last executing test programs: 2.638274654s ago: executing program 2 (id=6509): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000100)={0x0, 0x1, 0x80000000000036, 0xc1b0}) 2.507294966s ago: executing program 2 (id=6514): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x4bfa, 0xffffffbfffffffff) 2.364876749s ago: executing program 2 (id=6518): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x437, 0x800010, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x54583, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x80000000}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e21}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2.015193007s ago: executing program 2 (id=6527): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x88, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0xffff}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x2, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_MASTER={0x24, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x93}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010102}}}]}]}, 0x88}}, 0x0) 1.905606109s ago: executing program 2 (id=6530): personality(0x5400004) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4004, 0x5) 1.770762932s ago: executing program 2 (id=6533): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a0101"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40040) syz_usb_connect(0x0, 0x56, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014e2fc203c419b81c0a701020301090244000100000000090400000302060000052406"], 0x0) 1.648513315s ago: executing program 0 (id=6535): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000100)='R') 1.615966945s ago: executing program 0 (id=6537): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_BT_POWER(r0, 0x12, 0x4, 0x0, &(0x7f0000000200)) 1.529039637s ago: executing program 0 (id=6540): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r0, &(0x7f00000001c0)=""/4068, 0xfe4) 1.4124375s ago: executing program 0 (id=6543): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x0, 0x3}, 0x8) 1.316924872s ago: executing program 0 (id=6546): r0 = syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x120c083, &(0x7f0000000480), 0xfd, 0x111d, &(0x7f0000000640)="$eJzs2bFqFFEUBuD/7qwm3cjYD4IWFhIS1gcwhcK2ttqIBARTZUFQfA3fwLfwFTSVtSG9FgFLYWScHRMloCGbQOD7YPeeOTNnzr3lvRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoTZOvJbk5SZoxN0lSkrbdnx8macf8jY/VJCWPd+aLh3uzR4sk1a/Hy5Ok9FV9WZqt2+vNrJk1W839B9t3Pi1ev3n5bHd3Z2/5mpI2B0crXUUZ/6qTubLSHgAAAHBldedW592r/+l0/cvF9AcAAAD+ZeUHCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABn1NXHcTMGkyQladv9+WGS9pS6a5c0PwAAAOD8SiZ5Wp+WH44Bjt3L57r8zvfj99LHm3lfp0wvb8oAAABw5bz48Mdlt7YMTn5f/9EN+n333UyHffn6cO9WptnYGOLlkG/bSZVk869eB0dvn4+/0lXJ2sWsCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJ/swAEJAAAAgKD/r9sRKAAAAAAAAAAAAAAAAAAAAAAAAAAAFwUAAP//cLriEQ==") syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', 0x3a4046c, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYBLOB="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", @ANYRES8, @ANYRESHEX, @ANYRES32=0x0, @ANYRES16, @ANYRESHEX=r0, @ANYRESHEX, @ANYRESDEC], 0x1, 0x0, &(0x7f0000000480)) 1.282052973s ago: executing program 1 (id=6548): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=@del={0xe0, 0x11, 0x1, 0x70bd27, 0x25dfdbfc, {{'ofb(aes-arm64)\x00'}, '\x00', '\x00', 0x2000, 0x6400}}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x10) 1.152941495s ago: executing program 1 (id=6552): r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000240)={0x0, 0x1, 0x1}) 1.045962278s ago: executing program 1 (id=6553): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@mpls_getroute={0x24, 0x1a, 0x1, 0x70bd25, 0x255fdbfb, {0x1c, 0x20, 0x80, 0x8, 0xff, 0x1, 0xff, 0x3, 0xe00}, [@RTA_DST={0x6, 0x1, {0x100, 0x0, 0x1}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c25}, 0x400c020) 839.987732ms ago: executing program 1 (id=6558): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) 830.456242ms ago: executing program 4 (id=6559): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4149007c87e8a4a4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}]}], {0x14}}, 0xec}}, 0x0) 697.227745ms ago: executing program 4 (id=6560): r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f00000002c0)={0x0, [0x3, 0xffff1743, 0x1], [{0x0, 0x1, 0x1, 0x1}, {0x7, 0x2}, {}, {0x2}, {}, {0x0, 0x7ff}, {}, {}, {}, {}, {0x8, 0x7ff}, {0x7, 0x2}], 0x5}) 584.472338ms ago: executing program 1 (id=6562): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, 0x0, 0x0) 531.250289ms ago: executing program 4 (id=6563): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1000000000000007, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x3, @win={{0x5f, 0x3, 0x1, 0x421}, 0x3, 0x200, &(0x7f0000000340)={{0xce, 0xfffffffd, 0x6b, 0x3}}, 0x401, 0x0, 0xa7}}) 507.932129ms ago: executing program 3 (id=6564): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[@sndrcv={0x30, 0x84, 0x1, {0x3ff, 0x9, 0x0, 0x58f, 0x80000000, 0x369a, 0x8, 0x6}}, @sndinfo={0x20, 0x84, 0x2, {0x1, 0x6, 0x4, 0x2}}], 0x50}], 0x1, 0x0) 443.50443ms ago: executing program 4 (id=6565): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000003b0007010000000000000000047c0000ec0000000c0001800600060065580000100002800c0015"], 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0xc000) 443.00837ms ago: executing program 1 (id=6566): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x8, 0x7, 0x0, 0x7, 0xfff, 0xf}}}, 0x0) 371.971942ms ago: executing program 3 (id=6567): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x0, 0x4c, 0x1a, 0x198, 0x73, 0x2c8, 0x258, 0x258, 0x2c8, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x168, 0x198, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0xc}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @dev, [], [0x0, 0x0, 0xffffff00]}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) 264.878054ms ago: executing program 4 (id=6568): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000580)=[{r0, 0x110}], 0x1, 0x0, 0x0, 0x0) 246.681175ms ago: executing program 3 (id=6569): setreuid(0x0, 0xee00) setresuid(0xffffffffffffffff, 0xee00, 0x0) 140.441557ms ago: executing program 3 (id=6570): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end, @generic={0x0, 0x2}]}}}], 0x38}, 0x200040c4) 137.584497ms ago: executing program 4 (id=6571): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000600)={'filter\x00', 0xb001, 0x4, 0x3d0, 0x0, 0xe8, 0x1f8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast2, 0x2}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'netpci0\x00'}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) 93.336988ms ago: executing program 3 (id=6572): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, 0x3fa, 0x20, 0x70bd29, 0x25dfdbfe, {0x1, 0x1, 0x1, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x400c000) 64.220339ms ago: executing program 0 (id=6573): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001180)={0x1048, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1030, 0x1, 0x0, 0x1, [@nested={0x1025, 0x54, 0x0, 0x1, [@typed={0x8, 0xaa, 0x0, 0x0, @u32=0x1ff}, @generic="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", @nested={0x1c, 0xdd, 0x0, 0x1, [@typed={0x14, 0xba, 0x0, 0x0, @ipv6=@mcast2}, @nested={0x4, 0x123}]}, @generic]}, @nested={0x4, 0x1}]}]}, 0x1048}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 0s ago: executing program 3 (id=6574): r0 = syz_open_dev$sndpcmp(&(0x7f0000000a00), 0x0, 0x101000) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, 0x0) kernel console output (not intermixed with test programs): Using ep0 maxpacket: 16 [ 255.859158][T12799] netlink: 'syz.2.4041': attribute type 8 has an invalid length. [ 255.907117][T12788] JBD2: Ignoring recovery information on journal [ 255.919252][ T4231] usb 4-1: 1:0 : does not exist [ 255.930200][ T13] usb 1-1: USB disconnect, device number 29 [ 255.930466][ T4231] usb 4-1: 1:2 : does not exist [ 255.950764][ T13] etas_es58x 1-1:0.2: Disconnecting syz syz [ 256.038601][T12788] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 256.049020][ T5850] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 256.059308][ T5850] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 256.065598][ T4231] usb 4-1: 1:3 : does not exist [ 256.070394][ T5850] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 256.070429][ T5850] usb 2-1: config 1 interface 2 has no altsetting 0 [ 256.184254][ T4231] usb 4-1: BAAD HEADPHONE p_chmask mismatch [ 256.238530][ T4231] snd-usb-audio: probe of 4-1:1.1 failed with error -22 [ 256.240567][ T5850] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 256.275348][ T5850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.294015][ T5850] usb 2-1: Product: syz [ 256.304166][ T5850] usb 2-1: Manufacturer: syz [ 256.310924][ T4231] usb 4-1: USB disconnect, device number 20 [ 256.326716][T10276] udevd[10276]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 256.347596][ T5850] usb 2-1: SerialNumber: syz [ 256.390163][ T4196] ocfs2: Unmounting device (7,4) on (node local) [ 256.699159][ T5850] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 256.717439][ T5850] usb 2-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 256.717473][ T5850] usb 2-1: found format II with max.bitrate = 3, frame size=7 [ 256.717616][ T5850] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 256.717639][ T5850] usb 2-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 256.717660][ T5850] usb 2-1: found format II with max.bitrate = 3, frame size=7 [ 256.718321][ T5850] usb 2-1: selecting invalid altsetting 0 [ 256.730444][T12833] IPv6: Can't replace route, no match found [ 256.731510][ T5850] usb 2-1: selecting invalid altsetting 0 [ 256.842340][ T5850] usb 2-1: USB disconnect, device number 20 [ 257.004582][T10275] udevd[10275]: setting mode of /dev/bus/usb/002/020 to 020664 failed: No such file or directory [ 257.004705][T10275] udevd[10275]: setting owner of /dev/bus/usb/002/020 to uid=0, gid=0 failed: No such file or directory [ 257.206640][ T4331] udevd[4331]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 257.218320][T12855] netlink: 'syz.4.4061': attribute type 1 has an invalid length. [ 257.311599][T12857] loop4: detected capacity change from 0 to 64 [ 257.533368][T12864] device wlan0 entered promiscuous mode [ 257.753917][T12877] netlink: 'syz.2.4070': attribute type 32 has an invalid length. [ 257.848975][T12885] netlink: 'syz.1.4073': attribute type 7 has an invalid length. [ 257.904913][T12887] xt_TCPMSS: Only works on TCP SYN packets [ 257.926622][T12891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4076'. [ 258.277483][T12914] IPv6: sit1: Disabled Multicast RS [ 258.430301][T12909] loop1: detected capacity change from 0 to 4096 [ 258.480018][T12924] loop4: detected capacity change from 0 to 128 [ 258.515383][T12925] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.4089'. [ 258.603817][T12909] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 258.684592][T12932] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4093'. [ 258.727464][T12932] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 259.248615][T12964] loop1: detected capacity change from 0 to 64 [ 259.313905][T12966] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 259.368323][T12966] overlayfs: bad mount option "redirect_dir=nofollow\" [ 259.636233][T12986] dlm: Unknown command passed to DLM device : 152 [ 259.636233][T12986] [ 259.838067][T13002] UBIFS error (pid: 13002): cannot open "(null)", error -22 [ 260.102157][T13020] device bridge2 entered promiscuous mode [ 260.180553][T13021] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.309349][T13025] device bond3 entered promiscuous mode [ 260.315349][T13025] 8021q: adding VLAN 0 to HW filter on device bond3 [ 260.454674][ T5982] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 260.599368][T13051] xt_HMARK: spi-set and port-set can't be combined [ 260.704156][T13058] netlink: 25 bytes leftover after parsing attributes in process `syz.0.4154'. [ 260.709660][ T5982] usb 4-1: Using ep0 maxpacket: 16 [ 260.807409][T13065] netlink: 'syz.4.4157': attribute type 21 has an invalid length. [ 260.829176][ T5982] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 260.846515][T13065] netlink: 'syz.4.4157': attribute type 6 has an invalid length. [ 260.855801][ T5982] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 260.873192][T13065] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4157'. [ 260.884114][ T5982] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 260.905244][ T5982] usb 4-1: config 1 interface 2 has no altsetting 0 [ 261.119319][ T5982] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 261.148164][ T5982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.165503][ T5982] usb 4-1: Product: syz [ 261.173997][ T5982] usb 4-1: Manufacturer: syz [ 261.188920][ T5982] usb 4-1: SerialNumber: syz [ 261.233826][T13088] loop2: detected capacity change from 0 to 64 [ 261.444362][T13101] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 261.509294][ T5982] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 261.517191][ T5982] usb 4-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 261.554435][ T5982] usb 4-1: found format II with max.bitrate = 3, frame size=7 [ 261.584858][ T5982] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 261.612492][ T5982] usb 4-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 261.655759][ T5982] usb 4-1: found format II with max.bitrate = 3, frame size=7 [ 261.668124][ T5982] usb 4-1: selecting invalid altsetting 0 [ 261.709003][ T5982] usb 4-1: selecting invalid altsetting 0 [ 261.789221][ T5982] usb 4-1: USB disconnect, device number 21 [ 261.810244][T13119] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4181'. [ 261.828723][T13119] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4181'. [ 261.934576][T13125] loop1: detected capacity change from 0 to 164 [ 262.033292][T13125] rock: corrupted directory entry. extent=32, offset=0, size=65773 [ 262.043890][T13130] set match dimension is over the limit! [ 262.100018][ T5763] udevd[5763]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 262.165316][T13137] loop2: detected capacity change from 0 to 64 [ 262.514220][T13156] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4200'. [ 262.560908][T13156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4200'. [ 262.602378][T13156] netlink: 31 bytes leftover after parsing attributes in process `syz.0.4200'. [ 262.635402][T13156] netlink: 'syz.0.4200': attribute type 2 has an invalid length. [ 262.667067][T13156] netlink: 31 bytes leftover after parsing attributes in process `syz.0.4200'. [ 263.082013][ T4231] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 263.259004][ T5982] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 263.359042][ T4231] usb 5-1: Using ep0 maxpacket: 16 [ 263.414771][T13215] sctp: [Deprecated]: syz.0.4230 (pid 13215) Use of int in max_burst socket option deprecated. [ 263.414771][T13215] Use struct sctp_assoc_value instead [ 263.509022][ T4231] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 263.546876][ T4231] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 263.605369][T13226] loop3: detected capacity change from 0 to 256 [ 263.660334][ T5982] usb 3-1: unable to get BOS descriptor or descriptor too short [ 263.739220][ T4231] usb 5-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=82.8f [ 263.758583][ T4231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.759867][ T5982] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 263.791528][ T4231] usb 5-1: Product: syz [ 263.797988][T13236] netlink: 260 bytes leftover after parsing attributes in process `syz.3.4239'. [ 263.815979][ T4231] usb 5-1: Manufacturer: syz [ 263.820657][ T5982] usb 3-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 263.820695][ T5982] usb 3-1: config 1 interface 0 has no altsetting 1 [ 263.889249][ T4231] usb 5-1: SerialNumber: syz [ 263.917923][ T4231] usb 5-1: config 0 descriptor?? [ 263.979191][ T5982] usb 3-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 263.990458][ T4231] kobil_sct 5-1:0.0: KOBIL USB smart card terminal converter detected [ 264.006934][ T5982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.019451][ T4231] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 264.033841][ T5982] usb 3-1: Product: syz [ 264.038072][ T5982] usb 3-1: Manufacturer: syz [ 264.093923][ T5982] usb 3-1: SerialNumber: syz [ 264.142221][ T5982] smsusb:smsusb_probe: board id=8, interface number 0 [ 264.231369][ T4231] usb 5-1: USB disconnect, device number 22 [ 264.241442][T13257] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4251'. [ 264.251518][ T4231] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 264.281682][ T4231] kobil_sct 5-1:0.0: device disconnected [ 264.359069][ T5982] smsusb:smsusb_probe: Device initialized with return code -19 [ 264.562372][ T5982] usb 3-1: USB disconnect, device number 22 [ 265.061321][T13310] loop3: detected capacity change from 0 to 64 [ 265.163438][T13310] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 265.268574][T13324] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 265.290382][T13326] loop4: detected capacity change from 0 to 512 [ 265.391045][T13326] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 265.445380][T13326] ext4 filesystem being mounted at /861/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.468960][ T5982] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 265.491814][T13338] loop2: detected capacity change from 0 to 64 [ 265.499583][T13326] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #15: comm syz.4.4285: corrupted xattr block 33 [ 265.708941][ T5982] usb 2-1: Using ep0 maxpacket: 32 [ 265.839130][ T5982] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 265.847869][ T5982] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 265.895926][ T5982] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 265.948142][ T5982] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 265.965274][T13351] __nla_validate_parse: 1 callbacks suppressed [ 265.965295][T13351] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4296'. [ 265.986795][ T5982] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 266.039451][ T5982] usb 2-1: config 0 interface 0 has no altsetting 0 [ 266.052868][T13356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4298'. [ 266.229254][ T5982] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 266.244361][ T5982] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 266.273434][ T5982] usb 2-1: Product: syz [ 266.277671][ T5982] usb 2-1: Manufacturer: syz [ 266.287889][ T5982] usb 2-1: SerialNumber: syz [ 266.318503][ T5982] usb 2-1: config 0 descriptor?? [ 266.371127][ T5982] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 266.427591][ T5982] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 266.653113][T13322] ldusb 2-1:0.0: Couldn't submit interrupt_in_urb -90 [ 266.684356][ T4227] usb 2-1: USB disconnect, device number 21 [ 266.715779][ T4227] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 266.939515][T13402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4321'. [ 267.069926][ T150] block nbd3: Attempted send on invalid socket [ 267.076250][ T150] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 267.089138][T13406] hpfs: hpfs_map_sector(): read error [ 267.628932][ T5850] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 267.875356][ T5850] usb 4-1: Using ep0 maxpacket: 32 [ 267.999171][ T5850] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.038160][ T5850] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.079094][ T5850] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 268.118899][ T5850] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.169621][ T5850] usb 4-1: config 0 descriptor?? [ 268.210360][ T5850] hub 4-1:0.0: USB hub found [ 268.349338][T13478] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4358'. [ 268.429053][ T5850] hub 4-1:0.0: config failed, can't read hub descriptor (err -90) [ 268.729039][ T5850] usbhid 4-1:0.0: can't add hid device: -71 [ 268.735300][ T5850] usbhid: probe of 4-1:0.0 failed with error -71 [ 268.800128][ T5850] usb 4-1: USB disconnect, device number 22 [ 268.910354][ C0] sd 0:0:1:0: tag#4359 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 268.920341][ C0] sd 0:0:1:0: tag#4359 CDB: ATA command pass through(16) [ 268.927408][ C0] sd 0:0:1:0: tag#4359 CDB[00]: 85 16 66 ce 20 db 96 ab 0c 7d 83 e1 14 e7 ef 17 [ 268.936536][ C0] sd 0:0:1:0: tag#4359 CDB[10]: 62 24 97 11 e3 4f 4c e1 2c 6a fe b7 e6 d7 7b d3 [ 268.945651][ C0] sd 0:0:1:0: tag#4359 CDB[20]: b9 76 44 ed d8 e3 a3 b7 1f cd 00 6b 62 37 76 6e [ 268.954826][ C0] sd 0:0:1:0: tag#4359 CDB[30]: 15 1f 34 4a fb 23 06 45 50 34 ea 7a 31 b1 a4 87 [ 268.963964][ C0] sd 0:0:1:0: tag#4359 CDB[40]: 24 e3 72 a5 a8 a9 ca 04 0f 58 31 f2 eb 11 84 2a [ 268.973113][ C0] sd 0:0:1:0: tag#4359 CDB[50]: 4b 8e c9 06 4f a4 39 44 0f 37 43 55 d9 af 75 43 [ 268.982210][ C0] sd 0:0:1:0: tag#4359 CDB[60]: 14 ce 44 5a c9 be a7 fa c1 9c 3a c5 8a 13 18 95 [ 268.991311][ C0] sd 0:0:1:0: tag#4359 CDB[70]: c3 78 ec 49 7f fd f9 a8 20 32 d9 fa 22 53 97 b9 [ 269.000411][ C0] sd 0:0:1:0: tag#4359 CDB[80]: 2d 2e 21 93 de 6f e2 f6 [ 269.064033][T13509] netlink: 'syz.1.4374': attribute type 3 has an invalid length. [ 269.094595][T13510] loop2: detected capacity change from 0 to 512 [ 269.261326][T13522] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4380'. [ 269.283749][T13525] loop3: detected capacity change from 0 to 512 [ 269.303306][T13522] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 269.411902][T13525] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 269.450353][T13532] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4384'. [ 269.467469][T13510] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 269.479294][T13525] ext4 filesystem being mounted at /879/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.498432][T13510] ext4 filesystem being mounted at /889/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.589002][T13525] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.4381: corrupted xattr block 33 [ 269.602796][T13537] IPVS: length: 77 != 8 [ 270.038971][ T4227] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 270.191742][T10276] udevd[10276]: inotify_add_watch(7, /dev/nbd4p4, 10) failed: No such file or directory [ 270.286569][T13575] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4405'. [ 270.309050][ T4227] usb 2-1: Using ep0 maxpacket: 16 [ 270.454692][ T4227] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 270.476184][ T4227] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 270.509602][ T4227] usb 2-1: config 0 interface 0 has no altsetting 0 [ 270.588458][T13593] loop3: detected capacity change from 0 to 256 [ 270.614222][T13593] exfat: Deprecated parameter 'utf8' [ 270.631725][T13593] exfat: Deprecated parameter 'utf8' [ 270.645747][T13593] exfat: Deprecated parameter 'utf8' [ 270.645975][T13597] tmpfs: Bad value for 'mpol' [ 270.690367][ T4227] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 270.705438][ T4227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.713971][ T4227] usb 2-1: Product: syz [ 270.745277][ T4227] usb 2-1: Manufacturer: syz [ 270.761287][T13593] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 270.769100][ T4227] usb 2-1: SerialNumber: syz [ 270.807838][ T4227] usb 2-1: config 0 descriptor?? [ 271.064344][T13611] ipt_CLUSTERIP: unknown mode 3918972798 [ 271.121331][ T4227] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 271.146469][ T4227] imon 2-1:0.0: unable to initialize intf0, err -90 [ 271.186043][ T4227] imon:imon_probe: failed to initialize context! [ 271.192760][ T4227] imon 2-1:0.0: unable to register, err -19 [ 271.242395][ T4227] usb 2-1: USB disconnect, device number 22 [ 271.479021][ T5850] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 271.526130][T13641] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4437'. [ 271.538848][ T4231] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 271.668643][T13649] loop1: detected capacity change from 0 to 64 [ 271.839132][ T5850] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 271.849240][ T5850] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 271.859851][ T5850] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 271.870186][ T5850] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 272.039143][ T5850] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 272.054556][ T5850] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.079076][ T5850] usb 3-1: Product: syz [ 272.083432][ T5850] usb 3-1: Manufacturer: syz [ 272.088112][ T5850] usb 3-1: SerialNumber: syz [ 272.093202][ T4271] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 272.119151][ T5850] usb 3-1: config 0 descriptor?? [ 272.136907][T13669] device netdevsim0 entered promiscuous mode [ 272.147454][T13669] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 272.151606][T13671] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.4452'. [ 272.166719][ T5850] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 272.205297][ T4231] usb 4-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 272.225642][ T4231] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.234074][ T4231] usb 4-1: Product: syz [ 272.238451][ T4231] usb 4-1: Manufacturer: syz [ 272.243407][ T4231] usb 4-1: SerialNumber: syz [ 272.251659][ T4231] usb 4-1: config 0 descriptor?? [ 272.285972][T13677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4454'. [ 272.311270][ T4231] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 272.342570][ T4271] usb 5-1: Using ep0 maxpacket: 8 [ 272.432096][ T5850] ums-isd200: probe of 3-1:0.0 failed with error -22 [ 272.509254][ T4271] usb 5-1: unable to get BOS descriptor or descriptor too short [ 272.532568][T13689] x_tables: duplicate underflow at hook 4 [ 272.589459][T13691] netlink: 'syz.1.4461': attribute type 1 has an invalid length. [ 272.609207][ T4271] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 272.626437][T13693] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4462'. [ 272.637121][ T13] usb 3-1: USB disconnect, device number 23 [ 272.747165][ T4231] usb 4-1: USB disconnect, device number 23 [ 272.789126][ T4271] usb 5-1: New USB device found, idVendor=041e, idProduct=3237, bcdDevice= 0.40 [ 272.798655][ T4271] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.813634][ T4271] usb 5-1: Product: syz [ 272.817864][ T4271] usb 5-1: Manufacturer: syz [ 272.825692][ T4271] usb 5-1: SerialNumber: syz [ 273.038440][T13717] tmpfs: Bad value for 'mpol' [ 273.202110][T13725] CIFS: bad ip= option (.RHe'ˠ/1C~1WexEAeSb{~R) [ 273.286235][ T4271] usb 5-1: USB disconnect, device number 23 [ 273.517481][T13744] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4487'. [ 273.582581][T13748] netlink: 'syz.3.4489': attribute type 1 has an invalid length. [ 273.632651][T13748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4489'. [ 273.654569][ T4331] udevd[4331]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 273.764402][T13759] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4494'. [ 273.916404][T13774] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 273.991155][T13777] usb usb8: usbfs: process 13777 (syz.2.4503) did not claim interface 0 before use [ 274.017565][T13781] netlink: 'syz.0.4505': attribute type 27 has an invalid length. [ 274.289262][T13799] loop4: detected capacity change from 0 to 256 [ 274.429217][T13813] netlink: 'syz.3.4521': attribute type 1 has an invalid length. [ 274.466204][T13813] netlink: 244 bytes leftover after parsing attributes in process `syz.3.4521'. [ 274.787659][T13828] loop1: detected capacity change from 0 to 4096 [ 274.898976][ T4271] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 274.946766][T13828] ntfs: (device loop1): parse_options(): NLS character set is not found. Using previous one default. [ 274.968153][T13828] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 275.045788][T13828] ntfs: volume version 3.1. [ 275.059956][T13828] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 275.086507][T13828] ntfs: (device loop1): load_and_init_usnjrnl(): Failed to find inode number for $UsnJrnl. [ 275.117327][T13828] ntfs: (device loop1): load_system_files(): Failed to load $UsnJrnl. Mounting read-only. Run chkdsk. [ 275.135532][T13855] xt_connbytes: Forcing CT accounting to be enabled [ 275.143799][T13855] xt_bpf: check failed: parse error [ 275.159023][ T4271] usb 3-1: Using ep0 maxpacket: 16 [ 275.320998][T13863] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 275.330323][ T4271] usb 3-1: unable to get BOS descriptor or descriptor too short [ 275.429277][T13863] CIFS mount error: No usable UNC path provided in device string! [ 275.429277][T13863] [ 275.449148][ T4271] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 275.449867][T13863] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 275.474045][ T4271] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 275.502397][ T4271] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 275.779375][ T4271] usb 3-1: string descriptor 0 read error: -22 [ 275.785725][ T4271] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 275.842189][ T4271] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.894296][T13883] loop4: detected capacity change from 0 to 4096 [ 275.954831][T13883] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 276.123223][T13883] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 276.210087][T13883] ntfs3: loop4: Failed to load $Extend. [ 276.278843][T13867] loop1: detected capacity change from 0 to 32768 [ 276.340327][ T5850] usb 3-1: USB disconnect, device number 24 [ 276.373321][T13867] (syz.1.4546,13867,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 276.416345][T13867] (syz.1.4546,13867,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 276.525519][T13867] JBD2: Ignoring recovery information on journal [ 276.698504][ T4265] udevd[4265]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 276.730740][T13867] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 277.005217][T13919] loop4: detected capacity change from 0 to 512 [ 277.125273][ T4186] ocfs2: Unmounting device (7,1) on (node local) [ 277.144959][T13919] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 277.228626][T13919] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 277.248995][T13919] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 