last executing test programs: 3.121617724s ago: executing program 1 (id=11353): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4defa1e72f65a65cdd26dcc389aacf7856da9aecf3765d4c032e1960faf25bad906b7d3440b6e71a82f1d8f8b8db35b6091f3af94c6b46b9ab10fe3923f268771078d2668be7bd3eb941d4bb5baa8547e36283a065ce5766cbff3a8fc37fc4507643d3786bbf231d3ed88cb8b01eab14e4372cf4f89bd1b853caa5d9f07f523b9dfa8cc09053ff36fde08e96fb6b3acc196b1bd1e2d3a6c65f585df7e2b8b17439a7ab29a7dfe642c2f0ac7a81eca8073b559663f2daf7a0832b2b09557794a21bf114831f8e6db3922d0cd169e5a8b4adc95d7322ee75944de15f57780b88fef7f3d9b256705ccfa2125b43ce8e3aacaead963cdd7f792f14c9b24493f9f830f6de8da93bbd4357095631adec14224dd9bb049e826f3a49624393e6a031103faff0902ba88ae30af4a61caa77ff956214196fcf3c5536d823284306f367afcb46fb43231911cc53091671e7d853ebf015241b18e9fb6ac6d9a7a1b05dfd6d9e56a51567cd8837dd045abf6b85550f0dd8dded43147ab9bfadc18b9984699d5d875cb21a95a7f584d8c466d033df75193f9ae58b85cfacc54f6c6e12a0debe40ee361a839563bc2cb64271672a55370c2b035b482074ce2487ef8a3bc1c68856e6e09539276d961a0c647f1ee3237496fc99623e8fd33faf7797d86a88dcee152d15e10739bcbbd6077b76867e291f350d999024c12faf81f83792f48f7f6dd66aa6854e460ef7f8c755f3a6dd76509ea0d2db39057a5129185b2fb11546cd5d6cc59f640e9028ae6c7075fba5e5b5593d7f79ec387833f465d09bde464112821eaec5e6e8f2aee8d7358f9c14afe2018856f610848706c71cda62493aef2e39efb71b4a8e804847eda66b2b5b1d75b478f19208ee1ac43afb2dbbba5dd0f29f6946022e09fb853cb176ca3474ba2fa67cb245fe85ec61a095d6fd9ac2ac5685920201617342fe56072427b9bd3626a1a371e67041fcda781be0c234d6feb5ad500e8bc7074381fd0d04983a4a6cdb6c8e03d59dc50925e9e4b24e6f8e455f02818959f2927f0a2d9ff62ec3c5c399077048f7d3dad0830b2e6563693f2f9d48eca8c34804a7626282a4a214d13786993c011a88194dbf7b23e25f592e62186c9fb565fac7632de356153c89a6be0b6b26ba48c2427424769fcbd7ee072ed4bd4d0731d06c8537d616b1145a6c70edb13fb4dba3565221b3a2897a23861cd0e8e0060021cdd7de002d5e785e5d6d3d07f4e445ada9c8d9ba8b819d0b5c7b5d15a5192d3a83c125c8e117c823a9e33316b8c9154e7330d3a865048dbd9c14757691bfe56f10423f6ab717bec5eebeac6ba9ad1aeb6cde09d7fda8e475a71ac48d46b8d9a40879c9dec2db5c4799e5fc8e8b3d419031c1033fce88ae2c93d7ca62c9302e6b45ca8dfebe5b92724f035e8e9d7704efb23f445999fe08cfa28404874d8acc8d37870d394d9fcc8dbe763bc85c37f0f3bcc2cbea420cd073db598e7d89c14a31e5bf57cbefa301427c93091505f1f3e5cdf712958b2e8fc56684d3388107c1728f0e5a3be2164246071653e256ed3bf3000c17301da9a5a3d9ca475867c4f311a24e5ae909a62047a9e6bb71cbcb4f159c2ef0f66b4d0f9da51aba99cd9448443dd277362af18d32f111c48a952ef555b2c7c58b997ce61e74cc7551b57eaffe411219baddf490926d8e260dcd87c069e617195c352950f9b51ce88c12c4f7997ba515f77e68d44f831cdf4d7ee8b1b7cedcb4c4fc7e85ba288c8555d49d5b4b9bb70dc4b688bd12e6b38e37150f3ea457a76b23d5abe6551ea598e090aed87822b0954b8db1a7c605c925b7f9240b0e7a020f292a1fd4a37c74139bc6e7ff08373ebfc8feea371ae0b6c61c715f6f1f4b0b994c7e2e129f87db959aae6ff48664d824b29ba9f255890f9c537178db9c5302097891557f8175a46f308b1a2530aa726ea9d4cfce76db50637369724d0c5f51c97edb58ff5eb9b2434b3721b61688ba12471b97c6a65ba085e15406568ac852590701f2ef8451c5cf1191d70f51eaea9ddc4cbdd7428f627db5069111f65062d5cc34581826af3e670613dda99e31c42736aabd87be56e214ed606862a152455f91891b7430bae03284569c234588f495a5ecc4a23fad6ba34e2ee9ebde8c7f5f62c9344659375c2a1fe6fa6e4ef68712223b9471c513bb11429dbb8a45463c8882f462275ee0da567c60c2d8038843e0c20486676e9978f2aec9187820c94a6e7e519d06daf2ab198f5cafcab4d9c90a479800906192d66a3301a34fa6c5a931cea0a479a4d98d86d9de3e061323504b57186dd33df7a16ccb688c0de203666cb0a6b543a9d069dded44a3b432cbb71da921dcab6be1c2d7494d3b07841d9b4f9d659b5d3d3b2ed916f91588d589128e4b2d4448e6aab5a8160eddca0f6e022abb85e251a11cd6bae57a09b2c434ab5bdf6264afb20d5ab022d152e345bd32ba9283aa5b3cd9118bd271a8ac9083c98b8a83064e65428f7ad7b35bf1d60d4e703f22d2d316fc12bd68bcced82cf0962a3d5769c6a3d75d59f7a7b76454661fd3574b8c8e26d20c372407854505ea6c2406fbd8a1ba7bb017c565228aa6d03d18ed309a308ffb1ecec73c246413e7c70f25070eafed9e70d22e9e8b44125c44eceff37e65bf073bc6fad1ea2b72675af4bf70586a8f7e0f35700de94c802522897576ed115fa21b3d23a367844520b33f5b9aedc0245096765f4cb3b2ff4e54f39bd7346c2347875d75a931b17c6c424ddb4767e0e63cc7725a8fc4b1dbe7929b2f909cc5be8b09e63330341e6471dcac0f8b44693d01805a1467b71612260e2a273861b3697440a5f75497796bffcf79d62a4a50a6ed5ef2efe8c83374f2ecd08d8d628aa03b01a11caeb2bdecc0ab2abcecfa15627979d7c3f9dec5389fc6625e957f8075e23e636dd5514596189d568e14d33ae518e6e9978c6a36a74b49fdbd1260095c9abe447e618878039b75e305b1d2c9ddeb9e5cedb11802e0833739d8595d57d749c890c9290cca4aa96e6718747543796a187e54a66c2f71beefddf911a7a74b59c48ba642d5ecd4d415f48dfbde5baac8a4ba063c1b985d9f9f3180e8a1c8b2cf6a25c2ff17688cc858ac8b9c67960f09a1ca5f28f8e877159e00fe7fb10cca73b391508895e7e52c22f9b38d73dabd6ff7c55ebf4e1611daee8d52b4ceee49a6df7daeb81bf9d1c943a74c03d3dda52c5b99f3225c1b87074f5cef6187878bc5b665ec0561adcc9781280dd1c6592555d327afea78b21beeeb66a0af3eab3249245f41cdbca309d3fba5d4b345319dd0a26134c0c896f2c8d32fda28600013f6a4c95b4038faba70d6c480b360c55bdc0595f7ca636e85521ba505d894f9c5f0a90719bc9944f386ad7491422ff12f34a3c048708d51305a8cc5b2a502ac1575a14c75e9fb7219ede2f6d9c1b362230b6189e0d8cd8ccd11fd0325182c6e46c9977bf63aa02f7024aeb4389f989f5733a198b45e4329c4c1a538a009f216ad3ac09cac39547b4fd21a5d7146ea307ad9b9339f39d5161d17b59860a0aed38cd89d1b68c6438346d51a3a283074e34ee01d2eca527b1b3836ccdf7e807007152c79d14324e3d887c9551a9447527db4434810f5b0b73d855f32a0c89aa784e43f4c1657d408dd33f88aeae1e5186bbcc2a348b708e3cec9080e12ee3676beb5ee86a9b5cc4a3496c242b95a248906ed62f984b22373bdfd97515441f34e01006d8d1244aa88403f207cd8820ffe07634fc86d00f871c1e4c9e8fc1a00d295e36d98119599b62379cda10ada85efe7b50c5f38d8d010a2cd53db900939db1ffce14feffb7940d12842f4f2b507e1fa49e526752d1e3d80a0c2a75e870d85f77fd91fc46ac1b1288dd33338cdad154d6b80b5a925431868d62a3fb0036f28fe259a3f555f767526a9ea230c33843efc49ac3182a357845ea122d606ab22c9f937b2b905e02dd1cb07d380e3486be6167f00b6e6d90a3c1d6aee15da439a55542ce177e498998ba8ac69a848e63e4c7564e4dc04aad595fa1ab81275edafa0d352029c304200d2f2c5881cbf5a26b2141bdb117879cc11e7c13bd62f221ae1ac04dca3d8d58a13c130557ecf5f36184c7366d3852d0cbd6ca42f2a971d87c0bb204097af1a3abdab7b95d07fcdbf5f42607695dedcd26e30b8fc5cfd7b333a95f3ee69d5ba7911dadb1394285c437a0f26fc027737ba5ee7d63333f80acb59f1a7faf2ec3031c6533107502bffc92d8726a48ce00cdb5f1258d85ff8eb72bfb162e122022f1f3e8a72b41d2689d5228b1130fbc946384401f3bbe726314bb09d430333ad78de07b3cec5c18a4f4abb69507b6451ca4e610b8fc988c983426e0cc3b9d15393026eb75d3d08634b8a7495cef69aab83d27ea1b5b41f40b996dd10023d81f77d61192930ffc25cae1e149412322fcb0aa47bee3afc44ec3dda96c9294854e2cbaebfea6f9a90f0b3797d5f505824b4de964151569f881f87f9dd9d30a2a2f9ed01059a909cba157902903c77f2f3d056231e7c7483a3f35e04360e084f0d3f94a92c92c77b3f06479fbc417366d7fe87ddfcdfd86274f87a5f817b0f947924cbe2329f16f6b00c8a0ab96164f7b35fed38a388380af05c3600abc37a944c9e75a691728c26896ac3615297766f406aeb0f2fd147d68fad3fb3b032880280ebb4bf89252a36b0d9eb393daae72829b8da870b886676244897d5322b32703fcf138b66eedeb3024666a88fd99d8962f696ab7b34e19ced1bd27488aa2ffe5bfa11f8f9289bd8c052d4e88316cc33b0255ef1bfca4c17067d7f78175c56db481fe8dc6f73b1cbdf9d5823f115c9e03f2dfd07bc1ad88564d48b18cd9a30d83cbd5e6a3eedcb0ee86e5dd47f32820cb74dcf730b2052b31297b529e5e24f042335d13915e4048132fe1a101841e919c7870bb680eddead9a6111394bc12e274fbd88abaf2d254721c42e82abf4d1e319a631794ed6ce319ddd844ac5e9b1fc96dd9aaad42f2e087abe1b85430c4a00631970e3e74a6ed923f49e0df75685e044fae3fcea0af4dbfeebe0a9c2e73e8a89b89603a75f585e3ebba5453ae595da1469ea90ea3c9fb6a22411c56c58dfbf504caa629dbfc73ebbedc91669f2babf8b8215c525edf8feb366f104ffa9eb2bb79232660aece4730ef1ae8585c629ffe1390356a58e900da145b83ad177c7bb2d125e59d7ff4d3a8562efc620b4cf9b33c2305bbf1957e0f8b06f0fbe9c80db73b08fdd0be4a1ea4f91f52af47160040424aed8ac3c10251fb0b5d9be08247edf3dda5d1750d0597d60c8a0d9418a4e0c9325bb90f0886f9e5dda9e88ac1942ec1e53da0cf5ccad66b9cdfc2fdca784dd06a73713ef73785706d024873ddca5ccfcf0b91748a2c1fbd8c241934b5b473007b29d76aec5addf7b945a5f7abd6ddeccc8d0ccb26d69d4793b7224c27ba7bf45aac8a2be56086ab8c65ea69fdd593a01a29e2912378002d824bd98e6ed1c5dd5f33be529e640997f5f1bbde051fb2a669145966db4889bf32aa13777ac6c077c51bb8b2523954cea3adc307cfe53b8cbb00edf0c04c456392aea6613e8078a309dc538a6a24f80fc1b7f9fce3e3291ca6dab8090a634fcdb24e7a9de8aecd595b988f597cd623d148a8841b0a5203953166ea2e85316928f28dd2604d37c9ec80a49c0d91cbfe6d584b9b6a321b97bf99ae1d67985fd441976a828c97456003a7892c7c7f4a51bb49e3d3ea1e95ec29c89a2676", 0x1001}], 0x3) 3.015657787s ago: executing program 4 (id=11355): r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) 2.934762838s ago: executing program 1 (id=11356): r0 = socket(0x10, 0x803, 0x0) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0xffffffffffffff74) 2.86734732s ago: executing program 4 (id=11358): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000540)={0xfffffffffffffffc, 0x208000, 0x800}, 0x20) 2.806533662s ago: executing program 1 (id=11359): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix={0x3, 0x7, 0x35315842, 0x0, 0x1, 0x5, 0x2, 0x2, 0x0, 0x2, 0x1, 0x4}}) 2.662708585s ago: executing program 1 (id=11362): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) getsockopt$sock_int(r0, 0x1, 0x4, 0x0, &(0x7f0000000080)=0x3e) 2.611434237s ago: executing program 4 (id=11363): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@deltaction={0x30, 0x18, 0x6638af8a35f2c0e9, 0x70bd28, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x96, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000044}, 0x40) 2.47151856s ago: executing program 1 (id=11366): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a000000180100002025642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000089cdc832850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000440)="b9ff03316844268cb89914f088a84b4586dd", 0x0, 0x23, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.286460614s ago: executing program 4 (id=11368): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000000)={0x40, 0x17, 0x1, "03"}, 0x0, 0x0}) 2.285331064s ago: executing program 1 (id=11369): r0 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00@'], 0x0, 0x0, 0x0, 0x0}) 1.877430704s ago: executing program 3 (id=11374): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x5, 0x1e}]}, 0x24}}, 0x0) 1.792952956s ago: executing program 3 (id=11375): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000740)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xa00004, &(0x7f0000000380)={[{@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@anchor={'anchor', 0x3d, 0x7}}, {@noadinicb}, {@uid}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@fileset={'fileset', 0x3d, 0xc}}, {@undelete}, {@longad}, {@adinicb}, {@undelete}, {@uid_forget}, {@umask={'umask', 0x3d, 0x7fffffff}}]}, 0x11, 0xc6d, &(0x7f0000001980)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x399446c, 0x0, 0x1, 0x0, &(0x7f0000000080)) 1.494640094s ago: executing program 3 (id=11377): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0xc) 1.489340034s ago: executing program 0 (id=11378): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x2}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}}, 0x0) 1.265850909s ago: executing program 0 (id=11380): r0 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0xc95e}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x1ef6e3}], 0x100000000000011a) 1.213726901s ago: executing program 3 (id=11381): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xe0881) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x100) 909.092098ms ago: executing program 0 (id=11385): r0 = fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, 0x0, 0x0, 0xffffffffffffffff) 858.378409ms ago: executing program 3 (id=11386): r0 = socket(0x2, 0x3, 0x4) getsockopt(r0, 0xff, 0x100000000000001, 0x0, 0x0) 783.988291ms ago: executing program 2 (id=11387): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xa60a, 0x3}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) 723.817003ms ago: executing program 3 (id=11388): creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$ocfs2(&(0x7f0000004480), &(0x7f00000044c0)='./file0\x00', 0x800401, &(0x7f0000000080)={[{@data_ordered}, {@err_ro}, {@heartbeat_none}, {@localflocks}, {@heartbeat_none}, {@data_writeback}, {@localalloc}, {@intr}]}, 0x8, 0x446c, &(0x7f0000004780)="$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") 621.933615ms ago: executing program 0 (id=11389): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f0000000140)=0x1, 0x4) 619.949726ms ago: executing program 4 (id=11390): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x18, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}}, 0x0) 602.615615ms ago: executing program 2 (id=11391): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e24, 0x80000000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x42}}}, 0x84) 422.05294ms ago: executing program 2 (id=11392): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000002a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x7) 392.837371ms ago: executing program 4 (id=11393): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x5d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414001824d0072413"], 0x0) 237.404115ms ago: executing program 0 (id=11394): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8400000000000000}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa4}}, 0x20008844) 206.957385ms ago: executing program 2 (id=11395): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000240), 0x35c, 0x0) preadv(r0, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/87, 0x57}], 0x1, 0x5, 0x0) 120.531527ms ago: executing program 2 (id=11396): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) readv(r0, &(0x7f0000001d00)=[{0x0, 0x500}, {&(0x7f0000001c40)=""/178, 0xb2}], 0x2) 39.957319ms ago: executing program 0 (id=11397): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 0s ago: executing program 2 (id=11398): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) kernel console output (not intermixed with test programs): 0 fs, running e2fsck is recommended [ 704.699564][ T4816] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 704.763399][T24728] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 704.809403][T24728] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.9379: bg 0: block 248: padding at end of block bitmap is not set [ 704.831342][T24728] Quota error (device loop2): write_blk: dquota write failed [ 704.838913][T24728] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 704.879853][T24728] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.9379: Failed to acquire dquot type 1 [ 704.893402][ T4816] usb 2-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 704.905346][T24728] EXT4-fs (loop2): 1 truncate cleaned up [ 704.924034][ T4816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.927978][T24728] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 704.959483][ T4816] usb 2-1: Product: syz [ 704.963704][ T4816] usb 2-1: Manufacturer: syz [ 704.988720][ T4816] usb 2-1: SerialNumber: syz [ 705.019223][ T4816] usb 2-1: config 0 descriptor?? [ 705.079517][ T4323] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 705.167933][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 705.180265][ T6119] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5 [ 705.199440][ T6119] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:21: Failed to release dquot type 1 [ 705.244550][ T4816] int51x1: probe of 2-1:0.0 failed with error -22 [ 705.462959][ T4816] usb 2-1: USB disconnect, device number 49 [ 705.592605][ T4323] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 705.801248][ T4323] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 705.826458][ T4323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.851192][ T4323] usb 3-1: config 0 descriptor?? [ 706.099397][ T4323] [drm] vendor descriptor length:6 data:06 5f 01 00 00 00 00 00 00 00 00 [ 706.107974][ T4323] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 706.320555][ T4323] [drm:udl_init] *ERROR* Selecting channel failed [ 706.344863][ T4323] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 706.379514][ T4323] [drm] Initialized udl on minor 2 [ 706.399419][ T4323] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 706.407547][ T4323] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 706.454994][ T4323] usb 3-1: USB disconnect, device number 41 [ 706.455476][ T954] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 706.456700][ T954] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 706.456861][ T954] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 707.021327][T24809] libceph: resolve '0' (ret=-3): failed [ 707.355232][T24825] netlink: 'syz.4.9425': attribute type 3 has an invalid length. [ 707.373891][T24820] loop3: detected capacity change from 0 to 2048 [ 707.480508][T24820] hpfs: hpfs_map_sector(): read error [ 707.544397][T24820] kAFS: unable to lookup cell ' 1 [ 707.544397][T24820]   // [ 707.544397][T24820] / /  [ 707.544397][T24820]   oo [ 707.544397][T24820] o o  [ 707.544397][T24820]   @PBqd8*!