last executing test programs: 1m51.467211984s ago: executing program 3 (id=9346): r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x8a, &(0x7f00000000c0), 0x10) 1m51.317289847s ago: executing program 3 (id=9349): r0 = socket(0x1d, 0x2, 0x6) read(r0, &(0x7f0000000140)=""/242, 0xf2) 1m51.20990133s ago: executing program 3 (id=9352): r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='smaps\x00') preadv(r0, &(0x7f0000000600)=[{&(0x7f00000036c0)=""/4092, 0xffc}], 0x1, 0x515e, 0xfffffffc) 1m51.011501355s ago: executing program 3 (id=9357): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file2\x00', 0x0, &(0x7f00000000c0)={[{@nls={'nls', 0x3d, 'iso8859-4'}}, {@barrier}, {@part={'part', 0x3d, 0x1fb38dde}}, {@force}, {@umask={'umask', 0x3d, 0x8}}, {@nodecompose}, {@part={'part', 0x3d, 0x7}}, {@nobarrier}]}, 0xfe, 0x5e5, &(0x7f0000002900)="$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") mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 1m50.569921156s ago: executing program 3 (id=9365): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x1, 0x101000) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x101, 0x0, 0x101c, 0x7, 0x6, 0x0, 0x3, 0x2}}) 1m49.563495162s ago: executing program 3 (id=9381): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) pwrite64(r0, &(0x7f0000000600)="e67ab166972ce298f4681ef5c755f60473b17b7887d68440dd9005bc69f6c3c5238bebfbce623650aeec2d13731c56a864da45a465e64d", 0x86, 0x20004) 1m49.115255234s ago: executing program 32 (id=9381): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) pwrite64(r0, &(0x7f0000000600)="e67ab166972ce298f4681ef5c755f60473b17b7887d68440dd9005bc69f6c3c5238bebfbce623650aeec2d13731c56a864da45a465e64d", 0x86, 0x20004) 1m48.948492518s ago: executing program 1 (id=9390): r0 = add_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0xfe95, 0xffffffffffffffff) keyctl$revoke(0x3, r0) 1m48.742788053s ago: executing program 1 (id=9393): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=ANY=[@ANYBLOB="8c0000001000ffff27bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="580a01002312010064001280080001007369740058000280060010000104000008000c000600000008000300ffffffff14000b00fc01000000000000000000000000000008000100", @ANYRES32, @ANYBLOB="05000008000100"/20, @ANYRES32, @ANYBLOB="060012004e22000008000400fc44"], 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 1m48.297671864s ago: executing program 1 (id=9401): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000340)={0xfffffe54, 0x0, 0x0}) 1m48.06479257s ago: executing program 1 (id=9404): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file2\x00', 0x0, &(0x7f00000000c0)={[{@nls={'nls', 0x3d, 'iso8859-4'}}, {@barrier}, {@part={'part', 0x3d, 0x1fb38dde}}, {@force}, {@umask={'umask', 0x3d, 0x8}}, {@nodecompose}, {@part={'part', 0x3d, 0x7}}, {@nobarrier}]}, 0xfe, 0x5e5, &(0x7f0000002900)="$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") mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 1m47.535202353s ago: executing program 1 (id=9411): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newtaction={0xa8, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x94, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa8}}, 0x8000) 1m46.587126967s ago: executing program 1 (id=9422): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f00000000c0)={'wlan0\x00'}) 1m46.550067608s ago: executing program 33 (id=9422): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f00000000c0)={'wlan0\x00'}) 4.891009167s ago: executing program 0 (id=11388): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000004000)=ANY=[@ANYBLOB="120100000b529708410e42416ed401020301090224000100000000090400020221f7680009050100000401ff0709050210080007030509ea81aa62725195be"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 3.764221425s ago: executing program 2 (id=11414): ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0x60000, 0xf000, 0x0, 0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1, 0xddccb000, 0xd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xdddd8000, 0x18, 0xe, 0x0, 0x4, 0x7f, 0x0, 0x80, 0xe, 0x2a, 0x6}, {0x10b002, 0x2000, 0xc, 0xfd, 0x80, 0x0, 0x3}, {0x1000, 0x0, 0xd, 0x0, 0x70, 0x80, 0x0, 0x0, 0xfd, 0x1c, 0x7, 0xa8}, {0x100026fff, 0x3000, 0xd, 0x4, 0x0, 0x8, 0x0, 0x0, 0x6, 0xfc, 0x86, 0x1}, {0x60000, 0x3000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80, 0x0, 0x4}, {0xd000, 0x41000, 0x3, 0x82, 0xfe, 0x10, 0x4, 0xe}, {0x0, 0xfffe}, {0x1, 0xfffe}, 0x50011, 0x0, 0x0, 0x1, 0x1000000000000001, 0x0, 0x900, [0x0, 0x800000000, 0x2, 0x5]}) syz_usb_connect(0x2, 0x52, &(0x7f0000000140)=ANY=[@ANYBLOB="120100036ffa680863070120ff2c0102030109024000021109400c0904080601ff8bbd020a240107000d02010205240503"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) 2.662187714s ago: executing program 0 (id=11433): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000140)="b99cdfe50723f0f0c10420008000", 0x0, 0x800064fd, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.442863344s ago: executing program 2 (id=11455): syz_mount_image$exfat(&(0x7f00000001c0), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x210c05, &(0x7f00000002c0)={[{}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@dmask={'dmask', 0x3d, 0x7}}, {@fmask={'fmask', 0x3d, 0x6}}, {@umask={'umask', 0x3d, 0x6}}, {@namecase}, {@namecase}]}, 0x1, 0x152d, &(0x7f0000006800)="$eJzs3AucTtX6OPDnWWvtMSS9TXIZ1lrP5k0uiyTJJUkuSZIkSW4JSZIjCYkht6QhCcllSC5DSC4Tk8b9fr8kJMmZJMktt2T9PxPzV6fO/5zzO538/mee7+fzfmY9s/az9rPnmfd9995z+bbL0BqNalZtQETwb8FLHxIAIBYABgLAdQAQAEDZuLJxGfPZJSb8ezthf6xHkq92Bexq4v5nbdz/rI37n7Vx/7M27n/Wxv3P2rj/WRv3n7GsbPP0/NfzI+s++P5/Vsbv//9F0kuO/WptyRu7AsT8sync////4b+Ry/3/rxX8Mxtx/7M27n9WFXu1C2D/C/DzPyvI9ndnuP9ZG/efsazsl/eCY+Hq34/+sx8Q+U/+DMT3uvRVvvrH+XePnzHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYY+xOc9VcoAMgcX+26GGOMMcYYY4wx9sfx2a52BYwxxhhjjDHGGPvPQxAgQUEAMZANYiE75AABEJM5fz3EwQ2QG26EPJAX8kF+iIcCUBA0GLBAEEIhKAxRuAmKwM1QFIpBcSgBDkpCKbgFSsOtUAZug7JwO5SDO6A8VICKUAnuhMpwF1SBu6Eq3APVoDrUgJpwL9SC+6A23A914AGoCw9CPXgI6sPD0AAegYbwKDSCx6AxPA5NoCk0g+bQ4n+U/xL0gJehJ/SCBOgNfeAV6Av9oD8MgIHwKgyC12AwvA6JMASGwhswDN6E4fAWjICRMArehtHwDoyBsTAOxkMSTICJ8C5MgvdgMkyBqTANkmE6zID3YSbMgtnwAcyBD2EuzIP5sABS4CNYCIsgFT6GxfAJpMESWArLYDmsgJWwClbDGlgL62A9bICNsAk2wxbYCttgO+yAnfAp7ILPYDfsgb3wOeyDL/7F/DN/k98VAQEFClSoMAZjMBZjMQfmwJyYE3NhLoxgBOMwDnNjbsyDeTAf5sN4jMeCWBANGiQkLISFMIpRLIJFsCgWxeJYHB06LIWlsDTeimWwDJbFslgOy2F5rIAVsBJWwspYGatgFayKVbEaVsMaWAPvxXuxN9bG2lgH62BdrJt5ewobYANsiA2xETbCxtgYm2ATbIbNsAW2wJbYElthK2yDbbAttsV22A7bY3vsgB2wI3bETtgJO2Nn7IJdsCt2w27pL2UDfBlfxl5YTfTGPtgH+2Jitv44AAfgqzgIX8PX8HVMxCE4FN/AN/BNHI6nccTFkTgKR2Fl8Q6OwbFIYjwmYRJOxIk4CSfhZJyCU3AaJuN0nIEzcCbOwln4Ac7BD/FDnIfzcAGmYAouxEWYiqm4GM9gGi7BpbgMl+MKXI6rcDWuwrW4DtfiBtyAm3ATbsEtuA234Q7cgZ+iAsDPcA/uwUTch/twP+7HA3gAD+JBTMd0PISH8DAexiN4BI/iUTyGx/EEHsdTeApP4xk8i2fxPJ7HC/hC/NcNPy22JhFEBiWUiBExIlbEihwih8gpcopcIpeIiIiIE3Eit8gt8og8Ip/IJ+JFvCgoCgojjCARZrxSiKiIiiKiiCgqioriorhwwolSopQoLUqLMqKMKCtuF+XEHaK8qCBau0qikqgs2rgq4m5RVVQV1UR1UUPUFDVFLVFL1Ba1RR1RR9QVdUU98ZCoL3pjf3xEZHSmkRiCjcVQbCKaCnn5FaqlGI6tRGvRRjwlRuIIbCdauvbiWdFBjMGO4i9iLD4vOovx2EW8KLqKbqK7eEn0EK1cT9FLTMbeoo+Yhn1FP9FfDBAzsbr4AOdkryFeF4liiBgq3hAL8E0xXLwlRoiRYpR4W4wW74gxYqwYJ8aLJDFBTBTvikniPTFZTBFTxTSRLKaLGeJ9MVPMErPFB2KO+FDMFfPEfLFApIiPxEKxSKSKj8Vi8YlIE0vEUrFMLBcrxEqxSqwWa8RasU6sFxvERrFJbBZbxFaxTWwXO8RO8anYJT4Tu8UesVd8LvaJL8R+8aU4IL4SB8VfRbr4WhwS34jD4ltxRHwnjorvxTFxXJwQJ8Up8YM4Lc6Is+KcOC9+FBfET+Ki8AIkSiGlVDKQMTKbjJXZZQ55jcwpg8zXfxknb5C55Y0yj8wr88n8Ml4WkAWllkZaSTKUhWRhGZU3ySLyZllUFpPFZQnpZElZSt4iS8tbZRl5mywrb5fl5B2yvKwgK8pK8k5ZWd4lIXJpH9VkdVlD1pT3ygS4T9aW98s68gFZVz4o68mHZH35sGwgH5EN5aOykXxMNpaPyyayqWwmm8sW8gnZUj4pW8nWso18SraVT8t28hnZXj4rO0h/+VvkedlZviC7yBdlV9lNdpc/yYvSy56yl4TeIPvIV2Rf2U/2lwPkQPmqHCRfk4Pl6zJRDpFD5RtymHxTDpdvyRFypBwl35aj5TtyjBwrx8nxMklOkBPlu3KSfE9OllPkVDlNJsvpsv/llWZL+Q/z3/2d/ME/732T3Cy3yK1ym9wud8id8lO5S+6Su+VuuVfulfvkPrlf7pcH5AF5UB6U6TJdHpKH5GF5WB6RR+RReVQek8flOXlSnpI/yNPyjDwjz8nz8ry8cPlrAAqVUFIpFagYlU3Fquwqh7pG5VTXqlzqOhVR16s4dYPKrW5UeVRelU/lV/GqgCqotDLKKlKhKqQKq6i6CS9/w6jiqoRyqqQqpW75V/JVEXWzKqqK/So/s76Ev1NfC9VCtVQtVSvVSrVRbVRb1Va1U+1Ue9VedVAdVEfVUXVSnVRn1Vl1UV1UV9VVdVfdVQ/VQ/VUPVWCSlB91Cuqr+qn+qsBaqB6VWQcw2A1WCWqRDVUDVXD1DA1XA1XI9QINUqNUqPVaDVGjVHj1DiVpJLURDVRSTVJTVaT1VQ1VSWrZDVDzVAz1Uw1W81Wc9QcNVfNVfPVfJWiUtRCtVClqlS1WC1WaWqJWqKWqWVqhVqhVqlVao1ao9apdWqD2qDS1Ga1WW1VW9V2tV3tVDvVLrVL7Va71V61V+1T+9R+tV8dUAfUQXVQpat0dUgdUofVYXVEHVFH1VF1TB1TJ9QJdUqdUqfVaXVWnVXn1Xl1QV1QF9XFjNO+QAQiUIEKYoKYIDaIDXIEOYKcQc4gV5AriASRIC6IC3IHNwZ5grxBviB/EB8UCAoGOjCBDcTlpkeDm4Iiwc1B0aBYUDwoEbigZFAquCUoHdwalAluC8oGtwflgjuC8kGFoGJQKbgzqBzcFVQJ7g6qBvcE1YLqQY2gZnBvUCu4L6gd3B/UCR4I6gYPBvWCh4L6wcNBg+CRoGHwaNAoeCxoHDweNAmaBs2C5kGLP3R970/nfdL11L10gu6t++hXdF/dT/fXA/RA/aoepF/Tg/XrOlEP0UP1G3qYflMP12/pEXqkHqXf1qP1O3qMHqvH6fE6SU/QE/W7epJ+T0/WU/RUPU0n6+l6hn5fz9Sz9Gz9gZ6jP9Rz9Tw9Xy/QKfojvVAv0qn6Y71Yf6LT9BK9VC/Ty/UKvVKv0qv1Gr1Wr9Pr9Qa9UW/Sm/UWvVVv09v1Dr1Tf6p36c/0br1H79Wf6336C71ff6kP6K/0Qf1Xna6/1of0N/qw/lYf0d/po/p7fUwf12X0SX1K/6BP6zP6rD6nz+sf9QX9k76ofcbJfcbbu1FGmRgTY2JNrMlhcpicJqfJZXKZiImYOBNncpvcJo/JY/KZfCbexJuCpqDJQIZMIVPIRE3UFDFFTFFT1BQ3xY0zzpQypUxpU9qUMWVMWVPWlDPlTHlT3lQ0Fc2d5k5zl7nL3G3uNveYe0x1U93UNDVNLVPL1Da1TR1Tx9Q1dU09U8/UN/VNA9PANDQNTSPTyDQ2jU0T08Q0M81MC9PCtDQtTSvTyrQxbUxb09a0M+1Me9PedDAdTEfT0XQynUxn09l0MV1MV9PVdDfdTQ/Tw/Q0PU2CSTB9TB/T1/Q1/U1/M9AMNIPMIDPYDDaJJtEMNUPNMDPMDDfDzQgz0ozKOFE175gxZqwZZ8abJJNkJpqJZpKZZCabyWaqmWqSTbKZYWaYmWammW1mmzlmjplr5pr5Zr5JMSlmoVloUk2qWWwWmzSTZpaapWa5WW5WmpVmtVlt1pq1Zj2sNxsRzGaz2Ww1W812s93sNDvNLrPL7Da7zV6z1+wz+8x+s98cMAfMQXPQpJt0c8gcMofNYXPEHDFHzVFzzBwzJ8wJc8qcMqfNaXPWnDXnTd7L75fexNrsNoe9xua019pc9jr7t3E+m9/G2wK2oNU2j837q9hYa4vaYra4LWGdLWlL2Vt+E5e3FWxFW8neaSvbu2yV38S17H22tr3f1rEP2Jr23l/Fde2Dtp59zNZHBLBNbUPb3Dayj9nG9nHbxDa1zWxz29Y+bdvZZ2x7+6ztYJ/7TbzQLrKr7Rq71q6zu+0ee9aes4ftt/a8/dH2tL3sQPuqHWRfs4Pt6zbRDvlNPMq+bUfbd+wYO9aOs+N/E0+102yynW5n2PftTDvrN3GK/cjOsal2rp1n59sFP8cZNaXaj+1i+4lNswEstcvscrvCrrSr/m+ty+wGu9FusrvsZ3ar3Wa32x12Z+aJsN1j99rP7T77hT1kv7EH7Ff2oD1i0+3XP8cZx3fEfmeP2u/tMXvcnrAn7Sn7g8rMzjj2k/Yne9F6C4QEJElRQDGUjWIpO+WgaygnXUu56DqK0PUURzdQbrqR8lBeykf5KZ4KUEHSZMgSUUiFqDBF6SbKLK84lSBHJakU3UKl6VYqQ7dRWbqdytEdVJ4qUEWqRHdSZbqLqtDdVJXuoWpUnWpQTbqXatF9VJvupzr0ANWlB6kePUT16WFqQI9QQ3qUGtFj1JgepybUlJpRc2pBT1BLepJaUWtqQ09RW3qa2tEz1J6epQ70HHWkv1Anep460wvUhV6krtSNutNL1INepp7UixKoN/WhV6gv9aP+NIAG0qs0iF6jwfQ6JdIQGkpv0DB6k4bTWzSCRtIoeptG0zs0hsbSOBpPSTSBJtK7NIneo8k0habSNEqm6TSD3qeZNItm0wc0hz6kuTSP5tMCSqGPaCEtolT6mBbTJ5RGS2gpLaPltIJW0ipaTWtoLa2j9bSBNtIm2kxbaCtto+20g3bSp7SLPqPdtIf20ue0j76g/fQlHaCv6CD9ldLpazpE39Bh+paO0He+F31Px+g4naCTdIp+oNN0hs7SOTpPP9IF+okukicIMRShDFUYhDFhtjA2zB7mCK8Jc4bXhrnC68JIeH0YF94Q5g5vDPOEecN8Yf4wPiwQFgx1aEIbUhiGhcLCYTS8KSwS3hwWDYuFxcMSoQtLhqXCW8LS4a1hmfC2sGx4e1guvCMsH1YIH3ugUnhnWDm8K6wS3h1WDe8Jq4XVwxphzfDesFZ4X1g7vD+sEz4QlgkfDOuFD4X1w4fDBuEjYcPw0bBR+FjYOHw8bBI2DZuFzcMW4RNhy/DJsFXYOmwTXhO2DZ8O24XPhO3DZ8MO4XM/zz+4KHP+qd/MJ4S9wz7hK+Eroff3y/nRBdGU6EfRhdFF0dTox9HF0U+iadEl0aXRZdHl0RXRldFV0dXRNdG10XXR9dEN0Y3RTVHva2YDh0446ZQLXIzL5mJddpfDXeNyumtdLnedi7jrXZy7weV2N7o8Lq/L5/K7eFfAFXTaGWcdudAVcoVd1N3kiribXVFXzBV3JZxzJV0p19y1cC1cS/eka+VauzbuKfeUe9o97Z5xz7hnXQf3nOvo/uI6ueddZ/eCe8G96Lq6bq67e8n1cBNyXXpOJrg+ro/r6/q6/q6/G+gGukFukBvsBrtEl+iGuqFumBvmhrvhboQb4Ua5UW60G+3GuDFunBvnklySm+gmuklukpvsJrupbqpLdsluhpvhZrqZrvKsS3uZ6+a6+W6+S3EpbqHLOGdMdYvdYpfm0txSt9R1PXdpu9VutVvr1rr1br3b6Da6zW6z2+q2uu1uu9vpdrpdbpfb7a+7tLHb5/a7/e6AO+AOur+6dPe1O+S+cYfdt+6I+84ddd+7Y+64O+FOulPuB3fanXFn3Tl33v3oLrif3EXnXVJkQmRi5N3IpMh7kcmRKZGpkWmR5Mj0yIzI+5GZkVmR2ZEPInMiH0bmRuZF5kcWRFIiH0UWRhZFUiMfRxZHPomkRZZElkaWRZZHVkS8L7A19IV8YR/1N/ki/mZf1BfzxX0J73xJX8rf4ktfqjvN+9t9OX+HL+8r+Ir+cd/EN/XNfHPfwj/hW/onfSvf2rfxT/m2/mnfzj/j2/tnfQf/nO/o/+I7+ed9Z/+C7+Jf9F19N9/dv+R7+Jd9T9/LJ/jevo9/xff1/Xx/P8AP9K/6Qf41P9i/7hP9ED/Uv+GH+Tf9cP+WH+FH+lExb/vRmZfIMN4n+Ql+on/XT/Lv+cl+ip/qp/lkP93P8O/7mX6Wn+0/8HP8h36un+fn+wU+xX/kF/pFPtV/7Bf7T3yaX5J509iv9Kv8ar/Gr/Xr/Hq/wW/0m/xmv8Vv9dv8dr/D7/Sf+l3+M7/b7/F7/ed+n//C7/df+gMXM/8C7Wt/yH/jD/tv/RH/nT/qv/fH/HF/wp/0p/wP/rQ/48/6c/68/9Ff8D/5i/w3a4wxxhhj/5QJV4bi1zOXbuf3/p0c8YuN+wBkh2350385n3FGuT7PpXE/ER+b8fHZXl0eyXxUq5aQkHB52zQJQeF5AJk/Ccrw868eXI6XQBt4GtpDayj9u/X3E93O0z9YP3o7QI5f5GQUlBlfWf9LAEz4nfWfeGrUwnLh2bj/x/rzAIoWvpKTHa7ES6DNz/dXWkOZv1N/3pb/oP7sXyUBtPpFTk64El+pvxQ8Cc9B+19tyRhjjDHGGGOMXdJPVOyUef2Z+Rufv3d9Hq+u5GSDK/E/uj5njDHGGGOMMcbY1fd8t+7PPNG+fetO//qgyv8o658eNIb/1Mo8+N2B9wCZn1EA8G8uCJAxkH/mUWz5U/aVePmp87dTy8/5AP53tPKPGFzlFybGGGOMMcbYH+7KSf+vP6+uVkGMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxlgW9Gf8O7GrfYyMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcbY1fZ/AgAA//80MveO") mount$9p_unix(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x8400, 0x0) 1.293311968s ago: executing program 0 (id=11456): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x10, 0x0, 0xd968d5b908ac0cde, 0x0, {0x0, 0xc}, {0x350, 0x20002}, {0xf4ef}, {0x0, 0x0, 0x7fe}, 0x1, 0x100, 0x9, 0xd614, 0x0, 0xd355, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}) 1.109956603s ago: executing program 5 (id=11461): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xd, 0x11, &(0x7f00000000c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x6, 0x0, 0xb}, {0x65}}, [@map_fd={0x18, 0x3, 0x1, 0x0, r0}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 985.725086ms ago: executing program 2 (id=11463): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x8, 0x2, 0x80000000, 0x1, 0x7ff, 0x8000}) 925.444588ms ago: executing program 5 (id=11466): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f00000006c0)={{0x1, 0x0, 0x2, 0x3, 0x9}, 0x8, 0x6}) 824.31168ms ago: executing program 2 (id=11468): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, r0, 0x0, 0x61000006, &(0x7f0000000500)) 817.36211ms ago: executing program 5 (id=11469): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffff000, 0xfffffffff0000000}) 736.240102ms ago: executing program 0 (id=11471): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x10d, 0x16, &(0x7f0000000080)=0xc, 0x4) 704.865163ms ago: executing program 5 (id=11472): r0 = socket$netlink(0x10, 0x3, 0x15) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) 701.652493ms ago: executing program 4 (id=11473): r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000240)="b1", 0x1, 0xffffffffffffffff) keyctl$get_keyring_id(0x0, r0, 0x0) 576.016366ms ago: executing program 4 (id=11475): r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'8255\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x0, 0x7, 0xf4, 0x8, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x8, 0xa0000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) 575.285266ms ago: executing program 0 (id=11485): r0 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x278, 0x358, 0x358, 0x1c0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffffd, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xfffd, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370) 514.801078ms ago: executing program 5 (id=11476): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) 492.509479ms ago: executing program 2 (id=11477): r0 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000050000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x8, 0x3}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) 476.790348ms ago: executing program 0 (id=11478): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) syz_usb_connect$uac1(0x0, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB="06"], 0x0) 468.787769ms ago: executing program 4 (id=11479): connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) rt_tgsigqueueinfo(0x0, 0x0, 0x108, &(0x7f0000000480)={0x2b, 0x0, 0x4068}) 453.39702ms ago: executing program 6 (id=11480): r0 = syz_open_dev$sg(&(0x7f0000001a00), 0xb18, 0x400) ioctl$SG_SET_DEBUG(r0, 0x227e, 0xfffffffffffffffd) 380.889351ms ago: executing program 2 (id=11481): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x48, &(0x7f0000000140)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@auto_da_alloc}, {@errors_remount}, {@nouid32}]}, 0x6, 0x50a, &(0x7f00000018c0)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 347.230472ms ago: executing program 5 (id=11482): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000ec0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6e6f626172726965722c747970653de6c0539c2c6e6c733d63703933322c706172743d3078303030303030303030303030303030332c63726561746f723d84913b122c706172743d3078303030303030303030303030303030362c6769643d", @ANYRESOCT=0x0, @ANYBLOB], 0x1, 0x61b, &(0x7f0000000680)="$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") sync() 287.012784ms ago: executing program 6 (id=11483): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x7, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x200c000}, 0x40000) 227.423085ms ago: executing program 4 (id=11484): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000100001000000000000000089a000000a20000000000a03000000000000000000070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000380001800c000100636f756e7465720004000280080003400000010714"], 0xc8}}, 0x20050800) 226.204635ms ago: executing program 6 (id=11486): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="580000000206010800000000000001000500000005000100070000000900020073797a30000000000c00078008001240fffffffe050004000000000012000300686173683a6e65742c706f7274000000050005000a"], 0x58}, 0x1, 0x0, 0x0, 0x40280d5}, 0x0) 165.445487ms ago: executing program 4 (id=11487): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi4\x00', 0x200, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000040)={0xc000003, 0xf, &(0x7f0000000080)=[0x0, 0x8, 0x5, 0x4, 0x4, 0xffffdffc, 0x809, 0x40000003, 0x42, 0x7, 0xfffffffa, 0x8, 0x6, 0x0, 0x1], 0x1, 0x20000001}) 133.394867ms ago: executing program 6 (id=11488): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r0, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 79.026149ms ago: executing program 6 (id=11489): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000e80), 