last executing test programs: 4.607457932s ago: executing program 0 (id=6578): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x89}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x125}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x4000) 4.443815265s ago: executing program 0 (id=6581): sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ef960b40b1134200035101020301090224000100000000090493000217c55a00090502030002"], 0x0) 3.458211169s ago: executing program 4 (id=6599): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=ANY=[@ANYBLOB="400100001a000100feffffff00010000ac1e0501000000000000000000000000fe880000000000000000000000000101000107174e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000004d42b000000fc010000000000000000000000000001fe0000000000000092010000000000100800000000000000fcffffffffffffff2c330000000000000500000000000000fcffffffffffffff0400000000504200ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffff9030000000000007e00000000000000020001002000000000000000480003"], 0x140}}, 0x20000844) 3.219766844s ago: executing program 4 (id=6605): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc008001900030002000600060000800000005883c64d251e638294ff0051f60a84c9f4d4938037e7000000000000000000d1c566a000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x98010) 3.010619459s ago: executing program 4 (id=6609): r0 = syz_open_dev$video(&(0x7f0000000300), 0x9, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0xd, @pix_mp={0x9, 0x40000055, 0x64737664, 0x6, 0x8, [{0x9, 0x4000}, {0x9, 0x7fffffff}, {0x7f4d6e18, 0x2}, {0x0, 0x1}, {0x8000, 0x200}, {0x4000008}, {0x865e, 0x1f}, {0x7311, 0x7fff}], 0xc3, 0x4, 0x8, 0xe87b598fe6909e43, 0x5}}) 2.814283514s ago: executing program 4 (id=6612): futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x40020002, 0xa, 0x10000000, 0x0, 0x0, 0x1) 2.442571852s ago: executing program 3 (id=6621): r0 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r0, &(0x7f0000001ac0)=[{{&(0x7f0000000000)={0x2, 0x4e27, @local}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_ttl={{0x14, 0x0, 0x34, 0x801}}], 0x18}}], 0x1, 0x200448c0) 2.284763266s ago: executing program 3 (id=6623): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x437, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40483}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_IGNORE_DF={0x5}, @IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x11}, 0x0) 2.089245331s ago: executing program 0 (id=6627): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0xdfefbfff, 0x1000, 0x5, 0x1}, 0x20) 2.034941392s ago: executing program 3 (id=6628): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/cgroup.procs\x00', 0x0, 0x82) open_by_handle_at(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="10000000020000000b"], 0x0) 1.928771174s ago: executing program 3 (id=6630): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000200)=""/82, 0x52, 0x2000000fc) 1.889012685s ago: executing program 4 (id=6631): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0xffffffffffffff9e}, './file1\x00'}) 1.775590398s ago: executing program 0 (id=6632): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@getpolicy={0x5c, 0x15, 0x1, 0x70bd2a, 0x25dfdbfe, {{@in=@loopback, @in=@loopback, 0x4e22, 0x0, 0x4e22, 0x101, 0x2, 0x80, 0xa0, 0x11}, 0x6e6bb0}, [@policy_type={0xa}]}, 0x5c}}, 0x80c4) 1.7027318s ago: executing program 4 (id=6634): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000a4d2ff40f3054002241b0102030109021b00010000000009040000014eaf32000905", @ANYRES16=r0], 0x0) 1.70263517s ago: executing program 3 (id=6635): r0 = syz_open_dev$vivid(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000300)={0x7, 0x5, 0x4, 0x40, 0x6, {}, {0x4, 0xc, 0x7, 0x8, 0x0, 0x0, "963253bf"}, 0x3, 0x4, {}, 0x2}) 1.615250722s ago: executing program 0 (id=6636): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4000, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"/2303], 0xff, 0x5e9e, &(0x7f000000bc00)="$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") quotactl$Q_QUOTAON(0xffffffff80000101, 0x0, 0x0, 0x0) 1.536356274s ago: executing program 3 (id=6638): bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000010c0)=ANY=[@ANYBLOB="12010102020000102505a1a440000102030109023b000101c71000090400400202060001052406000005240067530d240f0108000000b03c0d0001090582f507000105fa09050302ff"], &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 854.986589ms ago: executing program 1 (id=6644): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@private1={0xfc, 0x1, '\x00', 0x1}, @remote, @dev={0xfe, 0x80, '\x00', 0x41}, 0x0, 0x0, 0x7, 0x0, 0x0, 0xc3680027}) 850.49944ms ago: executing program 2 (id=6645): r0 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0xa, @pix_mp={0x3f2, 0x1000, 0x50323234, 0x1, 0x3, [{0x58, 0x8bc9}, {0xb, 0x10000}, {0x100, 0xef}, {0x6, 0x401}, {0x0, 0x6}, {0x3, 0x8}, {0x401, 0x2}, {0x0, 0x1ff}], 0x8, 0x7f, 0x3, 0x2}}) 695.277653ms ago: executing program 2 (id=6646): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x7}]}, 0x1c}}, 0x0) 695.103693ms ago: executing program 1 (id=6647): r0 = timerfd_create(0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, 0x0) 561.062327ms ago: executing program 2 (id=6648): r0 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, &(0x7f0000000040)) 490.396298ms ago: executing program 1 (id=6649): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x8942, &(0x7f00000014c0)={'ip6tnl0\x00', @ifru_names='vlan0\x00'}) 390.419491ms ago: executing program 2 (id=6650): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000000c0)={@dev}, 0x5) 347.832052ms ago: executing program 1 (id=6651): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000002c0)=ANY=[@ANYBLOB="68020000000501040000000000000000020000065402010003000000000000b0"], 0x268}, 0x1, 0x0, 0x0, 0x24004081}, 0x4004040) 219.123415ms ago: executing program 2 (id=6652): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, 0x0, 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRESHEX, @ANYBLOB="dcd5635f2e"], 0x48) 140.439077ms ago: executing program 1 (id=6653): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000400), 0xc0000, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, &(0x7f0000000480)) 48.867779ms ago: executing program 2 (id=6654): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x10, 0x3, "91abc12404cf378042f26c43"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x8c}}, 0x0) 8.97818ms ago: executing program 0 (id=6655): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r0, 0x84, 0x7d, &(0x7f0000001300)=""/4067, &(0x7f0000000000)=0xfe3) 0s ago: executing program 1 (id=6656): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x490, 0xffffffff, 0x2f0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x3c0, 0x3c0, 0x3c0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x33}, @loopback, [0xff000000, 0xffffff00, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffff00, 0xffffffff], 'veth0_to_hsr\x00', 'sit0\x00', {0xff}, {}, 0x2, 0x3, 0x4, 0x5}, 0x2f2, 0x1f8, 0x220, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'pim6reg0\x00', {0x80, 0xd80, 0x1d, 0x5, 0xfffffff4, 0xd, 0x60, 0xa0, 0xc0}, {0xfffffffffffffffb}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x80}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0x0, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'vlan0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x32, 0x79, 0x5, 0x44}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) kernel console output (not intermixed with test programs): has an invalid bInterval 0, changing to 7 [ 318.217811][ T4288] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 318.257631][ T4288] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 318.335224][ T4288] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 318.379010][T14333] bond0: option min_links: invalid value (18446744073709551615) [ 318.385001][ T4288] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.408432][T14333] bond0: option min_links: allowed values 0 - 2147483647 [ 318.448336][T14304] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 318.769629][T14346] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4604'. [ 318.855612][T14348] netlink: 'syz.4.4605': attribute type 1 has an invalid length. [ 318.895453][T14348] netlink: 'syz.4.4605': attribute type 3 has an invalid length. [ 318.939650][T14348] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4605'. [ 318.978645][T14348] NCSI netlink: No device for ifindex 2986344450 [ 319.009969][ T4288] usb 1-1: USB disconnect, device number 26 [ 319.017646][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 319.026053][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 319.053766][T14321] loop2: detected capacity change from 0 to 32768 [ 319.145203][T14321] BTRFS: device fsid afd29e67-b8c6-49b0-b0d7-0efab618e2f3 devid 1 transid 8 /dev/loop2 scanned by syz.2.4595 (14321) [ 319.228397][ T21] usb 4-1: USB disconnect, device number 33 [ 319.274044][T14321] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 319.317728][T14321] BTRFS info (device loop2): max_inline at 160 [ 319.324335][T14321] BTRFS info (device loop2): unrecognized rescue option 'isuperflags' [ 319.404753][T14321] BTRFS error (device loop2): unrecognized rescue value isuperflags [ 319.437871][ T8154] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 319.466096][T14321] BTRFS error (device loop2): open_ctree failed: -22 [ 319.497712][ T4176] BTRFS: device fsid afd29e67-b8c6-49b0-b0d7-0efab618e2f3 devid 1 transid 8 /dev/loop2 scanned by udevd (4176) [ 319.597898][ T4230] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 319.711135][ T26] audit: type=1400 audit(1788782775.768:19): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A21D01A0B978D2F2F262D2A83D1 pid=14372 comm="syz.3.4613" [ 319.757773][ T8154] usb 2-1: Using ep0 maxpacket: 16 [ 319.918154][ T8154] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.944124][T14383] comedi comedi1: comedi_parport: I/O port conflict (0x9,3) [ 319.952029][ T8154] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.017709][ T8154] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 320.096376][ T4230] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 320.106053][ T8154] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 320.126073][ T4230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.137650][ T8154] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.199412][ T8154] usb 2-1: config 0 descriptor?? [ 320.208052][ T4230] usb 5-1: config 0 descriptor?? [ 320.260468][ T8154] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input18 [ 320.287945][ T4230] cp210x 5-1:0.0: cp210x converter detected [ 320.341417][ T3542] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 320.418242][ T3542] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 320.442586][ T3542] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 320.462947][T14402] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4624'. [ 320.505453][ T3542] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 320.512071][T14404] netlink: 'syz.0.4626': attribute type 1 has an invalid length. [ 320.584180][T14404] netlink: 'syz.0.4626': attribute type 3 has an invalid length. [ 320.590922][ T4573] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 320.637612][T14404] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4626'. [ 320.656261][T14357] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 320.717995][ T4230] cp210x 5-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 320.735801][ T4230] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 320.736145][ T3542] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 320.803939][ T21] usb 2-1: USB disconnect, device number 28 [ 320.817739][ T4230] usb 5-1: cp210x converter now attached to ttyUSB0 [ 320.836213][ T3542] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 320.875254][ T4230] usb 5-1: USB disconnect, device number 29 [ 320.928801][ T4230] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 320.937114][ T4230] cp210x 5-1:0.0: device disconnected [ 321.305192][T14429] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 321.389937][T14436] Cannot find del_set index 4 as target [ 321.392123][T14435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4640'. [ 321.459055][T14435] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4640'. [ 321.681953][T14449] SET target dimension over the limit! [ 322.857931][ T21] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 323.338003][ T21] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 323.568031][ T21] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 323.594893][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.643802][ T21] usb 4-1: Product: syz [ 323.657634][ T21] usb 4-1: Manufacturer: syz [ 323.662374][ T21] usb 4-1: SerialNumber: syz [ 323.778062][T14495] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.785693][T14495] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.986690][ T21] snd-usb-6fire 4-1:1.0: unknown device firmware state received from device: [ 324.006554][ T21] eb aa 55 00 00 00 00 00 [ 324.028006][ T21] snd-usb-6fire: probe of 4-1:1.0 failed with error -5 [ 324.208563][ T21] usb 4-1: USB disconnect, device number 34 [ 324.969971][T14545] loop3: detected capacity change from 0 to 64 [ 324.979062][T14495] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.112500][T14495] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.188319][T14547] comedi comedi0: ni_at_a2150: I/O port conflict (0x7,28) [ 326.236007][T14495] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.256939][T14495] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.277117][T14495] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.297155][T14495] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.047700][T14571] netlink: 'syz.4.4707': attribute type 8 has an invalid length. [ 327.097624][T14571] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4707'. [ 327.108220][ T21] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 327.527851][ T9323] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 327.571357][ T21] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 327.601108][ T21] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 327.631603][ T21] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 327.688217][ T21] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 327.728819][ T21] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 327.757638][ T21] usb 1-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 327.821579][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.824412][T14591] netlink: 'syz.2.4717': attribute type 1 has an invalid length. [ 327.888243][T14559] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 327.901464][T14559] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 327.928480][T14559] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 327.977748][ T21] mos7720 1-1:1.0: Moschip 2 port adapter converter detected [ 328.148333][ T9323] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 328.157474][ T9323] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.197663][ T9323] usb 2-1: Product: syz [ 328.201880][ T9323] usb 2-1: Manufacturer: syz [ 328.206539][ T9323] usb 2-1: SerialNumber: syz [ 328.277997][ T9323] usb 2-1: config 0 descriptor?? [ 328.312364][T14574] loop3: detected capacity change from 0 to 32768 [ 328.330872][ T9323] ch341 2-1:0.0: ch341-uart converter detected [ 328.409293][ T21] usb 1-1: mos7720: usb_control_msg() failed: -71 [ 328.420572][T14581] loop4: detected capacity change from 0 to 32768 [ 328.438802][ T21] usb 1-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 328.492174][ T21] usb 1-1: Moschip 2 port adapter converter now attached to ttyUSB2 [ 328.545664][T14581] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.4712 (14581) [ 328.568766][ T21] usb 1-1: USB disconnect, device number 27 [ 328.578219][ C1] usb 1-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 328.587104][ T9323] usb 2-1: failed to receive control message: -71 [ 328.595225][ T9323] ch341-uart: probe of ttyUSB0 failed with error -71 [ 328.624390][ T21] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 328.666502][ T9323] usb 2-1: USB disconnect, device number 29 [ 328.693759][ T9323] ch341 2-1:0.0: device disconnected [ 328.718109][ T21] moschip7720 ttyUSB2: Moschip 2 port adapter converter now disconnected from ttyUSB2 [ 328.760363][ T21] mos7720 1-1:1.0: device disconnected [ 328.837555][T14581] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 328.866945][T14581] BTRFS info (device loop4): using free space tree [ 328.907528][T14581] BTRFS info (device loop4): has skinny extents [ 329.194064][T14628] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 329.217797][T14625] binder: 14624:14625 ioctl c018620c 2000000025c0 returned -22 [ 329.296165][T14581] BTRFS info (device loop4): enabling ssd optimizations [ 329.447034][T14581] BTRFS error (device loop4): unrecognized mount option 'comprN0Iž.