>c!>!>S!>3!>s!> !K!+!k!![!;!{!!~G!~'!~g!~!  [ 707.544397][T24820]    [ 707.544397][T24820]   qlWO_C"'q#/# #(‰#$I#,#")#*©#&i#.#!#)™#%Y#-##9#+¹#'y#/#\ #\(…#\$E#\,#\"%#\*¥#$e"\6"\>"\1•"\9U"\5"\=5"\3µ"\;u"\7"\?"0"8M"4"<-"2­"' [ 707.606420][ C0] vkms_vblank_simulate: vblank timer overrun [ 708.006756][T24846] loop3: detected capacity change from 0 to 64 [ 708.189435][ T4323] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 708.276432][T24854] ipt_CLUSTERIP: bad num_local_nodes 32 [ 708.405884][ T4323] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 708.428505][ T4323] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 708.450063][ T4323] usb 3-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 708.475662][ T4323] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.494760][ T4323] usb 3-1: Product: syz [ 708.499020][ T4323] usb 3-1: Manufacturer: syz [ 708.518524][ T4323] usb 3-1: SerialNumber: syz [ 708.679285][ T954] usb 5-1: new low-speed USB device number 47 using dummy_hcd [ 708.746680][ T4323] usb 3-1: 0:1 : does not exist [ 708.762112][ T4323] usb 3-1: unit 6 not found! [ 708.771640][ T4323] usb 3-1: unit 2 not found! [ 708.820456][ T4323] usb 3-1: USB disconnect, device number 42 [ 708.881332][ T954] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 708.900051][ T954] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 708.910175][ T954] usb 5-1: config 0 has no interface number 0 [ 708.916343][ T954] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 708.938038][T24876] UBIFS error (pid: 24876): cannot open "(null)", error -22 [ 708.946965][ T954] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 709.018912][ T954] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 709.038503][ T954] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.068576][ T954] usb 5-1: config 0 descriptor?? [ 709.075491][ T4358] udevd[4358]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 709.251014][T24886] __nla_validate_parse: 103 callbacks suppressed [ 709.251063][T24886] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9455'. [ 709.533150][ T954] usb 5-1: USB disconnect, device number 47 [ 709.666373][T24906] netlink: 72 bytes leftover after parsing attributes in process `syz.1.9465'. [ 709.675949][T24906] netlink: 23 bytes leftover after parsing attributes in process `syz.1.9465'. [ 709.685084][T24906] netlink: 23 bytes leftover after parsing attributes in process `syz.1.9465'. [ 709.892492][T24918] comedi comedi0: dt2801: I/O port conflict (0x3,2) [ 709.899317][ T4323] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 709.907112][ T7626] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 709.974471][T24920] comedi comedi0: no devices specified [ 710.107665][ T4323] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 710.118251][ T7626] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 710.132463][ T7626] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 710.150584][ T4323] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 710.171754][ T4323] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 710.182739][ T7626] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 710.199169][ T4323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 710.210165][ T7626] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.228416][ T4323] usb 3-1: SerialNumber: syz [ 710.237833][ T7626] usb 4-1: Product: syz [ 710.252176][ T7626] usb 4-1: Manufacturer: syz [ 710.256819][ T7626] usb 4-1: SerialNumber: syz [ 710.342469][T24932] loop4: detected capacity change from 0 to 2048 [ 710.374190][T24932] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 710.401350][T24932] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 710.617205][T24940] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9482'. [ 710.714525][ T7626] usb 4-1: 0:2 : does not exist [ 710.746380][ T4323] usb 3-1: 0:2 : does not exist [ 710.758033][ T4323] usb 3-1: unit 48 not found! [ 710.776731][ T7626] usb 4-1: USB disconnect, device number 42 [ 710.845228][ T4323] usb 3-1: USB disconnect, device number 43 [ 711.070770][ T4358] udevd[4358]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 711.148566][T24959] loop2: detected capacity change from 0 to 512 [ 711.232361][T24959] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 711.328026][T24959] ext4 filesystem being mounted at /1935/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 711.346496][T24967] netlink: 'syz.0.9494': attribute type 1 has an invalid length. [ 711.379016][T24967] netlink: 'syz.0.9494': attribute type 1 has an invalid length. [ 711.402539][T24967] netlink: 180 bytes leftover after parsing attributes in process `syz.0.9494'. [ 711.436721][T24967] NCSI netlink: No device for ifindex 2151022881 [ 711.479996][T24959] EXT4-fs error (device loop2): ext4_generic_delete_entry:2729: inode #12: block 32: comm syz.2.9492: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 711.555107][T24973] loop3: detected capacity change from 0 to 512 [ 711.568744][T24959] EXT4-fs error (device loop2) in ext4_delete_entry:2800: Corrupt filesystem [ 711.613428][T24959] EXT4-fs warning (device loop2): ext4_rename_delete:3778: inode #12: comm syz.2.9492: Deleting old file: nlink 2, error=-117 [ 711.654017][T24973] EXT4-fs error (device loop3): ext4_orphan_get:1431: comm syz.3.9497: bad orphan inode 11862016 [ 711.667891][T24977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9499'. [ 711.692270][T24959] EXT4-fs error (device loop2): ext4_ext_remove_space:2945: inode #15: comm syz.2.9492: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 711.723905][T24973] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 711.736316][T24977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9499'. [ 711.759175][T24973] ext4 filesystem being mounted at /1925/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 711.850082][T24959] EXT4-fs error (device loop2): ext4_evict_inode:292: comm syz.2.9492: couldn't truncate inode 15 (err -117) [ 712.010858][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 712.054641][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 712.307671][T24992] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9505'. [ 712.336359][T24992] netlink: 'syz.0.9505': attribute type 1 has an invalid length. [ 712.626306][T25007] loop2: detected capacity change from 0 to 764 [ 712.746421][T25011] unsupported nla_type 34 [ 713.027868][T25023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9519'. [ 713.713242][ T26] audit: type=1326 audit(1784907994.983:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25053 comm="syz.0.9535" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bc099de99 code=0x7ffc0000 [ 713.737372][ C0] vkms_vblank_simulate: vblank timer overrun [ 713.824412][ T26] audit: type=1326 audit(1784907994.983:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25053 comm="syz.0.9535" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bc099de99 code=0x7ffc0000 [ 713.824454][ T26] audit: type=1326 audit(1784907995.043:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25053 comm="syz.0.9535" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f1bc099de99 code=0x7ffc0000 [ 713.824490][ T26] audit: type=1326 audit(1784907995.043:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25053 comm="syz.0.9535" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bc099de99 code=0x7ffc0000 [ 713.824524][ T26] audit: type=1326 audit(1784907995.043:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25053 comm="syz.0.9535" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bc099de99 code=0x7ffc0000 [ 713.925384][ C0] vkms_vblank_simulate: vblank timer overrun [ 714.009399][T25060] loop2: detected capacity change from 0 to 4096 [ 714.077238][T25067] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 714.159038][T25060] syz.2.9539: attempt to access beyond end of device [ 714.159038][T25060] loop2: rw=524288, sector=9007199254741152, nr_sectors = 8 limit=4096 [ 714.173769][T25060] syz.2.9539: attempt to access beyond end of device [ 714.173769][T25060] loop2: rw=0, sector=9007199254741152, nr_sectors = 8 limit=4096 [ 714.173932][ T26] audit: type=1800 audit(1784907995.443:475): pid=25060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.9539" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 714.859046][T15521] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 715.051512][T15521] usb 5-1: config 1 has an invalid interface number: 5 but max is 2 [ 715.069906][T15521] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 715.110836][T15521] usb 5-1: config 1 has no interface number 2 [ 715.117016][T15521] usb 5-1: config 1 interface 5 altsetting 0 has an ignored endpoint with address 0x1, skipping [ 715.157890][T15521] usb 5-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 715.177804][T15521] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.196374][T15521] usb 5-1: Product: syz [ 715.206518][T15521] usb 5-1: Manufacturer: syz [ 715.216628][T15521] usb 5-1: SerialNumber: syz [ 715.458696][T15521] usb 5-1: unit 4 not found! [ 715.464562][T15521] usb 5-1: unit 51 not found! [ 715.500529][T25091] loop3: detected capacity change from 0 to 40427 [ 715.532851][T25091] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 715.567895][T25091] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 715.586214][T25091] F2FS-fs (loop3): invalid crc value [ 715.591932][T15521] usb 5-1: USB disconnect, device number 48 [ 715.613072][T25091] F2FS-fs (loop3): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 715.701517][T25091] F2FS-fs (loop3): Found nat_bits in checkpoint [ 715.785579][T25127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9569'. [ 715.815105][T25127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9569'. [ 715.880877][T25091] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 715.892506][T25091] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 715.997648][T25091] F2FS-fs (loop3): switch discard_unit option is not allowed [ 716.277051][T25141] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9577'. [ 716.404179][T25146] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9579'. [ 716.542444][T25149] loop2: detected capacity change from 0 to 512 [ 716.633991][T25149] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 716.648889][T25149] ext4 filesystem being mounted at /1953/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 716.775506][T25162] comedi comedi0: 8255: I/O port conflict (0x3,4) [ 716.828796][T25162] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 716.867105][T25162] comedi comedi0: 8255: I/O port conflict (0x5,4) [ 716.913560][T25162] comedi comedi0: 8255: I/O port conflict (0x4,4) [ 716.936893][T25162] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffff7,4) [ 716.949558][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 716.986677][T25162] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffff8,4) [ 717.084261][T25162] comedi comedi0: 8255: I/O port conflict (0x2,4) [ 717.108877][T25162] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 717.116824][T25162] comedi comedi0: 8255: I/O port conflict (0xc3,4) [ 717.184049][T25162] comedi comedi0: 8255: I/O port conflict (0x1000007,4) [ 717.218795][T25162] comedi comedi0: 8255: I/O port conflict (0x1,4) [ 717.225677][T25162] comedi comedi0: 8255: I/O port conflict (0x10003,4) [ 717.294734][T25162] comedi comedi0: 8255: I/O port conflict (0x801000,4) [ 717.340696][T25162] comedi comedi0: 8255: I/O port conflict (0x7fffffff,4) [ 717.347851][T25162] comedi comedi0: 8255: I/O port conflict (0x3ff,4) [ 717.418702][T25162] comedi comedi0: 8255: I/O port conflict (0x1001010,4) [ 717.425744][T25162] comedi comedi0: 8255: I/O port conflict (0x1ff,4) [ 717.478019][T25162] comedi comedi0: 8255: I/O port conflict (0x8,4) [ 717.494922][T25162] comedi comedi0: 8255: I/O port conflict (0x3,4) [ 717.509114][T25162] comedi comedi0: 8255: I/O port conflict (0x8001,4) [ 717.548765][T25162] comedi comedi0: 8255: I/O port conflict (0x7,4) [ 717.981488][T25202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9605'. [ 717.992422][T25204] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 718.554941][ T26] audit: type=1400 audit(1784907999.824:476): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=25224 comm="syz.2.9614" [ 718.977599][T25244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9623'. [ 718.998829][T25244] netlink: 4260 bytes leftover after parsing attributes in process `syz.2.9623'. [ 719.184775][T25252] loop3: detected capacity change from 0 to 256 [ 719.266850][T25252] syz.3.9626: attempt to access beyond end of device [ 719.266850][T25252] loop3: rw=0, sector=272, nr_sectors = 4 limit=256 [ 719.313803][T25252] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 198) [ 719.340724][T25252] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 198) [ 719.349183][ T26] audit: type=1326 audit(1784908000.614:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25259 comm="syz.4.9630" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24cdb9de99 code=0x7ffc0000 [ 719.437292][ T26] audit: type=1326 audit(1784908000.614:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25259 comm="syz.4.9630" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24cdb9de99 code=0x7ffc0000 [ 719.508757][ T26] audit: type=1326 audit(1784908000.614:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25259 comm="syz.4.9630" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24cdb9de99 code=0x7ffc0000 [ 719.607680][ T26] audit: type=1326 audit(1784908000.644:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25259 comm="syz.4.9630" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f24cdb9de99 code=0x7ffc0000 [ 719.708410][ T26] audit: type=1326 audit(1784908000.644:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25259 comm="syz.4.9630" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24cdb9de99 code=0x7ffc0000 [ 719.808772][ T26] audit: type=1326 audit(1784908000.644:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25259 comm="syz.4.9630" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24cdb9de99 code=0x7ffc0000 [ 719.888792][ T26] audit: type=1326 audit(1784908000.644:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25259 comm="syz.4.9630" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24cdb9de99 code=0x7ffc0000 [ 719.924310][T25278] loop2: detected capacity change from 0 to 64 [ 720.018827][ T26] audit: type=1326 audit(1784908000.644:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25259 comm="syz.4.9630" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f24cdb9de99 code=0x7ffc0000 [ 720.086713][ T26] audit: type=1326 audit(1784908000.654:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25259 comm="syz.4.9630" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f24cdb9de99 code=0x7ffc0000 [ 720.765166][ T954] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 720.982411][ T954] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 720.999155][ T954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.007286][ T954] usb 2-1: Product: syz [ 721.011984][ T954] usb 2-1: Manufacturer: syz [ 721.016645][ T954] usb 2-1: SerialNumber: syz [ 721.030551][ T954] r8152-cfgselector 2-1: config 0 descriptor?? [ 721.168718][T15521] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 721.226776][T25332] cgroup: Name too long [ 721.276816][ T954] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 721.358501][T15521] usb 3-1: Using ep0 maxpacket: 32 [ 721.375712][T15521] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 721.401311][T15521] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 66, changing to 7 [ 721.422759][T15521] usb 3-1: Duplicate descriptor for config 