last executing test programs: 1.109878354s ago: executing program 4 (id=21985): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000580050001"], 0x80}}, 0x0) 1.071098604s ago: executing program 0 (id=21986): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x8004000000071, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1, @raw_data}) 1.045744345s ago: executing program 2 (id=21987): personality(0x8) uname(&(0x7f0000000180)=""/224) 908.269479ms ago: executing program 0 (id=21988): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000005ac0)=@sack_info={0x0, 0x9, 0x1}, 0xc) 908.036339ms ago: executing program 1 (id=21989): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x840) readv(r0, &(0x7f0000000c40)=[{&(0x7f0000000040)=""/21, 0x15}, {0x0}], 0x2) 887.926309ms ago: executing program 2 (id=21990): r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000040)={0x9f14, {"0dbad96fff01000008ff00200800", "3dfab043e15fad27a639f905b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0xffffff00, 0x7}) 847.62415ms ago: executing program 3 (id=21991): r0 = socket(0xa, 0x1, 0x0) fcntl$setsig(r0, 0xa, 0x41) 831.96162ms ago: executing program 4 (id=21992): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x44033, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 800.139151ms ago: executing program 0 (id=21993): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x28, 0x3b, 0x107, 0x0, 0x200, {0x2, 0x7c}, [@typed={0x4}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x88G'}, @nested={0x4, 0x1d}]}]}, 0x28}}, 0x0) 798.784001ms ago: executing program 1 (id=21994): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="64000000030101010000000000000000020000000c001980080002000d08000044000280140001"], 0x64}, 0x1, 0x0, 0x0, 0x4000004}, 0x44080) 665.384644ms ago: executing program 3 (id=21995): setresuid(0x0, 0xee00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb, 0x0, 0xffffffffffffffff, 0xffb9}, 0x48) 618.822555ms ago: executing program 4 (id=21996): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x25, 0x1, 0x2, 0x10001}]}, 0x10) 618.620815ms ago: executing program 2 (id=21997): set_mempolicy(0x4005, &(0x7f0000000040)=0x13, 0x6) syz_clone(0x82842111, 0x0, 0x0, 0x0, 0x0, 0x0) 603.364756ms ago: executing program 0 (id=21998): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e9211000000e3bd012a128748fdb8021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4040004) 480.099489ms ago: executing program 2 (id=21999): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="3a173357f297c605804ab3828443", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 472.696959ms ago: executing program 4 (id=22000): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x2000000, &(0x7f00000001c0)=ANY=[@ANYBLOB='mpol=prefer=relative:\f\x00']) 431.15413ms ago: executing program 3 (id=22001): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x104, 0x4, 0x3c0, 0xe8, 0xe8, 0xe8, 0x2d8, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@arp={@dev={0xac, 0x14, 0x14, 0x2e}, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {@empty, {[0xff, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'macvlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@loopback, @multicast2, 0x0, 0x0, 0x3, 0x0, {@empty, {[0x0, 0xff, 0xff]}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) 430.76188ms ago: executing program 1 (id=22002): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newsa={0x16c, 0x10, 0x1, 0x70bd2c, 0x8, {{@in=@multicast1, @in=@private=0xa010100}, {@in=@empty, 0x0, 0x32}, @in6=@loopback, {}, {}, {}, 0x70bd29, 0x0, 0xa, 0x0, 0x0, 0xad}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x2, [0x40000000]}}, @replay_thresh={0x8, 0xb, 0x8}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x48001}, 0x0) 312.037193ms ago: executing program 4 (id=22003): getgroups(0x2, &(0x7f0000000040)=[0x0, 0xee00]) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x8413, &(0x7f00000003c0)={[{@norecovery}, {}, {@mb_optimize_scan}, {@acl}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@noblock_validity}, {@usrjquota}, {@jqfmt_vfsv0}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}, {@resgid={'resgid', 0x3d, r0}}, {@sysvgroups}]}, 0x18, 0x56a, &(0x7f0000000780)="$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") 300.102383ms ago: executing program 3 (id=22013): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0xe0000, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f00000006c0)) 284.237943ms ago: executing program 1 (id=22004): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x7041, 0x0) 246.929544ms ago: executing program 0 (id=22005): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x2, 0x0, &(0x7f0000000040)) 140.383517ms ago: executing program 1 (id=22006): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x32, 0x2, 0x2, "32ffffffffbfbe1ca79676125a01000000060000000002000bdf00", 0x32315559}) 140.192397ms ago: executing program 2 (id=22007): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) 140.096206ms ago: executing program 3 (id=22008): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3401) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x60000, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x5, 0x1}, 0x8, 0x0, 0x8, 0x0, 0x5, 0x0, 0x0}) 139.938157ms ago: executing program 0 (id=22009): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000010002a00000140012800b00010062726964676500000400028008000100"], 0x40}}, 0x0) 99.690878ms ago: executing program 4 (id=22010): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0004000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000003080002400000000014000000020a69eff1640000000000000000000114000000110001"], 0xa4}}, 0x0) 56.215679ms ago: executing program 2 (id=22011): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xdf, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0xcb69aecd8431eea3, "bb1e000064000080b22c28becf0500063475de71000077a16c80b6db943400"}) 227.81µs ago: executing program 1 (id=22012): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) shutdown(r0, 0x0) 0s ago: executing program 3 (id=22014): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) write$vga_arbiter(r0, &(0x7f0000005440)=@other={'trylock', ' ', 'io'}, 0xb) kernel console output (not intermixed with test programs): es leftover after parsing attributes in process `syz.3.19246'. [ 1099.339966][T13962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19251'. [ 1099.349164][T13963] x_tables: unsorted underflow at hook 4 [ 1099.379591][T13967] netlink: 'syz.1.19252': attribute type 32 has an invalid length. [ 1099.512682][ T5836] usb 5-1: Using ep0 maxpacket: 32 [ 1099.906897][ T5836] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1099.956592][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.990761][ T5836] usb 5-1: Product: syz [ 1100.012424][ T5836] usb 5-1: Manufacturer: syz [ 1100.045549][ T5836] usb 5-1: SerialNumber: syz [ 1100.072630][ T5836] usb 5-1: config 0 descriptor?? [ 1100.132972][T14005] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19263'. [ 1100.532941][T14039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19269'. [ 1100.575545][ T5836] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 1100.601466][ T5836] peak_usb 5-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 1100.618276][T14039] netlink: 'syz.0.19269': attribute type 1 has an invalid length. [ 1100.863610][ T5836] peak_usb: probe of 5-1:0.0 failed with error -71 [ 1100.927423][ T5836] usb 5-1: USB disconnect, device number 22 [ 1101.550284][ T4988] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1101.790315][ T4988] usb 1-1: Using ep0 maxpacket: 8 [ 1101.954698][T14151] netlink: 76 bytes leftover after parsing attributes in process `syz.3.19294'. [ 1102.070290][ T4988] usb 1-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 1102.104559][ T4988] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.150131][ T4988] usb 1-1: Product: syz [ 1102.160485][ T4988] usb 1-1: Manufacturer: syz [ 1102.180391][ T4988] usb 1-1: SerialNumber: syz [ 1102.270422][ T8925] usb 2-1: new full-speed USB device number 127 using dummy_hcd [ 1102.422448][T14184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19303'. [ 1102.690396][ T4988] mxuport 1-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 1102.714653][ T4988] mxuport: probe of 1-1:254.0 failed with error -5 [ 1102.782866][ T4988] usb 1-1: USB disconnect, device number 122 [ 1102.840411][ T8925] usb 2-1: config 0 has an invalid interface number: 70 but max is 0 [ 1102.848529][ T8925] usb 2-1: config 0 has no interface number 0 [ 1102.902073][ T8925] usb 2-1: config 0 interface 70 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 1102.913091][T14219] netlink: 32 bytes leftover after parsing attributes in process `syz.3.19313'. [ 1102.950370][ T8925] usb 2-1: config 0 interface 70 altsetting 5 has an invalid endpoint with address 0xE3, skipping [ 1102.993627][ T8925] usb 2-1: config 0 interface 70 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1103.054529][ T8925] usb 2-1: config 0 interface 70 has no altsetting 0 [ 1103.271083][T14243] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.19320' sets config #0 [ 1103.322575][ T8925] usb 2-1: New USB device found, idVendor=110a, idProduct=1150, bcdDevice=55.9e [ 1103.364724][ T8925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.376683][T14253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19324'. [ 1103.396193][ T8925] usb 2-1: Product: syz [ 1103.422539][ T8925] usb 2-1: Manufacturer: syz [ 1103.427189][ T8925] usb 2-1: SerialNumber: syz [ 1103.471744][ T8925] usb 2-1: config 0 descriptor?? [ 1103.490947][T14153] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1103.649880][T14271] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 1103.723937][T14278] netlink: 'syz.0.19332': attribute type 16 has an invalid length. [ 1103.762296][T14278] netlink: 'syz.0.19332': attribute type 3 has an invalid length. [ 1103.808976][T14278] netlink: 132 bytes leftover after parsing attributes in process `syz.0.19332'. [ 1103.863278][ T8925] ti_usb_3410_5052 2-1:0.70: TI USB 3410 1 port adapter converter detected [ 1103.890161][ T8925] ti_usb_3410_5052 2-1:0.70: missing endpoints [ 1103.937381][ T8925] usb 2-1: USB disconnect, device number 127 [ 1103.946293][ T5835] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 1104.324146][ T5836] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 1104.341248][ T5835] usb 5-1: not running at top speed; connect to a high speed hub [ 1104.352124][T14320] snd_dummy snd_dummy.0: control 3:0:99:syz1:6 is already present [ 1104.400854][T14324] netlink: 'syz.1.19339': attribute type 29 has an invalid length. [ 1104.645816][ T5835] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 1104.660360][ T5835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.709374][ T5835] usb 5-1: Product: syz [ 1104.734248][ T5835] usb 5-1: Manufacturer: syz [ 1104.738891][ T5835] usb 5-1: SerialNumber: syz [ 1104.750788][ T5836] usb 4-1: not running at top speed; connect to a high speed hub [ 1104.837719][ T5835] keyspan 5-1:1.0: Keyspan 4 port adapter converter detected [ 1104.861172][ T5835] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1104.933409][ T5835] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1104.991016][ T5835] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1105.038000][T14368] netlink: 16 bytes leftover after parsing attributes in process `syz.1.19349'. [ 1105.051761][ T5835] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1105.142455][ T5836] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 1105.171896][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.237539][ T5836] usb 4-1: Product: syz [ 1105.269785][ T5836] usb 4-1: Manufacturer: syz [ 1105.291223][ T5836] usb 4-1: SerialNumber: syz [ 1105.345171][ T5835] usb 5-1: USB disconnect, device number 23 [ 1105.377825][ T5835] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1105.389475][ T5836] keyspan 4-1:1.0: Keyspan 4 port adapter converter detected [ 1105.422951][ T5836] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB4 [ 1105.462095][ T5835] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1105.484979][ T5836] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB5 [ 1105.517240][ T5835] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1105.540564][ T5836] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB6 [ 1105.582077][ T5836] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB7 [ 1105.607877][ T5835] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1105.659739][ T5835] keyspan 5-1:1.0: device disconnected [ 1105.875197][ T5836] usb 4-1: USB disconnect, device number 24 [ 1105.895347][T14453] netlink: 132 bytes leftover after parsing attributes in process `syz.4.19361'. [ 1105.906851][T14454] netlink: 16 bytes leftover after parsing attributes in process `syz.2.19360'. [ 1105.918862][ T5836] keyspan_4 ttyUSB4: Keyspan 4 port adapter converter now disconnected from ttyUSB4 [ 1105.970303][ T5836] keyspan_4 ttyUSB5: Keyspan 4 port adapter converter now disconnected from ttyUSB5 [ 1105.990273][ T4988] usb 1-1: new full-speed USB device number 123 using dummy_hcd [ 1106.061328][ T5836] keyspan_4 ttyUSB6: Keyspan 4 port adapter converter now disconnected from ttyUSB6 [ 1106.121133][ T5836] keyspan_4 ttyUSB7: Keyspan 4 port adapter converter now disconnected from ttyUSB7 [ 1106.130944][T14471] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1106.207029][ T5836] keyspan 4-1:1.0: device disconnected [ 1106.371821][ T4988] usb 1-1: config index 0 descriptor too short (expected 2075, got 27) [ 1106.393929][ T4988] usb 1-1: config 0 has an invalid interface number: 200 but max is 0 [ 1106.417206][ T4988] usb 1-1: config 0 has no interface number 0 [ 1106.470307][ T4988] usb 1-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid maxpacket 12408, setting to 64 [ 1106.490415][ T8925] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 1106.509661][ T4988] usb 1-1: config 0 interface 200 has no altsetting 0 [ 1106.680780][ T4988] usb 1-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 1106.689948][ T4988] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.698919][ T4988] usb 1-1: Product: syz [ 1106.723046][ T4988] usb 1-1: Manufacturer: syz [ 1106.727683][ T4988] usb 1-1: SerialNumber: syz [ 1106.801813][ T4988] usb 1-1: config 0 descriptor?? [ 1106.936061][T14526] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 1106.951071][ T8925] usb 2-1: config index 0 descriptor too short (expected 539, got 27) [ 1106.971909][ T8925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 65, changing to 4 [ 1107.020625][ T8925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 11113, setting to 1023 [ 1107.122966][ T4988] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.200/input/input71 [ 1107.190754][ T4988] usb 1-1: USB disconnect, device number 123 [ 1107.380384][ T8925] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1107.422242][ T8925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.430608][T14557] program syz.3.19381 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1107.466508][ T8925] usb 2-1: Product: syz [ 1107.480037][ T8925] usb 2-1: Manufacturer: syz [ 1107.500167][ T8925] usb 2-1: SerialNumber: syz [ 1107.541795][ T8925] usb 2-1: config 0 descriptor?? [ 1107.645772][ T8925] hub 2-1:0.0: bad descriptor, ignoring hub [ 1107.670068][ T8925] hub: probe of 2-1:0.0 failed with error -5 [ 1107.702231][ T8925] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input72 [ 1107.790339][ T8925] usbtouchscreen 2-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -22 [ 1107.853938][T14594] netlink: 'syz.4.19392': attribute type 16 has an invalid length. [ 1107.882963][ T8925] usbtouchscreen: probe of 2-1:0.0 failed with error -22 [ 1107.899510][T14594] netlink: 'syz.4.19392': attribute type 17 has an invalid length. [ 1107.941847][T14594] infiniband