˛ess=zstd:15' [ 329.770023][T14644] overlayfs: missing 'workdir' [ 330.071774][ T4176] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop4 scanned by udevd (4176) [ 330.187108][T14652] loop3: detected capacity change from 0 to 1024 [ 330.241082][T14652] EXT4-fs (loop3): Ignoring removed bh option [ 330.327655][T14652] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 330.327655][T14652] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 330.327655][T14652] [ 330.590919][T14652] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,noload,barrier=0x0000000000000804,nolazytime,abort,lazytime,grpquota,stripe=0x0000000000000005,bh,init_itable,nouser_xattr,,errors=continue. Quota mode: writeback. [ 330.646842][T14663] device veth1_vlan left promiscuous mode [ 331.013662][ T4288] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 331.090160][T14676] loop1: detected capacity change from 0 to 4096 [ 331.229627][T14676] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 331.292200][ T4227] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 331.371143][T14684] loop3: detected capacity change from 0 to 4096 [ 331.474180][ T4288] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 331.484362][T14684] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 331.517879][ T4288] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 331.577648][ T4288] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 331.603171][ T4288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.637858][ T4184] ntfs3: loop1: ntfs_evict_inode r=3 failed, -22. [ 331.656732][ T4184] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 331.691860][ T4184] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 331.762380][T14697] netlink: 'syz.0.4754': attribute type 10 has an invalid length. [ 331.893645][ T4288] usb 3-1: USB disconnect, device number 24 [ 331.901642][T14697] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4754'. [ 331.948001][ T4227] usb 5-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.10 [ 331.966605][ T4227] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.005222][ T4227] usb 5-1: Product: syz [ 332.025354][ T4227] usb 5-1: Manufacturer: syz [ 332.047824][ T4227] usb 5-1: SerialNumber: syz [ 332.112824][T14706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4757'. [ 332.218192][T14706] netlink: 312 bytes leftover after parsing attributes in process `syz.1.4757'. [ 332.381521][ T4227] go7007: probe of 5-1:6.0 failed with error -12 [ 332.430179][ T4227] usb 5-1: USB disconnect, device number 30 [ 332.437767][T14716] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4759'. [ 332.460749][T14716] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4759'. [ 332.958112][ T4288] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 333.413438][ T4288] usb 2-1: unable to get BOS descriptor or descriptor too short [ 333.467901][ T4288] usb 2-1: not running at top speed; connect to a high speed hub [ 333.574628][ T4288] usb 2-1: config 17 has an invalid interface number: 8 but max is 1 [ 333.597715][ T4288] usb 2-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 333.617637][ T4288] usb 2-1: config 17 has no interface number 0 [ 333.654291][ T4288] usb 2-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid maxpacket 64768, setting to 64 [ 333.685956][ T4288] usb 2-1: config 17 interface 8 has no altsetting 0 [ 333.878918][ T4288] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 333.926689][ T4288] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.960307][ T4288] usb 2-1: Product: syz [ 333.964526][ T4288] usb 2-1: Manufacturer: syz [ 333.981232][T14792] netlink: 264 bytes leftover after parsing attributes in process `syz.4.4794'. [ 333.997747][T14789] netlink: 22 bytes leftover after parsing attributes in process `syz.3.4793'. [ 333.997809][ T4288] usb 2-1: SerialNumber: syz [ 334.022047][T14792] netlink: 264 bytes leftover after parsing attributes in process `syz.4.4794'. [ 334.052275][T14792] netlink: 175 bytes leftover after parsing attributes in process `syz.4.4794'. [ 334.238080][T14799] netlink: 9412 bytes leftover after parsing attributes in process `syz.4.4796'. [ 334.340259][ T5214] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 334.370273][T14804] netlink: 'syz.3.4799': attribute type 10 has an invalid length. [ 334.423230][ T4288] usb 2-1: selecting invalid altsetting 0 [ 334.431850][T14804] team0: Device nlmon0 is of different type [ 334.490791][ T4288] usb 2-1: USB disconnect, device number 30 [ 334.640497][ T5214] usb 3-1: Using ep0 maxpacket: 32 [ 334.800438][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 334.826021][ T26] audit: type=1400 audit(1788782790.878:20): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=14817 comm="syz.4.4806" [ 334.842457][ T5214] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 334.871223][ T5214] usb 3-1: config 0 has no interface number 0 [ 335.028948][ T5214] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 335.061854][ T5214] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.108317][ T5214] usb 3-1: Product: syz [ 335.130329][ T5214] usb 3-1: Manufacturer: syz [ 335.139731][T14820] device veth1_macvtap left promiscuous mode [ 335.145935][T14820] device macsec0 entered promiscuous mode [ 335.149197][ T5214] usb 3-1: SerialNumber: syz [ 335.180216][ T5214] usb 3-1: config 0 descriptor?? [ 335.246358][ T5214] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 335.294689][ T5214] usb 3-1: selecting invalid altsetting 1 [ 335.327972][ T5214] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 335.377906][ T5214] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 335.439857][ T5214] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 335.507712][ T5214] usb 3-1: media controller created [ 335.582614][ T5214] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 335.771124][T14851] netlink: 'syz.4.4822': attribute type 4 has an invalid length. [ 335.997931][ T5214] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 336.046659][T14863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4828'. [ 336.151442][ T5214] usb 3-1: USB disconnect, device number 25 [ 336.177633][T14869] loop3: detected capacity change from 0 to 64 [ 336.294485][T14875] netlink: 'syz.4.4832': attribute type 13 has an invalid length. [ 336.372021][T14872] loop1: detected capacity change from 0 to 4096 [ 336.411323][T14869] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 336.498348][T14872] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 337.442619][T14934] loop4: detected capacity change from 0 to 256 [ 337.531647][T14938] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4864'. [ 337.693694][T14946] delete_channel: no stack [ 338.431463][T14990] loop4: detected capacity change from 0 to 8 [ 338.460337][T14991] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (2) [ 338.605878][ T26] audit: type=1326 audit(1788782794.658:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15000 comm="syz.3.4896" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83542a2159 code=0x7ffc0000 [ 338.737650][ T26] audit: type=1326 audit(1788782794.678:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15000 comm="syz.3.4896" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f83542a2159 code=0x7ffc0000 [ 338.761951][T14997] loop2: detected capacity change from 0 to 4096 [ 338.829999][T14997] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 338.849342][ T26] audit: type=1326 audit(1788782794.678:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15000 comm="syz.3.4896" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83542a2159 code=0x7ffc0000 [ 338.975181][ T26] audit: type=1326 audit(1788782794.678:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15000 comm="syz.3.4896" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83542a2159 code=0x7ffc0000 [ 339.101061][ T5917] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 339.237689][ T9324] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 339.405331][ T5917] usb 2-1: Using ep0 maxpacket: 16 [ 339.421712][T15033] netlink: 288 bytes leftover after parsing attributes in process `syz.4.4910'. [ 339.443967][T15034] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 339.481599][T15034] overlayfs: bad mount option "redirect_dir=nofollow\" [ 339.558028][ T5917] usb 2-1: config index 0 descriptor too short (expected 65, got 36) [ 339.587144][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 339.627973][ T5917] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 339.651360][ T5214] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 339.677637][ T5917] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 339.709723][ T9324] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 339.719640][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.749905][ T9324] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 339.771140][ T5917] usb 2-1: config 0 descriptor?? [ 339.790347][ T9324] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.842564][ T5917] pxrc 2-1:0.0: Could not find endpoint [ 339.851776][ T5917] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 339.913011][ T4288] Bluetooth: hci4: command 0x0406 tx timeout [ 339.919347][ T5214] usb 3-1: Using ep0 maxpacket: 32 [ 340.047442][ T5917] usb 2-1: USB disconnect, device number 31 [ 340.072392][ T5214] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 340.133159][ T5214] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.172997][ T5214] usb 3-1: config 0 descriptor?? [ 340.295147][ T5214] gspca_main: sq930x-2.14.0 probing 041e:403c [ 340.347101][ T9324] qmi_wwan: probe of 1-1:1.0 failed with error -22 [ 340.418497][ T9324] usb 1-1: USB disconnect, device number 28 [ 340.493640][T15054] comedi comedi0: 8255: I/O port conflict (0x5,4) [ 340.528097][T15054] comedi comedi0: 8255: I/O port conflict (0x4,4) [ 340.604844][T15054] comedi comedi0: 8255: I/O port conflict (0x6,4) [ 340.639185][T15054] comedi comedi0: 8255: I/O port conflict (0x800afa3,4) [ 340.681578][T15054] comedi comedi0: 8255: I/O port conflict (0x7f,4) [ 340.707860][ T5214] gspca_sq930x: ucbus_write failed -71 [ 340.713535][ T5214] sq930x: probe of 3-1:0.0 failed with error -71 [ 340.740176][T15054] comedi comedi0: 8255: I/O port conflict (0x8,4) [ 340.784923][T15054] comedi comedi0: 8255: I/O port conflict (0x2,4) [ 340.787654][ T5214] usb 3-1: USB disconnect, device number 26 [ 340.833452][T15054] comedi comedi0: 8255: I/O port conflict (0x9,4) [ 340.904370][T15054] comedi comedi0: 8255: I/O port conflict (0x9,4) [ 341.199209][ T4288] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 341.353913][T15083] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 341.496070][ T4288] usb 4-1: Using ep0 maxpacket: 16 [ 341.544064][T15090] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4938'. [ 341.647932][ T4288] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 341.667201][ T4288] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 341.719186][T15099] xt_TCPMSS: Only works on TCP SYN packets [ 341.725602][ T4288] usb 4-1: config 0 has no interface number 0 [ 341.737746][T15100] usb usb8: usbfs: process 15100 (syz.2.4943) did not claim interface 32 before use [ 341.952478][ T4288] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 341.974045][ T4288] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.007716][ T4288] usb 4-1: Product: syz [ 342.011930][ T4288] usb 4-1: Manufacturer: syz [ 342.047622][ T4288] usb 4-1: SerialNumber: syz [ 342.067712][ T4288] usb 4-1: config 0 descriptor?? [ 342.128088][T15117] xt_socket: unknown flags 0x48 [ 342.165088][ T9324] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 342.211803][T15120] loop2: detected capacity change from 0 to 256 [ 342.377147][ T8154] usb 4-1: USB disconnect, device number 35 [ 342.469899][T15120] FAT-fs (loop2): Directory bread(block 64) failed [ 342.474366][ T9324] usb 5-1: Using ep0 maxpacket: 32 [ 342.492210][T15120] FAT-fs (loop2): Directory bread(block 65) failed [ 342.517750][T15120] FAT-fs (loop2): Directory bread(block 66) failed [ 342.529142][T15120] FAT-fs (loop2): Directory bread(block 67) failed [ 342.567938][T15120] FAT-fs (loop2): Directory bread(block 68) failed [ 342.597742][T15120] FAT-fs (loop2): Directory bread(block 69) failed [ 342.598342][T15132] loop1: detected capacity change from 0 to 512 [ 342.604402][T15120] FAT-fs (loop2): Directory bread(block 70) failed [ 342.641899][T15120] FAT-fs (loop2): Directory bread(block 71) failed [ 342.657644][T15132] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 342.663102][T15120] FAT-fs (loop2): Directory bread(block 72) failed [ 342.688356][ T9324] usb 5-1: config 2 has an invalid interface number: 222 but max is 0 [ 342.696663][ T9324] usb 5-1: config 2 has no interface number 0 [ 342.742128][T15120] FAT-fs (loop2): Directory bread(block 73) failed [ 342.752217][ T9324] usb 5-1: config 2 interface 222 has no altsetting 0 [ 342.952493][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 343.050280][T15144] netlink: 'syz.3.4964': attribute type 3 has an invalid length. [ 343.068254][ T9324] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=af.17 [ 343.126098][ T9324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.186872][ T9324] usb 5-1: Product: syz [ 343.199854][ T9324] usb 5-1: Manufacturer: syz [ 343.204516][ T9324] usb 5-1: SerialNumber: syz [ 343.522545][T15168] loop2: detected capacity change from 0 to 164 [ 343.618886][ T9324] usb 5-1: USB disconnect, device number 31 [ 343.659926][T15168] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 343.789101][ T4288] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 344.100251][ T4288] usb 2-1: Using ep0 maxpacket: 32 [ 344.148331][ T8154] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 344.228113][ T4288] usb 2-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 344.306051][T15194] tmpfs: Bad value for 'mpol' [ 344.427782][ T8154] usb 1-1: Using ep0 maxpacket: 32 [ 344.444038][ T4288] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 344.467638][ T4288] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.513556][ T4288] usb 2-1: Product: syz [ 344.513776][T15205] loop4: detected capacity change from 0 to 8 [ 344.537630][ T4288] usb 2-1: Manufacturer: syz [ 344.558169][ T8154] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 344.566348][ T8154] usb 1-1: config 0 has no interface number 0 [ 344.576464][ T4288] usb 2-1: SerialNumber: syz [ 344.614452][ T4288] usb 2-1: config 0 descriptor?? [ 344.679044][ T4288] usb 2-1: bad CDC descriptors [ 344.684800][ T4288] usb 2-1: unsupported MDLM descriptors [ 344.733795][T15205] SQUASHFS error: xz decompression failed, data probably corrupt [ 344.762128][T15205] SQUASHFS error: Failed to read block 0x108: -5 [ 344.797960][ T8154] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 344.807828][T15205] SQUASHFS error: Unable to read metadata cache entry [106] [ 344.815153][T15205] SQUASHFS error: Unable to read inode 0x11f [ 344.828907][ T8154] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.867359][ T8154] usb 1-1: Product: syz [ 344.876699][ T8154] usb 1-1: Manufacturer: syz [ 344.914464][ T8154] usb 1-1: SerialNumber: syz [ 344.931081][T15219] loop2: detected capacity change from 0 to 256 [ 344.931821][ T21] usb 2-1: USB disconnect, device number 32 [ 344.941689][ T8154] usb 1-1: config 0 descriptor?? [ 345.042884][ T8154] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 345.075941][ T8154] usb 1-1: selecting invalid altsetting 1 [ 345.113012][ T8154] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 345.126654][T15225] device ip6gretap2 entered promiscuous mode [ 345.154519][ T8154] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 345.225906][ T8154] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 345.265284][ T8154] usb 1-1: media controller created [ 345.332332][ T8154] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 345.359670][T15232] loop3: detected capacity change from 0 to 512 [ 345.544530][T15232] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.4997: bg 0: block 5: invalid block bitmap [ 345.644094][T15232] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 345.691356][T15232] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.4997: invalid indirect mapped block 3 (level 2) [ 345.728537][ T8154] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 345.800347][T15247] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5001'. [ 345.820469][T15232] EXT4-fs (loop3): 1 orphan inode deleted [ 345.830449][T15232] EXT4-fs (loop3): 1 truncate cleaned up [ 345.836167][T15232] EXT4-fs (loop3): mounted filesystem without journal. Opts: commit=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 345.891515][ T8154] usb 1-1: USB disconnect, device number 29 [ 345.959985][T15252] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5003'. [ 346.053673][T15252] netlink: 88 bytes leftover after parsing attributes in process `syz.1.5003'. [ 346.311521][T15263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5010'. [ 346.322311][T15265] loop1: detected capacity change from 0 to 16 [ 346.429494][T15265] erofs: (device loop1): mounted with root inode @ nid 36. [ 346.494710][T15265] attempt to access beyond end of device [ 346.494710][T15265] loop1: rw=524288, want=1072, limit=16 [ 346.549644][ T4191] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -41 in[61, 4035] out[9000] [ 346.578967][T15265] erofs: (device loop1): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 346.661724][ T21] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 346.706549][T15265] attempt to access beyond end of device [ 346.706549][T15265] loop1: rw=524288, want=56, limit=16 [ 346.758912][T15274] loop2: detected capacity change from 0 to 8192 [ 346.768478][T15265] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -41 in[61, 4035] out[8192] [ 346.839932][ T26] audit: type=1800 audit(1788782802.898:25): pid=15265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5009" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 346.927779][T15282] printk: syz.4.5018 (15282): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 346.939587][T15274] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 346.987125][T15274] REISERFS (device loop2): using ordered data mode [ 347.037715][T15274] reiserfs: using flush barriers [ 347.083438][T15274] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 347.187640][ T21] usb 4-1: config 0 has an invalid interface number: 168 but max is 0 [ 347.191110][T15274] REISERFS (device loop2): checking transaction log (loop2) [ 347.196368][ T21] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 347.196396][ T21] usb 4-1: config 0 has no interface number 0 [ 347.196439][ T21] usb 4-1: config 0 interface 168 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 347.324593][T15274] REISERFS (device loop2): Using r5 hash to sort names [ 347.337635][ T21] usb 4-1: config 0 interface 168 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 347.375704][ T21] usb 4-1: config 0 interface 168 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 347.430203][ T21] usb 4-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=48.98 [ 347.460224][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.506802][ T21] usb 4-1: config 0 descriptor?? [ 347.570251][ T21] HFC-S_USB: probe of 4-1:0.168 failed with error -5 [ 347.863187][T15305] loop1: detected capacity change from 0 to 256 [ 347.872940][ T5917] usb 4-1: USB disconnect, device number 36 [ 347.937301][T15302] loop4: detected capacity change from 0 to 2048 [ 348.064099][T15309] netlink: 'syz.2.5031': attribute type 1 has an invalid length. [ 348.130944][T15302] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 348.612309][T15330] sctp: [Deprecated]: syz.0.5041 (pid 15330) Use of int in max_burst socket option deprecated. [ 348.612309][T15330] Use struct sctp_assoc_value instead [ 348.984491][T15349] loop3: detected capacity change from 0 to 164 [ 349.062495][T15351] netlink: 'syz.2.5052': attribute type 1 has an invalid length. [ 349.110867][T15351] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5052'. [ 349.220867][T15349] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 349.318994][ T150] block nbd4: Attempted send on invalid socket [ 349.325623][ T150] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 349.337352][T15359] XFS (nbd4): SB validate failed with error -5. [ 349.509018][ T5214] Bluetooth: hci0: command 0x080f tx timeout [ 349.648451][T15370] nvme nvme0: rdma_resolve_addr failed (-19). [ 349.715066][T15380] xt_hashlimit: max too large, truncated to 1048576 [ 349.788228][T15380] Timeout policy `syz1' can only be used by L3 protocol number 25944 [ 350.030898][T15393] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5069'. [ 350.102518][T15395] loop1: detected capacity change from 0 to 64 [ 350.103644][T15393] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5069'. [ 350.433001][T15408] Zero length message leads to an empty skb [ 350.548203][T15415] dlm: no locking on control device [ 350.593124][T15417] loop2: detected capacity change from 0 to 512 [ 350.597208][T15419] loop3: detected capacity change from 0 to 64 [ 350.710310][T15419] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 350.815357][T15417] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.5082: inode #1: comm syz.2.5082: iget: illegal inode # [ 350.867952][T15417] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.5082: error while reading EA inode 1 err=-117 [ 350.917821][T15417] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2812: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 350.929120][T15429] loop4: detected capacity change from 0 to 1024 [ 350.954220][T15417] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.5082: inode #1: comm syz.2.5082: iget: illegal inode # [ 351.027677][T15417] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.5082: error while reading EA inode 1 err=-117 [ 351.080017][T15417] EXT4-fs (loop2): 1 orphan inode deleted [ 351.096536][T15417] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,norecovery,noinit_itable,init_itable=0x0000000000000001,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,errors=continue,dioread_lock,noblock_validity,noquota,,errors=continue. Quota mode: none. [ 351.136837][T15439] loop1: detected capacity change from 0 to 256 [ 351.160734][T15438] netlink: 'syz.3.5090': attribute type 10 has an invalid length. [ 351.162478][T15429] hfsplus: keylen 65060 too large [ 351.232267][T15438] team0: Port device bridge0 added [ 351.237197][T15429] hfsplus: keylen 65060 too large [ 351.296131][T15417] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz.2.5082: deleted inode referenced: 15 [ 351.819683][T15464] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5104'. [ 352.011146][T15472] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5109'. [ 352.141452][T15484] loop4: detected capacity change from 0 to 64 [ 352.373499][T15493] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.373794][T15490] loop2: detected capacity change from 0 to 2048 [ 352.478160][T15490] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 352.820639][T15508] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 353.039370][T15518] rock: directory entry would overflow storage [ 353.046078][T15518] rock: sig=0x4f50, size=4, remaining=3 [ 353.084654][T15530] kAFS: unable to lookup cell '@G|' [ 353.097332][T15518] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 353.237992][T15537] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5140'. [ 353.402900][T15538] set_capacity_and_notify: 1 callbacks suppressed [ 353.402943][T15538] loop2: detected capacity change from 0 to 4096 [ 353.665124][T15538] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 353.698389][ T26] audit: type=1326 audit(1788782809.758:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15556 comm="syz.3.5150" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f83542a2159 code=0x0 [ 353.863260][ T5214] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 354.198387][ T5214] usb 5-1: Using ep0 maxpacket: 16 [ 354.251797][T15572] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 354.413931][T15576] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 354.506414][ T5214] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 354.537633][ T5214] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.583969][ T5214] usb 5-1: Product: syz [ 354.606972][ T5214] usb 5-1: Manufacturer: syz [ 354.638323][ T5214] usb 5-1: SerialNumber: syz [ 354.704895][ T5214] usb 5-1: config 0 descriptor?? [ 354.837860][ T5917] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 355.046024][ T5214] speedtch 5-1:0.0: speedtch_bind: data interface not found! [ 355.067707][ T5214] speedtch 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 355.186187][ T5917] usb 2-1: Using ep0 maxpacket: 8 [ 355.301168][ T5214] usb 5-1: USB disconnect, device number 32 [ 355.331467][ T5917] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 355.380847][ T5917] usb 2-1: config 0 interface 0 has no altsetting 0 [ 355.681882][ T5917] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 355.681914][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.681935][ T5917] usb 2-1: Product: syz [ 355.681950][ T5917] usb 2-1: Manufacturer: syz [ 355.681966][ T5917] usb 2-1: SerialNumber: syz [ 355.683814][ T5917] usb 2-1: config 0 descriptor?? [ 355.785275][ T5917] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 356.006988][ T5917] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 356.008571][ T5917] snd_usb_toneport: probe of 2-1:0.0 failed with error -22 [ 356.213243][ T5917] usb 2-1: USB disconnect, device number 33 [ 356.718121][ T9324] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 356.831093][T15653] loop0: detected capacity change from 0 to 64 [ 357.002078][ T9324] usb 5-1: Using ep0 maxpacket: 8 [ 357.031613][T15653] Trying to free block not in datazone [ 357.034019][T15653] minix_free_block (loop0:21): bit already cleared [ 357.098340][T15661] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5198'. [ 357.219815][ T9324] usb 5-1: unable to get BOS descriptor or descriptor too short [ 357.308020][ T9324] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 174, changing to 7 [ 357.399033][T15669] loop1: detected capacity change from 0 to 256 [ 357.607066][ T9324] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0078, bcdDevice= 0.40 [ 357.640693][ T9324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.696365][ T9324] usb 5-1: Product: syz [ 357.717625][ T9324] usb 5-1: Manufacturer: syz [ 357.762904][ T9324] usb 5-1: SerialNumber: syz [ 358.082385][T15702] loop1: detected capacity change from 0 to 512 [ 358.268195][ T9324] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 358.305969][T15708] netlink: 'syz.3.5222': attribute type 1 has an invalid length. [ 358.313381][ T9324] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 358.378093][ T9324] usb 5-1: unit 254 not found! [ 358.491271][ T9324] usb 5-1: USB disconnect, device number 33 [ 358.546843][T15716] (syz.1.5225,15716,0):ocfs2_fill_super:991 ERROR: superblock probe failed! [ 358.593687][T15716] (syz.1.5225,15716,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 358.719685][T15724] netlink: 'syz.0.5229': attribute type 2 has an invalid length. [ 358.818273][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 358.976138][T15741] loop2: detected capacity change from 0 to 128 [ 359.206809][T15750] device xfrm0 entered promiscuous mode [ 359.227691][ T9324] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 359.375829][T15758] netlink: 'syz.0.5246': attribute type 21 has an invalid length. [ 359.405938][T15758] netlink: 100 bytes leftover after parsing attributes in process `syz.0.5246'. [ 359.512420][T15762] loop1: detected capacity change from 0 to 8 [ 359.560957][ T9324] usb 5-1: Using ep0 maxpacket: 8 [ 359.577667][ T4288] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 359.706577][T15762] SQUASHFS error: Unable to read inode 0xe3 [ 359.725891][ T9324] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 359.763082][T15769] xt_hashlimit: size too large, truncated to 1048576 [ 359.765262][ T9324] usb 5-1: config 179 has no interface number 0 [ 359.827633][ T9324] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 359.827808][ T4288] usb 4-1: Using ep0 maxpacket: 8 [ 359.877635][ T9324] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 359.929715][ T9324] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 359.977777][ T9324] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 360.010878][ T4288] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 360.018618][ T9324] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 360.030582][ T4288] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.065909][ T9324] usb 5-1: config 179 interface 65 has no altsetting 0 [ 360.086098][ T9324] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 360.114266][ T9324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.130745][ T4288] pvrusb2: Hardware description: Terratec Grabster AV400 [ 360.167636][ T4288] pvrusb2: ********** [ 360.181501][ T4288] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 360.217730][ T4288] pvrusb2: Important functionality might not be entirely working. [ 360.246313][ T4288] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 360.260525][ T9324] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input21 [ 360.308128][ T4288] pvrusb2: ********** [ 360.349763][ T2424] pvrusb2: Invalid write control endpoint [ 360.385449][ T4288] usb 4-1: USB disconnect, device number 37 [ 360.498314][ T8154] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 360.609768][T15788] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 360.654548][ T21] usb 5-1: USB disconnect, device number 34 [ 360.685952][ T2424] pvrusb2: Invalid write control endpoint [ 360.689068][ T21] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 