277.295138][T13919] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 277.317583][T13935] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4193] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[13935] [ 277.370508][T13919] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 277.508163][T13919] EXT4-fs (loop4): orphan cleanup on readonly fs [ 277.525416][T13941] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4581'. [ 277.629622][T13919] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.4573: bg 0: block 34: padding at end of block bitmap is not set [ 277.730155][T13952] netlink: 'syz.2.4586': attribute type 26 has an invalid length. [ 277.747943][T13956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4587'. [ 277.765896][T13952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4586'. [ 277.791895][T13919] Quota error (device loop4): write_blk: dquota write failed [ 277.815062][T13919] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 277.869613][T13919] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.4573: Failed to acquire dquot type 1 [ 277.960103][T13919] EXT4-fs (loop4): 1 truncate cleaned up [ 277.990716][T13919] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,bsddf,mb_optimize_scan=0x0000000000000000,acl,max_dir_size_kb=0x0000000000000001,noblock_validity,usrjquota=,jqfmt=vfsv0,inode_readahead_blks=0x0000000000001000,resgid=0x000000000000000a,sysvgroups,,errors=continue. Quota mode: writeback. [ 278.670634][T14006] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4612'. [ 278.700194][T14006] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4612'. [ 278.749114][T14006] netlink: 'syz.1.4612': attribute type 3 has an invalid length. [ 278.785088][T14006] netlink: 11 bytes leftover after parsing attributes in process `syz.1.4612'. [ 278.826938][T14014] loop2: detected capacity change from 0 to 256 [ 278.930551][T14014] FAT-fs (loop2): Directory bread(block 64) failed [ 278.937202][T14014] FAT-fs (loop2): Directory bread(block 65) failed [ 278.974598][T14014] FAT-fs (loop2): Directory bread(block 66) failed [ 278.993283][T14014] FAT-fs (loop2): Directory bread(block 67) failed [ 279.006789][T14014] FAT-fs (loop2): Directory bread(block 68) failed [ 279.029046][T14014] FAT-fs (loop2): Directory bread(block 69) failed [ 279.053400][T14014] FAT-fs (loop2): Directory bread(block 70) failed [ 279.091553][T14014] FAT-fs (loop2): Directory bread(block 71) failed [ 279.115941][T14014] FAT-fs (loop2): Directory bread(block 72) failed [ 279.128221][T14014] FAT-fs (loop2): Directory bread(block 73) failed [ 279.354600][T14035] libceph: resolve '400' (ret=-3): failed [ 279.771909][T13998] loop3: detected capacity change from 0 to 32768 [ 280.009113][ T4231] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 280.259003][ T4231] usb 1-1: Using ep0 maxpacket: 32 [ 280.408981][ T4231] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.441809][T14095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4657'. [ 280.470269][T14095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4657'. [ 280.511685][T14095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4657'. [ 280.529129][T14095] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 280.604756][T14098] loop2: detected capacity change from 0 to 4096 [ 280.611975][ T4231] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 280.621218][T14101] netlink: 'syz.3.4658': attribute type 4 has an invalid length. [ 280.638103][ T4231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.664744][ T4231] usb 1-1: Product: syz [ 280.694480][ T4231] usb 1-1: Manufacturer: syz [ 280.713813][T14098] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 280.729173][ T4231] usb 1-1: SerialNumber: syz [ 280.752719][T14098] NILFS (loop2): mounting unchecked fs [ 280.763722][T14108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4663'. [ 280.772337][ T4231] usb 1-1: config 0 descriptor?? [ 280.791750][T14098] NILFS (loop2): recovery required for readonly filesystem [ 280.803003][T14098] NILFS (loop2): write access will be enabled during recovery [ 280.836641][ T4231] cdc_ether 1-1:0.0: skipping garbage [ 280.850320][ T4231] cdc_ether 1-1:0.0: skipping garbage [ 280.857635][T14098] NILFS (loop2): norecovery option specified, skipping roll-forward recovery [ 280.877081][ T4231] usb 1-1: bad CDC descriptors [ 280.877614][T10275] udevd[10275]: incorrect nilfs2 checksum on /dev/loop2 [ 280.890437][ T4231] usb 1-1: unsupported MDLM descriptors [ 280.949237][T14098] NILFS (loop2): couldn't remount because the filesystem is in an incomplete recovery state [ 281.099241][ T13] usb 1-1: USB disconnect, device number 30 [ 281.598179][T14154] loop1: detected capacity change from 0 to 512 [ 281.627963][T14154] EXT4-fs (loop1): Ignoring removed oldalloc option [ 281.648973][T14154] EXT4-fs (loop1): Ignoring removed nobh option [ 281.753178][T14161] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 281.769167][T14154] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #11: comm syz.1.4686: iget: bad extra_isize 90 (inode size 256) [ 281.789325][ T4231] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 281.817267][T14154] EXT4-fs (loop1): Remounting filesystem read-only [ 281.827491][T14154] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.4686: error while reading EA inode 11 err=-117 [ 281.849197][T14154] EXT4-fs (loop1): Remounting filesystem read-only [ 281.866389][T14154] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 281.935176][T14154] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #11: comm syz.1.4686: iget: bad extra_isize 90 (inode size 256) [ 281.989451][T14154] EXT4-fs (loop1): Remounting filesystem read-only [ 282.004488][T14170] ieee802154 phy0 wpan0: encryption failed: -90 [ 282.011490][T14154] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.4686: error while reading EA inode 11 err=-117 [ 282.045388][T14154] EXT4-fs (loop1): Remounting filesystem read-only [ 282.065324][T14154] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #18: comm syz.1.4686: iget: bad extra_isize 90 (inode size 256) [ 282.080738][ T4231] usb 4-1: Using ep0 maxpacket: 8 [ 282.123824][T14154] EXT4-fs (loop1): Remounting filesystem read-only [ 282.142684][T14154] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.4686: error while reading EA inode 18 err=-117 [ 282.195673][T14154] EXT4-fs (loop1): Remounting filesystem read-only [ 282.207043][T14154] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #18: comm syz.1.4686: iget: bad extra_isize 90 (inode size 256) [ 282.221401][ T4231] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 282.245827][ T4231] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 282.286725][T14154] EXT4-fs (loop1): Remounting filesystem read-only [ 282.300759][T14154] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.4686: error while reading EA inode 18 err=-117 [ 282.368022][T14154] EXT4-fs (loop1): Remounting filesystem read-only [ 282.379529][T14154] EXT4-fs (loop1): 1 orphan inode deleted [ 282.385372][T14154] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=ignore,oldalloc,debug_want_extra_isize=0x000000000000005a,nobh,errors=remount-ro,nodiscard,grpid,. Quota mode: none. [ 282.460271][ T4231] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 282.479389][ T4231] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.517849][ T4231] usb 4-1: Product: syz [ 282.527996][T14154] EXT4-fs error (device loop1): __ext4_iget:4919: inode #14: block 1886221359: comm syz.1.4686: invalid block [ 282.549007][ T4231] usb 4-1: Manufacturer: syz [ 282.553834][ T4231] usb 4-1: SerialNumber: syz [ 282.576436][ T4231] usb 4-1: config 0 descriptor?? [ 282.589160][T14154] EXT4-fs (loop1): Remounting filesystem read-only [ 282.948955][ T4194] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 283.064646][ T4227] usb 4-1: USB disconnect, device number 24 [ 283.147679][T14226] __nla_validate_parse: 2 callbacks suppressed [ 283.147697][T14226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4721'. [ 283.236229][T14230] loop4: detected capacity change from 0 to 256 [ 283.242784][ T4194] usb 3-1: Using ep0 maxpacket: 16 [ 283.308900][ T4271] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 283.372959][ T4194] usb 3-1: config 8 has an invalid interface number: 128 but max is 0 [ 283.391585][ T4194] usb 3-1: config 8 has no interface number 0 [ 283.406358][ T4194] usb 3-1: config 8 interface 128 has no altsetting 0 [ 283.579338][ T4194] usb 3-1: New USB device found, idVendor=064b, idProduct=7825, bcdDevice=62.b8 [ 283.608853][ T4194] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.624473][ T4194] usb 3-1: Product: syz [ 283.628703][ T4194] usb 3-1: Manufacturer: syz [ 283.647277][ T4194] usb 3-1: SerialNumber: syz [ 283.669171][ T4271] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 283.677433][ T4271] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.715334][ T4227] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 283.716246][ T4271] usb 1-1: config 0 has no interface number 0 [ 283.749821][ T4271] usb 1-1: config 0 interface 1 has no altsetting 0 [ 283.756513][ T4271] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 283.780577][ T4271] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.819928][ T4271] usb 1-1: config 0 descriptor?? [ 283.969425][ T4227] usb 2-1: Using ep0 maxpacket: 32 [ 284.011420][ T4194] upd78f0730 3-1:8.128: upd78f0730 converter detected [ 284.032815][ T4194] usb 3-1: upd78f0730 converter now attached to ttyUSB0 [ 284.050901][ T4194] usb 3-1: USB disconnect, device number 25 [ 284.064759][ T4194] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 284.089499][ T4194] upd78f0730 3-1:8.128: device disconnected [ 284.109185][ T4227] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 284.117400][ T4227] usb 2-1: config 0 has no interface number 0 [ 284.130979][ T4227] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 284.142836][T14264] comedi comedi3: board detection failed [ 284.149108][ T4227] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 284.181735][ T4231] usb 1-1: USB disconnect, device number 31 [ 284.359324][ T4227] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 284.368643][ T4227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.386980][ T4227] usb 2-1: Product: syz [ 284.407238][ T4227] usb 2-1: Manufacturer: syz [ 284.417867][ T4227] usb 2-1: SerialNumber: syz [ 284.441360][ T4227] usb 2-1: config 0 descriptor?? [ 284.499208][T14278] netlink: 'syz.4.4747': attribute type 3 has an invalid length. [ 284.590915][T14282] loop2: detected capacity change from 0 to 4096 [ 284.757059][T14294] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 284.949072][ T4227] radio-si470x 2-1:0.35: si470x_get_report: usb_control_msg returned -71 [ 284.980746][ T4227] radio-si470x: probe of 2-1:0.35 failed with error -5 [ 285.045549][T14305] device batadv1 entered promiscuous mode [ 285.060673][ T4227] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 285.121246][ T4227] usb 2-1: USB disconnect, device number 23 [ 285.215370][T14307] loop2: detected capacity change from 0 to 4096 [ 285.283641][T14307] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 285.499305][ T4190] ntfs3: loop2: ntfs_evict_inode r=3 failed, -22. [ 285.529483][ T4190] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 285.548268][ T4190] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 285.827071][T14298] loop4: detected capacity change from 0 to 32768 [ 285.875406][T14337] loop2: detected capacity change from 0 to 16 [ 285.879383][T14333] loop1: detected capacity change from 0 to 1764 [ 285.939916][T14337] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 285.968687][T14298] XFS (loop4): Mounting V5 Filesystem [ 286.113393][T14298] XFS (loop4): Ending clean mount [ 286.226390][ T4196] XFS (loop4): Unmounting Filesystem [ 286.372286][T14370] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4789'. [ 286.417721][T14370] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4789'. [ 286.873846][T14394] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 287.062230][T14408] netlink: set zone limit has 8 unknown bytes [ 287.314871][T14424] device netdevsim0 entered promiscuous mode [ 287.436326][T14430] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 287.534142][T14430] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 287.570704][T14430] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 287.683207][T14444] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4818'. [ 287.870256][T14444] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4818'. [ 288.271938][T14476] loop2: detected capacity change from 0 to 64 [ 288.528943][ T4271] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 288.608016][T14438] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.615716][T14438] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.778978][ T4271] usb 1-1: Using ep0 maxpacket: 16 [ 288.899392][ T4271] usb 1-1: config 1 has an invalid interface number: 19 but max is 0 [ 288.916726][ T4271] usb 1-1: config 1 has no interface number 0 [ 288.923809][ T4271] usb 1-1: config 1 interface 19 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.942840][ T4271] usb 1-1: config 1 interface 19 has no altsetting 0 [ 289.109314][ T4271] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 7.c9 [ 289.123051][ T4271] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.133363][ T4271] usb 1-1: Product: syz [ 289.137663][ T4271] usb 1-1: Manufacturer: syz [ 289.146289][ T4271] usb 1-1: SerialNumber: syz [ 289.202856][T14438] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.214310][ T4271] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 289.279145][T14438] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.396183][ T4231] usb 1-1: USB disconnect, device number 32 [ 289.409053][ T155] usb 1-1: Failed to submit usb control message: -71 [ 289.418218][ T155] usb 1-1: unable to send the bmi data to the device: -71 [ 289.432142][ T155] usb 1-1: unable to get target info from device [ 289.438687][ T155] usb 1-1: could not get target info (-71) [ 289.445239][ T155] usb 1-1: could not probe fw (-71) [ 289.874552][T14438] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.883589][T14438] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.892876][T14438] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.902058][T14438] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.115035][T14493] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4837'. [ 290.493387][T14513] usb usb9: usbfs: process 14513 (syz.0.4847) did not claim interface 8 before use [ 291.295273][ T26] audit: type=1400 audit(1783547188.055:4): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=14568 comm="syz.1.4876" [ 291.314262][T14574] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4874'. [ 291.340696][T14572] loop3: detected capacity change from 0 to 256 [ 291.448514][T14579] loop2: detected capacity change from 0 to 256 [ 291.520965][T14579] exfat: Deprecated parameter 'utf8' [ 291.526481][T14579] exfat: Deprecated parameter 'namecase' [ 291.565648][T14579] exfat: Deprecated parameter 'namecase' [ 291.598401][T14579] exfat: Deprecated parameter 'utf8' [ 291.653124][T14583] loop0: detected capacity change from 0 to 4096 [ 