last executing test programs: 1.711958059s ago: executing program 0 (id=9739): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280), 0x8002, 0x0) write$vga_arbiter(r0, 0x0, 0x0) 1.548110113s ago: executing program 0 (id=9744): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendto$inet(r0, &(0x7f0000000040)="8932ff0f6d7ff1cec405cc64b12e385dcf2a3cd06cd4aadea45cb2a5cd0ae16461de06c1fe362772371652bfa497bfdd83f17a215328ed11076f8577e8b3df96c38119a4740fa5b6cfa742028555d065e91cda2a8e874fdf4a8bb77cfd9cdc0da81d6a1d91de9ec8c7745c1141ad", 0x6e, 0x6000c804, 0x0, 0x0) 1.438735715s ago: executing program 1 (id=9747): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r0, &(0x7f0000000200), 0x0}, 0x20) 1.386540127s ago: executing program 0 (id=9750): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000300)={0x0, 0xfffffffffffffd53}) 1.22817519s ago: executing program 1 (id=9753): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x800, 0x0) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000400)=0xffffffffffffffff) 1.219351531s ago: executing program 0 (id=9755): r0 = syz_open_dev$video4linux(&(0x7f0000000380), 0x2, 0x20) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000003c0)={0x0, 0x0, {0x4006, 0x80000000, 0x300e, 0x1, 0xa, 0x3, 0x1, 0x6}}) 1.095639224s ago: executing program 4 (id=9757): r0 = syz_mount_image$msdos(&(0x7f0000000740), &(0x7f0000000000)='./file0\x00', 0x3800014, &(0x7f0000000080)={[{@nodots}, {@dots}, {@dots}, {@fat=@flush}, {@dots}, {@fat=@errors_remount}, {@fat=@gid}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@nodots}, {@dots}, {@dots}, {@fat=@dos1xfloppy}, {@dots}, {@fat=@codepage={'codepage', 0x3d, '860'}}, {@dots}, {@fat=@quiet}, {@dots}, {@dots}, {@dots}, {@dots}, {@dots}, {@fat=@dos1xfloppy}]}, 0x0, 0x218, &(0x7f0000000dc0)="$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") getdents64(r0, &(0x7f0000001000)=""/4096, 0x1000) 1.087080394s ago: executing program 0 (id=9758): r0 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="2c0000006d0001000000000000000000100000000c0090000000000000f6ff000c0036"], 0x2c}], 0x1}, 0x0) 1.007652966s ago: executing program 1 (id=9760): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000038000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) 941.336008ms ago: executing program 0 (id=9762): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) 890.925949ms ago: executing program 1 (id=9763): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c00000000020104000000000000000002000000300001802c00018014000300fe80000000000000000000000000002514000400ff010000000000000000000000000001240003800c000280040001008900000014000180080001000000000008fe0100ac1414aa240002801400018008000100ac1414aa08000200ac14143b0c0002"], 0x8c}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) 869.959199ms ago: executing program 4 (id=9765): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="037a0000b5000000007cfe650000feff"], 0xc8) 775.342932ms ago: executing program 2 (id=9766): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x28582, 0x0) ioctl$SNDCTL_MIDI_INFO(r0, 0xc074510c, &(0x7f0000000080)={"81f044301837d917acf20c662025425326df451385324f8593547028e110", 0x6, 0xac3f, 0x6, [0xc9ea, 0x0, 0x3, 0x50, 0x7, 0x373c, 0x9727, 0x1, 0xfff, 0x7, 0x6, 0xfffffffe, 0x2, 0x8, 0x2, 0x511, 0x80000001, 0x1]}) 745.491742ms ago: executing program 3 (id=9767): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080), 0xc) 683.883944ms ago: executing program 4 (id=9768): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)=@base={0xa, 0x16, 0xb4, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000300)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x79, 0x0, 0x0, 0xc0}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}]}, &(0x7f0000000380)='GPL\x00', 0x2, 0xee, &(0x7f0000000580)=""/238}, 0x21) 641.750165ms ago: executing program 1 (id=9769): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=@newtaction={0x78, 0x1e, 0x109, 0x70bd2d, 0x25dfdbf5, {}, [{0x64, 0x1, [@m_mirred={0x34, 0x18, 0x0, 0x0, {{0xb, 0x9}, {0x4}, {0x6, 0x6, "ccc2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_ife={0x2c, 0xd, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x78}, 0x1, 0x2b1e, 0x0, 0x4000800}, 0x0) 620.258045ms ago: executing program 2 (id=9770): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001e0001eb25bd70000000000001"], 0x114}], 0x1}, 0x0) 619.636295ms ago: executing program 3 (id=9771): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) 510.333098ms ago: executing program 4 (id=9772): r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000080)=0x36) 474.372719ms ago: executing program 3 (id=9773): r0 = eventfd2(0x33, 0x800) readv(r0, &(0x7f0000002200)=[{&(0x7f00000021c0)=""/6, 0x6}], 0x1) 461.121849ms ago: executing program 2 (id=9774): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x1fb}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_HASH_MAX={0x8}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0xfe}]}}}]}, 0x5c}}, 0x40000) 412.36515ms ago: executing program 4 (id=9775): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x64, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x4ad}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000000}, 0x24008850) 359.119852ms ago: executing program 3 (id=9776): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001e00010026bd080000000000020100800c000100020000b26a000000140003"], 0x114}], 0x1}, 0x0) 308.260293ms ago: executing program 4 (id=9777): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000a900)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}]}]}]}]}, @NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x108}}, 0x0) 238.243855ms ago: executing program 2 (id=9778): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)='\b\x00\x00\x00', 0x4}], 0x1) 223.617405ms ago: executing program 1 (id=9779): r0 = syz_usb_connect(0x3, 0x9f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b081000010000000109028d0001010080fa0904000005ffffff0007050302000200070584"], 0x0) syz_usb_ep_read(r0, 0x3, 0x0, 0x0) 128.270227ms ago: executing program 2 (id=9780): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, 0x0) 100.668858ms ago: executing program 3 (id=9781): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)={0x1000a4, 0x7a, 0x0, {r0}}, 0x20) 24.08543ms ago: executing program 2 (id=9782): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x10, 0x3, "91abc12404cf378042f26c43"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x8c}}, 0x0) 0s ago: executing program 3 (id=9783): r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r0, &(0x7f0000000480)=[{{&(0x7f0000000000)=@phonet={0x23, 0x6e, 0x0, 0xa}, 0x80, 0x0}}], 0x1, 0x44) kernel console output (not intermixed with test programs): children = 9 [ 366.337860][T18381] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 366.401144][T18381] Remounting filesystem read-only [ 366.414358][T18381] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 366.446424][T18381] NILFS error (device loop4): nilfs_bmap_last_key: broken bmap (inode number=16) [ 366.493288][T18381] NILFS (loop4): error -5 truncating bmap (ino=16) [ 366.602613][ T4195] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 366.603047][ T7120] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 367.070787][ T7120] usb 2-1: unable to get BOS descriptor or descriptor too short [ 367.113771][T18446] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 367.175299][ T7120] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 367.197212][ T7120] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 367.394688][ T7120] usb 2-1: New USB device found, idVendor=0582, idProduct=4201, bcdDevice= 0.40 [ 367.424125][ T7120] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.448027][ T7120] usb 2-1: Product: syz [ 367.482719][ T7120] usb 2-1: Manufacturer: syz [ 367.487721][ T7120] usb 2-1: SerialNumber: syz [ 367.568919][T18465] xt_CT: You must specify a L4 protocol and not use inversions on it [ 367.885491][ T7120] usb 2-1: unit 2 not found! [ 367.890284][ T7120] usb 2-1: unit 240 not found! [ 367.959570][T18481] dlm: dev_write: no op 0 0 [ 367.974106][ T7120] usb 2-1: USB disconnect, device number 27 [ 368.031879][T18485] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6456'. [ 369.154264][ T26] audit: type=1400 audit(1792151175.087:19): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=18543 comm="syz.0.6496" [ 369.372011][ T7120] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 369.447075][T18557] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 369.499814][T18557] overlayfs: missing 'lowerdir' [ 369.665456][T18569] x_tables: unsorted entry at hook 3 [ 369.765906][ T7120] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 369.773949][ T7120] usb 2-1: config 0 has no interface number 0 [ 369.810960][ T7120] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 369.855315][ T7120] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 369.865738][T18579] netlink: 'syz.3.6503': attribute type 1 has an invalid length. [ 369.929799][T16482] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 370.004457][ T7120] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 370.013703][T18585] netlink: 'syz.0.6506': attribute type 1 has an invalid length. [ 370.030670][ T7120] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 370.059088][ T7120] usb 2-1: Product: syz [ 370.079302][T18585] netlink: 228 bytes leftover after parsing attributes in process `syz.0.6506'. [ 370.088719][ T7120] usb 2-1: SerialNumber: syz [ 370.126307][ T7120] usb 2-1: config 0 descriptor?? [ 370.176628][ T7120] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 370.193052][T18591] dlm: non-version read from control device 8192 [ 370.214774][ T7120] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input27 [ 370.354510][T16482] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 370.474336][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 370.488134][ T7120] usb 2-1: USB disconnect, device number 28 [ 370.504394][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 370.511394][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 370.527686][ T7120] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 370.531517][T16482] usb 5-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 370.586020][T16482] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 370.624316][T16482] usb 5-1: Product: syz [ 370.636138][T18608] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.6517'. [ 370.644084][T16482] usb 5-1: Manufacturer: syz [ 370.684377][T18609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6518'. [ 370.693713][T18608] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 370.708430][T16482] usb 5-1: Found UVC 1.00 device syz (046d:0821) [ 370.956389][T16482] usb 5-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 371.006743][T16482] uvcvideo 5-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 371.026177][T16482] uvcvideo 5-1:1.1: Failed to initialize the device (-5). [ 371.109172][T16482] usb 5-1: USB disconnect, device number 29 [ 371.313527][T18625] xt_ipvs: protocol family 7 not supported [ 371.629912][T18647] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 371.924300][ T7120] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 371.975006][T18663] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6543'. [ 372.054101][T18663] openvswitch: netlink: Missing key (keys=40, expected=80) [ 372.155807][T18631] loop1: detected capacity change from 0 to 32768 [ 372.184599][ T7120] usb 1-1: Using ep0 maxpacket: 16 [ 372.309415][ T7120] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 372.344089][ T7120] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFC, skipping [ 372.414711][ T7120] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 372.489814][T18631] XFS (loop1): Mounting V5 Filesystem [ 372.599281][T18631] XFS (loop1): Ending clean mount [ 372.635649][T10457] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 372.668182][ T7120] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 372.694088][ T7120] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.732647][ T7120] usb 1-1: Product: syz [ 372.742729][ T7120] usb 1-1: Manufacturer: syz [ 372.762874][ T7120] usb 1-1: SerialNumber: syz [ 372.773117][ T4371] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 372.788403][T18671] loop4: detected capacity change from 0 to 32768 [ 372.796862][ T7120] usb 1-1: config 0 descriptor?? [ 372.835162][T18671] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.6547 (18671) [ 372.858231][T18631] XFS (loop1): Quotacheck needed: Please wait. [ 372.914103][T18671] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 372.923776][T18671] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 372.964139][T18671] BTRFS info (device loop4): use zstd compression, level 3 [ 372.971448][T18671] BTRFS info (device loop4): using free space tree [ 372.994117][T18671] BTRFS info (device loop4): has skinny extents [ 373.022088][T18631] XFS (loop1): Quotacheck: Done. [ 373.031616][T10457] usb 3-1: config 26 has an invalid descriptor of length 0, skipping remainder of the config [ 373.082840][T10457] usb 3-1: config 26 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 373.162764][ T7120] usb 1-1: USB disconnect, device number 30 [ 373.188044][ T4186] XFS (loop1): Unmounting Filesystem [ 373.194380][ T4371] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 373.215661][ T4371] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 373.244415][T10457] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 373.254168][T10457] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 373.266282][T10457] usb 3-1: SerialNumber: syz [ 373.284996][T18671] BTRFS info (device loop4): enabling ssd optimizations [ 373.335312][T10457] cdc_ether 3-1:26.0: skipping garbage [ 373.340823][T10457] usb 3-1: bad CDC descriptors [ 373.424528][ T4371] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 373.443962][ T4371] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.463998][ T4371] usb 4-1: Product: syz [ 373.468701][ T4371] usb 4-1: Manufacturer: syz [ 373.473360][ T4371] usb 4-1: SerialNumber: syz [ 373.570938][T10457] usb 3-1: USB disconnect, device number 30 [ 373.804718][ T4371] speedtch 4-1:1.0: speedtch_bind: data interface not found! [ 373.812209][ T4371] speedtch 4-1:1.0: usbatm_usb_probe: bind failed: -19! [ 374.041666][ T4371] usb 4-1: USB disconnect, device number 27 [ 374.163447][T18706] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6564'. [ 374.224297][T18706] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6564'. [ 374.267495][T18706] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6564'. [ 374.501079][T18716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6554'. [ 374.710452][T18722] device bond5 entered promiscuous mode [ 374.780192][T18722] 8021q: adding VLAN 0 to HW filter on device bond5 [ 374.897282][T18738] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 375.076943][T18743] IPv6: sit1: Disabled Multicast RS [ 375.246267][T18755] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6574'. [ 375.308429][T18755] rdma_rxe: rxe_register_device failed with error -23 [ 375.362575][T18755] rdma_rxe: failed to add bond_slave_1 [ 375.432873][T11312] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 375.753041][T18788] device netdevsim0 entered promiscuous mode [ 