1 interface 2 altsetting 0, skipping [ 721.451077][T15521] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 721.466480][T15521] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.488522][T15521] usb 3-1: Product: syz [ 721.492736][T15521] usb 3-1: Manufacturer: syz [ 721.507658][T15521] usb 3-1: SerialNumber: syz [ 721.538953][ T4816] usb 2-1: USB disconnect, device number 50 [ 721.757631][T15521] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 721.783430][T15521] usb 3-1: clock source 0 is not valid, cannot use [ 721.802455][T15521] usb 3-1: 1:1: cannot get freq (v2/v3): err -71 [ 721.812431][T15521] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 721.858720][T15521] usb 3-1: USB disconnect, device number 44 [ 721.948574][ T4320] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 722.110052][ T6516] udevd[6516]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 722.140831][ T4320] usb 4-1: unable to get BOS descriptor or descriptor too short [ 722.150685][ T4320] usb 4-1: not running at top speed; connect to a high speed hub [ 722.188777][ T4320] usb 4-1: config 129 has an invalid interface number: 195 but max is 0 [ 722.250567][ T4320] usb 4-1: config 129 has no interface number 0 [ 722.256890][ T4320] usb 4-1: config 129 interface 195 has no altsetting 0 [ 722.281213][ T4320] usb 4-1: New USB device found, idVendor=684d, idProduct=aa5b, bcdDevice= d.12 [ 722.297238][ T4320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.305716][ T4320] usb 4-1: Product: syz [ 722.329827][ T4320] usb 4-1: Manufacturer: syz [ 722.334496][ T4320] usb 4-1: SerialNumber: syz [ 722.583639][ T4320] usb-storage 4-1:129.195: USB Mass Storage device detected [ 722.655177][ T4320] usb 4-1: USB disconnect, device number 43 [ 723.524014][T25364] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 724.106219][T25364] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.115340][T25364] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.124848][T25364] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.153271][T25364] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 724.162519][T25364] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 724.171753][T25364] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 724.338711][T25388] netlink: 'syz.3.9692': attribute type 10 has an invalid length. [ 724.404071][T25388] team0: Port device macvlan1 added [ 724.547908][T25396] netlink: 'syz.2.9694': attribute type 3 has an invalid length. [ 724.808487][ T7626] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 725.023603][ T7626] usb 1-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 725.067331][ T7626] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.090011][ T7626] usb 1-1: Product: syz [ 725.094252][ T7626] usb 1-1: Manufacturer: syz [ 725.134512][ T7626] usb 1-1: SerialNumber: syz [ 725.153522][ T7626] usb 1-1: config 0 descriptor?? [ 725.174127][ T7626] hub 1-1:0.0: bad descriptor, ignoring hub [ 725.198818][ T7626] hub: probe of 1-1:0.0 failed with error -5 [ 725.205573][ T7626] f81232 1-1:0.0: f81534a converter detected [ 725.321526][T25395] loop1: detected capacity change from 0 to 32768 [ 725.389819][ T7626] usb 1-1: f81534a converter now attached to ttyUSB0 [ 725.419556][T25426] loop3: detected capacity change from 0 to 164 [ 725.431323][T25426] ISOFS: Bad logical zone size 2051 [ 725.454279][T25395] XFS (loop1): Mounting V5 Filesystem [ 725.485887][T25426] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 725.604782][T25395] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 725.730390][T25395] XFS (loop1): Starting recovery (logdev: internal) [ 725.768609][ T7626] usb 1-1: USB disconnect, device number 49 [ 725.794901][ T7626] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 725.831628][ T7626] f81232 1-1:0.0: device disconnected [ 725.854111][T25395] XFS (loop1): Ending recovery (logdev: internal) [ 725.960013][T25446] trusted_key: encrypted_key: keylen parameter is missing [ 726.037076][ T4273] XFS (loop1): Unmounting Filesystem [ 726.915941][T25482] netlink: 'syz.1.9735': attribute type 10 has an invalid length. [ 727.357796][T25502] loop2: detected capacity change from 0 to 512 [ 727.434475][T25502] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 727.479088][T25502] ext4 filesystem being mounted at /1992/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 727.568577][T25502] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 727.635794][T25502] EXT4-fs (loop2): Remounting filesystem read-only [ 727.779508][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 728.046207][T25530] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.132723][T25534] loop4: detected capacity change from 0 to 128 [ 728.228493][T25534] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 728.603349][T25552] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9767'. [ 728.633223][T25552] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9767'. [ 728.865832][T25560] bond0: (slave sit0): refused to change device type [ 730.027092][T25602] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 730.193876][ T4320] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 730.400463][ T4320] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 730.427980][ T4320] usb 2-1: config 1 has no interface number 0 [ 730.447546][ T4320] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 730.474807][ T4320] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 30, changing to 4 [ 730.504984][T25618] x_tables: unsorted entry at hook 2 [ 730.513860][ T4320] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 730.542287][ T4320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.567942][ T4320] usb 2-1: Product: syz [ 730.572192][ T4320] usb 2-1: Manufacturer: syz [ 730.576835][ T4320] usb 2-1: SerialNumber: syz [ 730.812361][ T4320] snd-usb-audio: probe of 2-1:1.1 failed with error -22 [ 730.900088][ T4320] snd-usb-audio: probe of 2-1:1.2 failed with error -22 [ 730.946550][T25633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9807'. [ 730.955909][ T4320] usb 2-1: USB disconnect, device number 51 [ 730.984673][ T6516] udevd[6516]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 731.524915][T25649] netlink: 'syz.1.9815': attribute type 2 has an invalid length. [ 731.560631][T25649] netlink: 'syz.1.9815': attribute type 1 has an invalid length. [ 731.585140][T25649] netlink: 'syz.1.9815': attribute type 1 has an invalid length. [ 731.698177][ T954] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 731.819160][T25658] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 731.907991][ T954] usb 1-1: Using ep0 maxpacket: 8 [ 731.921139][ T954] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 731.957898][ T954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.976053][ T954] usb 1-1: Product: syz [ 731.989442][ T954] usb 1-1: Manufacturer: syz [ 731.994331][ T954] usb 1-1: SerialNumber: syz [ 732.009069][ T954] usb 1-1: config 0 descriptor?? [ 732.046999][ T954] radio-usb-si4713 1-1:0.0: Si4713 development board discovered: (10C4:8244) [ 732.451023][ T954] radio-usb-si4713: probe of 1-1:0.0 failed with error -71 [ 732.477606][ T954] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 732.506688][ T954] usb 1-1: USB disconnect, device number 50 [ 732.764200][T25685] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4273] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[25685] [ 732.789609][T25661] loop3: detected capacity change from 0 to 32768 [ 732.861766][T25661] jfs_lookup: iget failed on inum 4 [ 732.986382][T25691] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9836'. [ 733.057169][T25691] netlink: 1391 bytes leftover after parsing attributes in process `syz.4.9836'. [ 733.163427][T25699] netlink: 'syz.0.9840': attribute type 5 has an invalid length. [ 733.236431][T25699] device ip6erspan1 entered promiscuous mode [ 733.381036][T25707] netlink: 'syz.2.9844': attribute type 7 has an invalid length. [ 733.437943][T25709] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9845'. [ 733.504171][T25709] unsupported nlmsg_type 40 [ 733.607891][ T4320] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 733.807872][ T4320] usb 4-1: Using ep0 maxpacket: 32 [ 733.814978][ T4320] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 733.863097][ T4320] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 733.878995][ T4320] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 733.916280][ T4320] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 733.920761][T25728] device batadv_slave_0 left promiscuous mode [ 733.942002][ T4320] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 733.958671][ T4320] usb 4-1: Product: syz [ 733.967743][ T4320] usb 4-1: Manufacturer: syz [ 733.972398][ T4320] usb 4-1: SerialNumber: syz [ 734.005654][ T4320] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input41 [ 734.116487][T25732] netlink: 5 bytes leftover after parsing attributes in process `syz.1.9856'. [ 734.240094][ T4320] usb 4-1: USB disconnect, device number 44 [ 734.267829][ T4320] appletouch 4-1:1.0: input: appletouch disconnected [ 734.687820][ T954] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 734.723324][T25752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9866'. [ 734.886494][ T954] usb 5-1: unable to get BOS descriptor or descriptor too short [ 734.896113][ T954] usb 5-1: not running at top speed; connect to a high speed hub [ 734.936426][ T954] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 734.974463][ T954] usb 5-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 735.028865][ T954] usb 5-1: string descriptor 0 read error: -22 [ 735.035242][ T954] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=b2.86 [ 735.063023][ T954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.272104][T25771] loop2: detected capacity change from 0 to 4096 [ 735.301889][T25771] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 735.311506][ T954] snd-usb-6fire 5-1:2.0: unknown device firmware state received from device: [ 735.337774][ T954] eb 2e 87 4b 9a 05 e6 5e [ 735.349949][ T954] snd-usb-6fire: probe of 5-1:2.0 failed with error -5 [ 735.524614][ T954] usb 5-1: USB disconnect, device number 49 [ 735.643526][T25782] overlayfs: missing 'lowerdir' [ 735.992510][T25795] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 736.288410][T25809] loop2: detected capacity change from 0 to 64 [ 737.055252][ T26] audit: type=1326 audit(1784908018.325:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25835 comm="syz.2.9908" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efec199de99 code=0x7ffc0000 [ 737.135807][ T26] audit: type=1326 audit(1784908018.355:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25835 comm="syz.2.9908" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efec199de99 code=0x7ffc0000 [ 737.237773][ T26] audit: type=1326 audit(1784908018.355:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25835 comm="syz.2.9908" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7efec199de99 code=0x7ffc0000 [ 737.348099][ T26] audit: type=1326 audit(1784908018.355:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25835 comm="syz.2.9908" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efec199de99 code=0x7ffc0000 [ 737.467564][ T26] audit: type=1326 audit(1784908018.355:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25835 comm="syz.2.9908" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efec199de99 code=0x7ffc0000 [ 737.982540][T25873] dlm: no locking on control device [ 738.044033][T25875] netlink: 'syz.4.9927': attribute type 2 has an invalid length. [ 738.108503][T25875] netlink: 'syz.4.9927': attribute type 11 has an invalid length. [ 738.146818][T25875] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9927'. [ 738.161033][T25880] netlink: 'syz.1.9930': attribute type 10 has an invalid length. [ 738.169408][T25880] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9930'. [ 738.187698][T25880] netlink: 'syz.1.9930': attribute type 10 has an invalid length. [ 738.205800][T25880] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9930'. [ 739.342316][T25886] bridge0: port 3(batadv0) entered disabled state [ 739.348989][T25886] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.356378][T25886] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.709768][T25928] xt_ecn: cannot match TCP bits for non-tcp packets [ 739.897473][ T4323] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 740.077784][ T8479] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 740.099762][ T4323] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 740.115755][ T4323] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 740.127508][ T4323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.152716][ T4323] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 740.223400][T25886] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 740.289020][ T8479] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 740.307825][ T8479] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 740.322161][ T8479] usb 3-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 740.331552][ T8479] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.348885][ T8479] usb 3-1: config 0 descriptor?? [ 740.576432][ T8479] usb 3-1: USB disconnect, device number 45 [ 740.760454][T25886] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.769503][T25886] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.778924][T25886] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.788057][T25886] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.799396][ T4559] udevd[4559]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 741.196539][ T4323] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 741.327461][T25932] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9953'. [ 741.397767][ T4323] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 741.406002][ T4323] stv0680 2-1:4.0: last error: 86, command = 0x0 [ 741.464929][ T4323] usb 2-1: USB disconnect, device number 52 [ 741.745244][T25945] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9959'. [ 741.936446][T25952] x_tables: unsorted underflow at hook 2 [ 742.519627][T25976] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9976'. [ 742.997551][T26000] cgroup: name respecified [ 743.020370][T26003] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9989'. [ 743.178810][ T4320] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 743.207801][T26008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9990'. [ 743.223536][T26010] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 743.387396][ T4320] usb 5-1: Using ep0 maxpacket: 16 [ 743.394502][ T4320] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 743.423080][ T4320] usb 5-1: config 0 has no interface number 0 [ 743.443362][ T4320] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 743.480092][ T4320] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0xC has invalid maxpacket 1025, setting to 1024 [ 743.520696][ T1198] block nbd3: Attempted send on invalid socket [ 743.526977][ T1198] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 743.558030][ T4320] usb 5-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 743.567722][ T4320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.575840][ T4320] usb 5-1: Product: syz [ 743.577570][T26022] F2FS-fs (nbd3): Unable to read 1th superblock [ 743.581967][ T4320] usb 5-1: Manufacturer: syz [ 743.586913][ T53] block nbd3: Attempted send on invalid socket [ 743.597330][ T53] I/O error, dev nbd3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 743.599994][ T4320] usb 5-1: SerialNumber: syz [ 743.616748][T26022] F2FS-fs (nbd3): Unable to read 2th superblock [ 743.662041][T26024] netlink: 'syz.2.9997': attribute type 10 has an invalid length. [ 743.681462][ T4320] usb 5-1: config 0 descriptor?? [ 743.687310][T25997] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 743.710566][T26026] CIFS mount error: No usable UNC path provided in device string! [ 743.710566][T26026] [ 743.712100][ T4320] cypress_m8 5-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 743.742387][T26026] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 743.939092][ T4320] usb 5-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0 [ 743.972961][ T4320] usb 5-1: USB