last executing test programs: 2.483622694s ago: executing program 0 (id=6303): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="840100001800ff0300000000fbdbe0251d010900500012804c00f88046004680acc71d958e7a34640dcf53c7ef4014e029622ecea4265925177a480e4e3d23180fbf878b1957d36c5250d315341fdcb2b86bfb163bbaaf7381a195d01c3051bc9d300000200106801c80"], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) 2.320735358s ago: executing program 0 (id=6306): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000002900)={0x184, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x11, 0x0, 0x1, [@generic="25b57efaa223b473fe7783bc4a506cf756740574b89d316af9b5963870ef3391f3ac176f88d6e1db9b2bb2e5c90fafb663cdebaede447dc8f6f61c6615fcf740adda4853b2d23adb37"]}, @nested={0x11e, 0x6, 0x0, 0x1, [@generic="de8c97b31a91a8a023b05393504138093e90b932d665a1a7046ce0a22af9b359fe19fff69fbcbcdfa8f03d4125e94d2fe6648fde4702451992a9ae46d99d6e50fab6bcd25d8fd85e28db5873f59df4b8f35e2d272583f6367dcb714747548d784aecc39baef3bf9fe3802d", @generic="43770b39830585bc959d029bbe724f3d7419014db98cef27243d938963bf0e376585356e35d7e94e8317cf754893c1e3c759f36ba62b6e5d50a512e197997d23c8359703e6835ef80430647061bd67990b3000dac732c78ea611f69cbe309165de8dd756978c974d941ecdff6128012a5b36d152dc5819ceb6c3313cf9d983fd64638384b59950769baa54bcebb76f89fc055b5293e2a443dcf1c76f65f1ff971e30c82881bf33c661ec87f56e32de"]}]}, 0x184}}, 0x0) 2.212027142s ago: executing program 0 (id=6310): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@bridge_delneigh={0x24, 0x1e, 0x1, 0x70bd27, 0x25dfdbfc, {0xa}, [@NDA_VNI={0x8, 0x7, 0x1ff}]}, 0x24}}, 0x20008000) 2.097037545s ago: executing program 0 (id=6313): r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) readv(r0, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000380)=""/126, 0x7e}], 0x2) 1.9600303s ago: executing program 0 (id=6326): syz_emit_ethernet(0x0, 0x0, 0x0) syz_usb_connect$midi(0x0, 0x4f, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000200000020b104423040000102030109023d00010118100109040000020103000609058e0b00020fd7020800000000000000020002"], 0x0) 1.777459115s ago: executing program 4 (id=6322): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0x228, 0x0, 0x700001b, 0x148, 0xf8, 0x148, 0x190, 0x206, 0x240, 0x190, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0xff, 0x0, 'veth1_macvtap\x00', 'veth0_to_hsr\x00', {0xff}, {}, 0x0, 0x1}, 0x1ea, 0xd8, 0x90, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x12}}, @common=@set={{0x40}, {{0x2, [0x5, 0x2, 0x7, 0x2, 0x1], 0x1, 0x4}}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@local, @loopback, 0xffffff00, 0xffffff00, 'nr0\x00', 'ipvlan0\x00', {}, {}, 0x5c, 0x1, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x1, 0x1}, {0x1, 0x5, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) 1.592834611s ago: executing program 4 (id=6325): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000280)={0x0, 0x3ff}, 0x8) 1.478224174s ago: executing program 4 (id=6328): r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) readv(r0, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000380)=""/126, 0x7e}], 0x2) 1.349043739s ago: executing program 4 (id=6331): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r0, 0x541d) 1.242255202s ago: executing program 4 (id=6334): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000880)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e6f71756f74612c646973636172643d3078303030303030303030303030616666392c696f636861727365743d6b6f69382d722c696f636861727365743d63703835372c6e6f696e746567726974792c6e6f646973636172642c6e6f696e746567726974792c6572726f72733d72656d6f756e742d726f2c6572726f72733d72656d6f756e742d726f2c6e6f71756f74612c0023d677da1a7479e49a206fa805a27dd15f8bcd20bd4507f34e6ae5d430484b32d9b232e850d3249506012446462c113724"], 0x9, 0x626d, &(0x7f0000001ac0)="$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") mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) 846.026154ms ago: executing program 3 (id=6343): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30000000000500040000000000050005000a00000014000780050015000200000008001240"], 0x64}}, 0x0) 752.974386ms ago: executing program 2 (id=6345): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='96.:\x00', 0x0) 752.512577ms ago: executing program 3 (id=6346): r0 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) 637.05883ms ago: executing program 3 (id=6348): timer_create(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000500)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 636.54805ms ago: executing program 1 (id=6349): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_int(r0, 0x1, 0x27, 0x0, &(0x7f0000000100)) 565.295983ms ago: executing program 2 (id=6350): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x1, {{@in, @in=@multicast2}}, [@migrate={0x50, 0x11, [{@in=@local, @in6=@local, @in6=@empty, @in6=@private2, 0xff, 0x3, 0x0, 0x3503, 0x8, 0x2}]}]}, 0xa0}}, 0x0) 517.865364ms ago: executing program 3 (id=6351): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="40000000010205000000000000000000020000002c0002801400018008000100ac1414aa08000200ac1414bb06000340000000000c000280050001"], 0x40}}, 0x80) 511.863364ms ago: executing program 1 (id=6352): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, &(0x7f0000000f40), 0x69b4, &(0x7f0000ffe000/0x1000)=nil, 0x4) 421.290887ms ago: executing program 2 (id=6353): r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) pwritev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="05694906", 0x4}], 0x1, 0x7, 0x6) 420.754457ms ago: executing program 3 (id=6354): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) capget(&(0x7f00000000c0)={0x20071026}, 0x0) 372.077248ms ago: executing program 1 (id=6355): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000078c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd24, 0x0, {0x2, 0x20, 0x14, 0x0, 0xff, 0x0, 0xfd, 0x7, 0x200}, [@RTA_DST={0x8, 0x1, @multicast1}]}, 0x24}}, 0xea5bc50b6199d7fe) 337.488799ms ago: executing program 2 (id=6356): unshare(0x22020600) readahead(0xffffffffffffffff, 0x5, 0xfffffffffffffff9) 196.766603ms ago: executing program 3 (id=6357): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000101020d0000052506000105240000000d240f01000000000000ffff0006241a000000090581"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 180.122114ms ago: executing program 2 (id=6358): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=@newtaction={0x80, 0x1e, 0x109, 0x100, 0x40000, {}, [{0x6c, 0x1, [@m_skbedit={0x34, 0x15, 0x0, 0x0, {{0xc}, {0x4}, {0x6, 0x6, "8aee"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x5}}}}, @m_tunnel_key={0x34, 0x11, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x80}, 0x1, 0x2b1e}, 0x0) 160.506725ms ago: executing program 1 (id=6359): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@dellink={0x28, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1092, 0x40000}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 102.064986ms ago: executing program 1 (id=6360): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x8918, 0x0) 67.531298ms ago: executing program 2 (id=6361): io_setup(0xbf5, &(0x7f0000000600)=0x0) io_getevents(r0, 0x6, 0x6, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}) 13.725819ms ago: executing program 1 (id=6362): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000218b0000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000005400038050000080080003400000000244000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240000000000000001014000180090001006c617374"], 0x104}}, 0x0) 883.55µs ago: executing program 4 (id=6363): r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000200)={{}, {0x4}}, 0x24, 0x0) 0s ago: executing program 0 (id=6364): r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @remote}, {0x1}, 0xc, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x44}}}) kernel console output (not intermixed with test programs): write submit urb error = -90 [ 496.987485][ T7718] usb 3-1: Using ep0 maxpacket: 16 [ 497.018926][ T7707] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 497.048092][ T7707] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 497.083379][T14927] tmpfs: Bad value for 'mpol' [ 497.105418][ T7707] usb 1-1: USB disconnect, device number 49 [ 497.127522][ T7718] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 497.157139][ T7718] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 497.173619][ T7718] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 497.184118][ T7718] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 497.219761][ T7718] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 497.239907][ T7718] usb 3-1: config 1 interface 0 has no altsetting 0 [ 497.246716][ T7718] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 497.263031][ T7718] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.365979][ T7718] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 497.584684][ T7718] scsi host1: usb-storage 3-1:1.0 [ 497.673573][T14985] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4250'. [ 497.722536][T14992] loop4: detected capacity change from 0 to 256 [ 497.822945][ T7927] usb 3-1: USB disconnect, device number 43 [ 497.859265][T14992] attempt to access beyond end of device [ 497.859265][T14992] loop4: rw=0, want=276, limit=256 [ 497.899519][T14992] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 198) [ 497.915940][T14992] FAT-fs (loop4): Filesystem has been set read-only [ 497.925313][T14992] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 198) [ 498.026878][T15020] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 498.184628][T15035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4263'. [ 498.370509][T15033] loop4: detected capacity change from 0 to 8192 [ 498.489605][T15033] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 498.546574][T15033] REISERFS (device loop4): using ordered data mode [ 498.613266][T15033] reiserfs: using flush barriers [ 498.646881][T15033] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 498.729237][T15076] x_tables: duplicate underflow at hook 3 [ 498.784436][T15033] REISERFS (device loop4): checking transaction log (loop4) [ 498.827323][T15033] REISERFS (device loop4): Using r5 hash to sort names [ 498.856458][T15033] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 499.257068][T15117] netlink: 'syz.3.4291': attribute type 1 has an invalid length. [ 499.303343][T15117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4291'. [ 499.367618][T15127] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4287'. [ 499.574406][T15148] netlink: 'syz.2.4300': attribute type 11 has an invalid length. [ 499.659348][T15154] __nla_validate_parse: 1 callbacks suppressed [ 499.659368][T15154] netlink: 184 bytes leftover after parsing attributes in process `syz.4.4303'. [ 499.998957][T15170] loop2: detected capacity change from 0 to 4096 [ 500.312232][ T4195] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 500.332351][ T4195] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 500.481142][T15230] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 500.497434][T15230] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 500.780106][T15246] netlink: 'syz.0.4331': attribute type 2 has an invalid length. [ 500.976727][T15253] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.4334'. [ 501.030334][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.036884][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.776941][T15305] loop4: detected capacity change from 0 to 16 [ 501.833094][T15305] erofs: (device loop4): mounted with root inode @ nid 36. [ 501.970080][ T7718] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 502.100301][T15322] comedi comedi4: bad chanlist[0]=0x000000ff chan=255 range length=2 [ 502.377543][ T7718] usb 4-1: config 8 has an invalid interface number: 80 but max is 0 [ 502.392004][ T7718] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 502.429362][ T7718] usb 4-1: config 8 has no interface number 0 [ 502.435547][ T7718] usb 4-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0xE7, skipping [ 502.480266][ T7718] usb 4-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 502.516562][ T7718] usb 4-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 502.541785][T15343] netlink: 'syz.0.4363': attribute type 21 has an invalid length. [ 502.545847][ T7718] usb 4-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 502.581873][T15343] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4363'. [ 502.584988][ T7718] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 502.620663][ T7718] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.647865][T15286] loop2: detected capacity change from 0 to 32768 [ 502.718585][ T7718] usb 4-1: NFC: intf ffff888060ad5000 id ffffffff8cb53340 [ 502.824060][T15346] loop4: detected capacity change from 0 to 4096 [ 502.974613][ T7718] usb 4-1: USB disconnect, device number 49 [ 502.995426][T15346] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 503.372018][T15397] netlink: 'syz.1.4378': attribute type 21 has an invalid length. [ 503.409711][T15397] netlink: 'syz.1.4378': attribute type 6 has an invalid length. [ 503.464910][T15397] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4378'. [ 503.627467][T15413] netlink: 'syz.4.4383': attribute type 3 has an invalid length. [ 503.871315][T15438] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4393'. [ 504.089986][T15461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4402'. [ 504.130683][T15461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4402'. [ 504.167163][T15461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4402'. [ 504.199844][T15461] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 504.403155][T15493] netlink: 1076 bytes leftover after parsing attributes in process `syz.2.4412'. [ 504.416236][T15487] loop3: detected capacity change from 0 to 2048 [ 504.483395][T15487] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 504.538569][T15505] netdevsim netdevsim1: Direct firmware load for failed with error -2 [ 504.552768][T15506] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 504.593970][T15505] netdevsim netdevsim1: Falling back to sysfs fallback for: [ 504.626168][T15511] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4417'. [ 504.677541][T15511] device bond_slave_0 entered promiscuous mode [ 504.684535][T15511] device bond_slave_1 entered promiscuous mode [ 504.710187][T15518] netlink: 196 bytes leftover after parsing attributes in process `syz.4.4419'. [ 505.037816][ T7718] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 505.320330][ T7718] usb 3-1: Using ep0 maxpacket: 8 [ 505.487674][ T7718] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 505.495943][ T7718] usb 3-1: config 0 has no interface number 0 [ 505.539425][ T7718] usb 3-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 505.598504][ T7718] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 505.654718][ T7718] usb 3-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x9A, skipping [ 505.685304][ T7718] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 505.777450][ T4231] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 505.907804][ T7718] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 505.916948][ T7718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.948045][ T7718] usb 3-1: Product: syz [ 505.952462][ T7718] usb 3-1: Manufacturer: syz [ 505.957103][ T7718] usb 3-1: SerialNumber: syz [ 505.998429][ T7718] usb 3-1: config 0 descriptor?? [ 506.027556][ T4231] usb 1-1: Using ep0 maxpacket: 8 [ 506.059248][ T7718] iowarrior 3-1:0.186: no interrupt-in endpoint found [ 506.081503][T15615] loop3: detected capacity change from 0 to 164 [ 