last executing test programs: 10m36.195637731s ago: executing program 3 (id=5583): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0x404a0c4}, 0x0) 10m36.124299092s ago: executing program 3 (id=5585): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000040)={0x0, [0x2, 0x8, 0x5], [{0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x0, 0x3fffffe}, {0x2}, {}, {0x0, 0xffffffff}, {}, {0x0, 0x81}, {0x0, 0x8}, {}, {0x0, 0x1}, {0x0, 0xffffffff}], 0x20}) 10m36.011959174s ago: executing program 3 (id=5587): r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000c00), 0xe0041, 0x0) pwritev2(r0, &(0x7f0000000ec0)=[{&(0x7f0000000c40)="cafe57c225", 0x5}], 0x1, 0x2, 0x4, 0x1) 10m35.830172668s ago: executing program 3 (id=5590): syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2000003, &(0x7f0000000040)={[{@adinicb}, {@unhide}, {@anchor={'anchor', 0x3d, 0xec1}}, {@lastblock={'lastblock', 0x3d, 0x2}}, {@gid_ignore}, {@undelete}, {@volume={'volume', 0x3d, 0x7}}, {@gid_forget}, {@lastblock={'lastblock', 0x3d, 0x2}}]}, 0xde, 0xc2e, &(0x7f0000000f40)="$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") mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 10m35.499693345s ago: executing program 3 (id=5594): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xe) 10m34.879002638s ago: executing program 3 (id=5604): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/cgroups\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) 10m34.77369755s ago: executing program 32 (id=5604): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/cgroups\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) 3.822749891s ago: executing program 1 (id=19396): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='children\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) pread64(r0, &(0x7f0000000300)=""/4092, 0xffc, 0x37a) 2.882806901s ago: executing program 1 (id=19412): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x3, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0xfff, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0xe, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0xb, 0xa, 0xb6, 0x24, 0xcb, 0x180, 0x7f, 0x200, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x84b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x10, 0xa, 0x6b13, 0x202, 0x7ff, 0x9, 0x7fffffff, 0xffff, 0x9, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0x5, 0x8, 0x10, 0x7, 0x3, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x668, 0x4, 0x9, 0x2, 0x2, 0x1ff, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xff, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x7, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x12, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x5, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x10, 0x7, 0x2, 0x7, 0xc4c, 0x400045e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x942, 0x1, 0x2, 0xfdffffff, 0x4, 0x200000ce, 0x6, 0x0, 0x1, 0x0, 0x3, 0x0, 0x9, 0x10000009, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0xfffffffe, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80001ffe, 0x8, 0x8000, 0x10004, 0x10, 0x1a, 0x8, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x0, 0x19, 0x4, 0x1, 0xb, 0x1, 0x8, 0x403, 0x81, 0x80000004, 0x9, 0x9, 0x3, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x6, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x5, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0xe, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x0, 0x7, 0x6, 0x709, 0x2, 0x40000049, 0x10, 0xfffffff7, 0xfffff772, 0x200, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x8d, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xfffefffd, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x0, 0x80000000, 0xb, 0x4, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x8, 0x8000005, 0x4, 0x101, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x7, 0x0, 0x80000000, 0xd, 0x2, 0x8001, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x2000011, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x6, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x200000, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x1ff, 0x4b15, 0x10000, 0x1, 0x6, 0x9, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x20000, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x0, 0x9, 0xffffc487, 0x204, 0x10002, 0x81, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x8000000, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0xe, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x8, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0xb5, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6708, 0x10001, 0x0, 0x80, 0xb, 0x6, 0x0, 0xa95a, 0x2, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0x4000ff, 0x9, 0x0, 0x80, 0xfea5, 0x3a, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0x10, 0x3, 0xe, 0x8, 0x1000, 0x4, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x7, 0x3, 0x35, 0x8, 0x1, 0x2, 0x34, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x6, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x9, 0x9, 0x1, 0x9, 0x7, 0x9, 0x9e95, 0x9, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x8, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0x4bfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe01, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0x103, 0x103, 0x7, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9b3, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x4, 0x20, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0xa, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x4, 0x7f, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffefffe, 0x924, 0x499, 0x8, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x8, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x3fc, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xce, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x3, 0xa7b, 0x1, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0xa4, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x80400, 0x1, 0x8, 0xa, 0x7, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x1, 0x3, 0x20000000, 0x0, 0xe, 0x5, 0x9, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0x5, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x401, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0xb6f, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x1, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffc, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0xff0f) 2.580652587s ago: executing program 1 (id=19414): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x2, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc0b913efba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1020060bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b43706192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f00000000c0)={0x1, 0x1}) 2.380926081s ago: executing program 1 (id=19417): syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da00090589"], 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 2.234455844s ago: executing program 5 (id=19419): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file0\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x445a, &(0x7f0000004480)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x82) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x9, 0x401, 0x4010}) 1.904542961s ago: executing program 0 (id=19421): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./file2\x00', 0x0, &(0x7f0000000340)=ANY=[], 0x1, 0x6bf, &(0x7f0000001d80)="$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") link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000300)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRES8=0x0, @ANYRES64], 0xb, 0x0, &(0x7f0000000000)) 1.415887311s ago: executing program 0 (id=19424): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000640)="82", 0x1}], 0x1}, 0x400c9c1) 1.315842113s ago: executing program 2 (id=19425): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r0, &(0x7f0000002240)={0x2020}, 0x2020) writev(r0, &(0x7f0000002140)=[{&(0x7f0000000680)='T01\n', 0x4}, {&(0x7f0000000080)="37c870ef0c000000e20ecb", 0xb}], 0x2) 1.210359135s ago: executing program 0 (id=19426): syz_mount_image$hfs(&(0x7f0000000280), &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1214080, &(0x7f0000000a00)={[{@uid={'uid', 0x3d, 0xee01}}, {@codepage={'codepage', 0x3d, 'maccyrillic'}}, {@gid}, {@dir_umask={'dir_umask', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@part={'part', 0x3d, 0x7ff}}, {@gid}]}, 0x1, 0x32e, &(0x7f0000000b00)="$eJzs3U1r1E4cB/DvZLPb3XbpP/+2UvBYLXgqbT0oXixSBPENeJBibVcojRW0ggri6lmKngTBoze9ir4FvYhvQE89iCe9FA9GZiazSbaZ7ENj02W/H+g2D/Pwm0weZlZqQERD68Ly19end+WPKAMoATgHOACqgAvgGKard7e2N7b9xnpWQSWVQ/4I6JxiX5q1rUZaVplP5Qh5cs1FHe7OpRyaSJmC4FvHND8PJRIqjtDX/j4OMBJenWp/9dAj+zeaul3DJdbDYg97uIfxIsMhIqLihc9/J3xK1MPxu+MAs+HYfNCf/4nxzV5xcRwJree/o9cDIY/Pf2pXNN9TUzjZ+46ZJaaVpc+JenJjEB3uCvSZlegA0WlWqWJxajc2/MZcUxXwBOdDsWRT6nMdpiGKLdqK/jWTMjfNkNX2bGOqDWXZhkVL/JM91/jhO16kV7fyqYuYxEfxWawIDy+x3hr/uYGQB0cdH6+tp3T88/YSVSs9nSrRymhO/7+q5LjpgfdvolbWbMe1ipKMJY0sRbSP3z0T57OKPRcmEl81mNYt2Funck2m5lpsrf9OzTXVnqvmlv3G3NotP/OrlNykzujEjrgiZvAD77AcG/87MvUs7Fdm4s4vVMrwzMhsj6tSWvoxQV3AN1OuTKeLzEPtYmpHZ3uK6ziL8Tv3H2yu+n7jdk4Lz9/q4vvIbi6VXOPpf0GfiCJqjvwdS4OqXCgDyK3SP0EQ+L6pM7bLxWE0uayqPfMq0YOiqVcPVgWa+06JJXtiAEsAwi3mjtBP7Y9auUaiArvK/kv2gNqSfkKaqHLsgrpll6kqsauEka6ulFof8Vx+uLnq935LocETdTqmrxYdDBVBDq+Env/F5ivz6q4jP7yM2UjQqfBYiQuWGdCE+hztbgbXKtY6gxszCx3mXCdOASfbanRganzcXqwXxtk2pD8aev+nDLGML7jG7/+JiIiIiIiIiIiIiIiIiIiIiIiIiAZNr3+o0M+fEyRr3B3C/3iDiIiIiIiIiIiIiIiIiIiIiIiIiIiIiOhgYu//BUrqjTGVwt//WzLv/w03jKZkMu+lIKK+/Q0AAP//oLJZGA==") r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r0, &(0x7f00000008c0)=""/178, 0xb2) 1.168876876s ago: executing program 2 (id=19427): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c0007"], 0xd0}}, 0x0) 1.084863098s ago: executing program 5 (id=19428): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) 1.084293608s ago: executing program 2 (id=19429): set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) shutdown(0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 991.267339ms ago: executing program 0 (id=19430): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x20, r1, 0xe29, 0x70bd29, 0x5dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) 986.6155ms ago: executing program 5 (id=19431): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x84) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 897.558692ms ago: executing program 4 (id=19432): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cgroups\x00', 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendfile(r1, r0, 0x0, 0x2) 892.003952ms ago: executing program 5 (id=19433): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x2, 0x7, 0x10, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4002}, [@call={0x85, 0x0, 0x0, 0xf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) 848.792823ms ago: executing program 2 (id=19434): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @rand_addr=0x64010102}, 0xa) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) 822.678013ms ago: executing program 0 (id=19435): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0x24, 0x4) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) 787.011504ms ago: executing program 4 (id=19436): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x40, 0x7, 0x48, 0x1}, {0x28, 0x4, 0x76, 0x95}, {0x6, 0x25, 0x4, 0x207}]}, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000c00)=ANY=[@ANYBLOB="ec010000", @ANYBLOB="040026"], 0x1ec}, 0x1, 0x0, 0x0, 0x2000c881}, 0xc000) 765.596524ms ago: executing program 2 (id=19437): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x2808082, &(0x7f0000000300)={[{@force}, {@force}, {@nls={'nls', 0x3d, 'cp775'}}, {@nodecompose}, {}, {@uid}, {@type={'type', 0x3d, "d3a74bc7"}}]}, 0x1, 0x6e8, &(0x7f0000001f80)="$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") mount$nfs(&(0x7f00000001c0)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\xdd\x98\xb8\rQh#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15A\xb5\xbbG\xa0\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f0000000240)='./file0\x00', 0x0, 0x211008, 0x0) mount$nfs(&(0x7f0000000540)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\xdd\x98\xb8\rQh#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15A\xb5\xbbG\xa0\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f0000000240)='./file0\x00', 0x0, 0x201008, 0x0) 716.424985ms ago: executing program 1 (id=19438): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f0000009780)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="10000000daffffffa2aa853d458f486e"], 0x10) 686.289376ms ago: executing program 5 (id=19439): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 678.302526ms ago: executing program 4 (id=19440): sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000140)={0x54, 0x0, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044040}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4004}, 0x44) 628.662747ms ago: executing program 1 (id=19441): r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406a05100000000000000109022d00010000000009040000010300000009210000080122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="002207000000851f82"], 0x0}, 0x0) 568.085268ms ago: executing program 4 (id=19442): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2402, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000500)={0x66666666666666d, 0x0, [{0x80000001, 0x3, 0x1, 0x7fffffff, 0x9, 0x3, 0x4}, {0x7, 0xb, 0x6, 0x7f, 0xd11, 0x4, 0xfffffffe}, {0xd, 0x9, 0x1, 0x4, 0x80, 0x81, 0x2}, {0x2, 0x40, 0x5, 0x5, 0x2, 0x4, 0x1}]}) 508.83674ms ago: executing program 2 (id=19443): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x1, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xf4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x9, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xf, 0x5}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000340)={0x0, 0x23, 0x9, {0x9, 0x21, "7e00a67411d869"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 475.043741ms ago: executing program 5 (id=19444): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c2bd0b20f8061b3039bb0102030109021b0001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 428.090702ms ago: executing program 4 (id=19445): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000200000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x8}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "1c"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x70}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) 342.456493ms ago: executing program 4 (id=19446): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f0000000000)={[{@coherency_buffered}, {@heartbeat_none}, {@nouser_xattr}, {@inode64}, {@heartbeat_none}, {@usrquota}]}, 0x0, 0x4703, &(0x7f0000004800)="$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") setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x1, 0x0) setxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000280)=@v2={0x3, 0x2, 0x3, 0xc7a, 0x48, "6592fdb85abc7ccefdb7cc916e69f2c2c136ae473c4987024b334aa0813b9b9216ec61c580bcb21fdd2733644ddf132438b05edce1db30a17e213320ab550e6fbbcc726e667d8da2"}, 0x51, 0x0) 0s ago: executing program 0 (id=19447): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xd) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000280)="2adb", 0x2}], 0x1) kernel console output (not intermixed with test programs): 17043'. [ 1006.698140][T12488] x_tables: unsorted entry at hook 2 [ 1006.713399][T12490] No such timeout policy "syz0" [ 1006.857401][T12500] qrtr: Invalid version 0 [ 1007.242225][T12538] loop1: detected capacity change from 0 to 512 [ 1007.309697][T12546] loop2: detected capacity change from 0 to 1024 [ 1007.341630][T12538] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1007.403842][T12538] EXT4-fs error (device loop1): __ext4_iget:4919: inode #11: block 1: comm syz.1.17071: invalid block [ 1007.428481][T12555] loop4: detected capacity change from 0 to 4096 [ 1007.443010][T12538] EXT4-fs (loop1): Remounting filesystem read-only [ 1007.517833][T12567] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1007.537607][T12538] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.17071: couldn't read orphan inode 11 (err -117) [ 1007.561087][T12568] openvswitch: netlink: Missing valid actions attribute. [ 1007.593112][T12568] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1007.614326][T12538] EXT4-fs (loop1): Remounting filesystem read-only [ 1007.665717][T12538] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,max_dir_size_kb=0x00000000010001ff,noblock_validity,max_dir_size_kb=0x0000000000000009,nodioread_nolock,jqfmt=vfsold,. Quota mode: none. [ 1007.710868][ T154] hfsplus: b-tree write err: -5, ino 8 [ 1007.812656][T12588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17085'. [ 1008.072895][T12612] loop4: detected capacity change from 0 to 512 [ 1008.241104][T12612] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 1008.254593][T12612] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 1008.300256][T12612] EXT4-fs (loop4): 1 truncate cleaned up [ 1008.306866][T12612] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,usrjquota="data=ordered,noload,noinit_itable,grpjquota="init_itable,jqfmt=vfsold,grpquota,,errors=continue. Quota mode: writeback. [ 1008.327032][T12638] netlink: 'syz.5.17102': attribute type 9 has an invalid length. [ 1008.327058][T12638] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.17102'. [ 1008.374659][T12635] loop1: detected capacity change from 0 to 256 [ 1008.392887][T12646] dlm: no local IP address has been set [ 1008.410608][T12612] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #2: block 4: comm syz.4.17091: lblock 0 mapped to illegal pblock 4 (length 1) [ 1008.425257][T12646] dlm: cannot start dlm midcomms -107 [ 1008.441731][T12635] exfat: Deprecated parameter 'namecase' [ 1008.447721][T12635] exfat: Deprecated parameter 'namecase' [ 1008.463810][T12635] exfat: Deprecated parameter 'namecase' [ 1008.626275][T12635] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 1008.702566][T12658] loop0: detected capacity change from 0 to 4096 [ 1008.783382][T12658] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 1008.850208][T12683] loop1: detected capacity change from 0 to 512 [ 1008.879568][ T8023] usb 3-1: new full-speed USB device number 116 using dummy_hcd [ 1009.005019][T12683] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1009.090639][T12683] ext4 filesystem being mounted at /3519/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1009.267030][T12683] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1009.315547][ T8023] usb 3-1: config 0 has an invalid interface number: 229 but max is 0 [ 1009.334309][T12730] netlink: 76 bytes leftover after parsing attributes in process `syz.0.17121'. [ 1009.343903][ T8023] usb 3-1: config 0 has no interface number 0 [ 1009.369588][T12729] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1009.375728][ T8023] usb 3-1: config 0 interface 229 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1009.388817][T12729] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1009.443922][T12729] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1009.464595][ C0] vkms_vblank_simulate: vblank timer overrun [ 1009.597626][T11279] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1009.605522][ T8023] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=1f.38 [ 1009.628056][ T8023] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.662160][ T8023] usb 3-1: Product: syz [ 1009.676341][ T8023] usb 3-1: Manufacturer: syz [ 1009.707355][ T8023] usb 3-1: SerialNumber: syz [ 1009.720733][ T8023] usb 3-1: config 0 descriptor?? [ 1009.866164][ T26] audit: type=1400 audit(2000001954.360:134): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="#(%#{//(@\)//&@},['%%&\#*" pid=12762 comm="syz.4.17133" [ 1009.976742][T12769] netlink: 24 bytes leftover after parsing attributes in process `syz.5.17136'. [ 1010.054548][ T8023] usb 3-1: USB disconnect, device number 116 [ 1010.169204][T12781] xt_bpf: check failed: parse error [ 1010.342496][ T8023] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1010.581377][T12798] loop0: detected capacity change from 0 to 64 [ 1010.771300][T12808] netlink: 128 bytes leftover after parsing attributes in process `syz.4.17150'. [ 1010.827222][T12808] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1010.938398][T12817] infiniband syz1: set down [ 1011.140272][ T8023] bond0 speed is unknown, defaulting to 1000 [ 1011.799615][T12882] device bond2 entered promiscuous mode [ 1011.816739][T12882] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1012.165888][T12949] infiniband syz1: set down [ 1012.277368][T12957] libceph: resolve ' [ 1012.277368][T12957] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 1012.277368][T12957] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 1012.303883][T11279] bond0 speed is unknown, defaulting to 1000 [ 1012.709652][T13011] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1012.728331][T13011] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1012.746725][T13011] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1012.972259][ T8023] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1013.193839][T13040] tmpfs: Bad value for 'mpol' [ 1013.635178][T13079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17224'. [ 1013.847126][T11279] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1014.222774][T13122] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17241'. [ 1014.462374][T13137] netlink: 'syz.2.17246': attribute type 4 has an invalid length. [ 1014.534488][T13146] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17250'. [ 1014.938277][T13179] kAFS: No cell specified [ 1014.969924][T13183] usb usb9: usbfs: process 13183 (syz.1.17261) did not claim interface 8 before use [ 1015.443871][T13225] netlink: 'syz.0.17274': attribute type 1 has an invalid length. [ 1016.617128][T13305] netlink: 'syz.1.17303': attribute type 3 has an invalid length. [ 1016.789932][T13316] loop0: detected capacity change from 0 to 256 [ 1016.911431][T13316] FAT-fs (loop0): Directory bread(block 64) failed [ 1016.945975][T13316] FAT-fs (loop0): Directory bread(block 65) failed [ 1016.970804][T13316] FAT-fs (loop0): Directory bread(block 66) failed [ 1017.014430][ T9675] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1017.025612][T13316] FAT-fs (loop0): Directory bread(block 67) failed [ 1017.050722][T13316] FAT-fs (loop0): Directory bread(block 68) failed [ 1017.061165][T13332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17312'. [ 1017.081839][T13316] FAT-fs (loop0): Directory bread(block 69) failed [ 1017.088969][T13316] FAT-fs (loop0): Directory bread(block 70) failed [ 1017.113410][T13316] FAT-fs (loop0): Directory bread(block 71) failed [ 1017.139813][T13316] FAT-fs (loop0): Directory bread(block 72) failed [ 1017.168531][T13316] FAT-fs (loop0): Directory bread(block 73) failed [ 1017.210127][T13316] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1017.276310][T13344] ceph: No source [ 1017.286921][ T9675] usb 6-1: Using ep0 maxpacket: 8 [ 1017.435781][ T9675] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1017.456764][ T9675] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1017.505662][ T9675] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1017.537451][T13361] netlink: 36 bytes leftover after parsing attributes in process `syz.2.17322'. [ 1017.570346][ T9675] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1017.600625][ T9675] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1017.611107][T13361] netlink: 36 bytes leftover after parsing attributes in process `syz.2.17322'. [ 1017.642388][T13361] netlink: 52 bytes leftover after parsing attributes in process `syz.2.17322'. [ 1017.658017][ T9675] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1017.684440][ T9675] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.723723][ T9675] usb 6-1: config 0 descriptor?? [ 1017.762510][T13310] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1018.060963][ T4191] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 1018.129117][T13407] netlink: 'syz.4.17336': attribute type 2 has an invalid length. [ 1018.231178][ T677] usb 6-1: USB disconnect, device number 85 [ 1018.699114][T13459] netlink: 76 bytes leftover after parsing attributes in process `syz.0.17352'. [ 1018.750356][T13459] netlink: 72 bytes leftover after parsing attributes in process `syz.0.17352'. [ 1018.778194][T13459] netlink: 'syz.0.17352': attribute type 3 has an invalid length. [ 1018.805561][T13459] netlink: 11 bytes leftover after parsing attributes in process `syz.0.17352'. [ 1018.841801][T13458] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1018.896153][T13458] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1018.927262][T13458] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1019.124584][T13458] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 1019.188252][T13488] netlink: 'syz.5.17360': attribute type 10 has an invalid length. [ 1019.482695][T13500] loop1: detected capacity change from 0 to 4096 [ 1019.621108][T13500] ntfs: volume version 3.1. [ 1019.683922][T13488] team0 (unregistering): Port device team_slave_0 removed [ 1019.759068][T13488] team0 (unregistering): Port device team_slave_1 removed [ 1020.258094][T13570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17388'. [ 1020.547311][T13602] loop0: detected capacity change from 0 to 8 [ 1020.657397][T13602] SQUASHFS error: Unable to read inode 0xa7 [ 1021.359571][T13682] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17427'. [ 1021.696644][T13716] netlink: 24 bytes leftover after parsing attributes in process `syz.5.17438'. [ 1021.788185][T11279] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1021.872853][T13735] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17443'. [ 1022.023166][T11279] usb 1-1: Using ep0 maxpacket: 8 [ 1022.161420][T11279] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1022.198720][T11279] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1022.321839][T13759] netlink: 168 bytes leftover after parsing attributes in process `syz.4.17451'. [ 1022.358110][T13764] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17453'. [ 1022.358216][T13764] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17453'. [ 1022.459892][T11279] usb 1-1: New USB device found, idVendor=047f, idProduct=c010, bcdDevice= 0.40 [ 1022.459928][T11279] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.459951][T11279] usb 1-1: Product: syz [ 1022.459968][T11279] usb 1-1: Manufacturer: syz [ 1022.459984][T11279] usb 1-1: SerialNumber: syz [ 1022.612461][T13777] trusted_key: encrypted_key: insufficient parameters specified [ 1022.759680][ T26] audit: type=1400 audit(2000001968.201:135): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=13786 comm="syz.1.17460" [ 1022.825358][ T688] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1022.999392][T11279] usb 1-1: USB disconnect, device number 17 [ 1023.193573][ T688] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1023.242175][ T688] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1023.314269][ T4694] udevd[4694]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1023.345242][ T688] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1023.363658][ T688] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1023.382080][ T688] usb 5-1: SerialNumber: syz [ 1023.572264][T13849] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17475'. [ 1023.692892][ T688] usb 5-1: 0:2 : does not exist [ 1023.697916][ T688] usb 5-1: unit 48 not found! [ 1023.766708][ T688] usb 5-1: USB disconnect, device number 14 [ 1023.876326][T13883] netlink: 40 bytes leftover after parsing attributes in process `syz.1.17481'. [ 1023.990033][ T4180] udevd[4180]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1023.992172][T13887] IPv6: NLM_F_CREATE should be specified when creating new route [ 1024.244062][T13899] device bridge11 entered promiscuous mode [ 1024.763377][T13939] loop2: detected capacity change from 0 to 512 [ 1024.937795][T13939] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1025.004220][T13939] ext4 filesystem being mounted at /3374/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1025.073088][T13939] EXT4-fs error (device loop2): ext4_xattr_block_find:1857: inode #15: comm syz.2.17499: corrupted xattr block 33 [ 1025.127513][T13964] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1025.376876][T13982] netlink: 'syz.1.17512': attribute type 10 has an invalid length. [ 1025.559788][T13912] loop4: detected capacity change from 0 to 32768 [ 1025.645021][T14001] CIFS: bad ip= option (.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð) [ 1025.704079][T13982] team0 (unregistering): Port device team_slave_0 removed [ 1025.793768][T13982] team0 (unregistering): Port device team_slave_1 removed [ 1025.904131][T13912] XFS (loop4): Mounting V5 Filesystem [ 1025.934986][T14009] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17521'. [ 1025.951452][T14009] netlink: 16 bytes leftover after parsing attributes in process `syz.0.17521'. [ 1025.962227][T13912] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 1025.978559][T13912] XFS (loop4): Tail block (0x29) overwrite detected. Updated to 0x30 [ 1026.005143][T13912] XFS (loop4): Ending clean mount [ 1026.135590][ T4195] XFS (loop4): Unmounting Filesystem [ 1026.178177][ T9679] usb 3-1: new full-speed USB device number 117 using dummy_hcd [ 1026.345651][T14037] devtmpfs: Unknown parameter 'debug' [ 1026.387064][T14042] xt_recent: hitcount (65535) is larger than allowed maximum (255) [ 1026.598008][ T9679] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1026.653628][ T9679] usb 3-1: not running at top speed; connect to a high speed hub [ 1026.765447][ T9679] usb 3-1: config 17 has an invalid interface number: 8 but max is 1 [ 1026.773813][ T9679] usb 3-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 1026.794590][T11279] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1026.804130][ T9679] usb 3-1: config 17 has no interface number 0 [ 1026.821452][ T9679] usb 3-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid maxpacket 64768, setting to 64 [ 1026.840852][ T9679] usb 3-1: config 17 interface 8 has no altsetting 0 [ 1026.981847][T14078] netlink: 'syz.4.17538': attribute type 10 has an invalid length. [ 1027.045198][ T9679] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 1027.054596][T11279] usb 1-1: Using ep0 maxpacket: 8 [ 1027.069794][ T9679] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.097212][ T9679] usb 3-1: Product: syz [ 1027.125654][ T9679] usb 3-1: Manufacturer: syz [ 1027.132028][T14078] team0 (unregistering): Port device nlmon0 removed [ 1027.146585][ T9679] usb 3-1: SerialNumber: syz [ 1027.203962][T11279] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1027.227420][T11279] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1027.262465][T11279] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1027.296433][T11279] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1027.407535][T14108] netlink: 1076 bytes leftover after parsing attributes in process `syz.1.17547'. [ 1027.476314][ T9679] usb 3-1: selecting invalid altsetting 0 [ 1027.517477][T11279] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1027.549305][T11279] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.557870][ T9679] usb 3-1: USB disconnect, device number 117 [ 1027.614826][T11279] usb 1-1: Product: syz [ 1027.641935][T11279] usb 1-1: Manufacturer: syz [ 1027.660073][T11279] usb 1-1: SerialNumber: syz [ 1027.675356][T11279] usb 1-1: config 0 descriptor?? [ 1027.728342][T11279] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 1027.820634][ T4180] udevd[4180]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1027.932533][T11279] snd_usb_toneport 1-1:0.0: cannot get proper max packet size [ 1027.955892][T11279] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 1027.995732][T11279] snd_usb_toneport: probe of 1-1:0.0 failed with error -22 [ 1028.141237][T11279] usb 1-1: USB disconnect, device number 18 [ 1028.436676][T14198] loop1: detected capacity change from 0 to 256 [ 1028.591307][T14198] FAT-fs (loop1): Directory bread(block 64) failed [ 1028.617635][T14198] FAT-fs (loop1): Directory bread(block 65) failed [ 1028.629994][T14198] FAT-fs (loop1): Directory bread(block 66) failed [ 1028.679837][T14198] FAT-fs (loop1): Directory bread(block 67) failed [ 1028.706959][T14198] FAT-fs (loop1): Directory bread(block 68) failed [ 1028.748946][T14198] FAT-fs (loop1): Directory bread(block 69) failed [ 1028.766065][T14198] FAT-fs (loop1): Directory bread(block 70) failed [ 1028.773104][ T9675] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1028.792299][T14198] FAT-fs (loop1): Directory bread(block 71) failed [ 1028.809942][T14198] FAT-fs (loop1): Directory bread(block 72) failed [ 1028.825734][T14198] FAT-fs (loop1): Directory bread(block 73) failed [ 1029.004198][T14235] loop2: detected capacity change from 0 to 256 [ 1029.039549][ T9675] usb 6-1: Using ep0 maxpacket: 8 [ 1029.236834][ T9675] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1029.328945][ T9675] usb 6-1: config 1 has an invalid interface number: 1 but max is 0 [ 1029.337069][ T9675] usb 6-1: config 1 has no interface number 0 [ 1029.378104][ T9675] usb 6-1: config 1 interface 1 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 1029.419992][ T9675] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1029.577858][T14278] netlink: 52 bytes leftover after parsing attributes in process `syz.2.17599'. [ 1029.591605][T14283] loop1: detected capacity change from 0 to 256 [ 1029.627769][ T9675] usb 6-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 0.40 [ 1029.640777][ T9675] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.659047][ T9675] usb 6-1: Product: syz [ 1029.663277][ T9675] usb 6-1: Manufacturer: syz [ 1029.703030][ T9675] usb 6-1: SerialNumber: syz [ 1029.748182][T14205] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1029.771078][T14290] lo speed is unknown, defaulting to 1000 [ 1029.778629][T14290] bond0 speed is unknown, defaulting to 1000 [ 1030.115149][ T9675] usb 6-1: USB disconnect, device number 86 [ 1030.283064][T14339] netlink: 'syz.1.17608': attribute type 1 has an invalid length. [ 1030.447560][T14361] loop1: detected capacity change from 0 to 16 [ 1030.481066][T14361] erofs: (device loop1): mounted with root inode @ nid 36. [ 1030.508982][T14361] erofs: (device loop1): erofs_read_inode: unsupported i_format 1796 of nid 86 [ 1030.524198][ T5769] udevd[5769]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1030.546358][T14374] loop4: detected capacity change from 0 to 256 [ 1030.808869][T14402] loop1: detected capacity change from 0 to 512 [ 1030.907026][T14402] EXT4-fs (loop1): Ignoring removed orlov option [ 1031.029518][T14408] loop4: detected capacity change from 0 to 4096 [ 1031.050678][T14402] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrjquota=,init_itable,sysvgroups,orlov,,errors=continue. Quota mode: writeback. [ 1031.095644][T14402] ext4 filesystem being mounted at /3646/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1031.104173][T14408] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 1031.155236][T14402] EXT4-fs error (device loop1): ext4_get_verity_descriptor_location:338: inode #15: comm syz.1.17621: verity file corrupted; can't find descriptor [ 1031.204261][T14402] fs-verity (loop1, inode 15): Error -117 getting verity descriptor size [ 1031.344625][T14408] ntfs3: loop4: ino=5, "/" directory corrupted [ 1031.362815][T14408] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1031.366512][T14443] netlink: 72 bytes leftover after parsing attributes in process `syz.2.17633'. [ 1032.010391][T14491] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1032.035121][T14491] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1032.162948][T14502] xt_hashlimit: max too large, truncated to 1048576 [ 1032.240034][T14509] openvswitch: netlink: Actions may not be safe on all matching packets [ 1032.281440][T14441] loop0: detected capacity change from 0 to 32768 [ 1032.372203][T14441] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.17634 (14441) [ 1032.397689][T14522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17658'. [ 1032.460736][T14441] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1032.493208][T14441] BTRFS info (device loop0): using free space tree [ 1032.521212][T14441] BTRFS info (device loop0): has skinny extents [ 1032.759327][T14441] BTRFS info (device loop0): enabling ssd optimizations [ 1033.078078][T14585] netlink: 830 bytes leftover after parsing attributes in process `syz.5.17674'. [ 1033.336949][ T677] usb 3-1: new full-speed USB device number 118 using dummy_hcd [ 1033.672209][ T677] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1033.722363][ T677] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1033.784233][ T677] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1033.858425][ T677] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.939580][T14550] loop4: detected capacity change from 0 to 32768 [ 1034.019174][T14550] (syz.4.17665,14550,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1034.090950][T14550] (syz.4.17665,14550,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1034.136555][T14550] (syz.4.17665,14550,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0x8514aa1d. Applying ECC. [ 1034.229966][T14550] JBD2: Ignoring recovery information on journal [ 1034.353509][T14550] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1034.391428][ T677] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 1034.401376][ T677] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input70 [ 1034.460549][ T677] input: failed to attach handler kbd to device input70, error: -5 [ 1034.473280][ T8019] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1034.501848][ T677] usb 3-1: USB disconnect, device number 118 [ 1034.700949][ T4195] ocfs2: Unmounting device (7,4) on (node local) [ 1034.763880][T14629] loop0: detected capacity change from 0 to 1024 [ 1034.911566][ T8019] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1035.007648][ T8019] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1035.028298][ T8019] usb 2-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1035.081368][ T8019] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1035.088057][ T8019] usb 2-1: config 1 interface 0 has no altsetting 1 [ 1035.116410][ T8020] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1035.231921][T14652] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1035.321605][T14655] netlink: 96 bytes leftover after parsing attributes in process `syz.5.17686'. [ 1035.331477][ T689] lo speed is unknown, defaulting to 1000 [ 1035.359049][ T8019] usb 2-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 1035.380691][ T8019] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.389169][ T8020] usb 1-1: Using ep0 maxpacket: 16 [ 1035.422053][ T8019] usb 2-1: Product: syz [ 1035.449207][ T8019] usb 2-1: Manufacturer: syz [ 1035.474566][ T8019] usb 2-1: SerialNumber: syz [ 1035.564242][ T8020] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1035.718156][T14670] netlink: 124 bytes leftover after parsing attributes in process `syz.2.17691'. [ 1035.762002][ T8019] smsusb:smsusb_probe: board id=8, interface number 0 [ 1035.769506][ T8019] usb 2-1: selecting invalid altsetting 0 [ 1035.797542][ T8019] smsusb:smsusb_probe: usb_set_interface failed, rc -22 [ 1035.824284][ T8019] smsusb: probe of 2-1:1.0 failed with error -22 [ 1035.831364][ T8020] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1035.852954][ T8020] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.862641][ T8019] usb 2-1: USB disconnect, device number 12 [ 1035.888176][ T8020] usb 1-1: Product: syz [ 1035.894527][ T8020] usb 1-1: Manufacturer: syz [ 1035.899173][ T8020] usb 1-1: SerialNumber: syz [ 1035.910104][ T689] usb 6-1: new full-speed USB device number 87 using dummy_hcd [ 1036.208480][ T689] usb 6-1: not running at top speed; connect to a high speed hub [ 1036.281976][ T689] usb 6-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 1036.292021][ T8020] usb 1-1: 1:1 : bogus bTerminalLink 8 [ 1036.314176][ T8020] usb 1-1: unit 0 not found! [ 1036.321576][ T8020] usb 1-1: unit 4 not found! [ 1036.344010][ T8020] usb 1-1: unit 12 not found! [ 1036.422189][ T8020] usb 1-1: USB disconnect, device number 19 [ 1036.478004][ T689] usb 6-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=60.1b [ 1036.496524][ T689] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.533479][ T689] usb 6-1: Product: syz [ 1036.547628][ T689] usb 6-1: Manufacturer: syz [ 1036.566993][ T689] usb 6-1: SerialNumber: syz [ 1036.729154][T14615] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1036.777278][ T4508] udevd[4508]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1036.866877][ T689] usb 6-1: USB disconnect, device number 87 [ 1036.999084][T14615] usb 2-1: Using ep0 maxpacket: 8 [ 1037.245469][T14790] netlink: 'syz.2.17716': attribute type 5 has an invalid length. [ 1037.288713][T14615] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1037.307563][T14615] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1037.315614][T14615] usb 2-1: Product: syz [ 1037.343747][T14615] usb 2-1: Manufacturer: syz [ 1037.363466][T14615] usb 2-1: SerialNumber: syz [ 1037.390148][T14615] usb 2-1: config 0 descriptor?? [ 1037.459006][T14615] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1037.554178][T14806] loop2: detected capacity change from 0 to 2048 [ 1037.876025][T14615] gspca_zc3xx: reg_r err -71 [ 1037.876084][T14615] gspca_zc3xx: probe of 2-1:0.0 failed with error -71 [ 1037.881988][T14615] usb 2-1: USB disconnect, device number 13 [ 1037.975258][T14773] loop4: detected capacity change from 0 to 32768 [ 1038.044308][T14849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17731'. [ 1038.082505][T14773] XFS (loop4): Mounting V5 Filesystem [ 1038.350079][T14773] XFS (loop4): Ending clean mount [ 1038.390358][T14773] XFS (loop4): Quotacheck needed: Please wait. [ 1038.555828][ T689] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1038.616409][T14773] XFS (loop4): Quotacheck: Done. [ 1038.703215][ T4195] XFS (loop4): Unmounting Filesystem [ 1038.795392][ T689] usb 3-1: Using ep0 maxpacket: 16 [ 1038.871451][T14906] ERROR: device name not specified. [ 1038.878791][T14905] dlm: dev_write: no op 0 0 [ 1038.883938][T14902] bond0: Error: CAN devices cannot be enslaved [ 1038.919567][ T689] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1038.966501][ T689] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 1039.003760][ T689] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.036280][ T689] usb 3-1: config 0 descriptor?? [ 1039.117617][ T689] xbox_remote_probe: Unexpected endpoint_in [ 1039.144935][ T689] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1039.155514][T14921] tmpfs: Bad value for 'mpol' [ 1039.172785][T14926] sctp: [Deprecated]: syz.0.17756 (pid 14926) Use of int in max_burst socket option deprecated. [ 1039.172785][T14926] Use struct sctp_assoc_value instead [ 1039.323077][ T689] usb 3-1: USB disconnect, device number 119 [ 1039.333171][T14936] netlink: 'syz.5.17759': attribute type 6 has an invalid length. [ 1039.906550][T14983] loop1: detected capacity change from 0 to 1024 [ 1040.021495][ T4245] hfsplus: b-tree write err: -5, ino 25 [ 1040.027330][ T4245] hfsplus: b-tree write err: -5, ino 4 [ 1040.052786][ T4245] hfsplus: b-tree write err: -5, ino 2 [ 1040.319348][T15022] netlink: 'syz.4.17786': attribute type 5 has an invalid length. [ 1040.433992][T15022] device  entered promiscuous mode [ 1040.465060][T15037] netlink: 'syz.0.17791': attribute type 79 has an invalid length. [ 1040.847751][T15077] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.17804'. [ 1041.071929][T15096] netlink: 'syz.0.17810': attribute type 1 has an invalid length. [ 1041.285468][T15113] netlink: zone id is out of range [ 1041.590424][T15140] loop0: detected capacity change from 0 to 128 [ 1041.640017][T15146] netlink: 'syz.4.17827': attribute type 1 has an invalid length. [ 1041.774558][T15152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17828'. [ 1041.810004][T15152] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17828'. [ 1041.930537][T14615] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1042.181562][T14615] usb 3-1: Using ep0 maxpacket: 32 [ 1042.239631][T11279] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 1042.331123][T14615] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1042.340109][T14615] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1042.351111][T15195] netlink: 'syz.0.17842': attribute type 1 has an invalid length. [ 1042.377576][T15195] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1042.401876][T14615] usb 3-1: config 0 has no interface number 0 [ 1042.408822][ T8020] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1042.610815][T14615] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1042.637910][T14615] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.651945][T14615] usb 3-1: Product: syz [ 1042.656170][T14615] usb 3-1: Manufacturer: syz [ 1042.661844][T11279] usb 2-1: config 4 has an invalid interface number: 128 but max is 0 [ 1042.683876][T11279] usb 2-1: config 4 has no interface number 0 [ 1042.690747][ T8020] usb 5-1: Using ep0 maxpacket: 8 [ 1042.707137][T14615] usb 3-1: SerialNumber: syz [ 1042.722768][T11279] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1042.742110][T14615] usb 3-1: config 0 descriptor?? [ 1042.760034][T11279] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1042.797833][T11279] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1042.810801][T14615] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1042.820255][ T8020] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1042.840706][T14615] cx231xx 3-1:0.1: Not found matching IAD interface [ 1042.859927][T11279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.929420][T11279] hub 2-1:4.128: USB hub found [ 1043.005422][T14615] usb 3-1: USB disconnect, device number 120 [ 1043.020910][ T8020] usb 5-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 1043.056025][ T8020] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.082929][ T8020] usb 5-1: Product: syz [ 1043.094014][ T8020] usb 5-1: Manufacturer: syz [ 1043.104381][ T8020] usb 5-1: SerialNumber: syz [ 1043.122725][ T8020] usb 5-1: config 0 descriptor?? [ 1043.127909][T11279] hub 2-1:4.128: config failed, hub doesn't have any ports! (err -19) [ 1043.209443][ T8020] usb 5-1: bad CDC descriptors [ 1043.214660][ T8020] usb 5-1: unsupported MDLM descriptors [ 1043.230766][ T8020] cdc_acm 5-1:0.0: Zero length descriptor references [ 1043.249871][ T8020] cdc_acm: probe of 5-1:0.0 failed with error -22 [ 1043.282052][T15244] netlink: 32 bytes leftover after parsing attributes in process `syz.0.17855'. [ 1043.297418][T15244] netlink: 32 bytes leftover after parsing attributes in process `syz.0.17855'. [ 1043.307308][T15244] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17855'. [ 1043.399928][ T1110] usb 5-1: USB disconnect, device number 15 [ 1043.433113][ T8020] usb 2-1: USB disconnect, device number 14 [ 1043.960941][T15306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17873'. [ 1044.017622][T15311] netlink: zone id is out of range [ 1044.156046][T15322] loop4: detected capacity change from 0 to 128 [ 1044.192617][ T8020] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1044.216427][T15322] EXT4-fs (loop4): Ignoring removed orlov option [ 1044.253977][T15322] EXT4-fs (loop4): mounted filesystem without journal. Opts: orlov,,errors=continue. Quota mode: none. [ 1044.268022][T15322] ext4 filesystem being mounted at /3493/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1044.318084][ T1110] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1044.480782][ T8020] usb 2-1: Using ep0 maxpacket: 8 [ 1044.604944][ T8020] usb 2-1: config index 0 descriptor too short (expected 26, got 18) [ 1044.614093][ T1110] usb 1-1: Using ep0 maxpacket: 32 [ 1044.782177][ T8020] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1044.792307][ T8020] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.800374][ T8020] usb 2-1: Product: syz [ 1044.819551][ T1110] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1044.838604][ T8020] usb 2-1: Manufacturer: syz [ 1044.853403][ T8020] usb 2-1: SerialNumber: syz [ 1044.874571][ T8020] usb 2-1: config 0 descriptor?? [ 1044.934631][ T8020] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1045.099926][ T1110] usb 1-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice= 0.40 [ 1045.136898][ T1110] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.164197][ T1110] usb 1-1: Product: syz [ 1045.172459][ T1110] usb 1-1: Manufacturer: syz [ 1045.178634][ T1110] usb 1-1: SerialNumber: syz [ 1045.293754][T15394] tmpfs: Bad value for 'mpol' [ 1045.332749][ T8020] gspca_sq930x: ucbus_write failed -71 [ 1045.471903][ T1110] snd-usb-audio: probe of 1-1:1.0 failed with error -71 [ 1045.508873][ T1110] snd-usb-audio: probe of 1-1:1.1 failed with error -71 [ 1045.551921][ T1110] snd-usb-audio: probe of 1-1:1.2 failed with error -71 [ 1045.559091][ T8020] gspca_sq930x: Sensor ov9630 not yet treated [ 1045.573951][ T8020] sq930x: probe of 2-1:0.0 failed with error -22 [ 1045.590178][ T1110] usb 1-1: USB disconnect, device number 20 [ 1045.608019][ T8020] usb 2-1: USB disconnect, device number 15 [ 1045.834159][T15440] netlink: 'syz.5.17910': attribute type 3 has an invalid length. [ 1045.852217][T15440] netlink: 3 bytes leftover after parsing attributes in process `syz.5.17910'. [ 1046.031239][T15455] netlink: 72 bytes leftover after parsing attributes in process `syz.2.17915'. [ 1046.189617][ T8020] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1046.473531][T15494] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1046.524646][T15494] overlayfs: bad mount option "redirect_dir=nofollow\" [ 1046.609466][ T8020] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1046.646521][ T8020] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1046.814483][ T8020] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 1046.841811][ T8020] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.879302][ T8020] usb 5-1: Product: syz [ 1046.884477][ T8020] usb 5-1: Manufacturer: syz [ 1046.889205][ T8020] usb 5-1: SerialNumber: syz [ 1046.953896][T11279] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1047.067721][T15537] netlink: 'syz.5.17940': attribute type 1 has an invalid length. [ 1047.085424][T15537] netlink: 224 bytes leftover after parsing attributes in process `syz.5.17940'. [ 1047.108900][T15537] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17940'. [ 1047.146971][T15543] netlink: 'syz.1.17943': attribute type 4 has an invalid length. [ 1047.174130][T15543] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.17943'. [ 1047.205721][T11279] usb 1-1: Using ep0 maxpacket: 32 [ 1047.336623][T11279] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1047.351959][T11279] usb 1-1: config 0 has no interface number 0 [ 1047.363690][T11279] usb 1-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1047.399663][T11279] usb 1-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1047.438373][ T8020] usb 5-1: 0:1 : does not exist [ 1047.468406][ T8020] usb 5-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x300, type = 0 [ 1047.497665][ T8020] usb 5-1: unit 0 not found! [ 1047.542366][ T8020] usb 5-1: USB disconnect, device number 16 [ 1047.560393][T15576] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (8) [ 1047.634446][T11279] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1047.652169][T11279] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.668525][T11279] usb 1-1: Product: syz [ 1047.673715][T11279] usb 1-1: Manufacturer: syz [ 1047.678356][T11279] usb 1-1: SerialNumber: syz [ 1047.692825][T11279] usb 1-1: config 0 descriptor?? [ 1047.775838][T11279] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1047.819255][ T4694] udevd[4694]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1047.876340][ T1110] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1047.979123][T11279] usb 1-1: qt2_setup_urbs - submit read urb failed -90 [ 1047.989319][T11279] quatech2: probe of 1-1:0.51 failed with error -90 [ 1048.127790][ T1110] usb 6-1: Using ep0 maxpacket: 8 [ 1048.215021][T11279] usb 1-1: USB disconnect, device number 21 [ 1048.316203][ T1110] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1048.337484][T15640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17979'. [ 1048.418476][ T1110] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 174, changing to 7 [ 1048.613242][ T1110] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0078, bcdDevice= 0.40 [ 1048.632095][ T1110] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.657303][ T1110] usb 6-1: Product: syz [ 1048.681672][ T1110] usb 6-1: Manufacturer: syz [ 1048.686346][ T1110] usb 6-1: SerialNumber: syz [ 1049.079230][ T1110] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1049.114421][ T1110] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1049.153278][ T1110] usb 6-1: unit 254 not found! [ 1049.204262][ T1110] usb 6-1: USB disconnect, device number 88 [ 1049.353058][T15742] loop2: detected capacity change from 0 to 256 [ 1049.438070][T15742] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1049.538240][ T4180] udevd[4180]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1049.557156][T15759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18002'. [ 1049.796700][T15782] netlink: 100 bytes leftover after parsing attributes in process `syz.5.18009'. [ 1050.160270][ T677] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1050.526993][ T677] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1050.579291][ T677] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1050.618248][ T677] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1050.689873][ T677] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1050.737932][ T677] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1050.785444][ T677] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.830356][ T677] usb 3-1: config 0 descriptor?? [ 1051.110728][ T677] hdpvr 3-1:0.0: firmware version 0xd dated ¤Â­Š‹“";ÂW|ñÛ±¥adTUK> }1Óv™N`õ¡£YõÒ#ƒžø [ 1051.315770][ T677] hdpvr 3-1:0.0: device init failed [ 1051.321219][ T677] hdpvr: probe of 3-1:0.0 failed with error -12 [ 1051.347493][ T677] usb 3-1: USB disconnect, device number 121 [ 1051.416965][T15917] overlayfs: './file0' not a directory [ 1051.521117][ T689] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1051.580739][T15930] netlink: 128 bytes leftover after parsing attributes in process `syz.1.18050'. [ 1051.593608][T15932] netlink: 16 bytes leftover after parsing attributes in process `syz.4.18051'. [ 1051.620457][T15930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18050'. [ 1051.660890][T15932] netlink: 16 bytes leftover after parsing attributes in process `syz.4.18051'. [ 1051.694559][T15932] netlink: 5 bytes leftover after parsing attributes in process `syz.4.18051'. [ 1051.744742][ T689] usb 6-1: Using ep0 maxpacket: 8 [ 1052.006056][ T689] usb 6-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1052.020957][ T689] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 1052.051972][ T689] usb 6-1: Product: syz [ 1052.075689][ T689] usb 6-1: Manufacturer: syz [ 1052.095940][ T689] usb 6-1: SerialNumber: syz [ 1052.134890][ T689] usb 6-1: config 0 descriptor?? [ 1052.144243][T15974] netlink: 40 bytes leftover after parsing attributes in process `syz.0.18065'. [ 1052.193251][T15978] loop1: detected capacity change from 0 to 1024 [ 1052.203681][ T689] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1052.253138][T15978] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1052.320878][T15978] fuse: Bad value for 'fd' [ 1052.602326][ T1110] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1052.640727][ T689] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 1052.648242][ T689] sq905: probe of 6-1:0.0 failed with error -71 [ 1052.699430][ T689] usb 6-1: USB disconnect, device number 89 [ 1052.844463][ T1110] usb 1-1: Using ep0 maxpacket: 8 [ 1053.162496][ T1110] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 1053.174476][T16052] netlink: 16 bytes leftover after parsing attributes in process `syz.5.18088'. [ 1053.189454][ T1110] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.206443][ T1110] usb 1-1: Product: syz [ 1053.217266][ T1110] usb 1-1: Manufacturer: syz [ 1053.226642][ T1110] usb 1-1: SerialNumber: syz [ 1053.242473][ T1110] usb 1-1: config 0 descriptor?? [ 1053.294468][ T1110] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 1053.315382][ T1110] dvb-usb: bulk message failed: -22 (2/0) [ 1053.352845][ T1110] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1053.422527][ T1110] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 1053.448399][ T1110] usb 1-1: media controller created [ 1053.491330][ T1110] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1053.552760][T11279] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1053.583589][ T1110] dvb-usb: bulk message failed: -22 (1/0) [ 1053.710524][ T1110] DVB: Unable to find symbol mt352_attach() [ 1053.724436][ T1110] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 1053.916438][T11279] usb 2-1: config 0 has an invalid interface number: 18 but max is 0 [ 1053.929076][T11279] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1053.939817][ T1110] rc_core: IR keymap rc-dvico-portable not found [ 1053.949275][ T1110] Registered IR keymap rc-empty [ 1053.958921][ T1110] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 1053.976030][T11279] usb 2-1: config 0 has no interface number 0 [ 1053.990256][T11279] usb 2-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 1054.005837][ T1110] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input73 [ 1054.021735][T11279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.032069][ T1110] dvb-usb: schedule remote query interval to 100 msecs. [ 1054.054204][T11279] usb 2-1: config 0 descriptor?? [ 1054.067877][ T1110] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 1054.079219][T16121] netlink: 4 bytes leftover after parsing attributes in process `syz.5.18108'. [ 1054.089089][T16122] netlink: 'syz.2.18107': attribute type 2 has an invalid length. [ 1054.111118][ T1110] usb 1-1: USB disconnect, device number 22 [ 1054.137676][T16122] netlink: 'syz.2.18107': attribute type 1 has an invalid length. [ 1054.156220][T11279] rndis_wlan 2-1:0.18: skipping garbage [ 1054.171714][T11279] usb 2-1: bad CDC descriptors [ 1054.203281][T11279] rndis_host 2-1:0.18: skipping garbage [ 1054.262138][T11279] usb 2-1: bad CDC descriptors [ 1054.284511][T16129] loop2: detected capacity change from 0 to 64 [ 1054.345401][T11279] usb 2-1: USB disconnect, device number 16 [ 1054.471096][ T1110] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 1055.366107][T16228] netlink: 100 bytes leftover after parsing attributes in process `syz.5.18138'. [ 1055.417064][T16228] netlink: 100 bytes leftover after parsing attributes in process `syz.5.18138'. [ 1055.640663][T11279] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1055.711366][T16255] loop4: detected capacity change from 0 to 764 [ 1055.806208][T16255] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1055.861981][T16255] Symlink component flag not implemented [ 1055.883200][T16255] Symlink component flag not implemented (7) [ 1055.901472][T11279] usb 1-1: Using ep0 maxpacket: 16 [ 1055.924362][T16255] Symlink component flag not implemented (7) [ 1056.031994][T11279] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 1056.041134][T11279] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1056.106746][T11279] usb 1-1: config 1 has no interface number 0 [ 1056.133104][T11279] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1056.176124][T11279] usb 1-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1056.238837][T11279] usb 1-1: config 1 interface 105 has no altsetting 0 [ 1056.442027][T11279] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1056.480046][T11279] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1056.507761][T11279] usb 1-1: Product: syz [ 1056.531517][T11279] usb 1-1: Manufacturer: syz [ 1056.550630][T11279] usb 1-1: SerialNumber: syz [ 1056.600557][T16231] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1056.843299][T11279] aqc111: probe of 1-1:1.105 failed with error -22 [ 1056.983522][T16347] loop2: detected capacity change from 0 to 2048 [ 1057.041346][T11279] usb 1-1: USB disconnect, device number 23 [ 1057.123294][T16347] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1057.392610][ T8019] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1057.663452][ T8019] usb 5-1: Using ep0 maxpacket: 16 [ 1057.671782][T16409] Timeout policy `syz1' can only be used by L3 protocol number 32907 [ 1057.800872][T16423] device geneve1 entered promiscuous mode [ 1057.989439][ T8019] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1058.021549][ T8019] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.063829][ T1110] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 1058.071561][ T8019] usb 5-1: Product: syz [ 1058.081386][ T8019] usb 5-1: Manufacturer: syz [ 1058.110512][ T8019] usb 5-1: SerialNumber: syz [ 1058.117412][ T8019] r8152-cfgselector 5-1: config 0 descriptor?? [ 1058.176697][ T8019] hub 5-1:0.0: bad descriptor, ignoring hub [ 1058.185249][ T8019] hub: probe of 5-1:0.0 failed with error -5 [ 1058.193376][T16450] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 1058.220492][T16450] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 1058.255532][T16454] netlink: 'syz.2.18211': attribute type 1 has an invalid length. [ 1058.380878][ T8019] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1058.418086][T16466] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18215'. [ 1058.427707][ T1110] usb 2-1: not running at top speed; connect to a high speed hub [ 1058.526164][ T1110] usb 2-1: config 11 has an invalid interface number: 95 but max is 0 [ 1058.544829][ T1110] usb 2-1: config 11 has no interface number 0 [ 1058.566915][ T1110] usb 2-1: config 11 interface 95 altsetting 64 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 1058.595617][ T8019] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1058.602110][ T8019] r8152-cfgselector 5-1: bad CDC descriptors [ 1058.622939][ T1110] usb 2-1: config 11 interface 95 altsetting 64 endpoint 0x82 has invalid maxpacket 10727, setting to 64 [ 1058.635686][ T8019] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1058.678808][ T1110] usb 2-1: config 11 interface 95 has no altsetting 0 [ 1058.698443][ T8019] r8152-cfgselector 5-1: USB disconnect, device number 17 [ 1058.809490][ T1110] usb 2-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=b1.4d [ 1058.833409][ T1110] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 1058.861721][ T1110] usb 2-1: Manufacturer: syz [ 1058.903298][T16417] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1058.910460][T16417] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1059.122525][ C1] sd 0:0:1:0: tag#9405 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1059.132507][ C1] sd 0:0:1:0: tag#9405 CDB: opcode=0x2 [ 1059.138077][ C1] sd 0:0:1:0: tag#9405 CDB[00]: 02 4f 35 6d 46 cb 6f 41 1b fa 91 fc e1 37 8a 59 [ 1059.147194][ C1] sd 0:0:1:0: tag#9405 CDB[10]: 2a a0 42 c5 04 41 9d ac 89 0e e5 10 22 9a 75 90 [ 1059.156312][ C1] sd 0:0:1:0: tag#9405 CDB[20]: 47 [ 1059.217942][T16524] delete_channel: no stack [ 1059.232386][T16526] netlink: 'syz.0.18233': attribute type 10 has an invalid length. [ 1059.294379][ T1110] usbtouchscreen: probe of 2-1:11.95 failed with error -71 [ 1059.305068][T16526] team0: Device vxcan1 is of different type [ 1059.321097][ T1110] usb 2-1: USB disconnect, device number 17 [ 1059.328563][T16531] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 1059.586595][T16553] netlink: 32 bytes leftover after parsing attributes in process `syz.4.18242'. [ 1059.824003][T16570] SET target dimension over the limit! [ 1060.228103][T16615] xt_TCPMSS: Only works on TCP SYN packets [ 1060.560294][T16628] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1060.625829][T16628] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1060.681844][T16636] netlink: 288 bytes leftover after parsing attributes in process `syz.0.18273'. [ 1060.697146][T16649] netlink: 'syz.1.18276': attribute type 10 has an invalid length. [ 1060.794563][ T689] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 1061.130955][ T689] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1061.174180][ T689] usb 5-1: config 0 interface 0 altsetting 91 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1061.203674][ T689] usb 5-1: config 0 interface 0 altsetting 91 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1061.279832][ T689] usb 5-1: config 0 interface 0 altsetting 91 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 1061.335600][ T689] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1061.419329][ T689] usb 5-1: New USB device found, idVendor=0404, idProduct=c294, bcdDevice= 0.00 [ 1061.428455][ T689] usb 5-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 1061.494216][ T689] usb 5-1: Manufacturer: syz [ 1061.529341][ T689] usb 5-1: config 0 descriptor?? [ 1061.873119][ T8019] usb 5-1: USB disconnect, device number 18 [ 1061.971084][T16755] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18305'. [ 1061.979494][T16750] binfmt_misc: register: failed to install interpreter file ./file0 [ 1062.478271][T16723] rdma_rxe: ignoring netdev event = 10 for bond0 [ 1062.511504][T16723] infiniband syz1: set down [ 1063.155628][T16723] device xfrm0 left promiscuous mode [ 1063.341094][T16723] device vlan0 left promiscuous mode [ 1063.370332][T16723] device veth0_vlan left promiscuous mode [ 1063.464413][T16723] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.473724][T16723] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.483449][T16723] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.492596][T16723] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.525388][T16723] device geneve1 left promiscuous mode [ 1063.668461][T16723] device wlan0 left promiscuous mode [ 1063.976841][T16826] loop1: detected capacity change from 0 to 64 [ 1064.013345][T16723] device ip6erspan0 left promiscuous mode [ 1064.070132][T16723] device bond2 left promiscuous mode [ 1064.145283][ T9502] bond0 speed is unknown, defaulting to 1000 [ 1064.185747][T11279] bond0 speed is unknown, defaulting to 1000 [ 1064.278906][T16840] xt_NFQUEUE: number of total queues is 0 [ 1064.510736][T16863] xt_TCPMSS: Only works on TCP SYN packets [ 1064.663023][T16879] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18337'. [ 1064.672143][T16879] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18337'. [ 1064.691177][ T9502] Bluetooth: hci3: command 0x0405 tx timeout [ 1064.793683][ T9675] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1065.072921][ T9675] usb 1-1: Using ep0 maxpacket: 8 [ 1065.179271][T16917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18349'. [ 1065.212611][ T9675] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1065.242173][ T9675] usb 1-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 1065.291470][ T9675] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.363325][ T9675] usb 1-1: config 0 descriptor?? [ 1065.479871][ T9675] usb 1-1: bad CDC descriptors [ 1065.493090][ T9675] usb 1-1: bad CDC descriptors [ 1065.530452][ T9675] cdc_acm 1-1:0.0: Control and data interfaces are not separated! [ 1065.581416][ T9675] cdc_acm 1-1:0.0: This needs exactly 3 endpoints [ 1065.637136][ T9675] cdc_acm: probe of 1-1:0.0 failed with error -22 [ 1065.692908][ T9675] usb 1-1: USB disconnect, device number 24 [ 1065.746159][ C0] vkms_vblank_simulate: vblank timer overrun [ 1066.028217][T16980] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1066.249922][T16993] IPv6: ADDRCONF(NETDEV_CHANGE): rose0: link becomes ready [ 1066.328221][T17002] xt_hashlimit: size too large, truncated to 1048576 [ 1066.368499][T17002] xt_hashlimit: max too large, truncated to 1048576 [ 1067.570748][ T8019] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1067.679651][T17023] loop4: detected capacity change from 0 to 32768 [ 1067.840810][ T8019] usb 2-1: Using ep0 maxpacket: 8 [ 1067.853078][T17023] XFS (loop4): Mounting V5 Filesystem [ 1067.879940][T17121] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18409'. [ 1067.981548][ T8019] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 1068.026845][T17130] netlink: 76 bytes leftover after parsing attributes in process `syz.2.18408'. [ 1068.044976][ T8019] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1068.102999][T17124] loop0: detected capacity change from 0 to 2048 [ 1068.119587][T17023] XFS (loop4): Ending clean mount [ 1068.190619][T17124] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1068.260601][ T8019] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1068.307183][ T8019] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.332588][ T8019] usb 2-1: Product: syz [ 1068.353342][ T8019] usb 2-1: Manufacturer: syz [ 1068.367170][ T8019] usb 2-1: SerialNumber: syz [ 1068.376615][ T4195] XFS (loop4): Unmounting Filesystem [ 1068.389931][ T8019] usb 2-1: config 0 descriptor?? [ 1068.460675][ T8019] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 1068.682024][ T8019] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 1068.704237][ T8019] snd_usb_toneport: probe of 2-1:0.0 failed with error -22 [ 1068.713621][T17166] netlink: 'syz.5.18422': attribute type 49 has an invalid length. [ 1068.897377][ T8019] usb 2-1: USB disconnect, device number 18 [ 1068.934699][T17185] loop0: detected capacity change from 0 to 8 [ 1068.947392][T17186] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1069.056315][T17185] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1069.071801][T17185] SQUASHFS error: Failed to read block 0x13e: -5 [ 1069.092447][T17185] SQUASHFS error: Unable to read metadata cache entry [13c] [ 1069.125239][T17185] SQUASHFS error: Unable to read directory block [13c:26] [ 1069.303570][T17207] loop4: detected capacity change from 0 to 16 [ 1069.368695][T17207] erofs: (device loop4): mounted with root inode @ nid 36. [ 1069.749947][ T26] audit: type=1400 audit(2000002018.606:136): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3AF4F9904E7FDB3635A70D23C73EEAF23A2F503280080CA26230668AD9DCF8B061228F8599D34E45087D21AA56759E1651B3DD467BDEF390C76D pid=17254 comm="syz.1.18448" [ 1069.978754][T17277] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.18457'. [ 1070.114709][T17289] netlink: 'syz.5.18461': attribute type 1 has an invalid length. [ 1070.348466][ T8019] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1070.603284][T17333] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1070.740425][ T8019] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 1070.748753][ T8019] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1070.826557][ T8019] usb 1-1: config 220 has no interface number 2 [ 1070.860743][ T8019] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1070.923644][ T8019] usb 1-1: config 220 interface 0 has no altsetting 0 [ 1070.962314][ T8019] usb 1-1: config 220 interface 76 has no altsetting 0 [ 1070.998799][ T8019] usb 1-1: config 220 interface 1 has no altsetting 0 [ 1071.116384][T17297] loop1: detected capacity change from 0 to 32768 [ 1071.150234][T17297] XFS: attr2 mount option is deprecated. [ 1071.206594][ T8019] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1071.226283][ T8019] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.252336][ T8019] usb 1-1: Product: syz [ 1071.256701][ T8019] usb 1-1: Manufacturer: syz [ 1071.265688][ T8019] usb 1-1: SerialNumber: syz [ 1071.326541][T17297] XFS (loop1): Mounting V5 Filesystem [ 1071.531253][T17297] XFS (loop1): Ending clean mount [ 1071.547904][T17297] XFS (loop1): Quotacheck needed: Please wait. [ 1071.569181][ T1110] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1071.607549][ T8019] usb 1-1: selecting invalid altsetting 0 [ 1071.614471][ T8019] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 1071.653141][ T8019] usb 1-1: No valid video chain found. [ 1071.762160][T17297] XFS (loop1): Quotacheck: Done. [ 1071.768792][ T8019] usb 1-1: selecting invalid altsetting 0 [ 1071.786951][ T8019] usbtest: probe of 1-1:220.1 failed with error -22 [ 1071.821063][ T8019] usb 1-1: USB disconnect, device number 25 [ 1071.946599][ T4188] XFS (loop1): Unmounting Filesystem [ 1071.970136][ T9502] usb 3-1: new full-speed USB device number 122 using dummy_hcd [ 1072.026507][ T1110] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1072.101194][ T1110] usb 6-1: config 0 has an invalid interface number: 86 but max is 0 [ 1072.138065][ T1110] usb 6-1: config 0 has no interface number 0 [ 1072.144234][ T1110] usb 6-1: config 0 interface 86 altsetting 4 bulk endpoint 0xE has invalid maxpacket 8 [ 1072.159889][ T1110] usb 6-1: config 0 interface 86 altsetting 4 bulk endpoint 0xC has invalid maxpacket 32 [ 1072.170165][ T1110] usb 6-1: config 0 interface 86 has no altsetting 0 [ 1072.334725][ T9502] usb 3-1: config 4 has an invalid interface number: 128 but max is 0 [ 1072.385414][ T9502] usb 3-1: config 4 has no interface number 0 [ 1072.393205][ T9502] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1072.400672][ T1110] usb 6-1: New USB device found, idVendor=0586, idProduct=1000, bcdDevice=aa.5e [ 1072.407035][ T9502] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1072.423942][ T9502] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1072.433314][ T9502] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.443723][ T1110] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.458089][ T1110] usb 6-1: Product: syz [ 1072.462392][T17424] loop4: detected capacity change from 0 to 256 [ 1072.469518][ T1110] usb 6-1: Manufacturer: syz [ 1072.483486][ T1110] usb 6-1: SerialNumber: syz [ 1072.499239][ T1110] usb 6-1: config 0 descriptor?? [ 1072.504683][ T9502] hub 3-1:4.128: USB hub found [ 1072.529437][T17374] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1072.536732][T17374] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1072.560846][T17424] FAT-fs (loop4): bogus logical sector size 0 [ 1072.567379][ T9675] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1072.583154][T17424] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1072.706541][ T9502] hub 3-1:4.128: 27 ports detected [ 1072.711881][ T9502] hub 3-1:4.128: Using single TT (err -22) [ 1072.753072][ T9502] hub 3-1:4.128: insufficient power available to use all downstream ports [ 1072.847590][ T1110] omninet 6-1:0.86: ZyXEL - omni.net usb converter detected [ 1072.875355][ T1110] usb 6-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 1072.906943][ T1110] usb 6-1: USB disconnect, device number 90 [ 1072.921929][ T9502] hub 3-1:4.128: hub_hub_status failed (err = -71) [ 1072.928535][ T9502] hub 3-1:4.128: config failed, can't get hub status (err -71) [ 1072.948547][ T1110] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 1072.977248][ T9675] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1072.995044][ T9675] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.005695][ T1110] omninet 6-1:0.86: device disconnected [ 1073.025146][ T9675] usb 1-1: config 0 descriptor?? [ 1073.031275][ T9502] usb 3-1: USB disconnect, device number 122 [ 1073.102913][ T9675] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1073.195176][T17486] loop1: detected capacity change from 0 to 4096 [ 1073.212496][T17486] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 1073.499172][ T9675] gspca_cpia1: usb_control_msg 03, error -71 [ 1073.526668][ T9675] gspca_cpia1: usb_control_msg 01, error -71 [ 1073.532756][ T9675] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 1073.563219][T17504] netlink: 36 bytes leftover after parsing attributes in process `syz.2.18511'. [ 1073.582946][ T9675] usb 1-1: USB disconnect, device number 26 [ 1073.843485][T17525] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1074.166955][T17554] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18527'. [ 1074.562696][T17587] xt_TCPMSS: Only works on TCP SYN packets [ 1075.144015][T17625] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.18552'. [ 1075.270562][T17634] netlink: 'syz.4.18554': attribute type 10 has an invalid length. [ 1076.033896][ T689] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1076.379218][ T689] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1076.415896][ T689] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.464785][ T689] usb 5-1: config 0 descriptor?? [ 1076.623114][T17660] loop0: detected capacity change from 0 to 32768 [ 1076.806834][T17660] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.18563 (17660) [ 1076.881956][T17660] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 1076.915334][T17660] BTRFS info (device loop0): force zlib compression, level 3 [ 1076.944457][T17758] SET target dimension over the limit! [ 1076.962444][T17660] BTRFS info (device loop0): force clearing of disk cache [ 1076.984855][ T689] usb 5-1: Cannot read MAC address [ 1076.990165][ T689] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71 [ 1077.004778][T17660] BTRFS info (device loop0): setting nodatasum [ 1077.046603][T17660] BTRFS info (device loop0): use zlib compression, level 3 [ 1077.058169][ T689] usb 5-1: USB disconnect, device number 19 [ 1077.090962][T17660] BTRFS info (device loop0): allowing degraded mounts [ 1077.126729][T17660] BTRFS info (device loop0): enabling disk space caching [ 1077.156480][T17660] BTRFS info (device loop0): disk space caching is enabled [ 1077.171794][T17660] BTRFS info (device loop0): has skinny extents [ 1077.650134][T17660] BTRFS info (device loop0): enabling ssd optimizations [ 1077.699027][T17660] BTRFS info (device loop0): clearing free space tree [ 1077.756090][T17660] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1077.823583][T17660] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1078.169207][T17841] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18606'. [ 1078.187275][ T689] usb 6-1: new full-speed USB device number 91 using dummy_hcd [ 1078.330246][T17660] BTRFS info (device loop0): balance: start -f -susage=30064771073,usage=1..7,limit=2..0,stripes=5..7 [ 1078.347271][T17847] loop2: detected capacity change from 0 to 1024 [ 1078.367175][T17660] BTRFS info (device loop0): balance: ended with status: 0 [ 1078.395583][T17847] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 1078.625010][T17861] bond0: option use_carrier: invalid value (9) [ 1078.683957][T17847] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 1078.709712][T17847] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback. [ 1078.739656][ T689] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 1078.764824][ T689] usb 6-1: config 0 has no interface number 0 [ 1078.787431][ T689] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1078.834111][ T1239] bond0: (slave bridge0): link status definitely down, disabling slave [ 1078.856721][T17847] EXT4-fs warning (device loop2): empty_inline_dir:1870: bad inline directory (dir #12) - no `..' [ 1078.913459][ T1239] bond0: (slave wlan1): link status definitely down, disabling slave [ 1078.953102][ T689] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1078.981988][ T689] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1079.025330][ T689] usb 6-1: Product: syz [ 1079.031068][ T689] usb 6-1: SerialNumber: syz [ 1079.052070][T17873] 9pnet: p9_fd_create_unix (17873): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1079.072936][ T689] usb 6-1: config 0 descriptor?? [ 1079.177320][ T689] usbhid 6-1:0.8: couldn't find an input interrupt endpoint [ 1079.411555][ T8016] usb 6-1: USB disconnect, device number 91 [ 1079.920846][ T9502] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1080.086718][T17947] CIFS mount error: No usable UNC path provided in device string! [ 1080.086718][T17947] [ 1080.133766][T17947] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1080.150556][ T9502] usb 5-1: Using ep0 maxpacket: 8 [ 1080.194669][ T9502] usb 5-1: too many configurations: 249, using maximum allowed: 8 [ 1080.295213][ T9502] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1080.311425][ T9502] usb 5-1: config 0 has no interfaces? [ 1080.405348][ T9502] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1080.433349][ T9502] usb 5-1: config 0 has no interfaces? [ 1080.516929][ T9502] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1080.533057][ T9502] usb 5-1: config 0 has no interfaces? [ 1080.610203][ T9502] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1080.621067][ T9502] usb 5-1: config 0 has no interfaces? [ 1080.694131][ T9502] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1080.710207][ T9502] usb 5-1: config 0 has no interfaces? [ 1080.787381][ T9502] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1080.803515][ T9502] usb 5-1: config 0 has no interfaces? [ 1080.881773][ T9502] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1080.897872][ T9502] usb 5-1: config 0 has no interfaces? [ 1080.973527][ T9502] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1080.991259][ T9502] usb 5-1: config 0 has no interfaces? [ 1081.141400][ T9502] usb 5-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=b3.ff [ 1081.155571][ T9502] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2 [ 1081.168007][ T9502] usb 5-1: Product: syz [ 1081.177714][ T9502] usb 5-1: Manufacturer: syz [ 1081.186579][ T9502] usb 5-1: SerialNumber: syz [ 1081.211316][ T9502] usb 5-1: config 0 descriptor?? [ 1081.376010][T17931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1081.437971][T17931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1081.478449][T17917] udc-core: couldn't find an available UDC or it's busy [ 1081.485563][T17917] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1081.502442][ T9502] usb 5-1: USB disconnect, device number 20 [ 1081.739178][T17931] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.749948][T17931] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.759098][T17931] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.768142][T17931] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.122523][T17948] netlink: 'syz.5.18637': attribute type 10 has an invalid length. [ 1082.211457][T17983] snd_dummy snd_dummy.0: control 3:0:99:syz1:6 is already present [ 1082.643130][ T8007] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1082.706872][T18033] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18665'. [ 1082.930757][ T8007] usb 2-1: Using ep0 maxpacket: 32 [ 1083.061440][ T8007] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1083.098805][ T8007] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1083.137689][ T8007] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1083.164109][ T8007] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.186849][ T8007] usb 2-1: config 0 descriptor?? [ 1083.259211][ T8007] hub 2-1:0.0: USB hub found [ 1083.366835][T18088] netlink: 'syz.4.18684': attribute type 21 has an invalid length. [ 1083.389688][T18088] netlink: 'syz.4.18684': attribute type 6 has an invalid length. [ 1083.413939][T18088] netlink: 132 bytes leftover after parsing attributes in process `syz.4.18684'. [ 1083.453309][ T8007] hub 2-1:0.0: 2 ports detected [ 1083.558307][T18101] netlink: 'syz.2.18688': attribute type 46 has an invalid length. [ 1083.566663][T18101] netlink: 36 bytes leftover after parsing attributes in process `syz.2.18688'. [ 1083.658277][ T8007] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 1083.667029][ T8007] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 1083.811065][T18119] libceph: resolve '0.' (ret=-3): failed [ 1083.825827][ T8007] usbhid 2-1:0.0: can't add hid device: -71 [ 1083.842012][ T8007] usbhid: probe of 2-1:0.0 failed with error -71 [ 1083.938362][ T8007] usb 2-1: USB disconnect, device number 19 [ 1083.965575][T18129] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 1083.972158][T18129] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1084.014409][T18134] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 1084.020995][T18134] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1084.074558][T18129] vhci_hcd vhci_hcd.0: Device attached [ 1084.084526][T18134] vhci_hcd vhci_hcd.0: Device attached [ 1084.121660][T18135] vhci_hcd: connection closed [ 1084.127257][ T1239] vhci_hcd: stop threads [ 1084.136759][T18130] vhci_hcd: connection closed [ 1084.166752][ T1239] vhci_hcd: release socket [ 1084.193525][ T1239] vhci_hcd: disconnect device [ 1084.211345][ T1239] vhci_hcd: stop threads [ 1084.215669][ T1239] vhci_hcd: release socket [ 1084.259265][ T1239] vhci_hcd: disconnect device [ 1084.264342][ T689] vhci_hcd: vhci_device speed not set [ 1084.283433][T18146] netlink: 'syz.1.18699': attribute type 9 has an invalid length. [ 1084.670028][T18114] loop0: detected capacity change from 0 to 32768 [ 1084.981792][ T8007] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1085.224221][ T8007] usb 3-1: Using ep0 maxpacket: 16 [ 1085.494118][ T4231] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1085.516832][T18236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18724'. [ 1085.526352][ T8007] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1085.541083][ T8007] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.562439][ T8007] usb 3-1: Product: syz [ 1085.566755][ T8007] usb 3-1: Manufacturer: syz [ 1085.574686][T18236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18724'. [ 1085.579079][ T9502] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1085.584347][ T8007] usb 3-1: SerialNumber: syz [ 1085.607142][ T8007] r8152-cfgselector 3-1: config 0 descriptor?? [ 1085.622044][T18236] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 1085.728407][ T4231] usb 6-1: Using ep0 maxpacket: 32 [ 1085.839362][ T4231] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1085.857135][ T4231] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1085.978903][ T9502] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1086.025350][ T4231] usb 6-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0 [ 1086.046472][ T4231] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.062020][ T4231] usb 6-1: Product: syz [ 1086.070092][ T4231] usb 6-1: Manufacturer: syz [ 1086.073294][ T8007] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1086.081372][ T9502] usb 5-1: config 0 has an invalid interface number: 86 but max is 0 [ 1086.089555][ T9502] usb 5-1: config 0 has no interface number 0 [ 1086.091603][ T8007] r8152-cfgselector 3-1: bad CDC descriptors [ 1086.106414][ T4231] usb 6-1: SerialNumber: syz [ 1086.112966][ T9502] usb 5-1: config 0 interface 86 altsetting 4 bulk endpoint 0xE has invalid maxpacket 8 [ 1086.129821][ T8007] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1086.143545][ T8007] r8152-cfgselector 3-1: USB disconnect, device number 123 [ 1086.152114][ T4231] usb 6-1: config 0 descriptor?? [ 1086.184039][ T8012] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1086.184365][ T9502] usb 5-1: config 0 interface 86 altsetting 4 bulk endpoint 0xC has invalid maxpacket 32 [ 1086.213278][ T9502] usb 5-1: config 0 interface 86 has no altsetting 0 [ 1086.241267][ T4231] qmi_wwan 6-1:0.0: bogus CDC Union: master=1, slave=0 [ 1086.248345][ T4231] qmi_wwan: probe of 6-1:0.0 failed with error -22 [ 1086.342194][T18293] rdma_rxe: ignoring netdev event = 30 for bond0 [ 1086.361806][ T9502] usb 5-1: New USB device found, idVendor=0586, idProduct=1000, bcdDevice=aa.5e [ 1086.378649][ T9502] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.387627][ T9502] usb 5-1: Product: syz [ 1086.392179][ T9502] usb 5-1: Manufacturer: syz [ 1086.397023][ T9502] usb 5-1: SerialNumber: syz [ 1086.412084][ T9502] usb 5-1: config 0 descriptor?? [ 1086.436078][T18219] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1086.459969][ T4231] usb 6-1: USB disconnect, device number 92 [ 1086.466484][T18219] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1086.554273][ T8012] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 1086.569069][ T8012] usb 2-1: config 0 has no interface number 0 [ 1086.582210][T18307] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551614) [ 1086.592490][ T8012] usb 2-1: config 0 interface 255 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1086.609142][T18307] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 1086.618972][ T8012] usb 2-1: config 0 interface 255 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1086.703997][T18312] loop0: detected capacity change from 0 to 4096 [ 1086.753242][ T9502] omninet 5-1:0.86: ZyXEL - omni.net usb converter detected [ 1086.763023][ T9502] usb 5-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 1086.781698][ T8012] usb 2-1: New USB device found, idVendor=10cf, idProduct=8065, bcdDevice=91.79 [ 1086.804829][ T9502] usb 5-1: USB disconnect, device number 21 [ 1086.814081][T18312] ntfs3: loop0: mft corrupted [ 1086.824175][T18312] ntfs3: loop0: Failed to load $MFT. [ 1086.832255][ T8012] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.850759][ T8012] usb 2-1: Product: syz [ 1086.855507][ T9502] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 1086.870650][ T8012] usb 2-1: Manufacturer: syz [ 1086.883496][ T8012] usb 2-1: SerialNumber: syz [ 1086.898720][ T9502] omninet 5-1:0.86: device disconnected [ 1086.911696][ T8012] usb 2-1: config 0 descriptor?? [ 1086.981268][ T8012] vmk80xx 2-1:0.255: driver 'vmk80xx' failed to auto-configure device. [ 1087.019729][ T8012] vmk80xx: probe of 2-1:0.255 failed with