last executing test programs: 6.97195784s ago: executing program 4 (id=25620): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000a40)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a00100001000009058803"], 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.418387203s ago: executing program 4 (id=25677): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) writev(r0, &(0x7f0000002400)=[{0x0}, {&(0x7f00000013c0)="2159c995102cfa0617f9e7f4682e7ec60a42164119ca183fd40e60201a180ff25adc484b874a1ff3f7e078c27cfc8de9599ed9d969099cfdd392723a01cca16c59fec7bc8076782d00bd93fb727ab86766474a292de405b91ef132747aa1cea18eb541a7e6005af3632f90c12c52ae48655bf2477511136bb6535f2be1a220bf6431a8ccc161db072cdcd1bb80383416a99b3689cbfd9e552b18defa9363f738b884099e0741db05b138c2c7b4072ab4f263bc429ba685ed54106672ef45b27e379e9a4442eba0f12a5654ebdcabae17e9d874a78cec74671d823163dd141055c4791a894bc3ed619a8cdadd1fe8e20123c6625fddda5b59d30b6c5d37ffe18c483633b3dd6da69bebe7e6dced59a9b9ed08bb89dcc151f8d1da80ef4c040f23fdb8464dd05133929b175c8d73a3db35df34e00c6385f2274f42cad4dc744e8f73d84da471328ebf221ecc2bf32be0a2566c63176897c5e1d4edb873f9d06c6ba2bfbba725215e20f4df9386e64839348c4cf1eb9c2e2e29a504da1245e69fbaa0b633aaa10b9c32f08bcfba3a42dfcce274d3dd53f9be13373023d236d59524f2bacb98b0499149313aef104598fbcbf4a372713e78428345c9be6adf64dec1c73110355e88ab78aabd498104827b51b6fad9fc36f34223894c6d55be439a37b8d0a55650216b2f9999ab8a77ed2e154368a79018935f64e20378d41ed74ebfdf2a63bd7e3d542dfc02766b1676f179bec3c8a2725baee7ede3eb53a2d0790e727cb2f935d9a4936d1c520a66222a0af3d4ba402152880a43befdfff992f36f44924a782ad69f7536a319af1189ef9162826637c56e5ca36b89609b84412802fb1f027344639edddbbce120a1779776aeb801d4713e61322f55ffad9ef63a9310d4977935bb22250a1ec7570ed2d0f95979909cb43d086fc462c6d187dcae38caa9315353cc27bed1cb2c964cee3cfb6c3ce4f97cb602b03a63ae69b2133a8980354b5871996ca5b3d68aeabd8dac441cb979854671f461cc0ae92b232442df835ec69b5d12fb6f005b07ed8ef25a44d2ef597053ef76964878943eee6f26e6994c07afd2f498119da4ca2ddc488c40239b6dfe64", 0x315}], 0x2) 4.359077154s ago: executing program 4 (id=25678): openat$kvm(0xffffffffffffff9c, 0x0, 0x143400, 0x0) syz_usb_connect(0x5, 0x51, &(0x7f00000004c0)={{0x12, 0x1, 0x310, 0x55, 0x6a, 0x60, 0x40, 0x1199, 0x6815, 0xddbf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0x6, 0x2, 0x20, 0x5, "", [{{0x9, 0x4, 0xfc, 0x5, 0x5, 0x65, 0xd, 0x89, 0x5, [], [{{0x9, 0x5, 0x8, 0x10, 0x400, 0xbc, 0x7f, 0xe}}, {{0x9, 0x5, 0x3, 0xc, 0x20, 0x7, 0x1, 0xff}}, {{0x9, 0x5, 0xe, 0x1, 0x20, 0xb, 0xe, 0x10}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x40, 0x6, 0x6}}, {{0x9, 0x5, 0xb, 0x4, 0x8, 0x20, 0x7, 0x5}}]}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000ac0)={0xa, 0x6, 0x300, 0x6, 0x99, 0x4, 0x8, 0x8}, 0x28, 0x0}) 2.191499547s ago: executing program 2 (id=25704): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x50, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_ESTABLISHED={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x50}}, 0x0) 2.133339708s ago: executing program 4 (id=25707): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000400)=0x14e1, 0x4) 2.034409261s ago: executing program 4 (id=25709): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) ioctl$TIOCMGET(r0, 0x5415, 0x0) 2.021402781s ago: executing program 2 (id=25710): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xb7) 1.882590805s ago: executing program 2 (id=25712): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000180100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000008740000000c0a95c900000000000000000100000008000440000000000900010073797a300000000038000380340000800400018004000680140007800c000100636f756e7465720004000280140001800c0001"], 0xe4}}, 0x0) 1.835298566s ago: executing program 4 (id=25714): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905880f020000000009050300000000000009050cfeffff01060209050f000000000000090507"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) 1.610038011s ago: executing program 2 (id=25721): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000946000/0x1000)=nil, 0x1000, 0x15) 1.009992626s ago: executing program 1 (id=25734): r0 = fsopen(&(0x7f0000000000)='gadgetfs\x00', 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 919.589618ms ago: executing program 0 (id=25736): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000002c40)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) 829.66247ms ago: executing program 1 (id=25737): socket$inet6(0xa, 0x80803, 0x87) syz_emit_ethernet(0xa2, &(0x7f0000000800)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x6c, 0x2b, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[@hopopts={0x87}], {0x4e21, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x4, "34e540e3dd227ff71fcd0abe58075273e435d14b3a977b28387a1ae7465338d4", "5cb275b40fd4031ec1941ebfaa96d7bf", {"cf0372b8d285ee92d104650b69fd413d", "0667f5c2b37bbd83be6ba638018bb23c"}}}}}}}}, 0x0) 820.598851ms ago: executing program 3 (id=25738): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@xino_off}], [], 0x5c}) 812.632261ms ago: executing program 0 (id=25739): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@newtaction={0x6c, 0x12, 0xbf68af9d17701211, 0x0, 0x0, {0x7}, [{0x4}, {0x54, 0x1, [@m_xt={0x50, 0x0, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x4000040) 673.592584ms ago: executing program 1 (id=25740): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0xf, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0xc001}, 0x4040080) 673.507754ms ago: executing program 0 (id=25741): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x7f, 0x20203843, 0x0, [0x2], [0x800, 0xfffffffe, 0x52], [0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x1]}) 603.955546ms ago: executing program 3 (id=25742): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000180)=@ethtool_sset_info={0x37, 0x9, 0xdffffffffffffffa}}) 562.279907ms ago: executing program 0 (id=25743): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xd001, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x3, @random="99fa3a1c872f"}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x44}}, 0x0) 497.630768ms ago: executing program 1 (id=25744): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x60, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) 484.656559ms ago: executing program 3 (id=25745): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0xa, @pix_mp={0x3, 0x708, 0x33565348, 0x9, 0x1, [{0xa, 0x4}, {0x0, 0x107}, {0x4, 0x9ea9}, {0x6, 0x1}, {0xffffffdf, 0xffffffff}, {0xd, 0x72}, {0xe5a9, 0x5}, {0x3e92, 0x401}], 0x1f, 0x3, 0x7, 0x0, 0x3}}) 392.596851ms ago: executing program 1 (id=25746): r0 = syz_io_uring_setup(0x126b, &(0x7f00000006c0)={0x0, 0x72de}, &(0x7f0000000140), &(0x7f0000000780), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) 321.825193ms ago: executing program 3 (id=25747): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="0200000002000100000000000400020000000000100002000000000020"], 0x24, 0x0) 282.847384ms ago: executing program 1 (id=25748): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./file2\x00', 0x4800, &(0x7f0000000340)=ANY=[], 0x1, 0x6bb, &(0x7f0000000f40)="$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") lremovexattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="757365722e7b400b77bf3e2fdc3a4c5e1e972c06eac101d3e0e2a72ef82e18128ebed77c21b36b3ee585cdecfeed364eb0b3855d199d164dc9f6bbfa7cd889f73e8528c92a7447f314055a42d739ae9797501029f4f66dfdb75327d3fb93333a17da3bc8dbb6a613e1822688b24811dee7467f912fee862c34247eb2dfe8e7ca2b5a"]) 178.949816ms ago: executing program 3 (id=25749): r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0xffffffffffffffff) 146.821897ms ago: executing program 0 (id=25750): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/fscaps', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/41, 0x29, 0x0) 110.448528ms ago: executing program 2 (id=25751): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe) 89.452958ms ago: executing program 3 (id=25752): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa10001, 0x0, '\x00', @value64}}) 84.143169ms ago: executing program 0 (id=25753): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)={0x20, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}]}]}, 0x20}], 0x1, 0x0, 0x0, 0x1}, 0x0) 0s ago: executing program 2 (id=25754): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000640)=[{0x3, 0x3, {0x2, 0x1, 0x2}, {0x1, 0xf0, 0x1}, 0x2, 0x1}], 0x20) kernel console output (not intermixed with test programs): 83][ T3899] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1376.515234][ T3899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1376.563651][ T3899] usb 2-1: config 0 descriptor?? [ 1376.897739][ T3899] usb 2-1: USB disconnect, device number 66 [ 1377.232464][T26991] delete_channel: no stack [ 1377.370908][T27006] netlink: 'syz.0.23217': attribute type 1 has an invalid length. [ 1377.392809][T27006] netlink: 'syz.0.23217': attribute type 2 has an invalid length. [ 1377.413716][T26998] lo speed is unknown, defaulting to 1000 [ 1377.727112][ T3901] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1377.885525][T26998] lo speed is unknown, defaulting to 1000 [ 1377.996959][ T3901] usb 5-1: Using ep0 maxpacket: 8 [ 1378.016002][T27050] program syz.2.23230 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1378.123073][ T3901] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 1378.132063][ T3901] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1378.184523][ T3901] usb 5-1: config 0 has no interface number 0 [ 1378.198100][ T3901] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1378.218727][ T3901] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1378.245013][ T3901] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1378.265850][ T3901] usb 5-1: config 0 interface 52 has no altsetting 0 [ 1378.415125][ T3901] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 1378.438172][ T3901] usb 5-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 1378.470737][ T3901] usb 5-1: Product: syz [ 1378.474995][ T3901] usb 5-1: SerialNumber: syz [ 1378.492752][ T3901] usb 5-1: config 0 descriptor?? [ 1378.593389][ T5580] usb 3-1: new full-speed USB device number 79 using dummy_hcd [ 1378.776058][ T3901] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 1378.803704][ T3901] synaptics_usb: probe of 5-1:0.52 failed with error -5 [ 1378.988912][ T5580] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1379.020526][ T5580] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1379.055053][ T5580] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1379.115360][ T3901] usb 5-1: USB disconnect, device number 79 [ 1379.283443][ T5580] usb 3-1: New USB device found, idVendor=0582, idProduct=0145, bcdDevice= 0.40 [ 1379.298746][ T5580] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1379.322350][ T5580] usb 3-1: Product: syz [ 1379.326630][ T5580] usb 3-1: Manufacturer: syz [ 1379.352419][ T5580] usb 3-1: SerialNumber: syz [ 1379.384617][T27072] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1379.610809][T27149] openvswitch: netlink: IP tunnel dst address not specified [ 1379.643959][T27153] Cannot find del_set index 4 as target [ 1379.791003][ T5580] usb 3-1: MIDIStreaming interface descriptor not found [ 1379.858246][ T5580] usb 3-1: USB disconnect, device number 79 [ 1380.252033][T25375] udevd[25375]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1381.093686][T27273] netlink: 'syz.1.23292': attribute type 10 has an invalid length. [ 1381.168977][T27273] team0: Device hsr_slave_0 failed to register rx_handler [ 1381.233620][ T6194] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1381.305397][T27280] netlink: 264 bytes leftover after parsing attributes in process `syz.2.23294'. [ 1381.350479][T27280] netlink: 264 bytes leftover after parsing attributes in process `syz.2.23294'. [ 1381.398790][T27280] netlink: 175 bytes leftover after parsing attributes in process `syz.2.23294'. [ 1381.511475][ T6194] usb 1-1: Using ep0 maxpacket: 32 [ 1381.517338][T27289] ALSA: mixer_oss: invalid OSS volume ';ʸgԊ8\>Pxi9 h~' [ 1381.563660][T27289] ALSA: mixer_oss: invalid OSS volume ' ȪUBFRнEV#d' [ 1381.647626][T27289] ALSA: mixer_oss: invalid OSS volume 'eQCȡ*qpAڜe T|K' [ 1381.661459][ T6194] usb 1-1: config 0 has an invalid interface number: 179 but max is 0 [ 1381.671112][ T6194] usb 1-1: config 0 has no interface number 0 [ 1381.685470][T27289] ALSA: mixer_oss: invalid OSS volume ':az]qeXfb]݆B.' [ 1381.722294][ T6194] usb 1-1: config 0 interface 179 has no altsetting 0 [ 1381.737899][T27289] ALSA: mixer_oss: invalid OSS volume 'j|q⩃˚[w3^.ג' [ 1381.800080][T27289] ALSA: mixer_oss: invalid OSS volume 'udFdsj@Jug0cd' [ 1381.851808][T27289] ALSA: mixer_oss: invalid OSS volume 'NW֓YZS%fV' [ 1381.915242][T27313] netlink: 'syz.4.23306': attribute type 2 has an invalid length. [ 1381.923373][T27289] ALSA: mixer_oss: invalid OSS volume ''lȿDTBxN' [ 1381.923394][T27289] ALSA: mixer_oss: invalid OSS volume 'y' [ 1381.923436][T27289] ALSA: mixer_oss: invalid OSS volume '5y}9r~M+3' [ 1381.923462][T27289] ALSA: mixer_oss: invalid OSS volume '϶*kC9d7띦2;"' [ 1381.923483][T27289] ALSA: mixer_oss: invalid OSS volume '*ndV8mE5:4' [ 1381.923498][T27289] ALSA: mixer_oss: invalid OSS volume 'PKڵ1} {N&Ia 8*ʇ' [ 1381.923515][T27289] ALSA: mixer_oss: invalid OSS volume 'OC"['m/AO^G&-' [ 1381.923536][T27289] ALSA: mixer_oss: invalid OSS volume '' [ 1381.923556][T27289] ALSA: mixer_oss: invalid OSS volume '@HV-=f#o)U.N' [ 1381.993374][ T6194] usb 1-1: New USB device found, idVendor=0506, idProduct=00df, bcdDevice=1c.d7 [ 1382.002549][ T6194] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1382.026882][ T6194] usb 1-1: Product: syz [ 1382.031184][ T6194] usb 1-1: Manufacturer: syz [ 1382.045900][ T6194] usb 1-1: SerialNumber: syz [ 1382.053721][ T6194] usb 1-1: config 0 descriptor?? [ 1382.131560][T27313] netlink: 'syz.4.23306': attribute type 1 has an invalid length. [ 1382.422724][ T6194] gspca_main: spca501-2.14.0 probing 0506:00df [ 1382.452355][ T6194] gspca_spca501: reg write: error -71 [ 1382.457923][ T6194] spca501 1-1:0.179: Reg write failed for 0x00,0xaa,0x00 [ 1382.484446][T27354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23318'. [ 1382.509301][ T6194] spca501: probe of 1-1:0.179 failed with error -22 [ 1382.557982][ T6194] usb 1-1: USB disconnect, device number 82 [ 1383.027738][T27382] netlink: 'syz.1.23328': attribute type 3 has an invalid length. [ 1383.385767][T27398] loop1: detected capacity change from 0 to 256 [ 1384.125276][T27447] loop4: detected capacity change from 0 to 8 [ 1384.187496][T27447] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1384.234674][T27454] netlink: 'syz.3.23354': attribute type 10 has an invalid length. [ 1384.301275][T27454] team0: Device hsr_slave_0 failed to register rx_handler [ 1384.338547][T27447] cramfs: Error -3 while decompressing! [ 1384.375277][T27447] cramfs: ffffffff9641d088(26)->ffff888055871000(4096) [ 1384.384208][T27447] cramfs: Error -3 while decompressing! [ 1384.395882][T27447] cramfs: ffffffff9641d0a2(26)->ffff888052a49000(4096) [ 1384.414032][T27447] cramfs: Error -3 while decompressing! [ 1384.422438][T27447] cramfs: ffffffff9641d0bc(16)->ffff88805250f000(4096) [ 1384.429781][T27447] cramfs: Error -3 while decompressing! [ 1384.445854][T27447] cramfs: ffffffff9641d088(26)->ffff888055871000(4096) [ 1384.457574][ T26] audit: type=1800 audit(2000525699.906:152): pid=27447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.23351" name="file2" dev="loop4" ino=348 res=0 errno=0 [ 1384.481044][T27456] bridge0: port 1(bridge_slave_0) entered disabled state [ 1384.495215][ T4181] udevd[4181]: incorrect cramfs checksum on /dev/loop4 [ 1384.623779][ T4181] udevd[4181]: incorrect cramfs checksum on /dev/loop4 [ 1384.732593][T27477] netlink: 72 bytes leftover after parsing attributes in process `syz.1.23361'. [ 1385.007477][T27493] netlink: 'syz.3.23365': attribute type 11 has an invalid length. [ 1385.065816][T27493] netlink: 140 bytes leftover after parsing attributes in process `syz.3.23365'. [ 1385.524634][T27528] netlink: 24 bytes leftover after parsing attributes in process `syz.1.23380'. [ 1386.259360][T27573] netlink: 'syz.1.23395': attribute type 9 has an invalid length. [ 1386.267287][T27573] netlink: 'syz.1.23395': attribute type 7 has an invalid length. [ 1386.347812][T27573] netlink: 'syz.1.23395': attribute type 8 has an invalid length. [ 1386.571346][T27592] loop1: detected capacity change from 0 to 64 [ 1387.255841][T27626] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1387.316577][T27635] netlink: 'syz.3.23414': attribute type 3 has an invalid length. [ 1387.323573][T27634] openvswitch: netlink: Actions may not be safe on all matching packets [ 1387.332568][T27626] FAT-fs (loop1): unable to read