disconnect, device number 50 [ 744.007063][ T4320] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0 [ 744.033611][T26038] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10004'. [ 744.046669][ T4320] cypress_m8 5-1:0.35: device disconnected [ 744.159123][ T26] audit: type=1326 audit(1784908025.435:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26040 comm="syz.2.10006" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efec199de99 code=0x7ffc0000 [ 744.217312][ T26] audit: type=1326 audit(1784908025.465:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26040 comm="syz.2.10006" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efec199de99 code=0x7ffc0000 [ 744.242292][ T26] audit: type=1326 audit(1784908025.465:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26040 comm="syz.2.10006" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efec199de99 code=0x7ffc0000 [ 744.267297][ T26] audit: type=1326 audit(1784908025.465:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26040 comm="syz.2.10006" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7efec199de99 code=0x7ffc0000 [ 744.294171][ T26] audit: type=1326 audit(1784908025.465:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26040 comm="syz.2.10006" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efec199de99 code=0x7ffc0000 [ 744.382350][ T26] audit: type=1326 audit(1784908025.465:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26040 comm="syz.2.10006" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7efec199de99 code=0x7ffc0000 [ 744.453911][ T26] audit: type=1326 audit(1784908025.465:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26040 comm="syz.2.10006" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7efec199de99 code=0x7ffc0000 [ 744.625005][T26055] netlink: 'syz.3.10013': attribute type 5 has an invalid length. [ 745.135935][T26077] loop2: detected capacity change from 0 to 8 [ 745.283496][T26083] usb usb8: usbfs: process 26083 (syz.4.10026) did not claim interface 0 before use [ 745.469613][T26088] loop1: detected capacity change from 0 to 64 [ 746.287991][T26121] device vxcan3 entered promiscuous mode [ 746.817270][ T4323] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 746.993719][T26156] netlink: 'syz.1.10063': attribute type 11 has an invalid length. [ 747.018856][ T4323] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 747.047024][ T4323] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 747.063009][ T4323] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 747.073613][ T4323] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 747.097157][ T8479] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 747.111758][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.118581][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.122569][ T4323] usb 1-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 747.180018][ T4323] usb 1-1: New USB device strings: Mfr=28, Product=2, SerialNumber=3 [ 747.203598][ T4323] usb 1-1: Product: syz [ 747.209665][ T4323] usb 1-1: Manufacturer: syz [ 747.214313][ T4323] usb 1-1: SerialNumber: syz [ 747.266294][ T4323] usb 1-1: config 0 descriptor?? [ 747.277683][ T4323] kvaser_usb 1-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 747.306386][ T4323] kvaser_usb 1-1:0.0: Failed to initialize card, error -90 [ 747.327166][ T8479] usb 5-1: Using ep0 maxpacket: 32 [ 747.333327][ T4323] kvaser_usb: probe of 1-1:0.0 failed with error -90 [ 747.343855][ T8479] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 747.373384][ T8479] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.391946][ T8479] usb 5-1: Product: syz [ 747.396169][ T8479] usb 5-1: Manufacturer: syz [ 747.416959][ T8479] usb 5-1: SerialNumber: syz [ 747.433169][ T8479] usb 5-1: config 0 descriptor?? [ 747.453357][ T8479] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 747.539791][ T4323] usb 1-1: USB disconnect, device number 51 [ 747.853932][ T8479] gspca_topro: reg_w err -71 [ 747.901521][ T8479] gspca_topro: Sensor soi763a [ 747.926929][ T8479] usb 5-1: USB disconnect, device number 51 [ 748.355933][T26199] netlink: 256 bytes leftover after parsing attributes in process `syz.1.10084'. [ 748.388106][ T7626] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 748.603339][ T7626] usb 3-1: Using ep0 maxpacket: 8 [ 748.610524][ T7626] usb 3-1: config 2 has an invalid interface number: 31 but max is 0 [ 748.640041][ T7626] usb 3-1: config 2 has no interface number 0 [ 748.653005][ T7626] usb 3-1: config 2 interface 31 has no altsetting 0 [ 748.674136][ T7626] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 748.700957][ T7626] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.723428][ T7626] usb 3-1: Product: syz [ 748.748902][ T7626] usb 3-1: Manufacturer: syz [ 748.755017][ T7626] usb 3-1: SerialNumber: syz [ 748.770710][T26212] IPv6: Can't replace route, no match found [ 749.214474][ T7626] ch9200: probe of 3-1:2.31 failed with error -22 [ 749.247234][ T7626] usb 3-1: USB disconnect, device number 46 [ 749.675433][T26245] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 749.897409][T26253] loop3: detected capacity change from 0 to 8 [ 749.904809][T26253] /dev/loop3: Can't open blockdev [ 749.959988][T26256] netlink: 'syz.2.10112': attribute type 1 has an invalid length. [ 750.017960][ T4358] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 750.226388][T26263] netlink: 'syz.2.10116': attribute type 5 has an invalid length. [ 750.432675][ T26] audit: type=1326 audit(1784908031.706:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26268 comm="syz.0.10119" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bc099de99 code=0x7ffc0000 [ 750.521243][ T26] audit: type=1326 audit(1784908031.706:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26268 comm="syz.0.10119" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bc099de99 code=0x7ffc0000 [ 750.582324][T26277] loop3: detected capacity change from 0 to 1024 [ 750.621475][ T26] audit: type=1326 audit(1784908031.756:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26268 comm="syz.0.10119" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bc099de99 code=0x7ffc0000 [ 750.677009][ T4358] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 750.736956][ T26] audit: type=1326 audit(1784908031.756:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26268 comm="syz.0.10119" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bc099de99 code=0x7ffc0000 [ 750.832716][ T26] audit: type=1326 audit(1784908031.756:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26268 comm="syz.0.10119" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0x7f1bc099de99 code=0x7ffc0000 [ 750.973395][ T26] audit: type=1326 audit(1784908031.756:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26268 comm="syz.0.10119" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bc099de99 code=0x7ffc0000 [ 751.052884][ T26] audit: type=1326 audit(1784908031.756:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26268 comm="syz.0.10119" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bc099de99 code=0x7ffc0000 [ 751.183280][ T26] audit: type=1326 audit(1784908031.766:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26268 comm="syz.0.10119" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1bc099de99 code=0x7ffc0000 [ 751.254645][ T26] audit: type=1326 audit(1784908031.766:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26268 comm="syz.0.10119" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1bc099de99 code=0x7ffc0000 [ 751.474566][T26307] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4272] was attempted by ""[26307] [ 752.055236][T26332] CIFS mount error: No usable UNC path provided in device string! [ 752.055236][T26332] [ 752.081924][T26332] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 752.465251][ T26] audit: type=1326 audit(1784908033.736:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26343 comm="syz.3.10156" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f636c79de99 code=0x7ffc0000 [ 752.574264][T26349] ksmbd: Unknown IPC event: 4, ignore. [ 752.700067][T26323] loop2: detected capacity change from 0 to 32768 [ 752.798935][T26323] JBD2: Ignoring recovery information on journal [ 752.930034][T26323] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 752.983912][T26350] IPv6: Can't replace route, no match found [ 753.135084][ T4272] ocfs2: Unmounting device (7,2) on (node local) [ 753.290629][T26368] loop1: detected capacity change from 0 to 64 [ 753.469466][ T4273] hfs: node 4:3 still has 1 user(s)! [ 753.950489][T26392] netlink: 'syz.3.10178': attribute type 3 has an invalid length. [ 755.076641][ T4323] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 755.160249][T26439] loop3: detected capacity change from 0 to 512 [ 755.224069][T26439] /dev/loop3: Can't open blockdev [ 755.283797][ T4323] usb 3-1: Using ep0 maxpacket: 16 [ 755.291311][ T4323] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 755.337338][ T4323] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 755.394569][ T4323] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.418977][ T4323] usb 3-1: Product: syz [ 755.437472][ T4323] usb 3-1: Manufacturer: syz [ 755.442148][ T4323] usb 3-1: SerialNumber: syz [ 755.478220][ T4323] r8152-cfgselector 3-1: config 0 descriptor?? [ 755.893552][ T4323] r8152-cfgselector 3-1: Unknown version 0x0000 [ 755.911497][ T4323] r8152-cfgselector 3-1: USB disconnect, device number 47 [ 756.098414][T26471] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 757.407399][T26524] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 757.671630][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 757.671647][ T26] audit: type=1326 audit(1784908038.946:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26534 comm="syz.2.10248" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efec199de99 code=0x7ffc0000 [ 757.771522][ T26] audit: type=1326 audit(1784908038.986:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26534 comm="syz.2.10248" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efec199de99 code=0x7ffc0000 [ 757.894786][ T26] audit: type=1326 audit(1784908038.986:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26534 comm="syz.2.10248" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efec199de99 code=0x7ffc0000 [ 757.944970][T26541] netlink: 'syz.1.10252': attribute type 3 has an invalid length. [ 757.959758][T26541] netlink: 'syz.1.10252': attribute type 3 has an invalid length. [ 757.971959][ T26] audit: type=1326 audit(1784908038.986:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26534 comm="syz.2.10248" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7efec199de99 code=0x7ffc0000 [ 758.064109][ T26] audit: type=1326 audit(1784908038.986:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26534 comm="syz.2.10248" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efec199de99 code=0x7ffc0000 [ 758.181824][ T26] audit: type=1326 audit(1784908038.986:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26534 comm="syz.2.10248" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efec199de99 code=0x7ffc0000 [ 758.272555][ T26] audit: type=1326 audit(1784908038.986:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26534 comm="syz.2.10248" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efec199de99 code=0x7ffc0000 [ 758.354171][ T26] audit: type=1326 audit(1784908038.986:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26534 comm="syz.2.10248" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7efec199de99 code=0x7ffc0000 [ 758.427430][ T26] audit: type=1326 audit(1784908038.986:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26534 comm="syz.2.10248" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7efec199de99 code=0x7ffc0000 [ 758.466466][ T4323] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 758.495853][T26561] nfs: Deprecated parameter 'nointr' [ 758.656617][ T4323] usb 5-1: Using ep0 maxpacket: 8 [ 758.663446][ T4323] usb 5-1: config 2 has an invalid interface number: 31 but max is 0 [ 758.682410][ T4323] usb 5-1: config 2 has no interface number 0 [ 758.697409][ T4323] usb 5-1: config 2 interface 31 has no altsetting 0 [ 758.735593][ T4323] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 758.770274][ T4323] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.796346][ T4323] usb 5-1: Product: syz [ 758.806511][ T4323] usb 5-1: Manufacturer: syz [ 758.821367][ T4323] usb 5-1: SerialNumber: syz [ 758.955241][T26582] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10271'. [ 759.262382][ T4323] ch9200: probe of 5-1:2.31 failed with error -22 [ 759.298212][ T4323] usb 5-1: USB disconnect, device number 52 [ 759.744993][T26615] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 759.937789][T26623] tmpfs: Bad value for 'mpol' [ 760.507253][T26644] loop4: detected capacity change from 0 to 4096 [ 760.588149][T26644] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 760.624694][T26651] xt_NFQUEUE: number of total queues is 0 [ 760.652327][T26644] ntfs3: loop4: Failed to load $Extend. [ 760.839240][T26657] loop3: detected capacity change from 0 to 2048 [ 761.374700][T26642] loop2: detected capacity change from 0 to 32768 [ 761.456696][ T4320] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 761.656176][ T4320] usb 1-1: Using ep0 maxpacket: 32 [ 761.671359][ T4320] usb 1-1: unable to get BOS descriptor or descriptor too short [ 761.712279][ T4320] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 761.747232][ T4320] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 761.774754][ T4320] usb 1-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 761.811737][ T4320] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.829502][ T4320] usb 1-1: Product: syz [ 761.846803][ T4320] usb 1-1: Manufacturer: syz [ 761.856546][ T4320] usb 1-1: SerialNumber: syz [ 762.111550][ T4320] usb 1-1: unit 255 not found! [ 762.176680][ T4320] usb 1-1: USB disconnect, device number 52 [ 762.237870][T26695] wg1 speed is unknown, defaulting to 1000 [ 762.456796][ T9488] udevd[9488]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 762.680038][T26710] loop2: detected capacity change from 0 to 2048 [ 762.748111][T26710] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 762.786420][T26717] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10337'. [ 762.829576][T26717] netlink: 96 bytes leftover after parsing attributes in process `syz.1.10337'. [ 762.880313][T26710] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 763.158970][ T26] audit: type=1326 audit(1784908044.436:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26728 comm="syz.3.10343" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f636c79de99 code=0x7ffc0000 [ 763.232198][ T26] audit: type=1326 audit(1784908044.436:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26728 comm="syz.3.10343" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f636c79de99 code=0x7ffc0000 [ 763.308872][ T26] audit: type=1326 audit(1784908044.496:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26728 comm="syz.3.10343" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f636c79de99 code=0x7ffc0000 [ 763.434205][ T26] audit: type=1326 audit(1784908044.496:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26728 comm="syz.3.10343" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f636c79de99 code=0x7ffc0000 [ 763.519676][ T26] audit: type=1326 audit(1784908044.496:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26728 comm="syz.3.10343" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f636c79de99 code=0x7ffc0000 [ 763.587365][ T26] audit: type=1326 audit(1784908044.546:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26728 comm="syz.3.10343" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f636c79de99 code=0x7ffc0000 [ 763.637496][ T26] audit: type=1326 audit(1784908044.546:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26728 comm="syz.3.10343" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f636c79de99 code=0x7ffc0000 [ 763.714075][ T26] audit: type=1326 audit(1784908044.546:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26728 comm="syz.3.10343" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f636c79de99 code=0x7ffc0000 [ 763.756216][ T4320] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 