last executing test programs: 4.46215605s ago: executing program 0 (id=6897): socket$kcm(0x10, 0x0, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000086552108cd0c6900556e010203010902120001000000000904"], 0x0) 2.583993876s ago: executing program 0 (id=6936): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000032c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000e80)={0x14, 0x36, 0x1, 0x70bd25, 0x25dfdbff, {0x3}}, 0x14}, 0x1, 0xffffffff, 0x0, 0x1}, 0x0) 2.41365536s ago: executing program 0 (id=6939): r0 = syz_usb_connect$uac1(0x5, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="120100020000000844060e804000010303010902600003010400030904001b00010100000a24010e000a0002010209040100000802000009040101"], &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, 0x0, 0x0) 2.41351514s ago: executing program 3 (id=6940): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x903}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_virt_wifi\x00'}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x6676c}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0xfffffffc, 0x3e6, 0xfa}}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x4000040) 2.322314582s ago: executing program 3 (id=6941): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000900014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 2.211612305s ago: executing program 3 (id=6942): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000083512038240000102030109026900030180e007080b0101010a20000904000000010130000924010200030900c50904010000010220000904010101"], 0x0) 1.304824868s ago: executing program 2 (id=6954): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000240)) 1.256947399s ago: executing program 2 (id=6955): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0xfd00, @empty}, {0x2, 0x4e22, @local}, {0x2, 0x20, @empty}, 0x145, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x3, 0x6}) 1.128139472s ago: executing program 2 (id=6957): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x2) 1.041821674s ago: executing program 2 (id=6958): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000130000001300020000000900010073797a300000000058000000120a01040000000000000000020000000900010073797a30000000000900020073797a30000000000800030000000004240004800c00170000000000000000010c00020400000000000000010800040000000001"], 0xbc}, 0x1, 0x0, 0x0, 0x40004811}, 0x0) 1.030531214s ago: executing program 2 (id=6960): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000580)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) 685.834893ms ago: executing program 4 (id=6966): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0xc, "000902", 0x0, 0xe}) 628.402785ms ago: executing program 1 (id=6967): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCSABS3F(r0, 0x401845ff, 0x0) 576.178306ms ago: executing program 4 (id=6968): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newlink={0x5c, 0x10, 0x401, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @mcast2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x894}, 0x2000000) 461.843649ms ago: executing program 1 (id=6969): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0xfffffff8, 0x1, 0x4}) 461.692229ms ago: executing program 4 (id=6970): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x5608, 0x3) 446.787649ms ago: executing program 2 (id=6971): bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_usb_connect(0x5, 0x24, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0xa6, 0x45, 0x49, 0x10, 0x57c, 0x2200, 0x6508, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0xa, 0x20, 0x9, "", [{{0x9, 0x4, 0xc8, 0xfd, 0x0, 0xf4, 0xe6, 0x88, 0x8}}]}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0}) 392.71604ms ago: executing program 3 (id=6972): r0 = socket(0x10, 0x3, 0x9) sendmmsg$unix(r0, &(0x7f0000005b80)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)='|', 0x1}], 0x1, 0x0, 0x0, 0x4044804}}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f00000016c0)=' ', 0x1}], 0x1, &(0x7f0000002c40)=[@cred={{0x1c}}], 0x20, 0x8000}}], 0x2, 0x24004800) 364.738981ms ago: executing program 1 (id=6973): r0 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x80000fff) 363.549001ms ago: executing program 0 (id=6974): r0 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0xc, 0x0, 0x0) 327.734362ms ago: executing program 4 (id=6975): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x125}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 241.754314ms ago: executing program 1 (id=6976): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={{r0}, 0x44a9be3, 0x8000000000000001, 0x800}) 185.803815ms ago: executing program 0 (id=6977): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x2052, r0, 0x4b000) 185.645525ms ago: executing program 3 (id=6978): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x28, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 181.814695ms ago: executing program 4 (id=6979): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) 156.360786ms ago: executing program 1 (id=6980): r0 = socket$netlink(0x10, 0x3, 0x6) sendmsg$netlink(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)={0x18, 0x23, 0x411, 0x70bd27, 0x25dfdbfc, "", [@typed={0x8, 0xd4, 0x0, 0x0, @fd}]}, 0x18}], 0x1}, 0x0) 111.983997ms ago: executing program 0 (id=6981): r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f00000004c0), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_SEND(r0, 0xd0009411, &(0x7f0000000180)={{}, 0xffffffffffffff91, 0x0, 0x6}) 95.286227ms ago: executing program 4 (id=6982): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20100, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x5f) 94.677227ms ago: executing program 3 (id=6983): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x24, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x4}]}, @NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x19, 0x3, "91abc12404cf378042f26c43f91f68d8a90767c0bc"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x9c}}, 0x0) 0s ago: executing program 1 (id=6984): r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt(r0, 0x111, 0x3, 0x0, 0x0) kernel console output (not intermixed with test programs): m="syz.1.4897" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c6ae6f0d9 code=0x7ffc0000 [ 292.799675][T14839] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 292.849741][T14846] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 292.878125][T14839] attempt to access beyond end of device [ 292.878125][T14839] loop3: rw=524288, want=33554432, limit=2048 [ 292.889886][T14848] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 292.915837][ T26] audit: type=1326 audit(1787750691.003:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14830 comm="syz.1.4897" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c6ae6f0d9 code=0x7ffc0000 [ 292.952998][T14839] attempt to access beyond end of device [ 292.952998][T14839] loop3: rw=0, want=33554432, limit=2048 [ 293.000060][T14853] netlink: zone id is out of range [ 293.072924][T14839] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=3) [ 293.114626][T14839] NILFS (loop3): error -5 reading inode: ino=15 [ 293.129395][T14861] loop0: detected capacity change from 0 to 16 [ 293.181300][T14861] erofs: (device loop0): mounted with root inode @ nid 36. [ 293.237356][ T26] audit: type=1326 audit(1787750691.633:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14868 comm="syz.4.4916" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c7e51e0d9 code=0x7ffc0000 [ 293.261622][ C0] vkms_vblank_simulate: vblank timer overrun [ 293.367647][ T26] audit: type=1326 audit(1787750691.653:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14868 comm="syz.4.4916" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c7e51e0d9 code=0x7ffc0000 [ 293.478515][ T26] audit: type=1326 audit(1787750691.653:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14868 comm="syz.4.4916" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9c7e51e0d9 code=0x7ffc0000 [ 293.625575][ T26] audit: type=1326 audit(1787750691.663:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14868 comm="syz.4.4916" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c7e51e0d9 code=0x7ffc0000 [ 293.649772][ C0] vkms_vblank_simulate: vblank timer overrun [ 293.780605][ T26] audit: type=1326 audit(1787750691.663:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14868 comm="syz.4.4916" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c7e51e0d9 code=0x7ffc0000 [ 294.402462][ T6655] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 294.462439][T14936] loop2: detected capacity change from 0 to 512 [ 294.535905][T14945] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4951'. [ 294.545234][T14945] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4951'. [ 294.610157][T14936] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,. Quota mode: writeback. [ 294.657792][ T6655] usb 5-1: Using ep0 maxpacket: 16 [ 294.669757][T14936] ext4 filesystem being mounted at /1051/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 294.690193][T14952] autofs4:pid:14952:autofs_fill_super: called with bogus options [ 294.727711][ T4231] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 294.807995][ T6655] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 294.822080][ T6655] usb 5-1: config 0 has no interface number 0 [ 294.851607][T14936] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.4949: inode #64: comm syz.2.4949: iget: illegal inode # [ 294.881813][T14936] EXT4-fs (loop2): Remounting filesystem read-only [ 294.897407][T14936] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.4949: error while reading EA inode 64 err=-117 [ 294.914045][T14936] EXT4-fs (loop2): Remounting filesystem read-only [ 294.921252][T14936] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.4949: inode #64: comm syz.2.4949: iget: illegal inode # [ 294.941051][T14936] EXT4-fs (loop2): Remounting filesystem read-only [ 294.958192][T14936] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.4949: error while reading EA inode 64 err=-117 [ 294.974169][ T4231] usb 2-1: Using ep0 maxpacket: 32 [ 295.004729][T14936] EXT4-fs (loop2): Remounting filesystem read-only [ 295.027836][ T6655] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 295.067845][ T6655] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.075899][ T6655] usb 5-1: Product: syz [ 295.090158][ T6655] usb 5-1: Manufacturer: syz [ 295.094808][ T6655] usb 5-1: SerialNumber: syz [ 295.101565][ T6655] usb 5-1: config 0 descriptor?? [ 295.108430][ T4231] usb 2-1: config 2 has an invalid interface number: 222 but max is 0 [ 295.119923][ T4231] usb 2-1: config 2 has no interface number 0 [ 295.131398][ T3853] device veth0_vlan left promiscuous mode [ 295.138718][ T6655] hub 5-1:0.132: bad descriptor, ignoring hub [ 295.147998][ T4231] usb 2-1: config 2 interface 222 has no altsetting 0 [ 295.148882][ T6371] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 295.171236][ T3853] device veth0_vlan entered promiscuous mode [ 295.177416][ T6655] hub: probe of 5-1:0.132 failed with error -5 [ 295.186551][ T6655] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.132/input/input20 [ 295.211727][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 295.239401][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 295.285629][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 295.360087][ T4231] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=af.17 [ 295.387793][ T6658] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 295.398132][ T4231] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.426934][ T4231] usb 2-1: Product: syz [ 295.437051][ T4231] usb 2-1: Manufacturer: syz [ 295.466914][ T4231] usb 2-1: SerialNumber: syz [ 295.527441][T14980] CIFS: bad ip= option (::.) [ 295.540249][T14982] x_tables: duplicate entry at hook 2 [ 295.637743][ T6658] usb 4-1: Using ep0 maxpacket: 8 [ 295.758022][ T6658] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 295.808585][T14996] loop2: detected capacity change from 0 to 8192 [ 295.841104][T14996] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 295.841856][ T4231] usb 2-1: USB disconnect, device number 29 [ 295.858671][T14996] REISERFS (device loop2): using ordered data mode [ 295.865251][T14996] reiserfs: using flush barriers [ 295.918151][T14996] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 295.937809][ T6658] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 295.946890][ T6658] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.954922][ T4229] usb 5-1: USB disconnect, device number 25 [ 295.959609][T14996] REISERFS (device loop2): checking transaction log (loop2) [ 295.968194][ T6658] usb 4-1: Product: syz [ 295.972791][ T6658] usb 4-1: Manufacturer: syz [ 295.977409][ T6658] usb 4-1: SerialNumber: syz [ 296.010126][T14967] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 296.100790][T14996] REISERFS (device loop2): Using tea hash to sort names [ 296.118154][T14996] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 296.359048][ T6658] usb 4-1: MIDIStreaming interface descriptor not found [ 296.402171][ T6658] usb 4-1: USB disconnect, device number 27 [ 296.453075][ T6660] Bluetooth: hci0: command 0x080f tx timeout [ 296.501420][ T4261] udevd[4261]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 296.995767][T15044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4982'. [ 297.149570][T15051] loop0: detected capacity change from 0 to 256 [ 297.303975][T15064] ipt_ECN: cannot use operation on non-tcp rule [ 297.443816][T15069] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5004'. [ 297.622002][T15087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5002'. [ 297.713187][T15091] netlink: 'syz.3.5005': attribute type 9 has an invalid length. [ 297.719108][ T4239] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 297.763860][T15091] netlink: 'syz.3.5005': attribute type 7 has an invalid length. [ 297.787633][ T4271] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 297.794568][T15091] netlink: 'syz.3.5005': attribute type 8 has an invalid length. [ 297.806232][T15095] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5007'. [ 297.835049][T15091] netlink: 'syz.3.5005': attribute type 13 has an invalid length. [ 298.217774][ T4271] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 298.232042][ T4271] usb 2-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 298.260697][T15119] device geneve2 entered promiscuous mode [ 298.308330][ T6660] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 298.460093][ T4271] usb 2-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 298.481039][ T4271] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.509887][ T4271] usb 2-1: Product: syz [ 298.526041][ T4271] usb 2-1: Manufacturer: syz [ 298.558108][ T4271] usb 2-1: SerialNumber: syz [ 298.840380][T15158] device bridge4 entered promiscuous mode [ 298.928698][ T4231] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 299.077703][ C0] usb 2-1: received EP1 urb->status = -71 [ 299.083664][ T4271] usb 2-1: unable to init card! (ret=-71) [ 299.094002][ T4271] snd-usb-caiaq: probe of 2-1:1.0 failed with error -71 [ 299.128542][ T4271] usb 2-1: USB disconnect, device number 30 [ 299.197855][ T4231] usb 1-1: Using ep0 maxpacket: 8 [ 299.284858][T15176] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5046'. [ 299.308630][T15176] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5046'. [ 