506.155281][T15622] xt_bpf: check failed: parse error [ 506.187512][ T4231] usb 1-1: unable to get BOS descriptor or descriptor too short [ 506.284609][ T4231] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 506.327692][ T4231] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 506.336679][ T4231] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 506.537453][ T4231] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 506.553971][ T4231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.577572][ T4231] usb 1-1: Product: syz [ 506.582260][ T4231] usb 1-1: Manufacturer: syz [ 506.586907][ T4231] usb 1-1: SerialNumber: syz [ 506.746736][T15666] bond0: (slave bond_slave_1): Releasing backup interface [ 506.919739][ T4231] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 506.944040][ T4231] cdc_ncm 1-1:1.0: bind() failure [ 506.984696][ T4231] usb 1-1: USB disconnect, device number 50 [ 507.135913][T15696] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4473'. [ 507.213726][T15699] comedi comedi4: commands at RT priority not supported in this driver [ 507.375991][T15663] loop4: detected capacity change from 0 to 32768 [ 507.484536][T15663] XFS (loop4): Mounting V5 Filesystem [ 507.681869][T15663] XFS (loop4): Ending clean mount [ 507.771981][T15746] loop3: detected capacity change from 0 to 256 [ 507.808448][T15741] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4486'. [ 507.830812][ T7927] usb 3-1: USB disconnect, device number 44 [ 507.909688][ T4194] XFS (loop4): Unmounting Filesystem [ 507.930795][T15746] FAT-fs (loop3): Directory bread(block 64) failed [ 507.986219][T15746] FAT-fs (loop3): Directory bread(block 65) failed [ 508.042614][T15746] FAT-fs (loop3): Directory bread(block 66) failed [ 508.053100][T15746] FAT-fs (loop3): Directory bread(block 67) failed [ 508.066002][T15746] FAT-fs (loop3): Directory bread(block 68) failed [ 508.147757][T15746] FAT-fs (loop3): Directory bread(block 69) failed [ 508.155937][T15746] FAT-fs (loop3): Directory bread(block 70) failed [ 508.197324][T15746] FAT-fs (loop3): Directory bread(block 71) failed [ 508.238080][T15746] FAT-fs (loop3): Directory bread(block 72) failed [ 508.255818][T15746] FAT-fs (loop3): Directory bread(block 73) failed [ 508.356128][T15779] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4497'. [ 508.560831][ T7718] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 508.857481][ T7718] usb 2-1: Using ep0 maxpacket: 8 [ 508.966874][T15816] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4507'. [ 509.034785][ T7718] usb 2-1: unable to get BOS descriptor or descriptor too short [ 509.127523][ T7718] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 509.135817][ T7718] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 509.189505][ T7718] usb 2-1: config 4 has no interface number 0 [ 509.224862][T15829] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 509.261170][T15829] exFAT-fs (loop4): unable to read boot sector [ 509.268928][T15829] exFAT-fs (loop4): failed to read boot sector [ 509.287810][T15829] exFAT-fs (loop4): failed to recognize exfat type [ 509.375442][T15839] overlayfs: missing 'lowerdir' [ 509.444269][T15797] loop3: detected capacity change from 0 to 32768 [ 509.463655][ T7718] usb 2-1: string descriptor 0 read error: -22 [ 509.471649][ T7718] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 509.490043][ T7718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.554777][T15847] bond0: (slave bond_slave_1): Releasing backup interface [ 509.580233][ T7718] uvcvideo 2-1:4.147: Found multiple Units with ID 6 [ 509.589199][T15847] device bond_slave_1 left promiscuous mode [ 509.591701][T15854] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.4514'. [ 509.618882][ T7718] usb 2-1: Found UVC 0.02 device (04f2:b746) [ 509.628192][ T7718] usb 2-1: No valid video chain found. [ 509.662633][T15797] XFS (loop3): Mounting V5 Filesystem [ 509.786325][T15797] XFS (loop3): Ending clean mount [ 509.796374][ T7718] usb 2-1: USB disconnect, device number 50 [ 509.806591][T15875] netlink: 11 bytes leftover after parsing attributes in process `syz.2.4517'. [ 509.851896][T15797] XFS (loop3): Quotacheck needed: Please wait. [ 510.026710][T15797] XFS (loop3): Quotacheck: Done. [ 510.224455][ T4200] XFS (loop3): Unmounting Filesystem [ 510.364388][T15907] comedi comedi3: das16m1: I/O port conflict (0x100,16) [ 510.617359][ T7927] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 510.799920][T15933] netlink: 'syz.4.4535': attribute type 16 has an invalid length. [ 510.825020][T15933] netlink: 'syz.4.4535': attribute type 17 has an invalid length. [ 510.924962][T15933] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.959214][T15933] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.005890][T15913] loop1: detected capacity change from 0 to 32768 [ 511.021220][ T7927] usb 1-1: unable to get BOS descriptor or descriptor too short [ 511.089777][T15913] XFS (loop1): Mounting V5 Filesystem [ 511.107635][ T7927] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 511.116611][ T7927] usb 1-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 511.177294][ T7927] usb 1-1: config 1 interface 0 has no altsetting 1 [ 511.264325][T15913] XFS (loop1): Ending clean mount [ 511.337365][ T7927] usb 1-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 511.351340][ T7927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.368667][ T7927] usb 1-1: Product: syz [ 511.377608][ T7927] usb 1-1: Manufacturer: syz [ 511.393421][ T7927] usb 1-1: SerialNumber: syz [ 511.445146][T15963] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4541'. [ 511.457591][ T7927] smsusb:smsusb_probe: board id=8, interface number 0 [ 511.478121][T15965] 9pnet: p9_fd_create_tcp (15965): problem connecting socket to 127.0.0.1 [ 511.537021][ T4190] XFS (loop1): Unmounting Filesystem [ 511.678980][ T7927] smsusb:smsusb_probe: Device initialized with return code -19 [ 511.837381][ T5680] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 511.910130][ T7707] usb 1-1: USB disconnect, device number 51 [ 511.965883][T15995] device ip6_vti0 left promiscuous mode [ 512.004350][T15995] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 512.024059][T15995] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 512.056889][T15995] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 512.075136][T15995] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 512.088156][T15995] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 512.096572][ T5680] usb 5-1: Using ep0 maxpacket: 16 [ 512.103814][T15995] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 512.195862][T15995] device netdevsim0 left promiscuous mode [ 512.221502][T15995] device wlan0 left promiscuous mode [ 512.233141][ T5680] usb 5-1: config 0 has no interfaces? [ 512.243050][T15995] device bond1 left promiscuous mode [ 512.250130][T15995] 8021q: adding VLAN 0 to HW filter on device bond1 [ 512.260749][T15995] device geneve2 left promiscuous mode [ 512.287004][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 512.397750][ T5680] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 512.435442][ T5680] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.454860][ T5680] usb 5-1: Product: syz [ 512.465643][ T5680] usb 5-1: Manufacturer: syz [ 512.491476][ T5680] usb 5-1: SerialNumber: syz [ 512.512165][ T5680] r8152-cfgselector 5-1: config 0 descriptor?? [ 512.588136][T16025] device sit0 entered promiscuous mode [ 512.615171][T16025] netlink: 'syz.0.4558': attribute type 1 has an invalid length. [ 512.644285][T16025] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4558'. [ 512.739564][T16030] loop1: detected capacity change from 0 to 2048 [ 512.779462][ T5680] usbip-host 5-1: 5-1 is not in match_busid table... skip! [ 512.843697][T16038] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 512.874897][T16037] netlink: 'syz.3.4562': attribute type 21 has an invalid length. [ 512.938178][T16037] IPv6: NLM_F_CREATE should be specified when creating new route [ 512.994289][ T7927] usb 5-1: USB disconnect, device number 43 [ 513.064640][T16053] loop2: detected capacity change from 0 to 256 [ 513.124665][T16061] device bridge_slave_1 left promiscuous mode [ 513.142692][T16061] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.168062][T16053] FAT-fs (loop2): Directory bread(block 64) failed [ 513.215796][T16053] FAT-fs (loop2): Directory bread(block 65) failed [ 513.228392][T16053] FAT-fs (loop2): Directory bread(block 66) failed [ 513.235218][T16053] FAT-fs (loop2): Directory bread(block 67) failed [ 513.246233][T16061] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 513.272628][T16053] FAT-fs (loop2): Directory bread(block 68) failed [ 513.334753][T16053] FAT-fs (loop2): Directory bread(block 69) failed [ 513.367990][T16053] FAT-fs (loop2): Directory bread(block 70) failed [ 513.395313][T16053] FAT-fs (loop2): Directory bread(block 71) failed [ 513.457440][T16053] FAT-fs (loop2): Directory bread(block 72) failed [ 513.464067][T16053] FAT-fs (loop2): Directory bread(block 73) failed [ 513.588953][T16079] ieee802154 phy0 wpan0: encryption failed: -22 [ 514.021925][T16104] loop4: detected capacity change from 0 to 4096 [ 514.112887][T16129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4591'. [ 514.130173][T16104] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 514.210144][T16104] ntfs: (device loop4): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 514.258849][T16104] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 514.325208][T16104] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 514.337383][ T7718] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 514.433436][T16104] ntfs: volume version 3.1. [ 514.469564][T16104] ntfs: (device loop4): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 514.565543][T16151] xt_CONNSECMARK: invalid mode: 66 [ 514.666164][T16155] loop4: detected capacity change from 0 to 4096 [ 514.717650][ T7718] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 514.733823][T16155] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 514.767349][ T7705] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 514.790772][ T7718] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 514.799927][ T7713] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 514.827603][T16155] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 515.037398][ T7718] usb 1-1: New USB device found, idVendor=17cc, idProduct=041c, bcdDevice= 0.40 [ 515.046534][ T7718] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.063739][ T7718] usb 1-1: Product: syz [ 515.068391][ T7718] usb 1-1: Manufacturer: syz [ 515.073047][ T7718] usb 1-1: SerialNumber: syz [ 515.107668][ T7713] usb 2-1: Using ep0 maxpacket: 32 [ 515.202470][T16193] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 515.209045][ T7705] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 515.220488][ T7705] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 515.230529][ T7705] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 515.249546][ T7713] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 515.258132][ T7713] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 515.266803][ T7713] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 515.276262][ T7705] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 515.286454][ T7713] usb 2-1: config 1 has no interface number 0 [ 515.292923][ T7713] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 515.304730][ T7713] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 515.326243][ T7713] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 515.346558][ T7713] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 515.356319][ T7713] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.387452][ T5679] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 515.440546][ T7713] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 515.480365][ T7705] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 515.489613][ T7705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.498373][ T7718] usb 1-1: 0:1 : does not exist [ 515.503279][ T7718] usb 1-1: 0:2 : does not exist [ 515.509770][ T7705] usb 4-1: Product: syz [ 515.514078][ T7705] usb 4-1: Manufacturer: syz [ 515.519099][ T7718] usb 1-1: unit 66 not found! [ 515.525433][ T7705] usb 4-1: SerialNumber: syz [ 515.545622][ T7718] usb 1-1: USB disconnect, device number 52 [ 515.562544][ T7705] usb 4-1: config 0 descriptor?? [ 515.608955][ T7705] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 515.658325][ T7713] snd_usb_pod 2-1:1.1: cannot start listening: -90 [ 515.665033][ T7713] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 515.673142][ T7713] snd_usb_pod: probe of 2-1:1.1 failed with error -90 [ 515.787687][ T5679] usb 5-1: unable to get BOS descriptor or descriptor too short [ 515.849472][ T4283] udevd[4283]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 515.874404][ T5679] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 185, changing to 7 [ 515.896179][ T7927] usb 2-1: USB disconnect, device number 51 [ 515.918516][ T4232] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 516.041971][ T7705] scsi host1: usb-storage 4-1:0.0 [ 516.056398][ T7705] usb 4-1: USB disconnect, device number 50 [ 516.127571][ T5679] usb 5-1: string descriptor 0 read error: -22 [ 516.140016][ T5679] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 516.149630][ T5679] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.197436][ T4232] usb 3-1: Using ep0 maxpacket: 8 [ 516.204639][ T5679] usb 5-1: selecting invalid altsetting 1 [ 516.216639][ T5679] usb 5-1: unit 3 not found! [ 516.337407][ T4232] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 516.346631][ T4232] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 516.357193][ T4232] usb 3-1: config 0 has no interface number 0 [ 516.363511][ T4232] usb 3-1: config 0 interface 52 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 516.377208][ T4232] usb 3-1: config 0 interface 52 has no altsetting 0 [ 516.417570][ T5679] usb 5-1: unit 84 not found! [ 516.422339][ T5679] usb 5-1: unit 89 not found! [ 516.433366][ T5679] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 516.457817][ T5679] usb 5-1: selecting invalid altsetting 1 [ 516.471004][ T5679] usb 5-1: unit 3 not found! [ 516.507392][ T4232] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 516.516743][ T4232] usb 3-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 516.525986][ T4232] usb 3-1: Product: syz [ 516.531418][ T4232] usb 3-1: SerialNumber: syz [ 516.569608][ T4232] usb 3-1: config 0 descriptor?? [ 516.578632][T16261] device gtp0 entered promiscuous mode [ 516.642532][ T5679] usb 5-1: cannot request logical cluster ID: 35217 (err: -71) [ 516.656793][ T5679] usb 5-1: invalid MIXER UNIT descriptor 6 [ 516.683907][ T5679] snd-usb-audio: probe of 5-1:1.1 failed with error -71 [ 516.712340][ T5679] usb 5-1: selecting invalid altsetting 1 [ 516.723766][ T5679] usb 5-1: unit 3 not found! [ 516.730494][T16272] loop1: detected capacity change from 0 to 512 [ 516.750036][ T5679] usb 5-1: cannot request logical cluster ID: 35217 (err: -71) [ 516.764800][ T5679] usb 5-1: invalid MIXER UNIT descriptor 6 [ 516.793863][ T5679] snd-usb-audio: probe of 5-1:1.2 failed with error -71 [ 516.806095][T16283] netlink: 'syz.3.4620': attribute type 16 has an invalid length. [ 516.833540][T16238] 9pnet: p9_fd_create_tcp (16238): problem connecting socket to 127.0.0.1 [ 516.847508][ T5679] usb 5-1: USB disconnect, device number 44 [ 516.856137][T16283] netlink: 'syz.3.4620': attribute type 17 has an invalid length. [ 517.013881][T16272] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #16: comm syz.1.4619: corrupted inode