last executing test programs: 3.627490443s ago: executing program 3 (id=4793): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x3, 0xd9, 0x7, 0xe, 0x0, 0x4070bd2b, 0x25dfdbfc, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x7, @mcast1, 0x80000001}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, 0x80000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x3, @loopback, 0x30}}]}, 0x70}, 0x1, 0x7}, 0x0) 3.438668787s ago: executing program 3 (id=4798): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x33, 0x0, &(0x7f00000048c0)) 3.34388249s ago: executing program 3 (id=4802): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@RTM_GETNSID={0x1c, 0x5a, 0x1, 0x0, 0x0, {}, [@NETNSA_FD={0x8}]}, 0x1c}}, 0x0) 3.139357915s ago: executing program 3 (id=4807): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@cgroup, r0, 0x24}, 0x14) 3.048976707s ago: executing program 0 (id=4810): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000200)=@newlink={0x5c, 0x10, 0x401, 0x2, 0x80000, {0x0, 0x0, 0x0, 0x0, 0x1000, 0x41042}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vti={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @private=0xa010101}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0x2}, @IFLA_VTI_IKEY={0x8, 0x2, 0xb99d}]]}}}, @IFLA_IFNAME={0x14, 0x3, 'ip_vti0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8c5}, 0x0) 2.997682328s ago: executing program 3 (id=4811): syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004038071317400001020301090224000101ff50090904000d010301020009217fff770122b10f0905810300"], 0x0) syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d4ee0620cf106180"], 0x0) 2.957772169s ago: executing program 0 (id=4813): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x6897c, 0x13}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x80000001, 0x3}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_batadv\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 2.786430563s ago: executing program 0 (id=4816): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) 2.683637125s ago: executing program 0 (id=4818): syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x8d0, &(0x7f0000000080)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c00a99176bffea999ec4947785a4b3392b470a878b010acc5fde3f7c39533b111d92aa1e3cd9504b4aec083a038cd1b944d504716e6b8463de9dc9743fbe9e0ef9396a932024b904283205650ea735ae7adac50b5efe5244d737dc9515a51775b2fafbc85c9c1c8f62872a466192aae714a90990e0b07aa2b92e463ad98"], 0x1, 0x25f, &(0x7f0000000840)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1fe) 2.5092239s ago: executing program 0 (id=4822): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000000, &(0x7f0000000080)=ANY=[], 0x1, 0x61b7, &(0x7f0000000140)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 1.025940306s ago: executing program 3 (id=4838): syz_usb_connect(0x2, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0x74, 0x21, 0xe0, 0x40, 0x16c0, 0x5df, 0xa276, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x5, 0xd0, 0x7f, "", [{{0x9, 0x4, 0x20, 0xc, 0x0, 0x3, 0x0, 0x0, 0x9}}]}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000500)=@ready={0x0, 0x0, 0x8, "72918f72", {0x1, 0x1, 0x1000, 0x2, 0x5}}) 939.774947ms ago: executing program 0 (id=4841): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c801000000000904"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000580)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="400504000000315e26f7"]}) 785.650411ms ago: executing program 2 (id=4845): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, 0x0) 782.049492ms ago: executing program 4 (id=4846): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)={0x14, 0x14, 0x1, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 668.472044ms ago: executing program 2 (id=4847): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000180)={0x1, 0x80, 0x80, 0xd, 0x10, 0x3e8, 0x2, 0x0, 0x20, 0x1, 0x0, 0x0, &(0x7f0000000600)=[0x7], 0x1, 0x0}) 647.034665ms ago: executing program 4 (id=4848): r0 = socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$NFT_BATCH(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x8014) 613.481575ms ago: executing program 1 (id=4849): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r0, &(0x7f00000001c0)=""/4068, 0xfe4) 550.803187ms ago: executing program 2 (id=4850): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x20, 0x76, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@loopback}, @nested={0x5, 0xd, 0x0, 0x1, [@generic='M']}]}, 0x20}], 0x1}, 0x0) 516.131348ms ago: executing program 1 (id=4851): r0 = syz_open_dev$amidi(&(0x7f00000014c0), 0x2, 0x2000) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000000)={0x0, 0x101, 0x7, 0x1, 0x6}) 490.757178ms ago: executing program 4 (id=4852): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x14, 0x0, &(0x7f0000000180)) 421.43303ms ago: executing program 1 (id=4853): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x119) 382.978361ms ago: executing program 2 (id=4854): r0 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="2400000000000000000000000700000044144ed3"], 0x88}, 0x4004804) 349.732672ms ago: executing program 4 (id=4855): r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000000500)=""/121, &(0x7f0000000580)=0x79) 308.412193ms ago: executing program 1 (id=4856): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0xffffffffffffffff, 0x340) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000003c0)={0x0, 0x0, {0x4006, 0x6, 0x3012, 0x5, 0x0, 0x7, 0x2, 0x6}}) 230.452145ms ago: executing program 2 (id=4857): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) ustat(0x11, &(0x7f00000000c0)) 182.263625ms ago: executing program 4 (id=4858): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000006f40), 0x2002, 0x0) fcntl$setstatus(r0, 0x4, 0x1800) 160.756696ms ago: executing program 1 (id=4859): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0905, 0x0, '\x00', @p_u32=0x0}}) 110.788978ms ago: executing program 2 (id=4860): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0xe, 0x3, "91abc12404cf378042f2"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x8c}}, 0x0) 50.970199ms ago: executing program 4 (id=4861): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141411e0000001000000002800000000000000000000000700000094040007441405", @ANYRES8], 0x48}, 0x0) 0s ago: executing program 1 (id=4862): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004880}, 0x0) kernel console output (not intermixed with test programs): b 1-1: config 12 has an invalid interface number: 99 but max is 0 [ 170.726382][ T4232] usb 1-1: config 12 has no interface number 0 [ 170.759373][ T4232] usb 1-1: config 12 interface 99 altsetting 14 endpoint 0xD has invalid maxpacket 552, setting to 64 [ 170.781935][ T4232] usb 1-1: config 12 interface 99 has no altsetting 0 [ 170.809010][ T8871] EXT4-fs (loop2): mounted filesystem without journal. Opts: mblk_io_submit,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 170.840002][ T8871] ext4 filesystem being mounted at /381/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.879668][ T8668] usb 2-1: config 150 has an invalid interface number: 204 but max is 2 [ 170.888063][ T8668] usb 2-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 170.933025][ T8668] usb 2-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 170.949788][ T4232] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=a4.d6 [ 170.959565][ T8668] usb 2-1: config 150 has no interface number 0 [ 170.965886][ T8668] usb 2-1: config 150 interface 204 has no altsetting 0 [ 170.966179][ T4232] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.989253][ T4232] usb 1-1: Product: syz [ 170.995290][ T4232] usb 1-1: Manufacturer: syz [ 171.000376][ T4232] usb 1-1: SerialNumber: syz [ 171.088172][ T8886] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2109'. [ 171.159991][ T8668] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 171.179541][ T8668] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.187698][ T8668] usb 2-1: Product: syz [ 171.217763][ T8668] usb 2-1: Manufacturer: syz [ 171.230037][ T8668] usb 2-1: SerialNumber: syz [ 171.357842][ T4232] usb 1-1: no audio or video endpoints found [ 171.387905][ T4232] usb 1-1: USB disconnect, device number 17 [ 171.531085][ T8668] xr_serial 2-1:150.204: skipping garbage [ 171.544135][ T8668] xr_serial 2-1:150.204: invalid descriptor buffer length [ 171.576940][ T8668] usb 2-1: USB disconnect, device number 10 [ 171.994186][ T8936] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2136'. [ 172.816341][ T8998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2164'. [ 173.336056][ T9039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2185'. [ 173.468465][ T9049] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2191'. [ 173.617145][ T9057] netlink: 'syz.1.2194': attribute type 1 has an invalid length. [ 173.650852][ T9057] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2194'. [ 173.652881][ T9066] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2197'. [ 173.909331][ T9081] xt_TCPMSS: Only works on TCP SYN packets [ 174.025962][ T9088] netlink: 288 bytes leftover after parsing attributes in process `syz.3.2209'. [ 174.054239][ T9091] xt_HMARK: spi-set and port-set can't be combined [ 174.228097][ T9101] netlink: 'syz.0.2214': attribute type 1 has an invalid length. [ 174.567504][ T9123] bond0: ARP monitoring cannot be used with MII monitoring [ 174.619248][ T9127] netlink: 'syz.1.2227': attribute type 3 has an invalid length. [ 174.658602][ T9127] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2227'. [ 174.769668][ T8665] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 174.816302][ T8668] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 175.049597][ T8665] usb 3-1: Using ep0 maxpacket: 8 [ 175.179901][ T8668] usb 5-1: not running at top speed; connect to a high speed hub [ 175.200104][ T8665] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.219485][ T8665] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.241781][ T8665] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 175.283589][ T8665] usb 3-1: config 0 interface 0 has no altsetting 0 [ 175.324770][ T8665] usb 3-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 3.00 [ 175.347774][ T8665] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.375454][ T8665] usb 3-1: config 0 descriptor?? [ 175.437088][ T8665] usbhid 3-1:0.0: can't add hid device: -22 [ 175.449828][ T8665] usbhid: probe of 3-1:0.0 failed with error -22 [ 175.479616][ T8668] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 175.490340][ T8668] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.498401][ T8668] usb 5-1: Product: syz [ 175.508869][ T8668] usb 5-1: Manufacturer: syz [ 175.515621][ T8668] usb 5-1: SerialNumber: syz [ 175.537284][ T9173] netlink: zone id is out of range [ 175.566634][ T8668] keyspan 5-1:1.0: Keyspan 4 port adapter converter detected [ 175.598683][ T8668] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 175.611505][ T8668] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 175.656886][ T8668] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 175.680002][ T8668] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 175.696040][ T9179] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2254'. [ 175.709592][ T9179] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 175.759649][ T8665] usb 3-1: USB disconnect, device number 11 [ 175.829786][ C0] usb 5-1: malformed indat packet [ 175.849701][ C0] usb 5-1: malformed indat packet [ 175.869577][ C0] usb 5-1: malformed indat packet [ 175.899528][ C0] usb 5-1: malformed indat packet [ 175.907493][ T9183] loop1: detected capacity change from 0 to 1764 [ 175.928684][ T9186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2258'. [ 175.938329][ C0] usb 5-1: malformed indat packet [ 175.949559][ C0] usb 5-1: malformed indat packet [ 175.969588][ C0] usb 5-1: malformed indat packet [ 176.027490][ T9183] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 176.106725][ T9191] nvme_fabrics: missing parameter 'nqn=%s' [ 176.180675][ T4232] usb 5-1: USB disconnect, device number 13 [ 176.227215][ T4232] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 176.242478][ T9199] loop1: detected capacity change from 0 to 136 [ 176.246401][ T9198] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 176.269036][ T4232] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 176.286730][ T4232] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 176.300110][ T4232] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 176.331195][ T4232] keyspan 5-1:1.0: device disconnected [ 177.018719][ T9243] __nla_validate_parse: 2 callbacks suppressed [ 177.018740][ T9243] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2286'. [ 177.073276][ T9243] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2286'. [ 177.412086][ T9264] kAFS: unable to lookup cell '' [ 177.469866][ T9269] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2298'. [ 177.566109][ T9274] netlink: 'syz.1.2301': attribute type 2 has an invalid length. [ 177.634663][ T9274] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2301'. [ 177.745378][ T9282] overlayfs: missing 'lowerdir' [ 177.809561][ T8665] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 177.857289][ T9286] netdevsim netdevsim2: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 178.224512][ T8665] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 178.236021][ T8665] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 178.249552][ T8665] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 178.269665][ T8665] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 178.283207][ T8665] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 178.303380][ T9304] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2316'. [ 178.312639][ T8668] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 178.325559][ T8665] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.354018][ T8665] usb 1-1: config 0 descriptor?? [ 178.564038][ T9318] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2323'. [ 178.575916][ T9316] loop4: detected capacity change from 0 to 2048 [ 178.620103][ T8668] usb 3-1: Using ep0 maxpacket: 32 [ 178.625610][ T8665] hdpvr 1-1:0.0: firmware version 0xd dated ­";W|۱adTUK> }1vN`Y# [ 178.630060][ T4232] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 178.659217][ T9319] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 178.737361][ T9316] attempt to access beyond end of device [ 178.737361][ T9316] loop4: rw=0, want=18441677524128759846, limit=2048 [ 178.752667][ T8668] usb 3-1: config 0 has an invalid descriptor of length 254, skipping remainder of the config [ 178.849672][ T8665] hdpvr 1-1:0.0: device init failed [ 178.855035][ T8665] hdpvr: probe of 1-1:0.0 failed with error -12 [ 178.890827][ T8665] usb 1-1: USB disconnect, device number 18 [ 178.923811][ T4232] usb 4-1: Using ep0 maxpacket: 8 [ 178.949793][ T8668] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 178.958989][ T8668] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.967743][ T8668] usb 3-1: Product: syz [ 178.974280][ T8668] usb 3-1: Manufacturer: syz [ 178.979673][ T8668] usb 3-1: SerialNumber: syz [ 179.000172][ T8668] usb 3-1: config 0 descriptor?? [ 179.041131][ T8668] usb 3-1: bad CDC descriptors [ 179.051145][ T8668] usb 3-1: unsupported MDLM descriptors [ 179.084086][ T4232] usb 4-1: unable to get BOS descriptor or descriptor too short [ 179.179560][ T4232] usb 4-1: config 127 has an invalid interface number: 189 but max is 0 [ 179.188886][ T4232] usb 4-1: config 127 has no interface number 0 [ 179.205288][ T4232] usb 4-1: config 127 interface 189 has no altsetting 0 [ 179.265354][ T6008] usb 3-1: USB disconnect, device number 12 [ 179.363620][ T9339] loop4: detected capacity change from 0 to 128 [ 179.379608][ T4232] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=7c.4e [ 179.395907][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.419951][ T4232] usb 4-1: Product: syz [ 179.424380][ T4232] usb 4-1: Manufacturer: syz [ 179.443837][ T9339] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 179.449770][ T4232] usb 4-1: SerialNumber: syz [ 179.510206][ T9339] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 179.817881][ T4232] usb 4-1: USB disconnect, device number 14 [ 180.060512][ T4497] udevd[4497]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:127.189/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 180.628439][ T9389] loop2: detected capacity change from 0 to 736 [ 180.693326][ T9393] openvswitch: netlink: Actions may not be safe on all matching packets [ 180.794505][ T9389] rock: directory entry would overflow storage [ 180.859460][ T9389] rock: sig=0x3b10, size=4, remaining=3 [ 180.994461][ T9409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2370'. [ 181.062306][ T9413] x_tables: duplicate underflow at hook 2 [ 181.239505][ T6008] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 181.649826][ T6008] usb 1-1: unable to get BOS descriptor or descriptor too short [ 181.700129][ T6008] usb 1-1: not running at top speed; connect to a high speed hub [ 181.719374][ T9435] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2380'. [ 181.799807][ T6008] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 4 [ 181.870063][ T6008] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 4 [ 182.170210][ T6008] usb 1-1: string descriptor 0 read error: -22 [ 182.204940][ T6008] usb 1-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 182.249582][ T6008] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.666285][ T9489] netlink: 'syz.1.2408': attribute type 1 has an invalid length. [ 182.703856][ T9492] xt_CT: You must specify a L4 protocol and not use inversions on it [ 182.876071][ T8668] usb 1-1: USB disconnect, device number 19 [ 183.107432][ T9507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2416'. [ 183.143437][ T9507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2416'. [ 183.147916][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 183.180684][ T9507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2416'. [ 183.229609][ T9507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2416'. [ 183.261311][ T9507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2416'. [ 183.303384][ T9507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2416'. [ 183.328717][ T9515] loop1: detected capacity change from 0 to 2048 [ 183.349030][ T9507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2416'. [ 183.370567][ T9507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2416'. [ 183.397168][ T9507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2416'. [ 183.426988][ T9507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2416'. [ 183.532112][ T9521] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 183.549749][ T9522] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 183.654533][ T9521] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 183.684908][ T9515] attempt to access beyond end of device [ 183.684908][ T9515] loop1: rw=0, want=281474976710724, limit=2048 [ 183.815053][ T9515] NILFS (loop1): I/O error reading b-tree node block (ino=16, blocknr=15) [ 183.835146][ C0] vkms_vblank_simulate: vblank timer overrun [ 183.968508][ T9537] netlink: 'syz.0.2432': attribute type 1 has an invalid length. [ 184.036950][ T9515] attempt to access beyond end of device [ 184.036950][ T9515] loop1: rw=0, want=281474976710724, limit=2048 [ 184.068590][ T9515] NILFS (loop1): I/O error reading b-tree node block (ino=16, blocknr=15) [ 184.084895][ T9515] NILFS (loop1): error -5 truncating bmap (ino=16) [ 184.918765][ T9588] loop3: detected capacity change from 0 to 2048 [ 185.036018][ T9598] netlink: 'syz.1.2462': attribute type 10 has an invalid length. [ 185.136622][ T9598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.150329][ T9588] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 185.187596][ T9588] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.2457: bg 0: block 240: padding at end of block bitmap is not set [ 185.231160][ T9598] team0: Port device bond0 added [ 185.266933][ T9607] netlink: 'syz.4.2465': attribute type 10 has an invalid length. [ 185.388473][ T9615] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 185.419672][ T9615] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 185.637989][ T9634] IPv6: NLM_F_CREATE should be specified when creating new route [ 185.839908][ T6008] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 185.912634][ T9637] loop2: detected capacity change from 0 to 8192 [ 185.999786][ T9637] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 186.038865][ T9637] REISERFS (device loop2): using ordered data mode [ 186.073999][ T9637] reiserfs: using flush barriers [ 186.108821][ T9637] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 186.125956][ T6008] usb 5-1: Using ep0 maxpacket: 8 [ 186.133947][ T9637] REISERFS (device loop2): checking transaction log (loop2) [ 186.216928][ T9658] overlayfs: workdir and upperdir must be separate subtrees [ 186.289666][ T6008] usb 5-1: unable to get BOS descriptor or descriptor too short [ 186.346951][ T9637] REISERFS (device loop2): Using tea hash to sort names [ 186.360089][ T9637] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 186.389604][ T6008] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 186.405515][ T6008] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 186.415660][ T6008] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 186.439501][ T6008] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 186.459527][ T8668] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 186.483844][ T6008] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 186.533793][ T6008] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 186.701202][ T6008] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 186.747303][ T6008] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.749719][ T8668] usb 2-1: Using ep0 maxpacket: 8 [ 186.788145][ T6008] usb 5-1: Product: syz [ 186.795023][ T9670] x_tables: duplicate entry at hook 1 [ 186.812397][ T6008] usb 5-1: Manufacturer: syz [ 186.817281][ T6008] usb 5-1: SerialNumber: syz [ 186.861515][ T6008] usb 5-1: config 0 descriptor?? [ 186.880277][ T9627] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 186.919798][ T8668] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 186.937286][ T8668] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 186.978075][ T8668] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 187.011023][ T4856] udevd[4856]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 187.046468][ T8668] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 187.072561][ T8668] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 187.092992][ T8668] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 187.112535][ T8668] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 187.132741][ T8668] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.174221][ T4232] usb 5-1: USB disconnect, device number 14 [ 187.210727][ T8668] usbtmc 2-1:16.0: bulk endpoints not found [ 187.433990][ T6008] usb 2-1: USB disconnect, device number 11 [ 187.449715][ T8665] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 187.599684][ T8668] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 187.724793][ T8665] usb 3-1: Using ep0 maxpacket: 32 [ 187.869635][ T8668] usb 1-1: Using ep0 maxpacket: 16 [ 187.910039][ T8665] usb 3-1: unable to get BOS descriptor or descriptor too short [ 187.929785][ T8667] Bluetooth: hci4: command 0x0405 tx timeout [ 187.992908][ T8668] usb 1-1: config index 0 descriptor too short (expected 65, got 36) [ 188.009720][ T8665] usb 3-1: config 12 has an invalid interface number: 183 but max is 1 [ 188.020536][ T8668] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 188.039469][ T8665] usb 3-1: config 12 has an invalid interface number: 229 but max is 1 [ 188.067397][ T8668] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 188.080707][ T8665] usb 3-1: config 12 has no interface number 0 [ 188.087014][ T8665] usb 3-1: config 12 has no interface number 1 [ 188.112561][ T8668] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 188.129461][ T8665] usb 3-1: config 12 interface 183 has no altsetting 0 [ 188.153617][ T8668] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.195364][ T8668] usb 1-1: config 0 descriptor?? [ 188.254573][ T8668] pxrc 1-1:0.0: Could not find endpoint [ 188.268779][ T8668] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 188.339632][ T8665] usb 3-1: New USB device found, idVendor=1415, idProduct=2000, bcdDevice=2b.98 [ 188.348949][ T8665] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.357932][ T8665] usb 3-1: Product: syz [ 188.362954][ T8665] usb 3-1: Manufacturer: syz [ 188.367600][ T8665] usb 3-1: SerialNumber: syz [ 188.394372][ T9740] netlink: 'syz.3.2530': attribute type 46 has an invalid length. [ 188.406667][ T9740] netlink: 'syz.3.2530': attribute type 28 has an invalid length. [ 188.417561][ T9740] __nla_validate_parse: 45 callbacks suppressed [ 188.417579][ T9740] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2530'. [ 188.465002][ T8668] usb 1-1: USB disconnect, device number 20 [ 188.546906][ T9744] netlink: 'syz.4.2532': attribute type 6 has an invalid length. [ 188.760501][ T8665] usb 3-1: USB disconnect, device number 13 [ 188.939563][ T6005] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 189.002287][ T9773] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2544'. [ 189.189518][ T6005] usb 5-1: Using ep0 maxpacket: 8 [ 189.244666][ T9788] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2551'. [ 189.309079][ T9791] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2552'. [ 189.310419][ T6005] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.363785][ T6005] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 189.374934][ T6005] usb 5-1: config 1 interface 0 has no altsetting 0 [ 189.404640][ T9794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2553'. [ 189.619704][ T6005] usb 5-1: string descriptor 0 read error: -22 [ 189.626391][ T6005] usb 5-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 189.683446][ T6005] usb 5-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 189.762621][ T6005] usb 5-1: 0:2 : does not exist [ 189.803514][ T6005] usb-storage 5-1:1.1: USB Mass Storage device detected [ 189.826604][ T9822] netlink: 'syz.2.2567': attribute type 1 has an invalid length. [ 189.858635][ T9828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2569'. [ 190.214083][ T6005] us122l: couldn't allocate write buffer [ 190.223044][ T6005] snd-usb-us122l: probe of 5-1:1.1 failed with error -22 [ 190.299767][ T6005] usb 5-1: USB disconnect, device number 15 [ 190.368314][ T9854] 8021q: adding VLAN 0 to HW filter on device bond1 [ 190.478530][ T9870] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 191.090432][ T9908] No source specified [ 191.192460][ T9916] IPv6: NLM_F_CREATE should be specified when creating new route [ 191.299928][ T8665] Bluetooth: hci3: command 0x0406 tx timeout [ 191.321360][ T8665] Bluetooth: hci1: command 0x0406 tx timeout [ 191.329026][ T8665] Bluetooth: hci2: command 0x0406 tx timeout [ 191.353947][ T8665] Bluetooth: hci0: command 0x0406 tx timeout [ 191.379592][ T8665] Bluetooth: hci4: command 0x0406 tx timeout [ 191.406914][ T9930] netlink: 'syz.0.2617': attribute type 46 has an invalid length. [ 191.480043][ T9930] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2617'. [ 191.609719][ T9940] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2624'. [ 191.765010][ T9951] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 191.923270][ T9963] MTD: Couldn't look up './bus': -15 [ 191.929771][ T8668] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 191.930893][ T9966] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2636'. [ 192.009737][ T8665] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 192.199528][ T8668] usb 5-1: Using ep0 maxpacket: 16 [ 192.350250][ T8668] usb 5-1: New USB device found, idVendor=0471, idProduct=0307, bcdDevice=61.a4 [ 192.377221][ T8668] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.396929][ T8668] usb 5-1: config 0 descriptor?? [ 192.429945][ T8665] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 192.450008][ T8665] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 192.462673][ T8668] pwc: Philips PCVC675K (Vesta) USB webcam detected. [ 192.480484][ T8665] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 192.516051][ T8665] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.545900][T10001] netlink: 'syz.2.2653': attribute type 1 has an invalid length. [ 192.564157][T10001] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2653'. [ 192.632896][T10006] xt_connbytes: Forcing CT accounting to be enabled [ 192.699898][ T8668] pwc: send_video_command error -71 [ 192.705191][ T8668] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 192.738820][ T8668] Philips webcam: probe of 5-1:0.0 failed with error -71 [ 192.756278][ T8668] usb 5-1: USB disconnect, device number 16 [ 192.817281][ T8665] usb 4-1: USB disconnect, device number 15 [ 192.831864][T10014] device geneve2 entered promiscuous mode [ 192.920125][ T8667] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 192.984394][T10026] netlink: 'syz.0.2665': attribute type 1 has an invalid length. [ 192.997557][T10026] netlink: 'syz.0.2665': attribute type 3 has an invalid length. [ 193.014911][T10026] NCSI netlink: No device for ifindex 55159 [ 193.399872][ T8667] usb 2-1: unable to get BOS descriptor or descriptor too short [ 193.415650][T10052] netlink: 'syz.2.2679': attribute type 1 has an invalid length. [ 193.440641][T10052] __nla_validate_parse: 4 callbacks suppressed [ 193.440659][T10052] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2679'. [ 193.459896][ T8667] usb 2-1: not running at top speed; connect to a high speed hub [ 193.487276][T10052] NCSI netlink: No device for ifindex 0 [ 193.503415][T10056] ksmbd: Unknown IPC event: 10, ignore. [ 193.549778][ T8667] usb 2-1: config 17 has an invalid interface number: 8 but max is 1 [ 193.585899][ T8667] usb 2-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 193.600306][ T8667] usb 2-1: config 17 has no interface number 0 [ 193.624741][ T8667] usb 2-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid maxpacket 64768, setting to 64 [ 193.659054][ T8667] usb 2-1: config 17 interface 8 has no altsetting 0 [ 193.666768][T10064] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2685'. [ 193.699784][T10064] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2685'. [ 193.868144][ T8667] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 193.877487][ T8667] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.906531][ T8667] usb 2-1: Product: syz [ 193.920508][T10078] 0x000000000000-0x000000020000 : "" [ 193.932546][ T8667] usb 2-1: Manufacturer: syz [ 193.937320][ T8667] usb 2-1: SerialNumber: syz [ 193.983475][T10078] ftl_cs: FTL header not found. [ 194.302166][ T8667] usb 2-1: selecting invalid altsetting 