error -22 [ 1087.109015][T18346] netlink: 'syz.0.18748': attribute type 3 has an invalid length. [ 1087.136797][T18346] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.18748'. [ 1087.170609][ T8012] usb 2-1: USB disconnect, device number 20 [ 1087.571662][T18380] netlink: 'syz.4.18759': attribute type 4 has an invalid length. [ 1087.606551][T18380] netlink: 'syz.4.18759': attribute type 3 has an invalid length. [ 1087.625973][T18380] netlink: 132 bytes leftover after parsing attributes in process `syz.4.18759'. [ 1088.001803][ T8012] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1088.150090][T18426] netlink: 'syz.4.18775': attribute type 2 has an invalid length. [ 1088.170197][T18429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18776'. [ 1088.195779][T18426] netlink: 'syz.4.18775': attribute type 1 has an invalid length. [ 1088.220933][T18429] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1088.423854][ T8012] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1088.499248][T18450] dlm: plock device version mismatch: kernel (1.2.0), user (1952804395.1769107551.1915428975) [ 1088.514612][ T8012] usb 1-1: config 0 has an invalid interface number: 86 but max is 0 [ 1088.542860][ T8012] usb 1-1: config 0 has no interface number 0 [ 1088.571465][ T8012] usb 1-1: config 0 interface 86 altsetting 4 bulk endpoint 0xE has invalid maxpacket 8 [ 1088.616485][ T8012] usb 1-1: config 0 interface 86 altsetting 4 bulk endpoint 0xC has invalid maxpacket 32 [ 1088.655180][ T8012] usb 1-1: config 0 interface 86 has no altsetting 0 [ 1088.716810][T18462] loop4: detected capacity change from 0 to 2048 [ 1088.792510][T18462] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1088.817555][T18473] IPv6: sit3: Disabled Multicast RS [ 1088.854404][T18481] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1088.860977][ T8012] usb 1-1: New USB device found, idVendor=0586, idProduct=1000, bcdDevice=aa.5e [ 1088.895176][T18462] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=1024, inode=0, rec_len=0, name_len=0 [ 1088.931992][ T8012] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.976968][ T8012] usb 1-1: Product: syz [ 1088.986239][ T8012] usb 1-1: Manufacturer: syz [ 1089.000465][T18462] Remounting filesystem read-only [ 1089.008041][ T8012] usb 1-1: SerialNumber: syz [ 1089.037550][ T8012] usb 1-1: config 0 descriptor?? [ 1089.092634][T18389] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1089.099756][T18389] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1089.428878][ T8012] omninet 1-1:0.86: ZyXEL - omni.net usb converter detected [ 1089.448714][ T8012] usb 1-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 1089.498659][ T8012] usb 1-1: USB disconnect, device number 27 [ 1089.534133][ T8012] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 1089.560007][T18524] netlink: 'syz.1.18804': attribute type 1 has an invalid length. [ 1089.602541][ T8012] omninet 1-1:0.86: device disconnected [ 1089.609007][T18524] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.18804'. [ 1089.643273][T18524] netlink: 'syz.1.18804': attribute type 1 has an invalid length. [ 1089.953462][T18480] loop2: detected capacity change from 0 to 32768 [ 1090.067739][T18480] XFS (loop2): Mounting V5 Filesystem [ 1090.127685][T18480] XFS (loop2): Ending clean mount [ 1090.154279][ T4231] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1090.217576][ T4189] XFS (loop2): Unmounting Filesystem [ 1090.350628][ T9502] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 1090.388475][ T4231] usb 5-1: Using ep0 maxpacket: 16 [ 1090.389339][T18588] rdma_rxe: ignoring netdev event = 9 for bond0 [ 1090.518250][ T4231] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1090.529704][ T4231] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1090.699322][ T9502] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 1090.708732][ T4231] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1090.730624][ T9502] usb 6-1: config 0 has no interface number 0 [ 1090.737226][ T4231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.755438][ T4231] usb 5-1: Product: syz [ 1090.759677][ T4231] usb 5-1: Manufacturer: syz [ 1090.778775][ T4231] usb 5-1: SerialNumber: syz [ 1090.892632][T18582] loop1: detected capacity change from 0 to 32768 [ 1090.900467][ T9502] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 1090.927305][ T9502] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.982254][ T9502] usb 6-1: Product: syz [ 1091.000644][ T9502] usb 6-1: Manufacturer: syz [ 1091.008268][ T9502] usb 6-1: SerialNumber: syz [ 1091.024940][T18582] ERROR: (device loop1): dbAlloc: the hint is outside the map [ 1091.024940][T18582] [ 1091.035654][ T9502] usb 6-1: config 0 descriptor?? [ 1091.078115][T18582] ialloc: diAlloc returned -5! [ 1091.105234][ T4231] usb 5-1: 0:2 : does not exist [ 1091.151926][ T4231] usb 5-1: USB disconnect, device number 22 [ 1091.243862][T18646] device wlan0 entered promiscuous mode [ 1091.322360][T18650] netlink: 344 bytes leftover after parsing attributes in process `syz.2.18831'. [ 1091.378006][ T4180] udevd[4180]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1091.394410][ T9502] uvcvideo 6-1:0.64: Found Unit with invalid ID 0 [ 1091.400948][ T9502] usb 6-1: Found UVC 0.08 device syz (046d:0823) [ 1091.413033][ T8012] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1091.421038][ T9502] usb 6-1: No valid video chain found. [ 1091.451860][ T9502] usb 6-1: USB disconnect, device number 93 [ 1091.832167][ T8012] usb 1-1: config 0 has an invalid interface number: 199 but max is 1 [ 1091.870078][ T8012] usb 1-1: config 0 has no interface number 1 [ 1091.876249][ T8012] usb 1-1: config 0 interface 199 altsetting 2 endpoint 0xA has invalid wMaxPacketSize 0 [ 1091.909218][T18689] loop1: detected capacity change from 0 to 512 [ 1091.915749][ T8012] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1091.943671][ T8012] usb 1-1: config 0 interface 199 has no altsetting 0 [ 1092.038779][ T8012] usb 1-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 1092.066468][ T8012] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1092.093250][ T8012] usb 1-1: SerialNumber: syz [ 1092.100533][T18689] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000002,max_dir_size_kb=0x0000000000000007,nodelalloc,noquota,grpid,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 1092.134754][ T8012] usb 1-1: config 0 descriptor?? [ 1092.140886][T18689] ext4 filesystem being mounted at /3887/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1092.160204][T18689] fs-verity (loop1, inode 15): Unrecognized descriptor size: 0 bytes [ 1092.198046][ T8012] usb 1-1: Found UVC 0.00 device (0002:0000) [ 1092.205314][ T8012] usb 1-1: No valid video chain found. [ 1092.450246][T17895] usb 1-1: USB disconnect, device number 28 [ 1093.041595][T18788] netlink: 96 bytes leftover after parsing attributes in process `syz.2.18864'. [ 1093.077688][T18788] netlink: 96 bytes leftover after parsing attributes in process `syz.2.18864'. [ 1093.182730][T18813] netlink: 40 bytes leftover after parsing attributes in process `syz.1.18868'. [ 1093.355291][T18830] loop1: detected capacity change from 0 to 256 [ 1093.380148][ T8012] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1093.428242][T18830] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d) [ 1093.457095][T18839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18875'. [ 1093.751861][ T4231] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1093.883197][ T9502] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1093.957206][ T8012] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1093.966319][ T8012] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.022827][ T8012] usb 1-1: Product: syz [ 1094.027396][ T8012] usb 1-1: Manufacturer: syz [ 1094.047077][ T8012] usb 1-1: SerialNumber: syz [ 1094.066872][T18879] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.18884'. [ 1094.106853][ T4231] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1094.125998][ T8012] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1094.135707][ T4231] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.182601][ T4231] usb 6-1: config 0 descriptor?? [ 1094.283360][ T9502] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1094.358695][ T9502] usb 5-1: config 8 has an invalid interface number: 92 but max is 0 [ 1094.381975][ T9502] usb 5-1: config 8 has no interface number 0 [ 1094.405621][T18905] loop1: detected capacity change from 0 to 256 [ 1094.428376][ T9502] usb 5-1: config 8 interface 92 altsetting 65 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1094.480630][ T9502] usb 5-1: config 8 interface 92 has no altsetting 0 [ 1094.516729][T18894] loop2: detected capacity change from 0 to 4096 [ 1094.559315][T18894] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 1094.640367][ T4231] ath6kl: Failed to submit usb control message: -71 [ 1094.648394][ T4231] ath6kl: unable to send the bmi data to the device: -71 [ 1094.655471][ T4231] ath6kl: Unable to send get target info: -71 [ 1094.717647][T18894] ntfs3: loop2: failed to convert "c46c" to cp850 [ 1094.731298][ T9502] usb 5-1: string descriptor 0 read error: -22 [ 1094.742232][ T9502] usb 5-1: New USB device found, idVendor=1b3d, idProduct=0181, bcdDevice= b.f6 [ 1094.756238][ T9502] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.806119][ T8012] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1094.818120][ T9502] ftdi_sio 5-1:8.92: FTDI USB Serial Device converter detected [ 1094.853363][ T9502] usb 5-1: Detected FT232H [ 1094.857946][ T9502] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 6 [ 1095.037231][ T9502] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1095.076142][ T9502] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1095.094999][ T9502] ftdi_sio 5-1:8.92: GPIO initialisation failed: -71 [ 1095.106307][ T9502] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1095.177038][ T9502] usb 5-1: USB disconnect, device number 23 [ 1095.219095][ T8007] usb 1-1: USB disconnect, device number 29 [ 1095.235426][ T9502] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1095.271781][ T9502] ftdi_sio 5-1:8.92: device disconnected [ 1095.302234][T18965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18899'. [ 1095.343084][T18969] netlink: 'syz.2.18900': attribute type 21 has an invalid length. [ 1095.384068][T18969] netlink: 'syz.2.18900': attribute type 4 has an invalid length. [ 1095.406106][T18969] netlink: 144 bytes leftover after parsing attributes in process `syz.2.18900'. [ 1095.852018][T19014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18913'. [ 1095.868591][T19011] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1096.008221][ T8012] usb 1-1: Service connection timeout for: 256 [ 1096.015230][ T8012] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1096.045478][ T8016] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 1096.071258][ T8012] ath9k_htc: Failed to initialize the device [ 1096.101950][ T8007] usb 1-1: ath9k_htc: USB layer deinitialized [ 1096.317238][ T4231] ath6kl: Failed to init ath6kl core: -71 [ 1096.325914][T19059] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18925'. [ 1096.388929][T19063] netlink: 16 bytes leftover after parsing attributes in process `syz.5.18926'. [ 1096.402213][ T4231] ath6kl_usb: probe of 6-1:0.0 failed with error -71 [ 1096.456566][ T4231] usb 6-1: USB disconnect, device number 94 [ 1096.464551][ T8016] usb 5-1: config 0 has an invalid interface number: 147 but max is 0 [ 1096.472815][ T8016] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1096.548604][ T8016] usb 5-1: config 0 has no interface number 0 [ 1096.554793][ T8016] usb 5-1: config 0 interface 147 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 1096.631909][ T8016] usb 5-1: config 0 interface 147 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1096.689855][ T8016] usb 5-1: config 0 interface 147 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1096.949374][T19112] bridge0: port 1(veth0_to_bond) entered blocking state [ 1096.950412][T19112] bridge0: port 1(veth0_to_bond) entered disabled state [ 1096.956620][T19112] device veth0_to_bond entered promiscuous mode [ 1096.961155][ T8016] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.03 [ 1096.961189][ T8016] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.961212][ T8016] usb 5-1: Product: syz [ 1096.961229][ T8016] usb 5-1: Manufacturer: syz [ 1096.961247][ T8016] usb 5-1: SerialNumber: syz [ 1096.963426][ T8016] usb 5-1: config 0 descriptor?? [ 1096.986397][T19007] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1097.100294][ T8016] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1097.210565][ T1269] usb 5-1: Failed to submit usb control message: -71 [ 1097.210683][ T1269] usb 5-1: unable to send the bmi data to the device: -71 [ 1097.210704][ T1269] usb 5-1: unable to get target info from device [ 1097.210722][ T1269] usb 5-1: could not get target info (-71) [ 1097.210821][ T1269] usb 5-1: could not probe fw (-71) [ 1097.211150][ T8016] usb 5-1: USB disconnect, device number 24 [ 1097.268548][T19137] xt_TCPMSS: Only works on TCP SYN packets [ 1097.828466][T19173] sg_write: data in/out 4194304/65042 bytes for SCSI command 0x0-- guessing data in; [ 1097.828466][T19173] program syz.4.18955 not setting count and/or reply_len properly [ 1098.113698][T19193] loop0: detected capacity change from 0 to 512 [ 1098.190375][T19193] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1098.197232][T19193] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1098.221516][T19205] __nla_validate_parse: 1 callbacks suppressed [ 1098.221534][T19205] netlink: 32 bytes leftover after parsing attributes in process `syz.1.18966'. [ 1098.244926][T19205] batman_adv: Cannot find parent device [ 1098.322640][T19193] EXT4-fs error (device loop0): ext4_orphan_get:1432: comm syz.0.18962: bad orphan inode 131083 [ 1098.336908][T19193] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,resgid=0x0000000000000000,test_dummy_encryption,,errors=continue. Quota mode: none. [ 1098.423922][ C0] vkms_vblank_simulate: vblank timer overrun [ 1098.552184][T19242] netlink: 'syz.0.18973': attribute type 10 has an invalid length. [ 1098.906338][ T8007] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 1099.251185][ T8007] usb 2-1: not running at top speed; connect to a high speed hub [ 1099.344874][ T8007] usb 2-1: config 1 has an invalid interface number: 167 but max is 0 [ 1099.372863][ T8007] usb 2-1: config 1 has no interface number 0 [ 1099.379027][ T8007] usb 2-1: config 1 interface 167 altsetting 167 endpoint 0x8A has invalid maxpacket 1024, setting to 64 [ 1099.447171][ T8007] usb 2-1: config 1 interface 167 has no altsetting 0 [ 1099.652047][ T8007] usb 2-1: New USB device found, idVendor=1b80, idProduct=e309, bcdDevice=1f.40 [ 1099.676983][ T8007] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.727249][ T8007] usb 2-1: Product: syz [ 1099.731521][ T8007] usb 2-1: Manufacturer: syz [ 1099.765268][ T8007] usb 2-1: SerialNumber: syz [ 1100.061906][T19367] netlink: 20 bytes leftover after parsing attributes in process `syz.5.19011'. [ 1100.071362][ T8016] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 1100.103508][ T8007] usb 2-1: USB disconnect, device number 21 [ 1100.127843][T19367] netlink: 'syz.5.19011': attribute type 1 has an invalid length. [ 1100.308181][T19317] loop0: detected capacity change from 0 to 32768 [ 1100.441384][T19317] XFS (loop0): Mounting V5 Filesystem [ 1100.447459][ T8016] usb 5-1: config 4 has an invalid interface number: 128 but max is 0 [ 1100.458690][ T8016] usb 5-1: config 4 has no interface number 0 [ 1100.465454][ T8016] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1100.477383][ T8016] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1100.488044][ T8016] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1100.497726][ T8016] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.632676][T19399] openvswitch: netlink: Message has 4 unknown bytes. [ 1100.650405][ T8016] hub 5-1:4.128: USB hub found [ 1100.717863][T19317] XFS (loop0): Ending clean mount [ 1100.735909][T19317] XFS (loop0): Quotacheck needed: Please wait. [ 1100.842489][T19415] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1100.845277][ T8016] hub 5-1:4.128: 27 ports detected [ 1100.871333][T19317] XFS (loop0): Quotacheck: Done. [ 1100.886558][ T8016] hub 5-1:4.128: Using single TT (err -22) [ 1100.938467][ T8016] hub 5-1:4.128: insufficient power available to use all downstream ports [ 1101.059309][ T8016] hub 5-1:4.128: hub_hub_status failed (err = -71) [ 1101.068612][ T8016] hub 5-1:4.128: config failed, can't get hub status (err -71) [ 1101.166920][ T4190] XFS (loop0): Unmounting Filesystem [ 1101.177782][ T8016] usb 5-1: USB disconnect, device number 25 [ 1102.185349][T19439] loop1: detected capacity change from 0 to 32768 [ 1102.215076][T19507] netlink: 'syz.2.19052': attribute type 1 has an invalid length. [ 1102.239902][T19507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19052'. [ 1102.374231][T19439] XFS (loop1): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 1102.448550][T19439] XFS (loop1): ro->rw transition prohibited on norecovery mount [ 1102.467814][T19531] netlink: 'syz.2.19056': attribute type 21 has an invalid length. [ 1102.507463][ T4188] XFS (loop1): Unmounting Filesystem [ 1102.525555][T19531] netlink: 128 bytes leftover after parsing attributes in process `syz.2.19056'. [ 1102.580547][T19531] netlink: 'syz.2.19056': attribute type 5 has an invalid length. [ 1102.656809][T19531] netlink: 'syz.2.19056': attribute type 6 has an invalid length. [ 1102.690853][T19531] netlink: 3 bytes leftover after parsing attributes in process `syz.2.19056'. [ 1102.701269][ C0] vkms_vblank_simulate: vblank timer overrun [ 1102.725597][ C0] vkms_vblank_simulate: vblank timer overrun [ 1103.157906][T19576] xt_TCPMSS: Only works on TCP SYN packets [ 1103.344107][T19591] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.19078'. [ 