last executing test programs: 3.083114883s ago: executing program 4 (id=11227): r0 = io_uring_setup(0x7fc0, &(0x7f0000000000)={0x0, 0x3, 0x40}) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x7ffffffe) 2.910370227s ago: executing program 4 (id=11231): capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0xe}) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000200)) 2.81577141s ago: executing program 1 (id=11233): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvfrom(r0, 0x0, 0x0, 0x40000060, 0x0, 0x0) 2.738538842s ago: executing program 4 (id=11234): r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000100)={0xfffffffc, [[0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffd, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x4003, 0xffffffff, 0xffffffff, 0xffffffff, 0x2, 0x5, 0xffffffff, 0xfffffff0], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffa, 0x10, 0xffffffff]], '\x00', [{0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x4, 0x989680}, {0x0, 0x989680}, {0x101, 0x989684}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}], '\x00', 0xffffffff}) 2.667359023s ago: executing program 1 (id=11236): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/225, 0xe1}], 0x1, 0x91, 0x20000000) 2.548935446s ago: executing program 4 (id=11238): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0xdb6d4b04508a3c99) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000300)={0x1d91, 0xba, 0x6}) 2.423706009s ago: executing program 1 (id=11240): syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000380)={[{@creator={'creator', 0x3d, "91b212f7"}}, {@nls={'nls', 0x3d, 'cp932'}}, {@uid}, {@type={'type', 0x3d, "abe89a3a"}}, {@gid}]}, 0x1, 0x5d9, &(0x7f0000000cc0)="$eJzs3U1rXNcdB+DfHY9lywVbSezELQGLGNqmovaMxk3dbuqWUrQIJVDoKgSEPY6Ex0qQJkUJpVXft/0I6UJfoLvsAukiq3bdlbah0L12LvfOHWlsKYoUK5pR/Txw5pxzzz3nnvu/LzN3hJgAz6yFuTQ3UmRh7vX1sr612eltbXYeDstJziVpJM1BlmIlKT5J7mSQ8vVyYT1c8XnbefWzSx9de+vTNwe1Zp2q9RsH9TucjTplNsmZOj+u8e4+9XjFY3t4fRg4GLdHe2wcpftTXrfAJCgG75t7zCQXkpyvPwekvjs0TnZ2x+9IdzkAAAA4pS5tZzvruTjueQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBpUv/+f1GnxrA8m2L4+/9T9bLU5VPt43FPAAAAAAAAAACOwbXtbGc9F4f1R0X1N/9Xqsrl6vVreS9r6WY1N7KexfTTz2raSWZGBppaX+z3V9uH6Dm/b8/5k9lfAAAAAAAAAPg/9fss7P79HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJkGRnBlkVbo8LM+k0UxyPslUud5G8q9h+TT7eNwTAAAAgBNwaTvbWc/FYf1RUT3zv1g995/Pe1lJP8vpp5du7lXfBQye+htbm53e1mbnYZn2jvvj/x5pGtWIGXz3sP+Wr1ZrTOd+lqslN3I376SXe2lUPUtXh/PZf16/K+dU/Kh2yJndq/Nyz/9a55NhporI2Z2ItOq5ldF47uBIHPHoPLmldho73/xc/gpifqHOy/3580THfH7k7Hvx4Egk3/vlv5eWeisPlu6vzU3OLn1JT0aiMxKJl56pSLSqSFzZqS/kZ/lF5jKbN7Ka5fwqi+mnm9n8tCot1udz+TpzcKTuPFZ744tmMlUfl8Fd9GhzeqXqezHL+Xneyb10czs/yK3czu3cynxaaY0c4SuHuOobR7vqr3+7Lkwn+UudT4Yyrs+NxHX0njtTtY0u2Y3S88d/b2x+oy6U2/hDnU+GJyPRHonECwdH4m+Pyte13sqD1aXFdw+5vW/VeXkd/Wmi3iXK8+X58mBVtcfPjrLthX3b2lXb5Z22xp62KzttX3SlTtWf4faONF+1vbRvW6dquzrStt/nLQAm3oXvXJia/s/0P6c/nP7j9NL06+d/cu72uZencvYfZ3/YbJ35ZuPl4u/5ML/Zff4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC+vLX3P3iw2Ot1VxUUFJ7Jwm/3bRr3nQn4qt3sP3z35tr7H3x3+eHi2923uyudW+3Oa7far3W+f/P+cq/bGrzudpga52yB47T7pj/umQAAAAAAAAAAAACHdRL/YDDufQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOt4W5NDdSpN260SrrW5udXpmG5d01m0kaSYpfJ8UnyZ0MUmZGhis+bzuvfnbpo2tvffrm7ljN4fqNg/odzkadMpvkTJ0f13h3n3q8YmcPy4BdHwYOxu1/AQAA//96kwu1") mkdir(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x9) 2.39591893s ago: executing program 4 (id=11243): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="120100005fb8e520cd0c8000834a0102030109021b0002000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000300)={0x0, 0xe, 0x4a, "f0e43da7d3604ffe0e32bd5e561c65e45ff64cf6bf071b87f3f3d19c8961eeba9274e012c5dee69be37fa7eb4823a40f8a0b96c7299eda7c14bd0c1b49a48dc15873db014f97baaab6c8"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x4}, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x2, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.098475138s ago: executing program 1 (id=11251): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="b70200000d000000bfa300000000000005000000000000007a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67d5b310efcfa89147a7fb0a93d035f2f206d2ef831ab7ea0c34f17e3ad6eecbb622003b538dfd8e012e79578e51bc53099e90f4580d7be3e8c254a5cba117cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e6a9f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d996d60a17e3c184b751c51160100000000000080148b9a31ee8dc8b544f3c4a532e60a0ac346dfebd31a08060000000200000000000000334d83239dd20100008000000000d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08a406f99f7b1e1ad828267d4eadd3964663e085354133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0183babc190ae2ebf8aad34732181feb28cb0bae7c34dc5e7c805210600000000000000c3dec04b25df45d4f71ab158c36657b7218baa07a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d01776839b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4e6068f1bf710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2b2ff7f9a7d365e63845f3e1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000010000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edef8ba72205beff7771bcb293747b88486cacee403000000a2919a4b09e168e4e4d5ff2ed893f2e314679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75e26b45264e3d3f8e0048e55ae289c2f884d0766cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2efce676a93110904d5e055af44664b53c764d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007976694b6a0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d201721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e671282a2d3066ac968c7d7d7db195f255b1b4a85eb9ee0a3b68c9e209756623adf685dd715d68ed1274b4d5502f512493af8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef66fa03a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749f6aecf69ba83a71caa9bdddc679f1b826f74b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b2c16bd94d2da66059de81abfa15eeeae3b0ba38d8bb1bf032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f5533d3c58104d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7866f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be813a10788a720a6b5a498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cf2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ec8faf3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7abc231f8cde79b7a6c5aafe954b8ba37818e40c14b36f2d7c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1df7ffffff735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c095162b82ceaeaae9b1713b5f2ee68e2b53d44bd84bf6960157e96bbb96b5e10d66c87e7a9a7d53c281d88ebb175a4dbb82130e6870980e47913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8988d833e71943fe2c1c65a3cf355e5b91114052f8a398d8e10c96b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3df3572a7d9ef5f6103997f1f9e4b0c3970bda50f6c0af58dbd6c031b1a5a7512c58965c514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e24d192d67a1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb2200040000fc1e3865d17d128306d1b81884a934cb0000000000d367000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44b615ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f530043a6cd72af0fcd540a9d4e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c956ec81397e81fbf870a673804220423f52ad8178b9fd04bff816e00000000000000000000000000000000000000000079aaf19bd1e18f582aac5b83d76bd57297512fdcdad18bcf2455bc80394d8f34e2ef84733038f4b6ef516d7baa99f24f2f100fc46aec9dc19b30fe9966b7ae563b6459d86fd3b4c7173f06387517e4189f3fb09c069e20220354b054f2391efe55a0cc7f738b3987ae033ceabddec65ec31f98c7e0858e8d411087889964b8fb3c31f74fa7b2e6e1c1d84a46d8be8afff1ac67eb2da30294d4a0f89978d4e2137319b6448da45bd00eb23aa5be1d566782b5a4aa291a854a4932bcbf472fd1175b521edb1763bb7dae4a124b0006e2ce4799519b3dbd3c0109b17fe2b4b87f6ad4b7176c9c1959669ef42cfce81fbc6dcdc7f9bde1a66c0b3cf9329bfecf0217bda1b72924ee9d90a3bd0be833f206244b5ba0648309018da5442ebd22bca0363183aae9d38f80638f52015cab5a8d772f9b92cb2f286783fa976f7d215136cae0b0b0539dc7dbd56035a69807514c732763f542f10401e65368b821b584fe2f82c94b2f5930246800000000000000000000000000000000000000c8ed77d8ac9f28a2e8f205900241ec8872fe3ecdf73abfc4024298a69649e17f3fe5ebba1e17f2f280e6d3f094cd3448700c5ee102b5d1b04f08ab2e5272990646eca26a62431e8c942ea2c0c621b4821eb5beceee6d53468852159452cf47aead473a8638a4d1ce2d4c6df1074e8cb3ec16149e6b4b7ec1a9aa1b63f41d08afd3d885b98330e25eedaaf5f361b2e81ce0c52ee84a2b340afdc59b177921e2f2a99132b82ed3291196038fe9a4f5a5dc734788c71bf46222d266a48628774c87b88bf3dcbea4574a87726345587e1e233fd4117063d183f477cc53c52a3fafcb998a96cf9f61cdd9ffa82d648880552ac506811accffc85ca34b262ed983d4645f4657522ed32b278891c26d5e70d41f9a5c8df8dc163fd84a81af0020a10fe53ce940d350d62b526f198620abdad179a273682175da1d9d82fde7eb9a45b566e78904238d00908b5876b4ebfca376d631b9b0caf3f1ef32ae87507aace4715efaf840ebda28e741a8b6b29eed5861168b4e1b3842f6db4443974dd0f0d4ceed9ca62fd2a839a8150335dc2b9640825b83c8bf4f931a51b093bf2dc84809af7c14f04b58d64e4f852bc49cf1126567e11f61774559bdbcc500000000000000000000000000eab10c8c592cb6f1ebccd9eb16c155a0666189eb16cea09f164363456645c9b7c168bc214615a7e94ff3d53f85c6396c42050f3205cef3009458f33949efa6a583d87795448b8b21ab6a7ca4bd8b0da30dee0af8b3a0f3cfd0ad9a8e7819b2057e2e5d8b453b6f743f8fc4dee677658958c4d4663ddcdfd0fc44e996665ab5586a4eb40a959fb0dababa05e776c29cf2443ad1d2fa0920288db88e645033ae1a4357078810d20bd93b8194214554c3f8c6efd61bc40000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000000)="76f6e84dd6774f2ed402eb09454900", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.800807355s ago: executing program 1 (id=11258): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000600)={0x4, &(0x7f0000000700)=[{0x2e, '\x00', @buffer={"456f0504a2db40ce2475004f6c7d78c877704d931d1edda3ad25e2caee52fc90", 0x20}, 0xbe}, {0x21, '\x00', @st={0x4, [{0x2, @svalue=0x8000000000000000}, {0x1, @svalue=0x7fffffff}, {0x2, @svalue=0x7}, {0x3, @svalue=0x5}]}, 0x3}, {0x34, '\x00', @data=0x2, 0x4}, {0x18, '\x00', @st={0x4, [{0x2, @svalue=0xe682}, {0x1, @svalue=0x1}, {0x3, @uvalue=0x4}, {0x2, @svalue=0x9}]}, 0x401}]}) 1.677122388s ago: executing program 3 (id=11262): r0 = syz_open_dev$mtd(&(0x7f0000000000), 0xfffffffffffffffa, 0x121000) ioctl$ECCGETSTATS(r0, 0x80104d12, 0x0) 1.58520586s ago: executing program 1 (id=11264): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c09", 0x27}], 0x1}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009bbd8b08e80430ffd1a601220301090222000100000000090400000129fddd000905"], 0x0) 1.436243454s ago: executing program 3 (id=11267): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.220767499s ago: executing program 3 (id=11269): r0 = syz_open_dev$I2C(&(0x7f0000000200), 0x0, 0x2) write$binfmt_script(r0, 0x0, 0x0) 1.061106353s ago: executing program 3 (id=11272): r0 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000140)="f31418546864", 0x6, 0xfffffffffffffffb) keyctl$revoke(0x3, r0) 921.779647ms ago: executing program 3 (id=11274): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='cgroup\x00', 0x8014, &(0x7f0000000480)='noxattr') 720.084582ms ago: executing program 3 (id=11277): syz_usb_connect(0x5, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040490d0070010001020301090227000101008032090400000308065000070501020002000705820200020007058303f64810"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 523.122657ms ago: executing program 2 (id=11281): r0 = socket$pppl2tp(0x18, 0x1, 0x1) getpeername(r0, 0x0, 0x0) 456.482899ms ago: executing program 2 (id=11282): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x5, 0x4) 442.806459ms ago: executing program 0 (id=11283): pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4880) tee(r0, r0, 0xaf06, 0x2) 413.67058ms ago: executing program 2 (id=11284): r0 = semget$private(0x0, 0x5, 0x2ca) semtimedop(r0, &(0x7f0000000100)=[{0x2, 0xb172, 0x1800}], 0x1, 0x0) 325.169142ms ago: executing program 2 (id=11285): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000500)=@multiplanar_overlay={0x19d, 0x3, 0x4, 0x20, 0x34eb, {0x0, 0x2710}, {0x4, 0xc, 0x9, 0x7, 0x7, 0xf6, "4b16b8e7"}, 0x746, 0x3, {0x0}, 0x7fffffff}) 322.481051ms ago: executing program 0 (id=11286): r0 = fsopen(&(0x7f0000000180)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='[::]]:/\x00', 0x0) 310.817392ms ago: executing program 2 (id=11287): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in=@dev={0xac, 0x14, 0x14, 0xd}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0xfffe}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in=@broadcast, {0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x8}, {}, {0x8}, 0x20000, 0x0, 0xa, 0x0, 0x2}}, [@mark={0xc, 0x15, {0x35075c, 0x2}}]}, 0x104}}, 0x0) 246.410794ms ago: executing program 2 (id=11288): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000180)={0x60, 0xe, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 195.781735ms ago: executing program 0 (id=11289): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8, 0x1, 0x7}}}}]}, 0x38}}, 0x28004002) 140.828306ms ago: executing program 0 (id=11290): r0 = fsopen(&(0x7f0000000040)='ntfs3\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 96.408917ms ago: executing program 0 (id=11291): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004080}, 0x8ae257a062cc3564) 639.54µs ago: executing program 4 (id=11292): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x12, 0x3, "91abc12404cf378042f26c43f91f"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x90}}, 0x0) 0s ago: executing program 0 (id=11293): r0 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source\x00\xb5\x838\x8d\xbd\xdf\xfe\x9a\xf2RM\xb6\xe0\xf9\xac\xa2\x06\x1cD\xe7C\xa5<\xd1=\x93\xf7\xf7Sn\xcb\xd5\xa7\xc9@D\x81\xff\xaar\xc8\xa9\x13\b\x9a\x8bF\v\x8a\x93F\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f00000001c0)='.\n#)|.\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKAq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x9aM\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n://\xf3\x96\xaf\x1c8\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x8d\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\x89\xab\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcdjjBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xd7`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6g\x00\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997AOJ=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c', 0x0) kernel console output (not intermixed with test programs): ink: Actions may not be safe on all matching packets [ 800.382525][T23396] loop3: detected capacity change from 0 to 8192 [ 800.478275][T23396] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 800.522552][T23396] REISERFS (device loop3): using ordered data mode [ 800.529113][T23396] reiserfs: using flush barriers [ 800.608360][ T4227] usb 3-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 800.628433][ T4227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.649293][T23396] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 800.666436][ T4227] usb 3-1: Product: syz [ 800.695175][ T4227] usb 3-1: Manufacturer: syz [ 800.699934][ T4227] usb 3-1: SerialNumber: syz [ 800.719212][T23396] REISERFS (device loop3): checking transaction log (loop3) [ 800.772741][ T4227] usb 3-1: config 0 descriptor?? [ 800.780576][T23396] REISERFS (device loop3): Using r5 hash to sort names [ 800.793417][T23396] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 800.812116][ T4227] hub 3-1:0.0: bad descriptor, ignoring hub [ 800.831694][ T4227] hub: probe of 3-1:0.0 failed with error -5 [ 800.861651][ T4227] f81232 3-1:0.0: f81534a converter detected [ 800.950226][T23423] ip_tables: iptables: counters copy to user failed while replacing table [ 801.059214][ T4227] usb 3-1: f81534a converter now attached to ttyUSB0 [ 801.410552][ T4227] usb 3-1: USB disconnect, device number 41 [ 801.429146][ T4227] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 801.467613][ T4227] f81232 3-1:0.0: device disconnected [ 802.083855][ T26] audit: type=1400 audit(2001050167.044:41): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=23477 comm="syz.3.8655" [ 802.147882][ T26] audit: type=1400 audit(2001050167.053:42): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="#(%#{//(@\)//&@},['%%&\#*" pid=23474 comm="syz.0.8654" [ 802.179833][ T7153] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 802.427671][ T4262] kernel write not supported for file /3411/timerslack_ns (pid: 4262 comm: kworker/1:5) [ 802.457938][ T7153] usb 5-1: Using ep0 maxpacket: 16 [ 802.522641][T23500] TCP: TCP_TX_DELAY enabled [ 802.605220][T23504] netlink: 'syz.2.8668': attribute type 4 has an invalid length. [ 802.615341][ T7153] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 802.655495][ T7153] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 802.886026][ T7153] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 802.895146][ T7153] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.929844][ T7153] usb 5-1: Product: syz [ 802.934077][ T7153] usb 5-1: Manufacturer: syz [ 802.992332][ T7153] usb 5-1: SerialNumber: syz [ 803.034615][T23525] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8679'. [ 803.090501][T23525] netlink: 'syz.0.8679': attribute type 1 has an invalid length. [ 803.113406][T23522] loop1: detected capacity change from 0 to 4096 [ 803.388335][ T7153] usb 5-1: 0:2 : does not exist [ 803.425806][ T7153] usb 5-1: USB disconnect, device number 35 [ 803.601937][T23549] netlink: 'syz.0.8689': attribute type 6 has an invalid length. [ 803.642823][T23549] netlink: 168 bytes leftover after parsing attributes in process `syz.0.8689'. [ 803.767614][ T4274] udevd[4274]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 804.596254][T23599] netlink: 2 bytes leftover after parsing attributes in process `syz.1.8715'. [ 804.696147][T23605] netlink: 'syz.3.8718': attribute type 16 has an invalid length. [ 804.761191][T23605] netlink: 'syz.3.8718': attribute type 3 has an invalid length. [ 804.787878][T23605] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8718'. [ 805.163010][ T7153] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 805.205632][ T9963] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 805.449947][T23635] netlink: 'syz.3.8733': attribute type 3 has an invalid length. [ 805.449973][T23635] netlink: 'syz.3.8733': attribute type 1 has an invalid length. [ 805.451539][ T7153] usb 1-1: Using ep0 maxpacket: 16 [ 805.609202][ T7153] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 805.619588][ T9963] usb 2-1: config 0 has an invalid interface number: 237 but max is 0 [ 805.619620][ T9963] usb 2-1: config 0 has no interface number 0 [ 805.619652][ T9963] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 805.619689][ T9963] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 805.619715][ T9963] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 805.619742][ T9963] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 805.678952][ T7153] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 805.727093][ T7153] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 59391, setting to 1024 [ 805.754262][ T7153] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 805.800763][T23641] ipt_REJECT: TCP_RESET invalid for non-tcp [ 805.890231][ T7153] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 805.899342][ T7153] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 805.930726][T23643] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 805.954062][ T7153] usb 1-1: Manufacturer: syz [ 805.968206][ T7153] usb 1-1: config 0 descriptor?? [ 806.000801][ T9963] usb 2-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6 [ 806.021785][ T9963] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.022815][T23643] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 806.050270][ T9963] usb 2-1: Product: syz [ 806.065708][ T9963] usb 2-1: Manufacturer: syz [ 806.079477][T23643] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 806.093162][ T9963] usb 2-1: SerialNumber: syz [ 806.126257][ T9963] usb 2-1: config 0 descriptor?? [ 806.135080][T23643] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 806.186225][ T9963] xpad 2-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 806.197294][T23643] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 806.229063][T23643] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 806.249117][ T9963] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.237/input/input47 [ 806.299421][ T4262] usb 1-1: USB disconnect, device number 34 [ 806.613102][ T7153] usb 2-1: USB disconnect, device number 35 [ 806.623025][T23662] Scaler: ================= START STATUS ================= [ 806.649489][ T7153] xpad 2-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 806.702665][T23662] Scaler: ================== END STATUS ================== [ 807.029140][T23679] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8753'. [ 807.237553][ T1345] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 807.729114][ T1345] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 807.737408][ T1345] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 807.812993][ T1345] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 807.872772][ T1345] usb 1-1: config 1 has no interface number 1 [ 807.899740][ T1345] usb 1-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 807.956031][ T1345] usb 1-1: config 1 interface 105 has no altsetting 0 [ 808.178301][ T1345] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 808.218973][ T1345] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.252794][ T1345] usb 1-1: Product: syz [ 808.268685][ T1345] usb 1-1: Manufacturer: syz [ 808.311321][ T1345] usb 1-1: SerialNumber: syz [ 808.450697][T23720] 8021q: adding VLAN 0 to HW filter on device bond2 [ 808.492673][T23685] loop2: detected capacity change from 0 to 40427 [ 808.603399][T23685] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 808.648793][ T1345] aqc111: probe of 1-1:1.105 failed with error -22 [ 808.663624][T23737] ipt_CLUSTERIP: Please specify destination IP [ 808.669933][T23685] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 808.684102][T23738] netlink: 260 bytes leftover after parsing attributes in process `syz.4.8782'. [ 808.737072][T23685] F2FS-fs (loop2): invalid crc value [ 808.840581][T23685] F2FS-fs (loop2): Found nat_bits in checkpoint [ 808.877073][ T1345] usb 1-1: USB disconnect, device number 35 [ 808.989125][T23753] cifs: Unknown parameter 'h}# [ 808.989125][T23753] [bIT&:"1:ӭ'4,Zz-#F<]%gC [ 808.989125][T23753] SȘȞZ6' [ 809.113649][T23685] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 809.133884][T23685] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 809.257981][ T4232] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 809.327001][T23685] attempt to access beyond end of device [ 809.327001][T23685] loop2: rw=2049, want=45104, limit=40427 [ 809.687958][ T4232] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 809.728457][ T4232] usb 2-1: config 0 interface 0 has no altsetting 0 [ 809.867510][ T4232] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice= 0.06 [ 809.876655][ T4232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 809.910565][ T4232] usb 2-1: SerialNumber: syz [ 809.927143][ T4232] usb 2-1: config 0 descriptor?? [ 810.027079][T23784] netlink: 148 bytes leftover after parsing attributes in process `syz.3.8804'. [ 810.157634][T23784] netlink: 148 bytes leftover after parsing attributes in process `syz.3.8804'. [ 810.262956][ T4227] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 810.490780][ T1345] usb 2-1: USB disconnect, device number 36 [ 810.587668][ T4227] usb 1-1: Using ep0 maxpacket: 8 [ 810.777378][T23804] loop2: detected capacity change from 0 to 128 [ 810.781835][ T4227] usb 1-1: unable to get BOS descriptor or descriptor too short [ 810.884439][ T4227] usb 1-1: config 4 has an invalid interface number: 147 but max is 0 [ 810.910414][ T4227] usb 1-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 810.947487][ T4227] usb 1-1: config 4 has no interface number 0 [ 811.161436][ T4227] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 811.170711][ T4227] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.193994][ T4227] usb 1-1: Product: syz [ 811.198294][ T4227] usb 1-1: Manufacturer: syz [ 811.202926][ T4227] usb 1-1: SerialNumber: syz [ 811.212471][T16818] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 811.403492][T23826] loop3: detected capacity change from 0 to 256 [ 811.516757][T23830] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8825'. [ 811.551766][T23826] FAT-fs (loop3): bogus number of FAT sectors [ 811.577204][T23826] FAT-fs (loop3): Can't find a valid FAT filesystem [ 811.650258][ T4227] usb 1-1: Found UVC 0.02 device syz (04f2:b746) [ 811.657875][ T4227] usb 1-1: No valid video chain found. [ 811.685704][T16818] usb 3-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 811.698807][T23826] blk_update_request: I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 811.714441][T16818] usb 3-1: config 220 has an invalid interface number: 218 but max is 183 [ 811.732471][ T4227] usb 1-1: USB disconnect, device number 36 [ 811.758622][T16818] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 811.760478][T23826] isofs_fill_super: bread failed, dev=loop3, iso_blknum=16, block=32 [ 811.806697][T16818] usb 3-1: config 220 has no interface number 0 [ 811.849408][T16818] usb 3-1: too many endpoints for config 220 interface 218 altsetting 195: 181, using maximum allowed: 30 [ 811.909581][T16818] usb 3-1: config 220 interface 218 altsetting 195 has 0 endpoint descriptors, different from the interface descriptor's value: 181 [ 811.959091][T16818] usb 3-1: config 220 interface 218 has no altsetting 0 [ 811.995014][T16818] usb 3-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 812.041800][T16818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.209565][T23849] netlink: 92 bytes leftover after parsing attributes in process `syz.0.8834'. [ 812.218631][T23849] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8834'. [ 812.262428][T23849] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8834'. [ 812.289670][T23849] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8834'. [ 812.299415][T23852] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8837'. [ 812.382178][T16818] usb 3-1: string descriptor 0 read error: -71 [ 812.394547][T16818] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 812.461852][T16818] gspca_sn9c2028: read1 error -71 [ 812.500107][T16818] gspca_sn9c2028: read1 error -71 [ 812.521770][T16818] gspca_sn9c2028: read1 error -71 [ 812.532271][T16818] sn9c2028: probe of 3-1:220.218 failed with error -71 [ 812.593805][T16818] usb 3-1: USB disconnect, device number 42 [ 813.465903][T23896] loop2: detected capacity change from 0 to 512 [ 813.583197][ T1345] usb 1-1: new low-speed USB device number 37 using dummy_hcd [ 813.602222][T23896] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 813.727868][T23896] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,noload,acl,mblk_io_submit,sysvgroups,,errors=continue. Quota mode: writeback. [ 813.750880][T23896] ext4 filesystem being mounted at /1733/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 814.145415][ T1345] usb 1-1: unable to get BOS descriptor or descriptor too short [ 814.262069][ T1345] usb 1-1: config 35 has an invalid interface number: 223 but max is 0 [ 814.292890][ T1345] usb 1-1: config 35 has no interface number 0 [ 814.331265][ T1345] usb 1-1: config 35 interface 223 has no altsetting 0 [ 814.562942][T23931] loop1: detected capacity change from 0 to 2048 [ 814.646980][ T1345] usb 1-1: string descriptor 0 read error: -22 [ 814.655391][ T1345] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0108, bcdDevice=86.42 [ 814.668055][ T4227] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 814.698257][ T1345] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.772239][ T1345] usb_ehset_test: probe of 1-1:35.223 failed with error -32 [ 814.782218][T23931] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 814.935365][ T4227] usb 3-1: Using ep0 maxpacket: 16 [ 814.988777][T23945] device wireguard0 entered promiscuous mode [ 815.054467][T16818] usb 1-1: USB disconnect, device number 37 [ 815.122015][T23951] loop3: detected capacity change from 0 to 8192 [ 815.277836][ T4227] usb 3-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 815.297699][T23951] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 815.298328][ T4227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.319930][ T4227] usb 3-1: Product: syz [ 815.324485][ T4227] usb 3-1: Manufacturer: syz [ 815.329301][ T4227] usb 3-1: SerialNumber: syz [ 815.336351][ T4227] usb 3-1: config 0 descriptor?? [ 815.340038][T23951] REISERFS (device loop3): using ordered data mode [ 815.397178][T23963] netlink: 'syz.1.8888': attribute type 15 has an invalid length. [ 815.405238][T23963] netlink: 25 bytes leftover after parsing attributes in process `syz.1.8888'. [ 815.405843][T23951] reiserfs: using flush barriers [ 815.460646][T23951] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 815.505137][T23951] REISERFS (device loop3): checking transaction log (loop3) [ 815.548577][T23969] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 815.619758][ T4227] usb 3-1: ignoring: not an USB2CAN converter [ 815.688135][T23969] exFAT-fs (nullb0): invalid boot record signature [ 815.705778][T23969] exFAT-fs (nullb0): failed to read boot sector [ 815.712120][T23969] exFAT-fs (nullb0): failed to recognize exfat type [ 815.859455][ T1345] usb 3-1: USB disconnect, device number 43 [ 816.005201][T23951] REISERFS (device loop3): Using rupasov hash to sort names [ 816.040169][T23951] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 816.497982][T23993] netlink: 156 bytes leftover after parsing attributes in process `syz.4.8904'. [ 817.344955][T24026] nvme nvme0: rdma connection establishment failed (-104) [ 817.354132][T24031] netlink: 'syz.3.8925': attribute type 1 has an invalid length. [ 817.427188][T24031] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8925'. [ 817.486464][T24031] block nbd0: not configured, cannot reconfigure [ 817.769652][T24051] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 817.777440][T24051] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 817.855805][T24051] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 817.873861][T24051] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 817.913488][T24051] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 817.998038][T24057] xt_CT: No such helper "syz0" [ 818.061268][T24055] bond0: option use_carrier: invalid value (9) [ 818.162766][ T26] audit: type=1326 audit(2001050182.064:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24061 comm="syz.4.8937" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f594d8180d9 code=0x0 [ 818.411867][T24074] netlink: 'syz.1.8943': attribute type 3 has an invalid length. [ 818.610049][T24082] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8947'. [ 819.924222][T24155] netlink: 'syz.1.8983': attribute type 21 has an invalid length. [ 819.978185][T24155] netlink: 156 bytes leftover after parsing attributes in process `syz.1.8983'. [ 820.182732][T24165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8986'. [ 820.723461][T24184] device bridge5 entered promiscuous mode [ 820.799627][T24186] netlink: 'syz.1.8998': attribute type 8 has an invalid length. [ 821.294113][T24209] netlink: 'syz.0.9009': attribute type 21 has an invalid length. [ 821.302401][ T4227] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 821.315679][T24209] IPv6: NLM_F_CREATE should be specified when creating new route [ 821.452521][T24213] openvswitch: netlink: Actions may not be safe on all matching packets [ 821.539998][T24220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 821.564171][T24220] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 821.576204][T24220] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 821.585238][T24220] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 821.623191][T24220] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 821.658729][T24220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 821.746362][ T4227] usb 4-1: not running at top speed; connect to a high speed hub [ 821.864067][ T4227] usb 4-1: config 5 has an invalid interface number: 32 but max is 0 [ 821.872272][ T4227] usb 4-1: config 5 has no interface number 0 [ 821.905017][ T4227] usb 4-1: config 5 interface 32 has no altsetting 0 [ 821.913150][T24233] netlink: zone id is out of range [ 821.949237][T24233] netlink: zone id is out of range [ 821.954410][T24233] netlink: zone id is out of range [ 821.972964][T24233] netlink: zone id is out of range [ 821.992026][T24233] netlink: zone id is out of range [ 821.997319][T24233] netlink: zone id is out of range [ 822.002470][T24233] netlink: zone id is out of range [ 822.024323][ T4195] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 822.053647][T24233] netlink: zone id is out of range [ 822.069686][T24233] netlink: zone id is out of range [ 822.132525][ T4227] usb 4-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=a2.76 [ 822.163981][ T4227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.172077][ T4227] usb 4-1: Product: syz [ 822.220040][ T4227] usb 4-1: Manufacturer: syz [ 822.224792][ T4227] usb 4-1: SerialNumber: syz [ 822.459875][ T4195] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 822.501054][ T4195] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 822.522529][ T4195] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 822.545255][ T4195] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 