375.753394][T18789] xt_ipcomp: unknown flags 12 [ 376.104502][T11312] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 376.113634][T11312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.145287][T18808] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6600'. [ 376.164056][T11312] usb 3-1: Product: syz [ 376.168397][T11312] usb 3-1: Manufacturer: syz [ 376.173014][T11312] usb 3-1: SerialNumber: syz [ 376.209510][T11312] usb 3-1: config 0 descriptor?? [ 376.478696][T11312] usb 3-1: ignoring: probably an ADSL modem [ 376.764351][T11312] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 376.804406][T11312] usb 3-1: USB disconnect, device number 31 [ 376.837093][T18843] netlink: 'syz.4.6618': attribute type 2 has an invalid length. [ 376.874134][T18843] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6618'. [ 377.574003][ T26] audit: type=1107 audit(1792151183.497:20): pid=18885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 377.725853][T18894] xt_ecn: cannot match TCP bits for non-tcp packets [ 377.742156][ T4371] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 377.813260][ C0] vkms_vblank_simulate: vblank timer overrun [ 378.003229][T11311] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 378.256082][T18915] netlink: 5 bytes leftover after parsing attributes in process `syz.2.6663'. [ 378.309329][T18915] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 378.324243][T11311] usb 2-1: Using ep0 maxpacket: 8 [ 378.354487][T18915] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 378.394523][T18915] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 378.405426][ T4371] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 378.449219][ T4371] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 378.470793][T11312] lo speed is unknown, defaulting to 1000 [ 378.494168][ T4371] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 378.530330][T11311] usb 2-1: unable to get BOS descriptor or descriptor too short [ 378.534540][ T4371] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 378.612556][ T4371] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 378.646988][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.654370][ T4371] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.846131][T11311] usb 2-1: New USB device found, idVendor=17cc, idProduct=041c, bcdDevice= 0.40 [ 378.864068][T11311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.901584][T11311] usb 2-1: Product: syz [ 378.914063][T11311] usb 2-1: Manufacturer: syz [ 378.939066][T11311] usb 2-1: SerialNumber: syz [ 379.254234][T18955] netlink: 'syz.2.6670': attribute type 2 has an invalid length. [ 379.369524][T11311] usb 2-1: USB disconnect, device number 29 [ 379.494580][ T4371] usb 4-1: USB disconnect, device number 28 [ 379.907104][T18977] device geneve1 entered promiscuous mode [ 380.218688][T18944] loop4: detected capacity change from 0 to 32768 [ 380.424267][T19013] IPv6: Can't replace route, no match found [ 380.551167][T18944] XFS (loop4): Mounting V5 Filesystem [ 380.857660][T18944] XFS (loop4): Ending clean mount [ 380.909286][T18944] XFS (loop4): Quotacheck needed: Please wait. [ 381.146655][T18944] XFS (loop4): Quotacheck: Done. [ 381.396836][ T4195] XFS (loop4): Unmounting Filesystem [ 381.777031][T19081] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6718'. [ 382.333288][T19112] CIFS: VFS: bad security option: krb5iż [ 382.585414][T19123] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6739'. [ 382.639095][T19128] loop1: detected capacity change from 0 to 512 [ 382.740884][T11311] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 382.788087][T19128] EXT4-fs (loop1): inline encryption not supported [ 382.824093][T19128] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 382.824093][T19128] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 382.824093][T19128] [ 382.908361][T19128] EXT4-fs (loop1): Ignoring removed bh option [ 382.924934][T19128] EXT4-fs (loop1): Test dummy encryption mode enabled [ 382.931751][T19128] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 383.016555][T19128] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 383.034828][T19128] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.6743: invalid indirect mapped block 2683928664 (level 1) [ 383.086044][T19128] EXT4-fs (loop1): 1 truncate cleaned up [ 383.101905][T19128] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,max_batch_time=0x0000000000000008,nodiscard,inlinecrypt,usrjquota=.min_batch_time=0x0000000000001000,jqfmt=vfsold,jqfmt=vfsv0,nouser_xattr,bh,test_dummy_encryption,,,errors=continue. Quota mode: writeback. [ 383.261919][T11311] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 383.294082][T11311] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 383.430428][T19156] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6752'. [ 383.474133][T19156] netlink: 'syz.2.6752': attribute type 1 has an invalid length. [ 383.512090][T19156] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6752'. [ 383.548692][T11311] usb 5-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 383.566784][T19156] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 383.592639][T11311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.622890][T11311] usb 5-1: Product: syz [ 383.643090][T11311] usb 5-1: Manufacturer: syz [ 383.663396][T11311] usb 5-1: SerialNumber: syz [ 383.757068][T11311] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 383.803657][T11311] ums-sddr09 5-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 383.803657][T11311] Please send a copy of this message to and [ 384.017284][T11311] ums-sddr09: probe of 5-1:1.0 failed with error -22 [ 384.084083][T11311] usb 5-1: USB disconnect, device number 30 [ 384.287719][T19136] loop3: detected capacity change from 0 to 40427 [ 384.408977][T19136] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x4 [ 384.495015][T19136] F2FS-fs (loop3): invalid crc value [ 384.540061][T19136] F2FS-fs (loop3): Found nat_bits in checkpoint [ 384.766735][T19136] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 384.814584][T19136] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 385.288838][T19214] loop4: detected capacity change from 0 to 4096 [ 385.327540][T19214] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 385.583174][T19214] ntfs3: loop4: failed to convert "c46c" to iso8859-15 [ 386.230789][T19260] xt_TCPMSS: Only works on TCP SYN packets [ 386.333834][T19268] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6806'. [ 386.545804][T19279] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.636694][T19279] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 387.550868][ T4371] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 387.822947][ T4371] usb 2-1: Using ep0 maxpacket: 8 [ 387.945175][ T4371] usb 2-1: config 0 has an invalid interface number: 32 but max is 0 [ 387.969986][ T4371] usb 2-1: config 0 has no interface number 0 [ 387.984906][T19367] netlink: 'syz.0.6855': attribute type 1 has an invalid length. [ 387.995464][ T4371] usb 2-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 388.024414][ T4371] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.059969][T19371] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 388.090649][ T4371] usb 2-1: config 0 descriptor?? [ 388.155895][ T4371] usb-storage 2-1:0.32: USB Mass Storage device detected [ 388.214892][ T4371] usb-storage 2-1:0.32: device ignored [ 388.302278][T19384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6862'. [ 388.391402][T10457] usb 2-1: USB disconnect, device number 30 [ 388.807667][T19415] loop3: detected capacity change from 0 to 128 [ 388.946818][T19422] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6883'. [ 389.039096][T19426] loop1: detected capacity change from 0 to 128 [ 389.178035][T19426] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 389.316186][T19426] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 389.327234][T19439] ebt_among: dst integrity fail: 200 [ 389.508203][T11311] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 389.842605][T19451] loop3: detected capacity change from 0 to 4096 [ 389.906496][T19461] netlink: 'syz.1.6899': attribute type 1 has an invalid length. [ 389.915154][T11311] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 389.941962][T11311] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 389.963759][T19461] openvswitch: netlink: Actions may not be safe on all matching packets [ 389.983333][T11311] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 390.003321][T11311] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 390.026950][T19451] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 390.080520][T11311] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 390.121624][T11311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.455822][ T1325] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 390.631775][T11311] usb 3-1: USB disconnect, device number 32 [ 390.888175][ T1325] usb 5-1: not running at top speed; connect to a high speed hub [ 391.167046][ T1325] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 391.203170][ T1325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.242670][ T1325] usb 5-1: Product: syz [ 391.257235][ T1325] usb 5-1: Manufacturer: syz [ 391.277401][ T1325] usb 5-1: SerialNumber: syz [ 391.356277][ T1325] keyspan 5-1:1.0: Keyspan 4 port adapter converter detected [ 391.391056][ T1325] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 391.402151][ T1325] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 391.419412][T19519] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6930'. [ 391.464655][ T1325] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 391.474462][ T1325] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 391.855245][ T1325] usb 5-1: USB disconnect, device number 31 [ 391.886518][T19536] netlink: 'syz.0.6938': attribute type 6 has an invalid length. [ 391.895530][ T1325] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 391.935669][ T1325] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 391.985711][ T1325] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 392.041591][ T1325] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 392.089284][ T1325] keyspan 5-1:1.0: device disconnected [ 392.578343][T19575] jffs2: Bad value for 'compr' [ 392.625399][T19578] (unnamed net_device) (uninitialized): ARP validating cannot be used with MII monitoring [ 393.174385][ T1325] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 393.435594][T19630] xt_l2tp: missing protocol rule (udp|l2tpip) [ 393.619088][ T1325] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.639432][ T1325] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 393.690033][ T1325] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 393.730851][ T1325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.763661][ T1325] usb 5-1: config 0 descriptor?? [ 393.867327][T19654] netlink: 'syz.1.6996': attribute type 3 has an invalid length. [ 393.882168][T19653] xt_hl: Unknown Hop Limit match mode: 4 [ 394.285067][ T1325] Bluetooth: Can't get state to change to load ram patch err [ 394.310049][ T1325] Bluetooth: Loading patch file failed [ 394.328279][ T1325] ath3k: probe of 5-1:0.0 failed with error -71 [ 394.356135][ T1325] usb 5-1: USB disconnect, device number 32 [ 394.395496][T19684] netlink: 'syz.2.7009': attribute type 8 has an invalid length. [ 394.424097][T19684] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7009'. [ 394.751402][T19703] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7019'. [ 394.814239][T19703] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7019'. [ 394.878949][T19712] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7022'. [ 394.998333][T19718] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 395.001722][T19719] loop1: detected capacity change from 0 to 1024 [ 395.266492][ T154] hfsplus: b-tree write err: -5, ino 8 [ 395.294256][T19733] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7033'. [ 396.016048][T19783] usb usb8: usbfs: process 19783 (syz.2.7060) did not claim interface 0 before use [ 396.194259][T19796] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7065'. [ 396.203352][T19796] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7065'. [ 396.207513][T19799] netlink: 236 bytes leftover after parsing attributes in process `syz.4.7067'. [ 396.284229][T19796] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7065'. [ 396.576817][T19816] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7076'. [ 396.707092][ T1325] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 396.725047][T19825] misc userio: Invalid payload size [ 396.845702][T19834] loop3: detected capacity change from 0 to 128 [ 397.186552][ T1325] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 397.213578][ T1325] usb 3-1: config 0 has no interface number 0 [ 397.240334][ T1325] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 397.302998][ T1325] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 397.477929][T19871] netlink: 'syz.1.7103': attribute type 5 has an invalid length. [ 397.529134][ T1325] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 397.549006][ T1325] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 397.594061][ T1325] usb 3-1: Product: syz [ 397.609119][ T1325] usb 3-1: SerialNumber: syz [ 397.641368][ T1325] usb 3-1: config 0 descriptor?? [ 397.672554][T19875] loop4: detected capacity change from 0 to 2048 [ 397.718412][ T1325] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 397.736868][ T1325] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input29 [ 397.870755][T19875] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 398.007217][T19875] UDF-fs: unknown compression code (0) [ 398.045007][T19887] loop1: detected capacity change from 0 to 1024 [ 398.074198][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 398.094088][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 398.101278][ T1325] usb 3-1: USB disconnect, device number 33 [ 398.129254][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -2 [ 398.136402][ T1325] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 398.193182][T19887] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 398.369635][T19899] loop4: detected capacity change from 0 to 512 [ 398.468165][T19899] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 398.607522][T19899] EXT4-fs (loop4): required journal recovery suppressed and not mounted read-only [ 398.668866][T19914] loop3: detected capacity change from 0 to 256 [ 399.604303][T10457] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 399.984979][T10457] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 400.003371][T10457] usb 4-1: config 0 has no interface number 0 [ 400.033789][T10457] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 400.084043][T10457] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 400.251029][T10457] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 400.270496][T10457] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 400.299200][T10457] usb 4-1: Product: syz [ 400.319398][T10457] usb 4-1: SerialNumber: syz [ 400.358578][T10457] usb 4-1: config 0 descriptor?? [ 400.420533][T10457] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 400.457539][T19995] loop4: detected capacity change from 0 to 4096 [ 400.459052][T10457] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input31 [ 400.824164][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 400.834441][T10457] usb 4-1: USB disconnect, device number 29 [ 400.852425][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 400.859516][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 400.873899][T10457] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 401.004217][T11311] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 401.239547][ T26] audit: type=1400 audit(1792151207.167:21): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name=3A3A0AE10CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A552C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=20010 comm="syz.4.7170" [ 401.525025][T11311] usb 3-1: unable to get BOS descriptor or descriptor too short [ 401.699378][T11311] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 401.744051][T11311] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 401.993686][T11311] usb 3-1: New USB device found, idVendor=0582, idProduct=4201, bcdDevice= 0.40 [ 402.031089][T11311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.048131][T11311] usb 3-1: Product: syz [ 402.072443][T11311] usb 3-1: Manufacturer: syz [ 402.087597][T11311] usb 3-1: SerialNumber: syz [ 402.180081][T20064] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 402.270353][ T1325] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 402.510488][T11311] usb 3-1: unit 2 not found! [ 402.519733][T11311] usb 3-1: unit 240 not found! [ 402.590169][T11311] usb 3-1: USB disconnect, device number 34 [ 402.744309][ T1325] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 402.752574][T11314] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 402.770514][ T1325] usb 1-1: config 0 has no interface number 0 [ 402.780512][ T1325] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 402.822432][ T1325] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 402.866704][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 402.984390][ T1325] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 402.993496][ T1325] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 403.021887][ T1325] usb 1-1: Product: syz [ 403.031948][ T1325] usb 1-1: SerialNumber: syz [ 403.073132][ T1325] usb 1-1: config 0 descriptor?? [ 403.152257][ T1325] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 403.170801][ T1325] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input32 [ 403.194374][T11314] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 403.234363][T11314] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 403.267721][T11314] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 403.309291][T11314] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 403.431790][ T7120] usb 1-1: USB disconnect, device number 31 [ 403.444061][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 403.451045][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 403.460764][T11314] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 403.470446][T11314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 403.470796][ T7120] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 403.498990][T11314] usb 5-1: SerialNumber: syz [ 404.325500][ T1325] usb 5-1: USB disconnect, device number 33 [ 404.903844][T20116] device ipip0 entered promiscuous mode [ 404.911510][T20115] loop3: detected capacity change from 0 to 1024 [ 405.201333][T20132] __nla_validate_parse: 4 callbacks suppressed [ 405.201351][T20132] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7228'. [ 405.224136][T11314] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 405.485098][T20144] netlink: 'syz.0.7247': attribute type 1 has an invalid length. [ 405.553750][T20146] loop3: detected capacity change from 0 to 2048 [ 405.681650][T20146] NILFS (loop3): invalid segment: Magic number mismatch [ 405.714059][T20146] NILFS (loop3): trying rollback from an earlier position [ 405.714325][T11314] usb 5-1: unable to get BOS descriptor or descriptor too short [ 405.849460][T20146] NILFS (loop3): recovery complete [ 405.881302][T11314] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 405.908905][T20167] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7245'. [ 405.911208][T20166] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 405.934110][T11314] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 406.214893][T11314] usb 5-1: New USB device found, idVendor=0582, idProduct=4201, bcdDevice= 0.40 [ 406.248520][T11314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.274048][T11314] usb 5-1: Product: syz [ 406.300670][T11314] usb 5-1: Manufacturer: syz [ 406.324059][T11314] usb 5-1: SerialNumber: syz [ 406.362976][T20187] netlink: 'syz.3.7253': attribute type 1 has an invalid length. [ 406.714514][T11314] usb 5-1: unit 2 not found! [ 406.719253][T11314] usb 5-1: unit 240 not found! [ 406.756885][T11314] usb 5-1: USB disconnect, device number 34 [ 407.047218][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 407.348647][T20207] loop4: detected capacity change from 0 to 2048 [ 407.468710][T20207] NILFS (loop4): invalid segment: Magic number mismatch [ 407.507686][T20207] NILFS (loop4): trying rollback from an earlier position [ 407.589232][T20207] NILFS (loop4): recovery complete [ 407.635234][T20228] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 407.994412][T20241] loop3: detected capacity change from 0 to 2048 [ 408.139434][T20254] netlink: 'syz.0.7301': attribute type 3 has an invalid length. [ 408.152411][T20241] NILFS (loop3): invalid segment: Magic number mismatch [ 408.186455][T20241] NILFS (loop3): trying rollback from an earlier position [ 408.283626][T20241] NILFS (loop3): recovery complete [ 408.323393][T20264] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 408.334488][T20265] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 408.341748][T20265] IPv6: NLM_F_CREATE should be set when creating new route [ 408.349080][T20265] IPv6: NLM_F_CREATE should be set when creating new route [ 408.974627][T20300] netlink: 'syz.3.7313': attribute type 3 has an invalid length. [ 409.076059][T20305] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 409.083317][T20305] IPv6: NLM_F_CREATE should be set when creating new route [ 409.090651][T20305] IPv6: NLM_F_CREATE should be set when creating new route [ 409.709552][T20341] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 409.956805][T20359] netlink: 100 bytes leftover after parsing attributes in process `syz.3.7344'. [ 410.089965][T20366] loop1: detected capacity change from 0 to 128 [ 410.174110][T20371] xt_CT: You must specify a L4 protocol and not use inversions on it [ 410.255002][T20366] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,nodelalloc,max_dir_size_kb=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 410.315544][T20379] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 410.334134][T20366] ext4 filesystem being mounted at /1388/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 410.441026][T20383] xt_CT: You must specify a L4 protocol and not use inversions on it [ 410.844489][T20401] netlink: 100 bytes leftover after parsing attributes in process `syz.0.7360'. [ 410.984764][T20405] loop4: detected capacity change from 0 to 128 [ 411.093056][T20405] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,nodelalloc,max_dir_size_kb=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 411.124330][T20405] ext4 filesystem being mounted at /1424/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 411.146869][T20415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7370'. [ 411.541394][T20423] loop4: detected capacity change from 0 to 764 [ 412.130409][T20406] loop3: detected capacity change from 0 to 32768 [ 412.339513][T20440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7383'. [ 412.458272][T20445] loop3: detected capacity change from 0 to 128 [ 412.674264][T20458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7386'. [ 412.685747][T20445] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,nodelalloc,max_dir_size_kb=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 412.714510][T20457] netlink: 'syz.2.7388': attribute type 12 has an invalid length. [ 412.722601][T20445] ext4 filesystem being mounted at /1472/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 413.146300][T20470] netlink: 'syz.4.7407': attribute type 12 has an invalid length. [ 413.578854][T20442] loop1: detected capacity change from 0 to 32768 [ 413.696071][T20442] jfs_mkdir: dtInsert returned -EIO [ 413.701511][T20442] ERROR: (device loop1): jfs_mkdir: [ 413.701511][T20442] [ 413.765179][T20442] ERROR: (device loop1): remounting filesystem as read-only [ 414.225534][T20496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7406'. [ 415.571095][T20519] loop4: detected capacity change from 0 to 32768 [ 415.694408][T20519] jfs_mkdir: dtInsert returned -EIO [ 415.704111][T20519] ERROR: (device loop4): jfs_mkdir: [ 415.704111][T20519] [ 415.734119][T20519] ERROR: (device loop4): remounting filesystem as read-only [ 416.396111][T20558] xt_recent: hitcount (4294967295) is larger than allowed maximum (255) [ 417.074054][T20601] xt_recent: hitcount (4294967295) is larger than allowed maximum (255) [ 417.134744][T20605] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7461'. [ 417.855183][T20647] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7482'. [ 418.875848][T20715] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 419.535131][T20753] xt_CT: You must specify a L4 protocol and not use inversions on it [ 419.676330][T20759] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 419.687050][T20756] xt_CT: You must specify a L4 protocol and not use inversions on it [ 420.298898][T20788] dlm: dev_write: no op 0 0 [ 420.526568][T20801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7552'. [ 420.650361][T20805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7567'. [ 421.002662][T20831] dlm: dev_write: no op 0 0 [ 422.140255][T20880] loop1: detected capacity change from 0 to 8192 [ 422.745410][T20910] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 422.824505][T20910] overlayfs: missing 'lowerdir' [ 423.127923][ T26] audit: type=1400 audit(1792151229.057:22): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=20921 comm="syz.2.7616" [ 423.213753][T20918] loop4: detected capacity change from 0 to 8192 [ 423.394269][T10457] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 423.422492][T20933] x_tables: unsorted entry at hook 3 [ 423.834272][T20938] x_tables: unsorted entry at hook 3 [ 423.838081][T10457] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 423.994470][T10457] usb 2-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 424.002226][T20946] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 424.003690][T10457] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 424.057790][T10457] usb 2-1: Product: syz [ 424.072965][T10457] usb 2-1: Manufacturer: syz [ 424.093610][T20946] overlayfs: missing 'lowerdir' [ 424.150088][ T26] audit: type=1400 audit(1792151230.077:23): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=20949 comm="syz.4.7628" [ 424.156211][T10457] usb 2-1: Found UVC 1.00 device syz (046d:0821) [ 424.178881][T20953] netlink: 'syz.2.7629': attribute type 1 has an invalid length. [ 424.393909][T20965] netlink: 'syz.3.7634': attribute type 1 has an invalid length. [ 424.394276][T10457] usb 2-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 424.454395][T10457] uvcvideo 2-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 424.471369][T20965] netlink: 228 bytes leftover after parsing attributes in process `syz.3.7634'. [ 424.480831][T10457] uvcvideo 2-1:1.1: Failed to initialize the device (-5). [ 424.532676][T20969] dlm: non-version read from control device 8192 [ 424.574096][T10457] usb 2-1: USB disconnect, device number 31 [ 424.592604][T20971] netlink: 'syz.2.7648': attribute type 1 has an invalid length. [ 424.654072][T20971] netlink: 228 bytes leftover after parsing attributes in process `syz.2.7648'. [ 424.736663][T20979] netlink: 'syz.0.7642': attribute type 1 has an invalid length. [ 425.134150][T21001] dlm: non-version read from control device 8192 [ 425.273217][T21011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7657'. [ 425.295562][T21013] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.7656'. [ 425.324397][T21013] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 425.853537][T21045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7671'. [ 425.884182][T11314] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 425.926279][T21047] netlink: 192436 bytes leftover after parsing attributes in process `syz.4.7674'. [ 425.974080][T21047] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 426.295149][T11314] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 426.454345][T11314] usb 4-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 426.463562][T11314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 426.504055][T11314] usb 4-1: Product: syz [ 426.508294][T11314] usb 4-1: Manufacturer: syz [ 426.596463][T11314] usb 4-1: Found UVC 1.00 device syz (046d:0821) [ 426.816133][T11314] usb 4-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 426.854264][T11314] uvcvideo 4-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 426.863151][T11314] uvcvideo 4-1:1.1: Failed to initialize the device (-5). [ 426.934051][T11314] usb 4-1: USB disconnect, device number 30 [ 427.340460][T21072] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 427.493977][T21080] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7702'. [ 427.533400][T21080] openvswitch: netlink: Missing key (keys=40, expected=80) [ 427.775489][T11311] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 427.857999][T21088] xt_ipvs: protocol family 7 not supported [ 428.054933][T11311] usb 5-1: Using ep0 maxpacket: 16 [ 428.184321][T11311] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 428.214195][T11311] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFC, skipping [ 428.245242][T21105] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 428.265604][T11311] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 428.534382][T11311] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 428.561854][T11311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.605642][T11311] usb 5-1: Product: syz [ 428.609877][T11311] usb 5-1: Manufacturer: syz [ 428.654200][T11311] usb 5-1: SerialNumber: syz [ 428.683656][T11311] usb 5-1: config 0 descriptor?? [ 428.829154][T21118] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7707'. [ 428.878836][T21118] openvswitch: netlink: Missing key (keys=40, expected=80) [ 428.989434][T11314] usb 5-1: USB disconnect, device number 35 [ 429.086970][T11311] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 429.533846][T11311] usb 4-1: config 26 has an invalid descriptor of length 0, skipping remainder of the config [ 429.538280][T21126] xt_ipvs: protocol family 7 not supported [ 429.563295][T11311] usb 4-1: config 26 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 429.678940][ T7120] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 429.724436][T11311] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 429.743086][T11311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 429.761593][T11311] usb 4-1: SerialNumber: syz [ 429.807610][T21140] device bond3 entered promiscuous mode [ 429.815209][T11311] cdc_ether 