0 [ 194.328248][T10093] loop3: detected capacity change from 0 to 4096 [ 194.344970][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.378693][T10093] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 194.384422][ T8667] usb 2-1: USB disconnect, device number 12 [ 194.709898][ T6008] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 194.739586][ T8668] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 195.100083][ T6008] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.120176][ T4232] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 195.139629][ T8668] usb 1-1: config 0 has an invalid interface number: 37 but max is 1 [ 195.160186][ T8668] usb 1-1: config 0 has an invalid interface number: 255 but max is 1 [ 195.194848][ T8668] usb 1-1: config 0 has no interface number 0 [ 195.201616][ T8668] usb 1-1: config 0 has no interface number 1 [ 195.207749][ T8668] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 195.220679][ T8668] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 195.235079][ T8668] usb 1-1: config 0 interface 255 has no altsetting 0 [ 195.293504][ T6008] usb 5-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 195.321867][ T6008] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.338201][ T6008] usb 5-1: Product: syz [ 195.347912][ T6008] usb 5-1: Manufacturer: syz [ 195.359757][ T6008] usb 5-1: SerialNumber: syz [ 195.374393][ T6008] usb 5-1: config 0 descriptor?? [ 195.422189][ T6008] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 195.426095][ T8668] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 195.439938][ T8668] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.448095][ T8668] usb 1-1: Product: syz [ 195.452930][ T8668] usb 1-1: Manufacturer: syz [ 195.457656][ T8668] usb 1-1: SerialNumber: syz [ 195.474964][ T8668] usb 1-1: config 0 descriptor?? [ 195.480061][ T4232] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 195.480090][ T4232] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.480111][ T4232] usb 3-1: config 0 has no interface number 0 [ 195.639979][ T4232] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 195.656564][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.675183][ T4232] usb 3-1: Product: syz [ 195.679632][ T4232] usb 3-1: Manufacturer: syz [ 195.684263][ T4232] usb 3-1: SerialNumber: syz [ 195.701487][ T4232] usb 3-1: config 0 descriptor?? [ 195.741597][ T4232] hub 3-1:0.31: bad descriptor, ignoring hub [ 195.747698][ T4232] hub: probe of 3-1:0.31 failed with error -5 [ 195.769294][ T4232] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 195.790240][ T4232] uvcvideo 3-1:0.31: Entity type for entity Output 6 was not initialized! [ 195.799971][ T4232] usb 3-1: Failed to create links for entity 6 [ 195.806247][ T4232] usb 3-1: Failed to register entities (-22). [ 195.816438][ T8668] usb 1-1: USB disconnect, device number 21 [ 195.859667][ T6008] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 195.866565][ T6008] gspca_pac7302: probe of 5-1:0.0 failed with error -71 [ 195.899938][ T6008] usb 5-1: USB disconnect, device number 17 [ 195.988696][T10135] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2720'. [ 196.009549][T10135] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2720'. [ 196.079969][ T6005] usb 3-1: USB disconnect, device number 14 [ 196.285493][T10144] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2724'. [ 196.307619][T10144] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2724'. [ 196.440175][T10151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2728'. [ 197.369552][T10159] loop3: detected capacity change from 0 to 32768 [ 197.982503][T10228] JFS: discard option not supported on device [ 198.007442][T10232] netlink: 'syz.0.2768': attribute type 11 has an invalid length. [ 198.060759][T10228] Mount JFS Failure: -22 [ 198.065599][T10232] netlink: 448 bytes leftover after parsing attributes in process `syz.0.2768'. [ 198.069042][T10228] jfs_mount failed w/return code = -22 [ 198.173946][T10198] loop1: detected capacity change from 0 to 32768 [ 198.235915][T10236] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2770'. [ 198.498341][T10249] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2777'. [ 198.507563][T10249] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2777'. [ 198.964066][T10230] loop2: detected capacity change from 0 to 32768 [ 199.013882][T10278] overlayfs: missing 'workdir' [ 199.037360][T10230] jfs_strtoUCS: char2uni returned -22. [ 199.049804][ T6008] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 199.098422][T10230] charset = cp936, char = 0xd4 [ 199.228203][T10287] netlink: 'syz.2.2795': attribute type 30 has an invalid length. [ 199.309706][ T6008] usb 4-1: Using ep0 maxpacket: 8 [ 199.429714][ T6008] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.459583][ T6008] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 199.505959][ T6008] usb 4-1: config 1 interface 0 has no altsetting 0 [ 199.604839][T10306] echo interval is out of bounds [ 199.604839][T10306] [ 199.632817][T10306] CIFS: VFS: echo interval is out of bounds [ 199.770101][ T6008] usb 4-1: string descriptor 0 read error: -22 [ 199.778248][ T6008] usb 4-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 199.820655][ T6008] usb 4-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 199.874249][ T6008] usb 4-1: 0:2 : does not exist [ 199.927025][ T6008] usb-storage 4-1:1.1: USB Mass Storage device detected [ 200.044127][T10333] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2816'. [ 200.085053][T10333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2816'. [ 200.110130][T10337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2818'. [ 200.329704][ T6008] us122l: couldn't allocate write buffer [ 200.348948][ T6008] snd-usb-us122l: probe of 4-1:1.1 failed with error -22 [ 200.382377][ T6008] usb 4-1: USB disconnect, device number 16 [ 200.473477][T10357] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2828'. [ 200.989232][T10389] loop3: detected capacity change from 0 to 512 [ 201.095899][T10389] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 201.159707][T10389] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 201.168862][T10389] EXT4-fs (loop3): orphan cleanup on readonly fs [ 201.265362][T10389] EXT4-fs (loop3): 1 truncate cleaned up [ 201.272725][T10389] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 201.686453][T10430] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 201.910093][T10448] netlink: 'syz.1.2873': attribute type 11 has an invalid length. [ 202.030693][T10460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2878'. [ 202.110734][T10461] nvme_tcp: malformed address passed: 127.:.0.1:44%0 [ 202.162233][T10463] delete_channel: no stack [ 203.393740][T10561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2926'. [ 203.592560][T10572] device vti0 entered promiscuous mode [ 203.796852][T10587] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2938'. [ 203.962545][T10597] netlink: 'syz.1.2944': attribute type 3 has an invalid length. [ 203.985123][T10597] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2944'. [ 204.222046][T10615] usb usb9: usbfs: process 10615 (syz.3.2953) did not claim interface 0 before use [ 204.546804][T10644] netlink: 'syz.0.2968': attribute type 1 has an invalid length. [ 204.576867][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 204.669622][ T1108] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 204.688634][T10652] bond0: option min_links: invalid value (18446744073709551615) [ 204.701876][T10652] bond0: option min_links: allowed values 0 - 2147483647 [ 204.789504][ T8667] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 204.959596][ T1108] usb 5-1: Using ep0 maxpacket: 8 [ 205.052717][T10673] netlink: 'syz.1.2982': attribute type 21 has an invalid length. [ 205.061169][T10674] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2981'. [ 205.070447][ T8667] usb 4-1: Using ep0 maxpacket: 16 [ 205.076553][T10673] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2982'. [ 205.086378][ T1108] usb 5-1: config 2 has an invalid interface number: 111 but max is 0 [ 205.095964][T10674] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2981'. [ 205.105499][ T1108] usb 5-1: config 2 has no interface number 0 [ 205.112950][ T1108] usb 5-1: too many endpoints for config 2 interface 111 altsetting 55: 172, using maximum allowed: 30 [ 205.153871][ T1108] usb 5-1: config 2 interface 111 altsetting 55 has 0 endpoint descriptors, different from the interface descriptor's value: 172 [ 205.179862][ T1108] usb 5-1: config 2 interface 111 has no altsetting 0 [ 205.186755][ T1108] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 205.209829][ T8667] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 205.228584][ T8667] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.239576][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.259605][ T8667] usb 4-1: config 1 has no interface number 0 [ 205.267212][ T8667] usb 4-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 205.285996][ T8667] usb 4-1: config 1 interface 105 has no altsetting 0 [ 205.400509][ T7416] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 205.469899][ T8667] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 205.494125][ T8667] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 205.506077][T10693] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2991'. [ 205.520005][ T8667] usb 4-1: Product: syz [ 205.527921][ T8667] usb 4-1: Manufacturer: syz [ 205.535234][ T8667] usb 4-1: SerialNumber: syz [ 205.542673][ T1108] usb 5-1: string descriptor 0 read error: -71 [ 205.558171][ T1108] usb 5-1: USB disconnect, device number 18 [ 205.649645][ T7416] usb 1-1: Using ep0 maxpacket: 8 [ 205.745823][T10703] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2996'. [ 205.769861][ T7416] usb 1-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 205.780013][ T7416] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.806691][ T7416] usb 1-1: config 0 descriptor?? [ 205.822137][ T8667] aqc111: probe of 4-1:1.105 failed with error -22 [ 206.041178][ T6008] usb 4-1: USB disconnect, device number 17 [ 206.089754][ T7416] usb 1-1: string descriptor 0 read error: -71 [ 206.096213][ T7416] uvcvideo 1-1:0.0: Found multiple Units with ID 1 [ 206.117382][ T7416] usb 1-1: Found UVC 0.00 device (2833:0201) [ 206.126744][ T7416] usb 1-1: No valid video chain found. [ 206.146664][ T7416] usb 1-1: USB disconnect, device number 22 [ 206.243763][T10718] loop4: detected capacity change from 0 to 128 [ 206.297102][T10718] EXT4-fs (loop4): Test dummy encryption mode enabled [ 206.335218][T10718] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,inode_readahead_blks=0x0000000000200000,,errors=continue. Quota mode: none. [ 206.365082][T10718] ext4 filesystem being mounted at /579/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 206.513772][T10718] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 206.769845][T10745] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3012'. [ 206.803978][T10745] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3012'. [ 206.837087][T10745] bond0: (slave bond_slave_0): Releasing backup interface [ 206.893404][T10745] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 206.918348][T10752] loop3: detected capacity change from 0 to 256 [ 206.949527][ T7416] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 207.003296][T10752] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d) [ 207.146602][T10756] loop4: detected capacity change from 0 to 4096 [ 207.309702][ T7416] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.322231][ T7416] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 207.420223][T10756] ntfs3: loop4: Failed to load $Extend. [ 207.519875][ T7416] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 207.529102][ T7416] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.553405][ T7416] usb 1-1: Product: syz [ 207.570315][ T7416] usb 1-1: Manufacturer: syz [ 207.597430][ T7416] usb 1-1: SerialNumber: syz [ 207.874584][T10796] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 207.935438][T10800] loop1: detected capacity change from 0 to 64 [ 208.149696][ T7416] usb 1-1: cannot find UAC_HEADER [ 208.211902][ T7416] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 208.279735][ T7416] usb 1-1: USB disconnect, device number 23 [ 208.308458][ T4497] udevd[4497]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 208.412318][T10818] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3047'. [ 208.465413][T10818] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 208.498859][T10818] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 208.514963][T10818] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 208.538687][T10818] infiniband syz: set active [ 208.562990][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 208.594908][T10825] loop3: detected capacity change from 0 to 128 [ 208.685336][T10825] EXT4-fs (loop3): Test dummy encryption mode enabled [ 208.803725][T10825] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,inode_readahead_blks=0x0000000000200000,,errors=continue. Quota mode: none. [ 208.847972][T10839] binder: 10838:10839 ioctl c018620b 0 returned -14 [ 208.879566][T10825] ext4 filesystem being mounted at /634/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 209.209761][ T8667] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 209.269812][T10860] __nla_validate_parse: 76 callbacks suppressed [ 209.269831][T10860] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3066'. [ 209.292734][T10861] loop1: detected capacity change from 0 to 512 [ 209.307646][T10860] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3066'. [ 209.337274][T10861] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 209.360042][T10860] bond0: (slave bond_slave_0): Releasing backup interface [ 209.389718][T10861] EXT4-fs (loop1): 1 truncate cleaned up [ 209.403707][T10861] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,,errors=continue. Quota mode: none. [ 209.474730][T10861] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.3067: bg 0: block 312: padding at end of block bitmap is not set [ 209.500913][T10860] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 209.517493][ T8667] usb 5-1: Using ep0 maxpacket: 32 [ 209.543583][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 209.709703][ T8667] usb 5-1: unable to get BOS descriptor or descriptor too short [ 209.723463][T10845] loop2: detected capacity change from 0 to 32768 [ 209.829621][ T8667] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 209.838053][ T8667] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 209.855245][ T8667] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 209.892268][ T8667] usb 5-1: config 128 has no interface number 0 [ 209.905967][T10845] JBD2: Ignoring recovery information on journal [ 209.912575][ T8667] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 209.937933][ T8667] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 209.958322][ T8667] usb 5-1: config 128 interface 127 has no altsetting 0 [ 210.014553][T10845] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 210.139872][ T8667] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 210.168924][T10845] (syz.2.3056,10845,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #4097: rec_len % 4 != 0 - offset=0, inode=18446673704965378049, rec_len=255, name_len=1 [ 210.193365][ T8667] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.215215][ T8667] usb 5-1: Product: syz [ 