299.329801][T15176] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5046'. [ 299.339694][ T4231] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 299.351309][ T4231] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 299.363586][ T4231] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 299.374621][ T4231] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 299.398339][ T4231] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 299.413161][ T4231] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 299.424145][ T4231] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.454928][ T4231] usb 1-1: config 0 descriptor?? [ 299.528658][ T4193] Bluetooth: hci5: urb ffff888148015800 submission failed (90) [ 299.542311][T15160] loop4: detected capacity change from 0 to 32768 [ 299.588901][T15160] XFS: noikeep mount option is deprecated. [ 299.663197][T15160] XFS (loop4): Mounting V5 Filesystem [ 299.686670][T15194] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5052'. [ 299.747919][ T4231] usb 1-1: USB disconnect, device number 25 [ 299.747924][ T6655] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 299.769199][T15160] XFS (loop4): Ending clean mount [ 299.789171][T15160] XFS (loop4): Quotacheck needed: Please wait. [ 299.827881][ T6660] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 299.934724][T15160] XFS (loop4): Quotacheck: Done. [ 299.976295][ T4199] XFS (loop4): Unmounting Filesystem [ 300.007356][ T6655] usb 3-1: Using ep0 maxpacket: 32 [ 300.167891][ T6655] usb 3-1: unable to get BOS descriptor or descriptor too short [ 300.198398][ T6660] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 300.208818][ T6660] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 300.222256][ T6658] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 300.230180][ T6660] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 300.243606][ T6660] usb 4-1: config 1 interface 1 has no altsetting 0 [ 300.263965][ T6655] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 300.272951][ T1232] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 300.287167][ T6655] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 300.298330][ T6655] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 300.307859][ T6655] usb 3-1: config 128 has no interface number 0 [ 300.314666][ T6655] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 300.326427][ T6655] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 300.357284][ T6655] usb 3-1: config 128 interface 127 has no altsetting 0 [ 300.382583][T15204] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.5056'. [ 300.417818][ T6660] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 300.426964][ T6660] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.464761][ T6660] usb 4-1: Product: syz [ 300.469585][ T6660] usb 4-1: Manufacturer: syz [ 300.474223][ T6660] usb 4-1: SerialNumber: syz [ 300.537837][ T6655] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 300.546937][ T6655] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.556631][ T6660] cdc_ncm 4-1:1.0: skipping garbage [ 300.565740][ T6660] cdc_ncm 4-1:1.0: NCM or ECM functional descriptors missing [ 300.584174][ T6660] cdc_ncm 4-1:1.0: bind() failure [ 300.589798][ T6655] usb 3-1: Product: syz [ 300.594025][ T6655] usb 3-1: Manufacturer: syz [ 300.604982][ T6655] usb 3-1: SerialNumber: syz [ 300.618252][ T6658] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 300.630824][ T6658] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 300.640564][ T6658] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 300.654417][ T6658] usb 2-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 300.664147][ T6658] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.721411][ T6658] ims_pcu 2-1:1.0: Missing CDC union descriptor [ 300.745022][ T6658] ims_pcu: probe of 2-1:1.0 failed with error -22 [ 300.811352][T15220] dlm: dev_write: no op 0 74000000000000 [ 300.915384][T15225] netlink: 140 bytes leftover after parsing attributes in process `syz.4.5066'. [ 300.943422][T15225] netlink: 140 bytes leftover after parsing attributes in process `syz.4.5066'. [ 300.964394][T15216] infiniband syz2: set active [ 300.969460][T15216] infiniband syz2: added veth0_vlan [ 301.002511][T15228] netlink: 'syz.4.5067': attribute type 1 has an invalid length. [ 301.018936][ T4229] usb 4-1: USB disconnect, device number 28 [ 301.051842][T15216] RDS/IB: syz2: added [ 301.057372][ T6655] usb 3-1: USB disconnect, device number 26 [ 301.071212][T15216] smc: adding ib device syz2 with port count 1 [ 301.077708][T15216] smc: ib device syz2 port 1 has pnetid [ 301.288347][ T7636] udevd[7636]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 301.573293][T15239] loop4: detected capacity change from 0 to 512 [ 301.640557][T15239] EXT4-fs (loop4): Ignoring removed orlov option [ 301.653549][T15239] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 301.695968][T15239] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 301.726378][T15239] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.5072: attempt to clear invalid blocks 2 len 1 [ 301.819568][T15239] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 301.899480][T15239] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.5072: invalid indirect mapped block 1819239214 (level 0) [ 301.961133][T15239] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.5072: invalid indirect mapped block 1819239214 (level 1) [ 302.007056][T15259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5080'. [ 302.016582][T15239] EXT4-fs (loop4): 1 truncate cleaned up [ 302.036650][T15239] EXT4-fs (loop4): mounted filesystem without journal. Opts: orlov,init_itable=0x0000000000000003,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 302.159223][T15265] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5082'. [ 302.323199][T15276] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5088'. [ 302.415184][T15279] x_tables: duplicate underflow at hook 4 [ 302.426084][T15282] xt_TCPMSS: Only works on TCP SYN packets [ 302.508040][ T6658] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 302.517966][T15286] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5093'. [ 302.871413][ T6658] usb 4-1: config 0 has an invalid interface number: 237 but max is 0 [ 302.893593][ T6658] usb 4-1: config 0 has no interface number 0 [ 302.902457][ T6655] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 302.915362][ T6658] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 302.941891][ T6658] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 302.962016][ T6658] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 302.977728][ T6660] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 302.997957][ T6658] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 303.021810][T10251] usb 2-1: USB disconnect, device number 31 [ 303.126419][T15324] netlink: 'syz.1.5113': attribute type 1 has an invalid length. [ 303.139642][T15324] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.5113'. [ 303.157862][T15324] netlink: 'syz.1.5113': attribute type 1 has an invalid length. [ 303.178003][ T6658] usb 4-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6 [ 303.187133][ T6658] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.213572][ T6658] usb 4-1: Product: syz [ 303.232178][ T6658] usb 4-1: Manufacturer: syz [ 303.236869][ T6658] usb 4-1: SerialNumber: syz [ 303.251074][ T6658] usb 4-1: config 0 descriptor?? [ 303.268441][ T6655] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 303.281161][ T6655] usb 3-1: config 2 has 1 interface, different from the descriptor's value: 3 [ 303.302088][ T6658] xpad 4-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 303.329168][ T6658] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.237/input/input21 [ 303.468204][ T305] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 303.481147][ T6655] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=bd.95 [ 303.497744][ T6660] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 303.527221][ T6660] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.535904][ T6655] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.547050][ T6660] usb 5-1: Product: syz [ 303.553798][ T6655] usb 3-1: Product: syz [ 303.564327][ T6660] usb 5-1: Manufacturer: syz [ 303.570083][ T6655] usb 3-1: Manufacturer: syz [ 303.574724][ T6655] usb 3-1: SerialNumber: syz [ 303.582248][ T6660] usb 5-1: SerialNumber: syz [ 303.590029][ T6660] usb 5-1: config 0 descriptor?? [ 303.708041][ T9671] usb 4-1: USB disconnect, device number 29 [ 303.730825][ T9671] xpad 4-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 303.828122][T15352] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5124'. [ 303.870052][ T6660] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 303.908234][ T6655] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 303.916935][ T6655] dvb_usb_af9015: probe of 3-1:2.0 failed with error -22 [ 303.987889][ T6655] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 303.994351][ T6655] dvb_usb_af9035: probe of 3-1:2.0 failed with error -22 [ 304.015558][ T6655] usb 3-1: USB disconnect, device number 27 [ 304.087773][ T6660] usb write operation failed. (-71) [ 304.107355][ T6660] usb 5-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 304.142772][ T6660] usb write operation failed. (-71) [ 304.166425][ T6660] usb 5-1: USB disconnect, device number 26 [ 304.339755][T15374] loop3: detected capacity change from 0 to 512 [ 304.483905][T15374] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 304.497826][T15374] ext4 filesystem being mounted at /953/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.951535][ T4229] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 305.052847][T15421] affs: No valid root block on device nbd3 [ 305.207737][ T4229] usb 1-1: Using ep0 maxpacket: 16 [ 305.330470][T15437] netlink: 'syz.3.5165': attribute type 1 has an invalid length. [ 305.347959][ T4229] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 305.364602][ T4229] usb 1-1: config 0 has no interface number 0 [ 305.392035][T15437] openvswitch: netlink: Actions may not be safe on all matching packets [ 305.578336][ T4229] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 305.618054][ T4229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.626137][ T4229] usb 1-1: Product: syz [ 305.665856][ T4229] usb 1-1: Manufacturer: syz [ 305.686345][T15459] program syz.2.5176 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 305.706389][ T4229] usb 1-1: SerialNumber: syz [ 305.720763][ T4229] usb 1-1: config 0 descriptor?? [ 305.788506][ T4229] hub 1-1:0.132: bad descriptor, ignoring hub [ 305.804898][ T4229] hub: probe of 1-1:0.132 failed with error -5 [ 305.844770][ T4229] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.132/input/input22 [ 306.028430][ T305] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 306.183753][T15489] vivid-001: ================= START STATUS ================= [ 306.203013][T15489] vivid-001: Enable Output Cropping: true [ 306.220919][T15489] vivid-001: Enable Output Composing: true [ 306.233866][T15489] vivid-001: Enable Output Scaler: true [ 306.240388][ T4229] usb 1-1: USB disconnect, device number 26 [ 306.252733][T15489] vivid-001: Tx RGB Quantization Range: Automatic [ 306.261465][T15489] vivid-001: Transmit Mode: HDMI [ 306.268587][T15489] vivid-001: Display Present: true inactive [ 306.274622][T15489] vivid-001: Hotplug Present: 0x00000001 [ 306.290674][T15489] vivid-001: RxSense Present: 0x00000001 [ 306.296370][T15489] vivid-001: EDID Present: 0x00000001 [ 306.303699][ T9671] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 306.322668][T15489] vivid-001: ================== END STATUS ================== [ 306.597671][ T9671] usb 3-1: Using ep0 maxpacket: 16 [ 306.737950][ T9671] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 306.746839][ T9671] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 306.785204][ T9671] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.815698][ T9671] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 306.839174][ T9671] usb 3-1: config 0 has no interface number 0 [ 306.859668][ T9671] usb 3-1: config 0 interface 125 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 306.919945][ T9671] usb 3-1: config 0 interface 125 has no altsetting 0 [ 307.138085][ T9671] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 307.167863][ T9671] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.191617][ T9671] usb 3-1: Product: syz [ 307.195859][ T9671] usb 3-1: Manufacturer: syz [ 307.237972][ T9671] usb 3-1: SerialNumber: syz [ 307.261659][ T9671] usb 3-1: config 0 descriptor?? [ 307.307805][ T6660] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 307.515749][ T9671] usb 3-1: USB disconnect, device number 28 [ 307.667790][ T6660] usb 5-1: config 0 has an invalid interface number: 237 but max is 0 [ 307.676050][ T6660] usb 5-1: config 0 has no interface number 0 [ 307.680612][T15569] __nla_validate_parse: 19 callbacks suppressed [ 307.680628][T15569] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5222'. [ 307.717676][ T6660] usb 5-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 307.753691][ T6660] usb 5-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 307.784226][ T6660] usb 5-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 307.836422][ T6660] usb 5-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 308.027929][ T6660] usb 5-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6 [ 308.047295][ T6660] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.077718][ T6660] usb 5-1: Product: syz [ 308.081960][ T6660] usb 5-1: Manufacturer: syz [ 308.108079][ T6660] usb 5-1: SerialNumber: syz [ 308.131087][ T6660] usb 5-1: config 0 descriptor?? [ 308.171301][ T6660] xpad 5-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 308.224497][ T6660] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.237/input/input24 [ 308.253557][T15595] netlink: 'syz.1.5232': attribute type 13 has an invalid length. [ 308.366234][T15600] dlm: plock device version mismatch: kernel (1.2.0), user (1.32.0) [ 308.568821][ T7240] usb 5-1: USB disconnect, device number 27 [ 308.575876][ T7240] xpad 5-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 308.614918][T15595] gretap0: refused to change device tx_queue_len [ 308.635471][T15595] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 309.077877][ T6658] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 309.228339][ T305] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 309.368032][ T4231] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 309.501745][ T6658] usb 4-1: unable to get BOS descriptor or descriptor too short [ 309.603102][ T6658] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 309.623132][ T6658] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 309.657769][ T4231] usb 3-1: Using ep0 maxpacket: 8 [ 309.715178][T15670] x_tables: duplicate underflow at hook 3 [ 309.788442][ T4231] usb 3-1: config 243 has an invalid interface number: 78 but max is 0 [ 309.796795][ T4231] usb 3-1: config 243 has no interface number 0 [ 309.815892][ T4231] usb 3-1: config 243 interface 78 has no altsetting 0 [ 309.819151][ T6658] usb 4-1: New USB device found, idVendor=041e, idProduct=3f04, bcdDevice= 0.40 [ 309.852345][ T6658] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.871303][ T6658] usb 4-1: Product: syz [ 309.895868][ T6658] usb 4-1: Manufacturer: syz [ 309.905997][ T6658] usb 4-1: SerialNumber: syz [ 310.050333][ T4231] usb 3-1: New USB device found, idVendor=2639, idProduct=0011, bcdDevice=69.b0 [ 310.069943][ T4231] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.097497][T15686] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5271'. [ 310.101162][ T4231] usb 3-1: Product: syz [ 310.137739][ T4231] usb 3-1: Manufacturer: syz [ 310.143067][ T4231] usb 3-1: SerialNumber: syz [ 310.280861][T15696] loop0: detected capacity change from 0 to 4096 [ 310.287880][ T6658] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 310.320910][ T6658] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 310.336087][ T6658] usb 4-1: USB disconnect, device number 30 [ 310.393475][T15696] EXT4-fs (loop0): Test dummy encryption mode enabled [ 310.417845][ T6660] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 310.474383][T15696] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue. Quota mode: writeback. [ 310.489044][ T4231] usb 3-1: USB disconnect, device number 29 [ 310.558598][ T7636] udevd[7636]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 310.622007][T15706] device virt_wifi0 entered promiscuous mode [ 310.777902][ T6660] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 310.793866][ T6660] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.820954][ T6660] usb 2-1: config 0 has no interface number 0 [ 310.827110][ T6660] usb 2-1: config 0 interface 1 has no altsetting 0 [ 310.878494][ T6660] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 310.900167][ T6660] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.909527][ T6660] usb 2-1: config 0 descriptor?? [ 310.963717][T15722] xt_CT: You must specify a L4 protocol and not use inversions on it [ 311.144759][T15734] loop3: detected capacity change from 0 to 8 [ 311.168750][ T4229] usb 2-1: USB disconnect, device number 32 [ 311.357062][T15742] ipt_rpfilter: unknown options [ 311.712658][T15764] usb usb8: usbfs: process 15764 (syz.3.5309) did not claim interface 0 before use [ 311.859068][T15772] SET target dimension over the limit! [ 311.977931][ T4229] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 312.117746][ T6660] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 312.293309][T15799] netlink: 'syz.3.5326': attribute type 46 has an invalid length. [ 312.331516][T15799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5326'. [ 312.368186][ T4229] usb 1-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 312.387594][ T4229] usb 1-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.437742][ T4229] usb 1-1: config 1 interface 0 has no altsetting 0 [ 312.487970][ T6660] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 312.503220][ T6660] usb 3-1: config 0 has no interface number 0 [ 312.536199][ T6660] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 312.557423][T15812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5333'. [ 312.570617][ T6660] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 312.608142][ T4229] usb 1-1: New USB device found, idVendor=10cf, idProduct=1713, bcdDevice= 0.40 [ 312.617241][ T4229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.672161][ T4229] usb 1-1: Product: syz [ 312.673986][T15817] program syz.4.5336 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 312.676736][ T4229] usb 1-1: Manufacturer: syz [ 312.717997][ T4229] usb 1-1: SerialNumber: syz [ 312.767960][ T6660] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 312.777107][ T6660] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.834854][ T6660] usb 3-1: Product: syz [ 312.850722][ T6660] usb 3-1: Manufacturer: syz [ 312.868726][ T6660] usb 3-1: SerialNumber: syz [ 312.885851][ T6660] usb 3-1: config 0 descriptor?? [ 312.922409][T15770] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 312.939386][ T6660] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 312.958090][ T6660] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 312.978675][T15832] tmpfs: Bad value for 'mpol' [ 313.067880][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 313.123789][T15839] loop3: detected capacity change from 0 to 128 [ 313.150932][ T7240] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 313.167086][T15839] vxfs: WRONG superblock magic 7b3185b5 at 1 [ 313.178177][ C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 313.188244][ T4229] usbhid 1-1:1.0: can't add hid device: -71 [ 313.198150][ T4229] usbhid: probe of 1-1:1.0 failed with error -71 [ 313.211043][T15839] vxfs: unsupported VxFS version (-1232326277) [ 313.223330][ T4229] usb 1-1: USB disconnect, device number 27 [ 313.368238][ T6660] usb 3-1: USB disconnect, device number 30 [ 313.397713][ T6660] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 313.423598][ T6660] cyberjack 3-1:0.69: device disconnected [ 313.537935][ T7240] usb 2-1: config 0 has an invalid interface number: 237 but max is 0 [ 313.550617][ T7240] usb 2-1: config 0 has no interface number 0 [ 313.556896][ T7240] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 313.568412][ T7240] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 313.585705][ T7240] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 313.597394][ T7240] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 313.697072][T15866] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5360'. [ 313.719869][T15866] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5360'. [ 313.757747][ T6655] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 313.768133][ T7240] usb 2-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6 [ 313.782976][ T7240] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.793612][ T7240] usb 2-1: Product: syz [ 313.793792][T15869] netlink: 'syz.3.5362': attribute type 1 has an invalid length. [ 313.804713][ T7240] usb 2-1: Manufacturer: syz [ 313.810725][T15869] netlink: 'syz.3.5362': attribute type 1 has an invalid length. [ 313.819750][T15869] netlink: 'syz.3.5362': attribute type 2 has an invalid length. [ 313.827510][T15869] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5362'. [ 313.836779][ T7240] usb 2-1: SerialNumber: syz [ 313.844905][ T7240] usb 2-1: config 0 descriptor?? [ 313.891379][ T7240] xpad 2-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 313.919250][ T7240] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.237/input/input25 [ 314.069456][ T4231] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 314.198983][ T4271] usb 2-1: USB disconnect, device number 33 [ 314.206030][ T4271] xpad 2-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 314.251791][T15891] netlink: 'syz.2.5371': attribute type 1 has an invalid length. [ 314.259937][T15891] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5371'. [ 314.259961][ T6655] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 314.281912][ T6655] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 314.290028][ T6655] usb 5-1: Product: syz [ 314.294218][ T6655] usb 5-1: SerialNumber: syz [ 314.305010][ T6655] usb 5-1: config 0 descriptor?? [ 314.457968][ T7240] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 314.460942][ T4231] usb 1-1: not running at top speed; connect to a high speed hub [ 314.503936][T15903] loop2: detected capacity change from 0 to 8 [ 314.567977][ T6655] hso 5-1:0.0: Can't find BULK IN endpoint [ 314.707710][ T7240] usb 4-1: Using ep0 maxpacket: 16 [ 314.770136][ T6660] usb 5-1: USB disconnect, device number 28 [ 314.798002][ T4231] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 314.807373][ T4231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.815756][ T4231] usb 1-1: Product: syz [ 314.820278][ T4231] usb 1-1: Manufacturer: syz [ 314.824956][ T4231] usb 1-1: SerialNumber: syz [ 314.829233][ T7240] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 314.900360][ T4231] keyspan 1-1:1.0: Keyspan 4 port adapter converter detected [ 314.910484][ T4231] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 314.922058][ T4231] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 314.932506][ T4231] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 314.944274][ T4231] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 314.987814][ T4271] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 315.003075][ T7240] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 315.030284][ T7240] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.043204][ T7240] usb 4-1: Product: syz [ 315.047430][ T7240] usb 4-1: Manufacturer: syz [ 315.055251][ T7240] usb 4-1: SerialNumber: syz [ 315.062470][ T7240] r8152-cfgselector 4-1: config 0 descriptor?? [ 315.129130][ C0] usb 1-1: malformed indat packet [ 315.314786][ T4231] usb 1-1: USB disconnect, device number 28 [ 315.339370][ T4231] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 315.382247][ T4231] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 315.392465][ T4271] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.410518][T15920] dlm: Unknown command passed to DLM device : 152 [ 315.410518][T15920] [ 315.419730][ T4271] usb 3-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 315.447982][ T4271] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.457175][ T4231] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 315.488957][ T4271] usb 3-1: config 0 descriptor?? [ 315.501819][ T4231] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 315.514536][ T4231] keyspan 1-1:1.0: device disconnected [ 315.556941][ T7240] r8152-cfgselector 4-1: Unknown version 0x0000 [ 315.570225][ T7240] r8152-cfgselector 4-1: USB disconnect, device number 31 [ 315.579438][ T4271] usb 3-1: bad CDC descriptors [ 315.601452][ T4271] usb 3-1: bad CDC descriptors [ 315.605356][T15927] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5388'. [ 315.767361][ T6655] usb 3-1: USB disconnect, device number 31 [ 315.776390][T15935] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5392'. [ 315.930270][T15943] kAFS: unparsable volume name [ 316.031641][T15951] SET target dimension over the limit! [ 316.262329][T15966] damon: invalid nr_regions. min (30786325577728) > max (1023) [ 316.360888][T15974] usb usb8: usbfs: process 15974 (syz.2.5409) did not claim interface 0 before use [ 316.660144][T15999] netlink: 'syz.3.5419': attribute type 1 has an invalid length. [ 316.694139][T15999] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5419'. [ 316.738413][T15999] nbd: couldn't find a device at index 1024 [ 316.914380][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.921122][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.246950][T16035] netlink: 'syz.4.5440': attribute type 1 has an invalid length. [ 317.318052][T16035] netlink: 228 bytes leftover after parsing attributes in process `syz.4.5440'. [ 317.342117][T16040] IPVS: length: 248 != 24 [ 317.460290][T16048] netlink: 'syz.4.5447': attribute type 8 has an invalid length. [ 317.592226][T16058] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5451'. [ 317.604466][T16056] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5450'. [ 317.637871][ T1111] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 318.011741][ T1111] usb 3-1: not running at top speed; connect to a high speed hub [ 318.137869][ T1111] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 318.166008][ T1111] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 318.193761][ T1111] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.272412][ T1111] uvcvideo 3-1:1.1: Unknown video format 32595559-0000-0010-8000-000000000000 [ 318.290361][ T1111] usb 3-1: Found UVC 1.00 device (046d:0825) [ 318.479996][ T1111] usb 3-1: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 318.490278][ T4231] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 318.521347][ T1111] usb 3-1: Failed to query (GET_INFO) UVC control 5 on unit 1: -71 (exp. 1). [ 318.530748][ T1111] uvcvideo 3-1:1.1: No supported video formats found. [ 318.540964][ T1111] uvcvideo 3-1:1.1: Failed to initialize the device (-22). [ 318.575860][ T1111] usb 3-1: USB disconnect, device number 32 [ 318.762331][ T4231] usb 1-1: Using ep0 maxpacket: 8 [ 318.867851][ T6658] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 318.900290][ T4231] usb 1-1: config 2 has an invalid interface number: 111 but max is 0 [ 318.918771][ T4231] usb 1-1: config 2 has no interface number 0 [ 318.935276][ T4231] usb 1-1: too many endpoints for config 2 interface 111 altsetting 55: 172, using maximum allowed: 30 [ 318.989329][ T4231] usb 1-1: config 2 interface 111 altsetting 55 has 0 endpoint descriptors, different from the interface descriptor's value: 172 [ 318.993092][T16140] No source specified [ 319.008819][ T4231] usb 1-1: config 2 interface 111 has no altsetting 0 [ 319.032703][ T4231] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 319.078626][ T4231] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.079920][T16144] CIFS mount error: No usable UNC path provided in device string! [ 319.079920][T16144] [ 319.111911][T16144] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 319.221257][T16150] 8021q: adding VLAN 0 to HW filter on device bond2 [ 319.237863][ T6658] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 319.259841][ T6658] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 319.300037][ T6658] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 319.355545][ T6658] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 319.381621][ T6658] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 0 [ 319.397905][ T4231] usb 1-1: string descriptor 0 read error: -71 [ 319.416252][ T6658] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 319.428074][ T4231] usb 1-1: USB disconnect, device number 29 [ 319.457743][ T6658] usb 5-1: New USB device found, idVendor=1608, idProduct=0201, bcdDevice= 1.00 [ 319.480498][ T6658] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.494905][T16159] loop2: detected capacity change from 0 to 4096 [ 319.538036][T16108] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 319.549624][T16159] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 319.567790][T16108] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 319.579005][ T6658] io_ti 5-1:1.0: required endpoints missing [ 319.830511][ T4231] usb 5-1: USB disconnect, device number 29 [ 319.858526][T16181] netlink: 'syz.1.5512': attribute type 11 has an invalid length. [ 319.870241][T16181] netlink: 448 bytes leftover after parsing attributes in process `syz.1.5512'. [ 320.113996][ T6658] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 320.367823][ T6658] usb 4-1: Using ep0 maxpacket: 8 [ 320.553464][T16224] netlink: 800 bytes leftover after parsing attributes in process `syz.4.5533'. [ 320.570761][T16224] netlink: 1301 bytes leftover after parsing attributes in process `syz.4.5533'. [ 320.584902][ T26] audit: type=1326 audit(1787750718.983:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16225 comm="syz.2.5534" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c552f0d9 code=0x7ffc0000 [ 320.647894][ T6658] usb 4-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40 [ 320.670512][ T26] audit: type=1326 audit(1787750719.023:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16225 comm="syz.2.5534" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7fd1c552f0d9 code=0x7ffc0000 [ 320.676749][ T6658] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.743827][ T6658] usb 4-1: Product: syz [ 320.752232][ T26] audit: type=1326 