4-1:26.0: skipping garbage [ 429.820720][T11311] usb 4-1: bad CDC descriptors [ 429.854346][T21140] 8021q: adding VLAN 0 to HW filter on device bond3 [ 430.052365][T11311] usb 4-1: USB disconnect, device number 31 [ 430.084464][ T7120] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 430.102551][ T7120] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 430.108625][T21146] device bond4 entered promiscuous mode [ 430.188668][T21146] 8021q: adding VLAN 0 to HW filter on device bond4 [ 430.284547][ T7120] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 430.303826][ T7120] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.323954][ T7120] usb 2-1: Product: syz [ 430.328221][ T7120] usb 2-1: Manufacturer: syz [ 430.332836][ T7120] usb 2-1: SerialNumber: syz [ 430.614513][ T7120] speedtch 2-1:1.0: speedtch_bind: data interface not found! [ 430.621963][ T7120] speedtch 2-1:1.0: usbatm_usb_probe: bind failed: -19! [ 430.850802][T11311] usb 2-1: USB disconnect, device number 32 [ 430.986340][T21143] loop4: detected capacity change from 0 to 32768 [ 431.117560][T21143] XFS (loop4): Mounting V5 Filesystem [ 431.210348][T21143] XFS (loop4): Ending clean mount [ 431.233209][T21143] XFS (loop4): Quotacheck needed: Please wait. [ 431.527966][T21143] XFS (loop4): Quotacheck: Done. [ 431.634137][ T4195] XFS (loop4): Unmounting Filesystem [ 431.670374][T21167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7726'. [ 431.947989][T11311] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 432.124978][ T7120] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 432.374819][T11311] usb 2-1: config 26 has an invalid descriptor of length 0, skipping remainder of the config [ 432.395233][ T7120] usb 4-1: Using ep0 maxpacket: 16 [ 432.409382][T11311] usb 2-1: config 26 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 432.514465][ T7120] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 432.554059][ T7120] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFC, skipping [ 432.574521][T11311] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 432.583606][T11311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 432.585325][ T7120] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 432.622348][T11311] usb 2-1: SerialNumber: syz [ 432.714726][T11311] cdc_ether 2-1:26.0: skipping garbage [ 432.720244][T11311] usb 2-1: bad CDC descriptors [ 432.815844][ T7120] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 432.844056][ T7120] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.872721][ T7120] usb 4-1: Product: syz [ 432.882807][ T7120] usb 4-1: Manufacturer: syz [ 432.902986][ T7120] usb 4-1: SerialNumber: syz [ 432.915008][ T7120] usb 4-1: config 0 descriptor?? [ 432.939738][T10457] usb 2-1: USB disconnect, device number 33 [ 433.251058][T10457] usb 4-1: USB disconnect, device number 32 [ 433.656725][T21194] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 433.694209][T21195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7740'. [ 433.784432][T10457] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 434.175012][T10457] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 434.184131][T21215] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7750'. [ 434.222368][T10457] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 434.227913][T21215] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7750'. [ 434.289184][T21215] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7750'. [ 434.339017][T21224] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 434.404791][T10457] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 434.442486][T10457] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.464216][T10457] usb 3-1: Product: syz [ 434.468423][T10457] usb 3-1: Manufacturer: syz [ 434.498454][T21228] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7767'. [ 434.517729][T10457] usb 3-1: SerialNumber: syz [ 434.552159][T21228] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7767'. [ 434.577877][T21228] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7767'. [ 434.707835][T21238] IPv6: sit1: Disabled Multicast RS [ 434.814942][T10457] speedtch 3-1:1.0: speedtch_bind: data interface not found! [ 434.822414][T10457] speedtch 3-1:1.0: usbatm_usb_probe: bind failed: -19! [ 434.854165][T21246] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7765'. [ 434.863380][T21246] rdma_rxe: rxe_register_device failed with error -23 [ 434.924357][T21246] rdma_rxe: failed to add bond_slave_1 [ 435.066400][T21255] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7781'. [ 435.074675][T11312] usb 3-1: USB disconnect, device number 35 [ 435.139266][T21255] rdma_rxe: rxe_register_device failed with error -23 [ 435.184440][T21255] rdma_rxe: failed to add bond_slave_1 [ 435.420907][T21273] IPv6: sit2: Disabled Multicast RS [ 435.818739][T21291] rdma_rxe: rxe_register_device failed with error -23 [ 435.874416][T21291] rdma_rxe: failed to add bond_slave_1 [ 435.919819][T11312] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 436.228521][T21317] device netdevsim0 entered promiscuous mode [ 436.390091][T21326] xt_ipcomp: unknown flags 12 [ 436.399952][T21325] rdma_rxe: rxe_register_device failed with error -23 [ 436.424393][T21325] rdma_rxe: failed to add bond_slave_1 [ 436.571760][T11312] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 436.581519][T21330] xt_ipcomp: unknown flags 12 [ 436.591687][T11312] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.624884][T11312] usb 5-1: Product: syz [ 436.645443][T11312] usb 5-1: Manufacturer: syz [ 436.666814][T11312] usb 5-1: SerialNumber: syz [ 436.704603][T11312] usb 5-1: config 0 descriptor?? [ 436.989656][T11312] usb 5-1: ignoring: probably an ADSL modem [ 437.046510][T21355] device netdevsim0 entered promiscuous mode [ 437.269567][T11312] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 437.314144][T21367] __nla_validate_parse: 2 callbacks suppressed [ 437.314164][T21367] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7823'. [ 437.330202][T11312] usb 5-1: USB disconnect, device number 36 [ 438.029702][T21405] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7841'. [ 438.414123][T21425] netlink: 'syz.3.7864': attribute type 2 has an invalid length. [ 438.422051][T21425] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7864'. [ 438.853491][T11314] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 439.209063][T21466] netlink: 'syz.2.7871': attribute type 2 has an invalid length. [ 439.265104][T21466] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7871'. [ 439.575122][T11314] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 439.594452][T11314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.625578][T11314] usb 1-1: Product: syz [ 439.629837][T11314] usb 1-1: Manufacturer: syz [ 439.670524][T11314] usb 1-1: SerialNumber: syz [ 439.680546][T11314] usb 1-1: config 0 descriptor?? [ 439.954351][T11314] usb 1-1: ignoring: probably an ADSL modem [ 440.079815][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.271826][T11314] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 440.300378][T11314] usb 1-1: USB disconnect, device number 32 [ 441.042812][T10457] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 441.165328][T21552] xt_ecn: cannot match TCP bits for non-tcp packets [ 441.372219][ T4371] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 441.435283][T10457] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 441.474073][T10457] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 441.483779][T10457] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 441.535821][T10457] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 441.579651][T10457] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 441.579599][ T26] audit: type=1107 audit(1792151247.507:24): pid=21571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 441.614033][T10457] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.734218][ T4371] usb 3-1: Using ep0 maxpacket: 8 [ 441.793628][T21575] xt_ecn: cannot match TCP bits for non-tcp packets [ 441.895602][ T4371] usb 3-1: unable to get BOS descriptor or descriptor too short [ 442.164664][ T4371] usb 3-1: New USB device found, idVendor=17cc, idProduct=041c, bcdDevice= 0.40 [ 442.173821][ T4371] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.220431][ T4371] usb 3-1: Product: syz [ 442.244042][ T4371] usb 3-1: Manufacturer: syz [ 442.248781][ T4371] usb 3-1: SerialNumber: syz [ 442.381778][ T7120] usb 2-1: USB disconnect, device number 34 [ 442.684622][ T4371] usb 3-1: USB disconnect, device number 36 [ 442.931602][ T26] audit: type=1107 audit(1792151248.857:25): pid=21598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 442.975548][T21596] udevd[21596]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 443.184325][T21609] xt_ecn: cannot match TCP bits for non-tcp packets [ 443.464255][T11314] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 443.841625][ T4371] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 443.906310][T11314] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 443.936962][T11314] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 443.988473][T11314] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 444.033365][T11314] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 444.072512][T21657] netlink: 5 bytes leftover after parsing attributes in process `syz.3.7960'. [ 444.092485][T11314] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 444.095519][T21657] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 444.123316][T11314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.154429][ T4371] usb 1-1: Using ep0 maxpacket: 8 [ 444.335151][ T4371] usb 1-1: unable to get BOS descriptor or descriptor too short [ 444.605660][ T4371] usb 1-1: New USB device found, idVendor=17cc, idProduct=041c, bcdDevice= 0.40 [ 444.629571][ T4371] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.646670][T11314] usb 5-1: USB disconnect, device number 37 [ 444.664026][ T4371] usb 1-1: Product: syz [ 444.680373][ T4371] usb 1-1: Manufacturer: syz [ 444.704037][ T4371] usb 1-1: SerialNumber: syz [ 445.124066][ T4371] usb 1-1: USB disconnect, device number 33 [ 445.415263][T21703] netlink: 5 bytes leftover after parsing attributes in process `syz.1.7973'. [ 445.450299][T21707] netlink: 'syz.4.7975': attribute type 2 has an invalid length. [ 445.465716][T21703] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 445.850840][T21724] netlink: 5 bytes leftover after parsing attributes in process `syz.0.7994'. [ 445.915973][T21724] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 446.009398][T21730] device geneve1 entered promiscuous mode [ 446.140457][T21735] netlink: 'syz.1.7991': attribute type 2 has an invalid length. [ 446.181626][T21737] netlink: 5 bytes leftover after parsing attributes in process `syz.0.8003'. [ 446.222364][T21737] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 446.436143][T21751] netlink: 5 bytes leftover after parsing attributes in process `syz.0.8010'. [ 446.492371][T21751] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 446.934317][T21783] IPv6: Can't replace route, no match found [ 447.173795][T21794] IPv6: Can't replace route, no match found [ 447.614180][T21817] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8032'. [ 447.814013][T21825] IPv6: Can't replace route, no match found [ 447.936676][T21828] IPv6: Can't replace route, no match found [ 448.593874][T21823] loop4: detected capacity change from 0 to 32768 [ 448.653807][T21823] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.8037 (21823) [ 448.668541][T21846] loop1: detected capacity change from 0 to 16 [ 448.728535][T21823] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 448.745852][T21846] erofs: (device loop1): mounted with root inode @ nid 36. [ 448.760917][T21823] BTRFS info (device loop4): using free space tree [ 448.819722][T21823] BTRFS info (device loop4): has skinny extents [ 448.933358][T21857] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8049'. [ 449.447869][T21823] BTRFS info (device loop4): enabling ssd optimizations [ 450.349143][T21906] loop4: detected capacity change from 0 to 16 [ 450.385593][T21873] loop1: detected capacity change from 0 to 32768 [ 450.479628][T21906] erofs: (device loop4): mounted with root inode @ nid 36. [ 450.567508][T21913] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8078'. [ 450.645389][T21873] XFS (loop1): Mounting V5 Filesystem [ 451.187082][T21873] XFS (loop1): Ending clean mount [ 451.244835][T21873] XFS (loop1): Quotacheck needed: Please wait. [ 451.425524][T21873] XFS (loop1): Quotacheck: Done. [ 451.582042][ T4186] XFS (loop1): Unmounting Filesystem [ 452.044366][T11314] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 452.609474][T11314] usb 1-1: unable to get BOS descriptor or descriptor too short [ 452.735434][T11314] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 452.776065][T11314] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 453.164750][T11314] usb 1-1: string descriptor 0 read error: -22 [ 453.164840][T11314] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 453.164866][T11314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.197378][T21960] loop4: detected capacity change from 0 to 32768 [ 453.207738][T11314] usb 1-1: selecting invalid altsetting 1 [ 453.208211][T11314] usb 1-1: unit 3 not found! [ 453.430212][T11314] usb 1-1: cannot request logical cluster ID: 0 (err: -5) [ 453.430240][T11314] usb 1-1: invalid MIXER UNIT descriptor 6 [ 453.451328][T11314] snd-usb-audio: probe of 1-1:1.0 failed with error -5 [ 453.479891][T21960] XFS (loop4): Mounting V5 Filesystem [ 453.517850][T21596] udevd[21596]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 453.644400][T11314] usb 1-1: USB disconnect, device number 34 [ 453.818840][T21960] XFS (loop4): Ending clean mount [ 453.953698][ T4195] XFS (loop4): Unmounting Filesystem [ 454.741998][T22049] netlink: 'syz.1.8130': attribute type 3 has an invalid length. [ 454.761664][T22050] loop3: detected capacity change from 0 to 256 [ 454.820440][T22050] exfat: Deprecated parameter 'namecase' [ 454.854865][T22050] exfat: Deprecated parameter 'namecase' [ 454.917030][T22050] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 455.014753][T22050] exFAT-fs (loop3): hint_cluster is invalid (4278190089) [ 455.108942][T22050] exFAT-fs (loop3): error, failed to bmap (inode : ffff88805ef10e60 iblock : 8, err : -5) [ 455.174918][T22050] exFAT-fs (loop3): error, invalid access to FAT (entry 0xff000008) [ 455.234087][T22050] exFAT-fs (loop3): error, invalid access to FAT (entry 0xff000008) [ 455.354655][ T154] attempt to access beyond end of device [ 455.354655][ T154] loop3: rw=1, want=34225520826, limit=256 [ 455.393387][ T154] Buffer I/O error on dev loop3, logical block 34225520825, lost async page write [ 455.433919][ T154] attempt to access beyond end of device [ 455.433919][ T154] loop3: rw=1, want=34225520827, limit=256 [ 455.489045][ T154] Buffer I/O error on dev loop3, logical block 34225520826, lost async page write [ 455.544064][ T154] attempt to access beyond end of device [ 455.544064][ T154] loop3: rw=1, want=34225520828, limit=256 [ 455.594031][ T154] Buffer I/O error on dev loop3, logical block 34225520827, lost async page write [ 455.603346][ T154] attempt to access beyond end of device [ 455.603346][ T154] loop3: rw=1, want=34225520829, limit=256 [ 455.682642][ T154] Buffer I/O error on dev loop3, logical block 34225520828, lost async page write [ 455.724250][ T154] attempt to access beyond end of device [ 455.724250][ T154] loop3: rw=1, want=34225520830, limit=256 [ 455.734333][T22100] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8156'. [ 455.774023][ T154] Buffer I/O error on dev loop3, logical block 34225520829, lost async page write [ 455.783321][ T154] attempt to access beyond end of device [ 455.783321][ T154] loop3: rw=1, want=34225520831, limit=256 [ 455.877116][ T154] Buffer I/O error on dev loop3, logical block 34225520830, lost async page write [ 455.924076][ T154] attempt to access beyond end of device [ 455.924076][ T154] loop3: rw=1, want=34225520832, limit=256 [ 455.974022][ T154] Buffer I/O error on dev loop3, logical block 34225520831, lost async page write [ 456.448882][T22147] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8178'. [ 456.490057][T22147] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8178'. [ 456.544211][T22147] netlink: 5 bytes leftover after parsing attributes in process `syz.4.8178'. [ 456.573120][T22156] loop1: detected capacity change from 0 to 1024 [ 456.691491][T22156] hfsplus: catalog record size mismatch (type 2, got 88, expected 248) [ 456.878420][T22171] netlink: 'syz.4.8190': attribute type 1 has an invalid length. [ 456.902408][T22174] kAFS: unable to lookup cell '@G|' [ 456.915270][T22171] netlink: 228 bytes leftover after parsing attributes in process `syz.4.8190'. [ 457.456817][T22210] netlink: 'syz.0.8210': attribute type 1 has an invalid length. [ 457.751578][T22230] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 458.240531][T22260] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 458.724478][T22292] loop3: detected capacity change from 0 to 512 [ 458.843458][T22300] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 458.966843][T22292] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 458.984686][T22292] ext4 filesystem being mounted at /1658/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 459.108873][T22315] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (6) [ 459.527150][T22333] netlink: 'syz.1.8270': attribute type 10 has an invalid length. [ 459.994330][T22355] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8281'. [ 460.464147][T22381] netlink: 'syz.1.8293': attribute type 1 has an invalid length. [ 460.471924][T22381] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8293'. [ 460.574131][T22381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8293'. [ 461.074136][T11311] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 461.331118][T22435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8320'. [ 461.374123][T11311] usb 2-1: Using ep0 maxpacket: 8 [ 461.514398][T11311] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 461.545570][T11311] usb 2-1: config 0 interface 0 has no altsetting 0 [ 461.826582][T11311] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 461.856575][T11311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.865311][T22466] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8336'. [ 461.894024][T11311] usb 2-1: Product: syz [ 461.908598][T11311] usb 2-1: Manufacturer: syz [ 461.913272][T11311] usb 2-1: SerialNumber: syz [ 461.961456][T11311] usb 2-1: config 0 descriptor?? [ 462.043000][T11311] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 462.256719][T11311] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 462.292488][T11311] snd_usb_toneport: probe of 2-1:0.0 failed with error -22 [ 462.435069][T22486] x_tables: unsorted entry at hook 1 [ 462.462592][T11311] usb 2-1: USB disconnect, device number 35 [ 462.602968][T22494] netlink: 'syz.2.8350': attribute type 22 has an invalid length. [ 462.603095][T22494] (unnamed net_device) (uninitialized): option ad_select: invalid value (7) [ 462.884395][T22464] loop3: detected capacity change from 0 to 32768 [ 462.963825][T22464] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.8335 (22464) [ 463.051836][T22464] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 463.110017][T22464] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 463.131799][T22506] loop1: detected capacity change from 0 to 2048 [ 463.162279][T22464] BTRFS info (device loop3): use zstd compression, level 3 [ 463.219795][T22464] BTRFS info (device loop3): using free space tree [ 463.237885][T22464] BTRFS info (device loop3): has skinny extents [ 463.246704][T22513] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 463.324199][T22518] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8360'. [ 463.658413][T22464] BTRFS info (device loop3): enabling ssd optimizations [ 463.964352][ T4371] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 464.094009][T22566] NILFS (nullb0): couldn't find nilfs on the device [ 464.490902][ T4371] usb 2-1: unable to get BOS descriptor or descriptor too short [ 464.611923][ T4371] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 464.633786][ T4371] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 464.733479][T22589] netlink: 'syz.2.8386': attribute type 275 has an invalid length. [ 464.843757][ T4371] usb 2-1: New USB device found, idVendor=1235, idProduct=8010, bcdDevice= 0.40 [ 464.863539][T22594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8389'. [ 464.883643][ T4371] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.914048][ T4371] usb 2-1: Product: syz [ 464.918271][ T4371] usb 2-1: Manufacturer: syz [ 464.922909][ T4371] usb 2-1: SerialNumber: syz [ 465.211620][T22608] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 465.361358][T22577] loop4: detected capacity change from 0 to 32768 [ 465.369230][ T4371] usb 2-1: unit 3 not found! [ 465.437558][ T4371] usb 2-1: USB disconnect, device number 36 [ 465.614943][T22577] XFS (loop4): Mounting V5 Filesystem [ 465.713309][T20964] udevd[20964]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 465.899818][T22577] XFS (loop4): Ending clean mount [ 465.972599][T22640] netlink: 92 bytes leftover after parsing attributes in process `syz.2.8406'. [ 466.125509][ T4195] XFS (loop4): Unmounting Filesystem [ 466.246906][ T4371] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 466.446636][T22660] overlayfs: missing 'workdir' [ 466.474438][T22663] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 466.534651][ T4371] usb 2-1: Using ep0 maxpacket: 16 [ 466.673461][T22669] x_tables: duplicate entry at hook 4 [ 466.679504][ T4371] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 466.704027][ T4371] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.752181][ T4371] usb 2-1: config 0 descriptor?? [ 466.819838][ T4371] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 466.829242][T22674] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 467.038931][ T4371] usb 2-1: Detected FT232BM [ 467.244380][ T4371] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 467.284169][ T4371] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 467.314126][ T4371] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 467.352828][ T4371] usb 2-1: USB disconnect, device number 37 [ 467.397316][ T4371] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 467.446777][ T4371] ftdi_sio 2-1:0.0: device disconnected [ 467.701606][T22716] loop4: detected capacity change from 0 to 1024 [ 467.911280][T22728] loop3: detected capacity change from 0 to 512 [ 467.996679][T22730] xt_TCPMSS: Only works on TCP SYN packets [ 468.025664][T22728] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 468.219285][T22728] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 468.257142][T22728] Quota error (device loop3): write_blk: dquota write failed [ 468.284082][T22728] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 468.293294][T22728] Quota error (device loop3): write_blk: dquota write failed [ 468.385563][T22749] loop4: detected capacity change from 0 to 256 [ 468.402918][T22728] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 468.450539][T22752] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8459'. [ 468.459945][T22728] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.8451: Failed to acquire dquot type 1 [ 468.504327][T22749] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x5955b8de, utbl_chksum : 0xe619d30d) [ 468.563828][T22728] EXT4-fs (loop3): 1 truncate cleaned up [ 468.588746][T22728] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,noblock_validity,noquota,nouid32,sysvgroups,abort,init_itable=0x0000000000000080,stripe=0x0000000000000001,resuid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 468.740516][T22728] Quota error (device loop3): write_blk: dquota write failed [ 468.805898][T22728] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 468.824144][T22764] netlink: 'syz.2.8467': attribute type 3 has an invalid length. [ 468.851430][T22728] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.8451: Failed to acquire dquot type 1 [ 469.086802][T22778] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8484'. [ 469.546185][T22805] loop3: detected capacity change from 0 to 512 [ 469.596121][T22805] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 469.673689][T22812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8489'. [ 469.683154][T22805] EXT4-fs (loop3): required journal recovery suppressed and not mounted read-only [ 469.730568][T22812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8489'. [ 469.734206][T22815] netlink: 236 bytes leftover after parsing attributes in process `syz.1.8491'. [ 470.165954][T22830] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8499'. [ 470.425478][T22838] xt_l2tp: missing protocol rule (udp|l2tpip) [ 471.220979][T22880] netlink: 'syz.4.8533': attribute type 1 has an invalid length. [ 471.251169][T22880] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8533'. [ 471.284333][T22880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8533'. [ 471.543872][T22895] netlink: 'syz.1.8529': attribute type 1 has an invalid length. [ 471.586061][T22895] netlink: 228 bytes leftover after parsing attributes in process `syz.1.8529'. [ 471.969926][T22918] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.8553'. [ 472.378316][T22938] loop4: detected capacity change from 0 to 512 [ 472.514919][T22938] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 473.180678][T22974] device macvtap0 entered promiscuous mode [ 474.798485][T22998] device wlan0 left promiscuous mode [ 474.827825][T22998] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 475.196278][T23021] __nla_validate_parse: 2 callbacks suppressed [ 475.196298][T23021] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8595'. [ 475.254197][T23021] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 475.444310][T23029] netlink: 'syz.2.8598': attribute type 19 has an invalid length. [ 475.452172][T23029] netlink: 'syz.2.8598': attribute type 1 has an invalid length. [ 475.537587][T23029] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8598'. [ 475.641739][T23036] IPVS: set_ctl: invalid protocol: 12 255.255.255.255:52768 [ 475.645665][T23038] device wlan0 left promiscuous mode [ 475.684213][T23038] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 475.868719][T23048] openvswitch: netlink: Actions may not be safe on all matching packets [ 476.290776][T23022] loop4: detected capacity change from 0 to 32768 [ 476.354719][T23022] jfs_strtoUCS: char2uni returned -22. [ 476.360238][T23022] charset = cp936, char = 0xd4 [ 476.436892][T23080] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 476.684450][T23090] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8625'. [ 476.726327][T23088] loop4: detected capacity change from 0 to 256 [ 476.773275][T23090] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8625'. [ 476.812368][T23090] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8625'. [ 476.859335][T23092] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8626'. [ 476.884168][T23096] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8628'. [ 477.486361][T23126] netlink: 84 bytes leftover after parsing attributes in process `syz.3.8645'. [ 477.815141][T23143] netlink: 10 bytes leftover after parsing attributes in process `syz.2.8653'. [ 477.874416][T23146] sg_write: data in/out 4194304/65042 bytes for SCSI command 0x0-- guessing data in; [ 477.874416][T23146] program syz.0.8655 not setting count and/or reply_len properly [ 477.993191][T11311] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 478.347536][T23172] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (2049) [ 478.556147][T23184] loop4: detected capacity change from 0 to 512 [ 478.678815][T23184] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 478.714082][T11311] usb 2-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62 [ 478.723245][T11311] usb 2-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3 [ 478.766842][T23184] ext4 filesystem being mounted at /1698/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 478.804022][T11311] usb 2-1: Product: syz [ 478.808265][T11311] usb 2-1: Manufacturer: syz [ 478.812871][T11311] usb 2-1: SerialNumber: syz [ 478.912952][T11311] usb 2-1: config 0 descriptor?? [ 478.995653][T11311] usb 2-1: selecting invalid altsetting 1 [ 479.011648][T11311] comedi comedi5: could not switch to alternate setting 1 [ 479.044655][T11311] usbduxfast 2-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 479.195911][T16482] usb 2-1: USB disconnect, device number 38 [ 479.979646][T23224] loop3: detected capacity change from 0 to 4096 [ 480.719446][T23255] netlink: 236 bytes leftover after parsing attributes in process `syz.0.8701'. [ 480.965423][T23268] netlink: 'syz.4.8710': attribute type 8 has an invalid length. [ 480.973221][T23268] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.8710'. [ 481.447113][T23297] loop4: detected capacity change from 0 to 256 [ 482.090455][T23336] comedi comedi2: pcl724: I/O port conflict (0x2,4) [ 482.294945][T23350] netlink: 'syz.1.8751': attribute type 3 has an invalid length. [ 483.004127][T11311] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 483.054053][T23405] trusted_key: encrypted_key: master key parameter is missing [ 483.094457][T23409] netlink: 'syz.2.8778': attribute type 1 has an invalid length. [ 483.311263][T23423] x_tables: duplicate underflow at hook 1 [ 483.391549][T23427] loop1: detected capacity change from 0 to 256 [ 483.464574][T11311] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 483.519810][T11311] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 483.565875][T11311] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 483.604015][T11311] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 64 [ 483.638745][T11311] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 483.894391][T11311] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 483.917835][T11311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.946325][T11311] usb 5-1: Product: syz [ 483.964342][T11311] usb 5-1: Manufacturer: syz [ 483.979270][T11311] usb 5-1: SerialNumber: syz [ 484.024472][T23385] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 484.032503][T23385] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 484.040482][ T4371] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 484.062442][T23385] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 484.094342][T23385] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 