763.788608][ T26] audit: type=1326 audit(1784908044.546:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26728 comm="syz.3.10343" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f636c79de99 code=0x7ffc0000 [ 763.863712][ T26] audit: type=1326 audit(1784908044.546:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26728 comm="syz.3.10343" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f636c75e6ce code=0x7ffc0000 [ 763.919259][T26747] usb usb8: usbfs: process 26747 (syz.1.10352) did not claim interface 0 before use [ 763.949260][ T4320] usb 5-1: Using ep0 maxpacket: 32 [ 763.959942][ T4320] usb 5-1: unable to get BOS descriptor or descriptor too short [ 763.992472][ T4320] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 68, changing to 7 [ 764.028848][T26731] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 764.049301][ T4320] usb 5-1: string descriptor 0 read error: -22 [ 764.055609][ T4320] usb 5-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 764.133554][ T4320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.369270][T26762] netlink: 52 bytes leftover after parsing attributes in process `syz.3.10359'. [ 764.390784][ T4320] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 764.640301][ T4320] usb 5-1: USB disconnect, device number 53 [ 764.737878][ T954] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 764.947895][ T954] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 764.962328][ T954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.987011][ T954] usb 3-1: config 0 descriptor?? [ 765.008062][ T954] cp210x 3-1:0.0: cp210x converter detected [ 765.287982][T26795] openvswitch: netlink: Key type 316 is out of range max 32 [ 765.415741][ T954] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 765.463314][ T954] cp210x 3-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 765.477857][ T954] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 765.500621][ T954] usb 3-1: cp210x converter now attached to ttyUSB0 [ 765.528047][ T954] usb 3-1: USB disconnect, device number 48 [ 765.566152][ T954] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 765.586553][T26803] loop1: detected capacity change from 0 to 128 [ 765.595373][ T954] cp210x 3-1:0.0: device disconnected [ 765.615132][T26803] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 765.660648][T26803] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 765.836799][ T4320] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 765.907155][T26809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10380'. [ 766.039873][ T4320] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 766.053873][ T4320] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.072225][ T4320] usb 1-1: Product: syz [ 766.079669][ T4320] usb 1-1: Manufacturer: syz [ 766.088393][T26811] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10382'. [ 766.094768][ T4320] usb 1-1: SerialNumber: syz [ 766.118388][ T4320] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 766.161979][ T4320] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 766.256393][ T4816] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 766.457210][ T4816] usb 5-1: Using ep0 maxpacket: 16 [ 766.468780][ T4816] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 766.507880][ T4816] usb 5-1: config 0 has no interface number 0 [ 766.560642][ T4816] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 766.572661][ T4816] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.645126][ T4816] usb 5-1: Product: syz [ 766.649756][ T4816] usb 5-1: Manufacturer: syz [ 766.654390][ T4816] usb 5-1: SerialNumber: syz [ 766.693810][ T4816] usb 5-1: config 0 descriptor?? [ 766.730365][T15521] usb 1-1: USB disconnect, device number 53 [ 766.945388][ T4816] usb 5-1: selecting invalid altsetting 1 [ 766.954470][ T4816] speedtch 5-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 766.977252][ T954] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 766.995990][ T4816] speedtch 5-1:0.1: usbatm_usb_probe: bind failed: -22! [ 767.020670][ T4816] speedtch: probe of 5-1:0.1 failed with error -22 [ 767.047915][ T4816] usb 5-1: USB disconnect, device number 54 [ 767.169719][ T954] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 767.189533][ T954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.209771][ T954] usb 3-1: Product: syz [ 767.213992][ T954] usb 3-1: Manufacturer: syz [ 767.245861][ T954] usb 3-1: SerialNumber: syz [ 767.266122][ T4320] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 767.277491][ T4320] ath9k_htc: Failed to initialize the device [ 767.283860][ T954] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 767.292393][T15521] usb 1-1: ath9k_htc: USB layer deinitialized [ 767.361623][ T954] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 767.408840][T26850] loop3: detected capacity change from 0 to 2048 [ 767.623465][T26854] loop1: detected capacity change from 0 to 512 [ 767.719805][T26854] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 767.736811][T26854] ext4 filesystem being mounted at /2049/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 767.850084][ T4320] usb 3-1: USB disconnect, device number 49 [ 767.977886][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 768.716009][ T954] usb 3-1: Service connection timeout for: 256 [ 768.722246][ T954] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 768.751163][ T954] ath9k_htc: Failed to initialize the device [ 768.778174][ T4320] usb 3-1: ath9k_htc: USB layer deinitialized [ 769.964972][ T26] kauditd_printk_skb: 64 callbacks suppressed [ 769.964990][ T26] audit: type=1326 audit(1784908051.237:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26954 comm="syz.2.10444" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efec199de99 code=0x7ffc0000 [ 770.005864][ T26] audit: type=1326 audit(1784908051.257:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26954 comm="syz.2.10444" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efec199de99 code=0x7ffc0000 [ 770.030533][ T26] audit: type=1326 audit(1784908051.267:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26954 comm="syz.2.10444" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7efec199de99 code=0x7ffc0000 [ 770.055205][ T26] audit: type=1326 audit(1784908051.267:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26954 comm="syz.2.10444" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efec199de99 code=0x7ffc0000 [ 770.155765][ T26] audit: type=1326 audit(1784908051.267:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26954 comm="syz.2.10444" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efec199de99 code=0x7ffc0000 [ 770.305171][T26961] loop2: detected capacity change from 0 to 512 [ 770.336689][T26961] EXT4-fs: Ignoring removed bh option [ 770.355731][T26961] EXT4-fs: Ignoring removed mblk_io_submit option [ 770.392185][T26961] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 770.484605][T26968] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10450'. [ 770.515937][T26968] netlink: 7 bytes leftover after parsing attributes in process `syz.3.10450'. [ 770.550772][T26961] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 770.604393][T26961] ext4 filesystem being mounted at /2114/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 770.767257][T26961] EXT4-fs error (device loop2): ext4_get_first_dir_block:3591: inode #12: block 32: comm syz.2.10447: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 770.846236][T26961] EXT4-fs error (device loop2): ext4_get_first_dir_block:3594: inode #12: comm syz.2.10447: directory missing '.' [ 771.037595][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 771.721615][T27020] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10474'. [ 771.775762][T27020] netlink: 'syz.0.10474': attribute type 1 has an invalid length. [ 772.082871][T27035] netlink: 124 bytes leftover after parsing attributes in process `syz.4.10482'. [ 772.095621][ T4320] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 772.121379][T27035] netlink: 'syz.4.10482': attribute type 3 has an invalid length. [ 772.290840][ T4320] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 772.315116][ T4320] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 772.362317][ T4320] usb 2-1: config 0 has no interface number 0 [ 772.379750][ T4320] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 772.405809][ T4320] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 772.455997][ T4320] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 772.523252][ T4320] usb 2-1: config 0 interface 52 has no altsetting 0 [ 772.533356][ T4320] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 772.574014][ T4320] usb 2-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 772.576391][T27055] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 772.595560][ T4320] usb 2-1: Product: syz [ 772.599809][ T4320] usb 2-1: Manufacturer: syz [ 772.604442][ T4320] usb 2-1: SerialNumber: syz [ 772.667414][ T4320] usb 2-1: config 0 descriptor?? [ 772.882194][ T4320] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 772.915726][ T4320] synaptics_usb: probe of 2-1:0.52 failed with error -5 [ 773.102935][ T4320] usb 2-1: USB disconnect, device number 53 [ 773.277592][T27081] loop2: detected capacity change from 0 to 16 [ 773.347120][T27081] erofs: (device loop2): mounted with root inode @ nid 36. [ 773.386463][T27081] syz.2.10506: attempt to access beyond end of device [ 773.386463][T27081] loop2: rw=0, sector=1936876908, nr_sectors = 1 limit=16 [ 773.429877][T27087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10508'. [ 773.461217][T27081] syz.2.10506: attempt to access beyond end of device [ 773.461217][T27081] loop2: rw=0, sector=3955228672, nr_sectors = 1 limit=16 [ 773.479937][T27087] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10508'. [ 773.559272][T27089] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10509'. [ 773.634798][T27089] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10509'. [ 774.096144][T27109] ipt_REJECT: TCP_RESET invalid for non-tcp [ 774.295454][ T4320] usb 3-1: new low-speed USB device number 50 using dummy_hcd [ 774.497815][ T4320] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 774.523781][ T4320] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 774.545968][ T954] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 774.546095][ T4320] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 774.585444][ T4320] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 774.615582][ T4320] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 774.641066][ T4320] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 774.668219][ T4320] usb 3-1: string descriptor 0 read error: -22 [ 774.674525][ T4320] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 774.716083][ T4320] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.736219][ T4320] usb 3-1: config 0 descriptor?? [ 774.741825][T27107] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 774.760010][ T4320] hub 3-1:0.0: bad descriptor, ignoring hub [ 774.775590][ T4320] hub: probe of 3-1:0.0 failed with error -5 [ 774.784723][ T954] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 774.803536][ T4320] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input45 [ 774.804211][ T954] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 774.886753][ T954] usb 5-1: New USB device found, idVendor=2184, idProduct=001c, bcdDevice=e3.03 [ 774.886787][ T954] usb 5-1: New USB device strings: Mfr=1, Product=22, SerialNumber=3 [ 774.886812][ T954] usb 5-1: Product: syz [ 774.886830][ T954] usb 5-1: Manufacturer: syz [ 774.886846][ T954] usb 5-1: SerialNumber: syz [ 774.897319][ T954] usb 5-1: config 0 descriptor?? [ 774.917394][ T954] cdc_acm 5-1:0.0: skipping garbage [ 775.061784][ T4320] usb 3-1: USB disconnect, device number 50 [ 775.129722][T15521] usb 5-1: USB disconnect, device number 55 [ 775.304639][T27150] cgroup: No subsys list or none specified [ 775.404357][T27153] netlink: 'syz.0.10541': attribute type 1 has an invalid length. [ 775.422492][T27154] netlink: 'syz.1.10540': attribute type 30 has an invalid length. [ 775.597351][T27158] ceph: No source [ 775.866332][T27168] autofs4:pid:27168:validate_dev_ioctl: path string terminator missing for cmd(0xc018937e) [ 775.993108][T27174] device sit0 entered promiscuous mode [ 776.036476][T27174] netlink: 'syz.0.10551': attribute type 1 has an invalid length. [ 776.095327][T27174] netlink: 1 bytes leftover after parsing attributes in process `syz.0.10551'. [ 776.532731][T27194] loop1: detected capacity change from 0 to 8 [ 776.618787][T27194] SQUASHFS error: Unable to read inode 0xa7 [ 776.921826][T27170] loop4: detected capacity change from 0 to 32768 [ 776.982305][T27170] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 scanned by syz.4.10549 (27170) [ 777.041969][T27170] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 777.046352][T27205] loop1: detected capacity change from 0 to 764 [ 777.105472][T27170] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 777.114228][T27170] BTRFS info (device loop4): enabling ssd optimizations [ 777.157537][T27170] BTRFS info (device loop4): not using ssd optimizations [ 777.208450][T27170] BTRFS info (device loop4): turning off barriers [ 777.214955][T27170] BTRFS info (device loop4): use no compression [ 777.262089][T27170] BTRFS info (device loop4): using free space tree [ 777.323615][T27188] loop3: detected capacity change from 0 to 32768 [ 777.335761][T27188] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.10558 (27188) [ 777.358235][T27188] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 777.408830][T27188] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 777.477356][T27188] BTRFS info (device loop3): using free space tree [ 777.638241][ T4271] BTRFS info (device loop4): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 777.715424][T27188] BTRFS info (device loop3): enabling ssd optimizations [ 778.129063][ T4281] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 778.598146][ T4559] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by udevd (4559) [ 779.129163][T27291] loop2: detected capacity change from 0 to 512 [ 779.219633][T27291] EXT4-fs (loop2): Test dummy encryption mode enabled [ 779.322718][T27291] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.10590: inode has both inline data and extents flags [ 779.343985][T27291] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.10590: couldn't read orphan inode 15 (err -117) [ 779.365475][T27291] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 779.411314][T27291] EXT4-fs (loop2): unmounting filesystem. [ 779.447332][T27305] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10594'. [ 779.574968][ T26] audit: type=1326 audit(1784908060.847:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27308 comm="syz.4.10596" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24cdb9de99 code=0x7ffc0000 [ 779.599293][ C0] vkms_vblank_simulate: vblank timer overrun [ 779.696201][ T26] audit: type=1326 audit(1784908060.887:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27308 comm="syz.4.10596" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24cdb9de99 code=0x7ffc0000 [ 779.720423][ C0] vkms_vblank_simulate: vblank timer overrun [ 779.845372][ T26] audit: type=1326 audit(1784908060.907:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27308 comm="syz.4.10596" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24cdb9de99 code=0x7ffc0000 [ 779.896036][T27318] netlink: 'syz.4.10601': attribute type 1 has an invalid length. [ 779.914704][ T26] audit: type=1326 audit(1784908060.907:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27308 comm="syz.4.10596" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24cdb9de99 code=0x7ffc0000 [ 779.957508][ T26] audit: type=1326 audit(1784908060.907:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27308 comm="syz.4.10596" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f24cdb9de99 code=0x7ffc0000 [ 779.974149][T27318] netlink: 'syz.4.10601': attribute type 1 has an invalid length. [ 780.025291][T27318] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.10601'. [ 780.072627][ T26] audit: type=1326 audit(1784908060.907:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27308 