210.231695][ T8667] usb 5-1: Manufacturer: syz [ 210.246615][ T8667] usb 5-1: SerialNumber: syz [ 210.254728][T10845] (syz.2.3056,10845,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 210.294249][T10845] (syz.2.3056,10845,0):ocfs2_mknod:298 ERROR: status = -2 [ 210.328010][T10845] (syz.2.3056,10845,0):ocfs2_mknod:502 ERROR: status = -2 [ 210.345937][T10845] (syz.2.3056,10845,0):ocfs2_create:676 ERROR: status = -2 [ 210.540760][ T4186] ocfs2: Unmounting device (7,2) on (node local) [ 210.558343][T10909] loop3: detected capacity change from 0 to 256 [ 210.662208][T10909] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 210.741033][T10909] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 210.775898][ T8667] usb 5-1: USB disconnect, device number 19 [ 211.023176][ T4497] udevd[4497]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 211.044497][T10925] netlink: 380 bytes leftover after parsing attributes in process `syz.2.3088'. [ 211.090384][T10929] dlm: non-version read from control device 36 [ 211.216261][T10937] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3101'. [ 211.352964][T10945] cifs: Unknown parameter 'h}# [ 211.352964][T10945] [bIT&:"1:ӭ'4,Zz-#F<]%gC [ 211.352964][T10945] SȘȞZ6' [ 211.419490][ T6005] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 211.524069][T10951] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 211.669544][ T6005] usb 4-1: Using ep0 maxpacket: 16 [ 211.790840][ T6005] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.815599][ T6005] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.862218][T10931] loop1: detected capacity change from 0 to 32768 [ 211.879575][ T6005] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 211.920423][ T6005] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 211.959542][ T6005] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.976233][T10931] JBD2: Ignoring recovery information on journal [ 211.997168][ T6005] usb 4-1: config 0 descriptor?? [ 212.045161][ T6005] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input11 [ 212.080806][ T3544] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 212.108872][ T3544] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 212.117327][ T3544] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 212.126350][ T3544] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 212.210840][T10931] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 212.269584][ T8667] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 212.292923][ T4179] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 212.307309][T10928] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 212.331682][ T3544] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 212.341432][ T7416] usb 4-1: USB disconnect, device number 18 [ 212.400864][T10931] (syz.1.3099,10931,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #4097: rec_len % 4 != 0 - offset=0, inode=18446673704965378049, rec_len=255, name_len=1 [ 212.424484][T10931] (syz.1.3099,10931,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 212.449530][T10931] (syz.1.3099,10931,1):ocfs2_mknod:298 ERROR: status = -2 [ 212.474057][T10931] (syz.1.3099,10931,1):ocfs2_mknod:502 ERROR: status = -2 [ 212.489631][T10931] (syz.1.3099,10931,1):ocfs2_create:676 ERROR: status = -2 [ 212.617949][ T4188] ocfs2: Unmounting device (7,1) on (node local) [ 212.634359][T10980] xt_l2tp: missing protocol rule (udp|l2tpip) [ 212.659854][ T8667] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 212.864102][ T8667] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 212.883628][ T8667] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.898906][ T8667] usb 1-1: Product: syz [ 212.904645][ T8667] usb 1-1: Manufacturer: syz [ 212.909674][ T8667] usb 1-1: SerialNumber: syz [ 212.929927][ T8667] usb 1-1: config 0 descriptor?? [ 212.954328][T10971] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 212.980116][T10988] mmap: syz.3.3125 (10988): VmData 49217536 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 212.993178][ T8667] port100 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 213.202913][ T8667] usb 1-1: USB disconnect, device number 24 [ 213.242307][T11000] dlm: no locking on control device [ 213.332061][T11006] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3133'. [ 213.934851][T11036] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 214.010127][T11043] netlink: 'syz.4.3152': attribute type 3 has an invalid length. [ 214.028617][T11043] netlink: 201372 bytes leftover after parsing attributes in process `syz.4.3152'. [ 214.049509][T11036] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 214.067508][T11036] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 214.098312][T11036] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 214.145541][T11036] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 214.162678][T11036] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 214.177608][T11036] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 214.188223][T11036] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 214.304063][T11052] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3156'. [ 214.787353][T11082] 9pnet: p9_fd_create_tcp (11082): problem connecting socket to 127.0.0.1 [ 214.920921][ T6005] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 215.179524][ T6005] usb 2-1: Using ep0 maxpacket: 32 [ 215.300008][ T6005] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.320683][ T6005] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.342787][T11117] netlink: 'syz.0.3187': attribute type 21 has an invalid length. [ 215.374427][ T6005] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 215.386601][T11117] netlink: 'syz.0.3187': attribute type 1 has an invalid length. [ 215.397417][ T6005] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.406478][T11117] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3187'. [ 215.438280][ T6005] usb 2-1: config 0 descriptor?? [ 215.490873][ T6005] hub 2-1:0.0: USB hub found [ 215.508450][T11125] x_tables: ip6_tables: SNAT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING [ 215.647714][T11134] loop3: detected capacity change from 0 to 1024 [ 215.679723][ T1111] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 215.709616][ T6005] hub 2-1:0.0: 2 ports detected [ 215.720057][T11134] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodiscard,norecovery,,errors=continue. Quota mode: none. [ 215.851152][T11143] smc: removing ib device syz2 [ 215.898187][T11145] netlink: 'syz.4.3199': attribute type 29 has an invalid length. [ 215.906404][T11145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3199'. [ 215.916301][T11145] netlink: 'syz.4.3199': attribute type 29 has an invalid length. [ 215.929835][ T6005] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 215.939108][ T6005] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 215.941676][T11145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3199'. [ 216.043354][ T1111] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.059682][ T6005] usbhid 2-1:0.0: can't add hid device: -71 [ 216.067077][ T6005] usbhid: probe of 2-1:0.0 failed with error -71 [ 216.095992][T11149] device batadv1 entered promiscuous mode [ 216.120644][ T6005] usb 2-1: USB disconnect, device number 13 [ 216.240023][ T1111] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 216.254795][ T1111] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.292423][ T1111] usb 3-1: Product: syz [ 216.301325][ T1111] usb 3-1: Manufacturer: syz [ 216.306068][ T1111] usb 3-1: SerialNumber: syz [ 216.335702][ T1111] usb 3-1: config 0 descriptor?? [ 216.395582][ T1111] ims_pcu 3-1:0.0: Missing CDC union descriptor [ 216.406416][ T1111] ims_pcu: probe of 3-1:0.0 failed with error -22 [ 216.417421][T11157] comedi comedi4: bad chanlist[0]=0x0fffffff chan=65535 range length=2 [ 216.479586][ T6008] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 216.548709][T11161] No such timeout policy "syz1" [ 216.599800][T11121] loop2: detected capacity change from 0 to 24 [ 216.655743][ T7416] usb 3-1: USB disconnect, device number 15 [ 216.734964][ T6008] usb 5-1: Using ep0 maxpacket: 8 [ 216.789773][ T6005] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 216.864266][ T6008] usb 5-1: config 0 has an invalid interface number: 125 but max is 0 [ 216.884412][ T6008] usb 5-1: config 0 has no interface number 0 [ 216.905987][ T6008] usb 5-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice=6c.24 [ 216.929450][ T6008] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.964649][ T6008] usb 5-1: config 0 descriptor?? [ 217.022063][ T6008] gspca_main: spca501-2.14.0 probing 0497:c001 [ 217.241721][ T6008] gspca_spca501: reg write: error -71 [ 217.247196][ T6008] spca501 5-1:0.125: Reg write failed for 0x02,0x07,0x05 [ 217.255142][ T6008] spca501: probe of 5-1:0.125 failed with error -22 [ 217.299829][ T7416] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 217.308862][ T6008] usb 5-1: USB disconnect, device number 20 [ 217.329876][ T6005] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 217.359270][ T6005] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.374929][ T6005] usb 4-1: Product: syz [ 217.382358][ T6005] usb 4-1: Manufacturer: syz [ 217.387118][ T6005] usb 4-1: SerialNumber: syz [ 217.566673][T11189] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 217.644117][ T6005] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 217.690128][ T7416] usb 2-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 217.700956][ T6005] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 217.732317][ T6005] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 217.747031][ T6005] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 217.763277][ T6005] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 217.792625][ T6005] lan78xx: probe of 4-1:1.0 failed with error -71 [ 217.834551][ T6005] usb 4-1: USB disconnect, device number 19 [ 217.869888][ T7416] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 217.881190][ T7416] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.914276][ T7416] usb 2-1: Product: syz [ 217.914301][ T7416] usb 2-1: Manufacturer: syz [ 217.914317][ T7416] usb 2-1: SerialNumber: syz [ 218.219519][ T7416] usb 2-1: Cannot retrieve CPort count: -71 [ 218.225520][ T7416] usb 2-1: Cannot retrieve CPort count: -71 [ 218.247444][ T7416] es2_ap_driver: probe of 2-1:246.0 failed with error -71 [ 218.285132][ T7416] usb 2-1: USB disconnect, device number 14 [ 219.069514][T11237] ALSA: mixer_oss: invalid OSS volume ';ʸgԊ8\>Pxi9 h~' [ 219.077429][T11237] ALSA: mixer_oss: invalid OSS volume ' ȪUBFRнEV#d' [ 219.100270][T11237] ALSA: mixer_oss: invalid OSS volume 'eQCȡ*qpAڜe T|K' [ 219.119638][T11237] ALSA: mixer_oss: invalid OSS volume ':az]qeXfb]݆B.' [ 219.139613][T11237] ALSA: mixer_oss: invalid OSS volume 'j|q⩃˚[w3^.ג' [ 219.158436][T11237] ALSA: mixer_oss: invalid OSS volume 'udFdsj@Jug0cd' [ 219.177126][T11237] ALSA: mixer_oss: invalid OSS volume 'NW֓YZS%fV' [ 219.196334][T11237] ALSA: mixer_oss: invalid OSS volume ''lȿDTBxN' [ 219.213617][T11237] ALSA: mixer_oss: invalid OSS volume 'y' [ 219.243257][T11237] ALSA: mixer_oss: invalid OSS volume '5y}9r~M+3' [ 219.273549][T11237] ALSA: mixer_oss: invalid OSS volume '϶*kC9d7띦2;"' [ 219.332639][T11237] ALSA: mixer_oss: invalid OSS volume '*ndV8mE5:4' [ 219.355718][T11237] ALSA: mixer_oss: invalid OSS volume 'PKڵ1} {N&Ia 8*ʇ' [ 219.360255][T11265] netlink: 'syz.4.3260': attribute type 12 has an invalid length. [ 219.419864][T11237] ALSA: mixer_oss: invalid OSS volume 'OC"['m/AO^G&-' [ 219.448914][T11237] ALSA: mixer_oss: invalid OSS volume '' [ 219.471755][T11237] ALSA: mixer_oss: invalid OSS volume '@HV-=f#o)U.N' [ 219.654695][T11275] loop1: detected capacity change from 0 to 4096 [ 219.724974][T11284] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3268'. [ 219.749476][T11284] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3268'. [ 219.783459][T11275] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 219.793268][T11284] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3268'. [ 219.838832][T11275] ntfs3: loop1: Failed to load $MFT. [ 220.459783][T11320] netlink: 'syz.0.3286': attribute type 1 has an invalid length. [ 220.467623][T11320] netlink: 'syz.0.3286': attribute type 2 has an invalid length. [ 220.658352][T11332] xt_SECMARK: invalid mode: 2 [ 220.689654][ T4233] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 220.707241][T11275] loop1: detected capacity change from 0 to 32768 [ 220.803025][T11275] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.3264 (11275) [ 220.863883][T11275] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 220.878937][T11344] loop3: detected capacity change from 0 to 16 [ 220.888173][T11275] BTRFS info (device loop1): using free space tree [ 220.898983][T11275] BTRFS info (device loop1): has skinny extents [ 220.928670][T11348] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3299'. [ 220.941489][T11344] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 220.979625][ T4233] usb 5-1: Using ep0 maxpacket: 16 [ 221.128690][ T4233] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.184296][ T4233] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 221.217489][ T4233] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 202 [ 221.238454][T11275] BTRFS info (device loop1): enabling ssd optimizations [ 221.471718][ T4233] usb 5-1: New USB device found, idVendor=0582, idProduct=0023, bcdDevice= 0.40 [ 221.499679][ T4233] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.507763][ T4233] usb 5-1: Product: syz [ 221.529333][ T4233] usb 5-1: Manufacturer: syz [ 221.549805][ T4233] usb 5-1: SerialNumber: syz [ 221.589918][T11318] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 222.012008][ T4233] snd-usb-audio: probe of 5-1:1.0 failed with error -12 [ 222.049690][ T4233] usb 5-1: USB disconnect, device number 21 [ 222.344803][ T5836] udevd[5836]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 222.533984][T11431] netlink: 'syz.2.3331': attribute type 8 has an invalid length. [ 222.738364][T11443] ieee802154 phy0 wpan0: encryption failed: -90 [ 223.017542][T11463] netlink: 312 bytes leftover after parsing attributes in process `syz.0.3348'. [ 223.056157][T11466] netlink: 'syz.1.3349': attribute type 8 has an invalid length. [ 223.064346][T11463] netlink: 'syz.0.3348': attribute type 1 has an invalid length. [ 223.148304][T11473] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 223.384601][T11489] netlink: 'syz.0.3360': attribute type 1 has an invalid length. [ 223.743008][T11508] trusted_key: encrypted_key: keyword 'newU_5' not recognized [ 224.104025][ T8658] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 224.219489][ T6005] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 224.331746][ T7416] nvmet: connect request for invalid subsystem n! [ 224.348884][T11533] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "n" [ 224.379624][ T8658] usb 1-1: Using ep0 maxpacket: 32 [ 224.520914][ T8658] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.553947][ T8658] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 224.578344][T11544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3386'. [ 224.588595][ T6005] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 224.608654][ T6005] usb 2-1: config 0 has no interface number 0 [ 224.623083][ T6005] usb 2-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 224.647519][ T6005] usb 2-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 224.664989][ T6005] usb 