484.148561][T11311] keyspan 5-1:1.0: Keyspan 4 port adapter converter detected [ 484.164560][T11311] keyspan 5-1:1.0: unsupported endpoint type 0 [ 484.202058][T11311] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 484.250975][T11311] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 484.290177][T11311] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 484.318714][T11311] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 484.422980][ T4371] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 484.454016][ T4371] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 484.524024][ T4371] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 484.572347][T11311] usb 5-1: USB disconnect, device number 38 [ 484.583227][ T4371] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 484.596290][T23471] PKCS8: Unsupported PKCS#8 version [ 484.597042][T23472] loop1: detected capacity change from 0 to 8 [ 484.615827][T11311] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 484.675434][T11311] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 484.704643][ T4371] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 484.716059][T23472] SQUASHFS error: zlib decompression failed, data probably corrupt [ 484.731961][ T4371] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 484.741248][T23472] SQUASHFS error: Failed to read block 0x9b: -5 [ 484.748258][T11311] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 484.764064][ T4371] usb 4-1: SerialNumber: syz [ 484.774316][T23472] SQUASHFS error: Unable to read metadata cache entry [99] [ 484.803030][T11311] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 484.821989][T23472] SQUASHFS error: Unable to read inode 0x127 [ 484.843682][T11311] keyspan 5-1:1.0: device disconnected [ 485.598034][ T4371] usb 4-1: USB disconnect, device number 33 [ 485.624281][T11311] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 485.647650][T23518] ecryptfs_parse_options: eCryptfs: unrecognized option [ecryptf%_sig=syz] [ 485.684599][T23518] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 485.738538][T23518] Error parsing options; rc = [-22] [ 485.777347][T23522] netlink: 'syz.4.8833': attribute type 1 has an invalid length. [ 485.809390][T23522] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8833'. [ 485.826899][T23526] damon: invalid nr_regions. min (30786325577728) > max (1023) [ 485.845047][T23522] nbd: couldn't find a device at index 1024 [ 486.104462][T11311] usb 3-1: config 7 has an invalid interface number: 160 but max is 0 [ 486.112717][T11311] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 486.137269][T23543] futex_wake_op: syz.4.8844 tries to shift op by 144; fix this program [ 486.175075][T11311] usb 3-1: config 7 has no interface number 0 [ 486.184554][T23543] futex_wake_op: syz.4.8844 tries to shift op by 144; fix this program [ 486.360627][T23553] loop3: detected capacity change from 0 to 512 [ 486.375180][T11311] usb 3-1: New USB device found, idVendor=0545, idProduct=800d, bcdDevice= 3.0a [ 486.404319][T11311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.449484][T11311] usb 3-1: Product: syz [ 486.453719][T11311] usb 3-1: Manufacturer: syz [ 486.478377][T11311] usb 3-1: SerialNumber: syz [ 486.486532][T23561] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8852'. [ 486.503139][T23553] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -13 [ 486.521593][T23553] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.8848: inode #15: comm syz.3.8848: iget: illegal inode # [ 486.546023][T23553] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.8848: couldn't read orphan inode 15 (err -117) [ 486.588637][T23561] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8852'. [ 486.604818][T23553] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,jqfmt=vfsv0,min_batch_time=0x00000000000003ff,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,inode_readahead_blks=0x0000000000008000,errors=continue,,errors=continue. Quota mode: writeback. [ 486.631234][ C0] vkms_vblank_simulate: vblank timer overrun [ 486.736322][T23553] EXT4-fs error (device loop3): ext4_lookup:1860: comm syz.3.8848: inode #15: comm syz.3.8848: iget: illegal inode # [ 486.864037][T11311] usb 3-1: USB disconnect, device number 37 [ 487.222817][T23593] netlink: 'syz.3.8867': attribute type 3 has an invalid length. [ 487.301301][T23593] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8867'. [ 487.358269][T23601] Sensor A: ================= START STATUS ================= [ 487.395376][T23601] Sensor A: Test Pattern: 75% Colorbar [ 487.454196][T23601] Sensor A: Show Information: All [ 487.459427][T23601] Sensor A: Vertical Flip: false [ 487.504112][T23601] Sensor A: Horizontal Flip: true [ 487.554093][T23601] Sensor A: Brightness: 128 [ 487.558757][T23601] Sensor A: Contrast: 128 [ 487.588148][T23601] Sensor A: Hue: 0 [ 487.592032][T23601] Sensor A: Saturation: 128 [ 487.619039][T23601] Sensor A: ================== END STATUS ================== [ 487.650864][T23616] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8879'. [ 487.986232][T23636] loop3: detected capacity change from 0 to 1024 [ 488.121426][T23636] EXT4-fs (loop3): Ignoring removed nobh option [ 488.141051][T23636] EXT4-fs (loop3): Ignoring removed bh option [ 488.206451][T23653] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8896'. [ 488.212794][T23636] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e802c018, mo2=0002] [ 488.223664][T23636] System zones: 0-1, 3-12 [ 488.248450][T23653] device dummy1 entered promiscuous mode [ 488.285099][T23636] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,sysvgroups,inode_readahead_blks=0x0000000000002000,discard,bh,debug,,errors=continue. Quota mode: none. [ 488.414071][T11311] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 488.684215][T11311] usb 1-1: Using ep0 maxpacket: 32 [ 488.729149][T16482] nvmet: connect request for invalid subsystem testsubsys! [ 488.753639][T23663] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 488.795175][T23673] vivid-000: disconnect [ 488.823324][T23671] vivid-000: reconnect [ 488.843488][T11311] usb 1-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 489.104448][T11311] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 489.134009][T11311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.142144][T11311] usb 1-1: Product: syz [ 489.176847][T11311] usb 1-1: Manufacturer: syz [ 489.194170][T11311] usb 1-1: SerialNumber: syz [ 489.223590][T11311] usb 1-1: config 0 descriptor?? [ 489.303660][T11311] usb 1-1: bad CDC descriptors [ 489.309584][T11311] usb 1-1: unsupported MDLM descriptors [ 489.414192][T16482] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 489.509956][T11311] usb 1-1: USB disconnect, device number 35 [ 489.714192][T16482] usb 2-1: Using ep0 maxpacket: 32 [ 489.834346][T16482] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 489.847944][T23721] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 489.862234][T16482] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.901508][T16482] usb 2-1: config 0 descriptor?? [ 489.966571][T16482] gspca_main: sunplus-2.14.0 probing 041e:400b [ 489.973469][T23725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8930'. [ 490.417309][T16482] gspca_sunplus: reg_w_riv err -71 [ 490.422639][T16482] sunplus: probe of 2-1:0.0 failed with error -71 [ 490.469991][T16482] usb 2-1: USB disconnect, device number 39 [ 490.757285][T23741] loop4: detected capacity change from 0 to 8 [ 490.861355][T23741] SQUASHFS error: zlib decompression failed, data probably corrupt [ 490.884079][T23741] SQUASHFS error: Failed to read block 0x9b: -5 [ 490.900579][T23741] SQUASHFS error: Unable to read metadata cache entry [99] [ 490.945064][T23741] SQUASHFS error: Unable to read inode 0x127 [ 491.385706][T23759] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8947'. [ 491.497332][T23763] loop1: detected capacity change from 0 to 256 [ 491.515781][T23765] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8950'. [ 491.586925][T23769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8952'. [ 491.650642][T23763] FAT-fs (loop1): Directory bread(block 64) failed [ 491.673797][T23763] FAT-fs (loop1): Directory bread(block 65) failed [ 491.724199][T23763] FAT-fs (loop1): Directory bread(block 66) failed [ 491.735382][T23763] FAT-fs (loop1): Directory bread(block 67) failed [ 491.742017][T23763] FAT-fs (loop1): Directory bread(block 68) failed [ 491.821990][T23763] FAT-fs (loop1): Directory bread(block 69) failed [ 491.844095][T23763] FAT-fs (loop1): Directory bread(block 70) failed [ 491.894043][T23763] FAT-fs (loop1): Directory bread(block 71) failed [ 491.900776][T23763] FAT-fs (loop1): Directory bread(block 72) failed [ 491.960683][T23763] FAT-fs (loop1): Directory bread(block 73) failed [ 491.979927][T23788] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8961'. [ 492.024115][T23788] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8961'. [ 492.129488][T23763] attempt to access beyond end of device [ 492.129488][T23763] loop1: rw=0, want=1164, limit=256 [ 493.298577][T16482] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 493.600046][T23808] loop3: detected capacity change from 0 to 32768 [ 493.694838][ T4371] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 493.724349][T16482] usb 3-1: config 0 has an invalid interface number: 37 but max is 1 [ 493.732622][T16482] usb 3-1: config 0 has an invalid interface number: 255 but max is 1 [ 493.794552][T16482] usb 3-1: config 0 has no interface number 0 [ 493.800734][T16482] usb 3-1: config 0 has no interface number 1 [ 493.854021][T16482] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 493.904013][T16482] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 493.953991][T16482] usb 3-1: config 0 interface 255 has no altsetting 0 [ 494.094357][ T4371] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 494.124282][ T4371] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 494.133243][ T4371] usb 1-1: New USB device found, idVendor=041e, idProduct=3010, bcdDevice= 1.00 [ 494.155250][T16482] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 494.193993][T16482] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.195097][ T4371] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.222475][T16482] usb 3-1: Product: syz [ 494.232558][T16482] usb 3-1: Manufacturer: syz [ 494.262743][T16482] usb 3-1: SerialNumber: syz [ 494.276639][T16482] usb 3-1: config 0 descriptor?? [ 494.302086][ T4371] usb 1-1: 0:1 : does not exist [ 494.368239][T16482] usb 3-1: selecting invalid altsetting 0 [ 494.404967][T16482] usb 3-1: Could not set interface, error -22 [ 494.421601][ T7106] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 494.561426][T16482] usb 1-1: USB disconnect, device number 36 [ 494.584168][T11311] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 494.635786][T10457] usb 3-1: USB disconnect, device number 38 [ 494.684122][ T7106] usb 4-1: Using ep0 maxpacket: 8 [ 494.964298][ T7106] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 494.983539][ T7106] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 495.013798][ T7106] usb 4-1: Product: syz [ 495.019572][ T7106] usb 4-1: Manufacturer: syz [ 495.034157][ T7106] usb 4-1: SerialNumber: syz [ 495.049838][ T7106] usb 4-1: config 0 descriptor?? [ 495.064510][T11311] usb 5-1: config 0 has an invalid interface number: 199 but max is 1 [ 495.077698][T11311] usb 5-1: config 0 has no interface number 1 [ 495.106463][ T7106] gspca_main: sq905-2.14.0 probing 2770:9120 [ 495.116879][T11311] usb 5-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 495.166886][T11311] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 495.316363][T11311] usb 5-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 495.344002][T11311] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 495.358968][T23897] loop1: detected capacity change from 0 to 1764 [ 495.374104][T11311] usb 5-1: SerialNumber: syz [ 495.434294][T11311] usb 5-1: config 0 descriptor?? [ 495.523838][ T7106] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 495.541871][ T7106] sq905: probe of 4-1:0.0 failed with error -71 [ 495.583268][ T7106] usb 4-1: USB disconnect, device number 34 [ 495.734974][T11311] usb 5-1: Found UVC 0.00 device (0002:0000) [ 495.752237][T11311] usb 5-1: No valid video chain found. [ 495.810552][T11311] usb 5-1: USB disconnect, device number 39 [ 495.934196][T11312] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 496.243831][T23923] ieee802154 phy1 wpan1: encryption failed: -90 [ 496.559700][T23938] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9035'. [ 496.604577][T11312] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 496.625448][T11312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.674485][T11312] usb 3-1: Product: syz [ 496.678747][T11312] usb 3-1: Manufacturer: syz [ 496.683499][T11312] usb 3-1: SerialNumber: syz [ 496.929378][T23953] IPv6: sit3: Disabled Multicast RS [ 497.194477][T23956] loop1: detected capacity change from 0 to 4096 [ 497.283793][T23956] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 497.390193][T23973] xt_hashlimit: max too large, truncated to 1048576 [ 497.404994][T23956] ntfs: volume version 3.1. [ 497.474268][T11314] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 497.631388][T23979] loop4: detected capacity change from 0 to 256 [ 497.741693][T23981] loop3: detected capacity change from 0 to 1024 [ 497.881921][T23981] hfsplus: invalid file type 0177777 for inode 2 [ 497.906303][T23981] hfsplus: failed to load root directory [ 497.939416][T10457] usb 3-1: USB disconnect, device number 39 [ 498.209078][T23997] damon: kdamond (23997) starts [ 498.358088][T16482] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 498.659864][T16482] usb 4-1: Using ep0 maxpacket: 16 [ 498.785117][T11314] usb 3-1: Service connection timeout for: 256 [ 498.804310][T16482] usb 4-1: config 0 has an invalid descriptor of length 141, skipping remainder of the config [ 498.815219][T11314] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 498.823895][T11314] ath9k_htc: Failed to initialize the device [ 498.841307][T16482] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 33216, setting to 1024 [ 498.893439][T16482] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 498.893452][T10457] usb 3-1: ath9k_htc: USB layer deinitialized [ 498.893472][T16482] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 499.076608][T23991] loop4: detected capacity change from 0 to 32768 [ 499.154320][T16482] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 499.163417][T16482] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 499.202118][T16482] usb 4-1: Manufacturer: syz [ 499.224217][T16482] usb 4-1: config 0 descriptor?? [ 499.275874][T23981] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 499.518825][T16482] usb 4-1: USB disconnect, device number 35 [ 499.549802][T24006] loop1: detected capacity change from 0 to 32768 [ 499.588566][T24016] qrtr: Invalid version 0 [ 499.651604][T24018] tc_dump_action: action bad kind [ 499.665483][T24006] __jfs_setxattr: xattr_size = 75, new_size = 13099 [ 499.851903][T24022] usb usb8: usbfs: process 24022 (syz.2.9076) did not claim interface 0 before use [ 499.942054][T24026] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 500.362583][T24036] 8021q: adding VLAN 0 to HW filter