comm="syz.4.10596" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24cdb9de99 code=0x7ffc0000 [ 780.165148][ T26] audit: type=1326 audit(1784908060.907:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27308 comm="syz.4.10596" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24cdb9de99 code=0x7ffc0000 [ 780.288435][ T26] audit: type=1326 audit(1784908060.907:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27308 comm="syz.4.10596" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f24cdb9de99 code=0x7ffc0000 [ 780.433878][ T26] audit: type=1326 audit(1784908060.907:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27308 comm="syz.4.10596" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f24cdb9de99 code=0x7ffc0000 [ 780.471612][T27332] loop2: detected capacity change from 0 to 1764 [ 780.579887][T27338] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10611'. [ 781.450719][T27372] netlink: 5427 bytes leftover after parsing attributes in process `syz.3.10628'. [ 781.502761][T27372] netlink: 52477 bytes leftover after parsing attributes in process `syz.3.10628'. [ 781.528413][T27372] netlink: 71676 bytes leftover after parsing attributes in process `syz.3.10628'. [ 781.847052][T27347] loop4: detected capacity change from 0 to 32768 [ 781.942927][T27347] jfs_strtoUCS: char2uni returned -22. [ 781.958119][T27347] charset = cp857, char = 0xd5 [ 782.003188][T27392] x_tables: unsorted entry at hook 3 [ 782.142273][T27261] usb 1-1: new low-speed USB device number 54 using dummy_hcd [ 782.276250][T27400] device bridge3 entered promiscuous mode [ 782.357487][T27402] loop2: detected capacity change from 0 to 256 [ 782.369840][T27261] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 782.397983][T27261] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 782.441860][T27404] netlink: 136 bytes leftover after parsing attributes in process `syz.4.10644'. [ 782.445194][T27261] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 782.501792][T27261] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 782.525191][T27404] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10644'. [ 782.532317][T27261] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 782.553990][T27261] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 782.567345][T27404] netlink: 'syz.4.10644': attribute type 3 has an invalid length. [ 782.576730][T27404] netlink: 1 bytes leftover after parsing attributes in process `syz.4.10644'. [ 782.620773][T27261] usb 1-1: string descriptor 0 read error: -22 [ 782.630770][T27261] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 782.669224][T27261] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.696992][T27261] usb 1-1: config 0 descriptor?? [ 782.727042][T27386] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 782.750902][T27261] hub 1-1:0.0: bad descriptor, ignoring hub [ 782.766186][T27261] hub: probe of 1-1:0.0 failed with error -5 [ 782.785104][T27261] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input46 [ 783.114746][T15802] usb 1-1: USB disconnect, device number 54 [ 783.417256][T27430] loop1: detected capacity change from 0 to 164 [ 783.447888][T27434] netlink: 'syz.2.10656': attribute type 1 has an invalid length. [ 783.984920][T27454] netlink: 'syz.1.10668': attribute type 1 has an invalid length. [ 783.992819][T27454] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10668'. [ 784.035049][T15802] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 784.236939][T15802] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 784.259883][T15802] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 784.280319][T15802] usb 4-1: config 0 interface 0 has no altsetting 0 [ 784.298387][T15802] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 784.328050][T15802] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 784.358807][T15802] usb 4-1: Product: syz [ 784.372224][T15802] usb 4-1: Manufacturer: syz [ 784.387288][T15802] usb 4-1: SerialNumber: syz [ 784.396813][T15802] usb 4-1: config 0 descriptor?? [ 784.430036][T15802] hub 4-1:0.0: bad descriptor, ignoring hub [ 784.454923][T15802] hub: probe of 4-1:0.0 failed with error -5 [ 784.466047][T27471] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 784.480376][T15802] usb 4-1: selecting invalid altsetting 0 [ 784.763733][T27482] netlink: 'syz.2.10683': attribute type 13 has an invalid length. [ 784.796526][T27482] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 784.833601][T27482] gretap0: refused to change device tx_queue_len [ 784.845302][T27262] usb 4-1: USB disconnect, device number 45 [ 784.905151][T27482] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 785.125198][T27492] netlink: 8752 bytes leftover after parsing attributes in process `syz.2.10688'. [ 785.234934][ T4260] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 785.442538][T27506] dlm: no locking on control device [ 785.449785][ T4260] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 785.479451][ T4260] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.526708][ T4260] usb 1-1: config 0 descriptor?? [ 785.554042][ T4260] cp210x 1-1:0.0: cp210x converter detected [ 785.596457][T27510] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 785.968433][ T4260] usb 1-1: cp210x converter now attached to ttyUSB0 [ 786.005096][ T4260] usb 1-1: USB disconnect, device number 55 [ 786.032856][ T4260] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 786.053088][ T4260] cp210x 1-1:0.0: device disconnected [ 786.174006][T27530] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10707'. [ 786.273168][T27532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10708'. [ 786.445666][T27539] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 786.695274][T27551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10716'. [ 786.724895][T15802] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 786.925842][T15802] usb 2-1: Using ep0 maxpacket: 32 [ 786.932656][T15802] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 786.983953][T15802] usb 2-1: config 0 has no interface number 0 [ 787.015119][T15802] usb 2-1: config 0 interface 12 has no altsetting 0 [ 787.047966][T15802] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 787.065278][T15802] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.073345][T15802] usb 2-1: Product: syz [ 787.085714][T15802] usb 2-1: Manufacturer: syz [ 787.091284][T15802] usb 2-1: SerialNumber: syz [ 787.112269][T15802] usb 2-1: config 0 descriptor?? [ 787.535721][T15802] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 787.543437][T15802] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 787.584724][T15802] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 787.592392][T15802] f81534: probe of 2-1:0.12 failed with error -71 [ 787.681400][T15802] usb 2-1: USB disconnect, device number 54 [ 787.901807][T27600] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10741'. [ 787.955129][T27600] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10741'. [ 788.064983][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 788.234255][T27615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10749'. [ 788.248621][T27613] loop1: detected capacity change from 0 to 1764 [ 788.284728][T15802] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 788.467878][T27621] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10752'. [ 788.504708][T15802] usb 5-1: Using ep0 maxpacket: 8 [ 788.516044][T15802] usb 5-1: unable to get BOS descriptor or descriptor too short [ 788.541942][T15802] usb 5-1: string descriptor 0 read error: -22 [ 788.562964][T15802] usb 5-1: New USB device found, idVendor=0582, idProduct=015b, bcdDevice= 0.40 [ 788.587882][T15802] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.641250][T15802] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 788.874651][T15521] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 788.944009][T27639] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551489) [ 788.956107][T27639] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 789.022903][T15802] usb 5-1: USB disconnect, device number 56 [ 789.064839][T15521] usb 3-1: Using ep0 maxpacket: 8 [ 789.072892][T15521] usb 3-1: config 0 interface 0 has no altsetting 0 [ 789.109186][T15521] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 789.128665][T15521] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.155094][T15521] usb 3-1: Product: syz [ 789.169516][T15521] usb 3-1: Manufacturer: syz [ 789.174171][T15521] usb 3-1: SerialNumber: syz [ 789.214395][T15521] usb 3-1: config 0 descriptor?? [ 789.252476][T15521] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 789.294321][T27648] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10765'. [ 789.475542][T15521] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 789.513741][T15521] snd_usb_toneport: probe of 3-1:0.0 failed with error -22 [ 789.567271][T27658] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10770'. [ 789.681275][T27262] usb 3-1: USB disconnect, device number 51 [ 790.332996][ T26] audit: type=1326 audit(1784908071.608:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27688 comm="syz.1.10786" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed5bb9de99 code=0x7ffc0000 [ 790.413165][ T26] audit: type=1326 audit(1784908071.608:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27688 comm="syz.1.10786" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed5bb9de99 code=0x7ffc0000 [ 790.885262][ T26] audit: type=1326 audit(1784908072.168:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27714 comm="syz.0.10798" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bc099de99 code=0x7ffc0000 [ 790.909473][ C0] vkms_vblank_simulate: vblank timer overrun [ 791.002894][ T26] audit: type=1326 audit(1784908072.208:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27714 comm="syz.0.10798" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f1bc099de99 code=0x7ffc0000 [ 791.027153][ C0] vkms_vblank_simulate: vblank timer overrun [ 791.109352][ T26] audit: type=1326 audit(1784908072.218:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27714 comm="syz.0.10798" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bc099de99 code=0x7ffc0000 [ 791.192179][ T26] audit: type=1326 audit(1784908072.218:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27714 comm="syz.0.10798" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bc099de99 code=0x7ffc0000 [ 791.583358][T27735] netlink: 220 bytes leftover after parsing attributes in process `syz.2.10805'. [ 791.740179][T27743] SET target dimension over the limit! [ 792.046595][T27758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10818'. [ 792.093392][T27758] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10818'. [ 792.134830][T27758] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10818'. [ 792.164597][T27758] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10818'. [ 792.269640][T27767] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 793.010389][T27795] loop3: detected capacity change from 0 to 4096 [ 793.083984][T27803] trusted_key: encrypted_key: insufficient parameters specified [ 793.368829][T27813] loop2: detected capacity change from 0 to 164 [ 793.991501][T27833] netlink: 224 bytes leftover after parsing attributes in process `syz.2.10856'. [ 794.520240][T27857] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10868'. [ 794.841773][T27872] netlink: 'syz.3.10875': attribute type 2 has an invalid length. [ 795.038728][T27882] loop3: detected capacity change from 0 to 512 [ 795.887386][T27916] (unnamed net_device) (uninitialized): option ad_select: invalid value (253) [ 795.904408][T27262] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 795.933738][T27918] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612) [ 795.952503][T27918] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 796.060392][T27920] kernel read not supported for file /  (pid: 27920 comm: syz.1.10899) [ 796.101037][ T26] audit: type=1800 audit(1784908077.378:615): pid=27920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.10899" name=20019C14 dev="mqueue" ino=108645 res=0 errno=0 [ 796.121341][ C0] vkms_vblank_simulate: vblank timer overrun [ 796.127667][T27262] usb 5-1: Using ep0 maxpacket: 32 [ 796.141199][T27262] usb 5-1: too many configurations: 17, using maximum allowed: 8 [ 796.165197][T27262] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 796.173271][T27262] usb 5-1: config 0 has no interface number 0 [ 796.191261][T27262] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 796.211254][T27262] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 796.250821][T27262] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 796.295852][T27262] usb 5-1: config 0 has no interface number 0 [ 796.302021][T27262] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 796.374409][T27262] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 796.405579][T27262] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 796.434174][T27262] usb 5-1: config 0 has no interface number 0 [ 796.440372][T27262] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 796.487389][T27262] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 796.562614][T27262] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 796.579552][T27262] usb 5-1: config 0 has no interface number 0 [ 796.590437][T27262] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 796.609788][T27262] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 796.630276][T27262] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 796.676320][T27262] usb 5-1: config 0 has no interface number 0 [ 796.682569][T27262] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 796.710157][T27262] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 796.768174][T27262] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 796.789599][T27938] device bridge6 entered promiscuous mode [ 796.795572][T27262] usb 5-1: config 0 has no interface number 0 [ 796.811144][T27262] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 796.841380][T27262] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 796.885597][T27262] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 796.893678][T27262] usb 5-1: config 0 has no interface number 0 [ 796.922705][T27262] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 796.952889][T27262] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 796.978908][T27262] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 797.007894][T27262] usb 5-1: config 0 has no interface number 0 [ 797.014066][T27262] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 797.038036][T27946] x_tables: duplicate underflow at hook 1 [ 797.043942][T27262] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 797.066656][T27262] usb 5-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 797.104366][T27262] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.112556][T27262] usb 5-1: Product: syz [ 797.144207][T27262] usb 5-1: Manufacturer: syz [ 797.148899][T27262] usb 5-1: SerialNumber: syz [ 797.181573][T27262] usb 5-1: config 0 descriptor?? [ 797.203917][T27262] etas_es58x 5-1:0.2: Starting syz syz (Serial Number syz) [ 797.415772][T27262] etas_es58x 5-1:0.2: Product info: [ 797.598046][T27966] netlink: 148 bytes leftover after parsing attributes in process `syz.0.10922'. [ 797.622476][T27966] netlink: 'syz.0.10922': attribute type 1 has an invalid length. [ 797.662654][T15521] usb 5-1: USB disconnect, device number 57 [ 797.668958][T27966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10922'. [ 797.679984][T15521] etas_es58x 5-1:0.2: Disconnecting syz syz [ 798.454933][T27993] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10933'. [ 798.667675][ T26] audit: type=1326 audit(1784908079.948:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27998 comm="syz.2.10935" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efec199de99 code=0x7ffc0000 [ 798.691969][ C0] vkms_vblank_simulate: vblank timer overrun [ 798.754640][T28001] xt_TPROXY: Can be used only with -p tcp or -p udp [ 798.774053][ T26] audit: type=1326 audit(1784908079.988:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27998 comm="syz.2.10935" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7efec199de99 code=0x7ffc0000 [ 798.910592][ T26] audit: type=1326 