syz1: set active [ 1107.972781][T14594] infiniband syz1: set active [ 1108.007440][ T8925] usb 2-1: USB disconnect, device number 2 [ 1108.126601][T14594] bridge0: port 2(bridge_slave_1) entered disabled state [ 1108.281407][ T5835] lo speed is unknown, defaulting to 1000 [ 1108.287255][ T5836] lo speed is unknown, defaulting to 1000 [ 1108.663450][T14631] x_tables: unsorted entry at hook 4 [ 1108.960326][ T8925] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1109.161300][ T5836] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1109.220540][ T8925] usb 2-1: Using ep0 maxpacket: 32 [ 1109.360877][ T5835] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1109.422616][ T8925] usb 2-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 1109.440034][ T8925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.450131][ T5836] usb 5-1: Using ep0 maxpacket: 32 [ 1109.472016][ T8925] usb 2-1: config 0 descriptor?? [ 1109.477305][T14667] netlink: 16 bytes leftover after parsing attributes in process `syz.3.19415'. [ 1109.541420][ T8925] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 1109.565204][ T8925] input: xirlink-cit as /devices/platform/dummy_hcd.1/usb2/2-1/input/input73 [ 1109.570209][ T4988] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 1109.624923][ T5836] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1109.769132][ T8925] usb 2-1: USB disconnect, device number 3 [ 1109.790840][ T5835] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1109.809067][ T5835] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1109.850052][ T5835] usb 1-1: config 0 has no interface number 0 [ 1109.866392][ T5835] usb 1-1: config 0 interface 1 has no altsetting 0 [ 1109.873448][ T5836] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1109.890039][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.907507][ T5835] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1109.917137][ T4988] usb 3-1: not running at top speed; connect to a high speed hub [ 1109.926890][ T5836] usb 5-1: Product: syz [ 1109.936966][ T5835] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.945051][ T5836] usb 5-1: Manufacturer: syz [ 1109.970055][ T5836] usb 5-1: SerialNumber: syz [ 1109.980954][ T5835] usb 1-1: config 0 descriptor?? [ 1109.987992][ T5836] usb 5-1: config 0 descriptor?? [ 1110.020447][ T4988] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1110.060434][ T5836] cdc_ether 5-1:0.0: skipping garbage [ 1110.065867][ T5836] cdc_ether 5-1:0.0: invalid descriptor buffer length [ 1110.093017][ T5836] usb 5-1: bad CDC descriptors [ 1110.110315][ T5836] usb 5-1: unsupported MDLM descriptors [ 1110.126396][T14707] nfs: Deprecated parameter 'nointr' [ 1110.210636][ T4988] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 1110.228082][ T4988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.248298][ T4988] usb 3-1: Product: syz [ 1110.256108][ T4988] usb 3-1: Manufacturer: syz [ 1110.264667][ T5836] usb 5-1: USB disconnect, device number 24 [ 1110.315227][ T4988] usb 3-1: SerialNumber: syz [ 1110.339424][ T5045] usb 1-1: USB disconnect, device number 124 [ 1110.372601][ T4988] keyspan 3-1:1.0: Keyspan 4 port adapter converter detected [ 1110.388605][ T4988] keyspan 3-1:1.0: unsupported endpoint type 0 [ 1110.407926][ T4988] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1110.467469][ T4988] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1110.511319][ T4988] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1110.535488][T14745] netlink: 'syz.3.19428': attribute type 32 has an invalid length. [ 1110.546712][ T4988] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1110.871858][ T4988] usb 3-1: USB disconnect, device number 10 [ 1110.924635][ T4988] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1110.984587][ T4988] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1111.042706][T14773] delete_channel: no stack [ 1111.051077][ T4988] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1111.104751][ T4988] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1111.171435][ T4988] keyspan 3-1:1.0: device disconnected [ 1111.201438][T14798] netlink: 'syz.0.19440': attribute type 32 has an invalid length. [ 1111.380731][ T5836] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1111.482402][T14817] netlink: 'syz.4.19446': attribute type 8 has an invalid length. [ 1111.663487][T14833] netlink: 'syz.2.19452': attribute type 32 has an invalid length. [ 1111.690376][T14836] nft_compat: unsupported protocol 5 [ 1111.705177][ T5836] usb 2-1: Using ep0 maxpacket: 32 [ 1111.795626][T14840] overlayfs: conflicting options: nfs_export=on,index=off [ 1111.919774][ T5836] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 1112.120764][ T5836] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1112.137431][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.186419][ T5836] usb 2-1: Product: syz [ 1112.206586][ T5836] usb 2-1: Manufacturer: syz [ 1112.222589][T14871] netlink: 'syz.2.19466': attribute type 12 has an invalid length. [ 1112.229320][ T5836] usb 2-1: SerialNumber: syz [ 1112.238974][ T5836] usb 2-1: config 0 descriptor?? [ 1112.251227][ T8925] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1112.320943][T14783] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1112.352927][ T5836] hub 2-1:0.0: bad descriptor, ignoring hub [ 1112.369128][ T5836] hub: probe of 2-1:0.0 failed with error -5 [ 1112.425159][ T5836] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input74 [ 1112.437140][T14883] loop0: detected capacity change from 0 to 22 [ 1112.447514][T14887] netlink: 32 bytes leftover after parsing attributes in process `syz.4.19471'. [ 1112.479240][T14887] netlink: 32 bytes leftover after parsing attributes in process `syz.4.19471'. [ 1112.504178][T14883] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1112.570354][ T8925] usb 4-1: Using ep0 maxpacket: 32 [ 1112.596970][ T5835] usb 2-1: USB disconnect, device number 4 [ 1112.598376][T14883] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1112.636128][T14899] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.19473'. [ 1112.780974][ T8925] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1112.883091][ T8925] usb 4-1: config 6 has an invalid interface number: 49 but max is 0 [ 1112.916044][ T8925] usb 4-1: config 6 has no interface number 0 [ 1112.943172][ T8925] usb 4-1: config 6 interface 49 altsetting 14 has an invalid endpoint descriptor of length 2, skipping [ 1112.985378][ T8925] usb 4-1: config 6 interface 49 altsetting 14 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1113.064844][ T8925] usb 4-1: config 6 interface 49 has no altsetting 0 [ 1113.152045][T14926] netlink: 'syz.0.19479': attribute type 12 has an invalid length. [ 1113.315795][ T8925] usb 4-1: New USB device found, idVendor=0c45, idProduct=602d, bcdDevice=fa.ff [ 1113.338494][ T8925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.377258][ T8925] usb 4-1: Product: syz [ 1113.391868][ T8925] usb 4-1: Manufacturer: syz [ 1113.396552][ T8925] usb 4-1: SerialNumber: syz [ 1113.519775][T14944] loop0: detected capacity change from 0 to 2048 [ 1113.624757][T14944] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1113.748717][ T8925] gspca_main: sonixb-2.14.0 probing 0c45:602d [ 1113.786807][ T8925] sonixb 4-1:6.49: Error reading register 00: -71 [ 1113.831007][ T8925] usb 4-1: USB disconnect, device number 25 [ 1114.634677][ T26] audit: type=1800 audit(525400.739:83): pid=14983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.19496" name="/" dev="tmpfs" ino=1695 res=0 errno=0 [ 1114.683449][T15012] dlm: no locking on control device [ 1115.281563][T15049] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19518'. [ 1115.679778][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.686155][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.962312][T15101] netlink: get zone limit has 4 unknown bytes [ 1116.290332][T15128] netlink: 'syz.0.19548': attribute type 9 has an invalid length. [ 1116.980197][ T5045] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1116.983810][ T8925] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1117.230084][ T5045] usb 1-1: Using ep0 maxpacket: 16 [ 1117.360446][ T5045] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1117.522394][ T8925] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1117.540733][ T5045] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 1117.591890][ T5045] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.613818][ T8925] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1117.624075][ T5045] usb 1-1: Product: syz [ 1117.628265][ T5045] usb 1-1: Manufacturer: syz [ 1117.636121][ T8925] usb 4-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1117.670126][ T5045] usb 1-1: SerialNumber: syz [ 1117.703991][ T8925] usb 4-1: config 1 interface 0 has no altsetting 1 [ 1117.781838][ T5045] usb 1-1: config 0 descriptor?? [ 1117.822934][ T5045] qcserial 1-1:0.0: Qualcomm USB modem converter detected [ 1117.851414][ T5045] usb 1-1: Qualcomm USB modem converter now attached to ttyUSB0 [ 1117.958572][ T8925] usb 4-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 1117.995603][ T8925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.044327][ T8925] usb 4-1: Product: syz [ 1118.048540][ T8925] usb 4-1: Manufacturer: syz [ 1118.050533][ T5045] usb 1-1: USB disconnect, device number 125 [ 1118.089750][ T8925] usb 4-1: SerialNumber: syz [ 1118.138491][ T5045] qcserial ttyUSB0: Qualcomm USB modem converter now disconnected from ttyUSB0 [ 1118.169718][ T8925] smsusb:smsusb_probe: board id=8, interface number 0 [ 1118.177198][ T5045] qcserial 1-1:0.0: device disconnected [ 1118.389850][ T8925] smsusb:smsusb_probe: usb_set_interface failed, rc -71 [ 1118.406516][ T8925] smsusb: probe of 4-1:1.0 failed with error -71 [ 1118.469096][ T8925] usb 4-1: USB disconnect, device number 26 [ 1119.313905][T15308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19604'. [ 1119.373017][T15310] loop0: detected capacity change from 0 to 64 [ 1119.903017][T15343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19615'. [ 1120.462460][T15379] netlink: 220 bytes leftover after parsing attributes in process `syz.0.19626'. [ 1120.536810][ T8925] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1120.622139][T15390] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1120.781345][T15406] netlink: 40 bytes leftover after parsing attributes in process `syz.3.19633'. [ 1120.828909][T15409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19635'. [ 1120.879103][ T8925] usb 5-1: Using ep0 maxpacket: 8 [ 1121.041976][T15423] netlink: 'syz.1.19640': attribute type 9 has an invalid length. [ 1121.071747][ T8925] usb 5-1: config 0 has an invalid interface number: 6 but max is 2 [ 1121.090025][ T8925] usb 5-1: config 0 has an invalid interface number: 176 but max is 2 [ 1121.136034][ T8925] usb 5-1: config 0 has no interface number 1 [ 1121.165179][ T8925] usb 5-1: config 0 has no interface number 2 [ 1121.210310][ T8925] usb 5-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 1121.270628][ T8925] usb 5-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1121.320892][ T8925] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1121.336017][ T8925] usb 5-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 1121.393731][ T8925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.432136][ T8925] usb 5-1: config 0 descriptor?? [ 1121.720748][ T8925] usb 5-1: Could not set interface, error -71 [ 1121.733366][ T8925] qmi_wwan: probe of 5-1:0.0 failed with error -22 [ 1121.761421][ T5836] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1121.834788][ T8925] usb 5-1: USB disconnect, device number 25 [ 1121.878435][T15477] ieee802154 phy0 wpan0: encryption failed: -90 [ 1122.186852][ T5836] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1122.186898][ T5836] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1122.186925][ T5836] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1122.186949][ T5836] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1122.186975][ T5836] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1122.187016][ T5836] usb 4-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 1122.187040][ T5836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.202492][T15419] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1122.249790][ T5836] pegasus 4-1:1.0: Missing or invalid endpoints [ 1122.410750][T15455] loop0: detected capacity change from 0 to 32768 [ 1122.447811][T15455] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1122.470109][ T5836] usb 4-1: USB disconnect, device number 27 [ 1122.553040][T15520] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19658'. [ 1122.553071][T15520] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19658'. [ 1122.621417][T15455] BTRFS info (device loop0): enabling ssd optimizations [ 1122.621445][T15455] BTRFS info (device loop0): not using ssd optimizations [ 1122.621466][T15455] BTRFS info (device loop0): turning off barriers [ 1122.621483][T15455] BTRFS info (device loop0): use no compression [ 1122.621499][T15455] BTRFS info (device loop0): using free space tree [ 1122.621514][T15455] BTRFS info (device loop0): has skinny extents [ 1123.971508][T15620] netlink: 52 bytes leftover after parsing attributes in process `syz.4.19684'. [ 1123.978635][T15622] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19685'. [ 1124.451099][T15646] netlink: 'syz.1.19693': attribute type 1 has an invalid length. [ 1124.520330][T15646] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.19693'. [ 1124.580137][T15646] netlink: 'syz.1.19693': attribute type 1 has an invalid length. [ 1124.730268][T15661] netlink: 224 bytes leftover after parsing attributes in process `syz.4.19698'. [ 1124.930675][T15675] netlink: 'syz.4.19703': attribute type 21 has an invalid length. [ 1125.002970][T15675] netlink: 132 bytes leftover after parsing attributes in process `syz.4.19703'. [ 1125.036836][T15675] netlink: 20 bytes leftover after parsing attributes in process `syz.4.19703'. [ 1125.266824][T15693] infiniband syz1: set active [ 1125.330363][T15693] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1125.405733][ T5835] lo speed is unknown, defaulting to 1000 [ 1125.411644][T15695] IPv6: NLM_F_CREATE should be specified when creating new route [ 1125.420292][T15699] netlink: 'syz.2.19713': attribute type 8 has an invalid length. [ 1125.447524][T15641] loop0: detected capacity change from 0 to 32768 [ 1125.689120][T15641] ERROR: (device loop0): dbAlloc: unable to allocate blocks [ 1125.689120][T15641] [ 1125.730956][T15641] ERROR: (device loop0): remounting filesystem as read-only [ 1126.004674][T15732] loop0: detected capacity change from 0 to 1024 [ 1126.091750][T15740] ipt_CLUSTERIP: Please specify destination IP [ 1126.122969][T15744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19726'. [ 1126.137825][T15746] xt_TCPMSS: Only works on TCP SYN packets [ 1126.206949][T15744] netlink: 16 bytes leftover after parsing attributes in process `syz.1.19726'. [ 1126.262613][T15732] Quota error (device loop0): find_tree_dqentry: Getting block too big (64 >= 6) [ 1126.340955][T15732] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 1126.421483][T15732] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.19720: Failed to acquire dquot type 0 [ 1126.511322][T15732] EXT4-fs error (device loop0): mb_free_blocks:1889: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 1126.659128][T15732] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #13: comm syz.0.19720: corrupted inode contents [ 1126.788721][T15732] EXT4-fs error (device loop0): ext4_dirty_inode:6077: inode #13: comm syz.0.19720: mark_inode_dirty error [ 1126.842351][T15732] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #13: comm syz.0.19720: corrupted inode contents [ 1126.929814][T15732] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #13: comm syz.0.19720: mark_inode_dirty error [ 1126.995540][T15732] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #13: comm syz.0.19720: corrupted inode contents [ 1127.029433][T15790] netlink: 20 bytes leftover after parsing attributes in process `syz.4.19743'. [ 1127.080643][T15732] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 1127.144584][T15732] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #13: comm syz.0.19720: corrupted inode contents [ 1127.213132][T15732] EXT4-fs error (device loop0): ext4_truncate:4286: inode #13: comm syz.0.19720: mark_inode_dirty error [ 1127.282109][T15732] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 1127.361526][T15732] EXT4-fs (loop0): 1 truncate cleaned up [ 1127.367214][T15732] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1127.538007][T15815] ipt_CLUSTERIP: Please specify destination IP [ 1127.544751][T15732] Quota error (device loop0): find_tree_dqentry: Getting block too big (64 >= 6) [ 1127.578954][T15732] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 1127.622785][T15732] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.19720: Failed to acquire dquot type 0 [ 1128.005995][T15840] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1128.048751][T15840] rdma_rxe: ignoring netdev event = 12 for bond0 [ 1128.633455][T15872] netlink: 132 bytes leftover after parsing attributes in process `syz.0.19772'. [ 1128.960154][T15899] netlink: 'syz.1.19787': attribute type 21 has an invalid length. [ 1129.041474][T15899] netlink: 120 bytes leftover after parsing attributes in process `syz.1.19787'. [ 1129.068709][T15899] netlink: 'syz.1.19787': attribute type 1 has an invalid length. [ 1129.100296][T15899] netlink: 9 bytes leftover after parsing attributes in process `syz.1.19787'. [ 1129.224365][T15913] xt_CT: No such helper "snmp_trap" [ 1129.590201][T15960] __nla_validate_parse: 1 callbacks suppressed [ 1129.590218][T15960] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19806'. [ 1129.667556][T15960] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19806'. [ 1130.200182][T16021] netlink: 'syz.4.19828': attribute type 5 has an invalid length. [ 1130.290271][T15647] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1130.530292][T15647] usb 1-1: Using ep0 maxpacket: 8 [ 1130.659064][T15647] usb 1-1: config 243 has an invalid interface number: 78 but max is 0 [ 1130.680133][T15647] usb 1-1: config 243 has no interface number 0 [ 1130.686464][T15647] usb 1-1: config 243 interface 78 has no altsetting 0 [ 1130.910574][T15647] usb 1-1: New USB device found, idVendor=2639, idProduct=0011, bcdDevice=69.b0 [ 1130.922208][T15647] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.957067][T15647] usb 1-1: Product: syz [ 1130.988342][T15647] usb 1-1: Manufacturer: syz [ 1131.011300][T16086] netlink: 92 bytes leftover after parsing attributes in process `syz.3.19851'. [ 1131.020117][T15647] usb 1-1: SerialNumber: syz [ 1131.125534][T16092] netlink: 'syz.4.19854': attribute type 21 has an invalid length. [ 1131.170107][T16092] netlink: 144 bytes leftover after parsing attributes in process `syz.4.19854'. [ 1131.418961][T15647] usb 1-1: USB disconnect, device number 126 [ 1131.942309][T16144] netlink: 'syz.3.19874': attribute type 1 has an invalid length. [ 1132.006156][T16146] netlink: 132 bytes leftover after parsing attributes in process `syz.0.19875'. [ 1132.415945][T16174] loop0: detected capacity change from 0 to 256 [ 1132.495273][T16180] CIFS: bad ip= option (.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð) [ 1132.557440][T16185] xt_l2tp: v2 doesn't support IP mode [ 1132.560834][T16174] exfat: Deprecated parameter 'namecase' [ 1132.588934][T16174] exfat: Deprecated parameter 'namecase' [ 1132.600215][ T5836] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1132.689483][T16174] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 1132.885861][ T5836] usb 4-1: Using ep0 maxpacket: 32 [ 1133.060983][ T5836] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 1133.090332][ T5836] usb 4-1: config 0 has no interface number 0 [ 1133.096465][ T5836] usb 4-1: config 0 interface 132 has no altsetting 0 [ 1133.172215][T16214] netlink: 'syz.0.19902': attribute type 1 has an invalid length. [ 1133.209796][T16214] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.19902'. [ 1133.254830][T16214] netlink: 9 bytes leftover after parsing attributes in process `syz.0.19902'. [ 1133.378068][ T5836] usb 4-1: New USB device found, idVendor=0525, idProduct=9901, bcdDevice=39.75 [ 1133.400080][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1133.459108][ T5836] usb 4-1: Product: syz [ 1133.489415][ T5836] usb 4-1: Manufacturer: syz [ 1133.505795][ T5836] usb 4-1: SerialNumber: syz [ 1133.532398][ T5836] usb 4-1: config 0 descriptor?? [ 1133.696035][T16239] loop0: detected capacity change from 0 to 4096 [ 1133.724444][ T5835] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1133.735964][T16244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19912'. [ 1133.750425][T16244] netlink: 40 bytes leftover after parsing attributes in process `syz.2.19912'. [ 1133.782612][T16239] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 1133.819738][T16239] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 1133.830467][ T5836] cdc_subset: probe of 4-1:0.132 failed with error -71 [ 1133.868181][ T5836] usb 4-1: USB disconnect, device number 28 [ 1133.869631][T16239] EXT4-fs (loop0): Mount option "nouser_xattr" will be removed by 3.5 [ 1133.869631][T16239] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 1133.869631][T16239] [ 1134.053240][ T5835] usb 5-1: Using ep0 maxpacket: 8 [ 1134.114171][T16239] EXT4-fs (loop0): mounted filesystem without journal. Opts: mblk_io_submit,jqfmt=vfsv0,nouser_xattr,init_itable,,errors=continue. Quota mode: writeback. [ 1134.204674][ T5835] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1134.223062][ T5835] usb 5-1: config 179 has no interface number 0 [ 1134.239762][ T5835] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1134.300044][ T5835] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1134.359086][ T5835] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1134.421544][ T5835] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1134.483730][ T5835] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1134.565693][ T5835] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1134.605245][ T5835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.660620][T16219] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1134.857158][T16292] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1134.864596][T16292] IPv6: NLM_F_CREATE should be set when creating new route [ 1134.871875][T16292] IPv6: NLM_F_CREATE should be set when creating new route [ 1135.143879][ T5835] usb 5-1: USB disconnect, device number 26 [ 1135.171861][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1135.834462][T16361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19946'. [ 1135.902088][T16367] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19948'. [ 1136.008286][T16367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19948'. [ 1136.033638][T16367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19948'. [ 1136.090959][T16377] No such timeout policy "syz1" [ 1136.563873][T16409] netlink: 'syz.4.19962': attribute type 15 has an invalid length. [ 1136.606619][T16409] netlink: 25 bytes leftover after parsing attributes in process `syz.4.19962'. [ 1136.620341][ T5835] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1136.931364][ T5835] usb 4-1: Using ep0 maxpacket: 16 [ 1137.050162][T16437] netlink: 'syz.1.19973': attribute type 10 has an invalid length. [ 1137.110130][T16437] netlink: 40 bytes leftover after parsing attributes in process `syz.1.19973'. [ 1137.119787][T16437] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1137.131815][ T5835] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 1137.200149][T16437] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1137.300600][T16437] batman_adv: batadv0: Not using interface virt_wifi0 (retrying later): interface not active [ 1137.323410][ T5835] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1137.370799][ T5835] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1137.378834][ T5835] usb 4-1: Product: syz [ 1137.414018][ T5835] usb 4-1: Manufacturer: syz [ 1137.432654][T16451] tmpfs: Bad value for 'mpol' [ 1137.437471][ T5835] usb 4-1: SerialNumber: syz [ 1137.460576][ T5835] r8152-cfgselector 4-1: config 0 descriptor?? [ 1137.532669][ T264] block nbd0: Attempted send on invalid socket [ 1137.538909][ T264] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 1137.551223][T16450] XFS (nbd0): SB validate failed with error -5. [ 1137.787612][T16473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19984'. [ 1137.918437][T16482] netlink: 52 bytes leftover after parsing attributes in process `syz.2.19987'. [ 1138.001115][ T5835] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1138.030309][ T5835] r8152-cfgselector 4-1: USB disconnect, device number 29 [ 1138.131083][T16494] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 1138.410142][ T5836] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 1138.519211][T16558] loop0: detected capacity change from 0 to 64 [ 1138.628587][T16558] hfs: keylen 40 too large [ 1138.802388][T16576] netlink: 52 bytes leftover after parsing attributes in process `syz.1.20007'. [ 1138.874703][T16577] netlink: 14 bytes leftover after parsing attributes in process `syz.3.20006'. [ 1139.079548][ T5836] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1139.111771][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 1139.119906][ T5836] usb 5-1: Product: syz [ 1139.185242][ T5836] usb 5-1: Manufacturer: syz [ 1139.189893][ T5836] usb 5-1: SerialNumber: syz [ 1139.301262][ T5836] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 1139.706297][ T5836] vp7045: USB control message 'in' went wrong. [ 1139.715852][ T5836] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1139.736966][T16648] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1139.777288][ T5836] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 1139.849492][ T5836] usb 5-1: USB disconnect, device number 27 [ 1140.293091][T16683] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2880) [ 1140.371660][T16683] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 1140.910286][T15647] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1141.187178][T16736] Timeout policy `syz1' can only be used by L3 protocol number 2561 [ 1141.244463][ C0] sd 0:0:1:0: tag#5700 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1141.254668][ C0] sd 0:0:1:0: tag#5700 CDB: Mode Sense(10) [ 1141.260558][ C0] sd 0:0:1:0: tag#5700 CDB[00]: 5a 88 f4 74 3a 27 ba 79 f3 26 e7 a4 89 c9 13 2e [ 1141.269596][ C0] sd 0:0:1:0: tag#5700 CDB[10]: bd 0d 92 db 40 a2 20 7d 0f ed a1 f0 60 0c 33 30 [ 1141.270412][T15647] usb 2-1: config 2 has an invalid interface number: 3 but max is 0 [ 1141.278667][ C0] sd 0:0:1:0: tag#5700 CDB[20]: 8b 52 18 [ 1141.382082][T15647] usb 2-1: config 2 has no interface number 0 [ 1141.414556][T15647] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 1141.461241][T15647] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.531698][T15647] ums-realtek 2-1:2.3: USB Mass Storage device detected [ 1141.714347][T16774] __nla_validate_parse: 4 callbacks suppressed [ 1141.714366][T16774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20067'. [ 1141.780776][T15647] usb 2-1: USB disconnect, device number 5 [ 1141.791610][T16780] xt_bpf: check failed: parse error [ 1141.800375][T16774] netlink: 76 bytes leftover after parsing attributes in process `syz.4.20067'. [ 1142.149178][ T5836] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 1142.552685][T16825] syz.0.20083: vmalloc error: size 70368744177852, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 1142.590343][ T5836] usb 4-1: not running at top speed; connect to a high speed hub [ 1142.700394][ T5836] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1142.711987][T16825] CPU: 0 PID: 16825 Comm: syz.0.20083 Not tainted syzkaller #0 [ 1142.719564][T16825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1142.729714][T16825] Call Trace: [ 1142.733043][T16825] [ 1142.736077][T16825] dump_stack_lvl+0x188/0x250 [ 1142.740822][T16825] ? rcu_lock_release+0x5/0x20 [ 1142.745670][T16825] ? show_regs_print_info+0x20/0x20 [ 1142.750890][T16825] ? load_image+0x410/0x410 [ 1142.755497][T16825] warn_alloc+0x245/0x320 [ 1142.759850][T16825] ? zone_watermark_ok_safe+0x250/0x250 [ 1142.765404][T16825] ? __mutex_lock_common+0x435/0x2400 [ 1142.770912][T16825] ? tomoyo_path_number_perm+0x5f7/0x6b0 [ 1142.776676][T16825] __vmalloc_node_range+0x2b1/0x8b0 [ 1142.781902][T16825] ? dvb_dvr_do_ioctl+0x12a/0x220 [ 1142.786943][T16825] vmalloc+0x75/0x80 [ 1142.790854][T16825] ? dvb_dvr_do_ioctl+0x12a/0x220 [ 1142.795894][T16825] dvb_dvr_do_ioctl+0x12a/0x220 [ 1142.800770][T16825] dvb_usercopy+0x191/0x2b0 [ 1142.805297][T16825] ? dvb_dvr_release+0x3d0/0x3d0 [ 1142.810252][T16825] ? dvb_generic_ioctl+0xb0/0xb0 [ 1142.815219][T16825] ? dvb_dvr_poll+0x230/0x230 [ 1142.819912][T16825] dvb_dvr_ioctl+0x25/0x30 [ 1142.824345][T16825] __se_sys_ioctl+0xfa/0x170 [ 1142.829031][T16825] do_syscall_64+0x4c/0xa0 [ 1142.833458][T16825] ? clear_bhb_loop+0x30/0x80 [ 1142.838231][T16825] ? clear_bhb_loop+0x30/0x80 [ 1142.842927][T16825] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1142.848867][T16825] RIP: 0033:0x7fc0a12610d9 [ 1142.853358][T16825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1142.873043][T16825] RSP: 002b:00007fc09f4b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1142.881478][T16825] RAX: ffffffffffffffda RBX: 00007fc0a14e8fa0 RCX: 00007fc0a12610d9 [ 1142.889474][T16825] RDX: 00004000000000bc RSI: 0000000000006f2d RDI: 0000000000000003 [ 1142.897462][T16825] RBP: 00007fc0a12f8024 R08: 0000000000000000 R09: 0000000000000000 [ 1142.905448][T16825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1142.910326][T15647] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 1142.913427][T16825] R13: 00007fc0a14e9038 R14: 00007fc0a14e8fa0 R15: 00007ffcf1de1878 [ 1142.928861][T16825] [ 1142.935642][ T5835] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1142.953616][ T5836] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1142.973664][ T5836] usb 4-1: New USB device found, idVendor=0000, idProduct=d970, bcdDevice= 1.00 [ 1142.984703][T16839] i2c i2c-0: Invalid block write size 33 [ 1143.000013][ T5836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.043771][T16825] Mem-Info: [ 1143.046969][T16825] active_anon:67 inactive_anon:9171 isolated_anon:0 [ 1143.046969][T16825] active_file:4565 inactive_file:11819 isolated_file:0 [ 1143.046969][T16825] unevictable:768 dirty:221 writeback:0 [ 1143.046969][T16825] slab_reclaimable:21870 slab_unreclaimable:103943 [ 1143.046969][T16825] mapped:30673 shmem:1749 pagetables:794 bounce:0 [ 1143.046969][T16825] kernel_misc_reclaimable:0 [ 1143.046969][T16825] free:1379427 free_pcp:11348 free_cma:0 [ 1143.102240][T16825] Node 0 active_anon:268kB inactive_anon:36140kB active_file:18256kB inactive_file:47140kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122692kB dirty:884kB writeback:0kB shmem:4916kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:12428kB pagetables:3076kB all_unreclaimable? no [ 1143.144557][ T5836] usb 4-1: Found UVC 1.00 device (0000:d970) [ 1143.218343][T16825] Node 1 active_anon:0kB inactive_anon:544kB active_file:4kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 1143.250400][ T5835] usb 5-1: Using ep0 maxpacket: 8 [ 1143.258708][T16825] Node 0 DMA free:15328kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1143.285863][T16825] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 1143.300588][T16825] Node 0 DMA32 free:1590260kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:268kB inactive_anon:36140kB