0x840, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) 20.12019ms ago: executing program 6 (id=11490): r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'8255\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x0, 0x7, 0xf4, 0x8, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x8, 0xa0000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) 0s ago: executing program 4 (id=11491): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x8, &(0x7f00000006c0)={[{@numtail}, {@fat=@discard}, {@rodir}, {@numtail}, {@fat=@sys_immutable}, {@shortname_mixed}, {@shortname_win95}, {@shortname_mixed}, {@shortname_win95}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffa94}}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@uni_xlate}, {@rodir}]}, 0x1, 0x2b4, &(0x7f0000000e40)="$eJzs3cFr024YwPFn7bZ2HVt7GIPfD8QHveglbPUvKLKBWFDmOqYHIXOplsZmNLVSEbeb1/0dw6MnBfUf2GU38SpeiiB42UGsrEm2rqu4ztVM8/1Aydv3fZ/kTd60PAk0bS5vPiwXXaNo1iSWVImJbMiuSGav5Bvyl7F2eVQ6bcjl8a/vz926fed6Lp+fW1Cdzy1eyarq5Pk3j5++uPCuNr70cvJ1QrYzd5tfsh+3p7f/a35fDNbuiJi64jg1c8W2dLXklg3Vm7ZlupaWKq5VrWlHe9F21tYaalZWJ1JrVct11aw0tGw1tOZordpQ875ZqqhhGDqRkqiJ9x1R2FpYMHMDGQzCMNarslrNmfGejYWtPzEoAABwtjSXN+Nh5P8PSq6WXK04h/L7o/l/TPrI/0Uinf/3j/w/Cvby/5T/+T2M/B8AAAAAAAAAAAAAAAAAAAAAgL/BbquVbrVa6WAZvBIikhSR4H3Y48RgMP/R1vHDvaSI/bxeqBe8pdeeK0pJbLFkZkTkW/t88Hnl+Wv5uRltm5a39rofv14vxCURxAcyveNnvXjtjF+XEUl1bj8raZnqHZ/tEV8vjMqli62Ev2VLDEnLzj1xxJbV9nl9EP9sVvXqjXxX/Fi7HwAAAAAA/wJD92W6r9/b7YYGjw3pavcqD+4PSPoX9we6rq+H5f/h8PYbAAAAAIAocRtPyqZtW9UIFIL/PziVFYZ/6JLH7TwsIn7Nq7MyFweFoQ1vVo42xUTkpGuO/94sfxaRQzVToU/3aRQ+PfKO9X7Nh593XpoI7UsJAAAAwEAESf9Q35GFnYEMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAACACDruw8OC/id59ljH5uLh7CUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwNvwIAAD//5jbFjk=") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x22042, 0x20) kernel console output (not intermixed with test programs): capacity change from 0 to 512 [ 779.606620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 779.633076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 779.675697][T24793] 8021q: adding VLAN 0 to HW filter on device team0 [ 779.697727][T25037] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 2: comm syz.2.9486: invalid block [ 779.722319][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 779.772126][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 779.821982][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.829144][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 779.866985][T25037] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.9486: invalid indirect mapped block 10 (level 1) [ 779.900511][T25055] loop4: detected capacity change from 0 to 256 [ 779.921397][T25037] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.9486: invalid indirect mapped block 8 (level 1) [ 780.007165][T25037] EXT4-fs (loop2): 1 truncate cleaned up [ 780.042925][T25037] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 780.048555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 780.085198][T25055] FAT-fs (loop4): Directory bread(block 64) failed [ 780.096761][T25055] FAT-fs (loop4): Directory bread(block 65) failed [ 780.103456][T25055] FAT-fs (loop4): Directory bread(block 66) failed [ 780.126266][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 780.160614][T25055] FAT-fs (loop4): Directory bread(block 67) failed [ 780.167286][T25055] FAT-fs (loop4): Directory bread(block 68) failed [ 780.175811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 780.214908][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.222078][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 780.230626][T25055] FAT-fs (loop4): Directory bread(block 69) failed [ 780.264677][T25055] FAT-fs (loop4): Directory bread(block 70) failed [ 780.295691][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 780.299823][T25055] FAT-fs (loop4): Directory bread(block 71) failed [ 780.337794][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 780.353201][T25055] FAT-fs (loop4): Directory bread(block 72) failed [ 780.375767][T25055] FAT-fs (loop4): Directory bread(block 73) failed [ 780.389608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 780.456844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 780.512771][ T4540] Bluetooth: hci3: command 0x0419 tx timeout [ 780.524360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 780.592817][ T9567] Bluetooth: hci1: command 0x040f tx timeout [ 780.653034][T10628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 780.683730][T10628] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 780.754101][T10628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 780.785233][T10628] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 780.852129][T10628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 780.895922][T10628] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 780.952733][T24793] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 781.266119][T24866] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 781.420492][T24866] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 781.496005][T24866] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 781.575092][T24866] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 781.938622][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 781.946228][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 782.018988][T24793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 782.036841][T25111] comedi comedi2: board detection failed [ 782.161723][T24866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 782.239129][T10628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 782.257867][T10628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 782.313796][T24866] 8021q: adding VLAN 0 to HW filter on device team0 [ 782.387834][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 782.425253][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 782.460907][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.470126][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 782.576124][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 782.623449][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 782.706676][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 782.752427][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.759566][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 782.813759][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 782.828983][ T4540] Bluetooth: hci1: command 0x0419 tx timeout [ 782.894461][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 782.942042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 782.958773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 783.017349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 783.062544][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 783.124422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 783.167813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 783.203149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 783.252779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 783.273964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 783.311214][T24866] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 783.388076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 783.407794][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 783.435686][T25167] netlink: 'syz.2.9533': attribute type 32 has an invalid length. [ 783.494341][T24793] device veth0_vlan entered promiscuous mode [ 783.542269][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 783.586134][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 783.648368][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 783.678328][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 783.762615][T24793] device veth1_vlan entered promiscuous mode [ 783.892928][T10628] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 783.904186][T10628] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 783.947472][T10628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 783.970785][T25186] libceph: resolve '0..' (ret=-3): failed [ 783.993214][T10628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 784.036072][T24793] device veth0_macvtap entered promiscuous mode [ 784.087476][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 784.094982][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 784.139768][ T1335] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 784.175237][T24793] device veth1_macvtap entered promiscuous mode [ 784.207238][T24866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 784.266853][T24793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 784.313599][T24793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.353972][T24793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 784.396439][ T1335] usb 3-1: Using ep0 maxpacket: 8 [ 784.402890][T24793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.460730][T24793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 784.519019][T24793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.529309][ T1335] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 784.561919][ T1335] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 784.571561][T24793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 784.603370][ T1335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.611687][T24793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.643549][ T1335] usb 3-1: config 0 descriptor?? [ 784.650074][T24793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 784.671665][T10628] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 784.690090][ T1335] usb 3-1: selecting invalid altsetting 1 [ 784.708133][T10628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 784.716560][ T1335] usb 3-1: Can not set alternate setting to 1, error: -22 [ 784.755343][ T1335] synaptics_usb: probe of 3-1:0.0 failed with error -22 [ 784.781169][T24793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 784.856511][T24793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.894997][T24793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 784.930678][ T9567] usb 3-1: USB disconnect, device number 21 [ 784.989613][T24793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.044163][T24793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 785.087681][T24793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.121840][T24793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 785.188396][T24793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.209825][T24793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 785.254825][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 785.282674][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 785.313947][T24793] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.345862][ T4537] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 785.354610][T24793] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.395966][T24793] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.428852][T24793] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.680042][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 785.704176][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 785.733937][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 785.753438][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 785.794820][T24866] device veth0_vlan entered promiscuous mode [ 785.813534][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 785.830850][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 785.872221][T24866] device veth1_vlan entered promiscuous mode [ 785.883682][ T4537] usb 1-1: not running at top speed; connect to a high speed hub [ 785.906049][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 785.916455][T17167] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 785.932831][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.948917][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 785.962366][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 785.980530][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 786.011158][ T4537] usb 1-1: config 1 interface 0 altsetting 4 endpoint 0x1 has invalid maxpacket 624, setting to 64 [ 786.011186][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 786.050455][ T4537] usb 1-1: config 1 interface 0 has no altsetting 0 [ 786.073898][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 786.093607][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 786.095250][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 786.143632][T24866] device veth0_macvtap entered promiscuous mode [ 786.163744][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 786.173612][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 786.213762][T24866] device veth1_macvtap entered promiscuous mode [ 786.247843][T25240] ieee802154 phy0 wpan0: encryption failed: -90 [ 786.268694][ T4537] usb 1-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 786.288680][ T4537] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.300568][T17167] usb 3-1: config index 0 descriptor too short (expected 65152, got 36) [ 786.313508][ T4537] usb 1-1: Product: syz [ 786.317733][ T4537] usb 1-1: Manufacturer: syz [ 786.333740][T17167] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 786.353897][ T4537] usb 1-1: SerialNumber: syz [ 786.394393][T24866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 786.408014][T25219] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 786.423536][T25246] netlink: 'syz.4.9558': attribute type 2 has an invalid length. [ 786.434206][T24866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.454355][T25246] netlink: 'syz.4.9558': attribute type 1 has an invalid length. [ 786.464922][T24866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 786.480723][T24866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.512046][T24866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 786.532834][T24866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.544244][T24866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 786.555241][T17167] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 786.577743][T17167] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.586865][T24866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.597275][T17167] usb 3-1: Product: syz [ 786.601744][T17167] usb 3-1: Manufacturer: syz [ 786.606361][T17167] usb 3-1: SerialNumber: syz [ 786.612578][T24866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 786.641905][T24866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.656357][T17167] rtl8150 3-1:1.0: couldn't find required endpoints [ 786.663097][T17167] rtl8150: probe of 3-1:1.0 failed with error -5 [ 786.703788][T24866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 786.725154][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 786.745112][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 786.761888][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 786.784989][ T4537] usblp0: Disabling reads from problematic bidirectional printer [ 786.834504][ T4537] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 26 if 0 alt 4 proto 1 vid 0x03F0 pid 0x0004 [ 786.864335][ T4537] usb 1-1: USB disconnect, device number 26 [ 786.893417][ T4537] usblp0: removed [ 786.950223][ T8607] usb 3-1: USB disconnect, device number 22 [ 786.990364][ T4549] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.009767][ T4549] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19971 - 0 [ 787.053290][T25258] netlink: 'syz.4.9560': attribute type 5 has an invalid length. [ 787.077796][T24866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 787.090664][T24866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.110370][T24866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 787.123951][T24866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.134261][T24866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 787.145962][T24866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.155809][T24866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 787.175658][T24866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.207555][T24866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 787.237409][T24866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.269430][T24866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 787.333752][ T4549] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.387432][ T4549] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19971 - 0 [ 787.432614][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 787.460115][T25282] openvswitch: netlink: Actions may not be safe on all matching packets [ 787.475397][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 787.510020][T24866] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.518790][T24866] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.573140][T24866] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.581920][T24866] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.704467][ T4549] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.745056][ T4549] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19971 - 0 [ 787.911181][ T4549] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.972010][ T4549] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19971 - 0 [ 788.222247][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 788.259706][T25312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9582'. [ 788.280479][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 788.322455][T25312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9582'. [ 788.371624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 788.411133][T25316] loop0: detected capacity change from 0 to 764 [ 788.448308][T10628] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 