audit(1784908079.988:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27998 comm="syz.2.10935" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efec199de99 code=0x7ffc0000 [ 799.024229][ T26] audit: type=1326 audit(1784908079.988:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27998 comm="syz.2.10935" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efec199de99 code=0x7ffc0000 [ 799.053579][T27971] loop3: detected capacity change from 0 to 32768 [ 799.103503][T27971] /dev/loop3: Can't open blockdev [ 799.463764][T28027] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 799.864061][T15521] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 799.879538][T28042] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10952'. [ 799.904073][T28042] netlink: 48 bytes leftover after parsing attributes in process `syz.0.10952'. [ 800.054105][T15521] usb 5-1: Using ep0 maxpacket: 8 [ 800.063340][T15521] usb 5-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 800.146592][T15521] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.182938][T15521] usb 5-1: Product: syz [ 800.204050][T15521] usb 5-1: Manufacturer: syz [ 800.208735][T15521] usb 5-1: SerialNumber: syz [ 800.245468][T28054] netlink: 'syz.2.10957': attribute type 1 has an invalid length. [ 800.255631][T28054] netlink: 'syz.2.10957': attribute type 2 has an invalid length. [ 800.654365][T15521] mxuport 5-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 800.663120][T15521] mxuport: probe of 5-1:254.0 failed with error -5 [ 800.671537][T28067] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10963'. [ 800.722243][T15521] usb 5-1: USB disconnect, device number 58 [ 801.472119][T28098] netlink: 'syz.2.10973': attribute type 21 has an invalid length. [ 801.514398][T28098] netlink: 'syz.2.10973': attribute type 6 has an invalid length. [ 801.527794][T28098] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10973'. [ 801.838615][T28102] loop4: detected capacity change from 0 to 4096 [ 801.873230][T28102] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 801.916585][T28102] ntfs3: loop4: Failed to load $MFT. [ 802.550913][T28127] ip6t_srh: unknown srh invflags 4000 [ 802.747275][T28136] netlink: 5 bytes leftover after parsing attributes in process `syz.1.10990'. [ 803.162633][ T26] audit: type=1326 audit(1784908084.438:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28153 comm="syz.0.10999" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bc099de99 code=0x7ffc0000 [ 803.233165][ T26] audit: type=1326 audit(1784908084.438:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28153 comm="syz.0.10999" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bc099de99 code=0x7ffc0000 [ 803.329717][ T26] audit: type=1326 audit(1784908084.478:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28153 comm="syz.0.10999" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f1bc099de99 code=0x7ffc0000 [ 803.403843][ T26] audit: type=1326 audit(1784908084.478:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28153 comm="syz.0.10999" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bc099de99 code=0x7ffc0000 [ 803.473128][ T26] audit: type=1326 audit(1784908084.478:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28153 comm="syz.0.10999" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bc099de99 code=0x7ffc0000 [ 803.723854][T15521] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 803.864037][T15802] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 803.915683][T15521] usb 3-1: config 0 has an invalid interface number: 237 but max is 0 [ 803.941191][T15521] usb 3-1: config 0 has no interface number 0 [ 803.947447][T15521] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 803.972020][T28184] netlink: 260 bytes leftover after parsing attributes in process `syz.0.11014'. [ 803.995567][T15521] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 804.014438][T15521] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 804.026205][T15521] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 804.051851][T15521] usb 3-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be [ 804.061323][T15802] usb 2-1: Using ep0 maxpacket: 16 [ 804.069285][T15802] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 804.083785][T15521] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3 [ 804.097152][T15802] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 804.113784][T15521] usb 3-1: Product: syz [ 804.118033][T15521] usb 3-1: Manufacturer: syz [ 804.122670][T15521] usb 3-1: SerialNumber: syz [ 804.133779][T15802] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.141841][T15802] usb 2-1: Product: syz [ 804.155740][T15521] usb 3-1: config 0 descriptor?? [ 804.174351][T15802] usb 2-1: Manufacturer: syz [ 804.179011][T15802] usb 2-1: SerialNumber: syz [ 804.190840][T15521] xpad: probe of 3-1:0.237 failed with error -5 [ 804.224599][T15802] r8152-cfgselector 2-1: config 0 descriptor?? [ 804.465518][T15802] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 804.470623][T27261] usb 3-1: USB disconnect, device number 52 [ 804.693950][T26750] usb 2-1: config 0 descriptor?? [ 804.702368][T26750] usb 2-1: can't set config #0, error -71 [ 804.703127][T27262] usb 2-1: USB disconnect, device number 55 [ 804.888928][T28210] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11026'. [ 804.953813][T15802] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 805.018512][T28214] comedi comedi4: bad chanlist[0]=0x00080007 chan=7 range length=2 [ 805.160675][T15802] usb 5-1: unable to get BOS descriptor or descriptor too short [ 805.184657][T15802] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 805.223698][T15802] usb 5-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 805.280376][T15802] usb 5-1: config 1 interface 0 has no altsetting 1 [ 805.298683][T15802] usb 5-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 805.324112][T15802] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.332175][T15802] usb 5-1: Product: syz [ 805.362411][T15802] usb 5-1: Manufacturer: syz [ 805.372797][T15802] usb 5-1: SerialNumber: syz [ 805.405219][T15802] smsusb:smsusb_probe: board id=8, interface number 0 [ 805.602359][T15802] smsusb:smsusb_probe: Device initialized with return code -19 [ 805.825410][T15802] usb 5-1: USB disconnect, device number 59 [ 805.919797][T27262] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 805.933064][T28228] loop1: detected capacity change from 0 to 32768 [ 805.974762][T28228] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 805.992879][T28228] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 806.003876][T28228] BTRFS info (device loop1): using free space tree [ 806.033774][T27261] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 806.115462][T27262] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 806.131530][T27262] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 806.158493][T27262] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 806.198207][T27262] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.213738][T28228] BTRFS info (device loop1): enabling ssd optimizations [ 806.225734][T27261] usb 4-1: config 1 has an invalid interface number: 128 but max is 1 [ 806.253829][T27262] usb 3-1: Product: syz [ 806.258224][T27261] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 806.268564][T27262] usb 3-1: Manufacturer: syz [ 806.273246][T27262] usb 3-1: SerialNumber: syz [ 806.291253][T27261] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 806.331020][T27261] usb 4-1: config 1 has no interface number 0 [ 806.349507][T27261] usb 4-1: config 1 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 806.381566][T27261] usb 4-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 806.416580][T27261] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 806.433851][T27261] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.472936][T27261] usb 4-1: Product: syz [ 806.493262][T27261] usb 4-1: Manufacturer: syz [ 806.500616][T27261] usb 4-1: SerialNumber: syz [ 806.520230][T27261] cdc_wdm 4-1:1.128: skipping garbage [ 806.546031][T27262] usb 3-1: unit 4 not found! [ 806.562219][T27261] cdc_wdm 4-1:1.128: cdc-wdm0: USB WDM device [ 806.573456][ T4273] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 806.593919][T27262] usb 3-1: USB disconnect, device number 53 [ 806.600056][T27261] cdc_wdm 4-1:1.128: Unknown control protocol [ 806.644094][ T4559] udevd[4559]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 806.786197][ T4320] usb 4-1: USB disconnect, device number 46 [ 807.003297][T28273] loop4: detected capacity change from 0 to 4096 [ 807.054915][T28273] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 807.693807][T15799] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 807.777376][T28296] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11061'. [ 807.804411][T28300] nft_compat: unsupported protocol 1 [ 807.883597][T15799] usb 2-1: Using ep0 maxpacket: 16 [ 807.890686][T15799] usb 2-1: config 0 has no interfaces? [ 807.912496][T15799] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 807.947358][T15799] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.982727][T15799] usb 2-1: Product: syz [ 808.002148][T15799] usb 2-1: Manufacturer: syz [ 808.012260][T15799] usb 2-1: SerialNumber: syz [ 808.038851][T15799] r8152-cfgselector 2-1: config 0 descriptor?? [ 808.179123][T28312] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11069'. [ 808.273213][T15799] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 808.474207][T28321] dlm: no local IP address has been set [ 808.503838][T15799] usb 2-1: USB disconnect, device number 56 [ 808.520340][T28323] program syz.2.11074 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 808.521926][T28321] dlm: cannot start dlm midcomms -107 [ 808.555583][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.562020][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.153793][T27262] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 809.203604][T15799] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 809.329069][T28343] xt_CT: No such helper "netbios-ns" [ 809.351887][T27262] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 809.383896][T27262] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 809.403584][T15799] usb 4-1: Using ep0 maxpacket: 8 [ 809.411748][T27262] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 809.415526][T15799] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xEE, skipping [ 809.427871][T27262] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 809.476145][T15799] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 809.487325][T27262] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 809.513511][T27262] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.537245][T27262] usb 3-1: Product: syz [ 809.541490][T27262] usb 3-1: Manufacturer: syz [ 809.557740][T15799] usb 4-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 809.583720][T27262] usb 3-1: SerialNumber: syz [ 809.584485][T15799] usb 4-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3 [ 809.607012][T15799] usb 4-1: Product: syz [ 809.613964][T27262] usb 3-1: config 0 descriptor?? [ 809.630006][T15799] usb 4-1: Manufacturer: syz [ 809.635582][T27262] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 809.657942][T15799] usb 4-1: SerialNumber: syz [ 809.689367][T15799] usb 4-1: config 0 descriptor?? [ 809.729208][T15799] smsusb:smsusb_probe: board id=2, interface number 0 [ 809.768073][T15799] smsusb:smsusb_probe: Device initialized with return code -19 [ 809.853732][T27262] scsi host1: usb-storage 3-1:0.0 [ 809.883636][T27262] usb 3-1: USB disconnect, device number 54 [ 809.989389][T15799] usb 4-1: USB disconnect, device number 47 [ 810.149731][T28373] loop4: detected capacity change from 0 to 512 [ 810.177735][T28373] EXT4-fs: Ignoring removed i_version option [ 810.192513][T28373] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 810.321910][T28373] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 810.343732][T28373] Quota error (device loop4): write_blk: dquota write failed [ 810.353653][T28373] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 810.442388][T28373] Quota error (device loop4): write_blk: dquota write failed [ 810.490354][T28373] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 810.503577][T28373] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.11095: Failed to acquire dquot type 1 [ 810.564380][T28373] EXT4-fs (loop4): 1 truncate cleaned up [ 810.570133][T28373] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 810.628513][T28373] Quota error (device loop4): write_blk: dquota write failed [ 810.679755][T28373] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 810.723213][T28373] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.11095: Failed to acquire dquot type 1 [ 810.803673][T15799] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 810.864130][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 811.003522][T15799] usb 2-1: Using ep0 maxpacket: 8 [ 811.011578][T15799] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 811.047903][T15799] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 811.074544][T15799] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 811.093996][T15799] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.102056][T15799] usb 2-1: Product: syz [ 811.127326][T15799] usb 2-1: Manufacturer: syz [ 811.160005][T15799] usb 2-1: SerialNumber: syz [ 811.185796][T15799] usb 2-1: config 0 descriptor?? [ 811.373414][T27262] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 811.528914][T28411] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11113'. [ 811.563427][T27262] usb 3-1: Using ep0 maxpacket: 32 [ 811.570843][T27262] usb 3-1: unable to get BOS descriptor or descriptor too short [ 811.597258][T27262] usb 3-1: New USB device found, idVendor=0e41, idProduct=3000, bcdDevice= 0.40 [ 811.627040][T27262] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.631489][T15799] usb 2-1: USB disconnect, device number 57 [ 811.653827][T27262] usb 3-1: Product: syz [ 811.669739][T27262] usb 3-1: Manufacturer: syz [ 811.708730][T27262] usb 3-1: SerialNumber: syz [ 811.807688][T28418] device gre2 entered promiscuous mode [ 811.956374][T27262] usb 3-1: 4:0: failed to get current value for ch 0 (-71) [ 811.977476][T27262] usb 3-1: 4:0: failed to get current value for ch 0 (-71) [ 811.996679][T27262] usb 3-1: unit 7 not found! [ 812.059734][T27262] usb 3-1: USB disconnect, device number 55 [ 812.320531][ T4358] udevd[4358]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 812.424403][T28437] device wg1 entered promiscuous mode [ 813.229405][T28472] netlink: 'syz.4.11142': attribute type 1 has an invalid length. [ 813.293495][T28472] netlink: 'syz.4.11142': attribute type 2 has an invalid length. [ 813.493400][T15799] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 813.695159][T15799] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 813.740839][T15799] usb 1-1: config 0 has no interface number 0 [ 813.750641][T15799] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 813.774381][T15799] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 813.825169][T15799] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 813.849759][T15799] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.933489][T15799] usb 1-1: Product: syz [ 813.937731][T15799] usb 1-1: Manufacturer: syz [ 813.942372][T15799] usb 1-1: SerialNumber: syz [ 813.963389][T28497] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 814.039352][T15799] usb 1-1: config 0 descriptor?? [ 814.064752][T28474] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 814.083644][T15799] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 814.127930][T15799] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 814.373614][ C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 814.395308][T28511] loop4: detected capacity change from 0 to 8 [ 814.402353][T28511] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 814.507075][ T4358] udevd[4358]: incorrect cramfs checksum on /dev/loop4 [ 814.588556][ T4358] udevd[4358]: incorrect cramfs checksum on /dev/loop4 [ 814.595169][T15799] usb 1-1: USB disconnect, device number 56 [ 814.651634][T15799] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 814.685469][T15799] cyberjack 1-1:0.69: device