active_file:18256kB inactive_file:47140kB unevictable:1536kB writepending:884kB present:3129332kB managed:2606512kB mlocked:0kB bounce:0kB free_pcp:41000kB local_pcp:21360kB free_cma:0kB [ 1143.336598][T16825] lowmem_reserve[]: 0 0 0 0 0 [ 1143.342575][T16825] Node 0 Normal free:4kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 1143.369090][T16825] lowmem_reserve[]: 0 0 0 0 0 [ 1143.374156][T16825] Node 1 Normal free:3910548kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:0kB inactive_anon:544kB active_file:4kB inactive_file:136kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:4336kB local_pcp:0kB free_cma:0kB [ 1143.385831][ T5836] usb 4-1: No streaming interface found for terminal 2. [ 1143.420279][T15647] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1143.441642][T15647] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 1143.490452][ T5835] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1143.528727][T16825] lowmem_reserve[]: 0 0 0 0 0 [ 1143.559151][T16825] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 1143.590383][T15647] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1143.627260][T15647] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1143.638320][T16857] netlink: 40 bytes leftover after parsing attributes in process `syz.2.20092'. [ 1143.645669][T15647] usb 2-1: SerialNumber: syz [ 1143.660068][T16825] Node 0 DMA32: 141*4kB (UME) 922*8kB (UME) 1121*16kB (UME) 483*32kB (UME) 193*64kB (UME) 245*128kB (UME) 163*256kB (UME) 100*512kB (ME) 55*1024kB (UME) 34*2048kB (UME) 314*4096kB (UM) = 1590068kB [ 1143.680568][T16828] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1143.680982][ T5835] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 1143.709437][T15647] hub 2-1:1.0: bad descriptor, ignoring hub [ 1143.720032][ T5835] usb 5-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 1143.726116][T15647] hub: probe of 2-1:1.0 failed with error -5 [ 1143.746001][ T5835] usb 5-1: config 4 has no interface number 0 [ 1143.760107][T16825] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1143.775697][ T5836] usb 4-1: USB disconnect, device number 30 [ 1143.796359][T15647] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 1143.800333][T16825] Node 1 Normal: 283*4kB (UE) 53*8kB (UME) 30*16kB (UE) 225*32kB (UME) 80*64kB (UME) 27*128kB (UME) 10*256kB (UE) 8*512kB (UE) 1*1024kB (E) 3*2048kB (M) 947*4096kB (M) = 3910548kB [ 1143.884742][T16825] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1143.904559][T16825] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1143.919746][T16871] netlink: 16 bytes leftover after parsing attributes in process `syz.2.20094'. [ 1143.931175][T15647] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 1143.943121][T16825] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1143.970313][T16825] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1143.991419][T15647] usb 2-1: USB disconnect, device number 6 [ 1144.010169][T16825] 18200 total pagecache pages [ 1144.014950][T16825] 99 pages in swap cache [ 1144.019195][T16825] Swap cache stats: add 2758, delete 2659, find 251/470 [ 1144.039218][ T5835] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 1144.059675][ T5835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.078814][T16825] Free swap = 118296kB [ 1144.085161][ T5835] usb 5-1: Product: syz [ 1144.098839][T16825] Total swap = 124996kB [ 1144.100472][ T5835] usb 5-1: Manufacturer: syz [ 1144.107973][ T5835] usb 5-1: SerialNumber: syz [ 1144.110926][T16825] 2097051 pages RAM [ 1144.143963][T16825] 0 pages HighMem/MovableOnly [ 1144.148668][T16825] 411500 pages reserved [ 1144.179583][T16825] 0 pages cma reserved [ 1144.332861][T16896] netlink: 'syz.0.20099': attribute type 1 has an invalid length. [ 1144.335298][T16897] netlink: 'syz.3.20100': attribute type 1 has an invalid length. [ 1144.358171][T16896] netlink: 'syz.0.20099': attribute type 1 has an invalid length. [ 1144.419628][T16901] netlink: 34 bytes leftover after parsing attributes in process `syz.2.20101'. [ 1144.600509][ T5835] usb 5-1: Found UVC 0.02 device syz (04f2:b746) [ 1144.607915][ T5835] usb 5-1: No valid video chain found. [ 1144.629857][T16913] netlink: 'syz.0.20104': attribute type 1 has an invalid length. [ 1144.674422][ T5835] usb 5-1: USB disconnect, device number 28 [ 1145.042071][T16945] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1145.840910][ T8925] usb 1-1: new low-speed USB device number 127 using dummy_hcd [ 1145.880275][T15647] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1146.130236][T15647] usb 2-1: Using ep0 maxpacket: 8 [ 1146.250506][T15647] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1146.271828][T15647] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1146.340341][T15647] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1146.373228][T15647] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1146.397940][ T8925] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1146.400490][T15647] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1146.429085][T15647] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1146.451433][T15647] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1146.468565][T15647] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.530591][ T8925] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1146.535561][T15647] usbtmc 2-1:16.0: bulk endpoints not found [ 1146.560049][ T8925] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1146.595480][ T5835] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1146.622224][ T5836] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1146.800923][T15647] usb 2-1: USB disconnect, device number 7 [ 1146.870582][ T8925] usb 1-1: string descriptor 0 read error: -22 [ 1146.887038][ T8925] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1146.907442][ T5836] usb 4-1: Using ep0 maxpacket: 8 [ 1146.915706][ T8925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.010271][ T5835] usb 3-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e [ 1147.025628][ T5835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.055080][ T5836] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1147.085499][ T5836] usb 4-1: New USB device found, idVendor=05a9, idProduct=2630, bcdDevice=55.12 [ 1147.102208][ T5835] pwc: Logitech/Cisco VT Camera webcam detected. [ 1147.128893][ T5836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.153140][ T5836] usb 4-1: config 0 descriptor?? [ 1147.213048][ T5836] usb 4-1: Found UVC 0.00 device (05a9:2630) [ 1147.231678][ T8925] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 1147.239913][ T5836] usb 4-1: No valid video chain found. [ 1147.284959][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1147.437463][T17091] autofs4:pid:17091:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.768), cmd(0xc0189375) [ 1147.452044][ T8925] usb 4-1: USB disconnect, device number 31 [ 1147.458305][T15647] usb 1-1: USB disconnect, device number 127 [ 1147.492900][T17091] autofs4:pid:17091:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 1147.535412][ T5835] pwc: send_video_command error -71 [ 1147.545087][ T5835] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1147.576109][ T5835] Philips webcam: probe of 3-1:127.0 failed with error -71 [ 1147.615766][ T5835] usb 3-1: USB disconnect, device number 11 [ 1147.941358][T17128] netlink: 'syz.4.20171': attribute type 12 has an invalid length. [ 1148.692629][T17180] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5) [ 1149.238395][T17223] mip6: mip6_rthdr_init_state: state's mode is not 2: 0 [ 1149.850345][ T5835] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1150.015901][T17286] loop0: detected capacity change from 0 to 4096 [ 1150.030573][ T8925] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 1150.039955][T17291] device bridge7 entered promiscuous mode [ 1150.130843][T17286] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1150.137658][T17286] EXT4-fs (loop0): Ignoring removed orlov option [ 1150.180951][T17300] netlink: 'syz.3.20228': attribute type 1 has an invalid length. [ 1150.197945][T17286] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x000000000000000e,nodioread_nolock,test_dummy_encryption,lazytime,nodelalloc,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 1150.219493][ C0] vkms_vblank_simulate: vblank timer overrun [ 1150.235839][T17300] netlink: 224 bytes leftover after parsing attributes in process `syz.3.20228'. [ 1150.285636][ T5835] usb 3-1: config 220 has an invalid interface number: 142 but max is 0 [ 1150.300054][ T5835] usb 3-1: config 220 has no interface number 0 [ 1150.332586][ T5835] usb 3-1: config 220 interface 142 has no altsetting 0 [ 1150.450503][ T8925] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 1150.472369][ T8925] usb 5-1: config 0 has no interface number 0 [ 1150.561335][ T5835] usb 3-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=ab.0e [ 1150.580094][ T5835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1150.597288][T17286] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 1150.598060][ T5835] usb 3-1: Product: syz [ 1150.634568][ T5835] usb 3-1: Manufacturer: syz [ 1150.646691][ T5835] usb 3-1: SerialNumber: syz [ 1150.651967][ T8925] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1150.668538][ T8925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1150.692725][ T8925] usb 5-1: Product: syz [ 1150.704456][ T8925] usb 5-1: Manufacturer: syz [ 1150.717812][ T8925] usb 5-1: SerialNumber: syz [ 1150.733421][ T8925] usb 5-1: config 0 descriptor?? [ 1151.000652][ T8925] asix: probe of 5-1:0.251 failed with error -71 [ 1151.030668][ T8925] usb 5-1: USB disconnect, device number 29 [ 1151.062907][ T5835] ttusb_dec_send_command: command bulk message failed: error -22 [ 1151.110172][ T5835] ttusb-dec: probe of 3-1:220.142 failed with error -22 [ 1151.156204][ T5835] usb 3-1: USB disconnect, device number 12 [ 1151.192856][T17345] overlayfs: missing 'lowerdir' [ 1151.668306][T17384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20248'. [ 1151.940722][ T26] audit: type=1326 audit(525438.049:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17401 comm="syz.1.20254" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f79fd8a20d9 code=0x0 [ 1152.509460][T17448] netlink: 20 bytes leftover after parsing attributes in process `syz.3.20272'. [ 1152.519064][T17445] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1152.529612][T17448] netlink: 'syz.3.20272': attribute type 1 has an invalid length. [ 1152.615839][ T8925] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 1153.022045][T17483] netlink: 68 bytes leftover after parsing attributes in process `syz.3.20283'. [ 1153.070089][T17483] netlink: 48 bytes leftover after parsing attributes in process `syz.3.20283'. [ 1153.142898][T17489] netlink: 'syz.1.20287': attribute type 1 has an invalid length. [ 1153.192293][T17489] netlink: 224 bytes leftover after parsing attributes in process `syz.1.20287'. [ 1153.330529][ T8925] usb 5-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 1153.370030][ T8925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1153.396395][ T8925] usb 5-1: Product: syz [ 1153.410057][ T8925] usb 5-1: Manufacturer: syz [ 1153.434897][ T8925] usb 5-1: SerialNumber: syz [ 1153.453070][ T8925] usb 5-1: config 0 descriptor?? [ 1153.545108][ T8925] usb 5-1: selecting invalid altsetting 3 [ 1153.562908][ T8925] comedi comedi5: could not set alternate setting 3 in high speed [ 1153.602944][ T8925] usbdux 5-1:0.0: driver 'usbdux' failed to auto-configure device. [ 1153.644475][ T8925] usbdux: probe of 5-1:0.0 failed with error -22 [ 1153.652353][ T5836] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 1153.763730][T17431] udc-core: couldn't find an available UDC or it's busy [ 1153.796240][T17431] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1153.822698][T17537] netlink: 'syz.0.20302': attribute type 1 has an invalid length. [ 1153.836082][ T8925] usb 5-1: USB disconnect, device number 30 [ 1153.846130][T17537] netlink: 224 bytes leftover after parsing attributes in process `syz.0.20302'. [ 1154.040145][T15647] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1154.112548][ T5836] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1154.140145][ T5836] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 1154.280364][T15647] usb 3-1: Using ep0 maxpacket: 8 [ 1154.280628][ T5836] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1154.314799][ T5836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1154.333064][ T5836] usb 4-1: SerialNumber: syz [ 1154.384237][T17498] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1154.398010][T17566] loop0: detected capacity change from 0 to 1024 [ 1154.423445][ T5836] hub 4-1:1.0: bad descriptor, ignoring hub [ 1154.429423][ T5836] hub: probe of 4-1:1.0 failed with error -5 [ 1154.444772][T15647] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1154.452766][ T4994] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1154.454962][ T5836] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 1154.590664][T15647] usb 3-1: config 4 has an invalid interface number: 147 but max is 0 [ 1154.617710][T15647] usb 3-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 1154.640429][T15647] usb 3-1: config 4 has no interface number 0 [ 1154.651320][ T5836] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 1154.702296][ T5836] usb 4-1: USB disconnect, device number 32 [ 1154.727131][ T26] audit: type=1400 audit(525440.829:85): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="#(%#{//(@\)//&@},['%%&\#*" pid=17582 comm="syz.4.20313" [ 1154.810518][ T5835] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1154.830437][T15647] usb 3-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 1154.860482][T15647] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.868522][T15647] usb 3-1: Product: syz [ 1154.873164][ T4994] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1154.890073][ T4994] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1154.920414][T15647] usb 3-1: Manufacturer: syz [ 1154.925196][T15647] usb 3-1: SerialNumber: syz [ 1154.930363][ T4994] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1154.950227][ T4994] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1154.982537][ T4994] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1154.998453][ T4994] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.071944][ T4994] cxacru 2-1:1.0: submit of read urb for cm 0x90 failed (-90) [ 1155.099831][ T4994] cxacru 2-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 1155.115865][ T4994] cxacru: probe of 2-1:1.0 failed with error -22 [ 1155.260252][ T5835] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1155.276684][ T4994] usb 2-1: USB disconnect, device number 8 [ 1155.374349][ T5835] usb 1-1: config 3 has an invalid interface number: 73 but max is 1 [ 1155.380340][T15647] usb 3-1: Found UVC 0.02 device syz (04f2:b746) [ 1155.390032][ T5835] usb 1-1: config 3 has no interface number 1 [ 1155.399155][T15647] usb 3-1: No valid video chain found. [ 1155.406419][ T5835] usb 1-1: config 3 interface 73 altsetting 14 endpoint 0x2 has an invalid bInterval 136, changing to 7 [ 1155.419493][T15647] usb 3-1: USB disconnect, device number 13 [ 1155.428210][ T5836] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1155.454636][ T5835] usb 1-1: config 3 interface 0 has no altsetting 0 [ 1155.480022][ T5835] usb 1-1: config 3 interface 73 has no altsetting 0 [ 1155.587893][T17626] sctp: [Deprecated]: syz.3.20321 (pid 17626) Use of int in maxseg socket option. [ 1155.587893][T17626] Use struct sctp_assoc_value instead [ 1155.760841][ T5835] usb 1-1: string descriptor 0 read error: -22 [ 1155.777299][ T5835] usb 1-1: New USB device found, idVendor=07ca, idProduct=2835, bcdDevice=eb.e7 [ 1155.803777][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.843715][ T5836] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 