360.722192][ T2424] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 360.770823][ T2424] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 360.778943][ T8154] usb 1-1: Using ep0 maxpacket: 8 [ 360.798800][ T2424] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 360.837763][ T2424] pvrusb2: Device being rendered inoperable [ 360.889297][ T2424] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 360.904187][ T8154] usb 1-1: config 0 has an invalid interface number: 6 but max is 2 [ 360.917934][ T8154] usb 1-1: config 0 has an invalid interface number: 176 but max is 2 [ 360.927857][ T2424] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 360.957654][ T8154] usb 1-1: config 0 has no interface number 1 [ 360.995748][ T2424] pvrusb2: Attached sub-driver cx25840 [ 360.995777][ T8154] usb 1-1: config 0 has no interface number 2 [ 361.019930][ T8154] usb 1-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 361.073012][ T2424] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 361.082620][ T8154] usb 1-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 361.137612][ T2424] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 361.167611][ T8154] usb 1-1: config 0 interface 0 has no altsetting 0 [ 361.235111][ T8154] usb 1-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 361.297622][ T8154] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.304296][T15814] netlink: 800 bytes leftover after parsing attributes in process `syz.1.5272'. [ 361.322390][ T8154] usb 1-1: config 0 descriptor?? [ 361.376157][T15814] netlink: 1301 bytes leftover after parsing attributes in process `syz.1.5272'. [ 361.627880][ T8154] usb 1-1: Could not set interface, error -71 [ 361.652586][ T8154] qmi_wwan: probe of 1-1:0.0 failed with error -22 [ 361.720342][ T8154] usb 1-1: USB disconnect, device number 30 [ 361.929223][T15842] loop1: detected capacity change from 0 to 2048 [ 361.963161][T15846] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.5289'. [ 362.158569][T15855] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 362.423681][T15866] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19971 - 0 [ 362.464997][T15869] loop2: detected capacity change from 0 to 256 [ 362.517774][T15866] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19971 - 0 [ 362.546903][T15866] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19971 - 0 [ 362.566278][T15866] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19971 - 0 [ 362.643723][T15879] loop1: detected capacity change from 0 to 256 [ 363.220007][T15909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5320'. [ 363.222660][T15911] loop4: detected capacity change from 0 to 128 [ 363.302950][T15913] loop2: detected capacity change from 0 to 512 [ 363.436147][T15913] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 2: comm syz.2.5321: invalid block [ 363.482978][T15913] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.5321: invalid indirect mapped block 10 (level 1) [ 363.518202][T15913] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.5321: invalid indirect mapped block 8 (level 1) [ 363.570918][T15926] loop0: detected capacity change from 0 to 256 [ 363.618155][T15913] EXT4-fs (loop2): 1 truncate cleaned up [ 363.627746][T15913] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 364.211968][T15952] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5339'. [ 364.287803][T15952] netlink: 356 bytes leftover after parsing attributes in process `syz.1.5339'. [ 364.719320][T15977] autofs4:pid:15977:autofs_fill_super: called with bogus options [ 364.915738][T15984] netlink: 212168 bytes leftover after parsing attributes in process `syz.0.5355'. [ 365.220597][T16000] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5362'. [ 365.419452][T16012] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5368'. [ 365.446294][T16013] comedi comedi4: commands at RT priority not supported in this driver [ 365.705351][T16012] team0: Port device team_slave_0 removed [ 365.738124][T16012] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 366.242835][T16022] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5373'. [ 367.094258][ T26] audit: type=1400 audit(1788782823.148:27): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=16070 comm="syz.2.5397" [ 367.137844][ T5917] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 367.283206][T16076] lo speed is unknown, defaulting to 1000 [ 367.389788][T16076] lo speed is unknown, defaulting to 1000 [ 367.461418][T16076] lo speed is unknown, defaulting to 1000 [ 367.736994][ T5917] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 367.777844][ T5917] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 367.960423][T16035] loop1: detected capacity change from 0 to 32768 [ 368.060714][ T5917] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 368.090653][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.150300][ T5917] usb 5-1: Product: syz [ 368.185329][ T5917] usb 5-1: Manufacturer: syz [ 368.219309][ T5917] usb 5-1: SerialNumber: syz [ 368.412729][ T4288] lo speed is unknown, defaulting to 1000 [ 368.575625][T16076] infiniband syz1: set down [ 368.605973][T16076] infiniband syz1: added lo [ 368.714053][T16076] infiniband syz1: Couldn't open port 1 [ 368.814028][ T5917] usb 5-1: 0:1 : does not exist [ 368.840775][ T5917] usb 5-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x300, type = 0 [ 368.882721][ T5917] usb 5-1: unit 0 not found! [ 368.992826][ T5917] usb 5-1: USB disconnect, device number 35 [ 369.017687][T16076] RDS/IB: syz1: added [ 369.053111][T16076] smc: adding ib device syz1 with port count 1 [ 369.079541][T16076] smc: ib device syz1 port 1 has pnetid [ 369.132214][ T8154] lo speed is unknown, defaulting to 1000 [ 369.180347][T16076] lo speed is unknown, defaulting to 1000 [ 369.338575][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 369.587724][T16119] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5420'. [ 369.598274][T16119] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5420'. [ 369.632139][T16121] ceph: No source [ 369.662513][T16124] loop1: detected capacity change from 0 to 256 [ 369.833195][T16076] lo speed is unknown, defaulting to 1000 [ 369.979593][T16136] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 370.549302][T16076] lo speed is unknown, defaulting to 1000 [ 371.011139][T16167] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5444'. [ 371.083752][T16167] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5444'. [ 371.111541][T16076] lo speed is unknown, defaulting to 1000 [ 371.247684][ T8154] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 371.557749][ T8154] usb 2-1: Using ep0 maxpacket: 32 [ 371.627165][T16151] loop3: detected capacity change from 0 to 32768 [ 371.632995][T16076] lo speed is unknown, defaulting to 1000 [ 371.670704][T16183] openvswitch: netlink: Unknown key attributes 20000000 [ 371.729458][ T8154] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 371.765299][T16151] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop3 scanned by syz.3.5436 (16151) [ 371.780419][ T8154] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.893451][ T8154] usb 2-1: config 0 descriptor?? [ 371.935622][T16151] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 371.966619][T16151] BTRFS info (device loop3): using free space tree [ 372.017505][T16151] BTRFS info (device loop3): has skinny extents [ 372.029357][ T8154] as10x_usb: device has been detected [ 372.035445][ T8154] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 372.119481][ T8154] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 372.181379][T16199] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5457'. [ 372.238599][T16199] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5457'. [ 372.326791][ T8154] as10x_usb: error during firmware upload part1 [ 372.407972][ T8154] Registered device nBox DVB-T Dongle [ 372.452690][ T8154] usb 2-1: USB disconnect, device number 34 [ 372.555088][T16151] BTRFS info (device loop3): enabling ssd optimizations [ 372.596063][T16217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5460'. [ 372.653637][ T8154] Unregistered device nBox DVB-T Dongle [ 372.669748][ T8154] as10x_usb: device has been disconnected [ 372.684774][T16223] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5462'. [ 372.893078][T16225] loop4: detected capacity change from 0 to 1024 [ 373.149481][T16225] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 373.196152][T16230] loop1: detected capacity change from 0 to 4096 [ 373.271390][T16233] loop0: detected capacity change from 0 to 4096 [ 373.272127][T16225] hfsplus: filesystem is marked journaled, leaving read-only. [ 373.367928][T16230] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 373.409931][T16233] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 373.830481][T16233] ntfs: volume version 3.1. [ 373.838370][T16230] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 373.993723][T16233] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 374.089109][T16233] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 374.334390][T16262] netlink: 144 bytes leftover after parsing attributes in process `syz.4.5480'. [ 374.739383][T16262] team0: Port device team_slave_0 removed [ 374.775906][T16262] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 374.809235][T16266] loop3: detected capacity change from 0 to 4096 [ 374.910834][T16275] netlink: 'syz.2.5486': attribute type 3 has an invalid length. [ 374.950373][T16266] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 374.970956][T16275] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5486'. [ 375.210540][T16285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5492'. [ 375.506878][ T8154] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 375.817732][ T5916] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 375.819928][ T5214] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 375.947762][ T5917] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 376.058130][ T8154] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 376.077792][ T5916] usb 1-1: Using ep0 maxpacket: 16 [ 376.088002][ T8154] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.096037][ T8154] usb 3-1: Product: syz [ 376.120753][ T8154] usb 3-1: Manufacturer: syz [ 376.125585][ T8154] usb 3-1: SerialNumber: syz [ 376.218020][ T5916] usb 1-1: config 251 has an invalid interface number: 16 but max is 0 [ 376.246734][ T5916] usb 1-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 376.248102][ T5214] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 376.285626][ T5916] usb 1-1: config 251 has no interface number 0 [ 376.287416][ T5214] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 376.302123][ T5916] usb 1-1: config 251 interface 16 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 376.327753][ T5214] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 376.342426][ T5916] usb 1-1: config 251 interface 16 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 376.352694][ T5214] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 376.367956][ T5917] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 376.386085][ T5214] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 376.388478][ T5916] usb 1-1: config 251 interface 16 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 376.408708][ T5214] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.417614][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 376.445998][ T5214] usb 5-1: config 0 descriptor?? [ 376.447539][ T5917] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 376.484543][ T5916] usb 1-1: config 251 interface 16 has no altsetting 0 [ 376.717942][ T5917] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 376.727302][ T5916] usb 1-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=9a.63 [ 376.756779][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.765142][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.783434][ T5917] usb 4-1: Product: syz [ 376.787918][ T5916] usb 1-1: Product: syz [ 376.790218][ T4227] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 376.792098][ T5916] usb 1-1: Manufacturer: syz [ 376.802575][ T5214] usb 5-1: USB disconnect, device number 36 [ 376.815939][ T5917] usb 4-1: Manufacturer: syz [ 376.825936][ T5917] usb 4-1: SerialNumber: syz [ 376.836013][ T5916] usb 1-1: SerialNumber: syz [ 376.851935][ T5917] usb 4-1: config 0 descriptor?? [ 376.934075][ T5917] mcba_usb 4-1:0.0: Can't find endpoints [ 377.214012][ T5917] usb 4-1: USB disconnect, device number 38 [ 377.221843][ T5214] usb 3-1: USB disconnect, device number 27 [ 377.228772][ T5916] usb 1-1: USB disconnect, device number 31 [ 377.840987][T16309] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5502'. [ 377.914619][ T4227] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 377.937797][ T4227] ath9k_htc: Failed to initialize the device [ 377.945106][ T5214] usb 3-1: ath9k_htc: USB layer deinitialized [ 377.962957][T16314] loop2: detected capacity change from 0 to 1024 [ 378.031980][T16309] team0: Port device team_slave_0 removed [ 378.055927][T16309] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 378.119975][T16314] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 378.179992][T16321] loop0: detected capacity change from 0 to 512 [ 378.232599][T16314] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. leaving read-only. [ 378.237750][ T5916] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 378.264737][ T4288] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 378.332025][T16321] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.5509: invalid indirect mapped block 10 (level 1) [ 378.449008][T16321] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.5509: invalid indirect mapped block 8 (level 1) [ 378.547968][T16321] EXT4-fs (loop0): 1 truncate cleaned up [ 378.553669][T16321] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 378.639700][T16331] loop2: detected capacity change from 0 to 256 [ 378.646502][ T4288] usb 5-1: config 0 has an invalid interface number: 13 but max is 0 [ 378.649135][ T5916] usb 2-1: Using ep0 maxpacket: 8 [ 378.665216][ T4288] usb 5-1: config 0 has no interface number 0 [ 378.681573][ T4288] usb 5-1: too many endpoints for config 0 interface 13 altsetting 233: 211, using maximum allowed: 30 [ 378.717641][ T4288] usb 5-1: config 0 interface 13 altsetting 233 has 0 endpoint descriptors, different from the interface descriptor's value: 211 [ 378.761765][ T4288] usb 5-1: config 0 interface 13 has no altsetting 0 [ 378.809625][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.816061][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.897954][ T5916] usb 2-1: unable to get BOS descriptor or descriptor too short [ 378.953891][ T4288] usb 5-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice= 2.23 [ 378.983672][ T4288] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.998015][ T5916] usb 2-1: config 6 has an invalid interface number: 14 but max is 0 [ 379.027611][ T5916] usb 2-1: config 6 has no interface number 0 [ 379.027886][ T4288] usb 5-1: Product: syz [ 379.033751][ T5916] usb 2-1: config 6 interface 14 has no altsetting 0 [ 379.075390][ T4288] usb 5-1: Manufacturer: syz [ 379.105754][ T4288] usb 5-1: SerialNumber: syz [ 379.130401][ T4288] usb 5-1: config 0 descriptor?? [ 379.189619][ T4288] ftdi_sio 5-1:0.13: FTDI USB Serial Device converter detected [ 379.208342][ T4288] usb 5-1: Detected FT8U232AM [ 379.230785][ T4288] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 379.278017][ T5916] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10ae, bcdDevice=6e.c2 [ 379.297935][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.337614][ T5916] usb 2-1: Product: syz [ 379.341852][ T5916] usb 2-1: Manufacturer: syz [ 379.346587][ T5916] usb 2-1: SerialNumber: syz [ 379.490884][ T4288] usb 5-1: USB disconnect, device number 37 [ 379.510882][ T4288] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 379.555473][ T4288] ftdi_sio 5-1:0.13: device disconnected [ 379.881781][ T5916] usb 2-1: USB disconnect, device number 35 [ 379.918007][T16368] xt_l2tp: missing protocol rule (udp|l2tpip) [ 379.965999][T16366] loop2: detected capacity change from 0 to 4096 [ 379.988570][ T4227] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 380.488991][ T4227] usb 4-1: unable to get BOS descriptor or descriptor too short [ 380.543652][T16383] device wlan0 left promiscuous mode [ 380.592287][T16383] device bond2 left promiscuous mode [ 380.618666][ T4227] usb 4-1: config 3 has an invalid interface number: 151 but max is 0 [ 380.636733][ T4227] usb 4-1: config 3 has no interface number 0 [ 380.673652][ T4227] usb 4-1: config 3 interface 151 has no altsetting 0 [ 380.951314][T16403] kernel read not supported for file /!selinuxwk1ĐmĂ9Éž*T“ýâ‘ďŞ#j—ŹĽŢYĚĹmVËvm(pÉ-QZ#Ň{„ż (pid: 16403 comm: syz.4.5547) [ 380.966743][ T4227] usb 4-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice=1d.cd [ 380.991821][T16406] overlayfs: bad mount option "redirect_dir=off:/" [ 380.998978][ T4227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.007386][ T4227] usb 4-1: Product: syz [ 381.044808][ T4227] usb 4-1: Manufacturer: syz [ 381.058035][ T4227] usb 4-1: SerialNumber: syz [ 381.315655][T16417] loop0: detected capacity change from 0 to 1024 [ 381.434574][ T4227] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:3.151/input/input22 [ 381.514700][ T3542] bcm5974 4-1:3.151: could not read from device [ 381.561583][ T4227] usb 4-1: USB disconnect, device number 39 [ 381.585572][ T3542] bcm5974 4-1:3.151: could not read from device [ 382.304216][ T4227] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 382.357814][ T5916] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 382.638518][ T5916] usb 1-1: Using ep0 maxpacket: 32 [ 382.686709][ T4227] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 382.707274][ T4227] usb 4-1: config 1 has no interface number 0 [ 382.730590][ T4227] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 64 [ 382.771603][ T4227] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 382.806867][ T4227] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.969495][ T5916] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 382.999081][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.028051][ T4227] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 383.037959][ T5916] usb 1-1: Product: syz [ 383.056590][ T5916] usb 1-1: Manufacturer: syz [ 383.076960][ T4227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.077146][ T5916] usb 1-1: SerialNumber: syz [ 383.117997][ T4227] usb 4-1: Product: syz [ 383.142526][ T4227] usb 4-1: Manufacturer: syz [ 383.160862][ T5916] usb 1-1: config 0 descriptor?? [ 383.165146][ T4227] usb 4-1: SerialNumber: syz [ 383.209335][T16450] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 383.225422][T16450] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 383.271054][ T4227] usb 4-1: Error in usbnet_get_endpoints (-22) [ 383.479687][ T4227] usb 4-1: USB disconnect, device number 40 [ 383.708156][T16496] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5595'. [ 384.283269][T16502] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 384.647081][T16508] loop3: detected capacity change from 0 to 2048 [ 384.952334][T16472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.014830][T16472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.308154][T16472] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.321613][T16472] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.347491][T16472] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.370788][T16472] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.855396][ T5916] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 386.894999][ T5916] peak_usb 1-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 387.008078][ T5916] peak_usb: probe of 1-1:0.0 failed with error -71 [ 387.055519][ T5916] usb 1-1: USB disconnect, device number 32 [ 387.548922][T16574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5632'. [ 387.905698][T16595] loop0: detected capacity change from 0 to 64 [ 387.989732][T16601] loop2: detected capacity change from 0 to 64 [ 388.009664][T16602] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5646'. [ 388.074102][T16602] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5646'. [ 388.104359][T16602] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5646'. [ 388.289733][T16615] loop1: detected capacity change from 0 to 512 [ 388.364217][T16615] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 388.417039][T16615] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 388.490667][T16615] EXT4-fs (loop1): orphan cleanup on readonly fs [ 388.551182][T16615] EXT4-fs error (device loop1): ext4_orphan_get:1436: comm syz.1.5652: bad orphan inode 3 [ 388.640366][T16615] EXT4-fs (loop1): Remounting filesystem read-only [ 388.683062][T16615] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,noblock_validity,discard,errors=remount-ro,data=writeback. Quota mode: none. [ 388.778891][T16615] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.5652: dx entry: limit 0 != root limit 125 [ 388.841829][T16615] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.5652: Corrupt directory, running e2fsck is recommended [ 388.901177][T16633] netlink: 1244 bytes leftover after parsing attributes in process `syz.0.5660'. [ 389.098195][T16634] loop4: detected capacity change from 0 to 4096 [ 389.150402][T16634] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 389.332542][T16634] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 389.680121][T16660] netlink: 'syz.1.5674': attribute type 9 has an invalid length. [ 389.693885][T16661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5672'. [ 389.737622][T16660] netlink: 'syz.1.5674': attribute type 6 has an invalid length. [ 389.827381][T16660] netlink: 'syz.1.5674': attribute type 7 has an invalid length. [ 389.897616][T16660] netlink: 'syz.1.5674': attribute type 8 has an invalid length. [ 390.279412][T16687] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5685'. [ 390.337770][T16687] netlink: 4100 bytes leftover after parsing attributes in process `syz.1.5685'. [ 390.787763][T16713] Invalid ELF header magic: != ELF [ 390.988419][T16715] loop0: detected capacity change from 0 to 4096 [ 391.089030][T16715] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 391.523673][T16743] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5714'. [ 391.578958][T16745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5715'. [ 391.594815][ T5916] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 391.787686][T16751] syz.2.5717 (16751): /proc/16748/oom_adj is deprecated, please use /proc/16748/oom_score_adj instead. [ 391.863635][T16706] loop3: detected capacity change from 0 to 32768 [ 391.878185][ T5916] usb 5-1: Using ep0 maxpacket: 8 [ 391.979929][T16706] XFS (loop3): Mounting V5 Filesystem [ 391.998532][ T5916] usb 5-1: config 2 has an invalid interface number: 111 but max is 0 [ 392.017617][ T5916] usb 5-1: config 2 has no interface number 0 [ 392.027953][ T1111] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 392.041369][ T5916] usb 5-1: too many endpoints for config 2 interface 111 altsetting 55: 172, using maximum allowed: 30 [ 392.124565][ T5916] usb 5-1: config 2 interface 111 altsetting 55 has 0 endpoint descriptors, different from the interface descriptor's value: 172 [ 392.217603][ T5916] usb 5-1: config 2 interface 111 has no altsetting 0 [ 392.257884][ T5916] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 392.305722][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.325154][ T1111] usb 2-1: Using ep0 maxpacket: 16 [ 392.388994][T16706] XFS (loop3): Ending clean mount [ 392.468186][ T1111] usb 2-1: config 251 has an invalid interface number: 16 but max is 0 [ 392.490049][ T1111] usb 2-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 392.540943][ T1111] usb 2-1: config 251 has no interface number 0 [ 392.547290][ T1111] usb 2-1: config 251 interface 16 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 392.607601][ T1111] usb 2-1: config 251 interface 16 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 392.640984][ T5916] usb 5-1: string descriptor 0 read error: -71 [ 392.661393][ T1111] usb 2-1: config 251 interface 16 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 392.679032][ T5916] usb 5-1: USB disconnect, device number 38 [ 392.754747][ T1111] usb 2-1: config 251 interface 16 has no altsetting 0 [ 392.808376][ T4192] XFS (loop3): Unmounting Filesystem [ 392.997945][ T1111] usb 2-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=9a.63 [ 393.046636][ T1111] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.097839][ T1111] usb 2-1: Product: syz [ 393.177095][ T1111] usb 2-1: Manufacturer: syz [ 393.202342][ T1111] usb 2-1: SerialNumber: syz [ 393.595391][T16785] loop4: detected capacity change from 0 to 2048 [ 393.771520][ T1111] usb 2-1: USB disconnect, device number 36 [ 393.890042][T16775] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.891838][T16786] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 393.897666][T16775] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.301932][T16781] loop2: detected capacity change from 0 to 32768 [ 394.493773][T16790] xt_CT: No such helper "syz0" [ 394.581831][T16781] JBD2: Ignoring recovery information on journal [ 394.817808][T16781] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 395.066307][T16811] program syz.1.5741 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 395.137901][T16781] (syz.2.5729,16781,0):ocfs2_remount:624 ERROR: Cannot change heartbeat mode on remount [ 395.289491][T16815] damon: min_nr_regions (0) must be at least 3 [ 395.433039][T10423] ocfs2: Unmounting device (7,2) on (node local) [ 395.483090][T16817] loop1: detected capacity change from 0 to 512 [ 395.636502][T16817] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 395.741324][T16817] ext4 filesystem being mounted at /1118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 397.204503][T16775] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 397.316691][T16775] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.194635][T16775] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.214204][T16775] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.234359][T16775] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.254457][T16775] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.608150][T16775] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 19971 - 0 [ 398.627413][T16775] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 19971 - 0 [ 398.647600][T16775] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 19971 - 0 [ 398.656682][T16775] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 19971 - 0 [ 399.154937][T16849] device bond3 entered promiscuous mode [ 399.256678][T16849] 8021q: adding VLAN 0 to HW filter on device bond3 [ 399.530674][T16871] loop4: detected capacity change from 0 to 256 [ 399.654985][T16877] loop1: detected capacity change from 0 to 256 [ 399.758179][ T5916] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 399.799012][T16877] exfat: Deprecated parameter 'utf8' [ 399.804509][T16877] exfat: Deprecated parameter 'namecase' [ 399.828265][T16877] exfat: Deprecated parameter 'utf8' [ 399.988602][T16877] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 400.057880][ T5916] usb 1-1: Using ep0 maxpacket: 8 [ 400.228167][ T5916] usb 1-1: config 0 has an invalid interface number: 4 but max is 0 [ 400.238107][ T5916] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.306570][ T5916] usb 1-1: config 0 has no interface number 0 [ 400.326676][ T5916] usb 1-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 400.366509][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.456132][ T5916] usb 1-1: config 0 descriptor?? [ 400.542438][ T5916] hub 1-1:0.4: bad descriptor, ignoring hub [ 400.560016][ T5916] hub: probe of 1-1:0.4 failed with error -5 [ 400.568616][T16909] netlink: 'syz.3.5778': attribute type 1 has an invalid length. [ 400.622839][ T5916] sierra 1-1:0.4: Sierra USB modem converter detected [ 400.637688][T16909] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5778'. [ 400.715898][ T4288] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 400.724204][ T5916] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 400.825326][ T5916] usb 1-1: USB disconnect, device number 33 [ 400.878033][ T5916] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 400.939458][ T5916] sierra 1-1:0.4: device disconnected [ 400.996266][ T4288] usb 3-1: Using ep0 maxpacket: 32 [ 401.160626][ T4288] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 401.179321][ T4288] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 401.204639][T16933] loop4: detected capacity change from 0 to 164 [ 401.227609][ T4288] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 401.277120][ T4288] usb 3-1: config 1 has no interface number 0 [ 401.324756][ T4288] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 401.375274][ T4288] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 401.439935][ T4288] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 401.473716][T16942] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 401.513380][ T4288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.644747][ T4288] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 401.654943][T16949] loop0: detected capacity change from 0 to 64 [ 401.747730][T16953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5796'. [ 401.850301][ T4288] snd_usb_pod 3-1:1.1: endpoint not available, using fallback values [ 401.868875][ T4288] snd_usb_pod 3-1:1.1: invalid control EP [ 401.880161][T16960] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5798'. [ 401.900012][ T4288] snd_usb_pod 3-1:1.1: cannot start listening: -22 [ 401.920337][ T4288] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 401.953710][ T4288] snd_usb_pod: probe of 3-1:1.1 failed with error -22 [ 402.055507][ T4288] usb 3-1: USB disconnect, device number 28 [ 402.100421][ T1111] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 402.218950][T16968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5801'. [ 402.436633][T16978] loop3: detected capacity change from 0 to 256 [ 402.562908][ T1111] usb 5-1: not running at top speed; connect to a high speed hub [ 402.578693][T16978] exfat: Deprecated parameter 'utf8' [ 402.584146][T16978] exfat: Deprecated parameter 'namecase' [ 402.617636][T16978] exfat: Deprecated parameter 'utf8' [ 402.671462][ T1111] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 402.707864][ T1111] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 402.757588][ T1111] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.794038][T16978] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 402.880379][ T1111] uvcvideo 5-1:1.