on device bond2 [ 501.497044][T24093] loop4: detected capacity change from 0 to 512 [ 501.517034][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.692159][T24093] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 501.704394][T24093] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c11d, mo2=0102] [ 501.734011][T24093] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 501.753937][T24093] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 501.763014][T24093] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,abort,noload,noblock_validity,nombcache,usrjquota=,jqfmt=vfsv0,data_err=ignore,nolazytime,,errors=continue. Quota mode: none. [ 501.841189][T24093] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.9110: dx entry: limit 65535 != root limit 120 [ 501.885943][T24093] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.9110: Corrupt directory, running e2fsck is recommended [ 502.110363][T24114] netlink: 'syz.4.9118': attribute type 2 has an invalid length. [ 502.428940][T24129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9127'. [ 502.558005][T24136] netlink: 8752 bytes leftover after parsing attributes in process `syz.1.9131'. [ 502.784542][T24152] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9138'. [ 502.843516][T24155] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 502.977220][T24166] netlink: 8752 bytes leftover after parsing attributes in process `syz.0.9145'. [ 502.987443][T24160] loop1: detected capacity change from 0 to 2048 [ 503.420420][T24188] netlink: 'syz.3.9158': attribute type 1 has an invalid length. [ 503.573702][T24197] loop4: detected capacity change from 0 to 2048 [ 503.749185][T24197] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 503.847535][T24214] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 503.886796][T24216] netlink: 'syz.1.9171': attribute type 5 has an invalid length. [ 503.927542][T24197] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 147 [ 503.964225][T24197] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=15) [ 503.982637][T24220] netlink: 'syz.2.9172': attribute type 1 has an invalid length. [ 504.024041][T24220] netlink: 'syz.2.9172': attribute type 9 has an invalid length. [ 504.039454][T24224] netlink: 'syz.0.9174': attribute type 13 has an invalid length. [ 504.044442][T24197] Remounting filesystem read-only [ 504.058373][T24197] NILFS (loop4): error -5 truncating bmap (ino=15) [ 504.114147][T24197] attempt to access beyond end of device [ 504.114147][T24197] loop4: rw=0, want=262218, limit=2048 [ 504.143987][T24197] NILFS (loop4): I/O error reading meta-data file (ino=6, block-offset=1) [ 504.304202][ T4195] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 504.526207][T24246] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9182'. [ 505.033235][T24276] Cannot find del_set index 286 as target [ 505.228481][T24285] netlink: 144 bytes leftover after parsing attributes in process `syz.0.9204'. [ 505.741276][T24312] CIFS: Attempting to mount \\127.0.0.1\share [ 505.742229][T24311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9214'. [ 505.783785][T24312] CIFS: VFS: smbd_create_id:593 rdma_resolve_route() failed -19 [ 505.838304][T24312] CIFS: VFS: smbd_create_id:593 rdma_resolve_route() failed -19 [ 505.904430][T24312] CIFS: VFS: cifs_mount failed w/return code = -2 [ 505.960743][T24319] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9217'. [ 505.979460][T24318] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9219'. [ 506.019021][T24268] loop3: detected capacity change from 0 to 32768 [ 506.075579][T24268] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.9196 (24268) [ 506.143660][T24268] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 506.199044][T24268] BTRFS info (device loop3): using free space tree [ 506.258292][T24268] BTRFS info (device loop3): has skinny extents [ 506.296615][T24331] netlink: 'syz.2.9225': attribute type 32 has an invalid length. [ 506.559170][T24348] loop1: detected capacity change from 0 to 1764 [ 506.674203][T10457] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 506.712243][T24268] BTRFS info (device loop3): enabling ssd optimizations [ 507.118908][T10457] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 507.159525][T10457] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.214035][T10457] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 507.224295][T10457] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.335543][T10457] hub 1-1:4.0: USB hub found [ 507.554528][T10457] hub 1-1:4.0: 3 ports detected [ 507.559498][T10457] usb 1-1: selecting invalid altsetting 1 [ 507.574272][T10457] hub 1-1:4.0: Using single TT (err -22) [ 507.759175][T10457] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 507.774008][T10457] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 507.864993][T10457] usb 1-1: USB disconnect, device number 37 [ 507.973414][T24406] netlink: 4244 bytes leftover after parsing attributes in process `syz.2.9254'. [ 508.004778][T24409] loop1: detected capacity change from 0 to 128 [ 508.848065][T24449] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9274'. [ 508.927967][T11314] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 509.212057][T24459] loop1: detected capacity change from 0 to 4096 [ 509.218587][T11314] usb 1-1: Using ep0 maxpacket: 16 [ 509.267059][T24459] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 509.385170][T11314] usb 1-1: config 0 has an invalid interface number: 49 but max is 0 [ 509.420118][T11314] usb 1-1: config 0 has no interface number 0 [ 509.459884][T11314] usb 1-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 509.510625][T11314] usb 1-1: config 0 interface 49 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.547669][ T4186] ntfs3: loop1: ntfs_evict_inode r=3 failed, -22. [ 509.551256][T11314] usb 1-1: config 0 interface 49 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 509.604018][ T4186] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 509.631619][ T4186] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 509.669423][T24474] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 509.738193][T24445] loop4: detected capacity change from 0 to 32768 [ 509.798191][T24445] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.9272 (24445) [ 509.841324][T11314] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 509.871628][T11314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.904138][T11314] usb 1-1: Product: syz [ 509.909935][T11314] usb 1-1: Manufacturer: syz [ 509.914827][T24484] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9291'. [ 509.934231][T11314] usb 1-1: SerialNumber: syz [ 509.959919][T24484] openvswitch: netlink: EtherType 0 is less than min 600 [ 509.984894][T11314] usb 1-1: config 0 descriptor?? [ 510.024177][T24445] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 510.034656][T24439] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 510.054168][T24445] BTRFS info (device loop4): using free space tree [ 510.060723][T24445] BTRFS info (device loop4): has skinny extents [ 510.321569][T11314] usb 1-1: USB disconnect, device number 38 [ 510.433828][T24445] BTRFS info (device loop4): enabling ssd optimizations [ 511.076878][T24537] netlink: 'syz.3.9308': attribute type 5 has an invalid length. [ 511.318309][T24545] netlink: 'syz.0.9310': attribute type 10 has an invalid length. [ 511.864952][T24567] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9321'. [ 511.896339][T24564] loop4: detected capacity change from 0 to 4096 [ 511.972139][T24564] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 511.993857][T24573] syz.0.9324 uses old SIOCAX25GETINFO [ 512.014803][T24564] NILFS (loop4): mounting unchecked fs [ 512.020435][T24564] NILFS (loop4): recovery required for readonly filesystem [ 512.073147][T24564] NILFS (loop4): write access will be enabled during recovery [ 512.174085][T20964] udevd[20964]: incorrect nilfs2 checksum on /dev/loop4 [ 512.243019][T24564] NILFS (loop4): norecovery option specified, skipping roll-forward recovery [ 512.404517][T20964] udevd[20964]: incorrect nilfs2 checksum on /dev/loop4 [ 512.880466][T24600] netlink: 'syz.2.9336': attribute type 1 has an invalid length. [ 513.481481][T24624] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9358'. [ 513.547032][T24624] netlink: 'syz.3.9358': attribute type 1 has an invalid length. [ 513.664002][T24624] netlink: 'syz.3.9358': attribute type 2 has an invalid length. [ 513.671809][T24624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9358'. [ 514.294525][T24650] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 514.456619][T24656] netlink: 76 bytes leftover after parsing attributes in process `syz.3.9364'. [ 514.484301][T24648] loop4: detected capacity change from 0 to 4096 [ 514.552394][T24648] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 514.632084][T24661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9367'. [ 514.654159][ T23] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 514.682238][T24661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9367'. [ 514.815163][ T4195] ntfs3: loop4: ntfs_evict_inode r=3 failed, -22. [ 514.821746][ T4195] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 514.887312][ T4195] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 515.225825][T24679] loop3: detected capacity change from 0 to 2048 [ 515.247261][ T23] usb 3-1: unable to get BOS descriptor or descriptor too short [ 515.355515][ T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 515.377318][T24687] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 515.403994][ T23] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 515.427369][ T23] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 515.649600][ T23] usb 3-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 515.684046][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 515.743998][ T23] usb 3-1: Product: syz [ 515.748226][ T23] usb 3-1: Manufacturer: syz [ 515.842063][T24707] loop4: detected capacity change from 0 to 64 [ 515.847513][ T23] uvcvideo 3-1:1.0: Found multiple Units with ID 1 [ 516.084580][ T23] uvcvideo 3-1:1.0: Found multiple Units with ID 1 [ 516.091351][ T23] usb 3-1: Found UVC 71.01 device syz (8086:0ad2) [ 516.124187][ T23] usb 3-1: No streaming interface found for terminal 2. [ 516.176510][T10457] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 516.184239][ T23] usb 3-1: USB disconnect, device number 40 [ 516.386840][T24720] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9394'. [ 516.464634][T10457] usb 1-1: Using ep0 maxpacket: 8 [ 516.556621][T24721] loop4: detected capacity change from 0 to 4096 [ 516.653470][T10457] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 516.691755][T10457] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 516.731534][T10457] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.804989][T10457] usb 1-1: config 0 descriptor?? [ 516.819892][T24721] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 516.853463][T10457] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 516.901754][T24721] ntfs3: loop4: Failed to load $Extend. [ 517.074309][ T23] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 517.264553][T10457] gspca_vc032x: reg_w err -71 [ 517.269514][T10457] vc032x: probe of 1-1:0.0 failed with error -71 [ 517.308648][ T150] block nbd1: Attempted send on invalid socket [ 517.315395][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 517.328955][T10457] usb 1-1: USB disconnect, device number 39 [ 517.434281][ T23] usb 4-1: not running at top speed; connect to a high speed hub [ 517.527195][ T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 517.547657][ T23] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 517.587964][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.633758][T24748] loop1: detected capacity change from 0 to 512 [ 517.667295][ T23] usb 4-1: Found UVC 1.00 device (046d:0825) [ 517.688806][ T23] usb 4-1: No streaming interface found for terminal 2. [ 517.914111][T24748] EXT4-fs (loop1): inline encryption not supported [ 517.920839][T24748] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 518.082289][ T4279] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 518.134487][T24748] EXT4-fs (loop1): 1 truncate cleaned up [ 518.154082][T24748] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,inlinecrypt,debug_want_extra_isize=0x000000000000006c,lazytime,lazytime,minixdf,,errors=continue. Quota mode: none. [ 518.239322][T11314] usb 4-1: USB disconnect, device number 36 [ 518.314330][T24748] EXT4-fs error (device loop1): xattr_find_entry:297: inode #15: comm syz.1.9406: corrupted xattr entries [ 518.484957][ T4279] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 518.515575][ T4279] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 518.566153][ T4279] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.666582][ T4279] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 519.081540][T24785] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9424'. [ 519.247291][T24793] IPv6: NLM_F_REPLACE set, but no existing node found! [ 519.309987][T24797] loop3: detected capacity change from 0 to 512 [ 519.370054][T24797] EXT4-fs (loop3): inline encryption not supported [ 519.384077][T24797] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 519.455451][T24797] EXT4-fs (loop3): 1 truncate cleaned up [ 519.489679][T24797] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,inlinecrypt,debug_want_extra_isize=0x000000000000006c,lazytime,lazytime,minixdf,,errors=continue. Quota mode: none. [ 519.703890][T24797] EXT4-fs error (device loop3): xattr_find_entry:297: inode #15: comm syz.3.9428: corrupted xattr entries [ 519.804264][ T4279] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 519.937107][T24816] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 520.015093][ T4279] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 520.047770][ T4279] stv0680 5-1:4.0: last error: 0, command = 0x0 [ 520.104094][ T4279] usb 5-1: USB disconnect, device number 40 [ 520.775827][T24849] CIFS mount error: No usable UNC path provided in device string! [ 520.775827][T24849] [ 520.825729][T24849] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 521.083252][T24866] loop1: detected capacity change from 0 to 1024 [ 521.194083][T24866] EXT4-fs (loop1): unsupported inode size: 143 [ 521.259845][T24866] EXT4-fs (loop1): blocksize: 1024 [ 521.283731][T24876] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9468'. [ 521.310177][T24878] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 521.829774][T24894] IPv6: sit2: Disabled Multicast RS [ 522.323019][T24867] loop3: detected capacity change from 0 to 40427 [ 522.494534][T24867] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 522.501538][T24867] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 522.552714][T24867] F2FS-fs (loop3): build fault injection attr: rate: 17008, type: 0x1ffff [ 522.603803][T24867] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x1f8 [ 522.698147][T24867] F2FS-fs (loop3): invalid crc value [ 522.782874][T24867] F2FS-fs (loop3): Found nat_bits in checkpoint [ 523.028859][T24867] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 523.064040][T24867] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 523.233038][T24946] loop4: detected capacity change from 0 to 1024 [ 