR5Keje054aUkquOgUIuOemmMrMz+9Cudle2LG3T30/MzjfzPeab/7x2dhATwP+t1fkoP4kkVuff3Emn9/eWmlN7SzN5djMiKhFRiii3RpFsRJZ7Kx/im+nMvHzSbvhfvcv5cH3l7c+/2v+iNVXOh6x80lNvtEr/rN18iHpETOXjftPHtPjJ0cX3tHf72PbG1VnDNGDXisDFn56pVXhmh31223kf/zv7HFb9JMctMKGS1nWzz1zEbERUI1pX/fzsUDrb3p2+3fPuAAAAAJxU7eRVXjiIg9iJC8+jOwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPB1lb//P8mHUpGuR1K8/7+Sz4s8PYFGvwjxs5nW+Mnz7wwAAAAAAAAAPHevHsRB7MSFYvowyZ75v9b1jP8b8V5sxVpsxvXYiUZsx3ZsxmJEzHU1VNlpbG9vLmY1Iy4NqXkzPh1Q8+bxfbx1yusMAAAAAAAAABOuOiL//nT/vN/Gauf5PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATIIkYqo1yoZLRXouSuWIqBbldiM+jYjK+fb2RJJBM5+cfT8AAADgmVR7J5PqGHVeeD8OYicuFNOHSXbPfyW7X67Ge7ER27Ee29GMtbiT30Ond/2l/b2l5v7e0oN06G/3x1+eqOtZi9H67WHwkl/OStTibqxnc67H7UjiMFPKW3l5f28pHT8Y3K8P0j4lP8oN6c1UV/pO+nH1kyz9x95fEconWsWnVDo2Zy7LnW5HZCHvW1rjYhGBwZHo2TqDdpPy0CUtRqn9y8+l4UsaHPMPhq/z7JFSA3+5ORdHI3EzSu0tdGV4JCK+/bePf3mvuXH/3t2t+clZpYHeH1niaCSWuiJx9WsUidEWskhcbk+vxs/iFzEfX868FZuxHr+KRmzHWr3Ib+T7c/o5NzxSn812T701qifpMVlvn78G9akePX2Kevw0SzXitWybXoj1SOJhRKzFG9nfzVhsnw06W/jyGEd9aYwzbZdr38lG7TBF7fiyfxmvydOSxvViV1y7z7lzWV73nE6UXhwYpeJaN/71qEv5W3kibeF3Q68PZ+1oJBa7IvHScftLK6R/zq4mW82N+5v3Gu+OubzX83F6HP1hoq4S6dq8GNV85S5mn0l2TC1keS+1r7C98arkT1xaSn15l9v1Wkfqz+Nh3Ok5Ur8fy7EcK1npK1np6b4rVpp3td1S7zk8zUu/aZXbD3a6v289jGbr+xAAk232u7OV2n9q/6x9VPt97V7tzepPZn4w80olpv8x/cPywtTrpVeSv8ZH8ZvO/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPD0th49vt9oNtc2BydKg7OS4bUazcPiRWJDyvQkkvxVOWMUTrYePT4c2eDwxEzevaesfpqJ4jV8owvXh7ZTfqZuJLtHt1d19LYo3vI0xiKSvoCnlZ86dMWSO3OmJ2BTHk3UT6/BYoftyjr53lsbtL2mImJQ4REnjqnTOPsA5+nG9oN3b2w9evy99QeNd9beWduYXl5eWVhZfmPpxt315tpC67Orwpm8/BY4C91fJ9oqEfHq6LpDXtQKAAAAAAAAAAAAPEdn8b8Q572OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP+21fkoP4kkFheuL6TT+3tLzXQo0p2S5YgoRUTy64jk7xG3ojXEXFdzyXHL+XB95e3Pv9r/otNWuShfitg9tt54dvMh6hExlY9Pq73bo9urdJIzA7KTdmTSgF0rAgfn7b8BAAD//0+S7AE=") syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) 2.101824627s ago: executing program 2 (id=8459): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000017c0)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2c}}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000200)='<', 0x1}], 0x1, &(0x7f00000004c0)=[{0x10, 0x84, 0x7}], 0x10}, 0x51) 2.065593621s ago: executing program 3 (id=8460): r0 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r0, 0x110, 0x3, 0x0, 0x10) 1.791189664s ago: executing program 3 (id=8464): r0 = syz_open_procfs$pagemap(0x0, &(0x7f00000001c0)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000006c0)={0x60, 0x300, &(0x7f000095d000/0x1000)=nil, &(0x7f00007e5000/0x2000)=nil, 0x8, 0x0, 0x0, 0x0, 0x60, 0x4, 0x1, 0x64}) 1.64707291s ago: executing program 2 (id=8468): syz_mount_image$cramfs(&(0x7f0000000240), &(0x7f00000006c0)='./bus\x00', 0x8080, &(0x7f0000002b80)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYBLOB="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", @ANYRES32, @ANYRESDEC, @ANYRESDEC], 0xfe, 0x149, &(0x7f0000000ac0)="$eJzszj9LelEcBvDncP33+0VJUBBBJjR0SUy7YU1RGglCdqFwaSnQEwmKkVBOYURbQ9DqYA1N4luwpMVSCHsTLc6OxfHeiKCl/flM9z7ff2djpaPDD5x5MbBeyB8dy2JRZvzbZjK+895oOFXuAtD/Ubf6H6LAoV3vnQMZYNB/kM3J+XTBrb57UUAHEBvCmsrDKhsF/qtszOpdsOf1GaA5bmXGL9minU06gJjXytS+j1tgVu1TF7M56baeh1IlUK89b7VbieDc/ZSGy0Rg2mnXvnKfvDLiHgAaUvLpDjGh5t5CreBrqF7rdtrJTXMVgGEsCaAcjnTNl3YiUr6GY899AuwKQOD7jgsTPkfKgwsB3Ax29R7FMIBmtW/mR5ar9n3PqeYHRKmS3tfU/z9A0yFARERERERERERERERERET0V58BAAD//0YIW6M=") pivot_root(&(0x7f0000000000)='./bus\x00', 0x0) 1.592308252s ago: executing program 3 (id=8469): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x880, 0x0) readv(r0, &(0x7f0000000500)=[{&(0x7f00000008c0)=""/4076, 0xfec}], 0x1) 1.343807522s ago: executing program 3 (id=8473): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0x8c0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000008940)="$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") openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101042, 0xb0) 1.291752469s ago: executing program 4 (id=8475): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)={0x3c, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x26, 0x11, 0x0, 0x1, [@generic="2fe5af660e49035a45f4bfb9f42cf4a0e9ad53bc2ae54f1c14b225a0c4824cdc01ea"]}]}, 0x3c}], 0x1}, 0x0) 1.24359081s ago: executing program 2 (id=8477): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xe4}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) 1.15006883s ago: executing program 1 (id=8478): r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r0, 0x29, 0x38, 0x0, &(0x7f0000000040)) 1.075499687s ago: executing program 0 (id=8479): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) 965.527819ms ago: executing program 1 (id=8480): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) 894.831843ms ago: executing program 0 (id=8481): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)={0x14, 0x4e, 0x1, 0x0, 0x0, "", [@generic="df47"]}, 0x14}], 0x1}, 0x0) 881.573247ms ago: executing program 4 (id=8482): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @val={0x3a, [0x30]}}}}]}) 842.202229ms ago: executing program 1 (id=8483): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3ff, 0x1, 0x32315842, 0x3, 0x0, [{0x8, 0xf}, {0x8, 0x29f6ebcd}, {0xd, 0x8}, {0x5, 0x8}, {0x2, 0xffffffff}, {0x5, 0x3}, {0x6, 0x409}, {0x10001, 0x1800000}], 0x0, 0xd, 0x2, 0x3078182a3427730f, 0x1}}) 760.250472ms ago: executing program 2 (id=8484): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)) 759.582598ms ago: executing program 0 (id=8485): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) 630.843619ms ago: executing program 4 (id=8486): setrlimit(0x2, &(0x7f0000000140)={0x9, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fef000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) 574.41614ms ago: executing program 1 (id=8487): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCCONS(r0, 0x541d) 519.883474ms ago: executing program 0 (id=8488): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x2, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0, 0x0, 0x2a}, 0x10) 424.313032ms ago: executing program 4 (id=8489): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0xc81, 0x0) write$UHID_CREATE2(r0, 0x0, 0x194) 423.594339ms ago: executing program 1 (id=8490): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000019c0)={0x14, 0x1e, 0x21, 0x70bd2b, 0x0, {0x2a}}, 0x14}}, 0x0) 342.508229ms ago: executing program 2 (id=8491): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_delrule={0x24, 0x21, 0x1, 0x70bd2d, 0x25dfdbff, {0x2, 0x10, 0x80, 0x2, 0x2, 0x0, 0x0, 0x6, 0x1}, [@FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x10) 332.190422ms ago: executing program 0 (id=8492): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x8004000000071, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0585605, &(0x7f0000000100)={0x1, 0x1, @raw_data}) 263.320435ms ago: executing program 4 (id=8493): r0 = syz_open_procfs(0x0, &(0x7f00000008c0)='task\x00') getdents(r0, 0xffffffffffffffff, 0x18) 171.465011ms ago: executing program 1 (id=8494): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x10800, &(0x7f0000001180)=ANY=[], 0x1, 0x18c, &(0x7f0000000200)="$eJzskj2r01AYx38nyU2vohcFp7vYofgyaNNUxU3Huru5WNpYi6naJqAtBSMiHRzE0U/QryH4BXQQwbVzkeLiIpHzknCqH+Ge35B/nn+e85znOTmPs2nWAP7slgPuovA54qsQBMBFob2tp/WD0W9G32vhi8m7Z/w3Ro+z+SI0OU3Oa+NJP02TWRP4pbzayu689tiqUt93y4F8eQiUZVlKbwgynTNWjg9MrZzjAC6oIco6Rw4ig8tAO588b2fzxbXxpD9KRsnT2O/eim5E0c24/WicJpF+CmsLMwpSrwKNQ2rk9wPgrYl/so+wWpOcBnGKB/XasDrDI8G/eNbaSgWf6r4aYfW/4D6XkG29KKo60m2pKgFqpB4C3wSdwOpP73WoPlwfPEuHKwSiWrYmqGt0NhzUQWwH3dsFZ3WplSnZMtozuja6AXW1fvzevzJBIZ/vTHSlgJCX/TyfdeSc+k3wCsjzWexVXnyusA9M7vrR2x/us/ff2TocDofD4XA4HA7HSeNvAAAA//99JHhE") listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0xde) 50.160943ms ago: executing program 0 (id=8495): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000280), 0xe55a45c175ef7809}, 0x20) 49.516441ms ago: executing program 4 (id=8496): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000000201010400000000000000000200000a14001980080002000008000008000100080e00001000018004000280"], 0x38}, 0x1, 0x0, 0x0, 0x240000c4}, 0x20044804) 0s ago: executing program 2 (id=8497): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x1) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000001100)) kernel console output (not intermixed with test programs): usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 604.441489][ T6285] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 604.606132][ T30] audit: type=1326 audit(1758906590.636:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19961 comm="syz.0.6308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febcf98eec9 code=0x7ffc0000 [ 604.639071][ T6285] usb 5-1: Using ep0 maxpacket: 16 [ 604.646286][ T6441] usb 2-1: USB disconnect, device number 123 [ 604.675229][ T6285] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 604.684985][ T6285] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 604.692421][T19964] loop2: detected capacity change from 0 to 512 [ 604.698180][ T30] audit: type=1326 audit(1758906590.636:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19961 comm="syz.0.6308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febcf98eec9 code=0x7ffc0000 [ 604.726463][ T6285] usb 5-1: config 0 has no interface number 0 [ 604.735664][ T6285] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 604.747741][ T6285] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.757351][ T6285] usb 5-1: Product: syz [ 604.762478][ T6285] usb 5-1: Manufacturer: syz [ 604.767479][ T6285] usb 5-1: SerialNumber: syz [ 604.773685][T19964] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 604.802988][ T6285] usb 5-1: config 0 descriptor?? [ 604.808715][T19964] EXT4-fs (loop2): 1 truncate cleaned up [ 604.816587][T19964] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 604.833044][T19969] loop3: detected capacity change from 0 to 256 [ 604.921675][T19964] EXT4-fs error (device loop2): ext4_get_verity_descriptor_location:298: inode #15: comm syz.2.6309: verity file has no extents [ 604.952727][T19969] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 604.976193][T19964] EXT4-fs (loop2): Remounting filesystem read-only [ 605.006110][T19969] tmpfs: Bad value for 'mpol' [ 605.013713][T19964] fs-verity (loop2, inode 15): Error -117 getting verity descriptor size [ 605.064721][ T6285] uvcvideo 5-1:0.105: Found UVC 0.00 device syz (046d:08d3) [ 605.087998][ T6285] uvcvideo 5-1:0.105: No valid video chain found. [ 605.215395][ T6351] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.265129][ T6285] usb 5-1: USB disconnect, device number 6 [ 606.058568][T20017] loop3: detected capacity change from 0 to 256 [ 606.236182][T20017] FAT-fs (loop3): Directory bread(block 64) failed [ 606.262256][T20017] FAT-fs (loop3): Directory bread(block 65) failed [ 606.291695][T20017] FAT-fs (loop3): Directory bread(block 66) failed [ 606.309459][T20017] FAT-fs (loop3): Directory bread(block 67) failed [ 606.346515][T20017] FAT-fs (loop3): Directory bread(block 68) failed [ 606.374593][T20017] FAT-fs (loop3): Directory bread(block 69) failed [ 606.381274][T20017] FAT-fs (loop3): Directory bread(block 70) failed [ 606.426129][T20017] FAT-fs (loop3): Directory bread(block 71) failed [ 606.445147][T20017] FAT-fs (loop3): Directory bread(block 72) failed [ 606.475517][T20017] FAT-fs (loop3): Directory bread(block 73) failed [ 606.598550][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 606.915785][T20032] kAFS: unable to lookup cell '\/' [ 606.941487][ T6285] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 607.035355][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 607.044629][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 607.077275][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 607.084562][T20038] sctp: [Deprecated]: syz.3.6345 (pid 20038) Use of int in maxseg socket option. [ 607.084562][T20038] Use struct sctp_assoc_value instead [ 607.112915][T20042] __nla_validate_parse: 2 callbacks suppressed [ 607.112937][T20042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6347'. [ 607.122875][ T9] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 607.147685][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.157577][ T6285] usb 5-1: config 5 has an invalid interface number: 123 but max is 0 [ 607.165847][ T6285] usb 5-1: config 5 has no interface number 0 [ 607.172525][ T6285] usb 5-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 607.194164][ T9] usb 1-1: Product: syz [ 607.198389][ T9] usb 1-1: Manufacturer: syz [ 607.203490][ T9] usb 1-1: SerialNumber: syz [ 607.221200][ T6285] usb 5-1: config 5 interface 123 altsetting 7 endpoint 0x89 has invalid maxpacket 8981, setting to 64 [ 607.242949][ T9] usb 1-1: config 0 descriptor?? [ 607.248176][ T6285] usb 5-1: config 5 interface 123 has no altsetting 0 [ 607.256867][ T9] hub 1-1:0.0: bad descriptor, ignoring hub [ 607.264579][ T9] hub 1-1:0.0: probe with driver hub failed with error -5 [ 607.276715][ T6285] usb 5-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 607.286311][ T6285] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.297858][ T6285] usb 5-1: Product: syz [ 607.309226][ T6285] usb 5-1: Manufacturer: syz [ 607.316286][ T6285] usb 5-1: SerialNumber: syz [ 607.328857][ T9] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 607.372382][T20010] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 607.382910][ T12] usb 1-1: Failed to submit usb control message: -71 [ 607.407347][ T12] usb 1-1: unable to send the bmi data to the device: -71 [ 607.435752][ T12] usb 1-1: unable to get target info from device [ 607.445874][ T12] usb 1-1: could not get target info (-71) [ 607.456006][ T12] usb 1-1: could not probe fw (-71) [ 607.548004][T20053] nfs: Unknown parameter ':)\/' [ 607.606343][ T6285] ni6501 5-1:5.123: driver 'ni6501' failed to auto-configure device. [ 607.632009][ T6441] usb 1-1: USB disconnect, device number 5 [ 607.649571][ T6285] usb 5-1: USB disconnect, device number 7 [ 607.723270][T20059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6353'. [ 607.744103][T20059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6353'. [ 607.764367][T20059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6353'. [ 608.078247][T20067] loop3: detected capacity change from 0 to 1024 [ 608.102540][T20067] hfsplus: unable to change nls mapping [ 608.443104][T20076] bond2: entered promiscuous mode [ 608.481320][T20076] 8021q: adding VLAN 0 to HW filter on device bond2 [ 608.845313][T20095] netlink: 'syz.3.6372': attribute type 1 has an invalid length. [ 609.154105][T20072] loop0: detected capacity change from 0 to 32768 [ 609.199989][T20072] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.6360 (20072) [ 609.261267][T20072] BTRFS info (device loop0 state S): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 609.281814][ T6285] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 609.301678][T20072] BTRFS info (device loop0 state S): using blake2b (blake2b-256-generic) checksum algorithm [ 609.325124][T20114] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6381'. [ 609.424576][T20072] BTRFS info (device loop0 state S): setting nodatasum [ 609.431501][T20072] BTRFS info (device loop0 state S): setting nodatacow [ 609.445883][T20072] BTRFS info (device loop0 state S): enabling ssd optimizations [ 609.466164][ T6285] usb 5-1: Using ep0 maxpacket: 16 [ 609.474698][T20072] BTRFS info (device loop0 state S): turning on flush-on-commit [ 609.484002][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 609.528616][T20072] BTRFS info (device loop0 state S): turning on async discard [ 609.537755][ T6285] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 609.560000][ T6285] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 609.572605][T20072] BTRFS info (device loop0 state S): enabling free space tree [ 609.584755][T20137] loop1: detected capacity change from 0 to 256 [ 609.586035][ T6285] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 609.601238][T20072] BTRFS info (device loop0 state S): ignoring meta csums [ 609.608431][T20072] BTRFS info (device loop0 state S): ignoring unknown super block flags [ 609.641694][ T6285] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 609.678161][ T6285] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 