last executing test programs: 10m42.269785598s ago: executing program 2 (id=498): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x2, @local}}, 0x1e) 10m42.192945072s ago: executing program 2 (id=501): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$dsp(r0, &(0x7f0000001600)="0ed1c8", 0x3) 10m42.066697099s ago: executing program 2 (id=505): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001340)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffff}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) 10m41.928670456s ago: executing program 2 (id=509): syz_mount_image$cramfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00e5496ddf42b572a11a00801680"], 0xfe, 0x148, &(0x7f0000000540)="$eJzsz79LAnEYBvDnulP7of0gAwsyoaEjkc6TamrQSBK6hMKlSaiTAqVIKMci2tpaHSShSfwXLGsxFKL+iRa3oDW+3lFck3vPZznued/34W5jraMiBMiwrB8XTk7NYtE8CO2kjeTuR6MRF7kbwKBjbu0/xIFD8VSA7iUg4icfPHZdXrx344AKIDEC5I7ypgZrd1hkfiuL2pk6DzSnrEx3ZuITzJidzShAYuynz8jlXFgQfRO/fZ8ASuVwvfay3W6lIov3szKuU+G5ScmZB80bPTld9QZkZMznOyR68/elVuR1qF5767SNrbTh6cR0fSWmRTVt2Wf/HZRN7xmw96fPjUBQyQBXEnDbm3UfJXHTrHylC6OrFfv64lwOAVKpvJ8NuKpZ//gAZBUS+uHqa4uIiIiIiIiIiIiIiIiIiP6L7wAAAP//dRlcow==") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 10m41.628067962s ago: executing program 2 (id=521): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b49, 0x0) 10m40.445963234s ago: executing program 2 (id=548): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000001180)={0x22, 0x2, 0x0, "e19b6bdecd37de8b92723846bf060000001e9216033cc0330bdb1dad05c6068b"}) 10m40.281810324s ago: executing program 32 (id=548): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000001180)={0x22, 0x2, 0x0, "e19b6bdecd37de8b92723846bf060000001e9216033cc0330bdb1dad05c6068b"}) 4m27.587531775s ago: executing program 5 (id=9407): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf08ca936d"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 4m25.528572364s ago: executing program 5 (id=9459): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x8000}]}}}]}, 0x3c}}, 0x0) 4m25.286687176s ago: executing program 5 (id=9463): r0 = io_uring_setup(0x1946, &(0x7f0000000a80)={0x0, 0xa951, 0x10, 0x0, 0x22c}) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, 0x0, 0x0) 4m25.114190775s ago: executing program 5 (id=9469): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000100)='./bus\x00', 0x804c00, &(0x7f0000000ac0)=ANY=[@ANYBLOB="6465636f6d706f73652c63726561746f723df3fffff72c6e6c733d69736f383835392d31352c706172743d3078303030303030303030303030303000002c756d61736b3d30303030303030303030303030303030303136303637362c63726561746f723d6c2d7d912c706172743d307830303030d5f73030303030303030303030382c6e6f626172726965722c6e6c733d6d6163726f6d616e69616e"], 0xff, 0x6da, &(0x7f0000000b80)="$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") mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000002c0), 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) 4m24.779048403s ago: executing program 5 (id=9477): r0 = socket$nl_route(0x10, 0x3, 0x0) fremovexattr(r0, 0x0) 4m24.154966927s ago: executing program 5 (id=9497): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0) 4m23.953193677s ago: executing program 33 (id=9497): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0) 2.683086888s ago: executing program 6 (id=16415): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x80}}, 0x0) 2.549747305s ago: executing program 6 (id=16419): r0 = open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) finit_module(r0, 0x0, 0x2) 2.453236641s ago: executing program 6 (id=16422): r0 = syz_open_dev$vbi(&(0x7f0000004040), 0x3, 0x2) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f0000004080)) 2.318717828s ago: executing program 6 (id=16426): syz_usb_connect$cdc_ecm(0x1, 0x77, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x1, 0x1, 0x1, 0x0, 0x7, "", [{{0x9, 0x4, 0x0, 0x80, 0xfd, 0x2, 0x6, 0x0, 0xce, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x3, 0x0, 0x48}, [@mdlm={0x15, 0x24, 0x12, 0x6}, @mdlm={0x15, 0x24, 0x12, 0x40}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0x0, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x2, 0x0, 0x3}}}}}]}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) 1.825803684s ago: executing program 3 (id=16444): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x702, 0x86, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd4b3547f2cbfad47001bd34d04351caf1f9a07be047c25d7670ea4a41b8a6800c0de87b6f8e6a725643f7b3ab502617b472091a730e36aabb2f2426a24a29edbed9463081eef61aa7fab052ffcc89b4bac5bae255a31da7c7b87aca6e0a240ce57daf09b305e2cd418404d54cdca435ab392d48aa01019845", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.673037602s ago: executing program 3 (id=16447): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 1.533019489s ago: executing program 3 (id=16448): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xc, &(0x7f00000000c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4000000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.419002826s ago: executing program 3 (id=16449): r0 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001900)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x10}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) 1.357842119s ago: executing program 3 (id=16451): r0 = io_uring_setup(0x25f5, &(0x7f00000000c0)={0x0, 0xc63b, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x0, 0x2, 0xf, 0x0, 0x0) 1.260768294s ago: executing program 3 (id=16452): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a001000010000090588"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000080)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0}) 1.183275278s ago: executing program 4 (id=16455): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x80000f8, 0x238, 0xf8, 0x720d, 0x148, 0xf8, 0x148, 0x1c8, 0x240, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@remote, @empty, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) 1.099119132s ago: executing program 4 (id=16456): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r0, &(0x7f0000000000)=[{&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 1.056642585s ago: executing program 4 (id=16457): mremap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) 1.011462027s ago: executing program 0 (id=16458): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) 970.392419ms ago: executing program 0 (id=16459): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, 0x0, 0x0}, 0x20) 942.08328ms ago: executing program 0 (id=16460): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r0, 0xfffffe61, &(0x7f0000000400)}, 0x10) 874.331824ms ago: executing program 4 (id=16461): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f00000000c0)={0x1, &(0x7f00001e1300)=[{0x4000000, 0x0, 0x0, 0x1, 0x1000008}]}) 873.834934ms ago: executing program 0 (id=16462): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000100)={0x24, 0x8, 0x9, 0xa, 0x0, 0x81}) 780.556549ms ago: executing program 4 (id=16463): r0 = socket(0x21, 0x2, 0x10000000000002) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000}, 0x5}], 0x1, 0x0) 773.218969ms ago: executing program 0 (id=16464): r0 = openat$dsp1(0xffffff9c, &(0x7f00000001c0), 0x88680, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r0, 0x80044df9, &(0x7f0000000200)) 691.634704ms ago: executing program 4 (id=16465): setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0xc, 0x0, 0x8}, 0xe) syz_usb_connect$uac2(0x0, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000002082053b0040000102030109027e0003efff6003080b0001010520020904000000010120000924010700001e00170924070501000603000c2403010003070205"], 0x0) 615.274138ms ago: executing program 0 (id=16466): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000000)={0x40, 0x8, 0x6, "3200210a22d2"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 589.804399ms ago: executing program 1 (id=16467): r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='dyn', &(0x7f0000000140)='syz0', 0x0) 327.105843ms ago: executing program 1 (id=16468): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x1}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) 273.638846ms ago: executing program 1 (id=16469): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x64, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @inner={{0xa}, @void}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf8}}, 0x0) 175.165571ms ago: executing program 1 (id=16470): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, 0x0) 143.239163ms ago: executing program 1 (id=16471): r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f0000000040)="7469b18516290b84a83c1a3141668f5864", 0x11) 104.244995ms ago: executing program 1 (id=16472): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 51.143078ms ago: executing program 6 (id=16473): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, 0x0) 0s ago: executing program 6 (id=16474): prlimit64(0x0, 0x8, &(0x7f0000000580)={0x8, 0x88}, 0x0) r0 = shmget(0x1, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_LOCK(r0, 0xb) kernel console output (not intermixed with test programs): 2 has an invalid length. [ 643.795266][ T1739] netlink: 'syz.3.13743': attribute type 10 has an invalid length. [ 643.830546][ T1739] netlink: 'syz.3.13743': attribute type 10 has an invalid length. [ 644.026002][T21880] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 644.235945][ T1765] x_tables: unsorted entry at hook 3 [ 644.284789][T21880] usb 1-1: Using ep0 maxpacket: 32 [ 644.405482][T21880] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 644.421915][T21880] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 644.478977][T21880] usb 1-1: config 0 has no interface number 0 [ 644.488527][T21880] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 644.541996][T21880] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 644.556991][ T1789] IPv6: sit1: Disabled Multicast RS [ 644.579406][T21880] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 644.615906][T21880] usb 1-1: config 0 interface 85 altsetting 7 has 6 endpoint descriptors, different from the interface descriptor's value: 7 [ 644.681831][T21880] usb 1-1: config 0 interface 85 has no altsetting 0 [ 644.865033][T21880] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 644.874156][T21880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.935793][T21880] usb 1-1: Product: syz [ 644.940020][T21880] usb 1-1: Manufacturer: syz [ 644.967539][T21880] usb 1-1: SerialNumber: syz [ 644.988375][T21880] usb 1-1: config 0 descriptor?? [ 645.040397][ T1819] loop6: detected capacity change from 0 to 764 [ 645.113683][ T1819] Symlink component flag not implemented [ 645.143695][ T1819] Symlink component flag not implemented [ 645.168472][ T1819] Symlink component flag not implemented (129) [ 645.176461][ T1819] Symlink component flag not implemented (6) [ 645.264854][T21880] appletouch 1-1:0.85: Failed to read mode from device. [ 645.272126][T21880] appletouch: probe of 1-1:0.85 failed with error -5 [ 645.329457][ T1829] netlink: 'syz.3.13781': attribute type 10 has an invalid length. [ 645.349315][T21880] usb 1-1: USB disconnect, device number 56 [ 645.406754][ T1829] netlink: 2 bytes leftover after parsing attributes in process `syz.3.13781'. [ 645.444701][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 645.483170][ T1829] device bond0 entered promiscuous mode [ 645.489274][ T1829] device bond_slave_0 entered promiscuous mode [ 645.496916][ T1829] device bond_slave_1 entered promiscuous mode [ 645.510664][ T1829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 645.576633][ T1829] bridge0: port 2(bond0) entered blocking state [ 645.583169][ T1829] bridge0: port 2(bond0) entered disabled state [ 645.642561][ T1841] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13786'. [ 645.695503][ T1816] loop4: detected capacity change from 0 to 32768 [ 645.741434][ T1816] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.13773 (1816) [ 645.781189][ T1847] x_tables: unsorted underflow at hook 3 [ 645.790086][ T1816] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 645.812957][ T1816] BTRFS info (device loop4): unrecognized rescue option 'ignoresuperflags' [ 645.833265][ T1816] BTRFS error (device loop4): unrecognized rescue value ignoresuperflags [ 645.889622][ T1816] BTRFS error (device loop4): open_ctree failed: -22 [ 645.973702][ T1854] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13792'. [ 645.986145][ T1857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13793'. [ 646.011723][ T8034] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by udevd (8034) [ 646.584700][ T1111] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 646.966728][ T1111] usb 2-1: config 2 has an invalid interface number: 19 but max is 0 [ 646.985311][ T1111] usb 2-1: config 2 has no interface number 0 [ 647.001705][ T1111] usb 2-1: config 2 interface 19 has no altsetting 0 [ 647.185631][ T1111] usb 2-1: New USB device found, idVendor=05ac, idProduct=fdc3, bcdDevice=2f.a6 [ 647.216057][ T1111] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.243770][ T1111] usb 2-1: Product: syz [ 647.258489][ T1111] usb 2-1: Manufacturer: syz [ 647.263155][ T1111] usb 2-1: SerialNumber: syz [ 647.269835][ T1897] loop3: detected capacity change from 0 to 32768 [ 647.605538][ T1111] ipheth 2-1:2.19: Unable to find alternate settings interface [ 647.649934][ T1111] usb 2-1: USB disconnect, device number 59 [ 647.721088][ T1967] device xfrm0 entered promiscuous mode [ 647.932136][ T1981] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13854'. [ 648.112618][ T1996] loop1: detected capacity change from 0 to 512 [ 648.129530][ T1994] netlink: 92 bytes leftover after parsing attributes in process `syz.3.13859'. [ 648.265914][ T1996] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 648.509601][ T2030] loop6: detected capacity change from 0 to 256 [ 648.587805][ T2030] FAT-fs (loop6): Directory bread(block 64) failed [ 648.605622][ T2030] FAT-fs (loop6): Directory bread(block 65) failed [ 648.622995][ T2030] FAT-fs (loop6): Directory bread(block 66) failed [ 648.637700][ T2030] FAT-fs (loop6): Directory bread(block 67) failed [ 648.656690][ T2030] FAT-fs (loop6): Directory bread(block 68) failed [ 648.673150][ T2041] device wg1 entered promiscuous mode [ 648.680236][ T2030] FAT-fs (loop6): Directory bread(block 69) failed [ 648.703506][ T2030] FAT-fs (loop6): Directory bread(block 70) failed [ 648.722173][ T2030] FAT-fs (loop6): Directory bread(block 71) failed [ 648.762015][ T2030] FAT-fs (loop6): Directory bread(block 72) failed [ 648.781817][ T2044] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13884'. [ 648.791415][ T2030] FAT-fs (loop6): Directory bread(block 73) failed [ 649.019829][ T26] audit: type=1800 audit(648.982:56): pid=2030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.13877" name="file1" dev="loop6" ino=1048699 res=0 errno=0 [ 649.405532][ T2079] loop1: detected capacity change from 0 to 1024 [ 649.444949][T16129] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 649.454790][T18391] usb 1-1: new low-speed USB device number 57 using dummy_hcd [ 649.600781][ T2091] ieee802154 phy0 wpan0: encryption failed: -22 [ 649.695514][T16129] usb 5-1: Using ep0 maxpacket: 32 [ 649.714830][ T4230] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 649.814946][T16129] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 649.827922][T16129] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.839489][T16129] usb 5-1: config 0 descriptor?? [ 649.891776][T16129] as10x_usb: device has been detected [ 649.898005][T16129] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 649.905747][T18391] usb 1-1: unable to get BOS descriptor or descriptor too short [ 649.921803][T16129] usb 5-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)... [ 649.941965][T16129] as10x_usb: error during firmware upload part1 [ 649.948967][T16129] Registered device nBox DVB-T Dongle [ 649.995089][T18391] usb 1-1: config 250 has an invalid interface number: 59 but max is 0 [ 650.018238][T18391] usb 1-1: config 250 has an invalid descriptor of length 16, skipping remainder of the config [ 650.024847][T21880] usb 4-1: new low-speed USB device number 55 using dummy_hcd [ 650.043876][T18391] usb 1-1: config 250 has no interface number 0 [ 650.058934][T18391] usb 1-1: config 250 interface 59 altsetting 255 endpoint 0xF has invalid maxpacket 512, setting to 8 [ 650.073674][T18391] usb 1-1: config 250 interface 59 