291.665453][T14579] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 291.768426][T14596] loop1: detected capacity change from 0 to 512 [ 291.831919][T14583] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 291.869424][T14596] EXT4-fs (loop1): Ignoring removed bh option [ 292.001693][T14596] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 292.026133][T14596] ext4 filesystem being mounted at /1009/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 292.285596][T14619] loop0: detected capacity change from 0 to 4096 [ 292.298509][T14622] loop4: detected capacity change from 0 to 2048 [ 292.349598][T14619] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 292.379908][T14619] NILFS (loop0): mounting unchecked fs [ 292.395974][T14619] NILFS (loop0): recovery required for readonly filesystem [ 292.411005][T14630] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 292.426648][T14619] NILFS (loop0): write access will be enabled during recovery [ 292.496714][T14622] attempt to access beyond end of device [ 292.496714][T14622] loop4: rw=0, want=281474976710724, limit=2048 [ 292.534261][T14619] NILFS (loop0): norecovery option specified, skipping roll-forward recovery [ 292.567693][T14622] NILFS (loop4): I/O error reading b-tree node block (ino=16, blocknr=15) [ 292.634577][T14622] attempt to access beyond end of device [ 292.634577][T14622] loop4: rw=0, want=281474976710724, limit=2048 [ 292.657504][ T4340] udevd[4340]: incorrect nilfs2 checksum on /dev/loop0 [ 292.729306][T14622] NILFS (loop4): I/O error reading b-tree node block (ino=16, blocknr=15) [ 292.784034][T14622] NILFS (loop4): error -5 truncating bmap (ino=16) [ 293.419985][T14659] netlink: 'syz.2.4916': attribute type 21 has an invalid length. [ 293.441039][T14659] IPv6: NLM_F_CREATE should be specified when creating new route [ 293.465905][T14660] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4917'. [ 293.524882][T14660] device hsr_slave_0 left promiscuous mode [ 293.577769][T14660] device hsr_slave_1 left promiscuous mode [ 294.018408][T14699] autofs4:pid:14699:autofs_fill_super: called with bogus options [ 294.088090][T14704] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 294.785854][T14751] comedi comedi3: aio_iiro_16: I/O port conflict (0x800100,8) [ 294.903196][T14760] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4961'. [ 295.267367][T14789] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4974'. [ 295.417676][ T26] audit: type=1400 audit(1783547192.175:5): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="#(%#{//(@\)//&@},['%%&\#*" pid=14800 comm="syz.4.4980" [ 295.459125][ T4684] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 295.477456][ T26] audit: type=1326 audit(1783547192.205:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14794 comm="syz.3.4978" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4748f27e59 code=0x0 [ 295.679226][ T4227] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 295.759170][ T4684] usb 3-1: Using ep0 maxpacket: 8 [ 295.858967][ T1110] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 295.919235][ T4684] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 295.931276][T14827] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 295.949995][ T4684] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 296.089987][T14836] netlink: 'syz.0.4998': attribute type 1 has an invalid length. [ 296.098101][T14836] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4998'. [ 296.143606][ T4227] usb 2-1: config 128 interface 0 has no altsetting 0 [ 296.150647][ T1110] usb 5-1: Using ep0 maxpacket: 32 [ 296.156177][ T4684] usb 3-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 0.40 [ 296.165556][ T4227] usb 2-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 296.176769][ T4684] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.185513][ T4227] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.193682][ T4684] usb 3-1: Product: syz [ 296.198062][ T4684] usb 3-1: Manufacturer: syz [ 296.230956][ T4684] usb 3-1: SerialNumber: syz [ 296.279302][ T1110] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.309955][ T1110] usb 5-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 296.333702][ T1110] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.353370][ T1110] usb 5-1: config 0 descriptor?? [ 296.400386][ T1110] usb 5-1: bad CDC descriptors [ 296.509313][ T4227] comedi comedi4: could not set alternate setting 3 in high speed [ 296.535256][ T4227] usbduxsigma 2-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 296.564675][ T4227] usbduxsigma: probe of 2-1:128.0 failed with error -71 [ 296.597909][ T4227] usb 2-1: USB disconnect, device number 24 [ 296.639738][ T4684] usb 3-1: 0:1 : does not exist [ 296.644683][ T4684] usb 3-1: 0:2 : does not exist [ 296.650136][ T1110] usb 5-1: USB disconnect, device number 24 [ 296.666346][ T4684] usb 3-1: BAAD HEADSET c_chmask mismatch [ 296.713834][ T4684] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 296.730042][ T4684] usb 3-1: USB disconnect, device number 26 [ 296.990507][T10276] udevd[10276]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 297.249060][ T1110] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 297.429516][ T5850] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 297.669074][ T1110] usb 4-1: config 8 has an invalid interface number: 7 but max is 0 [ 297.677163][ T1110] usb 4-1: config 8 has no interface number 0 [ 297.729162][ T1110] usb 4-1: string descriptor 0 read error: -22 [ 297.738918][ T1110] usb 4-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=d9.bb [ 297.761999][ T1110] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.801386][ T5850] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 297.819682][ T5850] usb 2-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 297.840358][ T1110] usb 4-1: Expected 3 endpoints, found: 0 [ 297.843873][ T5850] usb 2-1: config 2 interface 0 has no altsetting 0 [ 297.955447][T14933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5044'. [ 298.002564][T14933] netlink: 'syz.0.5044': attribute type 2 has an invalid length. [ 298.020244][ T5850] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 298.035936][ T5850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.056234][ T5850] usb 2-1: Product: syz [ 298.066394][ T1110] usb 4-1: USB disconnect, device number 25 [ 298.072673][ T5850] usb 2-1: Manufacturer: syz [ 298.107816][ T5850] usb 2-1: SerialNumber: syz [ 298.252669][T14945] loop0: detected capacity change from 0 to 4096 [ 298.309158][T14945] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 298.440982][ T5850] ims_pcu: probe of 2-1:2.0 failed with error -22 [ 298.452135][T14945] ntfs3: loop0: ino=5, "/" directory corrupted [ 298.479542][ T5850] usb 2-1: USB disconnect, device number 25 [ 298.485971][T14945] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 298.971759][T14973] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5064'. [ 299.125597][T14963] loop2: detected capacity change from 0 to 8192 [ 299.204760][T14963] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 299.304238][T14963] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 299.326646][T14963] ntfs3: loop2: Failed to load $Extend. [ 299.453139][T14997] x_tables: duplicate entry at hook 2 [ 299.591621][T15004] netlink: 'syz.0.5079': attribute type 10 has an invalid length. [ 299.602542][T15005] netlink: 'syz.3.5080': attribute type 1 has an invalid length. [ 299.647669][T15004] netlink: 'syz.0.5079': attribute type 10 has an invalid length. [ 299.704168][T15009] loop1: detected capacity change from 0 to 512 [ 299.803834][T15009] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 299.873319][T15009] EXT4-fs (loop1): mount failed [ 301.017895][T15096] loop2: detected capacity change from 0 to 1764 [ 301.024681][T15101] loop3: detected capacity change from 0 to 128 [ 301.100153][T15101] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 301.134067][T15096] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 301.156705][T15101] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 301.678451][T15127] loop2: detected capacity change from 0 to 256 [ 302.107463][T15110] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.115807][T15110] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.634909][T15110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.690933][T15110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.147776][T15110] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.157044][T15110] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.166529][T15110] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.175487][T15110] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.387938][T15129] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5138'. [ 303.594765][T15153] loop4: detected capacity change from 0 to 256 [ 303.607866][T15156] syz.0.5152 uses obsolete (PF_INET,SOCK_PACKET) [ 303.635801][T15153] exfat: Deprecated parameter 'utf8' [ 303.657577][T15153] exfat: Deprecated parameter 'namecase' [ 303.665612][T15153] exfat: Deprecated parameter 'namecase' [ 303.716786][T15153] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0x9420891b, utbl_chksum : 0xe619d30d) [ 303.737352][T15162] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 303.761266][T15163] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5155'. [ 303.813689][T15167] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5157'. [ 303.893751][T15173] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 303.951440][T15175] IPv6: ADDRCONF(NETDEV_CHANGE): rose0: link becomes ready [ 304.292183][T15196] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 304.478544][T15210] loop3: detected capacity change from 0 to 1024 [ 304.547131][T15210] EXT4-fs (loop3): #clusters per group too big: 24576 [ 304.614334][T15212] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5179'. [ 304.653944][T15216] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5181'. [ 304.921589][T15227] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 305.207282][T15250] netlink: 'syz.0.5196': attribute type 1 has an invalid length. [ 305.446621][T15259] netlink: 209772 bytes leftover after parsing attributes in process `syz.3.5199'. [ 305.520020][T15259] openvswitch: netlink: Message has 80 unknown bytes. [ 305.647388][T15277] sp0: Synchronizing with TNC [ 305.684102][T15278] xt_CT: You must specify a L4 protocol and not use inversions on it [ 305.903207][T15295] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5214'. [ 305.934777][T15299] loop3: detected capacity change from 0 to 16 [ 306.030336][T15306] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5219'. [ 306.064530][T15306] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5219'. [ 306.091752][T15299] erofs: (device loop3): mounted with root inode @ nid 36. [ 306.117481][T15299] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 306.147752][T15306] netlink: 81 bytes leftover after parsing attributes in process `syz.4.5219'. [ 306.160418][T15311] loop0: detected capacity change from 0 to 256 [ 306.177248][T15299] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -37 in[64, 4032] out[1851] [ 306.254915][T15299] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 306.280043][T15311] exfat: Deprecated parameter 'namecase' [ 306.285924][T15311] exfat: Deprecated parameter 'namecase' [ 306.361382][T15311] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 306.685427][T15340] loop3: detected capacity change from 0 to 2048 [ 306.819475][T15340] EXT4-fs (loop3): mounted filesystem without journal. Opts: min_batch_time=0x0000000000001cc4,,errors=continue. Quota mode: none. [ 306.859254][ T4684] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 307.249246][ T4684] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 307.257540][ T4684] usb 3-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 307.294187][ T4684] usb 3-1: config 0 has an invalid descriptor of length 191, skipping remainder of the config [ 307.338839][ T4684] usb 3-1: config 0 has no interface number 0 [ 307.559202][ T4684] usb 3-1: New USB device found, idVendor=006d, idProduct=0800, bcdDevice= b.28 [ 307.578625][ T4684] usb 3-1: New USB device strings: Mfr=1, Product=26, SerialNumber=3 [ 307.616305][ T4684] usb 3-1: Product: syz [ 307.635885][ T4684] usb 3-1: Manufacturer: syz [ 307.656135][ T4684] usb 3-1: SerialNumber: syz [ 307.690813][ T4684] usb 3-1: config 0 descriptor?? [ 307.741261][ T4684] usb 3-1: Found UVC 0.00 device syz (006d:0800) [ 307.747730][ T4684] usb 3-1: No valid video chain found. [ 307.815206][T15421] Cannot find add_set index 3 as target [ 307.963807][ T4684] usb 3-1: USB disconnect, device number 27 [ 308.458570][T15464] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 308.485363][T15468] comedi comedi3: rti800: I/O port conflict (0x9,16) [ 308.642768][T15472] loop2: detected capacity change from 0 to 512 [ 308.750951][T15478] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 308.830403][T15472] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.5285: bg 0: block 169: padding at end of block bitmap is not set [ 308.870625][T15472] Quota error (device loop2): write_blk: dquota write failed [ 308.878311][T15472] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 308.888992][T15472] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.5285: Failed to acquire dquot type 0 [ 308.919738][T15472] EXT4-fs (loop2): 1 truncate cleaned up [ 308.925644][T15472] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 308.937288][T15472] ext4 filesystem being mounted at /1050/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 309.127613][T15491] SET target dimension over the limit! [ 309.297553][T15451] loop3: detected capacity change from 0 to 32768 [ 309.377163][T15451] (syz.3.5276,15451,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 309.482777][T15451] (syz.3.5276,15451,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 309.635296][T15451] JBD2: Ignoring recovery information on journal [ 309.677958][T15508] IPv6: sit1: Disabled Multicast RS [ 309.822607][T15512] overlayfs: workdir and upperdir must be separate subtrees [ 309.838403][T15451] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 310.028307][T15517] xt_limit: Overflow, try lower: 2/2147483648 [ 310.185341][ T4193] ocfs2: Unmounting device (7,3) on (node local) [ 310.253585][T15488] loop4: detected capacity change from 0 to 32768 [ 310.315617][T15528] netlink: 'syz.1.5310': attribute type 12 has an invalid length. [ 310.504604][T15539] program syz.3.5315 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 310.534578][T15541] ip6t_srh: unknown srh invflags 4000 [ 310.713344][T15549] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 311.157331][T15571] xt_hashlimit: size too large, truncated to 1048576 [ 311.434802][T15580] __nla_validate_parse: 1 callbacks suppressed [ 311.434820][T15580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5334'. [ 311.700047][T15595] openvswitch: netlink: Actions may not be safe on all matching packets [ 311.847682][T15605] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 311.982363][T15611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5349'. [ 312.044978][T15615] ipt_CLUSTERIP: no config found for 127.0.0.1, need 'new' [ 