788.501332][T10628] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 788.568133][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 788.899629][T25335] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9423'. [ 789.001045][T25344] netlink: 'syz.0.9592': attribute type 4 has an invalid length. [ 789.616171][T17167] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 789.764182][T25392] loop2: detected capacity change from 0 to 512 [ 789.803744][T25385] loop0: detected capacity change from 0 to 4096 [ 789.839042][T25392] EXT4-fs (loop2): Ignoring removed nobh option [ 789.872909][T17167] usb 6-1: Using ep0 maxpacket: 8 [ 789.927839][T25385] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodelalloc,,errors=continue. Quota mode: writeback. [ 789.982246][T25392] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,grpquota,,errors=continue. Quota mode: writeback. [ 790.038610][T25392] ext4 filesystem being mounted at /1881/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 790.054922][T17167] usb 6-1: unable to get BOS descriptor or descriptor too short [ 790.140482][T17167] usb 6-1: config 4 has an invalid interface number: 112 but max is 0 [ 790.154841][T17167] usb 6-1: config 4 has no interface number 0 [ 790.171853][T17167] usb 6-1: config 4 interface 112 has no altsetting 0 [ 790.226372][T17167] usb 6-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice= 3.40 [ 790.280572][T17167] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.643225][T17167] usb 6-1: string descriptor 0 read error: -71 [ 790.674316][T17167] pcwd_usb: The device isn't a Human Interface Device [ 790.728962][T17167] usb 6-1: USB disconnect, device number 2 [ 791.161505][ T4549] device hsr_slave_0 left promiscuous mode [ 791.178089][ T4537] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 791.208808][ T4549] device hsr_slave_1 left promiscuous mode [ 791.235726][ T4549] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 791.263750][ T4549] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 791.306746][ T4549] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 791.314235][ T4549] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 791.353810][ T4549] device bridge_slave_1 left promiscuous mode [ 791.386748][ T4549] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.428163][ T4549] device bridge_slave_0 left promiscuous mode [ 791.434503][ T4549] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.628192][ T4537] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 791.648714][ T4537] usb 5-1: too many endpoints for config 2 interface 0 altsetting 78: 39, using maximum allowed: 30 [ 791.691231][ T4537] usb 5-1: config 2 interface 0 altsetting 78 has 0 endpoint descriptors, different from the interface descriptor's value: 39 [ 791.732065][ T4537] usb 5-1: config 2 interface 0 has no altsetting 0 [ 791.797358][ T4549] device veth1_macvtap left promiscuous mode [ 791.813007][ T4549] device veth0_macvtap left promiscuous mode [ 791.819151][ T4549] device veth1_vlan left promiscuous mode [ 791.905236][ T4549] device veth0_vlan left promiscuous mode [ 791.928800][ T4537] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 791.952163][ T4537] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.979480][ T4537] usb 5-1: Product: syz [ 791.991048][ T4537] usb 5-1: Manufacturer: syz [ 792.007554][ T4537] usb 5-1: SerialNumber: syz [ 792.057623][ T4537] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 792.130738][ T4537] usb 5-1: selecting invalid altsetting 0 [ 792.170024][ T4537] usb 5-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 792.321520][ T4537] usb 5-1: USB disconnect, device number 8 [ 792.365196][ T1335] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 792.639195][ T1335] usb 6-1: Using ep0 maxpacket: 8 [ 792.827857][ T1335] usb 6-1: unable to get BOS descriptor or descriptor too short [ 792.933404][ T1335] usb 6-1: config 86 has an invalid interface number: 78 but max is 0 [ 792.953114][ T1335] usb 6-1: config 86 has no interface number 0 [ 792.982574][ T1335] usb 6-1: config 86 interface 78 altsetting 128 bulk endpoint 0x88 has invalid maxpacket 1024 [ 792.993286][ T1335] usb 6-1: config 86 interface 78 altsetting 128 bulk endpoint 0x5 has invalid maxpacket 1023 [ 793.022053][ T1335] usb 6-1: config 86 interface 78 has no altsetting 0 [ 793.037387][T25509] loop6: detected capacity change from 0 to 32768 [ 793.062097][T25509] XFS: ikeep mount option is deprecated. [ 793.086087][T25509] XFS (loop6): Mounting V5 Filesystem [ 793.136870][T25509] XFS (loop6): Ending clean mount [ 793.148153][T25509] XFS (loop6): Quotacheck needed: Please wait. [ 793.194793][T25509] XFS (loop6): Quotacheck: Done. [ 793.210585][ T1335] usb 6-1: New USB device found, idVendor=0bfd, idProduct=0121, bcdDevice=a4.7d [ 793.222200][ T1335] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.241349][ T1335] usb 6-1: Product: syz [ 793.250653][ T1335] usb 6-1: Manufacturer: syz [ 793.260861][ T1335] usb 6-1: SerialNumber: syz [ 793.269886][T24866] XFS (loop6): Unmounting Filesystem [ 793.306773][T25515] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 793.314151][T25515] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 793.430469][ T4549] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 793.522163][ T4549] bond0 (unregistering): Released all slaves [ 793.616451][T25525] netdevsim netdevsim4: Direct firmware load for ..€ failed with error -2 [ 793.669536][T25525] netdevsim netdevsim4: Falling back to sysfs fallback for: ..€ [ 793.680870][ T1335] kvaser_usb 6-1:86.78: Cannot get software info, error -71 [ 793.688528][ T1335] kvaser_usb: probe of 6-1:86.78 failed with error -71 [ 793.734137][ T1335] usb 6-1: USB disconnect, device number 3 [ 793.737272][T25535] libceph: resolve '0..' (ret=-3): failed [ 794.055753][T25548] loop4: detected capacity change from 0 to 1024 [ 794.074143][T25550] loop2: detected capacity change from 0 to 256 [ 794.146433][T25550] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 794.210037][T25548] hfsplus: keylen 2050 too large [ 794.265367][ T3519] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 794.484314][T25568] loop2: detected capacity change from 0 to 1024 [ 794.536761][ T3519] usb 7-1: Using ep0 maxpacket: 8 [ 794.595514][T25568] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,norecovery,min_batch_time=0x0000000010000005,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,nolazytime,resgid=0x0000000000000000,noload,jqfmt=vfsold,barrier=0x0000000000000007,barrier=0x00,errors=continue. Quota mode: none. [ 794.643683][T25579] loop5: detected capacity change from 0 to 256 [ 794.666813][ T3519] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 794.687362][T25579] exfat: Deprecated parameter 'namecase' [ 794.693097][T25579] exfat: Deprecated parameter 'namecase' [ 794.702550][T25579] exfat: Deprecated parameter 'namecase' [ 794.751536][T25579] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 794.869601][ T3519] usb 7-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 794.895349][ T3519] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.914379][ T3519] usb 7-1: Product: syz [ 794.918599][ T3519] usb 7-1: Manufacturer: syz [ 794.959729][ T3519] usb 7-1: SerialNumber: syz [ 795.029496][T25544] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 795.392536][ T3519] usb 7-1: MIDIStreaming interface descriptor not found [ 795.470985][ T3519] usb 7-1: USB disconnect, device number 2 [ 795.703943][T25623] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9697'. [ 795.914033][ T4597] udevd[4597]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 796.181036][T25653] loop2: detected capacity change from 0 to 256 [ 796.274882][T25653] FAT-fs (loop2): Directory bread(block 64) failed [ 796.354963][T25653] FAT-fs (loop2): Directory bread(block 65) failed [ 796.361655][T25653] FAT-fs (loop2): Directory bread(block 66) failed [ 796.409746][T25653] FAT-fs (loop2): Directory bread(block 67) failed [ 796.416418][T25653] FAT-fs (loop2): Directory bread(block 68) failed [ 796.464917][T25653] FAT-fs (loop2): Directory bread(block 69) failed [ 796.483406][T25672] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9717'. [ 796.492546][T25672] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9717'. [ 796.513100][T25653] FAT-fs (loop2): Directory bread(block 70) failed [ 796.526266][T25653] FAT-fs (loop2): Directory bread(block 71) failed [ 796.557011][T25653] FAT-fs (loop2): Directory bread(block 72) failed [ 796.566116][T25672] netlink: 5 bytes leftover after parsing attributes in process `syz.6.9717'. [ 796.579872][T25653] FAT-fs (loop2): Directory bread(block 73) failed [ 797.150654][T25713] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9733'. [ 797.203745][T25713] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9733'. [ 797.258404][T25713] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9733'. [ 797.338997][ T4177] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 797.564397][T25729] loop4: detected capacity change from 0 to 4096 [ 797.595712][ T4177] usb 7-1: Using ep0 maxpacket: 8 [ 797.694233][ T4537] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 797.715146][T25743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9745'. [ 797.759020][ T4177] usb 7-1: config 2 has an invalid interface number: 241 but max is 0 [ 797.777610][ T4177] usb 7-1: config 2 has no interface number 0 [ 797.783788][ T4177] usb 7-1: config 2 interface 241 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 797.826300][ T4177] usb 7-1: config 2 interface 241 has no altsetting 0 [ 798.043067][T25749] IPv6: NLM_F_CREATE should be specified when creating new route [ 798.046812][ T4177] usb 7-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=b3.a3 [ 798.081975][ T4177] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.141541][ T4537] usb 3-1: config 0 has an invalid interface number: 147 but max is 0 [ 798.149775][ T4537] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 798.166745][ T4177] usb 7-1: Product: syz [ 798.185435][ T4177] usb 7-1: Manufacturer: syz [ 798.202998][ T4177] usb 7-1: SerialNumber: syz [ 798.213788][ T4537] usb 3-1: config 0 has no interface number 0 [ 798.251987][ T4537] usb 3-1: config 0 interface 147 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 798.282173][ T4177] ti_usb_3410_5052 7-1:2.241: TI USB 3410 1 port adapter converter detected [ 798.327519][ T4177] ti_usb_3410_5052 7-1:2.241: missing endpoints [ 798.334486][ T4537] usb 3-1: config 0 interface 147 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 798.408710][ T4537] usb 3-1: config 0 interface 147 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 798.513956][ T8607] usb 7-1: USB disconnect, device number 3 [ 798.586079][T25767] loop4: detected capacity change from 0 to 64 [ 798.630279][T25767] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 798.654915][ T4537] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.03 [ 798.675009][ T4537] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.718181][ T4537] usb 3-1: Product: syz [ 798.754181][ T4537] usb 3-1: Manufacturer: syz [ 798.758940][ T4537] usb 3-1: SerialNumber: syz [ 798.769133][ T21] nvmet: connect request for invalid subsystem n! [ 798.799120][T25762] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "n" [ 798.805632][ T4537] usb 3-1: config 0 descriptor?? [ 798.847532][T25728] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 798.900093][ T4537] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 799.091903][ T4537] usb 3-1: USB disconnect, device number 23 [ 799.094386][ T4563] usb 3-1: Failed to submit usb control message: -71 [ 799.148470][ T4563] usb 3-1: unable to send the bmi data to the device: -71 [ 799.200441][ T4563] usb 3-1: unable to get target info from device [ 799.206824][ T4563] usb 3-1: could not get target info (-71) [ 799.239751][T25790] openvswitch: netlink: Actions may not be safe on all matching packets [ 799.268668][ T4563] usb 3-1: could not probe fw (-71) [ 799.297388][T25796] xt_TCPMSS: Only works on TCP SYN packets [ 799.488573][T25803] loop0: detected capacity change from 0 to 1024 [ 799.524028][T25805] bad cache= option: nonw [ 799.524028][T25805] [ 799.570405][T25805] CIFS: VFS: bad cache= option: nonw [ 799.614401][T25810] netlink: 'syz.5.9769': attribute type 1 has an invalid length. [ 799.692297][T25810] netlink: 224 bytes leftover after parsing attributes in process `syz.5.9769'. [ 799.719943][T25816] loop4: detected capacity change from 0 to 1024 [ 799.737140][T25803] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c118, mo2=0002] [ 799.755079][T25803] System zones: 0-1, 3-12 [ 799.783789][T25803] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_dev=0x0000000000000007,debug,nodioread_nolock,min_batch_time=0x0000000000000006,debug_want_extra_isize=0x0000000000000080,grpquota,nodelalloc,jqfmt=vfsv1,norecovery,,errors=continue. Quota mode: writeback. [ 799.869657][T25816] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #3: comm syz.4.9770: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 799.897312][T25816] EXT4-fs error (device loop4): ext4_quota_enable:6447: comm syz.4.9770: Bad quota inode: 3, type: 0 [ 799.959827][T25816] EXT4-fs warning (device loop4): ext4_enable_quotas:6488: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 800.040305][T25827] AppArmor: change_hat: Invalid input 'hj2wFÛ' [ 800.089044][T25816] EXT4-fs (loop4): mount failed [ 800.340792][T25816] 9pnet: Insufficient options for proto=fd [ 800.366154][ T3519] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 800.382526][T25853] loop5: detected capacity change from 0 to 256 [ 800.667654][T25870] loop4: detected capacity change from 0 to 64 [ 800.804758][ T3519] usb 3-1: unable to get BOS descriptor or descriptor too short [ 800.850721][ T3519] usb 3-1: not running at top speed; connect to a high speed hub [ 800.954507][ T3519] usb 3-1: config 8 has an invalid interface number: 43 but max is 1 [ 800.962774][ T3519] usb 3-1: config 8 has an invalid interface number: 35 but max is 1 [ 800.965568][T25885] netlink: 'syz.0.9796': attribute type 1 has an invalid length. [ 800.995830][ T3519] usb 3-1: config 8 has no interface number 0 [ 801.012216][ T3519] usb 3-1: config 8 has no interface number 1 [ 801.024199][ T3519] usb 3-1: config 8 interface 43 altsetting 17 has an invalid endpoint with address 0xE5, skipping [ 801.055800][ T3519] usb 3-1: config 8 interface 43 has no altsetting 0 [ 801.079606][ T3519] usb 3-1: config 8 interface 35 has no altsetting 0 [ 801.216643][T25897] ip_tables: iptables: counters copy to user failed while replacing table [ 801.264907][ T3519] usb 3-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 801.313012][ T3519] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.352255][ T3519] usb 3-1: Product: syz [ 801.379041][ T3519] usb 3-1: Manufacturer: syz [ 801.396993][ T3519] usb 3-1: SerialNumber: syz [ 801.764475][ T3519] ums-alauda 3-1:8.43: USB Mass Storage device detected [ 801.906794][ T3519] hub 3-1:8.35: Invalid hub with more than one config or interface [ 801.920004][ T3519] hub: probe of 3-1:8.35 failed with error -22 [ 801.960131][ T3519] ums-alauda 3-1:8.35: USB Mass Storage device detected [ 802.082309][ T3519] usb 3-1: USB disconnect, device number 24 [ 802.228132][T25921] loop5: detected capacity change from 0 to 8192 [ 802.330137][T25921] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 802.415507][T25921] REISERFS (device loop5): using ordered data mode [ 802.452824][T25921] reiserfs: using flush barriers [ 802.513497][T25921] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 802.547484][T25959] loop0: detected capacity change from 0 to 1024 [ 802.587460][T25921] REISERFS (device loop5): checking transaction log (loop5) [ 802.641203][T25921] REISERFS (device loop5): Using r5 hash to sort names [ 802.682689][T25921] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 802.849413][T25974] xt_recent: hitcount (65535) is larger than allowed maximum (255) [ 803.214997][T25941] loop6: detected capacity change from 0 to 32768 [ 803.541076][T26009] block device autoloading is deprecated and will be removed. [ 803.909498][T26037] loop5: detected capacity change from 0 to 256 [ 804.239363][T26064] No such timeout policy "syz1" [ 804.522846][T26085] netlink: 'syz.6.9873': attribute type 29 has an invalid length. [ 804.559734][T26085] netlink: 'syz.6.9873': attribute type 6 has an invalid length. [ 804.575228][T26085] netlink: 'syz.6.9873': attribute type 15 has an invalid length. [ 804.588141][T26088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9876'. [ 804.613011][T26085] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9873'. [ 804.645261][T26091] netlink: 64 bytes leftover after parsing attributes in process `syz.5.9877'. [ 804.659880][T26091] netlink: 64 bytes leftover after parsing attributes in process `syz.5.9877'. [ 804.720060][T26096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9878'. [ 804.828436][T26101] xt_CT: No such helper "syz0" [ 804.833881][ T21] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 805.029555][T26103] loop6: detected capacity change from 0 to 8192 [ 805.103364][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 805.109397][T26103] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 805.115826][T26119] netlink: 256 bytes leftover after parsing attributes in process `syz.0.9885'. [ 805.121568][T26103] REISERFS (device loop6): using ordered data mode [ 805.134889][T26103] reiserfs: using flush barriers [ 805.141244][T26103] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 805.162091][T26103] REISERFS (device loop6): checking transaction log (loop6) [ 805.179162][T26103] REISERFS (device loop6): Using r5 hash to sort