altsetting 255 has an invalid endpoint with address 0xC2, skipping [ 650.088495][T18391] usb 1-1: config 250 interface 59 altsetting 255 has an invalid endpoint descriptor of length 4, skipping [ 650.100239][T18391] usb 1-1: config 250 interface 59 has no altsetting 0 [ 650.128496][T16129] usb 5-1: USB disconnect, device number 57 [ 650.168791][T16129] Unregistered device nBox DVB-T Dongle [ 650.181052][T16129] as10x_usb: device has been disconnected [ 650.274993][ T4230] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 650.286668][ T4230] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.305189][ T4230] usb 7-1: Product: syz [ 650.311639][ T4230] usb 7-1: Manufacturer: syz [ 650.317192][ T4230] usb 7-1: SerialNumber: syz [ 650.364920][T18391] usb 1-1: string descriptor 0 read error: -22 [ 650.372372][ T4230] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 650.381595][T18391] usb 1-1: New USB device found, idVendor=1b80, idProduct=e302, bcdDevice=8c.2b [ 650.395606][T21880] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 650.404484][T18391] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.418280][T21880] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 650.438511][ T2064] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 650.450472][T21880] usb 4-1: config 0 has no interface number 0 [ 650.457125][T21880] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 650.490146][T21880] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 650.509440][T21880] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 650.522197][T21880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.533533][T21880] usb 4-1: config 0 descriptor?? [ 650.567747][ T2121] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13922'. [ 650.579127][ T2121] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13922'. [ 650.680483][T18391] usb 1-1: USB disconnect, device number 57 [ 650.966223][ T2143] kAFS: unparsable volume name [ 651.017181][T21880] usb 4-1: USB disconnect, device number 55 [ 651.044794][ T4230] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 651.083068][ T2149] netlink: 'syz.1.13936': attribute type 10 has an invalid length. [ 651.099157][ T2149] netlink: 2 bytes leftover after parsing attributes in process `syz.1.13936'. [ 651.110352][ T2149] device bond0 entered promiscuous mode [ 651.132632][ T2149] device bond_slave_0 entered promiscuous mode [ 651.140983][ T2149] device bond_slave_1 entered promiscuous mode [ 651.148391][ T2149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 651.155854][ T2149] bridge0: port 4(bond0) entered blocking state [ 651.162323][ T2149] bridge0: port 4(bond0) entered disabled state [ 651.476031][ T2173] netlink: 328 bytes leftover after parsing attributes in process `syz.4.13948'. [ 651.513288][ T23] usb 7-1: USB disconnect, device number 18 [ 651.679012][ T2190] netlink: 'syz.0.13956': attribute type 3 has an invalid length. [ 651.724925][ T2190] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.13956'. [ 651.920629][ T2203] loop1: detected capacity change from 0 to 2048 [ 651.922884][ T2205] loop4: detected capacity change from 0 to 256 [ 651.958656][ T2203] Alternate GPT is invalid, using primary GPT. [ 651.958759][ T2203] loop1: p1 p2 p3 [ 652.174872][ T4230] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 652.182049][ T4230] ath9k_htc: Failed to initialize the device [ 652.225804][ T23] usb 7-1: ath9k_htc: USB layer deinitialized [ 652.261720][ T4390] udevd[4390]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 652.263337][ T8034] udevd[8034]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 652.311019][ T8035] udevd[8035]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 652.321243][ T2213] tc_dump_action: action bad kind [ 652.423880][ T8034] udevd[8034]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 652.452843][ T4709] udevd[4709]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 652.470440][ T4390] udevd[4390]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 652.491794][ T2221] netlink: 'syz.4.13972': attribute type 8 has an invalid length. [ 652.533970][ T2221] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.13972'. [ 652.715950][ T2234] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.13977'. [ 652.981211][ T2239] loop3: detected capacity change from 0 to 4096 [ 653.060595][ T2239] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 653.414842][ T2258] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13989'. [ 653.469281][ T2267] tmpfs: Bad value for 'mpol' [ 653.476090][ T2263] loop4: detected capacity change from 0 to 4096 [ 653.513572][ T2263] ntfs3: loop4: mft corrupted [ 653.532945][ T2263] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 653.552789][ T2263] ntfs3: loop4: Failed to load $LogFile. [ 653.562418][ T23] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 653.667822][ T2273] netlink: 'syz.4.13996': attribute type 4 has an invalid length. [ 653.680150][ T2273] netlink: 152 bytes leftover after parsing attributes in process `syz.4.13996'. [ 653.701775][ T2275] loop1: detected capacity change from 0 to 256 [ 653.705225][ T2273] wlan1: mtu less than device minimum [ 653.781881][ T2275] FAT-fs (loop1): Directory bread(block 64) failed [ 653.807777][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 653.813303][ T2275] FAT-fs (loop1): Directory bread(block 65) failed [ 653.859957][ T2275] FAT-fs (loop1): Directory bread(block 66) failed [ 653.880016][ T2275] FAT-fs (loop1): Directory bread(block 67) failed [ 653.910819][ T2275] FAT-fs (loop1): Directory bread(block 68) failed [ 653.931048][ T2275] FAT-fs (loop1): Directory bread(block 69) failed [ 653.956404][ T23] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 653.969596][ T2275] FAT-fs (loop1): Directory bread(block 70) failed [ 653.989099][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.001871][ T2275] FAT-fs (loop1): Directory bread(block 71) failed [ 654.021858][ T23] usb 4-1: config 0 descriptor?? [ 654.032837][ T2275] FAT-fs (loop1): Directory bread(block 72) failed [ 654.054758][ T2275] FAT-fs (loop1): Directory bread(block 73) failed [ 654.116427][ T23] as10x_usb: device has been detected [ 654.122270][ T23] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 654.134860][ T2292] ipt_REJECT: TCP_RESET invalid for non-tcp [ 654.141120][ T2291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14004'. [ 654.185012][ T23] usb 4-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)... [ 654.212123][ T23] as10x_usb: error during firmware upload part1 [ 654.230244][ T23] Registered device nBox DVB-T Dongle [ 654.323761][ T23] usb 4-1: USB disconnect, device number 56 [ 654.355139][ T23] Unregistered device nBox DVB-T Dongle [ 654.356346][ T23] as10x_usb: device has been disconnected [ 654.716628][ T2321] netlink: 'syz.0.14019': attribute type 10 has an invalid length. [ 654.748114][ T2321] device hsr0 entered promiscuous mode [ 654.753824][ T2321] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 654.808528][ T2324] loop4: detected capacity change from 0 to 4096 [ 654.811054][ T2321] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 654.834947][ T2321] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 654.848357][ T2324] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 654.868755][ T2321] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 654.997584][ T1111] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 655.130021][ T2340] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.14029'. [ 655.190045][ T2340] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 655.198699][ T2344] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14030'. [ 655.380848][ T1111] usb 7-1: config 0 has an invalid interface number: 83 but max is 0 [ 655.399490][ T1111] usb 7-1: config 0 has no interface number 0 [ 655.416169][ T1111] usb 7-1: config 0 interface 83 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 655.433020][ T1111] usb 7-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 655.450973][ T1111] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.468107][ T2359] loop4: detected capacity change from 0 to 1024 [ 655.481589][ T1111] usb 7-1: config 0 descriptor?? [ 655.509452][ T2359] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 655.552873][ T2359] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 655.570593][ T1111] ttusbir 7-1:0.83: cannot find expected altsetting [ 655.583140][ T2359] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,quota,,errors=continue. Quota mode: writeback. [ 655.610117][ T2359] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 655.624877][ T23] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 655.830083][ T4230] usb 7-1: USB disconnect, device number 19 [ 655.914829][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 656.046420][ T23] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 656.074681][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.113659][ T23] usb 1-1: config 0 descriptor?? [ 656.140051][ T2398] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.14056'. [ 656.178544][ T23] as10x_usb: device has been detected [ 656.196521][ T23] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 656.255144][ T23] usb 1-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)... [ 656.281405][ T23] as10x_usb: error during firmware upload part1 [ 656.288694][ T23] Registered device nBox DVB-T Dongle [ 656.421936][ T1111] usb 1-1: USB disconnect, device number 58 [ 656.468364][ T1111] Unregistered device nBox DVB-T Dongle [ 656.482900][ T1111] as10x_usb: device has been disconnected [ 656.744768][ T2438] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 656.780405][ T2435] device bridge6 entered promiscuous mode [ 656.801892][ T2441] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14077'. [ 657.119339][ T2465] ieee802154 phy0 wpan0: encryption failed: -90 [ 657.571622][ T2495] loop4: detected capacity change from 0 to 1024 [ 657.677553][ T2508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14104'. [ 657.689704][ T2495] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,jqfmt=vfsv1,abort,debug_want_extra_isize=0x0000000000000008,lazytime,delalloc,stripe=0x0000000000000005,usrquota,init_itable,,errors=continue. Quota mode: writeback. [ 657.718870][ T2495] EXT4-fs error (device loop4): ext4_lookup:1858: inode #12: comm syz.4.14099: iget: bogus i_mode (7) [ 657.848557][ T2520] loop3: detected capacity change from 0 to 4096 [ 657.872498][ T2520] ntfs: (device loop3): check_mft_mirror(): Incomplete multi sector transfer detected in mft record 2. [ 657.883953][ T2520] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 657.945891][ T2520] ntfs: volume version 3.1. [ 657.959759][ T2520] ntfs: (device loop3): map_mft_record_page(): Mft record 0x2 is corrupt. Run chkdsk. [ 657.993302][ T2520] ntfs: (device loop3): map_mft_record(): Failed with error code 5. [ 658.022233][ T2520] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 658.060436][ T2520] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 658.183946][ T2467] loop6: detected capacity change from 0 to 32768 [ 658.210271][ T2520] ntfs: (device loop3): ntfs_read_locked_inode(): Index block size (0) < NTFS_BLOCK_SIZE (512) is not supported. Sorry. [ 658.238051][ T2520] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -95. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 658.671117][ T2558] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.14121'. [ 658.688938][ T2561] loop1: detected capacity change from 0 to 764 [ 658.789147][ T2569] netlink: 'syz.0.14125': attribute type 10 has an invalid length. [ 658.821991][ T2569] 8021q: adding VLAN 0 to HW filter on device team0 [ 658.857140][ T2569] bond0: (slave team0): Enslaving as an active interface with an up link [ 658.883821][ T2571] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14124'. [ 658.898220][ T2575] loop3: detected capacity change from 0 to 64 [ 658.912981][ T2571] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14124'. [ 659.135588][ T2579] loop1: detected capacity change from 0 to 8192 [ 659.161217][ T2599] netlink: 32 bytes leftover after parsing attributes in process `syz.4.14138'. [ 659.224245][ T2579] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 659.305422][ T2579] REISERFS (device loop1): using ordered data mode [ 659.311973][ T2579] reiserfs: using flush barriers [ 659.370462][ T2579] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 659.453246][ T2579] REISERFS (device loop1): checking transaction log (loop1) [ 659.499972][ T2579] REISERFS (device loop1): Using r5 hash to sort names [ 659.518470][ T2579] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 659.598881][ T2625] kAFS: No cell specified [ 659.604853][ T23] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 660.176060][ T23] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 660.200040][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.216569][ T2670] netlink: 'syz.6.14165': attribute type 15 has an invalid length. [ 660.230473][ T23] usb 5-1: Product: syz [ 660.243318][ T23] usb 5-1: Manufacturer: syz [ 660.254635][ T23] usb 5-1: SerialNumber: syz [ 660.304322][ T23] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 660.329899][ T26] audit: type=1800 audit(660.292:57): pid=2680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.14168" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 660.562265][ T2697] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14175'. [ 660.601057][ T2699] netlink: 64 bytes leftover after parsing attributes in process `syz.6.14176'. [ 660.605369][ T2697] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14175'. [ 660.727776][ T2705] device netdevsim0 entered promiscuous mode [ 660.883941][ T2718] qrtr: Invalid version 0 [ 660.948296][ T23] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 661.013373][ T2723] tmpfs: Bad value for 'mpol' [ 661.334147][ T2737] loop3: detected capacity change from 0 to 4096 [ 661.356288][ T4230] usb 5-1: USB disconnect, device number 58 [ 661.525705][ T2737] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 661.686044][ T4302] ntfs3: loop3: ntfs3_write_inode r=3 failed, -22. [ 661.698791][ T4184] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 661.715803][ T4184] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 661.723700][ T4184] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 661.743320][ T4302] ntfs3: loop3: ntfs3_write_inode r=3 failed, -22. [ 661.752372][ T4184] ntfs3: loop3: ntfs_evict_inode r=3 failed, -22. [ 662.014698][ T23] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 662.021903][ T23] ath9k_htc: Failed to initialize the device [ 662.067229][ T4230] usb 5-1: ath9k_htc: USB layer deinitialized [ 662.076934][ T2793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14214'. [ 662.219543][ T2803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14218'. [ 662.272219][ T2810] dlm: non-version read from control device 36 [ 662.292163][ T2814] openvswitch: netlink: Actions may not be safe on all matching packets [ 662.364835][T18391] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 662.373207][ T2819] Timeout policy `syz0' can only be used by L3 protocol number 8939 [ 662.474376][ T2828] CIFS: bad ip= option (%‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð) [ 662.578604][ T2837] delete_channel: no stack [ 662.775205][T18391] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 662.800423][T18391] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 662.831556][T18391] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 662.869930][T18391] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 662.880831][T18391] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.903249][T18391] usb 4-1: config 0 descriptor?? [ 663.134973][T21880] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 663.167457][T16129] usb 4-1: USB disconnect, device number 57 [ 663.430120][ T2893] loop6: detected capacity change from 0 to 512 [ 663.449737][ T2893] EXT4-fs (loop6): Ignoring removed nobh option [ 663.461915][ T2893] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 663.497651][ T2893] EXT4-fs (loop6): 1 truncate cleaned up [ 663.503420][ T2893] EXT4-fs (loop6): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,nogrpid,debug_want_extra_isize=0x0000000000000068,init_itable,nobh,quota,,errors=continue. Quota mode: writeback. [ 663.511936][T21880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 