1155.862618][ T5836] usb 5-1: config 0 has no interface number 0 [ 1155.868751][ T5836] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1155.934375][ T5835] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1155.975872][ T5835] dvb_usb_af9035: probe of 1-1:3.0 failed with error -22 [ 1156.137526][T17659] autofs4:pid:17659:autofs_fill_super: called with bogus options [ 1156.160931][ T8925] usb 1-1: USB disconnect, device number 2 [ 1156.191707][ T5836] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1156.210546][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.249074][ T5836] usb 5-1: Product: syz [ 1156.280033][ T5836] usb 5-1: Manufacturer: syz [ 1156.288067][ T5836] usb 5-1: SerialNumber: syz [ 1156.294049][T17671] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1156.313880][ T5836] usb 5-1: config 0 descriptor?? [ 1156.390140][ T5836] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 1156.478615][ T5835] usb 4-1: new low-speed USB device number 33 using dummy_hcd [ 1156.838430][ T8925] usb 5-1: USB disconnect, device number 31 [ 1156.857275][ T8925] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 1157.038279][ T5835] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1157.169628][ T5835] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1157.200045][ T5835] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1157.368759][T17738] loop0: detected capacity change from 0 to 512 [ 1157.520478][T17738] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1157.530275][T17738] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01d, mo2=0102] [ 1157.539242][T17738] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 1157.550789][ T5835] usb 4-1: string descriptor 0 read error: -22 [ 1157.558640][ T5835] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1157.579380][ T5835] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1157.639575][T17738] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 1157.660888][T17750] nvme_tcp: malformed address passed: 127.:.0.1:44%0 [ 1157.750275][T17738] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,abort,bsdgroups,noblock_validity,nolazytime,noblock_validity,jqfmt=vfsv0,barrier=0x000000000000d95a,jqfmt=vfsold,,errors=continue. Quota mode: none. [ 1157.901187][ T5835] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 1157.932863][T17738] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.20354: dx entry: limit 65535 != root limit 120 [ 1157.980388][T17784] netlink: 144 bytes leftover after parsing attributes in process `syz.4.20368'. [ 1157.989866][T17738] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.20354: Corrupt directory, running e2fsck is recommended [ 1158.021533][ T5167] udevd[5167]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1158.114712][ T8925] usb 4-1: USB disconnect, device number 33 [ 1158.763052][ T26] audit: type=1400 audit(525444.869:86): apparmor="DENIED" operation="change_onexec" info="label not found" error=-22 profile="unconfined" name="&" pid=17830 comm="syz.0.20383" [ 1158.795335][T17838] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1159.303767][T17865] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (6) [ 1159.349430][T17868] netlink: 100 bytes leftover after parsing attributes in process `syz.1.20397'. [ 1159.380609][ T5835] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1159.388462][T17868] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20397'. [ 1159.484983][T17880] netlink: 24 bytes leftover after parsing attributes in process `syz.0.20401'. [ 1159.920489][ T5835] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1159.939737][ T5835] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.020044][ T5835] usb 4-1: config 0 descriptor?? [ 1160.050813][T17917] openvswitch: netlink: Actions may not be safe on all matching packets [ 1160.164340][T17924] program syz.2.20417 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1160.500764][T17950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20424'. [ 1160.509798][T17950] netlink: 24 bytes leftover after parsing attributes in process `syz.0.20424'. [ 1160.523108][ T5835] ath6kl: Failed to submit usb control message: -71 [ 1160.550040][ T5835] ath6kl: unable to send the bmi data to the device: -71 [ 1160.557400][ T5835] ath6kl: Unable to send get target info: -71 [ 1160.597454][ T5835] ath6kl: Failed to init ath6kl core: -71 [ 1160.710931][ T5835] ath6kl_usb: probe of 4-1:0.0 failed with error -71 [ 1160.751201][ T5835] usb 4-1: USB disconnect, device number 34 [ 1160.993982][T17986] netlink: 'syz.2.20433': attribute type 2 has an invalid length. [ 1161.233056][T18003] xt_ecn: cannot match TCP bits for non-tcp packets [ 1161.251927][T17985] loop0: detected capacity change from 0 to 4096 [ 1161.670697][T18033] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.20450'. [ 1161.977091][T18051] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20460'. [ 1162.138810][T18067] netlink: 'syz.3.20464': attribute type 1 has an invalid length. [ 1162.180058][T18067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20464'. [ 1162.372434][T18083] netlink: 48 bytes leftover after parsing attributes in process `syz.0.20470'. [ 1162.436021][T18083] netlink: 'syz.0.20470': attribute type 8 has an invalid length. [ 1162.471419][T18085] netlink: 'syz.2.20472': attribute type 3 has an invalid length. [ 1162.895035][T18117] netlink: 'syz.3.20485': attribute type 21 has an invalid length. [ 1162.952762][T18117] netlink: 'syz.3.20485': attribute type 4 has an invalid length. [ 1163.000095][T18117] netlink: 'syz.3.20485': attribute type 5 has an invalid length. [ 1163.053773][T18127] netlink: 'syz.2.20487': attribute type 1 has an invalid length. [ 1163.071231][T18127] __nla_validate_parse: 4 callbacks suppressed [ 1163.071248][T18127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20487'. [ 1163.082071][T18117] netlink: 3 bytes leftover after parsing attributes in process `syz.3.20485'. [ 1163.940158][T18194] usb usb9: usbfs: process 18194 (syz.3.20512) did not claim interface 0 before use [ 1164.129004][T18214] netlink: 96 bytes leftover after parsing attributes in process `syz.1.20519'. [ 1164.182647][T18214] netlink: 96 bytes leftover after parsing attributes in process `syz.1.20519'. [ 1164.206803][T18216] loop0: detected capacity change from 0 to 2048 [ 1164.245050][T18223] netlink: 20 bytes leftover after parsing attributes in process `syz.3.20523'. [ 1164.282446][T18216] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1164.348993][T18216] UDF-fs: error (device loop0): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1376) [ 1164.420238][T18216] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 1376) has too big (3368) entry at pos 0 [ 1164.462460][T18237] netlink: 24 bytes leftover after parsing attributes in process `syz.4.20528'. [ 1164.700126][T18254] netlink: 16 bytes leftover after parsing attributes in process `syz.2.20534'. [ 1164.920545][T18279] --map-set only usable from mangle table [ 1165.111052][T18295] netlink: 'syz.0.20548': attribute type 1 has an invalid length. [ 1165.170302][T18295] netlink: 'syz.0.20548': attribute type 2 has an invalid length. [ 1165.178394][T18295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20548'. [ 1165.710281][ T5835] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 1165.930237][ T5836] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 1165.980519][ T8925] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1166.246178][ T5835] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1166.326786][ T5835] usb 3-1: not running at top speed; connect to a high speed hub [ 1166.410637][ T8925] usb 2-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 1166.419825][ T5836] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1166.440003][ T8925] usb 2-1: config 220 has an invalid interface number: 218 but max is 183 [ 1166.452994][T18373] netlink: 40 bytes leftover after parsing attributes in process `syz.4.20577'. [ 1166.462277][ T5836] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1166.478080][ T5835] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1166.507945][ T8925] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 1166.517651][ T5835] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1166.526935][ T5836] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1166.560012][ T8925] usb 2-1: config 220 has no interface number 0 [ 1166.566367][ T8925] usb 2-1: too many endpoints for config 220 interface 218 altsetting 195: 181, using maximum allowed: 30 [ 1166.578117][ T5835] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 1166.592409][ T5836] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1166.635623][ T8925] usb 2-1: config 220 interface 218 altsetting 195 has 0 endpoint descriptors, different from the interface descriptor's value: 181 [ 1166.689292][ T8925] usb 2-1: config 220 interface 218 has no altsetting 0 [ 1166.706599][ T8925] usb 2-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 1166.728146][T18379] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20580'. [ 1166.747501][ T8925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1166.869551][ T5835] usb 3-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 0.40 [ 1166.896208][ T5835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.930014][ T5835] usb 3-1: Product: syz [ 1166.934346][ T5835] usb 3-1: Manufacturer: syz [ 1166.968132][ T5835] usb 3-1: SerialNumber: syz [ 1167.010434][ T5836] usb 1-1: string descriptor 0 read error: -22 [ 1167.028872][ T5836] usb 1-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 1167.068927][ T5836] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 1167.097744][ T8925] usb 2-1: string descriptor 0 read error: -71 [ 1167.116107][ T8925] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 1167.184910][ T8925] gspca_sn9c2028: read1 error -71 [ 1167.191689][ T5836] usb 1-1: 0:2 : does not exist [ 1167.211298][ T8925] gspca_sn9c2028: read1 error -71 [ 1167.241966][ T8925] gspca_sn9c2028: read1 error -71 [ 1167.248990][ T8925] sn9c2028: probe of 2-1:220.218 failed with error -71 [ 1167.258152][ T5836] usb-storage 1-1:1.1: USB Mass Storage device detected [ 1167.310404][ T8925] usb 2-1: USB disconnect, device number 9 [ 1167.371650][ T5835] usb 3-1: 1:1 : no or invalid class specific endpoint descriptor [ 1167.379507][ T5835] usb 3-1: 1:1 : format type 50 is not supported yet [ 1167.468538][ T5835] usb 3-1: 0:2 : does not exist [ 1167.519096][ T5835] usb 3-1: USB disconnect, device number 14 [ 1167.744843][ T5836] us122l: couldn't allocate write buffer [ 1167.751564][ T5836] snd-usb-us122l: probe of 1-1:1.1 failed with error -22 [ 1167.824920][ T5167] udevd[5167]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1167.828143][ T5836] usb 1-1: USB disconnect, device number 3 [ 1168.377781][T18483] __nla_validate_parse: 1 callbacks suppressed [ 1168.377800][T18483] netlink: 344 bytes leftover after parsing attributes in process `syz.1.20602'. [ 1168.451063][T18490] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.20605'. [ 1168.510338][T18490] openvswitch: netlink: Flow key attribute not present in set flow. [ 1168.926789][T18519] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1169.111800][T18513] loop0: detected capacity change from 0 to 4096 [ 1169.241012][T18513] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 1169.258551][T18538] netlink: 16 bytes leftover after parsing attributes in process `syz.1.20624'. [ 1169.368323][T18538] netlink: 16 bytes leftover after parsing attributes in process `syz.1.20624'. [ 1169.619361][T18559] netlink: 9412 bytes leftover after parsing attributes in process `syz.3.20632'. [ 1169.918086][T18565] block device autoloading is deprecated and will be removed. [ 1170.371231][T18598] netlink: 24 bytes leftover after parsing attributes in process `syz.1.20645'. [ 1170.927783][ T26] audit: type=1326 audit(525457.029:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18612 comm="syz.1.20650" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f79fd8a20d9 code=0x0 [ 1170.988129][T18618] netlink: 'syz.0.20652': attribute type 10 has an invalid length. [ 1171.173370][T18618] team0 (unregistering): Port device team_slave_0 removed [ 1171.248716][T18618] team0 (unregistering): Port device team_slave_1 removed [ 1171.422249][T18635] xt_l2tp: invalid flags combination: c [ 1171.452735][ T8925] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1171.776502][ T8925] usb 3-1: Using ep0 maxpacket: 8 [ 1172.122617][T18676] sg_write: data in/out 4194304/65042 bytes for SCSI command 0x0-- guessing data in; [ 1172.122617][T18676] program syz.1.20671 not setting count and/or reply_len properly [ 1172.205115][T18683] loop0: detected capacity change from 0 to 256 [ 1172.270173][ T8925] usb 3-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=88.56 [ 1172.279249][ T8925] usb 3-1: New USB device strings: Mfr=102, Product=169, SerialNumber=3 [ 1172.341198][ T8925] usb 3-1: Product: syz [ 1172.345431][ T8925] usb 3-1: Manufacturer: syz [ 1172.382457][T18695] netlink: 'syz.4.20678': attribute type 1 has an invalid length. [ 1172.390386][ T8925] usb 3-1: SerialNumber: syz [ 1172.396983][ T8925] usb 3-1: config 0 descriptor?? [ 1172.466581][T18702] overlayfs: empty lowerdir [ 1172.475769][ T8925] pwc: Logitech ViewPort AV 100 webcam detected. [ 1172.773620][ T8925] pwc: Failed to set LED on/off time (-71) [ 1172.791435][ T8925] pwc: send_video_command error -71 [ 1172.796673][ T8925] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1172.810130][T18725] netlink: 16 bytes leftover after parsing attributes in process `syz.3.20686'. [ 1172.824171][T18728] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20687'. [ 1172.877657][ T8925] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 1172.890110][T18728] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20687'. [ 1172.933809][ T8925] usb 3-1: USB disconnect, device number 15 [ 1173.186348][T18758] netlink: set zone limit has 8 unknown bytes [ 1173.398970][T18777] loop0: detected capacity change from 0 to 64 [ 1173.699586][ T8925] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1173.845880][T18810] loop0: detected capacity change from 0 to 2048 [ 1173.950305][T18817] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 1173.993228][T18817] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1173.996569][T18810] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1174.014101][ T8925] usb 5-1: Using ep0 maxpacket: 32 [ 1174.230476][ T8925] usb 5-1: config 0 has an invalid interface number: 153 but max is 0 [ 1174.269162][ T8925] usb 5-1: config 0 has no interface number 0 [ 1174.299491][ T8925] usb 5-1: config 0 interface 153 has no altsetting 0 [ 1174.392501][T18839] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20729'. [ 1174.513476][ T8925] usb 5-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=6c.d5 [ 1174.537629][ T8925] usb 5-1: New USB device strings: Mfr=208, Product=45, SerialNumber=3 [ 1174.576712][ T8925] usb 5-1: Product: syz [ 1174.605861][ T8925] usb 5-1: Manufacturer: syz [ 1174.627803][ T8925] usb 5-1: SerialNumber: syz [ 1174.651798][ T8925] usb 5-1: config 0 descriptor?? [ 1174.961644][ T8925] hub 5-1:0.153: bad descriptor, ignoring hub [ 1174.967944][ T8925] hub: probe of 5-1:0.153 failed with error -5 [ 1175.010139][ T5835] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1175.018952][ T8925] sierra 5-1:0.153: Sierra USB modem converter detected [ 1175.106047][ T8925] usb 5-1: USB disconnect, device number 32 [ 1175.113840][ T8925] sierra 5-1:0.153: device disconnected [ 1175.302054][ T5835] usb 4-1: Using ep0 maxpacket: 16 [ 1175.426208][T18921] binder: 18920:18921 ioctl c0306201 200000001a80 returned -14 [ 1175.485507][ T5835] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 1175.528400][ T5835] usb 4-1: config 0 has no interface number 0 [ 1175.565316][ T5835] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1175.620008][ T5835] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1175.924228][ T5835] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1175.953672][ T5835] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1175.984009][ T5835] usb 4-1: Product: syz [ 1175.988251][ T5835] usb 4-1: Manufacturer: syz [ 1176.039991][ T5835] usb 4-1: SerialNumber: syz [ 1176.069733][ T5835] usb 4-1: config 0 descriptor?? [ 1176.103588][T18965] netlink: 'syz.2.20768': attribute type 7 has an invalid length. [ 1176.144970][T18867] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1176.158229][T18867] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1176.240384][T18976] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 1176.245403][T18977] netlink: 224 bytes leftover after parsing attributes in process `syz.0.20773'. [ 1176.421799][T18867] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1176.450176][T18867] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1176.613142][T19035] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551614) [ 1176.666611][T19035] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 1176.678752][ T5835] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1176.699242][ T5835] asix: probe of 4-1:0.34 failed with error -71 [ 1176.770262][ T5835] usb 4-1: USB disconnect, device number 35 [ 1176.815579][T19047] netlink: 'syz.2.20787': attribute type 4 has an invalid length. [ 1176.860265][T19047] netlink: 152 bytes leftover after parsing attributes in process `syz.2.20787'. [ 1176.869530][T19047] rdma_rxe: ignoring netdev event = 9 for bond0 [ 1177.000799][T19047] rdma_rxe: ignoring netdev event = 8 for bond0 [ 1177.022257][T19047] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1177.082147][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.131011][T19063] netlink: 'syz.0.20791': attribute type 21 has an invalid length. [ 1177.138939][T19063] netlink: 128 bytes leftover after parsing attributes in process `syz.0.20791'. [ 1177.160110][T19063] netlink: 3 bytes leftover after parsing attributes in process `syz.0.20791'. [ 1177.682945][T19135] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20807'. [ 1177.733735][T19135] netlink: 31 bytes leftover after parsing attributes in process `syz.4.20807'. [ 1177.773579][T19135] netlink: 'syz.4.20807': attribute type 3 has an invalid length. [ 1177.808294][T19135] netlink: 'syz.4.20807': attribute type 2 has an invalid length. [ 1177.846677][T19135] netlink: 31 bytes leftover after parsing attributes in process `syz.4.20807'. [ 1177.903730][ T5835] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1178.296230][T19180] netlink: 'syz.1.20824': attribute type 1 has an invalid length. [ 1178.356663][ T5835] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1178.406238][ T5835] usb 4-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1178.426343][T19180] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.20824'. [ 1178.450238][T19180] netlink: 1 bytes leftover after parsing attributes in process `syz.1.20824'. [ 1178.476630][ T5835] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1178.770230][ T5835] usb 4-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 1178.779365][ T5835] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.838046][ T5835] usb 4-1: Product: syz [ 1178.857114][ T5835] usb 4-1: Manufacturer: syz [ 1178.890019][ T5835] usb 4-1: SerialNumber: syz [ 1178.920437][ T4994] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1178.951599][ T5835] usb-storage 4-1:1.0: USB Mass Storage device detected [ 1179.010808][ T5835] usb-storage 4-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 1179.165380][ T4994] usb 1-1: Using ep0 maxpacket: 8 [ 1179.240053][ T5835] usb 4-1: USB disconnect, device number 36 [ 1179.317174][T19254] netlink: 'syz.2.20846': attribute type 21 has an invalid length. [ 1179.350675][ T4994] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1179.430323][ T4994] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1179.469163][ T4994] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1179.524725][ T4994] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1179.576752][ T4994] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1179.610806][ T4994] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1179.651088][ T4994] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1179.651171][T19270] __nla_validate_parse: 2 callbacks suppressed [ 1179.651183][T19270] netlink: 56 bytes leftover after parsing attributes in process `syz.2.20853'. [ 1179.693243][ T4994] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1179.715429][T19270] netlink: 56 bytes leftover after parsing attributes in process `syz.2.20853'. [ 1179.870595][ T4994] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1179.879749][ T4994] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1179.929230][ T4994] usb 1-1: Product: syz [ 1179.948958][ T4994] usb 1-1: Manufacturer: syz [ 1179.959119][ T4994] usb 1-1: SerialNumber: syz [ 1179.984496][ T4995] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1180.005674][ T4994] usb 1-1: config 0 descriptor?? [ 1180.031059][T19287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20859'. [ 1180.070547][T19203] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1180.201748][ T4994] snd-usb-audio: probe of 1-1:0.0 failed with error -12 [ 1180.240034][ T4995] usb 2-1: Using ep0 maxpacket: 8 [ 1180.336102][ T6357] udevd[6357]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1180.387360][ T4994] usb 1-1: USB disconnect, device number 4 [ 1180.530508][ T4995] usb 2-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=88.56 [ 1180.539633][ T4995] usb 2-1: New USB device strings: Mfr=102, Product=169, SerialNumber=3 [ 1180.552592][T19340] netlink: 'syz.2.20868': attribute type 21 has an invalid length. [ 1180.592429][T19342] netlink: 'syz.4.20870': attribute type 1 has an invalid length. [ 1180.600469][ T4995] usb 2-1: Product: syz [ 1180.604653][ T4995] usb 2-1: Manufacturer: syz [ 1180.609304][ T4995] usb 2-1: SerialNumber: syz [ 1180.620146][T19340] netlink: 128 bytes leftover after parsing attributes in process `syz.2.20868'. [ 1180.643507][T19342] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20870'. [ 1180.650333][T19340] netlink: 'syz.2.20868': attribute type 4 has an invalid length. [ 1180.670435][ T4995] usb 2-1: config 0 descriptor?? [ 1180.700302][T19340] netlink: 3 bytes leftover after parsing attributes in process `syz.2.20868'. [ 1180.713440][ T4995] pwc: Logitech ViewPort AV 100 webcam detected. [ 1180.980442][ T4995] pwc: Failed to set LED on/off time (-71) [ 1181.001874][ T4995] pwc: send_video_command error -71 [ 1181.007119][ T4995] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1181.055648][ T4995] Philips webcam: probe of 2-1:0.0 failed with error -71 [ 1181.082776][ T4995] usb 2-1: USB disconnect, device number 10 [ 1181.213966][ T8925] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 1181.490316][ T4994] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 1181.660700][ T8925] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1181.679493][ T4995] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1181.680597][ T8925] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1181.870709][ T4994] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1181.898935][ T4994] usb 1-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1181.992660][ T8925] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1182.011938][ T8925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1182.046604][ T8925] usb 4-1: Product: syz [ 1182.065878][ T4995] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1182.070001][ T8925] usb 4-1: Manufacturer: syz [ 1182.093719][ T4995] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1182.111248][ T8925] usb 4-1: SerialNumber: syz [ 1182.120334][ T4994] usb 1-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 1182.148210][ T4994] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1182.160039][ T4995] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1182.181274][ T8925] usb 4-1: bad CDC descriptors [ 1182.186807][ T4994] usb 1-1: Product: syz [ 1182.202393][ T4994] usb 1-1: Manufacturer: syz [ 1182.207116][ T4994] usb 1-1: SerialNumber: syz [ 1182.234842][T19436] netlink: 20 bytes leftover after parsing attributes in process `syz.4.20899'. [ 1182.380340][ T4995] usb 3-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 1182.389425][ T4995] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1182.419288][ T4995] usb 3-1: Product: syz [ 1182.438660][ T4995] usb 3-1: Manufacturer: syz [ 1182.449919][ T4995] usb 3-1: SerialNumber: syz [ 1182.500060][ T8925] usb 4-1: USB disconnect, device number 37 [ 1182.500416][ T4994] snd-usb-caiaq 1-1:1.0: invalid EPs [ 1182.526293][ T4994] usb 1-1: unable to init card! (ret=-22) [ 1182.538381][ T4994] snd-usb-caiaq: probe of 1-1:1.0 failed with error -22 [ 1182.620764][T19464] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 1182.730300][ T4995] usb 3-1: 1:1 : no or invalid class specific endpoint descriptor [ 1182.738175][ T4995] usb 3-1: 1:1 : format type 0 is detected, processed as PCM [ 1182.777412][ T4995] usb 3-1: 1:1 : sample bitwidth 135 in over sample bytes 14 [ 1182.812602][ T4995] usb 3-1: 1:1 : unsupported sample bitwidth 135 in 14 bytes [ 1182.842659][ T4994] usb 1-1: USB disconnect, device number 5 [ 1182.890543][ T4995] usb 3-1: USB disconnect, device number 16 [ 1183.151500][ T5167] udevd[5167]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1183.178347][T19508] binder: 19507:19508 ioctl c0306201 200000001a80 returned -14 [ 1183.399663][T19527] validate_nla: 1 callbacks suppressed [ 1183.399682][T19527] netlink: 'syz.1.20920': attribute type 3 has an invalid length. [ 1183.851295][T19558] SET target dimension over the limit! [ 1184.209879][T19591] netlink: 40 bytes leftover after parsing attributes in process `syz.1.20944'. [ 1184.344324][ T8925] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1184.390424][T19602] netlink: 'syz.0.20950': attribute type 21 has an invalid length. [ 1184.456465][T19602] IPv6: NLM_F_CREATE should be specified when creating new route [ 1184.520281][T19611] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20954'. [ 1184.773965][T19622] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.20958'. [ 1184.820042][T19622] openvswitch: netlink: Flow key attribute not present in set flow. [ 1184.938530][ T8925] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1184.968928][ T8925] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1185.013892][ T8925] usb 5-1: Product: syz [ 1185.030252][T19643] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1185.043974][ T8925] usb 5-1: SerialNumber: syz [ 1185.078588][ T8925] usb 5-1: config 0 descriptor?? [ 1185.370811][ T8925] hso 5-1:0.0: Can't find BULK IN endpoint [ 1185.580112][ T8925] usb 5-1: USB disconnect, device number 33 [ 1185.737508][T19695] xt_TCPMSS: Only works on TCP SYN packets [ 1186.059327][T19725] dlm: no locking on control device [ 1186.162413][T19734] SET target dimension over the limit! [ 1186.220241][ T4994] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1186.440880][ T8925] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1186.468590][ T4994] usb 1-1: Using ep0 maxpacket: 8 [ 1186.473934][ T4995] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1186.760540][ T4994] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55 [ 1186.781601][ T4994] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.791210][ T4994] usb 1-1: Product: syz [ 1186.795421][ T4994] usb 1-1: Manufacturer: syz [ 1186.820427][ T4994] usb 1-1: SerialNumber: syz [ 1186.837141][ T4994] usb 1-1: config 0 descriptor?? [ 1186.860292][ T4995] usb 3-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 1186.862027][T19768] xt_l2tp: invalid flags combination: c [ 1186.870535][ T4995] usb 3-1: config 220 has an invalid interface number: 218 but max is 183 [ 1186.909513][ T4995] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 1186.946388][ T4995] usb 3-1: config 220 has no interface number 0 [ 1186.957921][ T4995] usb 3-1: too many endpoints for config 220 interface 218 altsetting 195: 181, using maximum allowed: 30 [ 1186.978473][ T4995] usb 3-1: config 220 interface 218 altsetting 195 has 0 endpoint descriptors, different from the interface descriptor's value: 181 [ 1187.002080][ T8925] usb 2-1: config 11 has an invalid interface number: 109 but max is 0 [ 1187.002116][ T4995] usb 3-1: config 220 interface 218 has no altsetting 0 [ 1187.020005][ T8925] usb 2-1: config 11 has no interface number 0 [ 1187.026203][ T8925] usb 2-1: config 11 interface 109 altsetting 119 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1187.031444][ T4995] usb 3-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 1187.100011][ T8925] usb 2-1: config 11 interface 109 has no altsetting 0 [ 1187.118494][ T4995] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1187.170701][ T4994] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1187.180650][ T4994] dvb_usb_af9015: probe of 1-1:0.0 failed with error -22 [ 1187.218598][ T4994] usb 1-1: USB disconnect, device number 6 [ 1187.316076][T19793] netlink: 16 bytes leftover after parsing attributes in process `syz.3.21011'. [ 1187.340048][ T8925] usb 2-1: New USB device found, idVendor=0582, idProduct=63dc, bcdDevice=5f.b4 [ 1187.349133][ T8925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1187.380156][T19793] netlink: 16 bytes leftover after parsing attributes in process `syz.3.21011'. [ 1187.402942][ T8925] usb 2-1: Product: syz [ 1187.407149][ T8925] usb 2-1: Manufacturer: syz [ 1187.419760][ T8925] usb 2-1: SerialNumber: syz [ 1187.475579][ T4995] usb 3-1: string descriptor 0 read error: -71 [ 1187.488595][ T4995] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 1187.550408][ T4995] gspca_sn9c2028: read1 error -71 [ 1187.570283][ T4995] gspca_sn9c2028: read1 error -71 [ 1187.578175][T19803] netlink: 'syz.3.21014': attribute type 21 has an invalid length. [ 1187.590270][ T4995] gspca_sn9c2028: read1 error -71 [ 1187.595356][ T4995] sn9c2028: probe of 3-1:220.218 failed with error -71 [ 1187.625073][T10200] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 1187.660345][ T4995] usb 3-1: USB disconnect, device number 17 [ 1188.125490][ T8925] usb 2-1: USB disconnect, device number 11 [ 1188.141355][T19845] overlayfs: empty lowerdir [ 1188.433384][T19871] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21033'. [ 1188.455236][ T5167] udevd[5167]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:11.109/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1188.591466][ T4994] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1188.950315][ T4994] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1188.987782][ T4994] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1189.030157][ T4994] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1189.050891][T19914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21047'. [ 1189.110232][T19914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21047'. [ 1189.120179][T19920] netlink: 12 bytes leftover after parsing attributes in process `syz.4.21050'. [ 1189.155561][T19920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21050'. [ 1189.190167][T19920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21050'. [ 1189.270358][ T4994] usb 1-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 1189.279659][ T4994] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1189.332988][ T4994] usb 1-1: Product: syz [ 1189.347188][ T4994] usb 1-1: Manufacturer: syz [ 1189.381387][ T4994] usb 1-1: SerialNumber: syz [ 1189.593682][T19943] netlink: 'syz.2.21057': attribute type 10 has an invalid length. [ 1189.629193][ T26] audit: type=1400 audit(525475.729:88): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=":+%%:" pid=19944 