312.164217][T15621] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5354'. [ 312.667688][T15647] xt_hashlimit: invalid rate [ 312.732859][T15598] loop0: detected capacity change from 0 to 32768 [ 312.808975][ T4271] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 312.830366][ T26] audit: type=1326 audit(1783547209.595:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15652 comm="syz.0.5371" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa13e5e59 code=0x7ffc0000 [ 312.908058][ T26] audit: type=1326 audit(1783547209.595:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15652 comm="syz.0.5371" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa13e5e59 code=0x7ffc0000 [ 312.966481][ T26] audit: type=1326 audit(1783547209.595:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15652 comm="syz.0.5371" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4fa13e5e59 code=0x7ffc0000 [ 313.010327][ T26] audit: type=1326 audit(1783547209.595:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15652 comm="syz.0.5371" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa13e5e59 code=0x7ffc0000 [ 313.016683][T15658] netlink: 'syz.0.5372': attribute type 3 has an invalid length. [ 313.119496][T15658] netlink: 'syz.0.5372': attribute type 1 has an invalid length. [ 313.139177][ T26] audit: type=1326 audit(1783547209.595:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15652 comm="syz.0.5371" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa13e5e59 code=0x7ffc0000 [ 313.179212][ T4271] usb 3-1: config 0 has an invalid interface number: 18 but max is 0 [ 313.187367][ T4271] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.228068][ T4271] usb 3-1: config 0 has no interface number 0 [ 313.249138][ T4271] usb 3-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 313.258243][ T4271] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.320473][ T4271] usb 3-1: config 0 descriptor?? [ 313.382743][ T4271] rndis_wlan 3-1:0.18: skipping garbage [ 313.388383][ T4271] usb 3-1: bad CDC descriptors [ 313.428308][ T4271] rndis_host 3-1:0.18: skipping garbage [ 313.465522][ T4271] usb 3-1: bad CDC descriptors [ 313.499673][T15683] device netdevsim0 left promiscuous mode [ 313.539385][T15686] Scaler: ================= START STATUS ================= [ 313.546929][T15686] Scaler: ================== END STATUS ================== [ 313.599062][ T5982] usb 3-1: USB disconnect, device number 28 [ 313.829853][T15707] loop3: detected capacity change from 0 to 512 [ 313.960908][T15707] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 313.982671][T15707] ext4 filesystem being mounted at /1079/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 314.026740][T15707] EXT4-fs warning (device loop3): ext4_empty_dir:3156: inode #12: comm syz.3.5396: directory missing '..' [ 314.097093][ T1110] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 314.104839][ T4684] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 314.399085][ T4684] usb 2-1: Using ep0 maxpacket: 8 [ 314.549043][ T1110] usb 5-1: config 0 has an invalid interface number: 199 but max is 1 [ 314.557275][ T1110] usb 5-1: config 0 has no interface number 1 [ 314.563908][ T4684] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 314.573362][ T4231] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 314.584116][ T4684] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.596399][ T1110] usb 5-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 314.607756][ T1110] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 314.619367][ T4684] usb 2-1: config 0 descriptor?? [ 314.719163][ T1110] usb 5-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 314.728588][ T1110] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 314.741249][ T1110] usb 5-1: SerialNumber: syz [ 314.749201][T15719] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.757223][T15719] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.781035][ T1110] usb 5-1: config 0 descriptor?? [ 314.858909][ T4231] usb 4-1: Using ep0 maxpacket: 16 [ 314.899312][ T4684] usb 2-1: string descriptor 0 read error: -71 [ 314.914043][ T4684] uvcvideo 2-1:0.0: Found multiple Units with ID 1 [ 314.921477][ T4684] usb 2-1: Found UVC 0.00 device (2833:0201) [ 314.928600][ T4684] usb 2-1: No valid video chain found. [ 314.940230][ T4684] usb 2-1: USB disconnect, device number 26 [ 314.999679][ T4231] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.018933][ T4231] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 315.033745][ T4231] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 315.045940][ T4231] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.064235][ T4231] usb 4-1: config 0 descriptor?? [ 315.069749][ T1110] usb 5-1: Found UVC 0.00 device (0002:0000) [ 315.076679][ T1110] usb 5-1: No valid video chain found. [ 315.095424][ T1110] usb 5-1: USB disconnect, device number 25 [ 315.131423][ T4231] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 315.333947][ T5982] usb 4-1: USB disconnect, device number 26 [ 315.551751][T15719] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.652015][T15719] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.716094][T15750] sctp: [Deprecated]: syz.4.5415 (pid 15750) Use of int in maxseg socket option. [ 315.716094][T15750] Use struct sctp_assoc_value instead [ 316.118968][ T4271] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 316.364787][ T4271] usb 5-1: Using ep0 maxpacket: 8 [ 316.530142][ T4271] usb 5-1: unable to get BOS descriptor or descriptor too short [ 316.594841][T15719] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.604725][T15719] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.614544][T15719] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.619661][ T4271] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 316.626903][T15719] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.648920][ T4271] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 316.820381][ T4271] usb 5-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 316.842758][ T4271] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.865723][ T4271] usb 5-1: Product: syz [ 316.870161][ T4271] usb 5-1: Manufacturer: syz [ 316.885050][ T4271] usb 5-1: SerialNumber: syz [ 317.063952][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.077959][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.088399][T15798] loop3: detected capacity change from 0 to 64 [ 317.252126][ T4271] usb 5-1: 0:1 : does not exist [ 317.257224][ T4271] usb 5-1: unit 0 not found! [ 317.268053][ T4271] usb 5-1: unit 5 not found! [ 317.281734][ T4271] usb 5-1: Focusrite Scarlett Gen 2/3 Mixer Driver disabled; use options snd_usb_audio vid=0x1235 pid=0x8214 device_setup=1 to enable and report any issues to g@b4.vu [ 317.334078][ T4271] usb 5-1: USB disconnect, device number 26 [ 317.451803][T15814] netlink: 'syz.3.5444': attribute type 3 has an invalid length. [ 317.577980][T10276] udevd[10276]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 317.814968][T15840] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5457'. [ 317.877730][T15845] netlink: 'syz.1.5460': attribute type 13 has an invalid length. [ 317.942581][T15845] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 317.959613][T15850] netlink: 'syz.0.5463': attribute type 9 has an invalid length. [ 317.997690][T15850] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.5463'. [ 318.025565][T15845] gretap0: refused to change device tx_queue_len [ 318.033584][T15845] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 318.370913][T15878] loop3: detected capacity change from 0 to 256 [ 318.509751][T15878] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 318.676953][T15901] xt_hashlimit: max too large, truncated to 1048576 [ 318.697104][T15901] No such timeout policy "syz1" [ 318.755818][T15905] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5490'. [ 318.775317][ T4231] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 319.039076][ T4271] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 319.039114][ T4231] usb 5-1: Using ep0 maxpacket: 16 [ 319.280278][ T4231] usb 5-1: unable to get BOS descriptor or descriptor too short [ 319.384878][ T4231] usb 5-1: config 25 has an invalid interface number: 91 but max is 0 [ 319.407262][ T4231] usb 5-1: config 25 has no interface number 0 [ 319.414590][ T4231] usb 5-1: config 25 interface 91 altsetting 7 bulk endpoint 0xE has invalid maxpacket 64 [ 319.440458][T15932] x_tables: unsorted underflow at hook 4 [ 319.449037][ T4231] usb 5-1: config 25 interface 91 altsetting 7 bulk endpoint 0xD has invalid maxpacket 16 [ 319.449985][ T4271] usb 1-1: unable to get BOS descriptor or descriptor too short [ 319.478801][ T4231] usb 5-1: config 25 interface 91 has no altsetting 0 [ 319.569147][ T4271] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 319.679240][ T4231] usb 5-1: New USB device found, idVendor=0421, idProduct=00ab, bcdDevice=ee.96 [ 319.688392][ T4231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.715277][ T4231] usb 5-1: Product: syz [ 319.719626][ T4231] usb 5-1: Manufacturer: syz [ 319.724454][ T4231] usb 5-1: SerialNumber: syz [ 319.749170][ T4271] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 319.759179][T15893] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 319.778974][ T4271] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.779571][T15893] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 319.787154][ T4271] usb 1-1: Product: syz [ 319.816952][T15950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5510'. [ 319.836379][ T4271] usb 1-1: Manufacturer: syz [ 319.841737][T15950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5510'. [ 319.856413][ T4271] usb 1-1: SerialNumber: syz [ 319.956208][T15954] netlink: 'syz.1.5514': attribute type 16 has an invalid length. [ 319.979731][T15954] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.5514'. [ 320.152479][ T4271] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 320.163532][ T4231] usb 5-1: bad CDC descriptors [ 320.176319][ T4231] usb 5-1: bad CDC descriptors [ 320.180247][ T4271] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 320.197341][ T4271] usb 1-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 320.219262][ T4231] usb 5-1: USB disconnect, device number 27 [ 320.337506][ T4271] usb 1-1: USB disconnect, device number 33 [ 320.536929][T15981] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5528'. [ 320.603862][T15985] loop2: detected capacity change from 0 to 256 [ 320.646530][ T4331] udevd[4331]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 320.716213][T15989] netlink: 144 bytes leftover after parsing attributes in process `syz.4.5531'. [ 320.755919][T15991] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5533'. [ 320.861516][T15985] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 321.087852][T16000] loop4: detected capacity change from 0 to 512 [ 321.251158][T16000] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 321.284537][T16004] netlink: 120 bytes leftover after parsing attributes in process `syz.0.5539'. [ 321.525663][T16012] netlink: 'syz.4.5542': attribute type 9 has an invalid length. [ 321.583704][T16013] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 322.218947][ T4271] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 322.350568][T16048] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 322.459171][ T4271] usb 3-1: Using ep0 maxpacket: 8 [ 322.622108][T16065] loop3: detected capacity change from 0 to 128 [ 322.769029][ T4271] usb 3-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 322.788898][ T4271] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.797042][ T4271] usb 3-1: Product: syz [ 322.838033][ T4271] usb 3-1: Manufacturer: syz [ 322.849458][T16073] xt_recent: hitcount (4294967294) is larger than allowed maximum (255) [ 322.874845][ T4271] usb 3-1: SerialNumber: syz [ 323.378931][ T4271] mxuport 3-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 323.387598][ T4271] mxuport: probe of 3-1:254.0 failed with error -5 [ 323.426672][ T4271] usb 3-1: USB disconnect, device number 29 [ 323.478830][ T4231] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 323.654912][T16112] xt_TCPMSS: Only works on TCP SYN packets [ 323.655548][T16113] xt_hashlimit: max too large, truncated to 1048576 [ 323.705327][T16113] xt_hashlimit: overflow, try lower: 137438953472/8 [ 323.875015][T16123] __nla_validate_parse: 3 callbacks suppressed [ 323.875033][T16123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5596'. [ 323.890808][ T4231] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 323.908863][ T4231] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.939790][ T4231] usb 2-1: config 0 descriptor?? [ 324.421346][ T4231] ath6kl: Failed to submit usb control message: -71 [ 324.428265][ T4231] ath6kl: unable to send the bmi data to the device: -71 [ 324.458118][ T4231] ath6kl: Unable to send get target info: -71 [ 324.499788][ T4231] ath6kl: Failed to init ath6kl core: -71 [ 324.559892][ T4231] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 324.608990][ T4231] usb 2-1: USB disconnect, device number 27 [ 325.033884][T16179] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5619'. [ 325.253820][T16148] loop0: detected capacity change from 0 to 32768 [ 325.393046][T16148] (syz.0.5606,16148,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 325.448522][T16148] (syz.0.5606,16148,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 325.631229][T16148] JBD2: Ignoring recovery information on journal [ 325.823034][T16148] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 326.087188][ T4192] ocfs2: Unmounting device (7,0) on (node local) [ 326.393871][T16245] loop3: detected capacity change from 0 to 2048 [ 326.414795][T16251] netlink: 'syz.1.5652': attribute type 1 has an invalid length. [ 326.470516][T16245] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=11586, location=11586 [ 326.535504][T16245] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 326.564695][T16255] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5655'. [ 326.595234][T16256] loop0: detected capacity change from 0 to 1764 [ 326.640832][T16259] Cannot find add_set index 2 as target [ 326.822756][ T26] audit: type=1107 audit(1783547223.585:12): pid=16260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 326.865312][T16264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5659'. [ 326.952270][ C0] vkms_vblank_simulate: vblank timer overrun [ 327.236193][T16276] loop3: detected capacity change from 0 to 16 [ 327.247851][T16276] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 327.296764][ T26] audit: type=1400 audit(1783547224.055:13): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=16275 comm="syz.4.5665" [ 327.563767][T16289] [U] v3f"S/4:XTzWtlW= [ 327.589043][T16289] [U] J"e:" [ 327.674818][T16258] loop1: detected capacity change from 0 to 32768 [ 327.800111][T16258] (syz.1.5654,16258,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 327.845956][T16258] (syz.1.5654,16258,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 327.927633][T16258] JBD2: Ignoring recovery information on journal [ 328.101877][T16258] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 328.325427][ T4186] ocfs2: Unmounting