663.555416][T21880] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 663.566505][T21880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 663.577429][T21880] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 663.639335][ T2907] netlink: 40 bytes leftover after parsing attributes in process `syz.6.14263'. [ 663.652852][ T2907] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 663.688358][T18391] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 663.745013][T21880] usb 5-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 663.754358][T21880] usb 5-1: New USB device strings: Mfr=28, Product=2, SerialNumber=3 [ 663.814194][T21880] usb 5-1: Product: syz [ 663.818584][T21880] usb 5-1: Manufacturer: syz [ 663.823216][T21880] usb 5-1: SerialNumber: syz [ 663.855672][T21880] usb 5-1: config 0 descriptor?? [ 663.860849][ T4230] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 663.904406][ T2918] loop3: detected capacity change from 0 to 4096 [ 663.912091][T21880] kvaser_usb 5-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 663.935867][ T2918] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 663.945111][T18391] usb 2-1: Using ep0 maxpacket: 16 [ 663.950375][T21880] kvaser_usb 5-1:0.0: Failed to initialize card, error -90 [ 663.958620][T21880] kvaser_usb: probe of 5-1:0.0 failed with error -90 [ 664.087169][T18391] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 664.098594][T18391] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 664.110360][T18391] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.122466][T18391] usb 2-1: config 0 descriptor?? [ 664.132895][ T23] usb 5-1: USB disconnect, device number 59 [ 664.158510][ T4230] usb 1-1: Using ep0 maxpacket: 16 [ 664.182371][T18391] usbhid 2-1:0.0: fixing wrong optional hid class descriptors count [ 664.323744][ T2942] netlink: 'syz.6.14277': attribute type 2 has an invalid length. [ 664.334118][ T2942] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 664.384012][ T2947] loop6: detected capacity change from 0 to 512 [ 664.438003][ T2947] EXT4-fs (loop6): 1 truncate cleaned up [ 664.447570][ T2947] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsdgroups,grpquota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,noauto_da_alloc,discard,grpjquota=,errors=remount-ro,nobarrier,. Quota mode: writeback. [ 664.495279][T18391] usbhid 2-1:0.0: can't add hid device: -71 [ 664.501349][T18391] usbhid: probe of 2-1:0.0 failed with error -71 [ 664.517459][T18391] usb 2-1: USB disconnect, device number 60 [ 664.538137][ T4230] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 664.551041][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.560313][ T4230] usb 1-1: Product: syz [ 664.564514][ T4230] usb 1-1: Manufacturer: syz [ 664.570458][ T4230] usb 1-1: SerialNumber: syz [ 664.577718][T11216] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 664.598959][ T4230] usb 1-1: config 0 descriptor?? [ 664.856351][ T4230] speedtch 1-1:0.0: speedtch_bind: data interface not found! [ 664.863810][ T4230] speedtch 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 664.904943][ T4311] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 665.067020][T21880] usb 1-1: USB disconnect, device number 59 [ 665.175006][T11216] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 665.184116][T11216] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.204582][T11216] usb 4-1: Product: syz [ 665.208807][T11216] usb 4-1: Manufacturer: syz [ 665.213451][T11216] usb 4-1: SerialNumber: syz [ 665.297742][ T4311] usb 7-1: config 0 has an invalid descriptor of length 141, skipping remainder of the config [ 665.309827][ T7810] kworker/dying (7810) used greatest stack depth: 15480 bytes left [ 665.319149][ T4311] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x77, skipping [ 665.344699][ T4311] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 61941, setting to 64 [ 665.364579][ T4311] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 665.484930][ T4311] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 665.494107][ T4311] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 665.521033][ T4311] usb 7-1: Manufacturer: syz [ 665.536149][ T4311] usb 7-1: config 0 descriptor?? [ 665.745202][T11216] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 665.794717][T11216] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -71 [ 665.825682][ T4311] usb 7-1: USB disconnect, device number 20 [ 665.848282][T11216] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 665.864373][T11216] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 665.907170][T11216] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 665.936536][T11216] lan78xx: probe of 4-1:1.0 failed with error -71 [ 665.960564][T11216] usb 4-1: USB disconnect, device number 58 [ 666.098787][ T2999] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14301'. [ 666.310218][ T3016] x_tables: unsorted entry at hook 3 [ 666.581892][ T3025] loop6: detected capacity change from 0 to 4096 [ 666.734757][ T3025] ntfs: (device loop6): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 666.771128][ T3030] syz.3.14315 (3030): drop_caches: 2 [ 666.801992][ T3025] ntfs: volume version 3.1. [ 666.829359][ T3025] ntfs: (device loop6): ntfs_mark_quotas_out_of_date(): Quota defaults entry version 0x5 is not supported. [ 666.862602][ T3025] ntfs: (device loop6): load_system_files(): Failed to mark quotas out of date. Mounting read-only. Run chkdsk. [ 666.938650][ T3025] ntfs: (device loop6): ntfs_remount(): Volume has errors and is read-only. Cannot remount read-write. [ 667.125416][T16129] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 667.133189][T21880] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 667.344447][ T3076] loop6: detected capacity change from 0 to 256 [ 667.384709][T21880] usb 1-1: Using ep0 maxpacket: 16 [ 667.429456][ T3076] FAT-fs (loop6): Directory bread(block 64) failed [ 667.448991][ T3076] FAT-fs (loop6): Directory bread(block 65) failed [ 667.459900][ T3076] FAT-fs (loop6): Directory bread(block 66) failed [ 667.467894][ T3076] FAT-fs (loop6): Directory bread(block 67) failed [ 667.467913][ T3082] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 667.482962][ T3076] FAT-fs (loop6): Directory bread(block 68) failed [ 667.492324][ T3076] FAT-fs (loop6): Directory bread(block 69) failed [ 667.501721][ T3076] FAT-fs (loop6): Directory bread(block 70) failed [ 667.510288][T21880] usb 1-1: config 0 has an invalid interface number: 180 but max is 0 [ 667.518773][T16129] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 667.528102][ T3076] FAT-fs (loop6): Directory bread(block 71) failed [ 667.535702][T21880] usb 1-1: config 0 has no interface number 0 [ 667.541920][T16129] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 667.552685][ T3076] FAT-fs (loop6): Directory bread(block 72) failed [ 667.559627][T16129] usb 2-1: config 220 has no interface number 2 [ 667.566354][ T3076] FAT-fs (loop6): Directory bread(block 73) failed [ 667.573008][T16129] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 667.595486][T16129] usb 2-1: config 220 interface 0 has no altsetting 0 [ 667.613749][T16129] usb 2-1: config 220 interface 76 has no altsetting 0 [ 667.628699][T16129] usb 2-1: config 220 interface 1 has no altsetting 0 [ 667.728475][T21880] usb 1-1: New USB device found, idVendor=0421, idProduct=0114, bcdDevice=11.72 [ 667.741509][T21880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.774934][T21880] usb 1-1: Product: syz [ 667.805365][T21880] usb 1-1: Manufacturer: syz [ 667.810114][T21880] usb 1-1: SerialNumber: syz [ 667.815347][T16129] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 667.826001][T16129] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.835075][T21880] usb 1-1: config 0 descriptor?? [ 667.842075][T16129] usb 2-1: Product: syz [ 667.846893][T16129] usb 2-1: Manufacturer: syz [ 667.852501][T16129] usb 2-1: SerialNumber: syz [ 667.885291][T21880] usb 1-1: bad CDC descriptors [ 667.891568][T21880] usb 1-1: bad CDC descriptors [ 668.118955][T21880] usb 1-1: USB disconnect, device number 60 [ 668.209249][ T3080] orangefs_mount: mount request failed with -4 [ 668.225015][T16129] usb 2-1: selecting invalid altsetting 0 [ 668.245482][T16129] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 668.262265][T16129] usb 2-1: No valid video chain found. [ 668.378140][ T3123] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14361'. [ 668.387856][T16129] usb 2-1: selecting invalid altsetting 0 [ 668.403932][T16129] usbtest: probe of 2-1:220.1 failed with error -22 [ 668.423942][T16129] usb 2-1: USB disconnect, device number 61 [ 668.551909][ T3131] loop6: detected capacity change from 0 to 512 [ 668.583001][ T3134] lo speed is unknown, defaulting to 1000 [ 668.706511][ T3131] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 668.723171][ T3144] netlink: 'syz.0.14370': attribute type 29 has an invalid length. [ 668.774871][ T3144] netlink: 'syz.0.14370': attribute type 3 has an invalid length. [ 668.782772][ T3144] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14370'. [ 668.940782][ T3158] i2c i2c-0: Invalid block write size 150 [ 668.958249][ C0] vkms_vblank_simulate: vblank timer overrun [ 669.123488][ T3171] netlink: 16 bytes leftover after parsing attributes in process `syz.6.14379'. [ 669.230866][ T3180] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 669.406678][ T3192] loop1: detected capacity change from 0 to 256 [ 669.453794][ T3179] loop3: detected capacity change from 0 to 8192 [ 669.486834][ T3196] netlink: 'syz.6.14396': attribute type 3 has an invalid length. [ 669.538676][ T3179] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 669.558619][ T3179] REISERFS (device loop3): using ordered data mode [ 669.574648][ T3179] reiserfs: using flush barriers [ 669.586793][ T3192] FAT-fs (loop1): Directory bread(block 64) failed [ 669.593643][ T3179] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 669.617770][ T3196] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 669.665081][ T3192] FAT-fs (loop1): Directory bread(block 65) failed [ 669.674258][ T3192] FAT-fs (loop1): Directory bread(block 66) failed [ 669.701360][ T3179] REISERFS (device loop3): checking transaction log (loop3) [ 669.704998][ T3192] FAT-fs (loop1): Directory bread(block 67) failed [ 669.735305][ T3192] FAT-fs (loop1): Directory bread(block 68) failed [ 669.749577][ T3179] REISERFS (device loop3): Using r5 hash to sort names [ 669.757806][ T3192] FAT-fs (loop1): Directory bread(block 69) failed [ 669.768324][ T3179] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 669.775843][ T3192] FAT-fs (loop1): Directory bread(block 70) failed [ 669.824667][ T3192] FAT-fs (loop1): Directory bread(block 71) failed [ 669.834448][ T3179] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 669.856415][ T3192] FAT-fs (loop1): Directory bread(block 72) failed [ 669.883748][ T3192] FAT-fs (loop1): Directory bread(block 73) failed [ 669.892848][ T3211] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14402'. [ 669.974771][ T3211] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 670.068826][ T26] audit: type=1800 audit(670.022:58): pid=3192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.14394" name="file1" dev="loop1" ino=1048702 res=0 errno=0 [ 670.212596][ T3224] netlink: 'syz.0.14410': attribute type 1 has an invalid length. [ 670.928244][ T3282] netlink: 32 bytes leftover after parsing attributes in process `syz.4.14437'. [ 671.755020][T11216] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 671.877146][ T3337] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 672.165012][T11216] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 672.195415][T11216] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 672.233912][T11216] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 672.264614][T11216] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 672.274438][T11216] usb 7-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 672.311737][ T3371] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14480'. [ 672.314062][T11216] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.346498][T11216] usb 7-1: config 0 descriptor?? [ 672.356971][ T3371] netlink: 60 bytes leftover after parsing attributes in process `syz.3.14480'. [ 672.427167][ T3380] cgroup: No subsys list or none specified [ 672.615111][T11216] hdpvr 7-1:0.0: firmware version 0x12 dated ¾ [ 672.617960][ T3391] loop3: detected capacity change from 0 to 8192 [ 672.644934][ T4230] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 672.652758][T18391] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 672.839076][T11216] hdpvr 7-1:0.0: device init failed [ 672.844393][T11216] hdpvr: probe of 7-1:0.0 failed with error -12 [ 672.877049][T11216] usb 7-1: USB disconnect, device number 21 [ 672.963432][ T3414] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 672.980248][ T3414] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 673.075267][T18391] usb 5-1: config 251 has an invalid interface number: 33 but max is 0 [ 673.083855][ T4230] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 673.104682][T18391] usb 5-1: config 251 has no interface number 0 [ 673.121326][ T4230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 673.144767][T18391] usb 5-1: config 251 interface 33 altsetting 4 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 673.169451][ T4230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 673.184935][T18391] usb 5-1: config 251 interface 33 has no altsetting 0 [ 673.202047][ T4230] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 673.224629][ T4230] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 673.240677][ T4230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.258691][ T4230] usb 2-1: config 0 descriptor?? [ 673.415013][T18391] usb 5-1: New USB device found, idVendor=0424, idProduct=9e01, bcdDevice=94.85 [ 673.428942][T18391] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.437532][T18391] usb 5-1: Product: syz [ 673.441824][T18391] usb 5-1: Manufacturer: syz [ 673.447135][T18391] usb 5-1: SerialNumber: syz [ 673.475068][ T3366] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 673.500469][ T3436] loop6: detected capacity change from 0 to 4096 [ 673.511426][ T4230] usb 2-1: USB disconnect, device number 62 [ 673.545059][ T3436] ntfs3: loop6: Different NTFS' sector size (1024) and media sector size (512) [ 673.623226][ T3441] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14514'. [ 673.638721][ T3441] netlink: 52 bytes leftover after parsing attributes in process `syz.3.14514'. [ 673.791826][T18391] smsc95xx v2.0.0 [ 673.800112][T18391] smsc95xx 5-1:251.33 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 673.830982][T18391] smsc95xx: probe of 5-1:251.33 failed with error -22 [ 673.857711][T18391] usb 5-1: USB disconnect, device number 60 [ 674.138818][ T3475] xt_TPROXY: Can be used only with -p tcp or -p udp [ 674.519414][ T3511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14543'. [ 674.735576][ T3526] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (8) [ 674.750845][ T3527] netlink: 'syz.1.14550': attribute type 1 has an invalid length. [ 674.777744][ T3529] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14549'. [ 674.791419][ T3527] netlink: 224 bytes leftover after parsing attributes in process `syz.1.14550'. [ 675.129357][ T3562] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.14563'. [ 675.174968][ T3562] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 675.287373][ T3576] xt_hashlimit: size too large, truncated to 1048576 [ 675.294447][ T3576] xt_hashlimit: overflow, try lower: 9223372036854775807/9 [ 676.096275][ T3635] SET target dimension over the limit! [ 676.416231][ T3588] loop6: detected capacity change from 0 to 40427 [ 676.484848][T18391] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 676.498116][ T3588] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 676.517588][ T3588] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 676.569404][ T3588] F2FS-fs (loop6): invalid crc value [ 676.618447][ T3588] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 676.748405][T18391] usb 5-1: Using ep0 maxpacket: 32 [ 676.794928][ T3588] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 676.804292][ T3588] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 676.875061][T18391] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 