names [ 805.190320][T26103] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 805.233150][ T21] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 805.242264][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.318042][ T21] usb 5-1: config 0 descriptor?? [ 805.390956][ T21] as10x_usb: device has been detected [ 805.409660][ T21] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 805.474780][ T21] usb 5-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)... [ 805.542419][ T21] as10x_usb: error during firmware upload part1 [ 805.581697][ T21] Registered device nBox DVB-T Dongle [ 805.622069][T26148] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 805.643416][ T4537] usb 5-1: USB disconnect, device number 9 [ 805.696845][ T4537] Unregistered device nBox DVB-T Dongle [ 805.698226][ T4537] as10x_usb: device has been disconnected [ 805.996823][T26176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9909'. [ 806.119971][T26184] ip6t_srh: unknown srh match flags 4001 [ 806.369637][T26199] netlink: 72 bytes leftover after parsing attributes in process `syz.0.9921'. [ 806.418460][ T4537] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 806.456430][T26205] loop5: detected capacity change from 0 to 256 [ 806.585981][T26205] exFAT-fs (loop5): Invalid boot checksum (boot checksum : 0x1119ac00, checksum : 0x901ac400) [ 806.656052][T26205] exFAT-fs (loop5): invalid boot region [ 806.661692][T26205] exFAT-fs (loop5): failed to recognize exfat type [ 806.698708][ T4537] usb 3-1: Using ep0 maxpacket: 16 [ 806.865757][ T4537] usb 3-1: config index 0 descriptor too short (expected 65, got 36) [ 806.886615][ T4537] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 806.919391][ T4537] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 807.029331][ T4537] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 807.092879][ T4537] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.149115][ T4537] usb 3-1: config 0 descriptor?? [ 807.158283][T26229] set match dimension is over the limit! [ 807.250275][ T4537] pxrc 3-1:0.0: Could not find endpoint [ 807.256687][ T4537] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 807.295139][T26233] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9937'. [ 807.521322][ T4540] usb 3-1: USB disconnect, device number 25 [ 807.764810][T26257] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 807.914775][ T4537] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 807.928680][T26263] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9952'. [ 808.218161][ T4537] usb 1-1: Using ep0 maxpacket: 8 [ 808.380181][ T4537] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 808.409388][ T4537] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 808.421348][ T4537] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 808.460973][ T4537] usb 1-1: config 0 interface 0 has no altsetting 0 [ 808.515859][ T4537] usb 1-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 3.00 [ 808.536547][ T21] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 808.547593][ T4537] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.591617][ T4537] usb 1-1: config 0 descriptor?? [ 808.641250][ T4537] usbhid 1-1:0.0: can't add hid device: -22 [ 808.660034][ T4537] usbhid: probe of 1-1:0.0 failed with error -22 [ 808.891672][ T4537] usb 1-1: USB disconnect, device number 27 [ 808.957416][ T21] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 808.994017][ T3519] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 809.006603][ T21] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 809.036511][ T21] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 809.054442][ T21] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 809.065476][ T21] usb 7-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 809.080852][ T21] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.119121][ T21] usb 7-1: config 0 descriptor?? [ 809.135317][ T26] audit: type=1326 audit(1786424677.900:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26329 comm="syz.4.9983" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34660b5019 code=0x7ffc0000 [ 809.202554][ T26] audit: type=1326 audit(1786424677.919:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26329 comm="syz.4.9983" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34660b5019 code=0x7ffc0000 [ 809.226842][ C0] vkms_vblank_simulate: vblank timer overrun [ 809.252617][ T3519] usb 3-1: Using ep0 maxpacket: 16 [ 809.260065][T26335] tc_dump_action: action bad kind [ 809.270412][ T26] audit: type=1326 audit(1786424677.919:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26329 comm="syz.4.9983" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f34660b5019 code=0x7ffc0000 [ 809.294456][ C0] vkms_vblank_simulate: vblank timer overrun [ 809.360622][ T26] audit: type=1326 audit(1786424677.947:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26329 comm="syz.4.9983" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34660b5019 code=0x7ffc0000 [ 809.382594][ T3519] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 809.384910][ C0] vkms_vblank_simulate: vblank timer overrun [ 809.420943][ T21] hdpvr 7-1:0.0: firmware version 0x0 dated [ 809.427392][ T21] hdpvr 7-1:0.0: untested firmware, the driver might not work. [ 809.437905][ T3519] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 809.521988][ T26] audit: type=1326 audit(1786424677.947:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26329 comm="syz.4.9983" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34660b5019 code=0x7ffc0000 [ 809.546221][ C0] vkms_vblank_simulate: vblank timer overrun [ 809.619174][ T3519] usb 3-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=82.8f [ 809.641668][ T3519] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.662006][ T21] hdpvr 7-1:0.0: device init failed [ 809.667395][ T21] hdpvr: probe of 7-1:0.0 failed with error -12 [ 809.689017][ T3519] usb 3-1: Product: syz [ 809.693332][ T3519] usb 3-1: Manufacturer: syz [ 809.704414][ T3519] usb 3-1: SerialNumber: syz [ 809.725209][ T21] usb 7-1: USB disconnect, device number 4 [ 809.755641][ T3519] usb 3-1: config 0 descriptor?? [ 809.821726][ T3519] kobil_sct 3-1:0.0: KOBIL USB smart card terminal converter detected [ 809.833464][T26362] loop5: detected capacity change from 0 to 512 [ 809.872473][ T3519] usb 3-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 809.970070][T26362] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #15: comm syz.5.9997: iget: bad i_size value: 38620345925642 [ 810.024081][T26372] loop0: detected capacity change from 0 to 2048 [ 810.039306][T26362] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.9997: couldn't read orphan inode 15 (err -117) [ 810.042769][ T21] usb 3-1: USB disconnect, device number 26 [ 810.074061][T26362] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 810.129698][T26376] loop4: detected capacity change from 0 to 512 [ 810.159459][T26372] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 810.168894][ T21] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 810.195727][ T21] kobil_sct 3-1:0.0: device disconnected [ 810.267156][T26376] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,init_itable,quota,,errors=continue. Quota mode: writeback. [ 810.294740][T26376] ext4 filesystem being mounted at /2048/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 810.696345][ T4540] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 810.805448][T26405] loop2: detected capacity change from 0 to 2048 [ 810.868139][T26405] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=18881, location=18881 [ 810.932211][T26405] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 810.964422][T26416] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 810.987099][ T4540] usb 7-1: Using ep0 maxpacket: 32 [ 811.134055][T26419] loop4: detected capacity change from 0 to 4096 [ 811.141365][ T4540] usb 7-1: config 0 has an invalid interface number: 35 but max is 0 [ 811.154585][ T4540] usb 7-1: config 0 has no interface number 0 [ 811.161784][ T4540] usb 7-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 811.197306][ T4540] usb 7-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 811.284762][T26419] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 811.346997][ T26] audit: type=1800 audit(1786424679.951:54): pid=26419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.10019" name=2E02 dev="loop4" ino=33 res=0 errno=0 [ 811.486721][ T4540] usb 7-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 811.525890][ T4540] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.533933][ T4540] usb 7-1: Product: syz [ 811.563681][ T4540] usb 7-1: Manufacturer: syz [ 811.568381][ T4540] usb 7-1: SerialNumber: syz [ 811.573328][ T4537] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 811.603570][ T4540] usb 7-1: config 0 descriptor?? [ 811.653034][T26410] loop5: detected capacity change from 0 to 32768 [ 811.818957][T26448] ieee802154 phy0 wpan0: encryption failed: -22 [ 811.870429][ T4537] usb 1-1: Using ep0 maxpacket: 32 [ 811.909308][ T4540] radio-si470x 7-1:0.35: this is not a si470x device. [ 811.986903][T26456] dlm: non-version read from control device 8192 [ 812.032353][ T4537] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 812.074920][ T4537] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 812.091504][T26461] xt_TCPMSS: Only works on TCP SYN packets [ 812.108484][ T4537] usb 1-1: New USB device found, idVendor=046d, idProduct=c11c, bcdDevice= 0.40 [ 812.134240][ T4537] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.143360][ T4540] radio-raremono 7-1:0.35: this is not Thanko's Raremono. [ 812.206449][ T4537] usb 1-1: config 0 descriptor?? [ 812.245036][ T4540] usb 7-1: USB disconnect, device number 5 [ 812.270223][ T4537] hub 1-1:0.0: USB hub found [ 812.505894][ T1335] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 812.506126][ T4537] hub 1-1:0.0: 1 port detected [ 812.530144][T26484] netlink: zone id is out of range [ 812.759229][ T4537] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 812.781399][ T4537] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 812.851392][ T4537] usb 1-1: USB disconnect, device number 28 [ 813.077871][ T1335] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 813.100960][ T1335] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.142007][ T1335] usb 5-1: Product: syz [ 813.146349][ T1335] usb 5-1: Manufacturer: syz [ 813.168720][ T1335] usb 5-1: SerialNumber: syz [ 813.178771][T26513] loop2: detected capacity change from 0 to 4096 [ 813.192662][ T1335] usb 5-1: config 0 descriptor?? [ 813.246177][T26513] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 813.279776][T26513] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 813.326078][T26513] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 813.351204][T26513] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 813.397742][T26513] ntfs: volume version 3.1. [ 813.486972][ T1335] usb 5-1: USB disconnect, device number 10 [ 813.938516][ T8607] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 814.031188][T26562] __nla_validate_parse: 6 callbacks suppressed [ 814.031208][T26562] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10078'. [ 814.422915][ T8607] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 814.452713][ T8607] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 814.507766][ T8607] usb 3-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 814.548774][ T8607] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.580917][ T8607] usb 3-1: config 0 descriptor?? [ 814.606169][T26539] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 814.630676][ T8607] usbhid 3-1:0.0: can't add hid device: -22 [ 814.636699][ T8607] usbhid: probe of 3-1:0.0 failed with error -22 [ 814.649875][T26591] device bond1 entered promiscuous mode [ 814.699424][T26591] 8021q: adding VLAN 0 to HW filter on device bond1 [ 814.904202][ T3519] usb 3-1: USB disconnect, device number 27 [ 815.142773][T26627] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10105'. [ 815.160393][ T1335] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 815.278714][T26633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 815.289983][T26633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.301342][T26633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 815.312303][T26633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.372140][T26633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 815.395173][T26633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.420963][T26633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 815.431809][T26633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.445451][T26639] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10111'. [ 815.457366][T26639] netlink: 312 bytes leftover after parsing attributes in process `syz.6.10111'. [ 815.554786][ T1335] usb 5-1: config 0 has an invalid interface number: 83 but max is 0 [ 815.574067][ T1335] usb 5-1: config 0 has no interface number 0 [ 815.602175][ T1335] usb 5-1: config 0 interface 83 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 4 [ 815.624431][ T1335] usb 5-1: config 0 interface 83 altsetting 0 endpoint 0x82 has invalid maxpacket 246, setting to 64 [ 815.672103][ T3519] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 815.800384][T26658] netlink: 72 bytes leftover after parsing attributes in process `syz.6.10117'. [ 815.822880][ T1335] usb 5-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 815.850656][ T1335] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.893572][ T1335] usb 5-1: Product: syz [ 815.914865][ T1335] usb 5-1: Manufacturer: syz [ 815.936635][ T1335] usb 5-1: SerialNumber: syz [ 815.941549][ T3519] usb 6-1: Using ep0 maxpacket: 32 [ 815.974722][ T1335] usb 5-1: config 0 descriptor?? [ 815.996015][T26611] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 816.027282][ T1335] redrat3 5-1:0.83: Couldn't find all endpoints [ 816.070325][ T3519] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 816.089688][ T3519] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 816.103071][ T3519] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 816.164479][ T3519] usb 6-1: config 1 has no interface number 0 [ 816.171886][ T3519] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 816.188754][ T3519] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 816.220573][ T3519] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 816.277524][ T3519] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 816.288411][ T3519] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.301026][ T21] usb 5-1: USB disconnect, device number 11 [ 816.317596][T26684] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10127'. [ 816.356167][ T3519] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 816.458029][T17171] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 816.604349][ T3519] snd_usb_pod 6-1:1.1: cannot start listening: -90 [ 816.618303][ T3519] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 816.632976][ T3519] snd_usb_pod: probe of 6-1:1.1 failed with error -90 [ 816.737681][T17171] usb 7-1: Using ep0 maxpacket: 32 [ 816.845919][ T3519] usb 6-1: USB disconnect, device number 4 [ 817.011831][T26723] netlink: 'syz.4.10141': attribute type 1 has an invalid length. [ 817.041152][T17171] usb 7-1: New USB device found, idVendor=fc08, idProduct=0101, bcdDevice= 0.40 [ 817.060265][T17171] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.077972][T26723] netlink: 'syz.4.10141': attribute type 3 has an invalid length. [ 817.086371][T17171] usb 7-1: Product: syz [ 817.090606][T17171] usb 7-1: Manufacturer: syz [ 817.104316][T26723] netlink: 224 bytes leftover after parsing attributes in process `syz.4.10141'. [ 817.114688][T17171] usb 7-1: SerialNumber: syz [ 817.249677][T26737] loop2: detected capacity change from 0 to 256 [ 817.299199][T26737] FAT-fs (loop2): Directory bread(block 64) failed [ 817.321632][T26737] FAT-fs (loop2): Directory bread(block 65) failed [ 817.339739][T26737] FAT-fs (loop2): Directory bread(block 66) failed [ 817.361905][T26737] FAT-fs (loop2): Directory bread(block 67) failed [ 817.380777][T26737] FAT-fs (loop2): Directory bread(block 68) failed [ 817.427419][T26737] FAT-fs (loop2): Directory bread(block 69) failed [ 817.459083][T26737] FAT-fs (loop2): Directory bread(block 70) failed [ 817.467289][T26737] FAT-fs (loop2): Directory bread(block 71) failed [ 817.530058][T26737] FAT-fs (loop2): Directory bread(block 72) failed [ 817.547226][T17171] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 817.577581][T17171] usb 7-1: 2:1 : unknown format tag 0x804 is detected. processed as MPEG. [ 817.588094][T26737] FAT-fs (loop2): Directory bread(block 73) failed [ 817.597194][T17171] usb 7-1: found format II with max.bitrate = 32769, frame size=255 [ 817.615193][T26737] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 817.638407][T17171] usb 7-1: 2:1: All rates were zero [ 817.717449][T17171] usb 7-1: USB disconnect, device number 6 [ 818.041437][ T4703] udevd[4703]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 818.082955][T26776] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (8) [ 818.349659][T26790] netlink: 'syz.5.10167': attribute type 10 has an invalid length. [ 818.405914][T26790] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.10167'. [ 818.513868][T17171] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 818.628212][T26807] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10173'. [ 818.661273][T26807] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10173'. [ 818.835145][T26818] xt_ecn: cannot match TCP bits for non-tcp packets [ 818.957869][T17171] usb 5-1: unable to get BOS descriptor or descriptor too short [ 819.045613][T26827] No