device (7,1) on (node local) [ 328.391522][T16333] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 328.862600][T16355] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5702'. [ 329.368987][ T4227] usb 2-1: new low-speed USB device number 28 using dummy_hcd [ 329.416010][T16343] loop3: detected capacity change from 0 to 32768 [ 329.552861][T16343] XFS (loop3): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 329.588623][T16392] loop4: detected capacity change from 0 to 764 [ 329.698466][ T4193] XFS (loop3): Unmounting Filesystem [ 329.790322][T16407] loop0: detected capacity change from 0 to 256 [ 329.798954][ T4227] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 329.807706][ T4227] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 329.825677][ T4227] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 329.836213][ T4227] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 329.854818][ T4227] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 329.871460][ T4227] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.897636][T16411] SET target dimension over the limit! [ 329.944419][T16407] FAT-fs (loop0): Directory bread(block 64) failed [ 329.964570][T16407] FAT-fs (loop0): Directory bread(block 65) failed [ 329.972921][T16407] FAT-fs (loop0): Directory bread(block 66) failed [ 330.002398][ T4227] hub 2-1:1.0: bad descriptor, ignoring hub [ 330.008921][ T4227] hub: probe of 2-1:1.0 failed with error -5 [ 330.015453][ T4227] cdc_wdm 2-1:1.0: skipping garbage [ 330.029899][T16407] FAT-fs (loop0): Directory bread(block 67) failed [ 330.036616][T16407] FAT-fs (loop0): Directory bread(block 68) failed [ 330.043712][ T4227] cdc_wdm 2-1:1.0: invalid descriptor buffer length [ 330.050738][T16407] FAT-fs (loop0): Directory bread(block 69) failed [ 330.057369][T16407] FAT-fs (loop0): Directory bread(block 70) failed [ 330.064617][ T4227] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 330.082243][T16407] FAT-fs (loop0): Directory bread(block 71) failed [ 330.103297][T16407] FAT-fs (loop0): Directory bread(block 72) failed [ 330.119001][T16407] FAT-fs (loop0): Directory bread(block 73) failed [ 330.365761][ T26] audit: type=1800 audit(1783547227.125:14): pid=16407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5726" name="file1" dev="loop0" ino=1048623 res=0 errno=0 [ 330.404572][ T4227] usb 2-1: USB disconnect, device number 28 [ 330.549608][T16427] loop3: detected capacity change from 0 to 256 [ 330.589677][ T26] audit: type=1400 audit(1783547227.355:15): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=16428 comm="syz.2.5737" [ 330.634927][T16427] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 330.723044][ T26] audit: type=1800 audit(1783547227.485:16): pid=16427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5724" name="file1" dev="loop3" ino=1048624 res=0 errno=0 [ 330.759906][T16427] exFAT-fs (loop3): error, tried to truncate zeroed cluster. [ 330.806974][T16427] exFAT-fs (loop3): Filesystem has been set read-only [ 331.059080][T16446] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5743'. [ 331.087536][T16448] openvswitch: netlink: Key 2 has unexpected len 2 expected 4 [ 331.211536][T16452] overlayfs: failed to resolve 'obj_user=/ ': -2 [ 331.639019][ T4271] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 331.839033][T16494] netlink: 'syz.0.5767': attribute type 3 has an invalid length. [ 332.009057][ T4271] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 332.032398][ T4271] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 332.179226][T16515] netlink: 'syz.1.5777': attribute type 32 has an invalid length. [ 332.209198][ T4271] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 332.228534][ T4271] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.258894][ T4271] usb 3-1: Product: syz [ 332.263248][ T4271] usb 3-1: Manufacturer: syz [ 332.267881][ T4271] usb 3-1: SerialNumber: syz [ 332.649196][ T4271] usb 3-1: 0:2 : does not exist [ 332.654168][ T4271] usb 3-1: unit 9 not found! [ 332.678076][ T4271] usb 3-1: USB disconnect, device number 30 [ 332.717733][T16544] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 332.940445][ T4340] udevd[4340]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 332.975497][T16555] xt_bpf: check failed: parse error [ 333.374543][T16578] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5808'. [ 333.399111][ T1110] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 333.489289][T16586] xt_socket: unknown flags 0x50 [ 333.739063][ T4227] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 333.825141][ T1110] usb 2-1: config 0 has an invalid interface number: 83 but max is 0 [ 333.834877][ T1110] usb 2-1: config 0 has no interface number 0 [ 333.851581][ T1110] usb 2-1: config 0 interface 83 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 333.862746][ T1110] usb 2-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 333.892000][ T1110] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.912116][ T1110] usb 2-1: config 0 descriptor?? [ 333.961069][ T1110] ttusbir 2-1:0.83: cannot find expected altsetting [ 334.059053][ T4227] usb 5-1: Using ep0 maxpacket: 8 [ 334.177337][ T1110] usb 2-1: USB disconnect, device number 29 [ 334.189128][ T4227] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 334.201854][ T4227] usb 5-1: config 179 has no interface number 0 [ 334.208192][ T4227] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 334.265836][ T4227] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 334.308203][ T4227] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 334.376282][ T4227] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 334.403819][ T4227] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 334.471718][ T4227] usb 5-1: config 179 interface 65 has no altsetting 0 [ 334.478678][ T4227] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 334.539144][ T4227] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.638035][ T4227] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input20 [ 334.869612][ T1110] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 334.903468][ T13] usb 5-1: USB disconnect, device number 28 [ 334.921000][ T13] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 334.935964][T16650] xt_CT: You must specify a L4 protocol and not use inversions on it [ 335.329113][ T1110] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 335.337258][ T1110] usb 3-1: config 0 has no interface number 0 [ 335.346317][T16674] autofs4:pid:16674:autofs_fill_super: called with bogus options [ 335.364550][ T1110] usb 3-1: config 0 interface 41 has no altsetting 0 [ 335.576113][ T1110] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 335.588893][ T1110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.597111][ T1110] usb 3-1: Product: syz [ 335.645689][ T1110] usb 3-1: Manufacturer: syz [ 335.664730][ T1110] usb 3-1: SerialNumber: syz [ 335.711708][ T1110] usb 3-1: config 0 descriptor?? [ 335.995934][ T1110] CoreChips: probe of 3-1:0.41 failed with error -71 [ 336.015000][ T1110] usb 3-1: USB disconnect, device number 31 [ 336.028799][ T4684] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 336.040746][T16720] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5879'. [ 336.190073][T16726] device vlan0 entered promiscuous mode [ 336.228837][T16726] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 336.252490][T16728] loop1: detected capacity change from 0 to 1024 [ 336.343559][T16736] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5887'. [ 336.360273][T16736] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5887'. [ 336.379039][T16728] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 336.402486][T16728] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 336.443877][T16728] EXT4-fs error (device loop1): ext4_get_journal_inode:5187: inode #5: comm syz.1.5883: unexpected bad inode w/o EXT4_IGET_BAD [ 336.488649][T16728] EXT4-fs (loop1): no journal found [ 336.506273][ T4684] usb 4-1: unable to get BOS descriptor or descriptor too short [ 336.508556][T16728] EXT4-fs (loop1): can't get journal size [ 336.575850][ T4684] usb 4-1: not running at top speed; connect to a high speed hub [ 336.592022][T16728] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x0000000000000005,abort,,errors=continue. Quota mode: writeback. [ 336.689123][ T4684] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 336.714217][ T4684] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 336.714279][ T4684] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 336.851085][T16755] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5896'. [ 336.882224][ T4684] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 336.902191][ T4684] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.920826][ T4684] usb 4-1: Product: syz [ 336.925233][ T4684] usb 4-1: Manufacturer: syz [ 336.955756][ T4684] usb 4-1: SerialNumber: syz [ 337.027315][T16760] loop2: detected capacity change from 0 to 4096 [ 337.076749][T16760] EXT4-fs (loop2): Test dummy encryption mode enabled [ 337.091233][T16760] EXT4-fs (loop2): Test dummy encryption mode enabled [ 337.146732][T16760] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier=0x0000000000000009,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption=v1,nodiscard,data_err=ignore,acl,test_dummy_encryption=v1,,errors=continue. Quota mode: writeback. [ 337.412412][ T4684] usb 4-1: USB disconnect, device number 27 [ 337.480276][T16779] loop4: detected capacity change from 0 to 2048 [ 337.557711][T16779] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 337.679799][ T4331] udevd[4331]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 337.777916][T16799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5917'. [ 337.844417][T16799] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5917'. [ 338.121612][T16815] CIFS mount error: No usable UNC path provided in device string! [ 338.121612][T16815] [ 338.139493][ T4684] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 338.170757][T16815] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 338.409078][ T4684] usb 2-1: Using ep0 maxpacket: 32 [ 338.511987][T16834] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 338.549269][ T4684] usb 2-1: config 1 has an invalid interface number: 216 but max is 0 [ 338.566943][ T4684] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 338.589051][ T5982] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 338.618839][ T4684] usb 2-1: config 1 has no interface number 0 [ 338.625006][ T4684] usb 2-1: config 1 interface 216 has no altsetting 0 [ 338.861395][ T4684] usb 2-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=17.ee [ 338.898805][ T4684] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.906863][ T4684] usb 2-1: Product: syz [ 338.926432][ T4684] usb 2-1: Manufacturer: syz [ 338.938783][ T4684] usb 2-1: SerialNumber: syz [ 338.998994][ T5982] usb 1-1: unable to get BOS descriptor or descriptor too short [ 339.091005][ T5982] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 339.111121][ T5982] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 339.282409][T16868] loop2: detected capacity change from 0 to 1024 [ 339.333244][ T4684] usb 2-1: USB disconnect, device number 30 [ 339.344930][T16872] usb usb8: usbfs: process 16872 (syz.3.5952) did not claim interface 32 before use [ 339.369090][ T5982] usb 1-1: string descriptor 0 read error: -22 [ 339.397913][ T5982] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 339.434781][T16875] netlink: 'syz.3.5954': attribute type 25 has an invalid length. [ 339.448652][ T5982] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.466953][T16875] netlink: 'syz.3.5954': attribute type 3 has an invalid length. [ 339.511941][ T5982] usb 1-1: selecting invalid altsetting 1 [ 339.518174][ T5982] usb 1-1: unit 3 not found! [ 339.591991][T16884] device lo entered promiscuous mode [ 339.597532][T16884] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 339.729169][ T5982] usb 1-1: unit 0 not found! [ 339.862372][T10276] udevd[10276]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 339.890638][T16895] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5964'. [ 339.975411][ T5982] usb 1-1: USB disconnect, device number 34 [ 340.177855][T16913] sctp: [Deprecated]: syz.4.5972 (pid 16913) Use of int in max_burst socket option. [ 340.177855][T16913] Use struct sctp_assoc_value instead [ 340.518098][T16931] netlink: 5427 bytes leftover after parsing attributes in process `syz.1.5981'. [ 340.545745][T16931] netlink: 52477 bytes leftover after parsing attributes in process `syz.1.5981'. [ 340.575954][T16931] netlink: 71676 bytes leftover after parsing attributes in process `syz.1.5981'. [ 341.497780][T16984] loop2: detected capacity change from 0 to 16 [ 341.603882][T16984] erofs: (device loop2): mounted with root inode @ nid 36. [ 341.616504][ T154] read_mapping_page failed! [ 341.634188][T16984] attempt to access beyond end of device [ 341.634188][T16984] loop2: rw=0, want=296, limit=16 [ 341.649774][ T154] ERROR: (device loop3): txCommit: [ 341.649774][ T154] [ 341.672713][ T154] jfs_write_inode: jfs_commit_inode failed! [ 341.679638][T16984] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 341.802090][T16968] loop0: detected capacity change from 0 to 32768 [ 341.814647][T16993] usb usb8: usbfs: process 16993 (syz.2.6012) did not claim interface 0 before use [ 342.007853][T16968] XFS (loop0): Mounting V5 Filesystem [ 342.077625][T17016] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.087223][T17016] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.112840][T17016] device vlan0 left promiscuous mode [ 342.123405][T16968] XFS (loop0): Ending clean mount [ 342.132001][T17016] device gretap1 left promiscuous mode [ 342.140487][T17016] device bond1 left promiscuous mode [ 342.151590][T17016] device bond3 left promiscuous mode [ 342.203569][T17018] netlink: 'syz.2.6020': attribute type 1 has an invalid length. [ 342.250362][T17018] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6020'. [ 342.293516][ T4192] XFS (loop0): Unmounting Filesystem [ 342.306203][T17018] block nbd0: not configured, cannot reconfigure [ 342.488091][T17036] netlink: 'syz.4.6030': attribute type 2 has an invalid length. [ 342.518909][T17036] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.6030'. [ 343.022182][T17062] netlink: 180 bytes leftover after parsing attributes in process `syz.0.6041'. [ 343.078843][ T5982] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 343.098954][T17062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6041'. [ 343.295170][T17073] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.319026][ T5982] usb 3-1: Using ep0 maxpacket: 32 [ 343.353765][T17073] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.374194][T17073] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.397390][T17073] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.425999][T17073] device geneve3 entered promiscuous mode [ 343.439175][ T5982] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 343.459105][T17073] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.475676][T17073] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.495062][T17073] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.529855][T17073] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.606601][T17077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6049'. [ 