676.883128][T18391] usb 5-1: config 0 has no interface number 0 [ 677.097874][T18391] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 677.107904][T18391] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.115990][T18391] usb 5-1: Product: syz [ 677.120186][T18391] usb 5-1: Manufacturer: syz [ 677.124825][T18391] usb 5-1: SerialNumber: syz [ 677.131350][T18391] usb 5-1: config 0 descriptor?? [ 677.176394][T18391] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 677.199580][T18391] usb 5-1: selecting invalid altsetting 1 [ 677.209686][T18391] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 677.226875][T18391] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 677.257959][T18391] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 677.275184][T18391] usb 5-1: media controller created [ 677.304634][ T4230] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 677.316676][ T3704] netlink: 'syz.0.14632': attribute type 10 has an invalid length. [ 677.329478][T18391] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 677.368453][ T3704] team0: Port device bridge0 added [ 677.434686][T18391] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 677.451274][T18391] zl10353_read_register: readreg error (reg=127, ret==-71) [ 677.496002][T18391] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 677.509279][ T3712] netlink: 'syz.0.14634': attribute type 11 has an invalid length. [ 677.593063][T18391] usb 5-1: USB disconnect, device number 61 [ 677.599274][ T4230] usb 2-1: Using ep0 maxpacket: 16 [ 677.672256][ T3722] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 677.744223][ T4230] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 677.763568][ T4230] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 677.782108][ T4230] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 677.797717][ T3718] loop6: detected capacity change from 0 to 8192 [ 677.822697][ T4230] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 677.842474][ T4230] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 677.861135][ T4230] usb 2-1: config 1 interface 0 has no altsetting 0 [ 677.870662][ T4230] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 677.890994][ T4230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.907725][ T3718] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 677.919431][ T3718] REISERFS (device loop6): using ordered data mode [ 677.930933][ T3718] reiserfs: using flush barriers [ 677.974676][ T3718] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 678.005109][ T3718] REISERFS (device loop6): checking transaction log (loop6) [ 678.038941][ T4230] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 678.054018][ T3718] REISERFS (device loop6): Using r5 hash to sort names [ 678.063058][ T3718] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 678.246116][ T4230] scsi host1: usb-storage 2-1:1.0 [ 678.480860][T16129] usb 2-1: USB disconnect, device number 63 [ 678.823657][ T3782] netlink: 16 bytes leftover after parsing attributes in process `syz.6.14666'. [ 679.691234][ T3829] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.698755][ T3829] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.174353][ T3829] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 680.496929][ T3829] rdma_rxe: ignoring netdev event = 30 for ipvlan0 [ 680.629422][ T3829] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.639031][ T3829] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.648206][ T3829] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.657230][ T3829] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.790054][ T3829] netdevsim netdevsim6 netdevsim0: unset [1, 1] type 2 family 0 port 19971 - 0 [ 680.799941][ T3829] netdevsim netdevsim6 netdevsim1: unset [1, 1] type 2 family 0 port 19971 - 0 [ 680.809594][ T3829] netdevsim netdevsim6 netdevsim2: unset [1, 1] type 2 family 0 port 19971 - 0 [ 680.819315][ T3829] netdevsim netdevsim6 netdevsim3: unset [1, 1] type 2 family 0 port 19971 - 0 [ 680.900523][ T3840] netlink: 'syz.3.14693': attribute type 12 has an invalid length. [ 680.918921][ T3840] netlink: 'syz.3.14693': attribute type 12 has an invalid length. [ 680.948190][ T3840] netlink: 'syz.3.14693': attribute type 12 has an invalid length. [ 680.972637][ T3845] netlink: 'syz.6.14694': attribute type 30 has an invalid length. [ 681.382340][ T3882] netlink: 100 bytes leftover after parsing attributes in process `syz.0.14711'. [ 681.418224][ T3885] ieee802154 phy0 wpan0: encryption failed: -22 [ 681.620089][ T3897] x_tables: duplicate entry at hook 2 [ 681.649494][ T3902] netlink: 'syz.1.14721': attribute type 1 has an invalid length. [ 681.699468][ T3902] netlink: 224 bytes leftover after parsing attributes in process `syz.1.14721'. [ 682.489743][ T3970] netlink: 'syz.4.14752': attribute type 3 has an invalid length. [ 682.517180][ T3970] netlink: 132 bytes leftover after parsing attributes in process `syz.4.14752'. [ 682.760075][ T3989] loop6: detected capacity change from 0 to 16 [ 682.830069][ T3989] erofs: (device loop6): mounted with root inode @ nid 36. [ 683.571583][ T4052] loop3: detected capacity change from 0 to 4096 [ 683.619257][ T4052] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 683.952450][ T4082] usb usb8: usbfs: process 4082 (syz.0.14802) did not claim interface 0 before use [ 684.118937][ T4095] affs: No valid root block on device nbd4 [ 684.639181][ T4132] loop3: detected capacity change from 0 to 256 [ 684.691969][ T4136] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14831'. [ 684.738551][ T4132] FAT-fs (loop3): Directory bread(block 64) failed [ 684.757718][ T4132] FAT-fs (loop3): Directory bread(block 65) failed [ 684.764381][ T4132] FAT-fs (loop3): Directory bread(block 66) failed [ 684.817754][ T4132] FAT-fs (loop3): Directory bread(block 67) failed [ 684.837135][ T4132] FAT-fs (loop3): Directory bread(block 68) failed [ 684.844195][ T4132] FAT-fs (loop3): Directory bread(block 69) failed [ 684.873156][ T4132] FAT-fs (loop3): Directory bread(block 70) failed [ 684.890816][ T4132] FAT-fs (loop3): Directory bread(block 71) failed [ 684.907813][ T4132] FAT-fs (loop3): Directory bread(block 72) failed [ 684.942289][ T4132] FAT-fs (loop3): Directory bread(block 73) failed [ 685.177315][ T4163] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 685.332844][ T4176] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14846'. [ 685.403677][ T4188] netlink: 132 bytes leftover after parsing attributes in process `syz.4.14848'. [ 685.527801][ T4204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14854'. [ 685.664774][T16129] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 685.767830][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.774231][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.816398][T11216] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 685.912887][ T4247] MTD: Couldn't look up '': -22 [ 686.038342][ T4256] device vti1 entered promiscuous mode [ 686.044922][T16129] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 686.073743][ T4258] netlink: 72 bytes leftover after parsing attributes in process `syz.4.14872'. [ 686.100291][T11216] usb 1-1: Using ep0 maxpacket: 32 [ 686.245615][T16129] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 686.261896][T11216] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 686.265446][T16129] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.282131][T11216] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 686.302951][T11216] usb 1-1: config 0 has no interface number 0 [ 686.314765][T11216] usb 1-1: config 0 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 686.328254][T16129] usb 4-1: Product: syz [ 686.332469][T16129] usb 4-1: Manufacturer: syz [ 686.346063][T16129] usb 4-1: SerialNumber: syz [ 686.374884][T11216] usb 1-1: config 0 interface 1 has no altsetting 0 [ 686.378227][T16129] usb 4-1: config 0 descriptor?? [ 686.424989][ T4191] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 686.432265][ T4191] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 686.482632][ T4284] netlink: 'syz.1.14883': attribute type 3 has an invalid length. [ 686.495320][T16129] port100 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 686.511441][ T4285] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14884'. [ 686.523505][ T4284] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14883'. [ 686.598698][T11216] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 686.618813][T11216] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.646106][T11216] usb 1-1: Product: syz [ 686.650342][T11216] usb 1-1: Manufacturer: syz [ 686.671886][T11216] usb 1-1: SerialNumber: syz [ 686.687324][T11216] usb 1-1: config 0 descriptor?? [ 686.733650][T16129] usb 4-1: USB disconnect, device number 59 [ 686.747204][T11216] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 686.784798][T11216] cx231xx 1-1:0.1: Not found matching IAD interface [ 686.892479][ T4306] openvswitch: netlink: Actions may not be safe on all matching packets [ 686.975168][T11216] usb 1-1: USB disconnect, device number 61 [ 687.319898][ T4335] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 687.372122][ T4340] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 687.516394][ T4350] netlink: 'syz.1.14914': attribute type 4 has an invalid length. [ 688.019931][ T4386] loop3: detected capacity change from 0 to 2048 [ 688.129120][ T4386] loop3: p1 p2 < > p3 < p5 > p4 [ 688.143577][ T4386] loop3: partition table partially beyond EOD, truncated [ 688.181642][ T4386] loop3: p1 size 917504 extends beyond EOD, truncated [ 688.208170][ T4386] loop3: p2 start 4278190080 is beyond EOD, truncated [ 688.229509][ T4386] loop3: p4 start 150994949 is beyond EOD, truncated [ 688.249427][ T4386] loop3: p5 size 917504 extends beyond EOD, truncated [ 688.294262][ T4409] netlink: 'syz.0.14943': attribute type 6 has an invalid length. [ 688.316846][ T4413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14945'. [ 688.368682][ T4413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14945'. [ 688.384404][ T3560] loop3: p1 p2 < > p3 < p5 > p4 [ 688.397504][ T3560] loop3: partition table partially beyond EOD, truncated [ 688.434895][ T3560] loop3: p1 size 917504 extends beyond EOD, truncated [ 688.444514][ T4421] loop4: detected capacity change from 0 to 16 [ 688.454984][ T3560] loop3: p2 start 4278190080 is beyond EOD, truncated [ 688.474298][ T3560] loop3: p4 start 150994949 is beyond EOD, truncated [ 688.488100][ T3560] loop3: p5 size 917504 extends beyond EOD, truncated [ 688.496107][ T4421] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 688.695996][ T4436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14957'. [ 688.781955][ T8034] udevd[8034]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 688.799005][ T4390] udevd[4390]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 688.815860][ T4709] udevd[4709]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 689.204959][ T4481] binfmt_misc: register: failed to install interpreter file ./file1 [ 689.332415][ T4489] sock: sock_timestamping_bind_phc: sock not bind to device [ 689.629021][ T8034] udevd[8034]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 689.665048][ T4709] udevd[4709]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 689.707759][ T8034] udevd[8034]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 689.746952][ T4511] netlink: 'syz.0.14993': attribute type 12 has an invalid length. [ 690.039341][ T4525] __nla_validate_parse: 1 callbacks suppressed [ 690.039359][ T4525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15001'. [ 690.059720][ T4483] loop3: detected capacity change from 0 to 32768 [ 690.188972][ T4483] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 scanned by syz.3.14980 (4483) [ 690.289313][ T4483] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 690.340772][ T4483] BTRFS info (device loop3): enabling ssd optimizations [ 690.377088][ T4483] BTRFS info (device loop3): not using ssd optimizations [ 690.384187][ T4483] BTRFS info (device loop3): turning off barriers [ 690.399973][ T4545] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 690.407310][ T4545] IPv6: NLM_F_CREATE should be set when creating new route [ 690.414601][ T4545] IPv6: NLM_F_CREATE should be set when creating new route [ 690.416135][ T4483] BTRFS info (device loop3): using free space tree [ 690.467713][ T4483] BTRFS info (device loop3): has skinny extents [ 690.498715][ T4547] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 691.155019][ T4594] loop1: detected capacity change from 0 to 4096 [ 691.733886][ T4616] netlink: 'syz.4.15038': attribute type 1 has an invalid length. [ 691.768536][ T4616] netlink: 224 bytes leftover after parsing attributes in process `syz.4.15038'. [ 692.139647][ T4639] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 692.293605][ T4645] loop6: detected capacity change from 0 to 1024 [ 692.399947][ T4645] hfsplus: invalid xattr key length: 0 [ 692.459944][ T4652] netlink: 'syz.0.15056': attribute type 1 has an invalid length. [ 692.485176][ T4652] netlink: 'syz.0.15056': attribute type 2 has an invalid length. [ 692.493207][ T4652] netlink: 'syz.0.15056': attribute type 1 has an invalid length. [ 692.929960][ T4686] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15072'. [ 692.929997][ T4686] openvswitch: netlink: Actions may not be safe on all matching packets [ 692.984888][ T4690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15073'. [ 692.984943][ T4690] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15073'. [ 692.984999][ T4690] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15073'. [ 693.277735][ T4708] device netdevsim0 left promiscuous mode [ 693.277861][ T4708] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 693.324384][ T4710] nvme_fabrics: unknown parameter or missing value 'Y' in ctrl creation request [ 693.344848][ T4712] netdevsim netdevsim3: Firmware load for './file0/file0/..' refused, path contains '..' component [ 693.748279][ T4739] device wlan0 entered promiscuous mode [ 693.871075][ T4748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15102'. [ 693.919299][ T4748] netlink: 6 bytes leftover after parsing attributes in process `syz.1.15102'. [ 694.390525][ T4787] loop3: detected capacity change from 0 to 512 [ 694.493640][ T4787] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,sysvgroups,,errors=continue. Quota mode: writeback. [ 694.643679][ T4787] Quota error (device loop3): find_block_dqentry: Quota for id 0 referenced but not present [ 694.714737][ T4787] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 694.748700][ T4787] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.15120: Failed to acquire dquot type 1 [ 694.986573][ T4826] xt_CT: You must specify a L4 protocol and not use inversions on it [ 695.059951][ T4830] netlink: 'syz.3.15141': attribute type 49 has an invalid length. [ 695.168172][ T4834] loop1: detected capacity change from 0 to 22 [ 695.218326][ T4777] loop4: detected capacity change from 0 to 32768 [ 695.245297][ T4834] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 695.253276][ T4837] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15145'. [ 695.287250][ T4834] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 695.332397][ T4841] tmpfs: Bad value for 'mpol' [ 695.342954][ T4842] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.15147'. [ 695.378181][ T4777] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.15116 (4777) [ 695.459104][ T4777] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 695.481900][ T4777] BTRFS info (device loop4): using free space tree [ 695.502027][ T4777] BTRFS info (device loop4): has skinny extents [ 695.549757][ T4852] loop6: detected capacity change from 0 to 128 [ 695.665343][ T4852] Bad inode number on dev loop6: 32769 is out of range [ 695.773403][ T4777] BTRFS info (device loop4): enabling ssd optimizations [ 695.976319][ T4896] PM: Enabling pm_trace changes system date and time during resume. [ 695.976319][ T4896] PM: Correct system time has to be restored manually after resume. [ 696.317883][ T4909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15171'. [ 696.328586][ T8034] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop4 scanned by udevd (8034) [ 696.582342][ T4919] loop3: detected capacity change from 0 to 1024 [ 696.768639][ T4919] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,bsddf,quota,noauto_da_alloc,debug_want_extra_isize=0x0000000000000080,nodelalloc,noauto_da_alloc,stripe=0x0000000000000005,barrier,,errors=continue. Quota mode: writeback. [ 697.169428][ T4939] i2c i2c-0: Invalid block write size 253 [ 697.397828][ T4951] Unknown options in mask b7f2 [ 697.759646][ T4925] loop1: detected capacity change from 0 to 32768 [ 698.403720][ T5004] user_cmd nlpid 6028 [ 698.475502][ T4994] loop4: detected capacity change from 0 to 4096 [ 698.553684][ T5012] ipt_CLUSTERIP: bad num_local_nodes 18 [ 698.562250][ T4994] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 698.620076][ T4994] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 698.668939][ T4994] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 698.683399][ T4994] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 698.712007][ T4994] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 698.803503][ T4994] ntfs: volume version 3.1. [ 698.819108][ T4994] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 698.865476][ T4994] ntfs: (device loop4): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 698.913445][ T5030] loop3: detected capacity change from 0 to 1024 [ 698.929323][ T4994] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 698.998069][ T5030] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 699.059613][ T5030] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #3: block 2: comm syz.3.15222: lblock 2 mapped to illegal pblock 2 (length 1) [ 699.151733][ T5030] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #3: block 48: comm syz.3.15222: lblock 0 mapped to illegal pblock 48 (length 1) [ 699.201528][ T5045] netlink: 204 bytes leftover after parsing attributes in process `syz.0.15227'. [ 699.264798][ T5030] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.15222: Failed to acquire dquot type 0 [ 699.287774][ T5030] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 699.337591][ T5030] EXT4-fs error (device loop3): ext4_evict_inode:282: inode #11: comm syz.3.15222: mark_inode_dirty error [ 699.378233][ T5030] EXT4-fs warning (device loop3): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 699.412957][ T5030] EXT4-fs (loop3): 1 orphan inode deleted [ 699.425582][ T4302] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 699.433239][ T5030] EXT4-fs (loop3): mounted filesystem without journal. Opts: nomblk_io_submit,noblock_validity,delalloc,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 699.504918][ T4302] EXT4-fs error (device loop3): ext4_release_dquot:6270: comm kworker/u4:6: Failed to release dquot type 0 [ 699.564719][ T4246] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 699.615998][ T4246] EXT4-fs error (device loop3): ext4_release_dquot:6270: comm kworker/u4:5: Failed to release dquot type 0 [ 699.679854][ T4184] EXT4-fs error (device loop3): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 699.680154][ T4184] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 699.680321][ T4184] EXT4-fs error (device loop3): ext4_quota_off:6540: inode #3: comm syz-executor: mark_inode_dirty error [ 699.852118][ T5079] ipt_CLUSTERIP: no config found for 127.0.0.1, need 'new' [ 700.010736][ T5087] bridge_slave_0: mtu greater than device maximum [ 700.099731][ T5093] netlink: 1076 bytes leftover after parsing attributes in process `syz.1.15252'. [ 700.194819][ T5101] loop3: detected capacity change from 0 to 256 [ 700.275379][ T5109] netlink: 'syz.6.15260': attribute type 1 has an invalid length. [ 700.284103][ T5109] netlink: 228 bytes leftover after parsing attributes in process `syz.6.15260'. [ 700.488155][ T5119] netlink: 'syz.4.15265': attribute type 21 has an invalid length. [ 700.527873][ T5119] netlink: 132 bytes leftover after parsing attributes in process `syz.4.15265'. [ 700.542414][ T5126] loop6: detected capacity change from 0 to 64 [ 700.555015][ T5119] netlink: 20 bytes leftover after parsing attributes in process `syz.4.15265'. [ 700.607064][ T5128] netlink: 68 bytes leftover after parsing attributes in process `syz.3.15269'. [ 700.641357][ T5126] hfs: unable to locate alternate MDB [ 700.669509][ T5126] hfs: continuing without an alternate MDB [ 701.071660][ T5148] xt_CT: No such helper "syz0" [ 701.556955][ T5203] device netdevsim0 entered promiscuous mode [ 701.573470][ T5203] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 701.634761][ T5475] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 701.674692][ T7820] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 701.691873][ T5209] netlink: 'syz.0.15305': attribute type 3 has an invalid length. [ 701.884803][ T5475] usb 4-1: Using ep0 maxpacket: 32 [ 701.914811][ T7820] usb 2-1: Using ep0 maxpacket: 32 [ 702.005216][ T5475] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 702.024218][ T5475] usb 4-1: config 0 has no interface number 0 [ 702.034372][ T5475] usb 4-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 702.045657][ T7820] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 702.074844][ T5475] usb 4-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0xE3, skipping [ 702.104895][ T5475] usb 4-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 702.128235][ T5232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15316'. [ 702.224965][ T7820] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 702.244441][ T7820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.264866][ T7820] usb 2-1: Product: syz [ 702.269095][ T7820] usb 2-1: Manufacturer: syz [ 702.283982][ T7820] usb 2-1: SerialNumber: syz [ 702.294815][ T5475] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 702.318603][ T7820] usb 2-1: config 0 descriptor?? [ 702.324411][ T5475] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.353327][ T5475] usb 4-1: Product: syz [ 702.358993][ T7820] usb 2-1: bad CDC descriptors [ 702.364381][ T7820] usb 2-1: unsupported MDLM descriptors [ 702.370538][ T5475] usb 4-1: Manufacturer: syz [ 702.380567][ T5475] usb 4-1: SerialNumber: syz [ 702.400433][ T5475] usb 4-1: config 0 descriptor?? [ 702.458314][ T5475] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.119/input/input46 [ 702.595786][ T5475] usb 2-1: USB disconnect, device number 64 [ 702.715607][ T7820] usb 4-1: USB disconnect, device number 60 [ 702.816989][ T5268] netlink: 20 bytes leftover after parsing attributes in process `syz.4.15334'. [ 702.862839][ T5268] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15334'. [ 703.021335][ T5283] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15342'. [ 703.404727][ T5307] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15352'. [ 703.729999][ T5337] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 703.944915][ T5475] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 704.200542][ T5371] netlink: 'syz.6.15385': attribute type 1 has an invalid length. [ 704.254901][ T4930] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 704.306007][ T5475] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 704.317528][ T5377] netlink: 'syz.1.15388': attribute type 1 has an invalid length. [ 704.335977][ T5377] netlink: 228 bytes leftover after parsing attributes in process `syz.1.15388'. [ 704.348719][ T5475] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 704.374748][ T5475] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 704.397349][ T5475] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.456038][ T5475] hub 1-1:4.0: USB hub found [ 704.538221][ T5385] loop6: detected capacity change from 0 to 4096 [ 704.626539][ T5385] __ntfs_error: 10 callbacks suppressed [ 704.626557][ T5385] ntfs: (device loop6): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 704.647201][ T4930] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 704.674930][ T5475] hub 1-1:4.0: 4 ports detected [ 704.682405][ T4930] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 704.686808][ T5475] usb 1-1: selecting invalid altsetting 1 [ 704.721754][ T5475] hub 1-1:4.0: Using single TT (err -22) [ 704.768502][ T5475] hub 1-1:4.0: insufficient power available to use all downstream ports [ 704.794939][ T5385] ntfs: volume version 3.1. [ 704.835131][ T4930] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 704.844234][ T4930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 704.867034][ T5385] ntfs: (device loop6): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 704.893878][ T4930] usb 5-1: SerialNumber: syz [ 704.904824][ T5475] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 704.915518][ T5475] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 704.955125][ T5385] ntfs: (device loop6): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 704.975301][ C0] vkms_vblank_simulate: vblank timer overrun [ 704.983411][ T5475] usb 1-1: USB disconnect, device number 62 [ 704.988577][ T4930] cdc_ether 5-1:1.0: skipping garbage [ 705.034805][ T5385] ntfs: (device loop6): ntfs_cluster_alloc(): Failed to map page. [ 705.034858][ T4930] usb 5-1: bad CDC descriptors [ 705.064658][ T5385] ntfs: (device loop6): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -5). [ 705.096731][ T5385] ntfs: (device loop6): ntfs_truncate(): Cannot truncate inode 0x43, attribute type 0x80, because the conversion from resident to non-resident attribute failed with error code -5. [ 705.208147][ T7820] usb 5-1: USB disconnect, device number 62 [ 705.233236][T24947] ntfs: (device loop6): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 705.262344][ T5417] xt_CT: You must specify a L4 protocol and not use inversions on it [ 705.418139][ T5425] __nla_validate_parse: 1 callbacks suppressed [ 705.418159][ T5425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15411'. [ 705.606405][ T5436] netlink: 20 bytes leftover after parsing attributes in process `syz.6.15416'. [ 705.730847][ T5447] dlm: no local IP address has been set [ 705.747623][ T5447] dlm: cannot start dlm midcomms -107 [ 705.873612][ T5457] netlink: 'syz.4.15426': attribute type 1 has an invalid length. [ 705.906034][ T5457] netlink: 'syz.4.15426': attribute type 3 has an invalid length. [ 705.940315][ T5457] netlink: 224 bytes leftover after parsing attributes in process `syz.4.15426'. [ 705.982751][ T5457] NCSI netlink: No device for ifindex 2986344450 [ 705.992399][ T5466] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15430'. [ 706.336930][ T5484] nvme_fabrics: missing parameter 'transport=%s' [ 706.344400][ T5484] nvme_fabrics: missing parameter 'nqn=%s' [ 706.529624][ T5505] loop3: detected capacity change from 0 to 256 [ 706.616490][ T5505] exfat: Deprecated parameter 'utf8' [ 706.623166][ T5505] exfat: Deprecated parameter 'namecase' [ 706.645791][ T5505] exfat: Deprecated parameter 'namecase' [ 706.677976][ T5505] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 706.716941][ T5514] xt_l2tp: missing protocol rule (udp|l2tpip) [ 706.747757][ T26] audit: type=1800 audit(706.764:59): pid=5505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.15448" name="file1" dev="loop3" ino=1048708 res=0 errno=0 [ 707.171778][ T5536] netlink: 'syz.0.15463': attribute type 13 has an invalid length. [ 707.180248][ T5487] loop1: detected capacity change from 0 to 32768 [ 707.207588][ T5536] gretap0: refused to change device tx_queue_len [ 707.222633][ T5536] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 707.279088][ T5546] overlayfs: missing 'workdir' [ 707.329828][ T5487] XFS (loop1): Mounting V5 Filesystem [ 707.362935][ T5556] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 707.511685][ T5487] XFS (loop1): Ending clean mount [ 707.703301][ T4186] XFS (loop1): Unmounting Filesystem [ 707.724865][ T7820] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 707.734734][ T5475] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 707.800881][ T5580] overlayfs: './file0' not a directory [ 707.984643][ T5475] usb 7-1: Using ep0 maxpacket: 8 [ 708.105051][ T5475] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 708.124903][ T7820] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 708.133193][ T7820] usb 4-1: config 0 has no interface number 0 [ 708.143331][ T5475] usb 7-1: config 179 has no interface number 0 [ 708.166872][ T5475] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 708.178464][ T7820] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 708.210050][ T5475] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 708.222673][ T7820] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 708.263556][ T5475] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 708.284273][ T5475] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 708.314811][ T5475] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 708.343264][ T5475] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.377512][ T7820] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 708.392306][ T7820] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 708.401648][ T7820] usb 4-1: Manufacturer: syz [ 708.407081][ T5568] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 708.415219][ T7820] usb 4-1: SerialNumber: syz [ 708.438775][ T7820] usb 4-1: config 0 descriptor?? [ 708.665639][ T5475] usb 7-1: USB disconnect, device number 22 [ 708.718377][ T7820] usbtouchscreen 4-1:0.214: Failed to read FW rev: -71 [ 708.739085][ T7820] usbtouchscreen: probe of 4-1:0.214 failed with error -71 [ 708.750938][ T5629] loop4: detected capacity change from 0 to 4096 [ 708.780260][ T7820] usb 4-1: USB disconnect, device number 61 [ 708.790598][ T5629] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 708.864802][ T4930] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 708.978857][ T5644] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 709.134822][ T4930] usb 2-1: Using ep0 maxpacket: 32 [ 709.228799][ T5658] netlink: 52 bytes leftover after parsing attributes in process `syz.0.15519'. [ 709.285014][ T4930] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 709.454914][ T4930] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 709.464125][ T4930] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 709.503760][ T4930] usb 2-1: Product: syz [ 709.530271][ T4930] usb 2-1: Manufacturer: syz [ 709.540410][ T4930] usb 2-1: SerialNumber: syz [ 709.561433][ T4930] usb 2-1: config 0 descriptor?? [ 709.635484][ T4930] hub 2-1:0.0: bad descriptor, ignoring hub [ 709.641583][ T4930] hub: probe of 2-1:0.0 failed with error -5 [ 709.747986][ T5695] netlink: 72 bytes leftover after parsing attributes in process `syz.4.15537'. [ 709.865261][ T5702] loop4: detected capacity change from 0 to 512 [ 709.892290][ T5702] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 709.914478][ T5702] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 709.938578][ T5702] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 709.946789][ T5702] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=c040e01c, mo2=0000] [ 709.958203][ T4929] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 709.966288][ T5702] EXT4-fs (loop4): too many log groups per flexible block group [ 709.974177][ T5702] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 709.975442][ T7820] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 709.989929][ T5702] EXT4-fs (loop4): mount failed [ 709.999344][ T1111] usb 2-1: USB disconnect, device number 65 [ 710.234801][ T7820] usb 4-1: Using ep0 maxpacket: 8 [ 710.285997][ T5720] netlink: 'syz.4.15549': attribute type 1 has an invalid length. [ 710.369135][ T7820] usb 4-1: config 7 has an invalid interface number: 184 but max is 0 [ 710.378801][ T7820] usb 4-1: config 7 has no interface number 0 [ 710.388868][ T7820] usb 4-1: config 7 interface 184 has no altsetting 0 [ 710.474851][ T4929] usb 7-1: unable to get BOS descriptor or descriptor too short [ 710.518456][ T4929] usb 7-1: not running at top speed; connect to a high speed hub [ 710.555010][ T7820] usb 4-1: New USB device found, idVendor=12d1, idProduct=2f7b, bcdDevice=de.da [ 710.575455][ T7820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.604712][ T1111] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 710.618430][ T4929] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 4 [ 710.623519][ T7820] usb 4-1: Product: syz [ 710.638089][ T7820] usb 4-1: Manufacturer: syz [ 710.644570][ T4929] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 4 [ 710.656446][ T7820] usb 4-1: SerialNumber: syz [ 710.854750][ T1111] usb 5-1: Using ep0 maxpacket: 8 [ 710.952425][ T4929] usb 7-1: string descriptor 0 read error: -22 [ 710.963180][ T4929] usb 