contents [ 517.030187][T16272] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #16: comm syz.1.4619: mark_inode_dirty error [ 517.056785][T16283] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.078784][T16283] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.088314][ T4283] udevd[4283]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 517.128547][ T7705] usb 3-1: USB disconnect, device number 45 [ 517.137595][T16272] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #16: comm syz.1.4619: corrupted inode contents [ 517.188318][T16272] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.4619: mark_inode_dirty error [ 517.238059][T16272] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #16: comm syz.1.4619: corrupted inode contents [ 517.271713][T16272] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 517.309264][T16272] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #16: comm syz.1.4619: corrupted inode contents [ 517.366497][T16272] EXT4-fs error (device loop1): ext4_truncate:4286: inode #16: comm syz.1.4619: mark_inode_dirty error [ 517.397815][T16272] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 517.453534][T16272] EXT4-fs (loop1): 1 truncate cleaned up [ 517.467904][T16272] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier=0x0000000000000006,nobarrier,nombcache,barrier,,errors=continue. Quota mode: writeback. [ 517.504587][T16272] ext4 filesystem being mounted at /911/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 517.777759][ T5679] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 518.027598][ T5679] usb 5-1: Using ep0 maxpacket: 16 [ 518.307735][ T5679] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 518.338599][ T5679] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.346695][ T5679] usb 5-1: Product: syz [ 518.381522][ T5679] usb 5-1: Manufacturer: syz [ 518.405129][ T5679] usb 5-1: SerialNumber: syz [ 518.421590][T16359] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4639'. [ 518.444916][ T5679] usb 5-1: config 0 descriptor?? [ 518.499270][ T5679] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 518.790952][T16383] ip6t_srh: unknown srh invflags 4000 [ 518.943158][ T5679] ssu100: probe of 5-1:0.0 failed with error -71 [ 518.962280][ T5679] usb 5-1: USB disconnect, device number 45 [ 519.423164][T16446] netlink: 'syz.2.4667': attribute type 1 has an invalid length. [ 519.638919][ T5679] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 519.678362][T16469] comedi comedi3: dt2814: a I/O base address must be specified [ 519.795030][T16482] netlink: 'syz.0.4679': attribute type 5 has an invalid length. [ 519.842875][T16482] device  entered promiscuous mode [ 519.864614][T16485] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4680'. [ 519.874419][T16489] netlink: 'syz.4.4681': attribute type 1 has an invalid length. [ 519.882248][T16489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4681'. [ 519.907831][ T5679] usb 2-1: Using ep0 maxpacket: 8 [ 520.027634][ T5679] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 520.077569][T16501] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4685'. [ 520.124833][T16501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4685'. [ 520.175726][T16501] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4685'. [ 520.213322][T16501] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4685'. [ 520.231910][ T5679] usb 2-1: New USB device found, idVendor=0582, idProduct=00eb, bcdDevice= 0.40 [ 520.260156][ T5679] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.292729][ T5679] usb 2-1: Product: syz [ 520.297011][ T5679] usb 2-1: Manufacturer: syz [ 520.327307][ T5679] usb 2-1: SerialNumber: syz [ 520.648712][T16546] loop2: detected capacity change from 0 to 64 [ 520.868809][ T5679] usb 2-1: USB disconnect, device number 52 [ 521.138810][T16609] netlink: 'syz.2.4710': attribute type 16 has an invalid length. [ 521.146752][T16609] netlink: 'syz.2.4710': attribute type 17 has an invalid length. [ 521.168534][ T4306] udevd[4306]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 521.197261][ T7705] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 521.253714][T16616] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 521.296494][T16609] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.338164][T16609] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.387537][T16624] overlayfs: unrecognized mount option "\" or missing value [ 521.637623][ T7705] usb 1-1: unable to get BOS descriptor or descriptor too short [ 521.718566][T16639] devtmpfs: Unknown parameter 'debug' [ 521.737560][ T7705] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 185, changing to 7 [ 521.754426][T16644] CIFS mount error: No usable UNC path provided in device string! [ 521.754426][T16644] [ 521.765799][T16644] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 521.861567][T16651] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4726'. [ 521.884459][T16651] netlink: 252 bytes leftover after parsing attributes in process `syz.2.4726'. [ 521.902399][T16651] netlink: 'syz.2.4726': attribute type 1 has an invalid length. [ 521.915466][T16651] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4726'. [ 522.037567][ T7705] usb 1-1: string descriptor 0 read error: -22 [ 522.037671][ T7705] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 522.037701][ T7705] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.132082][ T7705] usb 1-1: selecting invalid altsetting 1 [ 522.134416][ T7705] usb 1-1: unit 3 not found! [ 522.357391][ T7705] usb 1-1: unit 84 not found! [ 522.362174][ T7705] usb 1-1: unit 89 not found! [ 522.372208][ T7705] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 522.391422][ T7705] usb 1-1: selecting invalid altsetting 1 [ 522.408171][ T7705] usb 1-1: unit 3 not found! [ 522.577773][ T7705] usb 1-1: cannot request logical cluster ID: 35217 (err: -71) [ 522.586007][ T7705] usb 1-1: invalid MIXER UNIT descriptor 6 [ 522.615065][ T7705] snd-usb-audio: probe of 1-1:1.1 failed with error -71 [ 522.643968][ T7705] usb 1-1: selecting invalid altsetting 1 [ 522.654807][ T7705] usb 1-1: unit 3 not found! [ 522.687387][ T7705] usb 1-1: cannot request logical cluster ID: 35217 (err: -71) [ 522.695313][ T7705] usb 1-1: invalid MIXER UNIT descriptor 6 [ 522.782902][ T7705] snd-usb-audio: probe of 1-1:1.2 failed with error -71 [ 522.827817][ T7705] usb 1-1: USB disconnect, device number 53 [ 523.068333][T16759] ieee802154 phy0 wpan0: encryption failed: -22 [ 523.068808][ T4304] udevd[4304]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 524.176192][T16835] loop2: detected capacity change from 0 to 8192 [ 524.273261][T16835] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 524.292234][T16835] REISERFS (device loop2): using ordered data mode [ 524.315781][T16835] reiserfs: using flush barriers [ 524.333309][T16835] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 524.431665][T16835] REISERFS (device loop2): checking transaction log (loop2) [ 524.463077][T16835] REISERFS (device loop2): Using r5 hash to sort names [ 524.747286][ T5680] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 525.007499][ T5680] usb 2-1: Using ep0 maxpacket: 32 [ 525.127537][ T5680] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 525.307769][ T5680] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 525.317013][ T5680] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.378471][ T5680] usb 2-1: Product: syz [ 525.382719][ T5680] usb 2-1: Manufacturer: syz [ 525.384195][T16941] netlink: 'syz.3.4818': attribute type 1 has an invalid length. [ 525.401555][ T5680] usb 2-1: SerialNumber: syz [ 525.435472][ T5680] usb 2-1: config 0 descriptor?? [ 525.453364][T16941] netlink: 'syz.3.4818': attribute type 3 has an invalid length. [ 525.477611][T16878] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 525.498237][ T5680] hub 2-1:0.0: bad descriptor, ignoring hub [ 525.503339][T16941] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4818'. [ 525.504656][ T5680] hub: probe of 2-1:0.0 failed with error -5 [ 525.555222][ T5680] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input22 [ 525.742984][ T4231] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 525.901463][ T4232] usb 2-1: USB disconnect, device number 53 [ 525.907833][ C0] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 525.977394][ T4231] usb 1-1: Using ep0 maxpacket: 32 [ 526.097765][ T4231] usb 1-1: config 0 has an invalid descriptor of length 118, skipping remainder of the config [ 526.141954][T16998] loop4: detected capacity change from 0 to 512 [ 526.215525][T16998] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 526.252888][T16998] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 526.274318][T16998] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.4832: attempt to clear invalid blocks 2 len 1 [ 526.279271][ T4231] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 526.293995][T16998] EXT4-fs (loop4): Remounting filesystem read-only [ 526.307840][T16998] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 526.338313][T16998] EXT4-fs (loop4): Remounting filesystem read-only [ 526.345561][T16998] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.4832: invalid indirect mapped block 1819239214 (level 0) [ 526.365183][T16998] EXT4-fs (loop4): Remounting filesystem read-only [ 526.366274][ T4231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.384366][T16998] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.4832: invalid indirect mapped block 1819239214 (level 1) [ 526.411943][ T4231] usb 1-1: Product: syz [ 526.427288][T16998] EXT4-fs (loop4): Remounting filesystem read-only [ 526.438073][ T4231] usb 1-1: Manufacturer: syz [ 526.443016][ T4231] usb 1-1: SerialNumber: syz [ 526.459227][T16998] EXT4-fs (loop4): 1 truncate cleaned up [ 526.478412][T16998] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,init_itable=0x0000000000000004,mblk_io_submit,errors=remount-ro,jqfmt=vfsv0,usrjquota=... Quota mode: writeback. [ 526.526370][ T4231] usb 1-1: config 0 descriptor?? [ 526.589276][ T4231] usb 1-1: bad CDC descriptors [ 526.596322][ T4231] usb 1-1: unsupported MDLM descriptors [ 526.699458][T16998] EXT4-fs (loop4): Quota file not on filesystem root. Journaled quota will not work [ 526.729837][T17028] program syz.1.4840 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 526.812272][ T4231] usb 1-1: USB disconnect, device number 54 [ 526.824145][T17034] netlink: 'syz.3.4841': attribute type 3 has an invalid length. [ 526.971937][T17049] xt_TCPMSS: Only works on TCP SYN packets [ 527.577657][T17101] loop4: detected capacity change from 0 to 1024 [ 527.894827][T17129] loop2: detected capacity change from 0 to 2048 [ 527.942888][T17133] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4874'. [ 527.983195][T17129] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=301132, location=301132 [ 528.063214][T17129] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 528.361856][T17153] loop3: detected capacity change from 0 to 256 [ 528.524823][T17153] FAT-fs (loop3): Directory bread(block 64) failed [ 528.545772][T17153] FAT-fs (loop3): Directory bread(block 65) failed [ 528.598663][T17153] FAT-fs (loop3): Directory bread(block 66) failed [ 528.606242][T17153] FAT-fs (loop3): Directory bread(block 67) failed [ 528.660115][T17177] netlink: 'syz.0.4888': attribute type 1 has an invalid length. [ 528.680081][T17153] FAT-fs (loop3): Directory bread(block 68) failed [ 528.703168][T17153] FAT-fs (loop3): Directory bread(block 69) failed [ 528.740487][T17153] FAT-fs (loop3): Directory bread(block 70) failed [ 528.771114][T17153] FAT-fs (loop3): Directory bread(block 71) failed [ 528.811343][T17153] FAT-fs (loop3): Directory bread(block 72) failed [ 528.851636][T17153] FAT-fs (loop3): Directory bread(block 73) failed [ 529.202509][ T5680] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 529.504895][T17241] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4908'. [ 529.583247][ T5680] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 529.634739][ T5680] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 529.660249][ T5680] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.729900][ T5680] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 529.936682][T17270] netlink: 'syz.0.4917': attribute type 21 has an invalid length. [ 529.959809][T17270] IPv6: NLM_F_CREATE should be specified when creating new route [ 529.995188][T17274] loop3: detected capacity change from 0 to 256 [ 530.064790][T17282] netlink: 'syz.0.4922': attribute type 11 has an invalid length. [ 530.073593][T17282] netlink: 'syz.0.4922': attribute type 5 has an invalid length. [ 530.523545][T17312] dlm: no locking on control device [ 530.827615][ T5680] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 531.016897][T17348] loop3: detected capacity change from 0 to 512 [ 531.047498][ T5680] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 531.066157][ T5680] stv0680 2-1:4.0: last error: 0, command = 0x0 [ 531.086617][ T5680] usb 2-1: USB disconnect, device number 54 [ 531.163141][T17348] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 531.181742][T17348] ext4 filesystem being mounted at /966/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 531.295961][T17372] loop2: detected capacity change from 0 to 512 [ 531.313912][T17348] EXT4-fs error (device loop3): ext4_empty_dir:3145: inode #12: block 32: comm syz.3.4944: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=12, rec_len=106, size=2048 fake=1 [ 531.357055][T17348] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz.3.4944: directory missing '.' [ 531.400366][T17372] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 531.400366][T17372] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 531.400366][T17372] [ 531.515431][T17372] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouser_xattr,grpquota,,errors=continue. Quota mode: writeback. [ 531.555570][T17372] ext4 filesystem being mounted at /956/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 532.035750][T17423] netlink: 'syz.2.4966': attribute type 1 has an invalid length. [ 532.062054][T17423] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4966'. [ 532.212661][T17437] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4969'. [ 532.383940][T17452] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4975'. [ 532.457655][T17452] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4975'. [ 532.519843][T17457] kAFS: unable to lookup cell '.,' [ 532.719102][T17467] bond0: Error: Cannot enslave bond to itself. [ 532.792604][T17469] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4981'. [ 532.832660][T17469] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4981'. [ 532.861878][T17469] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4981'. [ 532.920234][T17411] loop3: detected capacity change from 0 to 32768 [ 532.933576][T17475] loop4: detected capacity change from 0 to 1024 [ 533.006452][T17475] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 533.045779][T17475] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 69: comm syz.4.4983: lblock 8 mapped to illegal pblock 69 (length 1) [ 533.119670][T17411] XFS (loop3): Mounting V5 Filesystem [ 533.165349][T17475] EXT4-fs (loop4): Remounting filesystem read-only [ 533.197444][T17475] Quota error (device loop4): write_blk: dquota write failed [ 533.205133][T17475] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 68: comm syz.4.4983: lblock 7 mapped to illegal pblock 68 (length 1) [ 533.242550][T17411] XFS (loop3): Ending clean mount [ 533.353381][T17475] EXT4-fs (loop4): Remounting filesystem read-only [ 533.392413][T17475] Quota error (device loop4): write_blk: dquota write