609.702528][ T9] usb 3-1: too many configurations: 89, using maximum allowed: 8 [ 609.730718][ T6285] usb 5-1: config 1 interface 0 has no altsetting 0 [ 609.772960][ T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 609.788792][ T6285] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 609.802095][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.813493][ T6285] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.832337][ T9] usb 3-1: Product: syz [ 609.842739][ T9] usb 3-1: Manufacturer: syz [ 609.847393][ T9] usb 3-1: SerialNumber: syz [ 609.899698][T20141] netlink: 'syz.1.6386': attribute type 10 has an invalid length. [ 609.923084][ T9] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 609.927492][T20141] team0: Device veth1_macvtap failed to register rx_handler [ 609.980756][ T6463] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 610.036816][ T6285] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 610.114087][ T6285] scsi host1: usb-storage 5-1:1.0 [ 610.341676][ T6285] usb 5-1: USB disconnect, device number 8 [ 610.477832][ T43] usb 3-1: USB disconnect, device number 3 [ 610.761712][T20166] dlm: non-version read from control device 90 [ 611.036780][T20175] netlink: 'syz.3.6400': attribute type 5 has an invalid length. [ 611.051863][ T6463] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 611.084050][ T6463] ath9k_htc: Failed to initialize the device [ 611.091461][ T43] usb 3-1: ath9k_htc: USB layer deinitialized [ 611.252791][T20183] netlink: 'syz.4.6404': attribute type 21 has an invalid length. [ 611.285092][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 611.285112][ T30] audit: type=1400 audit(1758906597.306:112): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=":(%#{//(@\)//&@},['%%&\#*" pid=20181 comm="syz.3.6405" [ 611.338284][ T6348] BTRFS info (device loop0 state S): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 612.279657][T20222] netlink: 'syz.2.6423': attribute type 1 has an invalid length. [ 612.318031][T20222] netlink: 228 bytes leftover after parsing attributes in process `syz.2.6423'. [ 613.117060][T20256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6440'. [ 613.146708][T19143] Bluetooth: hci4: unexpected event for opcode 0x1405 [ 613.295366][ T30] audit: type=1400 audit(1758906599.326:113): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200D3A950D02494F07333A pid=20263 comm="syz.0.6443" [ 613.633890][T20278] loop3: detected capacity change from 0 to 24 [ 613.641106][T20278] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 613.713598][ T30] audit: type=1326 audit(1758906599.746:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20281 comm="syz.0.6453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febcf98eec9 code=0x7ffc0000 [ 613.754021][T20278] romfs: bad initial checksum on dev loop3. [ 613.814297][ T30] audit: type=1326 audit(1758906599.746:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20281 comm="syz.0.6453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febcf98eec9 code=0x7ffc0000 [ 613.902662][ T30] audit: type=1326 audit(1758906599.746:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20281 comm="syz.0.6453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7febcf98eec9 code=0x7ffc0000 [ 613.956763][T20292] loop2: detected capacity change from 0 to 64 [ 613.971715][ T30] audit: type=1326 audit(1758906599.746:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20281 comm="syz.0.6453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febcf98eec9 code=0x7ffc0000 [ 614.076731][T20296] netlink: 'syz.4.6459': attribute type 13 has an invalid length. [ 614.137925][T20296] netlink: 'syz.4.6459': attribute type 17 has an invalid length. [ 614.295725][T20302] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 614.456731][T20296] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 614.520118][T20308] bond1: entered allmulticast mode [ 614.526469][T20308] 8021q: adding VLAN 0 to HW filter on device bond1 [ 614.807955][T20327] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 615.344524][T20350] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 615.424608][T20350] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 615.454664][T20350] gretap2: entered promiscuous mode [ 615.484855][T20350] gretap2: entered allmulticast mode [ 615.504144][T20353] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6487'. [ 615.671497][T20363] Unknown options in mask b7f2 [ 615.913735][T20374] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6497'. [ 616.037930][T20381] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6501'. [ 616.099405][T20381] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6501'. [ 616.163315][T20381] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6501'. [ 616.187132][T20387] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 616.224981][T20381] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6501'. [ 616.281014][T20381] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6501'. [ 616.376326][T20381] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6501'. [ 616.866806][T20381] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.372333][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 617.570751][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 617.602175][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 617.645640][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 617.690756][ T24] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 617.731386][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.753991][ T24] usb 3-1: Product: syz [ 617.758498][ T24] usb 3-1: Manufacturer: syz [ 617.764160][ T24] usb 3-1: SerialNumber: syz [ 617.783463][ T24] usb 3-1: config 0 descriptor?? [ 617.882528][T20452] netlink: 'syz.0.6535': attribute type 1 has an invalid length. [ 617.890566][T20452] __nla_validate_parse: 21 callbacks suppressed [ 617.890584][T20452] netlink: 228 bytes leftover after parsing attributes in process `syz.0.6535'. [ 617.952594][T20452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6535'. [ 618.075191][T20458] bridge_slave_1: left allmulticast mode [ 618.112823][T20458] bridge_slave_1: left promiscuous mode [ 618.118767][T20458] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.369941][T20468] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6542'. [ 618.395363][T20468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6542'. [ 618.824466][T20481] netlink: 'syz.4.6549': attribute type 21 has an invalid length. [ 618.892870][T20481] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6549'. [ 618.966622][T20481] netlink: 'syz.4.6549': attribute type 5 has an invalid length. [ 619.017129][T20481] netlink: 'syz.4.6549': attribute type 6 has an invalid length. [ 619.047863][T20481] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6549'. [ 619.260959][T20501] loop0: detected capacity change from 0 to 256 [ 619.462728][T20501] FAT-fs (loop0): Directory bread(block 64) failed [ 619.469317][T20501] FAT-fs (loop0): Directory bread(block 65) failed [ 619.532370][T20501] FAT-fs (loop0): Directory bread(block 66) failed [ 619.552314][T20501] FAT-fs (loop0): Directory bread(block 67) failed [ 619.558987][T20501] FAT-fs (loop0): Directory bread(block 68) failed [ 619.619395][T20501] FAT-fs (loop0): Directory bread(block 69) failed [ 619.680310][T20501] FAT-fs (loop0): Directory bread(block 70) failed [ 619.692431][T20501] FAT-fs (loop0): Directory bread(block 71) failed [ 619.720791][T20501] FAT-fs (loop0): Directory bread(block 72) failed [ 619.762650][T20501] FAT-fs (loop0): Directory bread(block 73) failed [ 619.911236][T20501] syz.0.6558: attempt to access beyond end of device [ 619.911236][T20501] loop0: rw=524288, sector=1192, nr_sectors = 4 limit=256 [ 619.998076][T20501] syz.0.6558: attempt to access beyond end of device [ 619.998076][T20501] loop0: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 620.080223][T20501] syz.0.6558: attempt to access beyond end of device [ 620.080223][T20501] loop0: rw=2051, sector=1192, nr_sectors = 32 limit=256 [ 620.092995][ T30] audit: type=1800 audit(1758906606.095:118): pid=20501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6558" name="file1" dev="loop0" ino=1048690 res=0 errno=0 [ 620.574822][T20540] C: renamed from team_slave_0 (while UP) [ 620.610090][T20542] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6577'. [ 620.638347][T20540] netlink: 'syz.1.6576': attribute type 1 has an invalid length. [ 620.675713][T20540] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6576'. [ 620.702861][T20540] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 620.733513][T20542] batadv_slave_1: entered promiscuous mode [ 620.939121][T20522] loop2: detected capacity change from 0 to 32768 [ 621.004973][T20522] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 621.066953][T20522] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 621.224492][T20548] loop1: detected capacity change from 0 to 4096 [ 621.254668][T20534] loop3: detected capacity change from 0 to 32768 [ 621.319361][T20548] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 621.368460][T20534] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 621.461206][T20564] netlink: 'syz.0.6582': attribute type 13 has an invalid length. [ 621.500600][ T6351] ocfs2: Unmounting device (7,2) on (node local) [ 621.554016][T20564] netlink: 'syz.0.6582': attribute type 17 has an invalid length. [ 621.592380][T20534] XFS (loop3): Ending clean mount [ 621.651327][T20548] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #15: comm syz.1.6580: corrupted inode contents [ 621.728585][T20548] EXT4-fs error (device loop1): ext4_dirty_inode:6509: inode #15: comm syz.1.6580: mark_inode_dirty error [ 621.845873][T20548] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #15: comm syz.1.6580: corrupted inode contents [ 621.902859][T20548] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #15: comm syz.1.6580: mark_inode_dirty error [ 621.914028][ T6357] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 621.995148][T20548] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #15: comm syz.1.6580: corrupted inode contents [ 622.036389][T20564] 8021q: adding VLAN 0 to HW filter on device team0 [ 622.083934][T20564] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 622.087292][T20548] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #15: comm syz.1.6580: mark_inode_dirty error [ 622.117313][T20548] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #15: comm syz.1.6580: corrupted inode contents [ 622.230269][T20548] EXT4-fs error (device loop1): ext4_truncate:4637: inode #15: comm syz.1.6580: mark_inode_dirty error [ 622.316883][T20548] EXT4-fs error (device loop1) in ext4_setattr:6042: Corrupt filesystem [ 622.546660][ T6355] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 623.033550][T20600] loop1: detected capacity change from 0 to 164 [ 623.126315][T20600] Unable to read rock-ridge attributes [ 623.171559][T20604] Option ' ' to dns_resolver key: bad/missing value [ 623.533302][T20618] netlink: 'syz.3.6608': attribute type 4 has an invalid length. [ 623.562716][T20618] netlink: 2548 bytes leftover after parsing attributes in process `syz.3.6608'. [ 623.592155][ T30] audit: type=1326 audit(1758906609.615:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20619 comm="syz.2.6610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9c3b8eec9 code=0x7ffc0000 [ 623.614475][T20620] syz.2.6610 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 623.721432][T20622] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6611'. [ 623.781933][ T30] audit: type=1326 audit(1758906609.645:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20619 comm="syz.2.6610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7fb9c3b8eec9 code=0x7ffc0000 [ 623.859917][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.902470][ T30] audit: type=1326 audit(1758906609.645:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20619 comm="syz.2.6610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9c3b8eec9 code=0x7ffc0000 [ 623.944030][T20630] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6614'. [ 624.005277][ T30] audit: type=1326 audit(1758906609.645:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20619 comm="syz.2.6610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9c3b8eec9 code=0x7ffc0000 [ 624.818308][T20647] netlink: 'syz.0.6622': attribute type 9 has an invalid length. [ 625.183943][T20631] loop3: detected capacity change from 0 to 32768 [ 625.209953][T20631] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.6615 (20631) [ 625.275851][T20631] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 625.321956][T20661] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6629'. [ 625.331334][T20631] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 625.559193][T20631] BTRFS info (device loop3): enabling ssd optimizations [ 625.585791][T20631] BTRFS info (device loop3): enabling free space tree [ 625.868783][T20645] loop1: detected capacity change from 0 to 32768 [ 625.891799][ T6357] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 625.928884][T20645] BTRFS info: device /dev/loop1 (7:1) using temp-fsid 76b3fe7d-7de1-41de-8ff9-d0b71b1c67ce [ 625.956815][T20645] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.6621 (20645) [ 626.006790][T20645] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 626.072909][T20645] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 626.422321][T20712] netlink: 292 bytes leftover after parsing attributes in process `syz.3.6636'. [ 626.487107][T20712] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6636'. [ 626.608703][T20645] BTRFS info (device loop1): enabling ssd optimizations [ 626.667730][T20645] BTRFS info (device loop1): enabling free space tree [ 627.083266][ T6355] BTRFS info (device loop1): last unmount of filesystem 76b3fe7d-7de1-41de-8ff9-d0b71b1c67ce [ 627.152820][ T6285] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 627.374362][ T6285] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 627.402435][ T6285] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.457138][T20740] netlink: 'syz.4.6652': attribute type 1 has an invalid length. [ 627.464681][ T6285] usb 1-1: config 0 descriptor?? [ 627.524783][ T6285] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 627.755046][T20751] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 627.932354][ T6285] gspca_stv06xx: I2C: Read error writing address: -71 [ 627.978706][ T6285] usb 1-1: USB disconnect, device number 6 [ 627.983153][T20755] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6658'. [ 628.136490][T20759] loop3: detected capacity change from 0 to 64 [ 628.162921][ T9] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 628.333080][ T24] iguanair 3-1:0.0: failed to get version [ 628.342848][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 628.354145][ T24] iguanair 3-1:0.0: probe with driver iguanair failed with error -110 [ 628.365581][T20764] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6662'. [ 628.388949][ T9] usb 2-1: config index 0 descriptor too short (expected 65, got 36) [ 628.395346][ T24] usb 3-1: USB disconnect, device number 4 [ 628.414142][T20764] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6662'. [ 628.418695][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 628.510687][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 628.548556][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 628.561901][ T9] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 628.575712][T20766] netlink: 'syz.3.6663': attribute type 5 has an invalid length. [ 628.588684][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.627346][T20769] loop0: detected capacity change from 0 to 164 [ 628.639659][ T9] usb 2-1: config 0 descriptor?? [ 628.714060][ T9] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input55 [ 628.764999][ T5219] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 628.858635][ T5219] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 628.916101][T20753] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 628.977173][ T5219] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 629.027867][ T5219] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 629.053925][ T5219] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 629.070037][ T6299] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 629.083440][ T6285] usb 2-1: USB disconnect, device number 124 [ 629.400664][T20798] netlink: 'syz.4.6678': attribute type 3 has an invalid length. [ 629.683751][T20812] netlink: 'syz.3.6685': attribute type 1 has an invalid length. [ 629.691676][T20812] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6685'. [ 630.323014][ T9] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 630.525769][ T9] usb 4-1: New USB device found, idVendor=1fb9, idProduct=0401, bcdDevice=a0.60 [ 630.533381][T20848] netlink: 232 bytes leftover after parsing attributes in process `syz.0.6703'. [ 630.541859][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.575919][ T9] usb 4-1: Product: syz [ 630.580147][ T9] usb 4-1: Manufacturer: syz [ 630.603005][ T9] usb 4-1: SerialNumber: syz [ 630.616545][ T9] usb 4-1: config 0 descriptor?? [ 630.637783][ T9] cp210x 4-1:0.0: cp210x converter detected [ 630.845043][ T9] usb 4-1: cp210x converter now attached to ttyUSB0 [ 631.041621][ T9] usb 4-1: USB disconnect, device number 125 [ 631.102906][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 631.124411][ T9] cp210x 4-1:0.0: device disconnected [ 631.438654][T20886] usb usb1: usbfs: process 20886 (syz.1.6722) did not claim interface 0 before use [ 631.499561][T20891] netlink: 92 bytes leftover after parsing attributes in process `syz.0.6724'. [ 631.543117][T20891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6724'. [ 631.603097][T20891] netlink: 'syz.0.6724': attribute type 1 has an invalid length. [ 631.968859][T20905] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 632.071859][T20911] loop2: detected capacity change from 0 to 4096 [ 632.306539][T20911] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 632.512695][ T6351] ntfs3(loop2): ino=9, ntfs_sync_fs failed, -22. [ 633.517232][T20973] loop3: detected capacity change from 0 to 256 [ 633.570064][T20973] exfat: Deprecated parameter 'utf8' [ 633.627765][T20973] exfat: Deprecated parameter 'namecase' [ 633.720763][T20981] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 4, id = 0 [ 633.757509][T20973] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 633.799679][T20983] netlink: 136 bytes leftover after parsing attributes in process `syz.0.6762'. [ 633.891484][T20983] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 634.129594][T20994] netlink: 'syz.1.6767': attribute type 1 has an invalid length. [ 635.583783][T21067] openvswitch: netlink: Key 32 has unexpected len 8 expected 2 [ 636.384701][T21057] loop2: detected capacity change from 0 to 32768 [ 636.748831][T21057] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io [ 636.748865][T21057] allowing incompatible features above 0.0: (unknown version) [ 636.748880][T21057] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 636.974577][T21057] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 637.023613][T21057] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 637.031869][T21057] bcachefs (loop2): Version upgrade required: [ 637.031869][T21057] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 637.031869][T21057] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 637.031869][T21057] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 637.166468][T21057] bcachefs (loop2): dropping and reconstructing all alloc info [ 637.308969][T21057] bcachefs (loop2): accounting_read... done [ 637.379640][T21057] bcachefs (loop2): alloc_read... done [ 637.447141][T21057] bcachefs (loop2): snapshots_read... done [ 637.484685][T21057] bcachefs (loop2): check_allocations... done [ 637.633755][T21057] bcachefs (loop2): going read-write [ 637.639284][T21057] bcachefs (loop2): insufficient writeable journal devices available: have 0, need 1 [ 637.639284][T21057] rw journal devs: [ 637.773092][T21057] bcachefs (loop2): done starting filesystem [ 637.848652][T21159] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6828'. [ 638.119057][ T6351] bcachefs (loop2): shutting down [ 638.155603][ T6351] bcachefs (loop2): going read-only [ 638.160893][ T6351] bcachefs (loop2): finished waiting for writes to stop [ 638.232004][ T6351] bcachefs (loop2): flushing journal and stopping allocators, journal seq 10 [ 638.277818][ T6351] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 10 [ 638.339596][ T6351] bcachefs (loop2): unclean shutdown complete, journal seq 10 [ 638.362333][ T6351] bcachefs (loop2): done going read-only, filesystem not clean [ 638.460687][T21183] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 638.473573][T21183] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 638.480262][T21181] loop3: detected capacity change from 0 to 2048 [ 638.497246][T21181] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=26504, location=26504 [ 638.510550][ T6351] bcachefs (loop2): shutdown complete [ 638.570976][T21181] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 638.984153][ T6474] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 639.156241][ T6474] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 is Bulk; changing to Interrupt [ 639.223729][ T6474] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 639.263648][ T6474] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.292007][T21190] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 639.559999][ T6474] usb 1-1: string descriptor 0 read error: -71 [ 639.574066][ T6474] hub 1-1:32.0: USB hub found [ 639.613649][ T6474] hub 1-1:32.0: config failed, can't read hub descriptor (err -22) [ 639.846469][ T6474] usb 1-1: USB disconnect, device number 7 [ 640.582793][T21252] netlink: 244 bytes leftover after parsing attributes in process `syz.2.6865'. [ 640.952335][T21271] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6873'. [ 641.502605][T21297] ip6tnl2: entered promiscuous mode [ 641.683051][T21300] can: request_module (can-proto-0) failed. [ 642.807357][T21308] loop0: detected capacity change from 0 to 32768 [ 642.864674][T21308] ERROR: (device loop0): xtTruncate: xt_getpage: xtree page corrupt [ 642.864674][T21308] [ 642.944585][T21308] ERROR: (device loop0): remounting filesystem as read-only [ 643.061480][T21354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6905'. [ 643.661085][T21379] netlink: 'syz.2.6914': attribute type 27 has an invalid length. [ 643.895499][ T30] audit: type=1326 audit(1758906629.914:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21387 comm="syz.2.6917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9c3b8eec9 code=0x7ffc0000 [ 644.014768][ T30] audit: type=1326 audit(1758906629.914:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21387 comm="syz.2.6917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9c3b8eec9 code=0x7ffc0000 [ 644.095694][T21400] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6922'. [ 644.115608][ T30] audit: type=1326 audit(1758906629.974:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21387 comm="syz.2.6917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb9c3b8eec9 code=0x7ffc0000 [ 644.154079][T21400] openvswitch: netlink: Missing key (keys=40, expected=80) [ 644.213914][ T30] audit: type=1326 audit(1758906629.974:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21387 comm="syz.2.6917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb9c3b8eec9 code=0x7ffc0000 [ 644.351381][T21409] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6926'. [ 644.365968][T21410] program syz.3.6928 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 644.390949][T21413] ieee802154 phy0 wpan0: encryption failed: -22 [ 644.595196][T21418] netlink: 'syz.4.6932': attribute type 1 has an invalid length. [ 644.602984][T21418] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6932'. [ 644.633981][ T6463] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 644.668545][T21423] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:20001 [ 644.814009][ T6463] usb 3-1: Using ep0 maxpacket: 16 [ 644.840229][ T6463] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 644.872050][ T6463] usb 3-1: config 0 has no interface number 0 [ 644.894726][ T6463] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 644.926984][ T6463] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 644.959836][ T6463] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 645.007346][ T6463] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.017662][ T6463] usb 3-1: Product: syz [ 645.021882][ T6463] usb 3-1: Manufacturer: syz [ 645.036766][ T6463] usb 3-1: SerialNumber: syz [ 645.059268][ T6463] usb 3-1: config 0 descriptor?? [ 645.097554][T21414] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 645.107056][T21414] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 645.194013][ T6474] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 645.345931][ T6474] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 645.383704][ T6474] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 645.387883][T21414] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 645.418733][ T6474] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.448253][ T6474] usb 4-1: config 0 descriptor?? [ 645.459909][T21414] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 645.590655][T21459] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 645.738711][ T6463] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 645.796585][ T6463] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 645.836065][ T6463] asix 3-1:0.251: probe with driver asix failed with error -5 [ 645.867694][ T6474] ath6kl: Failed to read usb control message: -71 [ 645.874352][ T6463] usb 3-1: USB disconnect, device number 5 [ 645.896490][ T6474] ath6kl: Unable to read the bmi data from the device: -71 [ 645.924851][ T6474] ath6kl: Unable to recv target info: -71 [ 645.936511][ T6474] ath6kl: Failed to init ath6kl core: -71 [ 645.957432][ T6474] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 646.014376][ T6474] usb 4-1: USB disconnect, device number 126 [ 646.144857][T21480] loop0: detected capacity change from 0 to 2048 [ 646.173738][T21480] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 646.186715][ T43] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 646.400711][T21487] 9pnet_fd: p9_fd_create_tcp (21487): problem connecting socket to 127.0.0.1 [ 646.414694][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 646.444482][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 646.500685][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 646.516498][T21490] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6960'. [ 646.539021][ T43] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 646.548309][T21490] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6960'. [ 646.579238][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.591345][T21490] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6960'. [ 646.612155][ T43] usb 2-1: config 0 descriptor?? [ 646.638952][ T43] hub 2-1:0.0: USB hub found [ 646.658203][T21493] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 646.710031][T21498] netlink: 10 bytes leftover after parsing attributes in process `syz.4.6963'. [ 646.843685][ T43] hub 2-1:0.0: 2 ports detected [ 646.854869][T21503] comedi comedi0: aio_aio12_8: a I/O base address must be specified [ 647.055823][ T43] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 647.057065][T21513] netlink: 288 bytes leftover after parsing attributes in process `syz.0.6968'. [ 647.072883][ T43] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 647.118722][ T43] usbhid 2-1:0.0: can't add hid device: -71 [ 647.146034][ T43] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 647.234957][ T43] usb 2-1: USB disconnect, device number 125 [ 647.284173][ T6463] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 647.480001][ T6463] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 647.514155][ T6463] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 647.550532][ T6463] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.632159][ T6463] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 647.655377][T21536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 648.182945][T21562] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6988'. [ 648.204849][T21562] 0ªX¹¦À: renamed from caif0 [ 648.231229][T21562] 0ªX¹¦À: entered allmulticast mode [ 648.257566][T21562] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 648.745046][ T6463] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 648.953863][ T6463] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 648.986250][ T6463] stv0680 3-1:4.0: last error: 0, command = 0x0 [ 649.036212][ T6463] usb 3-1: USB disconnect, device number 6 [ 649.154684][ T6285] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 649.328233][ T6285] usb 4-1: Using ep0 maxpacket: 16 [ 649.347907][ T6285] usb 4-1: unable to get BOS descriptor or descriptor too short [ 649.384755][ T6285] usb 4-1: config 6 has an invalid interface number: 5 but max is 0 [ 649.413253][ T6285] usb 4-1: config 6 has an invalid interface descriptor of length 2, skipping [ 649.433209][ T6285] usb 4-1: config 6 has no interface number 0 [ 649.442573][ T6285] usb 4-1: config 6 interface 5 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 649.489263][ T6285] usb 4-1: config 6 interface 5 has no altsetting 0 [ 649.509702][ T6285] usb 4-1: New USB device found, idVendor=0c52, idProduct=9020, bcdDevice=e8.26 [ 649.532262][ T6285] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.565394][ T6285] usb 4-1: Product: syz [ 649.582416][ T6285] usb 4-1: Manufacturer: syz [ 649.591870][ T6285] usb 4-1: SerialNumber: syz [ 649.763784][T21579] loop0: detected capacity change from 0 to 40427 [ 649.778937][T21619] netlink: 168 bytes leftover after parsing attributes in process `syz.2.7009'. [ 649.800715][T21579] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 649.820946][T21579] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 649.853685][ T6285] ftdi_sio 4-1:6.5: FTDI USB Serial Device converter detected [ 649.854794][T21620] netlink: 'syz.4.7008': attribute type 11 has an invalid length. [ 649.870887][T21579] F2FS-fs (loop0): invalid crc value [ 649.893688][ T6285] ftdi_sio ttyUSB0: unknown device type: 0xe826 [ 649.934585][T21620] netlink: 448 bytes leftover after parsing attributes in process `syz.4.7008'. [ 649.948006][ T6285] usb 4-1: USB disconnect, device number 127 [ 649.979801][ T6285] ftdi_sio 4-1:6.5: device disconnected [ 650.193149][T21579] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 650.234905][T21635] netlink: 'syz.4.7013': attribute type 15 has an invalid length. [ 650.274432][T21579] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 650.304353][T21579] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 650.828351][T21656] nfs: Deprecated parameter 'nointr' [ 651.062915][T21622] loop1: detected capacity change from 0 to 32768 [ 651.181452][T21622] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 651.190383][T21666] loop2: detected capacity change from 0 to 2048 [ 651.248776][T21622] ocfs2: Unmounting device (7,1) on (node local) [ 651.311286][T21666] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 651.372417][T21666] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 651.430442][T21672] libceph: resolve 'c' (ret=-3): failed [ 651.462513][T21666] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 651.929718][T21692] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7034'. [ 652.614635][T21717] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 652.670151][T21717] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 652.888646][T21675] loop3: detected capacity change from 0 to 32768 [ 652.970868][T21675] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 652.980763][ T6285] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 653.139115][T21675] XFS (loop3): Ending clean mount [ 653.180051][ T6285] usb 3-1: Using ep0 maxpacket: 16 [ 653.208027][ T6285] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 653.255526][ T6285] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.278919][ T6285] usb 3-1: config 0 descriptor?? [ 653.296129][T21675] XFS (loop3): Quotacheck needed: Please wait. [ 653.302262][ T6285] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 653.449773][T21675] XFS (loop3): Quotacheck: Done. [ 653.461721][T21675] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 653.519164][ T6285] usb 3-1: Detected FT232B [ 653.524228][T21755] loop0: detected capacity change from 0 to 1024 [ 653.554593][ T43] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 653.619287][T21755] hfsplus: xattr searching failed [ 653.728246][ T6285] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 653.749539][ T6285] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 653.758755][ T43] usb 5-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 653.768204][ T6285] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 653.774803][ T6285] usb 3-1: USB disconnect, device number 7 [ 653.777390][T21761] netlink: 148 bytes leftover after parsing attributes in process `syz.1.7056'. [ 653.809226][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.838615][ T43] usb 5-1: Product: syz [ 653.839458][ T6285] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 653.843010][ T43] usb 5-1: Manufacturer: syz [ 653.857864][ T43] usb 5-1: SerialNumber: syz [ 653.898389][ T6285] ftdi_sio 3-1:0.0: device disconnected [ 653.934149][ T43] usb 5-1: config 0 descriptor?? [ 654.014901][T21761] netlink: 148 bytes leftover after parsing attributes in process `syz.1.7056'. [ 654.370804][ T43] usb 5-1: f81604_write: reg: 105 data: 8a failed: -EPROTO [ 654.402796][ T43] f81604 5-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 654.443349][ T43] f81604 5-1:0.0: probe with driver f81604 failed with error -71 [ 654.469185][ T43] usb 5-1: USB disconnect, device number 9 [ 654.725100][T21793] netlink: 'syz.2.7069': attribute type 9 has an invalid length. [ 655.557232][T21833] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7085'. [ 655.596493][T21835] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 655.881010][T21849] netlink: 'syz.1.7092': attribute type 1 has an invalid length. [ 655.918749][T21849] netlink: 15 bytes leftover after parsing attributes in process `syz.1.7092'. [ 656.622439][ T30] audit: type=1326 audit(1758906642.643:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21884 comm="syz.1.7107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a398eec9 code=0x7ffc0000 [ 656.699320][ T30] audit: type=1326 audit(1758906642.643:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21884 comm="syz.1.7107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a398eec9 code=0x7ffc0000 [ 656.790564][ T30] audit: type=1326 audit(1758906642.723:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21884 comm="syz.1.7107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7ff6a398eec9 code=0x7ffc0000 [ 656.884869][ T30] audit: type=1326 audit(1758906642.723:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21884 comm="syz.1.7107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a398eec9 code=0x7ffc0000 [ 656.930732][T21898] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7113'. [ 657.007161][ T30] audit: type=1326 audit(1758906642.723:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21884 comm="syz.1.7107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a398eec9 code=0x7ffc0000 [ 657.576832][ T6474] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 657.812804][ T6474] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 657.836110][ T6474] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.864870][ T6474] usb 3-1: Product: syz [ 657.869107][ T6474] usb 3-1: Manufacturer: syz [ 657.873732][ T6474] usb 3-1: SerialNumber: syz [ 657.887352][T21942] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7131'. [ 657.921804][T21942] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7131'. [ 657.961847][T21942] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7131'. [ 658.000679][T21942] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7131'. [ 658.044256][T21942] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7131'. [ 658.343047][ T6474] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 658.414957][ T6474] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 658.462307][ T6474] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 658.517428][ T6474] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 658.536520][ T6474] usb 3-1: USB disconnect, device number 8 [ 659.676204][T22003] netlink: 'syz.3.7155': attribute type 29 has an invalid length. [ 660.011193][T22013] loop1: detected capacity change from 0 to 256 [ 660.073106][T22013] exfat: Deprecated parameter 'utf8' [ 660.088576][T22013] exfat: Deprecated parameter 'namecase' [ 660.131045][T22013] exfat: Deprecated parameter 'namecase' [ 660.141198][T22013] exfat: Deprecated parameter 'utf8' [ 660.216167][T22013] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 660.595139][T22035] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7168'. [ 660.864209][T22047] loop0: detected capacity change from 0 to 256 [ 660.981742][T22047] FAT-fs (loop0): Directory bread(block 64) failed [ 661.013445][T22047] FAT-fs (loop0): Directory bread(block 65) failed [ 661.055463][T22047] FAT-fs (loop0): Directory bread(block 66) failed [ 661.062091][T22047] FAT-fs (loop0): Directory bread(block 67) failed [ 661.084323][T22055] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (8) [ 661.141022][T22047] FAT-fs (loop0): Directory bread(block 68) failed [ 661.175104][T22047] FAT-fs (loop0): Directory bread(block 69) failed [ 661.196270][T22047] FAT-fs (loop0): Directory bread(block 70) failed [ 661.202855][T22047] FAT-fs (loop0): Directory bread(block 71) failed [ 661.263575][T22047] FAT-fs (loop0): Directory bread(block 72) failed [ 661.295047][T22047] FAT-fs (loop0): Directory bread(block 73) failed [ 662.206242][T22094] loop2: detected capacity change from 0 to 8192 [ 662.315243][T22108] netlink: 'syz.4.7195': attribute type 21 has an invalid length. [ 662.323217][T22108] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7195'. [ 662.865364][T22127] netlink: 'syz.1.7203': attribute type 13 has an invalid length. [ 663.136735][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 663.308282][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 663.335211][ T9] usb 4-1: config 223 has too many interfaces: 142, using maximum allowed: 32 [ 663.364645][ T9] usb 4-1: config 223 has an invalid descriptor of length 0, skipping remainder of the config [ 663.424451][ T9] usb 4-1: config 223 has 1 interface, different from the descriptor's value: 142 [ 663.473365][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 663.483899][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.497952][ T9] usb 4-1: Product: syz [ 663.502177][ T9] usb 4-1: Manufacturer: syz [ 663.508952][ T9] usb 4-1: SerialNumber: syz [ 663.670630][T22164] loop0: detected capacity change from 0 to 1024 [ 663.779504][ T9] usb 4-1: 0:2 : does not exist [ 663.885741][ T9] usb 4-1: USB disconnect, device number 2 [ 663.934934][ T6299] udevd[6299]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:223.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 664.026698][T22177] netlink: 'syz.2.7224': attribute type 3 has an invalid length. [ 664.384486][T22192] netlink: 248 bytes leftover after parsing attributes in process `syz.0.7229'. [ 664.619141][T22198] netlink: 256 bytes leftover after parsing attributes in process `syz.1.7233'. [ 664.869473][ T30] audit: type=1326 audit(1758906650.892:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22211 comm="syz.2.7238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9c3b8eec9 code=0x7ffc0000 [ 664.891957][ C0] vkms_vblank_simulate: vblank timer overrun [ 664.955230][ T30] audit: type=1326 audit(1758906650.892:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22211 comm="syz.2.7238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9c3b8eec9 code=0x7ffc0000 [ 665.058973][ T30] audit: type=1326 audit(1758906650.932:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22211 comm="syz.2.7238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7fb9c3b8eec9 code=0x7ffc0000 [ 665.075564][T22219] netlink: 'syz.3.7241': attribute type 2 has an invalid length. [ 665.108398][ T30] audit: type=1326 audit(1758906650.932:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22211 comm="syz.2.7238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9c3b8eec9 code=0x7ffc0000 [ 665.162914][ T30] audit: type=1326 audit(1758906650.932:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22211 comm="syz.2.7238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9c3b8eec9 code=0x7ffc0000 [ 665.181940][T22227] ieee802154 phy0 wpan0: encryption failed: -22 [ 665.248798][ T6463] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 665.351692][T22229] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7245'. [ 665.444783][ T6463] usb 1-1: Using ep0 maxpacket: 16 [ 665.476024][ T6463] usb 1-1: config 0 interface 0 has no altsetting 0 [ 665.519991][ T6463] usb 1-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=41.ba [ 665.535590][ T6463] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.564020][ T6463] usb 1-1: Product: syz [ 665.572870][ T6463] usb 1-1: Manufacturer: syz [ 665.589658][ T6463] usb 1-1: SerialNumber: syz [ 665.701664][ T6463] usb 1-1: config 0 descriptor?? [ 665.927669][ T6463] usb 1-1: selecting invalid altsetting 0 [ 665.962627][ T6463] usb 1-1: can't set first interface for hiFace device. [ 665.987698][ T6463] snd-usb-hiface 1-1:0.0: probe with driver snd-usb-hiface failed with error -5 [ 666.103221][ T6463] usb 1-1: USB disconnect, device number 8 [ 666.435768][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 666.619889][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 666.662360][ T9] usb 3-1: New USB device found, idVendor=0c45, idProduct=628e, bcdDevice=e0.4e [ 666.689490][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.733052][ T9] usb 3-1: Product: syz [ 666.757599][ T9] usb 3-1: Manufacturer: syz [ 666.779527][ T9] usb 3-1: SerialNumber: syz [ 666.824642][ T9] usb 3-1: config 0 descriptor?? [ 666.854480][ T9] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:628e [ 667.126479][T22300] loop1: detected capacity change from 0 to 764 [ 667.271451][T22304] loop3: detected capacity change from 0 to 1024 [ 667.299668][ T9] gspca_sn9c20x: Write register 1001 failed -71 [ 667.307912][T22304] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 667.317582][ T9] gspca_sn9c20x: Device initialization failed [ 667.351331][ T9] gspca_sn9c20x 3-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 667.361758][T22308] netlink: 'syz.0.7276': attribute type 7 has an invalid length. [ 667.402088][T22304] JBD2: no valid journal superblock found [ 667.405616][ T9] usb 3-1: USB disconnect, device number 9 [ 667.416299][T22308] netlink: 'syz.0.7276': attribute type 8 has an invalid length. [ 667.444610][T22304] EXT4-fs (loop3): Could not load journal inode [ 667.522817][T22304] cgroup2: Unexpected value for 'nsdelegate' [ 667.915568][ T30] audit: type=1326 audit(1758906653.912:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22323 comm="syz.4.7282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6638eec9 code=0x7ffc0000 [ 667.997136][ T30] audit: type=1326 audit(1758906653.922:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22323 comm="syz.4.7282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f2a6638eec9 code=0x7ffc0000 [ 668.115476][ T30] audit: type=1326 audit(1758906653.922:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22323 comm="syz.4.7282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6638eec9 code=0x7ffc0000 [ 668.207644][ T30] audit: type=1326 audit(1758906653.922:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22323 comm="syz.4.7282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6638eec9 code=0x7ffc0000 [ 668.321227][T22335] loop2: detected capacity change from 0 to 4096 [ 668.401919][T22348] xfrm1: entered allmulticast mode [ 668.779809][T22361] netlink: 'syz.3.7298': attribute type 12 has an invalid length. [ 668.827752][T22361] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7298'. [ 669.552086][T22402] loop0: detected capacity change from 0 to 512 [ 669.625670][T22402] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 669.752660][T22402] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 669.765732][T22402] ext4 filesystem being mounted at /1371/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 669.914595][T22402] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.7315: corrupted xattr block 19: overlapping e_value [ 670.068441][ T6348] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 670.680059][T22408] loop3: detected capacity change from 0 to 32768 [ 670.721239][T22408] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.7318 (22408) [ 670.790080][T22408] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 670.832065][T22408] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 670.976575][T22451] loop1: detected capacity change from 0 to 4096 [ 671.076465][T22408] BTRFS info (device loop3): enabling ssd optimizations [ 671.083483][T22408] BTRFS info (device loop3): enabling free space tree [ 671.138122][T22408] BTRFS error (device loop3): balance: invalid convert metadata profile single [ 671.196699][T22451] ntfs3(loop1): ino=19, mi_enum_attr [ 671.205278][T22451] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 671.236546][ T6357] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 671.610912][T22489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7342'. [ 671.648119][T22489] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7342'. [ 671.859534][T22499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7351'. [ 672.265213][T22517] netlink: 5 bytes leftover after parsing attributes in process `syz.2.7359'. [ 672.301224][T22517] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 672.327258][ T43] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 672.491271][ T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 672.522539][ T43] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 672.534619][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 10 [ 672.547098][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 672.562919][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 255, setting to 64 [ 672.585979][ T6474] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 672.602384][ T43] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 672.620275][ T43] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 672.634061][ T43] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 672.643396][ T43] usb 4-1: Manufacturer: syz [ 672.653111][ T43] usb 4-1: config 0 descriptor?? [ 672.768446][ T6474] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 672.781666][ T6474] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 672.794309][ T6474] usb 5-1: config 0 has no interface number 0 [ 672.801056][ T6474] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 672.811781][ T6474] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 672.828981][ T6474] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 672.841780][ T6474] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.853771][ T6474] usb 5-1: config 0 descriptor?? [ 672.929321][ T43] usb 4-1: USB disconnect, device number 3 [ 673.303988][T22529] loop1: detected capacity change from 0 to 32768 [ 673.326653][ T6474] usb 5-1: USB disconnect, device number 10 [ 673.401776][T22529] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 673.504046][T22529] XFS (loop1): Ending clean mount [ 673.728752][ T6355] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 673.811665][T22571] netlink: 100 bytes leftover after parsing attributes in process `syz.0.7382'. [ 673.839758][T22571] netlink: 100 bytes leftover after parsing attributes in process `syz.0.7382'. [ 673.851309][T22575] loop2: detected capacity change from 0 to 128 [ 673.922155][T22575] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 673.971883][T22575] hpfs: filesystem error: improperly stopped [ 674.015863][T22575] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 674.035932][T22575] hpfs: You really don't want any checks? You are crazy... [ 674.043568][T22575] hpfs: hpfs_map_sector(): read error [ 674.087493][T22575] hpfs: code page support is disabled [ 674.102952][T22575] hpfs: hpfs_map_4sectors(): unaligned read [ 674.125918][T22575] hpfs: hpfs_map_4sectors(): unaligned read [ 674.126037][T22579] netlink: 7 bytes leftover after parsing attributes in process `syz.0.7388'. [ 674.142180][T22575] hpfs: filesystem error: unable to find root dir [ 674.250367][T22579] netlink: 7 bytes leftover after parsing attributes in process `syz.0.7388'. [ 674.389670][T22589] netlink: 'syz.4.7392': attribute type 39 has an invalid length. [ 674.474474][T22595] usb usb8: usbfs: process 22595 (syz.2.7391) did not claim interface 0 before use [ 674.601145][T22599] netlink: 404 bytes leftover after parsing attributes in process `syz.0.7396'. [ 674.615265][T22599] netlink: 88 bytes leftover after parsing attributes in process `syz.0.7396'. [ 674.626483][T22599] netlink: 88 bytes leftover after parsing attributes in process `syz.0.7396'. [ 674.879981][T22611] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 674.929636][T22611] overlayfs: conflicting options: userxattr,redirect_dir=on [ 675.006338][T22613] veth3: entered promiscuous mode [ 675.011526][T22613] veth3: entered allmulticast mode [ 675.063245][T22618] netlink: 5 bytes leftover after parsing attributes in process `syz.0.7405'. [ 675.286832][T22631] tmpfs: Bad value for 'mpol' [ 675.424464][T22635] netlink: 'syz.1.7414': attribute type 10 has an invalid length. [ 675.453488][T22635] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 675.898898][T22655] netlink: 'syz.4.7423': attribute type 2 has an invalid length. [ 676.116810][ T6533] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 676.287029][ T6533] usb 4-1: Using ep0 maxpacket: 32 [ 676.308766][ T6533] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 676.339217][ T6533] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 676.386469][ T6533] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 676.411072][T22625] loop2: detected capacity change from 0 to 40427 [ 676.425995][ T6533] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 676.458937][T22625] F2FS-fs (loop2): invalid crc value [ 676.473291][ T6533] usb 4-1: config 1 has no interface number 0 [ 676.500563][ T6533] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 676.531579][ T6533] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.579421][ T6533] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 676.583351][T22682] netlink: 'syz.4.7437': attribute type 4 has an invalid length. [ 676.732869][T22685] loop1: detected capacity change from 0 to 512 [ 676.763701][T22625] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 676.781405][T22685] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 676.781883][ T6533] snd_usb_pod 4-1:1.1: endpoint not available, using fallback values [ 676.796666][T22625] F2FS-fs (loop2): Start checkpoint disabled! [ 676.821427][T22625] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 676.827201][ T6533] snd_usb_pod 4-1:1.1: invalid control EP [ 676.859306][T22685] EXT4-fs (loop1): 1 truncate cleaned up [ 676.865265][T22625] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 676.874734][T22685] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 676.886301][ T6533] snd_usb_pod 4-1:1.1: cannot start listening: -22 [ 676.893528][ T6533] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 676.900751][T22625] F2FS-fs (loop2): Corrupted max_depth of 3: 25165825 [ 676.956551][ T6533] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 677.031069][ T6533] usb 4-1: USB disconnect, device number 4 [ 677.141294][ T6355] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 677.909215][T22725] sctp: [Deprecated]: syz.1.7455 (pid 22725) Use of int in maxseg socket option. [ 677.909215][T22725] Use struct sctp_assoc_value instead [ 677.981584][T22729] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7458'. [ 678.017485][T22729] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7458'. [ 678.066275][T22729] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7458'. [ 678.733050][T22763] loop1: detected capacity change from 0 to 256 [ 678.804329][T22763] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 678.823323][T22763] FAT-fs (loop1): Filesystem has been set read-only [ 678.967049][T22776] netlink: 'syz.2.7481': attribute type 10 has an invalid length. [ 678.989637][T22776] __nla_validate_parse: 2 callbacks suppressed [ 678.989658][T22776] netlink: 216 bytes leftover after parsing attributes in process `syz.2.7481'. [ 679.633747][T22804] netlink: 6 bytes leftover after parsing attributes in process `syz.3.7495'. [ 679.662462][T22804] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 680.128700][T22782] loop0: detected capacity change from 0 to 32768 [ 680.212288][T22782] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 680.305801][T22782] (syz.0.7485,22782,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 680.416399][ T6474] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 680.491115][ T6348] ocfs2: Unmounting device (7,0) on (node local) [ 680.516100][T22841] libceph: resolve 'c9' (ret=-3): failed [ 680.606686][ T6474] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 680.615817][ T6474] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.662200][ T6474] usb 5-1: Product: syz [ 680.675799][ T6474] usb 5-1: Manufacturer: syz [ 680.696252][ T6474] usb 5-1: SerialNumber: syz [ 680.727985][ T6474] usb 5-1: config 0 descriptor?? [ 680.739907][ T6474] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 680.941649][T22829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.996810][T22829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.028145][ T6474] gspca_sunplus: reg_r err -71 [ 681.033062][ T6474] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 681.087533][ T6474] usb 5-1: USB disconnect, device number 11 [ 681.399619][T22872] dvmrp0: entered allmulticast mode [ 681.511394][T22875] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (34504) [ 681.521512][T22875] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 681.800657][T22893] loop0: detected capacity change from 0 to 256 [ 681.870038][T22895] netlink: 'syz.2.7539': attribute type 2 has an invalid length. [ 681.893370][T22895] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7539'. [ 682.218805][T22909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7546'. [ 682.730610][T22933] netlink: 4696 bytes leftover after parsing attributes in process `syz.3.7556'. [ 682.758705][T22932] loop2: detected capacity change from 0 to 256 [ 682.771507][T22933] netlink: 4696 bytes leftover after parsing attributes in process `syz.3.7556'. [ 682.850541][T22932] FAT-fs (loop2): Directory bread(block 64) failed [ 682.876933][T22932] FAT-fs (loop2): Directory bread(block 65) failed [ 682.883627][T22932] FAT-fs (loop2): Directory bread(block 66) failed [ 682.926519][T22932] FAT-fs (loop2): Directory bread(block 67) failed [ 682.933215][T22932] FAT-fs (loop2): Directory bread(block 68) failed [ 682.971974][T22932] FAT-fs (loop2): Directory bread(block 69) failed [ 683.005532][T22932] FAT-fs (loop2): Directory bread(block 70) failed [ 683.029626][T22932] FAT-fs (loop2): Directory bread(block 71) failed [ 683.055248][T22932] FAT-fs (loop2): Directory bread(block 72) failed [ 683.091066][T22932] FAT-fs (loop2): Directory bread(block 73) failed [ 683.174356][ T30] audit: type=1800 audit(1758906669.191:141): pid=22932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7557" name="bus" dev="loop2" ino=1048694 res=0 errno=0 [ 683.735560][T22968] loop3: detected capacity change from 0 to 512 [ 683.768100][T22968] EXT4-fs: Ignoring removed bh option [ 683.826094][T22968] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 683.874402][T22968] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 683.930899][T22968] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 683.950023][T22978] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7578'. [ 683.987247][T22968] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 684.057684][T22968] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 684.292534][ T6357] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 684.553882][T23005] kAFS: No cell specified [ 684.735771][T23013] loop2: detected capacity change from 0 to 512 [ 684.813814][T23013] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 684.869123][T23013] ext4 filesystem being mounted at /1415/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 684.965427][T23028] netlink: 'syz.4.7604': attribute type 10 has an invalid length. [ 685.018374][ T6351] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 685.030387][T23028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 685.059617][T23028] bond0: entered promiscuous mode [ 685.089249][T23028] bond_slave_0: entered promiscuous mode [ 685.108290][T23028] bond_slave_1: entered promiscuous mode [ 685.126625][T23028] bond0: entered allmulticast mode [ 685.135916][T23028] bond_slave_0: entered allmulticast mode [ 685.166818][T23028] bond_slave_1: entered allmulticast mode [ 685.179523][T23035] loop2: detected capacity change from 0 to 256 [ 685.189189][T23028] team0: Port device bond0 added [ 685.251478][T23035] FAT-fs (loop2): Directory bread(block 64) failed [ 685.303764][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.325926][T23035] FAT-fs (loop2): Directory bread(block 65) failed [ 685.371158][T23035] FAT-fs (loop2): Directory bread(block 66) failed [ 685.416644][T23035] FAT-fs (loop2): Directory bread(block 67) failed [ 685.423643][T23035] FAT-fs (loop2): Directory bread(block 68) failed [ 685.462939][T23035] FAT-fs (loop2): Directory bread(block 69) failed [ 685.474307][T23035] FAT-fs (loop2): Directory bread(block 70) failed [ 685.494859][T23035] FAT-fs (loop2): Directory bread(block 71) failed [ 685.527070][T23035] FAT-fs (loop2): Directory bread(block 72) failed [ 685.566719][T23035] FAT-fs (loop2): Directory bread(block 73) failed [ 685.713465][T23052] loop0: detected capacity change from 0 to 256 [ 685.844118][T23052] FAT-fs (loop0): Directory bread(block 64) failed [ 685.875450][T23057] usb usb8: usbfs: process 23057 (syz.3.7617) did not claim interface 0 before use [ 685.906224][T23052] FAT-fs (loop0): Directory bread(block 65) failed [ 685.934104][T23052] FAT-fs (loop0): Directory bread(block 66) failed [ 685.957789][T23052] FAT-fs (loop0): Directory bread(block 67) failed [ 685.964492][T23052] FAT-fs (loop0): Directory bread(block 68) failed [ 686.027959][T23052] FAT-fs (loop0): Directory bread(block 69) failed [ 686.048283][T23052] FAT-fs (loop0): Directory bread(block 70) failed [ 686.078483][T23052] FAT-fs (loop0): Directory bread(block 71) failed [ 686.085167][T23052] FAT-fs (loop0): Directory bread(block 72) failed [ 686.104444][T23052] FAT-fs (loop0): Directory bread(block 73) failed [ 686.829180][T23087] bond0: (slave bond0): Error: Device is in use and cannot be enslaved [ 686.911430][T23089] loop2: detected capacity change from 0 to 2048 [ 686.951742][T23089] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 686.977432][T23089] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #16: comm syz.2.7633: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 687.108776][ T6351] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 687.176031][T23100] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7638'. [ 687.199602][T23100] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7638'. [ 687.630036][T23120] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7647'. [ 688.953053][ T30] audit: type=1326 audit(1758906674.971:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23190 comm="syz.1.7681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a398eec9 code=0x7ffc0000 [ 689.048953][ T30] audit: type=1326 audit(1758906675.001:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23190 comm="syz.1.7681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a398eec9 code=0x7ffc0000 [ 689.145558][ T30] audit: type=1326 audit(1758906675.011:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23190 comm="syz.1.7681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7ff6a398eec9 code=0x7ffc0000 [ 689.232202][ T30] audit: type=1326 audit(1758906675.011:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23190 comm="syz.1.7681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a398eec9 code=0x7ffc0000 [ 689.323415][ T30] audit: type=1326 audit(1758906675.021:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23190 comm="syz.1.7681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a398eec9 code=0x7ffc0000 [ 689.366177][T23209] loop3: detected capacity change from 0 to 256 [ 689.431368][T23209] FAT-fs (loop3): Directory bread(block 64) failed [ 689.447248][T23209] FAT-fs (loop3): Directory bread(block 65) failed [ 689.465497][T23209] FAT-fs (loop3): Directory bread(block 66) failed [ 689.497022][T23209] FAT-fs (loop3): Directory bread(block 67) failed [ 689.509717][T23209] FAT-fs (loop3): Directory bread(block 68) failed [ 689.516301][T23209] FAT-fs (loop3): Directory bread(block 69) failed [ 689.567092][T23209] FAT-fs (loop3): Directory bread(block 70) failed [ 689.573714][T23209] FAT-fs (loop3): Directory bread(block 71) failed [ 689.627352][T23209] FAT-fs (loop3): Directory bread(block 72) failed [ 689.633952][T23209] FAT-fs (loop3): Directory bread(block 73) failed [ 689.912104][T23228] netlink: 460 bytes leftover after parsing attributes in process `syz.2.7703'. [ 689.988489][ T43] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 690.182287][ T43] usb 1-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 690.211900][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.257035][ T43] usb 1-1: Product: syz [ 690.261272][ T43] usb 1-1: Manufacturer: syz [ 690.265905][ T43] usb 1-1: SerialNumber: syz [ 690.294561][T23239] binfmt_misc: register: failed to install interpreter file ./file1 [ 690.297985][ T43] usb 1-1: config 0 descriptor?? [ 690.544400][ T43] int51x1 1-1:0.0: probe with driver int51x1 failed with error -22 [ 690.602347][T23224] loop1: detected capacity change from 0 to 32768 [ 690.779265][ T43] usb 1-1: USB disconnect, device number 9 [ 691.110097][ T6285] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 691.174216][T23274] snd_dummy snd_dummy.0: control 2:16:0:syz0:-3 is already present [ 691.207128][ T6533] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 691.247886][T23276] loop1: detected capacity change from 0 to 64 [ 691.276891][ T6285] usb 3-1: Using ep0 maxpacket: 32 [ 691.290513][T23278] netdevsim netdevsim4: Direct firmware load for . [ 691.290513][T23278] failed with error -2 [ 691.298654][ T6285] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 691.336080][ T6285] usb 3-1: config 0 has no interface number 0 [ 691.351784][T23278] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 691.351784][T23278] [ 691.358914][ T6285] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 691.406978][ T6533] usb 4-1: config 0 has an invalid interface number: 160 but max is 0 [ 691.415782][ T6285] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.427550][ T6285] usb 3-1: Product: syz [ 691.434628][ T6533] usb 4-1: config 0 has no interface number 0 [ 691.440851][ T6285] usb 3-1: Manufacturer: syz [ 691.440875][ T6285] usb 3-1: SerialNumber: syz [ 691.453223][ T6285] usb 3-1: config 0 descriptor?? [ 691.480467][ T6533] usb 4-1: config 0 interface 160 has no altsetting 0 [ 691.502224][ T6533] usb 4-1: New USB device found, idVendor=a6da, idProduct=1e78, bcdDevice=56.e4 [ 691.522149][ T6533] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.552565][ T6533] usb 4-1: Product: syz [ 691.562687][ T6533] usb 4-1: Manufacturer: syz [ 691.577708][ T6533] usb 4-1: SerialNumber: syz [ 691.588304][ T6533] usb 4-1: config 0 descriptor?? [ 691.609539][ T6533] usb-storage 4-1:0.160: USB Mass Storage device detected [ 691.694444][T23290] netlink: 'syz.0.7730': attribute type 10 has an invalid length. [ 691.708242][ T6285] radio-si470x 3-1:0.35: this is not a si470x device. [ 691.729891][T23290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 691.745448][T23290] team0: Port device bond0 added [ 691.837461][ T6533] usb 4-1: USB disconnect, device number 5 [ 691.907550][ T6285] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 691.938724][ T6285] usb 3-1: USB disconnect, device number 10 [ 691.998561][T23298] loop0: detected capacity change from 0 to 2048 [ 