1104.016988][T19649] loop0: detected capacity change from 0 to 1024 [ 1104.137348][T19649] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 1104.156570][T19667] netlink: 'syz.2.19106': attribute type 12 has an invalid length. [ 1104.278585][ C0] vkms_vblank_simulate: vblank timer overrun [ 1104.343147][T19682] netlink: 'syz.4.19112': attribute type 2 has an invalid length. [ 1105.258239][T19793] netlink: 40 bytes leftover after parsing attributes in process `syz.4.19149'. [ 1105.294260][T19793] netlink: 40 bytes leftover after parsing attributes in process `syz.4.19149'. [ 1105.427474][T19807] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.19156'. [ 1105.488839][T19807] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1105.523819][T19807] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1105.759041][T19860] loop1: detected capacity change from 0 to 512 [ 1105.795759][T19826] device bond3 entered promiscuous mode [ 1105.833438][T19826] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1105.943236][ T677] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1106.120695][T19860] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 2: comm syz.1.19163: invalid block [ 1106.258741][T19860] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.19163: invalid indirect mapped block 10 (level 1) [ 1106.332280][ T677] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1106.351637][ T677] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.390732][T19860] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.19163: invalid indirect mapped block 8 (level 1) [ 1106.411952][ T677] usb 3-1: config 0 descriptor?? [ 1106.456587][T19860] EXT4-fs (loop1): 1 truncate cleaned up [ 1106.502365][T19860] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 1106.904711][ T677] ath6kl: Failed to submit usb control message: -71 [ 1106.911391][ T677] ath6kl: unable to send the bmi data to the device: -71 [ 1106.965243][ T677] ath6kl: Unable to send get target info: -71 [ 1107.027522][ T677] ath6kl: Failed to init ath6kl core: -71 [ 1107.107066][ T677] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 1107.173969][ T677] usb 3-1: USB disconnect, device number 124 [ 1107.404209][T19937] loop0: detected capacity change from 0 to 256 [ 1107.845785][T19964] netlink: 156 bytes leftover after parsing attributes in process `syz.0.19192'. [ 1107.976015][T19972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1108.497793][ T26] audit: type=1400 audit(2000002060.191:137): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=20019 comm="syz.1.19205" [ 1108.682869][T20033] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1108.841947][ T4231] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1108.929591][T20051] kAFS: No cell specified [ 1109.060317][T20059] netlink: 16 bytes leftover after parsing attributes in process `syz.2.19217'. [ 1109.079155][T20061] ipt_CLUSTERIP: unknown mode 3918972798 [ 1109.084908][ T4231] usb 5-1: Using ep0 maxpacket: 16 [ 1109.179404][T20059] netlink: 16 bytes leftover after parsing attributes in process `syz.2.19217'. [ 1109.193210][T20066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1109.205803][T20059] netlink: 40 bytes leftover after parsing attributes in process `syz.2.19217'. [ 1109.233506][ T4231] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1109.345433][ T4231] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1109.374916][ T4231] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 1109.430398][ T4231] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1109.630504][T20044] loop1: detected capacity change from 0 to 32768 [ 1109.700054][ T4231] usb 5-1: string descriptor 0 read error: -22 [ 1109.706376][ T4231] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 1109.728527][ T4231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.737916][ T8016] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1109.826499][T20044] XFS (loop1): Mounting V5 Filesystem [ 1110.083196][T20044] XFS (loop1): Ending clean mount [ 1110.109655][ T8016] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1110.130481][T20044] XFS (loop1): Quotacheck needed: Please wait. [ 1110.137239][ T8016] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1110.170541][ T4231] usb 5-1: USB disconnect, device number 26 [ 1110.259303][ T8016] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1110.309300][ T8016] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1110.337692][ T8016] usb 3-1: SerialNumber: syz [ 1110.387735][T20044] XFS (loop1): Quotacheck: Done. [ 1110.494697][ T4188] XFS (loop1): Unmounting Filesystem [ 1110.644582][ T8016] usb 3-1: 0:2 : does not exist [ 1110.678468][ T8016] usb 3-1: USB disconnect, device number 125 [ 1110.994887][ T4180] udevd[4180]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1111.837652][T20228] loop0: detected capacity change from 0 to 4096 [ 1112.138154][T20259] loop4: detected capacity change from 0 to 1764 [ 1112.759767][T20286] loop4: detected capacity change from 0 to 64 [ 1112.796253][T20281] lo speed is unknown, defaulting to 1000 [ 1112.829868][T20281] bond0 speed is unknown, defaulting to 1000 [ 1112.858684][T20248] loop1: detected capacity change from 0 to 32768 [ 1112.946309][T20286] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 1112.972884][T20248] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 1113.053707][T20248] JBD2: Ignoring recovery information on journal [ 1113.210388][T20248] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1113.345429][T20316] netlink: 48 bytes leftover after parsing attributes in process `syz.0.19278'. [ 1113.409407][ T4188] ocfs2: Unmounting device (7,1) on (node local) [ 1113.715052][T20340] loop4: detected capacity change from 0 to 1024 [ 1114.383680][T20352] loop2: detected capacity change from 0 to 4096 [ 1114.452033][T20378] netlink: 24 bytes leftover after parsing attributes in process `syz.4.19292'. [ 1114.500060][T20378] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1114.526029][T20382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19293'. [ 1114.612590][T20382] netlink: del zone limit has 4 unknown bytes [ 1114.672064][T20389] loop4: detected capacity change from 0 to 16 [ 1114.688219][T20352] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1114.777384][T20389] erofs: (device loop4): mounted with root inode @ nid 36. [ 1114.950427][T20397] lo speed is unknown, defaulting to 1000 [ 1115.017545][T20397] bond0 speed is unknown, defaulting to 1000 [ 1115.045263][T20406] trusted_key: encrypted_key: keylen parameter is missing [ 1115.101724][T20415] loop1: detected capacity change from 0 to 512 [ 1115.258443][T20422] netlink: 'syz.2.19304': attribute type 3 has an invalid length. [ 1115.296700][T20423] loop4: detected capacity change from 0 to 2048 [ 1115.350336][T20423] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1115.511939][ T26] audit: type=1800 audit(2000002067.712:138): pid=20423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.19305" name="file1" dev="loop4" ino=1367 res=0 errno=0 [ 1115.820836][T20450] netlink: 'syz.1.19312': attribute type 4 has an invalid length. [ 1116.027677][T20469] loop1: detected capacity change from 0 to 64 [ 1116.463897][T20495] netlink: 774 bytes leftover after parsing attributes in process `syz.0.19321'. [ 1116.498831][T20507] loop1: detected capacity change from 0 to 164 [ 1116.523967][T20495] netlink: 52 bytes leftover after parsing attributes in process `syz.0.19321'. [ 1116.588912][T20507] Unsupported NM flag settings (240) [ 1116.609569][T20507] Unsupported NM flag settings (240) [ 1116.735636][T20515] loop4: detected capacity change from 0 to 512 [ 1116.780823][T20515] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 1116.783965][ T677] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1116.893455][T20515] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz.4.19324: corrupted in-inode xattr [ 1117.033327][T20515] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.19324: couldn't read orphan inode 15 (err -117) [ 1117.051099][ T677] usb 3-1: Using ep0 maxpacket: 32 [ 1117.070423][T20515] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,inode_readahead_blks=0x0000000008000000,quota,noload,user_xattr,mblk_io_submit,noinit_itable,noblock_validity,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: writeback. [ 1117.184444][ T677] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1117.361428][ T677] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1117.398471][ T677] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1117.445330][ T677] usb 3-1: Product: syz [ 1117.449554][ T677] usb 3-1: Manufacturer: syz [ 1117.454170][ T677] usb 3-1: SerialNumber: syz [ 1117.497921][ T677] usb 3-1: config 0 descriptor?? [ 1117.528797][T20506] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1117.548434][ T677] hub 3-1:0.0: bad descriptor, ignoring hub [ 1117.554404][ T677] hub: probe of 3-1:0.0 failed with error -5 [ 1117.727823][T20562] loop1: detected capacity change from 0 to 164 [ 1117.830958][T20562] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1117.930169][ T4231] usb 3-1: USB disconnect, device number 126 [ 1118.269818][T20585] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4188] was attempted by ""[20585] [ 1118.341024][T20589] loop4: detected capacity change from 0 to 1024 [ 1118.477576][T20597] loop1: detected capacity change from 0 to 1024 [ 1118.607790][T20578] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1118.669286][T20597] hfsplus: small file entry [ 1118.769762][T20578] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 1046) [ 1118.801752][T20578] FAT-fs (loop0): Filesystem has been set read-only [ 1118.973732][ T4190] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 1046) [ 1119.167375][ T8021] kernel write not supported for file /media3 (pid: 8021 comm: kworker/0:15) [ 1119.406199][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1119.461783][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1119.489570][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1119.533001][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1119.540465][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1119.580012][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1119.607441][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1119.635238][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1119.642714][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1119.688162][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1119.724658][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1119.746824][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1119.772797][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1119.790630][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1119.820171][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1119.837919][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1119.865392][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1119.883361][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1119.893824][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1119.911185][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1119.927740][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1119.942400][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1119.958793][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1119.974337][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1119.989005][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1120.016372][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1120.039776][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1120.062443][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1120.089254][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1120.104738][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1120.119498][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1120.135770][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1120.151293][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1120.166121][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1120.182487][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1120.198051][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1120.212802][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1120.243436][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1120.264574][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1120.280225][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1120.295834][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1120.311520][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1120.327140][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1120.342654][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1120.364214][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1120.387607][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1120.409075][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1120.425604][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1120.441252][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1120.455456][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1120.472579][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1120.489136][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1120.503500][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1120.520137][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1120.535936][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1120.551607][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1120.578306][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1120.604068][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1120.632018][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1120.639906][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1120.655080][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1120.669901][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1120.687515][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1120.704168][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1120.721879][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1120.739623][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1120.757159][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1120.774549][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1120.786100][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1120.802082][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1120.817726][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1120.833497][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1120.867212][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1120.882735][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1120.898588][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1120.914436][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1120.930420][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1120.947427][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1120.962602][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1120.977059][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1120.992964][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1121.000590][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1121.008328][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1121.015935][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1121.023473][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1121.031496][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1121.039109][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1121.046780][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1121.054395][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1121.062037][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1121.069584][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1121.077226][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1121.084834][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1121.092406][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1121.099993][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1121.107609][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1121.115235][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1121.122892][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1121.130542][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1121.138203][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1121.145913][ T8016] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 1121.159763][ T8016] hid-generic 0000:0000:0004.0002: hidraw0: HID v0.03 Device [syz1] on syz0 [ 1121.455690][T20681] set_capacity_and_notify: 1 callbacks suppressed [ 1121.479677][T20681] loop0: detected capacity change from 0 to 4096 [ 1121.574455][T20698] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1121.631377][T20681] NILFS error (device loop0): nilfs_find_entry: dir 2 size 2147487744 exceeds block count 1 [ 1121.739135][T20681] Remounting filesystem read-only [ 1121.779926][T20707] NILFS (loop0): the device already has a read-only mount. [ 1121.867216][T20718] loop4: detected capacity change from 0 to 1024 [ 1121.952148][T20717] fido_id[20717]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1122.370542][T20767] loop2: detected capacity change from 0 to 256 [ 1122.481187][T20777] loop1: detected capacity change from 0 to 256 [ 1122.522292][T20784] device wg1 entered promiscuous mode [ 1122.531269][T20781] loop4: detected capacity change from 0 to 512 [ 1122.614442][T20781] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1122.659349][T20781] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.19391: invalid indirect mapped block 256 (level 2) [ 1122.707763][T20794] loop0: detected capacity change from 0 to 2048 [ 1122.715118][T20781] EXT4-fs (loop4): 2 truncates cleaned up [ 1122.730066][T20781] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,dioread_nolock,,errors=continue. Quota mode: writeback. [ 