audit(1787750719.023:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16225 comm="syz.2.5534" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c552f0d9 code=0x7ffc0000 [ 320.759212][ T6658] usb 4-1: Manufacturer: ķ”·ģ““ē»‚ē«¶ā©›ėŒšę­¤ä”™ć„ØźŽģ˜—ė‰“į”„ąÆ¤ę¦­é§–źˆ£čµ©ćŒ¦ļæ³įæƒĒ„čØģžŒįøåžŒč¾¼ēŗ«ą§”äŒæļ½°īž¶å±’ė¤°ī‘žź‚—ä¢¢č€Ŗź®¦ä¤­čœæēšå¶ˆā†®į ­é›®ā¼Œā¶²ģ½Šķ’—įÆ“ź©‘čŸ™ä“’ā—¦īŗŽć½„ä¢Ŗä§Øć‰ēŗ¢å®•å³“ā‘«ģŽŽź™Œč§¤č·”é‰ˆź“¢ę«¦ļ’‰ļŸŠį’”ęÆš¢¢£ [ 320.779140][ T4231] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 320.836245][ T26] audit: type=1326 audit(1787750719.023:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16225 comm="syz.2.5534" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c552f0d9 code=0x7ffc0000 [ 320.892785][T16236] program syz.4.5539 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 320.932270][T16235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5537'. [ 320.952730][ T6658] usb 4-1: SerialNumber: syz [ 320.959303][T16235] openvswitch: netlink: Actions may not be safe on all matching packets [ 320.992459][T16239] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5540'. [ 321.159419][T16248] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5545'. [ 321.237871][ T4231] usb 1-1: config 0 has an invalid interface number: 237 but max is 0 [ 321.259217][ T4231] usb 1-1: config 0 has no interface number 0 [ 321.265419][ T4231] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 321.290719][ T4231] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 321.298342][T16256] netlink: 'syz.2.5548': attribute type 21 has an invalid length. [ 321.308761][ T4231] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 321.327969][ T6658] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 321.337939][ T4231] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 321.357334][ T6658] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 321.376618][T16256] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5548'. [ 321.411198][ T6658] usb 4-1: USB disconnect, device number 32 [ 321.489409][ T7636] udevd[7636]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 321.522408][T16265] netlink: 200 bytes leftover after parsing attributes in process `syz.4.5553'. [ 321.540316][ T4231] usb 1-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6 [ 321.556054][ T4231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.584999][ T4231] usb 1-1: Product: syz [ 321.597664][ T4231] usb 1-1: Manufacturer: syz [ 321.602316][ T4231] usb 1-1: SerialNumber: syz [ 321.626494][ T4231] usb 1-1: config 0 descriptor?? [ 321.701420][ T4231] xpad 1-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 321.734068][ T4231] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.237/input/input26 [ 321.887370][T16282] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5560'. [ 321.936235][T16282] openvswitch: netlink: Key 29 has unexpected len 3064 expected 0 [ 322.134078][ T1111] usb 1-1: USB disconnect, device number 30 [ 322.161120][ T1111] xpad 1-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 322.367664][ T6658] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 322.608665][ T6658] usb 2-1: Using ep0 maxpacket: 16 [ 322.656741][T16330] damon: min_nr_regions (0) must be at least 3 [ 322.677382][T16332] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 322.737884][ T6658] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 322.762310][ T6658] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 322.938005][ T6658] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 322.957322][ T6658] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.979613][ T6658] usb 2-1: Product: syz [ 322.988396][ T6658] usb 2-1: Manufacturer: syz [ 322.993049][ T6658] usb 2-1: SerialNumber: syz [ 323.077988][T16358] netlink: 'syz.4.5599': attribute type 10 has an invalid length. [ 323.202149][T16358] team0 (unregistering): Port device team_slave_0 removed [ 323.222340][T16358] team0 (unregistering): Port device team_slave_1 removed [ 323.276089][ T6660] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 323.318278][ T6658] usb 2-1: 0:2 : does not exist [ 323.347528][ T6658] usb 2-1: USB disconnect, device number 34 [ 323.357741][ T6655] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 323.517792][ T6660] usb 1-1: Using ep0 maxpacket: 16 [ 323.581523][T16383] TCP: TCP_TX_DELAY enabled [ 323.607358][ T7636] udevd[7636]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 323.639705][ T6660] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 323.649921][ T6660] usb 1-1: config 0 has no interface number 0 [ 323.656099][ T6660] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 323.690353][T16387] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5612'. [ 323.740120][ T6655] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 323.750811][ T6655] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.766678][ T6655] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 323.837992][ T6660] usb 1-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 323.868411][ T6660] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.876461][ T6660] usb 1-1: Product: syz [ 323.898277][T16390] loop4: detected capacity change from 0 to 4096 [ 323.902138][ T6660] usb 1-1: Manufacturer: syz [ 323.919387][ T6660] usb 1-1: SerialNumber: syz [ 323.927938][ T6655] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 323.937015][ T6655] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 323.954909][ T6660] usb 1-1: config 0 descriptor?? [ 323.956899][T16390] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 323.997807][ T6655] usb 3-1: Product: syz [ 324.002062][ T6655] usb 3-1: Manufacturer: syz [ 324.010563][ T6660] cypress_m8 1-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 324.069264][ T6655] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected [ 324.097370][ T6655] garmin_gps ttyUSB1: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 324.162165][ T6655] garmin_gps: probe of ttyUSB1 failed with error -8 [ 324.250240][ T6660] usb 1-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0 [ 324.296544][ T6660] usb 1-1: USB disconnect, device number 31 [ 324.324450][ T6655] usb 3-1: USB disconnect, device number 33 [ 324.343162][ T6655] garmin_gps 3-1:1.0: device disconnected [ 324.355496][ T6660] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0 [ 324.385415][ T6660] cypress_m8 1-1:0.35: device disconnected [ 324.787886][ T7240] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 324.986358][T16451] smc: removing ib device syz0 [ 325.087171][T16460] netlink: 288 bytes leftover after parsing attributes in process `syz.0.5649'. [ 325.197507][ T7240] usb 2-1: unable to get BOS descriptor or descriptor too short [ 325.238148][ T7240] usb 2-1: not running at top speed; connect to a high speed hub [ 325.317765][ T7240] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 325.342538][ T7240] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 325.355007][ T7240] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 325.527933][ T7240] usb 2-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 0.40 [ 325.562487][ T7240] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.582116][ T7240] usb 2-1: Product: syz [ 325.591670][ T7240] usb 2-1: Manufacturer: syz [ 325.611566][ T7240] usb 2-1: SerialNumber: syz [ 325.779437][T16495] ERROR: device name not specified. [ 326.007914][ T7240] usb 2-1: 1:1 : no or invalid class specific endpoint descriptor [ 326.015833][ T7240] usb 2-1: 1:1 : format type 50 is not supported yet [ 326.069038][ T7240] usb 2-1: 0:2 : does not exist [ 326.081723][T16510] netlink: 'syz.4.5672': attribute type 10 has an invalid length. [ 326.102789][ T7240] usb 2-1: USB disconnect, device number 35 [ 326.123262][T16510] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.130780][T16510] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.152109][T16514] netlink: 9412 bytes leftover after parsing attributes in process `syz.3.5675'. [ 326.229410][T16510] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.236562][T16510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.244070][T16510] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.251206][T16510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.321827][T16510] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 326.361090][ T7636] udevd[7636]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 326.708213][T16542] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.937766][ T4229] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 327.110863][T16541] loop4: detected capacity change from 0 to 32768 [ 327.139024][T16552] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 327.324279][T16558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5695'. [ 327.501723][T16567] netlink: 'syz.2.5700': attribute type 2 has an invalid length. [ 327.524928][T16567] netlink: 'syz.2.5700': attribute type 4 has an invalid length. [ 327.538146][ T4229] usb 2-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 327.577857][ T4229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.585907][ T4229] usb 2-1: Product: syz [ 327.607758][ T4229] usb 2-1: Manufacturer: syz [ 327.617846][ T4229] usb 2-1: SerialNumber: syz [ 327.638725][ T4229] usb 2-1: config 0 descriptor?? [ 327.729959][ T4229] usb 2-1: selecting invalid altsetting 3 [ 327.739028][ T6658] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 327.763603][ T4229] comedi comedi5: could not set alternate setting 3 in high speed [ 327.798184][ T4229] usbdux 2-1:0.0: driver 'usbdux' failed to auto-configure device. [ 327.851302][ T4229] usbdux: probe of 2-1:0.0 failed with error -22 [ 327.983709][T16536] udc-core: couldn't find an available UDC or it's busy [ 328.010107][T16536] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 328.018102][T16588] xt_CONNSECMARK: invalid mode: 0 [ 328.035976][ T7240] usb 2-1: USB disconnect, device number 36 [ 328.212214][T16600] loop3: detected capacity change from 0 to 1024 [ 328.227885][ T6658] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 328.245761][ T6658] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 328.275726][ T6658] usb 1-1: Product: syz [ 328.287358][ T6658] usb 1-1: SerialNumber: syz [ 328.314957][ T6658] usb 1-1: config 0 descriptor?? [ 328.372812][T16608] netlink: 'syz.2.5720': attribute type 10 has an invalid length. [ 328.440486][T16608] team0: Port device bridge0 removed [ 328.452070][T16608] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 328.490785][T16610] program syz.4.5722 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 328.526697][T16612] netlink: 'syz.2.5721': attribute type 10 has an invalid length. [ 328.599421][ T4229] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 328.672944][T16612] team0 (unregistering): Port device team_slave_0 removed [ 328.717358][T16612] team0 (unregistering): Port device team_slave_1 removed [ 328.787029][ T6658] usb 1-1: USB disconnect, device number 32 [ 328.888062][ T4229] usb 4-1: Using ep0 maxpacket: 8 [ 328.995970][T16633] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5733'. [ 329.062837][T16636] netlink: 'syz.1.5735': attribute type 3 has an invalid length. [ 329.221311][ T4229] usb 4-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=88.56 [ 329.246340][ T4229] usb 4-1: New USB device strings: Mfr=102, Product=169, SerialNumber=3 [ 329.268057][T16647] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5741'. [ 329.282038][ T4229] usb 4-1: Product: syz [ 329.286256][ T4229] usb 4-1: Manufacturer: syz [ 329.308460][ T4229] usb 4-1: SerialNumber: syz [ 329.314364][T16650] netlink: 'syz.2.5742': attribute type 32 has an invalid length. [ 329.328577][ T4229] usb 4-1: config 0 descriptor?? [ 329.393759][ T4229] pwc: Logitech ViewPort AV 100 webcam detected. [ 329.671064][ T4229] pwc: Failed to set LED on/off time (-71) [ 329.687947][ T4229] pwc: send_video_command error -71 [ 329.693250][ T4229] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 329.721386][ T4229] Philips webcam: probe of 4-1:0.0 failed with error -71 [ 329.751045][ T4229] usb 4-1: USB disconnect, device number 33 [ 329.935053][T16684] netlink: set zone limit has 8 unknown bytes [ 330.152478][ T9] hfsplus: b-tree write err: -5, ino 25 [ 330.177860][ T9] hfsplus: b-tree write err: -5, ino 4 [ 330.183761][ T9] hfsplus: b-tree write err: -5, ino 2 [ 330.347902][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 330.385249][T16660] loop2: detected capacity change from 0 to 32768 [ 330.583169][T16660] XFS (loop2): Mounting V5 Filesystem [ 330.732148][T16734] (unnamed net_device) (uninitialized): up delay (8) is not a multiple of miimon (100), value rounded to 0 ms [ 330.759062][T16660] XFS (loop2): Ending clean mount [ 330.771256][T16734] (unnamed net_device) (uninitialized): peer notification delay (23) is not a multiple of miimon (100), value rounded to 0 ms [ 330.865446][ T4196] XFS (loop2): Unmounting Filesystem [ 330.881183][T16734] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-tlb(5) [ 330.972999][T16742] netlink: 'syz.1.5783': attribute type 10 has an invalid length. [ 331.023441][T16742] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.099530][T16742] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.106687][T16742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.141688][T16742] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 331.153214][T16750] unsupported nla_type 39 [ 331.343098][T16758] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5792'. [ 331.793882][T16787] netlink: 'syz.2.5784': attribute type 25 has an invalid length. [ 331.819767][T16787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5784'. [ 332.037688][ T4229] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 332.508253][ T4229] usb 2-1: unable to get BOS descriptor or descriptor too short [ 332.618018][ T4229] usb 2-1: config 8 has an invalid interface number: 92 but max is 0 [ 332.636413][ T4229] usb 2-1: config 8 has no interface number 0 [ 332.661113][ T4229] usb 2-1: config 8 interface 92 altsetting 65 endpoint 0x6 has invalid wMaxPacketSize 0 [ 332.712464][ T4229] usb 2-1: config 8 interface 92 has no altsetting 0 [ 332.918875][T16863] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5841'. [ 333.039152][ T4229] usb 2-1: string descriptor 0 read error: -22 [ 333.045511][ T4229] usb 2-1: New USB device found, idVendor=1b3d, idProduct=0181, bcdDevice= b.f6 [ 333.095451][ T4229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.182320][ T4229] ftdi_sio 2-1:8.92: FTDI USB Serial Device converter detected [ 333.204702][ T4229] usb 2-1: Detected FT232H [ 333.235330][ T4229] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 6 [ 333.397911][ T4229] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 333.427867][ T4229] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 333.484593][ T4229] ftdi_sio 2-1:8.92: GPIO initialisation failed: -71 [ 333.505609][ T4229] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 333.538942][ T4229] usb 2-1: USB disconnect, device number 37 [ 333.585027][ T4229] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 333.645775][ T4229] ftdi_sio 2-1:8.92: device disconnected [ 334.114829][T16933] loop0: detected capacity change from 0 to 736 [ 334.136390][T16937] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 334.253121][T16933] rock: directory entry would overflow storage [ 334.287838][T16933] rock: sig=0x3b10, size=4, remaining=3 [ 334.320493][T16941] gre0: Master is either lo or non-ether device [ 334.363205][T16945] netdevsim netdevsim2 netdevsim0: unset [1, 2] type 2 family 0 port 57043 - 0 [ 334.398308][T16945] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 47490 - 0 [ 334.421935][T16945] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.460851][T16947] netlink: 11 bytes leftover after parsing attributes in process `syz.1.5884'. [ 334.479706][T16951] netlink: 'syz.3.5886': attribute type 2 has an invalid length. [ 334.487484][T16951] netlink: 'syz.3.5886': attribute type 1 has an invalid length. [ 334.541911][T16951] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5886'. [ 334.603888][T16957] netlink: 'syz.2.5889': attribute type 12 has an invalid length. [ 334.641834][T16957] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5889'. [ 335.081179][ T6655] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 335.130942][T16986] openvswitch: netlink: Actions may not be safe on all matching packets [ 335.447850][ T6655] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 335.482275][ T6655] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 335.522425][ T6658] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 335.616420][T17014] nft_compat: unsupported protocol 0 [ 335.660247][T17016] loop2: detected capacity change from 0 to 512 [ 335.669392][ T6655] usb 1-1: New USB device found, idVendor=046d, idProduct=c11f, bcdDevice= 0.00 [ 335.682787][ T6655] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.691252][T10251] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 335.699074][ T7240] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 335.706989][ T6655] usb 1-1: Product: syz [ 335.711621][ T6655] usb 1-1: Manufacturer: syz [ 335.711733][T17016] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 335.716246][ T6655] usb 1-1: SerialNumber: syz [ 335.736256][T17016] EXT4-fs (loop2): inline encryption not supported [ 335.743905][T17016] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 335.757452][T17016] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 335.766087][ T6655] zaurus: probe of 1-1:1.0 failed with error -22 [ 335.769490][T17016] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 335.777873][ T6658] usb 4-1: Using ep0 maxpacket: 8 [ 335.793526][T17016] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 335.805178][T17016] EXT4-fs (loop2): orphan cleanup on readonly fs [ 335.824066][T17016] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.5918: bg 0: block 34: padding at end of block bitmap is not set [ 335.846340][T17016] Quota error (device loop2): write_blk: dquota write failed [ 335.853989][T17016] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 335.864159][T17016] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.5918: Failed to acquire dquot type 1 [ 335.883240][T17016] EXT4-fs (loop2): 1 truncate cleaned up [ 335.889633][T17016] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,bsddf,nodioread_nolock,acl,max_dir_size_kb=0x0000000000000001,noblock_validity,usrjquota=,jqfmt=vfsv0,inode_readahead_blks=0x0000000000001000,inlinecrypt,sysvgroups,,errors=continue. Quota mode: writeback. [ 335.928316][ T6658] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.940098][ T7240] usb 2-1: Using ep0 maxpacket: 16 [ 335.945345][T10251] usb 5-1: Using ep0 maxpacket: 16 [ 335.950978][ T6658] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.961323][ T6658] usb 4-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 335.974849][ T6658] usb 4-1: config 0 interface 0 has no altsetting 0 [ 335.982247][ T6658] usb 4-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 3.00 [ 335.991986][ T6658] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.002084][ T6658] usb 4-1: config 0 descriptor?? [ 336.054966][ T6658] usbhid 4-1:0.0: can't add hid device: -22 [ 336.061316][ T7240] usb 2-1: config 8 has an invalid interface number: 206 but max is 0 [ 336.069989][T10251] usb 5-1: config index 0 descriptor too short (expected 65, got 36) [ 336.082001][T10251] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 336.091882][ T7240] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 336.105543][ T6658] usbhid: probe of 4-1:0.0 failed with error -22 [ 336.112377][T10251] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 336.128754][ T7240] usb 2-1: config 8 has no interface number 0 [ 336.135264][ T7240] usb 2-1: config 8 interface 206 altsetting 1 has an invalid endpoint with address 0xF7, skipping [ 336.148091][T10251] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 336.157308][ T7240] usb 2-1: config 8 interface 206 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 336.170534][T10251] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.181493][ T7240] usb 2-1: config 8 interface 206 has no altsetting 0 [ 336.189460][T10251] usb 5-1: config 0 descriptor?? [ 336.239567][T10251] pxrc 5-1:0.0: Could not find endpoint [ 336.255038][T10251] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 336.266176][T10251] usb 4-1: USB disconnect, device number 34 [ 336.301952][T17021] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5920'. [ 336.383418][ T7240] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 336.393597][ T7240] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.401989][ T7240] usb 2-1: Product: syz [ 336.406284][ T7240] usb 2-1: Manufacturer: syz [ 336.411053][ T7240] usb 2-1: SerialNumber: syz [ 336.445402][ T9671] usb 5-1: USB disconnect, device number 30 [ 336.699155][ T7240] garmin_gps 2-1:8.206: Garmin GPS usb/tty converter detected [ 336.707401][ T7240] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 336.736577][ T7240] garmin_gps: probe of ttyUSB0 failed with error -22 [ 336.767382][ T7240] usb 2-1: USB disconnect, device number 38 [ 336.798542][ T7240] garmin_gps 2-1:8.206: device disconnected [ 336.952611][T17055] loop3: detected capacity change from 0 to 64 [ 336.995953][ T4229] usb 1-1: USB disconnect, device number 33 [ 337.206336][T17069] CacheFiles: Empty tag specified [ 337.459766][T17085] netlink: 'syz.3.5951': attribute type 3 has an invalid length. [ 337.477815][T17085] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5951'. [ 337.638464][ T1092] block nbd0: Attempted send on invalid socket [ 337.644712][ T1092] blk_update_request: I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 337.661047][ T150] block nbd0: Attempted send on invalid socket [ 337.667598][ T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 337.679545][ T150] block nbd0: Attempted send on invalid socket [ 337.685783][ T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 337.697862][ T150] block nbd0: Attempted send on invalid socket [ 337.704075][ T150] blk_update_request: I/O error, dev nbd0, sector 18 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 337.718083][ T150] block nbd0: Attempted send on invalid socket [ 337.724292][ T150] blk_update_request: I/O error, dev nbd0, sector 30 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 337.737041][ T1092] block nbd0: Attempted send on invalid socket [ 337.743388][ T1092] blk_update_request: I/O error, dev nbd0, sector 36 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 337.754703][T17095] VFS: unable to find oldfs superblock on device nbd0 [ 338.234444][T17137] trusted_key: encrypted_key: keylen parameter is missing [ 338.355085][T17147] SET target dimension over the limit! [ 338.439321][T17155] netlink: 'syz.1.5985': attribute type 10 has an invalid length. [ 338.447265][T17155] netlink: 'syz.1.5985': attribute type 10 has an invalid length. [ 338.501088][T17158] IPVS: length: 77 != 8 [ 338.553442][T17164] loop4: detected capacity change from 0 to 64 [ 338.732101][T17174] xt_cgroup: xt_cgroup: no path or classid specified [ 338.743295][T17175] loop2: detected capacity change from 0 to 1024 [ 338.878142][T17175] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 338.897735][T10251] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 338.981184][T17184] netlink: 'syz.4.5999': attribute type 5 has an invalid length. [ 339.031721][T17184] device ip6erspan0 entered promiscuous mode [ 339.157801][T10251] usb 1-1: Using ep0 maxpacket: 32 [ 339.277877][T10251] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.317684][T10251] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 339.548031][T10251] usb 1-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0 [ 339.576222][T10251] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.625138][T10251] usb 1-1: Product: syz [ 339.635228][T10251] usb 1-1: Manufacturer: syz [ 339.655532][T10251] usb 1-1: SerialNumber: syz [ 339.685579][T10251] usb 1-1: config 0 descriptor?? [ 339.743401][T10251] qmi_wwan 1-1:0.0: bogus CDC Union: master=1, slave=0 [ 339.761027][T10251] qmi_wwan: probe of 1-1:0.0 failed with error -22 [ 339.946442][T10251] usb 1-1: USB disconnect, device number 34 [ 339.997334][T17226] loop4: detected capacity change from 0 to 4096 [ 340.125398][T17226] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 340.158464][T17226] ntfs3: loop4: Failed to load $MFT. [ 340.235175][T17250] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6024'. [ 340.258229][T17250] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6024'. [ 340.298557][T17253] device geneve1 entered promiscuous mode [ 340.482571][T17260] vivid-000: disconnect [ 340.526861][T17259] vivid-000: reconnect [ 340.575300][T17257] loop3: detected capacity change from 0 to 4096 [ 340.674112][T17271] loop2: detected capacity change from 0 to 128 [ 340.721899][T17257] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 340.751448][T17257] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 340.819411][T17271] EXT4-fs (loop2): mounted filesystem without journal. Opts: data_err=ignore,,errors=continue. Quota mode: none. [ 340.837129][T17257] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 340.852006][T17257] ntfs: volume version 3.1. [ 340.885944][T17271] ext4 filesystem being mounted at /1256/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 340.957115][T17271] EXT4-fs warning (device loop2): verify_group_input:147: Cannot add at group 524405 (only 1 groups) [ 341.094440][ T4189] ntfs: (device loop3): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 341.179741][T17288] netlink: 'syz.0.6039': attribute type 13 has an invalid length. [ 341.305032][T17226] loop4: detected capacity change from 0 to 32768 [ 341.334460][T17292] loop3: detected capacity change from 0 to 2048 [ 341.381350][T17226] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.6015 (17226) [ 341.451092][T17297] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 341.464758][T17298] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6041'. [ 341.502468][T17226] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 341.522402][T17292] NILFS (loop3): the device already has a read/write mount. [ 341.547857][T17226] BTRFS info (device loop4): using free space tree [ 341.554433][T17226] BTRFS info (device loop4): has skinny extents [ 341.872306][T17226] BTRFS info (device loop4): enabling ssd optimizations [ 342.083627][T17347] netlink: 'syz.2.6054': attribute type 1 has an invalid length. [ 342.541313][T17366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6062'. [ 343.322954][T17415] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6084'. [ 343.353299][T17415] netlink: 'syz.3.6084': attribute type 2 has an invalid length. [ 343.479518][T17424] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6089'. [ 343.550112][ T4229] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 343.619493][T17429] loop3: detected capacity change from 0 to 1764 [ 343.666925][T17429] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 343.677652][ T4233] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 343.797886][ T4229] usb 1-1: Using ep0 maxpacket: 8 [ 343.927826][ T4233] usb 3-1: Using ep0 maxpacket: 32 [ 344.009846][ T4229] usb 1-1: unable to get BOS descriptor or descriptor too short [ 344.112510][ T4229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 344.128086][ T23] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 344.134343][ T4229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 344.149557][ T4229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 344.162079][ T4229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 344.167197][T17459] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6106'. [ 344.173932][ T4229] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 344.197437][ T4229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 344.211269][ T4229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 344.222242][ T9671] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 344.228353][ T4233] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 344.240518][ T4229] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 344.268541][ T4233] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.276587][ T4233] usb 3-1: Product: syz [ 344.288202][ T4233] usb 3-1: Manufacturer: syz [ 344.292850][ T4233] usb 3-1: SerialNumber: syz [ 344.310151][ T4233] usb 3-1: config 0 descriptor?? [ 344.334931][T17463] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 344.343269][T17463] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 344.397689][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 344.418139][ T4229] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 344.438574][ T4229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.448406][ T4229] usb 1-1: Product: syz [ 344.453426][ T4229] usb 1-1: Manufacturer: syz [ 344.462194][ T4229] usb 1-1: SerialNumber: syz [ 344.478374][ T4229] usb 1-1: config 0 descriptor?? [ 344.512813][T17411] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 344.520063][ T9671] usb 5-1: Using ep0 maxpacket: 32 [ 344.570087][ T4229] snd-usb-audio: probe of 1-1:0.0 failed with error -12 [ 344.605520][ T5029] udevd[5029]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 344.677826][ T23] usb 4-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 344.678232][ T9671] usb 5-1: config 1 has an invalid interface number: 216 but max is 0 [ 344.695458][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.695721][ T9671] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 344.704097][ T23] usb 4-1: Product: syz [ 344.715838][ T9671] usb 5-1: config 1 has no interface number 0 [ 344.724209][ T9671] usb 5-1: config 1 interface 216 has no altsetting 0 [ 344.727235][ T23] usb 4-1: Manufacturer: syz [ 344.736378][ T23] usb 4-1: SerialNumber: syz [ 344.773046][ T6658] usb 1-1: USB disconnect, device number 35 [ 344.779279][ T4233] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 344.789331][ T6667] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 344.800876][ T4233] peak_usb 3-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 344.859623][ T4233] peak_usb: probe of 3-1:0.0 failed with error -71 [ 344.874086][ T4233] usb 3-1: USB disconnect, device number 34 [ 344.927938][ T9671] usb 5-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=17.ee [ 344.937809][ T9671] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.945862][ T9671] usb 5-1: Product: syz [ 344.950688][ T9671] usb 5-1: Manufacturer: syz [ 344.955310][ T9671] usb 5-1: SerialNumber: syz [ 345.227776][ T23] mxuport 4-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 345.236473][ T23] mxuport: probe of 4-1:254.0 failed with error -5 [ 345.246668][ T23] usb 4-1: USB disconnect, device