disconnected [ 814.872835][T28527] netlink: 'syz.3.11169': attribute type 1 has an invalid length. [ 815.191920][T28537] netlink: 'syz.2.11175': attribute type 3 has an invalid length. [ 815.283245][T28544] usb usb8: usbfs: process 28544 (syz.1.11177) did not claim interface 0 before use [ 815.309001][T28545] netlink: 76 bytes leftover after parsing attributes in process `syz.0.11178'. [ 815.353731][T28545] netlink: 76 bytes leftover after parsing attributes in process `syz.0.11178'. [ 815.783168][T27261] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 815.796695][T28563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11188'. [ 815.983247][T27261] usb 5-1: Using ep0 maxpacket: 16 [ 815.990362][T27261] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 816.038470][T27261] usb 5-1: config 0 has an invalid descriptor of length 149, skipping remainder of the config [ 816.077776][T27261] usb 5-1: config 0 has no interface number 0 [ 816.103850][T27261] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.17 [ 816.112966][T27261] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.161383][ T26] audit: type=1400 audit(1784908097.439:625): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=28577 comm="syz.1.11194" [ 816.191829][T27261] usb 5-1: Product: syz [ 816.199784][T27261] usb 5-1: Manufacturer: syz [ 816.212522][T27261] usb 5-1: SerialNumber: syz [ 816.238515][T27261] usb 5-1: config 0 descriptor?? [ 816.469646][T27261] usb 5-1: USB disconnect, device number 60 [ 817.665416][T28638] netlink: 'syz.3.11225': attribute type 2 has an invalid length. [ 818.161188][T28660] netlink: 'syz.2.11234': attribute type 2 has an invalid length. [ 818.224155][T28660] device .d entered promiscuous mode [ 818.274208][T28664] loop4: detected capacity change from 0 to 1024 [ 818.331010][T28666] autofs4:pid:28666:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(40960.1), cmd(0xc0189374) [ 818.356369][T28664] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 818.366155][T28666] autofs4:pid:28666:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 818.428733][T28664] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 818.443057][T28664] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 818.505607][T28672] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 818.594869][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 819.113023][T28697] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11252'. [ 819.122269][T28697] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11252'. [ 819.142924][T28697] netlink: 'syz.2.11252': attribute type 6 has an invalid length. [ 819.605550][ T26] audit: type=1107 audit(1784908100.889:626): pid=28714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 819.628427][T28709] loop4: detected capacity change from 0 to 4096 [ 819.681069][T28709] EXT4-fs: inline encryption not supported [ 819.716322][T28709] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 819.758269][T28709] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a84ce018, mo2=0002] [ 819.782235][T28709] System zones: 0-5 [ 819.813392][T28709] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 819.843067][T27261] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 820.033002][T27261] usb 3-1: Using ep0 maxpacket: 8 [ 820.040102][T27261] usb 3-1: config 0 has an invalid interface number: 7 but max is 0 [ 820.063154][T27261] usb 3-1: config 0 has no interface number 0 [ 820.079555][T27261] usb 3-1: config 0 interface 7 has no altsetting 0 [ 820.113408][T27261] usb 3-1: New USB device found, idVendor=05da, idProduct=0094, bcdDevice=c3.32 [ 820.113970][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 820.153057][T27261] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.173516][T27261] usb 3-1: Product: syz [ 820.177738][T27261] usb 3-1: Manufacturer: syz [ 820.220181][T27261] usb 3-1: SerialNumber: syz [ 820.245359][T27261] usb 3-1: config 0 descriptor?? [ 820.471287][T27261] usb 3-1: bad CDC descriptors [ 820.478162][T27261] usb 3-1: bad CDC descriptors [ 820.487417][T27261] microtek usb (rev 0.4.3): expecting 3 got 0 endpoints! Bailing out. [ 820.534147][T27261] usb 3-1: USB disconnect, device number 56 [ 820.693890][T28750] loop1: detected capacity change from 0 to 256 [ 820.751738][T28750] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d) [ 821.306595][T28772] netlink: 5 bytes leftover after parsing attributes in process `syz.4.11288'. [ 821.455958][T28775] SET target dimension over the limit! [ 821.526095][T28781] sctp: [Deprecated]: syz.3.11292 (pid 28781) Use of int in max_burst socket option deprecated. [ 821.526095][T28781] Use struct sctp_assoc_value instead [ 822.283013][T28803] loop2: detected capacity change from 0 to 4096 [ 822.362939][T27262] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 822.396581][T28803] ntfs: volume version 3.1. [ 822.562757][T27262] usb 1-1: Using ep0 maxpacket: 8 [ 822.570085][T27262] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 822.612025][T27262] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 822.615955][T28817] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11310'. [ 822.652930][T27262] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 822.692697][T27262] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 822.732700][T27262] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 822.784355][T27262] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 822.813031][T27262] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.856291][T27262] usb 1-1: config 0 descriptor?? [ 822.862271][T28799] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 823.313970][ T27] usb 1-1: USB disconnect, device number 57 [ 823.320673][ T4282] Bluetooth: hci5: Opcode 0x0c03 failed: -19 [ 823.633839][T28850] overlayfs: conflicting options: userxattr,redirect_dir=follow [ 823.634940][T28851] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 824.165095][T28868] xt_CT: You must specify a L4 protocol and not use inversions on it [ 824.298470][T28872] loop4: detected capacity change from 0 to 64 [ 824.437732][T28872] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 824.555732][T28876] loop2: detected capacity change from 0 to 4096 [ 824.602794][ T27] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 824.716969][T28876] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 824.794588][ T27] usb 1-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 824.822071][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.862126][ T27] usb 1-1: config 0 descriptor?? [ 824.869017][T28888] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11342'. [ 824.885327][T28876] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #2: block 16: comm syz.2.11338: bad entry in directory: rec_len % 4 != 0 - offset=12, inode=1, rec_len=32769, size=4096 fake=1 [ 824.913950][ T27] pwc: Creative Labs Webcam 5 detected. [ 825.205483][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 825.300118][ T27] pwc: send_video_command error -71 [ 825.305482][ T27] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 825.331376][ T27] Philips webcam: probe of 1-1:0.0 failed with error -71 [ 825.407886][ T27] usb 1-1: USB disconnect, device number 58 [ 825.840870][T28917] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (8) [ 825.932732][T27261] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 826.142621][T27261] usb 3-1: Using ep0 maxpacket: 16 [ 826.154897][T27261] usb 3-1: config 1 has an invalid interface number: 62 but max is 0 [ 826.195953][T27261] usb 3-1: config 1 has no interface number 0 [ 826.211266][T28930] netlink: 'syz.4.11363': attribute type 4 has an invalid length. [ 826.219444][T27261] usb 3-1: config 1 interface 62 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 826.244444][T28930] IPv6: NLM_F_CREATE should be specified when creating new route [ 826.252020][T27261] usb 3-1: config 1 interface 62 altsetting 253 bulk endpoint 0x3 has invalid maxpacket 768 [ 826.273177][T27261] usb 3-1: config 1 interface 62 altsetting 253 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 826.307913][T27261] usb 3-1: config 1 interface 62 has no altsetting 0 [ 826.330513][T27261] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 826.349887][T27261] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 826.407607][T27261] usb 3-1: SerialNumber: syz [ 826.439790][T28911] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 826.660943][T27261] cdc_acm 3-1:1.62: ttyACM0: USB ACM device [ 826.689089][T27261] usb 3-1: USB disconnect, device number 57 [ 826.752625][T27262] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 826.772607][ T27] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 826.838221][T28950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11373'. [ 826.955726][T27262] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 826.972729][T27262] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.977224][ T27] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 827.002523][ T27] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 827.013802][T28954] loop3: detected capacity change from 0 to 2048 [ 827.020957][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.023012][T27262] usb 5-1: config 0 descriptor?? [ 827.053578][ T27] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 827.065670][T27262] cp210x 5-1:0.0: cp210x converter detected [ 827.265814][T27262] usb 5-1: cp210x converter now attached to ttyUSB0 [ 827.468467][T15803] usb 5-1: USB disconnect, device number 61 [ 827.485315][T15803] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 827.512236][T15803] cp210x 5-1:0.0: device disconnected [ 828.143349][ T27] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 828.351145][ T27] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 828.379866][ T27] stv0680 2-1:4.0: last error: 0, command = 0x0 [ 828.401739][ T27] usb 2-1: USB disconnect, device number 58 [ 828.702611][T15799] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 828.754087][T28982] loop3: detected capacity change from 0 to 32768 [ 828.777095][T29002] netlink: 'syz.2.11398': attribute type 21 has an invalid length. [ 828.786464][T29002] netlink: 128 bytes leftover after parsing attributes in process `syz.2.11398'. [ 828.808353][T29002] netlink: 'syz.2.11398': attribute type 4 has an invalid length. [ 828.809156][T28982] ocfs2: Readonly device (7,3) detected. Cluster services will not be used for this mount. Recovery will be skipped. [ 828.836125][T29002] netlink: 3 bytes leftover after parsing attributes in process `syz.2.11398'. [ 828.841308][T28982] ocfs2: Mounting device (7,3) on (node local, slot 65535) with writeback data mode. [ 828.856730][T28982] INFO: trying to register non-static key. [ 828.862591][T28982] The code is fine but needs lockdep annotation, or maybe [ 828.869736][T28982] you didn't initialize this object before use? [ 828.875994][T28982] turning off the locking correctness validator. [ 828.882350][T28982] CPU: 0 PID: 28982 Comm: syz.3.11388 Not tainted syzkaller #0 [ 828.889927][T28982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 828.900003][T28982] Call Trace: [ 828.903377][T28982] [ 828.906387][T28982] dump_stack_lvl+0x188/0x24e [ 828.911166][T28982] ? show_regs_print_info+0x12/0x12 [ 828.916418][T28982] ? load_image+0x410/0x410 [ 828.920972][T28982] ? _find_next_bit+0x11e/0x130 [ 828.926023][T28982] ? __is_module_percpu_address+0x279/0x3b0 [ 828.932094][T28982] ? is_kernel_percpu_address+0x18f/0x1b0 [ 828.937891][T28982] assign_lock_key+0x201/0x230 [ 828.942709][T28982] ? SOFTIRQ_verbose+0x10/0x10 [ 828.947506][T28982] register_lock_class+0x21d/0x870 [ 828.952650][T28982] ? mark_lock+0x94/0x320 [ 828.957016][T28982] ? is_dynamic_key+0x260/0x260 [ 828.961893][T28982] ? __lock_acquire+0x1465/0x7c40 [ 828.966955][T28982] __lock_acquire+0x172/0x7c40 [ 828.971767][T28982] ? kernel_text_address+0x9c/0xd0 [ 828.976993][T28982] ? __kernel_text_address+0x9/0x30 [ 828.982216][T28982] ? verify_lock_unused+0x140/0x140 [ 828.987448][T28982] ? verify_lock_unused+0x140/0x140 [ 828.992679][T28982] ? stack_trace_save+0xa6/0xf0 [ 828.997651][T28982] ? __stack_depot_save+0x35/0x480 [ 829.002857][T28982] lock_acquire+0x1bb/0x4a0 [ 829.007391][T28982] ? ocfs2_mark_lockres_freeing+0x14a/0x5a0 [ 829.013353][T28982] ? memset+0x1e/0x40 [ 829.017396][T28982] ? read_lock_is_recursive+0x10/0x10 [ 829.022886][T28982] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 829.029163][T28982] ? lockdep_hardirqs_on+0x94/0x140 [ 829.034415][T28982] _raw_spin_lock_irqsave+0xb0/0x100 [ 829.039778][T28982] ? ocfs2_mark_lockres_freeing+0x14a/0x5a0 [ 829.045694][T28982] ? _raw_spin_lock+0x40/0x40 [ 829.050397][T28982] ? ktime_get+0x247/0x270 [ 829.054846][T28982] ocfs2_mark_lockres_freeing+0x14a/0x5a0 [ 829.060595][T28982] ? ocfs2_dlm_shutdown+0x230/0x230 [ 829.065811][T28982] ? slab_free_freelist_hook+0x133/0x1b0 [ 829.071495][T28982] ? ocfs2_journal_shutdown+0x68e/0xc40 [ 829.077070][T28982] ? ocfs2_journal_init+0xd40/0xd40 [ 829.082310][T28982] ocfs2_dlm_shutdown+0x33/0x230 [ 829.087276][T28982] ocfs2_dismount_volume+0x479/0x940 [ 829.092668][T28982] ? ocfs2_enable_quotas+0x4a0/0x4a0 [ 829.097978][T28982] ? clear_inode+0x150/0x150 [ 829.102629][T28982] ? dput+0x37/0x1d0 [ 829.106593][T28982] ? ocfs2_free_inode+0x20/0x20 [ 829.111489][T28982] generic_shutdown_super+0x130/0x340 [ 829.116925][T28982] kill_block_super+0x7c/0xe0 [ 829.121716][T28982] deactivate_locked_super+0x93/0xf0 [ 829.127021][T28982] cleanup_mnt+0x471/0x4f0 [ 829.131512][T28982] task_work_run+0x1d0/0x260 [ 829.136127][T28982] ? task_work_cancel+0x220/0x220 [ 829.141172][T28982] ? __se_sys_mount+0x38f/0x3d0 [ 829.146053][T28982] ? exit_to_user_mode_loop+0x3b/0x110 [ 829.151583][T28982] exit_to_user_mode_loop+0xe6/0x110 [ 829.156904][T28982] exit_to_user_mode_prepare+0xee/0x180 [ 829.162478][T28982] syscall_exit_to_user_mode+0x16/0x40 [ 829.167964][T28982] do_syscall_64+0x58/0xa0 [ 829.172413][T28982] ? clear_bhb_loop+0x60/0xb0 [ 829.177172][T28982] ? clear_bhb_loop+0x60/0xb0 [ 829.181871][T28982] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 829.187809][T28982] RIP: 0033:0x7f636c79f10a [ 829.192307][T28982] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 829.211969][T28982] RSP: 002b:00007f636d594e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 829.220512][T28982] RAX: ffffffffffffffec RBX: 00007f636d594ee0 RCX: 00007f636c79f10a [ 829.228515][T28982] RDX: 0000200000004480 RSI: 00002000000044c0 RDI: 00007f636d594ea0 [ 829.236513][T28982] RBP: 0000200000004480 R08: 00007f636d594ee0 R09: 0000000000800401 [ 829.244495][T28982] R10: 0000000000800401 R11: 0000000000000246 R12: 00002000000044c0 [ 829.252486][T28982] R13: 00007f636d594ea0 R14: 000000000000446c R15: 0000200000000080 [ 829.260498][T28982] [ 829.287341][T28982] ocfs2: Unmounting device (7,3) on (node local) [ 829.293861][T15799] usb 5-1: Using ep0 maxpacket: 32 [ 829.316490][T15799] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 829.347916][T15799] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 829.358797][T15799] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.367351][T15799] usb 5-1: Product: syz [ 829.371566][T15799] usb 5-1: Manufacturer: syz [ 829.378803][T15799] usb 5-1: SerialNumber: syz [ 829.390856][T15799] usb 5-1: config 0 descriptor?? [ 829.414728][T15803] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 829.424496][T15799] usb 5-1: bad CDC descriptors [ 829.429660][T15799] usb 5-1: unsupported MDLM descriptors [ 829.613569][T15803] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 829.621704][T15803] usb 1-1: config 0 has no interface number 0 [ 829.644867][T15803] usb 1-1: config 0 interface 41 has no altsetting 0 [ 829.651900][T15799] usb 5-1: USB disconnect, device number 62 [ 829.670189][T15803] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 829.692363][T15803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.692391][T15803] usb 1-1: Product: syz [ 829.692407][T15803] usb 1-1: Manufacturer: syz [ 829.722310][T15803] usb 1-1: SerialNumber: syz [ 829.729605][T15803] usb 1-1: config 0 descriptor?? [ 830.143370][T15803] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 830.167040][T15803] CoreChips: probe of 1-1:0.41 failed with error -71 [ 830.185039][T15803] usb 1-1: USB disconnect, device number 59