such timeout policy "syz1" [ 819.055750][T17171] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 819.091446][T17171] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 819.110244][T26829] loop0: detected capacity change from 0 to 2048 [ 819.292805][T26829] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 819.311281][T17171] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 819.340030][T17171] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.367335][T26829] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 819.402990][T17171] usb 5-1: Product: syz [ 819.420705][T17171] usb 5-1: Manufacturer: syz [ 819.448330][T17171] usb 5-1: SerialNumber: syz [ 819.518048][T17171] usb 5-1: selecting invalid altsetting 1 [ 819.529025][T17171] usb 5-1: unit 6 not found! [ 819.786150][T26861] netlink: 'syz.2.10191': attribute type 3 has an invalid length. [ 819.827307][T26861] __nla_validate_parse: 1 callbacks suppressed [ 819.827321][T26861] netlink: 232 bytes leftover after parsing attributes in process `syz.2.10191'. [ 819.977715][T17171] usb 5-1: cannot get ctl value: req = 0x82, wValue = 0x100, wIndex = 0x200, type = 3 [ 820.009228][T17171] usb 5-1: 2:0: cannot get min/max values for control 1 (id 2) [ 820.043812][T26877] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10197'. [ 820.074687][T17171] usb 5-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x200, type = 3 [ 820.096128][T26877] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10197'. [ 820.123608][T26877] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10197'. [ 820.173089][T17171] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 820.197609][T26885] netlink: 134056 bytes leftover after parsing attributes in process `syz.6.10202'. [ 820.229392][T17171] usb 5-1: USB disconnect, device number 12 [ 820.494970][ T4703] udevd[4703]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 820.638074][T26911] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10210'. [ 821.526830][T26972] loop0: detected capacity change from 0 to 256 [ 821.562401][T26975] netlink: 40 bytes leftover after parsing attributes in process `syz.6.10239'. [ 821.709904][T26972] FAT-fs (loop0): Directory bread(block 64) failed [ 821.764069][T26972] FAT-fs (loop0): Directory bread(block 65) failed [ 821.792538][T26972] FAT-fs (loop0): Directory bread(block 66) failed [ 821.823803][T26985] xt_CT: No such helper "snmp_trap" [ 821.834328][T26972] FAT-fs (loop0): Directory bread(block 67) failed [ 821.893787][T26972] FAT-fs (loop0): Directory bread(block 68) failed [ 821.900472][T26972] FAT-fs (loop0): Directory bread(block 69) failed [ 821.950776][T26972] FAT-fs (loop0): Directory bread(block 70) failed [ 821.979978][T26972] FAT-fs (loop0): Directory bread(block 71) failed [ 821.986689][T26972] FAT-fs (loop0): Directory bread(block 72) failed [ 821.997007][T26996] netlink: 'syz.2.10247': attribute type 13 has an invalid length. [ 822.081096][T26972] FAT-fs (loop0): Directory bread(block 73) failed [ 822.165218][T26972] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 822.235442][T26939] loop5: detected capacity change from 0 to 32768 [ 822.591481][T27027] loop4: detected capacity change from 0 to 512 [ 822.797084][T27027] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.10259: bg 0: block 313: padding at end of block bitmap is not set [ 822.817605][T27027] EXT4-fs (loop4): Remounting filesystem read-only [ 822.825205][T27027] EXT4-fs (loop4): 1 truncate cleaned up [ 822.861697][T27027] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,grpquota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,nolazytime,discard,grpjquota=,errors=remount-ro,nobarrier,. Quota mode: writeback. [ 823.127678][T27052] netlink: 'syz.2.10266': attribute type 10 has an invalid length. [ 823.634975][T27081] loop5: detected capacity change from 0 to 256 [ 823.683497][T27083] loop6: detected capacity change from 0 to 512 [ 823.750305][T27083] EXT4-fs (loop6): Test dummy encryption mode enabled [ 823.772196][T27083] EXT4-fs (loop6): Test dummy encryption mode enabled [ 823.817940][T27083] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,inode_readahead_blks=0x0000000000000100,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000. Quota mode: writeback. [ 823.847173][ C1] vkms_vblank_simulate: vblank timer overrun [ 824.722821][T27154] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 824.730079][T27154] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 824.771150][T27154] vhci_hcd vhci_hcd.0: Device attached [ 824.939719][T27172] netlink: 204 bytes leftover after parsing attributes in process `syz.5.10312'. [ 824.997497][ T4540] vhci_hcd: vhci_device speed not set [ 825.077882][ T4540] usb 45-1: new full-speed USB device number 2 using vhci_hcd [ 825.206854][ T8602] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 825.332927][T27189] ip_tables: iptables: counters copy to user failed while replacing table [ 825.359585][T27155] vhci_hcd: connection reset by peer [ 825.379779][ T9] vhci_hcd: stop threads [ 825.387196][ T9] vhci_hcd: release socket [ 825.427611][ T9] vhci_hcd: disconnect device [ 825.658909][ T8602] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 825.688868][ T8602] usb 3-1: config 0 has no interface number 0 [ 825.695454][ T8602] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 825.738879][T27210] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10325'. [ 825.749617][ T8602] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 825.992397][ T8602] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 826.023346][ T8602] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.045699][ T8602] usb 3-1: Product: syz [ 826.055953][ T8602] usb 3-1: Manufacturer: syz [ 826.088547][ T8602] usb 3-1: SerialNumber: syz [ 826.106942][ T8602] usb 3-1: config 0 descriptor?? [ 826.142970][T27167] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 826.165358][ T8602] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 826.194238][T27238] netlink: 'syz.5.10335': attribute type 1 has an invalid length. [ 826.198314][ T8602] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 826.433444][ C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 826.622626][ T8602] usb 3-1: USB disconnect, device number 28 [ 826.653191][ T8602] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 826.686455][ T8602] cyberjack 3-1:0.69: device disconnected [ 826.774850][T27257] loop5: detected capacity change from 0 to 2048 [ 826.874552][T27257] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 826.929508][T27257] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 827.104252][T27230] loop6: detected capacity change from 0 to 40427 [ 827.183326][T27230] F2FS-fs (loop6): Corrupted extension count (64 + 1 > 64) [ 827.224055][T27230] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 827.288343][T27230] F2FS-fs (loop6): invalid crc value [ 827.331166][T27230] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 827.642638][T27230] F2FS-fs (loop6): recover fsync data on readonly fs [ 827.698301][T27230] F2FS-fs (loop6): Try to recover 1th superblock, ret: -30 [ 827.720518][T27230] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 827.955964][T27261] loop0: detected capacity change from 0 to 32768 [ 828.444157][T17171] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 828.702319][T17171] usb 6-1: Using ep0 maxpacket: 8 [ 828.767327][ T3519] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 828.810406][T27341] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10367'. [ 828.829817][T27300] loop2: detected capacity change from 0 to 32768 [ 828.836799][T17171] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 828.999693][T27300] XFS (loop2): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 829.020662][T27354] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 829.034482][T17171] usb 6-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice= 5.f6 [ 829.044051][ T3519] usb 5-1: Using ep0 maxpacket: 16 [ 829.082953][T17171] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.134685][T17171] usb 6-1: Product: syz [ 829.138930][T17171] usb 6-1: Manufacturer: syz [ 829.181835][T17171] usb 6-1: SerialNumber: syz [ 829.210649][T17171] usb 6-1: config 0 descriptor?? [ 829.216414][ T4506] XFS (loop2): Unmounting Filesystem [ 829.313600][T17171] gspca_main: t613-2.14.0 probing 17a1:0128 [ 829.358437][ T3519] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 829.389790][ T3519] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.427172][ T3519] usb 5-1: Product: syz [ 829.433183][ T3519] usb 5-1: Manufacturer: syz [ 829.444443][ T3519] usb 5-1: SerialNumber: syz [ 829.467299][ T3519] usb 5-1: config 0 descriptor?? [ 829.483072][T27371] netlink: 11 bytes leftover after parsing attributes in process `syz.6.10375'. [ 829.551815][T17171] gspca_t613: unknown sensor 0000 [ 829.557652][T17171] t613: probe of 6-1:0.0 failed with error -22 [ 829.579500][T17171] usb 6-1: USB disconnect, device number 5 [ 829.756354][ T3519] speedtch 5-1:0.0: speedtch_bind: data interface not found! [ 829.763844][ T3519] speedtch 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 829.990830][T17171] usb 5-1: USB disconnect, device number 13 [ 830.091872][T27400] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 830.111017][ T8607] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 830.136407][T27400] infiniband syz0: set active [ 830.142722][T27400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 830.184102][T27400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 830.385520][ T8607] usb 7-1: Using ep0 maxpacket: 16 [ 830.649121][ T4540] vhci_hcd: vhci_device speed not set [ 830.735951][ T8607] usb 7-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 830.757514][ T8607] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.798582][ T8607] usb 7-1: Product: syz [ 830.807770][ T8607] usb 7-1: Manufacturer: syz [ 830.831569][ T8607] usb 7-1: SerialNumber: syz [ 830.842698][ T8607] usb 7-1: config 0 descriptor?? [ 830.924974][T27435] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10397'. [ 831.143810][ T8607] usb-storage 7-1:0.0: USB Mass Storage device detected [ 831.167757][ T8607] usb-storage 7-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 831.176637][ T8607] usb-storage 7-1:0.0: This device (054c,002e,0500 S 04 P 89) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 831.176637][ T8607] Please send a copy of this message to and [ 831.383899][ T8607] usb 7-1: USB disconnect, device number 7 [ 831.465716][ T4177] usb 3-1: new low-speed USB device number 29 using dummy_hcd [ 831.525252][T27453] loop5: detected capacity change from 0 to 256 [ 831.630123][T27459] usb usb9: usbfs: process 27459 (syz.0.10408) did not claim interface 3 before use [ 831.739862][T27463] netlink: 96 bytes leftover after parsing attributes in process `syz.0.10410'. [ 831.766834][T27463] netlink: 96 bytes leftover after parsing attributes in process `syz.0.10410'. [ 831.931134][ T4177] usb 3-1: unable to get BOS descriptor or descriptor too short [ 831.980920][T27453] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011bf5, chksum : 0x5eaa6302, utbl_chksum : 0xe619d30d) [ 832.028072][T27473] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10414'. [ 832.074459][T27453] exFAT-fs (loop5): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 832.100714][ T4177] usb 3-1: config 35 has an invalid interface number: 223 but max is 0 [ 832.120084][ T4177] usb 3-1: config 35 has no interface number 0 [ 832.141083][ T4177] usb 3-1: config 35 interface 223 has no altsetting 0 [ 832.458275][ T8607] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 832.466099][ T4177] usb 3-1: string descriptor 0 read error: -22 [ 832.474836][ T4177] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0108, bcdDevice=86.42 [ 832.484730][ T4177] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.553158][ T4177] usb_ehset_test: probe of 3-1:35.223 failed with error -32 [ 832.777192][ T4540] usb 3-1: USB disconnect, device number 29 [ 832.874132][ T8607] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 832.884310][ T8607] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 833.121303][ T4177] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 833.153762][ T8607] usb 7-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40 [ 833.162867][ T8607] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.203850][ T8607] usb 7-1: Product: syz [ 833.212672][ T8607] usb 7-1: Manufacturer: syz [ 833.217326][ T8607] usb 7-1: SerialNumber: syz [ 833.576049][ T8607] usb 7-1: unit 5 not found! [ 833.594200][T27526] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10439'. [ 833.670857][ T8607] usb 7-1: USB disconnect, device number 8 [ 833.694002][T27530] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 833.712552][ T4177] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 833.738702][ T4177] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 833.755639][ T4177] usb 1-1: Product: syz [ 833.766355][ T4177] usb 1-1: SerialNumber: syz [ 833.773030][ T4177] usb 1-1: config 0 descriptor?? [ 833.998848][ T4704] udevd[4704]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 834.078411][ T4177] hso 1-1:0.0: Can't find BULK IN endpoint [ 834.151315][T27546] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10451'. [ 834.277677][T27552] xt_CT: You must specify a L4 protocol and not use inversions on it [ 834.300723][ T4177] usb 1-1: USB disconnect, device number 29 [ 834.414774][T27557] loop4: detected capacity change from 0 to 512 [ 834.545940][T27557] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 834.578696][T27557] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 834.609615][T27557] System zones: 0-1, 15-15, 18-18, 34-34 [ 834.642473][T27557] EXT4-fs (loop4): orphan cleanup on readonly fs [ 834.658258][T27557] __quota_error: 12 callbacks suppressed [ 834.658276][T27557] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 834.696577][T27557] EXT4-fs warning (device loop4): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 834.711625][T27557] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 834.736382][T27557] EXT4-fs (loop4): 1 truncate cleaned up [ 834.751000][T27557] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 834.777731][T27557] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 834.794705][T27557] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 834.798060][ T3519] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 835.088100][ T3519] usb 3-1: Using ep0 maxpacket: 16 [ 835.217171][ T3519] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 835.234318][ T3519] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 835.319647][T27590] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 835.357004][T27590] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 835.456478][ T3519] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 835.507306][ T3519] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.515360][ T3519] usb 3-1: Product: syz [ 835.540648][T27601] No such timeout policy "syz1" [ 835.560986][ T3519] usb 3-1: Manufacturer: syz [ 835.565645][ T3519] usb 3-1: SerialNumber: syz [ 835.939237][T27624] netlink: 'syz.4.10488': attribute type 1 has an invalid length. [ 836.085600][T27635] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 836.117691][ T3519] usb 3-1: 0:2 : does not exist [ 836.146254][ T3519] usb 3-1: USB disconnect, device number 30 [ 836.169968][T27631] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10493'. [ 836.190258][T27631] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10493'. [ 836.218967][T27631] netlink: 80 bytes leftover after parsing attributes in process `syz.0.10493'. [ 836.408672][T27646] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10499'. [ 836.494929][ T4703] udevd[4703]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 836.542330][T27652] tmpfs: Bad value for 'mpol' [ 837.176833][T27689] netlink: 10 bytes leftover after parsing attributes in process `syz.4.10518'. [ 837.272503][T27695] xt_TPROXY: Can be used only with -p tcp or -p udp [ 837.304003][ T3519] usb 1-1: new low-speed USB device number 30 using dummy_hcd [ 837.400362][ T4177] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 837.596275][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 837.602662][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 837.633650][T27713] netlink: 'syz.2.10531': attribute type 13 has an invalid length. [ 837.742496][ T3519] usb 1-1: unable to get BOS descriptor or descriptor too short [ 837.803299][T27723] loop4: detected capacity change from 0 to 512 [ 837.810130][ T4177] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 837.828069][ T3519] usb 1-1: config 35 has an invalid interface number: 223 but max is 0 [ 837.836390][ T3519] usb 1-1: config 35 has no interface number 0 [ 837.838013][ T4177] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 837.861778][ T4177] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 837.870887][ T3519] usb 1-1: config 35 interface 223 has no altsetting 0 [ 837.882539][ T4177] usb 6-1: config 1 interface 0 has no altsetting 0 [ 837.930261][T27727] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 837.964286][T27727] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 837.978246][T27727] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 838.114323][T27733] loop4: detected capacity change from 0 to 256 [ 838.143677][ T3519] usb 1-1: string descriptor 0 read error: -22 [ 838.152051][ T3519] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0108, bcdDevice=86.42 [ 838.164419][ T3519] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.181298][ T4177] usb 6-1: string descriptor 0 read error: -22 [ 838.187620][ T4177] usb 