7-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 710.978322][ T4929] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.987738][ T7820] huawei_cdc_ncm 4-1:7.184: CDC Union missing and no IAD found [ 711.006356][ T7820] huawei_cdc_ncm 4-1:7.184: bind() failure [ 711.025977][ T7820] usb 4-1: USB disconnect, device number 62 [ 711.083467][ T5771] loop1: detected capacity change from 0 to 512 [ 711.134896][ T1111] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 711.150058][ T1111] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.160530][ T5771] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 49, start 000000c8) [ 711.184269][ T1111] usb 5-1: Product: syz [ 711.189277][ T5771] FAT-fs (loop1): Filesystem has been set read-only [ 711.196855][ T1111] usb 5-1: Manufacturer: syz [ 711.201709][ T1111] usb 5-1: SerialNumber: syz [ 711.212543][ T5771] FAT-fs (loop1): error, invalid access to FAT (entry 0x000000c8) [ 711.240104][ T1111] usb 5-1: config 0 descriptor?? [ 711.452004][ T5788] comedi comedi1: 8255: I/O port conflict (0x7,4) [ 711.458990][ T5788] comedi comedi1: 8255: I/O port conflict (0x71,4) [ 711.469761][ T5788] comedi comedi1: 8255: I/O port conflict (0x3,4) [ 711.476999][ T5788] comedi comedi1: 8255: I/O port conflict (0x7,4) [ 711.489437][ T4929] usb 7-1: USB disconnect, device number 23 [ 711.499439][ T5788] comedi comedi1: 8255: I/O port conflict (0x3,4) [ 711.505396][ T1111] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 711.510688][ T5788] comedi comedi1: 8255: I/O port conflict (0xffffffffffff8001,4) [ 711.526476][ T5788] comedi comedi1: 8255: I/O port conflict (0x4,4) [ 711.533152][ T5788] comedi comedi1: 8255: I/O port conflict (0x3,4) [ 711.559014][ T5788] comedi comedi1: 8255: I/O port conflict (0x1,4) [ 711.719921][ T1111] usb write operation failed. (-71) [ 711.736104][ T1111] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 711.788473][ T1111] dvbdev: DVB: registering new adapter (Terratec H7) [ 711.812817][ T1111] usb 5-1: media controller created [ 711.858925][ T1111] usb read operation failed. (-71) [ 711.878820][ T1111] usb write operation failed. (-71) [ 711.879766][ T5811] netlink: 'syz.1.15595': attribute type 1 has an invalid length. [ 711.899451][ T1111] dvb_usb_az6007: probe of 5-1:0.0 failed with error -5 [ 711.937241][ T1111] usb 5-1: USB disconnect, device number 63 [ 711.999283][ T5816] netlink: 'syz.3.15597': attribute type 9 has an invalid length. [ 712.022656][ T5816] netlink: 'syz.3.15597': attribute type 6 has an invalid length. [ 712.287641][ T5834] netlink: 180 bytes leftover after parsing attributes in process `syz.1.15608'. [ 712.333326][ T5839] loop6: detected capacity change from 0 to 512 [ 712.335189][ T5834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15608'. [ 712.430532][ T5846] netlink: 76 bytes leftover after parsing attributes in process `syz.1.15611'. [ 712.479370][ T5839] EXT4-fs (loop6): mounted filesystem without journal. Opts: nolazytime,,errors=continue. Quota mode: writeback. [ 712.559283][ T5839] Quota error (device loop6): find_tree_dqentry: Getting block too big (67108869 >= 6) [ 712.573744][ T5839] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 712.583568][ T5839] EXT4-fs error (device loop6): ext4_acquire_dquot:6234: comm syz.6.15606: Failed to acquire dquot type 0 [ 712.835113][ T5878] kAFS: unable to lookup cell 'Þ({^ú@' [ 712.883620][ T26] audit: type=1400 audit(712.894:60): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147CCA3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE812F340E681E0694F5BADF640DA3FDFC2F929B4C2BEB9A592C577287B6021BFEEC24146C7F95608BB60A736207A09D9F47E89C4044EADDE57CDEFD15F25B822D2EAF2205DF0D6B71B63EE0B63CB598F26509AF36983578F6F4198A0843CC1B1BD780015007AB9709CC6211E3B5C685B972B5C5E95F054A7A9FE149282F679C8466B9734E3850EC98419DD0C887715902F9E7802842085BC606F30C2654869E9E3701FD0FC69137FE165592689465EEBD5CAFAD7C29DE2ADADEC42A818D8EE389CA1FE33A1EF23617C89116A3A458B56612E4C36C43A9150D5331ADBB0BEB01A062B1F1349FC2ECEA76CB7C40CDFE378185F3099B1D71414D0FDA5A47F8 [ 713.098330][ T4929] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 713.260475][ T5901] 9pnet: p9_fd_create_tcp (5901): problem connecting socket to 127.0.0.1 [ 713.664699][ T4929] usb 5-1: Using ep0 maxpacket: 8 [ 713.721278][ T5917] loop6: detected capacity change from 0 to 4096 [ 713.788139][ T4929] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 713.805344][ T5917] ntfs: (device loop6): ntfs_read_locked_inode(): $DATA attribute is missing. [ 713.828742][ T4929] usb 5-1: config 179 has no interface number 0 [ 713.836326][ T5917] ntfs: (device loop6): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 713.849966][ T4929] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 713.871957][ T5917] ntfs: (device loop6): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 713.883737][ T4929] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 713.904822][ T4929] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 713.921294][ T5917] ntfs: volume version 3.1. [ 713.940258][ T4929] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 713.974773][ T4929] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 714.019065][ T4929] usb 5-1: config 179 interface 65 has no altsetting 0 [ 714.026750][ T4929] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 714.055065][ T5917] ntfs: (device loop6): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 714.085019][ T4929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.103451][ T5917] ntfs: (device loop6): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 714.186583][ T4929] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input49 [ 714.255693][ T5941] netlink: 'syz.0.15656': attribute type 6 has an invalid length. [ 714.270181][ T5941] netlink: 168 bytes leftover after parsing attributes in process `syz.0.15656'. [ 714.279615][ T154] ntfs: (device loop6): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 714.332881][T24947] ntfs: (device loop6): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 714.404727][ T4930] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 714.449211][ T7820] usb 5-1: USB disconnect, device number 64 [ 714.464672][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 714.473992][ T7820] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 714.684818][ T4930] usb 2-1: Using ep0 maxpacket: 32 [ 714.804974][ T4930] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 715.015031][ T4930] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 715.048871][ T4930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.073250][ T4930] usb 2-1: Product: syz [ 715.088625][ T4930] usb 2-1: Manufacturer: syz [ 715.093523][ T4930] usb 2-1: SerialNumber: syz [ 715.104776][ T4930] usb 2-1: config 0 descriptor?? [ 715.165896][ T4930] usb 2-1: bad CDC descriptors [ 715.171166][ T4930] usb 2-1: unsupported MDLM descriptors [ 715.219764][ T5990] device bond4 entered promiscuous mode [ 715.225887][ T5990] 8021q: adding VLAN 0 to HW filter on device bond4 [ 715.404655][ T4930] usb 2-1: USB disconnect, device number 66 [ 715.663374][ T6040] netlink: 'syz.3.15701': attribute type 13 has an invalid length. [ 715.726026][ T6044] nfs: Deprecated parameter 'nointr' [ 715.733659][ T6042] Timeout policy `syz0' can only be used by L3 protocol number 34984 [ 715.810260][ T6050] netlink: 'syz.4.15705': attribute type 10 has an invalid length. [ 715.820500][ T6050] team0: Device hsr_slave_0 failed to register rx_handler [ 715.832829][ T6049] loop3: detected capacity change from 0 to 256 [ 715.971370][ T6049] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 716.043589][ T6065] binfmt_misc: register: failed to install interpreter file ./file0 [ 716.149398][ T6071] netlink: 'syz.4.15715': attribute type 1 has an invalid length. [ 716.203198][ T6073] netlink: 16 bytes leftover after parsing attributes in process `syz.6.15718'. [ 716.500368][ T6096] loop3: detected capacity change from 0 to 64 [ 716.541224][ T6096] MINIX-fs: mounting file system with errors, running fsck is recommended [ 716.577421][ T6096] attempt to access beyond end of device [ 716.577421][ T6096] loop3: rw=0, want=8194, limit=64 [ 716.590930][ T6096] Buffer I/O error on dev loop3, logical block 4096, async page read [ 716.613327][ T6096] attempt to access beyond end of device [ 716.613327][ T6096] loop3: rw=0, want=8194, limit=64 [ 716.644809][ T4930] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 716.654841][ T6096] Buffer I/O error on dev loop3, logical block 4096, async page read [ 716.722697][ T6102] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 716.904839][ T4930] usb 7-1: Using ep0 maxpacket: 16 [ 717.043094][ T6123] xt_recent: hitcount (4294967295) is larger than allowed maximum (255) [ 717.055142][ T4930] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 717.075056][ T4930] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 717.124724][ T4930] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 717.235024][ T4930] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 717.244123][ T4930] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 717.283709][ T4930] usb 7-1: SerialNumber: syz [ 717.325223][ T6083] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 717.392160][ T6135] loop3: detected capacity change from 0 to 1764 [ 717.466831][ T6135] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 717.559999][ T6143] netlink: 'syz.1.15752': attribute type 2 has an invalid length. [ 717.571880][ T4930] cdc_ether: probe of 7-1:1.0 failed with error -71 [ 717.579243][ T6143] netlink: 'syz.1.15752': attribute type 1 has an invalid length. [ 717.596802][ T4930] usb 7-1: USB disconnect, device number 24 [ 717.774937][ T4929] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 717.933376][ T6157] loop3: detected capacity change from 0 to 4096 [ 718.034835][ T4929] usb 1-1: Using ep0 maxpacket: 32 [ 718.174927][ T4929] usb 1-1: config 15 has an invalid interface number: 78 but max is 1 [ 718.184179][ T6157] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 718.193557][ T4929] usb 1-1: config 15 has an invalid interface number: 2 but max is 1 [ 718.203718][ T4929] usb 1-1: config 15 has no interface number 0 [ 718.220975][ T4929] usb 1-1: config 15 has no interface number 1 [ 718.231078][ T4929] usb 1-1: config 15 interface 78 has no altsetting 0 [ 718.244879][ T4929] usb 1-1: config 15 interface 2 has no altsetting 0 [ 718.434384][ T4184] ntfs3: loop3: ntfs_sync_fs r=1a failed, -22. [ 718.447731][ T4184] ntfs3: loop3: ntfs_evict_inode r=1a failed, -22. [ 718.454306][ T4184] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 718.464963][ T4929] usb 1-1: New USB device found, idVendor=413c, idProduct=81cf, bcdDevice=d4.09 [ 718.481611][ T4929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.503140][ T4929] usb 1-1: Product: syz [ 718.519764][ T4929] usb 1-1: Manufacturer: syz [ 718.538299][ T4929] usb 1-1: SerialNumber: syz [ 718.552364][ T6173] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.626055][ T6173] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 718.926321][ T4929] usb 1-1: selecting invalid altsetting 0 [ 718.932126][ T4929] usb 1-1: Could not set interface, error -22 [ 718.995698][ T4929] usb 1-1: USB disconnect, device number 63 [ 719.264794][ T6216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 719.427323][ T6231] netlink: 'syz.0.15794': attribute type 10 has an invalid length. [ 719.449889][ T6231] team0: Device hsr_slave_0 failed to register rx_handler [ 719.563518][ T6235] netlink: 32 bytes leftover after parsing attributes in process `syz.0.15796'. [ 719.575275][ T6235] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 719.629647][ T6241] netlink: 'syz.1.15798': attribute type 1 has an invalid length. [ 719.672013][ T6241] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15798'. [ 720.187740][ T6271] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 720.234701][ T7820] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 720.386873][ T6284] netlink: 'syz.3.15821': attribute type 10 has an invalid length. [ 720.409674][ T6284] team0: Device hsr_slave_0 failed to register rx_handler [ 720.442089][ T6286] netlink: 20 bytes leftover after parsing attributes in process `syz.6.15819'. [ 720.582088][ T6296] tmpfs: Bad value for 'mpol' [ 720.598393][ T7820] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 720.619988][ T7820] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 720.661579][ T7820] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 720.684746][ T7820] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.718947][ T7820] usb 5-1: config 0 descriptor?? [ 720.827777][ T6316] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 720.916109][ T6314] netlink: 'syz.1.15834': attribute type 10 has an invalid length. [ 720.946701][ T6314] team0: Port device hsr_slave_0 added [ 721.202808][ T6334] loop6: detected capacity change from 0 to 4096 [ 721.215012][ T7820] Bluetooth: Can't get state to change to load configuration err [ 721.225199][ T7820] Bluetooth: Loading sysconfig file failed [ 721.231114][ T7820] ath3k: probe of 5-1:0.0 failed with error -16 [ 721.240886][ T7820] usb 5-1: USB disconnect, device number 65 [ 721.247613][ T1111] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 721.268012][ T6334] __ntfs_error: 1 callbacks suppressed [ 721.268030][ T6334] ntfs: (device loop6): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 721.303686][ T6334] ntfs: (device loop6): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 721.337625][ T6334] ntfs: volume version 3.1. [ 721.356095][ T6334] ntfs: (device loop6): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4). Marking corrupt inode and base inode 0x1a as bad. Run chkdsk. [ 721.384121][ T6334] ntfs: (device loop6): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute. [ 721.399486][ T4929] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 721.408474][ T6334] ntfs: (device loop6): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 721.533212][ T6344] netlink: 'syz.0.15849': attribute type 32 has an invalid length. [ 721.635017][ T1111] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 721.653258][ T1111] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 721.667648][ T1111] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 4, skipping [ 721.669235][ T4929] usb 2-1: Using ep0 maxpacket: 8 [ 721.680562][ T1111] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 721.787126][ T1111] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 721.821283][ T1111] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 721.840224][ T1111] usb 4-1: SerialNumber: syz [ 721.885027][ T4929] usb 2-1: unable to get BOS descriptor or descriptor too short [ 721.969224][ T4929] usb 2-1: config 245 has an invalid interface number: 221 but max is 0 [ 721.978248][ T4929] usb 2-1: config 245 has no interface number 0 [ 721.989723][ T4929] usb 2-1: config 245 interface 221 altsetting 1 endpoint 0x6 has invalid wMaxPacketSize 0 [ 722.000394][ T4929] usb 2-1: config 245 interface 221 altsetting 1 bulk endpoint 0x6 has invalid maxpacket 0 [ 722.014639][ T4929] usb 2-1: config 245 interface 221 has no altsetting 0 [ 722.021780][ T5475] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 722.147768][ T1111] usb 4-1: 0:2 : does not exist [ 722.153660][ T1111] usb 4-1: unit 5 not found! [ 722.175536][ T1111] usb 4-1: USB disconnect, device number 63 [ 722.194642][ T7820] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 722.218545][ T4929] usb 2-1: New USB device found, idVendor=05da, idProduct=80a3, bcdDevice=b2.28 [ 722.231405][ T4929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.246019][ T4929] usb 2-1: Product: syz [ 722.257035][ T4929] usb 2-1: Manufacturer: syz [ 722.261658][ T4929] usb 2-1: SerialNumber: syz [ 722.385036][ T5475] usb 7-1: config 0 has an invalid interface number: 107 but max is 0 [ 722.393425][ T5475] usb 7-1: config 0 has no interface number 0 [ 722.400319][ T5475] usb 7-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 722.412090][ T5475] usb 7-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 722.426267][ T8034] udevd[8034]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 722.447065][ T7820] usb 5-1: Using ep0 maxpacket: 16 [ 722.571045][ T7820] usb 5-1: config 0 has no interfaces? [ 722.576921][ T5475] usb 7-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 722.586161][ T5475] usb 