2-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64 [ 224.676996][ T6005] usb 2-1: config 0 interface 2 has no altsetting 0 [ 224.726104][T11550] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 224.750598][ T8658] usb 1-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0 [ 224.766937][ T8658] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.799428][ T8658] usb 1-1: Product: syz [ 224.803671][ T8658] usb 1-1: Manufacturer: syz [ 224.829492][ T8658] usb 1-1: SerialNumber: syz [ 224.853956][ T6005] usb 2-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f7.3f [ 224.863455][ T8658] usb 1-1: config 0 descriptor?? [ 224.886476][ T6005] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.901114][ T8658] qmi_wwan: probe of 1-1:0.0 failed with error -22 [ 224.912958][ T6005] usb 2-1: Product: syz [ 224.947013][ T6005] usb 2-1: Manufacturer: syz [ 224.962227][ T6005] usb 2-1: SerialNumber: syz [ 224.982042][ T6005] usb 2-1: config 0 descriptor?? [ 225.030414][T11522] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 225.057938][T11522] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 225.132617][ T7416] usb 1-1: USB disconnect, device number 25 [ 225.343105][T11580] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 225.553424][ T8658] usb 2-1: USB disconnect, device number 15 [ 226.470160][T11649] netlink: 'syz.1.3433': attribute type 2 has an invalid length. [ 226.499076][T11649] netlink: 'syz.1.3433': attribute type 1 has an invalid length. [ 226.539772][T11649] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3433'. [ 226.706257][T11655] loop3: detected capacity change from 0 to 4096 [ 226.825567][T11655] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 226.854920][T11655] ntfs3: loop3: Failed to load $MFT. [ 227.219046][T11681] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3449'. [ 227.717516][T11709] loop2: detected capacity change from 0 to 256 [ 227.726080][T11655] loop3: detected capacity change from 0 to 32768 [ 227.782784][T11709] exfat: Deprecated parameter 'namecase' [ 227.796468][ T7416] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 227.835146][T11655] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.3436 (11655) [ 227.853890][T11709] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 227.919477][T11655] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 227.949541][T11655] BTRFS info (device loop3): using free space tree [ 227.956768][T11655] BTRFS info (device loop3): has skinny extents [ 228.049482][ T7416] usb 2-1: Using ep0 maxpacket: 32 [ 228.170007][ T7416] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 228.200315][ T7416] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.247055][ T7416] usb 2-1: config 0 descriptor?? [ 228.342337][ T7416] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 228.389805][T11655] BTRFS info (device loop3): enabling ssd optimizations [ 228.648768][T11754] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 228.784442][ T7416] gspca_vc032x: reg_w err -71 [ 228.789508][ T7416] gspca_vc032x: I2c Bus Busy Wait 00 [ 228.795309][ T7416] gspca_vc032x: I2c Bus Busy Wait 00 [ 228.827564][ T7416] gspca_vc032x: I2c Bus Busy Wait 00 [ 228.857017][ T7416] gspca_vc032x: I2c Bus Busy Wait 00 [ 228.868831][ T7416] gspca_vc032x: I2c Bus Busy Wait 00 [ 228.909631][ T7416] gspca_vc032x: I2c Bus Busy Wait 00 [ 228.944654][ T7416] gspca_vc032x: I2c Bus Busy Wait 00 [ 228.981639][ T7416] gspca_vc032x: I2c Bus Busy Wait 00 [ 228.987006][ T7416] gspca_vc032x: I2c Bus Busy Wait 00 [ 229.029421][ T7416] gspca_vc032x: I2c Bus Busy Wait 00 [ 229.067708][T11766] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 229.069235][ T7416] gspca_vc032x: I2c Bus Busy Wait 00 [ 229.141530][ T7416] gspca_vc032x: I2c Bus Busy Wait 00 [ 229.159475][ T7416] gspca_vc032x: I2c Bus Busy Wait 00 [ 229.182916][ T7416] gspca_vc032x: I2c Bus Busy Wait 00 [ 229.199512][ T7416] gspca_vc032x: I2c Bus Busy Wait 00 [ 229.216554][ T7416] gspca_vc032x: I2c Bus Busy Wait 00 [ 229.252541][ T7416] gspca_vc032x: I2c Bus Busy Wait 00 [ 229.257925][ T7416] gspca_vc032x: I2c Bus Busy Wait 00 [ 229.339522][ T7416] gspca_vc032x: Unknown sensor... [ 229.344672][ T7416] vc032x: probe of 2-1:0.0 failed with error -22 [ 229.443053][ T7416] usb 2-1: USB disconnect, device number 16 [ 229.526763][T11782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.858271][T11801] kAFS: No cell specified [ 230.295572][T11826] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3509'. [ 230.313453][T11824] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 230.661697][T11845] MTD: Couldn't look up '': -22 [ 230.882257][T11855] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5) [ 230.998976][T11862] binder: 11860:11862 ioctl c018620c 200000000380 returned -22 [ 231.256924][T11873] loop2: detected capacity change from 0 to 2048 [ 231.442054][T11873] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 231.506329][T11873] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 231.884141][T11904] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3549'. [ 231.949948][T11904] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3549'. [ 232.016421][T11911] tmpfs: Bad value for 'mpol' [ 232.108374][T11914] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3554'. [ 232.379010][T11927] (unnamed net_device) (uninitialized): option lacp_active: invalid value (8) [ 232.408504][T11929] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3562'. [ 232.436834][T11929] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3562'. [ 233.087802][T11972] netlink: 'syz.3.3581': attribute type 13 has an invalid length. [ 233.121466][T11972] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 233.224574][T11972] gretap0: refused to change device tx_queue_len [ 233.247012][T11972] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 234.100193][T12020] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3602'. [ 234.613372][T11987] syz.1.3589 (11987): drop_caches: 2 [ 234.712185][ T13] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 234.920385][T12059] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3622'. [ 235.009689][ T8663] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 235.269843][ T13] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 235.278944][ T13] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 235.299574][ T8663] usb 1-1: Using ep0 maxpacket: 32 [ 235.317550][ T13] usb 5-1: Product: syz [ 235.321848][ T13] usb 5-1: SerialNumber: syz [ 235.338690][ T13] usb 5-1: config 0 descriptor?? [ 235.381084][T11774] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 235.429755][ T8663] usb 1-1: config 2 has an invalid interface number: 222 but max is 0 [ 235.439570][ T4232] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 235.448144][ T8663] usb 1-1: config 2 has no interface number 0 [ 235.458193][ T8663] usb 1-1: config 2 interface 222 has no altsetting 0 [ 235.579821][ T8662] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 235.601573][ T13] hso 5-1:0.0: Can't find BULK IN endpoint [ 235.659868][ T8663] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=af.17 [ 235.668980][ T8663] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.697198][ T8663] usb 1-1: Product: syz [ 235.701498][ T8663] usb 1-1: Manufacturer: syz [ 235.706124][ T8663] usb 1-1: SerialNumber: syz [ 235.807979][ T1111] usb 5-1: USB disconnect, device number 22 [ 235.849807][ T4232] usb 3-1: unable to get BOS descriptor or descriptor too short [ 235.939631][ T4232] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.954718][ T4232] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 235.989750][ T8662] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 236.002604][T11774] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 236.019452][T11774] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.037754][T11774] usb 4-1: Product: syz [ 236.042006][T11774] usb 4-1: Manufacturer: syz [ 236.046629][T11774] usb 4-1: SerialNumber: syz [ 236.073503][ T8663] usb 1-1: USB disconnect, device number 26 [ 236.199637][ T4232] usb 3-1: string descriptor 0 read error: -22 [ 236.209572][ T4232] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 236.219703][ T8662] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 236.230796][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.239449][ T8662] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.247486][ T8662] usb 2-1: Product: syz [ 236.272052][ T8662] usb 2-1: Manufacturer: syz [ 236.276783][ T8662] usb 2-1: SerialNumber: syz [ 236.302939][ T4232] usb 3-1: selecting invalid altsetting 1 [ 236.309178][ T4232] usb 3-1: unit 3 not found! [ 236.542090][ T4232] usb 3-1: cannot request logical cluster ID: 0 (err: -5) [ 236.569957][ T8662] snd-usb-6fire 2-1:1.0: unknown device firmware state received from device: [ 236.579581][ T4232] usb 3-1: invalid MIXER UNIT descriptor 6 [ 236.586999][ T8662] eb aa 55 00 00 00 00 00 [ 236.604644][ T8662] snd-usb-6fire: probe of 2-1:1.0 failed with error -5 [ 236.625204][ T4232] snd-usb-audio: probe of 3-1:1.0 failed with error -5 [ 236.705545][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 236.778283][ T8662] usb 3-1: USB disconnect, device number 16 [ 236.806585][ T4232] usb 2-1: USB disconnect, device number 17 [ 236.840463][ T8658] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 237.035039][T12072] syz.4.3627 (12072): drop_caches: 2 [ 237.074038][ T8662] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 237.104930][ T8662] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 237.277709][ T4232] usb 4-1: USB disconnect, device number 20 [ 237.396912][ T8663] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 237.713417][T12079] ceph: No mds server is up or the cluster is laggy [ 237.944091][ T8658] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 237.952634][T12109] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3643'. [ 237.963595][ T8658] ath9k_htc: Failed to initialize the device [ 238.014677][ T4232] usb 4-1: ath9k_htc: USB layer deinitialized [ 238.225097][T12123] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 238.270155][T12123] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 238.547489][T12138] netlink: 'syz.0.3657': attribute type 3 has an invalid length. [ 238.922492][T12162] ipt_CLUSTERIP: Please specify destination IP [ 239.005655][T12166] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3670'. [ 239.081973][T12166] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3670'. [ 239.139620][T12174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3675'. [ 239.671904][T12198] x_tables: unsorted underflow at hook 4 [ 240.149521][ T4232] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 240.401846][ T4232] usb 3-1: Using ep0 maxpacket: 16 [ 240.497153][T12244] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.3709' sets config #0 [ 240.599563][ T4232] usb 3-1: config 4 has an invalid interface number: 251 but max is 0 [ 240.608168][ T4232] usb 3-1: config 4 has no interface number 0 [ 240.622557][ T4232] usb 3-1: config 4 interface 251 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 240.649175][ T4232] usb 3-1: config 4 interface 251 has no altsetting 0 [ 240.819299][T12253] netlink: 'syz.3.3713': attribute type 1 has an invalid length. [ 240.830292][ T4232] usb 3-1: New USB device found, idVendor=04e6, idProduct=000a, bcdDevice= 2.00 [ 240.863855][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.890073][ T4232] usb 3-1: Product: syz [ 240.894321][ T4232] usb 3-1: Manufacturer: syz [ 240.903309][T12253] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3713'. [ 240.940302][ T4232] usb 3-1: SerialNumber: syz [ 241.105468][T12264] loop3: detected capacity change from 0 to 64 [ 241.280719][ T4232] usb-storage 3-1:4.251: USB Mass Storage device detected [ 241.404886][ T4232] usb 3-1: USB disconnect, device number 17 [ 241.460868][ T1111] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 241.594050][T12280] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 241.699731][ T1111] usb 5-1: Using ep0 maxpacket: 8 [ 241.791003][T12286] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 241.824572][ T1111] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 241.843924][ T1111] usb 5-1: config 0 has no interface number 0 [ 241.859608][T12286] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 241.994605][T12296] netlink: 'syz.2.3733': attribute type 1 has an invalid length. [ 242.030944][ T1111] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 242.052971][ T1111] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.081813][ T1111] usb 5-1: Product: syz [ 242.096672][ T1111] usb 5-1: Manufacturer: syz [ 242.112651][ T1111] usb 5-1: SerialNumber: syz [ 242.133203][ T1111] usb 5-1: config 0 descriptor?? [ 242.444726][ T1111] usb 5-1: USB disconnect, device number 23 [ 242.579621][ T8658] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 242.916567][T12332] netlink: 1420 bytes leftover after parsing attributes in process `syz.1.3751'. [ 243.011656][ T8658] usb 1-1: config 0 has an invalid interface number: 11 but max is 0 [ 243.026444][ T8658] usb 1-1: config 0 has no interface number 0 [ 243.052300][ T8658] usb 1-1: config 0 interface 11 altsetting 253 endpoint 0x7 has an invalid bInterval 129, changing to 11 [ 243.094310][ T8658] usb 1-1: config 0 interface 11 altsetting 253 endpoint 0x87 has invalid wMaxPacketSize 0 [ 243.143664][ T8658] usb 1-1: config 0 interface 11 altsetting 253 bulk endpoint 0x87 has invalid maxpacket 0 [ 243.204453][ T8658] usb 1-1: config 0 interface 11 has no altsetting 0 [ 243.220451][T12338] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 243.255164][ T8658] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 243.286916][ T8658] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.295212][T12340] ip6t_srh: unknown srh invflags 4000 [ 243.343855][ T8658] usb 1-1: config 0 descriptor?? [ 243.433406][ T8658] keyspan 1-1:0.11: Keyspan 2 port adapter converter detected [ 243.458176][ T8658] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 81 [ 243.506931][ T8658] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 82 [ 243.539093][ T8658] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 1 [ 243.582625][ T8658] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 2 [ 243.612913][ T8658] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 85 [ 243.635467][T12350] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3760'. [ 243.659468][ T8658] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 5 [ 243.695446][ T8658] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 243.734994][ T8658] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 83 [ 243.771789][ T8658] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 84 [ 243.799725][ T8658] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 3 [ 243.838397][ T8658] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 4 [ 243.877569][ T8658] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 86 [ 243.910630][ T8658] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 6 [ 243.958582][ T8658] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 244.014057][ T8658] usb 1-1: USB disconnect, device number 27 [ 244.074242][ T8658] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 244.104007][T12326] syz.3.3748 (12326): drop_caches: 2 [ 244.118868][T12361] nvme_fabrics: missing parameter 'host_traddr=%s' [ 244.157942][ T8658] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 244.201027][ T8658] keyspan 1-1:0.11: device disconnected [ 244.372249][T12377] 8021q: adding VLAN 0 to HW filter on device bond2 [ 244.866267][T12402] netlink: 11 bytes leftover after parsing attributes in process `syz.2.3781'. [ 244.909699][T12402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3781'. [ 245.038286][T12408] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3784'. [ 245.118127][T12408] netlink: 'syz.1.3784': attribute type 1 has an invalid length. [ 245.118198][T12408] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3784'. [ 246.157592][T12455] ax25_connect(): syz.1.3808 uses autobind, please contact jreuter@yaina.de [ 246.447515][T12471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3815'. [ 246.775406][T12486] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3823'. [ 246.937644][T12496] qrtr: Invalid version 0 [ 247.272796][T12509] netlink: 'syz.1.3834': attribute type 3 has an invalid length. [ 247.343945][T12513] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 247.570972][T12523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3841'. [ 247.686230][T12531] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.3845'. [ 247.726163][T12533] netlink: set zone limit has 8 unknown bytes [ 247.749716][T12531] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.901004][T12539] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3849'. [ 248.189545][ T8662] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 248.505687][T12575] sctp: [Deprecated]: syz.3.3867 (pid 12575) Use of int in max_burst socket option. [ 248.505687][T12575] Use struct sctp_assoc_value instead [ 248.670163][ T8662] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 248.694859][ T8662] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 248.765498][ T8662] usb 2-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 248.802339][ T8662] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.813945][T12587] overlayfs: conflicting options: metacopy=on,redirect_dir=off [ 249.120721][ T8662] ttusb_dec_send_command: result bulk message failed: error -22 [ 249.150798][ T8662] ttusb-dec: probe of 2-1:1.0 failed with error -22 [ 249.180239][T12605] dlm: plock device version mismatch: kernel (1.2.0), user (1.32.0) [ 249.206368][ T8662] usb 2-1: USB disconnect, device number 18 [ 249.826293][T12637] loop1: detected capacity change from 0 to 2048 [ 249.844503][T12641] netlink: 'syz.0.3899': attribute type 3 has an invalid length. [ 250.509117][ T8662] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 250.608384][T12676] usb usb8: usbfs: process 12676 (syz.4.3917) did not claim interface 0 before use [ 251.146305][ T8662] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 251.175886][ T8662] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.219408][ T8662] usb 4-1: Product: syz [ 251.223649][ T8662] usb 4-1: Manufacturer: syz [ 251.258753][ T8662] usb 4-1: SerialNumber: syz [ 251.263901][ T8663] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 251.295638][ T8662] usb 4-1: config 0 descriptor?? [ 251.351001][ T8662] ch341 4-1:0.0: ch341-uart converter detected [ 251.497616][T12710] netlink: 'syz.1.3933': attribute type 12 has an invalid length. [ 251.559219][ T8662] usb 4-1: failed to receive control message: -71 [ 251.570730][ T8662] ch341-uart: probe of ttyUSB0 failed with error -71 [ 251.620231][ T8662] usb 4-1: USB disconnect, device number 21 [ 251.647373][ T8662] ch341 4-1:0.0: device disconnected [ 251.706093][ T8663] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 251.740007][ T8663] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.780014][ T8663] usb 1-1: config 0 descriptor?? [ 251.977377][T12727] usb usb9: usbfs: process 12727 (syz.2.3941) did not claim interface 3 before use [ 252.173162][T12732] syz.2.3944[12732] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 252.173321][T12732] syz.2.3944[12732] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 252.269596][ T4232] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 252.321220][ T8663] ath6kl: Failed to submit usb control message: -71 [ 252.335416][ T8663] ath6kl: unable to send the bmi data to the device: -71 [ 252.369413][ T8663] ath6kl: Unable to send get target info: -71 [ 252.406745][ T8663] ath6kl: Failed to init ath6kl core: -71 [ 252.468029][ T8663] ath6kl_usb: probe of 1-1:0.0 failed with error -71 [ 252.515299][ T8663] usb 1-1: USB disconnect, device number 28 [ 252.612939][T12750] loop3: detected capacity change from 0 to 1024 [ 252.679643][ T4232] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 252.712774][T12750] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 252.749642][ T4232] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 252.868285][T12750] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 252.910633][T12761] comedi comedi4: bad chanlist[0]=0x04004003 chan=16387 range length=2 [ 252.959786][ T4232] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 252.968900][ T4232] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.994860][ T4232] usb 2-1: Product: syz [ 252.999296][ T4232] usb 2-1: Manufacturer: syz [ 253.009513][ T4232] usb 2-1: SerialNumber: syz [ 253.143474][T12773] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 253.399897][ T4232] usb 2-1: 0:2 : does not exist [ 253.408065][ T4232] usb 2-1: unit 4 not found! [ 253.485479][ T4232] usb 2-1: USB disconnect, device number 19 [ 253.529681][ T1111] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 253.870771][T12795] ntfs3: nbd2: try to read out of volume at offset 0x0 [ 254.052998][T12799] loop1: detected capacity change from 0 to 256 [ 254.064755][ T1111] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 254.086583][ T1111] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.117893][ T1111] usb 5-1: Product: syz [ 254.122473][ T1111] usb 5-1: Manufacturer: syz [ 254.137964][T12803] __nla_validate_parse: 1 callbacks suppressed [ 254.137985][T12803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3977'. [ 254.154041][ T1111] usb 5-1: SerialNumber: syz [ 254.207775][T12799] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010895, chksum : 0x816c887a, utbl_chksum : 0xe619d30d) [ 254.829823][ T1111] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 254.904763][T12831] x_tables: unsorted underflow at hook 1 [ 255.320996][ T6008] usb 5-1: USB disconnect, device number 24 [ 255.522682][T12861] cgroup: noprefix used incorrectly [ 255.640801][T12869] loop1: detected capacity change from 0 to 64 [ 255.668447][T12870] netlink: 'syz.2.4008': attribute type 1 has an invalid length. [ 255.706993][T12870] netlink: 'syz.2.4008': attribute type 2 has an invalid length. [ 255.760695][T12869] hfs: inconsistency in B*Tree (1,0,2,2,3) [ 255.772401][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.935297][ T1111] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 255.945887][ T1111] ath9k_htc: Failed to initialize the device [ 255.990527][ T6008] usb 5-1: ath9k_htc: USB layer deinitialized [ 256.678950][T12916] netlink: 'syz.2.4031': attribute type 1 has an invalid length. [ 256.962563][T12925] loop2: detected capacity change from 0 to 2048 [ 257.075327][T12925] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 257.130938][T12925] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 257.224967][ T8663] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 257.327210][T12944] loop1: detected capacity change from 0 to 512 [ 257.405778][T12944] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 257.449669][T12944] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e01c, mo2=0002] [ 257.458899][T12944] EXT4-fs (loop1): orphan cleanup on readonly fs [ 257.549343][T12944] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.4045: attempt to clear invalid blocks 1024 len 1 [ 257.630989][T12944] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.4045: bg 0: block 361: padding at end of block bitmap is not set [ 257.728564][T12944] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 257.751335][ T8663] usb 4-1: unable to get BOS descriptor or descriptor too short [ 257.783955][T12944] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.4045: invalid indirect mapped block 1811939328 (level 0) [ 257.807927][T12959] netlink: 'syz.4.4052': attribute type 2 has an invalid length. [ 257.810442][ T8663] usb 4-1: not running at top speed; connect to a high speed hub [ 257.826305][T12959] netlink: 'syz.4.4052': attribute type 1 has an invalid length. [ 257.858668][T12944] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.4045: invalid indirect mapped block 2185560079 (level 1) [ 257.873035][T11774] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 257.913445][T12944] EXT4-fs (loop1): 1 truncate cleaned up [ 257.919168][T12944] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,init_itable=0x00000000000004ef,noblock_validity,nodioread_nolock,i_version,errors=continue. Quota mode: none. [ 257.969532][ T8663] usb 4-1: config 1 has an invalid interface number: 122 but max is 0 [ 257.977783][ T8663] usb 4-1: config 1 has no interface number 0 [ 258.004353][ T8663] usb 4-1: config 1 interface 122 altsetting 15 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 258.049419][ T8663] usb 4-1: config 1 interface 122 altsetting 15 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 258.089428][ T8663] usb 4-1: config 1 interface 122 has no altsetting 0 [ 258.161071][T12963] sp0: Synchronizing with TNC [ 258.342240][ T8663] usb 4-1: New USB device found, idVendor=0451, idProduct=5052, bcdDevice=f0.86 [ 258.363940][ T8663] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.373082][T11774] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.393601][T11774] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 258.413845][ T8663] usb 4-1: Product: syz [ 258.418094][ T8663] usb 4-1: Manufacturer: syz [ 258.433984][T11774] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 258.443502][ T8663] usb 4-1: SerialNumber: syz [ 258.469148][T11774] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.515357][T11774] usb 1-1: config 0 descriptor?? [ 258.521340][T12926] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 258.699133][T12980] vivid-008: ================= START STATUS ================= [ 258.722184][T12980] vivid-008: Generate PTS: true [ 258.727933][T12980] vivid-008: Generate SCR: true [ 258.738774][T12980] tpg source WxH: 640x360 (Y'CbCr) [ 258.746765][T12980] tpg field: 1 [ 258.757065][T12980] tpg crop: 640x360@0x0 [ 258.772642][T12980] tpg compose: 640x360@0x0 [ 258.787819][T12980] tpg colorspace: 8 [ 258.797948][T12980] tpg transfer function: 0/0 [ 258.844624][T12980] tpg Y'CbCr encoding: 0/0 [ 258.855736][T12980] tpg quantization: 0/0 [ 258.862429][ T8663] ti_usb_3410_5052 4-1:1.122: TI USB 5052 2 port adapter converter detected [ 258.871770][T12980] tpg RGB range: 0/2 [ 258.875904][T12980] vivid-008: ================== END STATUS ================== [ 258.909655][ T8663] usb 4-1: USB disconnect, device number 22 [ 259.000029][T11774] Bluetooth: Can't get version to change to load ram patch err [ 259.036111][T11774] Bluetooth: Loading patch file failed [ 259.059410][T11774] ath3k: probe of 1-1:0.0 failed with error -71 [ 259.103859][T11774] usb 1-1: USB disconnect, device number 29 [ 259.131255][T12993] netlink: 'syz.2.4069': attribute type 79 has an invalid length. [ 259.393477][T13003] loop3: detected capacity change from 0 to 128 [ 259.407764][T13002] loop1: detected capacity change from 0 to 1024 [ 259.486857][T13002] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,journal_dev=0x000000000000000d,noauto_da_alloc,,errors=continue. Quota mode: none. [ 259.509502][ T8663] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 259.529502][ T8662] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 259.545148][T13003] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 259.598974][T13003] ext4 filesystem being mounted at /823/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.685700][T13002] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 623: comm syz.1.4073: Attempting to read directory block (623) that is past i_size (638464) [ 259.896354][T13017] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 259.983244][ T8662] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 259.999646][ T8663] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 260.010838][T13017] CIFS mount error: No usable UNC path provided in device string! [ 260.010838][T13017] [ 260.024593][T13017] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 260.030784][ T8663] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 260.053502][ T8662] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 260.089435][ T8662] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 260.312843][ T8663] usb 5-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 260.333588][T13033] loop1: detected capacity change from 0 to 512 [ 260.339986][ T8663] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.350142][ T8662] usb 3-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 260.377824][ T8662] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.386110][ T8663] usb 5-1: Product: syz [ 260.406375][ T8663] usb 5-1: Manufacturer: syz [ 260.416482][ T8662] usb 3-1: Product: syz [ 260.426466][ T8662] usb 3-1: Manufacturer: syz [ 260.431771][ T8663] usb 5-1: SerialNumber: syz [ 260.446687][ T8662] usb 3-1: SerialNumber: syz [ 260.470185][T13033] EXT4-fs (loop1): Ignoring removed orlov option [ 260.478657][T12998] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 260.491450][T12998] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 260.551993][T13033] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,init_itable,sysvgroups,orlov,. Quota mode: writeback. [ 260.570121][ T8663] mos7840 5-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 260.636801][T13033] ext4 filesystem being mounted at /825/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.752484][ T8662] usb 3-1: 1:1 : no or invalid class specific endpoint descriptor [ 260.774189][ T8662] usb 3-1: 1:1 : format type 0 is detected, processed as PCM [ 260.803873][ T8662] usb 3-1: 1:1 : sample bitwidth 135 in over sample bytes 14 [ 260.836087][ T8662] usb 3-1: 1:1 : unsupported sample bitwidth 135 in 14 bytes [ 260.919423][ T8662] usb 3-1: USB disconnect, device number 18 [ 261.234525][ T4497] udevd[4497]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 261.402189][T13077] netlink: 'syz.1.4107': attribute type 1 has an invalid length. [ 261.430910][T13080] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4109'. [ 261.440468][T13077] netlink: 'syz.1.4107': attribute type 2 has an invalid length. [ 261.459962][T13077] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4107'. [ 261.539323][T13083] netlink: 'syz.3.4110': attribute type 4 has an invalid length. [ 261.548192][T13083] netlink: 'syz.3.4110': attribute type 10 has an invalid length. [ 261.562047][T13083] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4110'. [ 261.625772][T13083] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 261.789629][ T8663] mos7840: probe of 5-1:1.0 failed with error -71 [ 261.813253][ T8663] usb 5-1: USB disconnect, device number 25 [ 261.834290][T13096] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4117'. [ 262.009711][ T1111] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 262.259576][ T6008] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 262.379784][ T1111] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 262.429953][ T1111] usb 3-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 262.467347][ T1111] usb 