boot sector [ 1387.570824][T27652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23423'. [ 1387.830474][T27667] program syz.2.23426 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1387.835623][T27673] loop1: detected capacity change from 0 to 256 [ 1387.907051][T27671] lo speed is unknown, defaulting to 1000 [ 1388.515655][T27671] lo speed is unknown, defaulting to 1000 [ 1388.697387][ T6194] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 1389.106795][ T6194] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1389.130686][ T6194] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1389.262463][ T6194] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1389.282303][ T6194] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1389.302911][ T6194] usb 2-1: SerialNumber: syz [ 1389.359721][ T6194] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 1389.368400][ T6194] usb-storage 2-1:1.0: USB Mass Storage device detected [ 1389.400582][ T6194] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1389.444282][ T6194] scsi host1: usb-storage 2-1:1.0 [ 1389.619866][ T3901] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1390.200105][T27807] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 1390.203328][ T3901] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1390.250712][ T3901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1390.306334][ T3901] usb 5-1: Product: syz [ 1390.331741][ T3901] usb 5-1: Manufacturer: syz [ 1390.336522][ T3901] usb 5-1: SerialNumber: syz [ 1390.372282][ T3901] usb 5-1: config 0 descriptor?? [ 1390.429458][ T3901] ch341 5-1:0.0: ch341-uart converter detected [ 1390.662785][ T3901] usb 5-1: failed to receive control message: -71 [ 1390.669308][ T3901] ch341-uart: probe of ttyUSB0 failed with error -71 [ 1390.709858][ T3901] usb 5-1: USB disconnect, device number 80 [ 1390.769614][ T3901] ch341 5-1:0.0: device disconnected [ 1390.856831][ T5580] usb 2-1: USB disconnect, device number 67 [ 1391.229258][ T4233] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1391.251111][T27875] overlayfs: conflicting options: metacopy=on,redirect_dir=off [ 1391.523740][ T4233] usb 4-1: Using ep0 maxpacket: 32 [ 1391.628558][T27897] netlink: 'syz.0.23489': attribute type 1 has an invalid length. [ 1391.649706][T27899] netlink: 'syz.1.23491': attribute type 30 has an invalid length. [ 1391.674210][ T4233] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1391.699641][ T4233] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 1391.724911][T27899] netlink: 32 bytes leftover after parsing attributes in process `syz.1.23491'. [ 1391.738451][ T4233] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 11 [ 1391.780553][ T4233] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 1391.797152][T27899] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 1391.834671][T27899] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 1391.913903][ T4233] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1391.913940][ T4233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1391.913963][ T4233] usb 4-1: SerialNumber: syz [ 1391.945900][T27856] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1391.946001][T27856] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1391.978766][ T4233] hub 4-1:1.0: bad descriptor, ignoring hub [ 1391.978808][ T4233] hub: probe of 4-1:1.0 failed with error -5 [ 1391.989191][ T4233] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 1392.214050][ T4233] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 1392.225813][T27933] overlayfs: missing 'lowerdir' [ 1392.299203][ T4233] usb 4-1: USB disconnect, device number 102 [ 1392.854272][T27990] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1392.916856][T27998] kAFS: unable to lookup cell '.,' [ 1393.046723][ T4233] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1393.249945][ T6194] Bluetooth: hci4: command 0x0405 tx timeout [ 1393.344438][T28034] netlink: 2 bytes leftover after parsing attributes in process `syz.4.23532'. [ 1393.354079][ T4233] usb 1-1: Using ep0 maxpacket: 32 [ 1393.485428][ T4233] usb 1-1: config 1 has an invalid interface number: 236 but max is 0 [ 1393.503703][ T4233] usb 1-1: config 1 has no interface number 0 [ 1393.557651][ T4233] usb 1-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1393.625312][ T4233] usb 1-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 1393.700078][ T4233] usb 1-1: config 1 interface 236 has no altsetting 0 [ 1393.814452][T28055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23542'. [ 1393.823979][ T4233] usb 1-1: config 1 has an invalid interface number: 236 but max is 0 [ 1393.834749][ T4233] usb 1-1: config 1 has no interface number 0 [ 1393.862975][ T4233] usb 1-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1393.897113][ T4233] usb 1-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 1393.932954][ T4233] usb 1-1: config 1 interface 236 has no altsetting 0 [ 1394.176915][ T4233] usb 1-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 1394.204673][ T4233] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1394.245503][ T4233] usb 1-1: Product: syz [ 1394.249771][ T4233] usb 1-1: Manufacturer: syz [ 1394.254397][ T4233] usb 1-1: SerialNumber: syz [ 1394.374029][ T4233] ti_usb_3410_5052 1-1:1.236: TI USB 5052 2 port adapter converter detected [ 1394.665873][ T4233] usb 1-1: USB disconnect, device number 83 [ 1394.764680][T28112] /dev/loop2: Can't open blockdev [ 1394.936762][T28124] netlink: 'syz.1.23565': attribute type 4 has an invalid length. [ 1394.950588][T28124] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.23565'. [ 1395.326368][T28146] loop4: detected capacity change from 0 to 128 [ 1395.481131][T28146] FAT-fs (loop4): Directory bread(block 32) failed [ 1395.490710][T28146] FAT-fs (loop4): Directory bread(block 33) failed [ 1395.501593][T28146] FAT-fs (loop4): Directory bread(block 34) failed [ 1395.513796][T28146] FAT-fs (loop4): Directory bread(block 35) failed [ 1395.538574][T28146] FAT-fs (loop4): Directory bread(block 36) failed [ 1395.571896][T28146] FAT-fs (loop4): Directory bread(block 37) failed [ 1395.584087][T28146] FAT-fs (loop4): Directory bread(block 38) failed [ 1395.611994][T28146] FAT-fs (loop4): Directory bread(block 39) failed [ 1395.638721][T28146] FAT-fs (loop4): Directory bread(block 40) failed [ 1395.659222][T28146] FAT-fs (loop4): Directory bread(block 41) failed [ 1395.663636][T28176] dlm: non-version read from control device 36 [ 1395.983443][T28146] FAT-fs (loop4): Filesystem has been set read-only [ 1397.809571][T28295] AppArmor: change_hat: Invalid input 'hj2wF' [ 1397.827356][T28298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.23625'. [ 1397.858391][T28300] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 1398.377798][T28336] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 1398.701609][ C1] ODEBUG: Out of memory. ODEBUG disabled [ 1398.853669][T28361] ERROR: device name not specified. [ 1398.966765][T28369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23650'. [ 1399.212141][T28377] loop4: detected capacity change from 0 to 4096 [ 1399.397189][T28398] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 1399.790608][T28426] netlink: 'syz.4.23670': attribute type 3 has an invalid length. [ 1399.970619][T28436] netlink: 28 bytes leftover after parsing attributes in process `syz.1.23672'. [ 1400.326169][T28462] netlink: 'syz.1.23684': attribute type 3 has an invalid length. [ 1400.509679][T28473] netlink: 'syz.1.23687': attribute type 21 has an invalid length. [ 1400.958350][T28507] netlink: 'syz.1.23698': attribute type 1 has an invalid length. [ 1401.064760][ T4233] usb 1-1: new full-speed USB device number 84 using dummy_hcd [ 1401.400402][T28469] loop4: detected capacity change from 0 to 32768 [ 1401.420638][T28532] (unnamed net_device) (uninitialized): ARP validating cannot be used with MII monitoring [ 1401.545050][T28469] ERROR: (device loop4): diWrite: ixpxd invalid [ 1401.545050][T28469] [ 1401.588798][ T4233] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1401.604125][T28469] ERROR: (device loop4): remounting filesystem as read-only [ 1401.636470][T28469] ERROR: (device loop4): txCommit: [ 1401.636470][T28469] [ 1401.653649][ T4233] usb 1-1: not running at top speed; connect to a high speed hub [ 1401.738460][ T4233] usb 1-1: config 5 has an invalid interface number: 246 but max is 0 [ 1401.752197][ T4233] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1401.788887][ T4189] imap: ffff88805ca50000: ffffffff ffff0001 00000000 00000000 [ 1401.802260][ T4233] usb 1-1: config 5 has no interface number 0 [ 1401.828444][ T4189] imap: ffff88805ca50010: 00000004 00000002 00000000 00000000 [ 1401.837407][ T4233] usb 1-1: config 5 interface 246 altsetting 4 endpoint 0x3 has invalid maxpacket 255, setting to 64 [ 1401.865349][ T4189] ERROR: (device loop4): diFree: inum = 4, iagno = 0, nextiag = -65535 [ 1401.865349][ T4189] [ 1401.898831][ T4233] usb 1-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1401.952383][ T4233] usb 1-1: config 5 interface 246 has no altsetting 0 [ 1402.188093][ T4233] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 1402.219221][ T4233] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1402.227361][ T4233] usb 1-1: Product: syz [ 1402.251246][ T4233] usb 1-1: Manufacturer: syz [ 1402.272597][ T4233] usb 1-1: SerialNumber: syz [ 1402.708854][ T4233] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1402.729977][ T4233] usb 1-1: USB disconnect, device number 84 [ 1402.732619][ T156] usb 1-1: Failed to submit usb control message: -71 [ 1402.770719][ T156] usb 1-1: unable to send the bmi data to the device: -71 [ 1402.775100][T16553] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1402.809641][ T156] usb 1-1: unable to get target info from device [ 1402.816038][ T156] usb 1-1: could not get target info (-71) [ 1402.830898][T28628] binfmt_misc: register: failed to install interpreter file ./file2 [ 1402.856700][ T156] usb 1-1: could not probe fw (-71) [ 1403.095902][T16553] usb 5-1: Using ep0 maxpacket: 16 [ 1403.245618][T16553] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1403.287536][T16553] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1403.339452][T16553] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1403.417006][T16553] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1403.426728][T16553] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1403.466034][T16553] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1403.519249][T16553] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1403.589155][T16553] usb 5-1: config 0 descriptor?? [ 1403.748034][T16553] rc_core: IR keymap rc-hauppauge not found [ 1403.754022][T16553] Registered IR keymap rc-empty [ 1403.760664][ T5580] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1403.780578][T16553] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1403.842952][T16553] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1403.898386][T16553] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1403.945242][T16553] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input100 [ 1404.015726][T16553] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1404.025927][ T5580] usb 2-1: Using ep0 maxpacket: 16 [ 1404.079592][T16553] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1404.087439][ T26] audit: type=1400 audit(2000525718.268:153): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457C51CCA93031D371D06D2E59E880583300E11E8 pid=28718 comm="syz.3.23767" [ 1404.132809][T16553] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1404.175628][T16553] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1404.182912][ T5580] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1404.204912][ T5580] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1404.218552][T16553] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1404.235700][ T5580] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1404.249278][T28728] netlink: 64 bytes leftover after parsing attributes in process `syz.0.23770'. [ 1404.261076][T16553] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1404.291078][ T5580] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1404.303890][T28728] netlink: 64 bytes leftover after parsing attributes in process `syz.0.23770'. [ 1404.314849][T16553] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1404.347397][T16553] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1404.378770][T16553] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1404.432257][T16553] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1404.486923][T16553] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 1404.517996][ T5580] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 1404.528537][T16553] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1404.548980][ T5580] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1404.589184][ T5580] usb 2-1: Product: syz [ 1404.600581][ T5580] usb 2-1: Manufacturer: syz [ 1404.618203][ T5580] usb 2-1: SerialNumber: syz [ 1404.658968][ T5580] usb 2-1: config 0 descriptor?? [ 1404.753986][T16553] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1404.893964][ T4233] usb 5-1: USB disconnect, device number 81 [ 1404.916980][T28771] netlink: 'syz.2.23783': attribute type 1 has an invalid length. [ 1404.941589][T28771] netlink: 'syz.2.23783': attribute type 2 has an invalid length. [ 1404.956271][T28771] netlink: 132 bytes leftover after parsing attributes in process `syz.2.23783'. [ 1404.960756][ T3899] usb 2-1: USB disconnect, device number 68 [ 1405.063590][T16553] usb 1-1: Using ep0 maxpacket: 16 [ 1405.393715][T28812] netlink: 14 bytes leftover after parsing attributes in process `syz.3.23793'. [ 1405.404481][T28812] device hsr_slave_0 left promiscuous mode [ 1405.412085][T28812] device hsr_slave_1 left promiscuous mode [ 1405.415791][T16553] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1405.427638][T16553] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1405.435760][T16553] usb 1-1: Product: syz [ 1405.440153][T16553] usb 1-1: Manufacturer: syz [ 1405.444833][T16553] usb 1-1: SerialNumber: syz [ 1405.468540][T16553] usb 1-1: config 0 descriptor?? [ 1405.567081][T28824] netlink: 52 bytes leftover after parsing attributes in process `syz.1.23796'. [ 1405.651009][ T4233] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1405.768708][T16553] speedtch 1-1:0.0: speedtch_bind: data interface not found! [ 1405.788288][T16553] speedtch 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1405.933432][ T4233] usb 3-1: Using ep0 maxpacket: 16 [ 1405.939703][ T3899] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 1406.037627][T28645] usb 1-1: USB disconnect, device number 85 [ 1406.068098][ T4233] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1406.078160][ T4233] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1406.124280][ T4233] usb 3-1: config 0 descriptor?? [ 1406.139795][T28879] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1406.188008][ T4233] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1406.207547][T28882] loop4: detected capacity change from 0 to 2048 [ 1406.247248][T28889] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1406.287055][T28882] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 1406.338720][T28882] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1406.346113][ T3899] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1406.421037][ T4233] gspca_sonixj: reg_w1 err -71 [ 1406.425987][ T4233] sonixj: probe of 3-1:0.0 failed with error -71 [ 1406.469756][ T4233] usb 3-1: USB disconnect, device number 80 [ 1406.531577][ T3899] usb 2-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 1406.562431][ T3899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1406.593742][ T3899] usb 2-1: Product: syz [ 1406.606326][ T3899] usb 2-1: Manufacturer: syz [ 1406.617059][ T3899] usb 2-1: SerialNumber: syz [ 1406.639085][ T3899] usb 2-1: config 0 descriptor?? [ 1406.680624][ T3899] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 1406.713683][ T3899] dvb-usb: bulk message failed: -22 (3/0) [ 1406.744743][ T3899] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1406.795178][ T3899] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 1406.838002][ T3899] usb 2-1: media controller created [ 1406.849876][ T3899] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1406.880969][ T3899] dvb-usb: bulk message failed: -22 (6/0) [ 1406.886799][ T3899] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 1406.933821][ T4231] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1406.967773][ T3899] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input101 [ 1407.002831][ T3899] dvb-usb: schedule remote query interval to 150 msecs. [ 1407.018811][ T3899] dvb-usb: bulk message failed: -22 (3/0) [ 1407.083482][ T3899] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 1407.142308][ T3899] usb 2-1: USB disconnect, device number 69 [ 1407.200974][ T4231] usb 4-1: Using ep0 maxpacket: 8 [ 1407.211935][ T3899] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 1407.268390][T28974] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 1407.383169][ T4231] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1407.468487][ T4231] usb 4-1: config 4 has an invalid interface number: 147 but max is 0 [ 1407.489606][ T4231] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1407.514110][ T4231] usb 4-1: config 4 has no interface number 0 [ 1407.767823][ T4231] usb 4-1: string descriptor 0 read error: -22 [ 1407.774215][ T4231] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 1407.787967][T29013] netlink: 'syz.4.23847': attribute type 12 has an invalid length. [ 1407.800712][ T4231] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1407.898505][ T4231] uvcvideo 4-1:4.147: Found multiple Units with ID 6 [ 1407.905585][ T4231] usb 4-1: Found UVC 0.02 device (04f2:b746) [ 1407.952713][ T4231] usb 4-1: No valid video chain found. [ 1408.156928][ T4231] usb 4-1: USB disconnect, device number 103 [ 1408.259463][T29054] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 1408.732220][T29092] netlink: 'syz.1.23873': attribute type 3 has an invalid length. [ 1408.740114][T29092] netlink: 232 bytes leftover after parsing attributes in process `syz.1.23873'. [ 1408.791928][T29102] netlink: 44 bytes leftover after parsing attributes in process `syz.0.23876'. [ 1408.813024][T29102] netlink: 24 bytes leftover after parsing attributes in process `syz.0.23876'. [ 1409.073632][T29121] qrtr: Invalid version 0 [ 1409.094522][T29124] netlink: 'syz.2.23883': attribute type 32 has an invalid length. [ 1409.359899][T29149] netlink: 'syz.3.23894': attribute type 1 has an invalid length. [ 1409.371367][T28645] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1409.412789][T29149] netlink: 'syz.3.23894': attribute type 1 has an invalid length. [ 1409.495533][T29149] netlink: 'syz.3.23894': attribute type 2 has an invalid length. [ 1409.542195][T29149] netlink: 16 bytes leftover after parsing attributes in process `syz.3.23894'. [ 1409.560768][T29162] netlink: 14 bytes leftover after parsing attributes in process `syz.1.23900'. [ 1409.594847][T29162] device hsr_slave_0 left promiscuous mode [ 1409.638663][T29162] device hsr_slave_1 left promiscuous mode [ 1409.811230][T28645] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1409.842061][T28645] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1409.851788][T28645] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1409.913297][T28645] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1409.945563][T28645] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1409.967926][T28645] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1409.991055][T28645] usb 5-1: config 0 descriptor?? [ 1410.091117][T29204] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1410.183786][T16553] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1410.318877][T28645] hdpvr 5-1:0.0: firmware version 0x0 dated [ 1410.326229][T28645] hdpvr 5-1:0.0: untested firmware, the driver might not work. [ 1410.386155][T29227] netlink: 14 bytes leftover after parsing attributes in process `syz.2.23920'. [ 1410.397230][T29227] device hsr_slave_0 left promiscuous mode [ 1410.417879][T29227] device hsr_slave_1 left promiscuous mode [ 1410.493029][T29230] netlink: 'syz.3.23921': attribute type 5 has an invalid length. [ 1410.543395][T28645] hdpvr 5-1:0.0: device init failed [ 1410.549303][T28645] hdpvr: probe of 5-1:0.0 failed with error -12 [ 1410.580954][T28645] usb 5-1: USB disconnect, device number 82 [ 1410.782692][T16553] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1410.782728][T16553] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1410.782751][T16553] usb 1-1: Product: syz [ 1410.782767][T16553] usb 1-1: Manufacturer: syz [ 1410.782784][T16553] usb 1-1: SerialNumber: syz [ 1410.784685][T16553] usb 1-1: config 0 descriptor?? [ 1410.974806][ T3899] usb 3-1: new full-speed USB device number 81 using dummy_hcd [ 1410.985715][ T4231] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1411.060498][T16553] usb 1-1: atusb_control_msg: req 0x10 val 0x0 idx 0x0, error -71 [ 1411.071146][T16553] usb 1-1: Firmware version (0.0) predates our first public release. [ 1411.101134][T16553] usb 1-1: Please update to version 0.2 or newer [ 1411.156752][T16553] usb 1-1: atusb_probe: initialization failed, error = -71 [ 1411.165471][T16553] atusb: probe of 1-1:0.0 failed with error -71 [ 1411.202871][T16553] usb 1-1: USB disconnect, device number 86 [ 1411.247645][ T4231] usb 2-1: Using ep0 maxpacket: 32 [ 1411.365886][ T3899] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1411.392005][ T4231] usb 2-1: config 9 has an invalid interface number: 79 but max is 1 [ 1411.400161][ T4231] usb 2-1: config 9 has no interface number 1 [ 1411.416016][ T4231] usb 2-1: config 9 interface 0 has no altsetting 0 [ 1411.435814][T29316] netlink: 'syz.4.23944': attribute type 1 has an invalid length. [ 1411.552449][ T3899] usb 3-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 1411.561550][ T3899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1411.581857][ T3899] usb 3-1: Product: syz [ 1411.587170][ T3899] usb 3-1: Manufacturer: syz [ 1411.592167][ T3899] usb 3-1: SerialNumber: syz [ 1411.605324][ T3899] usb 3-1: config 0 descriptor?? [ 1411.610729][ T4231] usb 2-1: New USB device found, idVendor=1199, idProduct=9001, bcdDevice=bb.c9 [ 1411.681787][ T4231] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1411.696321][ T4231] usb 2-1: Product: syz [ 1411.700555][ T4231] usb 2-1: Manufacturer: syz [ 1411.705784][ T4231] usb 2-1: SerialNumber: syz [ 1411.734588][ T3899] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 1411.768114][ T3899] dvb-usb: bulk message failed: -22 (3/0) [ 1411.810151][ T3899] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1411.833236][ T3899] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 1411.870731][ T3899] usb 3-1: media controller created [ 1411.878660][ T3899] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1411.919210][ T3899] dvb-usb: bulk message failed: -22 (6/0) [ 1411.925050][ T3899] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 1411.982597][ T3899] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input102 [ 1412.018711][ T3899] dvb-usb: schedule remote query interval to 150 msecs. [ 1412.032286][ T3899] dvb-usb: bulk message failed: -22 (3/0) [ 1412.067578][ T4231] hub 2-1:9.0: Invalid hub with more than one config or interface [ 1412.080747][ T3899] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 1412.110529][ T4231] hub: probe of 2-1:9.0 failed with error -22 [ 1412.131854][ T3899] usb 3-1: USB disconnect, device number 81 [ 1412.173151][ T3899] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 1412.184614][ T4231] hub 2-1:9.79: Invalid hub with more than one config or interface [ 1412.201427][ T4231] hub: probe of 2-1:9.79 failed with error -22 [ 1412.209488][ T4231] usb 2-1: unknown number of interfaces: 2 [ 1412.264757][ T4231] usb 2-1: USB disconnect, device number 70 [ 1412.459994][T29402] netlink: 'syz.0.23964': attribute type 27 has an invalid length. [ 1412.475515][T29402] netlink: 'syz.0.23964': attribute type 3 has an invalid length. [ 1412.887015][T29434] tmpfs: Bad value for 'mpol' [ 1412.896379][T29435] loop4: detected capacity change from 0 to 512 [ 1412.929490][T29438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.23977'. [ 1412.961013][T29438] netlink: 17 bytes leftover after parsing attributes in process `syz.1.23977'. [ 1413.023708][T29435] EXT4-fs (loop4): Ignoring removed bh option [ 1413.036109][T29435] EXT4-fs (loop4): inline encryption not supported [ 1413.043404][T29447] netlink: 104 bytes leftover after parsing attributes in process `syz.0.23980'. [ 1413.053852][T29435] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1413.063515][T29447] netlink: 104 bytes leftover after parsing attributes in process `syz.0.23980'. [ 1413.073624][T29447] netlink: 81 bytes leftover after parsing attributes in process `syz.0.23980'. [ 1413.129284][T29435] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1413.144999][T16553] usb 3-1: new full-speed USB device number 82 using dummy_hcd [ 1413.192209][T29435] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.23976: bg 0: block 248: padding at end of block bitmap is not set [ 1413.284725][T29435] Quota error (device loop4): write_blk: dquota write failed [ 1413.303156][T29435] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 1413.326847][T29435] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.23976: Failed to acquire dquot type 1 [ 1413.355627][T29470] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23988'. [ 1413.374032][T29435] EXT4-fs (loop4): 1 truncate cleaned up [ 1413.386399][T29470] device vlan0 entered promiscuous mode [ 1413.416339][T29435] EXT4-fs (loop4): mounted filesystem without journal. Opts: bh,inlinecrypt,nombcache,,errors=continue. Quota mode: writeback. [ 1413.654695][ T9018] Quota error (device loop4): remove_tree: Getting block too big (0 >= 6) [ 1413.670730][ T9018] EXT4-fs error (device loop4): ext4_release_dquot:6272: comm kworker/u4:8: Failed to release dquot type 1 [ 1413.783799][T16553] usb 3-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 1413.808558][T16553] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1413.835618][T16553] usb 3-1: Product: syz [ 1413.843899][T16553] usb 3-1: Manufacturer: syz [ 1413.854677][T16553] usb 3-1: SerialNumber: syz [ 1413.885227][T16553] usb 3-1: config 0 descriptor?? [ 1413.897215][T29502] loop1: detected capacity change from 0 to 1024 [ 1413.926428][T29502] EXT4-fs (loop1): Ignoring removed bh option [ 1413.995495][T29502] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,dioread_lock,barrier=0x0000000000000404,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,i_version,bh,init_itable,. Quota mode: none. [ 1414.182018][T16553] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 1414.190366][T16553] peak_usb 3-1:0.0: unable to read PCAN-Chip USB firmware info (err -71) [ 1414.279215][T16553] peak_usb: probe of 3-1:0.0 failed with error -71 [ 1414.294715][T16553] usb 3-1: USB disconnect, device number 82 [ 1414.677966][T28645] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 1414.857919][T29566] netlink: 'syz.0.24013': attribute type 1 has an invalid length. [ 1415.165791][T28645] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1415.390385][T28645] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 1415.400551][T29603] [U] v3f"S/4:XTzWtlW= [ 1415.421265][T28645] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.428506][T29603] [U] J"e:" [ 1415.438302][T28645] usb 2-1: Product: syz [ 1415.453624][T28645] usb 2-1: Manufacturer: syz [ 1415.470618][T28645] usb 2-1: SerialNumber: syz [ 1415.493324][T28645] usb 2-1: config 0 descriptor?? [ 1415.563110][T28645] powermate: probe of 2-1:0.0 failed with error -5 [ 1415.731599][T29628] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24033'. [ 1415.800063][T16553] usb 2-1: USB disconnect, device number 71 [ 1415.839774][T28645] usb 4-1: new full-speed USB device number 104 using dummy_hcd [ 1416.262644][T28645] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1416.309810][T29673] xt_l2tp: v2 sid > 0xffff: 4294967295 [ 1416.438706][T29681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24053'. [ 1416.476752][T29684] netlink: 11 bytes leftover after parsing attributes in process `syz.1.24054'. [ 1416.512736][T28645] usb 4-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 1416.531808][T28645] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1416.572588][T28645] usb 4-1: Product: syz [ 1416.587291][T28645] usb 4-1: Manufacturer: syz [ 1416.591979][T28645] usb 4-1: SerialNumber: syz [ 1416.651990][T28645] usb 4-1: config 0 descriptor?? [ 1416.717622][T28645] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 1416.756640][T29708] netlink: 48 bytes leftover after parsing attributes in process `syz.0.24061'. [ 1416.757356][T29709] loop1: detected capacity change from 0 to 256 [ 1416.766320][T28645] dvb-usb: bulk message failed: -22 (3/0) [ 1416.846120][T28645] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1416.872131][T29709] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 1416.887523][T28645] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 1416.929408][T28645] usb 4-1: media controller created [ 1416.945616][T28645] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1417.000905][T28645] dvb-usb: bulk message failed: -22 (6/0) [ 1417.018594][T28645] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 1417.107350][T28645] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input103 [ 1417.158044][T28645] dvb-usb: schedule remote query interval to 150 msecs. [ 1417.207433][T28645] dvb-usb: bulk message failed: -22 (3/0) [ 1417.250186][T28645] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 1417.336036][T28645] usb 4-1: USB disconnect, device number 104 [ 1417.389162][T16553] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1417.437474][T28645] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 1417.464107][T29771] netlink: 'syz.2.24078': attribute type 1 has an invalid length. [ 1417.489690][T29771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24078'. [ 1417.681636][T16553] usb 5-1: Using ep0 maxpacket: 16 [ 1417.998773][T16553] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1418.007881][T16553] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1418.055956][T16553] usb 5-1: Product: syz [ 1418.060360][T16553] usb 5-1: Manufacturer: syz [ 1418.104598][T16553] usb 5-1: SerialNumber: syz [ 1418.127385][T16553] usb 5-1: config 0 descriptor?? [ 1418.133967][T29823] netlink: 132 bytes leftover after parsing attributes in process `syz.3.24096'. [ 1418.181915][T16553] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 1418.321437][ T26] audit: type=1326 audit(2000525731.588:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29835 comm="syz.3.24100" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff489471e99 code=0x0 [ 1418.426347][T16553] usb 5-1: clie_3_5_startup: get config number bad return length: 0 [ 1418.434837][T16553] visor: probe of 5-1:0.0 failed with error -5 [ 1418.684812][ T4231] usb 5-1: USB disconnect, device number 83 [ 1418.948715][T29887] loop1: detected capacity change from 0 to 512 [ 1419.065241][T29895] netlink: 4 bytes leftover after parsing attributes in process `syz.0.24119'. [ 1419.114351][T29887] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000003,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 1419.184044][T29887] ext4 filesystem being mounted at /4844/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1419.651039][T29941] loop1: detected capacity change from 0 to 256 [ 1419.657760][T29939] netlink: 'syz.2.24133': attribute type 1 has an invalid length. [ 1419.700625][T29939] netlink: 224 bytes leftover after parsing attributes in process `syz.2.24133'. [ 1419.785176][T29941] exfat: Deprecated parameter 'namecase' [ 1419.790915][T29941] exfat: Deprecated parameter 'namecase' [ 1419.835974][T29941] exfat: Deprecated parameter 'utf8' [ 1419.906576][T29941] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d) [ 1420.350738][T29993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24151'. [ 1420.734102][T30026] ceph: No path or : separator in source [ 1420.872358][T30038] netlink: 'syz.2.24167': attribute type 1 has an invalid length. [ 1420.927750][T30041] netlink: 12 bytes leftover after parsing attributes in process `syz.1.24169'. [ 1420.962204][T30046] netlink: 64 bytes leftover after parsing attributes in process `syz.3.24168'. [ 1421.129463][T30053] nvme_fabrics: missing parameter 'transport=%s' [ 1421.158099][T30053] nvme_fabrics: missing parameter 'nqn=%s' [ 1421.415555][T16553] usb 5-1: new low-speed USB device number 84 using dummy_hcd [ 1421.744701][T30104] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1421.843001][T30112] openvswitch: netlink: Actions may not be safe on all matching packets [ 1421.858094][T16553] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1421.900484][T16553] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1421.909494][T16553] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 1421.975357][T30117] usb usb8: usbfs: process 30117 (syz.0.24195) did not claim interface 0 before use [ 1422.008401][T16553] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1422.050034][T16553] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1422.136175][T30060] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1422.180368][T16553] hub 