822.555945][ T4195] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 0 [ 822.566672][ T4195] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 822.588081][ T4195] usb 1-1: New USB device found, idVendor=1608, idProduct=0201, bcdDevice= 1.00 [ 822.613057][ T4195] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.676774][T24217] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 822.684030][T24217] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 822.693863][ T4227] usbhid 4-1:5.32: couldn't find an input interrupt endpoint [ 822.732021][ T4227] usb 4-1: USB disconnect, device number 46 [ 822.752449][ T4195] io_ti 1-1:1.0: required endpoints missing [ 822.955257][ T4195] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 822.989516][ T4232] usb 1-1: USB disconnect, device number 38 [ 823.270093][T24261] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 823.351911][T24261] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 823.370473][T24261] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 823.389547][ T4195] usb 3-1: config 0 has an invalid interface number: 237 but max is 0 [ 823.405960][ T4195] usb 3-1: config 0 has no interface number 0 [ 823.433049][ T4195] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 823.497298][ T4195] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 823.522842][T24261] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl1: link becomes ready [ 823.530384][ T4195] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 823.576593][ T4195] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 823.800340][T24273] xt_CT: No such helper "snmp_trap" [ 823.831486][ T4195] usb 3-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6 [ 823.840970][ T4195] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.916744][ T4195] usb 3-1: Product: syz [ 823.921026][T24282] xt_time: unknown flags 0x4 [ 823.931956][ T4195] usb 3-1: Manufacturer: syz [ 823.942749][ T4195] usb 3-1: SerialNumber: syz [ 823.986298][ T4195] usb 3-1: config 0 descriptor?? [ 824.059040][ T4195] xpad 3-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 824.110330][ T4195] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.237/input/input49 [ 824.410659][T16820] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 824.511496][ T4195] usb 3-1: USB disconnect, device number 44 [ 824.564399][ T4195] xpad 3-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 824.607998][T24311] netlink: 'syz.0.9058': attribute type 9 has an invalid length. [ 824.848940][T16820] usb 2-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 824.899825][T16820] usb 2-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 824.942230][T16820] usb 2-1: config 1 interface 0 has no altsetting 0 [ 825.125260][T16820] usb 2-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice= 0.40 [ 825.145345][T16820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.187427][T16820] usb 2-1: Product: syz [ 825.202599][T16820] usb 2-1: Manufacturer: syz [ 825.210349][T24334] netlink: 88 bytes leftover after parsing attributes in process `syz.3.9070'. [ 825.231835][T16820] usb 2-1: SerialNumber: syz [ 825.293205][T24338] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 825.337322][T24338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 825.382651][T24338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 825.434874][T24344] ieee802154 phy0 wpan0: encryption failed: -90 [ 825.559781][T24347] loop3: detected capacity change from 0 to 136 [ 825.569307][ T9963] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 825.615690][T16820] vmk80xx 2-1:1.0: driver 'vmk80xx' failed to auto-configure device. [ 825.647339][T16820] usb 2-1: USB disconnect, device number 37 [ 825.691849][T24347] Attempt to read inode for relocated directory [ 825.730540][T24347] attempt to access beyond end of device [ 825.730540][T24347] loop3: rw=524288, want=335544432, limit=136 [ 825.756432][T24347] attempt to access beyond end of device [ 825.756432][T24347] loop3: rw=0, want=335544432, limit=136 [ 825.839142][ T26] audit: type=1800 audit(2001050189.247:44): pid=24347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.9076" name="file1" dev="loop3" ino=1487 res=0 errno=0 [ 825.876668][ T9963] usb 5-1: Using ep0 maxpacket: 32 [ 826.091940][ T9963] usb 5-1: unable to get BOS descriptor or descriptor too short [ 826.224240][ T9963] usb 5-1: config 12 has an invalid interface number: 183 but max is 1 [ 826.258090][ T9963] usb 5-1: config 12 has an invalid interface number: 229 but max is 1 [ 826.266500][ T9963] usb 5-1: config 12 has no interface number 0 [ 826.307224][T24374] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 826.322714][ T9963] usb 5-1: config 12 has no interface number 1 [ 826.329180][ T9963] usb 5-1: config 12 interface 183 has no altsetting 0 [ 826.356842][T24374] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 826.379322][T24376] loop2: detected capacity change from 0 to 256 [ 826.386744][T24374] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 826.450306][T24376] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0xda219aab, utbl_chksum : 0xe619d30d) [ 826.497418][T24374] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl1: link becomes ready [ 826.529705][T24380] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9088'. [ 826.568402][T24380] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9088'. [ 826.591554][ T9963] usb 5-1: New USB device found, idVendor=1415, idProduct=2000, bcdDevice=2b.98 [ 826.614764][T24380] device vlan0 entered promiscuous mode [ 826.631628][ T9963] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.661828][ T9963] usb 5-1: Product: syz [ 826.672425][ T9963] usb 5-1: Manufacturer: syz [ 826.679593][T24376] exFAT-fs (loop2): error, invalid access to FAT free cluster (entry 0x00000008) [ 826.707148][ T9963] usb 5-1: SerialNumber: syz [ 826.732642][T24376] exFAT-fs (loop2): Filesystem has been set read-only [ 827.102238][ T9963] usb 5-1: USB disconnect, device number 36 [ 827.664667][T24419] xt_l2tp: v2 doesn't support IP mode [ 828.135035][T24447] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9124'. [ 828.275760][T24455] netlink: 'syz.2.9127': attribute type 3 has an invalid length. [ 828.321805][T24455] netlink: 'syz.2.9127': attribute type 3 has an invalid length. [ 828.407319][T24461] netlink: 1 bytes leftover after parsing attributes in process `syz.4.9130'. [ 828.416237][T24461] netlink: 1 bytes leftover after parsing attributes in process `syz.4.9130'. [ 828.622160][T24468] [U]  [ 828.656983][T24473] netlink: 'syz.3.9136': attribute type 25 has an invalid length. [ 828.699427][T24473] netlink: 'syz.3.9136': attribute type 6 has an invalid length. [ 828.773657][T24477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9137'. [ 829.174833][T24491] loop2: detected capacity change from 0 to 64 [ 829.314988][T24491] MINIX-fs: bad superblock [ 829.375490][ T26] audit: type=1107 audit(2001050192.558:45): pid=24500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=' [ 829.375490][ T26] ,' [ 829.522869][T24465] loop1: detected capacity change from 0 to 32768 [ 829.592701][T24509] loop3: detected capacity change from 0 to 1024 [ 829.690865][T24509] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 829.728081][T24514] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9157'. [ 829.762660][T24465] JBD2: Ignoring recovery information on journal [ 829.840003][T24514] netlink: 17 bytes leftover after parsing attributes in process `syz.4.9157'. [ 830.104073][T24465] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 830.121344][T24523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9159'. [ 830.153354][T24527] netlink: 'syz.0.9162': attribute type 11 has an invalid length. [ 830.173992][ T4232] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 830.526978][ T4185] ocfs2: Unmounting device (7,1) on (node local) [ 830.589025][ T4232] usb 4-1: config 0 has an invalid interface number: 207 but max is 0 [ 830.597504][ T4232] usb 4-1: config 0 has an invalid descriptor of length 111, skipping remainder of the config [ 830.684117][ T4232] usb 4-1: config 0 has no interface number 0 [ 830.930885][ T4232] usb 4-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd [ 830.961835][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.011009][ T4232] usb 4-1: Product: syz [ 831.011563][ T4262] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 831.023345][ T4232] usb 4-1: Manufacturer: syz [ 831.048120][ T4232] usb 4-1: SerialNumber: syz [ 831.081223][ T4232] usb 4-1: config 0 descriptor?? [ 831.191667][T24561] netlink: 'syz.1.9178': attribute type 1 has an invalid length. [ 831.390507][ T4232] qmi_wwan: probe of 4-1:0.207 failed with error -22 [ 831.424290][ T4232] usb 4-1: USB disconnect, device number 47 [ 831.431160][ T4262] usb 3-1: config 0 has an invalid interface number: 83 but max is 0 [ 831.456224][ T4262] usb 3-1: config 0 has no interface number 0 [ 831.495090][ T4262] usb 3-1: config 0 interface 83 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 4 [ 831.543918][ T4262] usb 3-1: config 0 interface 83 altsetting 0 endpoint 0x82 has invalid maxpacket 246, setting to 64 [ 831.669771][T24585] __nla_validate_parse: 1 callbacks suppressed [ 831.669791][T24585] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9190'. [ 831.774010][ T4262] usb 3-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 831.795102][ T4262] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.804850][ T4262] usb 3-1: Product: syz [ 831.860813][ T4262] usb 3-1: Manufacturer: syz [ 831.884230][ T4262] usb 3-1: SerialNumber: syz [ 831.914287][ T4262] usb 3-1: config 0 descriptor?? [ 831.939574][T24545] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 831.961552][ T4262] redrat3 3-1:0.83: Couldn't find all endpoints [ 832.147763][T24605] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9199'. [ 832.201624][ T4262] usb 3-1: USB disconnect, device number 45 [ 832.792620][T24631] bridge0: port 1(bridge_slave_0) entered disabled state [ 832.910771][T24636] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9217'. [ 833.329875][T24662] xt_ecn: cannot match TCP bits for non-tcp packets [ 833.352865][T24664] binder: 24663:24664 ioctl c018620c 2000000025c0 returned -22 [ 833.375419][T24665] netlink: 'syz.4.9229': attribute type 1 has an invalid length. [ 833.432100][T24667] netlink: 292 bytes leftover after parsing attributes in process `syz.1.9231'. [ 833.467224][T24665] netlink: 'syz.4.9229': attribute type 2 has an invalid length. [ 833.504373][ T4228] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 833.553913][T24665] netlink: 'syz.4.9229': attribute type 2 has an invalid length. [ 833.656951][T24665] netlink: 'syz.4.9229': attribute type 2 has an invalid length. [ 833.664931][T24665] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9229'. [ 833.817494][ T4228] usb 1-1: Using ep0 maxpacket: 32 [ 834.181932][ T4228] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 834.201666][ T4228] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.242640][ T4228] usb 1-1: Product: syz [ 834.252701][ T4228] usb 1-1: Manufacturer: syz [ 834.288196][ T4228] usb 1-1: SerialNumber: syz [ 834.307828][ T4228] usb 1-1: config 0 descriptor?? [ 834.598208][ T4228] airspy 1-1:0.0: usb_control_msg() failed -71 request 09 [ 834.605583][ T4228] airspy 1-1:0.0: Could not detect board [ 834.658902][ T4228] airspy: probe of 1-1:0.0 failed with error -71 [ 834.712864][ T4228] usb 1-1: USB disconnect, device number 39 [ 834.804248][T24725] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 834.997755][T24733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9263'. [ 835.027287][T24735] mmap: syz.2.9264 (24735): VmData 49217536 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 835.504278][T24750] netlink: 'syz.0.9271': attribute type 12 has an invalid length. [ 835.533281][T24754] CacheFiles: Empty directory specified [ 835.858036][T24766] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9279'. [ 836.034843][T24728] loop1: detected capacity change from 0 to 32768 [ 836.075687][T24774] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 836.204790][T24788] xt_hashlimit: size too large, truncated to 1048576 [ 836.275251][T24791] netlink: 'syz.4.9287': attribute type 21 has an invalid length. [ 836.306884][T24728] XFS (loop1): Mounting V5 Filesystem [ 836.319159][T24791] netlink: 144 bytes leftover after parsing attributes in process `syz.4.9287'. [ 836.663375][T24728] XFS (loop1): Ending clean mount [ 836.785568][T24812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9297'. [ 836.850094][ T4185] XFS (loop1): Unmounting Filesystem [ 837.048471][T24823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9303'. [ 837.095369][T24823] netlink: 6 bytes leftover after parsing attributes in process `syz.0.9303'. [ 837.656972][ T9963] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 837.955198][ T9963] usb 3-1: Using ep0 maxpacket: 32 [ 838.096556][T24869] net_ratelimit: 335 callbacks suppressed [ 838.096608][T24869] openvswitch: netlink: Actions may not be safe on all matching packets [ 838.103380][ T9963] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 838.124999][T24870] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9323'. [ 838.188416][ T9963] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 838.198686][T24870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9323'. [ 838.218366][ T9963] usb 3-1: New USB device found, idVendor=046d, idProduct=c11c, bcdDevice= 0.40 [ 838.244723][ T9963] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.270215][ T9963] usb 3-1: config 0 descriptor?? [ 838.308146][T24876] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0 [ 838.349583][ T9963] hub 3-1:0.0: USB hub found [ 838.579526][ T9963] hub 3-1:0.0: 1 port detected [ 838.756634][T24898] netlink: 'syz.1.9337': attribute type 3 has an invalid length. [ 838.801581][ T9963] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 838.821516][ T9963] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 838.884840][T24902] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9339'. [ 838.930677][T24904] IPVS: set_ctl: invalid protocol: 135 172.20.20.50:20000 [ 838.936420][ T9963] usb 3-1: USB disconnect, device number 46 [ 839.027178][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 839.033572][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 839.071819][T24910] loop1: detected capacity change from 0 to 256 [ 839.326500][T24922] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9348'. [ 839.724610][T24938] loop3: detected capacity change from 0 to 736 [ 840.469072][T24962] netlink: zone id is out of range [ 841.074334][T24986] netlink: 'syz.3.9379': attribute type 21 has an invalid length. [ 841.097968][T24986] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9379'. [ 841.450677][T24996] netlink: 'syz.3.9386': attribute type 1 has an invalid length. [ 841.779342][T25010] bad cache= option: nonw [ 841.779342][T25010] [ 841.816186][T25010] CIFS: VFS: bad cache= option: nonw [ 841.893059][T25015] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9395'. [ 842.154412][T25024] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 842.227935][T25026] netlink: 'syz.3.9400': attribute type 2 has an invalid length. [ 842.287532][T25034] netlink: 96 bytes leftover after parsing attributes in process `syz.1.9404'. [ 842.515259][T25043] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.9409'. [ 842.555451][T25046] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9410'. [ 842.587737][T25043] bridge_slave_1: default FDB implementation only supports local addresses [ 842.617562][T25046] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9410'. [ 843.535001][T25101] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9437'. [ 843.576755][T25101] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9437'. [ 843.739027][T25113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9443'. [ 843.895118][T25121] netlink: 'syz.2.9447': attribute type 12 has an invalid length. [ 843.914183][ T4228] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 844.220707][ T4228] usb 2-1: Using ep0 maxpacket: 32 [ 844.249425][T25125] loop3: detected capacity change from 0 to 4096 [ 844.370662][ T4228] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 844.402599][ T4228] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 844.451103][T25125] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 844.493178][T25125] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 844.550242][T25125] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 844.602102][ C0] vkms_vblank_simulate: vblank timer overrun [ 844.776748][ T4228] usb 2-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0 [ 844.785865][ T4228] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.814728][T25125] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 844.839400][ T4228] usb 2-1: Product: syz [ 844.851028][ T4228] usb 2-1: Manufacturer: syz [ 844.861673][T25125] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 844.883859][ T4228] usb 2-1: SerialNumber: syz [ 844.895101][ T4228] usb 2-1: config 0 descriptor?? [ 844.901757][T25125] ntfs: volume version 3.1. [ 844.944764][T25125] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 844.966065][ T4228] qmi_wwan: probe of 2-1:0.0 failed with error -22 [ 844.998350][T25125] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 845.020819][T25125] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 845.037036][T25125] ntfs: (device loop3): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt. [ 845.051433][T25125] ntfs: (device loop3): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 845.141141][ T4262] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 845.183700][T25159] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9464'. [ 845.214033][ T4227] usb 2-1: USB disconnect, device number 38 [ 845.239255][T25159] IPv6: sit1: Disabled Multicast RS [ 845.398734][T25165] xt_limit: Overflow, try lower: 2/2147483648 [ 845.450636][ T4262] usb 5-1: Using ep0 maxpacket: 32 [ 845.600211][ T4262] usb 5-1: config 0 has an invalid descriptor of length 254, skipping remainder of the config [ 845.653760][T25169] loop3: detected capacity change from 0 to 4096 [ 845.689892][T25177] loop2: detected capacity change from 0 to 256 [ 845.711624][T25169] EXT4-fs (loop3): Journaled quota options ignored when QUOTA feature is enabled [ 845.738663][T25169] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 845.814201][ T4262] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 845.878089][ T4262] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.879056][T25169] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c118, mo2=0002] [ 845.886425][ T4262] usb 5-1: Product: syz [ 845.886446][ T4262] usb 5-1: Manufacturer: syz [ 845.886464][ T4262] usb 5-1: SerialNumber: syz [ 845.910925][ T4262] usb 5-1: config 0 descriptor?? [ 845.954040][ T4262] usb 5-1: bad CDC descriptors [ 845.959266][ T4262] usb 5-1: unsupported MDLM descriptors [ 846.070582][T25169] System zones: 0-5 [ 846.145612][T25169] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,grpjquota=./file1,noload,init_itable=0x000000000a2a41b4,nodiscard,jqfmt=vfsv1,debug,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 846.194038][ T4262] usb 5-1: USB disconnect, device number 37 [ 846.559498][ C0] vkms_vblank_simulate: vblank timer overrun [ 846.889023][T25229] ipt_CLUSTERIP: no config found for 127.0.0.1, need 'new' [ 847.268303][T25255] netlink: 80 bytes leftover after parsing attributes in process `syz.1.9512'. [ 847.405717][T25263] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9516'. [ 847.599663][T25275] set match dimension is over the limit! [ 847.809446][T25289] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9529'. [ 848.286100][T25321] netlink: 108 bytes leftover after parsing attributes in process `syz.4.9544'. [ 849.224144][ T4228] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 849.410441][T25395] SET target dimension over the limit! [ 849.427534][ T9963] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 849.504067][ T4228] usb 5-1: Using ep0 maxpacket: 32 [ 849.619931][T25408] loop1: detected capacity change from 0 to 64 [ 849.653388][ T4228] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 849.677668][ T4228] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.703586][ T4228] usb 5-1: config 0 descriptor?? [ 849.751048][T25412] netlink: 'syz.3.9586': attribute type 10 has an invalid length. [ 849.766202][ T4228] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 849.789111][ T4228] input: xirlink-cit as /devices/platform/dummy_hcd.4/usb5/5-1/input/input52 [ 849.818106][T25412] team0: Device vxcan1 is of different type [ 849.843540][ T9963] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 849.887016][ T9963] usb 1-1: config 0 has no interface number 0 [ 849.932438][T25420] loop1: detected capacity change from 0 to 64 [ 850.027055][T16820] usb 5-1: USB disconnect, device number 38 [ 850.070528][ T9963] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 850.095288][ T9963] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.118219][ T9963] usb 1-1: Product: syz [ 850.128024][ T9963] usb 1-1: Manufacturer: syz [ 850.142419][ T9963] usb 1-1: SerialNumber: syz [ 850.151689][ T9963] usb 1-1: config 0 descriptor?? [ 850.321734][T25437] netlink: 72 bytes leftover after parsing attributes in process `syz.3.9591'. [ 850.560552][T25447] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 850.592638][ T9963] uvcvideo 1-1:0.64: Found Unit with invalid ID 0 [ 850.599261][ T9963] usb 1-1: Found UVC 0.08 device syz (046d:0823) [ 850.620395][ T9963] usb 1-1: No valid video chain found. [ 850.655108][ T9963] usb 1-1: USB disconnect, device number 40 [ 851.006876][T25474] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9608'. [ 851.360413][T25496] ubi16: attaching mtd0 [ 851.402491][T25496] ubi16: scanning is finished [ 851.471087][T25496] ubi16: empty MTD device detected [ 851.500130][T25506] loop0: detected capacity change from 0 to 8 [ 851.733751][T25496] ubi16: attached mtd0 (name "mtdram test device", size 0 MiB) [ 851.790141][T25496] ubi16: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 851.797873][T25496] ubi16: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 851.865018][T25496] ubi16: VID header offset: 64 (aligned 64), data offset: 128 [ 851.893839][T25496] ubi16: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 851.904659][T25496] ubi16: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 851.949979][T25496] ubi16: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2527271878 [ 852.014628][T25496] ubi16: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 852.027481][T25513] ubi16: background thread "ubi_bgt16d" started, PID 25513 [ 852.112054][T25525] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 852.250592][ T4228] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 852.538336][ T4228] usb 3-1: Using ep0 maxpacket: 16 [ 852.605487][T25547] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9645'. [ 852.633856][T25547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9645'. [ 852.741653][ T4228] usb 3-1: unable to get BOS descriptor or descriptor too short [ 852.799736][T25559] overlayfs: workdir and upperdir must be separate subtrees [ 852.848573][ T4228] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 852.880374][ T4228] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 852.966117][T25568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9655'. [ 852.986315][T25569] netlink: 'syz.1.9654': attribute type 11 has an invalid length. [ 853.011532][T25569] netlink: 140 bytes leftover after parsing attributes in process `syz.1.9654'. [ 853.169187][ T4228] usb 3-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 853.189350][ T4228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.203960][T25577] loop0: detected capacity change from 0 to 2048 [ 853.231239][ T4228] usb 3-1: Product: syz [ 853.240964][ T4228] usb 3-1: Manufacturer: syz [ 853.267313][ T4228] usb 3-1: SerialNumber: syz [ 853.291783][T25585] loop3: detected capacity change from 0 to 256 [ 853.309153][T25577] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=2362, location=2362 [ 853.362963][T25577] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 853.407282][T25577] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 853.445070][T25577] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 853.526285][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 853.526301][ T26] audit: type=1800 audit(2001050983.150:47): pid=25577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.9658" name=2E02 dev="loop0" ino=1367 res=0 errno=0 [ 853.735730][ T4228] usb 3-1: 0:1 : does not exist [ 853.799839][ C0] vkms_vblank_simulate: vblank timer overrun [ 853.950388][ T4228] usb 3-1: unit 5 not found! [ 853.981750][ T4228] usb 3-1: cannot get ctl value: req = 0x83, wValue = 0x200, wIndex = 0x200, type = 4 [ 853.998231][T25622] nfs: Unexpected value for 'lock' [ 854.002510][ T4228] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 854.057554][ T4228] usb 3-1: USB disconnect, device number 47 [ 854.302190][ T4195] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 854.314541][ T4264] udevd[4264]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 854.368723][T25636] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9688'. [ 854.836847][ T4195] usb 1-1: unable to get BOS descriptor or descriptor too short [ 854.954597][ T4195] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 32 [ 855.172917][ T4195] usb 1-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 855.200574][ T4195] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.208726][ T4195] usb 1-1: Product: syz [ 855.261353][ T4195] usb 1-1: Manufacturer: syz [ 855.274102][ T4195] usb 1-1: SerialNumber: syz [ 855.318182][T25624] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 855.654538][T25702] x_tables: duplicate entry at hook 2 [ 855.767255][ T4195] usb 1-1: MIDIStreaming interface descriptor not found [ 855.879742][ T4195] usb 1-1: USB disconnect, device number 41 [ 856.206039][ T4264] udevd[4264]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 856.249562][T25734] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.9734' sets config #0 [ 856.273979][T25735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9738'. [ 856.307238][T25737] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9736'. [ 856.369332][T25737] netlink: 43 bytes leftover after parsing attributes in process `syz.3.9736'. [ 856.426698][T25737] netlink: 'syz.3.9736': attribute type 6 has an invalid length. [ 856.478016][T25745] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9742'. [ 856.493741][T25737] netlink: 'syz.3.9736': attribute type 5 has an invalid length. [ 856.526731][T25737] netlink: 43 bytes leftover after parsing attributes in process `syz.3.9736'. [ 856.566736][T25747] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9744'. [ 857.018240][T25769] xt_NFQUEUE: number of total queues is 0 [ 857.044697][T25773] loop2: detected capacity change from 0 to 1024 [ 857.223732][T25773] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 857.294764][T25773] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 857.337885][T25773] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback. [ 857.605695][ T4232] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 858.097546][ T4232] usb 1-1: unable to get BOS descriptor or descriptor too short [ 858.177144][T25774] loop3: detected capacity change from 0 to 32768 [ 858.193941][ T4232] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 858.235897][ T4232] usb 1-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 858.249558][T25818] CIFS mount error: No usable UNC path provided in device string! [ 858.249558][T25818] [ 858.268472][ T4232] usb 1-1: config 1 interface 0 has no altsetting 0 [ 858.275667][ T4232] usb 1-1: config 1 interface 0 has no altsetting 1 [ 858.287021][T25774] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop3 scanned by syz.3.9756 (25774) [ 858.311187][T25818] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 858.402386][T25774] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 858.449017][T25774] BTRFS info (device loop3): using free space tree [ 858.495748][T25774] BTRFS info (device loop3): has skinny extents [ 858.514523][ T4232] usb 1-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 858.523665][ T4232] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.600339][ T4232] usb 1-1: Product: syz [ 858.604609][ T4232] usb 1-1: Manufacturer: syz [ 858.609290][ T4232] usb 1-1: SerialNumber: syz [ 858.756098][T25840] loop1: detected capacity change from 0 to 4096 [ 858.839623][T25840] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 858.888070][T25774] BTRFS info (device loop3): enabling ssd optimizations [ 858.932837][ T4232] smsusb:smsusb_probe: board id=8, interface number 0 [ 858.950636][ T4232] usb 1-1: selecting invalid altsetting 0 [ 858.956778][ T4232] smsusb:smsusb_probe: usb_set_interface failed, rc -22 [ 858.973956][ T4232] smsusb: probe of 1-1:1.0 failed with error -22 [ 858.997392][ T4232] usb 1-1: USB disconnect, device number 42 [ 859.014301][T25840] ntfs: (device loop1): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 859.064503][T25840] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 859.073912][T25840] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 859.109244][T25840] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 859.138851][T25840] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 859.186900][T25840] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 859.198529][ T4195] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 859.231002][T25840] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 859.281556][ T4274] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 9 /dev/loop3 scanned by udevd (4274) [ 859.319813][T25840] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 859.356143][T25840] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 859.389605][T25840] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 859.452110][T25840] ntfs: volume version 3.1. [ 859.574999][ T4195] usb 5-1: Using ep0 maxpacket: 32 [ 859.749361][ T4195] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 859.749396][ T4195] usb 5-1: config 0 has no interface number 0 [ 859.749431][ T4195] usb 5-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 859.749457][ T4195] usb 5-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 859.749483][ T4195] usb 5-1: config 0 interface 12 has no altsetting 0 [ 859.866005][T25876] xt_CT: You must specify a L4 protocol and not use inversions on it [ 859.950772][T25879] tc_dump_action: action bad kind [ 859.995732][ T4195] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 860.032331][ T4195] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.038669][T25882] netdevsim netdevsim3: Firmware load for './file0/file0/..' refused, path contains '..' component [ 860.076565][ T4195] usb 5-1: Product: syz [ 860.096773][ T4195] usb 5-1: Manufacturer: syz [ 860.101460][ T4195] usb 5-1: SerialNumber: syz [ 860.161806][ T4195] usb 5-1: config 0 descriptor?? [ 860.237308][ T4195] f81534 5-1:0.12: unsupported endpoint max packet size [ 860.534623][T25909] delete_channel: no stack [ 861.197913][ T4228] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 861.518290][ T4228] usb 3-1: Using ep0 maxpacket: 32 [ 861.592962][T25963] loop3: detected capacity change from 0 to 64 [ 861.651898][ T4228] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 861.669632][ T4228] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 861.685039][ T4228] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 861.708736][ T4228] usb 3-1: config 1 has no interface number 0 [ 861.731280][ T4228] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 861.761500][ T4228] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 861.799432][ T4228] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 861.828976][ T4228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.927434][ T4228] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 862.041121][ T4195] usb 5-1: USB disconnect, device number 39 [ 862.054305][T25984] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 862.075877][T25984] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 862.171305][ T4228] snd_usb_pod 3-1:1.1: endpoint not available, using fallback values [ 862.202861][ T4228] snd_usb_pod 3-1:1.1: invalid control EP [ 862.208655][ T4228] snd_usb_pod 3-1:1.1: cannot start listening: -22 [ 862.226316][T25993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9852'. [ 862.226356][ T4228] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 862.277990][T25997] overlayfs: conflicting options: userxattr,redirect_dir=follow [ 862.301172][ T4228] snd_usb_pod: probe of 3-1:1.1 failed with error -22 [ 862.413831][ T4228] usb 3-1: USB disconnect, device number 48 [ 862.579146][T26014] x_tables: unsorted underflow at hook 1 [ 862.793292][T26026] netlink: 220 bytes leftover after parsing attributes in process `syz.3.9867'. [ 863.002642][T26037] netlink: 'syz.3.9873': attribute type 1 has an invalid length. [ 863.044153][T26037] netlink: 228 bytes leftover after parsing attributes in process `syz.3.9873'. [ 863.282462][ T4228] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 863.429290][T26054] kAFS: unable to lookup