523.719500][T24959] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9508'. [ 523.753345][T24959] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 523.973425][T24866] loop1: detected capacity change from 0 to 32768 [ 524.288404][T24978] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.9516'. [ 524.323475][T24979] netlink: 'syz.1.9515': attribute type 3 has an invalid length. [ 524.373996][T24979] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.9515'. [ 524.409951][T20964] BTRFS: device fsid afd29e67-b8c6-49b0-b0d7-0efab618e2f3 devid 1 transid 8 /dev/loop1 scanned by udevd (20964) [ 525.230645][T25021] loop4: detected capacity change from 0 to 64 [ 525.554142][T25035] IPv6: NLM_F_CREATE should be specified when creating new route [ 525.875305][T25051] loop3: detected capacity change from 0 to 512 [ 526.065018][T25051] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 526.634209][T25081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9563'. [ 526.643261][T25081] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9563'. [ 526.813523][T25090] netlink: 'syz.3.9568': attribute type 21 has an invalid length. [ 526.872051][T25090] netlink: 164 bytes leftover after parsing attributes in process `syz.3.9568'. [ 526.910672][T25093] netlink: 'syz.1.9569': attribute type 15 has an invalid length. [ 526.925016][T25093] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9569'. [ 527.559334][T25123] netlink: 'syz.0.9584': attribute type 3 has an invalid length. [ 527.653194][T25128] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9586'. [ 527.734466][T25128] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9586'. [ 527.774438][T25128] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9586'. [ 527.817697][T25128] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9586'. [ 527.872604][T25132] netlink: 'syz.0.9588': attribute type 39 has an invalid length. [ 527.884495][T25132] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 527.898199][T25091] loop4: detected capacity change from 0 to 32768 [ 528.019282][T25091] XFS (loop4): Mounting V5 Filesystem [ 528.037430][T25135] nvme_tcp: malformed address passed: 1::8009 [ 528.413467][T25091] XFS (loop4): Ending clean mount [ 528.435947][T25091] XFS (loop4): Quotacheck needed: Please wait. [ 528.579818][T25091] XFS (loop4): Quotacheck: Done. [ 528.781752][ T4195] XFS (loop4): Unmounting Filesystem [ 528.975825][T25191] kAFS: unable to lookup cell '' [ 529.144401][ T23] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 529.514790][ T23] usb 1-1: not running at top speed; connect to a high speed hub [ 529.648644][ T23] usb 1-1: config 10 has an invalid interface number: 8 but max is 0 [ 529.672152][ T23] usb 1-1: config 10 has no interface number 0 [ 529.691306][ T23] usb 1-1: config 10 interface 8 has no altsetting 0 [ 529.763754][T25227] IPv6: NLM_F_CREATE should be specified when creating new route [ 529.794074][T25227] IPv6: Can't replace route, no match found [ 529.863643][T25231] __nla_validate_parse: 20 callbacks suppressed [ 529.863663][T25231] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9633'. [ 529.918105][T25231] netlink: 112 bytes leftover after parsing attributes in process `syz.4.9633'. [ 529.924322][ T23] usb 1-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=fe.e6 [ 529.954346][T25235] SET target dimension over the limit! [ 529.973980][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.982170][ T23] usb 1-1: Product: syz [ 530.005135][ T23] usb 1-1: Manufacturer: syz [ 530.009809][ T23] usb 1-1: SerialNumber: syz [ 530.349393][T25257] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9645'. [ 530.464664][ T23] snd-usb-audio: probe of 1-1:10.8 failed with error -2 [ 530.524589][ T23] usb 1-1: USB disconnect, device number 40 [ 530.605531][T25267] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9648'. [ 530.651312][T25270] loop1: detected capacity change from 0 to 512 [ 530.781381][T21595] udevd[21595]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:10.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 530.874717][T25270] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 530.944129][T25270] ext4 filesystem being mounted at /1861/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 530.954335][T25289] netlink: 104 bytes leftover after parsing attributes in process `syz.4.9661'. [ 531.132330][T25297] netlink: 'syz.2.9664': attribute type 7 has an invalid length. [ 531.176497][T25300] loop3: detected capacity change from 0 to 128 [ 531.315330][T25300] EXT4-fs (loop3): mounted filesystem without journal. Opts: resuid=0x0000000000000000,,errors=continue. Quota mode: none. [ 531.454125][T25313] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 531.875843][T25334] loop1: detected capacity change from 0 to 256 [ 531.887476][T25336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9682'. [ 532.027519][T25334] FAT-fs (loop1): Directory bread(block 64) failed [ 532.062979][T25334] FAT-fs (loop1): Directory bread(block 65) failed [ 532.092024][T25334] FAT-fs (loop1): Directory bread(block 66) failed [ 532.136867][T25334] FAT-fs (loop1): Directory bread(block 67) failed [ 532.143653][T25334] FAT-fs (loop1): Directory bread(block 68) failed [ 532.169587][T25350] device geneve2 entered promiscuous mode [ 532.196032][T25334] FAT-fs (loop1): Directory bread(block 69) failed [ 532.197364][T25352] xt_hashlimit: overflow, try lower: 18446744073709551614/255 [ 532.202732][T25334] FAT-fs (loop1): Directory bread(block 70) failed [ 532.274059][T25334] FAT-fs (loop1): Directory bread(block 71) failed [ 532.314138][T25334] FAT-fs (loop1): Directory bread(block 72) failed [ 532.320751][T25334] FAT-fs (loop1): Directory bread(block 73) failed [ 532.452251][T25362] ieee802154 phy1 wpan1: encryption failed: -22 [ 532.846849][T25382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9705'. [ 532.889199][T25384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9707'. [ 532.965121][T25384] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 532.991391][T25386] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9704'. [ 533.033453][T25386] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9704'. [ 533.092050][T25390] device bridge11 entered promiscuous mode [ 533.137446][T25394] ebt_limit: overflow, try lower: 0/0 [ 533.306628][T25403] netlink: 'syz.0.9715': attribute type 2 has an invalid length. [ 533.523686][T25421] loop3: detected capacity change from 0 to 1024 [ 533.691867][T25420] loop1: detected capacity change from 0 to 4096 [ 533.904277][T25420] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 534.017084][T25420] ntfs3: loop1: mft corrupted [ 534.021889][T25420] ntfs3: loop1: Failed to load $Extend. [ 534.355864][T25462] ieee802154 phy1 wpan1: encryption failed: -90 [ 534.837016][T25491] loop4: detected capacity change from 0 to 256 [ 535.043032][T25502] __nla_validate_parse: 20 callbacks suppressed [ 535.043051][T25502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9763'. [ 535.264715][T10457] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 535.304766][T25513] netlink: 256 bytes leftover after parsing attributes in process `syz.2.9770'. [ 535.315009][T25515] netlink: 'syz.1.9769': attribute type 9 has an invalid length. [ 535.322765][T25515] netlink: 'syz.1.9769': attribute type 7 has an invalid length. [ 535.426052][T25515] netlink: 'syz.1.9769': attribute type 8 has an invalid length. [ 535.473981][T25515] netlink: 'syz.1.9769': attribute type 13 has an invalid length. [ 535.518261][T10457] usb 1-1: Using ep0 maxpacket: 8 [ 535.535718][T25522] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 535.574161][T25526] netlink: 'syz.3.9776': attribute type 1 has an invalid length. [ 535.582024][T25526] netlink: 'syz.3.9776': attribute type 3 has an invalid length. [ 535.644158][T25526] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9776'. [ 535.670447][T25526] NCSI netlink: No device for ifindex 2986344450 [ 535.694863][T10457] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 535.725423][T10457] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.797081][T10457] pvrusb2: Hardware description: Terratec Grabster AV400 [ 535.833976][T10457] pvrusb2: ********** [ 535.844016][T10457] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 535.893998][T10457] pvrusb2: Important functionality might not be entirely working. [ 535.912056][T10457] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 535.924064][T11314] ------------[ cut here ]------------ [ 535.931087][ T4279] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 535.941037][T11314] WARNING: CPU: 0 PID: 11314 at net/netfilter/nft_set_pipapo.c:2355 nft_pipapo_destroy+0x8b0/0x960 [ 535.943822][T10457] pvrusb2: ********** [ 535.991987][T11314] Modules linked in: [ 536.010181][T11314] CPU: 0 PID: 11314 Comm: kworker/0:14 Not tainted syzkaller #0 [ 536.020098][ T2425] pvrusb2: Invalid write control endpoint [ 536.034960][T10457] usb 1-1: USB disconnect, device number 41 [ 536.041221][T11314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 536.079022][T11314] Workqueue: events nf_tables_trans_destroy_work [ 536.103346][T11314] RIP: 0010:nft_pipapo_destroy+0x8b0/0x960 [ 536.126797][T11314] Code: 24 80 3c 18 00 74 08 4c 89 f7 e8 7b e1 80 f9 49 c7 06 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e0 9b 3b f9 <0f> 0b e9 ad f7 ff ff 48 c7 c1 30 2a 6b 8e 80 e1 07 80 c1 03 38 c1 [ 536.191335][ T2425] pvrusb2: Invalid write control endpoint [ 536.201440][T11314] RSP: 0018:ffffc9000410fa68 EFLAGS: 00010293 [ 536.213361][ T2425] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 536.224839][T11314] RAX: ffffffff883d8780 RBX: ffff888021fc30f0 RCX: ffff888024aa0000 [ 536.243895][ T2425] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 536.251924][ T2425] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 536.254831][T11314] RDX: 0000000000000000 RSI: ffff888021fc3000 RDI: ffff88805829df28 [ 536.276049][ T2425] pvrusb2: Device being rendered inoperable [ 536.300608][ T2425] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 536.309094][T11314] RBP: ffffc9000410fc30 R08: ffff888024aa0000 R09: 0000000000000008 [ 536.321471][ T2425] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 536.339822][T11314] R10: 0000000000000018 R11: 0000000000000000 R12: ffff888021fc30c0 [ 536.362860][T11314] R13: dffffc0000000000 R14: ffff888021fc3110 R15: dffffc0000000000 [ 536.383759][T11314] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 536.387950][ T2425] pvrusb2: Attached sub-driver cx25840 [ 536.393513][ T4279] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 536.421976][T11314] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 536.428293][ T2425] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 536.439169][ T4279] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 536.454275][T11314] CR2: 00007f68f95c1000 CR3: 00000000575a5000 CR4: 00000000003506f0 [ 536.469312][ T2425] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 536.472620][ T4279] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 536.492124][T11314] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 536.512338][T11314] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 536.531925][ T4279] usb 2-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 536.541464][T11314] Call Trace: [ 536.551361][T11314] [ 536.561324][T11314] ? __lock_acquire+0x7d40/0x7d40 [ 536.566906][ T4279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.583967][T11314] ? do_raw_spin_lock+0x128/0x2f0 [ 536.594895][T11314] nft_set_destroy+0x488/0xa30 [ 536.619083][T11314] ? do_raw_spin_unlock+0x11d/0x230 [ 536.632949][T11314] nf_tables_trans_destroy_work+0xc5d/0xf00 [ 536.648843][T11314] ? __lock_acquire+0x7d40/0x7d40 [ 536.670705][T11314] ? nft_object_dump+0x1e0/0x1e0 [ 536.683299][T11314] ? _raw_spin_unlock_irq+0x1f/0x40 [ 536.697394][T11314] process_one_work+0x867/0xff0 [ 536.710115][T11314] ? worker_detach_from_pool+0x240/0x240 [ 536.725779][T11314] ? lockdep_hardirqs_off+0x70/0x100 [ 536.739931][T11314] ? _raw_spin_lock_irq+0xb7/0xf0 [ 536.752733][T11314] ? _raw_spin_lock_irqsave+0x100/0x100 [ 536.766961][T11314] ? wq_worker_running+0x97/0x170 [ 536.780848][T11314] worker_thread+0xad7/0x12a0 [ 536.793335][T11314] kthread+0x42e/0x520 [ 536.804120][T11314] ? rcu_lock_release+0x20/0x20 [ 536.816578][T11314] ? kthread_blkcg+0xd0/0xd0 [ 536.828985][T11314] ret_from_fork+0x1f/0x30 [ 536.841134][T11314] [ 536.849813][T11314] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 536.857122][T11314] CPU: 0 PID: 11314 Comm: kworker/0:14 Not tainted syzkaller #0 [ 536.864772][T11314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 536.874944][T11314] Workqueue: events nf_tables_trans_destroy_work [ 536.881489][T11314] Call Trace: [ 536.884783][T11314] [ 536.887730][T11314] dump_stack_lvl+0x188/0x250 [ 536.892457][T11314] ? show_regs_print_info+0x20/0x20 [ 536.897759][T11314] ? load_image+0x410/0x410 [ 536.902296][T11314] panic+0x2f8/0x850 [ 536.906215][T11314] ? bpf_jit_dump+0xd0/0xd0 [ 536.910746][T11314] ? ret_from_fork+0x1f/0x30 [ 536.915358][T11314] ? nft_pipapo_destroy+0x8b0/0x960 [ 536.920574][T11314] __warn+0x248/0x2b0 [ 536.924575][T11314] ? nft_pipapo_destroy+0x8b0/0x960 [ 536.929975][T11314] report_bug+0x1b9/0x2e0 [ 536.934426][T11314] handle_bug+0x3a/0x70 [ 536.938606][T11314] exc_invalid_op+0x16/0x40 [ 536.943128][T11314] asm_exc_invalid_op+0x16/0x20 [ 536.948044][T11314] RIP: 0010:nft_pipapo_destroy+0x8b0/0x960 [ 536.953875][T11314] Code: 24 80 3c 18 00 74 08 4c 89 f7 e8 7b e1 80 f9 49 c7 06 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e0 9b 3b f9 <0f> 0b e9 ad f7 ff ff 48 c7 c1 30 2a 6b 8e 80 e1 07 80 c1 03 38 c1 [ 536.973500][T11314] RSP: 0018:ffffc9000410fa68 EFLAGS: 00010293 [ 536.979598][T11314] RAX: ffffffff883d8780 RBX: ffff888021fc30f0 RCX: ffff888024aa0000 [ 536.987584][T11314] RDX: 0000000000000000 RSI: ffff888021fc3000 RDI: ffff88805829df28 [ 536.995574][T11314] RBP: ffffc9000410fc30 R08: ffff888024aa0000 R09: 0000000000000008 [ 537.003575][T11314] R10: 0000000000000018 R11: 0000000000000000 R12: ffff888021fc30c0 [ 537.011573][T11314] R13: dffffc0000000000 R14: ffff888021fc3110 R15: dffffc0000000000 [ 537.019660][T11314] ? nft_pipapo_destroy+0x8b0/0x960 [ 537.025063][T11314] ? nft_pipapo_destroy+0x8b0/0x960 [ 537.030283][T11314] ? __lock_acquire+0x7d40/0x7d40 [ 537.035329][T11314] ? do_raw_spin_lock+0x128/0x2f0 [ 537.040374][T11314] nft_set_destroy+0x488/0xa30 [ 537.045252][T11314] ? do_raw_spin_unlock+0x11d/0x230 [ 537.050662][T11314] nf_tables_trans_destroy_work+0xc5d/0xf00 [ 537.056661][T11314] ? __lock_acquire+0x7d40/0x7d40 [ 537.061713][T11314] ? nft_object_dump+0x1e0/0x1e0 [ 537.066760][T11314] ? _raw_spin_unlock_irq+0x1f/0x40 [ 537.072078][T11314] process_one_work+0x867/0xff0 [ 537.076964][T11314] ? worker_detach_from_pool+0x240/0x240 [ 537.082615][T11314] ? lockdep_hardirqs_off+0x70/0x100 [ 537.087931][T11314] ? _raw_spin_lock_irq+0xb7/0xf0 [ 537.093088][T11314] ? _raw_spin_lock_irqsave+0x100/0x100 [ 537.098834][T11314] ? wq_worker_running+0x97/0x170 [ 537.103880][T11314] worker_thread+0xad7/0x12a0 [ 537.108615][T11314] kthread+0x42e/0x520 [ 537.112704][T11314] ? rcu_lock_release+0x20/0x20 [ 537.117571][T11314] ? kthread_blkcg+0xd0/0xd0 [ 537.122186][T11314] ret_from_fork+0x1f/0x30 [ 537.126776][T11314] [ 537.130150][T11314] Kernel Offset: disabled [ 537.149590][T11314] Rebooting in 86400 seconds..