5-1:1.0: bad descriptor, ignoring hub [ 1422.186422][T16553] hub: probe of 5-1:1.0 failed with error -5 [ 1422.216844][T16553] cdc_wdm 5-1:1.0: skipping garbage [ 1422.232090][T16553] cdc_wdm 5-1:1.0: skipping garbage [ 1422.240772][T30142] netlink: 12 bytes leftover after parsing attributes in process `syz.3.24204'. [ 1422.282297][T16553] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1422.536846][T16553] cdc_wdm 5-1:1.0: Unknown control protocol [ 1422.592440][T16553] usb 5-1: USB disconnect, device number 84 [ 1422.600061][T30167] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1422.639702][T30167] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1422.714238][ T3899] usb 4-1: new full-speed USB device number 105 using dummy_hcd [ 1423.108975][ T3899] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1423.141667][ T3899] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1423.283901][T30224] netlink: 'syz.2.24229': attribute type 12 has an invalid length. [ 1423.311939][ T3899] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1423.321149][ T3899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1423.370181][ T3899] usb 4-1: Product: syz [ 1423.391790][ T3899] usb 4-1: Manufacturer: syz [ 1423.396491][ T3899] usb 4-1: SerialNumber: syz [ 1423.556721][T30244] netlink: 132 bytes leftover after parsing attributes in process `syz.4.24234'. [ 1423.634488][T30247] device gtp2 entered promiscuous mode [ 1423.734427][T30259] netlink: 68 bytes leftover after parsing attributes in process `syz.1.24240'. [ 1423.862565][T30262] loop4: detected capacity change from 0 to 4096 [ 1423.878703][ T3901] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1423.888814][T30262] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 1423.964074][ T3899] usb 4-1: cannot find UAC_HEADER [ 1423.995047][T30262] ntfs: volume version 3.1. [ 1424.014006][ T3899] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 1424.061058][ T3899] usb 4-1: USB disconnect, device number 105 [ 1424.072597][ T4181] udevd[4181]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1424.284833][ T3901] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1424.305468][ T3901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1424.346967][ T3901] usb 3-1: config 0 descriptor?? [ 1424.561186][T30323] netlink: 4 bytes leftover after parsing attributes in process `syz.4.24257'. [ 1424.633026][T30331] tmpfs: Bad value for 'mpol' [ 1424.669511][ T3901] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 1424.678174][ T3901] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1424.723454][ T3901] [drm:udl_init] *ERROR* Selecting channel failed [ 1424.800610][ T3901] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 1424.823630][T30349] set match dimension is over the limit! [ 1424.835700][ T3901] [drm] Initialized udl on minor 2 [ 1424.879689][ T3901] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1424.909475][ T3901] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1424.958382][ T3901] usb 3-1: USB disconnect, device number 83 [ 1424.996204][ T4231] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 1425.022179][ T3899] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1425.072974][ T4231] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 1425.117524][ T4231] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1425.289751][ T3899] usb 4-1: Using ep0 maxpacket: 16 [ 1425.429991][ T3899] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1425.451563][ T3899] usb 4-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 1425.492645][ T3899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1425.514167][ T4231] usb 5-1: new full-speed USB device number 85 using dummy_hcd [ 1425.682463][ T4717] udevd[4717]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1425.875205][ T3899] usb 4-1: USB disconnect, device number 106 [ 1425.901542][ T4231] usb 5-1: config 0 has an invalid interface number: 147 but max is 0 [ 1425.925033][ T4231] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1425.978829][ T4231] usb 5-1: config 0 has no interface number 0 [ 1426.004076][ T4231] usb 5-1: config 0 interface 147 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 1426.035472][ T4231] usb 5-1: config 0 interface 147 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1426.068517][ T4231] usb 5-1: config 0 interface 147 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1426.148221][ T26] audit: type=1107 audit(2000525738.903:155): pid=30469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='P' [ 1426.273245][ T4231] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.03 [ 1426.294447][T16553] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1426.311424][ T4231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1426.341886][ T4231] usb 5-1: Product: syz [ 1426.346211][ T4231] usb 5-1: Manufacturer: syz [ 1426.362129][ T4231] usb 5-1: SerialNumber: syz [ 1426.374434][ T4231] usb 5-1: config 0 descriptor?? [ 1426.413426][T30381] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1426.461512][ T4231] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1426.594040][T16553] usb 2-1: Using ep0 maxpacket: 16 [ 1426.665733][ T4231] usb 5-1: USB disconnect, device number 85 [ 1426.680322][ T9] usb 5-1: Failed to submit usb control message: -71 [ 1426.688038][ T9] usb 5-1: unable to send the bmi data to the device: -71 [ 1426.715441][ T9] usb 5-1: unable to get target info from device [ 1426.766457][ T9] usb 5-1: could not get target info (-71) [ 1426.772587][ T9] usb 5-1: could not probe fw (-71) [ 1426.792385][T16553] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1426.925388][T16553] usb 2-1: config 0 has an invalid interface number: 237 but max is 0 [ 1426.967977][T16553] usb 2-1: config 0 has no interface number 0 [ 1426.989480][T16553] usb 2-1: config 0 interface 237 altsetting 93 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1427.041417][T16553] usb 2-1: config 0 interface 237 altsetting 93 bulk endpoint 0x83 has invalid maxpacket 0 [ 1427.084340][T16553] usb 2-1: config 0 interface 237 has no altsetting 0 [ 1427.310182][T16553] usb 2-1: New USB device found, idVendor=045e, idProduct=0445, bcdDevice=87.ed [ 1427.340824][T16553] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1427.364504][T30552] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 1427.384785][T16553] usb 2-1: Product: syz [ 1427.410037][T16553] usb 2-1: Manufacturer: syz [ 1427.447203][T16553] usb 2-1: SerialNumber: syz [ 1427.473668][T16553] usb 2-1: config 0 descriptor?? [ 1427.644079][T30578] netlink: 'syz.2.24330': attribute type 1 has an invalid length. [ 1427.793161][T30595] netlink: 12 bytes leftover after parsing attributes in process `syz.3.24335'. [ 1427.824090][T16553] ipaq 2-1:0.237: PocketPC PDA converter detected [ 1427.830785][T16553] usb 2-1: active config #0 != 1 ?? [ 1427.847721][T30596] openvswitch: netlink: Message has 4 unknown bytes. [ 1427.925202][T16553] usb 2-1: USB disconnect, device number 72 [ 1428.608735][T30657] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 1428.686923][ T264] block nbd0: Attempted send on invalid socket [ 1428.693291][ T264] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1429.004562][T30688] netlink: 32 bytes leftover after parsing attributes in process `syz.2.24368'. [ 1429.058041][T30688] netlink: 32 bytes leftover after parsing attributes in process `syz.2.24368'. [ 1429.092254][T30688] netlink: 20 bytes leftover after parsing attributes in process `syz.2.24368'. [ 1429.092254][T30699] netlink: 'syz.1.24372': attribute type 2 has an invalid length. [ 1429.341324][T16553] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1429.366397][T30731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.24381'. [ 1429.421425][T30731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1429.443309][T28643] usb 5-1: new low-speed USB device number 86 using dummy_hcd [ 1429.619345][T16553] usb 1-1: Using ep0 maxpacket: 32 [ 1429.830022][T16553] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1429.927191][T28643] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1429.958081][T16553] usb 1-1: config 3 has an invalid interface number: 223 but max is 1 [ 1429.967071][T16553] usb 1-1: config 3 has an invalid interface number: 25 but max is 1 [ 1429.993537][T16553] usb 1-1: config 3 has an invalid interface number: 223 but max is 1 [ 1430.023465][T16553] usb 1-1: config 3 has no interface number 0 [ 1430.041039][T16553] usb 1-1: config 3 has no interface number 1 [ 1430.066143][T16553] usb 1-1: config 3 interface 25 altsetting 6 has an invalid endpoint with address 0x80, skipping [ 1430.090523][T28643] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1430.121701][T16553] usb 1-1: too many endpoints for config 3 interface 223 altsetting 155: 82, using maximum allowed: 30 [ 1430.133495][T28643] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8, setting to 0 [ 1430.145856][T16553] usb 1-1: config 3 interface 223 altsetting 155 has 0 endpoint descriptors, different from the interface descriptor's value: 82 [ 1430.159662][T28643] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1430.219429][T16553] usb 1-1: config 3 interface 223 has no altsetting 1 [ 1430.227438][T16553] usb 1-1: config 3 interface 25 has no altsetting 0 [ 1430.439937][T30806] netlink: 16 bytes leftover after parsing attributes in process `syz.3.24408'. [ 1430.464252][T16553] usb 1-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=2a.c0 [ 1430.482406][T16553] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1430.491318][T16553] usb 1-1: Product: syz [ 1430.496277][T16553] usb 1-1: Manufacturer: syz [ 1430.506825][T30809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24410'. [ 1430.513306][T16553] usb 1-1: SerialNumber: syz [ 1430.538853][T28643] usb 5-1: string descriptor 0 read error: -22 [ 1430.564087][T28643] usb 5-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 1430.617052][T28643] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1430.734230][T28643] usb 5-1: low speed audio streaming not supported [ 1430.801744][T28643] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 1430.941558][ T4342] udevd[4342]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1430.964026][T16553] usb 1-1: USB disconnect, device number 87 [ 1431.097915][T28643] usb 5-1: USB disconnect, device number 86 [ 1431.193365][ T3901] usb 3-1: new low-speed USB device number 84 using dummy_hcd [ 1431.452892][T30900] netlink: 'syz.1.24433': attribute type 10 has an invalid length. [ 1431.488273][T30900] openvswitch: netlink: Flow key attr not present in new flow. [ 1431.629435][ T3901] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1431.651340][ T3901] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1431.679592][ T3901] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 1431.725679][ T3901] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1431.769240][ T3901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1431.821719][T30849] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1431.844070][ T3901] hub 3-1:1.0: bad descriptor, ignoring hub [ 1431.844103][ T3901] hub: probe of 3-1:1.0 failed with error -5 [ 1431.844554][ T3901] cdc_wdm 3-1:1.0: skipping garbage [ 1431.844571][ T3901] cdc_wdm 3-1:1.0: skipping garbage [ 1431.851405][ T3901] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1431.851432][ T3901] cdc_wdm 3-1:1.0: Unknown control protocol [ 1432.035379][T28643] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1432.078310][T16553] usb 1-1: new full-speed USB device number 88 using dummy_hcd [ 1432.089022][ T3901] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1432.196010][ T3899] usb 3-1: USB disconnect, device number 84 [ 1432.324197][T28643] usb 5-1: Using ep0 maxpacket: 8 [ 1432.334871][ T4231] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1432.463052][T28643] usb 5-1: config 3 has an invalid interface number: 45 but max is 0 [ 1432.471448][T28643] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1432.473711][ T3901] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1432.482260][T28643] usb 5-1: config 3 has no interface number 0 [ 1432.498352][T16553] usb 1-1: config index 0 descriptor too short (expected 2075, got 27) [ 1432.498886][ T3901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1432.506708][T16553] usb 1-1: config 0 has an invalid interface number: 200 but max is 0 [ 1432.506738][T16553] usb 1-1: config 0 has no interface number 0 [ 1432.506853][T16553] usb 1-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid maxpacket 12408, setting to 64 [ 1432.506884][T16553] usb 1-1: config 0 interface 200 has no altsetting 0 [ 1432.507001][T28643] usb 5-1: config 3 interface 45 altsetting 2 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1432.527832][ T3901] usb 4-1: config 0 descriptor?? [ 1432.538362][T28643] usb 5-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1432.577583][T28643] usb 5-1: config 3 interface 45 has no altsetting 0 [ 1432.591347][ T4231] usb 2-1: Using ep0 maxpacket: 32 [ 1432.720214][T16553] usb 1-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 1432.720775][ T4231] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1432.740531][T16553] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1432.740562][T16553] usb 1-1: Product: syz [ 1432.740578][T16553] usb 1-1: Manufacturer: syz [ 1432.740592][T16553] usb 1-1: SerialNumber: syz [ 1432.764892][T16553] usb 1-1: config 0 descriptor?? [ 1432.779702][T28643] usb 5-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 1432.781166][ T4231] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1432.793917][T28643] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1432.799865][ T4231] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1432.816725][T28643] usb 5-1: Product: syz [ 1432.821479][ T4231] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1432.830001][T28643] usb 5-1: Manufacturer: syz [ 1432.834738][T28643] usb 5-1: SerialNumber: syz [ 1432.864094][ T4231] usb 2-1: config 0 descriptor?? [ 1432.869557][ T3901] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 1432.878626][ T3901] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1432.933445][ T3901] [drm:udl_init] *ERROR* Selecting channel failed [ 1432.944631][ T4231] hub 2-1:0.0: USB hub found [ 1432.982947][ T3901] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 1432.991656][ T3901] [drm] Initialized udl on minor 2 [ 1433.018931][ T3901] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1433.036342][ T3901] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1433.053099][ T3901] usb 4-1: USB disconnect, device number 107 [ 1433.061601][ T3899] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 1433.109871][T30985] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1433.115795][ T3899] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 1433.120829][T16553] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.200/input/input105 [ 1433.180045][ T4231] hub 2-1:0.0: 1 port detected [ 1433.191405][T16553] usb 1-1: USB disconnect, device number 88 [ 1433.210327][ T3899] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1433.294547][T31037] netlink: 'syz.2.24454': attribute type 1 has an invalid length. [ 1433.385091][T28643] usb 5-1: USB disconnect, device number 87 [ 1433.414584][ T4231] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 1433.421078][ T4231] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 1433.543079][ T4231] usbhid 2-1:0.0: can't add hid device: -71 [ 1433.549592][ T4231] usbhid: probe of 2-1:0.0 failed with error -71 [ 1433.599417][ T4231] usb 2-1: USB disconnect, device number 73 [ 1433.619954][ T4718] udevd[4718]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1433.671102][ T5229] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1433.722362][T31073] netlink: 32 bytes leftover after parsing attributes in process `syz.0.24459'. [ 1433.738052][T31073] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1434.159628][ T5229] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1434.179564][T31104] netdevsim netdevsim3: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 1434.215626][ T5229] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1434.254909][ T5229] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1434.287561][ T5229] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1434.333780][ T5229] usb 3-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c [ 1434.342888][ T5229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1434.409957][ T5229] usb 3-1: config 0 descriptor?? [ 1434.454980][ T5229] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input106 [ 1434.736866][ T5229] usb 3-1: USB disconnect, device