343.615733][T17077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6049'. [ 343.625419][ T5982] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 343.632372][T17077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6049'. [ 343.644411][T17077] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 343.648425][ T5982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.699697][ T5982] usb 3-1: Product: syz [ 343.704275][ T5982] usb 3-1: Manufacturer: syz [ 343.709602][ T5982] usb 3-1: SerialNumber: syz [ 343.716126][ T5982] usb 3-1: config 0 descriptor?? [ 343.739345][T17049] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 343.799675][ T5982] hub 3-1:0.0: bad descriptor, ignoring hub [ 343.812077][ T5982] hub: probe of 3-1:0.0 failed with error -5 [ 343.844428][ T5982] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input21 [ 344.146867][ T5982] usb 3-1: USB disconnect, device number 32 [ 344.228546][T17099] loop4: detected capacity change from 0 to 8192 [ 344.350119][T17099] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 2068) [ 344.367181][T17099] FAT-fs (loop4): Filesystem has been set read-only [ 344.374499][T17099] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 2068) [ 344.389586][T17099] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 2068) [ 344.471995][T17112] loop1: detected capacity change from 0 to 1024 [ 344.543495][T17112] hfsplus: invalid file type 0177777 for inode 2 [ 344.559885][T17112] hfsplus: failed to load root directory [ 344.631270][T17116] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6066'. [ 344.777990][T17123] loop0: detected capacity change from 0 to 512 [ 344.858990][ T5982] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 344.950160][T17123] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 344.981996][T17134] loop4: detected capacity change from 0 to 64 [ 345.003218][T17136] comedi comedi0: comedi_config --init_data is deprecated [ 345.005367][T17123] ext4 filesystem being mounted at /1193/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 345.098957][ T5982] usb 2-1: Using ep0 maxpacket: 16 [ 345.219111][ T5982] usb 2-1: config 0 has an invalid descriptor of length 141, skipping remainder of the config [ 345.262274][ T5982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 33216, setting to 1024 [ 345.348786][ T5982] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 345.400405][ T5982] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 345.539013][ T5982] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 345.568546][ T5982] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 345.573459][T17160] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6087'. [ 345.605107][ T5982] usb 2-1: Manufacturer: syz [ 345.637070][ T5982] usb 2-1: config 0 descriptor?? [ 345.679408][T17112] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 345.711740][T17162] device geneve3 entered promiscuous mode [ 345.922486][T17172] ieee802154 phy0 wpan0: encryption failed: -22 [ 345.950579][ T4194] usb 2-1: USB disconnect, device number 31 [ 345.991187][T17141] loop2: detected capacity change from 0 to 40427 [ 346.002146][T17174] CIFS: VFS: Malformed UNC in devname [ 346.069318][T17141] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 346.081956][T17141] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 346.149421][T17141] F2FS-fs (loop2): invalid crc value [ 346.214354][T17141] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 346.445159][T17141] F2FS-fs (loop2): recover fsync data on readonly fs [ 346.482409][T17141] F2FS-fs (loop2): Try to recover 1th superblock, ret: -30 [ 346.488465][T17195] loop3: detected capacity change from 0 to 512 [ 346.499588][T17141] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 346.679581][T17141] F2FS-fs (loop2): Try to recover all the superblocks, ret: 0 [ 346.722758][T17195] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 346.759922][T17195] ext4 filesystem being mounted at /1250/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 346.952218][T17221] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0 [ 347.384866][T17246] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0 [ 347.457728][T17250] netlink: 'syz.0.6128': attribute type 25 has an invalid length. [ 347.506579][T17250] netlink: 'syz.0.6128': attribute type 32 has an invalid length. [ 347.661247][T17257] tmpfs: Bad value for 'mpol' [ 347.688676][T17259] loop3: detected capacity change from 0 to 64 [ 347.768398][T17261] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6134'. [ 348.356339][T17294] netlink: 'syz.0.6150': attribute type 1 has an invalid length. [ 348.374878][T17294] netlink: 'syz.0.6150': attribute type 9 has an invalid length. [ 348.616606][T17251] loop4: detected capacity change from 0 to 40427 [ 348.790499][T17317] netlink: 'syz.3.6160': attribute type 4 has an invalid length. [ 348.826028][T17317] netlink: 'syz.3.6160': attribute type 3 has an invalid length. [ 348.859132][T17317] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6160'. [ 348.942085][T17327] kAFS: unable to lookup cell '({^@' [ 349.225058][T17343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6173'. [ 349.337667][T17251] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 349.355290][T17251] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 349.372363][T17349] netlink: 'syz.0.6175': attribute type 9 has an invalid length. [ 349.417158][T17251] F2FS-fs (loop4): invalid crc value [ 349.436497][T17349] netlink: 'syz.0.6175': attribute type 6 has an invalid length. [ 349.447915][T17251] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 349.498030][ T26] audit: type=1326 audit(1783547246.255:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17354 comm="syz.2.6179" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f2cb9e59 code=0x7ffc0000 [ 349.529062][T17353] netlink: 'syz.1.6178': attribute type 1 has an invalid length. [ 349.560790][T17353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6178'. [ 349.588877][ T26] audit: type=1326 audit(1783547246.255:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17354 comm="syz.2.6179" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7fa3f2cb9e59 code=0x7ffc0000 [ 349.698170][ T26] audit: type=1326 audit(1783547246.255:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17354 comm="syz.2.6179" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f2cb9e59 code=0x7ffc0000 [ 349.750668][T17251] F2FS-fs (loop4): recover fsync data on readonly fs [ 349.796613][ T26] audit: type=1326 audit(1783547246.255:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17354 comm="syz.2.6179" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f2cb9e59 code=0x7ffc0000 [ 349.819552][T17251] F2FS-fs (loop4): Try to recover 1th superblock, ret: -30 [ 349.836012][T17251] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 349.948154][T17365] loop1: detected capacity change from 0 to 8192 [ 349.958714][T17251] F2FS-fs (loop4): Try to recover all the superblocks, ret: 0 [ 350.064287][T17365] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 2068) [ 350.103342][T17365] FAT-fs (loop1): Filesystem has been set read-only [ 350.126501][T17365] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 2068) [ 350.147652][T17365] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 2068) [ 350.256984][T17388] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 350.391262][T17394] loop1: detected capacity change from 0 to 256 [ 350.517957][T17401] netlink: 'syz.3.6201': attribute type 12 has an invalid length. [ 350.543583][T17394] FAT-fs (loop1): Directory bread(block 64) failed [ 350.553471][T17394] FAT-fs (loop1): Directory bread(block 65) failed [ 350.583291][T17394] FAT-fs (loop1): Directory bread(block 66) failed [ 350.618692][T17394] FAT-fs (loop1): Directory bread(block 67) failed [ 350.625728][T17394] FAT-fs (loop1): Directory bread(block 68) failed [ 350.659172][T17394] FAT-fs (loop1): Directory bread(block 69) failed [ 350.665875][T17394] FAT-fs (loop1): Directory bread(block 70) failed [ 350.696042][T17394] FAT-fs (loop1): Directory bread(block 71) failed [ 350.728931][T17394] FAT-fs (loop1): Directory bread(block 72) failed [ 350.735535][T17394] FAT-fs (loop1): Directory bread(block 73) failed [ 350.963531][T17420] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6208'. [ 351.624196][T17472] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6235'. [ 351.659104][T17472] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6235'. [ 351.815489][T17483] loop3: detected capacity change from 0 to 128 [ 351.824294][T17481] loop1: detected capacity change from 0 to 764 [ 351.906589][T17483] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 351.922951][T17481] rock: directory entry would overflow storage [ 351.938867][T17481] rock: sig=0x5850, size=36, remaining=22 [ 352.103949][T17495] Zero length message leads to an empty skb [ 352.120906][T17497] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6246'. [ 352.599047][ T1110] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 353.009378][ T1110] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 353.042686][ T1110] usb 5-1: config 0 has no interface number 0 [ 353.089280][ T1110] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 353.118286][ T1110] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 353.141485][T17567] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6281'. [ 353.211975][T17570] validate_nla: 1 callbacks suppressed [ 353.211992][T17570] netlink: 'syz.3.6283': attribute type 1 has an invalid length. [ 353.383471][ T13] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 353.414547][ T1110] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 353.434515][ T1110] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.481902][T17572] loop1: detected capacity change from 0 to 4096 [ 353.497543][ T1110] usb 5-1: Product: syz [ 353.501765][ T1110] usb 5-1: Manufacturer: syz [ 353.506421][ T1110] usb 5-1: SerialNumber: syz [ 353.597380][ T1110] usb 5-1: config 0 descriptor?? [ 353.648611][T17572] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 353.662460][T17511] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 353.705821][ T1110] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 353.755200][ T13] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 353.758027][ T1110] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 353.868795][ T13] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 353.898954][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 353.930183][ T13] usb 3-1: SerialNumber: syz [ 353.992890][ C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 354.030403][T17588] loop3: detected capacity change from 0 to 128 [ 354.192826][ T1110] usb 5-1: USB disconnect, device number 29 [ 354.230458][ T1110] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 354.277973][ T1110] cyberjack 5-1:0.69: device disconnected [ 354.394199][T17604] device syz_tun entered promiscuous mode [ 354.400439][ T5982] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 354.499097][ T13] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 354.521665][ T13] usb 3-1: USB disconnect, device number 33 [ 354.555400][ T5763] udevd[5763]: setting mode of /dev/bus/usb/003/033 to 020664 failed: No such file or directory [ 354.585918][ T5763] udevd[5763]: setting owner of /dev/bus/usb/003/033 to uid=0, gid=0 failed: No such file or directory [ 354.788023][ T5982] usb 4-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 354.814673][ T5982] usb 4-1: config 220 has an invalid interface number: 218 but max is 183 [ 354.824742][ T5982] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 354.878964][ T5982] usb 4-1: config 220 has no interface number 0 [ 354.903926][ T5982] usb 4-1: too many endpoints for config 220 interface 218 altsetting 195: 181, using maximum allowed: 30 [ 354.955709][ T5982] usb 4-1: config 220 interface 218 altsetting 195 has 0 endpoint descriptors, different from the interface descriptor's value: 181 [ 355.027647][ T5982] usb 4-1: config 220 interface 218 has no altsetting 0 [ 355.055660][ T5982] usb 4-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 355.081871][ T5982] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.177300][T17642] loop4: detected capacity change from 0 to 256 [ 355.395169][ T5982] usb 4-1: string descriptor 0 read error: -71 [ 355.418878][ T5982] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 355.470439][T17658] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 355.495025][ T5982] gspca_sn9c2028: read1 error -71 [ 355.522012][ T5982] gspca_sn9c2028: read1 error -71 [ 355.565311][ T5982] gspca_sn9c2028: read1 error -71 [ 355.570510][ T5982] sn9c2028: probe of 4-1:220.218 failed with error -71 [ 355.596250][ T5982] usb 4-1: USB disconnect, device number 28 [ 355.815047][ T1110] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 355.865338][T17678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6336'. [ 356.002494][T17684] netlink: 'syz.1.6340': attribute type 1 has an invalid length. [ 356.033020][T17685] xt_TPROXY: Can be used only with -p tcp or -p udp [ 356.034769][T17684] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.6340'. [ 356.285105][ T1110] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 4 [ 356.305150][ T1110] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 356.325089][ T4684] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 356.340718][T17701] loop4: detected capacity change from 0 to 256 [ 356.374233][ T1110] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 144, changing to 4 [ 356.483744][T17701] FAT-fs (loop4): Directory bread(block 64) failed [ 356.499832][T17701] FAT-fs (loop4): Directory bread(block 65) failed [ 356.510061][T17701] FAT-fs (loop4): Directory bread(block 66) failed [ 356.530137][T17701] FAT-fs (loop4): Directory bread(block 67) failed [ 356.539425][T17701] FAT-fs (loop4): Directory bread(block 68) failed [ 356.551171][T17701] FAT-fs (loop4): Directory bread(block 69) failed [ 356.560590][T17701] FAT-fs (loop4): Directory bread(block 70) failed [ 356.572975][T17701] FAT-fs (loop4): Directory bread(block 71) failed [ 356.576010][ T1110] usb 3-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 356.588849][ T4684] usb 1-1: Using ep0 maxpacket: 32 [ 356.594292][T17701] FAT-fs (loop4): Directory bread(block 72) failed [ 356.604456][T17701] FAT-fs (loop4): Directory bread(block 73) failed [ 356.611550][ T1110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.634973][ T1110] usb 3-1: Product: 㨾忄ꈀ傡﹈螖忢鵻꠮ᑿ鳏諞ݺﳠ梉蘼ﵪ䠄৿궞净隟㦡嗺࡯뉹湟둈좳梴쨠⛚䷧㜤⯎焉饝⟢嶌涜ᑞೊ命㏗嵯扰ᇡ쮔᷌ꥧ㳛큌┓ꋄἐ옉纟ڐꇀ廙㌵Ӄ볆⟀㲓頲벙鰊凖柉╀鋑筵魏왐榏壄瘊솻돰窎쬲⼒䈟࿗츩峯 [ 356.719344][ T1110] usb 3-1: SerialNumber: х [ 356.761815][ T26] audit: type=1326 audit(1784071539.446:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17706 comm="syz.3.6350" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4748f27e59 code=0x0 [ 356.795418][ T4684] usb 1-1: config 0 has an invalid interface number: 119 but max is 0 [ 356.803702][ T4684] usb 1-1: config 0 has no interface number 0 [ 356.825036][ T4684] usb 1-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 