number 35 [ 345.308908][ T9671] usb 5-1: USB disconnect, device number 31 [ 345.321441][ T6667] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 345.346951][ T6667] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.369222][ T6667] usb 2-1: Product: syz [ 345.373439][ T6667] usb 2-1: Manufacturer: syz [ 345.387618][ T6667] usb 2-1: SerialNumber: syz [ 345.413967][ T6667] usb 2-1: config 0 descriptor?? [ 345.460156][ T6667] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 345.471964][T17477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6115'. [ 345.897723][ T6667] gspca_sunplus: reg_w_riv err -71 [ 345.902988][ T6667] sunplus: probe of 2-1:0.0 failed with error -71 [ 345.934371][T17509] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6131'. [ 345.948561][ T6667] usb 2-1: USB disconnect, device number 39 [ 345.981575][T17509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6131'. [ 346.125315][T17522] loop0: detected capacity change from 0 to 512 [ 346.144857][T17523] overlayfs: unrecognized mount option "\{\" or missing value [ 346.224417][T17529] netlink: 'syz.2.6140': attribute type 21 has an invalid length. [ 346.280330][T17522] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fffff00) [ 346.281691][T17529] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6140'. [ 346.315171][T17522] FAT-fs (loop0): Filesystem has been set read-only [ 346.751688][T17569] netlink: 'syz.4.6160': attribute type 1 has an invalid length. [ 346.770201][T17569] netlink: 'syz.4.6160': attribute type 2 has an invalid length. [ 346.860922][ T4229] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 347.057839][T17592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6171'. [ 347.187680][T17592] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 347.441676][ T4229] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 347.454649][ T4229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.487587][ T4229] usb 4-1: Product: syz [ 347.507792][ T4229] usb 4-1: Manufacturer: syz [ 347.522691][ T4229] usb 4-1: SerialNumber: syz [ 347.549938][ T4229] usb 4-1: config 0 descriptor?? [ 347.638018][ T4229] ch341 4-1:0.0: ch341-uart converter detected [ 347.694620][T17617] netlink: 160 bytes leftover after parsing attributes in process `syz.0.6183'. [ 348.088011][ T4229] usb 4-1: failed to send control message: -71 [ 348.098306][ T4229] ch341-uart: probe of ttyUSB0 failed with error -71 [ 348.133596][ T4229] usb 4-1: USB disconnect, device number 36 [ 348.149822][T17638] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6194'. [ 348.163646][ T4229] ch341 4-1:0.0: device disconnected [ 348.252117][ T9671] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 348.547725][ T9671] usb 5-1: Using ep0 maxpacket: 8 [ 348.654027][T17666] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6208'. [ 348.683833][T17666] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6208'. [ 348.708105][ T9671] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 348.728673][ T9671] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 348.807986][ T4229] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 348.894549][T17680] netlink: 'syz.3.6215': attribute type 16 has an invalid length. [ 348.916677][T17680] netlink: 'syz.3.6215': attribute type 3 has an invalid length. [ 348.928914][T17680] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6215'. [ 348.948114][ T9671] usb 5-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 348.957262][ T9671] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.997639][ T9671] usb 5-1: Product: syz [ 349.002019][ T9671] usb 5-1: Manufacturer: syz [ 349.006646][ T9671] usb 5-1: SerialNumber: syz [ 349.095381][T17690] overlayfs: missing 'workdir' [ 349.243684][T17700] CIFS: VFS: Unable to allocate memory for devname [ 349.249375][ T4229] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 349.430872][ T9671] usb 5-1: unit 5 not found! [ 349.435555][ T9671] usb 5-1: unit 0 not found! [ 349.468118][ T9671] usb 5-1: USB disconnect, device number 32 [ 349.478195][ T4229] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 349.512704][ T4229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.512738][ T4229] usb 2-1: Product: syz [ 349.512756][ T4229] usb 2-1: Manufacturer: syz [ 349.512773][ T4229] usb 2-1: SerialNumber: syz [ 349.662132][T17722] loop0: detected capacity change from 0 to 1024 [ 349.692665][T17722] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 349.708110][T17726] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6238'. [ 349.717277][T17722] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 349.752136][ T7636] udevd[7636]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 349.769018][T17722] EXT4-fs error (device loop0): ext4_get_journal_inode:5187: inode #5: comm syz.0.6237: unexpected bad inode w/o EXT4_IGET_BAD [ 349.806862][T17722] EXT4-fs (loop0): no journal found [ 349.812590][T17722] EXT4-fs (loop0): can't get journal size [ 349.818889][ T4229] usb 2-1: selecting invalid altsetting 1 [ 349.824700][ T4229] speedtch 2-1:1.0: speedtch_bind: setting interface to 1 failed (-22)! [ 349.865525][T17729] netlink: 'syz.2.6239': attribute type 6 has an invalid length. [ 349.882201][ T4229] speedtch 2-1:1.0: usbatm_usb_probe: bind failed: -22! [ 349.889583][T17729] netlink: 140 bytes leftover after parsing attributes in process `syz.2.6239'. [ 349.900334][T17722] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x0000000000000005,abort,,errors=continue. Quota mode: writeback. [ 349.936640][ T4229] speedtch: probe of 2-1:1.0 failed with error -22 [ 350.008431][ T4229] usb 2-1: selecting invalid altsetting 1 [ 350.014215][ T4229] speedtch 2-1:1.1: speedtch_bind: setting interface to 1 failed (-22)! [ 350.068310][ T4229] speedtch 2-1:1.1: usbatm_usb_probe: bind failed: -22! [ 350.094977][ T4229] speedtch: probe of 2-1:1.1 failed with error -22 [ 350.146202][ T4229] usb 2-1: USB disconnect, device number 40 [ 350.576376][T17771] loop4: detected capacity change from 0 to 16 [ 350.654977][T17771] erofs: (device loop4): mounted with root inode @ nid 36. [ 350.993155][T17805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6276'. [ 351.137882][ T6667] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 351.361728][T17830] openvswitch: netlink: Actions may not be safe on all matching packets [ 351.511252][ T6667] usb 5-1: config index 0 descriptor too short (expected 45, got 25) [ 351.540188][ T6667] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 351.578901][ T6667] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 351.671896][T17850] netlink: 25 bytes leftover after parsing attributes in process `syz.0.6298'. [ 351.779033][ T6667] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 351.812220][ T6667] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.852840][ T6667] usb 5-1: Product: syz [ 351.857070][ T6667] usb 5-1: Manufacturer: syz [ 351.890817][ T6667] usb 5-1: SerialNumber: syz [ 351.942331][ T6667] rtl8150 5-1:1.0: couldn't find required endpoints [ 351.965401][ T6667] rtl8150: probe of 5-1:1.0 failed with error -5 [ 351.975400][T17862] usb usb9: usbfs: process 17862 (syz.3.6305) did not claim interface 3 before use [ 352.138803][T17858] loop0: detected capacity change from 0 to 4096 [ 352.170976][ T4229] usb 5-1: USB disconnect, device number 33 [ 352.238810][T17858] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 352.268465][T17858] ntfs3: loop0: Failed to load $MFT. [ 353.051516][T17871] loop3: detected capacity change from 0 to 32768 [ 353.109485][T17858] loop0: detected capacity change from 0 to 32768 [ 353.177328][T17858] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.6303 (17858) [ 353.231025][T17858] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 353.255128][T17858] BTRFS info (device loop0): using free space tree [ 353.262318][T17858] BTRFS info (device loop0): has skinny extents [ 353.275176][T17871] XFS (loop3): Mounting V5 Filesystem [ 353.296598][T17858] BTRFS info (device loop0): enabling ssd optimizations [ 353.546548][ T4358] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop0 scanned by udevd (4358) [ 353.687319][T17948] xt_limit: Overflow, try lower: 2/2147483648 [ 353.730265][T17871] XFS (loop3): Ending clean mount [ 353.783843][T17871] XFS (loop3): Quotacheck needed: Please wait. [ 353.903248][T17962] delete_channel: no stack [ 354.014618][T17871] XFS (loop3): Quotacheck: Done. [ 354.243505][T17964] loop2: detected capacity change from 0 to 4096 [ 354.260349][ T4189] XFS (loop3): Unmounting Filesystem [ 354.478561][T17964] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 354.500082][T17964] ntfs3: loop2: Failed to load $MFT. [ 354.994453][T18005] loop4: detected capacity change from 0 to 256 [ 355.503465][T17964] loop2: detected capacity change from 0 to 32768 [ 355.519990][T18030] loop0: detected capacity change from 0 to 512 [ 355.582050][T18028] loop4: detected capacity change from 0 to 1764 [ 355.596847][T18030] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 355.644508][T18030] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01d, mo2=0102] [ 355.654035][T18030] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 355.663822][T18030] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 355.674252][T18030] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,abort,bsdgroups,noblock_validity,nolazytime,noblock_validity,jqfmt=vfsv0,barrier=0x000000000000d95a,jqfmt=vfsold,,errors=continue. Quota mode: none. [ 355.722668][T18030] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.6372: dx entry: limit 65535 != root limit 120 [ 355.777908][T18030] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.6372: Corrupt directory, running e2fsck is recommended [ 355.981889][T18047] netlink: 'syz.1.6382': attribute type 1 has an invalid length. [ 356.062565][T18049] autofs4:pid:18049:autofs_fill_super: called with bogus options [ 356.076928][T18047] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.6382'. [ 356.323817][T18065] loop0: detected capacity change from 0 to 2048 [ 356.676969][T18094] netlink: 'syz.4.6404': attribute type 2 has an invalid length. [ 356.837944][T18100] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 357.144612][T18121] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.6418'. [ 357.167336][T18123] netlink: 'syz.3.6419': attribute type 6 has an invalid length. [ 357.198082][T18121] bridge_slave_1: default FDB implementation only supports local addresses [ 357.301415][T18131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6422'. [ 357.351418][T18131] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6422'. [ 357.402213][T18135] netlink: 'syz.2.6421': attribute type 10 has an invalid length. [ 357.442609][T18135] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6421'. [ 357.455632][T18142] ipt_CLUSTERIP: Please specify destination IP [ 357.477776][T18135] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 357.529519][T18147] loop3: detected capacity change from 0 to 256 [ 357.546002][T18146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6429'. [ 357.664152][T18153] loop0: detected capacity change from 0 to 256 [ 357.746306][T18153] exfat: Deprecated parameter 'utf8' [ 357.776676][T18153] exfat: Deprecated parameter 'utf8' [ 357.825463][T18153] exfat: Deprecated parameter 'namecase' [ 357.860147][T18153] exfat: Deprecated parameter 'namecase' [ 357.922361][T18153] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 358.054516][T18177] netlink: 'syz.1.6444': attribute type 10 has an invalid length. [ 358.097122][T18177] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6444'. [ 358.562550][T18218] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 358.672114][T18227] netlink: 'syz.2.6478': attribute type 1 has an invalid length. [ 358.703296][T18227] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6478'. [ 358.950216][T18250] tmpfs: Bad value for 'mpol' [ 358.992236][T18256] overlayfs: missing 'lowerdir' [ 359.184071][T18268] netlink: 'syz.1.6489': attribute type 1 has an invalid length. [ 359.206873][T18271] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 359.240176][T18268] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6489'. [ 359.400496][ T4231] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 359.412186][T18281] xt_hashlimit: overflow, try lower: 3/0 [ 359.766918][T18293] loop0: detected capacity change from 0 to 128 [ 359.796636][ T4231] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 359.854856][ T4231] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 359.966113][ T4187] sysv_free_block: flc_count > flc_size [ 360.015532][ T4187] sysv_free_block: flc_count > flc_size [ 360.036789][ T4187] sysv_free_block: flc_count > flc_size [ 360.050438][T18264] loop3: detected capacity change from 0 to 32768 [ 360.057428][ T4187] sysv_free_block: flc_count > flc_size [ 360.098806][ T4231] usb 3-1: New USB device found, idVendor=413c, idProduct=8186, bcdDevice=a0.a2 [ 360.114151][T18264] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.6485 (18264) [ 360.122339][ T4187] sysv_free_block: flc_count > flc_size [ 360.152136][ T4231] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.170578][ T4187] sysv_free_block: flc_count > flc_size [ 360.180714][ T4231] usb 3-1: Product: syz [ 360.184923][ T4231] usb 3-1: Manufacturer: syz [ 360.201135][ T4187] sysv_free_block: flc_count > flc_size [ 360.206728][ T4187] sysv_free_block: flc_count > flc_size [ 360.231648][ T4231] usb 3-1: SerialNumber: syz [ 360.257604][ T4187] sysv_free_block: flc_count > flc_size [ 360.263233][ T4187] sysv_free_block: flc_count > flc_size [ 360.269647][ T4231] usb 3-1: config 0 descriptor?? [ 360.285614][T18264] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 360.300327][ T4187] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 360.314981][T18264] BTRFS info (device loop3): setting nodatacow, compression disabled [ 360.375782][T18264] BTRFS info (device loop3): setting datasum, datacow enabled [ 360.406082][T18264] BTRFS info (device loop3): enabling ssd optimizations [ 360.426308][T18264] BTRFS info (device loop3): force clearing of disk cache [ 360.507749][T18264] BTRFS info (device loop3): using spread ssd allocation scheme [ 360.517056][T18264] BTRFS info (device loop3): turning on sync discard [ 360.568307][T18264] BTRFS info (device loop3): turning on flush-on-commit [ 360.581222][T18264] BTRFS info (device loop3): not using ssd optimizations [ 360.606564][T10251] usb 3-1: USB disconnect, device number 35 [ 360.642348][T18264] BTRFS info (device loop3): not using spread ssd allocation scheme [ 360.676236][T18264] BTRFS info (device loop3): using free space tree [ 360.697722][T18264] BTRFS info (device loop3): has skinny extents [ 360.933156][T18264] BTRFS info (device loop3): clearing free space tree [ 360.942694][T18308] loop4: detected capacity change from 0 to 32768 [ 360.954611][T18308] XFS: ikeep mount option is deprecated. [ 361.006325][T18264] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 361.046653][T18308] XFS (loop4): Mounting V5 Filesystem [ 361.101283][T18264] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 361.194632][T18308] XFS (loop4): Ending clean mount [ 361.225687][T18308] XFS (loop4): Quotacheck needed: Please wait. [ 361.268692][T18264] BTRFS info (device loop3): creating free space tree [ 361.327035][T10251] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 