cell '.,' [ 863.506763][ T4195] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 863.726520][ T4228] usb 2-1: config 0 has an invalid interface number: 13 but max is 0 [ 863.748180][ T4228] usb 2-1: config 0 has no interface number 0 [ 863.776515][ T4228] usb 2-1: too many endpoints for config 0 interface 13 altsetting 233: 211, using maximum allowed: 30 [ 863.815458][T26066] xt_TPROXY: Can be used only with -p tcp or -p udp [ 863.835081][ T4228] usb 2-1: config 0 interface 13 altsetting 233 has 0 endpoint descriptors, different from the interface descriptor's value: 211 [ 863.868677][ T4228] usb 2-1: config 0 interface 13 has no altsetting 0 [ 863.995511][ T4195] usb 3-1: unable to get BOS descriptor or descriptor too short [ 864.055999][T26075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9891'. [ 864.073685][ T4228] usb 2-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice= 2.23 [ 864.083082][ T4195] usb 3-1: not running at top speed; connect to a high speed hub [ 864.104058][ T4228] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.112890][ T4228] usb 2-1: Product: syz [ 864.126966][ T4228] usb 2-1: Manufacturer: syz [ 864.175384][T26082] netlink: 200 bytes leftover after parsing attributes in process `syz.0.9894'. [ 864.201344][ T4228] usb 2-1: SerialNumber: syz [ 864.212623][ T4195] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 864.231875][ T4195] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 864.244182][ T4228] usb 2-1: config 0 descriptor?? [ 864.307699][ T4228] ftdi_sio 2-1:0.13: FTDI USB Serial Device converter detected [ 864.338786][ T4228] usb 2-1: Detected FT8U232AM [ 864.374200][ T4228] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 864.458676][ T4195] usb 3-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 864.482368][ T4195] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.505117][ T4195] usb 3-1: Product: syz [ 864.541532][ T4195] usb 3-1: Manufacturer: syz [ 864.553712][ T4195] usb 3-1: SerialNumber: syz [ 864.562553][ T4228] usb 2-1: USB disconnect, device number 39 [ 864.593033][ T4228] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 864.626437][ T4228] ftdi_sio 2-1:0.13: device disconnected [ 864.646271][T26098] libceph: resolve '0' (ret=-3): failed [ 864.736709][ T6141] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 864.812848][T26105] netdevsim netdevsim0: Direct firmware load for failed with error -2 [ 864.828032][T26105] netdevsim netdevsim0: Falling back to sysfs fallback for: [ 865.003830][ T4195] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 865.021670][ T4195] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 865.033315][ T4195] usb 3-1: selecting invalid altsetting 1 [ 865.039597][ T4195] usb_set_interface error [ 865.044342][ T4195] snd-usb-us122l: probe of 3-1:1.1 failed with error -22 [ 865.063723][ T4195] usb 3-1: USB disconnect, device number 49 [ 865.088660][ T4274] udevd[4274]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 865.324368][ T6141] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 865.334233][ T6141] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.349327][ T6141] usb 4-1: Product: syz [ 865.353808][ T6141] usb 4-1: Manufacturer: syz [ 865.360536][ T6141] usb 4-1: SerialNumber: syz [ 865.527559][T16820] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 865.587512][T26117] loop2: detected capacity change from 0 to 4096 [ 865.696697][T26117] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 866.062482][ T6141] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 866.115536][T16820] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 866.124759][T16820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.144165][T16820] usb 2-1: Product: syz [ 866.154955][T16820] usb 2-1: Manufacturer: syz [ 866.168794][T16820] usb 2-1: SerialNumber: syz [ 866.191241][T16820] usb 2-1: config 0 descriptor?? [ 866.235190][T16820] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 866.318468][ C1] usb 4-1: ath9k_htc: invalid pkt_len (ff2c) [ 866.528566][ T4228] usb 4-1: USB disconnect, device number 48 [ 866.562920][T26155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9930'. [ 866.692734][T16820] gspca_sunplus: reg_w_riv err -71 [ 866.698043][T16820] sunplus: probe of 2-1:0.0 failed with error -71 [ 866.753571][T16820] usb 2-1: USB disconnect, device number 40 [ 866.791967][T26163] No source specified [ 866.832474][T26131] loop0: detected capacity change from 0 to 32768 [ 866.950526][T26131] XFS (loop0): Mounting V5 Filesystem [ 867.005252][T26131] XFS (loop0): Ending clean mount [ 867.081385][ T4189] XFS (loop0): Unmounting Filesystem [ 867.088322][ T4195] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 867.102402][T26179] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9939'. [ 867.163172][ T6141] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 867.170320][ T6141] ath9k_htc: Failed to initialize the device [ 867.217399][ T4228] usb 4-1: ath9k_htc: USB layer deinitialized [ 867.376893][ T4195] usb 3-1: Using ep0 maxpacket: 32 [ 867.384081][T26191] netlink: 14 bytes leftover after parsing attributes in process `syz.4.9945'. [ 867.505956][T26195] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9947'. [ 867.530908][T26195] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9947'. [ 867.552566][ T4195] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 867.575955][ T4195] usb 3-1: config 0 has no interface number 0 [ 867.592937][ T4195] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 867.615475][ T4195] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 867.652777][ T4195] usb 3-1: config 0 interface 85 has no altsetting 0 [ 867.698362][T26198] loop1: detected capacity change from 0 to 16 [ 867.785013][T26204] dlm: Unknown command passed to DLM device : 152 [ 867.785013][T26204] [ 867.830825][T26198] erofs: (device loop1): mounted with root inode @ nid 36. [ 867.870402][ T146] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -5 in[4096, 0] out[4868] [ 867.890348][ T4195] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 867.907113][ T4195] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.922343][T26198] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -5 in[4096, 0] out[4096] [ 867.989896][ T4195] usb 3-1: Product: syz [ 867.994147][ T4195] usb 3-1: Manufacturer: syz [ 868.002620][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 868.002637][ T26] audit: type=1800 audit(2001050996.685:48): pid=26198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.9948" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 868.069115][ T4195] usb 3-1: SerialNumber: syz [ 868.113745][ T4195] usb 3-1: config 0 descriptor?? [ 868.184799][T26222] loop3: detected capacity change from 0 to 512 [ 868.273721][T26226] program syz.4.9961 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 868.364046][T26222] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 868.381662][T26222] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01d, mo2=0102] [ 868.392600][T26222] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 868.412005][T26222] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 868.421551][T26222] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,abort,bsdgroups,noblock_validity,nolazytime,noblock_validity,jqfmt=vfsv0,barrier=0x000000000000d95a,jqfmt=vfsold,,errors=continue. Quota mode: none. [ 868.465758][T26222] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.9959: dx entry: limit 65535 != root limit 120 [ 868.518284][T26222] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.9959: Corrupt directory, running e2fsck is recommended [ 868.681197][ T4195] appletouch 3-1:0.85: Failed to request geyser raw mode [ 868.690619][ T4195] appletouch: probe of 3-1:0.85 failed with error -5 [ 868.743262][T26250] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9970'. [ 868.784078][ T4195] usb 3-1: USB disconnect, device number 50 [ 868.931011][T26260] Process accounting resumed [ 869.113325][T26273] printk: syz.3.9984 (26273): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 869.244989][T26279] loop3: detected capacity change from 0 to 16 [ 870.092360][T16820] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 870.153438][T26279] erofs: (device loop3): mounted with root inode @ nid 36. [ 870.195789][ T146] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -5 in[4096, 0] out[4868] [ 870.222065][T26279] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -5 in[4096, 0] out[4096] [ 870.252661][ T26] audit: type=1800 audit(2001050998.799:49): pid=26279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.9987" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 870.305959][ T4195] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 870.489114][T16820] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 870.517626][T16820] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 870.548634][T16820] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 870.575696][T16820] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 870.664715][ T4195] usb 5-1: not running at top speed; connect to a high speed hub [ 870.701265][T26319] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4194] was attempted by ""[26319] [ 870.755252][ T4195] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 870.777063][T16820] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 870.786155][T16820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.789218][ T4195] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 870.825331][ T4195] usb 5-1: New USB device found, idVendor=0000, idProduct=d970, bcdDevice= 1.00 [ 870.849035][ T4195] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.861971][T16820] usb 1-1: Product: syz [ 870.866197][T16820] usb 1-1: Manufacturer: syz [ 870.897398][T16820] usb 1-1: SerialNumber: syz [ 870.928558][ T4195] usb 5-1: Found UVC 1.00 device (0000:d970) [ 871.172319][ T4195] usb 5-1: No streaming interface found for terminal 2. [ 871.205288][T16820] usb 1-1: Limiting number of CPorts to U8_MAX [ 871.218249][T16820] usb 1-1: Not enough endpoints found in device, aborting! [ 871.405635][ T4227] usb 5-1: USB disconnect, device number 40 [ 871.467242][ T9963] usb 1-1: USB disconnect, device number 43 [ 871.481986][T16820] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 871.909923][T16820] usb 2-1: unable to get BOS descriptor or descriptor too short [ 871.995381][T16820] usb 2-1: config 129 has an invalid interface number: 135 but max is 0 [ 872.003913][T16820] usb 2-1: config 129 has an invalid interface number: 5 but max is 0 [ 872.024478][T16820] usb 2-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 872.069785][T26353] comedi comedi4: bad chanlist[0]=0x0fffffff chan=65535 range length=2 [ 872.080740][T16820] usb 2-1: config 129 has no interface number 0 [ 872.087069][T16820] usb 2-1: config 129 has no interface number 1 [ 872.149738][T16820] usb 2-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 872.198282][T16820] usb 2-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 872.241348][T16820] usb 2-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 872.281314][T16820] usb 2-1: config 129 interface 135 has no altsetting 0 [ 872.330337][T16820] usb 2-1: config 129 interface 5 has no altsetting 0 [ 872.448682][T26343] loop2: detected capacity change from 0 to 32768 [ 872.496760][T26343] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.10019 (26343) [ 872.592185][T26343] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 872.594692][T16820] usb 2-1: string descriptor 0 read error: -22 [ 872.612370][T26343] BTRFS info (device loop2): setting nodatasum [ 872.626512][T26343] BTRFS info (device loop2): force zlib compression, level 3 [ 872.642962][T16820] usb 2-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 872.647804][T26369] netlink: 'syz.4.10032': attribute type 1 has an invalid length. [ 872.658387][ T9963] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 872.667874][T26343] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 872.667968][T26343] BTRFS info (device loop2): use lzo compression, level 0 [ 872.667996][T26343] BTRFS info (device loop2): turning on flush-on-commit [ 872.668018][T26343] BTRFS info (device loop2): enabling auto defrag [ 872.669372][T26343] BTRFS info (device loop2): max_inline at 4096 [ 872.700384][T16820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.804945][T26343] BTRFS info (device loop2): using free space tree [ 872.815812][T26343] BTRFS info (device loop2): has skinny extents [ 872.834847][T16820] usb 2-1: MIDIStreaming interface descriptor not found [ 872.978706][ T9963] usb 1-1: Using ep0 maxpacket: 16 [ 873.012246][T26343] BTRFS info (device loop2): enabling ssd optimizations [ 873.107165][ T9963] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 873.139232][ T9963] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 873.168015][T26397] 0x000000000000-0x000000020000 : "" [ 873.210547][ T9963] usb 1-1: config 0 has no interface number 0 [ 873.220512][T26355] loop3: detected capacity change from 0 to 32768 [ 873.248265][T16820] usb 2-1: USB disconnect, device number 41 [ 873.340665][T26397] ftl_cs: FTL header not found. [ 873.424707][ T9963] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 873.435987][ T9963] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.453939][T26355] (syz.3.10025,26355,0):ocfs2_verify_heartbeat:827 ERROR: Mismatching o2cb heartbeat modes [ 873.462447][ T9963] usb 1-1: Product: syz [ 873.471911][ T9963] usb 1-1: Manufacturer: syz [ 873.482579][ T9963] usb 1-1: SerialNumber: syz [ 873.505061][ T9963] usb 1-1: config 0 descriptor?? [ 873.514085][T26355] (syz.3.10025,26355,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 873.811068][T16820] usb 1-1: USB disconnect, device number 44 [ 873.939012][ C0] vkms_vblank_simulate: vblank timer overrun [ 874.751983][T26439] loop0: detected capacity change from 0 to 8192 [ 874.884833][T26439] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 874.920474][T26464] program syz.1.10066 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 874.925397][T26439] REISERFS (device loop0): using ordered data mode [ 875.051175][T26439] reiserfs: using flush barriers [ 875.059814][T26439] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 875.096221][T26469] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10067'. [ 875.100475][T26439] REISERFS (device loop0): checking transaction log (loop0) [ 875.157357][T26469] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10067'. [ 875.172887][T26439] REISERFS (device loop0): Using r5 hash to sort names [ 875.193772][T26439] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 875.336890][T26474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10071'. [ 875.643041][T26485] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10076'. [ 876.188009][T26518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10092'. [ 876.372323][T26528] loop2: detected capacity change from 0 to 128 [ 876.416834][T26517] loop0: detected capacity change from 0 to 4096 [ 876.475568][T26528] FAT-fs (loop2): bogus logical sector size 65535 [ 876.482077][T26528] FAT-fs (loop2): Can't find a valid FAT filesystem [ 876.564191][T26517] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 876.632254][T26538] loop3: detected capacity change from 0 to 64 [ 876.752784][T26538] attempt to access beyond end of device [ 876.752784][T26538] loop3: rw=0, want=234881064, limit=64 [ 876.803570][T26538] Buffer I/O error on dev loop3, logical block 117440531, async page read [ 876.842624][T26538] attempt to access beyond end of device [ 876.842624][T26538] loop3: rw=0, want=8548515842, limit=64 [ 876.923635][T26538] Buffer I/O error on dev loop3, logical block 4274257920, async page read [ 876.956781][T26538] attempt to access beyond end of device [ 876.956781][T26538] loop3: rw=0, want=301989890, limit=64 [ 876.994927][T26538] Buffer I/O error on dev loop3, logical block 150994944, async page read [ 877.064784][T26546] netlink: 128 bytes leftover after parsing attributes in process `syz.0.10106'. [ 877.076112][T26538] attempt to access beyond end of device [ 877.076112][T26538] loop3: rw=0, want=234881064, limit=64 [ 877.126753][T26538] Buffer I/O error on dev loop3, logical block 117440531, async page read [ 877.158920][T26546] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 877.171382][ T26] audit: type=1800 audit(2001051005.263:50): pid=26538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.10103" name="file2" dev="loop3" ino=6 res=0 errno=0 [ 877.383364][T26552] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2880) [ 877.418774][T26552] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 877.864644][ T9963] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 