number 85 [ 1434.783175][ T5229] appletouch 3-1:0.0: input: appletouch disconnected [ 1435.008454][T31181] tmpfs: Bad value for 'mpol' [ 1435.082240][ T4231] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1435.359241][T31197] netlink: 12 bytes leftover after parsing attributes in process `syz.2.24497'. [ 1435.519289][T31136] loop1: detected capacity change from 0 to 32768 [ 1435.593102][T31136] (syz.1.24479,31136,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1435.607442][ T4231] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1435.632224][ T4231] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1435.674019][ T4231] usb 5-1: Product: syz [ 1435.678333][ T4231] usb 5-1: SerialNumber: syz [ 1435.685266][T31136] (syz.1.24479,31136,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1435.722527][ T4231] usb 5-1: config 0 descriptor?? [ 1435.819549][T31136] JBD2: Ignoring recovery information on journal [ 1436.044471][ T4231] hso 5-1:0.0: Can't find BULK IN endpoint [ 1436.077280][T31136] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1436.148808][T31236] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 1436.193413][T31236] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 1436.269988][T16553] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1436.304349][ T4231] usb 5-1: USB disconnect, device number 88 [ 1436.397702][ T4187] ocfs2: Unmounting device (7,1) on (node local) [ 1436.557440][T16553] usb 1-1: Using ep0 maxpacket: 32 [ 1436.694318][ T3901] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1436.707388][T16553] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1436.831429][T31273] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1436.899927][T16553] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1436.953175][ T3901] usb 4-1: Using ep0 maxpacket: 8 [ 1436.974395][T16553] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1436.982708][T16553] usb 1-1: Product: syz [ 1437.037358][T16553] usb 1-1: Manufacturer: syz [ 1437.059820][T16553] usb 1-1: SerialNumber: syz [ 1437.084082][ T3901] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 1437.088775][T16553] usb 1-1: config 0 descriptor?? [ 1437.100729][ T3901] usb 4-1: config 0 has no interface number 0 [ 1437.126615][ T3901] usb 4-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1437.175937][ T3901] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 1437.184934][T16553] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1437.207359][ T3901] usb 4-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x9A, skipping [ 1437.263653][ T3901] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1437.466393][ T3901] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1437.496575][ T3901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1437.518219][ T3901] usb 4-1: Product: syz [ 1437.522793][ T3901] usb 4-1: Manufacturer: syz [ 1437.527521][ T3901] usb 4-1: SerialNumber: syz [ 1437.538981][T31357] netlink: 9 bytes leftover after parsing attributes in process `syz.2.24536'. [ 1437.550706][ T3901] usb 4-1: config 0 descriptor?? [ 1437.583927][ T4231] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1437.596070][ T3901] iowarrior 4-1:0.186: no interrupt-in endpoint found [ 1437.622654][T31362] binder: 31361:31362 ioctl c018620c 2000000025c0 returned -22 [ 1437.658731][T16553] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 1437.676650][T16553] gspca_pac7302: probe of 1-1:0.0 failed with error -71 [ 1437.678553][T31366] netlink: 'syz.2.24538': attribute type 4 has an invalid length. [ 1437.713198][T16553] usb 1-1: USB disconnect, device number 89 [ 1437.728064][T31366] netlink: 152 bytes leftover after parsing attributes in process `syz.2.24538'. [ 1437.764511][T31366] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1437.879484][ T4231] usb 2-1: Using ep0 maxpacket: 8 [ 1438.032930][ T4231] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1438.127824][ T26] audit: type=1326 audit(2000525750.099:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31393 comm="syz.4.24546" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e31b46e99 code=0x0 [ 1438.152509][T31397] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1438.215023][ T4231] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1438.234561][ T4231] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1438.254312][ T4231] usb 2-1: Product: syz [ 1438.265115][ T4231] usb 2-1: Manufacturer: syz [ 1438.276091][ T4231] usb 2-1: SerialNumber: syz [ 1438.491691][T31419] netlink: 236 bytes leftover after parsing attributes in process `syz.0.24553'. [ 1438.558111][ T4231] usb 2-1: Handspring Visor / Palm OS: No valid connect info available [ 1438.586706][ T4231] usb 2-1: Handspring Visor / Palm OS: port 231, is for unknown use [ 1438.613886][ T4231] usb 2-1: Handspring Visor / Palm OS: port 193, is for Debugger use [ 1438.635103][ T4231] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1438.791939][ T4231] usb 2-1: palm_os_3_probe - error -71 getting bytes available request [ 1438.818523][ T4231] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 1438.858690][ T4231] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1438.915318][ T4231] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1438.950691][ T4231] usb 2-1: USB disconnect, device number 74 [ 1438.978237][ T4231] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1439.036445][ T4231] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1439.056857][ T4231] visor 2-1:1.0: device disconnected [ 1439.438331][T31500] tmpfs: Bad value for 'mpol' [ 1439.605822][ T3901] usb 4-1: USB disconnect, device number 108 [ 1439.788050][T31534] netlink: 52 bytes leftover after parsing attributes in process `syz.1.24586'. [ 1439.863804][T31542] netlink: 'syz.2.24589': attribute type 3 has an invalid length. [ 1439.892001][T31541] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.24590'. [ 1439.925135][T31541] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1439.934890][T31542] netlink: 'syz.2.24589': attribute type 3 has an invalid length. [ 1440.612911][T31624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.24619'. [ 1441.186468][T16553] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1441.389903][T28643] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1441.635759][T16553] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 1441.661036][T16553] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1441.671890][T28643] usb 1-1: Using ep0 maxpacket: 16 [ 1441.736891][T16553] usb 4-1: config 0 has no interface number 0 [ 1441.770773][T16553] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 255 [ 1441.830176][T16553] usb 4-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1441.860220][T28643] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1441.936372][T31740] ipt_REJECT: ECHOREPLY no longer supported. [ 1442.127852][T16553] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1442.148778][T28643] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1442.167318][T28643] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1442.176699][T16553] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1442.212714][T28643] usb 1-1: Product: syz [ 1442.219816][T16553] usb 4-1: Product: syz [ 1442.234038][T28643] usb 1-1: Manufacturer: syz [ 1442.238707][T28643] usb 1-1: SerialNumber: syz [ 1442.243483][T16553] usb 4-1: Manufacturer: syz [ 1442.266263][T16553] usb 4-1: SerialNumber: syz [ 1442.297230][T16553] usb 4-1: config 0 descriptor?? [ 1442.330794][T31653] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1442.352985][T16553] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1442.355181][T31760] program syz.4.24664 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1442.378679][T16553] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 1442.407094][T16553] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1442.614785][T31778] CIFS: VFS: Malformed UNC in devname [ 1442.662506][T16553] usb 4-1: USB disconnect, device number 109 [ 1442.673091][T28643] usb 1-1: 1:1 : bogus bTerminalLink 8 [ 1442.694003][T28643] usb 1-1: unit 0 not found! [ 1442.698676][T28643] usb 1-1: unit 4 not found! [ 1442.706952][T16553] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1442.718722][T31780] SET target dimension over the limit! [ 1442.739269][T28643] usb 1-1: unit 12 not found! [ 1442.756379][T16553] cyberjack 4-1:0.69: device disconnected [ 1442.839323][T28643] usb 1-1: USB disconnect, device number 90 [ 1442.914122][ T4387] udevd[4387]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1443.330531][T31850] SET target dimension over the limit! [ 1443.474763][T31858] netlink: 'syz.2.24688': attribute type 10 has an invalid length. [ 1443.554861][T31858] team0 (unregistering): Port device team_slave_0 removed [ 1443.571299][T28643] usb 1-1: new full-speed USB device number 91 using dummy_hcd [ 1443.600306][T31858] team0 (unregistering): Port device team_slave_1 removed [ 1443.634558][T16553] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1444.009263][T28643] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1444.031552][T28643] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1444.051761][T28643] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1444.105327][T16553] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 1444.111079][T31901] loop1: detected capacity change from 0 to 512 [ 1444.119903][T16553] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1444.142201][T16553] usb 4-1: config 0 has no interface number 0 [ 1444.168514][T16553] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1444.203569][T16553] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1444.245059][T31901] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.24697: Invalid inode bitmap blk 4 in block_group 0 [ 1444.265648][ T4233] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1444.273772][T28643] usb 1-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 1444.293375][T28643] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1444.302216][T28643] usb 1-1: Product: syz [ 1444.303165][T31901] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,usrquota,grpquota,noload,nobarrier,lazytime,,errors=continue. Quota mode: writeback. [ 1444.306408][T28643] usb 1-1: Manufacturer: syz [ 1444.327898][T28643] usb 1-1: SerialNumber: syz [ 1444.351762][T28643] usb 1-1: config 0 descriptor?? [ 1444.396057][T28643] usb 1-1: Found UVC 34.00 device syz (8086:0b5b) [ 1444.418373][T31901] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 1444.436965][T16553] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1444.446229][T16553] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1444.455033][T28643] usb 1-1: No valid video chain found. [ 1444.465078][T16553] usb 4-1: Product: syz [ 1444.470105][T16553] usb 4-1: Manufacturer: syz [ 1444.476051][T31901] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.24697: Invalid inode bitmap blk 4 in block_group 0 [ 1444.500442][T16553] usb 4-1: SerialNumber: syz [ 1444.512218][T16553] usb 4-1: config 0 descriptor?? [ 1444.541485][T31901] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 1444.586106][ T4233] usb 3-1: Using ep0 maxpacket: 16 [ 1444.674169][T28643] usb 1-1: USB disconnect, device number 91 [ 1444.736404][ T4233] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 1444.751508][ T4233] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1444.781848][ T4233] usb 3-1: config 0 has no interface number 0 [ 1444.960604][ T4233] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1444.988294][ T4233] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1445.019551][ T4233] usb 3-1: Product: syz [ 1445.034735][ T4233] usb 3-1: Manufacturer: syz [ 1445.045727][T16553] usbtouchscreen: probe of 4-1:0.117 failed with error -71 [ 1445.058053][T31966] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1445.065591][ T4233] usb 3-1: SerialNumber: syz [ 1445.084313][T16553] usb 4-1: USB disconnect, device number 110 [ 1445.111840][ T4233] usb 3-1: config 0 descriptor?? [ 1445.409552][ T4233] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 1445.416013][ T4233] usb 3-1: No valid video chain found. [ 1445.692822][ T4231] usb 3-1: USB disconnect, device number 86 [ 1445.978991][T32032] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1446.574580][ T4233] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1446.661341][ T4231] usb 4-1: new full-speed USB device number 111 using dummy_hcd [ 1446.863136][ T4233] usb 5-1: Using ep0 maxpacket: 32 [ 1447.020068][ T4233] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1447.055793][ T4231] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1447.059754][ T4233] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1447.069193][ T4231] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1447.225575][T32123] tmpfs: Bad value for 'mpol' [ 1447.258913][ T4233] usb 5-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0 [ 1447.272705][ T4233] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1447.292243][ T4233] usb 5-1: Product: syz [ 1447.301847][ T4233] usb 5-1: Manufacturer: syz [ 1447.302045][ T4231] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1447.317401][ T4233] usb 5-1: SerialNumber: syz [ 1447.335305][ T4233] usb 5-1: config 0 descriptor?? [ 1447.348084][ T4231] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1447.368848][ T4231] usb 4-1: Product: syz [ 1447.373595][ T4231] usb 4-1: Manufacturer: syz [ 1447.388449][ T4231] usb 4-1: SerialNumber: syz [ 1447.411556][ T4233] qmi_wwan 5-1:0.0: bogus CDC Union: master=1, slave=0 [ 1447.429493][ T4233] qmi_wwan: probe of 5-1:0.0 failed with error -22 [ 1447.452421][ T4231] usb 4-1: bad CDC descriptors [ 1447.613392][T32152] loop1: detected capacity change from 0 to 1024 [ 1447.654696][T32152] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 1447.675681][ T4233] usb 5-1: USB disconnect, device number 89 [ 1447.681861][T32152] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1447.701887][T16553] usb 4-1: USB disconnect, device number 111 [ 1447.707687][T32152] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 1447.718655][T32152] System zones: 0-1, 3-36 [ 1447.734046][T32152] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,delalloc,nobarrier,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1448.240786][ T26] audit: type=1326 audit(2000525759.566:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32195 comm="syz.1.24782" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fbbeb4e99 code=0x7ffc0000 [ 1448.265099][ C1] vkms_vblank_simulate: vblank timer overrun [ 1448.292588][ T26] audit: type=1326 audit(2000525759.566:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32195 comm="syz.1.24782" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4fbbeb4e99 code=0x7ffc0000 [ 1448.317363][ C1] vkms_vblank_simulate: vblank timer overrun [ 1448.420697][ T26] audit: type=1326 audit(2000525759.566:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32195 comm="syz.1.24782" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fbbeb4e99 code=0x7ffc0000 [ 1448.445446][ C1] vkms_vblank_simulate: vblank timer overrun [ 1448.795603][T32237] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1448.820687][T32233] loop4: detected capacity change from 0 to 4096 [ 1448.828788][T32241] block nbd1: NBD_DISCONNECT [ 1448.890842][T32233] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1448.946337][T32233] NILFS (loop4): mounting unchecked fs [ 1448.971419][T32233] NILFS (loop4): recovery required for readonly filesystem [ 1449.015913][T32233] NILFS (loop4): write access will be enabled during recovery [ 1449.042983][ T4177] udevd[4177]: incorrect nilfs2 checksum on /dev/loop4 [ 1449.103496][T32233] NILFS (loop4): recovery complete [ 1449.291006][T32270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24808'. [ 1449.365004][T32270] netlink: 312 bytes leftover after parsing attributes in process `syz.1.24808'. [ 1449.663185][T32296] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1449.669963][T32296] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1449.694127][T32296] vhci_hcd vhci_hcd.0: Device attached [ 1449.721267][T32296] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 1449.728458][T32296] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1449.746003][T32296] vhci_hcd vhci_hcd.0: Device attached [ 1449.755279][T32303] vhci_hcd: connection closed [ 1449.755655][ T9] vhci_hcd: stop threads [ 1449.788577][T32297] vhci_hcd: connection closed [ 1449.794572][ T9] vhci_hcd: release socket [ 1449.832112][ T9] vhci_hcd: disconnect device [ 1449.852248][ T9] vhci_hcd: stop threads [ 1449.878171][ T9] vhci_hcd: release socket [ 1449.894235][ T9] vhci_hcd: disconnect device [ 1449.899617][ T3901] vhci_hcd: vhci_device speed not