361.361602][T18264] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 361.391750][T18264] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 361.408698][T18308] XFS (loop4): Quotacheck: Done. [ 361.490606][T18324] loop0: detected capacity change from 0 to 32768 [ 361.550858][ T4199] XFS (loop4): Unmounting Filesystem [ 361.711613][T10251] usb 2-1: config index 0 descriptor too short (expected 69, got 51) [ 361.743822][T10251] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.937996][T10251] usb 2-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00 [ 361.964913][T10251] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.986693][T10251] usb 2-1: Product: syz [ 361.996295][T18370] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6525'. [ 362.006168][T10251] usb 2-1: Manufacturer: syz [ 362.019440][T10251] usb 2-1: SerialNumber: syz [ 362.377904][T10251] usb 2-1: Focusrite Scarlett Gen 2/3 Mixer Driver disabled; use options snd_usb_audio vid=0x1235 pid=0x8201 device_setup=1 to enable and report any issues to g@b4.vu [ 362.460571][T10251] usb 2-1: USB disconnect, device number 41 [ 362.521981][ T7636] udevd[7636]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 362.684364][T18391] tc_dump_action: action bad kind [ 363.041057][T18421] netlink: 11 bytes leftover after parsing attributes in process `syz.3.6548'. [ 363.313240][T18430] loop4: detected capacity change from 0 to 4096 [ 363.389624][T18430] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 363.465028][T18430] ntfs: volume version 3.1. [ 363.635119][T10251] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 363.887787][T10251] usb 2-1: Using ep0 maxpacket: 8 [ 363.952697][T18478] netlink: 'syz.4.6577': attribute type 27 has an invalid length. [ 363.977133][T18478] netlink: 'syz.4.6577': attribute type 3 has an invalid length. [ 364.007925][T10251] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 364.029390][T10251] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 364.090567][T18484] UBIFS error (pid: 18484): cannot open "ubi0:testvol", error -19 [ 364.227919][T10251] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 364.268232][T10251] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.296722][T10251] usb 2-1: Product: syz [ 364.309773][T18500] loop4: detected capacity change from 0 to 1024 [ 364.316212][T10251] usb 2-1: Manufacturer: syz [ 364.327622][T10251] usb 2-1: SerialNumber: syz [ 364.341393][T10251] usb 2-1: config 0 descriptor?? [ 364.437887][ T4229] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 364.445743][T18504] nvme_rdma: malformed address passed: 172.20.20.24:0Ęż [ 364.457436][T18507] ieee802154 phy0 wpan0: encryption failed: -90 [ 364.725592][T18521] MTD: Couldn't look up 'mtd0/file0': -2 [ 364.816239][T10251] usb 2-1: USB disconnect, device number 42 [ 364.879088][ T4229] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 364.898839][ T4229] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 364.939602][ T4229] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 364.978050][ T4229] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 365.027288][ T4229] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 365.042307][ T4229] usb 1-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 365.060348][ T4229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.128191][T18490] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 365.135599][T18490] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 365.157971][T18490] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 365.183652][ T4229] mos7720 1-1:1.0: Moschip 2 port adapter converter detected [ 365.304073][T18556] netlink: 'syz.4.6614': attribute type 1 has an invalid length. [ 365.417978][T10251] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 365.587848][ T4229] usb 1-1: mos7720: usb_control_msg() failed: -71 [ 365.616236][ T4229] usb 1-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 365.648383][ T4229] usb 1-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 365.667698][T10251] usb 3-1: Using ep0 maxpacket: 8 [ 365.705706][ T4229] usb 1-1: USB disconnect, device number 36 [ 365.711737][ C0] usb 1-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 365.782711][T18584] netlink: 'syz.4.6628': attribute type 1 has an invalid length. [ 365.796257][ T4229] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 365.828010][T10251] usb 3-1: unable to get BOS descriptor or descriptor too short [ 365.828843][ T4229] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 365.848202][ T4229] mos7720 1-1:1.0: device disconnected [ 365.937829][T10251] usb 3-1: config 4 has an invalid interface number: 147 but max is 0 [ 365.947371][T10251] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 365.958466][T10251] usb 3-1: config 4 has no interface number 0 [ 366.151232][T18600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6637'. [ 366.187971][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 366.199288][T10251] usb 3-1: string descriptor 0 read error: -22 [ 366.205568][T10251] usb 3-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 366.227771][ T4377] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 366.246247][T10251] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.320752][T10251] uvcvideo 3-1:4.147: Found multiple Units with ID 6 [ 366.328370][T10251] usb 3-1: Found UVC 0.02 device (04f2:b746) [ 366.345072][T10251] usb 3-1: No valid video chain found. [ 366.419958][T18614] netlink: 'syz.4.6643': attribute type 2 has an invalid length. [ 366.433283][T18614] netlink: 'syz.4.6643': attribute type 1 has an invalid length. [ 366.442260][T18614] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6643'. [ 366.467632][ T4377] usb 2-1: Using ep0 maxpacket: 16 [ 366.529983][T18620] loop4: detected capacity change from 0 to 22 [ 366.551839][T10251] usb 3-1: USB disconnect, device number 36 [ 366.568446][T18620] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 366.587959][ T4377] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 366.597192][ T4377] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 366.608013][ T4377] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 366.628163][ T4377] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 366.640886][T18620] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 366.648721][ T4377] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 366.685496][ T4377] usb 2-1: config 1 interface 0 has no altsetting 0 [ 366.711423][ T4377] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 366.725024][ T4377] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.734204][T18589] 9pnet: p9_fd_create_tcp (18589): problem connecting socket to 127.0.0.1 [ 366.788860][ T4377] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 366.927717][T18631] netlink: 'syz.3.6651': attribute type 1 has an invalid length. [ 366.947846][T18631] netlink: 'syz.3.6651': attribute type 2 has an invalid length. [ 366.956106][T18631] netlink: 'syz.3.6651': attribute type 2 has an invalid length. [ 366.964641][T18631] netlink: 'syz.3.6651': attribute type 2 has an invalid length. [ 366.972626][T18631] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6651'. [ 367.020544][ T4377] scsi host1: usb-storage 2-1:1.0 [ 367.053146][T18639] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6655'. [ 367.219951][ T4377] usb 2-1: USB disconnect, device number 43 [ 367.487031][T18667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6668'. [ 367.505565][T18667] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6668'. [ 367.541242][T18667] device vlan0 entered promiscuous mode [ 367.681806][T18677] netlink: 22 bytes leftover after parsing attributes in process `syz.4.6673'. [ 367.693562][T18673] loop2: detected capacity change from 0 to 4096 [ 367.762843][T18673] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 367.787907][ T4229] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 367.904634][T18673] ntfs3: loop2: failed to convert "c46c" to iso8859-14 [ 368.047763][ T4229] usb 1-1: Using ep0 maxpacket: 32 [ 368.350497][ T4229] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 368.366543][ T4229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.375291][ T4229] usb 1-1: Product: syz [ 368.380050][ T4229] usb 1-1: Manufacturer: syz [ 368.384684][ T4229] usb 1-1: SerialNumber: syz [ 368.392685][ T4229] usb 1-1: config 0 descriptor?? [ 368.537754][ T4377] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 368.627687][ T9671] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 368.807732][T10251] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 368.910518][ T4229] airspy 1-1:0.0: usb_control_msg() failed -71 request 0a [ 368.925578][ T4229] airspy 1-1:0.0: Could not detect board [ 368.932424][ T4229] airspy: probe of 1-1:0.0 failed with error -71 [ 368.938842][ T4377] usb 5-1: unable to get BOS descriptor or descriptor too short [ 368.960350][ T4229] usb 1-1: USB disconnect, device number 37 [ 369.017914][ T4377] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 32 [ 369.177897][T10251] usb 2-1: config 0 has an invalid interface number: 13 but max is 0 [ 369.186263][T10251] usb 2-1: config 0 has no interface number 0 [ 369.192820][ T4377] usb 5-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 369.203426][T10251] usb 2-1: too many endpoints for config 0 interface 13 altsetting 233: 211, using maximum allowed: 30 [ 369.215102][ T4377] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.223205][ T4377] usb 5-1: Product: syz [ 369.227491][T10251] usb 2-1: config 0 interface 13 altsetting 233 has 0 endpoint descriptors, different from the interface descriptor's value: 211 [ 369.228389][ T9671] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 369.241253][ T4377] usb 5-1: Manufacturer: syz [ 369.254844][T10251] usb 2-1: config 0 interface 13 has no altsetting 0 [ 369.261642][ T4377] usb 5-1: SerialNumber: syz [ 369.264282][ T9671] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.276774][ T9671] usb 4-1: Product: syz [ 369.281821][ T9671] usb 4-1: Manufacturer: syz [ 369.286545][ T9671] usb 4-1: SerialNumber: syz [ 369.288909][T18707] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 369.419854][T10251] usb 2-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice= 2.23 [ 369.434914][T10251] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.443756][T10251] usb 2-1: Product: syz [ 369.448292][T10251] usb 2-1: Manufacturer: syz [ 369.452923][T10251] usb 2-1: SerialNumber: syz [ 369.458140][ T4271] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 369.465886][T10251] usb 2-1: config 0 descriptor?? [ 369.509243][T10251] ftdi_sio 2-1:0.13: FTDI USB Serial Device converter detected [ 369.523398][T10251] usb 2-1: Detected FT8U232AM [ 369.529861][T10251] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 369.632049][ T9671] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 37 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 369.652588][ T9671] usb 4-1: USB disconnect, device number 37 [ 369.665163][ T9671] usblp0: removed [ 369.668973][ T4377] usb 5-1: MIDIStreaming interface descriptor not found [ 369.723732][ T4229] usb 2-1: USB disconnect, device number 44 [ 369.733052][ T4377] usb 5-1: USB disconnect, device number 34 [ 369.757754][ T4229] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 369.784773][ T4229] ftdi_sio 2-1:0.13: device disconnected [ 369.826521][ T4417] udevd[4417]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 369.931265][ T4271] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 369.952713][ T4271] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 369.965905][ T4271] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 369.976307][ T4271] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.006328][ T4271] usb 3-1: config 0 descriptor?? [ 370.225576][T18772] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6719'. [ 370.235670][T18772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6719'. [ 370.245449][T18772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6719'. [ 370.258108][T18766] loop0: detected capacity change from 0 to 32768 [ 370.277956][ T4271] Bluetooth: Can't get state to change to load ram patch err [ 370.289598][ T4271] Bluetooth: Loading patch file failed [ 370.295125][ T4271] ath3k: probe of 3-1:0.0 failed with error -121 [ 370.323267][T18766] (syz.0.6715,18766,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 370.413382][T18766] (syz.0.6715,18766,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 370.511579][ T4377] usb 3-1: USB disconnect, device number 37 [ 370.534856][T18766] JBD2: Ignoring recovery information on journal [ 370.646729][T18766] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 370.717003][T18792] loop4: detected capacity change from 0 to 256 [ 370.811350][ T4187] ocfs2: Unmounting device (7,0) on (node local) [ 371.065984][T18804] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6734'. [ 371.085762][T18804] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6734'. [ 371.750033][T18854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6758'. [ 371.954139][T18861] loop3: detected capacity change from 0 to 4096 [ 372.054512][T18861] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 372.194223][T18861] ntfs3: loop3: failed to convert "c46c" to iso8859-14 [ 372.395637][T18899] loop4: detected capacity change from 0 to 256 [ 372.409300][T18903] __nla_validate_parse: 1 callbacks suppressed [ 372.409318][T18903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6781'. [ 372.901264][T18945] mip6: mip6_destopt_init_state: spi is not 0: 1114112 [ 372.920325][T18941] netlink: 'syz.1.6794': attribute type 1 has an invalid length. [ 372.959865][T18941] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6794'. [ 372.981734][T18947] loop3: detected capacity change from 0 to 256 [ 373.020801][T18935] loop4: detected capacity change from 0 to 4096 [ 373.095943][T18935] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 373.326275][T18935] ntfs3: loop4: failed to convert "c46c" to iso8859-14 [ 373.634945][T18970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6809'. [ 373.740302][T18972] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6811'. [ 373.897614][ T4271] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 374.177653][ T4271] usb 4-1: Using ep0 maxpacket: 16 [ 374.216686][T18996] netlink: 'syz.1.6822': attribute type 1 has an invalid length. [ 374.327991][ T4271] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 374.350491][ T4271] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 374.386034][ T4271] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 374.410518][ T4271] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 374.447597][ T4271] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 374.471119][ T4271] usb 4-1: config 1 interface 0 has no altsetting 0 [ 374.487618][ T4271] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 374.507596][ T4271] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.602468][ T4271] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 374.681059][T18988] loop0: detected capacity change from 0 to 32768 [ 374.813950][ T4271] scsi host1: usb-storage 4-1:1.0 [ 374.836502][T18988] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 374.845859][ T9671] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 374.866157][T18988] BTRFS info (device loop0): using free space tree [ 374.886456][T18988] BTRFS info (device