877.884375][T26577] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 877.921541][T26577] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 877.963330][T26577] overlayfs: missing 'lowerdir' [ 877.985953][T26574] loop2: detected capacity change from 0 to 8192 [ 878.078027][T26574] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 878.092703][T26574] REISERFS (device loop2): using ordered data mode [ 878.099301][T26574] reiserfs: using flush barriers [ 878.113582][T26574] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 878.131363][T26574] REISERFS (device loop2): checking transaction log (loop2) [ 878.167767][T26574] REISERFS (device loop2): Using r5 hash to sort names [ 878.181241][T26574] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 878.249523][ T9963] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 878.271041][ T9963] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 878.302745][ T9963] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 878.323678][ T9963] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 878.559626][ T9963] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 878.585095][ T9963] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.640859][ T9963] usb 4-1: Product: syz [ 878.646176][ T9963] usb 4-1: Manufacturer: syz [ 878.651295][ T9963] usb 4-1: SerialNumber: syz [ 878.775766][T26611] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10139'. [ 878.951441][T26615] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10141'. [ 878.965791][ T9963] usb 4-1: Limiting number of CPorts to U8_MAX [ 878.978308][ T9963] usb 4-1: Not enough endpoints found in device, aborting! [ 879.190724][ T6141] usb 4-1: USB disconnect, device number 49 [ 879.440636][T26607] loop2: detected capacity change from 0 to 32768 [ 879.482181][T26607] [ 879.482181][T26607] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 879.482181][T26607] [ 879.596794][T26607] [ 879.596794][T26607] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 879.596794][T26607] [ 879.641060][T26607] [ 879.641060][T26607] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 879.641060][T26607] [ 879.679292][T26607] [ 879.679292][T26607] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 879.679292][T26607] [ 879.693622][T26607] [ 879.693622][T26607] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 879.693622][T26607] [ 879.706549][T26607] [ 879.706549][T26607] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 879.706549][T26607] [ 879.722281][T26607] [ 879.722281][T26607] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 879.722281][T26607] [ 879.758695][ T275] [ 879.758695][ T275] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 879.758695][ T275] [ 879.819645][T26642] netlink: 'syz.0.10153': attribute type 3 has an invalid length. [ 879.872110][ T4192] [ 879.872110][ T4192] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 879.872110][ T4192] [ 879.929960][ T4192] [ 879.929960][ T4192] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 879.929960][ T4192] [ 879.981909][T26647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10157'. [ 880.882716][T26693] x_tables: duplicate entry at hook 2 [ 881.217528][T26710] netlink: 'syz.1.10189': attribute type 1 has an invalid length. [ 881.247674][T26710] netlink: 'syz.1.10189': attribute type 2 has an invalid length. [ 881.294034][T26714] device bridge4 entered promiscuous mode [ 881.457163][T26723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10193'. [ 881.995773][T26755] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.10211'. [ 882.095417][T26761] netlink: 'syz.2.10214': attribute type 10 has an invalid length. [ 882.192827][T26763] autofs4:pid:26763:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.768), cmd(0xc0189375) [ 882.275539][T26763] autofs4:pid:26763:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 882.739217][T16818] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 883.006434][T16818] usb 5-1: Using ep0 maxpacket: 16 [ 883.135004][T16818] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 883.161662][T16818] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 883.177490][ T6141] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 883.196993][T16818] usb 5-1: config 0 interface 0 has no altsetting 0 [ 883.219363][ T9963] Bluetooth: hci0: command 0x080f tx timeout [ 883.246659][T26810] loop1: detected capacity change from 0 to 256 [ 883.362797][T26810] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 883.371601][T26810] FAT-fs (loop1): Filesystem has been set read-only [ 883.381201][T16818] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 883.395167][T16818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.412893][T16818] usb 5-1: Product: syz [ 883.423585][T16818] usb 5-1: Manufacturer: syz [ 883.439348][T16818] usb 5-1: SerialNumber: syz [ 883.475609][T16818] usb 5-1: config 0 descriptor?? [ 883.609897][ T6141] usb 4-1: unable to get BOS descriptor or descriptor too short [ 883.733814][ T6141] usb 4-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 883.761597][ T6141] usb 4-1: config 1 interface 0 has no altsetting 0 [ 883.776591][T26832] loop1: detected capacity change from 0 to 256 [ 883.790602][T16818] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 883.810928][T16818] imon 5-1:0.0: unable to initialize intf0, err -90 [ 883.823718][T16818] imon:imon_probe: failed to initialize context! [ 883.836069][T16818] imon 5-1:0.0: unable to register, err -19 [ 883.848522][T26835] loop0: detected capacity change from 0 to 1024 [ 883.884084][T16818] usb 5-1: USB disconnect, device number 41 [ 883.940660][T26838] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 883.955513][T26835] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 883.980822][ T6141] usb 4-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40 [ 884.000661][ T6141] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.028121][ T6141] usb 4-1: Product: syz [ 884.034548][ T6141] usb 4-1: Manufacturer: syz [ 884.039247][ T6141] usb 4-1: SerialNumber: syz [ 884.076628][T26835] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000006,bsddf,nojournal_checksum,norecovery,dioread_nolock,nombcache,noauto_da_alloc,acl,auto_da_alloc=0x0000000000000343,,errors=continue. Quota mode: none. [ 884.335303][T26852] openvswitch: netlink: IP tunnel dst address not specified [ 884.546659][ T6141] usbhid 4-1:1.0: can't add hid device: -71 [ 884.552780][ T6141] usbhid: probe of 4-1:1.0 failed with error -71 [ 884.589136][ T6141] usb 4-1: USB disconnect, device number 50 [ 884.643453][T26867] IPv6: NLM_F_CREATE should be specified when creating new route [ 885.079814][T26891] loop3: detected capacity change from 0 to 512 [ 885.189787][T26897] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.10280'. [ 885.229159][T26891] EXT4-fs (loop3): Ignoring removed orlov option [ 885.241048][T26891] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 885.241048][T26891] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 885.241048][T26891] [ 885.371777][T26891] EXT4-fs (loop3): mounted filesystem without journal. Opts: orlov,nouser_xattr,,errors=continue. Quota mode: writeback. [ 885.384913][ T6141] Bluetooth: hci0: command 0x080f tx timeout [ 885.444728][T26891] ext4 filesystem being mounted at /2086/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 885.475951][ T4231] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 885.568413][T26912] netlink: 56 bytes leftover after parsing attributes in process `syz.4.10286'. [ 885.602060][T26917] netlink: 'syz.3.10288': attribute type 3 has an invalid length. [ 885.710154][T26920] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 885.792345][T26926] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10293'. [ 885.808812][T26926] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10293'. [ 885.830046][T26926] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10293'. [ 885.845980][T26926] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10293'. [ 885.883162][T26930] sctp: [Deprecated]: syz.4.10295 (pid 26930) Use of int in max_burst socket option. [ 885.883162][T26930] Use struct sctp_assoc_value instead [ 885.903991][T26926] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10293'. [ 885.925240][ T4231] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 885.936009][ T4231] usb 3-1: config 0 has no interface number 0 [ 885.938728][T26926] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10293'. [ 886.145364][ T4231] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 886.177644][ T4231] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.210736][ T4231] usb 3-1: Product: syz [ 886.220883][ T4231] usb 3-1: Manufacturer: syz [ 886.227521][ T4231] usb 3-1: SerialNumber: syz [ 886.247601][ T4231] usb 3-1: config 0 descriptor?? [ 886.545474][ T4231] asix: probe of 3-1:0.251 failed with error -71 [ 886.577194][ T4231] usb 3-1: USB disconnect, device number 51 [ 886.615866][T26962] netlink: 'syz.4.10310': attribute type 4 has an invalid length. [ 887.181215][ T6141] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 887.225765][T26995] loop0: detected capacity change from 0 to 1764 [ 887.571642][ T4231] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 887.583676][ T6141] usb 5-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 887.646921][T27022] loop0: detected capacity change from 0 to 512 [ 887.696840][T27022] EXT4-fs (loop0): Ignoring removed orlov option [ 887.763395][T27022] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,init_itable,sysvgroups,orlov,. Quota mode: writeback. [ 887.796119][ T6141] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 887.806725][T27022] ext4 filesystem being mounted at /2049/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 887.827017][ T6141] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.872270][ T4231] usb 3-1: Using ep0 maxpacket: 32 [ 887.880898][T27035] device wlan0 entered promiscuous mode [ 887.897597][ T6141] usb 5-1: Product: syz [ 887.920674][ T6141] usb 5-1: Manufacturer: syz [ 887.936602][ T6141] usb 5-1: SerialNumber: syz [ 888.010024][ T4231] usb 3-1: config 2 has an invalid interface number: 88 but max is 0 [ 888.018209][ T4231] usb 3-1: config 2 has no interface number 0 [ 888.040864][ T4231] usb 3-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 888.053659][T27043] __nla_validate_parse: 15 callbacks suppressed [ 888.053677][T27043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10350'. [ 888.061750][ T4231] usb 3-1: config 2 interface 88 has no altsetting 0 [ 888.102256][T27043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10350'. [ 888.266975][ T4231] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 888.276229][ T4608] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 888.294148][ T4231] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.302620][ T4231] usb 3-1: Product: syz [ 888.306934][ T4231] usb 3-1: Manufacturer: syz [ 888.312327][ T4231] usb 3-1: SerialNumber: syz [ 888.319850][ T6141] usb 5-1: Cannot retrieve CPort count: -71 [ 888.337470][ T6141] usb 5-1: Cannot retrieve CPort count: -71 [ 888.352080][T27004] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 888.359182][ T6141] es2_ap_driver: probe of 5-1:246.0 failed with error -71 [ 888.388651][ T6141] usb 5-1: USB disconnect, device number 42 [ 888.537293][T27057] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10358'. [ 888.593199][T27004] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 888.704718][ T4608] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 888.737386][ T4608] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 888.780060][ T4608] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 888.829612][ T4608] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 888.854531][ T4231] asix 3-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 888.885950][ T4231] asix: probe of 3-1:2.88 failed with error -71 [ 888.893787][ T4608] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.925227][ T4231] usb 3-1: USB disconnect, device number 52 [ 889.114496][T27085] ip6t_REJECT: ECHOREPLY is not supported [ 889.200730][T27089] device wlan0 entered promiscuous mode [ 889.282035][ T4608] cxacru 2-1:1.0: receive of cm 0x90 failed (-71) [ 889.314110][ T4608] usb 2-1: USB disconnect, device number 42 [ 889.370630][T27097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10377'. [ 889.386617][T27094] cxacru 2-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 889.399970][T27094] cxacru 2-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 889.559069][T27098] mip6: mip6_destopt_init_state: state's mode is not 2: 0 [ 889.737188][T27119] loop2: detected capacity change from 0 to 512 [ 889.743896][ T4231] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 889.784416][T27121] netlink: 128 bytes leftover after parsing attributes in process `syz.3.10388'. [ 889.804653][T27121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10388'. [ 889.969563][T27119] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 889.981156][T27119] ext4 filesystem being mounted at /1997/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 890.230538][ T4231] usb 1-1: unable to get BOS descriptor or descriptor too short [ 890.331626][T27154] (unnamed net_device) (uninitialized): ARP validating cannot be used with MII monitoring [ 890.351388][ T4231] usb 1-1: config 114 has an invalid interface number: 216 but max is 0 [ 890.360352][ T4231] usb 1-1: config 114 has no interface number 0 [ 890.381262][ T4231] usb 1-1: config 114 interface 216 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 890.469169][ T4231] usb 1-1: config 114 interface 216 has no altsetting 0 [ 890.692190][ T4231] usb 1-1: New USB device found, idVendor=2040, idProduct=7500, bcdDevice=d8.83 [ 890.714536][ T4231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.752841][ T4231] usb 1-1: Product: syz [ 890.771540][ T4231] usb 1-1: Manufacturer: syz [ 890.776215][ T4231] usb 1-1: SerialNumber: syz [ 890.843761][T27101] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 891.200360][T27196] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10424'. [ 891.260167][T27198] device ipip0 entered promiscuous mode [ 891.369001][ T4231] pvrusb2: Hardware description: WinTV HVR-1950 Model 750xx [ 891.377047][ T4231] usb 1-1: selecting invalid altsetting 0 [ 891.426435][ T2425] pvrusb2: Invalid read control endpoint [ 891.438525][ T2425] usb 1-1: Direct firmware load for v4l-pvrusb2-73xxx-01.fw failed with error -2 [ 891.461388][ T4231] usb 1-1: USB disconnect, device number 45 [ 891.496073][T27209] delete_channel: no stack [ 891.505674][ T2425] usb 1-1: Falling back to sysfs fallback for: v4l-pvrusb2-73xxx-01.fw [ 891.702345][T27220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10438'. [ 891.711971][T27222] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10436'. [ 891.727686][T27220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10438'. [ 891.890488][T16818] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 892.307600][T16818] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 892.496370][T27267] loop2: detected capacity change from 0 to 512 [ 892.501210][T16818] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 892.528522][T16818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.578126][T16818] usb 4-1: Product: syz [ 892.601326][T16818] usb 4-1: Manufacturer: syz [ 892.630712][T27267] EXT4-fs (loop2): orphan cleanup on readonly fs [ 892.637955][T16818] usb 4-1: SerialNumber: syz [ 892.655614][T27267] EXT4-fs error (device loop2): ext4_find_extent:893: inode #4: comm syz.2.10460: inode has invalid extent depth: 7 [ 892.655704][T16818] usb 4-1: config 0 descriptor?? [ 892.685244][T27267] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=-117 [ 892.696754][T27267] EXT4-fs warning (device loop2): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 892.711549][T27267] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 892.718336][T27267] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 892.801584][T16818] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 892.906117][ T4232] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 893.220693][T27298] loop0: detected capacity change from 0 to 4096 [ 893.261928][T27298] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 893.269777][T16818] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 893.276656][T16818] gspca_pac7302: probe of 4-1:0.0 failed with error -71 [ 893.280018][ C0] hrtimer: interrupt took 205893 ns [ 893.310853][T16818] usb 4-1: USB disconnect, device number 51 [ 893.323213][ T4232] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 893.332457][T16957] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 893.347907][ T4232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.393253][ T4232] usb 5-1: config 0 descriptor?? [ 893.455279][T27300] comedi comedi1: 8255: I/O port conflict (0x5,4) [ 893.462785][T27300] comedi comedi1: 8255: I/O port conflict (0x2,4) [ 893.469333][T27300] comedi comedi1: 8255: I/O port conflict (0x8,4) [ 893.477851][T27300] comedi comedi1: 8255: I/O port conflict (0x14000000,4) [ 893.485435][T27300] comedi comedi1: 8255: I/O port conflict (0x20,4) [ 893.492325][T27300] comedi comedi1: 8255: I/O port conflict (0x3,4) [ 893.499402][T27300] comedi comedi1: 8255: I/O port conflict (0x8,4) [ 893.509101][T27300] comedi comedi1: 8255: I/O port conflict (0x8,4) [ 893.516074][T27300] comedi comedi1: 8255: I/O port conflict (0x13,4) [ 893.523016][T27300] comedi comedi1: 8255: I/O port conflict (0x2,4) [ 893.530048][T27300] comedi comedi1: 8255: I/O port conflict (0x13,4) [ 893.537391][T27300] comedi comedi1: 8255: I/O port conflict (0x4000bd55,4) [ 893.544583][T27300] comedi comedi1: 8255: I/O port conflict (0xffffffffffffffa7,4) [ 893.553106][T27300] comedi comedi1: 8255: I/O port conflict (0x1,4) [ 893.560061][T27300] comedi comedi1: 8255: I/O port conflict (0x3ff,4) [ 893.567175][T27300] comedi comedi1: 8255: I/O port conflict (0xa,4) [ 893.577531][T27300] comedi comedi1: 8255: I/O port conflict (0x2,4) [ 893.587668][T27300] comedi comedi1: 8255: I/O port conflict (0x1,4) [ 893.600907][T16957] usb 3-1: Using ep0 maxpacket: 8 [ 893.612086][T27300] comedi comedi1: 8255: I/O port conflict (0x4,4) [ 893.753236][T16957] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 893.765830][T16957] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 893.953875][T16957] usb 3-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 893.962991][T16957] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.985865][ T4232] usb 5-1: Cannot read MAC address [ 893.991190][ T4232] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71 [ 894.003040][ T4232] usb 5-1: USB disconnect, device number 43 [ 894.008160][T16957] usb 3-1: Product: syz [ 894.008182][T16957] usb 3-1: Manufacturer: syz [ 894.008198][T16957] usb 3-1: SerialNumber: syz [ 894.145391][T27325] loop0: detected capacity change from 0 to 1024 [ 894.402977][T16957] usb 3-1: unit 5 not found! [ 894.407750][T16957] usb 3-1: unit 0 not found! [ 894.435748][T16957] usb 3-1: USB disconnect, device number 53 [ 894.743219][ T4286] udevd[4286]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 895.526209][T27396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 895.534756][T27396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 896.230498][T27442] tc_dump_action: action bad kind [ 896.383407][T27452] x_tables: ip6_tables: SNAT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING [ 896.840250][ T4232] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 897.257962][ T4232] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 897.266129][ T4232] usb 5-1: config 0 has no interface number 0 [ 897.278160][ T4232] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 897.309413][T27477] loop2: detected capacity change from 0 to 40427 [ 897.417549][T27477] F2FS-fs (loop2): Found nat_bits in checkpoint [ 897.503195][ T4232] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 897.519462][ T4232] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.560549][ T4232] usb 5-1: Product: syz [ 897.564870][ T4232] usb 5-1: Manufacturer: syz [ 897.578987][ T4232] usb 5-1: SerialNumber: syz [ 897.620688][ T4232] usb 5-1: config 0 descriptor?? [ 897.636918][T27477] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 897.652234][T27512] __nla_validate_parse: 1 callbacks suppressed [ 897.652252][T27512] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10572'. [ 897.676085][ T4232] yurex 5-1:0.50: Could not find endpoints [ 897.740580][ T4192] attempt to access beyond end of device [ 897.740580][ T4192] loop2: rw=2049, want=45104, limit=40427 [ 897.894237][ T4232] usb 5-1: USB disconnect, device number 44 [ 898.122034][T27533] loop0: detected capacity change from 0 to 64 [ 898.969682][T27574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10600'. [ 899.035857][T27578] netlink: 'syz.4.10604': attribute type 1 has an invalid length. [ 899.073067][T27578] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.10604'. [ 899.083400][T27577] loop2: detected capacity change from 0 to 2048 [ 899.094027][T27582] netlink: 'syz.1.10606': attribute type 79 has an invalid length. [ 899.126635][T27577] EXT4-fs (loop2): inline encryption not supported [ 899.278848][T27577] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,inlinecrypt,resgid=0x0000000000000000,barrier,quota,delalloc,,errors=continue. Quota mode: writeback. [ 899.369328][T27577] ext4 filesystem being mounted at /2041/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 899.411822][T27598] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 899.554628][T27577] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.10603: bg 0: block 345: padding at end of block bitmap is not set [ 899.659482][T27577] EXT4-fs error (device loop2): ext4_xattr_block_set:2197: inode #15: comm syz.2.10603: bad block 128 [ 900.754017][T16818] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 900.836265][T27665] xt_cgroup: xt_cgroup: no path or classid specified [ 901.020192][T16818] usb 5-1: Using ep0 maxpacket: 16 [ 901.132252][T27680] device geneve1 entered promiscuous mode [ 901.148966][T16818] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 901.166307][T16818] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 901.212564][T16818] usb 5-1: config 1 has no interface number 0 [ 901.218747][T16818] usb 5-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 901.273142][T16818] usb 5-1: config 1 interface 105 has no altsetting 0 [ 901.458775][T16818] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 901.476820][T16818] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 901.485644][T16818] usb 5-1: Product: syz [ 901.489875][T16818] usb 5-1: Manufacturer: syz [ 901.495012][T16818] usb 5-1: SerialNumber: syz [ 901.790235][T16818] aqc111: probe of 5-1:1.105 failed with error -22 [ 901.925748][T27732] loop3: detected capacity change from 0 to 64 [ 901.950833][T27732] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 901.993243][T16957] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 902.019609][ T6141] usb 5-1: USB disconnect, device number 45 [ 902.276181][T16957] usb 3-1: Using ep0 maxpacket: 32 [ 902.495689][T16957] usb 3-1: unable to get BOS descriptor or descriptor too short [ 902.591987][T16957] usb 3-1: config index 0 descriptor too short (expected 321, got 65) [ 902.601671][T16957] usb 3-1: config 48 has an invalid interface descriptor of length 2, skipping [ 902.618695][T16957] usb 3-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 902.630611][T16957] usb 3-1: config 48 has 0 interfaces, different from the descriptor's value: 3 [ 902.859128][T16957] usb 3-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice= 0.40 [ 902.868555][T16957] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.876984][T16957] usb 3-1: Product: syz [ 902.881640][T16957] usb 3-1: Manufacturer: syz [ 902.886303][T16957] usb 3-1: SerialNumber: syz [ 903.186958][T16957] usb 3-1: USB disconnect, device number 54 [ 904.288058][T27776] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10699'. [ 904.721657][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 904.728023][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 904.749860][T27798] netlink: 288 bytes leftover after parsing attributes in process `syz.4.10709'. [ 905.166775][T27819] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10720'. [ 905.438827][T27840] device gtp0 entered promiscuous mode [ 905.925798][ T4232] kernel write not supported for file /4487/net/rt_acct (pid: 4232 comm: kworker/0:8) [ 905.952550][T27872] program syz.0.10745 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 906.340558][T27876] loop3: detected capacity change from 0 to 8192 [ 906.884204][T27902] loop3: detected capacity change from 0 to 2048 [ 907.001742][T27902] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 907.044023][T27916] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 907.062523][T27915] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10765'. [ 907.200180][T27902] NILFS (loop3): error -2 truncating bmap (ino=16) [ 907.254371][T27924] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10771'. [ 907.373460][T27930] netlink: 'syz.4.10773': attribute type 3 has an invalid length. [ 907.385825][T27930] netlink: 232 bytes leftover after parsing attributes in process `syz.4.10773'. [ 907.824407][T27941] loop2: detected capacity change from 0 to 4096 [ 907.858104][T27946] loop3: detected capacity change from 0 to 4096 [ 907.888634][T27941] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 907.950869][T27958] netlink: 'syz.4.10785': attribute type 32 has an invalid length. [ 907.962727][T27946] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 908.000256][T27946] ntfs3: loop3: mft corrupted [ 908.016399][T27946] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 908.074536][T27946] ntfs3: loop3: Failed to load $BadClus. [ 908.108241][T27941] ntfs3: loop2: failed to convert "c46c" to iso8859-15 [ 908.149989][T27963] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.10788'. [ 908.268560][T27967] netlink: 'syz.3.10791': attribute type 4 has an invalid length. [ 908.558418][T27983] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 908.681165][T27990] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10803'. [ 908.690422][T27991] kcapi: manufacturer command 7 unknown. [ 908.720443][T27990] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10803'. [ 909.008443][T28010] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10812'. [ 909.701862][T28049] loop1: detected capacity change from 0 to 2048 [ 909.840629][T28049] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,,errors=continue. Quota mode: none. [ 909.954225][T28049] fscrypt (loop1, inode 12): Error -61 getting encryption context [ 910.022893][T28070] netlink: 'syz.2.10840': attribute type 11 has an invalid length. [ 910.364605][T28091] __nla_validate_parse: 3 callbacks suppressed [ 910.364624][T28091] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10852'. [ 911.533361][T28146] openvswitch: netlink: EtherType 0 is less than min 600 [ 911.710529][T28158] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10883'. [ 911.901281][T28169] netlink: 'syz.4.10890': attribute type 1 has an invalid length. [ 912.206864][T28191] netlink: 128 bytes leftover after parsing attributes in process `syz.0.10899'. [ 912.245560][T28191] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 912.261908][T28196] loop1: detected capacity change from 0 to 256 [ 912.284979][T28198] loop3: detected capacity change from 0 to 164 [ 912.384372][T28198] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 912.430873][T28202] netlink: 44 bytes leftover after parsing attributes in process `syz.4.10905'. [ 912.454139][T28198] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 913.033280][T28230] xt_CT: No such helper "snmp" [ 913.357671][T28263] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10934'. [ 913.465930][T28270] netlink: 'syz.4.10938': attribute type 13 has an invalid length. [ 913.528286][T28276] netlink: 168 bytes leftover after parsing attributes in process `syz.2.10940'. [ 913.695262][T28284] loop2: detected capacity change from 0 to 8 [ 913.725706][T28286] tmpfs: Bad value for 'mpol' [ 913.771822][T28290] netlink: 'syz.3.10948': attribute type 21 has an invalid length. [ 913.849035][T28290] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10948'. [ 913.876548][T28294] xt_connbytes: Forcing CT accounting to be enabled [ 913.912174][T28293] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10949'. [ 914.128675][T28301] netlink: 256 bytes leftover after parsing attributes in process `syz.3.10953'. [ 914.258695][T28301] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 914.638618][T28281] loop0: detected capacity change from 0 to 32768 [ 914.677214][T28310] loop3: detected capacity change from 0 to 4096 [ 914.781466][T28281] JBD2: Ignoring recovery information on journal [ 914.816285][T28320] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 914.988698][T28281] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 915.366224][T28329] loop2: detected capacity change from 0 to 2048 [ 915.386070][T28281] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2061 but max bitmap bits of 2048 [ 915.426024][T28281] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 915.438586][T28281] OCFS2: Returning error to the calling process. [ 915.451008][T28281] (syz.0.10944,28281,0):ocfs2_search_chain:1783 ERROR: status = -5 [ 915.467573][T28281] (syz.0.10944,28281,0):ocfs2_search_chain:1893 ERROR: status = -5 [ 915.482080][T28281] (syz.0.10944,28281,0):ocfs2_claim_suballoc_bits:1972 ERROR: status = -5 [ 915.484953][T16818] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 915.499491][T28281] (syz.0.10944,28281,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -5 [ 915.538177][T28281] (syz.0.10944,28281,0):ocfs2_claim_new_inode:2248 ERROR: status = -5 [ 915.546423][T28281] (syz.0.10944,28281,0):ocfs2_claim_new_inode:2263 ERROR: status = -5 [ 915.565390][T28281] (syz.0.10944,28281,0):ocfs2_mknod_locked:639 ERROR: status = -5 [ 915.587737][T28281] (syz.0.10944,28281,0):ocfs2_mknod:385 ERROR: status = -5 [ 915.600029][T28329] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,,errors=continue. Quota mode: none. [ 915.658974][T28281] (syz.0.10944,28281,0):ocfs2_mknod:502 ERROR: status = -5 [ 915.718981][T28329] fscrypt (loop2, inode 12): Error -61 getting encryption context [ 915.741249][T28281] (syz.0.10944,28281,1):ocfs2_mkdir:659 ERROR: status = -5 [ 915.864147][T28308] loop1: detected capacity change from 0 to 32768 [ 915.923105][T16818] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 915.931346][T16818] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 915.946843][ C0] vkms_vblank_simulate: vblank timer overrun [ 915.964083][ T4189] ocfs2: Unmounting device (7,0) on (node local) [ 916.034813][T16818] usb 4-1: config 0 has no interface number 0 [ 916.104842][T16818] usb 4-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 916.213876][T28308] XFS (loop1): Mounting V5 Filesystem [ 916.318682][T16818] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 916.381424][T16818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.450451][T16818] usb 4-1: Product: syz [ 916.478953][T16818] usb 4-1: Manufacturer: syz [ 916.488199][T16818] usb 4-1: SerialNumber: syz [ 916.536935][T16818] usb 4-1: config 0 descriptor?? [ 916.594357][T28308] XFS (loop1): Ending clean mount [ 916.622013][T16818] radio-si470x 4-1:0.35: could not find interrupt in endpoint [ 916.644591][T28308] XFS (loop1): EXPERIMENTAL online scrub feature in use. Use at your own risk! [ 916.660627][T16818] radio-si470x: probe of 4-1:0.35 failed with error -5 [ 916.738740][T28370] netlink: 'syz.0.10980': attribute type 21 has an invalid length. [ 916.779682][ T4185] XFS (loop1): Unmounting Filesystem [ 916.789084][T28370] netlink: 152 bytes leftover after parsing attributes in process `syz.0.10980'. [ 916.867555][T16818] radio-raremono 4-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 917.099215][T16818] radio-raremono 4-1:0.35: raremono_cmd_main failed (-71) [ 917.126011][T16818] radio-raremono 4-1:0.35: V4L2 device registered as radio48 [ 917.145002][T16818] usb 4-1: USB disconnect, device number 52 [ 917.151354][T16818] radio-raremono 4-1:0.35: Thanko's Raremono disconnected [ 917.902177][T28418] x_tables: unsorted entry at hook 4 [ 918.358371][T28436] loop3: detected capacity change from 0 to 4096 [ 918.437198][T28436] ntfs: (device loop3): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 918.539749][T28436] ntfs: volume version 3.1. [ 918.765838][T28462] CIFS: VFS: Malformed UNC in devname [ 918.918408][T28468] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 919.296559][T28486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11034'. [ 919.391538][T28448] loop2: detected capacity change from 0 to 32768 [ 919.479863][T28495] x_tables: duplicate entry at hook 1 [ 919.581670][T28448] XFS (loop2): Mounting V5 Filesystem [ 919.809543][T28448] XFS (loop2): Ending clean mount [ 919.838495][T28448] XFS (loop2): Quotacheck needed: Please wait. [ 919.916499][T28522] xt_CT: You must specify a L4 protocol and not use inversions on it [ 919.927422][T28524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11048'. [ 919.978867][T28448] XFS (loop2): Quotacheck: Done. [ 920.063896][T28527] loop1: detected capacity change from 0 to 256 [ 