failed [ 533.426203][T17475] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 67: comm syz.4.4983: lblock 6 mapped to illegal pblock 67 (length 1) [ 533.483257][T17475] EXT4-fs (loop4): Remounting filesystem read-only [ 533.519412][ T4200] XFS (loop3): Unmounting Filesystem [ 533.530151][T17475] Quota error (device loop4): write_blk: dquota write failed [ 533.577393][T17475] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 533.613030][T17475] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 48: comm syz.4.4983: lblock 0 mapped to illegal pblock 48 (length 1) [ 533.682457][T17475] EXT4-fs (loop4): Remounting filesystem read-only [ 533.719221][T17475] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 533.777975][T17475] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.4983: Failed to acquire dquot type 0 [ 533.789775][T17531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4998'. [ 533.834819][T17475] EXT4-fs (loop4): Remounting filesystem read-only [ 533.842477][T17475] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 533.899515][T17475] EXT4-fs (loop4): Remounting filesystem read-only [ 533.906506][T17475] EXT4-fs error (device loop4): ext4_evict_inode:284: inode #11: comm syz.4.4983: mark_inode_dirty error [ 533.957908][T17475] EXT4-fs (loop4): Remounting filesystem read-only [ 534.007283][T17475] EXT4-fs warning (device loop4): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 534.055829][T17475] EXT4-fs (loop4): 1 orphan inode deleted [ 534.092275][ T4243] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 534.106833][T17475] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,noblock_validity,data_err=ignore,errors=remount-ro,nodiscard,stripe=0x0000000000000001,jqfmt=vfsv1,. Quota mode: none. [ 534.191296][ T4243] EXT4-fs (loop4): Remounting filesystem read-only [ 534.227528][ T4243] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 534.278183][ T4243] EXT4-fs error (device loop4): ext4_release_dquot:6272: comm kworker/u4:6: Failed to release dquot type 0 [ 534.302126][T17475] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 48: comm syz.4.4983: lblock 0 mapped to illegal pblock 48 (length 1) [ 534.393169][ T4243] EXT4-fs (loop4): Remounting filesystem read-only [ 534.453521][T17475] EXT4-fs (loop4): Remounting filesystem read-only [ 534.469644][T17475] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 534.548128][ T4194] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 534.617656][ T4194] EXT4-fs (loop4): Remounting filesystem read-only [ 534.653520][ T4194] EXT4-fs error (device loop4): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 534.703299][ T4194] EXT4-fs (loop4): Remounting filesystem read-only [ 534.779754][T17588] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5017'. [ 535.223971][T17601] loop2: detected capacity change from 0 to 8192 [ 535.293128][T17628] netlink: 'syz.0.5030': attribute type 4 has an invalid length. [ 535.309154][T17628] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5030'. [ 535.437505][ T4231] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 535.839459][ T4231] usb 2-1: unable to get BOS descriptor or descriptor too short [ 535.867468][ T5680] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 535.927501][ T4231] usb 2-1: config 8 has an invalid interface number: 92 but max is 0 [ 535.950989][ T4231] usb 2-1: config 8 has no interface number 0 [ 535.974099][ T4231] usb 2-1: config 8 interface 92 altsetting 65 endpoint 0x6 has invalid wMaxPacketSize 0 [ 536.004588][ T4231] usb 2-1: config 8 interface 92 has no altsetting 0 [ 536.118118][ T5680] usb 1-1: Using ep0 maxpacket: 32 [ 536.238359][ T5680] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 536.257527][ T4231] usb 2-1: string descriptor 0 read error: -22 [ 536.269474][ T4231] usb 2-1: New USB device found, idVendor=1b3d, idProduct=0181, bcdDevice= b.f6 [ 536.282860][ T5680] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 536.313255][ T4231] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.383529][ T4231] ftdi_sio 2-1:8.92: FTDI USB Serial Device converter detected [ 536.402709][ T4231] usb 2-1: Detected FT232H [ 536.421936][ T4231] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 6 [ 536.437730][ T5680] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 536.465836][ T5680] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 536.483895][ T5680] usb 1-1: Product: syz [ 536.491103][ T5680] usb 1-1: Manufacturer: syz [ 536.538787][ T5680] hub 1-1:4.0: USB hub found [ 536.563883][T17718] loop2: detected capacity change from 0 to 64 [ 536.587464][ T4231] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 536.617540][ T4231] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 536.637504][ T4231] ftdi_sio 2-1:8.92: GPIO initialisation failed: -71 [ 536.658063][ T4231] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 536.723960][ T4231] usb 2-1: USB disconnect, device number 55 [ 536.757543][ T5680] hub 1-1:4.0: 8 ports detected [ 536.778637][ T5680] hub 1-1:4.0: insufficient power available to use all downstream ports [ 536.793879][ T4231] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 536.821425][ T4231] ftdi_sio 2-1:8.92: device disconnected [ 536.927085][T17753] CIFS mount error: No usable UNC path provided in device string! [ 536.927085][T17753] [ 536.958524][T17753] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 536.977971][ T5680] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 536.979146][ T5680] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 537.032511][ T5680] usb 1-1: USB disconnect, device number 55 [ 537.166669][T17767] bond0: Error: Cannot enslave bond to itself. [ 537.328755][T17779] __nla_validate_parse: 170 callbacks suppressed [ 537.328777][T17779] netlink: 1010 bytes leftover after parsing attributes in process `syz.4.5065'. [ 537.411200][T17779] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 537.592063][T17792] loop3: detected capacity change from 0 to 256 [ 537.593009][T17794] loop1: detected capacity change from 0 to 256 [ 537.658463][T17794] exfat: Deprecated parameter 'utf8' [ 537.683610][T17794] exFAT-fs (loop1): failed to read boot sector [ 537.731455][T17794] exFAT-fs (loop1): failed to recognize exfat type [ 537.744679][T17792] FAT-fs (loop3): Directory bread(block 64) failed [ 537.761973][T17792] FAT-fs (loop3): Directory bread(block 65) failed [ 537.787604][T17792] FAT-fs (loop3): Directory bread(block 66) failed [ 537.787651][T17792] FAT-fs (loop3): Directory bread(block 67) failed [ 537.787728][T17792] FAT-fs (loop3): Directory bread(block 68) failed [ 537.787762][T17792] FAT-fs (loop3): Directory bread(block 69) failed [ 537.787832][T17792] FAT-fs (loop3): Directory bread(block 70) failed [ 537.787864][T17792] FAT-fs (loop3): Directory bread(block 71) failed [ 537.787934][T17792] FAT-fs (loop3): Directory bread(block 72) failed [ 537.787966][T17792] FAT-fs (loop3): Directory bread(block 73) failed [ 537.946906][T17754] loop2: detected capacity change from 0 to 32768 [ 538.046484][T17754] XFS (loop2): Mounting V5 Filesystem [ 538.052078][ T4231] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 538.251135][T17754] XFS (loop2): Ending clean mount [ 538.369986][ T4195] XFS (loop2): Unmounting Filesystem [ 538.435553][T17844] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5079'. [ 538.447138][T17844] netlink: 252 bytes leftover after parsing attributes in process `syz.1.5079'. [ 538.458114][T17844] netlink: 'syz.1.5079': attribute type 1 has an invalid length. [ 538.466403][T17844] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5079'. [ 538.485294][ T4231] usb 5-1: unable to get BOS descriptor or descriptor too short [ 538.557509][ T5680] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 538.577815][ T4231] usb 5-1: config 8 has an invalid interface number: 92 but max is 0 [ 538.595700][ T4231] usb 5-1: config 8 has no interface number 0 [ 538.622074][ T4231] usb 5-1: config 8 interface 92 altsetting 65 endpoint 0x6 has invalid wMaxPacketSize 0 [ 538.634509][ T4231] usb 5-1: config 8 interface 92 has no altsetting 0 [ 538.797482][ T5680] usb 1-1: Using ep0 maxpacket: 32 [ 538.887537][ T4232] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 538.892724][ T4231] usb 5-1: string descriptor 0 read error: -22 [ 538.910573][ T4231] usb 5-1: New USB device found, idVendor=1b3d, idProduct=0181, bcdDevice= b.f6 [ 538.920820][ T5680] usb 1-1: config 5 has an invalid interface number: 130 but max is 0 [ 538.940767][ T5680] usb 1-1: config 5 has no interface number 0 [ 538.947022][ T5680] usb 1-1: config 5 interface 130 has no altsetting 0 [ 538.959134][ T4231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.009129][ T4231] ftdi_sio 5-1:8.92: FTDI USB Serial Device converter detected [ 539.042968][ T4231] usb 5-1: Detected FT232H [ 539.056949][ T4231] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 6 [ 539.127544][ T5680] usb 1-1: New USB device found, idVendor=0711, idProduct=0200, bcdDevice=8b.61 [ 539.147779][ T5680] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.163489][ T5680] usb 1-1: Product: syz [ 539.168000][ T4232] usb 4-1: Using ep0 maxpacket: 32 [ 539.183670][ T5680] usb 1-1: Manufacturer: syz [ 539.188740][ T5680] usb 1-1: SerialNumber: syz [ 539.217416][ T4231] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 539.247587][ T4231] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 539.286340][ T4231] ftdi_sio 5-1:8.92: GPIO initialisation failed: -71 [ 539.302779][ T4232] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 539.315240][ T4231] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 539.323881][ T4232] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 539.356482][ T4231] usb 5-1: USB disconnect, device number 46 [ 539.382114][ T4231] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 539.405048][ T4231] ftdi_sio 5-1:8.92: device disconnected [ 539.461311][T17914] netlink: 'syz.1.5095': attribute type 21 has an invalid length. [ 539.473378][T17914] netlink: 120 bytes leftover after parsing attributes in process `syz.1.5095'. [ 539.488789][T17914] netlink: 'syz.1.5095': attribute type 1 has an invalid length. [ 539.496642][T17914] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5095'. [ 539.498344][ T4232] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 539.515721][ T7713] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 539.523460][ T4232] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 539.531596][ T5680] mct_u232 1-1:5.130: MCT U232 converter detected [ 539.533275][ T4232] usb 4-1: Product: syz [ 539.543362][ T4232] usb 4-1: Manufacturer: syz [ 539.555707][ T5680] mct_u232 ttyUSB0: expected endpoint missing [ 539.578669][ T5680] usb 1-1: USB disconnect, device number 56 [ 539.592896][ T5680] mct_u232 1-1:5.130: device disconnected [ 539.608637][ T4232] hub 4-1:4.0: USB hub found [ 539.787409][ T7713] usb 3-1: Using ep0 maxpacket: 16 [ 539.805953][T17931] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5106'. [ 539.837745][ T4232] hub 4-1:4.0: 8 ports detected [ 539.867413][ T4232] hub 4-1:4.0: insufficient power available to use all downstream ports [ 539.972452][T17942] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5098'. [ 540.063567][ T4232] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 540.078049][ T4232] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 540.133272][ T7713] usb 3-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 540.147918][ T7713] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.155983][ T7713] usb 3-1: Product: syz [ 540.167908][ T4232] usb 4-1: USB disconnect, device number 51 [ 540.213149][ T7713] usb 3-1: Manufacturer: syz [ 540.224582][ T7713] usb 3-1: SerialNumber: syz [ 540.268831][T17966] loop1: detected capacity change from 0 to 256 [ 540.369831][T17966] FAT-fs (loop1): Directory bread(block 64) failed [ 540.387775][T17966] FAT-fs (loop1): Directory bread(block 65) failed [ 540.394476][T17966] FAT-fs (loop1): Directory bread(block 66) failed [ 540.421786][T17966] FAT-fs (loop1): Directory bread(block 67) failed [ 540.434987][T17966] FAT-fs (loop1): Directory bread(block 68) failed [ 540.442239][T17966] FAT-fs (loop1): Directory bread(block 69) failed [ 540.470085][T17966] FAT-fs (loop1): Directory bread(block 70) failed [ 540.488506][T17966] FAT-fs (loop1): Directory bread(block 71) failed [ 540.495203][T17966] FAT-fs (loop1): Directory bread(block 72) failed [ 540.537692][T17966] FAT-fs (loop1): Directory bread(block 73) failed [ 540.659788][ T7713] snd-usb-audio: probe of 3-1:222.0 failed with error -71 [ 540.732410][ T7713] usb 3-1: USB disconnect, device number 46 [ 540.990314][ T4304] udevd[4304]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 541.077580][ T4232] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 541.133367][T18032] loop1: detected capacity change from 0 to 4096 [ 541.337777][ T4232] usb 5-1: Using ep0 maxpacket: 32 [ 541.400104][T18058] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 541.449950][T18032] ntfs3: loop1: ino=5, "/" directory corrupted [ 541.467388][T18032] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 541.511272][ T4232] usb 5-1: config 5 has an invalid interface number: 130 but max is 0 [ 541.526809][ T4232] usb 5-1: config 5 has no interface number 0 [ 541.543436][ T4232] usb 5-1: config 5 interface 130 has no altsetting 0 [ 541.758368][ T4232] usb 5-1: New USB device found, idVendor=0711, idProduct=0200, bcdDevice=8b.61 [ 541.785994][ T4232] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.808442][ T4232] usb 5-1: Product: syz [ 541.812818][ T4232] usb 5-1: Manufacturer: syz [ 541.817685][ T4232] usb 5-1: SerialNumber: syz [ 541.837452][ T7718] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 542.052576][T18101] loop2: detected capacity change from 0 to 1024 [ 542.107601][ T7718] usb 4-1: Using ep0 maxpacket: 32 [ 542.155256][ T4232] mct_u232 5-1:5.130: MCT U232 converter detected [ 542.176781][ T4232] mct_u232 ttyUSB0: expected endpoint missing [ 542.236701][ T4232] usb 5-1: USB disconnect, device number 47 [ 542.248374][ T7718] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 542.279499][ T7718] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 542.293855][ T4232] mct_u232 5-1:5.130: device disconnected [ 542.341775][ T7718] usb 4-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 542.360724][ T7718] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.382528][ T7718] usb 4-1: config 0 descriptor?? [ 542.456706][ T7718] rndis_wlan 4-1:0.0: skipping garbage [ 542.493801][ T7718] usb 4-1: bad CDC descriptors [ 542.568914][ T7718] rndis_host 4-1:0.0: skipping garbage [ 542.598788][ T7718] usb 4-1: bad CDC descriptors [ 542.627816][ T7718] cdc_acm 4-1:0.0: skipping garbage [ 542.687431][ T7718] usb 4-1: USB disconnect, device number 52 [ 542.734361][T18160] SET target dimension over the limit! [ 543.353587][T18190] loop1: detected capacity change from 0 to 8192 [ 543.439759][T18190] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 543.499459][T18190] REISERFS (device loop1): using ordered data mode [ 543.506143][T18190] reiserfs: using flush barriers [ 543.605068][ T7718] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 543.616283][T18190] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 543.686947][T18190] REISERFS (device loop1): checking transaction log (loop1) [ 543.731880][T18190] REISERFS (device loop1): Using r5 hash to sort names [ 544.217734][ T7718] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 544.235320][ T7718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.265451][ T7718] usb 4-1: Product: syz [ 544.294275][ T7718] usb 4-1: Manufacturer: syz [ 544.312741][ T7718] usb 