6-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 838.220380][T27733] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011bf5, chksum : 0x5eaa6302, utbl_chksum : 0xe619d30d) [ 838.227962][ T4177] usb 6-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 838.240958][ T3519] usb_ehset_test: probe of 1-1:35.223 failed with error -32 [ 838.276184][T27733] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 838.355290][ T4177] usb 6-1: 0:2 : does not exist [ 838.393767][ T4177] usb-storage 6-1:1.1: USB Mass Storage device detected [ 838.461020][T27741] netlink: 'syz.6.10544': attribute type 3 has an invalid length. [ 838.502633][T17167] usb 1-1: USB disconnect, device number 30 [ 838.678177][T27758] loop4: detected capacity change from 0 to 256 [ 838.858342][ T4177] us122l: couldn't allocate write buffer [ 838.864315][ T4177] snd-usb-us122l: probe of 6-1:1.1 failed with error -22 [ 838.920679][ T4177] usb 6-1: USB disconnect, device number 6 [ 838.998856][T27775] loop6: detected capacity change from 0 to 256 [ 839.086379][T27775] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011bf5, chksum : 0x5eaa6302, utbl_chksum : 0xe619d30d) [ 839.119353][T27775] exFAT-fs (loop6): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 839.165095][ T4704] udevd[4704]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 839.185527][T17167] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 839.208169][T27779] loop4: detected capacity change from 0 to 4096 [ 839.312755][T27779] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 839.581463][T17167] usb 3-1: config 0 has an invalid interface number: 199 but max is 1 [ 839.589752][T17167] usb 3-1: config 0 has no interface number 1 [ 839.612416][T17167] usb 3-1: config 0 interface 199 altsetting 2 endpoint 0xA has invalid wMaxPacketSize 0 [ 839.638858][T17167] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 839.684257][T27801] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10568'. [ 839.693423][T17167] usb 3-1: config 0 interface 199 has no altsetting 0 [ 839.773907][T17167] usb 3-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 839.803868][T17167] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 839.826934][T17167] usb 3-1: SerialNumber: syz [ 839.847492][T17167] usb 3-1: config 0 descriptor?? [ 839.914886][T17167] usb 3-1: Found UVC 0.00 device (0002:0000) [ 839.942054][T17167] usb 3-1: No valid video chain found. [ 840.030321][ T3519] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 840.093012][T27815] loop6: detected capacity change from 0 to 512 [ 840.130741][T17167] usb 3-1: USB disconnect, device number 31 [ 840.190147][T27815] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 840.291590][T27815] EXT4-fs (loop6): mounted filesystem without journal. Opts: noauto_da_alloc,noload,acl,mblk_io_submit,sysvgroups,,errors=continue. Quota mode: writeback. [ 840.432638][T27795] loop5: detected capacity change from 0 to 40427 [ 840.480033][ T3519] usb 5-1: unable to get BOS descriptor or descriptor too short [ 840.516703][T27795] F2FS-fs (loop5): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 840.530355][T27795] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 840.541956][T27795] F2FS-fs (loop5): invalid crc value [ 840.575629][ T3519] usb 5-1: config 129 has an invalid interface number: 135 but max is 0 [ 840.584199][T27795] F2FS-fs (loop5): Found nat_bits in checkpoint [ 840.606406][ T3519] usb 5-1: config 129 has an invalid interface number: 5 but max is 0 [ 840.640303][ T3519] usb 5-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 840.660911][ T3519] usb 5-1: config 129 has no interface number 0 [ 840.699406][ T3519] usb 5-1: config 129 has no interface number 1 [ 840.751444][ T3519] usb 5-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 840.814180][ T3519] usb 5-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 840.826326][T27795] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 840.842674][T27847] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10589'. [ 840.852281][ T3519] usb 5-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 840.871147][T27850] netlink: 'syz.0.10590': attribute type 1 has an invalid length. [ 840.880783][T27795] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 840.890226][ T3519] usb 5-1: config 129 interface 135 has no altsetting 0 [ 840.909127][ T3519] usb 5-1: config 129 interface 5 has no altsetting 0 [ 841.043474][T27858] netlink: 124 bytes leftover after parsing attributes in process `syz.6.10594'. [ 841.054053][T27857] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.10592'. [ 841.143883][T27795] attempt to access beyond end of device [ 841.143883][T27795] loop5: rw=2049, want=45104, limit=40427 [ 841.185197][ T3519] usb 5-1: string descriptor 0 read error: -22 [ 841.194934][ T3519] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 841.237252][ T3519] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.286767][T27866] overlayfs: missing 'lowerdir' [ 841.329202][ T3519] usb 5-1: MIDIStreaming interface descriptor not found [ 841.357866][T24793] attempt to access beyond end of device [ 841.357866][T24793] loop5: rw=2049, want=45112, limit=40427 [ 841.648033][T17167] usb 5-1: USB disconnect, device number 14 [ 841.864769][T27887] netlink: 'syz.6.10608': attribute type 2 has an invalid length. [ 841.894133][T27887] netlink: 244 bytes leftover after parsing attributes in process `syz.6.10608'. [ 842.165739][T27893] loop6: detected capacity change from 0 to 4096 [ 842.304757][T27893] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 842.387508][T27864] loop0: detected capacity change from 0 to 40427 [ 842.443915][T27905] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10616'. [ 842.491505][T27864] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 842.499314][T27864] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 842.599170][T27864] F2FS-fs (loop0): invalid crc value [ 842.661853][T27864] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 842.933897][T27864] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 842.954137][T27864] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 843.528578][T27966] device bridge2 entered promiscuous mode [ 843.883233][ T26] audit: type=1400 audit(814.360:55): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=27980 comm="syz.2.10652" [ 844.036049][T27996] x_tables: unsorted underflow at hook 1 [ 844.216991][T28009] loop5: detected capacity change from 0 to 136 [ 844.266336][T28010] device bridge3 entered promiscuous mode [ 844.314581][T28009] Attempt to read inode for relocated directory [ 844.342766][T28009] attempt to access beyond end of device [ 844.342766][T28009] loop5: rw=524288, want=335544432, limit=136 [ 844.370666][T28009] attempt to access beyond end of device [ 844.370666][T28009] loop5: rw=0, want=335544432, limit=136 [ 844.410126][T28019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10670'. [ 844.424028][T28019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10670'. [ 844.433026][T28019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10670'. [ 844.441761][ T26] audit: type=1800 audit(814.865:56): pid=28009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.10665" name="file1" dev="loop5" ino=1487 res=0 errno=0 [ 845.180628][T28066] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10692'. [ 845.746368][T28083] loop0: detected capacity change from 0 to 2048 [ 845.754942][T28088] loop2: detected capacity change from 0 to 256 [ 845.817089][T28088] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x190b464b, utbl_chksum : 0xe619d30d) [ 845.847283][T28094] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.10706'. [ 845.887324][T28083] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 845.916529][T28088] exFAT-fs (loop2): error, broken FAT chain. [ 845.950920][T28088] exFAT-fs (loop2): Filesystem has been set read-only [ 845.973584][T28083] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 845.984834][T28088] exFAT-fs (loop2): error, failed to bmap (inode : ffff8880560dc8e0 iblock : 0, err : -5) [ 847.342602][T28182] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10745'. [ 847.502808][ T3519] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 847.583757][T28192] loop5: detected capacity change from 0 to 256 [ 847.675673][T28192] FAT-fs (loop5): Directory bread(block 64) failed [ 847.682513][T28192] FAT-fs (loop5): Directory bread(block 65) failed [ 847.706174][T28192] FAT-fs (loop5): Directory bread(block 66) failed [ 847.734725][T28192] FAT-fs (loop5): Directory bread(block 67) failed [ 847.759106][T28192] FAT-fs (loop5): Directory bread(block 68) failed [ 847.766471][ T3519] usb 7-1: Using ep0 maxpacket: 8 [ 847.774714][T28192] FAT-fs (loop5): Directory bread(block 69) failed [ 847.783458][T28192] FAT-fs (loop5): Directory bread(block 70) failed [ 847.790163][T28192] FAT-fs (loop5): Directory bread(block 71) failed [ 847.797828][T28192] FAT-fs (loop5): Directory bread(block 72) failed [ 847.804835][T28192] FAT-fs (loop5): Directory bread(block 73) failed [ 847.855954][ T21] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 847.976426][T28202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10756'. [ 848.069817][ T3519] usb 7-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 848.078961][ T3519] usb 7-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 848.109404][ T3519] usb 7-1: Product: syz [ 848.114380][ T3519] usb 7-1: Manufacturer: syz [ 848.119012][ T3519] usb 7-1: SerialNumber: syz [ 848.138205][ T3519] usb 7-1: config 0 descriptor?? [ 848.178961][ T3519] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 848.343675][T28190] loop0: detected capacity change from 0 to 40427 [ 848.389658][T28218] netlink: 'syz.2.10764': attribute type 2 has an invalid length. [ 848.405556][T28190] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 848.412548][ T21] usb 5-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=d0.db [ 848.427297][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.436324][ T21] usb 5-1: Product: syz [ 848.440634][ T21] usb 5-1: Manufacturer: syz [ 848.445843][ T21] usb 5-1: SerialNumber: syz [ 848.453431][ T21] usb 5-1: config 0 descriptor?? [ 848.459995][T28190] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 848.460857][T28218] netlink: 'syz.2.10764': attribute type 8 has an invalid length. [ 848.483156][T28218] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10764'. [ 848.485680][T28190] F2FS-fs (loop0): invalid crc value [ 848.507736][T17171] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 848.512190][T28190] F2FS-fs (loop0): Found nat_bits in checkpoint [ 848.591216][T28190] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 848.604724][T28190] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 848.649762][T28190] attempt to access beyond end of device [ 848.649762][T28190] loop0: rw=2049, want=45104, limit=40427 [ 848.657988][ T3519] gspca_zc3xx: reg_r err -71 [ 848.665748][ T3519] gspca_zc3xx: probe of 7-1:0.0 failed with error -71 [ 848.676645][ T3519] usb 7-1: USB disconnect, device number 9 [ 848.736734][ T4491] attempt to access beyond end of device [ 848.736734][ T4491] loop0: rw=2049, want=45112, limit=40427 [ 848.759884][ T4177] usb 5-1: USB disconnect, device number 15 [ 848.767727][T17171] usb 6-1: Using ep0 maxpacket: 32 [ 848.892871][T17171] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 848.903127][T17171] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.931533][T17171] usb 6-1: config 0 descriptor?? [ 848.936784][ T21] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 848.982574][T17171] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 849.202685][T17171] gspca_nw80x: reg_w err -71 [ 849.207395][T17171] nw80x: probe of 6-1:0.0 failed with error -71 [ 849.262740][T17171] usb 6-1: USB disconnect, device number 7 [ 849.320303][ T21] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 849.336902][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 849.373953][ T21] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 849.518638][T28247] sctp: [Deprecated]: syz.6.10776 (pid 28247) Use of struct sctp_assoc_value in delayed_ack socket option. [ 849.518638][T28247] Use struct sctp_sack_info instead [ 849.598343][ T21] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 849.627393][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.659227][ T21] usb 3-1: Product: syz [ 849.664446][ T21] usb 3-1: Manufacturer: syz [ 849.669226][ T21] usb 3-1: SerialNumber: syz [ 849.684867][ T21] usb 3-1: config 0 descriptor?? [ 849.748563][ T21] mcba_usb 3-1:0.0: Can't find endpoints [ 849.951741][T28269] loop5: detected capacity change from 0 to 16 [ 849.970200][ T21] usb 3-1: USB disconnect, device number 32 [ 850.064167][T28269] erofs: (device loop5): mounted with root inode @ nid 36. [ 850.109771][T28269] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 850.164592][T28269] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 850.220221][T28281] comedi comedi0: rti802: I/O port conflict (0x3,4) [ 850.430793][T28291] netlink: 'syz.5.10798': attribute type 2 has an invalid length. [ 850.471744][T28291] netlink: 'syz.5.10798': attribute type 8 has an invalid length. [ 850.493641][T28291] netlink: 132 bytes leftover after parsing attributes in process `syz.5.10798'. [ 850.795647][ T4177] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 851.052803][T28322] netlink: 'syz.0.10812': attribute type 2 has an invalid length. [ 851.060699][T28322] netlink: 'syz.0.10812': attribute type 8 has an invalid length. [ 851.084182][ T4177] usb 5-1: Using ep0 maxpacket: 8 [ 851.133963][T28322] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10812'. [ 851.234186][ T4177] usb 5-1: config 0 has an invalid interface number: 122 but max is 0 [ 851.253279][ T4177] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 851.307619][ T4177] usb 5-1: config 0 has no interface number 0 [ 851.317442][ T4177] usb 5-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 851.339336][ T4177] usb 5-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 851.404035][ T4177] usb 5-1: config 0 interface 122 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 851.429973][ T4177] usb 5-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 851.434227][T28338] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 851.447683][ T4177] usb 5-1: config 0 interface 122 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 8 [ 851.487802][T28338] overlayfs: missing 'lowerdir' [ 851.747109][ T4177] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 851.756316][ T4177] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.799436][ T4177] usb 5-1: Product: syz [ 851.804538][ T4177] usb 5-1: Manufacturer: syz [ 851.809176][ T4177] usb 5-1: SerialNumber: syz [ 851.840418][ T4177] usb 5-1: config 0 descriptor?? [ 851.876022][T28293] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 851.946619][T28330] loop6: detected capacity change from 0 to 32768 [ 852.109268][T28366] netlink: 'syz.2.10835': attribute type 8 has an invalid length. [ 852.122614][T28293] udc-core: couldn't find an available UDC or it's busy [ 852.129621][T28293] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 852.181636][T28368] netdevsim netdevsim5: Direct firmware load for ÿÿ failed with error -2 [ 852.218294][ T4177] usb 5-1: NFC: intf ffff888065302000 id ffffffff8cb63280 [ 852.226259][T28368] netdevsim netdevsim5: Falling back to sysfs fallback for: ÿÿ [ 852.340661][ T4177] nfcmrvl 5-1:0.122: NFC: registered with nci successfully [ 852.363219][ T4177] usb 5-1: USB disconnect, device number 16 [ 852.381877][T28377] netlink: 'syz.0.10839': attribute type 4 has an invalid length. [ 852.390037][ T4177] usb 5-1: NFC: intf ffff888065302000 [ 852.479695][T28377] netlink: 17 bytes leftover after parsing attributes in process `syz.0.10839'. [ 853.061143][T28404] cgroup: Invalid name [ 853.200761][T28412] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10856'. [ 853.358551][T28422] loop6: detected capacity change from 0 to 512 [ 853.413101][T28422] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 853.425585][T28422] EXT4-fs (loop6): Mount option "dax=always" incompatible with ext3 [ 853.475269][T28430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10865'. [ 853.488737][T28428] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10864'. [ 853.555662][T28422] gfs2: Unexpected value for 'barrier' [ 854.107441][T28481] ip_tables: iptables: counters copy to user failed while replacing table [ 854.729739][ T4177] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 855.018465][ T4177] usb 7-1: Using ep0 maxpacket: 16 [ 855.171049][ T4177] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 855.211062][ T4177] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 855.225338][T28547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10922'. [ 855.467729][ T4177] usb 7-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.40 [ 855.481668][ T4177] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.533146][ T4177] usb 7-1: Product: syz [ 855.537700][ T4177] usb 7-1: Manufacturer: syz [ 855.557151][ T4177] usb 7-1: SerialNumber: syz [ 855.700181][T28563] netlink: 'syz.2.10930': attribute type 27 has an invalid length. [ 855.868174][T28569] netlink: set zone limit has 8 unknown bytes [ 856.081066][ T4177] usbhid 7-1:1.0: can't add hid device: -71 [ 856.087116][ T4177] usbhid: probe of 7-1:1.0 failed with error -71 [ 856.105793][T28543] loop4: detected capacity change from 0 to 32768 [ 856.120069][ T4177] usb 7-1: USB disconnect, device number 10 [ 856.484401][ T21] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 856.517937][T28592] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10945'. [ 856.739549][ T21] usb 1-1: Using ep0 maxpacket: 32 [ 