692.026163][T23298] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 692.055448][T23298] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 692.333383][T23310] netlink: 196 bytes leftover after parsing attributes in process `syz.1.7741'. [ 692.459929][T23316] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7743'. [ 692.475093][T23315] netlink: 'syz.3.7744': attribute type 10 has an invalid length. [ 692.538562][T23315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 692.596141][T23315] team0: Port device bond0 added [ 693.034533][T23334] netlink: 'syz.2.7753': attribute type 8 has an invalid length. [ 693.307782][T23305] loop0: detected capacity change from 0 to 32768 [ 693.559922][T23362] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7762'. [ 693.641428][T23305] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=12,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,degraded=yes,nojournal_transaction_names [ 693.641466][T23305] allowing incompatible features above 0.0: (unknown version) [ 693.641481][T23305] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 693.837569][T23305] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 693.845824][T23305] bcachefs (loop0): initializing new filesystem [ 693.915382][T23305] bcachefs (loop0): going read-write [ 694.007825][T23305] bcachefs (loop0): marking superblocks [ 694.059935][T23305] bcachefs (loop0): initializing freespace [ 694.099322][T23384] loop3: detected capacity change from 0 to 16 [ 694.111240][T23384] erofs (device loop3): mounted with root inode @ nid 36. [ 694.119263][T23305] bcachefs (loop0): done initializing freespace [ 694.165359][T23305] bcachefs (loop0): reading snapshots table [ 694.177735][T23305] bcachefs (loop0): reading snapshots done [ 694.319819][T23393] netlink: 328 bytes leftover after parsing attributes in process `syz.1.7776'. [ 694.337935][T23305] bcachefs (loop0): done starting filesystem [ 694.687195][ T6285] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 694.742127][T23410] netlink: 'syz.1.7785': attribute type 1 has an invalid length. [ 694.771941][ T6348] bcachefs (loop0): shutting down [ 694.781937][ T6348] bcachefs (loop0): going read-only [ 694.790183][ T6348] bcachefs (loop0): finished waiting for writes to stop [ 694.829913][ T6348] bcachefs (loop0): flushing journal and stopping allocators, journal seq 3 [ 694.870633][ T6285] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 694.887731][ T6285] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 694.929745][ T6348] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 3 [ 694.939823][ T6285] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 694.952425][ T6285] usb 4-1: config 1 has no interface number 0 [ 694.959045][ T6285] usb 4-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 694.974440][ T6285] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 694.990620][ T6285] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 694.997690][ T6348] bcachefs (loop0): clean shutdown complete, journal seq 4 [ 695.009512][ T6285] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.019300][ T6285] usb 4-1: Product: syz [ 695.023518][ T6285] usb 4-1: Manufacturer: syz [ 695.028948][ T6285] usb 4-1: SerialNumber: syz [ 695.034542][T23416] netlink: 332 bytes leftover after parsing attributes in process `syz.1.7789'. [ 695.053674][ T6348] bcachefs (loop0): marking filesystem clean [ 695.156518][ T6348] bcachefs (loop0): shutdown complete [ 695.499665][ T6285] usb 4-1: USB disconnect, device number 6 [ 695.542057][ T6474] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 695.587687][T23418] loop2: detected capacity change from 0 to 32768 [ 695.637667][T23418] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.7790 (23418) [ 695.672626][T23418] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 695.691532][T23418] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 695.742546][ T6474] usb 5-1: Using ep0 maxpacket: 8 [ 695.790667][ T6474] usb 5-1: unable to get BOS descriptor or descriptor too short [ 695.828423][ T6474] usb 5-1: config 4 interface 0 has no altsetting 0 [ 695.839036][ T6474] usb 5-1: string descriptor 0 read error: -22 [ 695.845395][ T6474] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 695.857296][ T6474] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.872754][ T6474] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 695.881240][T23418] BTRFS info (device loop2): enabling ssd optimizations [ 695.891621][ T6474] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 695.902804][ T6474] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 695.913688][ T6474] usb 5-1: media controller created [ 695.930472][T23418] BTRFS info (device loop2): enabling free space tree [ 695.946729][ T6474] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 696.127839][ T6351] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 696.291636][ T6474] usb 5-1: USB disconnect, device number 12 [ 696.487863][T23465] netlink: 'syz.3.7804': attribute type 1 has an invalid length. [ 697.218606][T23450] loop0: detected capacity change from 0 to 40427 [ 697.278799][T23450] F2FS-fs (loop0): invalid crc value [ 698.004742][T23474] loop3: detected capacity change from 0 to 32768 [ 698.487763][T23509] netlink: 'syz.1.7825': attribute type 9 has an invalid length. [ 698.875693][T23519] loop2: detected capacity change from 0 to 1024 [ 698.922295][T23527] [U] ^R [ 699.667642][T23553] netlink: 'syz.0.7848': attribute type 10 has an invalid length. [ 699.727460][T23553] macvlan0: entered promiscuous mode [ 699.791650][T23553] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 699.924265][T23525] loop1: detected capacity change from 0 to 32768 [ 700.254561][T23525] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io [ 700.254595][T23525] allowing incompatible features above 0.0: (unknown version) [ 700.254618][T23525] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 700.447696][T23525] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 700.456075][T23525] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 700.527840][T23525] bcachefs (loop1): Version upgrade required: [ 700.527840][T23525] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 700.527840][T23525] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 700.527840][T23525] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 700.600792][ C0] vkms_vblank_simulate: vblank timer overrun [ 700.825566][T23525] bcachefs (loop1): dropping and reconstructing all alloc info [ 700.913872][T23525] bcachefs (loop1): accounting_read... done [ 700.956181][T23525] bcachefs (loop1): alloc_read... done [ 700.995372][T23525] bcachefs (loop1): snapshots_read... done [ 701.027015][T23525] bcachefs (loop1): check_allocations... done [ 701.178482][T23615] netlink: 'syz.2.7875': attribute type 11 has an invalid length. [ 701.179419][T23525] bcachefs (loop1): going read-write [ 701.258903][T23525] bcachefs (loop1): done starting filesystem [ 701.699166][ T6355] bcachefs (loop1): shutting down [ 701.739081][ T6355] bcachefs (loop1): going read-only [ 701.744459][ T6355] bcachefs (loop1): finished waiting for writes to stop [ 701.805466][T23641] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7887'. [ 701.828128][ T6355] bcachefs (loop1): flushing journal and stopping allocators, journal seq 11 [ 701.866319][ T6355] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 11 [ 701.897428][ T6355] bcachefs (loop1): unclean shutdown complete, journal seq 12 [ 701.917622][ T6285] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 701.953909][ T6355] bcachefs (loop1): done going read-only, filesystem not clean [ 701.984928][T23646] libceph: resolve '4.' (ret=-3): failed [ 702.045243][ T6355] bcachefs (loop1): shutdown complete [ 702.072675][T23650] netlink: 'syz.0.7890': attribute type 2 has an invalid length. [ 702.097638][T23650] netlink: 'syz.0.7890': attribute type 1 has an invalid length. [ 702.137873][ T6285] usb 5-1: Using ep0 maxpacket: 16 [ 702.146930][ T6285] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 702.160486][ T6285] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 702.190831][ T6285] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 702.216573][ T6285] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.247580][ T6285] usb 5-1: Product: syz [ 702.260786][ T6285] usb 5-1: Manufacturer: syz [ 702.265948][ T6285] usb 5-1: SerialNumber: syz [ 702.718176][ T6285] usb 5-1: cannot find UAC_HEADER [ 702.776722][T23674] loop3: detected capacity change from 0 to 8 [ 702.786302][ T6285] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 702.838949][ T6285] usb 5-1: USB disconnect, device number 13 [ 702.938758][ T6298] udevd[6298]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 703.187933][T23688] netlink: 'syz.0.7909': attribute type 1 has an invalid length. [ 703.195818][T23688] netlink: 'syz.0.7909': attribute type 3 has an invalid length. [ 703.216772][ T30] audit: type=1326 audit(1758906689.230:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23689 comm="syz.2.7910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9c3b8eec9 code=0x7ffc0000 [ 703.221864][T23688] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7909'. [ 703.272525][ T30] audit: type=1326 audit(1758906689.230:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23689 comm="syz.2.7910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9c3b8eec9 code=0x7ffc0000 [ 703.296209][ T30] audit: type=1326 audit(1758906689.270:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23689 comm="syz.2.7910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7fb9c3b8eec9 code=0x7ffc0000 [ 703.319320][ T30] audit: type=1326 audit(1758906689.270:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23689 comm="syz.2.7910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9c3b8eec9 code=0x7ffc0000 [ 703.344903][ T30] audit: type=1326 audit(1758906689.270:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23689 comm="syz.2.7910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9c3b8eec9 code=0x7ffc0000 [ 703.434187][T23696] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 704.207188][T23728] loop2: detected capacity change from 0 to 4096 [ 704.331553][T23728] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 704.385052][T23747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7935'. [ 704.543825][T23748] loop3: detected capacity change from 0 to 2048 [ 704.588742][T23748] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 704.613138][ T6351] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 704.707918][T23757] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 704.735620][ T6298] udevd[6298]: incorrect nilfs2 checksum on /dev/loop3 [ 704.743277][T23748] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12 [ 704.823342][T23748] Remounting filesystem read-only [ 704.888512][T23761] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 705.034183][T23768] tmpfs: Bad value for 'mpol' [ 705.347815][ T6285] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 705.402517][T23783] netlink: 'syz.0.7952': attribute type 1 has an invalid length. [ 705.458732][T23785] netlink: 892 bytes leftover after parsing attributes in process `syz.1.7953'. [ 705.542097][ T6285] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 705.551892][ T6285] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.582521][ T6285] usb 5-1: Product: syz [ 705.586757][ T6285] usb 5-1: Manufacturer: syz [ 705.611670][ T6285] usb 5-1: SerialNumber: syz [ 705.670106][ T6285] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 705.706863][T23763] loop2: detected capacity change from 0 to 32768 [ 705.725682][ T9] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 705.758606][T23763] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.7941 (23763) [ 705.816640][T23763] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 705.833631][T23763] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 706.064583][ T6533] usb 5-1: USB disconnect, device number 14 [ 706.070841][T19143] Bluetooth: hci4: unexpected event for opcode 0x2023 [ 706.084866][T23763] BTRFS info (device loop2): enabling ssd optimizations [ 706.123179][T23763] BTRFS info (device loop2): enabling free space tree [ 706.172780][T23821] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 706.276683][ T6351] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 706.741416][T23842] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7972'. [ 706.842306][ T9] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 706.875269][ T9] ath9k_htc: Failed to initialize the device [ 706.922591][ T6533] usb 5-1: ath9k_htc: USB layer deinitialized [ 706.937776][T23849] sit0: entered promiscuous mode [ 706.974488][T23849] netlink: 'syz.1.7976': attribute type 1 has an invalid length. [ 707.008988][T23851] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.7977'. [ 707.017976][T23849] netlink: 1 bytes leftover after parsing attributes in process `syz.1.7976'. [ 707.087567][T23855] loop0: detected capacity change from 0 to 1024 [ 707.188219][T23857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7980'. [ 707.374971][ T60] hfsplus: b-tree write err: -5, ino 4 [ 707.598154][T23871] netlink: 14212 bytes leftover after parsing attributes in process `syz.1.7987'. [ 707.662119][T23877] openvswitch: netlink: IP tunnel dst address not specified [ 708.652359][T23876] loop3: detected capacity change from 0 to 32768 [ 708.698188][T23876] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.7989 (23876) [ 708.739436][ T30] audit: type=1326 audit(1758906694.749:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23918 comm="syz.4.8011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6638eec9 code=0x7ffc0000 [ 708.777207][T23876] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 708.811143][ T30] audit: type=1326 audit(1758906694.749:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23918 comm="syz.4.8011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6638eec9 code=0x7ffc0000 [ 708.816096][T23876] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 708.909859][ T30] audit: type=1326 audit(1758906694.749:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23918 comm="syz.4.8011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f2a6638eec9 code=0x7ffc0000 [ 708.981836][ T30] audit: type=1326 audit(1758906694.749:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23918 comm="syz.4.8011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6638eec9 code=0x7ffc0000 [ 709.006718][ T30] audit: type=1326 audit(1758906694.749:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23918 comm="syz.4.8011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6638eec9 code=0x7ffc0000 [ 709.238413][T23876] BTRFS info (device loop3): turning off barriers [ 709.244913][T23876] BTRFS info (device loop3): enabling free space tree [ 709.498532][ T24] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 709.558992][ T6357] BTRFS info (device loop3): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 709.705459][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 709.734290][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 709.780000][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 709.814069][T23970] loop2: detected capacity change from 0 to 256 [ 709.838958][ T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 709.868567][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.876648][ T24] usb 1-1: Product: syz [ 709.891657][ T24] usb 1-1: Manufacturer: syz [ 709.917676][ T24] usb 1-1: SerialNumber: syz [ 710.183304][ T24] usb 1-1: 0:2 : does not exist [ 710.196805][ T24] usb 1-1: unit 9 not found! [ 710.259320][ T24] usb 1-1: 4:0: cannot get min/max values for control 4 (id 4) [ 710.357702][ T24] usb 1-1: USB disconnect, device number 10 [ 710.426919][ T7110] udevd[7110]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 710.558158][ T6474] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 710.636581][T23994] netlink: 216 bytes leftover after parsing attributes in process `syz.3.8039'. [ 710.728253][ T6474] usb 2-1: Using ep0 maxpacket: 8 [ 710.742356][ T6474] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 710.774411][ T6474] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 710.798192][ T6474] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.823488][ T6474] usb 2-1: Product: syz [ 710.832242][ T6474] usb 2-1: Manufacturer: syz [ 710.842699][ T6474] usb 2-1: SerialNumber: syz [ 710.870512][ T6474] usb 2-1: config 0 descriptor?? [ 710.918751][ T6474] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 711.130291][ T6474] gspca_zc3xx: reg_w_i err -71 [ 711.188234][ T6285] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 711.388597][ T6285] usb 4-1: Using ep0 maxpacket: 16 [ 711.398412][T24018] tmpfs: Bad value for 'mpol' [ 711.404793][ T6285] usb 4-1: config 0 interface 0 altsetting 44 endpoint 0x83 has invalid wMaxPacketSize 0 [ 711.429222][ T6285] usb 4-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 711.442703][ T6285] usb 4-1: config 0 interface 0 has no altsetting 0 [ 711.458778][ T6285] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 711.467896][ T6285] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.483464][ T6285] usb 4-1: Product: syz [ 711.487948][ T6285] usb 4-1: Manufacturer: syz [ 711.501798][ T6285] usb 4-1: SerialNumber: syz [ 711.520566][ T6285] usb 4-1: config 0 descriptor?? [ 711.533299][ T6285] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input60 [ 711.618365][ T30] audit: type=1326 audit(1758906697.629:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24021 comm="syz.4.8052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6638eec9 code=0x7ffc0000 [ 711.642109][T24007] loop2: detected capacity change from 0 to 40427 [ 711.681542][T24007] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(218103808) [ 711.717828][T24007] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 711.718854][ T6474] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 711.739254][ T30] audit: type=1326 audit(1758906697.629:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24021 comm="syz.4.8052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6638eec9 code=0x7ffc0000 [ 711.781859][T24007] F2FS-fs (loop2): invalid crc value [ 711.788435][ T6474] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 711.803253][ T30] audit: type=1326 audit(1758906697.669:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24021 comm="syz.4.8052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f2a6638eec9 code=0x7ffc0000 [ 711.858881][ T6474] usb 2-1: USB disconnect, device number 126 [ 711.892230][ T6285] usb 4-1: USB disconnect, device number 7 [ 711.901266][ T30] audit: type=1326 audit(1758906697.669:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24021 comm="syz.4.8052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6638eec9 code=0x7ffc0000 [ 711.946367][T24028] netlink: 'syz.4.8054': attribute type 12 has an invalid length. [ 711.983769][ T30] audit: type=1326 audit(1758906697.669:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24021 comm="syz.4.8052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6638eec9 code=0x7ffc0000 [ 712.071691][T24007] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 712.092292][T24032] netlink: 'syz.1.8056': attribute type 1 has an invalid length. [ 712.120155][T24007] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 712.131606][T24007] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 712.243231][T24036] loop0: detected capacity change from 0 to 256 [ 712.375587][T24036] FAT-fs (loop0): Directory bread(block 64) failed [ 712.382518][T24036] FAT-fs (loop0): Directory bread(block 65) failed [ 712.405805][T24036] FAT-fs (loop0): Directory bread(block 66) failed [ 712.432676][T24036] FAT-fs (loop0): Directory bread(block 67) failed [ 712.459017][T24036] FAT-fs (loop0): Directory bread(block 68) failed [ 712.486311][T24036] FAT-fs (loop0): Directory bread(block 69) failed [ 712.518403][T24036] FAT-fs (loop0): Directory bread(block 70) failed [ 712.525007][T24036] FAT-fs (loop0): Directory bread(block 71) failed [ 712.558926][T24036] FAT-fs (loop0): Directory bread(block 72) failed [ 712.568591][T24036] FAT-fs (loop0): Directory bread(block 73) failed [ 713.403793][T24071] loop1: detected capacity change from 0 to 4096 [ 713.419378][T24075] wg1 speed is unknown, defaulting to 1000 [ 713.433445][T24075] wg1 speed is unknown, defaulting to 1000 [ 713.441828][T24071] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 713.457254][T24075] wg1 speed is unknown, defaulting to 1000 [ 713.552868][T24075] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 713.601012][T24071] ntfs3(loop1): ino=0, attr_set_size [ 713.635019][T24075] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 713.655253][T24073] loop0: detected capacity change from 0 to 4096 [ 713.725826][T24073] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 713.836338][T24075] wg1 speed is unknown, defaulting to 1000 [ 713.863639][T24073] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 713.890395][T24075] wg1 speed is unknown, defaulting to 1000 [ 713.899441][T24083] loop1: detected capacity change from 0 to 256 [ 713.927686][T24075] wg1 speed is unknown, defaulting to 1000 [ 713.935442][T24083] exfat: Deprecated parameter 'utf8' [ 713.963881][T24083] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 714.000656][T24075] wg1 speed is unknown, defaulting to 1000 [ 714.050986][T24075] wg1 speed is unknown, defaulting to 1000 [ 714.239418][T24087] loop0: detected capacity change from 0 to 256 [ 714.289029][T24087] exfat: Deprecated parameter 'namecase' [ 714.294892][T24087] exfat: Deprecated parameter 'utf8' [ 714.358026][T24067] loop3: detected capacity change from 0 to 32768 [ 714.369087][T24087] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 714.501840][T24087] cifs: Unknown parameter 'Ü[—Íñ¦bšÿÿÿITäŒ&¬æ:ÅèÙ"‚Õëï1:ºÃÃÓ­'Ä4,Zz-#FÇ<æõ]%gCžÊ [ 714.501840][T24087] SÃȘØÈžZ§6ŸÂ' [ 714.990019][T24113] siw: device registration error -23 [ 715.391943][T24127] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8104'. [ 715.541113][T24136] loop1: detected capacity change from 0 to 256 [ 715.585802][T24127] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8104'. [ 715.597905][T24136] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 715.698746][T24136] exFAT-fs (loop1): start_clu is invalid cluster(0x400) [ 716.030949][T24126] loop2: detected capacity change from 0 to 32768 [ 716.057882][ T30] audit: type=1326 audit(1758906702.079:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24148 comm="syz.1.8113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a398eec9 code=0x7ffc0000 [ 716.080368][ C0] vkms_vblank_simulate: vblank timer overrun [ 716.119329][ T7110] loop2: p9 p11 p16 [ 716.149264][ T30] audit: type=1326 audit(1758906702.089:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24148 comm="syz.1.8113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7ff6a398eec9 code=0x7ffc0000 [ 716.234206][T24157] netlink: 148 bytes leftover after parsing attributes in process `syz.4.8117'. [ 716.264591][ T30] audit: type=1326 audit(1758906702.089:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24148 comm="syz.1.8113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a398eec9 code=0x7ffc0000 [ 716.291713][T24157] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 716.369070][ T30] audit: type=1326 audit(1758906702.089:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24148 comm="syz.1.8113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a398eec9 code=0x7ffc0000 [ 716.648716][T24174] loop2: detected capacity change from 0 to 256 [ 716.730634][T24174] exfat: Deprecated parameter 'utf8' [ 716.826084][T24174] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 716.851556][T24183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8130'. [ 717.001893][ T6299] udevd[6299]: inotify_add_watch(7, /dev/loop2p11, 10) failed: No such file or directory [ 717.002113][ T7999] udevd[7999]: inotify_add_watch(7, /dev/loop2p16, 10) failed: No such file or directory [ 717.017374][ T7110] udevd[7110]: inotify_add_watch(7, /dev/loop2p9, 10) failed: No such file or directory [ 717.688690][T24215] usb usb8: usbfs: process 24215 (syz.1.8146) did not claim interface 0 before use [ 718.198779][ C1] sd 0:0:1:0: [sda] tag#6782 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 718.209359][ C1] sd 0:0:1:0: [sda] tag#6782 CDB: Read(6) 08 00 00 00 03 44 [ 718.268758][ T30] audit: type=1326 audit(1758906704.289:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24240 comm="syz.4.8156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6638eec9 code=0x7ffc0000 [ 718.347483][ T30] audit: type=1326 audit(1758906704.289:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24240 comm="syz.4.8156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6638eec9 code=0x7ffc0000 [ 718.448695][ T30] audit: type=1326 audit(1758906704.349:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24240 comm="syz.4.8156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f2a6638eec9 code=0x7ffc0000 [ 718.496517][ T30] audit: type=1326 audit(1758906704.349:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24240 comm="syz.4.8156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6638eec9 code=0x7ffc0000 [ 718.538970][ T30] audit: type=1326 audit(1758906704.349:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24240 comm="syz.4.8156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6638eec9 code=0x7ffc0000 [ 718.561533][ C0] vkms_vblank_simulate: vblank timer overrun [ 718.624752][T24255] netlink: 'syz.3.8160': attribute type 1 has an invalid length. [ 718.645932][T24255] netlink: 240 bytes leftover after parsing attributes in process `syz.3.8160'. [ 718.687768][T24224] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 719.354921][T24289] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8176'. [ 719.389730][T24289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8176'. [ 719.968496][T24317] QAT: failed to copy from user cfg_data. [ 719.995755][T24319] loop2: detected capacity change from 0 to 512 [ 720.007046][T24321] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8190'. [ 720.044594][T24319] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 720.072073][T24319] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 720.119420][T24319] EXT4-fs (loop2): mount failed [ 720.341387][T24334] openvswitch: netlink: IP tunnel dst address not specified [ 720.567482][T24348] loop2: detected capacity change from 0 to 64 [ 720.617401][T24348] hfs: creator requires a 4 character value [ 721.312505][T24379] netlink: 'syz.4.8219': attribute type 1 has an invalid length. [ 722.118473][T24413] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8235'. [ 722.189525][ T6533] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 722.297849][T24382] loop2: detected capacity change from 0 to 32768 [ 722.358884][ T6533] usb 5-1: Using ep0 maxpacket: 8 [ 722.373461][ T6533] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 722.395283][ T6533] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 722.405892][ T6474] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 722.436086][ T6533] usb 5-1: config 0 has no interface number 0 [ 722.442936][ T6533] usb 5-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 722.455454][ T6533] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 722.467393][ T6533] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 722.479502][ T6533] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 722.493144][ T6533] usb 5-1: config 0 interface 52 has no altsetting 0 [ 722.503252][ T6533] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 722.529043][ T6533] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.558029][ T6533] usb 5-1: config 0 descriptor?? [ 722.580250][ T6474] usb 4-1: Using ep0 maxpacket: 32 [ 722.601654][ T6474] usb 4-1: config 0 has an invalid interface number: 66 but max is 1 [ 722.611458][ T6474] usb 4-1: config 0 has no interface number 1 [ 722.617741][ T6474] usb 4-1: too many endpoints for config 0 interface 0 altsetting 5: 69, using maximum allowed: 30 [ 722.669659][ T6474] usb 4-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 69 [ 722.713561][ T6474] usb 4-1: too many endpoints for config 0 interface 66 altsetting 107: 137, using maximum allowed: 30 [ 722.759374][ T6474] usb 4-1: config 0 interface 66 altsetting 107 has 0 endpoint descriptors, different from the interface descriptor's value: 137 [ 722.797602][T24433] loop0: detected capacity change from 0 to 128 [ 722.802740][ T6533] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.52/input/input61 [ 722.829037][ T6474] usb 4-1: config 0 interface 0 has no altsetting 0 [ 722.835798][ T6474] usb 4-1: config 0 interface 66 has no altsetting 0 [ 722.865882][ T6474] usb 4-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 722.882636][ T6474] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 722.890841][ T6474] usb 4-1: SerialNumber: syz [ 722.898448][ T6474] usb 4-1: config 0 descriptor?? [ 722.906549][ T6474] usb-storage 4-1:0.0: USB Mass Storage device detected [ 722.937222][T24433] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 722.941273][ T6474] usb-storage 4-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 722.999459][ T6533] usb 5-1: USB disconnect, device number 15 [ 723.016318][T24433] ext4 filesystem being mounted at /1562/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 723.021360][ T5219] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -19 [ 723.128906][ T6474] usb-storage 4-1:0.66: USB Mass Storage device detected [ 723.161536][ T6474] usb-storage 4-1:0.66: Quirks match for vid 152d pid 0539: 4000000 [ 723.212776][ T6348] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 723.322134][ T6474] usb 4-1: USB disconnect, device number 8 [ 723.695360][T24465] netlink: 'syz.4.8258': attribute type 1 has an invalid length. [ 723.748094][T24465] netlink: 232 bytes leftover after parsing attributes in process `syz.4.8258'. [ 723.775988][T24465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8258'. [ 724.821061][ T6285] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 724.830336][T24521] ieee802154 phy0 wpan0: encryption failed: -90 [ 725.030000][ T6285] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 725.054656][ T6285] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.090156][ T6285] usb 3-1: Product: syz [ 725.114695][ T6285] usb 3-1: Manufacturer: syz [ 725.136342][ T6285] usb 3-1: SerialNumber: syz [ 725.163900][ T6285] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 725.186717][T24534] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8290'. [ 725.204143][ T6463] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 725.475920][T24543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8295'. [ 725.511802][T24543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8295'. [ 725.544679][T24543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8295'. [ 725.576760][T24543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8295'. [ 725.667774][ T6474] usb 3-1: USB disconnect, device number 11 [ 725.683243][T24543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8295'. [ 725.693232][T24543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8295'. [ 725.725878][T24545] macsec0: entered promiscuous mode [ 725.749892][T24545] macsec0: entered allmulticast mode [ 725.758190][T24545] veth1_macvtap: entered allmulticast mode [ 726.261447][ T6463] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 726.298153][ T6463] ath9k_htc: Failed to initialize the device [ 726.299333][ T6474] usb 3-1: ath9k_htc: USB layer deinitialized [ 727.056791][T24607] comedi comedi0: Minor 127 is invalid! [ 727.289556][ T6474] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 727.439568][T24623] lo: entered promiscuous mode [ 727.456725][T24623] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 727.482509][ T6474] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 727.495821][ T6474] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.534802][ T6474] usb 5-1: Product: syz [ 727.542119][ T6474] usb 5-1: Manufacturer: syz [ 727.556199][ T6474] usb 5-1: SerialNumber: syz [ 727.572296][ T6474] usb 5-1: config 0 descriptor?? [ 727.622594][T24631] __nla_validate_parse: 39 callbacks suppressed [ 727.622642][T24631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8339'. [ 727.799805][ T6474] hso 5-1:0.0: Failed to find BULK IN ep [ 727.826804][ T6474] usb-storage 5-1:0.0: USB Mass