7-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 722.594450][ T5475] usb 7-1: Product: syz [ 722.598682][ T5475] usb 7-1: Manufacturer: syz [ 722.603294][ T5475] usb 7-1: SerialNumber: syz [ 722.607471][ T4929] microtek usb (rev 0.4.3): can only deal with one output endpoints. Bailing out. [ 722.610974][ T5475] usb 7-1: config 0 descriptor?? [ 722.629691][ T4929] usb 2-1: USB disconnect, device number 67 [ 722.634885][T16129] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 722.666613][ T5475] keyspan 7-1:0.107: Keyspan 4 port adapter converter detected [ 722.682606][ T5475] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 81 [ 722.699046][ T5475] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 1 [ 722.715662][ T5475] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 722.735662][ T5475] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 2 [ 722.745016][ T7820] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 722.754098][ T7820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.774329][ T5475] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 722.791751][ T7820] usb 5-1: Product: syz [ 722.796577][ T7820] usb 5-1: Manufacturer: syz [ 722.801208][ T7820] usb 5-1: SerialNumber: syz [ 722.807288][ T5475] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 4 [ 722.828294][ T7820] r8152-cfgselector 5-1: config 0 descriptor?? [ 722.835042][ T5475] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 722.845735][ T5475] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 6 [ 722.864902][ T5475] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 722.876174][T16129] usb 1-1: Using ep0 maxpacket: 8 [ 722.897378][ T5475] usb 7-1: USB disconnect, device number 25 [ 722.920028][ T5475] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 722.942409][ T5475] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 722.969316][ T5475] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 722.994826][T16129] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 723.003143][T16129] usb 1-1: config 179 has no interface number 0 [ 723.022944][ T5475] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 723.032554][T16129] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 723.055242][ T5475] keyspan 7-1:0.107: device disconnected [ 723.061629][T16129] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 723.089617][T16129] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 723.115689][T16129] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 723.129472][ T7820] usbip-host 5-1: 5-1 is not in match_busid table... skip! [ 723.153593][T16129] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 723.170617][ T6409] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15881'. [ 723.181558][T16129] usb 1-1: config 179 interface 65 has no altsetting 0 [ 723.194767][T16129] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 723.223728][ T4302] usb 5-1: config 0 descriptor?? [ 723.230117][T16129] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.298540][T16129] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input51 [ 723.334029][ T5475] usb 5-1: USB disconnect, device number 66 [ 723.351647][ T4302] usb 5-1: can't set config #0, error -71 [ 723.539781][T16129] usb 1-1: USB disconnect, device number 64 [ 723.546169][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 723.585622][T16129] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 723.601166][ T6425] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15889'. [ 723.779597][ T6438] netlink: 'syz.3.15895': attribute type 1 has an invalid length. [ 724.027716][ T6457] netlink: 'syz.1.15904': attribute type 9 has an invalid length. [ 724.059220][ T6457] netlink: 'syz.1.15904': attribute type 7 has an invalid length. [ 724.068439][ T6457] netlink: 'syz.1.15904': attribute type 8 has an invalid length. [ 724.160834][T16129] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 724.210428][ T6468] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.15910'. [ 724.235271][ T6469] netlink: 28 bytes leftover after parsing attributes in process `syz.6.15909'. [ 724.244650][ T6469] netlink: 28 bytes leftover after parsing attributes in process `syz.6.15909'. [ 724.370516][ T6478] netlink: 184 bytes leftover after parsing attributes in process `syz.0.15914'. [ 724.434630][T16129] usb 4-1: Using ep0 maxpacket: 32 [ 724.554975][T16129] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 724.573697][T16129] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 724.614684][T16129] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 724.654600][T16129] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 724.690414][T16129] usb 4-1: config 1 has no interface number 0 [ 724.704818][T16129] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 724.739318][T16129] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.817641][T16129] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 725.034771][T16129] snd_usb_pod 4-1:1.1: set_interface failed [ 725.049133][T16129] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 725.077365][T16129] snd_usb_pod: probe of 4-1:1.1 failed with error -71 [ 725.096246][ T6529] comedi comedi0: pcl812: I/O port conflict (0x8001,16) [ 725.110128][T16129] usb 4-1: USB disconnect, device number 64 [ 725.394262][ T6549] netlink: zone id is out of range [ 725.410538][ T6549] netlink: zone id is out of range [ 725.448777][ T6551] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 725.631337][ T6565] overlayfs: missing 'lowerdir' [ 725.721384][ T6571] loop6: detected capacity change from 0 to 256 [ 725.765253][ T6573] netlink: 'syz.3.15962': attribute type 1 has an invalid length. [ 725.802151][ T6571] FAT-fs (loop6): Directory bread(block 64) failed [ 725.811452][ T6573] netlink: 200 bytes leftover after parsing attributes in process `syz.3.15962'. [ 725.827760][ T6571] FAT-fs (loop6): Directory bread(block 65) failed [ 725.864943][ T6571] FAT-fs (loop6): Directory bread(block 66) failed [ 725.904737][ T6571] FAT-fs (loop6): Directory bread(block 67) failed [ 725.911409][ T6571] FAT-fs (loop6): Directory bread(block 68) failed [ 725.956058][ T6571] FAT-fs (loop6): Directory bread(block 69) failed [ 725.990350][ T6571] FAT-fs (loop6): Directory bread(block 70) failed [ 726.027444][ T6571] FAT-fs (loop6): Directory bread(block 71) failed [ 726.068941][ T6571] FAT-fs (loop6): Directory bread(block 72) failed [ 726.094782][ T6571] FAT-fs (loop6): Directory bread(block 73) failed [ 726.323190][ T6598] loop3: detected capacity change from 0 to 4096 [ 726.509549][ T6618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15986'. [ 726.533059][ T6598] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 726.544174][ T6620] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 726.587621][ T6598] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842e018, mo2=0002] [ 726.615479][ T6598] System zones: 0-5 [ 726.705328][ T6598] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,stripe=0x0000000000000061,journal_ioprio=0x0000000000000002,nouid32,nodiscard,nomblk_io_submit,acl,nojournal_checksum,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 726.754368][ T6638] x_tables: ip_tables: osf match: only valid for protocol 6 [ 726.896899][ T6648] device wlan0 entered promiscuous mode [ 727.102567][ T6663] netlink: 20 bytes leftover after parsing attributes in process `syz.6.16005'. [ 727.141633][ T6666] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16007'. [ 727.171668][ T6666] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16007'. [ 727.207827][ T6663] netlink: 20 bytes leftover after parsing attributes in process `syz.6.16005'. [ 727.302139][ T6678] loop4: detected capacity change from 0 to 8 [ 727.431978][ T6690] netlink: 'syz.6.16019': attribute type 10 has an invalid length. [ 727.450501][ T6690] netlink: 40 bytes leftover after parsing attributes in process `syz.6.16019'. [ 727.467939][ T6690] netlink: 'syz.6.16019': attribute type 10 has an invalid length. [ 727.505217][ T6690] netlink: 40 bytes leftover after parsing attributes in process `syz.6.16019'. [ 727.662913][ T6698] netlink: 132 bytes leftover after parsing attributes in process `syz.4.16022'. [ 728.222045][ T6728] loop4: detected capacity change from 0 to 24 [ 728.285566][ T6728] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 728.317725][ T6734] netlink: 'syz.0.16041': attribute type 1 has an invalid length. [ 728.347546][ T6728] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 728.627053][ T6750] IPv6: sit2: Disabled Multicast RS [ 728.673936][ T6754] ieee802154 phy0 wpan0: encryption failed: -22 [ 729.051470][ T6784] loop4: detected capacity change from 0 to 512 [ 729.128643][ T6788] UBIFS error (pid: 6788): cannot open "(null)", error -22 [ 729.154909][ T6784] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0022] [ 729.199866][ T26] audit: type=1400 audit(729.214:62): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=6794 comm="syz.1.16071" [ 729.245568][ T6784] System zones: 1-12 [ 729.276040][ T6784] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.16066: Directory hole found for htree index block 0 [ 729.353073][ T6784] EXT4-fs (loop4): Remounting filesystem read-only [ 729.391269][ T6784] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 729.426929][ T6784] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.16066: Directory hole found for htree index block 0 [ 729.471542][ T6784] EXT4-fs (loop4): Remounting filesystem read-only [ 729.500076][ T6784] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 729.551274][ T6784] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,dax=never,bsdgroups,usrjquota="nojournal_checksum,errors=remount-ro,,. Quota mode: writeback. [ 729.641902][ T6784] EXT4-fs (loop4): re-mounted. Opts: grpjquota=Jdebug,jqfmt=vfsold,dax=never,bsdgroups,usrjquota="nojournal_checksum,errors=remount-ro,,. Quota mode: writeback. [ 729.780047][ T6831] tmpfs: Bad value for 'mpol' [ 730.160706][ T6856] netlink: 36 bytes leftover after parsing attributes in process `syz.6.16103'. [ 730.204735][ T6856] netlink: 'syz.6.16103': attribute type 1 has an invalid length. [ 730.313248][ T6867] loop3: detected capacity change from 0 to 16 [ 730.384691][ T6867] erofs: (device loop3): mounted with root inode @ nid 36. [ 730.476571][ T6876] netlink: 'syz.4.16111': attribute type 4 has an invalid length. [ 730.620186][ T6887] loop6: detected capacity change from 0 to 512 [ 730.772957][ T6887] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 730.809734][ T6887] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 730.819062][ T6887] EXT4-fs error (device loop6): ext4_orphan_get:1426: comm syz.6.16116: bad orphan inode 13 [ 730.834825][ T6887] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="data_err=ignore,noload,data_err=ignore,grpjquota="errors=continue,max_dir_size_kb=0x00000000000001ff,nobarrier,,errors=continue. Quota mode: writeback. [ 730.954429][ T6909] __nla_validate_parse: 2 callbacks suppressed [ 730.954446][ T6909] netlink: 16 bytes leftover after parsing attributes in process `syz.4.16127'. [ 731.314380][ T6933] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16139'. [ 731.379397][ T6933] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16139'. [ 731.614348][ T6947] loop6: detected capacity change from 0 to 4096 [ 731.659415][ T6956] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16149'. [ 731.669896][ T6947] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 731.788407][ T6963] sctp: [Deprecated]: syz.4.16154 (pid 6963) Use of struct sctp_assoc_value in delayed_ack socket option. [ 731.788407][ T6963] Use struct sctp_sack_info instead [ 731.805053][ T6947] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 731.863019][ T6947] ntfs3: loop6: ino=21, "bus" The size of extended attributes must not exceed 64KiB [ 732.234270][ T6995] netlink: 'syz.0.16167': attribute type 3 has an invalid length. [ 732.662968][ T7027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16186'. [ 732.937232][ T7051] overlayfs: unrecognized mount option "\{\" or missing value [ 733.069780][T16129] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 733.085829][ T7063] netlink: 'syz.6.16203': attribute type 3 has an invalid length. [ 733.105899][ T7063] netlink: 201372 bytes leftover after parsing attributes in process `syz.6.16203'. [ 733.126252][ T7065] ipt_CLUSTERIP: Please specify destination IP [ 733.300926][ T7080] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16211'. [ 733.324696][T16129] usb 4-1: Using ep0 maxpacket: 8 [ 733.445085][T16129] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 733.475659][T16129] usb 4-1: config 0 has no interface number 0 [ 733.481832][T16129] usb 4-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 733.524147][T16129] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 733.535682][T16129] usb 4-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x9A, skipping [ 733.547286][T16129] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 733.714955][T16129] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 733.740653][T16129] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.764792][T16129] usb 4-1: Product: syz [ 733.769024][T16129] usb 4-1: Manufacturer: syz [ 733.794059][T16129] usb 4-1: SerialNumber: syz [ 733.828864][T16129] usb 4-1: config 0 descriptor?? [ 733.866298][T16129] iowarrior 4-1:0.186: no interrupt-in endpoint found [ 733.905179][ T7116] delete_channel: no stack [ 734.128405][ T7136] block device autoloading is deprecated and will be removed. [ 734.218448][ T7145] AppArmor: change_hat: Invalid input '=' [ 734.303075][ T7153] netlink: 'syz.0.16247': attribute type 3 has an invalid length. [ 734.393641][ T7153] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.16247'. [ 734.506409][ T7167] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16255'. [ 734.601309][ T7172] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16256'. [ 734.613744][ T7171] [U]  [ 734.666871][ T7177] overlayfs: missing 'workdir' [ 734.839427][ T7187] netlink: 'syz.0.16265': attribute type 1 has an invalid length. [ 735.262320][ T7203] loop6: detected capacity change from 0 to 4096 [ 735.326343][ T7203] ntfs: (device loop6): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 735.470026][ T7203] ntfs: volume version 3.1. [ 735.490079][ T7203] ntfs: (device loop6): ntfs_mark_quotas_out_of_date(): Quota defaults entry version 0x5 is not supported. [ 735.518798][ T7203] ntfs: (device loop6): load_system_files(): Failed to mark quotas out of date. Mounting read-only. Run chkdsk. [ 735.714725][T16129] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 735.858758][ T7820] usb 4-1: USB disconnect, device number 65 [ 735.908439][ T7247] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 736.042847][ T7257] program syz.3.16299 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 736.084857][T16129] usb 1-1: config 127 has an invalid interface number: 95 but max is 0 [ 736.103470][T16129] usb 1-1: config 127 has no interface number 0 [ 736.141829][T16129] usb 1-1: config 127 interface 95 altsetting 0 endpoint 0xC has an invalid bInterval 132, changing to 11 [ 736.179858][ T7264] program syz.6.16304 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 736.189901][T16129] usb 1-1: config 127 interface 95 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 32 [ 736.217684][T16129] usb 1-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice= e.76 [ 736.257421][T16129] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.315064][ T7221] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 736.336346][T16129] ti_usb_3410_5052 1-1:127.95: TI USB 3410 1 port adapter converter detected [ 736.354697][T16129] ti_usb_3410_5052 1-1:127.95: missing endpoints [ 736.567082][T16129] usb 1-1: USB disconnect, device number 65 [ 736.584743][ T7285] __nla_validate_parse: 3 callbacks suppressed [ 736.584763][ T7285] netlink: 36 bytes leftover after parsing attributes in process `syz.3.16314'. [ 736.804776][ T7299] netlink: 'syz.3.16319': attribute type 2 has an invalid length. [ 736.818582][ T7299] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16319'. [ 736.933382][ T7305] netlink: 20 bytes leftover after parsing attributes in process `syz.3.16324'. [ 736.953921][ T7253] loop1: detected capacity change from 0 to 40427 [ 737.028352][ T7253] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(1) root(3) [ 737.054204][ T7253] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 737.074320][ T7253] F2FS-fs (loop1): Project quota feature not enabled. Cannot enable project quota enforcement. [ 737.825026][ T7352] Timeout policy `syz0' can only be used by L3 protocol number 8939 [ 737.970884][ T7365] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.16354'. [ 738.074641][T16129] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 738.264433][ T7382] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.16362'. [ 738.411957][ T7391] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 738.479336][ T7396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16370'. [ 738.498809][T16129] usb 5-1: unable to get BOS descriptor or descriptor too short [ 738.584871][T16129] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 738.624425][T16129] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 738.640934][T16129] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1028, setting to 1024 [ 738.664971][ T7408] netlink: 72 bytes leftover after parsing attributes in process `syz.6.16373'. [ 738.684348][T16129] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 1024 [ 738.862598][ T7418]  (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 738.874896][T16129] usb 5-1: New USB device found, idVendor=2a39, idProduct=3fb0, bcdDevice= 0.40 [ 738.883978][T16129] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.907753][T16129] usb 5-1: Product: syz [ 738.929232][T16129] usb 5-1: Manufacturer: syz [ 738.933990][T16129] usb 5-1: SerialNumber: syz [ 739.074262][ T7428] device netdevsim0 left promiscuous mode [ 739.312261][ T7398] loop1: detected capacity change from 0 to 32768 [ 739.364028][ T7444] netlink: 'syz.3.16393': attribute type 41 has an invalid length. [ 739.381369][ T7447] rdma_rxe: ignoring netdev event = 12 for ipvlan0 [ 739.449863][T16129] usb 5-1: USB disconnect, device number 67 [ 739.500213][ T7455] loop3: detected capacity change from 0 to 512 [ 739.510941][ T7398] XFS (loop1): Mounting V5 Filesystem [ 739.553202][ T7455] EXT4-fs (loop3): Ignoring removed nobh option [ 739.648681][ T7398] XFS (loop1): Ending clean mount [ 739.687012][ T7455] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 739.715773][ T8034] udevd[8034]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 739.767657][ T7455] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61 [ 739.805487][ T7455] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #13: comm syz.3.16396: inode has both inline data and extents flags [ 739.835133][ T7455] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.16396: couldn't read orphan inode 13 (err -117) [ 739.852686][ T4186] XFS (loop1): Unmounting Filesystem [ 739.914363][ T7455] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue. Quota mode: writeback. [ 739.949990][ T7455] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 740.954684][T16129] usb 7-1: new low-speed USB device number 26 using dummy_hcd [ 741.319249][ T7563] rdma_rxe: rxe_register_device failed with error -23 [ 741.335421][ T7563] rdma_rxe: failed to add lo [ 741.344464][ T7561] loop4: detected capacity change from 0 to 1024 [ 741.365705][T16129] usb 7-1: unable to get BOS descriptor or descriptor too short [ 741.489167][T16129] usb 7-1: too many endpoints for config 1 interface 0 altsetting 128: 253, using maximum allowed: 30 [ 741.520922][T16129] usb 7-1: config 1 interface 0 altsetting 128 endpoint 0x82 is Bulk; changing to Interrupt [ 741.551795][T16129] usb 7-1: config 1 interface 0 altsetting 128 endpoint 0x3 is Bulk; changing to Interrupt [ 741.580933][T16129] usb 7-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 253 [ 741.624578][T16129] usb 7-1: config 1 interface 0 has no altsetting 0 [ 741.667755][ T7550] loop1: detected capacity change from 0 to 32768 [ 741.842057][ T7550] JBD2: Ignoring recovery information on journal [ 741.886354][T16129] usb 7-1: string descriptor 0 read error: -22 [ 741.896676][T16129] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 741.960829][T16129] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.984671][ T7820] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 742.032495][ T7550] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 742.049729][ T7522] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 742.057864][ T7522] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 742.101877][ T7593] comedi comedi4: bad chanlist[0]=0x01000008 chan=8 range length=2 [ 742.108387][T16129] usb 7-1: bad CDC descriptors [ 742.167910][ T7550] (syz.1.16441,7550,1):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 742.197656][ T7550] (syz.1.16441,7550,1):ocfs2_get_suballoc_slot_bit:2719 ERROR: read block 7146213614048077935 failed -12 [ 742.229666][ T7550] (syz.1.16441,7550,1):ocfs2_get_suballoc_slot_bit:2751 ERROR: status = -12 [ 742.260207][ T7550] (syz.1.16441,7550,1):ocfs2_test_inode_bit:2833 ERROR: get alloc slot and bit failed -12 [ 742.290213][ T7550] (syz.1.16441,7550,1):ocfs2_test_inode_bit:2874 ERROR: status = -12 [ 742.308720][ T7550] (syz.1.16441,7550,1):ocfs2_get_dentry:78 ERROR: test inode bit failed -12 [ 742.327728][ T4930] usb 7-1: USB disconnect, device number 26 [ 742.377681][ T7820] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 742.387069][ T7820] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 742.394322][ T4186] ocfs2: Unmounting device (7,1) on (node local) [ 742.398980][ T7820] usb 4-1: config 0 has no interface number 0 [ 742.410361][ T7820] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 742.420787][ T7820] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 742.594840][ T4929] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 742.595061][ T7820] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 742.616896][ T7820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.626593][ T7820] usb 4-1: Product: syz [ 742.630807][ T7820] usb 4-1: Manufacturer: syz [ 742.640030][ T7820] usb 4-1: SerialNumber: syz [ 742.645181][T11216] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 742.663557][ T7820] usb 4-1: config 0 descriptor?? [ 742.669093][ T7608] netlink: 'syz.1.16468': attribute type 13 has an invalid length. [ 742.880950][ T4929] usb 5-1: Using ep0 maxpacket: 32 [ 742.939718][ T7619] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 742.978557][ T7619] [ 742.980955][ T7619] ====================================================== [ 742.987991][ T7619] WARNING: possible circular locking dependency detected [ 742.995039][ T7619] syzkaller #0 Not tainted [ 742.999473][ T7619] ------------------------------------------------------ [ 743.006521][ T7619] syz.1.16472/7619 is trying to acquire lock: [ 743.012604][ T7619] ffff88807b3ecc28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 743.023683][ T7619] [ 743.023683][ T7619] but task is already holding lock: [ 743.031070][ T7619] ffffffff8d6c51a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x18b/0x560 [ 743.040780][ T7619] [ 743.040780][ T7619] which lock already depends on the new lock. [ 743.040780][ T7619] [ 743.051206][ T7619] [ 743.051206][ T7619] the existing dependency chain (in reverse order) is: [ 743.060247][ T7619] [ 743.060247][ T7619] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 743.068285][ T7619] __mutex_lock_common+0x1e3/0x2400 [ 743.074085][ T7619] mutex_lock_nested+0x17/0x20 [ 743.079429][ T7619] rfkill_register+0x33/0x8a0 [ 743.084662][ T7619] hci_register_dev+0x452/0x970 [ 743.090071][ T7619] vhci_create_device+0x32c/0x5c0 [ 743.095653][ T7619] vhci_write+0x391/0x450 [ 743.100539][ T7619] vfs_write+0x745/0xd60 [ 743.105328][ T7619] ksys_write+0x152/0x260 [ 743.110209][ T7619] do_syscall_64+0x4c/0xa0 [ 743.115186][ T7619] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 743.121638][ T7619] [ 743.121638][ T7619] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 743.129489][ T7619] __mutex_lock_common+0x1e3/0x2400 [ 743.135247][ T7619] mutex_lock_nested+0x17/0x20 [ 743.140568][ T7619] vhci_send_frame+0x88/0x100 [ 743.145795][ T7619] hci_send_frame+0x1a9/0x2e0 [ 743.151029][ T7619] hci_tx_work+0x9f9/0x1710 [ 743.156091][ T7619] process_one_work+0x85f/0x1010 [ 743.161582][ T7619] worker_thread+0xaa6/0x1290 [ 743.166800][ T7619] kthread+0x436/0x520 [ 743.171416][ T7619] ret_from_fork+0x1f/0x30 [ 743.176391][ T7619] [ 743.176391][ T7619] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 743.185641][ T7619] __flush_work+0x116/0x210 [ 743.189877][ T7820] usb 4-1: USB disconnect, device number 66 [ 743.190694][ T7619] hci_dev_do_close+0x1e7/0x1030 [ 743.202170][ T7619] hci_unregister_dev+0x2d7/0x580 [ 743.207748][ T7619] vhci_release+0x73/0xc0 [ 743.212641][ T7619] __fput+0x234/0x930 [ 743.217174][ T7619] task_work_run+0x125/0x1a0 [ 743.222317][ T7619] do_exit+0x626/0x20c0 [ 743.227016][ T7619] do_group_exit+0x12e/0x300 [ 743.232146][ T7619] __x64_sys_exit_group+0x3b/0x40 [ 743.237699][ T7619] do_syscall_64+0x4c/0xa0 [ 743.242659][ T7619] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 743.249073][ T7619] [ 743.249073][ T7619] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 743.256724][ T7619] __mutex_lock_common+0x1e3/0x2400 [ 743.262492][ T7619] mutex_lock_nested+0x17/0x20 [ 743.267778][ T7619] bg_scan_update+0x44/0x3b0 [ 743.272917][ T7619] process_one_work+0x85f/0x1010 [ 743.278398][ T7619] worker_thread+0xaa6/0x1290 [ 743.283626][ T7619] kthread+0x436/0x520 [ 743.288242][ T7619] ret_from_fork+0x1f/0x30 [ 743.293209][ T7619] [ 743.293209][ T7619] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 743.303062][ T7619] __lock_acquire+0x2c42/0x7d10 [ 743.308465][ T7619] lock_acquire+0x19e/0x400 [ 743.313494][ T7619] __flush_work+0x116/0x210 [ 743.318512][ T7619] __cancel_work_timer+0x3f4/0x560 [ 743.324185][ T7619] hci_request_cancel_all+0xcc/0x300 [ 743.330027][ T7619] hci_dev_do_close+0x4e/0x1030 [ 743.335429][ T7619] hci_rfkill_set_block+0x10a/0x190 [ 743.341193][ T7619] rfkill_set_block+0x1c6/0x420 [ 743.346570][ T7619] rfkill_fop_write+0x452/0x560 [ 743.351960][ T7619] vfs_write+0x30b/0xd60 [ 743.356726][ T7619] ksys_write+0x152/0x260 [ 743.361591][ T7619] do_syscall_64+0x4c/0xa0 [ 743.366534][ T7619] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 743.372996][ T7619] [ 743.372996][ T7619] other info that might help us debug this: [ 743.372996][ T7619] [ 743.383216][ T7619] Chain exists of: [ 743.383216][ T7619] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 743.383216][ T7619] [ 743.398950][ T7619] Possible unsafe locking scenario: [ 743.398950][ T7619] [ 743.406408][ T7619] CPU0 CPU1 [ 743.411784][ T7619] ---- ---- [ 743.417150][ T7619] lock(rfkill_global_mutex); [ 743.421954][ T7619] lock(&data->open_mutex); [ 743.429062][ T7619] lock(rfkill_global_mutex); [ 743.436349][ T7619] lock((work_completion)(&hdev->bg_scan_update)); [ 743.442951][ T7619] [ 743.442951][ T7619] *** DEADLOCK *** [ 743.442951][ T7619] [ 743.451115][ T7619] 1 lock held by syz.1.16472/7619: [ 743.456242][ T7619] #0: ffffffff8d6c51a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x18b/0x560 [ 743.466393][ T7619] [ 743.466393][ T7619] stack backtrace: [ 743.472298][ T7619] CPU: 1 PID: 7619 Comm: syz.1.16472 Not tainted syzkaller #0 [ 743.479776][ T7619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 743.489847][ T7619] Call Trace: [ 743.493155][ T7619] [ 743.496085][ T7619] dump_stack_lvl+0x188/0x250 [ 743.500784][ T7619] ? load_image+0x400/0x400 [ 743.505292][ T7619] ? show_regs_print_info+0x20/0x20 [ 743.510519][ T7619] ? print_circular_bug+0x12b/0x1a0 [ 743.515737][ T7619] check_noncircular+0x296/0x330 [ 743.520795][ T7619] ? look_up_lock_class+0x71/0x110 [ 743.525943][ T7619] ? add_chain_block+0x940/0x940 [ 743.530900][ T7619] ? lockdep_lock+0xf1/0x1f0 [ 743.535537][ T7619] ? __lock_acquire+0x12e8/0x7d10 [ 743.540576][ T7619] ? mark_lock+0x94/0x320 [ 743.544947][ T7619] ? _find_first_zero_bit+0xce/0xf0 [ 743.550197][ T7619] __lock_acquire+0x2c42/0x7d10 [ 743.555077][ T7619] ? verify_lock_unused+0x140/0x140 [ 743.560298][ T7619] ? verify_lock_unused+0x140/0x140 [ 743.565510][ T7619] ? mark_lock+0x94/0x320 [ 743.569886][ T7619] lock_acquire+0x19e/0x400 [ 743.574423][ T7619] ? __flush_work+0xfa/0x210 [ 743.579011][ T7619] ? __lock_acquire+0x7d10/0x7d10 [ 743.584042][ T7619] ? read_lock_is_recursive+0x10/0x10 [ 743.589424][ T7619] ? start_flush_work+0x776/0x820 [ 743.594480][ T7619] __flush_work+0x116/0x210 [ 743.599026][ T7619] ? __flush_work+0xfa/0x210 [ 743.603670][ T7619] ? flush_work+0x20/0x20 [ 743.608045][ T7619] ? try_to_grab_pending+0xfa/0x7f0 [ 743.613250][ T7619] ? mark_lock+0x94/0x320 [ 743.617592][ T7619] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 743.623571][ T7619] ? lock_chain_count+0x20/0x20 [ 743.628425][ T7619] ? mark_lock+0x94/0x320 [ 743.632782][ T7619] ? __cancel_work_timer+0x36a/0x560 [ 743.638178][ T7619] __cancel_work_timer+0x3f4/0x560 [ 743.643294][ T7619] ? cancel_work_sync+0x20/0x20 [ 743.648141][ T7619] ? __cancel_work+0x1f9/0x2e0 [ 743.652902][ T7619] ? lockdep_hardirqs_on+0x94/0x140 [ 743.658101][ T7619] ? __cancel_work+0x27b/0x2e0 [ 743.662871][ T7619] ? cancel_work+0x20/0x20 [ 743.667301][ T7619] ? lock_chain_count+0x20/0x20 [ 743.672208][ T7619] hci_request_cancel_all+0xcc/0x300 [ 743.677496][ T7619] hci_dev_do_close+0x4e/0x1030 [ 743.682346][ T7619] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 743.688278][ T7619] ? _raw_spin_unlock+0x40/0x40 [ 743.693156][ T7619] hci_rfkill_set_block+0x10a/0x190 [ 743.698362][ T7619] ? rcu_lock_release+0x20/0x20 [ 743.703242][ T7619] rfkill_set_block+0x1c6/0x420 [ 743.708097][ T7619] rfkill_fop_write+0x452/0x560 [ 743.713110][ T7619] ? rfkill_fop_read+0x4d0/0x4d0 [ 743.718057][ T7619] ? common_file_perm+0x110/0x1c0 [ 743.723104][ T7619] ? fsnotify_perm+0x5d/0x560 [ 743.727829][ T7619] ? security_file_permission+0x75/0xa0 [ 743.733409][ T7619] ? rfkill_fop_read+0x4d0/0x4d0 [ 743.738382][ T7619] vfs_write+0x30b/0xd60 [ 743.742658][ T7619] ? file_end_write+0x250/0x250 [ 743.747554][ T7619] ? __fget_files+0x40f/0x480 [ 743.752259][ T7619] ? __fdget_pos+0x1e2/0x370 [ 743.756992][ T7619] ? ksys_write+0x71/0x260 [ 743.761460][ T7619] ksys_write+0x152/0x260 [ 743.765835][ T7619] ? __ia32_sys_read+0x80/0x80 [ 743.770644][ T7619] ? lockdep_hardirqs_on+0x94/0x140 [ 743.775896][ T7619] do_syscall_64+0x4c/0xa0 [ 743.780352][ T7619] ? clear_bhb_loop+0x30/0x80 [ 743.785056][ T7619] ? clear_bhb_loop+0x30/0x80 [ 743.789765][ T7619] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 743.795678][ T7619] RIP: 0033:0x7f1ad3e9c819 [ 743.800143][ T7619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 743.819775][ T7619] RSP: 002b:00007f1ad20f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 743.828222][ T7619] RAX: ffffffffffffffda RBX: 00007f1ad4115fa0 RCX: 00007f1ad3e9c819 [ 743.836228][ T7619] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 743.844233][ T7619] RBP: 00007f1ad3f32c91 R08: 0000000000000000 R09: 0000000000000000 [ 743.852230][ T7619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 743.860207][ T7619] R13: 00007f1ad4116038 R14: 00007f1ad4115fa0 R15: 00007ffc85fc34a8 [ 743.868202][ T7619] [ 743.925707][ T4929] usb 5-1: config 239 has an invalid descriptor of length 0, skipping remainder of the config [ 743.938879][ T4929] usb 5-1: config 239 has 1 interface, different from the descriptor's value: 3 [ 743.974804][T11216] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 743.983925][T11216] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.996548][T11216] usb 1-1: config 0 descriptor?? [ 744.134674][ T4929] usb 5-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice= 0.40 [ 744.143868][ T4929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.153257][ T4929] usb 5-1: Product: syz [ 744.157497][ T4929] usb 5-1: Manufacturer: syz [ 744.162133][ T4929] usb 5-1: SerialNumber: syz [ 744.474667][T11216] usb 1-1: Cannot set MAC address [ 744.479977][T11216] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71 [ 744.491224][T11216] usb 1-1: USB disconnect, device number 66 [ 744.524860][ T4929] usb 5-1: unit 2 not found! [ 744.569041][ T4929] usb 5-1: USB disconnect, device number 68 [ 744.579048][ T4709] udevd[4709]: setting owner of /dev/bus/usb/005/068 to uid=0, gid=0 failed: No such file or directory [ 744.775370][ T8034] udevd[8034]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:239.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 747.206442][ T1422] ieee802154 phy1 wpan1: encryption failed: -22