set [ 1450.001749][T32320] netlink: 20 bytes leftover after parsing attributes in process `syz.0.24823'. [ 1450.150561][T32333] openvswitch: netlink: Message has 8 unknown bytes. [ 1450.199078][T32333] openvswitch: netlink: Actions may not be safe on all matching packets [ 1450.517474][T32359] netlink: 52 bytes leftover after parsing attributes in process `syz.2.24840'. [ 1450.633777][T32370] netlink: 'syz.4.24844': attribute type 4 has an invalid length. [ 1450.680468][T32370] netlink: 'syz.4.24844': attribute type 10 has an invalid length. [ 1450.733685][T32370] netlink: 152 bytes leftover after parsing attributes in process `syz.4.24844'. [ 1450.862004][T32370] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1450.913932][T32386] netlink: 96 bytes leftover after parsing attributes in process `syz.2.24849'. [ 1450.987808][T32386] netlink: 96 bytes leftover after parsing attributes in process `syz.2.24849'. [ 1451.114348][T32396] loop4: detected capacity change from 0 to 256 [ 1451.279504][T32402] loop1: detected capacity change from 0 to 4096 [ 1451.438276][T32402] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1451.448197][T32431] SET target dimension over the limit! [ 1451.561182][T32442] netlink: 'syz.0.24870': attribute type 10 has an invalid length. [ 1451.910458][T32442] team0 (unregistering): Port device team_slave_0 removed [ 1451.969971][T32442] team0 (unregistering): Port device team_slave_1 removed [ 1452.165690][ T4233] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1452.302131][T32509] netlink: 28 bytes leftover after parsing attributes in process `syz.0.24887'. [ 1452.319282][ T4231] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1452.322364][T32509] netlink: 28 bytes leftover after parsing attributes in process `syz.0.24887'. [ 1452.338046][T32512] netlink: 76 bytes leftover after parsing attributes in process `syz.3.24888'. [ 1452.582938][ T4233] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1452.593570][ T4231] usb 2-1: Using ep0 maxpacket: 16 [ 1452.635990][ T4233] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1452.683248][ T4233] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1452.721681][ T4231] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1452.764409][ T4231] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1452.852200][ T4231] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1452.894207][ T4231] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1452.902380][ T4231] usb 2-1: SerialNumber: syz [ 1452.937963][T32534] netlink: 'syz.2.24898': attribute type 29 has an invalid length. [ 1452.957774][ T4233] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1453.000833][ T4233] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1453.005881][ T4231] usb 2-1: 0:2 : does not exist [ 1453.009389][ T4233] usb 5-1: Product: syz [ 1453.009410][ T4233] usb 5-1: Manufacturer: syz [ 1453.009426][ T4233] usb 5-1: SerialNumber: syz [ 1453.161349][ T4233] cdc_ncm 5-1:1.0: skipping garbage [ 1453.166822][ T4233] usb 5-1: selecting invalid altsetting 1 [ 1453.298318][ T4231] usb 2-1: USB disconnect, device number 75 [ 1453.506823][T32568] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (8) [ 1453.630410][ T4233] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 1453.636615][ T4233] cdc_ncm 5-1:1.0: bind() failure [ 1453.683982][ T4233] usb 5-1: USB disconnect, device number 90 [ 1454.437518][T32631] loop1: detected capacity change from 0 to 256 [ 1454.679077][T32648] netlink: 'syz.2.24928': attribute type 5 has an invalid length. [ 1454.691006][T32631] FAT-fs (loop1): Directory bread(block 64) failed [ 1454.697659][T32631] FAT-fs (loop1): Directory bread(block 65) failed [ 1454.720849][T32631] FAT-fs (loop1): Directory bread(block 66) failed [ 1454.727486][T32631] FAT-fs (loop1): Directory bread(block 67) failed [ 1454.784132][T32631] FAT-fs (loop1): Directory bread(block 68) failed [ 1454.795703][T32631] FAT-fs (loop1): Directory bread(block 69) failed [ 1454.802620][T32631] FAT-fs (loop1): Directory bread(block 70) failed [ 1454.838443][T28643] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1454.863433][T32631] FAT-fs (loop1): Directory bread(block 71) failed [ 1454.884851][T32631] FAT-fs (loop1): Directory bread(block 72) failed [ 1454.915021][T32631] FAT-fs (loop1): Directory bread(block 73) failed [ 1455.137691][T28643] usb 5-1: Using ep0 maxpacket: 16 [ 1455.288961][T28643] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1455.304762][T28643] usb 5-1: config 0 has no interface number 0 [ 1455.430374][ T5229] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1455.470194][T32690] netlink: 'syz.0.24942': attribute type 49 has an invalid length. [ 1455.520567][T28643] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1455.530317][ T4233] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1455.544152][T28643] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1455.563022][T28643] usb 5-1: Product: syz [ 1455.576266][T28643] usb 5-1: Manufacturer: syz [ 1455.581280][T28643] usb 5-1: SerialNumber: syz [ 1455.598827][T28643] usb 5-1: config 0 descriptor?? [ 1455.632682][T32701] __nla_validate_parse: 1 callbacks suppressed [ 1455.632702][T32701] netlink: 16 bytes leftover after parsing attributes in process `syz.0.24946'. [ 1455.658947][T32701] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1455.667995][T28643] hub 5-1:0.132: bad descriptor, ignoring hub [ 1455.677791][T28643] hub: probe of 5-1:0.132 failed with error -5 [ 1455.700147][T28643] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.132/input/input108 [ 1455.737150][ T5229] usb 3-1: Using ep0 maxpacket: 32 [ 1455.821910][ T4233] usb 4-1: Using ep0 maxpacket: 32 [ 1455.897435][ T5229] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 1455.906400][ T5229] usb 3-1: config 0 has no interface number 0 [ 1455.938356][ T5229] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1455.961076][ T4233] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1455.971253][ T4233] usb 4-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 1455.987769][ T5229] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1456.008698][ T4233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1456.031008][ T4233] usb 4-1: config 0 descriptor?? [ 1456.090639][ T4233] usb 4-1: bad CDC descriptors [ 1456.196439][ T5229] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1456.227478][ T5229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1456.249001][ T5229] usb 3-1: Product: syz [ 1456.259812][ T5229] usb 3-1: Manufacturer: syz [ 1456.275369][ T5229] usb 3-1: SerialNumber: syz [ 1456.293421][ T5229] usb 3-1: config 0 descriptor?? [ 1456.315461][T28643] usb 4-1: USB disconnect, device number 112 [ 1456.371694][T32753] openvswitch: netlink: Actions may not be safe on all matching packets [ 1456.392406][T16553] usb 5-1: USB disconnect, device number 91 [ 1456.479952][T32765] 9pnet: p9_fd_create_tcp (32765): problem connecting socket to 127.0.0.1 [ 1456.592023][ T5229] radio-si470x 3-1:0.35: this is not a si470x device. [ 1456.604781][ T306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24965'. [ 1456.816944][ T5229] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 1456.893003][ T5229] usb 3-1: USB disconnect, device number 87 [ 1457.938388][ T421] comedi comedi0: 8255: I/O port conflict (0x8,4) [ 1457.938451][ T421] comedi comedi0: 8255: I/O port conflict (0x7fffffff,4) [ 1457.939305][ T418] netlink: 20 bytes leftover after parsing attributes in process `syz.2.25004'. [ 1457.941161][ T421] comedi comedi0: 8255: I/O port conflict (0x8,4) [ 1458.260127][ T444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.25011'. [ 1458.600426][ T467] netlink: 'syz.1.25020': attribute type 1 has an invalid length. [ 1458.654889][ T467] netlink: 48 bytes leftover after parsing attributes in process `syz.1.25020'. [ 1458.677041][ T459] xt_CT: No such helper "snmp_trap" [ 1458.689182][ T467] netlink: 'syz.1.25020': attribute type 1 has an invalid length. [ 1459.232333][ T3901] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1459.440977][ T533] netlink: 20 bytes leftover after parsing attributes in process `syz.2.25047'. [ 1459.510156][ T3901] usb 2-1: Using ep0 maxpacket: 8 [ 1459.658635][ T548] mip6: mip6_rthdr_init_state: spi is not 0: 655360 [ 1459.681336][ T3901] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1459.777555][ T3901] usb 2-1: config 6 has an invalid interface number: 14 but max is 0 [ 1459.791640][ T3901] usb 2-1: config 6 has no interface number 0 [ 1459.808623][ T3901] usb 2-1: config 6 interface 14 has no altsetting 0 [ 1459.983113][ T3901] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10ae, bcdDevice=6e.c2 [ 1460.011166][ T3901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1460.030360][ T3901] usb 2-1: Product: syz [ 1460.036368][ T3901] usb 2-1: Manufacturer: syz [ 1460.053271][ T3901] usb 2-1: SerialNumber: syz [ 1460.159435][ T585] loop4: detected capacity change from 0 to 8 [ 1460.187883][ T585] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1460.220300][ T4718] udevd[4718]: incorrect cramfs checksum on /dev/loop4 [ 1460.249658][ T585] cramfs: Error -3 while decompressing! [ 1460.285459][ T585] cramfs: ffffffff96421068(18)->ffff888052ece000(4096) [ 1460.290379][ T4718] udevd[4718]: incorrect cramfs checksum on /dev/loop4 [ 1460.328545][ T585] cramfs: Error -3 while decompressing! [ 1460.357646][ T585] cramfs: ffffffff96421068(18)->ffff888052ece000(4096) [ 1460.386901][ T26] audit: type=1800 audit(2000525770.921:160): pid=585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.25065" name="file1" dev="loop4" ino=324 res=0 errno=0 [ 1460.454104][ T3901] usb 2-1: USB disconnect, device number 76 [ 1461.045884][ T645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.25084'. [ 1461.140756][ T651] xt_ecn: cannot match TCP bits for non-tcp packets [ 1461.627890][ T689] netlink: 256 bytes leftover after parsing attributes in process `syz.4.25099'. [ 1461.677327][ T693] bridge12: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1461.816697][ T707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25105'. [ 1461.826636][T16553] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1462.108048][T16553] usb 3-1: Using ep0 maxpacket: 16 [ 1462.199579][ T752] program syz.3.25117 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1462.228916][ T754] netlink: 16 bytes leftover after parsing attributes in process `syz.0.25118'. [ 1462.258014][ T754] netlink: 132 bytes leftover after parsing attributes in process `syz.0.25118'. [ 1462.269004][T16553] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 1462.387902][ T765] program syz.0.25121 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1462.414528][ T765] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1462.456023][T28643] usb 5-1: new full-speed USB device number 92 using dummy_hcd [ 1462.482410][T16553] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1462.512505][T16553] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1462.546461][T16553] usb 3-1: Product: syz [ 1462.553694][T16553] usb 3-1: Manufacturer: syz [ 1462.570192][T16553] usb 3-1: SerialNumber: syz [ 1462.591628][T16553] r8152-cfgselector 3-1: config 0 descriptor?? [ 1462.616847][ T779] loop1: detected capacity change from 0 to 1024 [ 1462.768427][ T779] hfsplus: bad catalog entry used to create inode [ 1462.798310][ T779] hfsplus: failed to load root directory [ 1463.111111][ T817] netlink: 'syz.1.25139': attribute type 3 has an invalid length. [ 1463.132242][T28643] usb 5-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 1463.138493][ T817] netlink: 224 bytes leftover after parsing attributes in process `syz.1.25139'. [ 1463.152168][T28643] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1463.160841][T16553] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1463.176561][T16553] r8152-cfgselector 3-1: USB disconnect, device number 88 [ 1463.205700][T28643] usb 5-1: Product: syz [ 1463.217902][T28643] usb 5-1: Manufacturer: syz [ 1463.233182][ T828] xt_connbytes: Forcing CT accounting to be enabled [ 1463.246762][T28643] usb 5-1: SerialNumber: syz [ 1463.274510][T28643] usb 5-1: config 0 descriptor?? [ 1463.348269][T28643] usb 5-1: selecting invalid altsetting 3 [ 1463.369877][T28643] comedi comedi5: could not set alternate setting 3 in high speed [ 1463.403142][T28643] usbdux 5-1:0.0: driver 'usbdux' failed to auto-configure device. [ 1463.430702][T28643] usbdux: probe of 5-1:0.0 failed with error -22 [ 1463.498251][ T845] delete_channel: no stack [ 1463.626495][ T740] udc-core: couldn't find an available UDC or it's busy [ 1463.673297][ T740] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1463.715035][ T865] netlink: 12 bytes leftover after parsing attributes in process `syz.0.25153'. [ 1463.733129][ T865] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1463.734110][ T3901] usb 5-1: USB disconnect, device number 92 [ 1463.852763][ T881] netlink: 'syz.1.25157': attribute type 10 has an invalid length. [ 1463.946244][ T881] device nlmon0 entered promiscuous mode [ 1463.985705][ T881] team0: Device nlmon0 is of different type [ 1464.494457][ T928] netlink: 12 bytes leftover after parsing attributes in process `syz.0.25173'. [ 1464.536254][ T928] netlink: 48 bytes leftover after parsing attributes in process `syz.0.25173'. [ 1464.773232][ T936] loop1: detected capacity change from 0 to 4096 [ 1464.908999][ T936] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 1465.010298][ T936] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22. [ 1465.037429][ T936] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1465.142917][ T4187] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22. [ 1465.166024][ T4187] ntfs3: loop1: ntfs_evict_inode r=1a failed, -22. [ 1465.433001][ T1008] netlink: 'syz.0.25201': attribute type 5 has an invalid length. [ 1465.440946][ T1008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25201'. [ 1465.614558][ T3901] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1465.817911][ T1032] netlink: 'syz.4.25208': attribute type 21 has an invalid length. [ 1465.889130][ T3901] usb 2-1: Using ep0 maxpacket: 16 [ 1466.021157][ T3901] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 1466.029500][ T3901] usb 2-1: config 0 has no interface number 0 [ 1466.141251][ T1066] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1466.268444][ T3901] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1466.309657][ T3901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1466.362436][ T3901] usb 2-1: Product: syz [ 1466.372761][ T3901] usb 2-1: Manufacturer: syz [ 1466.414933][ T3901] usb 2-1: SerialNumber: syz [ 1466.465196][ T3901] usb 2-1: config 0 descriptor?? [ 1466.534972][ T3901] hub 2-1:0.132: bad descriptor, ignoring hub [ 1466.541589][ T3901] hub: probe of 2-1:0.132 failed with error -5 [ 1466.553856][ T3901] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input109 [ 1467.218603][ T3901] usb 2-1: USB disconnect, device number 77 [ 1467.409910][ T1155] [U] [ 1467.412687][ T1155] [U] [ 1467.415405][ T1155] [U] [ 1467.418123][ T1155] [U] [ 1467.465087][ T1155] [U] [ 1467.467851][ T1155] [U] [ 1467.470577][ T1155] [U] [ 1467.473303][ T1155] [U] [ 1467.504459][ T1155] [U] [ 1467.507226][ T1155] [U] [ 1467.509981][ T1155] [U] [ 1467.512706][ T1155] [U] [ 1467.565596][ T1155] [U] [ 1467.568355][ T1155] [U] [ 1467.571180][ T1155] [U] [ 1467.573904][ T1155] [U] [ 1467.579374][ T1167] netlink: 'syz.4.25247': attribute type 4 has an invalid length. [ 1467.593597][ T1167] __nla_validate_parse: 1 callbacks suppressed [ 1467.593615][ T1167] netlink: 152 bytes leftover after parsing attributes in process `syz.4.25247'. [ 1467.618645][ T1155] [U] [ 1467.621411][ T1155] [U] [ 1467.624134][ T1155] [U] [ 1467.626871][ T1155] [U] [ 1467.673146][ T1167] .