comm="syz.4.21058" [ 1189.690407][ T4994] usb 1-1: 1:1 : no or invalid class specific endpoint descriptor [ 1189.698505][ T4994] usb 1-1: 1:1 : format type 0 is detected, processed as PCM [ 1189.743724][ T4994] usb 1-1: 1:1 : sample bitwidth 135 in over sample bytes 14 [ 1189.748027][T19943] team0 (unregistering): Port device team_slave_0 removed [ 1189.780152][ T4994] usb 1-1: 1:1 : unsupported sample bitwidth 135 in 14 bytes [ 1189.821476][T19943] team0 (unregistering): Port device team_slave_1 removed [ 1189.842920][ T4994] usb 1-1: USB disconnect, device number 7 [ 1190.143340][T19979] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21064'. [ 1190.239885][T19983] netlink: 'syz.4.21065': attribute type 3 has an invalid length. [ 1190.360786][T19993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21069'. [ 1190.724542][T20017] netlink: 'syz.3.21077': attribute type 10 has an invalid length. [ 1190.901089][ T7676] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1190.974980][T20017] team0 (unregistering): Port device team_slave_1 removed [ 1191.172435][ T7676] usb 5-1: Using ep0 maxpacket: 8 [ 1191.614389][ T26] audit: type=1400 audit(525477.719:89): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=":+%%:" pid=20065 comm="syz.2.21095" [ 1191.632224][ C0] vkms_vblank_simulate: vblank timer overrun [ 1191.643519][ T7676] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55 [ 1191.672880][ T7676] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.703267][ T7676] usb 5-1: Product: syz [ 1191.703292][ T7676] usb 5-1: Manufacturer: syz [ 1191.703309][ T7676] usb 5-1: SerialNumber: syz [ 1191.724401][ T7676] usb 5-1: config 0 descriptor?? [ 1191.996360][ T7676] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1192.029911][ T7676] dvb_usb_af9015: probe of 5-1:0.0 failed with error -22 [ 1192.080352][ T7676] usb 5-1: USB disconnect, device number 34 [ 1192.119831][T20100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21105'. [ 1192.124436][ T4994] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1192.630434][ T4994] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1192.659879][ T4994] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1192.715721][ T4994] usb 1-1: Product: syz [ 1192.719920][ T4994] usb 1-1: SerialNumber: syz [ 1192.758221][ T4994] usb 1-1: config 0 descriptor?? [ 1193.050313][ T4994] hso 1-1:0.0: Can't find BULK IN endpoint [ 1193.294800][ T4994] usb 1-1: USB disconnect, device number 8 [ 1193.922725][T20212] netlink: 'syz.0.21139': attribute type 1 has an invalid length. [ 1194.065673][T20253] netlink: set zone limit has 8 unknown bytes [ 1194.132290][T20259] netlink: 'syz.2.21145': attribute type 2 has an invalid length. [ 1194.206066][ T7676] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 1194.680496][ T7676] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1194.751258][ T7676] usb 5-1: not running at top speed; connect to a high speed hub [ 1194.820714][ T5835] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1194.883008][ T7676] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1194.923666][ T7676] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1194.973310][ T7676] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 1195.290643][T20339] netlink: 'syz.1.21174': attribute type 3 has an invalid length. [ 1195.295980][ T7676] usb 5-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 0.40 [ 1195.338049][ T7676] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1195.366417][ T7676] usb 5-1: Product: syz [ 1195.371394][ T5835] usb 1-1: config 11 has an invalid interface number: 109 but max is 0 [ 1195.389848][ T5835] usb 1-1: config 11 has no interface number 0 [ 1195.409994][ T7676] usb 5-1: Manufacturer: syz [ 1195.430010][ T7676] usb 5-1: SerialNumber: syz [ 1195.435081][ T5835] usb 1-1: config 11 interface 109 altsetting 119 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1195.507146][ T5835] usb 1-1: config 11 interface 109 has no altsetting 0 [ 1195.761061][ T5835] usb 1-1: New USB device found, idVendor=0582, idProduct=63dc, bcdDevice=5f.b4 [ 1195.784001][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1195.819988][ T5835] usb 1-1: Product: syz [ 1195.837872][ T5835] usb 1-1: Manufacturer: syz [ 1195.860268][ T5835] usb 1-1: SerialNumber: syz [ 1195.900471][ T7676] usb 5-1: 1:1 : no or invalid class specific endpoint descriptor [ 1195.910338][ T7676] usb 5-1: 1:1 : format type 50 is not supported yet [ 1195.950133][ T7676] usb 5-1: 0:2 : does not exist [ 1196.042962][ T7676] usb 5-1: USB disconnect, device number 35 [ 1196.420573][ T4322] udevd[4322]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1196.440037][ T5835] usb 1-1: USB disconnect, device number 9 [ 1196.794670][ T4180] udevd[4180]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:11.109/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1197.560589][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1198.252358][T20546] netlink: 24 bytes leftover after parsing attributes in process `syz.4.21241'. [ 1198.418131][T20482] loop0: detected capacity change from 0 to 32768 [ 1198.540879][T20482] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.21215 (20482) [ 1198.608388][T20482] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 1198.650162][T20482] BTRFS info (device loop0): using free space tree [ 1198.696851][T20482] BTRFS info (device loop0): has skinny extents [ 1198.741090][T20570] netlink: 'syz.4.21248': attribute type 3 has an invalid length. [ 1198.975187][T20593] netlink: 24 bytes leftover after parsing attributes in process `syz.3.21253'. [ 1199.027984][T20601] ipt_CLUSTERIP: Please specify destination IP [ 1199.090292][T20482] BTRFS info (device loop0): enabling ssd optimizations [ 1199.431280][T20623] ieee802154 phy1 wpan1: encryption failed: -22 [ 1200.166010][T20669] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1200.225961][T20669] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1200.419798][T20669] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1200.431209][T20669] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1200.451140][T20669] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1200.498381][T20686] loop0: detected capacity change from 0 to 8 [ 1200.528330][T20686] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1201.800396][T20780] xt_bpf: check failed: parse error [ 1202.242970][T20813] autofs4:pid:20813:autofs_fill_super: called with bogus options [ 1202.281295][ T5830] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1202.299335][T20819] netlink: 'syz.1.21331': attribute type 1 has an invalid length. [ 1202.350188][T20819] netlink: 'syz.1.21331': attribute type 9 has an invalid length. [ 1202.594287][ T5830] usb 5-1: Using ep0 maxpacket: 16 [ 1202.760654][ T5830] usb 5-1: config 0 has no interfaces? [ 1202.978610][ T5830] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1203.000071][ T5830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1203.040094][ T5830] usb 5-1: Product: syz [ 1203.044295][ T5830] usb 5-1: Manufacturer: syz [ 1203.064136][T20860] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1203.082245][ T5830] usb 5-1: SerialNumber: syz [ 1203.100460][T20860] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1203.108715][ T5830] r8152-cfgselector 5-1: config 0 descriptor?? [ 1203.129338][T20860] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1203.206963][T20860] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1203.392330][ T5830] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1203.607941][ T5836] r8152-cfgselector 5-1: USB disconnect, device number 36 [ 1203.863742][ T5830] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1204.366712][ T5830] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1204.399752][ T5830] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1204.459998][ T5830] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1204.520008][ T5830] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1204.529779][ T5830] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 0 [ 1204.629989][ T5830] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 1204.698240][ T5830] usb 1-1: New USB device found, idVendor=1608, idProduct=0201, bcdDevice= 1.00 [ 1204.738383][ T5830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.810677][T20880] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1204.825845][T20880] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1204.878752][ T5830] io_ti 1-1:1.0: required endpoints missing [ 1205.067147][T20994] netlink: 'syz.2.21391': attribute type 1 has an invalid length. [ 1205.083126][ T5836] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1205.126025][T20994] netlink: 244 bytes leftover after parsing attributes in process `syz.2.21391'. [ 1205.137546][ T5830] usb 1-1: USB disconnect, device number 10 [ 1205.162143][T20997] program syz.1.21392 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1205.378934][ T5836] usb 5-1: Using ep0 maxpacket: 32 [ 1205.510345][ T5836] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 1205.528966][ T5836] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1205.551745][T21017] xt_l2tp: wrong L2TP version: 0 [ 1205.564663][ T5836] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1205.593974][ T5836] usb 5-1: config 1 has no interface number 0 [ 1205.616789][ T5836] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1205.657198][ T5836] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1205.714668][ T5836] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1205.755466][ T5836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1205.846052][ T5836] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 1205.914906][T21042] xt_limit: Overflow, try lower: 2/2147483648 [ 1206.062167][ T5836] snd_usb_pod 5-1:1.1: invalid control EP [ 1206.070252][ T5836] snd_usb_pod 5-1:1.1: cannot start listening: -22 [ 1206.100840][ T5836] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 1206.149250][ T5836] snd_usb_pod: probe of 5-1:1.1 failed with error -22 [ 1206.176387][T21056] openvswitch: netlink: EtherType 0 is less than min 600 [ 1206.265622][ T5836] usb 5-1: USB disconnect, device number 37 [ 1206.432280][T21081] kAFS: unable to lookup cell '.,' [ 1206.536676][T21089] damon: min_nr_regions (0) must be at least 3 [ 1206.997788][T21114] netlink: 'syz.2.21431': attribute type 13 has an invalid length. [ 1207.040100][T21114] netlink: 152 bytes leftover after parsing attributes in process `syz.2.21431'. [ 1207.346333][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 1207.573810][T21161] comedi comedi4: bad chanlist[0]=0x00200000 chan=0 range length=2 [ 1207.875271][T21183] loop0: detected capacity change from 0 to 256 [ 1207.980873][T21183] exfat: Deprecated parameter 'utf8' [ 1207.986282][T21183] exfat: Deprecated parameter 'namecase' [ 1208.074335][T21183] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 1208.792766][T21238] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21477'. [ 1209.160261][ T4995] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1209.410186][ T4995] usb 3-1: Using ep0 maxpacket: 8 [ 1209.530437][ T4995] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 1209.569919][ T4995] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1209.582621][T21280] netlink: 'syz.3.21492': attribute type 3 has an invalid length. [ 1209.616118][ T4995] usb 3-1: config 0 has no interface number 0 [ 1209.661997][T21288] netlink: 16 bytes leftover after parsing attributes in process `syz.1.21493'. [ 1209.830554][ T4995] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1209.839635][ T4995] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.874751][ T4995] usb 3-1: Product: syz [ 1209.879037][ T4995] usb 3-1: Manufacturer: syz [ 1209.899287][ T4995] usb 3-1: SerialNumber: syz [ 1209.906285][ T4995] usb 3-1: config 0 descriptor?? [ 1209.914844][T21305] binfmt_misc: register: failed to install interpreter file ./file2 [ 1210.080239][ T4994] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1210.172121][ T4995] usb 3-1: USB disconnect, device number 18 [ 1210.439098][T21342] xt_CT: No such helper "netbios-ns" [ 1210.450372][ T4994] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 1210.458517][ T4994] usb 2-1: config 0 has no interface number 0 [ 1210.495130][ T4994] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1210.720460][ T4994] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1210.730039][ T4994] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.738044][ T4994] usb 2-1: Product: syz [ 1210.771640][ T4994] usb 2-1: Manufacturer: syz [ 1210.790552][ T4994] usb 2-1: SerialNumber: syz [ 1210.841229][ T4994] usb 2-1: config 0 descriptor?? [ 1210.893842][ T4994] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 1211.080738][T21398] x_tables: duplicate entry at hook 3 [ 1211.150091][ C1] yurex 2-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8 [ 1211.333526][ T4994] usb 2-1: USB disconnect, device number 12 [ 1211.352275][ T4994] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 1211.499041][T21432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21539'. [ 1211.576302][T21432] netlink: 6 bytes leftover after parsing attributes in process `syz.4.21539'. [ 1212.098814][T21469] netlink: 'syz.0.21552': attribute type 1 has an invalid length. [ 1212.207795][T21469] netlink: 224 bytes leftover after parsing attributes in process `syz.0.21552'. [ 1212.710354][T21506] device wlan0 entered promiscuous mode [ 1212.909009][T21522] netlink: 20 bytes leftover after parsing attributes in process `syz.1.21570'. [ 1212.971553][T21522] netlink: 20 bytes leftover after parsing attributes in process `syz.1.21570'. [ 1213.005812][T21525] netlink: 'syz.2.21573': attribute type 3 has an invalid length. [ 1213.513619][T21563] device sit0 entered promiscuous mode [ 1213.581043][T21563] netlink: 'syz.2.21588': attribute type 1 has an invalid length. [ 1213.646752][T21563] netlink: 1 bytes leftover after parsing attributes in process `syz.2.21588'. [ 1214.222313][T21620] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1214.229843][T21620] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1214.245373][T21622] netlink: 'syz.2.21609': attribute type 1 has an invalid length. [ 1214.316772][T21622] netlink: 224 bytes leftover after parsing attributes in process `syz.2.21609'. [ 1214.327388][T21620] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1214.349640][T21620] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1214.410028][ T4994] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1214.467919][ T264] block nbd1: Attempted send on invalid socket [ 1214.474195][ T264] blk_update_request: I/O error, dev nbd1, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 1214.485875][ T264] gfs2: error 10 reading superblock [ 1214.780542][ T4994] usb 1-1: config 1 has an invalid interface number: 209 but max is 0 [ 1214.818572][ T4994] usb 1-1: config 1 has no interface number 0 [ 1214.855361][ T4994] usb 1-1: config 1 interface 209 has no altsetting 0 [ 1214.909467][ T4994] usb 1-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=3d.41 [ 1214.976719][ T4994] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1215.032138][T21667] netlink: 144 bytes leftover after parsing attributes in process `syz.2.21626'. [ 1215.075105][ T4994] cytherm 1-1:1.209: Cypress thermometer device now attached [ 1215.308622][ T4994] usb 1-1: USB disconnect, device number 11 [ 1215.339260][ T4994] cytherm 1-1:1.209: Cypress thermometer now disconnected [ 1215.478261][T21701] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1215.550250][T21701] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1215.591260][T21701] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1215.598892][T21701] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1215.634894][T21704] netlink: 64 bytes leftover after parsing attributes in process `syz.4.21637'. [ 1216.190760][ T5836] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 1216.336621][T21755] netlink: 'syz.0.21653': attribute type 3 has an invalid length. [ 1216.680357][ T5836] usb 5-1: config 202 has an invalid interface number: 137 but max is 0 [ 1216.717721][ T5836] usb 5-1: config 202 has an invalid descriptor of length 0, skipping remainder of the config [ 1216.758609][ T5836] usb 5-1: config 202 has no interface number 0 [ 1216.799122][ T5836] usb 5-1: config 202 interface 137 altsetting 11 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1216.839464][ T5836] usb 5-1: config 202 interface 137 altsetting 11 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 1216.883629][ T5836] usb 5-1: config 202 interface 137 has no altsetting 0 [ 1217.080471][ T5836] usb 5-1: New USB device found, idVendor=1608, idProduct=0308, bcdDevice=5b.ac [ 1217.129968][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.162204][ T5836] usb 5-1: Product: syz [ 1217.170181][ T5836] usb 5-1: Manufacturer: syz [ 1217.174804][ T5836] usb 5-1: SerialNumber: syz [ 1217.602323][ T5836] io_ti 5-1:202.137: required endpoints missing [ 1217.675760][ T5836] usb 5-1: USB disconnect, device number 38 [ 1217.815431][ T26] audit: type=1326 audit(525503.919:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21845 comm="syz.1.21681" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79fd8a20d9 code=0x7ffc0000 [ 1217.912310][T21848] netlink: 20 bytes leftover after parsing attributes in process `syz.3.21685'. [ 1217.946153][ T26] audit: type=1326 audit(525503.969:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21845 comm="syz.1.21681" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f79fd8a20d9 code=0x7ffc0000 [ 1218.040047][ T26] audit: type=1326 audit(525503.969:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21845 comm="syz.1.21681" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79fd8a20d9 code=0x7ffc0000 [ 1218.208491][ T26] audit: type=1326 audit(525503.969:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21845 comm="syz.1.21681" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79fd8a20d9 code=0x7ffc0000 [ 1218.623150][T21896] xt_l2tp: wrong L2TP version: 0 [ 1218.991322][T21852] loop0: detected capacity change from 0 to 32768 [ 1219.071613][T21852] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.21683 (21852) [ 1219.155974][T21852] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 1219.209424][T21852] BTRFS info (device loop0): turning on sync discard [ 1219.240026][T21852] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1219.274460][T21928] openvswitch: netlink: EtherType 0 is less than min 600 [ 1219.279887][T21852] BTRFS info (device loop0): use zstd compression, level 3 [ 1219.307458][T21852] BTRFS info (device loop0): turning on async discard [ 1219.330052][T21852] BTRFS info (device loop0): setting nodatacow, compression disabled [ 1219.338907][T21852] BTRFS info (device loop0): enabling all of the rescue options [ 1219.379994][T21932] xt_bpf: check failed: parse error [ 1219.440041][T21852] BTRFS info (device loop0): ignoring data csums [ 1219.446411][T21852] BTRFS info (device loop0): ignoring bad roots [ 1219.510032][T21852] BTRFS info (device loop0): disabling log replay at mount time [ 1219.556689][T21941] damon: min_nr_regions (0) must be at least 3 [ 1219.558447][T21852] BTRFS info (device loop0): enabling auto defrag [ 1219.610072][T21852] BTRFS error (device loop0): nologreplay must be used with ro mount option [ 1219.657630][T21852] BTRFS error (device loop0): open_ctree failed: -22 [ 1220.970065][ T4994] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1221.110729][T22029] netlink: 64 bytes leftover after parsing attributes in process `syz.3.21748'. [ 1221.220208][ T4994] usb 3-1: Using ep0 maxpacket: 16 [ 1221.350192][ T4994] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1221.399554][ T4994] usb 3-1: config 1 has an invalid descriptor of length 15, skipping remainder of the config [ 1221.434567][ T4994] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1221.459711][ T4994] usb 3-1: config 1 has no interface number 1 [ 1221.466068][ T4994] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1221.483745][ T4994] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x89 has an invalid bInterval 201, changing to 7 [ 1221.650428][ T4994] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1221.663379][ T4994] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.710167][ T4994] usb 3-1: Product: syz [ 1221.710191][ T4994] usb 3-1: Manufacturer: syz [ 1221.710207][ T4994] usb 3-1: SerialNumber: syz [ 1221.926600][T22071] netlink: 16 bytes leftover after parsing attributes in process `syz.3.21763'. [ 1221.975332][T22071] netlink: 356 bytes leftover after parsing attributes in process `syz.3.21763'. [ 1222.140321][ T4994] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 1222.152749][ T4994] usb 3-1: found format II with max.bitrate = 0, frame size=0 [ 1222.219116][ T4994] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1222.295331][ T4994] usb 3-1: USB disconnect, device number 19 [ 1222.392637][T22115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21772'. [ 1223.732505][T22215] netlink: 'syz.3.21800': attribute type 13 has an invalid length. [ 1224.169430][T22232] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222022 combination not found [ 1224.430439][T22249] netlink: 'syz.3.21812': attribute type 32 has an invalid length. [ 1224.535594][T22251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21813'. [ 1225.072538][T22293] netlink: 'syz.2.21829': attribute type 1 has an invalid length. [ 1225.106044][T22299] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 1225.318106][ T5836] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1225.840032][ T5836] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 1225.848273][ T5836] usb 4-1: config 0 has no interface number 0 [ 1225.893088][T22357] netlink: 32 bytes leftover after parsing attributes in process `syz.0.21851'. [ 1225.895259][ T5836] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 106, changing to 10 [ 1225.969991][ T5836] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1569, setting to 1024 [ 1226.261652][T22385] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1226.298628][ T5836] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1226.334834][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.353098][ T5836] usb 4-1: Product: syz [ 1226.357293][ T5836] usb 4-1: Manufacturer: syz [ 1226.393607][ T5836] usb 4-1: SerialNumber: syz [ 1226.420576][ T5836] usb 4-1: config 0 descriptor?? [ 1226.490675][T22286] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1226.534570][ T5836] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 1226.650911][T22413] netlink: 'syz.0.21869': attribute type 25 has an invalid length. [ 1226.658850][T22413] netlink: 'syz.0.21869': attribute type 6 has an invalid length. [ 1226.743405][ T5836] usb 4-1: USB disconnect, device number 38 [ 1226.767547][ T5836] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 1226.973306][T22439] netlink: 'syz.4.21876': attribute type 1 has an invalid length. [ 1227.014502][T22439] netlink: 224 bytes leftover after parsing attributes in process `syz.4.21876'. [ 1227.338786][T22464] netlink: 128 bytes leftover after parsing attributes in process `syz.2.21884'. [ 1227.370094][T22469] program syz.3.21887 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1227.387853][T22464] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1227.438665][T22464] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1228.000030][T22517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21904'. [ 1228.741542][T22578] netlink: 'syz.1.21927': attribute type 15 has an invalid length. [ 1228.780217][T22578] netlink: 24 bytes leftover after parsing attributes in process `syz.1.21927'. [ 1228.816954][T22584] netlink: 14 bytes leftover after parsing attributes in process `syz.2.21930'. [ 1228.937050][T22588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21931'. [ 1228.956410][T22588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21931'. [ 1229.238104][ T5836] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1229.509841][T22630] netlink: 16 bytes leftover after parsing attributes in process `syz.0.21944'. [ 1229.578017][T22634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21946'. [ 1229.589697][T22634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21946'. [ 1229.613106][ T5836] usb 4-1: Using ep0 maxpacket: 16 [ 1229.772031][ T5836] usb 4-1: config index 0 descriptor too short (expected 17170, got 18) [ 1229.799983][ T5836] usb 4-1: config 0 has too many interfaces: 63, using maximum allowed: 32 [ 1229.829111][ T5836] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 63 [ 1230.069994][ T5836] usb 4-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=8d.90 [ 1230.079109][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.150007][ T5836] usb 4-1: Product: syz [ 1230.169974][ T5836] usb 4-1: Manufacturer: syz [ 1230.189975][ T5836] usb 4-1: SerialNumber: syz [ 1230.241070][ T5836] usb 4-1: config 0 descriptor?? [ 1230.318281][ T5836] ums-freecom 4-1:0.0: USB Mass Storage device detected [ 1230.599195][ T5830] usb 4-1: USB disconnect, device number 39 [ 1231.326041][T22745] bridge12: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1231.370222][T22751] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21985'. [ 1231.643883][T22766] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1231.725322][T22766] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1231.726627][T22775] netlink: 44 bytes leftover after parsing attributes in process `syz.1.21994'. [ 1231.752222][T22773] openvswitch: netlink: Unknown key attributes 20000000 [ 1231.780256][T22775] netlink: 16 bytes leftover after parsing attributes in process `syz.1.21994'. [ 1231.846527][T22775] netlink: 16 bytes leftover after parsing attributes in process `syz.1.21994'. [ 1231.902721][T22785] netlink: 14 bytes leftover after parsing attributes in process `syz.0.21998'. [ 1232.053002][T22795] tmpfs: Bad value for 'mpol' [ 1232.342157][T22817] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22009'. [ 1232.423473][ T5830] ------------[ cut here ]------------ [ 1232.429621][ T5830] WARNING: CPU: 0 PID: 5830 at net/netfilter/nft_set_pipapo.c:2297 nft_pipapo_destroy+0x8b0/0x960 [ 1232.485118][ T5830] Modules linked in: [ 1232.489097][ T5830] CPU: 0 PID: 5830 Comm: kworker/0:11 Not tainted syzkaller #0 [ 1232.549841][ T5830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1232.582894][ T5830] Workqueue: events nf_tables_trans_destroy_work [ 1232.589376][ T5830] RIP: 0010:nft_pipapo_destroy+0x8b0/0x960 [ 1232.630199][ T5830] Code: 24 80 3c 18 00 74 08 4c 89 f7 e8 9b 89 81 f9 49 c7 06 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 c0 64 3c f9 <0f> 0b e9 ad f7 ff ff 48 c7 c1 f0 1a 8b 8d 80 e1 07 80 c1 03 38 c1 [ 1232.676737][ T5830] RSP: 0018:ffffc90004e47a68 EFLAGS: 00010293 [ 1232.695565][ T5830] RAX: ffffffff883c98d0 RBX: ffff888060c974f0 RCX: ffff88804eba3b80 [ 1232.713914][ T5830] RDX: 0000000000000000 RSI: ffff888060c97400 RDI: ffff8880771a7528 [ 1232.734075][ T5830] RBP: ffffc90004e47c30 R08: ffff88804eba3b80 R09: 0000000000000008 [ 1232.754210][ T5830] R10: 0000000000000018 R11: 0000000000000000 R12: ffff888060c974c0 [ 1232.774332][ T5830] R13: dffffc0000000000 R14: ffff888060c97510 R15: dffffc0000000000 [ 1232.794447][ T5830] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 1232.814566][ T5830] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1232.821249][ T5830] CR2: 00007fd185e12000 CR3: 00000000638d2000 CR4: 00000000003506f0 [ 1232.839358][ T5830] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1232.859484][ T5830] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1232.879599][ T5830] Call Trace: [ 1232.882930][ T5830] [ 1232.885874][ T5830] nft_set_destroy+0x488/0xa30 [ 1232.899970][ T5830] ? kfree+0xef/0x2a0 [ 1232.914180][ T5830] ? nf_tables_chain_destroy+0x47c/0x530 [ 1232.919827][ T5830] nf_tables_trans_destroy_work+0xc5d/0xf00 [ 1232.935871][ T5830] ? __lock_acquire+0x7b50/0x7b50 [ 1232.941048][ T5830] ? nft_object_dump+0x1e0/0x1e0 [ 1232.966170][ T5830] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1232.971448][ T5830] process_one_work+0x867/0xff0 [ 1232.986520][ T5830] ? worker_detach_from_pool+0x240/0x240 [ 1232.992426][ T5830] ? lockdep_hardirqs_off+0x70/0x100 [ 1233.007811][ T5830] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1233.012897][ T5830] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1233.038595][ T5830] ? wq_worker_running+0x97/0x170 [ 1233.043683][ T5830] worker_thread+0xad7/0x12a0 [ 1233.048403][ T5830] kthread+0x42e/0x520 [ 1233.062680][ T5830] ? rcu_lock_release+0x20/0x20 [ 1233.067602][ T5830] ? kthread_blkcg+0xd0/0xd0 [ 1233.082775][ T5830] ret_from_fork+0x1f/0x30 [ 1233.087290][ T5830] [ 1233.102934][ T5830] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1233.110249][ T5830] CPU: 0 PID: 5830 Comm: kworker/0:11 Not tainted syzkaller #0 [ 1233.117816][ T5830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1233.127855][ T5830] Workqueue: events nf_tables_trans_destroy_work [ 1233.134179][ T5830] Call Trace: [ 1233.137449][ T5830] [ 1233.140373][ T5830] dump_stack_lvl+0x188/0x250 [ 1233.145072][ T5830] ? show_regs_print_info+0x20/0x20 [ 1233.150266][ T5830] ? load_image+0x410/0x410 [ 1233.154777][ T5830] panic+0x2f8/0x850 [ 1233.158655][ T5830] ? bpf_jit_dump+0xd0/0xd0 [ 1233.163150][ T5830] ? ret_from_fork+0x1f/0x30 [ 1233.167745][ T5830] ? nft_pipapo_destroy+0x8b0/0x960 [ 1233.173025][ T5830] __warn+0x248/0x2b0 [ 1233.177011][ T5830] ? nft_pipapo_destroy+0x8b0/0x960 [ 1233.182199][ T5830] report_bug+0x1b9/0x2e0 [ 1233.186635][ T5830] handle_bug+0x3a/0x70 [ 1233.190781][ T5830] exc_invalid_op+0x16/0x40 [ 1233.195284][ T5830] asm_exc_invalid_op+0x16/0x20 [ 1233.200153][ T5830] RIP: 0010:nft_pipapo_destroy+0x8b0/0x960 [ 1233.205964][ T5830] Code: 24 80 3c 18 00 74 08 4c 89 f7 e8 9b 89 81 f9 49 c7 06 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 c0 64 3c f9 <0f> 0b e9 ad f7 ff ff 48 c7 c1 f0 1a 8b 8d 80 e1 07 80 c1 03 38 c1 [ 1233.225598][ T5830] RSP: 0018:ffffc90004e47a68 EFLAGS: 00010293 [ 1233.231656][ T5830] RAX: ffffffff883c98d0 RBX: ffff888060c974f0 RCX: ffff88804eba3b80 [ 1233.239629][ T5830] RDX: 0000000000000000 RSI: ffff888060c97400 RDI: ffff8880771a7528 [ 1233.247603][ T5830] RBP: ffffc90004e47c30 R08: ffff88804eba3b80 R09: 0000000000000008 [ 1233.255565][ T5830] R10: 0000000000000018 R11: 0000000000000000 R12: ffff888060c974c0 [ 1233.263526][ T5830] R13: dffffc0000000000 R14: ffff888060c97510 R15: dffffc0000000000 [ 1233.271507][ T5830] ? nft_pipapo_destroy+0x8b0/0x960 [ 1233.276725][ T5830] ? nft_pipapo_destroy+0x8b0/0x960 [ 1233.281911][ T5830] nft_set_destroy+0x488/0xa30 [ 1233.286665][ T5830] ? kfree+0xef/0x2a0 [ 1233.290636][ T5830] ? nf_tables_chain_destroy+0x47c/0x530 [ 1233.296275][ T5830] nf_tables_trans_destroy_work+0xc5d/0xf00 [ 1233.302153][ T5830] ? __lock_acquire+0x7b50/0x7b50 [ 1233.307163][ T5830] ? nft_object_dump+0x1e0/0x1e0 [ 1233.312090][ T5830] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1233.317291][ T5830] process_one_work+0x867/0xff0 [ 1233.322136][ T5830] ? worker_detach_from_pool+0x240/0x240 [ 1233.327756][ T5830] ? lockdep_hardirqs_off+0x70/0x100 [ 1233.333034][ T5830] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1233.338060][ T5830] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1233.343611][ T5830] ? wq_worker_running+0x97/0x170 [ 1233.348621][ T5830] worker_thread+0xad7/0x12a0 [ 1233.353299][ T5830] kthread+0x42e/0x520 [ 1233.357349][ T5830] ? rcu_lock_release+0x20/0x20 [ 1233.362182][ T5830] ? kthread_blkcg+0xd0/0xd0 [ 1233.366756][ T5830] ret_from_fork+0x1f/0x30 [ 1233.371188][ T5830] [ 1233.374470][ T5830] Kernel Offset: disabled [ 1233.379246][ T5830] Rebooting in 86400 seconds..