4-1: SerialNumber: syz [ 544.328409][ T7718] usb 4-1: config 0 descriptor?? [ 544.379990][ T7718] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 544.532224][T18274] loop4: detected capacity change from 0 to 8192 [ 544.586109][T18274] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 544.607599][T18274] REISERFS (device loop4): using ordered data mode [ 544.616160][T18274] reiserfs: using flush barriers [ 544.697862][T18274] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 544.797777][T18274] REISERFS (device loop4): checking transaction log (loop4) [ 544.804632][ T7718] usb 4-1: USB disconnect, device number 53 [ 544.826029][T18274] REISERFS (device loop4): Using r5 hash to sort names [ 545.318379][ T26] audit: type=1326 audit(2000000597.669:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18352 comm="syz.4.5216" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe141df0e59 code=0x0 [ 545.392578][T18361] netlink: 'syz.4.5220': attribute type 3 has an invalid length. [ 545.423437][T18363] loop2: detected capacity change from 0 to 1024 [ 545.587948][T18363] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 545.629023][T18363] EXT4-fs warning (device loop2): ext4_rmdir:3243: inode #11: comm syz.2.5221: empty directory 'file1' has too many links (111) [ 545.667634][ T4231] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 545.850978][T18409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5227'. [ 545.851049][T18409] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5227'. [ 545.851066][T18409] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5227'. [ 545.945694][ T26] audit: type=1326 audit(2000000598.289:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18406 comm="syz.1.5231" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc5b047fe59 code=0x0 [ 546.037475][ T4231] usb 1-1: config 150 has an invalid interface number: 204 but max is 2 [ 546.037508][ T4231] usb 1-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 546.037530][ T4231] usb 1-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 546.037555][ T4231] usb 1-1: config 150 has no interface number 0 [ 546.037586][ T4231] usb 1-1: config 150 interface 204 has no altsetting 0 [ 546.197698][ T4231] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 546.197733][ T4231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.197756][ T4231] usb 1-1: Product: syz [ 546.197773][ T4231] usb 1-1: Manufacturer: syz [ 546.197789][ T4231] usb 1-1: SerialNumber: syz [ 546.318220][T18436] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 546.478841][ T4231] xr_serial 1-1:150.204: skipping garbage [ 546.484649][ T4231] xr_serial 1-1:150.204: invalid descriptor buffer length [ 546.526748][ T4231] usb 1-1: USB disconnect, device number 57 [ 546.556797][T18457] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5245'. [ 546.658628][T18455] loop1: detected capacity change from 0 to 2048 [ 546.719114][T18455] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=301132, location=301132 [ 546.774797][T18455] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 546.828399][T18484] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5254'. [ 546.863734][T18484] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5254'. [ 546.876103][T18484] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5254'. [ 547.152806][T18500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5267'. [ 547.196687][T18504] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5259'. [ 547.374735][T18517] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5276'. [ 547.544068][T18535] netlink: 'syz.1.5269': attribute type 10 has an invalid length. [ 548.102610][T18586] loop1: detected capacity change from 0 to 512 [ 548.190520][T18586] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 548.190520][T18586] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 548.190520][T18586] [ 548.331295][T18586] EXT4-fs (loop1): mounted filesystem without journal. Opts: nouser_xattr,grpquota,,errors=continue. Quota mode: writeback. [ 548.444752][T18586] ext4 filesystem being mounted at /1028/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 548.540917][T18626] netlink: 'syz.3.5303': attribute type 1 has an invalid length. [ 548.579271][T18630] netlink: 'syz.0.5305': attribute type 10 has an invalid length. [ 548.720874][T18641] loop4: detected capacity change from 0 to 16 [ 548.808373][T18641] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 549.165573][T18689] kAFS: unable to lookup cell '.,' [ 549.448986][T18699] loop1: detected capacity change from 0 to 4096 [ 549.516268][T18699] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 549.545672][T18699] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 549.568673][T18709] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 549.596297][T18699] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 549.645296][T18699] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 549.707335][T18699] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 549.758919][T18699] ntfs: volume version 3.1. [ 549.798818][T18699] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 549.831008][T18740] loop2: detected capacity change from 0 to 512 [ 549.848379][T18699] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 549.871563][T18699] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 550.032984][T18740] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #16: comm syz.2.5341: corrupted inode contents [ 550.106610][T18740] EXT4-fs error (device loop2): ext4_dirty_inode:6077: inode #16: comm syz.2.5341: mark_inode_dirty error [ 550.143936][T18771] syz.1.5347 uses obsolete (PF_INET,SOCK_PACKET) [ 550.161034][T18740] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #16: comm syz.2.5341: corrupted inode contents [ 550.212551][T18740] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #16: comm syz.2.5341: mark_inode_dirty error [ 550.224365][ T4232] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 550.256554][T18740] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #16: comm syz.2.5341: corrupted inode contents [ 550.306506][T18768] device bond1 entered promiscuous mode [ 550.354873][T18740] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 550.365994][T18768] 8021q: adding VLAN 0 to HW filter on device bond1 [ 550.389710][T18740] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #16: comm syz.2.5341: corrupted inode contents [ 550.422943][T18813] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 550.464685][T18740] EXT4-fs error (device loop2): ext4_truncate:4286: inode #16: comm syz.2.5341: mark_inode_dirty error [ 550.516708][T18740] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 550.589378][T18740] EXT4-fs (loop2): 1 truncate cleaned up [ 550.595285][T18740] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier=0x0000000000000006,nobarrier,nombcache,barrier,,errors=continue. Quota mode: writeback. [ 550.638250][ T4232] usb 5-1: config 150 has an invalid interface number: 204 but max is 2 [ 550.650030][ T4232] usb 5-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 550.687026][ T4232] usb 5-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 550.697887][ T4232] usb 5-1: config 150 has no interface number 0 [ 550.704471][ T4232] usb 5-1: config 150 interface 204 has no altsetting 0 [ 550.712452][T18740] ext4 filesystem being mounted at /1042/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 550.789610][ T1091] block nbd1: Attempted send on invalid socket [ 550.795903][ T1091] blk_update_request: I/O error, dev nbd1, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 550.825458][T18823] VFS: unable to read V7 FS superblock on device nbd1. [ 550.848598][T18828] netlink: 'syz.0.5356': attribute type 1 has an invalid length. [ 550.907384][T18823] VFS: could not find a valid V7 on nbd1. [ 550.951240][ T4232] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 550.981431][ T4232] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.059858][ T4232] usb 5-1: Product: syz [ 551.087864][ T4232] usb 5-1: Manufacturer: syz [ 551.092545][ T4232] usb 5-1: SerialNumber: syz [ 551.408775][ T4232] xr_serial 5-1:150.204: skipping garbage [ 551.415104][ T4232] xr_serial 5-1:150.204: invalid descriptor buffer length [ 551.422818][ T7718] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 551.478740][ T4232] usb 5-1: USB disconnect, device number 48 [ 551.697579][ T7718] usb 4-1: Using ep0 maxpacket: 8 [ 551.728011][T18876] netlink: 'syz.2.5380': attribute type 41 has an invalid length. [ 551.817764][ T7718] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 170, changing to 7 [ 551.927739][T18879] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 552.006735][T18890] __nla_validate_parse: 12 callbacks suppressed [ 552.006758][T18890] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5375'. [ 552.038049][ T7718] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 552.067379][ T7718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.111425][ T7718] usb 4-1: Product: syz [ 552.115722][ T7718] usb 4-1: Manufacturer: syz [ 552.133288][ T7718] usb 4-1: SerialNumber: syz [ 552.557777][ T7718] usb 4-1: 1:1 : no UAC_FORMAT_TYPE desc [ 552.570039][T18935] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5389'. [ 552.587683][ T7718] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 552.635227][ T7718] usb 4-1: USB disconnect, device number 54 [ 552.649201][T18943] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5390'. [ 552.725210][T18931] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 552.878650][T18960] device bond2 entered promiscuous mode [ 552.884563][T18960] 8021q: adding VLAN 0 to HW filter on device bond2 [ 552.948548][ T4304] udevd[4304]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 552.966333][ C1] vkms_vblank_simulate: vblank timer overrun [ 553.174757][T19017] loop3: detected capacity change from 0 to 512 [ 553.284550][T19027] netlink: 'syz.2.5401': attribute type 4 has an invalid length. [ 553.329759][T19025] loop1: detected capacity change from 0 to 2048 [ 553.365682][T19017] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #16: comm syz.3.5399: corrupted inode contents [ 553.393975][T19017] EXT4-fs error (device loop3): ext4_dirty_inode:6077: inode #16: comm syz.3.5399: mark_inode_dirty error [ 553.416286][T19025] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 553.430864][T19025] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 553.457905][T19017] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #16: comm syz.3.5399: corrupted inode contents [ 553.513798][T19017] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #16: comm syz.3.5399: mark_inode_dirty error [ 553.557494][T19017] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #16: comm syz.3.5399: corrupted inode contents [ 553.573959][T19017] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 553.591414][T19017] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #16: comm syz.3.5399: corrupted inode contents [ 553.611815][T19017] EXT4-fs error (device loop3): ext4_truncate:4286: inode #16: comm syz.3.5399: mark_inode_dirty error [ 553.661382][T19017] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 553.702343][T19017] EXT4-fs (loop3): 1 truncate cleaned up [ 553.715266][T19047] netlink: 'syz.4.5407': attribute type 1 has an invalid length. [ 553.731636][T19017] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier=0x0000000000000006,nobarrier,nombcache,barrier,,errors=continue. Quota mode: writeback. [ 553.789309][T19047] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.5407'. [ 553.807559][T19017] ext4 filesystem being mounted at /1037/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 553.835494][T19057] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 553.964476][T19061] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5410'. [ 554.049999][T19061] openvswitch: netlink: Key 29 has unexpected len 3064 expected 0 [ 554.123852][T19066] device bond2 entered promiscuous mode [ 554.185113][T19066] 8021q: adding VLAN 0 to HW filter on device bond2 [ 554.766120][T19155] loop3: detected capacity change from 0 to 64 [ 554.924284][T19164] device bond4 entered promiscuous mode [ 554.951060][T19164] 8021q: adding VLAN 0 to HW filter on device bond4 [ 555.034193][T19206] netlink: 'syz.4.5435': attribute type 4 has an invalid length. [ 555.347655][ T7707] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 555.387070][T19243] loop1: detected capacity change from 0 to 64 [ 555.522971][ T7718] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 555.580037][T19257] loop1: detected capacity change from 0 to 16 [ 555.593701][T19257] erofs: (device loop1): mounted with root inode @ nid 36. [ 555.623092][T19257] erofs: (device loop1): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 555.636604][T19257] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 555.767300][ T7707] usb 3-1: config 150 has an invalid interface number: 204 but max is 2 [ 555.775988][ T7707] usb 3-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 555.796174][ T7707] usb 3-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 555.805773][ T7707] usb 3-1: config 150 has no interface number 0 [ 555.816461][ T7707] usb 3-1: config 150 interface 204 has no altsetting 0 [ 555.987776][ T7707] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 555.996960][ T7707] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.005198][ T7707] usb 3-1: Product: syz [ 556.009792][ T7718] usb 5-1: unable to get BOS descriptor or descriptor too short [ 556.018435][ T7707] usb 3-1: Manufacturer: syz [ 556.023341][ T7707] usb 3-1: SerialNumber: syz [ 556.117562][ T7718] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 556.327504][ T7718] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 556.336860][ T7718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.346680][ T7707] xr_serial 3-1:150.204: skipping garbage [ 556.352598][ T7707] xr_serial 3-1:150.204: invalid descriptor buffer length [ 556.362628][ T7718] usb 5-1: Product: syz [ 556.367100][ T7718] usb 5-1: Manufacturer: syz [ 556.372064][ T7707] usb 3-1: USB disconnect, device number 47 [ 556.381269][ T7718] usb 5-1: SerialNumber: syz [ 556.700728][ T7718] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 556.727564][ T7718] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 556.735830][ T7718] usb 5-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 556.869141][ T7718] usb 5-1: USB disconnect, device number 49 [ 557.002380][T19315] netlink: 'syz.3.5459': attribute type 1 has an invalid length. [ 557.052808][T19326] loop1: detected capacity change from 0 to 256 [ 557.100938][T19326] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 557.152609][T19326] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 557.195396][T19326] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 557.255278][T19342] loop3: detected capacity change from 0 to 16 [ 557.271579][ T4302] udevd[4302]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 557.317436][ T7707] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 557.354849][T19342] erofs: (device loop3): mounted with root inode @ nid 36. [ 557.384620][T19342] erofs: (device loop3): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 557.438943][T19342] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 557.492157][T19353] loop4: detected capacity change from 0 to 64 [ 557.682682][T19373] loop1: detected capacity change from 0 to 2048 [ 557.747642][ T7707] usb 3-1: unable to get BOS descriptor or descriptor too short [ 557.756038][T19373] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 557.805044][T19387] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 