Storage device detected [ 728.000540][ T6463] usb 5-1: USB disconnect, device number 16 [ 728.126796][T24655] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8350'. [ 728.536538][T24675] ieee802154 phy0 wpan0: encryption failed: -22 [ 728.681534][T24673] loop1: detected capacity change from 0 to 8192 [ 728.705966][T24680] C: renamed from team_slave_0 (while UP) [ 728.739136][T24673] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 728.751428][T24680] netlink: 'syz.4.8363': attribute type 3 has an invalid length. [ 728.799910][T24680] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8363'. [ 728.810565][T24673] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 728.819210][T24683] program syz.3.8364 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 728.853563][T24673] FAT-fs (loop1): Filesystem has been set read-only [ 728.853813][T24680] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 729.074573][T24691] loop3: detected capacity change from 0 to 256 [ 729.240049][T24691] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 729.393949][T24705] loop1: detected capacity change from 0 to 256 [ 729.524354][T24705] FAT-fs (loop1): Directory bread(block 64) failed [ 729.545783][T24705] FAT-fs (loop1): Directory bread(block 65) failed [ 729.560127][T24712] loop3: detected capacity change from 0 to 256 [ 729.568560][T24705] FAT-fs (loop1): Directory bread(block 66) failed [ 729.589456][T24712] exfat: Deprecated parameter 'utf8' [ 729.627740][T24705] FAT-fs (loop1): Directory bread(block 67) failed [ 729.668629][T24705] FAT-fs (loop1): Directory bread(block 68) failed [ 729.676862][T24712] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 729.689586][T24705] FAT-fs (loop1): Directory bread(block 69) failed [ 729.725546][T24705] FAT-fs (loop1): Directory bread(block 70) failed [ 729.760588][T24705] FAT-fs (loop1): Directory bread(block 71) failed [ 729.794838][T24705] FAT-fs (loop1): Directory bread(block 72) failed [ 729.808861][T24705] FAT-fs (loop1): Directory bread(block 73) failed [ 730.272477][T24733] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8390'. [ 730.621995][T24750] loop1: detected capacity change from 0 to 512 [ 730.669323][T24750] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.8397: corrupted in-inode xattr: invalid ea_ino [ 730.712769][T24750] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.8397: couldn't read orphan inode 15 (err -117) [ 730.751753][T24758] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 730.759674][T24758] IPv6: NLM_F_CREATE should be set when creating new route [ 730.766974][T24758] IPv6: NLM_F_CREATE should be set when creating new route [ 730.778565][T24750] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 730.971663][ T6355] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 731.268078][T24781] loop0: detected capacity change from 0 to 256 [ 731.378909][T24785] bridge1: entered allmulticast mode [ 731.492882][ T6474] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 731.664215][ T6474] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 731.694623][ T6474] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.704404][T24796] netlink: 292 bytes leftover after parsing attributes in process `syz.4.8417'. [ 731.720289][ T6474] usb 4-1: Product: syz [ 731.733127][ T6474] usb 4-1: Manufacturer: syz [ 731.754075][ T6474] usb 4-1: SerialNumber: syz [ 731.801326][ T6474] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 731.822089][ T6533] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 732.054949][T24807] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 732.356243][ T43] usb 4-1: USB disconnect, device number 9 [ 732.903354][ T6533] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 732.922414][ T6533] ath9k_htc: Failed to initialize the device [ 732.936989][ T43] usb 4-1: ath9k_htc: USB layer deinitialized [ 733.029577][ T6474] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 733.236911][ T6474] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 733.248773][ T6474] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.300820][ T6474] usb 1-1: config 0 descriptor?? [ 733.527767][ T6474] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 733.565378][ T6474] [drm:udl_init] *ERROR* Selecting channel failed [ 733.623245][ T6474] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 733.662136][ T6474] [drm] Initialized udl on minor 2 [ 733.676720][ T6474] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 733.696566][ T6474] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 733.717176][ T6533] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 733.734750][ T6474] usb 1-1: USB disconnect, device number 11 [ 733.752472][ T6533] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 733.854447][T24872] loop3: detected capacity change from 0 to 1024 [ 733.935132][T24867] loop1: detected capacity change from 0 to 4096 [ 733.938667][T24872] hfsplus: found bad thread record in catalog [ 734.081548][ T1113] hfsplus: b-tree write err: -5, ino 4 [ 734.669368][T24899] loop2: detected capacity change from 0 to 16 [ 734.718561][T24899] cramfs: empty filesystem [ 735.097254][T24915] netlink: 'syz.2.8477': attribute type 4 has an invalid length. [ 735.968843][T24906] loop3: detected capacity change from 0 to 32768 [ 736.050243][T24906] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 736.092855][T24957] loop1: detected capacity change from 0 to 8 [ 736.249958][T24961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8496'. [ 736.251125][T24906] [ 736.261436][T24906] ====================================================== [ 736.268659][T24906] WARNING: possible circular locking dependency detected [ 736.275725][T24906] syzkaller #0 Not tainted [ 736.280164][T24906] ------------------------------------------------------ [ 736.287204][T24906] syz.3.8473/24906 is trying to acquire lock: [ 736.293462][T24906] ffff888055f3eab8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_init_acl+0x2f9/0x720 [ 736.302819][T24906] [ 736.302819][T24906] but task is already holding lock: [ 736.310291][T24906] ffff88804b786950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f87/0x21c0 [ 736.319561][T24906] [ 736.319561][T24906] which lock already depends on the new lock. [ 736.319561][T24906] [ 736.329979][T24906] [ 736.329979][T24906] the existing dependency chain (in reverse order) is: [ 736.339023][T24906] [ 736.339023][T24906] -> #4 (jbd2_handle){++++}-{0:0}: [ 736.346356][T24906] lock_acquire+0x120/0x360 [ 736.351412][T24906] start_this_handle+0x1fa7/0x21c0 [ 736.357058][T24906] jbd2__journal_start+0x2c1/0x5b0 [ 736.362705][T24906] jbd2_journal_start+0x2a/0x40 [ 736.368178][T24906] ocfs2_start_trans+0x376/0x6d0 [ 736.373663][T24906] ocfs2_modify_bh+0xe8/0x470 [ 736.378907][T24906] ocfs2_local_read_info+0x1465/0x17e0 [ 736.384917][T24906] dquot_load_quota_sb+0x791/0xbd0 [ 736.390583][T24906] dquot_load_quota_inode+0x2e1/0x5d0 [ 736.396575][T24906] ocfs2_enable_quotas+0x1c6/0x450 [ 736.402574][T24906] ocfs2_fill_super+0x50fe/0x63c0 [ 736.408322][T24906] get_tree_bdev_flags+0x40e/0x4d0 [ 736.414497][T24906] vfs_get_tree+0x92/0x2b0 [ 736.419808][T24906] do_new_mount+0x302/0x9e0 [ 736.424848][T24906] __se_sys_mount+0x313/0x410 [ 736.430056][T24906] do_syscall_64+0xfa/0xfa0 [ 736.435090][T24906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.441522][T24906] [ 736.441522][T24906] -> #3 (&journal->j_trans_barrier){.+.+}-{4:4}: [ 736.450150][T24906] lock_acquire+0x120/0x360 [ 736.455650][T24906] down_read+0x46/0x2e0 [ 736.460410][T24906] ocfs2_start_trans+0x36a/0x6d0 [ 736.465967][T24906] ocfs2_modify_bh+0xe8/0x470 [ 736.471276][T24906] ocfs2_local_read_info+0x1465/0x17e0 [ 736.477268][T24906] dquot_load_quota_sb+0x791/0xbd0 [ 736.482927][T24906] dquot_load_quota_inode+0x2e1/0x5d0 [ 736.488832][T24906] ocfs2_enable_quotas+0x1c6/0x450 [ 736.494561][T24906] ocfs2_fill_super+0x50fe/0x63c0 [ 736.500115][T24906] get_tree_bdev_flags+0x40e/0x4d0 [ 736.505750][T24906] vfs_get_tree+0x92/0x2b0 [ 736.510790][T24906] do_new_mount+0x302/0x9e0 [ 736.515839][T24906] __se_sys_mount+0x313/0x410 [ 736.521051][T24906] do_syscall_64+0xfa/0xfa0 [ 736.526088][T24906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.532511][T24906] [ 736.532511][T24906] -> #2 (sb_internal#2){.+.+}-{0:0}: [ 736.539996][T24906] lock_acquire+0x120/0x360 [ 736.545032][T24906] ocfs2_start_trans+0x26b/0x6d0 [ 736.550504][T24906] ocfs2_xattr_set+0xd69/0x11f0 [ 736.555887][T24906] ocfs2_set_acl+0x701/0x7b0 [ 736.561093][T24906] ocfs2_iop_set_acl+0x1aa/0x2a0 [ 736.566560][T24906] vfs_set_acl+0x887/0xb00 [ 736.571507][T24906] do_set_acl+0xf6/0x190 [ 736.576289][T24906] filename_setxattr+0x2e0/0x600 [ 736.581783][T24906] path_setxattrat+0x364/0x3a0 [ 736.587093][T24906] __x64_sys_setxattr+0xbc/0xe0 [ 736.592484][T24906] do_syscall_64+0xfa/0xfa0 [ 736.597612][T24906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.604037][T24906] [ 736.604037][T24906] -> #1 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}: [ 736.614760][T24906] lock_acquire+0x120/0x360 [ 736.619810][T24906] down_write+0x96/0x1f0 [ 736.624597][T24906] ocfs2_reserve_suballoc_bits+0x15e/0x4640 [ 736.631035][T24906] ocfs2_reserve_new_metadata_blocks+0x403/0x940 [ 736.637969][T24906] ocfs2_init_xattr_set_ctxt+0x307/0x700 [ 736.644337][T24906] ocfs2_xattr_set+0xb70/0x11f0 [ 736.649738][T24906] ocfs2_set_acl+0x701/0x7b0 [ 736.654879][T24906] ocfs2_iop_set_acl+0x1aa/0x2a0 [ 736.660567][T24906] vfs_set_acl+0x887/0xb00 [ 736.665531][T24906] do_set_acl+0xf6/0x190 [ 736.670306][T24906] filename_setxattr+0x2e0/0x600 [ 736.675782][T24906] path_setxattrat+0x364/0x3a0 [ 736.681077][T24906] __x64_sys_setxattr+0xbc/0xe0 [ 736.686480][T24906] do_syscall_64+0xfa/0xfa0 [ 736.691536][T24906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.697966][T24906] [ 736.697966][T24906] -> #0 (&oi->ip_xattr_sem){++++}-{4:4}: [ 736.705833][T24906] validate_chain+0xb9b/0x2140 [ 736.711147][T24906] __lock_acquire+0xab9/0xd20 [ 736.716459][T24906] lock_acquire+0x120/0x360 [ 736.721589][T24906] down_read+0x46/0x2e0 [ 736.726389][T24906] ocfs2_init_acl+0x2f9/0x720 [ 736.731599][T24906] ocfs2_mknod+0x1321/0x2050 [ 736.736718][T24906] ocfs2_create+0x1a5/0x440 [ 736.741769][T24906] path_openat+0x14f4/0x3830 [ 736.746902][T24906] do_filp_open+0x1fa/0x410 [ 736.752037][T24906] do_sys_openat2+0x121/0x1c0 [ 736.757250][T24906] __x64_sys_openat+0x138/0x170 [ 736.762662][T24906] do_syscall_64+0xfa/0xfa0 [ 736.767698][T24906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.774304][T24906] [ 736.774304][T24906] other info that might help us debug this: [ 736.774304][T24906] [ 736.784533][T24906] Chain exists of: [ 736.784533][T24906] &oi->ip_xattr_sem --> &journal->j_trans_barrier --> jbd2_handle [ 736.784533][T24906] [ 736.798632][T24906] Possible unsafe locking scenario: [ 736.798632][T24906] [ 736.806109][T24906] CPU0 CPU1 [ 736.811588][T24906] ---- ---- [ 736.817663][T24906] rlock(jbd2_handle); [ 736.821844][T24906] lock(&journal->j_trans_barrier); [ 736.829673][T24906] lock(jbd2_handle); [ 736.836290][T24906] rlock(&oi->ip_xattr_sem); [ 736.840977][T24906] [ 736.840977][T24906] *** DEADLOCK *** [ 736.840977][T24906] [ 736.849179][T24906] 8 locks held by syz.3.8473/24906: [ 736.854379][T24906] #0: ffff88807e758420 (sb_writers#27){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 736.863813][T24906] #1: ffff888055f3ed80 (&type->i_mutex_dir_key#21){+.+.}-{4:4}, at: path_openat+0x8da/0x3830 [ 736.874109][T24906] #2: ffff888055ddd100 (&ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x4640 [ 736.887868][T24906] #3: ffff888055f3c2c0 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x4640 [ 736.901977][T24906] #4: ffff888055dd9800 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_local_alloc_bits+0x125/0x24e0 [ 736.915995][T24906] #5: ffff88807e758610 (sb_internal#2){.+.+}-{0:0}, at: ocfs2_mknod+0xe93/0x2050 [ 736.925592][T24906] #6: ffff8880289880e8 (&journal->j_trans_barrier){.+.+}-{4:4}, at: ocfs2_start_trans+0x36a/0x6d0 [ 736.936312][T24906] #7: ffff88804b786950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f87/0x21c0 [ 736.946082][T24906] [ 736.946082][T24906] stack backtrace: [ 736.951979][T24906] CPU: 1 UID: 0 PID: 24906 Comm: syz.3.8473 Not tainted syzkaller #0 PREEMPT(full) [ 736.952001][T24906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 736.952014][T24906] Call Trace: [ 736.952023][T24906] [ 736.952032][T24906] dump_stack_lvl+0x189/0x250 [ 736.952056][T24906] ? __pfx_dump_stack_lvl+0x10/0x10 [ 736.952075][T24906] ? __pfx__printk+0x10/0x10 [ 736.952096][T24906] ? stack_trace_save+0x9c/0xe0 [ 736.952120][T24906] print_circular_bug+0x2ee/0x310 [ 736.952139][T24906] check_noncircular+0x134/0x160 [ 736.952159][T24906] validate_chain+0xb9b/0x2140 [ 736.952185][T24906] __lock_acquire+0xab9/0xd20 [ 736.952210][T24906] ? ocfs2_init_acl+0x2f9/0x720 [ 736.952233][T24906] lock_acquire+0x120/0x360 [ 736.952256][T24906] ? ocfs2_init_acl+0x2f9/0x720 [ 736.952280][T24906] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 736.952301][T24906] down_read+0x46/0x2e0 [ 736.952324][T24906] ? ocfs2_init_acl+0x2f9/0x720 [ 736.952348][T24906] ocfs2_init_acl+0x2f9/0x720 [ 736.952370][T24906] ? ocfs2_mknod_locked+0x148/0x250 [ 736.952393][T24906] ? __pfx_ocfs2_init_acl+0x10/0x10 [ 736.952413][T24906] ? dquot_alloc_inode+0x216/0xa50 [ 736.952441][T24906] ? ocfs2_block_signals+0x94/0xe0 [ 736.952459][T24906] ? __pfx_ocfs2_block_signals+0x10/0x10 [ 736.952477][T24906] ? __kasan_save_free_info+0x46/0x50 [ 736.952504][T24906] ? ocfs2_init_security_get+0x139/0x1a0 [ 736.952532][T24906] ocfs2_mknod+0x1321/0x2050 [ 736.952558][T24906] ? __pfx_ocfs2_mknod+0x10/0x10 [ 736.952577][T24906] ? __pfx_ocfs2_find_entry+0x10/0x10 [ 736.952610][T24906] ? __lock_acquire+0xab9/0xd20 [ 736.952642][T24906] ? look_up_lock_class+0x74/0x170 [ 736.952663][T24906] ? register_lock_class+0x51/0x320 [ 736.952687][T24906] ? __lock_acquire+0xab9/0xd20 [ 736.952713][T24906] ? __lock_acquire+0xab9/0xd20 [ 736.952739][T24906] ? do_raw_spin_lock+0x121/0x290 [ 736.952762][T24906] ? do_raw_spin_unlock+0x122/0x240 [ 736.952783][T24906] ? rcu_is_watching+0x15/0xb0 [ 736.952799][T24906] ? ocfs2_lookup+0x5b9/0x9b0 [ 736.952820][T24906] ocfs2_create+0x1a5/0x440 [ 736.952839][T24906] ? __pfx_ocfs2_lookup+0x10/0x10 [ 736.952858][T24906] ? from_kgid+0x1b0/0x650 [ 736.952879][T24906] ? __pfx_ocfs2_create+0x10/0x10 [ 736.952898][T24906] ? HAS_UNMAPPED_ID+0x11a/0x180 [ 736.952922][T24906] ? inode_permission+0x149/0x470 [ 736.952943][T24906] ? __pfx_ocfs2_permission+0x10/0x10 [ 736.952961][T24906] ? bpf_lsm_inode_create+0x9/0x20 [ 736.952982][T24906] ? __pfx_ocfs2_create+0x10/0x10 [ 736.953001][T24906] path_openat+0x14f4/0x3830 [ 736.953030][T24906] ? __pfx_path_openat+0x10/0x10 [ 736.953053][T24906] do_filp_open+0x1fa/0x410 [ 736.953068][T24906] ? __lock_acquire+0xab9/0xd20 [ 736.953091][T24906] ? __pfx_do_filp_open+0x10/0x10 [ 736.953115][T24906] ? _raw_spin_unlock+0x28/0x50 [ 736.953131][T24906] ? alloc_fd+0x64c/0x6c0 [ 736.953155][T24906] do_sys_openat2+0x121/0x1c0 [ 736.953181][T24906] ? __pfx_do_sys_openat2+0x10/0x10 [ 736.953208][T24906] ? __pfx___se_sys_futex+0x10/0x10 [ 736.953227][T24906] ? __se_sys_chdir+0x1b9/0x280 [ 736.953250][T24906] __x64_sys_openat+0x138/0x170 [ 736.953276][T24906] do_syscall_64+0xfa/0xfa0 [ 736.953297][T24906] ? lockdep_hardirqs_on+0x9c/0x150 [ 736.953316][T24906] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.953333][T24906] ? clear_bhb_loop+0x60/0xb0 [ 736.953354][T24906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.953371][T24906] RIP: 0033:0x7fda7c78eec9 [ 736.953388][T24906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 736.953403][T24906] RSP: 002b:00007fda7d54f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 736.953422][T24906] RAX: ffffffffffffffda RBX: 00007fda7c9e5fa0 RCX: 00007fda7c78eec9 [ 736.953436][T24906] RDX: 0000000000101042 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 736.953448][T24906] RBP: 00007fda7c811f91 R08: 0000000000000000 R09: 0000000000000000 [ 736.953460][T24906] R10: 00000000000000b0 R11: 0000000000000246 R12: 0000000000000000 [ 736.953471][T24906] R13: 00007fda7c9e6038 R14: 00007fda7c9e5fa0 R15: 00007ffdd92f23c8 [ 736.953491][T24906] [ 737.705578][ T6357] ocfs2: Unmounting device (7,3) on (node local)