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 402.912522][ T1111] usb 5-1: Found UVC 1.00 device (046d:0825) [ 402.967106][ T1111] uvcvideo 5-1:1.1: No supported video formats found. [ 403.004420][ T1111] uvcvideo 5-1:1.1: Failed to initialize the device (-22). [ 403.151560][ T5916] usb 5-1: USB disconnect, device number 39 [ 403.887108][T17043] loop2: detected capacity change from 0 to 512 [ 403.919785][T17047] loop3: detected capacity change from 0 to 512 [ 404.099163][T17043] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 404.104897][T17047] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 404.138020][T17047] ext4 filesystem being mounted at /1114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 404.178533][T17043] ext4 filesystem being mounted at /618/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 404.371091][T17043] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.5833: bg 0: block 345: padding at end of block bitmap is not set [ 404.498086][T17043] Quota error (device loop2): write_blk: dquota write failed [ 404.531800][T17043] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 404.588561][T17043] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.5833: Failed to acquire dquot type 1 [ 404.654139][T17078] netlink: 232 bytes leftover after parsing attributes in process `syz.3.5842'. [ 404.706593][T17082] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5847'. [ 404.747894][T17082] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5847'. [ 404.929582][ T5916] kernel write not supported for file /2440/timerslack_ns (pid: 5916 comm: kworker/1:11) [ 404.968893][T17094] CIFS mount error: No usable UNC path provided in device string! [ 404.968893][T17094] [ 405.009679][T17094] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 405.519932][T17126] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5868'. [ 406.043087][T17151] loop0: detected capacity change from 0 to 128 [ 406.127880][ T5214] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 406.204084][T17151] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 406.288206][T17151] ext4 filesystem being mounted at /1216/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 406.371890][T17163] xt_bpf: check failed: parse error [ 406.387673][ T5214] usb 5-1: Using ep0 maxpacket: 8 [ 406.507884][ T5214] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 406.531416][ T5214] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.577599][ T5214] usb 5-1: config 0 has no interface number 0 [ 406.678050][T17113] loop1: detected capacity change from 0 to 32768 [ 406.849407][ T5214] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 406.928217][ T5214] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.936345][ T5214] usb 5-1: Product: syz [ 407.052641][ T5214] usb 5-1: Manufacturer: syz [ 407.073982][T17113] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 407.100262][ T5214] usb 5-1: SerialNumber: syz [ 407.211644][ T5214] usb 5-1: config 0 descriptor?? [ 407.516297][ T5916] usb 5-1: USB disconnect, device number 40 [ 407.537772][T17113] syz.1.5862 (17113) used greatest stack depth: 17280 bytes left [ 407.674507][ T4184] ocfs2: Unmounting device (7,1) on (node local) [ 408.039744][T17208] netlink: 'syz.3.5905': attribute type 1 has an invalid length. [ 408.093947][T17209] loop1: detected capacity change from 0 to 256 [ 408.125102][T17211] loop4: detected capacity change from 0 to 128 [ 408.548482][T17211] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: none. [ 408.607725][T17211] ext4 filesystem being mounted at /1193/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 408.730137][T17231] trusted_key: encrypted_key: insufficient parameters specified [ 408.956407][T17237] xt_l2tp: v2 doesn't support IP mode [ 409.113311][T17239] xt_CT: You must specify a L4 protocol and not use inversions on it [ 409.198031][T17241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5921'. [ 409.253730][T17200] loop0: detected capacity change from 0 to 32768 [ 409.371552][T17246] netlink: 209820 bytes leftover after parsing attributes in process `syz.4.5923'. [ 409.427928][T17200] XFS (loop0): Mounting V5 Filesystem [ 409.771996][T17200] XFS (loop0): Ending clean mount [ 409.951460][T17267] (unnamed net_device) (uninitialized): ARP validating cannot be used with MII monitoring [ 410.128920][T17230] loop2: detected capacity change from 0 to 32768 [ 410.198361][ T4185] XFS (loop0): Unmounting Filesystem [ 410.315979][T17277] netlink: 'syz.4.5936': attribute type 5 has an invalid length. [ 410.364451][T17230] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.5915 (17230) [ 410.480806][T17230] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 410.523167][T17230] BTRFS info (device loop2): using free space tree [ 410.560371][T17230] BTRFS info (device loop2): has skinny extents [ 410.562747][ T1111] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 410.929318][ T1111] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 410.966848][T17230] BTRFS info (device loop2): enabling ssd optimizations [ 411.182915][T17310] loop4: detected capacity change from 0 to 256 [ 411.287892][T17279] ceph: No mds server is up or the cluster is laggy [ 411.386040][T17314] loop0: detected capacity change from 0 to 64 [ 411.479757][ T1111] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 411.635315][T17310] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d) [ 412.109548][T17304] loop1: detected capacity change from 0 to 32768 [ 412.335004][T17304] XFS (loop1): Mounting V5 Filesystem [ 412.516347][T17340] netlink: 'syz.4.5951': attribute type 1 has an invalid length. [ 412.605125][T17340] netlink: 'syz.4.5951': attribute type 2 has an invalid length. [ 412.669161][T17340] netlink: 'syz.4.5951': attribute type 1 has an invalid length. [ 412.707914][T17340] netlink: 'syz.4.5951': attribute type 2 has an invalid length. [ 412.726311][T17340] netlink: 'syz.4.5951': attribute type 2 has an invalid length. [ 412.771075][T17304] XFS (loop1): Ending clean mount [ 412.802896][T17340] netlink: 'syz.4.5951': attribute type 1 has an invalid length. [ 413.048250][ T4184] XFS (loop1): Unmounting Filesystem [ 413.273253][ T7] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 413.566731][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 413.627710][T17374] loop4: detected capacity change from 0 to 512 [ 413.701770][ T7] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 413.741966][ T7] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 413.777598][ T7] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 413.828094][ T7] usb 3-1: config 1 has no interface number 0 [ 413.834353][ T7] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 413.897595][ T7] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 413.953744][ T7] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 413.973557][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.998216][T17374] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 414.040403][ T7] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 414.056412][T17374] ext4 filesystem being mounted at /1211/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 414.200495][T17374] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 414.258557][ T7] snd_usb_pod 3-1:1.1: invalid control EP [ 414.272138][ T7] snd_usb_pod 3-1:1.1: cannot start listening: -22 [ 414.298557][ T7] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 414.338623][ T7] snd_usb_pod: probe of 3-1:1.1 failed with error -22 [ 414.538327][ T7] usb 3-1: USB disconnect, device number 29 [ 414.723118][T17409] netlink: 'syz.0.5983': attribute type 2 has an invalid length. [ 415.077731][ T7] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 415.223626][T17429] netlink: 'syz.3.5992': attribute type 30 has an invalid length. [ 415.446808][T17441] loop3: detected capacity change from 0 to 256 [ 415.459651][ T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 415.656962][ T7] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 415.707669][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.756474][ T7] usb 2-1: Product: syz [ 415.776477][ T7] usb 2-1: Manufacturer: syz [ 415.806725][ T7] usb 2-1: SerialNumber: syz [ 415.901736][T17454] loop4: detected capacity change from 0 to 1764 [ 415.921225][T17452] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 416.000708][T17459] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 416.072103][ T7] snd-usb-6fire 2-1:1.0: invalid firmware version in device: be b3 00 00. please reconnect to power. if this failure still happens, check your firmware installation. [ 416.131833][ T7] snd-usb-6fire: probe of 2-1:1.0 failed with error -22 [ 416.295275][ T7] usb 2-1: USB disconnect, device number 37 [ 416.728740][T17493] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6021'. [ 416.891776][ T7] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 417.147668][T17511] loop1: detected capacity change from 0 to 128 [ 417.170282][T17513] netlink: 92 bytes leftover after parsing attributes in process `syz.2.6031'. [ 417.180860][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 417.218370][T17513] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6031'. [ 417.235841][T17516] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6032'. [ 417.267992][T17513] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6031'. [ 417.305185][T17513] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6031'. [ 417.492651][ T7] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 417.522299][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.561275][ T7] usb 1-1: Product: syz [ 417.565902][ T7] usb 1-1: Manufacturer: syz [ 417.580491][T17529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6038'. [ 417.597641][ T7] usb 1-1: SerialNumber: syz [ 417.613821][T17528] program syz.4.6039 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 417.618680][ T7] usb 1-1: config 0 descriptor?? [ 417.689546][ T7] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 417.884447][ T9324] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 418.108070][ T7] ssu100: probe of 1-1:0.0 failed with error -71 [ 418.136808][ T7] usb 1-1: USB disconnect, device number 34 [ 418.367777][ T5215] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 418.398238][ T9324] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 418.417604][ T9324] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 418.450789][ T9324] usb 2-1: New USB device found, idVendor=15a4, idProduct=9035, bcdDevice= 2.00 [ 418.508224][ T9324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.762275][T17564] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6057'. [ 418.769360][ T5215] usb 4-1: config 0 has an invalid interface number: 176 but max is 0 [ 418.808060][ T9324] usb 2-1: dvb_usb_v2: 2nd usb_bulk_msg() failed=-22 [ 418.814581][ T5215] usb 4-1: config 0 has no interface number 0 [ 418.821556][ T9324] dvb_usb_af9035: probe of 2-1:1.0 failed with error -22 [ 418.849592][ T5215] usb 4-1: config 0 interface 176 altsetting 0 endpoint 0x4 has invalid maxpacket 59391, setting to 64 [ 418.904853][ T5215] usb 4-1: config 0 interface 176 altsetting 0 endpoint 0x82 has invalid maxpacket 65535, setting to 64 [ 419.061193][ T7] usb 2-1: USB disconnect, device number 38 [ 419.157929][ T5215] usb 4-1: New USB device found, idVendor=0499, idProduct=1039, bcdDevice= c.76 [ 419.197649][ T5215] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.220960][ T5215] usb 4-1: Product: syz [ 419.225380][ T5215] usb 4-1: Manufacturer: syz [ 419.253729][ T5215] usb 4-1: SerialNumber: syz [ 419.276971][ T5215] usb 4-1: config 0 descriptor?? [ 419.322804][T17547] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 419.340322][T17547] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 419.658364][ T5215] usb 4-1: USB disconnect, device number 41 [ 419.783407][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.176/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 419.807865][ T9324] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 420.147243][T17573] loop4: detected capacity change from 0 to 32768 [ 420.154041][ T9324] usb 1-1: Using ep0 maxpacket: 8 [ 420.261928][T17598] loop2: detected capacity change from 0 to 256 [ 420.318033][ T9324] usb 1-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 420.348400][T17598] exfat: Deprecated parameter 'utf8' [ 420.361903][ T9324] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.366249][T17598] exfat: Deprecated parameter 'namecase' [ 420.406950][ T9324] usb 1-1: config 0 descriptor?? [ 420.416950][T17598] exfat: Deprecated parameter 'namecase' [ 420.483139][T17598] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 420.518819][T17602] nvme_fabrics: missing parameter 'nqn=%s' [ 420.787917][ T9324] usb 1-1: string descriptor 0 read error: -71 [ 420.794379][ T9324] uvcvideo 1-1:0.0: Found multiple Units with ID 1 [ 420.822939][ T9324] usb 1-1: Found UVC 0.00 device (2833:0201) [ 420.861968][ T9324] usb 1-1: No valid video chain found. [ 420.918460][T17619] netlink: 292 bytes leftover after parsing attributes in process `syz.3.6084'. [ 420.930227][ T9324] usb 1-1: USB disconnect, device number 35 [ 421.371071][T17638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6092'. [ 421.457932][T17638] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 421.478634][T17646] loop3: detected capacity change from 0 to 512 [ 421.730478][T17646] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 421.757787][T17663] __nla_validate_parse: 2 callbacks suppressed [ 421.757831][T17663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6100'. [ 421.836971][T17646] ext4 filesystem being mounted at /1176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 422.050962][T17646] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 422.234274][T17687] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 422.927791][T17724] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6131'. [ 423.013537][T17726] netlink: 'syz.0.6133': attribute type 1 has an invalid length. [ 423.487984][T17739] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 423.967836][T17754] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6146'. [ 424.379954][T17701] loop4: detected capacity change from 0 to 40427 [ 424.404298][T17772] loop3: detected capacity change from 0 to 2048 [ 424.486894][T17701] F2FS-fs (loop4): Fix alignment : done, start(4096) end(16896) block(12288) [ 424.540905][T17781] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 424.582245][T17701] F2FS-fs (loop4): invalid crc value [ 424.610501][T17780] block device autoloading is deprecated and will be removed. [ 424.643550][T17783] loop0: detected capacity change from 0 to 64 [ 424.674573][T17701] F2FS-fs (loop4): invalid crc value [ 424.682190][T17701] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 424.729873][ T5215] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 425.231663][ T5215] usb 2-1: unable to get BOS descriptor or descriptor too short [ 425.267837][T17798] device bond1 entered promiscuous mode [ 425.286339][T17798] 8021q: adding VLAN 0 to HW filter on device bond1 [ 425.328036][ T5215] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 425.347053][ T5215] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 425.527855][T17808] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 425.648042][ T5215] usb 2-1: string descriptor 0 read error: -22 [ 425.664632][ T5215] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 425.715134][ T5215] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.718379][ T9324] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 425.794183][ T5215] usb 2-1: selecting invalid altsetting 1 [ 425.806422][T17821] loop2: detected capacity change from 0 to 16 [ 425.821288][ T5215] usb 2-1: unit 3 not found! [ 426.007247][T17821] erofs: (device loop2): mounted with root inode @ nid 36. [ 426.028161][ T5215] usb 2-1: unit 0 not found! [ 426.057920][ T9324] usb 1-1: Using ep0 maxpacket: 16 [ 426.153291][ T4228] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 426.189395][ T9324] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 426.193721][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 426.283127][ T5917] usb 2-1: USB disconnect, device number 39 [ 426.409013][ T9324] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 426.434592][ T9324] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.463877][ T9324] usb 1-1: Product: syz [ 426.484200][ T9324] usb 1-1: Manufacturer: syz [ 426.494369][ T9324] usb 1-1: SerialNumber: syz [ 426.525321][ T9324] r8152-cfgselector 1-1: config 0 descriptor?? [ 426.708026][T17846] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.6188'. [ 426.816669][ T4228] usb 4-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 426.846843][ T4228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.875639][ T4228] usb 4-1: Product: syz [ 426.905780][ T4228] usb 4-1: Manufacturer: syz [ 426.935833][ T4228] usb 4-1: SerialNumber: syz [ 426.959547][ T4228] usb 4-1: config 0 descriptor?? [ 427.028946][ T9324] r8152-cfgselector 1-1: Unknown version 0x0000 [ 427.036184][ T4228] usb 4-1: selecting invalid altsetting 1 [ 427.057597][ T4228] technisat-usb2: could not set alternate setting to 0 [ 427.066449][ T9324] r8152-cfgselector 1-1: USB disconnect, device number 36 [ 427.101026][T17852] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.6191'. [ 427.237798][ T4228] technisat-usb2: firmware version: 0.0 [ 427.243793][ T4228] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 427.360884][T17859] i2c i2c-0: Invalid block write size 253 [ 427.471946][ T4228] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 427.519948][ T4228] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) error while loading driver (-19) [ 427.593825][ T4228] usb 4-1: USB disconnect, device number 42 [ 427.748379][T17844] loop2: detected capacity change from 0 to 32768 [ 427.973363][T17880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6205'. [ 428.137766][ T5215] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 428.216070][T17888] netlink: 'syz.1.6208': attribute type 1 has an invalid length. [ 428.252572][T17889] UBIFS error (pid: 17889): cannot open "ubi0:testvol", error -19 [ 428.329603][T17888] netlink: 'syz.1.6208': attribute type 2 has an invalid length. [ 428.454111][T17888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6208'. [ 428.545448][ T5215] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 428.591446][ T5215] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.622007][T17901] netlink: 380 bytes leftover after parsing attributes in process `syz.3.6214'. [ 428.748680][ T5215] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 428.792185][ T5215] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 428.796505][T17912] tmpfs: Bad value for 'mpol' [ 428.827592][ T5215] usb 5-1: Manufacturer: syz [ 428.858994][ T5215] usb 5-1: config 0 descriptor?? [ 428.940066][ T5215] usb 5-1: Found UVC 0.00 device (18ec:3288) [ 428.960959][ T5215] usb 5-1: No valid video chain found. [ 429.161753][ T5917] usb 5-1: USB disconnect, device number 41 [ 429.285863][T17930] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6229'. [ 429.402908][T17932] loop0: detected capacity change from 0 to 1764 [ 429.537894][T17941] loop3: detected capacity change from 0 to 64 [ 429.880076][ T4228] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 429.912336][T17946] loop1: detected capacity change from 0 to 4096 [ 430.041388][T17946] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 430.090865][ T5917] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 430.278150][ T4228] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 430.299613][ T4228] usb 3-1: config 0 has no interface number 0 [ 430.319807][ T4228] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 430.533264][ T5917] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 430.567604][ T5917] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 430.588028][ T4228] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 430.623695][ T4228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.625920][ T5917] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 430.643802][ T4228] usb 3-1: Product: syz [ 430.698186][ T4228] usb 3-1: Manufacturer: syz [ 430.702722][ T5917] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.723230][ T4228] usb 3-1: SerialNumber: syz [ 430.749213][ T5917] usb 1-1: config 1 interface 0 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 0 [ 430.767887][ T4228] usb 3-1: config 0 descriptor?? [ 430.810341][ T5917] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 430.839591][ T4228] yurex 3-1:0.50: Could not find endpoints [ 430.858837][ T5917] usb 1-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 430.899187][ T5917] usb 1-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 431.069999][T17953] loop3: detected capacity change from 0 to 32768 [ 431.103284][T17971] loop1: detected capacity change from 0 to 4096 [ 431.130618][ T4228] usb 3-1: USB disconnect, device number 30 [ 431.148248][T17953] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.6239 (17953) [ 431.167970][ T5917] usb 1-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 431.199851][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.228809][ T5917] usb 1-1: Product: syz [ 431.233036][ T5917] usb 1-1: Manufacturer: syz [ 431.262396][T17971] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 431.275476][ T5917] usb 1-1: SerialNumber: syz [ 431.324660][T17953] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 431.341265][T17950] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 431.361449][T17950] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 431.378693][T17953] BTRFS info (device loop3): using free space tree [ 431.397923][T17953] BTRFS info (device loop3): has skinny extents [ 431.629030][ T5917] usb 1-1: unable to init card! (ret=-5) [ 431.635724][ T5917] snd-usb-caiaq: probe of 1-1:1.0 failed with error -5 [ 431.748424][T17998] smb3: Bad value for 'uid' [ 431.812588][T17953] BTRFS info (device loop3): enabling ssd optimizations [ 431.839889][ T4228] usb 1-1: USB disconnect, device number 37 [ 432.063686][T18012] xt_hashlimit: max too large, truncated to 1048576 [ 432.259782][T18017] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6263'. [ 432.482141][ T4176] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop3 scanned by udevd (4176) [ 432.548069][T18025] xt_cgroup: path and classid specified [ 432.558825][T18023] wg0 speed is unknown, defaulting to 1000 [ 432.586807][T18023] wg0 speed is unknown, defaulting to 1000 [ 432.623093][T18023] wg0 speed is unknown, defaulting to 1000 [ 432.942819][T18035] loop0: detected capacity change from 0 to 1024 [ 433.167085][T18035] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 433.246174][ T4228] wg0 speed is unknown, defaulting to 1000 [ 433.246140][T18023] infiniband syz2: set down [ 433.256911][T18023] infiniband syz2: added wg0 [ 433.498693][T18023] RDS/IB: syz2: added [ 433.502869][T18023] smc: adding ib device syz2 with port count 1 [ 433.529824][T18023] smc: ib device syz2 port 1 has pnetid [ 433.537711][ T4228] wg0 speed is unknown, defaulting to 1000 [ 433.568843][T18023] wg0 speed is unknown, defaulting to 1000 [ 434.122371][T18023] wg0 speed is unknown, defaulting to 1000 [ 434.495523][T18038] loop3: detected capacity change from 0 to 32768 [ 434.630730][T18023] wg0 speed is unknown, defaulting to 1000 [ 434.659315][T18085] loop1: detected capacity change from 0 to 4096 [ 434.832192][T18085] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 434.858704][T18085] EXT4-fs (loop1): Test dummy encryption mode enabled [ 434.954574][T18085] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000004000000,mblk_io_submit,nodioread_nolock,test_dummy_encryption,nombcache,nodelalloc,minixdf,journal_ioprio=0x0000000000000005,,errors=continue. Quota mode: writeback. [ 435.089107][T18023] wg0 speed is unknown, defaulting to 1000 [ 435.647711][T18023] wg0 speed is unknown, defaulting to 1000 [ 436.230390][T18132] netlink: 'syz.1.6315': attribute type 1 has an invalid length. [ 436.237999][T18133] libceph: resolve '0' (ret=-3): failed [ 436.265049][T18132] netlink: 228 bytes leftover after parsing attributes in process `syz.1.6315'. [ 436.549825][T18149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6324'. [ 436.609782][T18149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6324'. [ 436.687971][ T5916] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 436.775793][T18160] ip6t_rpfilter: unknown options [ 437.012096][ T5916] usb 1-1: Using ep0 maxpacket: 8 [ 437.150743][ T5916] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 437.177508][ T5916] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 437.302957][T18174] netlink: 'syz.4.6336': attribute type 49 has an invalid length. [ 437.348107][ T5916] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 437.377502][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 437.385821][ T5916] usb 1-1: SerialNumber: syz [ 437.408816][ T4228] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 437.503549][ T5916] cdc_acm 1-1:1.0: skipping garbage [ 437.512158][ T5916] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 437.547649][ T5916] cdc_acm 1-1:1.0: This needs exactly 3 endpoints [ 437.577833][ T5916] cdc_acm: probe of 1-1:1.0 failed with error -22 [ 437.613639][T18181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6339'. [ 437.689632][T18181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6339'. [ 437.740449][ T5916] usb 1-1: USB disconnect, device number 38 [ 437.879540][ T4228] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 438.020765][T18193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 438.070670][T18193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 438.107860][ T4228] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 438.119694][T18193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 438.139289][ T4228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.167582][ T4228] usb 4-1: Product: syz [ 438.176810][T18193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 438.186125][ T4228] usb 4-1: Manufacturer: syz [ 438.206162][ T4228] usb 4-1: SerialNumber: syz [ 438.279617][T18202] xt_ecn: cannot match TCP bits for non-tcp packets [ 438.507958][ T4228] usb 4-1: Invalid number of CPorts: 0 [ 438.513593][ T4228] es2_ap_driver: probe of 4-1:1.0 failed with error -22 [ 438.703826][T18221] ipt_REJECT: TCP_RESET invalid for non-tcp [ 438.732559][ T5915] usb 4-1: USB disconnect, device number 43 [ 438.799594][T18223] loop4: detected capacity change from 0 to 1024 [ 439.246362][T18223] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 439.367833][T18245] loop2: detected capacity change from 0 to 512 [ 439.699267][T18245] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c018, mo2=0002] [ 439.719420][T18245] EXT4-fs (loop2): orphan cleanup on readonly fs [ 439.800060][T18245] EXT4-fs warning (device loop2): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 439.837742][T18245] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 439.866266][T18245] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #13: comm syz.2.6362: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 440.017710][T18245] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.6362: couldn't read orphan inode 13 (err -117) [ 440.085207][T18245] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000002,noblock_validity,min_batch_time=0x00000000000052ad,grpquota,debug,journal_dev=0x0000000000000001,mb_optimize_scan=0x0000000000000001,inode_readahead_blks=0x0000000000002000,,errors=continue. Quota mode: writeback. [ 440.218842][T18245] EXT4-fs (loop2): Cannot specify journal on remount [ 440.250076][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.256407][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.506894][T18237] loop0: detected capacity change from 0 to 32768 [ 440.551419][T18275] netlink: 'syz.4.6377': attribute type 10 has an invalid length. [ 440.597769][T18275] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6377'. [ 440.685948][T18237] [ 440.685948][T18237] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 440.685948][T18237] [ 440.805593][T18237] ERROR: (device loop0): diWrite: ixpxd invalid [ 440.805593][T18237] [ 440.868762][T18287] netlink: 'syz.4.6383': attribute type 9 has an invalid length. [ 440.876608][T18237] ERROR: (device loop0): txCommit: [ 440.876608][T18237] [ 440.897852][T18287] netlink: 'syz.4.6383': attribute type 7 has an invalid length. [ 440.938148][T18287] netlink: 'syz.4.6383': attribute type 8 has an invalid length. [ 440.997825][T18287] netlink: 'syz.4.6383': attribute type 13 has an invalid length. [ 441.070515][ T4185] [ 441.070515][ T4185] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 441.070515][ T4185] [ 441.107941][ T4185] [ 441.107941][ T4185] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 441.107941][ T4185] [ 441.461383][T18311] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6393'. [ 441.469653][T18313] xt_ecn: cannot match TCP bits for non-tcp packets [ 441.534686][T18311] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6393'. [ 441.617221][T18311] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6393'. [ 441.696735][T18311] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6393'. [ 441.752165][T18311] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6393'. [ 442.987776][T18363] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6417'. [ 442.996779][T18363] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6417'. [ 443.077469][T18363] device vlan0 entered promiscuous mode [ 443.153990][T18328] loop2: detected capacity change from 0 to 32768 [ 443.182112][T18369] loop4: detected capacity change from 0 to 2048 [ 443.381125][T18369] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 443.406197][T18328] [ 443.406197][T18328] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 443.406197][T18328] [ 443.522950][T18328] ERROR: (device loop2): diWrite: ixpxd invalid [ 443.522950][T18328] [ 443.559408][T18328] ERROR: (device loop2): txCommit: [ 443.559408][T18328] [ 443.697837][T10423] [ 443.697837][T10423] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 443.697837][T10423] [ 443.747629][T10423] [ 443.747629][T10423] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 443.747629][T10423] [ 443.867722][T18400] netlink: 'syz.0.6435': attribute type 1 has an invalid length. [ 444.107760][ T5916] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 444.214440][T18411] netlink: 'syz.4.6441': attribute type 12 has an invalid length. [ 444.648169][ T5916] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 444.653819][T18429] delete_channel: no stack [ 444.687074][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.749575][ T5916] usb 2-1: config 0 descriptor?? [ 444.815316][ T5916] cp210x 2-1:0.0: cp210x converter detected [ 445.121842][T18445] loop0: detected capacity change from 0 to 2048 [ 445.130436][T18447] netlink: 'syz.2.6458': attribute type 79 has an invalid length. [ 445.246624][ T5916] usb 2-1: cp210x converter now attached to ttyUSB0 [ 445.272194][ T5916] usb 2-1: USB disconnect, device number 40 [ 445.294648][ T5916] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 445.317902][T18445] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 445.368116][ T5916] cp210x 2-1:0.0: device disconnected [ 445.883821][T18475] loop3: detected capacity change from 0 to 64 [ 445.936730][T18419] loop4: detected capacity change from 0 to 32768 [ 446.074257][T18475] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 446.088211][T18419] [ 446.088211][T18419] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 