557.826934][T19373] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 557.859289][T19373] NILFS error (device loop1): nilfs_bmap_last_key: broken bmap (inode number=16) [ 557.884207][T19373] Remounting filesystem read-only [ 557.889817][ T7707] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 557.902684][ T7707] usb 3-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 557.916383][T19373] NILFS (loop1): error -5 truncating bmap (ino=16) [ 557.947533][ T7707] usb 3-1: config 1 interface 0 has no altsetting 1 [ 557.979272][ T4190] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 558.107474][T19409] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5482'. [ 558.168312][ T7707] usb 3-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 558.201921][T19414] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 558.210025][T19414] IPv6: NLM_F_CREATE should be set when creating new route [ 558.217392][T19414] IPv6: NLM_F_CREATE should be set when creating new route [ 558.235785][ T7707] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.253504][ T7707] usb 3-1: Product: syz [ 558.259914][ T7707] usb 3-1: Manufacturer: syz [ 558.264670][ T7707] usb 3-1: SerialNumber: syz [ 558.319541][ T7707] smsusb:smsusb_probe: board id=8, interface number 0 [ 558.527473][ T7707] smsusb:smsusb_probe: usb_set_interface failed, rc -71 [ 558.535178][ T7707] smsusb: probe of 3-1:1.0 failed with error -71 [ 558.585951][ T7707] usb 3-1: USB disconnect, device number 48 [ 558.636569][T19444] loop3: detected capacity change from 0 to 2048 [ 558.741873][T19444] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 558.850111][T19457] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 558.908860][T19461] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5498'. [ 558.916807][T19444] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 558.960603][T19444] NILFS error (device loop3): nilfs_bmap_last_key: broken bmap (inode number=16) [ 559.007660][T19444] Remounting filesystem read-only [ 559.033405][T19444] NILFS (loop3): error -5 truncating bmap (ino=16) [ 559.185327][ T4200] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 559.256141][T19483] IPv6: sit2: Disabled Multicast RS [ 559.335347][T19488] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5509'. [ 559.431045][ T5680] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 559.720321][ T7718] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 559.732479][ T7718] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 559.762076][ T7707] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 559.797641][ T5680] usb 1-1: config 0 has an invalid interface number: 237 but max is 0 [ 559.825293][ T5680] usb 1-1: config 0 has no interface number 0 [ 559.851919][ T5680] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 559.889826][ T5680] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 559.910580][ T5680] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 559.942853][ T5680] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 560.117729][ T5680] usb 1-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6 [ 560.157320][ T5680] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.182961][ T5680] usb 1-1: Product: syz [ 560.196978][ T5680] usb 1-1: Manufacturer: syz [ 560.211894][ T5680] usb 1-1: SerialNumber: syz [ 560.246054][ T5680] usb 1-1: config 0 descriptor?? [ 560.257658][ T7707] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 560.282346][T19563] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5532'. [ 560.306045][T19563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5532'. [ 560.331793][ T5680] xpad 1-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 560.345983][T19568] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 560.390863][ T5680] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.237/input/input25 [ 560.522065][T19571] loop2: detected capacity change from 0 to 4096 [ 560.577474][T19593] netlink: 'syz.1.5539': attribute type 32 has an invalid length. [ 560.608074][T19571] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 560.684133][T19598] loop4: detected capacity change from 0 to 764 [ 560.720186][ T7707] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 560.742806][ T4265] usb 1-1: USB disconnect, device number 58 [ 560.753025][ T4265] xpad 1-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 560.894782][T19598] Symlink component flag not implemented [ 560.967500][T19598] Symlink component flag not implemented (116) [ 561.076244][T19631] IPv6: sit1: Disabled Multicast RS [ 561.194014][T19642] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5548'. [ 561.535472][T19671] loop2: detected capacity change from 0 to 764 [ 561.607521][ T7707] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 561.688308][T19671] Symlink component flag not implemented [ 561.694082][T19671] Symlink component flag not implemented (116) [ 561.887292][ T7707] usb 4-1: Using ep0 maxpacket: 16 [ 561.951750][T19691] vxcan1 speed is unknown, defaulting to 1000 [ 561.990672][T19691] vxcan1 speed is unknown, defaulting to 1000 [ 562.014681][T19691] vxcan1 speed is unknown, defaulting to 1000 [ 562.027502][ T7707] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 562.035800][ T7707] usb 4-1: config 0 has an invalid descriptor of length 25, skipping remainder of the config [ 562.098438][ T7707] usb 4-1: config 0 has no interface number 0 [ 562.195564][T19706] loop4: detected capacity change from 0 to 512 [ 562.288675][T19706] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 562.297598][ T7707] usb 4-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 562.310983][T19706] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 562.315895][ T7707] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.350615][ T7707] usb 4-1: Product: syz [ 562.354628][T19706] System zones: 0-1 [ 562.355129][ T7707] usb 4-1: Manufacturer: syz [ 562.359083][ T7707] usb 4-1: SerialNumber: syz [ 562.365086][ T7707] usb 4-1: config 0 descriptor?? [ 562.382528][T19706] , 15-15, 18-18, 34-34 [ 562.388299][T19706] EXT4-fs (loop4): orphan cleanup on readonly fs [ 562.395162][T19706] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #4: comm syz.4.5567: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 562.414568][T19706] EXT4-fs error (device loop4): ext4_quota_enable:6447: comm syz.4.5567: Bad quota inode: 4, type: 1 [ 562.426458][T19706] EXT4-fs warning (device loop4): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 562.455818][T19706] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 562.463559][T19706] EXT4-fs (loop4): mounted filesystem without journal. Opts: resgid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 562.478205][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.484601][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.509274][T19706] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 562.552385][T19706] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 562.665336][ T7714] usb 4-1: USB disconnect, device number 55 [ 562.780262][ T7707] vxcan1 speed is unknown, defaulting to 1000 [ 562.828474][T19743] netlink: 'syz.0.5579': attribute type 32 has an invalid length. [ 562.847398][T19691] infiniband syz2: set active [ 562.852850][T19691] infiniband syz2: added vxcan1 [ 563.013898][T19691] infiniband syz2: Couldn't open port 1 [ 563.181830][T19691] RDS/IB: syz2: added [ 563.220903][T19691] smc: adding ib device syz2 with port count 1 [ 563.243210][T19776] loop4: detected capacity change from 0 to 16 [ 563.255108][T19691] smc: ib device syz2 port 1 has pnetid [ 563.289193][ T5679] vxcan1 speed is unknown, defaulting to 1000 [ 563.328145][T19691] vxcan1 speed is unknown, defaulting to 1000 [ 563.574729][T19803] device vti0 entered promiscuous mode [ 563.702211][T19691] vxcan1 speed is unknown, defaulting to 1000 [ 563.726854][T19818] netlink: 'syz.2.5600': attribute type 4 has an invalid length. [ 563.749854][T19818] netlink: 17 bytes leftover after parsing attributes in process `syz.2.5600'. [ 563.795157][T19811] loop4: detected capacity change from 0 to 4096 [ 563.987878][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 564.073740][T19837] loop2: detected capacity change from 0 to 16 [ 564.287256][T19839] xt_CT: No such helper "snmp_trap" [ 564.359153][T19691] vxcan1 speed is unknown, defaulting to 1000 [ 564.799410][T19877] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.5620'. [ 564.935066][T19691] vxcan1 speed is unknown, defaulting to 1000 [ 565.087676][ T4231] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 565.186895][T19901] loop4: detected capacity change from 0 to 4096 [ 565.248915][T19691] vxcan1 speed is unknown, defaulting to 1000 [ 565.273251][T19901] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 565.314869][T19911] netlink: 'syz.3.5627': attribute type 1 has an invalid length. [ 565.347568][ T4231] usb 1-1: Using ep0 maxpacket: 16 [ 565.462767][T19917] netlink: 'syz.3.5628': attribute type 8 has an invalid length. [ 565.468022][ T4231] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 565.503593][ T4231] usb 1-1: config 0 has no interface number 0 [ 565.510957][ T4231] usb 1-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 565.647496][ T4231] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 565.677389][ T4231] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 565.711771][ T4231] usb 1-1: Product: syz [ 565.727326][ T4231] usb 1-1: SerialNumber: syz [ 565.769936][ T4231] usb 1-1: config 0 descriptor?? [ 565.787601][T19880] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 565.817489][ T4231] usbhid 1-1:0.8: couldn't find an input interrupt endpoint [ 566.176422][T19967] device vti0 entered promiscuous mode [ 566.202129][T19973] rdma_rxe: rxe_register_device failed with error -23 [ 566.278106][T19973] rdma_rxe: failed to add vxcan1 [ 566.411161][T19993] netlink: 88 bytes leftover after parsing attributes in process `syz.4.5650'. [ 566.637271][ T7714] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 566.675122][T20017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5658'. [ 566.697373][ T5680] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 566.817281][T20028] rdma_rxe: rxe_register_device failed with error -23 [ 566.825102][T20028] rdma_rxe: failed to add vxcan1 [ 566.888246][ T7714] usb 4-1: Using ep0 maxpacket: 16 [ 566.978004][T20040] overlayfs: unrecognized mount option "smackfsfloor=\{" or missing value [ 567.017471][ T5680] usb 3-1: not running at top speed; connect to a high speed hub [ 567.027450][ T7714] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 567.040079][ T7714] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 567.053275][ T7714] usb 4-1: config 0 has no interface number 0 [ 567.107539][ T5680] usb 3-1: config 88 has an invalid interface number: 11 but max is 0 [ 567.121188][ T5680] usb 3-1: config 88 has no interface number 0 [ 567.144498][ T5680] usb 3-1: config 88 interface 11 has no altsetting 0 [ 567.237781][ T7714] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 567.257658][ T7714] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.266026][ T7714] usb 4-1: Product: syz [ 567.275094][ T7714] usb 4-1: Manufacturer: syz [ 567.280104][ T7714] usb 4-1: SerialNumber: syz [ 567.297837][ T7714] usb 4-1: config 0 descriptor?? [ 567.313227][T20060] netlink: 'syz.1.5671': attribute type 1 has an invalid length. [ 567.327589][ T5680] usb 3-1: New USB device found, idVendor=0545, idProduct=800d, bcdDevice= 3.0a [ 567.330180][T20060] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5671'. [ 567.346830][ T5680] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.373571][ T5680] usb 3-1: Product: syz [ 567.395633][ T5680] usb 3-1: Manufacturer: syz [ 567.423518][ T5680] usb 3-1: SerialNumber: syz [ 567.500242][T20066] loop1: detected capacity change from 0 to 4096 [ 567.563290][T20066] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 567.598004][ T7714] usb 4-1: Found UVC 0.00 device syz (046d:08d3) [ 567.605692][ T7714] usb 4-1: No valid video chain found. [ 567.777433][ T5680] usb 3-1: USB disconnect, device number 49 [ 567.807844][ T7714] usb 4-1: USB disconnect, device number 56 [ 567.879897][ T5679] usb 1-1: USB disconnect, device number 59 [ 568.049855][T20087] loop1: detected capacity change from 0 to 8192 [ 568.106731][T20117] xt_TCPMSS: Only works on TCP SYN packets [ 568.132211][T20087] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 568.190056][T20087] REISERFS (device loop1): using ordered data mode [ 568.262098][T20087] reiserfs: using flush barriers [ 568.365555][T20087] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 568.433560][T20087] REISERFS (device loop1): checking transaction log (loop1) [ 568.479436][T20087] REISERFS (device loop1): Using r5 hash to sort names [ 568.657752][T20155] netlink: 'syz.4.5696': attribute type 1 has an invalid length. [ 568.665574][T20155] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5696'. [ 568.858235][ T7707] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 569.011143][T20171] loop3: detected capacity change from 0 to 4096 [ 569.108432][T20171] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 569.124078][T20190] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.5707'. [ 569.287781][ T7707] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 569.296900][ T7707] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.373613][ T7707] usb 3-1: config 0 descriptor?? [ 569.450018][ T7707] cp210x 3-1:0.0: cp210x converter detected [ 569.660477][ T7707] usb 3-1: cp210x converter now attached to ttyUSB0 [ 569.846259][T20264] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.5724'. [ 569.871587][ T5679] usb 3-1: USB disconnect, device number 50 [ 569.893919][ T5679] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 569.942157][ T5679] cp210x 3-1:0.0: device disconnected [ 570.350644][T20326] loop3: detected capacity change from 0 to 128 [ 570.424576][T20326] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 570.487857][T20326] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 570.784303][T20351] overlayfs: missing 'lowerdir' [ 571.055350][T20383] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.5757'. [ 571.738526][ T5680] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 571.785769][T20356] loop2: detected capacity change from 0 to 32768 [ 571.823344][T20356] [ 571.823344][T20356] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 571.823344][T20356] [ 571.874306][T20356] ERROR: (device loop2): dbAlloc: the hint is outside the map [ 571.874306][T20356] [ 571.900631][T20356] ERROR: (device loop2): remounting filesystem as read-only [ 571.934050][T20435] loop1: detected capacity change from 0 to 128 [ 571.977385][ T5679] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 571.987506][ T5680] usb 1-1: Using ep0 maxpacket: 32 [ 572.038264][T20435] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 572.107560][ T5680] usb 1-1: config index 0 descriptor too short (expected 539, got 27) [ 572.126109][ T5680] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 572.139838][T20435] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 572.179275][ T5680] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 572.257575][ T5679] usb 5-1: Using ep0 maxpacket: 16 [ 572.367472][ T5680] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 572.396868][ T5680] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.405785][ T5679] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 572.424731][ T5679] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 572.447253][ T5680] usb 1-1: Product: syz [ 572.463869][ T5680] usb 1-1: Manufacturer: syz [ 572.469051][ T5679] usb 5-1: config 0 has no