920.113656][T16957] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 920.141673][T28527] exfat: Deprecated parameter 'utf8' [ 920.156461][ T4192] XFS (loop2): Unmounting Filesystem [ 920.177739][T28527] exfat: Deprecated parameter 'utf8' [ 920.183168][T28527] exfat: Deprecated parameter 'namecase' [ 920.254460][T28527] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 920.255349][T28532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11054'. [ 920.780959][T16957] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 920.808610][T16957] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.838760][T16957] usb 4-1: Product: syz [ 920.854162][T16957] usb 4-1: Manufacturer: syz [ 920.858834][T16957] usb 4-1: SerialNumber: syz [ 920.924251][T16957] usb 4-1: config 0 descriptor?? [ 920.982080][T16957] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 921.214853][T16957] gspca_sunplus: reg_r err -71 [ 921.230907][T16957] usb 4-1: USB disconnect, device number 53 [ 921.473864][T28577] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 921.727406][T28595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11083'. [ 922.134807][T28617] netlink: 'syz.1.11093': attribute type 1 has an invalid length. [ 922.238149][T28600] loop0: detected capacity change from 0 to 4096 [ 922.403539][T28600] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 922.649319][T28639] loop3: detected capacity change from 0 to 8 [ 922.678499][T28600] ntfs: volume version 3.1. [ 922.808539][T28639] SQUASHFS error: xz decompression failed, data probably corrupt [ 922.816463][T28639] SQUASHFS error: Failed to read block 0x108: -5 [ 922.827775][T28649] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11108'. [ 922.872366][T28639] SQUASHFS error: Unable to read metadata cache entry [106] [ 922.879798][T28639] SQUASHFS error: Unable to read inode 0x11f [ 923.309088][T28666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11117'. [ 923.455818][T28671] netlink: 1052 bytes leftover after parsing attributes in process `syz.4.11119'. [ 923.517040][T16818] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 923.876243][T28688] loop2: detected capacity change from 0 to 64 [ 923.930297][T16818] usb 4-1: config 15 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 924.028121][T28692] loop0: detected capacity change from 0 to 512 [ 924.047886][T16818] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 924.067953][T16818] usb 4-1: New USB device strings: Mfr=0, Product=7, SerialNumber=0 [ 924.100295][T16818] usb 4-1: Product: syz [ 924.181705][T28661] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 924.221599][T16818] usbhid 4-1:15.0: fixing wrong optional hid class descriptors count [ 924.232812][T16818] usbhid 4-1:15.0: can't add hid device: -22 [ 924.239022][T16818] usbhid: probe of 4-1:15.0 failed with error -22 [ 924.293303][T28692] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.11129: bg 0: block 393: padding at end of block bitmap is not set [ 924.340624][T28692] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 924.384854][T28692] EXT4-fs (loop0): 2 truncates cleaned up [ 924.464739][T28692] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 924.496738][ T4228] usb 4-1: USB disconnect, device number 54 [ 924.716952][T28712] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11138'. [ 924.764023][T16818] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 924.861687][ T4232] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 924.899287][T28720] netlink: 104 bytes leftover after parsing attributes in process `syz.0.11142'. [ 924.909389][T28720] netlink: 104 bytes leftover after parsing attributes in process `syz.0.11142'. [ 924.941327][T28720] netlink: 104 bytes leftover after parsing attributes in process `syz.0.11142'. [ 925.220268][T28728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11145'. [ 925.294624][ T4232] usb 3-1: config index 0 descriptor too short (expected 45, got 25) [ 925.311990][ T4232] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 925.321752][T16818] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 925.330684][ T4232] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 925.352756][T16818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.371182][T16818] usb 5-1: Product: syz [ 925.376671][T16818] usb 5-1: Manufacturer: syz [ 925.381332][T16818] usb 5-1: SerialNumber: syz [ 925.544921][ T4232] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 925.577589][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.611447][ T4232] usb 3-1: Product: syz [ 925.615681][ T4232] usb 3-1: Manufacturer: syz [ 925.630123][ T4232] usb 3-1: SerialNumber: syz [ 925.684378][ T4232] rtl8150 3-1:1.0: couldn't find required endpoints [ 925.702004][ T4232] rtl8150: probe of 3-1:1.0 failed with error -5 [ 925.993976][T16957] usb 3-1: USB disconnect, device number 55 [ 926.017840][T28755] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11159'. [ 926.047071][T16818] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 926.182744][T28761] SET target dimension over the limit! [ 926.228704][ T6141] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 926.316831][T28767] loop0: detected capacity change from 0 to 128 [ 926.497572][ T6141] usb 4-1: Using ep0 maxpacket: 32 [ 926.508372][ T4262] usb 5-1: USB disconnect, device number 46 [ 926.635021][ T6141] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 926.698724][T28779] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11171'. [ 926.838185][ T6141] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 926.849262][ T6141] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.857949][ T6141] usb 4-1: Product: syz [ 926.862926][ T6141] usb 4-1: Manufacturer: syz [ 926.867568][ T6141] usb 4-1: SerialNumber: syz [ 926.894236][ T6141] usb 4-1: config 0 descriptor?? [ 926.972197][ T6141] cdc_ether 4-1:0.0: skipping garbage [ 926.982423][ T6141] cdc_ether 4-1:0.0: skipping garbage [ 926.987162][T28793] xt_hashlimit: overflow, try lower: 3/0 [ 926.993787][ T6141] usb 4-1: bad CDC descriptors [ 926.994917][ T6141] usb 4-1: unsupported MDLM descriptors [ 927.201503][T16818] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 927.221903][T16818] ath9k_htc: Failed to initialize the device [ 927.230546][ T4262] usb 5-1: ath9k_htc: USB layer deinitialized [ 927.234068][T28800] netlink: 'syz.4.11181': attribute type 1 has an invalid length. [ 927.248080][T16957] usb 4-1: USB disconnect, device number 55 [ 928.030600][T28849] loop3: detected capacity change from 0 to 64 [ 928.232731][T28866] loop2: detected capacity change from 0 to 1024 [ 928.342502][T28866] EXT4-fs (loop2): Ignoring removed bh option [ 928.391929][T28866] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 2: comm syz.2.11215: lblock 2 mapped to illegal pblock 2 (length 1) [ 928.424326][T28866] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 928.434623][T28866] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 48: comm syz.2.11215: lblock 0 mapped to illegal pblock 48 (length 1) [ 928.458049][T28866] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 928.467016][T28866] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.11215: Failed to acquire dquot type 0 [ 928.484753][T28866] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 928.506083][T28866] EXT4-fs error (device loop2): ext4_evict_inode:284: inode #11: comm syz.2.11215: mark_inode_dirty error [ 928.527748][T28866] EXT4-fs warning (device loop2): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 928.545394][T28884] loop3: detected capacity change from 0 to 4096 [ 928.554112][T28866] EXT4-fs (loop2): 1 orphan inode deleted [ 928.567507][T28866] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,noblock_validity,bh,nodiscard,nouid32,barrier,,errors=continue. Quota mode: none. [ 928.583554][ T7353] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 928.638124][ T7353] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 928.669281][ T7353] EXT4-fs error (device loop2): ext4_release_dquot:6272: comm kworker/u4:8: Failed to release dquot type 0 [ 928.746356][T28893] netlink: 'syz.0.11226': attribute type 21 has an invalid length. [ 928.785589][ T4240] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 928.805464][T28893] __nla_validate_parse: 5 callbacks suppressed [ 928.805480][T28893] netlink: 100 bytes leftover after parsing attributes in process `syz.0.11226'. [ 928.862221][T28896] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11229'. [ 928.872058][ T4240] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 928.909028][ T4240] EXT4-fs error (device loop2): ext4_release_dquot:6272: comm kworker/u4:5: Failed to release dquot type 0 [ 928.939959][T28900] comedi comedi2: pcl818: a I/O base address must be specified [ 928.983331][ T4192] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 929.014682][T28903] netlink: 'syz.0.11232': attribute type 25 has an invalid length. [ 929.041065][ T4192] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 929.078568][ T4192] EXT4-fs error (device loop2): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 929.113313][T28903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11232'. [ 929.447151][T28924] loop1: detected capacity change from 0 to 1024 [ 929.724597][ T4195] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 929.927980][T28954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11256'. [ 930.002465][ T4195] usb 5-1: Using ep0 maxpacket: 32 [ 930.188166][ T4195] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 930.224434][ T4195] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 930.483603][ T4195] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 930.529010][ T4195] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.569714][ T4195] usb 5-1: Product: syz [ 930.574053][ T4195] usb 5-1: Manufacturer: syz [ 930.602130][ T4195] usb 5-1: SerialNumber: syz [ 930.641132][ T4195] usb 5-1: config 0 descriptor?? [ 930.941394][T28990] cgroup: Unknown subsys name 'noxattr' [ 930.958197][ T4195] snd-usb-6fire 5-1:0.0: unknown device firmware state received from device: [ 930.978907][ T4195] f0 e4 3d a7 d3 60 4f fe [ 930.989037][ T4195] snd-usb-6fire: probe of 5-1:0.0 failed with error -5 [ 931.184186][ T4228] usb 5-1: USB disconnect, device number 47 [ 931.402877][ T4195] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 931.788714][ T4232] ------------[ cut here ]------------ [ 931.796147][ T4232] WARNING: CPU: 0 PID: 4232 at net/netfilter/nft_set_pipapo.c:2355 nft_pipapo_destroy+0x8b0/0x960 [ 931.815424][ T4232] Modules linked in: [ 931.821663][ T4232] CPU: 0 PID: 4232 Comm: kworker/0:8 Not tainted syzkaller #0 [ 931.840022][ T4232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 931.853999][ T4228] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 931.862834][ T4195] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 16630, setting to 1024 [ 931.885228][ T4232] Workqueue: events nf_tables_trans_destroy_work [ 931.907984][T29029] libceph: resolve '. [ 931.907984][T29029] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 931.907984][T29029] ' (ret=-3): failed [ 931.927448][ T4232] RIP: 0010:nft_pipapo_destroy+0x8b0/0x960 [ 931.933452][ T4232] Code: 24 80 3c 18 00 74 08 4c 89 f7 e8 2b ea 81 f9 49 c7 06 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b0 c0 3c f9 <0f> 0b e9 ad f7 ff ff 48 c7 c1 70 0f 8b 8d 80 e1 07 80 c1 03 38 c1 [ 931.954401][ T4232] RSP: 0018:ffffc900031bfa68 EFLAGS: 00010293 [ 931.966215][ T4232] RAX: ffffffff883c3ef0 RBX: ffff8880605288f0 RCX: ffff8880276a9dc0 [ 931.979242][ T4232] RDX: 0000000000000000 RSI: ffff888060528800 RDI: ffff8880605cf928 [ 931.993519][ T4232] RBP: ffffc900031bfc30 R08: ffff8880276a9dc0 R09: 0000000000000008 [ 932.006682][ T4232] R10: 0000000000000018 R11: 0000000000000000 R12: ffff8880605288c0 [ 932.015935][ T4232] R13: dffffc0000000000 R14: ffff888060528910 R15: dffffc0000000000 [ 932.028559][ T4232] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 932.039381][ T4232] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 932.046675][ T4232] CR2: 00007ff55ae6f2f8 CR3: 00000000724d7000 CR4: 00000000003506f0 [ 932.055385][ T4232] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 932.066314][ T4195] usb 4-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01 [ 932.075527][ T4195] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.087560][ T4232] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 932.096054][ T4195] usb 4-1: Product: syz [ 932.101042][ T4232] Call Trace: [ 932.104467][ T4232] [ 932.107774][ T4195] usb 4-1: Manufacturer: syz [ 932.112945][ T4232] nft_set_destroy+0x488/0xa30 [ 932.117855][ T4195] usb 4-1: SerialNumber: syz [ 932.123244][ T4232] ? kfree+0xef/0x2a0 [ 932.128258][ T4232] ? nf_tables_chain_destroy+0x19b/0x530 [ 932.135882][ T4232] nf_tables_trans_destroy_work+0xc5d/0xf00 [ 932.142556][ T4232] ? nft_object_dump+0x1e0/0x1e0 [ 932.147961][ T4232] ? _raw_spin_unlock_irq+0x1f/0x40 [ 932.155075][ T4232] process_one_work+0x867/0xff0 [ 932.160398][ T4232] ? worker_detach_from_pool+0x240/0x240 [ 932.166667][ T4232] ? lockdep_hardirqs_off+0x70/0x100 [ 932.172333][ T4232] ? _raw_spin_lock_irq+0xb7/0xf0 [ 932.179656][ T4195] ums-onetouch 4-1:1.0: USB Mass Storage device detected [ 932.187470][ T4232] ? _raw_spin_lock_irqsave+0x100/0x100 [ 932.193507][ T4232] ? wq_worker_running+0x97/0x170 [ 932.200182][ T4232] worker_thread+0xad7/0x12a0 [ 932.207380][ T4195] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/input/input61 [ 932.216748][ T4232] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 932.225672][ T4232] kthread+0x42e/0x520 [ 932.231075][ T4232] ? rcu_lock_release+0x20/0x20 [ 932.237680][ T4195] scsi host1: usb-storage 4-1:1.0 [ 932.245712][ T4232] ? kthread_blkcg+0xd0/0xd0 [ 932.281999][ T4232] ret_from_fork+0x1f/0x30 [ 932.301304][ T4232] [ 932.308596][ T4232] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 932.315933][ T4232] CPU: 0 PID: 4232 Comm: kworker/0:8 Not tainted syzkaller #0 [ 932.323445][ T4232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 932.333637][ T4232] Workqueue: events nf_tables_trans_destroy_work [ 932.340111][ T4232] Call Trace: [ 932.343528][ T4232] [ 932.346558][ T4232] dump_stack_lvl+0x188/0x250 [ 932.351282][ T4232] ? show_regs_print_info+0x20/0x20 [ 932.356523][ T4232] ? load_image+0x410/0x410 [ 932.361086][ T4232] panic+0x2f8/0x850 [ 932.365037][ T4232] ? bpf_jit_dump+0xd0/0xd0 [ 932.369592][ T4232] ? ret_from_fork+0x1f/0x30 [ 932.374219][ T4232] ? nft_pipapo_destroy+0x8b0/0x960 [ 932.379456][ T4232] __warn+0x248/0x2b0 [ 932.383483][ T4232] ? nft_pipapo_destroy+0x8b0/0x960 [ 932.388729][ T4232] report_bug+0x1b9/0x2e0 [ 932.393121][ T4232] handle_bug+0x3a/0x70 [ 932.397328][ T4232] exc_invalid_op+0x16/0x40 [ 932.401962][ T4232] asm_exc_invalid_op+0x16/0x20 [ 932.406855][ T4232] RIP: 0010:nft_pipapo_destroy+0x8b0/0x960 [ 932.412744][ T4232] Code: 24 80 3c 18 00 74 08 4c 89 f7 e8 2b ea 81 f9 49 c7 06 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b0 c0 3c f9 <0f> 0b e9 ad f7 ff ff 48 c7 c1 70 0f 8b 8d 80 e1 07 80 c1 03 38 c1 [ 932.432389][ T4232] RSP: 0018:ffffc900031bfa68 EFLAGS: 00010293 [ 932.438538][ T4232] RAX: ffffffff883c3ef0 RBX: ffff8880605288f0 RCX: ffff8880276a9dc0 [ 932.446551][ T4232] RDX: 0000000000000000 RSI: ffff888060528800 RDI: ffff8880605cf928 [ 932.454558][ T4232] RBP: ffffc900031bfc30 R08: ffff8880276a9dc0 R09: 0000000000000008 [ 932.462575][ T4232] R10: 0000000000000018 R11: 0000000000000000 R12: ffff8880605288c0 [ 932.470585][ T4232] R13: dffffc0000000000 R14: ffff888060528910 R15: dffffc0000000000 [ 932.478607][ T4232] ? nft_pipapo_destroy+0x8b0/0x960 [ 932.483867][ T4232] ? nft_pipapo_destroy+0x8b0/0x960 [ 932.489116][ T4232] nft_set_destroy+0x488/0xa30 [ 932.493926][ T4232] ? kfree+0xef/0x2a0 [ 932.498049][ T4232] ? nf_tables_chain_destroy+0x19b/0x530 [ 932.503855][ T4232] nf_tables_trans_destroy_work+0xc5d/0xf00 [ 932.509812][ T4232] ? nft_object_dump+0x1e0/0x1e0 [ 932.514883][ T4232] ? _raw_spin_unlock_irq+0x1f/0x40 [ 932.520133][ T4232] process_one_work+0x867/0xff0 [ 932.525143][ T4232] ? worker_detach_from_pool+0x240/0x240 [ 932.530823][ T4232] ? lockdep_hardirqs_off+0x70/0x100 [ 932.536286][ T4232] ? _raw_spin_lock_irq+0xb7/0xf0 [ 932.541349][ T4232] ? _raw_spin_lock_irqsave+0x100/0x100 [ 932.546942][ T4232] ? wq_worker_running+0x97/0x170 [ 932.552009][ T4232] worker_thread+0xad7/0x12a0 [ 932.556742][ T4232] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 932.562685][ T4232] kthread+0x42e/0x520 [ 932.566926][ T4232] ? rcu_lock_release+0x20/0x20 [ 932.571810][ T4232] ? kthread_blkcg+0xd0/0xd0 [ 932.576437][ T4232] ret_from_fork+0x1f/0x30 [ 932.580906][ T4232] [ 932.584199][ T4232] Kernel Offset: disabled [ 932.588988][ T4232] Rebooting in 86400 seconds..