446.088211][T18419] [ 446.205530][T18419] ERROR: (device loop4): diWrite: ixpxd invalid [ 446.205530][T18419] [ 446.277948][T18419] ERROR: (device loop4): txCommit: [ 446.277948][T18419] [ 446.376767][ T4190] [ 446.376767][ T4190] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 446.376767][ T4190] [ 446.437615][ T4190] [ 446.437615][ T4190] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 446.437615][ T4190] [ 447.454894][T18516] infiniband syz0: set active [ 447.497489][T18516] infiniband syz0: added bond_slave_1 [ 447.600174][T18516] RDS/IB: syz0: added [ 447.637179][T18516] smc: adding ib device syz0 with port count 1 [ 447.747508][T18516] smc: ib device syz0 port 1 has pnetid [ 447.876693][T18565] loop4: detected capacity change from 0 to 512 [ 447.928052][T18569] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 448.415628][ T4228] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 448.798850][T18590] loop4: detected capacity change from 0 to 256 [ 448.869243][ T4228] usb 3-1: not running at top speed; connect to a high speed hub [ 448.931717][T18590] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d) [ 448.949877][ T4228] usb 3-1: New USB device found, idVendor=0424, idProduct=5534, bcdDevice= 1.00 [ 448.987579][ T4228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.104744][ T4228] hub 3-1:1.0: USB hub found [ 449.271494][T18566] loop1: detected capacity change from 0 to 32768 [ 449.379066][ T4228] hub 3-1:1.0: config failed, can't read hub descriptor (err -22) [ 449.394134][T18600] 8021q: adding VLAN 0 to HW filter on device bond2 [ 449.434151][T18566] (syz.1.6516,18566,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 449.448578][ T4228] usb 3-1: USB disconnect, device number 31 [ 449.548544][T18566] (syz.1.6516,18566,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 449.666555][T18566] JBD2: Ignoring recovery information on journal [ 449.847836][ T5215] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 449.860365][T18566] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 449.991540][T18566] ocfs2: Unmounting device (7,1) on (node local) [ 450.317573][ T5215] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 450.347607][ T5215] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 450.417618][ T5215] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 450.477587][ T5215] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.487380][ T5215] usb 5-1: config 1 interface 0 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 0 [ 450.583311][ T5215] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 450.624007][ T5215] usb 5-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 450.667586][ T5215] usb 5-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 450.753541][T18636] netlink: 'syz.0.6549': attribute type 1 has an invalid length. [ 450.802816][T18636] netlink: 'syz.0.6549': attribute type 3 has an invalid length. [ 450.860978][T18636] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6549'. [ 450.911105][T18636] NCSI netlink: No device for ifindex 55159 [ 450.912809][ T5215] usb 5-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 450.976222][ T5215] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.002236][ T5215] usb 5-1: Product: syz [ 451.018919][ T5215] usb 5-1: Manufacturer: syz [ 451.023702][ T5215] usb 5-1: SerialNumber: syz [ 451.102012][T18603] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 451.117668][T18603] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 451.169912][T18652] CIFS: Attempting to mount \\127.0.0.1\share [ 451.188573][T18652] CIFS: VFS: Error connecting to socket. Aborting operation. [ 451.196223][T18652] CIFS: VFS: cifs_mount failed w/return code = -101 [ 451.347269][ T5215] usb 5-1: unable to init card! (ret=-5) [ 451.367820][ T5215] snd-usb-caiaq: probe of 5-1:1.0 failed with error -5 [ 451.390269][ T4228] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 451.622560][ T5915] usb 5-1: USB disconnect, device number 42 [ 451.644313][T18670] netlink: 'syz.1.6566': attribute type 21 has an invalid length. [ 451.670400][T18670] netlink: 'syz.1.6566': attribute type 4 has an invalid length. [ 451.705009][T18670] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6566'. [ 451.870133][ T4228] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 451.889488][ T4228] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 451.933693][ T4228] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 451.983509][ T4228] usb 4-1: config 1 has no interface number 1 [ 452.008688][ T4228] usb 4-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 452.067583][ T4228] usb 4-1: config 1 interface 105 has no altsetting 0 [ 452.190199][T18691] netlink: 11 bytes leftover after parsing attributes in process `syz.1.6576'. [ 452.266536][ T4228] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 452.285856][ T4228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.326335][ T4228] usb 4-1: Product: syz [ 452.346592][ T4228] usb 4-1: Manufacturer: syz [ 452.362741][ T4228] usb 4-1: SerialNumber: syz [ 452.372495][T18698] loop2: detected capacity change from 0 to 1024 [ 452.388037][T18702] netlink: 'syz.1.6582': attribute type 2 has an invalid length. [ 452.528718][T18698] hfsplus: catalog record size mismatch (type 2, got 88, expected 248) [ 452.642519][ T4228] aqc111: probe of 4-1:1.105 failed with error -22 [ 452.686706][ T5215] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 452.887781][T18718] netdevsim netdevsim1: Firmware load for '..' refused, path contains '..' component [ 452.907679][T18722] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6591'. [ 452.911735][ T5916] usb 4-1: USB disconnect, device number 44 [ 453.148015][ T5215] usb 1-1: config 0 has an invalid interface number: 147 but max is 0 [ 453.176546][ T5215] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 453.227712][ T5215] usb 1-1: config 0 has no interface number 0 [ 453.234018][ T5215] usb 1-1: config 0 interface 147 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 453.327266][ T5215] usb 1-1: config 0 interface 147 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 453.335551][T18736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6599'. [ 453.367673][ T5215] usb 1-1: config 0 interface 147 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 453.514516][T18745] loop3: detected capacity change from 0 to 64 [ 453.531920][T18746] netlink: 'syz.4.6605': attribute type 25 has an invalid length. [ 453.580168][T18746] netlink: 'syz.4.6605': attribute type 6 has an invalid length. [ 453.628201][ T5215] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.03 [ 453.637325][ T5215] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.690285][ T5215] usb 1-1: Product: syz [ 453.707572][ T5215] usb 1-1: Manufacturer: syz [ 453.722497][ T5215] usb 1-1: SerialNumber: syz [ 453.754578][ T5215] usb 1-1: config 0 descriptor?? [ 453.828966][T18700] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 453.857824][T18760] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6610'. [ 453.953485][ T5215] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 454.074251][ T5215] usb 1-1: USB disconnect, device number 39 [ 454.091409][ T154] usb 1-1: Failed to submit usb control message: -71 [ 454.109124][ T154] usb 1-1: unable to send the bmi data to the device: -71 [ 454.159808][ T154] usb 1-1: unable to get target info from device [ 454.204521][ T154] usb 1-1: could not get target info (-71) [ 454.237810][ T154] usb 1-1: could not probe fw (-71) [ 454.694526][T18796] loop2: detected capacity change from 0 to 512 [ 454.938993][T18796] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.6626: attempt to clear invalid blocks 2 len 1 [ 455.024903][T18796] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 455.097700][T18796] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.6626: invalid indirect mapped block 1819239214 (level 0) [ 455.157055][T18796] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.6626: invalid indirect mapped block 1819239214 (level 1) [ 455.259782][T18796] EXT4-fs (loop2): 1 truncate cleaned up [ 455.265685][T18796] EXT4-fs (loop2): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000003,,errors=continue. Quota mode: none. [ 455.397747][ T5215] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 455.538016][ T4288] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 455.720859][T18832] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6643'. [ 455.787939][ T5215] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 455.797967][ T4288] usb 4-1: Using ep0 maxpacket: 16 [ 456.014955][ T4288] usb 4-1: unable to get BOS descriptor or descriptor too short [ 456.055042][ T5215] usb 5-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 456.087574][ T5215] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.095783][ T5215] usb 5-1: Product: syz [ 456.125705][ T5215] usb 5-1: Manufacturer: syz [ 456.131173][ T4288] usb 4-1: config 1 interface 0 altsetting 64 bulk endpoint 0x3 has invalid maxpacket 255 [ 456.147572][ T5215] usb 5-1: SerialNumber: syz [ 456.152287][ T4288] usb 4-1: config 1 interface 0 has no altsetting 0 [ 456.181910][ T5215] usb 5-1: config 0 descriptor?? [ 456.279762][ T5215] powermate: probe of 5-1:0.0 failed with error -5 [ 456.441524][T18819] loop0: detected capacity change from 0 to 32768 [ 456.504418][ T5215] usb 5-1: USB disconnect, device number 43 [ 456.549849][ T4288] usb 4-1: string descriptor 0 read error: -22 [ 456.556178][ T4288] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 456.617580][ T4288] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.702136][T18822] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 456.740114][ T4288] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 456.817682][T18856] xt_hashlimit: max too large, truncated to 1048576 [ 456.825037][ T4288] ------------[ cut here ]------------ [ 456.842568][ T4288] WARNING: CPU: 0 PID: 4288 at net/netfilter/nft_set_pipapo.c:2355 nft_pipapo_destroy+0x8b0/0x960 [ 456.867777][ T4288] Modules linked in: [ 456.871743][ T4288] CPU: 0 PID: 4288 Comm: kworker/0:8 Not tainted syzkaller #0 [ 456.911559][ T4288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 456.987600][ T4288] Workqueue: events nf_tables_trans_destroy_work [ 457.021747][ T4288] RIP: 0010:nft_pipapo_destroy+0x8b0/0x960 [ 457.048255][ T4288] Code: 24 80 3c 18 00 74 08 4c 89 f7 e8 2b e0 81 f9 49 c7 06 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 c0 b1 3c f9 <0f> 0b e9 ad f7 ff ff 48 c7 c1 30 14 8b 8d 80 e1 07 80 c1 03 38 c1 [ 457.132874][ T4288] RSP: 0018:ffffc900032afa68 EFLAGS: 00010293 [ 457.154955][ T4288] RAX: ffffffff883c5de0 RBX: ffff88805e866cf0 RCX: ffff888029dc3b80 [ 457.183282][ T4288] RDX: 0000000000000000 RSI: ffff88805e866c00 RDI: ffff88805ede4e28 [ 457.211721][ T4288] RBP: ffffc900032afc30 R08: ffff888029dc3b80 R09: 0000000000000008 [ 457.230199][ T4288] R10: 0000000000000018 R11: 0000000000000000 R12: ffff88805e866cc0 [ 457.248433][ T4288] R13: dffffc0000000000 R14: ffff88805e866d10 R15: dffffc0000000000 [ 457.279931][ T4288] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 457.310183][ T4288] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 457.316829][ T4288] CR2: 0000001b32817ff8 CR3: 000000006679b000 CR4: 00000000003506f0 [ 457.367160][ T4288] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 457.398610][ T4288] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 457.416783][ T4288] Call Trace: [ 457.421462][ T4288] [ 457.424485][ T4288] ? __lock_acquire+0x7b50/0x7b50 [ 457.460253][ T4288] ? do_raw_spin_lock+0x128/0x2f0 [ 457.465371][ T4288] nft_set_destroy+0x488/0xa30 [ 457.496671][ T4288] ? do_raw_spin_unlock+0x11d/0x230 [ 457.517576][ T4288] nf_tables_trans_destroy_work+0xc5d/0xf00 [ 457.543839][ T4288] ? __lock_acquire+0x7b50/0x7b50 [ 457.567591][ T4288] ? nft_object_dump+0x1e0/0x1e0 [ 457.572681][ T4288] ? _raw_spin_unlock_irq+0x1f/0x40 [ 457.605732][ T4288] process_one_work+0x867/0xff0 [ 457.617612][ T4288] ? worker_detach_from_pool+0x240/0x240 [ 457.637572][ T4288] ? lockdep_hardirqs_off+0x70/0x100 [ 457.643092][ T4288] ? _raw_spin_lock_irq+0xb7/0xf0 [ 457.677587][ T4288] ? _raw_spin_lock_irqsave+0x100/0x100 [ 457.693339][ T4288] ? wq_worker_running+0x97/0x170 [ 457.713505][ T4288] worker_thread+0xad7/0x12a0 [ 457.722010][ T4288] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 457.749105][ T4288] kthread+0x42e/0x520 [ 457.753289][ T4288] ? rcu_lock_release+0x20/0x20 [ 457.787413][ T4288] ? kthread_blkcg+0xd0/0xd0 [ 457.802238][ T4288] ret_from_fork+0x1f/0x30 [ 457.806729][ T4288] [ 457.827584][ T4288] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 457.834901][ T4288] CPU: 0 PID: 4288 Comm: kworker/0:8 Not tainted syzkaller #0 [ 457.842487][ T4288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 457.852565][ T4288] Workqueue: events nf_tables_trans_destroy_work [ 457.858941][ T4288] Call Trace: [ 457.862349][ T4288] [ 457.865308][ T4288] dump_stack_lvl+0x188/0x250 [ 457.870595][ T4288] ? show_regs_print_info+0x20/0x20 [ 457.875845][ T4288] ? load_image+0x410/0x410 [ 457.880571][ T4288] panic+0x2f8/0x850 [ 457.884497][ T4288] ? bpf_jit_dump+0xd0/0xd0 [ 457.889058][ T4288] ? ret_from_fork+0x1f/0x30 [ 457.893670][ T4288] ? nft_pipapo_destroy+0x8b0/0x960 [ 457.898891][ T4288] __warn+0x248/0x2b0 [ 457.902893][ T4288] ? nft_pipapo_destroy+0x8b0/0x960 [ 457.908111][ T4288] report_bug+0x1b9/0x2e0 [ 457.912617][ T4288] handle_bug+0x3a/0x70 [ 457.916810][ T4288] exc_invalid_op+0x16/0x40 [ 457.921452][ T4288] asm_exc_invalid_op+0x16/0x20 [ 457.926384][ T4288] RIP: 0010:nft_pipapo_destroy+0x8b0/0x960 [ 457.932214][ T4288] Code: 24 80 3c 18 00 74 08 4c 89 f7 e8 2b e0 81 f9 49 c7 06 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 c0 b1 3c f9 <0f> 0b e9 ad f7 ff ff 48 c7 c1 30 14 8b 8d 80 e1 07 80 c1 03 38 c1 [ 457.952192][ T4288] RSP: 0018:ffffc900032afa68 EFLAGS: 00010293 [ 457.958487][ T4288] RAX: ffffffff883c5de0 RBX: ffff88805e866cf0 RCX: ffff888029dc3b80 [ 457.966663][ T4288] RDX: 0000000000000000 RSI: ffff88805e866c00 RDI: ffff88805ede4e28 [ 457.974749][ T4288] RBP: ffffc900032afc30 R08: ffff888029dc3b80 R09: 0000000000000008 [ 457.982755][ T4288] R10: 0000000000000018 R11: 0000000000000000 R12: ffff88805e866cc0 [ 457.990764][ T4288] R13: dffffc0000000000 R14: ffff88805e866d10 R15: dffffc0000000000 [ 457.998791][ T4288] ? nft_pipapo_destroy+0x8b0/0x960 [ 458.004027][ T4288] ? nft_pipapo_destroy+0x8b0/0x960 [ 458.009253][ T4288] ? __lock_acquire+0x7b50/0x7b50 [ 458.014411][ T4288] ? do_raw_spin_lock+0x128/0x2f0 [ 458.019466][ T4288] nft_set_destroy+0x488/0xa30 [ 458.024252][ T4288] ? do_raw_spin_unlock+0x11d/0x230 [ 458.029570][ T4288] nf_tables_trans_destroy_work+0xc5d/0xf00 [ 458.035482][ T4288] ? __lock_acquire+0x7b50/0x7b50 [ 458.040551][ T4288] ? nft_object_dump+0x1e0/0x1e0 [ 458.045514][ T4288] ? _raw_spin_unlock_irq+0x1f/0x40 [ 458.050825][ T4288] process_one_work+0x867/0xff0 [ 458.055712][ T4288] ? worker_detach_from_pool+0x240/0x240 [ 458.061386][ T4288] ? lockdep_hardirqs_off+0x70/0x100 [ 458.066883][ T4288] ? _raw_spin_lock_irq+0xb7/0xf0 [ 458.072105][ T4288] ? _raw_spin_lock_irqsave+0x100/0x100 [ 458.077668][ T4288] ? wq_worker_running+0x97/0x170 [ 458.082713][ T4288] worker_thread+0xad7/0x12a0 [ 458.087600][ T4288] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 458.093599][ T4288] kthread+0x42e/0x520 [ 458.097690][ T4288] ? rcu_lock_release+0x20/0x20 [ 458.102557][ T4288] ? kthread_blkcg+0xd0/0xd0 [ 458.107167][ T4288] ret_from_fork+0x1f/0x30 [ 458.111642][ T4288] [ 458.114868][ T4288] Kernel Offset: disabled [ 458.121680][ T4288] Rebooting in 86400 seconds..