`: renamed from bond0 [ 1467.684152][ T1155] [U] [ 1467.686910][ T1155] [U] [ 1467.689629][ T1155] [U] [ 1467.692347][ T1155] [U] [ 1467.715181][ T1173] netlink: 'syz.2.25249': attribute type 21 has an invalid length. [ 1467.740937][ T1173] netlink: 'syz.2.25249': attribute type 6 has an invalid length. [ 1467.774254][ T1155] [U] [ 1467.777020][ T1155] [U] [ 1467.779825][ T1155] [U] [ 1467.782537][ T1155] [U] [ 1467.806427][ T1173] netlink: 132 bytes leftover after parsing attributes in process `syz.2.25249'. [ 1467.817353][ T1155] [U] [ 1467.820198][ T1155] [U] [ 1467.822995][ T1155] [U] [ 1467.825714][ T1155] [U] [ 1467.863247][ T1155] [U] [ 1467.866016][ T1155] [U] [ 1467.868731][ T1155] [U] [ 1467.871447][ T1155] [U] [ 1467.902477][ T1155] [U] [ 1467.905235][ T1155] [U] [ 1467.907954][ T1155] [U] [ 1467.910675][ T1155] [U] [ 1467.947215][ T1155] [U] [ 1467.949980][ T1155] [U] [ 1467.952692][ T1155] [U] [ 1467.955414][ T1155] [U] [ 1467.986547][ T1155] [U] [ 1467.989311][ T1155] [U] [ 1467.992032][ T1155] [U] [ 1467.994750][ T1155] [U] [ 1468.025485][ T1197] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20002 [ 1468.042663][ T1155] [U] [ 1468.045438][ T1155] [U] [ 1468.048162][ T1155] [U] [ 1468.050882][ T1155] [U] [ 1468.101081][ T1155] [U] [ 1468.103847][ T1155] [U] [ 1468.106565][ T1155] [U] [ 1468.109283][ T1155] [U] [ 1468.156807][ T1155] [U] [ 1468.159578][ T1155] [U] [ 1468.162360][ T1155] [U] [ 1468.165067][ T1155] [U] [ 1468.218599][ T1155] [U] [ 1468.221365][ T1155] [U] [ 1468.224085][ T1155] [U] [ 1468.226799][ T1155] [U] [ 1468.290774][ T1155] [U] [ 1468.293639][ T1155] [U] [ 1468.296480][ T1155] [U] [ 1468.299456][ T1155] [U] [ 1468.361365][ T1155] [U] [ 1468.364233][ T1155] [U] [ 1468.366954][ T1155] [U] [ 1468.369672][ T1155] [U] [ 1468.483967][ T1155] [U] [ 1468.765160][ T1253] netlink: 'syz.3.25275': attribute type 1 has an invalid length. [ 1468.900479][ T1267] netlink: 72 bytes leftover after parsing attributes in process `syz.2.25279'. [ 1468.974028][ T1273] netlink: 'syz.3.25281': attribute type 4 has an invalid length. [ 1469.045883][ T1273] netlink: 152 bytes leftover after parsing attributes in process `syz.3.25281'. [ 1469.136382][ T1273] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1469.771326][ T1337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.25307'. [ 1469.991539][ T1360] overlayfs: missing 'workdir' [ 1470.219088][ T1386] loop4: detected capacity change from 0 to 512 [ 1470.378182][ T26] audit: type=1800 audit(2000525780.275:161): pid=1386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.25321" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1470.564642][ T3901] usb 2-1: new full-speed USB device number 78 using dummy_hcd [ 1470.951459][ T1439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.25337'. [ 1471.098747][T16553] usb 5-1: new full-speed USB device number 93 using dummy_hcd [ 1471.141987][ T3901] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1471.184568][ T3901] usb 2-1: not running at top speed; connect to a high speed hub [ 1471.280761][ T3901] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 4 [ 1471.312622][ T3901] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 4 [ 1471.548062][T16553] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1471.601533][ T3901] usb 2-1: string descriptor 0 read error: -22 [ 1471.611988][ T3901] usb 2-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 1471.653667][ T3901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1471.726223][T16553] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1471.747098][T16553] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1471.772502][T16553] usb 5-1: Manufacturer: syz [ 1471.777183][T16553] usb 5-1: SerialNumber: syz [ 1471.885373][ T1477] netlink: 'syz.0.25352': attribute type 2 has an invalid length. [ 1471.912470][ T1477] netlink: 36 bytes leftover after parsing attributes in process `syz.0.25352'. [ 1472.100918][ T1493] netlink: 28 bytes leftover after parsing attributes in process `syz.3.25355'. [ 1472.117021][T16553] usbhid 5-1:36.0: couldn't find an input interrupt endpoint [ 1472.146161][ T1493] netlink: 28 bytes leftover after parsing attributes in process `syz.3.25355'. [ 1472.153732][T16553] usb 5-1: USB disconnect, device number 93 [ 1472.253608][ T3901] usb 2-1: USB disconnect, device number 78 [ 1472.499346][ T5229] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1472.652408][ T1529] delete_channel: no stack [ 1472.766639][ T5229] usb 1-1: Using ep0 maxpacket: 16 [ 1472.905886][ T5229] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1472.945501][ T5229] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 1472.966817][ T5229] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1472.993380][ T5229] usb 1-1: config 1 interface 2 has no altsetting 0 [ 1473.025853][ T1556] netlink: 68 bytes leftover after parsing attributes in process `syz.3.25370'. [ 1473.038193][ T1559] netlink: 4 bytes leftover after parsing attributes in process `syz.4.25371'. [ 1473.143091][ T1565] netlink: set zone limit has 8 unknown bytes [ 1473.205192][ T5229] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1473.225292][ T5229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1473.246890][ T5229] usb 1-1: Product: syz [ 1473.256007][ T5229] usb 1-1: Manufacturer: syz [ 1473.269102][ T3901] usb 2-1: new full-speed USB device number 79 using dummy_hcd [ 1473.272074][ T5229] usb 1-1: SerialNumber: syz [ 1473.352505][ T1567] loop4: detected capacity change from 0 to 4096 [ 1473.600562][ T1587] netlink: 4 bytes leftover after parsing attributes in process `syz.4.25379'. [ 1473.654555][ T3901] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1473.664791][ T5229] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 1473.674611][ T3901] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1473.683780][ T5229] usb 1-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 1473.727564][ T3901] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1473.737971][ T5229] usb 1-1: found format II with max.bitrate = 3, frame size=7 [ 1473.770399][ T3901] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1473.780985][ T5229] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 1473.802130][ T5229] usb 1-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 1473.859469][ T5229] usb 1-1: found format II with max.bitrate = 3, frame size=7 [ 1473.882340][ T5229] usb 1-1: selecting invalid altsetting 0 [ 1473.906391][ T3901] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1473.921304][ T5229] usb 1-1: selecting invalid altsetting 0 [ 1473.924752][ T3901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1473.963639][ T3901] usb 2-1: SerialNumber: syz [ 1474.027753][ T5229] usb 1-1: USB disconnect, device number 92 [ 1474.061590][ T3901] cdc_acm 2-1:1.0: invalid descriptor buffer length [ 1474.068583][ T3901] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 1474.092078][ T1617] ipt_CLUSTERIP: Please specify destination IP [ 1474.114212][ T3901] cdc_acm 2-1:1.0: This needs exactly 3 endpoints [ 1474.120727][ T3901] cdc_acm: probe of 2-1:1.0 failed with error -22 [ 1474.375259][ T3901] usb 2-1: USB disconnect, device number 79 [ 1474.744246][ T1679] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1475.199704][ T1713] xt_TCPMSS: Only works on TCP SYN packets [ 1475.525695][ T1745] netlink: 156 bytes leftover after parsing attributes in process `syz.3.25423'. [ 1475.965387][ T1786] netlink: 120 bytes leftover after parsing attributes in process `syz.2.25438'. [ 1476.219236][ T1806] loop4: detected capacity change from 0 to 256 [ 1476.467914][ T1825] xt_l2tp: invalid flags combination: 0 [ 1476.535265][ T1833] netlink: 'syz.3.25455': attribute type 10 has an invalid length. [ 1476.906980][ T1858] netlink: 28 bytes leftover after parsing attributes in process `syz.3.25461'. [ 1476.919806][ T1850] mip6: mip6_rthdr_init_state: state's mode is not 2: 0 [ 1478.992426][ T1994] netlink: 'syz.0.25512': attribute type 10 has an invalid length. [ 1479.043348][ T1994] device hsr0 entered promiscuous mode [ 1479.082716][ T1994] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1479.111550][ T1994] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1479.123073][ T1994] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1479.136636][ T1994] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1479.713229][ T2028] SET target dimension over the limit! [ 1479.859114][ T2038] netlink: 72 bytes leftover after parsing attributes in process `syz.4.25526'. [ 1480.530809][ T2081] autofs4:pid:2081:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.768), cmd(0xc0189375) [ 1480.535253][ T2082] netlink: 28 bytes leftover after parsing attributes in process `syz.0.25541'. [ 1480.589083][ T2081] autofs4:pid:2081:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 1480.635065][ T2082] netlink: 28 bytes leftover after parsing attributes in process `syz.0.25541'. [ 1480.688486][ T2086] netlink: 'syz.1.25542': attribute type 16 has an invalid length. [ 1480.717605][ T2086] netlink: 'syz.1.25542': attribute type 17 has an invalid length. [ 1480.733271][ T2086] netlink: 'syz.1.25542': attribute type 27 has an invalid length. [ 1480.966170][ T3901] usb 5-1: new full-speed USB device number 94 using dummy_hcd [ 1481.373841][ T3901] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1481.401308][ T3901] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1481.435332][ T3901] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1481.454207][ T2140] overlayfs: missing 'lowerdir' [ 1481.685182][ T3901] usb 5-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 1481.708829][ T3901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1481.739176][ T3901] usb 5-1: Product: syz [ 1481.743410][ T3901] usb 5-1: Manufacturer: syz [ 1481.782670][ T3901] usb 5-1: SerialNumber: syz [ 1481.810162][ T3901] usb 5-1: config 0 descriptor?? [ 1482.088730][ T4231] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1482.118600][ T2182] program syz.0.25575 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1482.120114][ T3901] usb 5-1: USB disconnect, device number 94 [ 1482.279012][ T2195] netlink: 16 bytes leftover after parsing attributes in process `syz.1.25578'. [ 1482.307189][ T2195] netlink: 112 bytes leftover after parsing attributes in process `syz.1.25578'. [ 1482.527105][ T4233] usb 1-1: new full-speed USB device number 93 using dummy_hcd [ 1482.548584][ T4231] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1482.634170][ T4231] usb 3-1: config 8 has an invalid interface number: 92 but max is 0 [ 1482.642315][ T4231] usb 3-1: config 8 has no interface number 0 [ 1482.650209][ T4231] usb 3-1: config 8 interface 92 altsetting 65 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1482.665921][ T3899] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1482.684966][ T4231] usb 3-1: config 8 interface 92 has no altsetting 0 [ 1482.938818][ T3901] lo speed is unknown, defaulting to 1000 [ 1482.938857][ T5229] lo speed is unknown, defaulting to 1000 [ 1482.965521][ T4231] usb 3-1: string descriptor 0 read error: -22 [ 1482.965788][ T4233] usb 1-1: config 36 interface 0 altsetting 0 has an invalid endpoint with address 0x31, skipping [ 1482.971818][ T4231] usb 3-1: New USB device found, idVendor=1b3d, idProduct=0181, bcdDevice= b.f6 [ 1483.034616][ T4231] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1483.078476][ T3899] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 1483.088051][ T3899] usb 2-1: config 0 has no interface number 0 [ 1483.094832][ T3899] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1483.115493][ T4233] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1483.127368][ T4231] ftdi_sio 3-1:8.92: FTDI USB Serial Device converter detected [ 1483.141649][ T4233] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1483.143290][ T4231] usb 3-1: Detected FT232H [ 1483.153926][ T4233] usb 1-1: Manufacturer: syz [ 1483.155416][ T4231] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 6 [ 1483.160090][ T4233] usb 1-1: SerialNumber: syz [ 1483.275709][ T3899] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1483.284978][ T3899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1483.293277][ T3899] usb 2-1: Product: syz [ 1483.297715][ T3899] usb 2-1: Manufacturer: syz [ 1483.302383][ T3899] usb 2-1: SerialNumber: syz [ 1483.311988][ T3899] usb 2-1: config 0 descriptor?? [ 1483.357852][ T3899] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 1483.366437][ T4231] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1483.371688][T16553] usb 4-1: new full-speed USB device number 113 using dummy_hcd [ 1483.393146][ T4231] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1483.414511][ T4231] ftdi_sio 3-1:8.92: GPIO initialisation failed: -71 [ 1483.422396][ T4231] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1483.434542][ T4231] usb 3-1: USB disconnect, device number 89 [ 1483.449258][ T4231] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1483.459923][ T4231] ftdi_sio 3-1:8.92: device disconnected [ 1483.489563][ T5229] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1483.568609][ T4233] usbhid 1-1:36.0: couldn't find an input interrupt endpoint [ 1483.586784][ T4233] usb 1-1: USB disconnect, device number 93 [ 1483.606744][ C1] yurex 2-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8 [ 1483.810430][ T4231] usb 2-1: USB disconnect, device number 80 [ 1483.818857][ T4231] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 1483.876965][T16553] usb 4-1: not running at top speed; connect to a high speed hub [ 1483.906343][ T5229] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1483.917651][ T5229] usb 5-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=9e.06 [ 1483.926750][ T5229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1483.968208][ T5229] usb 5-1: config 0 descriptor?? [ 1483.991818][T16553] usb 4-1: config 1 interface 0 altsetting 4 endpoint 0x1 has invalid maxpacket 624, setting to 64 [ 1484.007124][T16553] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1484.036861][ T5229] gspca_main: kinect-2.14.0 probing 045e:02bf [ 1484.187571][ T2307] netlink: 25 bytes leftover after parsing attributes in process `syz.2.25602'. [ 1484.269614][T16553] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 1484.291007][T16553] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1484.299061][T16553] usb 4-1: Product: syz [ 1484.333656][T16553] usb 4-1: Manufacturer: syz [ 1484.338503][T16553] usb 4-1: SerialNumber: syz [ 1484.354459][ T5229] usb 5-1: USB disconnect, device number 95 [ 1484.376812][ T2239] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 1484.713137][T16553] usblp0: Disabling reads from problematic bidirectional printer [ 1484.737961][ T2353] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1484.767134][T16553] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 113 if 0 alt 4 proto 1 vid 0x03F0 pid 0x0004 [ 1484.816815][T16553] usb 4-1: USB disconnect, device number 113 [ 1484.856969][T16553] usblp0: removed [ 1485.063475][ T2387] netlink: 12 bytes leftover after parsing attributes in process `syz.0.25625'. [ 1485.158498][ T2390] loop1: detected capacity change from 0 to 1024 [ 1485.215566][ T2396] netlink: 'syz.0.25627': attribute type 1 has an invalid length. [ 1485.274679][ T5229] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1485.296194][ T2390] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1485.342085][ T2403] netlink: 12 bytes leftover after parsing attributes in process `syz.0.25631'. [ 1485.667138][ T2424] netlink: 16 bytes leftover after parsing attributes in process `syz.0.25636'. [ 1485.713150][ T5229] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 1485.729974][ T5229] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1485.776779][ T5229] usb 5-1: config 0 has no interface number 0 [ 1485.806445][ T5229] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1485.880290][ T5229] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1485.915906][ T5229] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1486.140840][ T5229] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1486.172508][ T5229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.205464][ T5229] usb 5-1: Product: syz [ 1486.209699][ T5229] usb 5-1: Manufacturer: syz [ 1486.256097][ T5229] usb 5-1: SerialNumber: syz [ 1486.277604][ T5229] usb 5-1: config 0 descriptor?? [ 1486.406438][ T2496] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1486.506977][ T2506] netlink: 'syz.3.25660': attribute type 2 has an invalid length. [ 1486.750626][ T2507] loop1: detected capacity change from 0 to 4096 [ 1486.844130][ T3899] usb 5-1: USB disconnect, device number 96 [ 1486.867469][ T4231] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1486.951906][ T2507] ntfs: volume version 3.1. [ 1487.178332][ T4231] usb 3-1: Using ep0 maxpacket: 16 [ 1487.188285][ T5229] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1487.305820][ T4231] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1487.321459][ T4231] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 1487.356963][ T4231] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 59391, setting to 1024 [ 1487.369102][ T4231] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1487.466380][ T4231] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1487.470771][ T5229] usb 4-1: Using ep0 maxpacket: 16 [ 1487.475763][ T4231] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1487.507832][ T4231] usb 3-1: Manufacturer: syz [ 1487.522097][ T4231] usb 3-1: config 0 descriptor?? [ 1487.637371][ T5229] usb 4-1: config 0 has no interfaces? [ 1487.669369][T16553] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1487.818353][ T4233] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1487.852936][ T4231] usb 3-1: USB disconnect, device number 90 [ 1487.861993][ T5229] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1487.871266][ T5229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.894129][ T5229] usb 4-1: Product: syz [ 1487.898462][ T5229] usb 4-1: Manufacturer: syz [ 1487.915166][ T5229] usb 4-1: SerialNumber: syz [ 1487.926937][ T5229] r8152-cfgselector 4-1: config 0 descriptor?? [ 1487.948283][T16553] usb 2-1: Using ep0 maxpacket: 8 [ 1488.096921][T16553] usb 2-1: config index 0 descriptor too short (expected 26, got 18) [ 1488.204988][ T5229] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 1488.322073][ T4233] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1488.330619][T16553] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1488.345517][T16553] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1488.362066][T16553] usb 2-1: Product: syz [ 1488.370962][T16553] usb 2-1: Manufacturer: syz [ 1488.380663][T16553] usb 2-1: SerialNumber: syz [ 1488.393059][T16553] usb 2-1: config 0 descriptor?? [ 1488.428611][ T4233] usb 5-1: config 6 has an invalid interface number: 252 but max is 0 [ 1488.441556][ T4233] usb 5-1: config 6 has no interface number 0 [ 1488.451932][T16553] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1488.464885][ T4233] usb 5-1: config 6 interface 252 altsetting 5 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 1488.468633][ T4231] usb 4-1: USB disconnect, device number 114 [ 1488.487066][ T4233] usb 5-1: config 6 interface 252 has no altsetting 0 [ 1488.507745][ T2594] netlink: 'syz.2.25680': attribute type 5 has an invalid length. [ 1488.611544][ T2603] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 1488.732122][ T4233] usb 5-1: New USB device found, idVendor=1199, idProduct=6815, bcdDevice=dd.bf [ 1488.753516][ T4233] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1488.777361][ T4233] usb 5-1: Product: syz [ 1488.786032][ T4233] usb 5-1: Manufacturer: syz [ 1488.790649][ T4233] usb 5-1: SerialNumber: syz [ 1488.795727][ T2608] device batadv0 entered promiscuous mode [ 1488.909472][T16553] gspca_sq930x: ucbus_write failed -71 [ 1489.153072][ T4233] sierra 5-1:6.252: Sierra USB modem converter detected [ 1489.165873][T16553] gspca_sq930x: Sensor ov9630 not yet treated [ 1489.172144][T16553] sq930x: probe of 2-1:0.0 failed with error -22 [ 1489.205224][T16553] usb 2-1: USB disconnect, device number 81 [ 1489.214249][ T4233] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 1489.250802][ T4233] usb 5-1: Sierra USB modem converter now attached to ttyUSB1 [ 1489.305224][ T4233] usb 5-1: USB disconnect, device number 97 [ 1489.352114][ T4233] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1489.388736][ T4233] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 1489.452298][ T4233] sierra 5-1:6.252: device disconnected [ 1490.038939][ T2738] netlink: 20 bytes leftover after parsing attributes in process `syz.2.25712'. [ 1490.093365][ T2746] netlink: 16 bytes leftover after parsing attributes in process `syz.3.25715'. [ 1490.138921][ T2738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.25712'. [ 1490.248165][ T2760] netlink: 5 bytes leftover after parsing attributes in process `syz.3.25718'. [ 1490.280148][ T2764] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1490.376132][ T5229] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1490.673324][ T5229] usb 5-1: Using ep0 maxpacket: 8 [ 1490.855867][ T5229] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1490.973412][ T5229] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1491.014946][ T5229] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1491.089647][ T5229] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1491.099005][ T2826] overlayfs: unrecognized mount option "\" or missing value [ 1491.122389][ T5229] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1491.163493][ T5229] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1491.192214][ T5229] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1491.416870][ C0] vkms_vblank_simulate: vblank timer overrun [ 1491.456222][ T5229] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1491.486545][ T5229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1491.495339][ T5229] usb 5-1: Product: syz [ 1491.507409][ T5229] usb 5-1: Manufacturer: syz [ 1491.518103][ T5229] usb 5-1: SerialNumber: syz [ 1491.535468][ T5229] usb 5-1: config 0 descriptor?? [ 1491.603914][ T2740] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1491.671820][ T2855] loop1: detected capacity change from 0 to 1024 [ 1491.800410][ T2855] ================================================================== [ 1491.810884][ T2855] BUG: KASAN: use-after-free in hfsplus_btree_open+0xae6/0x1170 [ 1491.818578][ T2855] Read of size 4 at addr ffff88807479d3d4 by task syz.1.25748/2855 [ 1491.826651][ T2855] [ 1491.829021][ T2855] CPU: 1 PID: 2855 Comm: syz.1.25748 Not tainted syzkaller #0 [ 1491.837749][ T2855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1491.847843][ T2855] Call Trace: [ 1491.851158][ T2855] [ 1491.854121][ T2855] dump_stack_lvl+0x188/0x250 [ 1491.858859][ T2855] ? show_regs_print_info+0x20/0x20 [ 1491.864188][ T2855] ? _printk+0xda/0x130 [ 1491.868402][ T2855] ? load_image+0x410/0x410 [ 1491.873113][ T2855] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 1491.878611][ T2855] ? hfsplus_iget+0xf4/0x7b0 [ 1491.883416][ T2855] ? lockdep_softirqs_off+0x430/0x430 [ 1491.888949][ T2855] print_address_description+0x60/0x2d0 [ 1491.894635][ T2855] ? hfsplus_btree_open+0xae6/0x1170 [ 1491.900142][ T2855] kasan_report+0xdf/0x130 [ 1491.904612][ T2855] ? hfsplus_btree_open+0xae6/0x1170 [ 1491.909997][ T2855] hfsplus_btree_open+0xae6/0x1170 [ 1491.915161][ T2855] ? do_raw_spin_unlock+0x11d/0x230 [ 1491.920448][ T2855] ? find_nls+0x12c/0x140 [ 1491.925391][ T2855] hfsplus_fill_super+0xa5d/0x1e20 [ 1491.930571][ T2855] ? hfsplus_mount+0x40/0x40 [ 1491.935352][ T2855] ? snprintf+0xe5/0x140 [ 1491.939648][ T2855] ? vscnprintf+0x80/0x80 [ 1491.944031][ T2855] ? up_write+0x1b6/0x410 [ 1491.948411][ T2855] ? set_blocksize+0x1f1/0x360 [ 1491.953223][ T2855] ? sb_set_blocksize+0xa5/0xe0 [ 1491.958244][ T2855] mount_bdev+0x28a/0x3c0 [ 1491.962622][ T2855] ? hfsplus_mount+0x40/0x40 [ 1491.967259][ T2855] legacy_get_tree+0xe6/0x180 [ 1491.972325][ T2855] ? hfsplus_mark_mdb_dirty+0x1b0/0x1b0 [ 1491.977909][ T2855] vfs_get_tree+0x88/0x270 [ 1491.982371][ T2855] do_new_mount+0x247/0xa40 [ 1491.986929][ T2855] __se_sys_mount+0x2e3/0x3d0 [ 1491.991655][ T2855] ? __x64_sys_mount+0xc0/0xc0 [ 1491.996688][ T2855] ? lockdep_hardirqs_on+0x94/0x140 [ 1492.001944][ T2855] ? __x64_sys_mount+0x1c/0xc0 [ 1492.007027][ T2855] do_syscall_64+0x4c/0xa0 [ 1492.011494][ T2855] ? clear_bhb_loop+0x30/0x80 [ 1492.016215][ T2855] ? clear_bhb_loop+0x30/0x80 [ 1492.020943][ T2855] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1492.026887][ T2855] RIP: 0033:0x7f4fbbeb610a [ 1492.031341][ T2855] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1492.051085][ T2855] RSP: 002b:00007f4fba10ce58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1492.059644][ T2855] RAX: ffffffffffffffda RBX: 00007f4fba10cee0 RCX: 00007f4fbbeb610a [ 1492.068140][ T2855] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 00007f4fba10cea0 [ 1492.076326][ T2855] RBP: 00002000000000c0 R08: 00007f4fba10cee0 R09: 0000000000004800 [ 1492.084351][ T2855] R10: 0000000000004800 R11: 0000000000000246 R12: 0000200000000080 [ 1492.092373][ T2855] R13: 00007f4fba10cea0 R14: 00000000000006bb R15: 0000200000000340 [ 1492.101462][ T2855] [ 1492.104657][ T2855] [ 1492.107283][ T2855] Allocated by task 24883: [ 1492.111857][ T2855] __kasan_slab_alloc+0x92/0xc0 [ 1492.116967][ T2855] slab_post_alloc_hook+0x4c/0x380 [ 1492.122124][ T2855] kmem_cache_alloc+0x15d/0x280 [ 1492.127191][ T2855] f2fs_alloc_inode+0x149/0x5b0 [ 1492.133277][ T2855] iget_locked+0x18c/0x820 [ 1492.137744][ T2855] f2fs_iget+0x52/0x4bb0 [ 1492.142140][ T2855] f2fs_fill_super+0x4c33/0x7050 [ 1492.147205][ T2855] mount_bdev+0x28a/0x3c0 [ 1492.151663][ T2855] legacy_get_tree+0xe6/0x180 [ 1492.156976][ T2855] vfs_get_tree+0x88/0x270 [ 1492.161444][ T2855] do_new_mount+0x247/0xa40 [ 1492.165983][ T2855] __se_sys_mount+0x2e3/0x3d0 [ 1492.170688][ T2855] do_syscall_64+0x4c/0xa0 [ 1492.175786][ T2855] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1492.181814][ T2855] [ 1492.184168][ T2855] Last potentially related work creation: [ 1492.189908][ T2855] kasan_save_stack+0x35/0x60 [ 1492.195835][ T2855] kasan_record_aux_stack+0xb8/0x100 [ 1492.201358][ T2855] call_rcu+0x189/0x900 [ 1492.206871][ T2855] evict+0x810/0x8b0 [ 1492.210997][ T2855] evict_inodes+0x650/0x6e0 [ 1492.215546][ T2855] generic_shutdown_super+0x93/0x300 [ 1492.220913][ T2855] kill_block_super+0x7c/0xe0 [ 1492.225628][ T2855] kill_f2fs_super+0x310/0x3d0 [ 1492.230441][ T2855] deactivate_locked_super+0x93/0xf0 [ 1492.235963][ T2855] cleanup_mnt+0x426/0x4d0 [ 1492.240511][ T2855] task_work_run+0x125/0x1a0 [ 1492.245245][ T2855] exit_to_user_mode_loop+0x10f/0x130 [ 1492.250738][ T2855] exit_to_user_mode_prepare+0xee/0x180 [ 1492.256328][ T2855] syscall_exit_to_user_mode+0x16/0x40 [ 1492.261828][ T2855] do_syscall_64+0x58/0xa0 [ 1492.266285][ T2855] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1492.272217][ T2855] [ 1492.274582][ T2855] Second to last potentially related work creation: [ 1492.281192][ T2855] kasan_save_stack+0x35/0x60 [ 1492.285904][ T2855] kasan_record_aux_stack+0xb8/0x100 [ 1492.291231][ T2855] call_rcu+0x189/0x900 [ 1492.295533][ T2855] evict+0x810/0x8b0 [ 1492.299637][ T2855] f2fs_fill_super+0x59b1/0x7050 [ 1492.304635][ T2855] mount_bdev+0x28a/0x3c0 [ 1492.309657][ T2855] legacy_get_tree+0xe6/0x180 [ 1492.314459][ T2855] vfs_get_tree+0x88/0x270 [ 1492.319276][ T2855] do_new_mount+0x247/0xa40 [ 1492.323939][ T2855] __se_sys_mount+0x2e3/0x3d0 [ 1492.328755][ T2855] do_syscall_64+0x4c/0xa0 [ 1492.333204][ T2855] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1492.339306][ T2855] [ 1492.341762][ T2855] The buggy address belongs to the object at ffff88807479cc00 [ 1492.341762][ T2855] which belongs to the cache f2fs_inode_cache of size 2304 [ 1492.356970][ T2855] The buggy address is located 2004 bytes inside of [ 1492.356970][ T2855] 2304-byte region [ffff88807479cc00, ffff88807479d500) [ 1492.370547][ T2855] The buggy address belongs to the page: [ 1492.376218][ T2855] page:ffffea0001d1e600 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888074798000 pfn:0x74798 [ 1492.388187][ T2855] head:ffffea0001d1e600 order:3 compound_mapcount:0 compound_pincount:0 [ 1492.396767][ T2855] memcg:ffff88802868b701 [ 1492.401522][ T2855] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1492.409665][ T2855] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff88801e2af500 [ 1492.418636][ T2855] raw: ffff888074798000 00000000800d0009 00000001ffffffff ffff88802868b701 [ 1492.418884][ T4717] udevd[4717]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1492.427346][ T2855] page dumped because: kasan: bad access detected [ 1492.427420][ T2855] page_owner tracks the page as allocated [ 1492.427428][ T2855] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 5432, ts 121789671301, free_ts 120533783836 [ 1492.478864][ T2855] get_page_from_freelist+0x24f6/0x2670 [ 1492.484459][ T2855] __alloc_pages+0x1ee/0x480 [ 1492.489089][ T2855] new_slab+0xc0/0x4b0 [ 1492.493195][ T2855] ___slab_alloc+0x807/0xdd0 [ 1492.497822][ T2855] kmem_cache_alloc+0xf0/0x280 [ 1492.502814][ T2855] f2fs_alloc_inode+0x149/0x5b0 [ 1492.507701][ T2855] iget_locked+0x18c/0x820 [ 1492.512299][ T2855] f2fs_iget+0x52/0x4bb0 [ 1492.516649][ T2855] f2fs_fill_super+0x4063/0x7050 [ 1492.521908][ T2855] mount_bdev+0x28a/0x3c0 [ 1492.526644][ T2855] legacy_get_tree+0xe6/0x180 [ 1492.532211][ T2855] vfs_get_tree+0x88/0x270 [ 1492.536832][ T2855] do_new_mount+0x247/0xa40 [ 1492.541377][ T2855] __se_sys_mount+0x2e3/0x3d0 [ 1492.546181][ T2855] do_syscall_64+0x4c/0xa0 [ 1492.550640][ T2855] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1492.556571][ T2855] page last free stack trace: [ 1492.561277][ T2855] free_unref_page_prepare+0x637/0x6c0 [ 1492.566827][ T2855] free_unref_page+0x8f/0x2a0 [ 1492.571543][ T2855] qlist_free_all+0x35/0x90 [ 1492.576085][ T2855] kasan_quarantine_reduce+0x150/0x160 [ 1492.581593][ T2855] __kasan_slab_alloc+0x2f/0xc0 [ 1492.586482][ T2855] slab_post_alloc_hook+0x4c/0x380 [ 1492.591638][ T2855] __kmalloc+0x189/0x340 [ 1492.595908][ T2855] tomoyo_realpath_from_path+0xed/0x5e0 [ 1492.601484][ T2855] tomoyo_path_perm+0x23f/0x5d0 [ 1492.606371][ T2855] security_inode_getattr+0xcf/0x120 [ 1492.611694][ T2855] vfs_getattr+0x26/0x3a0 [ 1492.616088][ T2855] __x64_sys_newfstat+0x137/0x210 [ 1492.621328][ T2855] do_syscall_64+0x4c/0xa0 [ 1492.625790][ T2855] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1492.632336][ T2855] [ 1492.634863][ T2855] Memory state around the buggy address: [ 1492.640522][ T2855] ffff88807479d280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1492.649301][ T2855] ffff88807479d300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1492.659378][ T2855] >ffff88807479d380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1492.667938][ T2855] ^ [ 1492.674651][ T2855] ffff88807479d400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1492.682749][ T2855] ffff88807479d480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1492.690839][ T2855] ================================================================== [ 1492.699194][ T2855] Disabling lock debugging due to kernel taint [ 1492.727861][ T2855] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1492.735111][ T2855] CPU: 1 PID: 2855 Comm: syz.1.25748 Tainted: G B syzkaller #0 [ 1492.744506][ T2855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1492.754601][ T2855] Call Trace: [ 1492.757921][ T2855] [ 1492.760894][ T2855] dump_stack_lvl+0x188/0x250 [ 1492.765612][ T2855] ? show_regs_print_info+0x20/0x20 [ 1492.770854][ T2855] ? load_image+0x410/0x410 [ 1492.775419][ T2855] panic+0x2f8/0x850 [ 1492.779448][ T2855] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1492.785733][ T2855] ? bpf_jit_dump+0xd0/0xd0 [ 1492.790283][ T2855] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 1492.796298][ T2855] ? _raw_spin_unlock+0x40/0x40 [ 1492.801194][ T2855] ? hfsplus_btree_open+0xae6/0x1170 [ 1492.806520][ T2855] check_panic_on_warn+0x80/0xa0 [ 1492.811500][ T2855] ? hfsplus_btree_open+0xae6/0x1170 [ 1492.816830][ T2855] end_report+0x6d/0xf0 [ 1492.821019][ T2855] kasan_report+0x102/0x130 [ 1492.825569][ T2855] ? hfsplus_btree_open+0xae6/0x1170 [ 1492.830891][ T2855] hfsplus_btree_open+0xae6/0x1170 [ 1492.836084][ T5229] usb 5-1: USB disconnect, device number 98 [ 1492.836122][ T2855] ? do_raw_spin_unlock+0x11d/0x230 [ 1492.847260][ T2855] ? find_nls+0x12c/0x140 [ 1492.851742][ T2855] hfsplus_fill_super+0xa5d/0x1e20 [ 1492.857415][ T2855] ? hfsplus_mount+0x40/0x40 [ 1492.862077][ T2855] ? snprintf+0xe5/0x140 [ 1492.866366][ T2855] ? vscnprintf+0x80/0x80 [ 1492.870839][ T2855] ? up_write+0x1b6/0x410 [ 1492.875297][ T2855] ? set_blocksize+0x1f1/0x360 [ 1492.880123][ T2855] ? sb_set_blocksize+0xa5/0xe0 [ 1492.885017][ T2855] mount_bdev+0x28a/0x3c0 [ 1492.889889][ T2855] ? hfsplus_mount+0x40/0x40 [ 1492.894616][ T2855] legacy_get_tree+0xe6/0x180 [ 1492.899581][ T2855] ? hfsplus_mark_mdb_dirty+0x1b0/0x1b0 [ 1492.905227][ T2855] vfs_get_tree+0x88/0x270 [ 1492.909839][ T2855] do_new_mount+0x247/0xa40 [ 1492.914372][ T2855] __se_sys_mount+0x2e3/0x3d0 [ 1492.919255][ T2855] ? __x64_sys_mount+0xc0/0xc0 [ 1492.924109][ T2855] ? lockdep_hardirqs_on+0x94/0x140 [ 1492.929494][ T2855] ? __x64_sys_mount+0x1c/0xc0 [ 1492.934446][ T2855] do_syscall_64+0x4c/0xa0 [ 1492.939167][ T2855] ? clear_bhb_loop+0x30/0x80 [ 1492.944173][ T2855] ? clear_bhb_loop+0x30/0x80 [ 1492.949546][ T2855] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1492.955965][ T2855] RIP: 0033:0x7f4fbbeb610a [ 1492.960789][ T2855] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1492.985645][ T2855] RSP: 002b:00007f4fba10ce58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1492.994328][ T2855] RAX: ffffffffffffffda RBX: 00007f4fba10cee0 RCX: 00007f4fbbeb610a [ 1493.003203][ T2855] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 00007f4fba10cea0 [ 1493.011388][ T2855] RBP: 00002000000000c0 R08: 00007f4fba10cee0 R09: 0000000000004800 [ 1493.019685][ T2855] R10: 0000000000004800 R11: 0000000000000246 R12: 0000200000000080 [ 1493.027929][ T2855] R13: 00007f4fba10cea0 R14: 00000000000006bb R15: 0000200000000340 [ 1493.036049][ T2855] [ 1493.039157][ T2855] Kernel Offset: disabled [ 1493.043487][ T2855] Rebooting in 86400 seconds..