856.899952][ T21] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 856.937623][ T21] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 857.081874][ T21] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 857.091334][ T21] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 857.112727][ T21] usb 1-1: Product: syz [ 857.117682][ T21] usb 1-1: Manufacturer: syz [ 857.168310][ T21] hub 1-1:4.0: USB hub found [ 857.402925][ T21] hub 1-1:4.0: config failed, hub has too many ports! (err -19) [ 857.539170][ T4537] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 857.755391][ T21] usb 1-1: USB disconnect, device number 31 [ 857.763339][T28650] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10974'. [ 857.799200][ T4537] usb 3-1: Using ep0 maxpacket: 32 [ 857.813391][T28650] netlink: 6 bytes leftover after parsing attributes in process `syz.5.10974'. [ 857.932971][T28658] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10977'. [ 857.953332][ T4537] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 857.964296][T28658] netlink: 40 bytes leftover after parsing attributes in process `syz.6.10977'. [ 857.975714][ T4537] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 59391, setting to 1024 [ 858.043101][T28662] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10979'. [ 858.114901][T28666] netlink: 156 bytes leftover after parsing attributes in process `syz.6.10982'. [ 858.183095][ T4537] usb 3-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 858.212311][ T4537] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.242590][ T4537] usb 3-1: Product: syz [ 858.257649][ T4537] usb 3-1: Manufacturer: syz [ 858.262301][ T4537] usb 3-1: SerialNumber: syz [ 858.307454][ T4537] usb 3-1: config 0 descriptor?? [ 858.332904][T28618] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 858.416274][ T26] audit: type=1400 audit(827.942:57): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=28683 comm="syz.5.10991" [ 858.589509][ T4177] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 858.597466][ T4537] usbtouchscreen: probe of 3-1:0.0 failed with error -71 [ 858.616295][ T4537] usb 3-1: USB disconnect, device number 33 [ 858.888369][ T4177] usb 7-1: Using ep0 maxpacket: 32 [ 859.048995][ T4177] usb 7-1: config 155 has an invalid interface number: 1 but max is 0 [ 859.064003][ T4177] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 859.110456][ T4177] usb 7-1: config 155 has 2 interfaces, different from the descriptor's value: 1 [ 859.120258][ T4177] usb 7-1: config 155 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8 [ 859.165161][ T4177] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 859.340844][T28722] netlink: 56 bytes leftover after parsing attributes in process `syz.2.11009'. [ 859.370103][T28722] netlink: 56 bytes leftover after parsing attributes in process `syz.2.11009'. [ 859.411877][T28692] loop5: detected capacity change from 0 to 40427 [ 859.422950][ T4177] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 859.442919][ T4177] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.476519][ T4177] usb 7-1: Product: syz [ 859.480826][ T4177] usb 7-1: Manufacturer: syz [ 859.485454][ T4177] usb 7-1: SerialNumber: syz [ 859.500268][T28692] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 859.519286][T28692] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 859.539209][T28692] F2FS-fs (loop5): invalid crc value [ 859.573014][T28674] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 859.587817][T28692] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 859.606604][ T4177] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 859.614373][ T4177] imon 7-1:155.0: unable to initialize intf0, err -19 [ 859.645464][ T4177] imon:imon_probe: failed to initialize context! [ 859.657212][ T4177] imon 7-1:155.0: unable to register, err -19 [ 859.702520][ T4177] imon 7-1:155.1: inconsistent driver matching [ 859.708843][ T4177] imon 7-1:155.1: unable to register, err -22 [ 859.754659][ T4177] imon: probe of 7-1:155.1 failed with error -22 [ 859.791154][T28739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11016'. [ 859.887598][ T4177] usb 7-1: USB disconnect, device number 11 [ 859.999711][T28692] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 860.039466][T28692] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 860.204035][T28692] fscrypt (loop5, inode 3): Error -61 getting encryption context [ 860.337194][T28763] loop4: detected capacity change from 0 to 8 [ 860.476516][T28763] SQUASHFS error: zlib decompression failed, data probably corrupt [ 860.544796][T28763] SQUASHFS error: Failed to read block 0x4de: -5 [ 860.568704][T28763] SQUASHFS error: Failed to read block 0x4e2: -5 [ 860.599246][T28763] SQUASHFS error: Failed to read block 0x9ca: -5 [ 860.618856][T28763] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 860.642471][T28763] SQUASHFS error: Failed to read block 0x52cf2: -5 [ 860.668905][T28763] SQUASHFS error: Failed to read block 0x535f2: -5 [ 860.763488][ T26] audit: type=1800 audit(830.140:58): pid=28763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.11029" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 860.789177][T28780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 860.830011][T28780] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 861.159205][T28798] loop0: detected capacity change from 0 to 256 [ 861.219026][T28804] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 861.365474][T28810] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 862.054834][T28859] __nla_validate_parse: 3 callbacks suppressed [ 862.054854][T28859] netlink: 84 bytes leftover after parsing attributes in process `syz.2.11074'. [ 862.127548][T28859] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11074'. [ 862.782227][T28836] loop0: detected capacity change from 0 to 32768 [ 862.870970][T28836] JBD2: Ignoring recovery information on journal [ 863.075982][T28836] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 863.164711][ T21] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 863.360711][ T4491] ocfs2: Unmounting device (7,0) on (node local) [ 863.399902][T28927] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11108'. [ 863.424671][T28926] netlink: 'syz.4.11107': attribute type 1 has an invalid length. [ 863.458469][ T21] usb 7-1: Using ep0 maxpacket: 16 [ 863.591618][T28933] netlink: 'syz.2.11109': attribute type 46 has an invalid length. [ 863.635309][ T21] usb 7-1: unable to get BOS descriptor or descriptor too short [ 863.665417][T28933] netlink: 'syz.2.11109': attribute type 28 has an invalid length. [ 863.705947][T28939] SET target dimension over the limit! [ 863.741851][T28933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11109'. [ 863.752901][ T21] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 863.783884][T28943] netlink: 'syz.4.11115': attribute type 1 has an invalid length. [ 863.787208][ T21] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 863.838989][T28943] netlink: 244 bytes leftover after parsing attributes in process `syz.4.11115'. [ 863.914623][T28947] loop0: detected capacity change from 0 to 64 [ 863.987928][ T21] usb 7-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 864.013786][T28952] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11119'. [ 864.029701][ T21] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.069142][ T21] usb 7-1: Product: syz [ 864.074028][ T21] usb 7-1: Manufacturer: syz [ 864.084669][ T21] usb 7-1: SerialNumber: syz [ 864.501244][ T21] usb 7-1: 0:1 : does not exist [ 864.517493][ T21] usb 7-1: unit 5 not found! [ 864.554462][ T21] usb 7-1: cannot get ctl value: req = 0x83, wValue = 0x200, wIndex = 0x200, type = 4 [ 864.585765][ T21] usb 7-1: 2:0: cannot get min/max values for control 2 (id 2) [ 864.637438][ T21] usb 7-1: USB disconnect, device number 12 [ 864.694234][T28989] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11138'. [ 864.893624][T29005] program syz.2.11145 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 864.977037][ T4703] udevd[4703]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 865.285211][T29026] loop6: detected capacity change from 0 to 4096 [ 865.351761][T29026] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 865.351797][T29026] EXT4-fs (loop6): inline encryption not supported [ 865.351859][T29026] EXT4-fs (loop6): Test dummy encryption mode enabled [ 865.368572][T29026] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 865.368679][T29026] System zones: 0-5 [ 865.383272][T29026] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,inlinecrypt,errors=remount-ro,test_dummy_encryption=v1,norecovery,delalloc,nogrpid,minixdf,. Quota mode: writeback. [ 865.409736][T29037] device veth1_vlan left promiscuous mode [ 865.628600][ C0] vkms_vblank_simulate: vblank timer overrun [ 865.880193][ T8602] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 865.985186][T29054] 8021q: VLANs not supported on lo [ 866.040743][ T4540] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 866.200026][T29031] loop0: detected capacity change from 0 to 40427 [ 866.280310][T29031] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 866.300839][T29031] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 866.324439][ T8602] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 866.344767][T29031] F2FS-fs (loop0): invalid crc value [ 866.392077][T29031] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 866.521796][ T4540] usb 7-1: unable to get BOS descriptor or descriptor too short [ 866.556925][ T8602] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 866.587852][ T8602] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.625997][ T8602] usb 3-1: Product: syz [ 866.633425][ T8602] usb 3-1: Manufacturer: syz [ 866.644293][ T8602] usb 3-1: SerialNumber: syz [ 866.660825][ T4540] usb 7-1: config 172 has an invalid interface number: 190 but max is 1 [ 866.670682][T29031] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 866.678766][ T4540] usb 7-1: config 172 has an invalid descriptor of length 0, skipping remainder of the config [ 866.693227][ T8602] usb 3-1: config 0 descriptor?? [ 866.698452][T29031] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 866.747214][ T8602] CoreChips: probe of 3-1:0.0 failed with error -22 [ 866.760940][ T4540] usb 7-1: config 172 has no interface number 1 [ 866.782556][ T4540] usb 7-1: config 172 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 866.815231][ T4540] usb 7-1: config 172 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 866.838393][T29031] fscrypt (loop0, inode 3): Error -61 getting encryption context [ 867.099233][ T4540] usb 7-1: string descriptor 0 read error: -22 [ 867.105571][ T4540] usb 7-1: New USB device found, idVendor=04cb, idProduct=0127, bcdDevice=3a.be [ 867.150795][ T4540] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.250985][ T4540] gspca_main: finepix-2.14.0 probing 04cb:0127 [ 867.469856][ T4540] usb 7-1: USB disconnect, device number 13 [ 867.964413][T29146] comedi comedi0: 8255: I/O port conflict (0x8,4) [ 868.007446][T29146] comedi comedi0: 8255: I/O port conflict (0x7fffffff,4) [ 868.022050][T29146] comedi comedi0: 8255: I/O port conflict (0x8,4) [ 868.187449][T29157] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11209'. [ 868.363810][T29167] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 868.725467][T29189] xt_ecn: cannot match TCP bits for non-tcp packets [ 868.799197][ T1335] usb 3-1: USB disconnect, device number 34 [ 868.869879][T29198] openvswitch: netlink: Missing key (keys=40, expected=80) [ 869.109684][T29214] loop6: detected capacity change from 0 to 256 [ 869.150269][T29221] loop0: detected capacity change from 0 to 256 [ 869.193303][T29214] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 869.315604][T29232] xt_l2tp: missing protocol rule (udp|l2tpip) [ 869.570513][T29251] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 869.782328][T29262] x_tables: unsorted underflow at hook 2 [ 869.785948][T29264] netlink: 'syz.5.11263': attribute type 1 has an invalid length. [ 869.797507][T29264] netlink: 224 bytes leftover after parsing attributes in process `syz.5.11263'. [ 869.825059][ T1335] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 870.058410][T29284] netlink: 'syz.5.11271': attribute type 1 has an invalid length. [ 870.101658][T29275] xt_CT: No such helper "snmp" [ 870.106694][ T1335] usb 5-1: Using ep0 maxpacket: 16 [ 870.151692][T29286] comedi comedi0: comedi_config --init_data is deprecated [ 870.231321][ T1335] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 870.295362][ T8602] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 870.407656][ T1335] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 870.453129][ T1335] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.485653][ T1335] usb 5-1: Product: syz [ 870.493807][ T1335] usb 5-1: Manufacturer: syz [ 870.509759][T29300] MTD: Couldn't look up '': -22 [ 870.511427][ T1335] usb 5-1: SerialNumber: syz [ 870.541721][ T1335] r8152-cfgselector 5-1: config 0 descriptor?? [ 870.574724][ T8602] usb 3-1: Using ep0 maxpacket: 32 [ 870.704475][T29306] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11282'. [ 870.715869][T29303] loop0: detected capacity change from 0 to 4096 [ 870.723989][ T8602] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 870.732163][ T8602] usb 3-1: config 0 has no interface number 0 [ 870.752367][T29303] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 870.783691][ T8602] usb 3-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 870.793824][ T8602] usb 3-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 870.832257][ T8602] usb 3-1: config 0 interface 12 has no altsetting 0 [ 870.868459][T29303] ntfs: (device loop0): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 870.917805][T29303] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 870.932671][T29303] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 870.952650][ C0] vkms_vblank_simulate: vblank timer overrun [ 870.978063][T29303] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 870.988243][T29303] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 871.008867][T29303] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 871.018744][T29303] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 871.040217][ T8602] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 871.052646][ T8602] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.054989][ T1335] r8152-cfgselector 5-1: Unknown version 0x0000 [ 871.062225][T29303] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 871.075933][ T8602] usb 3-1: Product: syz [ 871.080711][ T8602] usb 3-1: Manufacturer: syz [ 871.085342][ T8602] usb 3-1: SerialNumber: syz [ 871.087425][ T1335] r8152-cfgselector 5-1: bad CDC descriptors [ 871.091659][T29303] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 871.118900][ T21] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 871.126994][ T1335] r8152-cfgselector 5-1: Unknown version 0x0000 [ 871.141118][ T1335] r8152-cfgselector 5-1: USB disconnect, device number 17 [ 871.161539][ T8602] usb 3-1: config 0 descriptor?? [ 871.199231][T29303] ntfs: volume version 3.1. [ 871.205478][ T8602] f81534 3-1:0.12: unsupported endpoint max packet size [ 871.514208][ T21] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 871.532747][ T21] usb 6-1: config 2 has 1 interface, different from the descriptor's value: 3 [ 871.727917][ T21] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=bd.95 [ 871.743340][ T21] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.762570][ T21] usb 6-1: Product: syz [ 871.772817][ T21] usb 6-1: Manufacturer: syz [ 871.783967][ T21] usb 6-1: SerialNumber: syz [ 872.078858][T29355] kAFS: unable to lookup cell '(/' [ 872.134694][ T21] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 872.147373][ T21] dvb_usb_af9015: probe of 6-1:2.0 failed with error -22 [ 872.199162][ T21] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 872.218109][ T21] dvb_usb_af9035: probe of 6-1:2.0 failed with error -22 [ 872.230455][ T21] usb 6-1: USB disconnect, device number 8 [ 872.301549][T29366] loop4: detected capacity change from 0 to 512 [ 872.362065][T29366] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 872.383937][T29366] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 872.396471][T29366] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,abort,noblock_validity,. Quota mode: none. [ 872.438036][T29366] EXT4-fs warning (device loop4): dx_probe:869: inode #2: comm syz.4.11311: Unimplemented hash flags: 0x0001 [ 872.460455][T29366] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.11311: Corrupt directory, running e2fsck is recommended [ 873.050541][T29408] loop4: detected capacity change from 0 to 64 [ 873.092131][T29411] Invalid ELF header magic: != ELF [ 873.154352][ T21] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 873.229143][ T1335] usb 3-1: USB disconnect, device number 35 [ 873.367397][T29423] netlink: 'syz.4.11336': attribute type 1 has an invalid length. [ 873.416966][ T21] usb 6-1: Using ep0 maxpacket: 16 [ 873.545390][ T21] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 873.572516][ T21] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 873.765061][ T21] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 873.785120][ T21] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.817538][ T21] usb 6-1: Product: syz [ 873.821763][ T21] usb 6-1: Manufacturer: syz [ 873.849974][ T21] usb 6-1: SerialNumber: syz [ 873.914130][T29455] loop4: detected capacity change from 0 to 1024 [ 873.985967][T29455] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 874.056646][T29455] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 874.081735][T29455] EXT4-fs (loop4): orphan cleanup on