3-1: config 1 interface 0 has no altsetting 0 [ 262.514127][ T6008] usb 4-1: Using ep0 maxpacket: 16 [ 262.582283][T13130] netlink: 19 bytes leftover after parsing attributes in process `syz.0.4134'. [ 262.609974][T13130] netlink: 19 bytes leftover after parsing attributes in process `syz.0.4134'. [ 262.639791][ T1111] usb 3-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 262.669674][ T1111] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.708392][ T1111] usb 3-1: Product: syz [ 262.719839][ T1111] usb 3-1: Manufacturer: syz [ 262.724511][ T1111] usb 3-1: SerialNumber: syz [ 262.777946][T13132] loop1: detected capacity change from 0 to 4096 [ 262.810113][ T6008] usb 4-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 262.821023][ T1111] usb-storage 3-1:1.0: USB Mass Storage device detected [ 262.838574][ T6008] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.857392][ T6008] usb 4-1: Product: syz [ 262.864959][ T1111] usb-storage 3-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 262.920146][ T6008] usb 4-1: Manufacturer: syz [ 262.924820][ T6008] usb 4-1: SerialNumber: syz [ 262.932544][T13132] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 262.995719][ T6008] usb 4-1: config 0 descriptor?? [ 263.005637][T13132] EXT4-fs warning (device loop1): ext4_enable_quotas:6488: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 263.052200][ T7416] usb 3-1: USB disconnect, device number 19 [ 263.269660][ T6008] usb 4-1: ignoring: not an USB2CAN converter [ 263.489755][ T6008] usb 4-1: USB disconnect, device number 23 [ 263.619866][T13171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.872378][T13180] loop1: detected capacity change from 0 to 2048 [ 263.962142][T13180] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 264.119451][ T1111] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 264.178142][ T8663] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 264.420864][ T7416] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 264.472545][ T8663] usb 1-1: Using ep0 maxpacket: 16 [ 264.481210][ T1111] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.516412][ T1111] usb 5-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=9e.06 [ 264.546590][ T1111] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.573621][ T1111] usb 5-1: config 0 descriptor?? [ 264.624515][ T1111] gspca_main: kinect-2.14.0 probing 045e:02bf [ 264.636832][ T8663] usb 1-1: config 4 has an invalid interface number: 9 but max is 0 [ 264.650076][ T8663] usb 1-1: config 4 has no interface number 0 [ 264.669670][ T8663] usb 1-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 264.695617][T13214] netlink: 'syz.2.4174': attribute type 1 has an invalid length. [ 264.726352][ T8663] usb 1-1: config 4 interface 9 altsetting 2 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 264.783846][ T8663] usb 1-1: config 4 interface 9 has no altsetting 0 [ 264.819653][ T7416] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.851226][ T7416] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 264.884104][ T7416] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 264.918264][ T1111] usb 5-1: USB disconnect, device number 26 [ 264.983101][ T8663] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 264.999692][ T8663] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.059275][T13226] xt_bpf: check failed: parse error [ 265.059517][ T8663] usb 1-1: Product: syz [ 265.070248][ T7416] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 265.089475][ T8663] usb 1-1: Manufacturer: syz [ 265.094665][ T8663] usb 1-1: SerialNumber: syz [ 265.094745][ T7416] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.139888][T13184] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 265.157913][ T7416] usb 2-1: Product: syz [ 265.172876][ T7416] usb 2-1: Manufacturer: syz [ 265.177553][ T7416] usb 2-1: SerialNumber: syz [ 265.205136][ T7416] usb 2-1: config 0 descriptor?? [ 265.233656][ T8663] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 265.264408][ T7416] mcba_usb 2-1:0.0: Can't find endpoints [ 265.388200][ T8663] usb 1-1: USB disconnect, device number 30 [ 265.394618][ T9] usb 1-1: Failed to submit usb control message: -71 [ 265.410509][ T9] usb 1-1: unable to send the bmi data to the device: -71 [ 265.427939][ T9] usb 1-1: unable to get target info from device [ 265.447117][ T9] usb 1-1: could not get target info (-71) [ 265.504911][ T8662] usb 2-1: USB disconnect, device number 20 [ 265.518289][ T9] usb 1-1: could not probe fw (-71) [ 265.748445][T13248] tmpfs: Bad value for 'mpol' [ 265.908206][T13254] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4192'. [ 267.021549][T13311] loop3: detected capacity change from 0 to 256 [ 267.199652][T13311] FAT-fs (loop3): Directory bread(block 64) failed [ 267.236556][T13311] FAT-fs (loop3): Directory bread(block 65) failed [ 267.259557][T13311] FAT-fs (loop3): Directory bread(block 66) failed [ 267.280220][T13316] loop2: detected capacity change from 0 to 2048 [ 267.309009][T13311] FAT-fs (loop3): Directory bread(block 67) failed [ 267.341843][T13311] FAT-fs (loop3): Directory bread(block 68) failed [ 267.368952][T13311] FAT-fs (loop3): Directory bread(block 69) failed [ 267.401903][T13311] FAT-fs (loop3): Directory bread(block 70) failed [ 267.408507][T13311] FAT-fs (loop3): Directory bread(block 71) failed [ 267.448118][T13316] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 267.467945][T13311] FAT-fs (loop3): Directory bread(block 72) failed [ 267.498319][T13311] FAT-fs (loop3): Directory bread(block 73) failed [ 267.558589][T13328] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 267.678517][T13330] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 267.920275][T13341] netlink: 'syz.2.4230': attribute type 1 has an invalid length. [ 268.073558][T13345] device erspan1 entered promiscuous mode [ 268.659616][ T8663] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 268.798292][T13384] IPVS: set_ctl: invalid protocol: 135 172.20.20.50:20000 [ 268.939545][ T8663] usb 5-1: Using ep0 maxpacket: 8 [ 269.079750][ T8663] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 269.110469][ T8663] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 269.143181][T13396] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 269.249792][ T8663] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 269.268142][ T8663] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 269.302347][ T8663] usb 5-1: SerialNumber: syz [ 269.318215][T13405] loop2: detected capacity change from 0 to 1764 [ 269.340479][T13404] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[13406] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[13404] [ 269.370704][ T8663] cdc_acm 5-1:1.0: skipping garbage [ 269.386201][ T8663] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 269.406441][ T8663] cdc_acm 5-1:1.0: This needs exactly 3 endpoints [ 269.440436][ T8663] cdc_acm: probe of 5-1:1.0 failed with error -22 [ 269.610595][ T8662] usb 5-1: USB disconnect, device number 27 [ 269.738834][T13421] overlayfs: conflicting options: userxattr,redirect_dir=follow [ 269.807063][T13425] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4275'. [ 270.757157][T13469] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4297'. [ 270.804300][T13469] netlink: 356 bytes leftover after parsing attributes in process `syz.0.4297'. [ 270.952787][T13477] loop2: detected capacity change from 0 to 64 [ 271.348498][T13494] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 271.409406][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 271.599385][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 271.609415][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 271.699403][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 271.709408][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 271.719422][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #30a!!! [ 271.729413][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 271.984311][T13513] netlink: 'syz.3.4317': attribute type 10 has an invalid length. [ 272.049688][T13513] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 272.089820][T13513] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 272.150734][T13513] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 272.189400][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 272.319412][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 272.395810][T13531] xt_connbytes: Forcing CT accounting to be enabled [ 272.579407][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 272.794358][T13551] loop1: detected capacity change from 0 to 256 [ 272.882195][T13552] fuse: Invalid rootmode [ 272.906083][T13555] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4337'. [ 272.973780][T13555] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4337'. [ 273.039815][T13555] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4337'. [ 273.067226][T13555] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4337'. [ 273.099019][T13555] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4337'. [ 273.122100][T13555] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4337'. [ 273.207658][T13555] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4337'. [ 273.381170][T13568] overlayfs: failed to resolve './bus': -2 [ 273.581840][T13576] openvswitch: netlink: Missing key (keys=40, expected=80) [ 274.010933][T13600] netlink: 'syz.0.4358': attribute type 2 has an invalid length. [ 274.360679][T13614] device bridge3 entered promiscuous mode [ 274.517180][T13624] damon: invalid nr_regions. min (30786325577728) > max (1023) [ 274.928644][T13646] __nla_validate_parse: 15 callbacks suppressed [ 274.928665][T13646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4382'. [ 276.094245][T13698] loop3: detected capacity change from 0 to 2048 [ 276.335757][T13698] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 276.479882][T13698] attempt to access beyond end of device [ 276.479882][T13698] loop3: rw=524288, want=33554432, limit=2048 [ 276.492831][T13717] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 276.609804][T13698] attempt to access beyond end of device [ 276.609804][T13698] loop3: rw=0, want=33554432, limit=2048 [ 276.678508][T13723] xt_l2tp: v2 doesn't support IP mode [ 276.705955][T13698] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=3) [ 276.747164][T13698] NILFS (loop3): error -5 reading inode: ino=15 [ 276.844403][T13729] CIFS: Attempting to mount \\127.0.0.1\share [ 277.421515][T13754] MTD: Couldn't look up 'mtd0/file0': -2 [ 277.635444][T13729] CIFS: VFS: Error connecting to socket. Aborting operation. [ 277.700018][T13729] CIFS: VFS: cifs_mount failed w/return code = -4 [ 278.714496][T13815] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4460'. [ 279.894157][T13865] netlink: 'syz.3.4485': attribute type 21 has an invalid length. [ 280.139584][T13874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4489'. [ 280.169100][T13876] x_tables: ip_tables: osf match: only valid for protocol 6 [ 280.180372][T13878] xt_nat: multiple ranges no longer supported [ 280.562817][T13892] netlink: 'syz.3.4497': attribute type 1 has an invalid length. [ 281.351005][T13935] netlink: 'syz.2.4515': attribute type 2 has an invalid length. [ 281.426214][T13935] netlink: 119 bytes leftover after parsing attributes in process `syz.2.4515'. [ 282.369661][ T8662] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 282.397456][ T13] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 282.689706][ T8662] usb 1-1: Using ep0 maxpacket: 16 [ 282.754230][T14006] netlink: 'syz.1.4539': attribute type 1 has an invalid length. [ 282.755603][T13952] loop2: detected capacity change from 0 to 32768 [ 282.806028][T14004] netlink: 1076 bytes leftover after parsing attributes in process `syz.4.4538'. [ 282.835456][ T8662] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 282.877479][ T8662] usb 1-1: config 0 has no interface number 0 [ 282.904171][T14010] netlink: 'syz.1.4540': attribute type 1 has an invalid length. [ 282.997653][T14010] netlink: 'syz.1.4540': attribute type 2 has an invalid length. [ 283.065517][ T8662] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 283.085268][ T8662] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.108822][ T13] usb 4-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00 [ 283.131723][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.150032][ T8662] usb 1-1: Product: syz [ 283.154461][ T8662] usb 1-1: Manufacturer: syz [ 283.159103][ T8662] usb 1-1: SerialNumber: syz [ 283.175138][ T13] usb 4-1: Product: syz [ 283.199412][ T13] usb 4-1: Manufacturer: syz [ 283.204095][ T13] usb 4-1: SerialNumber: syz [ 283.238115][ T8662] usb 1-1: config 0 descriptor?? [ 283.350933][ T8662] hub 1-1:0.132: bad descriptor, ignoring hub [ 283.358656][ T13] ums_eneub6250 4-1:1.0: USB Mass Storage device detected [ 283.365992][ T8662] hub: probe of 1-1:0.132 failed with error -5 [ 283.399732][ T13] scsi host1: usb-storage 4-1:1.0 [ 283.412139][ T8662] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.132/input/input15 [ 283.434470][T14036] usb usb8: usbfs: process 14036 (syz.2.4546) did not claim interface 0 before use [ 283.764302][T14051] netlink: 'syz.1.4548': attribute type 1 has an invalid length. [ 283.854586][ T13] ums_eneub6250: probe of 4-1:1.0 failed with error 3 [ 283.895712][ T13] usb 4-1: USB disconnect, device number 24 [ 284.468870][T14087] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4557'. [ 284.516700][T14090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4560'. [ 284.859055][T14113] netlink: 'syz.0.4567': attribute type 21 has an invalid length. [ 284.897925][T14113] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4567'. [ 285.150100][T14136] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 285.158901][T14136] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 285.265171][T14136] overlayfs: missing 'lowerdir' [ 285.267872][T14145] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4579'. [ 285.764235][T14179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4590'. [ 285.799742][ T4856] usb 1-1: reset high-speed USB device number 31 using dummy_hcd [ 285.840129][ T4856] usb 1-1: device reset changed ep0 maxpacket size! [ 285.878200][ T8662] usb 1-1: USB disconnect, device number 31 [ 286.107505][ T8662] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 286.474577][T14227] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 286.581940][ T8662] usb 1-1: unable to get BOS descriptor or descriptor too short [ 286.717738][ T8662] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 286.747810][ T8662] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 286.891821][T14257] Scaler: ================= START STATUS ================= [ 286.921820][T14261] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 286.945251][T14257] Scaler: ================== END STATUS ================== [ 287.021627][ T8662] usb 1-1: New USB device found, idVendor=041e, idProduct=3f04, bcdDevice= 0.40 [ 287.040809][ T8662] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.089489][ T8662] usb 1-1: Product: syz [ 287.105713][ T8662] usb 1-1: Manufacturer: syz [ 287.149395][ T8662] usb 1-1: SerialNumber: syz [ 287.184242][T14271] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4619'. [ 287.259816][T14271] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4619'. [ 287.280581][T14271] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4619'. [ 287.299018][T14277] exfat: Deprecated parameter 'debug' [ 287.340420][T14277] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 287.350253][T14271] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4619'. [ 287.440601][T14277] exFAT-fs (loop1): unable to read boot sector [ 287.446940][T14277] exFAT-fs (loop1): failed to read boot sector [ 287.499509][T14277] exFAT-fs (loop1): failed to recognize exfat type [ 287.569781][ T8662] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 287.673897][ T8662] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 287.738775][T14306] netlink: 'syz.3.4629': attribute type 3 has an invalid length. [ 287.759524][ T8662] usb 1-1: USB disconnect, device number 32 [ 287.817386][T14306] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4629'. [ 287.849160][T14320] loop2: detected capacity change from 0 to 256 [ 288.016957][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 288.585613][T14365] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4648'. [ 288.814533][T14371] loop2: detected capacity change from 0 to 4096 [ 288.825777][T14383] rdma_rxe: rxe creation allowed on top of a real device only [ 288.910656][T14371] ntfs: (device loop2): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 289.081255][T14371] ntfs: volume version 3.1. [ 289.097471][T14403] netlink: 'syz.3.4660': attribute type 12 has an invalid length. [ 289.136093][T14404] usb usb8: usbfs: process 14404 (syz.0.4661) did not claim interface 0 before use [ 289.359234][T14417] IPv6: NLM_F_CREATE should be specified when creating new route [ 289.848755][T14454] (unnamed net_device) (uninitialized): up delay (8) is not a multiple of miimon (100), value rounded to 0 ms [ 289.953143][T14454] (unnamed net_device) (uninitialized): peer notification delay (23) is not a multiple of miimon (100), value rounded to 0 ms [ 289.979497][T14464] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4683'. [ 290.019716][T14464] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 290.099588][T14454] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-tlb(5) [ 290.322666][T14480] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4688'. [ 290.433003][T14489] loop2: detected capacity change from 0 to 16 [ 290.466128][T14490] loop1: detected capacity change from 0 to 736 [ 290.561743][T14489] erofs: (device loop2): mounted with root inode @ nid 36. [ 290.639451][ T13] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 290.772641][T14507] netlink: 'syz.4.4697': attribute type 11 has an invalid length. [ 290.932594][ T13] usb 1-1: Using ep0 maxpacket: 32 [ 291.061739][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.089391][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.102029][T14528] netlink: 'syz.4.4703': attribute type 3 has an invalid length. [ 291.141915][ T13] usb 1-1: New USB device found, idVendor=046d, idProduct=c11c, bcdDevice= 0.40 [ 291.159719][T11774] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 291.177797][T14528] netlink: 'syz.4.4703': attribute type 1 has an invalid length. [ 291.195693][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.240384][ T13] usb 1-1: config 0 descriptor?? [ 291.328186][ T13] hub 1-1:0.0: USB hub found [ 291.549869][ T13] hub 1-1:0.0: 1 port detected [ 291.636261][T11774] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 291.656590][T11774] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 291.697116][T11774] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 291.737605][T11774] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 291.762663][ T13] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 291.789412][ T13] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 291.799699][T11774] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 291.859428][T11774] usb 4-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 291.877494][ T13] usb 1-1: USB disconnect, device number 33 [ 291.904415][T11774] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.965264][T14581] netlink: 'syz.1.4719': attribute type 9 has an invalid length. [ 292.009954][T14512] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 292.029068][T14512] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 292.059498][T14512] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 292.082293][T11774] mos7720 4-1:1.0: Moschip 2 port adapter converter detected [ 292.169848][T14597] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4722'. [ 292.509604][T11774] usb 4-1: mos7720: usb_control_msg() failed: -71 [ 292.518670][ T1111] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 292.525677][T14620] netlink: 'syz.0.4730': attribute type 46 has an invalid length. [ 292.540681][T11774] usb 4-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 292.559059][T14620] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4730'. [ 292.579609][T11774] usb 4-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 292.648918][T11774] usb 4-1: USB disconnect, device number 25 [ 292.666871][ C0] usb 4-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 292.733886][T11774] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 292.769517][ T1111] usb 2-1: Using ep0 maxpacket: 16 [ 292.801786][T11774] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 292.859049][T11774] mos7720 4-1:1.0: device disconnected [ 292.918343][T14654] loop2: detected capacity change from 0 to 256 [ 293.049860][ T1111] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 293.085931][ T1111] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.115539][ T1111] usb 2-1: Product: syz [ 293.124588][ T1111] usb 2-1: Manufacturer: syz [ 293.129266][ T1111] usb 2-1: SerialNumber: syz [ 293.178712][ T1111] usb 2-1: config 0 descriptor?? [ 293.231139][ T1111] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 293.452174][ T1111] usb 2-1: clie_3_5_startup: get config number bad return length: 0 [ 293.483779][ T1111] visor: probe of 2-1:0.0 failed with error -5 [ 293.667327][T11774] usb 2-1: USB disconnect, device number 21 [ 294.318821][T14725] xt_policy: output policy not valid in PREROUTING and INPUT [ 294.843692][T14759] netlink: 'syz.0.4772': attribute type 1 has an invalid length. [ 295.149678][T14774] Process accounting resumed [ 295.405505][T14799] openvswitch: netlink: Message has 4 unknown bytes. [ 295.729705][ T8663] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 295.956442][T14838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4802'. [ 296.002900][ T8663] usb 3-1: Using ep0 maxpacket: 32 [ 296.139596][ T8663] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 296.168809][ T8663] usb 3-1: config 0 has no interface number 0 [ 296.372199][T14869] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4814'. [ 296.388351][ T8663] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 296.409680][ T8663] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.439574][ T8663] usb 3-1: Product: syz [ 296.443817][ T8663] usb 3-1: Manufacturer: syz [ 296.478880][ T8663] usb 3-1: SerialNumber: syz [ 296.490581][ T8663] usb 3-1: config 0 descriptor?? [ 296.550497][ T8663] smsc95xx v2.0.0 [ 296.569670][ T4232] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 296.759002][ T8663] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 296.779415][ T8663] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 296.835064][ T8663] usb 3-1: USB disconnect, device number 20 [ 296.939646][ T4232] usb 4-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 296.979441][ T4232] usb 4-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.009847][ T4232] usb 4-1: config 1 interface 0 has no altsetting 0 [ 297.189872][ T4232] usb 4-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice= 0.40 [ 297.211787][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.237075][ T4232] usb 4-1: Product: syz [ 297.260116][ T4232] usb 4-1: Manufacturer: syz [ 297.264787][ T4232] usb 4-1: SerialNumber: syz [ 297.424021][T14915] netlink: 196 bytes leftover after parsing attributes in process `syz.2.4828'. [ 297.469742][T14915] netlink: 196 bytes leftover after parsing attributes in process `syz.2.4828'. [ 297.482168][T14918] loop1: detected capacity change from 0 to 1024 [ 297.508506][T14915] netlink: 19 bytes leftover after parsing attributes in process `syz.2.4828'. [ 297.649314][ T4232] vmk80xx 4-1:1.0: driver 'vmk80xx' failed to auto-configure device. [ 297.720924][ T4232] usb 4-1: USB disconnect, device number 26 [ 297.757666][ T154] hfsplus: b-tree write err: -5, ino 25 [ 297.767547][ T154] hfsplus: b-tree write err: -5, ino 4 [ 297.784939][ T154] hfsplus: b-tree write err: -5, ino 2 [ 298.078688][T14946] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 298.488070][ T4232] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 298.669505][ T8663] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 298.819615][ T4232] usb 4-1: not running at top speed; connect to a high speed hub [ 298.923054][ T4232] usb 4-1: config 5 has an invalid interface number: 32 but max is 0 [ 298.941760][ T4232] usb 4-1: config 5 has no interface number 0 [ 298.947917][ T4232] usb 4-1: config 5 interface 32 has no altsetting 0 [ 298.964144][ T8663] usb 1-1: Using ep0 maxpacket: 16 [ 299.136225][ T8663] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 299.164519][ T1111] ------------[ cut here ]------------ [ 299.173248][ T4232] usb 4-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=a2.76 [ 299.199269][ T1111] WARNING: CPU: 1 PID: 1111 at net/netfilter/nft_set_pipapo.c:2355 nft_pipapo_destroy+0x8b0/0x960 [ 299.219519][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.240880][ T4232] usb 4-1: Product: syz [ 299.245152][ T4232] usb 4-1: Manufacturer: syz [ 299.257691][ T1111] Modules linked in: [ 299.266438][ T1111] CPU: 1 PID: 1111 Comm: kworker/1:2 Not tainted syzkaller #0 [ 299.278998][ T4232] usb 4-1: SerialNumber: syz [ 299.286739][ T1111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 299.306515][ T1111] Workqueue: events nf_tables_trans_destroy_work [ 299.329643][ T1111] RIP: 0010:nft_pipapo_destroy+0x8b0/0x960 [ 299.347904][ T1111] Code: 24 80 3c 18 00 74 08 4c 89 f7 e8 6b ed 81 f9 49 c7 06 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b0 c4 3c f9 <0f> 0b e9 ad f7 ff ff 48 c7 c1 f0 10 8b 8d 80 e1 07 80 c1 03 38 c1 [ 299.399591][ T8663] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 299.401075][ T1111] RSP: 0018:ffffc900046c7a68 EFLAGS: 00010293 [ 299.408696][ T8663] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.408723][ T8663] usb 1-1: Product: syz [ 299.408739][ T8663] usb 1-1: Manufacturer: syz [ 299.408755][ T8663] usb 1-1: SerialNumber: syz [ 299.444398][ T8663] r8152-cfgselector 1-1: config 0 descriptor?? [ 299.471645][ T1111] [ 299.474160][ T1111] RAX: ffffffff883c4af0 RBX: ffff8880736064f0 RCX: ffff8880214b3b80 [ 299.482893][ T1111] RDX: 0000000000000000 RSI: ffff888073606400 RDI: ffff88807566a428 [ 299.491324][ T1111] RBP: ffffc900046c7c30 R08: ffff8880214b3b80 R09: 0000000000000008 [ 299.499854][ T1111] R10: 0000000000000018 R11: 0000000000000000 R12: ffff8880736064c0 [ 299.508816][ T1111] R13: dffffc0000000000 R14: ffff888073606510 R15: dffffc0000000000 [ 299.517530][ T1111] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 299.527192][ T1111] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 299.534379][ T1111] CR2: 00007fa769ff4000 CR3: 000000007e070000 CR4: 00000000003506e0 [ 299.543206][ T1111] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 299.552718][ T1111] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 299.561153][ T1111] Call Trace: [ 299.564664][ T1111] [ 299.567743][ T1111] nft_set_destroy+0x488/0xa30 [ 299.573160][ T1111] ? kfree+0xef/0x2a0 [ 299.577375][ T1111] ? nf_tables_chain_destroy+0x19b/0x530 [ 299.583586][ T1111] nf_tables_trans_destroy_work+0xc5d/0xf00 [ 299.590183][ T1111] ? nft_object_dump+0x1e0/0x1e0 [ 299.595267][ T1111] ? _raw_spin_unlock_irq+0x1f/0x40 [ 299.608183][ T1111] process_one_work+0x867/0xff0 [ 299.620238][ T1111] ? worker_detach_from_pool+0x240/0x240 [ 299.627035][ T1111] ? lockdep_hardirqs_off+0x70/0x100 [ 299.638453][ T1111] ? _raw_spin_lock_irq+0xb7/0xf0 [ 299.645130][ T1111] ? _raw_spin_lock_irqsave+0x100/0x100 [ 299.656051][ T1111] ? wq_worker_running+0x97/0x170 [ 299.662940][ T1111] worker_thread+0xad7/0x12a0 [ 299.667899][ T1111] kthread+0x42e/0x520 [ 299.674947][ T4232] usbhid 4-1:5.32: couldn't find an input interrupt endpoint [ 299.689586][ T1111] ? rcu_lock_release+0x20/0x20 [ 299.696852][ T1111] ? kthread_blkcg+0xd0/0xd0 [ 299.714955][ T4232] usb 4-1: USB disconnect, device number 27 [ 299.726475][ T1111] ret_from_fork+0x1f/0x30 [ 299.737102][ T1111] [ 299.743733][ T1111] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 299.751152][ T1111] CPU: 1 PID: 1111 Comm: kworker/1:2 Not tainted syzkaller #0 [ 299.758673][ T1111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 299.768763][ T1111] Workqueue: events nf_tables_trans_destroy_work [ 299.775145][ T1111] Call Trace: [ 299.778497][ T1111] [ 299.781468][ T1111] dump_stack_lvl+0x188/0x250 [ 299.786194][ T1111] ? show_regs_print_info+0x20/0x20 [ 299.791426][ T1111] ? load_image+0x410/0x410 [ 299.796002][ T1111] panic+0x2f8/0x850 [ 299.799939][ T1111] ? bpf_jit_dump+0xd0/0xd0 [ 299.804502][ T1111] ? ret_from_fork+0x1f/0x30 [ 299.809136][ T1111] ? nft_pipapo_destroy+0x8b0/0x960 [ 299.814371][ T1111] __warn+0x248/0x2b0 [ 299.818390][ T1111] ? nft_pipapo_destroy+0x8b0/0x960 [ 299.823622][ T1111] report_bug+0x1b9/0x2e0 [ 299.828078][ T1111] handle_bug+0x3a/0x70 [ 299.832275][ T1111] exc_invalid_op+0x16/0x40 [ 299.836810][ T1111] asm_exc_invalid_op+0x16/0x20 [ 299.841698][ T1111] RIP: 0010:nft_pipapo_destroy+0x8b0/0x960 [ 299.847539][ T1111] Code: 24 80 3c 18 00 74 08 4c 89 f7 e8 6b ed 81 f9 49 c7 06 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b0 c4 3c f9 <0f> 0b e9 ad f7 ff ff 48 c7 c1 f0 10 8b 8d 80 e1 07 80 c1 03 38 c1 [ 299.867380][ T1111] RSP: 0018:ffffc900046c7a68 EFLAGS: 00010293 [ 299.873490][ T1111] RAX: ffffffff883c4af0 RBX: ffff8880736064f0 RCX: ffff8880214b3b80 [ 299.881493][ T1111] RDX: 0000000000000000 RSI: ffff888073606400 RDI: ffff88807566a428 [ 299.889497][ T1111] RBP: ffffc900046c7c30 R08: ffff8880214b3b80 R09: 0000000000000008 [ 299.897505][ T1111] R10: 0000000000000018 R11: 0000000000000000 R12: ffff8880736064c0 [ 299.905521][ T1111] R13: dffffc0000000000 R14: ffff888073606510 R15: dffffc0000000000 [ 299.913555][ T1111] ? nft_pipapo_destroy+0x8b0/0x960 [ 299.918802][ T1111] ? nft_pipapo_destroy+0x8b0/0x960 [ 299.924048][ T1111] nft_set_destroy+0x488/0xa30 [ 299.928860][ T1111] ? kfree+0xef/0x2a0 [ 299.932872][ T1111] ? nf_tables_chain_destroy+0x19b/0x530 [ 299.938540][ T1111] nf_tables_trans_destroy_work+0xc5d/0xf00 [ 299.944474][ T1111] ? nft_object_dump+0x1e0/0x1e0 [ 299.949457][ T1111] ? _raw_spin_unlock_irq+0x1f/0x40 [ 299.950585][ T8663] r8152-cfgselector 1-1: Unknown version 0x0000 [ 299.954699][ T1111] process_one_work+0x867/0xff0 [ 299.954746][ T1111] ? worker_detach_from_pool+0x240/0x240 [ 299.971502][ T1111] ? lockdep_hardirqs_off+0x70/0x100 [ 299.976836][ T1111] ? _raw_spin_lock_irq+0xb7/0xf0 [ 299.981905][ T1111] ? _raw_spin_lock_irqsave+0x100/0x100 [ 299.987500][ T1111] ? wq_worker_running+0x97/0x170 [ 299.992572][ T1111] worker_thread+0xad7/0x12a0 [ 299.997323][ T1111] kthread+0x42e/0x520 [ 300.001456][ T1111] ? rcu_lock_release+0x20/0x20 [ 300.006465][ T1111] ? kthread_blkcg+0xd0/0xd0 [ 300.009459][ T8663] r8152-cfgselector 1-1: USB disconnect, device number 34 [ 300.011088][ T1111] ret_from_fork+0x1f/0x30 [ 300.022661][ T1111] [ 300.026120][ T1111] Kernel Offset: disabled [ 300.030827][ T1111] Rebooting in 86400 seconds..