loop0): has skinny extents [ 374.915932][T19032] program syz.4.6837 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 375.017625][ T4271] usb 4-1: USB disconnect, device number 38 [ 375.132847][T18988] BTRFS info (device loop0): enabling ssd optimizations [ 375.173905][T19060] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6841'. [ 375.183166][T19060] netlink: 84 bytes leftover after parsing attributes in process `syz.4.6841'. [ 375.230079][ T9671] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 375.242888][ T9671] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 375.253878][ T9671] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 375.267508][ T9671] usb 2-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 375.276906][ T9671] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.552137][T19071] sg_write: data in/out 4194304/65042 bytes for SCSI command 0x0-- guessing data in; [ 375.552137][T19071] program syz.2.6849 not setting count and/or reply_len properly [ 375.586489][ T9671] ttusb_dec_send_command: result bulk message failed: error -8 [ 375.618249][ T9671] ttusb-dec: probe of 2-1:1.0 failed with error -8 [ 375.660551][ T9671] usb 2-1: USB disconnect, device number 45 [ 375.926165][T19087] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6846'. [ 375.960173][T19092] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6858'. [ 376.088874][T19098] netlink: 'syz.4.6862': attribute type 21 has an invalid length. [ 376.124202][T19098] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6862'. [ 376.373920][T19114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6869'. [ 376.520762][ T26] audit: type=1400 audit(1787750774.923:30): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=19121 comm="syz.2.6873" [ 376.662781][T19128] netlink: 'syz.1.6876': attribute type 2 has an invalid length. [ 377.224302][T19116] loop3: detected capacity change from 0 to 32768 [ 377.345341][T19116] (syz.3.6870,19116,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 377.385127][T19116] (syz.3.6870,19116,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 377.452637][T19116] JBD2: Ignoring recovery information on journal [ 377.549585][T19183] netlink: 'syz.4.6902': attribute type 12 has an invalid length. [ 377.581834][T19116] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 377.626330][T19186] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 377.696481][T19190] __nla_validate_parse: 2 callbacks suppressed [ 377.696498][T19190] netlink: 344 bytes leftover after parsing attributes in process `syz.2.6906'. [ 377.707943][ T6662] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 377.908370][T19198] xt_hashlimit: size too large, truncated to 1048576 [ 377.928403][T19198] xt_hashlimit: max too large, truncated to 1048576 [ 377.946688][ T4189] ocfs2: Unmounting device (7,3) on (node local) [ 377.987686][ T6662] usb 1-1: Using ep0 maxpacket: 8 [ 378.267942][ T6662] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55 [ 378.308263][ T6662] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.316484][ T6662] usb 1-1: Product: syz [ 378.348190][ T6662] usb 1-1: Manufacturer: syz [ 378.353221][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.360310][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.383939][ T6662] usb 1-1: SerialNumber: syz [ 378.403570][ T6662] usb 1-1: config 0 descriptor?? [ 378.493426][T19222] sg_write: data in/out 4194304/65042 bytes for SCSI command 0x0-- guessing data in; [ 378.493426][T19222] program syz.3.6921 not setting count and/or reply_len properly [ 378.692269][ T6662] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 378.708300][ T6662] dvb_usb_af9015: probe of 1-1:0.0 failed with error -22 [ 378.727817][ T1111] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 378.742084][ T6662] usb 1-1: USB disconnect, device number 38 [ 378.777095][T19234] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6928'. [ 378.814056][T19236] Timeout policy `syz0' can only be used by L3 protocol number 33011 [ 378.924110][T19242] loop4: detected capacity change from 0 to 256 [ 378.936355][T19241] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 379.051843][T19242] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 379.146030][T19246] device wlan0 entered promiscuous mode [ 379.161422][ T1111] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 379.177567][ T1111] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 379.374455][ T1111] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 379.397690][ T1111] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.405735][ T1111] usb 3-1: Product: syz [ 379.419245][T19258] device veth1_virt_wifi entered promiscuous mode [ 379.427591][ T1111] usb 3-1: Manufacturer: syz [ 379.432256][ T1111] usb 3-1: SerialNumber: syz [ 379.505037][T19260] netlink: 'syz.3.6941': attribute type 21 has an invalid length. [ 379.514698][ T1111] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 379.519973][ T6662] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 379.522356][T19260] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6941'. [ 379.553618][ T1111] ums-sddr09 3-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 379.553618][ T1111] Please send a copy of this message to and [ 379.578838][ C0] vkms_vblank_simulate: vblank timer overrun [ 379.647816][ T6667] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 379.673329][T19268] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6944'. [ 379.887807][ T6667] usb 1-1: Using ep0 maxpacket: 8 [ 379.888165][ T4229] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 379.909365][ T6662] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 380.005797][ T1111] ums-sddr09: probe of 3-1:1.0 failed with error -5 [ 380.008459][ T6667] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 380.022160][ T1111] usb 3-1: USB disconnect, device number 38 [ 380.028706][ T6667] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 380.042272][ T6667] usb 1-1: config 1 interface 0 has no altsetting 0 [ 380.097870][ T6662] usb 5-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 380.107056][ T6662] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.115615][ T6662] usb 5-1: Product: syz [ 380.119881][ T6662] usb 5-1: Manufacturer: syz [ 380.124523][ T6662] usb 5-1: SerialNumber: syz [ 380.133177][ T6662] usb 5-1: config 0 descriptor?? [ 380.147806][ T4229] usb 4-1: Using ep0 maxpacket: 8 [ 380.179064][ T6662] powermate: probe of 5-1:0.0 failed with error -5 [ 380.280531][ T4229] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 380.288401][ T6667] usb 1-1: string descriptor 0 read error: -22 [ 380.291068][ T4229] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 380.305888][ T6667] usb 1-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 380.306018][ T4229] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 380.324685][ T6667] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 380.381984][ T6662] usb 5-1: USB disconnect, device number 35 [ 380.391061][ T6667] usb 1-1: 0:2 : does not exist [ 380.410662][ T6667] usb-storage 1-1:1.1: USB Mass Storage device detected [ 380.520281][ T4229] usb 4-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 380.540385][ T4229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.565791][ T4229] usb 4-1: Product: syz [ 380.573865][ T4229] usb 4-1: Manufacturer: syz [ 380.583409][ T4229] usb 4-1: SerialNumber: syz [ 380.597411][T19293] netlink: zone id is out of range [ 380.605480][T19293] netlink: zone id is out of range [ 380.615097][T19293] netlink: zone id is out of range [ 380.621002][T19293] netlink: zone id is out of range [ 380.626146][T19293] netlink: zone id is out of range [ 380.639781][T19293] netlink: zone id is out of range [ 380.644931][T19293] netlink: zone id is out of range [ 380.657047][T19293] netlink: zone id is out of range [ 380.662551][T19293] netlink: zone id is out of range [ 380.797197][T19302] loop2: detected capacity change from 0 to 512 [ 380.827909][ T6667] us122l: couldn't allocate write buffer [ 380.834334][ T6667] snd-usb-us122l: probe of 1-1:1.1 failed with error -22 [ 380.870613][T19302] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.6960: inode #1: comm syz.2.6960: iget: illegal inode # [ 380.873129][ T6667] usb 1-1: USB disconnect, device number 39 [ 380.898074][T19302] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.6960: error while reading EA inode 1 err=-117 [ 380.974956][T19302] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.6960: inode #1: comm syz.2.6960: iget: illegal inode # [ 381.017998][ T4229] usb 4-1: Unsupported UAC3 BADD profile [ 381.034692][T19302] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.6960: error while reading EA inode 1 err=-117 [ 381.075480][ T4229] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 381.082484][T19302] EXT4-fs (loop2): 1 orphan inode deleted [ 381.127686][T19302] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,norecovery,noinit_itable,init_itable=0x0000000000000001,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,errors=continue,dioread_lock,noblock_validity,noquota,,errors=continue. Quota mode: none. [ 381.177983][ T4229] usb 4-1: USB disconnect, device number 39 [ 381.263037][T19302] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz.2.6960: deleted inode referenced: 15 [ 381.448244][ T7636] udevd[7636]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 381.713684][T19344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6980'. [ 381.761421][ T6667] ------------[ cut here ]------------ [ 381.778595][ T6667] WARNING: CPU: 1 PID: 6667 at net/netfilter/nft_set_pipapo.c:2355 nft_pipapo_destroy+0x8b0/0x960 [ 381.804276][ T6667] Modules linked in: [ 381.817688][ T4229] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 381.821934][ T6667] CPU: 1 PID: 6667 Comm: kworker/1:17 Not tainted syzkaller #0 [ 381.844650][ T6667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 381.885870][ T6667] Workqueue: events nf_tables_trans_destroy_work [ 381.906159][ T6667] RIP: 0010:nft_pipapo_destroy+0x8b0/0x960 [ 381.945938][ T6667] Code: 24 80 3c 18 00 74 08 4c 89 f7 e8 2b ea 81 f9 49 c7 06 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b0 c0 3c f9 <0f> 0b e9 ad f7 ff ff 48 c7 c1 70 0f 8b 8d 80 e1 07 80 c1 03 38 c1 [ 381.978656][ T6667] RSP: 0018:ffffc9000343fa68 EFLAGS: 00010293 [ 381.984909][ T6667] RAX: ffffffff883c3ef0 RBX: ffff8880604b94f0 RCX: ffff8880277a9dc0 [ 381.997636][ T6667] RDX: 0000000000000000 RSI: ffff8880604b9400 RDI: ffff88802020f028 [ 382.006379][ T6667] RBP: ffffc9000343fc30 R08: ffff8880277a9dc0 R09: 0000000000000008 [ 382.018508][ T6667] R10: 0000000000000018 R11: 0000000000000000 R12: ffff8880604b94c0 [ 382.026645][ T6667] R13: dffffc0000000000 R14: ffff8880604b9510 R15: dffffc0000000000 [ 382.061039][ T6667] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 382.077683][ T4229] usb 3-1: Using ep0 maxpacket: 16 [ 382.084229][ T6667] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 382.100917][ T6667] CR2: 00007ff4d5640000 CR3: 0000000063091000 CR4: 00000000003506e0 [ 382.117713][ T6667] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 382.131394][ T6667] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 382.139922][ T6667] Call Trace: [ 382.143235][ T6667] [ 382.146204][ T6667] nft_set_destroy+0x488/0xa30 [ 382.151605][ T6667] ? kfree+0xef/0x2a0 [ 382.155744][ T6667] ? nf_tables_chain_destroy+0x47c/0x530 [ 382.161985][ T6667] nf_tables_trans_destroy_work+0xc5d/0xf00 [ 382.168882][ T6667] ? nft_object_dump+0x1e0/0x1e0 [ 382.174049][ T6667] ? _raw_spin_unlock_irq+0x1f/0x40 [ 382.179798][ T6667] process_one_work+0x867/0xff0 [ 382.184994][ T6667] ? worker_detach_from_pool+0x240/0x240 [ 382.191343][ T6667] ? lockdep_hardirqs_off+0x70/0x100 [ 382.196894][ T6667] ? _raw_spin_lock_irq+0xb7/0xf0 [ 382.202446][ T6667] ? _raw_spin_lock_irqsave+0x100/0x100 [ 382.208558][ T6667] ? wq_worker_running+0x97/0x170 [ 382.214292][ T6667] worker_thread+0xad7/0x12a0 [ 382.219609][ T6667] kthread+0x42e/0x520 [ 382.223801][ T6667] ? rcu_lock_release+0x20/0x20 [ 382.229125][ T6667] ? kthread_blkcg+0xd0/0xd0 [ 382.234007][ T6667] ret_from_fork+0x1f/0x30 [ 382.238971][ T6667] [ 382.242131][ T6667] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 382.249429][ T6667] CPU: 1 PID: 6667 Comm: kworker/1:17 Not tainted syzkaller #0 [ 382.256994][ T6667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 382.267075][ T6667] Workqueue: events nf_tables_trans_destroy_work [ 382.273446][ T6667] Call Trace: [ 382.276753][ T6667] [ 382.279704][ T6667] dump_stack_lvl+0x188/0x250 [ 382.284447][ T6667] ? show_regs_print_info+0x20/0x20 [ 382.289678][ T6667] ? load_image+0x410/0x410 [ 382.294222][ T6667] panic+0x2f8/0x850 [ 382.298153][ T6667] ? bpf_jit_dump+0xd0/0xd0 [ 382.302696][ T6667] ? ret_from_fork+0x1f/0x30 [ 382.307311][ T6667] ? nft_pipapo_destroy+0x8b0/0x960 [ 382.312539][ T6667] __warn+0x248/0x2b0 [ 382.313129][ T4229] usb 3-1: unable to get BOS descriptor or descriptor too short [ 382.316547][ T6667] ? nft_pipapo_destroy+0x8b0/0x960 [ 382.329388][ T6667] report_bug+0x1b9/0x2e0 [ 382.333878][ T6667] handle_bug+0x3a/0x70 [ 382.338057][ T6667] exc_invalid_op+0x16/0x40 [ 382.342605][ T6667] asm_exc_invalid_op+0x16/0x20 [ 382.347493][ T6667] RIP: 0010:nft_pipapo_destroy+0x8b0/0x960 [ 382.353324][ T6667] Code: 24 80 3c 18 00 74 08 4c 89 f7 e8 2b ea 81 f9 49 c7 06 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b0 c0 3c f9 <0f> 0b e9 ad f7 ff ff 48 c7 c1 70 0f 8b 8d 80 e1 07 80 c1 03 38 c1 [ 382.372958][ T6667] RSP: 0018:ffffc9000343fa68 EFLAGS: 00010293 [ 382.379056][ T6667] RAX: ffffffff883c3ef0 RBX: ffff8880604b94f0 RCX: ffff8880277a9dc0 [ 382.387054][ T6667] RDX: 0000000000000000 RSI: ffff8880604b9400 RDI: ffff88802020f028 [ 382.395054][ T6667] RBP: ffffc9000343fc30 R08: ffff8880277a9dc0 R09: 0000000000000008 [ 382.403072][ T6667] R10: 0000000000000018 R11: 0000000000000000 R12: ffff8880604b94c0 [ 382.411069][ T6667] R13: dffffc0000000000 R14: ffff8880604b9510 R15: dffffc0000000000 [ 382.419162][ T6667] ? nft_pipapo_destroy+0x8b0/0x960 [ 382.424406][ T6667] ? nft_pipapo_destroy+0x8b0/0x960 [ 382.429668][ T6667] nft_set_destroy+0x488/0xa30 [ 382.434455][ T6667] ? kfree+0xef/0x2a0 [ 382.438496][ T6667] ? nf_tables_chain_destroy+0x47c/0x530 [ 382.444162][ T6667] nf_tables_trans_destroy_work+0xc5d/0xf00 [ 382.450095][ T6667] ? nft_object_dump+0x1e0/0x1e0 [ 382.455063][ T6667] ? _raw_spin_unlock_irq+0x1f/0x40 [ 382.460312][ T6667] process_one_work+0x867/0xff0 [ 382.465210][ T6667] ? worker_detach_from_pool+0x240/0x240 [ 382.470895][ T6667] ? lockdep_hardirqs_off+0x70/0x100 [ 382.476234][ T6667] ? _raw_spin_lock_irq+0xb7/0xf0 [ 382.481034][T19346] loop0: detected capacity change from 0 to 32768 [ 382.481280][ T6667] ? _raw_spin_lock_irqsave+0x100/0x100 [ 382.493258][ T6667] ? wq_worker_running+0x97/0x170 [ 382.498316][ T6667] worker_thread+0xad7/0x12a0 [ 382.503048][ T6667] kthread+0x42e/0x520 [ 382.506837][ T4229] usb 3-1: config 6 has an invalid interface number: 200 but max is 0 [ 382.507133][ T6667] ? rcu_lock_release+0x20/0x20 [ 382.520150][ T6667] ? kthread_blkcg+0xd0/0xd0 [ 382.523778][ T4229] usb 3-1: config 6 has no interface number 0 [ 382.524774][ T6667] ret_from_fork+0x1f/0x30 [ 382.531712][ T4229] usb 3-1: config 6 interface 200 has no altsetting 0 [ 382.535300][ T6667] [ 382.545397][ T6667] Kernel Offset: disabled [ 382.550150][ T6667] Rebooting in 86400 seconds..