readonly fs [ 874.089088][T29455] EXT4-fs error (device loop4): ext4_read_inode_bitmap:168: comm syz.4.11353: Inode bitmap for bg 0 marked uninitialized [ 874.107981][T29455] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,,errors=continue. Quota mode: writeback. [ 874.209278][ T21] usb 6-1: 0:2 : does not exist [ 874.251770][ T21] usb 6-1: USB disconnect, device number 9 [ 874.508437][ T4703] udevd[4703]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 874.576431][T29492] loop6: detected capacity change from 0 to 512 [ 874.738321][T29492] EXT4-fs (loop6): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000008,auto_da_alloc,errors=remount-ro,nouid32,. Quota mode: writeback. [ 874.842906][T29512] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11379'. [ 874.903621][T29492] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: comm syz.6.11371: inode #64: comm syz.6.11371: iget: illegal inode # [ 875.035145][T29492] EXT4-fs (loop6): Remounting filesystem read-only [ 875.073886][T29492] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.11371: error while reading EA inode 64 err=-117 [ 875.102751][T29492] EXT4-fs (loop6): Remounting filesystem read-only [ 875.136439][T29492] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: comm syz.6.11371: inode #64: comm syz.6.11371: iget: illegal inode # [ 875.158583][T29531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11389'. [ 875.182020][T29492] EXT4-fs (loop6): Remounting filesystem read-only [ 875.188625][T29492] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.11371: error while reading EA inode 64 err=-117 [ 875.205346][T29492] EXT4-fs (loop6): Remounting filesystem read-only [ 875.255293][T29534] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11390'. [ 875.437498][ T1335] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 875.576624][ T8602] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 875.597064][T29546] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11396'. [ 875.694095][ T1335] usb 1-1: Using ep0 maxpacket: 8 [ 875.822659][ T1335] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 875.864598][ T1335] usb 1-1: config 0 interface 0 has no altsetting 0 [ 875.881858][ T8602] usb 6-1: Using ep0 maxpacket: 32 [ 875.991890][T29570] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.11408'. [ 876.060109][ T1335] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 876.092339][ T1335] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.116599][ T1335] usb 1-1: Product: syz [ 876.120946][ T1335] usb 1-1: Manufacturer: syz [ 876.148969][ T1335] usb 1-1: SerialNumber: syz [ 876.170093][ T1335] usb 1-1: config 0 descriptor?? [ 876.226684][ T1335] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 876.283640][ T8602] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 876.310611][ T8602] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.324629][ T8602] usb 6-1: Product: syz [ 876.328870][ T8602] usb 6-1: Manufacturer: syz [ 876.355325][ T8602] usb 6-1: SerialNumber: syz [ 876.372341][T29587] netlink: 20 bytes leftover after parsing attributes in process `syz.6.11416'. [ 876.389329][ T8602] usb 6-1: config 0 descriptor?? [ 876.466065][ T1335] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 876.492712][ T1335] snd_usb_toneport: probe of 1-1:0.0 failed with error -22 [ 876.505300][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 876.505316][ T26] audit: type=1326 audit(844.864:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29593 comm="syz.4.11420" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f34660b5019 code=0x0 [ 876.540205][T29592] loop6: detected capacity change from 0 to 736 [ 876.570682][ T4537] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 876.703275][ T21] usb 1-1: USB disconnect, device number 32 [ 876.787965][T29602] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11423'. [ 876.835858][T29601] loop4: detected capacity change from 0 to 2048 [ 876.885871][T29601] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 876.914214][ T8602] airspy 6-1:0.0: usb_control_msg() failed -71 request 0a [ 876.934251][ T8602] airspy 6-1:0.0: Could not detect board [ 876.939981][ T8602] airspy: probe of 6-1:0.0 failed with error -71 [ 876.985469][ T8602] usb 6-1: USB disconnect, device number 10 [ 877.084307][ T4537] usb 3-1: unable to get BOS descriptor or descriptor too short [ 877.137611][ T4537] usb 3-1: not running at top speed; connect to a high speed hub [ 877.245981][ T4537] usb 3-1: config 17 has an invalid interface number: 8 but max is 1 [ 877.258984][ T4537] usb 3-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 877.274340][ T4537] usb 3-1: config 17 has no interface number 0 [ 877.301407][ T4537] usb 3-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid maxpacket 64768, setting to 64 [ 877.326188][ T4537] usb 3-1: config 17 interface 8 has no altsetting 0 [ 877.533279][ T4537] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 877.555993][ T4537] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.563619][T29632] netlink: 'syz.4.11436': attribute type 21 has an invalid length. [ 877.587779][ T4537] usb 3-1: Product: syz [ 877.608134][ T4537] usb 3-1: Manufacturer: syz [ 877.639572][ T4537] usb 3-1: SerialNumber: syz [ 878.037963][ T4537] usb 3-1: selecting invalid altsetting 0 [ 878.091615][T29664] loop4: detected capacity change from 0 to 256 [ 878.118170][ T4537] usb 3-1: USB disconnect, device number 36 [ 878.250251][T29672] loop6: detected capacity change from 0 to 22 [ 878.296983][T29672] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 878.347311][T29672] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 878.410331][ T4703] udevd[4703]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 878.696854][T29688] loop2: detected capacity change from 0 to 256 [ 878.773737][T29688] exfat: Deprecated parameter 'namecase' [ 878.779464][T29688] exfat: Deprecated parameter 'namecase' [ 878.874460][T29688] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0x53f1f8b9, utbl_chksum : 0xe619d300) [ 879.317729][T29729] netlink: 56 bytes leftover after parsing attributes in process `syz.5.11472'. [ 879.357229][T29734] netlink: 32 bytes leftover after parsing attributes in process `syz.6.11474'. [ 879.388909][T29734] netlink: 32 bytes leftover after parsing attributes in process `syz.6.11474'. [ 879.663325][T29754] loop2: detected capacity change from 0 to 512 [ 879.694734][T29756] loop5: detected capacity change from 0 to 1024 [ 879.816181][T29754] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000008,auto_da_alloc,errors=remount-ro,nouid32,. Quota mode: writeback. [ 879.917021][ T4537] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 879.990424][T29754] [ 879.992814][T29754] ====================================================== [ 879.999852][T29754] WARNING: possible circular locking dependency detected [ 880.006911][T29754] syzkaller #0 Not tainted [ 880.011346][T29754] ------------------------------------------------------ [ 880.018394][T29754] syz.2.11481/29754 is trying to acquire lock: [ 880.024576][T29754] ffff8880747633e8 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x5a/0x410 [ 880.033586][T29754] [ 880.033586][T29754] but task is already holding lock: [ 880.040981][T29754] ffff88805f731668 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_truncate+0x994/0x1190 [ 880.050435][T29754] [ 880.050435][T29754] which lock already depends on the new lock. [ 880.050435][T29754] [ 880.060858][T29754] [ 880.060858][T29754] the existing dependency chain (in reverse order) is: [ 880.069893][T29754] [ 880.069893][T29754] -> #2 (&ei->i_data_sem/2){++++}-{3:3}: [ 880.077759][T29754] down_write+0x38/0x60 [ 880.082551][T29754] ext4_map_blocks+0x8c4/0x1a50 [ 880.087955][T29754] ext4_getblk+0x176/0x670 [ 880.092926][T29754] ext4_bread+0x26/0x180 [ 880.097720][T29754] ext4_quota_write+0x237/0x580 [ 880.103230][T29754] do_insert_tree+0x1193/0x19c0 [ 880.108631][T29754] do_insert_tree+0x5c4/0x19c0 [ 880.113955][T29754] do_insert_tree+0x5c4/0x19c0 [ 880.119370][T29754] do_insert_tree+0x5c4/0x19c0 [ 880.124679][T29754] qtree_write_dquot+0x354/0x4a0 [ 880.130171][T29754] v2_write_dquot+0x108/0x190 [ 880.135406][T29754] dquot_acquire+0x2d5/0x520 [ 880.140554][T29754] ext4_acquire_dquot+0x2e3/0x4a0 [ 880.146131][T29754] dqget+0x713/0xbb0 [ 880.150589][T29754] __dquot_initialize+0x3a9/0xd00 [ 880.156165][T29754] ext4_process_orphan+0x4c/0x2e0 [ 880.161744][T29754] ext4_orphan_cleanup+0xad8/0x1320 [ 880.167503][T29754] ext4_fill_super+0x8c65/0x93f0 [ 880.173024][T29754] mount_bdev+0x28a/0x3c0 [ 880.177909][T29754] legacy_get_tree+0xe6/0x180 [ 880.183233][T29754] vfs_get_tree+0x88/0x270 [ 880.188202][T29754] do_new_mount+0x247/0xa40 [ 880.193265][T29754] __se_sys_mount+0x2e3/0x3d0 [ 880.198593][T29754] do_syscall_64+0x4c/0xa0 [ 880.203563][T29754] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 880.210012][T29754] [ 880.210012][T29754] -> #1 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 880.218127][T29754] down_read+0x44/0x2e0 [ 880.222839][T29754] v2_read_dquot+0x4a/0x110 [ 880.227905][T29754] dquot_acquire+0x152/0x520 [ 880.233052][T29754] ext4_acquire_dquot+0x2e3/0x4a0 [ 880.238636][T29754] dqget+0x713/0xbb0 [ 880.243110][T29754] __dquot_initialize+0x3a9/0xd00 [ 880.248702][T29754] ext4_process_orphan+0x4c/0x2e0 [ 880.254284][T29754] ext4_orphan_cleanup+0xad8/0x1320 [ 880.260070][T29754] ext4_fill_super+0x8c65/0x93f0 [ 880.265566][T29754] mount_bdev+0x28a/0x3c0 [ 880.270452][T29754] legacy_get_tree+0xe6/0x180 [ 880.275693][T29754] vfs_get_tree+0x88/0x270 [ 880.280669][T29754] do_new_mount+0x247/0xa40 [ 880.285815][T29754] __se_sys_mount+0x2e3/0x3d0 [ 880.291046][T29754] do_syscall_64+0x4c/0xa0 [ 880.296037][T29754] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 880.302483][T29754] [ 880.302483][T29754] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 880.310166][T29754] __lock_acquire+0x2c66/0x7b50 [ 880.315576][T29754] lock_acquire+0x19e/0x400 [ 880.320636][T29754] __mutex_lock_common+0x1e5/0x2400 [ 880.326393][T29754] mutex_lock_nested+0x17/0x20 [ 880.331712][T29754] dquot_commit+0x5a/0x410 [ 880.336685][T29754] ext4_write_dquot+0x1f0/0x360 [ 880.342090][T29754] mark_all_dquot_dirty+0x1e3/0x400 [ 880.347851][T29754] __dquot_free_space+0x7c3/0xb80 [ 880.353432][T29754] ext4_free_blocks+0x1b1b/0x24c0 [ 880.359090][T29754] ext4_ext_remove_space+0x2106/0x41a0 [ 880.365169][T29754] ext4_ext_truncate+0x182/0x230 [ 880.370665][T29754] ext4_truncate+0xa41/0x1190 [ 880.375898][T29754] ext4_evict_inode+0xb0f/0x1050 [ 880.381395][T29754] evict+0x4b6/0x8b0 [ 880.385852][T29754] do_unlinkat+0x3e7/0x710 [ 880.390820][T29754] __x64_sys_unlinkat+0xd1/0xe0 [ 880.396227][T29754] do_syscall_64+0x4c/0xa0 [ 880.401196][T29754] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 880.407654][T29754] [ 880.407654][T29754] other info that might help us debug this: [ 880.407654][T29754] [ 880.417915][T29754] Chain exists of: [ 880.417915][T29754] &dquot->dq_lock --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2 [ 880.417915][T29754] [ 880.431968][T29754] Possible unsafe locking scenario: [ 880.431968][T29754] [ 880.439442][T29754] CPU0 CPU1 [ 880.444835][T29754] ---- ---- [ 880.450220][T29754] lock(&ei->i_data_sem/2); [ 880.454857][T29754] lock(&s->s_dquot.dqio_sem); [ 880.462264][T29754] lock(&ei->i_data_sem/2); [ 880.469416][T29754] lock(&dquot->dq_lock); [ 880.473880][T29754] [ 880.473880][T29754] *** DEADLOCK *** [ 880.473880][T29754] [ 880.482047][T29754] 4 locks held by syz.2.11481/29754: [ 880.487357][T29754] #0: ffff888060678460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 880.496581][T29754] #1: ffff888060678650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x41f/0x1050 [ 880.506112][T29754] #2: ffff88805f731668 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_truncate+0x994/0x1190 [ 880.515912][T29754] #3: ffffffff8c4418d8 (dquot_srcu){....}-{0:0}, at: rcu_lock_acquire+0x5/0x30 [ 880.525047][T29754] [ 880.525047][T29754] stack backtrace: [ 880.530971][T29754] CPU: 0 PID: 29754 Comm: syz.2.11481 Not tainted syzkaller #0 [ 880.538548][T29754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 880.548634][T29754] Call Trace: [ 880.551941][T29754] [ 880.554903][T29754] dump_stack_lvl+0x188/0x250 [ 880.559622][T29754] ? load_image+0x410/0x410 [ 880.564182][T29754] ? show_regs_print_info+0x20/0x20 [ 880.569422][T29754] ? print_circular_bug+0x12b/0x1a0 [ 880.574672][T29754] check_noncircular+0x296/0x330 [ 880.579665][T29754] ? add_chain_block+0x9b0/0x9b0 [ 880.584644][T29754] ? lockdep_lock+0xf1/0x1f0 [ 880.589280][T29754] ? mark_lock+0x94/0x320 [ 880.593641][T29754] ? _find_first_zero_bit+0xd1/0xf0 [ 880.598876][T29754] __lock_acquire+0x2c66/0x7b50 [ 880.603782][T29754] ? verify_lock_unused+0x140/0x140 [ 880.609025][T29754] ? mark_lock+0x94/0x320 [ 880.613392][T29754] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 880.619413][T29754] ? __lock_acquire+0x7b50/0x7b50 [ 880.624474][T29754] ? lock_chain_count+0x20/0x20 [ 880.629375][T29754] lock_acquire+0x19e/0x400 [ 880.633915][T29754] ? dquot_commit+0x5a/0x410 [ 880.638542][T29754] ? finish_lock_switch+0x12d/0x290 [ 880.643940][T29754] ? __might_sleep+0xf0/0xf0 [ 880.648606][T29754] ? read_lock_is_recursive+0x10/0x10 [ 880.654029][T29754] ? __schedule+0x11cb/0x4350 [ 880.658751][T29754] __mutex_lock_common+0x1e5/0x2400 [ 880.663998][T29754] ? dquot_commit+0x5a/0x410 [ 880.668625][T29754] ? dquot_commit+0x5a/0x410 [ 880.673257][T29754] ? __might_sleep+0xf0/0xf0 [ 880.677904][T29754] ? mutex_lock_io_nested+0x60/0x60 [ 880.683133][T29754] ? preempt_schedule+0xbc/0xd0 [ 880.688013][T29754] mutex_lock_nested+0x17/0x20 [ 880.692810][T29754] dquot_commit+0x5a/0x410 [ 880.697275][T29754] ext4_write_dquot+0x1f0/0x360 [ 880.702165][T29754] mark_all_dquot_dirty+0x1e3/0x400 [ 880.707409][T29754] __dquot_free_space+0x7c3/0xb80 [ 880.712531][T29754] ext4_free_blocks+0x1b1b/0x24c0 [ 880.717599][T29754] ? ext4_mb_discard_preallocations_should_retry+0x690/0x690 [ 880.725012][T29754] ? __ext4_journal_ensure_credits+0x2c/0x450 [ 880.731151][T29754] ? ext4_inode_journal_mode+0x189/0x460 [ 880.736816][T29754] ? ext4_ext_remove_space+0x2001/0x41a0 [ 880.742595][T29754] ext4_ext_remove_space+0x2106/0x41a0 [ 880.748112][T29754] ? ext4_ext_index_trans_blocks+0xf0/0xf0 [ 880.753960][T29754] ? ext4_es_remove_extent+0x29f/0x430 [ 880.759606][T29754] ext4_ext_truncate+0x182/0x230 [ 880.764585][T29754] ext4_truncate+0xa41/0x1190 [ 880.769296][T29754] ? __ext4_mark_inode_dirty+0x6c0/0x6c0 [ 880.775011][T29754] ? __ext4_mark_inode_dirty+0x4b4/0x6c0 [ 880.780689][T29754] ext4_evict_inode+0xb0f/0x1050 [ 880.785670][T29754] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 880.791598][T29754] ? do_raw_spin_unlock+0x11d/0x230 [ 880.796836][T29754] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 880.802883][T29754] evict+0x4b6/0x8b0 [ 880.806830][T29754] ? proc_nr_inodes+0x320/0x320 [ 880.811716][T29754] ? do_raw_spin_unlock+0x11d/0x230 [ 880.816958][T29754] ? _raw_spin_unlock+0x24/0x40 [ 880.821842][T29754] ? iput+0x6ea/0x880 [ 880.825858][T29754] do_unlinkat+0x3e7/0x710 [ 880.830349][T29754] ? fsnotify_link_count+0xf0/0xf0 [ 880.835502][T29754] ? getname_flags+0x1f9/0x4f0 [ 880.840305][T29754] __x64_sys_unlinkat+0xd1/0xe0 [ 880.845193][T29754] do_syscall_64+0x4c/0xa0 [ 880.849637][T29754] ? clear_bhb_loop+0x30/0x80 [ 880.854347][T29754] ? clear_bhb_loop+0x30/0x80 [ 880.859061][T29754] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 880.865034][T29754] RIP: 0033:0x7f876ce23019 [ 880.869489][T29754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 880.889134][T29754] RSP: 002b:00007f876b07b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 880.897576][T29754] RAX: ffffffffffffffda RBX: 00007f876d0aafa0 RCX: 00007f876ce23019 [ 880.905664][T29754] RDX: 0000000000000000 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 880.913665][T29754] RBP: 00007f876ceba00c R08: 0000000000000000 R09: 0000000000000000 [ 880.921658][T29754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 880.930335][T29754] R13: 00007f876d0ab038 R14: 00007f876d0aafa0 R15: 00007ffe35e613e8 [ 880.938347][T29754] [ 880.941460][ C0] vkms_vblank_simulate: vblank timer overrun [ 880.989206][T29778] loop4: detected capacity change from 0 to 128 [ 881.069966][T29754] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.11481: inode #64: comm syz.2.11481: iget: illegal inode # [ 881.093789][T29754] EXT4-fs (loop2): Remounting filesystem read-only [ 881.132770][T29754] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.11481: error while reading EA inode 64 err=-117 [ 881.151648][T29754] EXT4-fs (loop2): Remounting filesystem read-only [ 881.188860][ T4537] usb 1-1: Using ep0 maxpacket: 16 [ 881.202642][T29754] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.11481: inode #64: comm syz.2.11481: iget: illegal inode # [ 881.225225][T29754] EXT4-fs (loop2): Remounting filesystem read-only [ 881.234146][T29754] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.11481: error while reading EA inode 64 err=-117 [ 881.246972][T29754] EXT4-fs (loop2): Remounting filesystem read-only [ 881.329016][ T4537] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 881.339509][ T4537] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 881.531169][ T4537] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 881.540270][ T4537] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.548409][ T4537] usb 1-1: Product: syz [ 881.552658][ T4537] usb 1-1: Manufacturer: syz [ 881.557271][ T4537] usb 1-1: SerialNumber: syz [ 881.905358][ T4537] usb 1-1: 0:2 : does not exist [ 881.914344][ T4537] usb 1-1: USB disconnect, device number 33 [ 882.140802][ T4703] udevd[4703]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory