last executing test programs: 4.977999283s ago: executing program 3 (id=6491): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800714, &(0x7f00000000c0), 0x1, 0x4cf, &(0x7f0000000380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000100)=0x7fffffff) 4.568197535s ago: executing program 3 (id=6494): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x804000, &(0x7f0000000640)={[{@lazytime}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}, {@barrier_val}, {@journal_dev={'journal_dev', 0x3d, 0x5}}, {@dioread_lock}, {@noacl}, {@noinit_itable}, {@resgid, 0x32}]}, 0x1, 0x4fc, &(0x7f0000000140)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000180)={0x9, 0x5, 0x100000001, 0x5, 0xffffffffffffffff, 0xd5, 0x5, 0x0, 0x9e}) 3.971396891s ago: executing program 3 (id=6499): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000004f80), r0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000005100)={0x0, 0x0, &(0x7f00000050c0)={&(0x7f0000005040)={0x2c, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x2}, @NL802154_ATTR_CHANNEL={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000011}, 0x48010) 3.617756831s ago: executing program 3 (id=6505): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$dsp(r0, 0x0, 0x4c) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000002c0)=0x1) 2.91823903s ago: executing program 3 (id=6515): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x40001, 0xfffffffc, 0x0, 0x6}, 0x10) write(r0, &(0x7f0000000080)="240000001e005f0214f9f407000904001f000000000e0000000000000800040001000000", 0x24) 2.778318244s ago: executing program 0 (id=6518): r0 = syz_open_procfs(0x0, &(0x7f0000000440)='attr\x00') getdents(r0, &(0x7f0000000040)=""/56, 0x38) getdents(r0, 0xffffffffffffffff, 0x5a) 2.767894374s ago: executing program 3 (id=6520): r0 = syz_usb_connect_ath9k(0x3, 0x6e, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000300)={0x0, 0x11, '\x00', [@padn={0x1, 0x1, [0x0]}, @generic={0x8, 0x6a, "455037a824185654a5939e3bf033b99eee67ab23ca25c59cec9d2a10ae8902973d7201ea0d6b02f922b17e2264aea24a06409241c2cfb1cddba3d984a16a08901a21901521f0fc0f8123f3a7d1941001561d4dc01f62ca2d3fe46df4a6382a65b3cdb1d9bcece07e6565"}, @calipso={0x7, 0x18, {0x1, 0x4, 0x5, 0xc, [0x319e, 0x401]}}]}, 0x98) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffc2, &(0x7f0000000040)=ANY=[]) 2.598618329s ago: executing program 0 (id=6523): r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000100)=0x5, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f0000000040)) 2.515345351s ago: executing program 0 (id=6526): unshare(0x22060600) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="05000000020000000800000040"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1003, r0, 0x1000000}, 0x38) 2.310218856s ago: executing program 0 (id=6531): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x8001, 0x1000, 0xffffffff, 0xe, 0x16, "b37b27fc7e6d06fa9acfd1b384399ea787721c"}) 2.229723709s ago: executing program 1 (id=6533): r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000100)=[{0x6, 0x44, 0x8}]}, 0x10) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x10, 0x3f5, 0x1, 0x70bd37, 0x25dfdbff}, 0xffa2}, 0x1, 0x0, 0x0, 0x4804}, 0xc0) 2.16443673s ago: executing program 0 (id=6535): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01e714000000ffdbdf251500000024001e81"], 0x38}}, 0x0) 2.088667503s ago: executing program 1 (id=6537): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) 1.978451956s ago: executing program 0 (id=6539): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcfd0"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1.908539597s ago: executing program 4 (id=6541): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x20, r1, 0x309, 0x0, 0x0, {0x1d}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}}, 0x0) 1.80802541s ago: executing program 4 (id=6542): r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000100)={0xfffffffc, [[0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffd, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x2, 0x5, 0xffffffff, 0xfffffff0], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x6, 0xffffffff]], '\x00', [{0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x101, 0x989684}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}], '\x00', 0x8}) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x80984120, &(0x7f00000003c0)) 1.653554154s ago: executing program 4 (id=6544): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) setrlimit(0x7, &(0x7f0000000640)) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.534510638s ago: executing program 4 (id=6546): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x5, 0xa8, @random='\x00'}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20044090}, 0x0) 1.317952964s ago: executing program 4 (id=6547): r0 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r0, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) sendmmsg$inet(r0, &(0x7f0000002f40)=[{{0x0, 0x15, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x300, 0x0) 804.643178ms ago: executing program 2 (id=6551): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r1, @ANYBLOB="003000000000000014001a80100005800c000980"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) 645.579572ms ago: executing program 1 (id=6552): r0 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x98fd3f00}}, 0x1c) 641.899222ms ago: executing program 2 (id=6553): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb005}, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000008c0)={@multicast, @remote, @void, {@ipv4={0x800, @generic={{0x10, 0x4, 0x1, 0x4, 0x40, 0x67, 0x0, 0x10, 0x5e, 0x0, @remote, @remote, {[@rr={0x7, 0x1b, 0x2f, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @broadcast, @empty, @broadcast, @multicast1]}, @generic={0x82, 0xb, "dd7ffb506ded3335e2"}, @rr={0x7, 0x3, 0x4c}]}}}}}}, 0x0) 448.138478ms ago: executing program 2 (id=6554): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000280)={0x2, 0x5}, 0x4) 417.734068ms ago: executing program 1 (id=6555): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="170900000000e4ffffff0100000006000200010000000500070000100000080009000100000008000a00040000000800170031"], 0x3c}}, 0x4000) 350.26312ms ago: executing program 2 (id=6556): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fcntl$notify(r0, 0x402, 0x37) getdents(r0, &(0x7f00000000c0)=""/55, 0x18) 267.784153ms ago: executing program 4 (id=6557): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0x200f, {"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", 0x1000}}, 0x1006) 264.265323ms ago: executing program 1 (id=6558): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x5, 0x42, 0x40, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000a40)="690322", &(0x7f00000008c0), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r0, &(0x7f00000014c0), &(0x7f0000000b40)=""/31}, 0x20) 126.880876ms ago: executing program 2 (id=6559): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x200000, 0x200000, 0xa, 0x0, 0x8}) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000)=0x3, 0x4) 43.167159ms ago: executing program 2 (id=6560): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x29, 0x3d, 0xfffffffffffffcac, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 1 (id=6561): r0 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) ftruncate(r0, 0x7000000) preadv(r0, &(0x7f00000002c0)=[{0x0, 0x37}, {&(0x7f0000000380)=""/4090, 0xffa}], 0x2, 0xa, 0x206) kernel console output (not intermixed with test programs): er of the config [ 302.457426][ T5459] usb 3-1: config 0 interface 0 has no altsetting 0 [ 302.566092][ T5459] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice= 0.06 [ 302.585425][ T5459] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 302.600303][T12911] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 302.632336][ T5459] usb 3-1: SerialNumber: syz [ 302.653589][ T5459] usb 3-1: config 0 descriptor?? [ 302.676364][T12932] loop4: detected capacity change from 0 to 2048 [ 302.683002][T12911] ntfs3: loop1: ntfs_sync_fs r=19 failed, -22. [ 302.709938][T12911] ntfs3: loop1: ntfs_evict_inode r=19 failed, -22. [ 302.771518][T12937] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3987'. [ 302.850955][T12932] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 302.881703][ T4230] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 303.183926][ T5456] usb 3-1: USB disconnect, device number 25 [ 303.373979][ T4230] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 303.643741][ T4230] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 303.652973][ T4230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.707489][ T4230] usb 4-1: Product: syz [ 303.738244][ T4230] usb 4-1: Manufacturer: syz [ 303.753100][ T4230] usb 4-1: SerialNumber: syz [ 303.798504][T12967] loop0: detected capacity change from 0 to 512 [ 303.857514][ T4230] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 304.063854][T12967] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 304.094075][T12967] ext4 filesystem being mounted at /803/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.105895][ T4230] usb 4-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 304.142936][ T4230] usb 4-1: USB disconnect, device number 25 [ 304.282608][T12967] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 304.783237][ T26] audit: type=1400 audit(1788430863.937:16): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457C51CCA93031D371D06D2E59E880583300E11E8 pid=12996 comm="syz.1.4016" [ 304.860017][T12995] loop3: detected capacity change from 0 to 1024 [ 305.013401][T13005] overlayfs: empty lowerdir [ 305.123870][T12995] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 305.168248][T12969] loop2: detected capacity change from 0 to 32768 [ 305.248894][T12995] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 305.293667][T12995] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback. [ 305.533843][T12969] JBD2: Ignoring recovery information on journal [ 305.684383][T12969] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 305.867707][T13040] netlink: 'syz.3.4034': attribute type 1 has an invalid length. [ 305.908580][T13042] tmpfs: Bad value for 'mpol' [ 305.959844][T12969] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad chain 1 [ 306.108661][T13050] CIFS mount error: No usable UNC path provided in device string! [ 306.108661][T13050] [ 306.123319][T12969] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 306.158550][T13050] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 306.173895][T13053] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4041'. [ 306.183827][T12969] OCFS2: File system is now read-only. [ 306.226877][T12969] (syz.2.4003,12969,0):ocfs2_search_chain:1783 ERROR: status = -30 [ 306.277381][T12969] (syz.2.4003,12969,0):ocfs2_search_chain:1893 ERROR: status = -30 [ 306.313882][T12969] (syz.2.4003,12969,0):ocfs2_claim_suballoc_bits:1972 ERROR: status = -30 [ 306.322788][T12969] (syz.2.4003,12969,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 306.356410][T13062] ipt_CLUSTERIP: unknown mode 3918972798 [ 306.400290][T12969] (syz.2.4003,12969,0):ocfs2_claim_new_inode:2248 ERROR: status = -30 [ 306.439163][T12969] (syz.2.4003,12969,0):ocfs2_claim_new_inode:2263 ERROR: status = -30 [ 306.489206][T12969] (syz.2.4003,12969,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 306.536412][T12969] (syz.2.4003,12969,0):ocfs2_mknod:385 ERROR: status = -30 [ 306.556646][T13066] tipc: Trying to set illegal importance in message [ 306.579170][T12969] (syz.2.4003,12969,0):ocfs2_mknod:502 ERROR: status = -30 [ 306.631429][T12969] (syz.2.4003,12969,0):ocfs2_create:676 ERROR: status = -30 [ 306.835738][ T4193] ocfs2: Unmounting device (7,2) on (node local) [ 307.039584][ T23] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 307.236973][T13094] netlink: 25 bytes leftover after parsing attributes in process `syz.1.4063'. [ 307.446034][T13100] xt_TCPMSS: Only works on TCP SYN packets [ 307.517575][T13103] tmpfs: Bad value for 'mpol' [ 307.634538][ T23] usb 1-1: New USB device found, idVendor=2040, idProduct=c604, bcdDevice= 0.01 [ 307.658567][T13108] netlink: 'syz.2.4069': attribute type 1 has an invalid length. [ 307.673656][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.713757][T13108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4069'. [ 307.789902][ T23] usb 1-1: dvb_usb_v2: found a 'Hauppauge 126xxx DVBT' in warm state [ 307.832910][ T23] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 307.905303][ T23] dvbdev: DVB: registering new adapter (Hauppauge 126xxx DVBT) [ 307.913461][ T23] usb 1-1: media controller created [ 308.056353][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 308.086778][T13129] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4078'. [ 308.236612][ T23] set interface failed [ 308.237081][ T23] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 308.269773][ T23] error writing reg: 0xff, val: 0x00 [ 308.367451][ T23] dvb_usb_mxl111sf: probe of 1-1:1.0 failed with error -22 [ 308.443728][ T23] usb 1-1: USB disconnect, device number 29 [ 308.883114][T13160] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4095'. [ 309.932122][T13205] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 310.379917][T13229] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4128'. [ 310.466078][T13234] binder: Bad value for 'max' [ 310.529597][T13236] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 310.592506][T13176] loop4: detected capacity change from 0 to 32768 [ 310.709402][T13248] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4136'. [ 310.770351][T13176] ERROR: (device loop4): diNewExt: no free extents [ 310.770351][T13176] [ 310.833981][T13253] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4138'. [ 310.870335][T13176] ialloc: diAlloc returned -5! [ 310.893915][T13253] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4138'. [ 310.940707][T13253] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4138'. [ 311.014097][T13259] comedi comedi0: comedi_config --init_data is deprecated [ 311.283852][T13273] netlink: 'syz.2.4150': attribute type 1 has an invalid length. [ 311.291644][T13273] __nla_validate_parse: 18 callbacks suppressed [ 311.291657][T13273] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4150'. [ 311.336164][T13275] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (2049) [ 311.474137][ T5188] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 311.507649][T13279] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4153'. [ 311.852079][T13289] loop2: detected capacity change from 0 to 4096 [ 311.928540][ T5188] usb 2-1: config 8 has an invalid interface number: 80 but max is 0 [ 311.950847][ T5188] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 312.001229][ T5188] usb 2-1: config 8 has no interface number 0 [ 312.031943][ T5188] usb 2-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0xE7, skipping [ 312.077011][ T5188] usb 2-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 312.106217][ T5188] usb 2-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 312.121946][T13289] EXT4-fs (loop2): Test dummy encryption mode enabled [ 312.130264][ C0] sd 0:0:1:0: tag#5174 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 312.140219][ C0] sd 0:0:1:0: tag#5174 CDB: Test Unit Ready [ 312.146205][ C0] sd 0:0:1:0: tag#5174 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 312.155386][ C0] sd 0:0:1:0: tag#5174 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 312.164563][ C0] sd 0:0:1:0: tag#5174 CDB[20]: 00 00 00 00 00 00 00 [ 312.179431][ T5188] usb 2-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 312.219660][ T5188] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 312.243662][ T5188] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.334581][ T5188] usb 2-1: NFC: intf ffff8880783e4000 id ffffffff8cb63620 [ 312.366832][T13289] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue. Quota mode: writeback. [ 312.606950][ T5188] usb 2-1: USB disconnect, device number 28 [ 312.805104][T13335] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.4179'. [ 312.893993][T13339] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4181'. [ 313.085684][T13335] syz.0.4179 (13335) used greatest stack depth: 18640 bytes left [ 313.292006][T13352] CacheFiles: Empty directory specified [ 313.898385][T13373] loop0: detected capacity change from 0 to 1024 [ 313.966847][T13376] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4199'. [ 314.064866][T13376] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4199'. [ 314.458030][T13394] loop1: detected capacity change from 0 to 1024 [ 314.696799][T13394] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 314.711917][T13408] loop2: detected capacity change from 0 to 64 [ 314.968185][T13408] attempt to access beyond end of device [ 314.968185][T13408] loop2: rw=0, want=234881064, limit=64 [ 315.008488][T13408] Buffer I/O error on dev loop2, logical block 117440531, async page read [ 315.054080][T13408] attempt to access beyond end of device [ 315.054080][T13408] loop2: rw=0, want=8548515842, limit=64 [ 315.083765][T13408] Buffer I/O error on dev loop2, logical block 4274257920, async page read [ 315.106170][T13408] attempt to access beyond end of device [ 315.106170][T13408] loop2: rw=0, want=301989890, limit=64 [ 315.133737][T13408] Buffer I/O error on dev loop2, logical block 150994944, async page read [ 315.154217][T13408] attempt to access beyond end of device [ 315.154217][T13408] loop2: rw=0, want=234881064, limit=64 [ 315.183891][T13408] Buffer I/O error on dev loop2, logical block 117440531, async page read [ 315.203900][ T26] audit: type=1800 audit(1788430874.367:17): pid=13408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4214" name="file2" dev="loop2" ino=6 res=0 errno=0 [ 315.373719][ T4230] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 315.655744][ T4230] usb 1-1: Using ep0 maxpacket: 16 [ 315.909718][ T4230] usb 1-1: unable to get BOS descriptor or descriptor too short [ 315.927996][T13453] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4234'. [ 316.066030][ T4230] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 316.104312][ T4230] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 316.383290][ T4230] usb 1-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 316.417272][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.445713][ T4230] usb 1-1: Product: syz [ 316.449960][ T4230] usb 1-1: Manufacturer: syz [ 316.476341][T13478] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4247'. [ 316.506562][ T4230] usb 1-1: SerialNumber: syz [ 316.793312][T13490] netlink: 'syz.4.4252': attribute type 7 has an invalid length. [ 316.827380][T13490] netlink: 'syz.4.4252': attribute type 8 has an invalid length. [ 316.911161][T13494] netlink: 'syz.1.4254': attribute type 11 has an invalid length. [ 316.951545][T13494] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4254'. [ 316.972435][ T4230] usb 1-1: 0:1 : does not exist [ 316.986717][ T4230] usb 1-1: unit 5 not found! [ 317.020994][ T4230] usb 1-1: cannot get ctl value: req = 0x83, wValue = 0x200, wIndex = 0x200, type = 4 [ 317.030948][T13500] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 317.093788][ T4230] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 317.192127][ T4230] usb 1-1: USB disconnect, device number 30 [ 317.333493][T13515] netlink: 'syz.4.4265': attribute type 5 has an invalid length. [ 317.523697][T13524] CIFS: iocharset name too long [ 317.535089][T13342] udevd[13342]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 317.601057][T13519] loop2: detected capacity change from 0 to 4096 [ 317.719230][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.760333][T13519] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 317.910168][T13537] loop0: detected capacity change from 0 to 2048 [ 318.030925][T13537] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 318.054072][ T4193] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 318.233772][T13552] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4283'. [ 318.613813][T13574] netlink: 'syz.1.4291': attribute type 1 has an invalid length. [ 318.655780][T13574] netlink: 'syz.1.4291': attribute type 3 has an invalid length. [ 318.702456][T13574] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4291'. [ 318.746708][T13584] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4297'. [ 318.781253][T13584] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 319.010979][T13598] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 319.253520][T13611] comedi comedi4: bad chanlist[0]=0x0fffffff chan=65535 range length=2 [ 319.306020][T13614] netlink: 260 bytes leftover after parsing attributes in process `syz.3.4311'. [ 319.641432][T13631] netlink: 'syz.4.4320': attribute type 6 has an invalid length. [ 319.816424][T13640] xt_hashlimit: size too large, truncated to 1048576 [ 319.835815][T13641] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 320.016065][T13649] loop0: detected capacity change from 0 to 128 [ 320.055453][T13655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4332'. [ 320.098589][T13657] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4333'. [ 320.117621][T13649] FAT-fs (loop0): bogus logical sector size 65535 [ 320.133712][T13649] FAT-fs (loop0): Can't find a valid FAT filesystem [ 320.168553][T13657] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4333'. [ 320.223758][T13657] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4333'. [ 320.588681][T13681] netlink: 'syz.1.4345': attribute type 29 has an invalid length. [ 320.618119][T13681] netlink: 'syz.1.4345': attribute type 29 has an invalid length. [ 321.224971][T13700] loop1: detected capacity change from 0 to 2048 [ 321.370311][T13700] EXT4-fs (loop1): inline encryption not supported [ 321.490989][T13685] 9pnet: p9_fd_create_tcp (13685): problem connecting socket to 127.0.0.1 [ 321.524575][T13700] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,inlinecrypt,resgid=0x0000000000000000,barrier,quota,delalloc,,errors=continue. Quota mode: writeback. [ 321.689218][T13700] ext4 filesystem being mounted at /924/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 321.818905][T13700] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.4354: bg 0: block 345: padding at end of block bitmap is not set [ 321.962837][T13700] EXT4-fs error (device loop1): ext4_xattr_block_set:2199: inode #15: comm syz.1.4354: bad block 128 [ 322.054567][T13728] loop3: detected capacity change from 0 to 64 [ 322.849821][T13755] __nla_validate_parse: 2 callbacks suppressed [ 322.849838][T13755] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.4379'. [ 323.053964][T13763] netlink: zone id is out of range [ 323.776128][T13788] loop0: detected capacity change from 0 to 24 [ 324.029770][T13788] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 324.117779][T13788] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 324.169881][T13788] VFS: Lookup of 'file0' in romfs loop0 would have caused loop [ 324.397915][T13817] loop0: detected capacity change from 0 to 16 [ 324.413874][ T5459] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 324.481726][T13817] erofs: (device loop0): mounted with root inode @ nid 36. [ 324.543744][ T4203] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -20 in[52, 4044] out[9000] [ 324.570525][T13817] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -20 in[52, 4044] out[4096] [ 324.654310][ T26] audit: type=1800 audit(1788430883.817:18): pid=13817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4407" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 324.714131][ T5459] usb 2-1: Using ep0 maxpacket: 16 [ 324.783832][ T5187] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 324.852542][ T5459] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 52, changing to 7 [ 324.883677][ T5459] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 9272, setting to 1024 [ 325.081278][ T5187] usb 3-1: Using ep0 maxpacket: 32 [ 325.143117][ T5459] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 325.174963][ T5459] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.203343][ T5459] usb 2-1: Product: syz [ 325.223541][ T5459] usb 2-1: Manufacturer: syz [ 325.236817][ T5459] usb 2-1: SerialNumber: syz [ 325.241970][ T5187] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 325.274275][ T5459] usb 2-1: config 0 descriptor?? [ 325.283671][ T5187] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 325.312892][ T5187] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 325.363656][ T5187] usb 3-1: config 1 has no interface number 0 [ 325.370247][ T5187] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 325.381309][ T5459] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 325.450355][ T5187] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 325.548981][ T5187] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 325.626390][ T5187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.664139][ T404] usb 2-1: Failed to submit usb control message: -71 [ 325.672916][ T404] usb 2-1: unable to send the bmi data to the device: -71 [ 325.675392][ T5188] usb 2-1: USB disconnect, device number 29 [ 325.700439][ T404] usb 2-1: unable to get target info from device [ 325.708145][T13849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4422'. [ 325.719365][T13839] device veth3 entered promiscuous mode [ 325.729325][ T404] usb 2-1: could not get target info (-71) [ 325.739205][ T5187] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 325.773686][ T404] usb 2-1: could not probe fw (-71) [ 325.964420][ T5187] snd_usb_pod 3-1:1.1: invalid control EP [ 325.974008][ T5187] snd_usb_pod 3-1:1.1: cannot start listening: -22 [ 326.013717][ T5187] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 326.052819][ T5187] snd_usb_pod: probe of 3-1:1.1 failed with error -22 [ 326.244383][ T5187] usb 3-1: USB disconnect, device number 26 [ 326.327432][T13862] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4428'. [ 326.662495][T13874] dlm: no local IP address has been set [ 326.712465][T13874] dlm: cannot start dlm midcomms -107 [ 326.902966][T13883] netlink: 'syz.2.4438': attribute type 3 has an invalid length. [ 327.106339][T13892] netlink: 'syz.1.4442': attribute type 5 has an invalid length. [ 327.139024][T13894] xt_socket: unknown flags 0xc [ 327.466740][T13898] loop3: detected capacity change from 0 to 4096 [ 327.597969][T13898] NILFS (loop3): invalid segment: Checksum error in segment payload [ 327.648243][T13898] NILFS (loop3): trying rollback from an earlier position [ 327.811562][T13898] NILFS (loop3): recovery complete [ 327.855690][T13925] netlink: 'syz.4.4459': attribute type 12 has an invalid length. [ 327.863900][T13926] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 328.714088][ T4230] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 328.911897][T13961] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 329.032219][ T4230] usb 1-1: Using ep0 maxpacket: 16 [ 329.092303][T13970] netlink: 11 bytes leftover after parsing attributes in process `syz.1.4479'. [ 329.226631][ T4230] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 329.255752][ T4230] usb 1-1: config 1 has an invalid descriptor of length 15, skipping remainder of the config [ 329.316999][ T4230] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 329.363645][ T4230] usb 1-1: config 1 has no interface number 1 [ 329.393655][ T4230] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 329.473685][ T4230] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x89 has an invalid bInterval 201, changing to 7 [ 329.608715][T13995] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4492'. [ 329.663815][T13995] tc_dump_action: action bad kind [ 329.714307][ T4230] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 329.743704][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.802445][ T4230] usb 1-1: Product: syz [ 329.819300][ T4230] usb 1-1: Manufacturer: syz [ 329.850407][ T4230] usb 1-1: SerialNumber: syz [ 329.970855][ T5456] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 330.073878][ T5467] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 330.169888][ T5188] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 330.282344][ T4230] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 330.302402][ T4230] usb 1-1: found format II with max.bitrate = 0, frame size=0 [ 330.322482][ T4230] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 330.351020][ T5456] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 330.395073][ T4230] usb 1-1: USB disconnect, device number 31 [ 330.494301][ T5467] usb 2-1: unable to get BOS descriptor or descriptor too short [ 330.555928][T14011] netlink: 'syz.4.4500': attribute type 4 has an invalid length. [ 330.574180][ T5456] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 330.583351][ T5456] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.592052][ T5188] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.603116][ T5467] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.630533][ T5188] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 330.639990][ T5467] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 330.663794][ T5456] usb 4-1: Product: syz [ 330.668200][ T5456] usb 4-1: Manufacturer: syz [ 330.683013][ T5188] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 330.696356][ T5467] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 191 [ 330.713648][ T5456] usb 4-1: SerialNumber: syz [ 330.883974][ T5467] usb 2-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 330.893910][ T5188] usb 3-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 330.903155][ T5188] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.937914][ T5467] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.956479][ T5188] usb 3-1: Product: syz [ 330.960881][ T5188] usb 3-1: Manufacturer: syz [ 330.966203][ T5467] usb 2-1: Product: syz [ 330.980584][ T5467] usb 2-1: Manufacturer: syz [ 330.988424][ T5456] usb 4-1: selecting invalid altsetting 1 [ 330.994309][ T5456] speedtch 4-1:1.0: speedtch_bind: setting interface to 1 failed (-22)! [ 331.002054][T14019] netlink: 'syz.4.4504': attribute type 2 has an invalid length. [ 331.017508][ T5188] usb 3-1: SerialNumber: syz [ 331.023023][ T5467] usb 2-1: SerialNumber: syz [ 331.033790][T14019] netlink: 'syz.4.4504': attribute type 1 has an invalid length. [ 331.043973][ T5456] speedtch 4-1:1.0: usbatm_usb_probe: bind failed: -22! [ 331.053039][ T5188] usb 3-1: config 0 descriptor?? [ 331.063856][ T5467] usb 2-1: config 0 descriptor?? [ 331.084011][T13997] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 331.091081][T13997] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 331.098436][ T5456] speedtch: probe of 4-1:1.0 failed with error -22 [ 331.168950][ C0] usb 2-1: NFC: Urb failure (status -71) [ 331.178003][ T5456] usb 4-1: selecting invalid altsetting 1 [ 331.184152][ T5456] speedtch 4-1:1.1: speedtch_bind: setting interface to 1 failed (-22)! [ 331.193176][ T5456] speedtch 4-1:1.1: usbatm_usb_probe: bind failed: -22! [ 331.200379][ C0] usb 2-1: NFC: Urb failure (status -71) [ 331.217470][ T5467] usb 2-1: NFC: Unable to get FW version [ 331.231994][ T5467] pn533_usb: probe of 2-1:0.0 failed with error -71 [ 331.257096][ T5456] speedtch: probe of 4-1:1.1 failed with error -22 [ 331.313898][ T5456] usb 4-1: USB disconnect, device number 26 [ 331.413821][ T5188] usb 3-1: USB disconnect, device number 27 [ 331.437626][ T4230] usb 2-1: USB disconnect, device number 30 [ 331.779979][T14039] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20002 [ 332.047849][T14052] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4521'. [ 332.109984][T14052] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4521'. [ 332.469084][T14073] netlink: 'syz.3.4531': attribute type 5 has an invalid length. [ 332.586088][T14077] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4533'. [ 332.612026][T14077] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4533'. [ 333.012656][T14092] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4541'. [ 333.193757][T14098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4544'. [ 333.220123][T14100] loop4: detected capacity change from 0 to 16 [ 333.318177][T14100] erofs: (device loop4): mounted with root inode @ nid 36. [ 333.605029][T14110] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4550'. [ 333.736737][T14115] device veth1_to_team entered promiscuous mode [ 333.800267][T14114] device veth1_to_team left promiscuous mode [ 333.892253][T14083] loop2: detected capacity change from 0 to 32768 [ 334.037153][T14083] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.4536 (14083) [ 334.089127][T14127] loop3: detected capacity change from 0 to 1024 [ 334.146536][T14083] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 334.166366][T14133] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4560'. [ 334.203731][T14083] BTRFS info (device loop2): using free space tree [ 334.210303][T14083] BTRFS info (device loop2): has skinny extents [ 334.233771][T14133] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4560'. [ 334.284809][T14133] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4560'. [ 334.304332][T14127] hfsplus: keylen 65060 too large [ 334.662864][T14155] loop1: detected capacity change from 0 to 2048 [ 334.713756][T14083] BTRFS info (device loop2): enabling ssd optimizations [ 334.809021][T14167] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4567'. [ 334.828752][T14155] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 334.894152][T14083] VFS: could not find a valid V7 on nullb0. [ 335.329265][T13342] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 9 /dev/loop2 scanned by udevd (13342) [ 336.127354][T14206] loop1: detected capacity change from 0 to 2048 [ 336.287149][T14219] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4591'. [ 336.360842][T14206] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,errors=remount-ro,resgid=0x0000000000000000,jqfmt=vfsv0,quota,inode_readahead_blks=0x0000000000000400,. Quota mode: writeback. [ 336.508977][T14206] ext4 filesystem being mounted at /964/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.588369][T14214] loop3: detected capacity change from 0 to 8192 [ 337.002416][ T5463] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 337.583998][ T5463] usb 3-1: unable to get BOS descriptor or descriptor too short [ 337.695687][ T5463] usb 3-1: config 6 has an invalid interface number: 252 but max is 0 [ 337.723655][ T5463] usb 3-1: config 6 has no interface number 0 [ 337.753440][ T5463] usb 3-1: config 6 interface 252 altsetting 5 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 337.821521][ T5463] usb 3-1: config 6 interface 252 has no altsetting 0 [ 337.990448][T14292] tmpfs: Bad value for 'mpol' [ 338.077387][ T5463] usb 3-1: New USB device found, idVendor=1199, idProduct=6815, bcdDevice=dd.bf [ 338.103645][ T5463] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.126341][T14298] netlink: 'syz.3.4628': attribute type 3 has an invalid length. [ 338.151036][T14299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4629'. [ 338.155805][ T5463] usb 3-1: Product: syz [ 338.193821][ T5463] usb 3-1: Manufacturer: syz [ 338.195189][T14303] misc userio: Invalid payload size [ 338.214139][ T5463] usb 3-1: SerialNumber: syz [ 338.547129][ T5463] sierra 3-1:6.252: Sierra USB modem converter detected [ 338.595209][ T5463] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 338.653584][ T5463] usb 3-1: Sierra USB modem converter now attached to ttyUSB1 [ 338.709725][ T5463] usb 3-1: USB disconnect, device number 28 [ 338.750591][ T5463] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 338.833024][ T5463] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 338.874615][ T5463] sierra 3-1:6.252: device disconnected [ 339.076557][T14335] loop4: detected capacity change from 0 to 8192 [ 339.084602][ T7482] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 339.148236][T14345] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4652'. [ 339.185814][T14335] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 339.245025][T14335] REISERFS (device loop4): using ordered data mode [ 339.303291][T14350] loop2: detected capacity change from 0 to 512 [ 339.355242][T14335] reiserfs: using flush barriers [ 339.365571][ T7482] usb 1-1: Using ep0 maxpacket: 32 [ 339.410330][T14350] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 339.419130][T14335] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 339.531933][T14335] REISERFS (device loop4): checking transaction log (loop4) [ 339.620983][T14350] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.4654: bg 0: block 4: invalid block bitmap [ 339.635327][T14335] REISERFS (device loop4): Using r5 hash to sort names [ 339.642758][T14335] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 339.670707][T14335] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 339.682048][T14350] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 339.743716][T14350] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.4654: invalid indirect mapped block 1 (level 1) [ 339.765591][T14362] netlink: 'syz.3.4659': attribute type 1 has an invalid length. [ 339.824423][ T7482] usb 1-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 339.833546][ T7482] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.837708][T14350] EXT4-fs (loop2): 1 truncate cleaned up [ 339.853962][T14362] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4659'. [ 339.873784][T14350] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 339.883640][ T7482] usb 1-1: Product: syz [ 339.888582][ T7482] usb 1-1: Manufacturer: syz [ 339.893206][ T7482] usb 1-1: SerialNumber: syz [ 340.144719][ T7483] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 340.381369][ T7482] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 340.413763][ T7482] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 340.433816][ T7483] usb 2-1: Using ep0 maxpacket: 32 [ 340.487129][ T7482] snd-usb-audio: probe of 1-1:1.0 failed with error -71 [ 340.570772][ T7482] usb 1-1: USB disconnect, device number 32 [ 340.597566][ T7483] usb 2-1: config 2 has an invalid interface number: 88 but max is 0 [ 340.623340][ T7483] usb 2-1: config 2 has no interface number 0 [ 340.673170][ T7483] usb 2-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 340.749426][ T7483] usb 2-1: config 2 interface 88 has no altsetting 0 [ 340.794914][T14384] trusted_key: encrypted_key: keylen parameter is missing [ 340.805981][T14382] program syz.3.4670 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 340.935296][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 341.027573][ T7483] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 341.046957][ T7483] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.103634][ T7483] usb 2-1: Product: syz [ 341.118022][ T7483] usb 2-1: Manufacturer: syz [ 341.144364][ T7483] usb 2-1: SerialNumber: syz [ 341.207114][T14364] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 341.212235][T14396] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 341.446155][T14364] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 341.596550][T14410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4684'. [ 341.721271][ T7483] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 341.751968][ T7483] asix: probe of 2-1:2.88 failed with error -71 [ 341.815008][ T7483] usb 2-1: USB disconnect, device number 31 [ 341.821639][T14409] loop3: detected capacity change from 0 to 4096 [ 341.955968][T14409] ntfs: (device loop3): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 342.098025][T14409] ntfs: volume version 3.1. [ 342.858504][T14465] sp0: Synchronizing with TNC [ 343.284172][T14492] xt_hashlimit: size too large, truncated to 1048576 [ 343.290517][T14491] netlink: 'syz.4.4724': attribute type 1 has an invalid length. [ 343.326331][T14491] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.4724'. [ 343.381190][T14491] netlink: 'syz.4.4724': attribute type 1 has an invalid length. [ 343.562931][T14503] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4729'. [ 343.621230][T14503] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4729'. [ 343.658982][T14509] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4732'. [ 343.813749][ T5698] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 344.173790][T14536] netlink: 'syz.3.4746': attribute type 1 has an invalid length. [ 344.238107][ T5698] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 344.262507][ T5698] usb 3-1: config 0 has no interface number 0 [ 344.299469][ T5698] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 344.354045][ T5698] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 344.594116][ T5698] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 344.623684][ T5698] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.631828][ T5698] usb 3-1: Product: syz [ 344.675407][T14565] nvme_fabrics: no handler found for transport fc-raddrR+0x333:pn-0x0444444444444444+host_traddr?nn-0x11111111111111117x:pn-0x22r222. [ 344.683681][ T5698] usb 3-1: Manufacturer: syz [ 344.743654][ T5698] usb 3-1: SerialNumber: syz [ 344.765636][ T5698] usb 3-1: config 0 descriptor?? [ 344.843565][ T5698] yurex 3-1:0.50: Could not submitting URB [ 344.849608][ T5698] yurex: probe of 3-1:0.50 failed with error -5 [ 345.099623][T14581] lo speed is unknown, defaulting to 1000 [ 345.165559][ T5188] usb 3-1: USB disconnect, device number 29 [ 345.185077][T14581] lo speed is unknown, defaulting to 1000 [ 345.204364][T14581] lo speed is unknown, defaulting to 1000 [ 345.944214][ T5188] lo speed is unknown, defaulting to 1000 [ 345.942119][T14581] infiniband syz1: set active [ 346.042014][T14581] infiniband syz1: added lo [ 346.432559][T14581] RDS/IB: syz1: added [ 346.448466][T14581] smc: adding ib device syz1 with port count 1 [ 346.488381][T14581] smc: ib device syz1 port 1 has pnetid [ 346.558538][T14581] lo speed is unknown, defaulting to 1000 [ 346.631440][ T7483] lo speed is unknown, defaulting to 1000 [ 346.699979][T14631] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4792'. [ 346.999307][T14641] loop4: detected capacity change from 0 to 1024 [ 347.046606][T14643] IPv6: Can't replace route, no match found [ 347.083972][T14641] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 347.124584][T14641] hfsplus: failed to load root directory [ 347.144831][ T5188] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 347.199965][T14581] lo speed is unknown, defaulting to 1000 [ 347.454560][ T5188] usb 4-1: Using ep0 maxpacket: 8 [ 347.736237][ T5188] usb 4-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 347.754641][T14581] lo speed is unknown, defaulting to 1000 [ 347.767215][ T5188] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.802881][ T5188] usb 4-1: Product: syz [ 347.822590][ T5188] usb 4-1: Manufacturer: syz [ 347.844834][ T5188] usb 4-1: SerialNumber: syz [ 348.294375][T14581] lo speed is unknown, defaulting to 1000 [ 348.346021][ T5188] mxuport 4-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 348.367838][ T5188] mxuport: probe of 4-1:254.0 failed with error -5 [ 348.428588][ T5188] usb 4-1: USB disconnect, device number 27 [ 348.439337][T12384] cxacru 5-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 348.803308][T14581] lo speed is unknown, defaulting to 1000 [ 348.812720][T14684] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4819'. [ 348.856065][T14684] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4819'. [ 349.144977][T14695] program syz.4.4824 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 349.461361][T14708] loop0: detected capacity change from 0 to 16 [ 349.572664][T14708] erofs: (device loop0): mounted with root inode @ nid 36. [ 349.734757][T14723] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4838'. [ 349.841364][T14728] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4840'. [ 349.959707][ T13] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 349.980929][T14732] loop0: detected capacity change from 0 to 2048 [ 350.089709][ T23] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 350.116238][T14736] loop3: detected capacity change from 0 to 256 [ 350.125297][T14737] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 350.161433][T14732] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 350.183963][T14739] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4845'. [ 350.230228][ T13] usb 2-1: Using ep0 maxpacket: 32 [ 350.309463][T14732] Remounting filesystem read-only [ 350.388208][ T13] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 350.413645][ T13] usb 2-1: config 0 has no interface number 0 [ 350.422698][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 350.564247][ T23] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 350.594918][ T23] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 350.604119][ T13] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 350.616625][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.673663][ T13] usb 2-1: Product: syz [ 350.703983][ T13] usb 2-1: Manufacturer: syz [ 350.708635][ T13] usb 2-1: SerialNumber: syz [ 350.742251][ T13] usb 2-1: config 0 descriptor?? [ 350.800911][ T13] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 350.833692][ T13] usb 2-1: selecting invalid altsetting 1 [ 350.839478][ T13] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 350.854038][ T23] usb 5-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 350.882131][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.904556][ T13] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 350.933644][ T23] usb 5-1: Product: syz [ 350.953760][ T23] usb 5-1: Manufacturer: syz [ 350.963961][ T13] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 350.978767][ T23] usb 5-1: SerialNumber: syz [ 351.002839][ T13] usb 2-1: media controller created [ 351.052172][ T13] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 351.433879][ T13] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 351.437517][T14781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4866'. [ 351.452000][ T23] usb 5-1: unit 5 not found! [ 351.456704][ T23] usb 5-1: unit 0 not found! [ 351.511573][ T23] usb 5-1: USB disconnect, device number 31 [ 351.567987][ T13] usb 2-1: USB disconnect, device number 32 [ 351.601899][T14779] loop0: detected capacity change from 0 to 4096 [ 351.819291][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 351.828910][T14792] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 351.929288][T14779] attempt to access beyond end of device [ 351.929288][T14779] loop0: rw=524288, want=9007199254741160, limit=4096 [ 352.013916][T14795] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4872'. [ 352.026486][T14779] attempt to access beyond end of device [ 352.026486][T14779] loop0: rw=0, want=9007199254741160, limit=4096 [ 352.062585][T14795] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4872'. [ 352.084183][ T26] audit: type=1800 audit(1788430911.237:19): pid=14779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4865" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 352.794798][T14827] loop0: detected capacity change from 0 to 512 [ 352.904717][T14827] EXT4-fs (loop0): Test dummy encryption mode enabled [ 352.971968][T14827] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.4885: inode has both inline data and extents flags [ 353.104444][T14827] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.4885: couldn't read orphan inode 15 (err -117) [ 353.164054][T14827] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 353.219074][ T7482] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 353.446811][T14857] netlink: 'syz.4.4900': attribute type 21 has an invalid length. [ 353.515237][ T7482] usb 4-1: Using ep0 maxpacket: 8 [ 353.682731][ T7482] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 353.710141][ T7482] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 353.951360][ T7482] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 353.972881][ T7482] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 354.051815][ T7482] usb 4-1: Product: syz [ 354.063632][ T7482] usb 4-1: Manufacturer: syz [ 354.073870][ T7482] usb 4-1: SerialNumber: syz [ 354.082715][T14878] loop4: detected capacity change from 0 to 4096 [ 354.100849][ T7482] usb 4-1: config 0 descriptor?? [ 354.192564][ T7482] imon_raw 4-1:0.0: IR endpoint missing [ 354.210268][T14878] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 354.264373][T14878] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 354.302606][T14878] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 354.358883][T14878] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 354.443813][T14900] netlink: 'syz.0.4920': attribute type 15 has an invalid length. [ 354.470160][T14878] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 354.502738][ T23] usb 4-1: USB disconnect, device number 28 [ 354.616269][T14878] ntfs: volume version 3.1. [ 354.634427][T14907] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4922'. [ 354.657045][T14878] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 354.705520][T14907] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4922'. [ 354.744384][T14878] ntfs: (device loop4): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 354.817652][T14878] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 354.905116][T14878] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 355.393835][T14931] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4931'. [ 355.846749][T14959] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4947'. [ 356.241726][ T5188] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 356.668010][T14997] netlink: 'syz.1.4966': attribute type 3 has an invalid length. [ 356.684563][T14997] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4966'. [ 356.688890][ T5188] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.743648][ T5188] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 356.787346][ T5188] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 356.823632][ T5188] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.882333][ T5188] usb 5-1: config 0 descriptor?? [ 356.936137][ T5188] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 357.233354][ T5188] usb 5-1: USB disconnect, device number 32 [ 357.294702][T15030] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 357.345063][T15036] x_tables: unsorted underflow at hook 2 [ 357.513540][T15043] netlink: 'syz.1.4988': attribute type 4 has an invalid length. [ 357.521391][T15043] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4988'. [ 357.846638][T15056] loop3: detected capacity change from 0 to 512 [ 358.019969][T15068] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5001'. [ 358.107926][T15056] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 358.178133][T15056] ext4 filesystem being mounted at /1030/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 358.319436][ T13] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 358.373988][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 358.374004][ T26] audit: type=1800 audit(1788430917.537:20): pid=15056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4994" name=0AF301 dev="loop3" ino=18 res=0 errno=0 [ 358.760751][T15096] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.5010'. [ 358.764039][ T13] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 358.831033][ T13] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 358.870809][T15100] loop0: detected capacity change from 0 to 512 [ 358.914723][T15099] 8021q: adding VLAN 0 to HW filter on device bond2 [ 359.147033][T15100] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 359.164036][ T13] usb 3-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 359.166001][T15100] ext4 filesystem being mounted at /1012/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 359.183301][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.184361][T15111] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 359.191752][ T13] usb 3-1: Product: syz [ 359.236258][ T13] usb 3-1: Manufacturer: syz [ 359.251178][ T13] usb 3-1: SerialNumber: syz [ 359.294911][ T13] usb-storage 3-1:1.0: USB Mass Storage device detected [ 359.335576][ T13] usb-storage 3-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 359.340523][T15114] netlink: 'syz.4.5019': attribute type 1 has an invalid length. [ 359.542715][T15100] EXT4-fs error (device loop0): ext4_empty_dir:3139: inode #12: comm syz.0.5014: Directory hole found for htree leaf block 0 [ 359.606831][T15100] EXT4-fs (loop0): Remounting filesystem read-only [ 359.705601][ T5463] usb 3-1: USB disconnect, device number 30 [ 359.818625][T15129] loop1: detected capacity change from 0 to 1024 [ 360.004114][ T7482] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 360.254852][T15139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5031'. [ 360.292250][T15143] netlink: 'syz.1.5030': attribute type 5 has an invalid length. [ 360.334101][ T7482] usb 5-1: Using ep0 maxpacket: 8 [ 360.487897][T15148] 9p: Unknown Cache mode readahead [ 360.515735][ T7482] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.721070][T15157] netlink: 'syz.1.5039': attribute type 1 has an invalid length. [ 360.823807][ T7482] usb 5-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 360.853189][ T7482] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.905981][ T7482] usb 5-1: Product: syz [ 360.910202][ T7482] usb 5-1: Manufacturer: syz [ 360.963635][ T7482] usb 5-1: SerialNumber: syz [ 360.982822][ T7482] usb 5-1: config 0 descriptor?? [ 361.085704][ T7482] usb 5-1: bad CDC descriptors [ 361.090899][ T7482] usb 5-1: unsupported MDLM descriptors [ 361.122229][ T7482] cdc_acm 5-1:0.0: Zero length descriptor references [ 361.172412][ T7482] cdc_acm: probe of 5-1:0.0 failed with error -22 [ 361.363668][ T5463] usb 5-1: USB disconnect, device number 33 [ 361.610886][T15196] syz.3.5058[15196] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 361.611031][T15196] syz.3.5058[15196] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 361.665782][T15202] loop2: detected capacity change from 0 to 64 [ 361.974576][T15211] loop0: detected capacity change from 0 to 256 [ 362.487568][T15238] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5079'. [ 362.606964][T15245] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5082'. [ 362.639818][T15245] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.835276][T15258] loop2: detected capacity change from 0 to 8 [ 362.954255][T15258] SQUASHFS error: zlib decompression failed, data probably corrupt [ 362.976078][T15258] SQUASHFS error: Failed to read block 0x9b: -5 [ 362.982384][T15258] SQUASHFS error: Unable to read metadata cache entry [99] [ 363.027158][T15266] loop0: detected capacity change from 0 to 1764 [ 363.063457][T15258] SQUASHFS error: Unable to read inode 0x127 [ 363.136200][T15272] netlink: 'syz.3.5095': attribute type 3 has an invalid length. [ 363.513806][T15287] device sit0 entered promiscuous mode [ 363.543208][T15287] netlink: 'syz.2.5102': attribute type 1 has an invalid length. [ 363.607847][T15287] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5102'. [ 363.626351][T15294] netlink: 344 bytes leftover after parsing attributes in process `syz.3.5106'. [ 363.854887][T15302] tc_dump_action: action bad kind [ 364.011544][T15312] xt_CT: You must specify a L4 protocol and not use inversions on it [ 364.289049][T15328] ceph: Unknown parameter 'port' [ 364.379339][T15333] loop2: detected capacity change from 0 to 64 [ 364.726609][T15349] sctp: [Deprecated]: syz.3.5132 (pid 15349) Use of int in max_burst socket option. [ 364.726609][T15349] Use struct sctp_assoc_value instead [ 364.746547][T15348] dlm: non-version read from control device 36 [ 365.146613][T15371] (unnamed net_device) (uninitialized): option lacp_active: invalid value (8) [ 365.344024][T15382] xt_hashlimit: size too large, truncated to 1048576 [ 365.350811][T15382] xt_hashlimit: max too large, truncated to 1048576 [ 365.453862][T15390] netlink: 'syz.0.5153': attribute type 3 has an invalid length. [ 365.482227][T15390] netlink: 'syz.0.5153': attribute type 1 has an invalid length. [ 365.718559][T15403] loop3: detected capacity change from 0 to 16 [ 365.727780][T15404] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5159'. [ 365.800538][T15404] netlink: 252 bytes leftover after parsing attributes in process `syz.2.5159'. [ 365.849939][T15404] netlink: 'syz.2.5159': attribute type 1 has an invalid length. [ 365.862088][T15403] erofs: (device loop3): mounted with root inode @ nid 36. [ 365.873713][T15404] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5159'. [ 366.063809][T15415] xt_addrtype: ipv6 does not support BROADCAST matching [ 366.658141][T15452] loop1: detected capacity change from 0 to 1764 [ 366.776459][T15462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5188'. [ 366.972911][T15470] loop3: detected capacity change from 0 to 256 [ 367.083752][ T5188] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 367.464110][ T5188] usb 3-1: config 0 has an invalid interface number: 168 but max is 0 [ 367.492717][ T5188] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 367.531066][ T5188] usb 3-1: config 0 has no interface number 0 [ 367.541330][ T5463] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 367.554138][T15496] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 367.583813][ T5188] usb 3-1: config 0 interface 168 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 367.634490][ T5188] usb 3-1: config 0 interface 168 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 367.676883][ T5188] usb 3-1: config 0 interface 168 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 367.745087][ T5188] usb 3-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=48.98 [ 367.793623][ T5188] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.846560][ T5188] usb 3-1: config 0 descriptor?? [ 367.859895][ T5463] usb 1-1: Using ep0 maxpacket: 32 [ 367.886795][ T5188] HFC-S_USB: probe of 3-1:0.168 failed with error -5 [ 367.897495][T15508] loop1: detected capacity change from 0 to 512 [ 368.069728][T15508] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,init_itable,quota,,errors=continue. Quota mode: writeback. [ 368.091467][ T5456] usb 3-1: USB disconnect, device number 31 [ 368.098147][T15508] ext4 filesystem being mounted at /1083/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 368.166496][ T5463] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 368.212031][ T5463] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.290781][ T5463] usb 1-1: Product: syz [ 368.317601][ T5463] usb 1-1: Manufacturer: syz [ 368.350216][ T5463] usb 1-1: SerialNumber: syz [ 368.385496][ T5463] usb 1-1: config 0 descriptor?? [ 368.783223][T15524] netlink: 212168 bytes leftover after parsing attributes in process `syz.4.5217'. [ 368.808979][T15527] loop1: detected capacity change from 0 to 512 [ 368.886620][ T5463] airspy 1-1:0.0: usb_control_msg() failed -71 request 0a [ 368.904065][ T5463] airspy 1-1:0.0: Could not detect board [ 368.943675][ T5463] airspy: probe of 1-1:0.0 failed with error -71 [ 368.944394][T15527] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 368.988976][T15527] EXT4-fs (loop1): Mount option "dax=always" incompatible with ext3 [ 369.043826][ T5463] usb 1-1: USB disconnect, device number 33 [ 369.176449][T15527] gfs2: Unexpected value for 'barrier' [ 369.294240][ T5456] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 369.758157][T15547] loop3: detected capacity change from 0 to 2048 [ 369.767709][ T5456] usb 3-1: config 150 has an invalid interface number: 204 but max is 2 [ 369.786440][ T5456] usb 3-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 369.837654][ T5456] usb 3-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 369.877288][ T5456] usb 3-1: config 150 has no interface number 0 [ 369.908304][ T5456] usb 3-1: config 150 interface 204 has no altsetting 0 [ 369.971337][T15554] loop1: detected capacity change from 0 to 512 [ 370.083298][ T26] audit: type=1800 audit(1788430929.237:21): pid=15554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5231" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 370.129855][ T5456] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 370.217473][ C0] vkms_vblank_simulate: vblank timer overrun [ 370.356426][T15559] openvswitch: netlink: Actions may not be safe on all matching packets [ 370.423501][T15562] loop0: detected capacity change from 0 to 512 [ 370.511931][T15562] EXT4-fs (loop0): Ignoring removed bh option [ 370.537142][T15562] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 370.557016][ T5456] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.595599][ T5456] usb 3-1: Product: syz [ 370.602822][T15562] EXT4-fs (loop0): 1 truncate cleaned up [ 370.608858][ T5456] usb 3-1: Manufacturer: syz [ 370.612360][T15562] EXT4-fs (loop0): mounted filesystem without journal. Opts: bh,,errors=continue. Quota mode: none. [ 370.627898][ T5456] usb 3-1: SerialNumber: syz [ 370.798192][T15562] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: none. [ 370.847912][T15542] loop4: detected capacity change from 0 to 32768 [ 370.927676][ T5456] xr_serial 3-1:150.204: skipping garbage [ 370.936298][ T5456] xr_serial 3-1:150.204: invalid descriptor buffer length [ 370.946602][ T5463] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 371.002130][ T5456] usb 3-1: USB disconnect, device number 32 [ 371.023657][T15542] (syz.4.5225,15542,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 371.091742][T15542] (syz.4.5225,15542,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 371.200541][T15542] JBD2: Ignoring recovery information on journal [ 371.215393][ T5463] usb 4-1: Using ep0 maxpacket: 8 [ 371.333972][ T5463] usb 4-1: config 243 has an invalid interface number: 78 but max is 0 [ 371.352658][ T5463] usb 4-1: config 243 has no interface number 0 [ 371.362772][ T5463] usb 4-1: config 243 interface 78 has no altsetting 0 [ 371.467369][T15542] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 371.573949][ T5463] usb 4-1: New USB device found, idVendor=2639, idProduct=0011, bcdDevice=69.b0 [ 371.613854][ T5463] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.644833][ T5463] usb 4-1: Product: syz [ 371.649190][ T5463] usb 4-1: Manufacturer: syz [ 371.725826][ T5463] usb 4-1: SerialNumber: syz [ 372.055463][ T4195] ocfs2: Unmounting device (7,4) on (node local) [ 372.105560][ T5463] usb 4-1: USB disconnect, device number 29 [ 373.128984][T15656] netlink: 'syz.2.5279': attribute type 6 has an invalid length. [ 373.169687][T15656] netlink: 168 bytes leftover after parsing attributes in process `syz.2.5279'. [ 373.567447][T15682] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5291'. [ 374.213174][T15705] loop2: detected capacity change from 0 to 256 [ 374.562656][T15705] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0x01284b2f, utbl_chksum : 0xe619d30d) [ 374.802045][T15732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5317'. [ 374.847871][T15735] x_tables: duplicate entry at hook 2 [ 374.986708][T15737] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5319'. [ 375.208406][T15749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5325'. [ 375.467162][T15763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5331'. [ 375.480856][T15761] netlink: 'syz.1.5332': attribute type 16 has an invalid length. [ 375.519306][T15761] netlink: 'syz.1.5332': attribute type 17 has an invalid length. [ 375.564308][T15761] infiniband syz1: set active [ 375.591518][T15761] infiniband syz1: set active [ 375.614913][T15772] loop2: detected capacity change from 0 to 256 [ 375.625423][T15773] smb3: Bad value for 'uid' [ 375.675889][T15761] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 375.683483][T15761] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 375.787175][T15761] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 375.816069][T15761] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 375.823499][T15761] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 375.942023][T15761] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 376.008411][T15761] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 376.067002][ T5188] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 376.076361][ T5698] lo speed is unknown, defaulting to 1000 [ 376.083990][ T5463] lo speed is unknown, defaulting to 1000 [ 376.094170][T15775] netlink: 'syz.4.5338': attribute type 1 has an invalid length. [ 376.123765][T15775] netlink: 'syz.4.5338': attribute type 2 has an invalid length. [ 376.496438][ T5188] usb 4-1: not running at top speed; connect to a high speed hub [ 376.584101][ T5188] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 376.623659][ T5188] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 376.633519][T15789] loop0: detected capacity change from 0 to 4096 [ 376.667839][ T5188] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.736640][ T5188] uvcvideo 4-1:1.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 376.766144][ T5188] usb 4-1: Found UVC 1.00 device (046d:0825) [ 376.773402][ T5188] uvcvideo 4-1:1.1: No supported video formats found. [ 376.799627][T15806] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (2) [ 376.815065][ T5188] uvcvideo 4-1:1.1: Failed to initialize the device (-22). [ 376.984143][T15789] ntfs3: loop0: Failed to load $Extend. [ 377.000051][ T7483] usb 4-1: USB disconnect, device number 30 [ 377.381180][T15826] netlink: 'syz.1.5363': attribute type 1 has an invalid length. [ 377.438367][T15826] netlink: 'syz.1.5363': attribute type 2 has an invalid length. [ 377.514425][T15826] netlink: 'syz.1.5363': attribute type 1 has an invalid length. [ 377.520613][T15831] loop4: detected capacity change from 0 to 64 [ 377.522276][T15826] netlink: 'syz.1.5363': attribute type 2 has an invalid length. [ 377.522294][T15826] netlink: 'syz.1.5363': attribute type 2 has an invalid length. [ 377.701909][T15838] loop3: detected capacity change from 0 to 512 [ 377.709413][T15836] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5368'. [ 377.854353][T15842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5371'. [ 377.934631][T15838] EXT4-fs (loop3): inline encryption not supported [ 377.941683][T15838] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 378.188784][T15838] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 378.348641][T15838] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.5369: bg 0: block 248: padding at end of block bitmap is not set [ 378.416233][T15838] Quota error (device loop3): write_blk: dquota write failed [ 378.439079][T15838] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 378.490215][T15873] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5384'. [ 378.513717][T15838] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.5369: Failed to acquire dquot type 1 [ 378.575150][T15838] EXT4-fs (loop3): 1 truncate cleaned up [ 378.594388][T15838] EXT4-fs (loop3): mounted filesystem without journal. Opts: auto_da_alloc,inlinecrypt,nombcache,,errors=continue. Quota mode: writeback. [ 378.751768][T15838] Quota error (device loop3): find_block_dqentry: Quota for id 131074 referenced but not present [ 378.833637][T15838] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 131074 [ 378.873815][T15838] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.5369: Failed to acquire dquot type 1 [ 379.162265][T15903] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 379.174188][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.292012][T15907] loop4: detected capacity change from 0 to 256 [ 379.925221][T15938] tmpfs: Bad value for 'mpol' [ 379.961243][ T5698] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 379.976776][T15941] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 380.443946][ T5698] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 4 [ 380.515949][ T5698] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 380.593649][ T5698] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 144, changing to 4 [ 380.617441][T15963] program syz.4.5429 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 380.634925][T15964] validate_nla: 2 callbacks suppressed [ 380.634941][T15964] netlink: 'syz.0.5430': attribute type 1 has an invalid length. [ 380.704650][T15964] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5430'. [ 380.875789][ T5698] usb 2-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 380.900243][ T5698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.949091][ T5698] usb 2-1: Product: 㨾忄ꈀ傡﹈螖忢鵻꠮ᑿ鳏諞ݺﳠ梉蘼ﵪ䠄৿궞净隟㦡嗺࡯뉹湟둈좳梴쨠⛚䷧㜤⯎焉饝⟢嶌涜ᑞೊ命㏗嵯扰ᇡ쮔᷌ꥧ㳛큌┓ꋄἐ옉纟ڐꇀ廙㌵Ӄ볆⟀㲓頲벙鰊凖柉╀鋑筵魏왐榏壄瘊솻돰窎쬲⼒䈟࿗츩峯 [ 380.976777][ C0] vkms_vblank_simulate: vblank timer overrun [ 381.035806][T15974] loop3: detected capacity change from 0 to 512 [ 381.094238][ T5698] usb 2-1: SerialNumber: х [ 381.460576][T15974] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 381.527731][T15974] ext4 filesystem being mounted at /1109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 381.656168][ T5698] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 381.672237][ T26] audit: type=1107 audit(1788430940.827:22): pid=15989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 381.703887][ T5698] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 381.841950][ T5698] usb 2-1: USB disconnect, device number 33 [ 381.862577][T15999] netlink: 'syz.4.5445': attribute type 11 has an invalid length. [ 382.195122][ T4468] udevd[4468]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 383.082426][T16064] netlink: set zone limit has 8 unknown bytes [ 383.146102][T16067] loop4: detected capacity change from 0 to 1024 [ 383.541025][T16086] netlink: 'syz.2.5489': attribute type 2 has an invalid length. [ 383.615026][T16091] netlink: 212168 bytes leftover after parsing attributes in process `syz.0.5492'. [ 383.927776][ T5456] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 384.238685][T16121] autofs4:pid:16121:validate_dev_ioctl: path string terminator missing for cmd(0xc0189374) [ 384.344057][ T5456] usb 2-1: config 150 has an invalid interface number: 204 but max is 2 [ 384.393438][ T5456] usb 2-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 384.483630][ T5456] usb 2-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 384.543631][ T5456] usb 2-1: config 150 has no interface number 0 [ 384.549956][ T5456] usb 2-1: config 150 interface 204 has no altsetting 0 [ 384.834287][ T7483] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 384.894416][ T5456] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 384.903541][ T5456] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.933639][ T5456] usb 2-1: Product: syz [ 384.948238][ T5456] usb 2-1: Manufacturer: syz [ 384.952897][ T5456] usb 2-1: SerialNumber: syz [ 385.265397][ T5456] xr_serial 2-1:150.204: skipping garbage [ 385.271280][ T5456] xr_serial 2-1:150.204: invalid descriptor buffer length [ 385.345236][ T7483] usb 1-1: config 0 has an invalid interface number: 168 but max is 0 [ 385.350389][ T5456] usb 2-1: USB disconnect, device number 34 [ 385.366253][ T7483] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 385.443052][ T7483] usb 1-1: config 0 has no interface number 0 [ 385.450832][ T7483] usb 1-1: config 0 interface 168 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 385.468071][T16117] loop3: detected capacity change from 0 to 32768 [ 385.474064][T16150] netlink: 'syz.2.5521': attribute type 16 has an invalid length. [ 385.523298][T16150] netlink: 'syz.2.5521': attribute type 17 has an invalid length. [ 385.536913][ T7483] usb 1-1: config 0 interface 168 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 385.584051][ T7483] usb 1-1: config 0 interface 168 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 385.612881][T16150] device sit0 left promiscuous mode [ 385.655292][T16117] ea_get: extended attribute size too large: 2617245744 > INT_MAX [ 385.666120][ T7483] usb 1-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=48.98 [ 385.716053][ T7483] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.789754][ T7483] usb 1-1: config 0 descriptor?? [ 385.808554][T16150] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 385.863992][T16150] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 385.888329][ T7483] HFC-S_USB: probe of 1-1:0.168 failed with error -5 [ 385.892108][T16150] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 385.955544][T16150] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 386.014640][T16150] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 386.042994][T16150] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 386.073381][ T150] block nbd1: Attempted send on invalid socket [ 386.081260][ T150] blk_update_request: I/O error, dev nbd1, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 386.088958][T16159] loop3: detected capacity change from 0 to 2048 [ 386.095519][ T150] gfs2: error 10 reading superblock [ 386.114428][T16150] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 386.124024][ T5456] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 386.149018][T16150] device bridge_slave_0 left promiscuous mode [ 386.173262][T16150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 386.173642][ T7483] usb 1-1: USB disconnect, device number 34 [ 386.194006][T16150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 386.269473][T16150] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 386.534213][ T5456] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 386.550374][ T5456] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 386.563820][ T23] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 386.586502][ T5456] usb 5-1: config 0 has no interface number 0 [ 386.608029][ T5456] usb 5-1: config 0 interface 251 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 386.841308][ T5456] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 386.862473][ T5456] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.881186][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 386.912051][ T5456] usb 5-1: Product: syz [ 386.922041][ T5456] usb 5-1: Manufacturer: syz [ 386.929713][T16173] netlink: 'syz.3.5532': attribute type 5 has an invalid length. [ 386.963626][ T5456] usb 5-1: SerialNumber: syz [ 386.978415][ T13] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 386.985510][T16173] device  entered promiscuous mode [ 387.001434][ T5456] usb 5-1: config 0 descriptor?? [ 387.034844][ T23] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.055322][ T5456] asix: probe of 5-1:0.251 failed with error -22 [ 387.066280][ T23] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.274034][ T23] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 387.288019][T16181] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5536'. [ 387.303634][ T23] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 387.322988][ T23] usb 2-1: Product: syz [ 387.329409][ T5463] usb 5-1: USB disconnect, device number 34 [ 387.332286][ T23] usb 2-1: Manufacturer: syz [ 387.405488][ T23] hub 2-1:4.0: USB hub found [ 387.554007][ T13] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 387.583624][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.613307][ T23] hub 2-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 387.622226][ T13] usb 3-1: Product: syz [ 387.657812][ T13] usb 3-1: Manufacturer: syz [ 387.662475][ T13] usb 3-1: SerialNumber: syz [ 388.007912][ T23] usb 2-1: USB disconnect, device number 35 [ 388.064565][ T13] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 33 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 388.113488][T16207] netlink: 'syz.3.5549': attribute type 10 has an invalid length. [ 388.151236][ T13] usb 3-1: USB disconnect, device number 33 [ 388.218747][ T13] usblp0: removed [ 388.624806][T16221] netlink: 'syz.0.5556': attribute type 5 has an invalid length. [ 388.688981][T16223] loop4: detected capacity change from 0 to 512 [ 388.820521][T16223] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 388.876543][T16234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5563'. [ 388.925608][T16223] EXT4-fs (loop4): 1 truncate cleaned up [ 388.931475][T16223] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,usrquota,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,journal_ioprio=0x0000000000000004,max_batch_time=0x0000000000000003,,errors=continue. Quota mode: writeback. [ 389.001076][T16234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5563'. [ 389.148507][T16223] Invalid option length (771) for dns_resolver key [ 389.505598][T16261] netlink: 'syz.4.5570': attribute type 1 has an invalid length. [ 389.563872][T16261] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.5570'. [ 389.744868][T16271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5579'. [ 389.805194][T16271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5579'. [ 389.880101][T16276] loop3: detected capacity change from 0 to 512 [ 389.971227][T16271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5579'. [ 390.010250][T16271] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 390.018824][T16276] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 390.071650][T16277] netlink: 'syz.1.5582': attribute type 21 has an invalid length. [ 390.089673][T16277] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5582'. [ 390.225333][T16276] EXT4-fs (loop3): 1 truncate cleaned up [ 390.231161][T16276] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,usrquota,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,journal_ioprio=0x0000000000000004,max_batch_time=0x0000000000000003,,errors=continue. Quota mode: writeback. [ 390.527778][T16276] Invalid option length (771) for dns_resolver key [ 391.132063][T16321] loop4: detected capacity change from 0 to 512 [ 391.250499][T16328] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5606'. [ 391.303924][T16328] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 391.359456][T16330] SET target dimension over the limit! [ 391.524260][T16321] EXT4-fs (loop4): Ignoring removed nobh option [ 391.532828][T16321] EXT4-fs (loop4): orphan cleanup on readonly fs [ 391.615686][T16321] EXT4-fs warning (device loop4): ext4_xattr_inode_get:492: inode #11: comm syz.4.5602: ea_inode file size=1535 entry size=6 [ 391.641403][T16345] netlink: 'syz.2.5614': attribute type 3 has an invalid length. [ 391.658585][T16342] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check. [ 391.725832][T16321] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2812: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 391.809625][T16321] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #15: comm syz.4.5602: corrupted inode contents [ 391.913188][T16321] EXT4-fs error (device loop4): ext4_dirty_inode:6077: inode #15: comm syz.4.5602: mark_inode_dirty error [ 391.974691][T16321] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #15: comm syz.4.5602: corrupted inode contents [ 392.150044][T16321] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2957: inode #15: comm syz.4.5602: mark_inode_dirty error [ 392.223662][T16321] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2960: inode #15: comm syz.4.5602: mark inode dirty (error -117) [ 392.324301][T16321] EXT4-fs warning (device loop4): ext4_evict_inode:304: xattr delete (err -117) [ 392.382172][T16321] EXT4-fs (loop4): 1 orphan inode deleted [ 392.423644][T16321] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,acl,debug_want_extra_isize=0x000000000000005c,barrier,nobh,min_batch_time=0x000000000000b656,block_validity,,errors=continue. Quota mode: none. [ 392.478296][T16376] bond0: (slave ip6tnl0): refused to change device type [ 392.685235][T16381] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5631'. [ 392.827459][T16387] netlink: 'syz.4.5632': attribute type 4 has an invalid length. [ 393.082566][T16399] xt_TCPMSS: Only works on TCP SYN packets [ 393.164640][T16406] x_tables: unsorted underflow at hook 4 [ 393.426245][T16418] netlink: 'syz.3.5648': attribute type 1 has an invalid length. [ 393.462541][T16418] netlink: 'syz.3.5648': attribute type 3 has an invalid length. [ 393.496444][T16418] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5648'. [ 393.539507][T16418] NCSI netlink: No device for ifindex 2986344450 [ 393.746369][T16430] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5655'. [ 393.797019][T16430] netlink: 10 bytes leftover after parsing attributes in process `syz.0.5655'. [ 393.831949][T16424] loop4: detected capacity change from 0 to 4096 [ 393.854082][T16430] bond0: (slave bond_slave_0): Releasing backup interface [ 393.902643][T16430] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 394.164905][T16424] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 394.676532][T16467] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5673'. [ 394.709078][T16470] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5672'. [ 395.358532][ T5189] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 395.511541][T16518] netlink: 'syz.1.5697': attribute type 3 has an invalid length. [ 395.580708][T16520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5698'. [ 395.624030][T16520] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5698'. [ 395.762116][T16530] netlink: 'syz.1.5703': attribute type 2 has an invalid length. [ 395.803923][ T5189] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 395.826539][T16532] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5704'. [ 395.834364][ T5189] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 395.853713][T16530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5703'. [ 395.996099][T16540] (unnamed net_device) (uninitialized): ARP monitoring cannot be used with MII monitoring [ 396.064149][ T5189] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 396.093614][ T5189] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.110990][T16544] ubi0: attaching mtd0 [ 396.119460][T16546] openvswitch: netlink: Missing key (keys=40, expected=80) [ 396.143695][ T5189] usb 3-1: Product: syz [ 396.147929][ T5189] usb 3-1: Manufacturer: syz [ 396.162573][T16544] ubi0: scanning is finished [ 396.188135][ T5189] usb 3-1: SerialNumber: syz [ 396.193981][T16544] ubi0: empty MTD device detected [ 396.327853][T16552] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 396.383879][T16544] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 396.414156][T16544] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 396.451189][T16544] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 396.493712][T16544] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 396.523703][T16544] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 396.559974][T16544] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 396.613702][T16544] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2477972366 [ 396.693760][T16544] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 396.708257][ T5189] usb 3-1: 0:1 : does not exist [ 396.728183][ T5189] usb 3-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x300, type = 0 [ 396.767658][T16553] ubi0: background thread "ubi_bgt0d" started, PID 16553 [ 396.825732][ T5189] usb 3-1: unit 0 not found! [ 396.933997][ T5189] usb 3-1: USB disconnect, device number 34 [ 397.215944][T16579] loop1: detected capacity change from 0 to 8 [ 397.252445][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 397.367479][T16586] comedi comedi0: 8255: I/O port conflict (0x5,4) [ 397.431592][T16586] comedi comedi0: 8255: I/O port conflict (0x4,4) [ 397.444398][T16579] SQUASHFS error: xz decompression failed, data probably corrupt [ 397.452210][T16579] SQUASHFS error: Failed to read block 0x108: -5 [ 397.503773][T16586] comedi comedi0: 8255: I/O port conflict (0x6,4) [ 397.510322][T16579] SQUASHFS error: Unable to read metadata cache entry [106] [ 397.523686][T16586] comedi comedi0: 8255: I/O port conflict (0x800afa3,4) [ 397.554801][T16579] SQUASHFS error: Unable to read inode 0x11f [ 397.583675][T16586] comedi comedi0: 8255: I/O port conflict (0x7f,4) [ 397.622305][T16586] comedi comedi0: 8255: I/O port conflict (0x8,4) [ 397.622357][T16598] netlink: 'syz.4.5735': attribute type 4 has an invalid length. [ 397.658833][T16586] comedi comedi0: 8255: I/O port conflict (0x2,4) [ 397.723880][T16598] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5735'. [ 397.726118][T16586] comedi comedi0: 8255: I/O port conflict (0x9,4) [ 397.802375][T16586] comedi comedi0: 8255: I/O port conflict (0x9,4) [ 397.803677][T16598] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 398.762057][T16630] loop3: detected capacity change from 0 to 4096 [ 398.823776][T16643] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 399.046292][T16652] netlink: 'syz.1.5761': attribute type 1 has an invalid length. [ 399.232314][T16658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5764'. [ 399.576343][T16675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5773'. [ 399.793890][T16686] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5778'. [ 399.802984][T16686] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5778'. [ 400.185447][T16706] loop3: detected capacity change from 0 to 2048 [ 400.281066][T16714] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5792'. [ 400.340246][T16706] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 400.353821][T16714] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 400.459248][T16722] netlink: 140 bytes leftover after parsing attributes in process `syz.2.5796'. [ 400.509307][T16722] netlink: 10 bytes leftover after parsing attributes in process `syz.2.5796'. [ 400.559569][T16722] bond0: (slave bond_slave_0): Releasing backup interface [ 400.578432][T16727] xt_TCPMSS: Only works on TCP SYN packets [ 400.624331][T16722] device bond_slave_0 left promiscuous mode [ 400.684449][T16722] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 400.873776][T16739] ubi: mtd0 is already attached to ubi0 [ 401.263867][ T23] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 401.317208][T16763] infiniband syz1: set active [ 401.345707][T16763] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 401.382379][T16763] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 401.433264][T16763] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 401.486495][T16763] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 401.663507][ T7482] lo speed is unknown, defaulting to 1000 [ 401.714991][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.744017][ T23] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 401.794591][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 401.863406][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 196, setting to 64 [ 401.903067][T16775] ubi: mtd0 is already attached to ubi0 [ 401.932801][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 402.276495][T16791] vers=2.0 not permitted when mounting with smb3 [ 402.276495][T16791] [ 402.277299][ T23] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 402.328015][T16791] CIFS: VFS: vers=2.0 not permitted when mounting with smb3 [ 402.333759][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.343611][ T23] usb 1-1: Product: syz [ 402.356833][ T23] usb 1-1: Manufacturer: syz [ 402.388342][ T23] usb 1-1: SerialNumber: syz [ 402.449803][ T23] usb 1-1: config 0 descriptor?? [ 402.506485][T16746] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 402.565972][ T23] garmin_gps 1-1:0.0: Garmin GPS usb/tty converter detected [ 402.595134][ T23] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 402.616746][T16806] loop4: detected capacity change from 0 to 512 [ 402.630654][ T23] garmin_gps: probe of ttyUSB0 failed with error -8 [ 402.783055][T16806] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 402.935103][ T5189] usb 1-1: USB disconnect, device number 35 [ 402.949868][ T5189] garmin_gps 1-1:0.0: device disconnected [ 402.965025][T16806] Quota error (device loop4): find_tree_dqentry: Getting block too big (196613 >= 6) [ 403.015694][T16806] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 403.082533][T16806] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.5837: Failed to acquire dquot type 1 [ 403.183287][T16806] EXT4-fs (loop4): 1 truncate cleaned up [ 403.224442][T16806] EXT4-fs (loop4): mounted filesystem without journal. Opts: lazytime,discard,nodelalloc,minixdf,min_batch_time=0x0000000000000002,noinit_itable,dioread_nolock,,errors=continue. Quota mode: writeback. [ 403.517800][T16806] Quota error (device loop4): find_tree_dqentry: Getting block too big (196613 >= 6) [ 403.564141][T16806] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 403.630771][T16806] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.5837: Failed to acquire dquot type 1 [ 403.756873][T16844] netlink: 'syz.2.5852': attribute type 1 has an invalid length. [ 403.783663][T16844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5852'. [ 403.926852][ T4230] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 404.177481][T16858] netlink: 'syz.2.5860': attribute type 5 has an invalid length. [ 404.363735][ T4230] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 404.403818][ T4230] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 404.454591][ T4230] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 404.509462][T16871] loop4: detected capacity change from 0 to 512 [ 404.718913][T16871] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 404.723875][ T4230] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 404.769418][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.789563][ T4230] usb 1-1: Product: syz [ 404.794108][ T4230] usb 1-1: Manufacturer: syz [ 404.798874][ T4230] usb 1-1: SerialNumber: syz [ 404.813965][T16871] ext4 filesystem being mounted at /1066/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 404.864960][T16871] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #15: comm syz.4.5866: corrupted xattr block 33 [ 404.930701][ T4230] cdc_ncm 1-1:1.0: skipping garbage [ 404.939594][ T4230] usb 1-1: selecting invalid altsetting 1 [ 405.383884][ T4230] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 405.400134][ T4230] cdc_ncm 1-1:1.0: bind() failure [ 405.453909][ T4230] usb 1-1: USB disconnect, device number 36 [ 405.564457][ T5189] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 405.740355][T16922] netlink: 'syz.4.5890': attribute type 2 has an invalid length. [ 405.774659][T16922] netlink: 'syz.4.5890': attribute type 1 has an invalid length. [ 405.914940][ T5189] usb 4-1: not running at top speed; connect to a high speed hub [ 406.023971][ T5189] usb 4-1: config 5 has an invalid interface number: 32 but max is 0 [ 406.038755][ T5189] usb 4-1: config 5 has no interface number 0 [ 406.075473][ T5189] usb 4-1: config 5 interface 32 has no altsetting 0 [ 406.236329][T16944] netlink: 'syz.1.5899': attribute type 1 has an invalid length. [ 406.264466][ T5189] usb 4-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=a2.76 [ 406.273655][T16944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5899'. [ 406.284064][T16946] netlink: 'syz.4.5901': attribute type 21 has an invalid length. [ 406.284526][ T5189] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.349561][T16946] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5901'. [ 406.392401][ T5189] usb 4-1: Product: syz [ 406.415308][ T5189] usb 4-1: Manufacturer: syz [ 406.437100][ T5189] usb 4-1: SerialNumber: syz [ 406.805898][ T5189] usbhid 4-1:5.32: couldn't find an input interrupt endpoint [ 406.854010][ T5189] usb 4-1: USB disconnect, device number 31 [ 407.046724][T16969] netlink: 'syz.1.5913': attribute type 1 has an invalid length. [ 407.087726][T16972] openvswitch: netlink: Unknown key attributes 20000000 [ 407.118196][T16973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5914'. [ 407.793791][T16993] device bridge_slave_1 left promiscuous mode [ 407.800129][T16993] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.836859][T16955] loop2: detected capacity change from 0 to 32768 [ 407.915909][T16993] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 408.498300][ T23] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 408.774850][T17039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5947'. [ 408.995590][ T23] usb 1-1: config 0 has an invalid interface number: 147 but max is 0 [ 409.023605][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 409.085031][ T23] usb 1-1: config 0 has no interface number 0 [ 409.091210][ T23] usb 1-1: config 0 interface 147 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 409.173612][ T23] usb 1-1: config 0 interface 147 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 409.214454][T17053] CIFS: Attempting to mount \\127.0.0.1\share [ 409.220780][ T23] usb 1-1: config 0 interface 147 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 409.257562][T17053] CIFS: VFS: Error connecting to socket. Aborting operation. [ 409.310864][T17053] CIFS: VFS: cifs_mount failed w/return code = -101 [ 409.581021][ T23] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.03 [ 409.611046][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.663616][ T23] usb 1-1: Product: syz [ 409.667936][ T23] usb 1-1: Manufacturer: syz [ 409.692991][ T23] usb 1-1: SerialNumber: syz [ 409.713400][T17073] netlink: 'syz.4.5964': attribute type 3 has an invalid length. [ 409.725134][ T23] usb 1-1: config 0 descriptor?? [ 409.735261][T17064] loop1: detected capacity change from 0 to 4096 [ 409.754114][T17012] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 409.853900][ T23] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 409.877380][T17064] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 410.022855][ T4271] usb 1-1: Failed to submit usb control message: -71 [ 410.030575][ T23] usb 1-1: USB disconnect, device number 37 [ 410.053947][ T4271] usb 