1122.781465][T20794] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1122.800185][ T26] audit: type=1326 audit(2000002075.523:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20805 comm="syz.1.19396" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffbf0081e99 code=0x0 [ 1122.848377][T20809] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1122.984637][ T8016] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1123.051986][T20825] device ip6_vti0 entered promiscuous mode [ 1123.269592][T20844] netlink: 20 bytes leftover after parsing attributes in process `syz.4.19403'. [ 1123.342374][T20853] netlink: 'syz.0.19406': attribute type 4 has an invalid length. [ 1123.391383][ T8016] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1123.417816][ T8016] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1123.431785][ T8016] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1123.452701][ T8016] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1123.463723][ T8016] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.498539][ T8016] usb 3-1: config 0 descriptor?? [ 1123.885478][ T4231] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 1123.963838][ T8016] plantronics 0003:047F:FFFF.0003: unbalanced collection at end of report description [ 1124.011300][ T8016] plantronics 0003:047F:FFFF.0003: parse failed [ 1124.050692][ T8016] plantronics: probe of 0003:047F:FFFF.0003 failed with error -22 [ 1124.178317][ T689] usb 3-1: USB disconnect, device number 127 [ 1124.221028][ T4231] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1124.236327][ T4231] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1124.294692][ T4231] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1124.329708][ T4231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.363859][ T4231] usb 5-1: config 0 descriptor?? [ 1124.467246][ T8016] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1124.664707][T20909] loop0: detected capacity change from 0 to 1024 [ 1124.710630][T20912] loop2: detected capacity change from 0 to 764 [ 1124.777830][T20912] rock: directory entry would overflow storage [ 1124.808164][T20912] rock: sig=0x4654, size=5, remaining=4 [ 1124.819951][ T4231] isku 0003:1E7D:319C.0004: item fetching failed at offset 6/7 [ 1124.837188][ T4231] isku 0003:1E7D:319C.0004: parse failed [ 1124.842906][ T4231] isku: probe of 0003:1E7D:319C.0004 failed with error -22 [ 1124.856715][ T8016] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1124.878509][ T8016] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1124.936888][ T8016] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1124.948457][ T8016] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1124.958314][ T8016] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.995202][ T8016] usb 2-1: config 0 descriptor?? [ 1125.027138][ T4231] usb 5-1: USB disconnect, device number 27 [ 1125.046248][T20923] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1125.071529][ T8016] hdpvr 2-1:0.0: Could not find bulk-in endpoint [ 1125.093325][ T8016] hdpvr: probe of 2-1:0.0 failed with error -12 [ 1125.272162][ T8012] usb 2-1: USB disconnect, device number 22 [ 1125.324419][T20947] loop0: detected capacity change from 0 to 64 [ 1125.357981][T20950] netlink: 128 bytes leftover after parsing attributes in process `syz.2.19427'. [ 1125.369921][T20950] netlink: 24 bytes leftover after parsing attributes in process `syz.2.19427'. [ 1125.811447][T20979] loop2: detected capacity change from 0 to 1024 [ 1125.999683][ T298] hfsplus: b-tree write err: -5, ino 25 [ 1126.015906][ T298] hfsplus: b-tree write err: -5, ino 4 [ 1126.046472][ T298] hfsplus: b-tree write err: -5, ino 2 [ 1126.234056][ T8012] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1126.346244][ T689] usb 6-1: new full-speed USB device number 95 using dummy_hcd [ 1126.403901][T21011] loop4: detected capacity change from 0 to 32768 [ 1126.420809][ T677] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 1126.456124][T21011] (syz.4.19446,21011,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1126.477747][T21011] (syz.4.19446,21011,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1126.538809][T21011] JBD2: Ignoring recovery information on journal [ 1126.591436][T21011] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1126.601733][ T8012] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1126.637787][T21011] [ 1126.640189][T21011] ====================================================== [ 1126.647241][T21011] WARNING: possible circular locking dependency detected [ 1126.654358][T21011] syzkaller #0 Not tainted [ 1126.658813][T21011] ------------------------------------------------------ [ 1126.665885][T21011] syz.4.19446/21011 is trying to acquire lock: [ 1126.672079][T21011] ffff88805e50b488 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16d/0x44b0 [ 1126.685371][T21011] [ 1126.685371][T21011] but task is already holding lock: [ 1126.692778][T21011] ffff888062cb31b8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x47d/0x1390 [ 1126.702334][T21011] [ 1126.702334][T21011] which lock already depends on the new lock. [ 1126.702334][T21011] [ 1126.712790][T21011] [ 1126.712790][T21011] the existing dependency chain (in reverse order) is: [ 1126.721835][T21011] [ 1126.721835][T21011] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}: [ 1126.729726][T21011] down_read+0x44/0x2e0 [ 1126.734457][T21011] ocfs2_init_acl+0x307/0x770 [ 1126.739699][T21011] ocfs2_mknod+0x15de/0x2510 [ 1126.744863][T21011] ocfs2_create+0x192/0x420 [ 1126.749945][T21011] path_openat+0x120a/0x2fb0 [ 1126.755094][T21011] do_filp_open+0x1df/0x400 [ 1126.760157][T21011] do_sys_openat2+0x14b/0x500 [ 1126.765400][T21011] __x64_sys_open+0x11b/0x140 [ 1126.765957][ T689] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1126.770637][T21011] do_syscall_64+0x4c/0xa0 [ 1126.770661][T21011] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1126.792207][T21011] [ 1126.792207][T21011] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 1126.800733][T21011] down_read+0x44/0x2e0 [ 1126.805448][T21011] ocfs2_start_trans+0x3a6/0x6f0 [ 1126.810923][T21011] ocfs2_shutdown_local_alloc+0x1f3/0xac0 [ 1126.817189][T21011] ocfs2_dismount_volume+0x1e1/0x890 [ 1126.823032][T21011] generic_shutdown_super+0x130/0x300 [ 1126.828963][T21011] kill_block_super+0x7c/0xe0 [ 1126.834217][T21011] deactivate_locked_super+0x93/0xf0 [ 1126.840037][T21011] cleanup_mnt+0x426/0x4d0 [ 1126.845029][T21011] task_work_run+0x125/0x1a0 [ 1126.849419][ T677] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1126.850150][T21011] exit_to_user_mode_loop+0x10f/0x130 [ 1126.864078][ T677] usb 3-1: New USB device found, idVendor=056a, idProduct=00f4, bcdDevice= 0.00 [ 1126.866988][T21011] exit_to_user_mode_prepare+0xee/0x180 [ 1126.867014][T21011] syscall_exit_to_user_mode+0x16/0x40 [ 1126.882102][ T677] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.882196][T21011] do_syscall_64+0x58/0xa0 [ 1126.901124][T21011] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1126.907350][ T677] usb 3-1: config 0 descriptor?? [ 1126.907572][T21011] [ 1126.907572][T21011] -> #2 (sb_internal#4){.+.+}-{0:0}: [ 1126.920038][T21011] ocfs2_start_trans+0x2a7/0x6f0 [ 1126.925551][T21011] ocfs2_mknod+0xf70/0x2510 [ 1126.930626][T21011] ocfs2_create+0x192/0x420 [ 1126.935675][T21011] path_openat+0x120a/0x2fb0 [ 1126.936351][ T689] usb 6-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1126.940832][T21011] do_filp_open+0x1df/0x400 [ 1126.950735][ T689] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.955029][T21011] do_sys_openat2+0x14b/0x500 [ 1126.955053][T21011] __x64_sys_open+0x11b/0x140 [ 1126.955073][T21011] do_syscall_64+0x4c/0xa0 [ 1126.955092][T21011] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1126.955114][T21011] [ 1126.955114][T21011] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#8){+.+.}-{3:3}: [ 1126.955158][T21011] down_write+0x38/0x60 [ 1126.955181][T21011] ocfs2_reserve_local_alloc_bits+0x11c/0x2630 [ 1126.955208][T21011] ocfs2_reserve_clusters_with_limit+0x1b6/0xc10 [ 1126.955232][T21011] ocfs2_mknod+0xf0e/0x2510 [ 1126.955256][T21011] ocfs2_create+0x192/0x420 [ 1126.955278][T21011] path_openat+0x120a/0x2fb0 [ 1126.955299][T21011] do_filp_open+0x1df/0x400 [ 1126.955320][T21011] do_sys_openat2+0x14b/0x500 [ 1126.955337][T21011] __x64_sys_open+0x11b/0x140 [ 1126.955363][T21011] do_syscall_64+0x4c/0xa0 [ 1126.995433][ T689] usb 6-1: Product: syz [ 1126.995674][T21011] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1127.004234][ T689] usb 6-1: Manufacturer: syz [ 1127.007226][T21011] [ 1127.007226][T21011] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{3:3}: [ 1127.007276][T21011] __lock_acquire+0x2c66/0x7b50 [ 1127.007316][T21011] lock_acquire+0x19e/0x400 [ 1127.007336][T21011] down_write+0x38/0x60 [ 1127.007357][T21011] ocfs2_reserve_suballoc_bits+0x16d/0x44b0 [ 1127.007379][T21011] ocfs2_reserve_new_metadata_blocks+0x412/0x9a0 [ 1127.007399][T21011] ocfs2_init_xattr_set_ctxt+0x2f4/0x6f0 [ 1127.007422][T21011] ocfs2_xattr_set+0xc68/0x1390 [ 1127.007441][T21011] __vfs_setxattr+0x3d8/0x410 [ 1127.007457][T21011] __vfs_setxattr_noperm+0x126/0x5e0 [ 1127.024960][ T689] usb 6-1: SerialNumber: syz [ 1127.029819][T21011] vfs_setxattr+0x167/0x2e0 [ 1127.029846][T21011] setxattr+0x2cb/0x360 [ 1127.029862][T21011] path_setxattr+0x147/0x290 [ 1127.029879][T21011] __x64_sys_setxattr+0xb7/0xd0 [ 1127.029895][T21011] do_syscall_64+0x4c/0xa0 [ 1127.029919][T21011] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1127.059370][ T689] usb 6-1: config 0 descriptor?? [ 1127.061075][T21011] [ 1127.061075][T21011] other info that might help us debug this: [ 1127.061075][T21011] [ 1127.061084][T21011] Chain exists of: [ 1127.061084][T21011] &ocfs2_sysfile_lock_key[args->fi_sysfile_type] [ 1127.108893][ T689] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1127.110842][T21011] #7 --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 1127.110842][T21011] [ 1127.110879][T21011] Possible unsafe locking scenario: [ 1127.110879][T21011] [ 1127.110885][T21011] CPU0 CPU1 [ 1127.110890][T21011] ---- ---- [ 1127.110896][T21011] lock(&oi->ip_xattr_sem); [ 1127.110908][T21011] lock(&journal->j_trans_barrier); [ 1127.110924][T21011] lock(&oi->ip_xattr_sem); [ 1127.110939][T21011] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7); [ 1127.249917][T21011] [ 1127.249917][T21011] *** DEADLOCK *** [ 1127.249917][T21011] [ 1127.258079][T21011] 3 locks held by syz.4.19446/21011: [ 1127.263362][T21011] #0: ffff88814ca40460 (sb_writers#41){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 1127.272604][T21011] #1: ffff888062cb3488 (&type->i_mutex_dir_key#28){+.+.}-{3:3}, at: vfs_setxattr+0x140/0x2e0 [ 1127.282883][T21011] #2: ffff888062cb31b8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x47d/0x1390 [ 1127.292825][T21011] [ 1127.292825][T21011] stack backtrace: [ 1127.298768][T21011] CPU: 0 PID: 21011 Comm: syz.4.19446 Not tainted syzkaller #0 [ 1127.306383][T21011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1127.316473][T21011] Call Trace: [ 1127.319769][T21011] [ 1127.322744][T21011] dump_stack_lvl+0x188/0x250 [ 1127.327428][T21011] ? load_image+0x410/0x410 [ 1127.331942][T21011] ? show_regs_print_info+0x20/0x20 [ 1127.337153][T21011] ? print_circular_bug+0x12b/0x1a0 [ 1127.342446][T21011] check_noncircular+0x296/0x330 [ 1127.347419][T21011] ? look_up_lock_class+0x71/0x110 [ 1127.352560][T21011] ? add_chain_block+0x9b0/0x9b0 [ 1127.357530][T21011] ? lockdep_lock+0xf1/0x1f0 [ 1127.362142][T21011] ? mark_lock+0x94/0x320 [ 1127.366501][T21011] ? _find_first_zero_bit+0xd1/0xf0 [ 1127.371723][T21011] __lock_acquire+0x2c66/0x7b50 [ 1127.376611][T21011] ? __lock_acquire+0x7b50/0x7b50 [ 1127.381655][T21011] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1127.387327][T21011] ? verify_lock_unused+0x140/0x140 [ 1127.392560][T21011] ? do_raw_spin_lock+0x128/0x2f0 [ 1127.397714][T21011] ? mutex_unlock+0x10/0x10 [ 1127.400117][ T677] wacom 0003:056A:00F4.0005: hidraw0: USB HID v0.00 Device [HID 056a:00f4] on usb-dummy_hcd.2-1/input0 [ 1127.402257][T21011] ? __rwlock_init+0x140/0x140 [ 1127.402284][T21011] ? do_raw_spin_unlock+0x11d/0x230 [ 1127.423311][T21011] lock_acquire+0x19e/0x400 [ 1127.427903][T21011] ? ocfs2_reserve_suballoc_bits+0x16d/0x44b0 [ 1127.434021][T21011] ? __might_sleep+0xf0/0xf0 [ 1127.438657][T21011] ? read_lock_is_recursive+0x10/0x10 [ 1127.444079][T21011] ? verify_lock_unused+0x140/0x140 [ 1127.449321][T21011] down_write+0x38/0x60 [ 1127.453521][T21011] ? ocfs2_reserve_suballoc_bits+0x16d/0x44b0 [ 1127.459627][T21011] ocfs2_reserve_suballoc_bits+0x16d/0x44b0 [ 1127.465564][T21011] ? __lock_acquire+0x7b50/0x7b50 [ 1127.470637][T21011] ? mark_lock+0x94/0x320 [ 1127.475002][T21011] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1127.481026][T21011] ? lock_chain_count+0x20/0x20 [ 1127.485918][T21011] ? __rwlock_init+0x140/0x140 [ 1127.490719][T21011] ? ocfs2_block_group_search+0x470/0x470 [ 1127.496478][T21011] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1127.502423][T21011] ? lockdep_hardirqs_on+0x94/0x140 [ 1127.507666][T21011] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1127.513599][T21011] ? _raw_spin_unlock+0x40/0x40 [ 1127.518492][T21011] ? stack_trace_save+0xa6/0xf0 [ 1127.523379][T21011] ? stack_trace_snprint+0xe0/0xe0 [ 1127.528538][T21011] ? stack_depot_save+0x41b/0x460 [ 1127.533628][T21011] ? __kasan_kmalloc+0xc6/0xe0 [ 1127.538431][T21011] ? __kasan_kmalloc+0xaf/0xe0 [ 1127.543234][T21011] ? ocfs2_reserve_new_metadata_blocks+0x109/0x9a0 [ 1127.549783][T21011] ? ocfs2_init_xattr_set_ctxt+0x2f4/0x6f0 [ 1127.555637][T21011] ? ocfs2_xattr_set+0xc68/0x1390 [ 1127.560704][T21011] ? __vfs_setxattr+0x3d8/0x410 [ 1127.565584][T21011] ? __vfs_setxattr_noperm+0x126/0x5e0 [ 1127.571084][T21011] ? vfs_setxattr+0x167/0x2e0 [ 1127.575800][T21011] ? setxattr+0x2cb/0x360 [ 1127.580168][T21011] ? path_setxattr+0x147/0x290 [ 1127.584980][T21011] ? __x64_sys_setxattr+0xb7/0xd0 [ 1127.590040][T21011] ? do_syscall_64+0x4c/0xa0 [ 1127.594669][T21011] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1127.600795][T21011] ocfs2_reserve_new_metadata_blocks+0x412/0x9a0 [ 1127.607177][T21011] ? ocfs2_init_steal_slots+0x150/0x150 [ 1127.612765][T21011] ? ocfs2_xattr_block_set+0x2da0/0x2da0 [ 1127.618442][T21011] ? do_raw_spin_lock+0x128/0x2f0 [ 1127.623517][T21011] ocfs2_init_xattr_set_ctxt+0x2f4/0x6f0 [ 1127.629208][T21011] ? ocfs2_prepare_refcount_xattr+0xfe0/0xfe0 [ 1127.635458][T21011] ? ocfs2_truncate_log_needs_flush+0x12c/0x300 [ 1127.641760][T21011] ? ocfs2_remove_btree_range+0x15e0/0x15e0 [ 1127.641775][ T4231] usb 3-1: USB disconnect, device number 2 [ 1127.653507][T21011] ? ocfs2_xattr_ibody_find+0xc6/0x780 [ 1127.659026][T21011] ? up_write+0x1b6/0x410 [ 1127.663663][T21011] ocfs2_xattr_set+0xc68/0x1390 [ 1127.668570][T21011] ? __ocfs2_xattr_set_handle+0xf20/0xf20 [ 1127.674334][T21011] ? aa_get_newest_label+0xf5/0x5a0 [ 1127.679567][T21011] ? end_current_label_crit_section+0x170/0x170 [ 1127.685857][T21011] ? apparmor_capable+0x12c/0x190 [ 1127.690935][T21011] ? evm_protected_xattr_common+0x170/0x190 [ 1127.696873][T21011] ? evm_protect_xattr+0x7b4/0x9b0 [ 1127.702034][T21011] ? ima_inode_post_setattr+0x320/0x320 [ 1127.707619][T21011] ? ocfs2_xattr_security_get+0x40/0x40 [ 1127.713212][T21011] __vfs_setxattr+0x3d8/0x410 [ 1127.716074][ T689] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 1127.717927][T21011] __vfs_setxattr_noperm+0x126/0x5e0 [ 1127.730021][T21011] vfs_setxattr+0x167/0x2e0 [ 1127.734618][T21011] ? xattr_permission+0x510/0x510 [ 1127.739355][ T689] gspca_pac7302: probe of 6-1:0.0 failed with error -71 [ 1127.739678][T21011] ? _copy_from_user+0x111/0x170 [ 1127.751579][T21011] ? setxattr+0x22b/0x360 [ 1127.755974][T21011] setxattr+0x2cb/0x360 [ 1127.760201][T21011] ? path_setxattr+0x290/0x290 [ 1127.765008][T21011] ? __mnt_want_write+0x1e2/0x260 [ 1127.770083][T21011] path_setxattr+0x147/0x290 [ 1127.774715][T21011] ? simple_xattr_list_add+0xf0/0xf0 [ 1127.780041][T21011] ? lock_chain_count+0x20/0x20 [ 1127.784942][T21011] __x64_sys_setxattr+0xb7/0xd0 [ 1127.789196][ T689] usb 6-1: USB disconnect, device number 95 [ 1127.789851][T21011] do_syscall_64+0x4c/0xa0 [ 1127.800197][T21011] ? clear_bhb_loop+0x30/0x80 [ 1127.804911][T21011] ? clear_bhb_loop+0x30/0x80 [ 1127.809625][T21011] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1127.815551][T21011] RIP: 0033:0x7f229b677e99 [ 1127.820004][T21011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1127.839667][T21011] RSP: 002b:00007f22998d0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 1127.848127][T21011] RAX: ffffffffffffffda RBX: 00007f229b8fffa0 RCX: 00007f229b677e99 [ 1127.856133][T21011] RDX: 00002000000001c0 RSI: 0000200000000180 RDI: 00002000000000c0 [ 1127.864153][T21011] RBP: 00007f229b70deaf R08: 0000000000000000 R09: 0000000000000000 [ 1127.872154][T21011] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1127.880188][T21011] R13: 00007f229b900038 R14: 00007f229b8fffa0 R15: 00007fff96c13638 [ 1127.888249][T21011] [ 1127.898681][ T8012] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1127.928601][ T8012] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1127.941073][ T8012] usb 2-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 1127.950450][ T8012] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.960338][ T8012] usb 2-1: config 0 descriptor?? [ 1127.995413][ T4195] ocfs2: Unmounting device (7,4) on (node local) [ 1128.408634][ T8012] wacom 0003:056A:0010.0006: unknown main item tag 0x0 [ 1128.415741][ T8012] wacom 0003:056A:0010.0006: unknown main item tag 0x0 [ 1128.423153][ T8012] wacom 0003:056A:0010.0006: Unknown device_type for 'HID 056a:0010'. Assuming pen. [ 1128.433875][ T8012] wacom 0003:056A:0010.0006: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.1-1/input0 [ 1128.446231][ T8012] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0010.0006/input/input83 [ 1128.613559][ T8012] usb 2-1: USB disconnect, device number 23