356.841709][T17695] loop1: detected capacity change from 0 to 32768 [ 356.848451][ T4684] usb 1-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0xD3, skipping [ 356.868405][ T4684] usb 1-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 356.922986][T17695] XFS (loop1): Mounting V5 Filesystem [ 357.095534][ T4684] usb 1-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 357.115302][ T4684] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.123708][ T4684] usb 1-1: Product: syz [ 357.129717][T17695] XFS (loop1): Ending clean mount [ 357.135210][ T1110] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 357.142063][ T4684] usb 1-1: Manufacturer: syz [ 357.157258][ T4684] usb 1-1: SerialNumber: syz [ 357.165211][ T1110] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 357.192844][ T4684] usb 1-1: config 0 descriptor?? [ 357.244295][ T1110] usb 3-1: USB disconnect, device number 34 [ 357.268918][ T4684] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.119/input/input22 [ 357.503966][ T4186] XFS (loop1): Unmounting Filesystem [ 357.521513][ T4684] input: failed to attach handler mousedev to device input22, error: -2 [ 357.532173][ T4340] udevd[4340]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 357.572974][ T4684] usb 1-1: USB disconnect, device number 35 [ 357.803005][T17742] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 358.161171][T17758] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6371'. [ 358.285936][T17765] device vti1 entered promiscuous mode [ 358.538362][T17787] loop1: detected capacity change from 0 to 64 [ 358.637548][T17789] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6385'. [ 358.692636][ T26] audit: type=1800 audit(1784071541.376:22): pid=17787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6383" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 358.821608][T17796] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 359.108799][T17808] ieee802154 phy0 wpan0: encryption failed: -22 [ 359.227434][T17811] loop1: detected capacity change from 0 to 512 [ 359.251451][T17816] loop2: detected capacity change from 0 to 2048 [ 359.295455][T17811] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 359.313825][T17811] EXT4-fs (loop1): inline encryption not supported [ 359.405787][T17816] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,nombcache,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 359.485276][T17811] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 359.546749][T17811] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 359.596043][T17811] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 359.655228][T17811] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 359.664266][T17811] EXT4-fs (loop1): orphan cleanup on readonly fs [ 359.678927][T17816] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 359.709051][T17811] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.6395: bg 0: block 34: padding at end of block bitmap is not set [ 359.805174][T17811] Quota error (device loop1): write_blk: dquota write failed [ 359.880656][T17811] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 359.905009][T17811] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.6395: Failed to acquire dquot type 1 [ 359.984226][T17811] EXT4-fs (loop1): 1 truncate cleaned up [ 360.010812][T17811] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,bsddf,nodioread_nolock,acl,max_dir_size_kb=0x0000000000000001,noblock_validity,usrjquota=,jqfmt=vfsv0,inode_readahead_blks=0x0000000000001000,inlinecrypt,sysvgroups,,errors=continue. Quota mode: writeback. [ 360.165383][T17811] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 360.209703][T17861] xt_CT: You must specify a L4 protocol and not use inversions on it [ 360.506768][T17877] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 361.183419][T17920] loop0: detected capacity change from 0 to 4096 [ 361.314417][T17938] xt_TCPMSS: Only works on TCP SYN packets [ 361.395046][ T4684] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 361.674997][ T4684] usb 3-1: Using ep0 maxpacket: 16 [ 361.835292][ T4684] usb 3-1: unable to get BOS descriptor or descriptor too short [ 361.868680][T17967] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6470'. [ 361.893078][T17969] loop0: detected capacity change from 0 to 1024 [ 361.935339][ T4684] usb 3-1: config 4 has an invalid interface number: 127 but max is 0 [ 361.956527][ T4684] usb 3-1: config 4 has no interface number 0 [ 361.976260][ T4684] usb 3-1: config 4 interface 127 has no altsetting 0 [ 362.036371][ T4684] usb 3-1: language id specifier not provided by device, defaulting to English [ 362.301081][T17984] netlink: 'syz.3.6477': attribute type 11 has an invalid length. [ 362.456029][ T4684] usb 3-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=2b.48 [ 362.473435][ T4684] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.495370][ T4684] usb 3-1: Product: syz [ 362.505639][T17993] xt_CT: You must specify a L4 protocol and not use inversions on it [ 362.507388][ T4684] usb 3-1: SerialNumber: syz [ 362.609166][T17998] device ip6gretap3 entered promiscuous mode [ 362.729791][T18006] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6486'. [ 362.792856][T18009] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 48297 - 0 [ 362.833687][T18009] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 48297 - 0 [ 362.860439][T18009] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 48297 - 0 [ 362.869771][T18009] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 48297 - 0 [ 362.896852][T18009] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 41758 - 0 [ 362.908816][ T4684] usb 3-1: USB disconnect, device number 35 [ 362.928827][T18009] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 41758 - 0 [ 362.964013][T18009] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 41758 - 0 [ 362.986416][T18009] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 41758 - 0 [ 363.008117][T18009] device geneve4 entered promiscuous mode [ 363.206041][T18026] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6495'. [ 363.256140][T18026] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6495'. [ 363.341801][T18032] loop1: detected capacity change from 0 to 164 [ 363.439612][T18038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6500'. [ 363.461179][T18032] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 363.644552][T18050] device veth1_virt_wifi entered promiscuous mode [ 363.965150][T18070] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6516'. [ 363.993625][T18072] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 364.071871][T18072] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 364.092245][T18072] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 364.133396][T18072] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 364.224765][T18085] netlink: 'syz.0.6524': attribute type 1 has an invalid length. [ 364.267386][T18085] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6524'. [ 364.298186][T18085] NCSI netlink: No device for ifindex 0 [ 364.454074][T18095] netlink: 'syz.0.6529': attribute type 11 has an invalid length. [ 364.489745][T18095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6529'. [ 364.875099][ T1110] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 365.145116][ T1110] usb 3-1: Using ep0 maxpacket: 32 [ 365.217170][T18130] loop0: detected capacity change from 0 to 8192 [ 365.263912][T18130] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 365.285224][ T1110] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 365.295554][ T1110] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 365.301113][T18139] loop3: detected capacity change from 0 to 4096 [ 365.315467][T18130] REISERFS (device loop0): using ordered data mode [ 365.322019][T18130] reiserfs: using flush barriers [ 365.366274][T18130] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 365.393219][T18147] netlink: 'syz.1.6553': attribute type 1 has an invalid length. [ 365.444437][T18130] REISERFS (device loop0): checking transaction log (loop0) [ 365.487205][T18130] REISERFS (device loop0): Using r5 hash to sort names [ 365.515165][ T1110] usb 3-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0 [ 365.534146][T18139] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 365.544978][ T1110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.553034][ T1110] usb 3-1: Product: syz [ 365.575330][T18130] reiserfs: enabling write barrier flush mode [ 365.592768][ T1110] usb 3-1: Manufacturer: syz [ 365.606814][ T1110] usb 3-1: SerialNumber: syz [ 365.631279][ T1110] usb 3-1: config 0 descriptor?? [ 365.707407][ T1110] qmi_wwan 3-1:0.0: bogus CDC Union: master=1, slave=0 [ 365.714473][ T1110] qmi_wwan: probe of 3-1:0.0 failed with error -22 [ 365.743775][T18130] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 365.820935][T18130] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 365.857972][T18130] REISERFS (device loop0): Remounting filesystem read-only [ 365.896438][T18130] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 365.945487][T18170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6565'. [ 365.954473][T18170] openvswitch: netlink: Actions may not be safe on all matching packets [ 365.970181][ T1110] usb 3-1: USB disconnect, device number 36 [ 365.980588][T18130] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 366.022350][T18173] xt_l2tp: wrong L2TP version: 0 [ 366.032470][T18130] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 366.053375][T18130] REISERFS error (device loop0): zam-7001 reiserfs_find_entry: io error [ 366.072417][T18130] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 366.105312][T18130] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 366.141455][T18130] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 366.175733][T18130] REISERFS warning (device loop0): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 366.245031][ T5982] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 366.277274][ T4192] ------------[ cut here ]------------ [ 366.299601][ T4192] kernel BUG at fs/reiserfs/journal.c:1913! [ 366.309930][ T4192] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 366.316203][ T4192] CPU: 1 PID: 4192 Comm: syz-executor Not tainted syzkaller #0 [ 366.323796][ T4192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 366.333904][ T4192] RIP: 0010:do_journal_release+0x4e0/0x4f0 [ 366.339804][ T4192] Code: bd ff e9 ab fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 09 fd ff ff 4c 89 ff e8 7a 90 bd ff e9 fc fc ff ff e8 00 72 78 ff <0f> 0b e8 f9 71 78 ff 0f 0b 0f 1f 80 00 00 00 00 41 57 41 56 53 48 [ 366.359460][ T4192] RSP: 0018:ffffc90002e2fb80 EFLAGS: 00010293 [ 366.365561][ T4192] RAX: ffffffff820080a0 RBX: 1ffff920005c5f74 RCX: ffff88801add8000 [ 366.373563][ T4192] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 366.381570][ T4192] RBP: ffffc90002e2fc78 R08: ffffc90002e2fbf7 R09: ffffc90002e2fbc0 [ 366.389584][ T4192] R10: dffffc0000000000 R11: fffff520005c5f7f R12: ffffc90004611000 [ 366.397593][ T4192] R13: dffffc0000000000 R14: 1ffff1100f7964cf R15: 0000000000000000 [ 366.405602][ T4192] FS: 0000555575958500(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 366.414790][ T4192] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 366.421413][ T4192] CR2: 0000555583e86a38 CR3: 0000000061c34000 CR4: 00000000003506e0 [ 366.429432][ T4192] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 366.437440][ T4192] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 366.445450][ T4192] Call Trace: [ 366.448758][ T4192] [ 366.451713][ T4192] ? journal_release+0x30/0x30 [ 366.456514][ T4192] ? do_raw_spin_unlock+0x11d/0x230 [ 366.461832][ T4192] journal_release+0x1b/0x30 [ 366.466486][ T4192] reiserfs_put_super+0x264/0x500 [ 366.471550][ T4192] ? hook_inode_free_security+0xa0/0xa0 [ 366.477237][ T4192] ? reiserfs_dirty_inode+0x260/0x260 [ 366.482648][ T4192] ? evict_inodes+0x686/0x6e0 [ 366.487450][ T4192] ? fscrypt_destroy_keyring+0x287/0x2a0 [ 366.493183][ T4192] ? reiserfs_dirty_inode+0x260/0x260 [ 366.498593][ T4192] generic_shutdown_super+0x130/0x300 [ 366.501513][ T5982] usb 2-1: Using ep0 maxpacket: 32 [ 366.504070][ T4192] kill_block_super+0x7c/0xe0 [ 366.504097][ T4192] deactivate_locked_super+0x93/0xf0 [ 366.519221][ T4192] cleanup_mnt+0x426/0x4d0 [ 366.523688][ T4192] task_work_run+0x125/0x1a0 [ 366.528381][ T4192] exit_to_user_mode_loop+0x10f/0x130 [ 366.533844][ T4192] exit_to_user_mode_prepare+0xee/0x180 [ 366.539419][ T4192] syscall_exit_to_user_mode+0x16/0x40 [ 366.544995][ T4192] do_syscall_64+0x58/0xa0 [ 366.549439][ T4192] ? clear_bhb_loop+0x30/0x80 [ 366.554199][ T4192] ? clear_bhb_loop+0x30/0x80 [ 366.558896][ T4192] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 366.564830][ T4192] RIP: 0033:0x7f4fa13e7097 [ 366.569286][ T4192] Code: a2 c7 05 5c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 366.588924][ T4192] RSP: 002b:00007fffccb3b518 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 366.597387][ T4192] RAX: 0000000000000000 RBX: 00007f4fa147b2ca RCX: 00007f4fa13e7097 [ 366.605401][ T4192] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffccb3b5d0 [ 366.613405][ T4192] RBP: 00007fffccb3b5d0 R08: 00007fffccb3c5d0 R09: 00000000ffffffff [ 366.621386][ T4192] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffccb3c660 [ 366.629369][ T4192] R13: 00007f4fa147b2ca R14: 0000000000059614 R15: 00007fffccb3c6a0 [ 366.635535][ T5982] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.637358][ T4192] [ 366.651263][ T4192] Modules linked in: [ 366.656757][ T5982] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.702654][ T4192] ---[ end trace e6e8d3beacfeed5e ]--- [ 366.708328][ T4192] RIP: 0010:do_journal_release+0x4e0/0x4f0 [ 366.714178][ T4192] Code: bd ff e9 ab fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 09 fd ff ff 4c 89 ff e8 7a 90 bd ff e9 fc fc ff ff e8 00 72 78 ff <0f> 0b e8 f9 71 78 ff 0f 0b 0f 1f 80 00 00 00 00 41 57 41 56 53 48 [ 366.734159][ T4192] RSP: 0018:ffffc90002e2fb80 EFLAGS: 00010293 [ 366.740799][ T4192] RAX: ffffffff820080a0 RBX: 1ffff920005c5f74 RCX: ffff88801add8000 [ 366.748943][ T4192] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 366.757003][ T4192] RBP: ffffc90002e2fc78 R08: ffffc90002e2fbf7 R09: ffffc90002e2fbc0 [ 366.772418][ T4192] R10: dffffc0000000000 R11: fffff520005c5f7f R12: ffffc90004611000 [ 366.781798][ T4192] R13: dffffc0000000000 R14: 1ffff1100f7964cf R15: 0000000000000000 [ 366.785931][ T5982] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 366.793675][ T4192] FS: 0000555575958500(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 366.810439][ T4192] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 366.817484][ T4192] CR2: 00007f693a230158 CR3: 0000000061c34000 CR4: 00000000003506e0 [ 366.825567][ T5982] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 366.825595][ T5982] usb 2-1: Product: syz [ 366.825609][ T5982] usb 2-1: Manufacturer: syz [ 366.845036][ T4192] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 366.853422][ T4192] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 366.862145][ T4192] Kernel panic - not syncing: Fatal exception [ 366.868459][ T4192] Kernel Offset: disabled [ 366.872800][ T4192] Rebooting in 86400 seconds..