interface number 0 [ 572.475334][ T5680] usb 1-1: SerialNumber: syz [ 572.494168][ T5680] usb 1-1: config 0 descriptor?? [ 572.499930][T20465] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.5777'. [ 572.552037][ T5680] hub 1-1:0.0: bad descriptor, ignoring hub [ 572.562755][ T5680] hub: probe of 1-1:0.0 failed with error -5 [ 572.586975][ T5680] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input26 [ 572.624193][ T5680] usbtouchscreen 1-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90 [ 572.657275][ T5679] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 572.673197][ T5679] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.683964][ T5679] usb 5-1: Product: syz [ 572.695629][ T5679] usb 5-1: Manufacturer: syz [ 572.700861][ T5679] usb 5-1: SerialNumber: syz [ 572.708779][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 572.736040][ T5680] usbtouchscreen: probe of 1-1:0.0 failed with error -90 [ 572.749004][ T5679] usb 5-1: config 0 descriptor?? [ 572.798113][ T5680] usb 1-1: USB disconnect, device number 60 [ 573.027675][ T5679] usb 5-1: Found UVC 0.00 device syz (046d:08d3) [ 573.037876][ T5679] usb 5-1: No valid video chain found. [ 573.071674][T20522] netlink: 'syz.3.5793': attribute type 13 has an invalid length. [ 573.147323][T20522] gretap0: refused to change device tx_queue_len [ 573.154352][T20522] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 573.261776][ T5679] usb 5-1: USB disconnect, device number 50 [ 573.604649][ T5680] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 573.670184][T20572] overlayfs: conflicting options: nfs_export=on,index=off [ 573.803370][T20584] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5811'. [ 573.853424][T20584] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5811'. [ 573.949600][ T5680] usb 4-1: not running at top speed; connect to a high speed hub [ 574.048738][ T5680] usb 4-1: config 88 has an invalid interface number: 11 but max is 0 [ 574.063500][ T5680] usb 4-1: config 88 has no interface number 0 [ 574.081751][ T5680] usb 4-1: config 88 interface 11 has no altsetting 0 [ 574.179729][T20613] overlayfs: conflicting options: nfs_export=on,index=off [ 574.269958][ T5680] usb 4-1: New USB device found, idVendor=0545, idProduct=800d, bcdDevice= 3.0a [ 574.297402][ T5680] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.324660][ T5680] usb 4-1: Product: syz [ 574.341206][ T5680] usb 4-1: Manufacturer: syz [ 574.345893][ T5680] usb 4-1: SerialNumber: syz [ 574.364184][T20627] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5826'. [ 574.404475][T20627] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5826'. [ 574.534687][T20642] netlink: 'syz.0.5831': attribute type 13 has an invalid length. [ 574.585495][T20642] gretap0: refused to change device tx_queue_len [ 574.612332][T20642] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 574.720887][ T5680] usb 4-1: USB disconnect, device number 57 [ 574.878786][T20666] device syz_tun entered promiscuous mode [ 574.899386][T20666] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 575.179529][T20683] mmap: syz.1.5842 (20683) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 575.247343][ T7927] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 575.264533][T20634] loop2: detected capacity change from 0 to 32768 [ 575.375900][T20634] (syz.2.5828,20634,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 575.425759][T20634] (syz.2.5828,20634,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 575.571382][T20634] JBD2: Ignoring recovery information on journal [ 575.607752][ T7927] usb 5-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 575.617468][ T7927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.657494][ T7927] usb 5-1: config 0 descriptor?? [ 575.697462][T20716] device syz_tun entered promiscuous mode [ 575.710549][ T7927] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 575.725412][ T7927] dvb_usb_af9015: probe of 5-1:0.0 failed with error -22 [ 575.750006][T20634] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 575.768403][T20716] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 575.841680][T20729] loop1: detected capacity change from 0 to 512 [ 575.963335][ T7714] usb 5-1: USB disconnect, device number 51 [ 576.016309][ T4195] ocfs2: Unmounting device (7,2) on (node local) [ 576.101602][T20738] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 576.384798][T20756] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5862'. [ 576.433449][T20756] netlink: 112 bytes leftover after parsing attributes in process `syz.3.5862'. [ 576.676189][T20778] netlink: zone id is out of range [ 576.715652][T20778] netlink: zone id is out of range [ 576.727727][T20778] netlink: zone id is out of range [ 576.775903][T20778] netlink: zone id is out of range [ 576.804918][T20778] netlink: zone id is out of range [ 576.828808][T20778] netlink: zone id is out of range [ 576.982359][T20800] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5877'. [ 577.038639][T20800] netlink: 112 bytes leftover after parsing attributes in process `syz.4.5877'. [ 577.180893][T20819] netlink: 'syz.1.5883': attribute type 10 has an invalid length. [ 577.225220][T20819] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5883'. [ 577.261546][T20819] device virt_wifi0 entered promiscuous mode [ 577.287517][ T7714] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 577.430225][T20832] loop1: detected capacity change from 0 to 64 [ 577.707502][ T7714] usb 3-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 577.747195][ T7714] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.788617][ T7714] usb 3-1: config 0 descriptor?? [ 577.838693][ T7714] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 577.866405][ T7714] dvb_usb_af9015: probe of 3-1:0.0 failed with error -22 [ 578.094462][T20881] loop4: detected capacity change from 0 to 64 [ 578.103963][ T7713] usb 3-1: USB disconnect, device number 51 [ 578.339019][T20894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 578.373174][T20894] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.508447][T20894] net_ratelimit: 10 callbacks suppressed [ 578.508466][T20894] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 578.602456][T20904] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 578.640064][T20907] netlink: 'syz.3.5908': attribute type 21 has an invalid length. [ 578.705267][T20907] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5908'. [ 578.777372][T20907] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5908'. [ 579.003441][T20925] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5915'. [ 579.365427][T20951] loop3: detected capacity change from 0 to 256 [ 579.436169][T20883] loop1: detected capacity change from 0 to 40427 [ 579.581544][T20883] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 579.613995][T20883] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 579.690926][T20951] FAT-fs (loop3): Directory bread(block 64) failed [ 579.708489][T20883] F2FS-fs (loop1): invalid crc value [ 579.710732][T20951] FAT-fs (loop3): Directory bread(block 65) failed [ 579.756617][T20951] FAT-fs (loop3): Directory bread(block 66) failed [ 579.777376][T20951] FAT-fs (loop3): Directory bread(block 67) failed [ 579.781565][T20883] F2FS-fs (loop1): Found nat_bits in checkpoint [ 579.784474][T20951] FAT-fs (loop3): Directory bread(block 68) failed [ 579.816232][T20951] FAT-fs (loop3): Directory bread(block 69) failed [ 579.861949][T20951] FAT-fs (loop3): Directory bread(block 70) failed [ 579.897705][T20951] FAT-fs (loop3): Directory bread(block 71) failed [ 579.916323][T20951] FAT-fs (loop3): Directory bread(block 72) failed [ 579.943020][T20951] FAT-fs (loop3): Directory bread(block 73) failed [ 580.023558][T20883] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 580.037260][T20883] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 580.192891][T20883] attempt to access beyond end of device [ 580.192891][T20883] loop1: rw=2049, want=45104, limit=40427 [ 580.367316][ T7707] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 580.714309][ T7713] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 580.847704][ T7707] usb 5-1: unable to get BOS descriptor or descriptor too short [ 580.966712][ T7707] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 581.005930][ T7707] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 581.117690][ T7713] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 581.136189][ T7713] usb 3-1: config 0 has no interface number 0 [ 581.143117][ T7713] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 581.155258][ T7713] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 581.277957][ T7707] usb 5-1: string descriptor 0 read error: -22 [ 581.284281][ T7707] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 581.313714][ T7707] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.377765][ T7713] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 581.392892][ T7713] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.404737][ T7707] usb 5-1: selecting invalid altsetting 1 [ 581.418365][ T7707] usb 5-1: unit 3 not found! [ 581.427723][ T7713] usb 3-1: Product: syz [ 581.431987][ T7713] usb 3-1: Manufacturer: syz [ 581.436737][ T7713] usb 3-1: SerialNumber: syz [ 581.481737][ T7713] usb 3-1: config 0 descriptor?? [ 581.507596][T20985] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 581.528682][ T7713] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 581.550495][ T7713] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 581.608261][ T7707] usb 5-1: unit 0 not found! [ 581.789704][ T4283] udevd[4283]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 581.834911][ T7707] usb 5-1: USB disconnect, device number 52 [ 581.941487][ T7713] usb 3-1: USB disconnect, device number 52 [ 581.978157][ T7713] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 582.021046][ T7713] cyberjack 3-1:0.69: device disconnected [ 582.076468][T21042] loop1: detected capacity change from 0 to 32768 [ 582.089469][T21101] xt_ecn: cannot match TCP bits for non-tcp packets [ 582.120839][T21042] (syz.1.5947,21042,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 582.175239][T21042] (syz.1.5947,21042,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 582.267909][T21042] JBD2: Ignoring recovery information on journal [ 582.436054][T21042] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 582.537761][T21121] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5963'. [ 582.577912][T21121] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5963'. [ 582.807579][ T4190] ocfs2: Unmounting device (7,1) on (node local) [ 583.179027][T21170] netlink: 'syz.1.5969': attribute type 1 has an invalid length. [ 583.286122][T21182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5981'. [ 583.311074][ T4232] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 583.332396][T21182] device netdevsim0 left promiscuous mode [ 583.769456][T21216] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 583.776603][ T4232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 583.815372][ T4232] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 583.864328][T21225] netlink: 'syz.0.6004': attribute type 1 has an invalid length. [ 583.885624][ T4232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 583.919696][ T4232] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 583.943467][ T4232] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 583.978843][ T4232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.019248][ T4232] usb 4-1: config 0 descriptor?? [ 584.267733][ T4232] hdpvr 4-1:0.0: firmware version 0xd9 dated LW@'^R"5DBUN=rp]E/ [ 584.294883][ T4232] hdpvr 4-1:0.0: untested firmware, the driver might not work. [ 584.317352][ T7713] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 584.491284][ T4232] hdpvr 4-1:0.0: device init failed [ 584.496680][ T4232] hdpvr: probe of 4-1:0.0 failed with error -12 [ 584.505666][T21276] program syz.2.6010 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 584.562301][ T4232] usb 4-1: USB disconnect, device number 58 [ 584.732275][ T7713] usb 2-1: config 8 has an invalid interface number: 7 but max is 0 [ 584.757490][ T7713] usb 2-1: config 8 has no interface number 0 [ 584.793544][T21298] netlink: 'syz.2.6015': attribute type 10 has an invalid length. [ 584.807870][ T7713] usb 2-1: string descriptor 0 read error: -22 [ 584.814401][T21298] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6015'. [ 584.824784][ T7713] usb 2-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=d9.bb [ 584.887196][ T7713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.968628][ T7713] usb 2-1: Expected 3 endpoints, found: 0 [ 585.100893][T21318] netlink: 'syz.3.6020': attribute type 4 has an invalid length. [ 585.131326][T21318] netlink: 'syz.3.6020': attribute type 10 has an invalid length. [ 585.164576][T21318] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6020'. [ 585.179335][ T5680] usb 2-1: USB disconnect, device number 56 [ 585.255919][T21318] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 585.690304][T21354] SET target dimension over the limit! [ 585.738952][T21357] openvswitch: netlink: Actions may not be safe on all matching packets [ 585.751556][T21313] loop4: detected capacity change from 0 to 32768 [ 585.841885][T21313] (syz.4.6018,21313,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 585.893764][T21313] (syz.4.6018,21313,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 585.936222][T21369] xt_hashlimit: size too large, truncated to 1048576 [ 586.063293][T21313] JBD2: Ignoring recovery information on journal [ 586.097305][ T7927] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 586.256908][T21313] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 586.467733][ T7927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 586.495795][ T7927] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 586.536781][ T7927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 586.561074][ T7927] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 586.577798][T21412] tipc: Can't bind to reserved service type 0 [ 586.593640][ T7927] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 586.623780][ T7927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.649368][ T7927] usb 1-1: config 0 descriptor?? [ 586.682117][ T4194] ocfs2: Unmounting device (7,4) on (node local) [ 586.760249][T21428] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6055'. [ 586.769592][T21428] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 586.777857][T21426] SET target dimension over the limit! [ 586.917508][ T7927] hdpvr 1-1:0.0: firmware version 0xd9 dated LW@'^R"5DBUN=rp]E/ [ 586.944915][ T7927] hdpvr 1-1:0.0: untested firmware, the driver might not work. [ 587.137352][ T7927] hdpvr 1-1:0.0: device init failed [ 587.142861][ T7927] hdpvr: probe of 1-1:0.0 failed with error -12 [ 587.168973][ T7927] usb 1-1: USB disconnect, device number 61 [ 587.445594][T21483] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6070'. [ 587.478290][T21483] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 587.544192][T21486] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.6071'. [ 587.935378][T21513] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.6080'. [ 588.029483][T21454] loop3: detected capacity change from 0 to 32768 [ 588.105595][T21454] (syz.3.6061,21454,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 588.143294][T21530] loop1: detected capacity change from 0 to 1024 [ 588.162562][T21454] (syz.3.6061,21454,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 588.189907][T21513] syz.0.6080 (21513) used greatest stack depth: 18104 bytes left [ 588.283872][T21454] JBD2: Ignoring recovery information on journal [ 588.368600][ T4232] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 588.472504][T21454] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 588.737682][ T7713] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 588.739739][ T4200] ocfs2: Unmounting device (7,3) on (node local) [ 588.763475][ T4232] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 588.783620][ T4232] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 588.827421][ T4232] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 588.868675][ T4232] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 588.909266][ T4232] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 588.962779][ T4232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.001691][ T4232] usb 5-1: config 0 descriptor?? [ 589.018813][ T7713] usb 3-1: Using ep0 maxpacket: 32 [ 589.173575][ T7713] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 589.327649][ T4232] hdpvr 5-1:0.0: firmware version 0xd9 dated LW@'^R"5DBUN=rp]E/ [ 589.342465][ T4232] hdpvr 5-1:0.0: untested firmware, the driver might not work. [ 589.350305][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 589.358970][ T7713] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 589.368925][ T7713] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.378656][ T7713] usb 3-1: Product: syz [ 589.382970][ T7713] usb 3-1: Manufacturer: syz [ 589.387947][ T7713] usb 3-1: SerialNumber: syz [ 589.402768][ T7713] usb 3-1: config 0 descriptor?? [ 589.459533][ T7713] usb 3-1: bad CDC descriptors [ 589.464903][ T7713] usb 3-1: unsupported MDLM descriptors [ 589.553163][ T4232] hdpvr 5-1:0.0: device init failed [ 589.559014][ T4232] hdpvr: probe of 5-1:0.0 failed with error -12 [ 589.607542][ T4232] usb 5-1: USB disconnect, device number 53 [ 589.673593][ T7713] usb 3-1: USB disconnect, device number 53 [ 589.710870][T21640] tmpfs: Bad value for 'mpol' [ 589.896858][T21653] overlayfs: './file0' not a directory [ 591.297046][T21791] xt_TCPMSS: Only works on TCP SYN packets [ 591.302984][ T4265] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 591.600606][T21822] netlink: 'syz.0.6178': attribute type 1 has an invalid length. [ 591.697459][ T4265] usb 2-1: unable to get BOS descriptor or descriptor too short [ 591.738042][ T4265] usb 2-1: not running at top speed; connect to a high speed hub [ 591.827591][ T4265] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 591.858887][ T4265] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 591.892361][ T4265] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 592.087476][ T4265] usb 2-1: New USB device found, idVendor=0582, idProduct=1f14, bcdDevice= 0.40 [ 592.103837][ T4265] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.137278][ T4265] usb 2-1: Product: syz [ 592.141626][ T4265] usb 2-1: Manufacturer: syz [ 592.146257][ T4265] usb 2-1: SerialNumber: syz [ 592.404663][T21887] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.6200'. [ 592.447327][ T5679] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 592.527390][ T7927] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 592.537647][ T4265] usb 2-1: MIDIStreaming interface descriptor not found [ 592.608621][ T4265] usb 2-1: USB disconnect, device number 57 [ 592.767662][ T7927] usb 5-1: Using ep0 maxpacket: 32 [ 592.800785][T21922] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6204'. [ 592.831504][ T5679] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 592.874111][ T5679] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 592.887678][ T7927] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 592.896302][ T5679] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 592.906871][ T7927] usb 5-1: config 0 has no interface number 0 [ 592.916396][ T7927] usb 5-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 592.926838][ T5679] usb 1-1: config 1 interface 0 has no altsetting 0 [ 592.933977][ T7927] usb 5-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 592.944606][ T7927] usb 5-1: config 0 interface 12 has no altsetting 0 [ 592.989568][ T4306] udevd[4306]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 593.097574][ T5679] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 593.107593][ T7927] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 593.116694][ T7927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.135372][ T5679] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.168189][ T5679] usb 1-1: Product: syz [ 593.174297][ T7927] usb 5-1: Product: syz [ 593.199075][ T5679] usb 1-1: Manufacturer: syz [ 593.203944][ T5679] usb 1-1: SerialNumber: syz [ 593.209157][ T7927] usb 5-1: Manufacturer: syz [ 593.213970][ T7927] usb 5-1: SerialNumber: syz [ 593.242297][ T7927] usb 5-1: config 0 descriptor?? [ 593.294427][ T7927] f81534 5-1:0.12: unsupported endpoint max packet size [ 593.403930][T21953] xt_TCPMSS: Only works on TCP SYN packets [ 593.492696][T21963] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6216'. [ 593.679813][T21979] usb usb8: usbfs: process 21979 (syz.2.6221) did not claim interface 0 before use [ 593.701713][ T5679] usb 1-1: USB disconnect, device number 62 [ 594.097385][ T4232] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 594.207401][ T5679] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 594.347506][ T4232] usb 4-1: Using ep0 maxpacket: 32 [ 594.457469][ T5679] usb 3-1: Using ep0 maxpacket: 8 [ 594.487316][ T4232] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 594.509475][ T4232] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 594.578913][ T5679] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 594.667532][ T7927] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 594.730445][ T4232] usb 4-1: New USB device found, idVendor=04b1, idProduct=3042, bcdDevice= 0.40 [ 594.730483][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.730507][ T4232] usb 4-1: Product: syz [ 594.730525][ T4232] usb 4-1: Manufacturer: syz [ 594.730542][ T4232] usb 4-1: SerialNumber: syz [ 594.763509][ T5679] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 594.763545][ T5679] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.763577][ T5679] usb 3-1: Product: syz [ 594.763594][ T5679] usb 3-1: Manufacturer: syz [ 594.763611][ T5679] usb 3-1: SerialNumber: syz [ 594.772517][ T5679] usb 3-1: config 0 descriptor?? [ 594.814732][ T5679] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 594.814819][ T5679] usb 3-1: selecting invalid altsetting 1 [ 595.026254][T22063] device netdevsim0 left promiscuous mode [ 595.032649][ T5679] gspca_stk014: init reg: 0x00 [ 595.037749][ T7927] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 595.046855][ T7927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.056058][ T5679] stk014: probe of 3-1:0.0 failed with error -5 [ 595.072765][T22063] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 595.093535][ T7927] usb 2-1: config 0 descriptor?? [ 595.140608][ T7927] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 595.207475][ T4232] usb 4-1: MIDIStreaming interface descriptor not found [ 595.246070][ T5673] usb 3-1: USB disconnect, device number 54 [ 595.291346][ T4232] usb 4-1: USB disconnect, device number 59 [ 595.316155][ T5679] usb 5-1: USB disconnect, device number 54 [ 595.568161][ T7927] gp8psk: usb in 137 operation failed. [ 595.573749][ T7927] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 595.633856][ T7927] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 595.677883][ T7927] usb 2-1: USB disconnect, device number 58 [ 596.747301][ T5673] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 596.762248][T22224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6287'. [ 597.007433][ T5673] usb 4-1: Using ep0 maxpacket: 32 [ 597.127537][ T5673] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 597.135734][ T5673] usb 4-1: config 0 has no interface number 0 [ 597.166875][ T5673] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 597.204364][ T5673] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 597.247450][ T5673] usb 4-1: config 0 interface 85 has no altsetting 0 [ 597.427629][ T5673] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 597.445935][ T5673] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.487395][ T5673] usb 4-1: Product: syz [ 597.491641][ T5673] usb 4-1: Manufacturer: syz [ 597.526859][ T5673] usb 4-1: SerialNumber: syz [ 597.560816][ T5673] usb 4-1: config 0 descriptor?? [ 597.905967][T22309] loop1: detected capacity change from 0 to 1764 [ 598.050570][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 598.050586][ T26] audit: type=1800 audit(2000000650.399:21): pid=22309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6316" name="file0" dev="loop1" ino=1923 res=0 errno=0 [ 598.067628][ T5673] appletouch 4-1:0.85: Failed to request geyser raw mode [ 598.101862][ T5673] appletouch: probe of 4-1:0.85 failed with error -5 [ 598.160720][ T5679] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 598.178681][ T5673] usb 4-1: USB disconnect, device number 60 [ 598.437485][ T5679] usb 1-1: Using ep0 maxpacket: 32 [ 598.567574][ T5679] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 598.608062][ T5679] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 598.629899][T22370] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6335'. [ 598.680029][T22370] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 598.822024][ T5679] usb 1-1: New USB device found, idVendor=04b1, idProduct=3042, bcdDevice= 0.40 [ 598.853639][ T5679] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.899227][ T5679] usb 1-1: Product: syz [ 598.899692][T22392] kAFS: No cell specified [ 598.903559][ T5679] usb 1-1: Manufacturer: syz [ 598.938319][ T5679] usb 1-1: SerialNumber: syz [ 599.126513][T22405] libceph: resolve '96.' (ret=-3): failed [ 599.367739][ T5679] usb 1-1: MIDIStreaming interface descriptor not found [ 599.467435][ T5679] usb 1-1: USB disconnect, device number 63 [ 599.644793][T22372] loop4: detected capacity change from 0 to 32768 [ 599.662676][T22469] netlink: 'syz.2.6358': attribute type 7 has an invalid length. [ 599.674376][T22469] netlink: 'syz.2.6358': attribute type 8 has an invalid length. [ 599.785705][ T1267] general protection fault, probably for non-canonical address 0xdffffc00000000bb: 0000 [#1] PREEMPT SMP KASAN [ 599.797502][ T1267] KASAN: null-ptr-deref in range [0x00000000000005d8-0x00000000000005df] [ 599.806162][ T1267] CPU: 0 PID: 1267 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 599.813769][ T1267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 599.823896][ T1267] Workqueue: writeback wb_workfn (flush-7:4) [ 599.830110][ T1267] RIP: 0010:bio_associate_blkg_from_css+0x128/0x9c0 [ 599.836858][ T1267] Code: df 41 80 3c 04 00 74 08 48 89 df e8 12 0b ec fd 41 be d8 05 00 00 4c 03 33 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 f7 e8 ea 0a ec fd 41 bf 90 00 00 00 4d 03 [ 599.856587][ T1267] RSP: 0018:ffffc90005977260 EFLAGS: 00010206 [ 599.862697][ T1267] RAX: 00000000000000bb RBX: ffff88807cb85b48 RCX: dffffc0000000000 [ 599.870709][ T1267] RDX: 0000000000000000 RSI: ffffffff96486e20 RDI: ffff88807cb85b40 [ 599.878718][ T1267] RBP: 1ffff1100f970b71 R08: dffffc0000000000 R09: 1ffffffff203b018 [ 599.886955][ T1267] R10: dffffc0000000000 R11: fffffbfff203b019 R12: 1ffff1100f970b69 [ 599.894966][ T1267] R13: ffff88807cb85b88 R14: 00000000000005d8 R15: ffff888022d23bac [ 599.902973][ T1267] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 599.911944][ T1267] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 599.918640][ T1267] CR2: 00005555882dba38 CR3: 00000000647df000 CR4: 00000000003506f0 [ 599.926656][ T1267] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 599.928937][ T4232] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 599.934660][ T1267] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 599.934679][ T1267] Call Trace: [ 599.934687][ T1267] [ 599.934700][ T1267] bio_associate_blkg+0x23a/0x340 [ 599.961712][ T1267] lbmStartIO+0x204/0x4c0 [ 599.966090][ T1267] lbmWrite+0x361/0x480 [ 599.970313][ T1267] jfs_flush_journal+0x537/0xec0 [ 599.975294][ T1267] ? lmLogShutdown+0x850/0x850 [ 599.980102][ T1267] ? __lock_acquire+0x7d10/0x7d10 [ 599.985265][ T1267] ? do_raw_spin_lock+0x128/0x2f0 [ 599.990326][ T1267] ? __rwlock_init+0x140/0x140 [ 599.995127][ T1267] jfs_write_inode+0x12b/0x220 [ 599.999383][T22479] netlink: 11 bytes leftover after parsing attributes in process `syz.1.6362'. [ 599.999927][ T1267] __writeback_single_inode+0x6c3/0xda0 [ 600.009991][T22479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6362'. [ 600.014472][ T1267] writeback_sb_inodes+0xa4e/0x1680 [ 600.014531][ T1267] ? queue_io+0x550/0x550 [ 600.032976][ T1267] ? rcu_is_watching+0x11/0xa0 [ 600.037960][ T1267] wb_writeback+0x45d/0xbe0 [ 600.042516][ T1267] ? rcu_lock_release+0x20/0x20 [ 600.047410][ T1267] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 600.053436][ T1267] ? mark_lock+0x94/0x320 [ 600.057808][ T1267] ? _raw_spin_unlock_irq+0x1f/0x40 [ 600.063250][ T1267] wb_workfn+0x43a/0xf20 [ 600.067544][ T1267] ? inode_wait_for_writeback+0x220/0x220 [ 600.073328][ T1267] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 600.079356][ T1267] ? read_lock_is_recursive+0x10/0x10 [ 600.084769][ T1267] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 600.090798][ T1267] ? _raw_spin_unlock+0x40/0x40 [ 600.095735][ T1267] ? _raw_spin_unlock_irq+0x1f/0x40 [ 600.100977][ T1267] process_one_work+0x85f/0x1010 [ 600.106041][ T1267] ? worker_detach_from_pool+0x240/0x240 [ 600.111713][ T1267] ? lockdep_hardirqs_off+0x70/0x100 [ 600.117043][ T1267] ? _raw_spin_lock_irq+0xb7/0xf0 [ 600.122101][ T1267] ? _raw_spin_lock_irqsave+0x100/0x100 [ 600.127681][ T1267] ? wq_worker_running+0x97/0x170 [ 600.132924][ T1267] worker_thread+0xaa6/0x1290 [ 600.137643][ T1267] ? lockdep_hardirqs_on+0x94/0x140 [ 600.142880][ T1267] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 600.148901][ T1267] kthread+0x436/0x520 [ 600.153082][ T1267] ? rcu_lock_release+0x20/0x20 [ 600.157965][ T1267] ? kthread_blkcg+0xd0/0xd0 [ 600.162591][ T1267] ret_from_fork+0x1f/0x30 [ 600.167072][ T1267] [ 600.170131][ T1267] Modules linked in: [ 600.174124][ C0] vkms_vblank_simulate: vblank timer overrun [ 600.184048][ T4471] udevd[4471]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 600.223643][ T1267] ---[ end trace 931cf94c01705ad0 ]--- [ 600.229276][ T1267] RIP: 0010:bio_associate_blkg_from_css+0x128/0x9c0 [ 600.235944][ T1267] Code: df 41 80 3c 04 00 74 08 48 89 df e8 12 0b ec fd 41 be d8 05 00 00 4c 03 33 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 f7 e8 ea 0a ec fd 41 bf 90 00 00 00 4d 03 [ 600.271364][ T1267] RSP: 0018:ffffc90005977260 EFLAGS: 00010206 [ 600.280654][ T1267] RAX: 00000000000000bb RBX: ffff88807cb85b48 RCX: dffffc0000000000 [ 600.290875][ T1267] RDX: 0000000000000000 RSI: ffffffff96486e20 RDI: ffff88807cb85b40 [ 600.299217][ T1267] RBP: 1ffff1100f970b71 R08: dffffc0000000000 R09: 1ffffffff203b018 [ 600.307614][ T1267] R10: dffffc0000000000 R11: fffffbfff203b019 R12: 1ffff1100f970b69 [ 600.315874][ T1267] R13: ffff88807cb85b88 R14: 00000000000005d8 R15: ffff888022d23bac [ 600.324292][ T1267] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 600.333519][ T1267] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 600.340369][ T1267] CR2: 00007f02394c9000 CR3: 000000002b0b9000 CR4: 00000000003506f0 [ 600.348637][ T1267] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 600.356760][ T1267] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 600.365046][ T1267] Kernel panic - not syncing: Fatal exception [ 600.371413][ T1267] Kernel Offset: disabled [ 600.375761][ T1267] Rebooting in 86400 seconds..