1-1: unable to send the bmi data to the device: -71 [ 410.101610][ T4271] usb 1-1: unable to get target info from device [ 410.142085][ T4271] usb 1-1: could not get target info (-71) [ 410.162537][ T4271] usb 1-1: could not probe fw (-71) [ 410.662651][T17106] loop4: detected capacity change from 0 to 1024 [ 410.721244][T17109] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5980'. [ 410.900420][T17083] loop2: detected capacity change from 0 to 32768 [ 410.957094][T17114] netlink: 'syz.3.5982': attribute type 10 has an invalid length. [ 410.965441][T17083] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 scanned by syz.2.5966 (17083) [ 411.043739][T17106] hfsplus: cannot replace xattr [ 411.074791][T17114] bond0: (slave wlan1): Opening slave failed [ 411.097773][T17083] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 411.144126][T17083] BTRFS info (device loop2): enabling ssd optimizations [ 411.187646][T17083] BTRFS info (device loop2): not using ssd optimizations [ 411.243762][T17083] BTRFS info (device loop2): turning off barriers [ 411.250245][T17083] BTRFS info (device loop2): use no compression [ 411.308281][T17083] BTRFS info (device loop2): using free space tree [ 411.336644][T17124] netdevsim netdevsim0: Firmware load for './file0/file0/..' refused, path contains '..' component [ 411.353288][T17083] BTRFS info (device loop2): has skinny extents [ 411.630773][T17145] netlink: 'syz.0.5992': attribute type 1 has an invalid length. [ 412.711826][T17190] device geneve0 entered promiscuous mode [ 413.075292][ T26] audit: type=1400 audit(1788431228.240:23): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3AF4F9904E7FDB3635A70D23C73EEAF23A2F503280080CA26230668AD9DCF8B061228F8599D34E45087D21AA56759E1651B3DD467BDEF390C76D pid=17200 comm="syz.0.6015" [ 413.102948][ C1] vkms_vblank_simulate: vblank timer overrun [ 413.443846][T17220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6026'. [ 413.514728][T17227] loop4: detected capacity change from 0 to 64 [ 413.833887][T17243] netlink: 148 bytes leftover after parsing attributes in process `syz.3.6035'. [ 414.017822][T17243] netlink: 148 bytes leftover after parsing attributes in process `syz.3.6035'. [ 414.050204][T17253] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 414.064033][T17255] SET target dimension over the limit! [ 414.272982][T17265] netlink: 'syz.1.6047': attribute type 4 has an invalid length. [ 414.323763][T17265] netlink: 'syz.1.6047': attribute type 30 has an invalid length. [ 414.362036][T17270] xt_CT: You must specify a L4 protocol and not use inversions on it [ 414.514027][T17277] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 414.927780][T17305] netlink: 312 bytes leftover after parsing attributes in process `syz.3.6066'. [ 415.053636][T17305] netlink: 'syz.3.6066': attribute type 1 has an invalid length. [ 415.208320][T17322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6075'. [ 415.516440][T17337] netlink: 'syz.2.6082': attribute type 3 has an invalid length. [ 415.549575][T17340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6083'. [ 415.603397][T17343] xt_NFQUEUE: number of total queues is 0 [ 415.613664][T17340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6083'. [ 415.843039][T17353] netlink: 'syz.1.6091': attribute type 8 has an invalid length. [ 416.214045][ T5466] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 416.347145][T17374] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6101'. [ 416.429547][T17319] loop4: detected capacity change from 0 to 32768 [ 416.582450][ T5466] usb 1-1: not running at top speed; connect to a high speed hub [ 416.874065][ T5466] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 416.893328][ T5466] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.923682][ T5466] usb 1-1: Product: syz [ 416.934022][ T5466] usb 1-1: Manufacturer: syz [ 416.948897][ T5466] usb 1-1: SerialNumber: syz [ 417.005523][ T5466] keyspan 1-1:1.0: Keyspan 4 port adapter converter detected [ 417.046084][ T5466] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 417.085881][ T5466] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 417.124307][ T5466] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 417.140073][ T1107] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 417.183874][ T5466] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 417.227167][ C0] usb 1-1: malformed indat packet [ 417.330803][T17398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6111'. [ 417.448015][ T5466] usb 1-1: USB disconnect, device number 38 [ 417.478989][ T5466] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 417.534303][ T1107] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 417.558657][ T5466] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 417.580104][T17319] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 417.594067][ T1107] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.675242][ T1107] usb 3-1: config 1 interface 0 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 0 [ 417.698606][ T5466] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 417.759173][ T1107] usb 3-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 417.786820][ T5466] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 417.826858][ T1107] usb 3-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 417.840236][ T5466] keyspan 1-1:1.0: device disconnected [ 417.849885][T17408] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6116'. [ 417.880880][ T1107] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.998143][ T4195] ocfs2: Unmounting device (7,4) on (node local) [ 418.158061][ T1107] snd-usb-caiaq 3-1:1.0: invalid EPs [ 418.163433][ T1107] usb 3-1: unable to init card! (ret=-22) [ 418.207612][ T1107] snd-usb-caiaq: probe of 3-1:1.0 failed with error -22 [ 418.434217][ T1107] usb 3-1: USB disconnect, device number 35 [ 418.698880][ T7483] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 419.132788][T17447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6134'. [ 419.203672][T17447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6134'. [ 419.274760][ T7483] usb 5-1: config 1 interface 0 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 419.578455][ T7483] usb 5-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 419.608107][ T7483] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.656812][ T7483] usb 5-1: Product: syz [ 419.661038][ T7483] usb 5-1: Manufacturer: syz [ 419.682411][T17470] binfmt_misc: register: failed to install interpreter file ./file1 [ 419.713628][ T7483] usb 5-1: SerialNumber: syz [ 420.056113][ T7483] scsi host1: uas [ 420.074071][ T4271] scsi 1:0:0:0: tag#24 sense submit err -2 uas-tag 1 inflight: s-st a-in a-cmd s-cmd [ 420.084322][ T4271] scsi 1:0:0:0: tag#24 CDB: Inquiry 12 00 00 00 24 00 [ 420.173998][ T1201] scsi 1:0:0:0: tag#24 sense submit err -2 uas-tag 1 inflight: s-st a-in a-cmd s-cmd [ 420.184503][ T1201] scsi 1:0:0:0: tag#24 CDB: Inquiry 12 00 00 00 24 00 [ 420.232977][ T7483] usb 5-1: USB disconnect, device number 35 [ 420.533699][T17506] x_tables: duplicate underflow at hook 1 [ 420.911229][T17524] netlink: 'syz.1.6170': attribute type 4 has an invalid length. [ 420.964863][T17524] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6170'. [ 421.027894][T17524] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 421.130584][T17531] gre0: Master is either lo or non-ether device [ 421.757896][ T26] audit: type=1400 audit(1788431236.920:24): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=17563 comm="syz.0.6192" [ 421.773892][ T1107] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 422.306581][ T1107] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 422.336230][ T1107] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 422.391211][ T1107] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 422.434871][T17604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6209'. [ 422.483640][ T1107] usb 4-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 422.483809][T17604] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6209'. [ 422.492993][ T1107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.577173][ T1107] ims_pcu 4-1:1.0: Missing CDC union descriptor [ 422.632801][ T1107] ims_pcu: probe of 4-1:1.0 failed with error -22 [ 422.639708][T17607] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 422.711357][T17610] netlink: 8752 bytes leftover after parsing attributes in process `syz.0.6212'. [ 423.654716][ T4188] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 424.023975][ T4188] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 424.050795][ T4188] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 424.252048][T17667] xt_CONNSECMARK: invalid mode: 0 [ 424.265533][ T4188] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 424.290547][ T4188] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.333641][ T4188] usb 5-1: Product: syz [ 424.356409][ T4188] usb 5-1: Manufacturer: syz [ 424.377453][ T4188] usb 5-1: SerialNumber: syz [ 424.455425][ T4188] usb 5-1: bad CDC descriptors [ 424.512829][ T1107] usb 4-1: USB disconnect, device number 32 [ 424.694532][ T7482] usb 5-1: USB disconnect, device number 36 [ 425.116237][T17698] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6254'. [ 425.242181][T17702] CIFS: VFS: bad security option: krb5i [ 425.503769][T17713] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6261'. [ 425.533772][T17713] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6261'. [ 425.659001][T17674] loop2: detected capacity change from 0 to 32768 [ 425.892381][T17674] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.6242 (17674) [ 425.996170][T17674] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 426.026187][T17674] BTRFS info (device loop2): setting nodatasum [ 426.032429][T17674] BTRFS info (device loop2): force zlib compression, level 3 [ 426.091512][T17674] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 426.150735][T17674] BTRFS info (device loop2): use lzo compression, level 0 [ 426.220074][T17674] BTRFS info (device loop2): turning on flush-on-commit [ 426.247715][T17674] BTRFS info (device loop2): enabling auto defrag [ 426.278111][T17674] BTRFS info (device loop2): max_inline at 4096 [ 426.313682][T17674] BTRFS info (device loop2): using free space tree [ 426.349788][T17674] BTRFS info (device loop2): has skinny extents [ 426.666425][T17765] netlink: 'syz.0.6280': attribute type 10 has an invalid length. [ 426.803667][T17674] BTRFS info (device loop2): enabling ssd optimizations [ 426.878144][T17765] team0: Device hsr_slave_0 failed to register rx_handler [ 427.158978][T17781] netlink: 'syz.1.6285': attribute type 11 has an invalid length. [ 427.556715][T17797] xt_l2tp: missing protocol rule (udp|l2tpip) [ 427.589836][T17785] loop3: detected capacity change from 0 to 4096 [ 427.855856][T17806] netlink: 'syz.4.6299': attribute type 21 has an invalid length. [ 427.894741][T17806] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6299'. [ 427.935428][T17806] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6299'. [ 428.414788][T17785] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 428.527344][T17819] loop4: detected capacity change from 0 to 1024 [ 428.703077][T17819] hfsplus: invalid file type 0177777 for inode 2 [ 428.743781][T17819] hfsplus: failed to load root directory [ 428.876857][T17830] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6309'. [ 429.104979][T17834] loop3: detected capacity change from 0 to 1024 [ 429.117953][T17836] qrtr: Invalid version 0 [ 429.145036][ T1107] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 429.153496][T17838] loop2: detected capacity change from 0 to 256 [ 429.218877][T17834] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 429.317453][T17834] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 429.449874][ T1107] usb 5-1: Using ep0 maxpacket: 16 [ 429.468752][ T4248] hfsplus: b-tree write err: -5, ino 25 [ 429.474783][ T4248] hfsplus: b-tree write err: -5, ino 4 [ 429.501898][T17842] libceph: resolve '0..' (ret=-3): failed [ 429.550023][ T4248] hfsplus: b-tree write err: -5, ino 2 [ 429.674178][ T1107] usb 5-1: config 0 has an invalid descriptor of length 141, skipping remainder of the config [ 429.709681][ T1107] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 33216, setting to 1024 [ 429.783623][ T1107] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 429.794747][T17854] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6321'. [ 429.849300][ T1107] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 430.046158][ T1107] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 430.083615][ T1107] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 430.091784][ T1107] usb 5-1: Manufacturer: syz [ 430.109954][T17865] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 430.165437][ T1107] usb 5-1: config 0 descriptor?? [ 430.194279][T17819] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 430.227554][T17870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6329'. [ 430.541087][ T5467] usb 5-1: USB disconnect, device number 37 [ 430.630638][ T23] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 431.113958][ T23] usb 2-1: config 0 has an invalid interface number: 83 but max is 0 [ 431.123820][ T23] usb 2-1: config 0 has no interface number 0 [ 431.129970][ T23] usb 2-1: config 0 interface 83 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 4 [ 431.211850][ T23] usb 2-1: config 0 interface 83 altsetting 0 endpoint 0x82 has invalid maxpacket 246, setting to 64 [ 431.238441][T17913] netlink: 'syz.0.6350': attribute type 1 has an invalid length. [ 431.433998][ T23] usb 2-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 431.473691][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.475515][ T1107] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 431.506796][ T23] usb 2-1: Product: syz [ 431.511216][ T23] usb 2-1: Manufacturer: syz [ 431.564411][ T23] usb 2-1: SerialNumber: syz [ 431.588305][ T23] usb 2-1: config 0 descriptor?? [ 431.624548][T17875] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 431.668594][ T23] redrat3 2-1:0.83: Couldn't find all endpoints [ 431.757673][T17935] loop4: detected capacity change from 0 to 256 [ 431.808292][ T1107] usb 3-1: Using ep0 maxpacket: 8 [ 431.948452][ T1107] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.989246][ T1107] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 432.050024][ T1107] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 432.109580][ T1107] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 432.153634][ T1107] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.224693][ T1107] usb 3-1: config 0 descriptor?? [ 432.241787][ T5192] usb 2-1: USB disconnect, device number 36 [ 432.271333][T17943] loop4: detected capacity change from 0 to 4096 [ 432.627477][ T5192] usb 3-1: USB disconnect, device number 36 [ 433.112315][T17978] netlink: 'syz.4.6382': attribute type 32 has an invalid length. [ 433.182705][T17980] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6383'. [ 433.262863][T17980] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 433.517987][T17998] Unsupported ieee802154 address type: 0 [ 433.614731][T18003] netlink: 'syz.2.6395': attribute type 1 has an invalid length. [ 433.637291][T18006] netlink: 'syz.4.6396': attribute type 1 has an invalid length. [ 433.655917][T18006] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 433.824505][T18015] netlink: 'syz.0.6400': attribute type 1 has an invalid length. [ 434.140660][T18028] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6408'. [ 434.804509][T18066] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6426'. [ 434.823649][T18065] usb usb8: usbfs: process 18065 (syz.2.6425) did not claim interface 0 before use [ 434.985688][ T7483] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 435.443847][ T7483] usb 5-1: config 8 has an invalid interface number: 80 but max is 0 [ 435.469341][ T5467] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 435.475168][ T7483] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 435.574299][ T7483] usb 5-1: config 8 has no interface number 0 [ 435.605787][ T7483] usb 5-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0xE7, skipping [ 435.668574][ T7483] usb 5-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 435.709154][ T7483] usb 5-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 435.745096][ T7483] usb 5-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 435.791856][ T7483] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 435.845487][ T7483] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.884009][ T5467] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 80, setting to 64 [ 435.945387][ T5467] usb 3-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice= 0.00 [ 435.975459][ T7483] usb 5-1: NFC: intf ffff88801f52f000 id ffffffff8cb63620 [ 435.985768][ T5467] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.035066][ T5467] usb 3-1: config 0 descriptor?? [ 436.074608][T18080] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 436.105547][ T5467] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input29 [ 436.205878][T18100] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 436.228786][ T5192] usb 5-1: USB disconnect, device number 38 [ 436.320130][ T3543] bcm5974 3-1:0.0: could not read from device [ 436.350066][ T5467] usb 3-1: USB disconnect, device number 37 [ 436.365970][ T3543] bcm5974 3-1:0.0: could not read from device [ 436.803144][T18114] loop3: detected capacity change from 0 to 1024 [ 436.973801][T18114] hfsplus: Filesystem is marked locked, mounting read-only. [ 437.057907][T18114] hfsplus: filesystem is marked locked, leaving read-only. [ 437.071435][T18091] loop1: detected capacity change from 0 to 32768 [ 437.392381][T18134] loop2: detected capacity change from 0 to 512 [ 437.746154][T18091] XFS (loop1): Mounting V5 Filesystem [ 437.823011][T18134] EXT4-fs (loop2): Test dummy encryption mode enabled [ 437.861530][T18150] tipc: Started in network mode [ 437.956349][T18134] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.6457: inode has both inline data and extents flags [ 437.974117][T18150] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 437.994151][T18134] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.6457: couldn't read orphan inode 15 (err -117) [ 438.029576][T18150] tipc: Enabled bearer , priority 10 [ 438.081102][T18134] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 438.096406][T18091] XFS (loop1): Ending clean mount [ 438.282357][ T4191] XFS (loop1): Unmounting Filesystem [ 438.379472][T18163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6467'. [ 438.535208][T18166] [U] [ 438.549522][T18168] loop2: detected capacity change from 0 to 1024 [ 438.699693][T18174] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 438.900152][T18178] loop4: detected capacity change from 0 to 512 [ 438.977610][T18178] EXT4-fs (loop4): Test dummy encryption mode enabled [ 439.009527][T18178] EXT4-fs (loop4): Test dummy encryption mode enabled [ 439.073829][T18178] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 439.104737][ T7482] tipc: Node number set to 4269801488 [ 439.210141][T18178] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,dioread_nolock,inode_readahead_blks=0x0000000000000020,i_version,minixdf,nouid32,errors=remount-ro,data_err=abort,test_dummy_encryption,max_dir_size_kb=0x0000000000080008,. Quota mode: none. [ 439.283413][T18181] loop3: detected capacity change from 0 to 4096 [ 439.659702][T18181] ntfs3: loop3: ino=3, Correct links count -> 2. [ 439.765402][T18203] binder: 18202:18203 ioctl c0306201 2000000001c0 returned -22 [ 439.792896][T18206] loop1: detected capacity change from 0 to 64 [ 439.965488][ T7482] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 440.095796][T18212] loop2: detected capacity change from 0 to 512 [ 440.185582][T18212] EXT4-fs (loop2): Ignoring removed orlov option [ 440.185622][T18212] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 440.283720][T18212] EXT4-fs error (device loop2): ext4_iget_extra_inode:4573: inode #15: comm syz.2.6488: corrupted in-inode xattr [ 440.294953][T18212] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.6488: couldn't read orphan inode 15 (err -117) [ 440.295458][T18212] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,orlov,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,user_xattr,nogrpid,init_itable=0x0000000000400fff,,errors=continue. Quota mode: none. [ 440.444016][ T7482] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 440.573537][T18222] loop1: detected capacity change from 0 to 64 [ 440.641976][T18224] loop3: detected capacity change from 0 to 512 [ 440.664028][ T7482] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 440.664062][ T7482] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.664083][ T7482] usb 1-1: Product: syz [ 440.664107][ T7482] usb 1-1: Manufacturer: syz [ 440.664123][ T7482] usb 1-1: SerialNumber: syz [ 440.737117][T18222] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 440.742752][T18224] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 440.742752][T18224] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 440.742752][T18224] [ 440.742814][T18224] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 440.874367][T18228] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 441.012416][ T7482] snd-usb-6fire 1-1:1.0: invalid firmware version in device: be b3 00 00. please reconnect to power. if this failure still happens, check your firmware installation. [ 441.012458][ T7482] snd-usb-6fire: probe of 1-1:1.0 failed with error -22 [ 441.020249][T18224] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 441.021703][T18224] Quota error (device loop3): write_blk: dquota write failed [ 441.021879][T18224] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 441.021913][T18224] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.6494: Failed to acquire dquot type 0 [ 441.035260][T18224] EXT4-fs (loop3): 1 truncate cleaned up [ 441.035290][T18224] EXT4-fs (loop3): mounted filesystem without journal. Opts: lazytime,noblock_validity,inode_readahead_blks=0x0000000000001000,barrier=0x0000000000000000,journal_dev=0x0000000000000005,dioread_lock,noacl,noinit_itable,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 441.085777][T18224] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 441.307060][ T7482] usb 1-1: USB disconnect, device number 39 [ 441.592843][ C0] vkms_vblank_simulate: vblank timer overrun [ 441.733010][T18249] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,usrquota,,errors=continue. Quota mode: writeback. [ 441.733119][T18249] ext4 filesystem being mounted at /1349/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 442.216114][T18269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6513'. [ 442.783951][ T7482] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 443.064133][T18315] IPVS: ip_vs_edit_dest(): server weight less than zero [ 443.256515][T18323] genirq: Flags mismatch irq 32. 00000000 (comedi_parport) vs. 00000000 (virtio1-output.0) [ 443.498689][ T7483] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 443.528844][ T7482] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 443.558358][ T7482] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.598802][ T7482] usb 4-1: Product: syz [ 443.623607][ T7482] usb 4-1: Manufacturer: syz [ 443.653602][ T7482] usb 4-1: SerialNumber: syz [ 443.805122][ T7483] usb 1-1: Using ep0 maxpacket: 16 [ 443.984009][ T7483] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 444.012312][ T7483] usb 1-1: config 0 has no interface number 0 [ 444.039089][ T7483] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 444.282397][ T7483] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 444.311846][ T7483] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 444.342216][ T7483] usb 1-1: Product: syz [ 444.372591][ T7483] usb 1-1: SerialNumber: syz [ 444.405311][ T7483] usb 1-1: config 0 descriptor?? [ 444.488701][ T7483] cm109 1-1:0.8: invalid payload size 208, expected 4 [ 444.519638][ T7483] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input31 [ 444.704572][ T23] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 445.195393][ T7483] usb 4-1: USB disconnect, device number 33 [ 445.241415][ C1] cm109 1-1:0.8: cm109_urb_irq_callback: urb status -71 [ 445.248421][ C1] ------------[ cut here ]------------ [ 445.254592][ C1] URB ffff88801e842500 submitted while active [ 445.261145][ C1] WARNING: CPU: 1 PID: 20 at drivers/usb/core/urb.c:378 usb_submit_urb+0xfba/0x18d0 [ 445.270661][ C1] Modules linked in: [ 445.274575][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 445.281978][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 445.292049][ C1] RIP: 0010:usb_submit_urb+0xfba/0x18d0 [ 445.297616][ C1] Code: c5 8a 44 89 ea e8 f6 63 d7 03 e9 f3 fb ff ff e8 7c 27 97 fb c6 05 1f 6f 95 07 01 48 c7 c7 e0 2f c5 8a 48 89 de e8 96 81 d3 03 <0f> 0b e9 bc f0 ff ff e8 5a 27 97 fb eb 1f e8 53 27 97 fb 44 8b 64 [ 445.317227][ C1] RSP: 0018:ffffc90000da7618 EFLAGS: 00010046 [ 445.323391][ C1] RAX: 84b22974a7803000 RBX: ffff88801e842500 RCX: 0000000000040000 [ 445.331477][ C1] RDX: ffffc90002309000 RSI: 0000000000006734 RDI: 0000000000006735 [ 445.339450][ C1] RBP: 000000000000000f R08: ffff8880b912795b R09: 1ffff11017224f2b [ 445.347431][ C1] R10: dffffc0000000000 R11: ffffed1017224f2c R12: 0000000000000a20 [ 445.355581][ C1] R13: ffff88804f562030 R14: ffff88801e842508 R15: dffffc0000000000 [ 445.363577][ C1] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 445.372686][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 445.379366][ C1] CR2: 0000001b32721ff8 CR3: 000000005a83b000 CR4: 00000000003506e0 [ 445.387344][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 445.395321][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 445.403297][ C1] Call Trace: [ 445.406592][ C1] [ 445.409522][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 445.415429][ C1] ? _raw_spin_unlock+0x40/0x40 [ 445.420290][ C1] cm109_urb_irq_callback+0x73d/0xcc0 [ 445.425682][ C1] __usb_hcd_giveback_urb+0x35d/0x520 [ 445.431089][ C1] dummy_timer+0xa47/0x34a0 [ 445.435609][ C1] ? verify_lock_unused+0x140/0x140 [ 445.440951][ C1] ? dummy_free_streams+0x520/0x520 [ 445.446166][ C1] ? dummy_free_streams+0x520/0x520 [ 445.451373][ C1] call_timer_fn+0x17b/0x540 [ 445.455974][ C1] ? dummy_free_streams+0x520/0x520 [ 445.461290][ C1] ? __run_timers+0x810/0x810 [ 445.466000][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 445.471377][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 445.476751][ C1] ? dummy_free_streams+0x520/0x520 [ 445.481956][ C1] __run_timers+0x56c/0x810 [ 445.486478][ C1] ? detach_timer+0x2b0/0x2b0 [ 445.491166][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 445.496030][ C1] run_timer_softirq+0x63/0xf0 [ 445.500806][ C1] handle_softirqs+0x336/0x830 [ 445.505577][ C1] ? run_ksoftirqd+0xa4/0x100 [ 445.510434][ C1] ? do_softirq+0x210/0x210 [ 445.514951][ C1] ? run_ksoftirqd+0x81/0x100 [ 445.519651][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 445.525034][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 445.530327][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 445.535531][ C1] run_ksoftirqd+0xa4/0x100 [ 445.540036][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 445.545240][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 445.550623][ C1] ? smpboot_thread_fn+0x5d9/0x990 [ 445.555828][ C1] smpboot_thread_fn+0x520/0x990 [ 445.560784][ C1] kthread+0x42e/0x520 [ 445.564857][ C1] ? cpu_report_death+0x180/0x180 [ 445.569978][ C1] ? kthread_blkcg+0xd0/0xd0 [ 445.574580][ C1] ret_from_fork+0x1f/0x30 [ 445.579008][ C1] [ 445.582028][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 445.589307][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 445.596696][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 445.606763][ C1] Call Trace: [ 445.610063][ C1] [ 445.612996][ C1] dump_stack_lvl+0x188/0x250 [ 445.617721][ C1] ? show_regs_print_info+0x20/0x20 [ 445.622925][ C1] ? load_image+0x410/0x410 [ 445.627459][ C1] panic+0x2f8/0x850 [ 445.631362][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 445.635875][ C1] ? ret_from_fork+0x1f/0x30 [ 445.640471][ C1] ? usb_submit_urb+0xfba/0x18d0 [ 445.645410][ C1] __warn+0x248/0x2b0 [ 445.649548][ C1] ? usb_submit_urb+0xfba/0x18d0 [ 445.654512][ C1] report_bug+0x1b9/0x2e0 [ 445.658869][ C1] handle_bug+0x3a/0x70 [ 445.663035][ C1] exc_invalid_op+0x16/0x40 [ 445.667566][ C1] asm_exc_invalid_op+0x16/0x20 [ 445.672422][ C1] RIP: 0010:usb_submit_urb+0xfba/0x18d0 [ 445.678193][ C1] Code: c5 8a 44 89 ea e8 f6 63 d7 03 e9 f3 fb ff ff e8 7c 27 97 fb c6 05 1f 6f 95 07 01 48 c7 c7 e0 2f c5 8a 48 89 de e8 96 81 d3 03 <0f> 0b e9 bc f0 ff ff e8 5a 27 97 fb eb 1f e8 53 27 97 fb 44 8b 64 [ 445.697922][ C1] RSP: 0018:ffffc90000da7618 EFLAGS: 00010046 [ 445.704011][ C1] RAX: 84b22974a7803000 RBX: ffff88801e842500 RCX: 0000000000040000 [ 445.711987][ C1] RDX: ffffc90002309000 RSI: 0000000000006734 RDI: 0000000000006735 [ 445.719959][ C1] RBP: 000000000000000f R08: ffff8880b912795b R09: 1ffff11017224f2b [ 445.727932][ C1] R10: dffffc0000000000 R11: ffffed1017224f2c R12: 0000000000000a20 [ 445.735990][ C1] R13: ffff88804f562030 R14: ffff88801e842508 R15: dffffc0000000000 [ 445.743983][ C1] ? usb_submit_urb+0xfba/0x18d0 [ 445.748930][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 445.754825][ C1] ? _raw_spin_unlock+0x40/0x40 [ 445.759689][ C1] cm109_urb_irq_callback+0x73d/0xcc0 [ 445.765330][ C1] __usb_hcd_giveback_urb+0x35d/0x520 [ 445.770711][ C1] dummy_timer+0xa47/0x34a0 [ 445.775335][ C1] ? verify_lock_unused+0x140/0x140 [ 445.780666][ C1] ? dummy_free_streams+0x520/0x520 [ 445.785877][ C1] ? dummy_free_streams+0x520/0x520 [ 445.791206][ C1] call_timer_fn+0x17b/0x540 [ 445.795920][ C1] ? dummy_free_streams+0x520/0x520 [ 445.801141][ C1] ? __run_timers+0x810/0x810 [ 445.805839][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 445.811049][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 445.816254][ C1] ? dummy_free_streams+0x520/0x520 [ 445.821467][ C1] __run_timers+0x56c/0x810 [ 445.826072][ C1] ? detach_timer+0x2b0/0x2b0 [ 445.830756][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 445.835616][ C1] run_timer_softirq+0x63/0xf0 [ 445.840390][ C1] handle_softirqs+0x336/0x830 [ 445.845157][ C1] ? run_ksoftirqd+0xa4/0x100 [ 445.849844][ C1] ? do_softirq+0x210/0x210 [ 445.854772][ C1] ? run_ksoftirqd+0x81/0x100 [ 445.859486][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 445.864698][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 445.870003][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 445.875205][ C1] run_ksoftirqd+0xa4/0x100 [ 445.879731][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 445.884947][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 445.890337][ C1] ? smpboot_thread_fn+0x5d9/0x990 [ 445.895454][ C1] smpboot_thread_fn+0x520/0x990 [ 445.900491][ C1] kthread+0x42e/0x520 [ 445.904559][ C1] ? cpu_report_death+0x180/0x180 [ 445.909587][ C1] ? kthread_blkcg+0xd0/0xd0 [ 445.914351][ C1] ret_from_fork+0x1f/0x30 [ 445.918788][ C1] [ 445.921885][ C1] Kernel Offset: disabled [ 445.927097][ C1] Rebooting in 86400 seconds..