last executing test programs: 4.593854766s ago: executing program 3 (id=11335): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)='3', 0x1}], 0x1) 1.800793575s ago: executing program 2 (id=11391): r0 = syz_mount_image$btrfs(&(0x7f00000000c0), &(0x7f00000015c0)='./file0\x00', 0x2000000, &(0x7f0000001400), 0x0, 0x559e, &(0x7f0000001600)="$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") ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x5, 0x7, 0xf500000}) 1.478314203s ago: executing program 0 (id=11399): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000300)={0x400, 0x4, 0x200, 0x3, 0x7, 0x2, 0x2, 0x9}, &(0x7f0000000380)=0x20) 1.288876308s ago: executing program 0 (id=11413): syz_mount_image$hfsplus(&(0x7f0000000500), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000004c0)=ANY=[], 0x4, 0x691, &(0x7f00000014c0)="$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") link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.074027684s ago: executing program 0 (id=11406): socketpair(0x1e, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) 956.609107ms ago: executing program 0 (id=11410): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000940)={0x60, 0x21, 0x356, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {0x0, 0x1}, 0x0, 0x0, 0x3}) 851.236649ms ago: executing program 0 (id=11411): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x1b0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2}}, @common=@inet=@tos={{0x28}, {0x5, 0x81, 0x1}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xe}, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) 849.255619ms ago: executing program 3 (id=11412): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, &(0x7f0000001700)) 817.48264ms ago: executing program 4 (id=11414): r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_int(r0, 0x0, 0x16, 0x0, 0x0) 814.69376ms ago: executing program 1 (id=11415): r0 = socket(0x1e, 0x4, 0x0) sendmmsg$sock(r0, &(0x7f0000000100)=[{{&(0x7f0000000180)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e21}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{0x0, 0x0, 0x0}}], 0x2, 0x80) 753.219572ms ago: executing program 3 (id=11416): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000002900)={0x0, 0x0, &(0x7f00000028c0)={&(0x7f0000002880)={0x28, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) 719.709562ms ago: executing program 4 (id=11417): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=@newqdisc={0x84, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x8, 0x9, 0x4, 0xd580, 0x41552318, 0xa}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x7fffffffffffffff}, @TCA_NETEM_RATE={0x14, 0x6, {0x7b99, 0x1, 0x0, 0x3}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x0, 0x8}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x7426b133c6ad21ab}]}}}]}, 0x84}}, 0x0) 719.224892ms ago: executing program 1 (id=11418): syz_mount_image$hfsplus(&(0x7f0000000500), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000004c0)=ANY=[], 0x4, 0x691, &(0x7f00000014c0)="$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") link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 658.631984ms ago: executing program 4 (id=11419): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x33, 0x701, 0x70bd2c, 0x25dfdbfe, {0x12}}, 0x14}}, 0x24044884) 657.970584ms ago: executing program 2 (id=11420): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xfffffee4, &(0x7f00000000c0)={&(0x7f0000000780)=@newlink={0x58, 0x10, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x14318}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}, @IFLA_INET6_ADDR_GEN_MODE={0x0, 0x8, 0x5c}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) 578.479666ms ago: executing program 3 (id=11421): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002ac0)=@polexpire={0xd8, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x300, 0x5}, {}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}}, [@sec_ctx={0xc, 0x8, {0x8}}, @mark={0xc, 0x15, {0x0, 0xfffffffa}}]}, 0xd8}}, 0x0) 511.850288ms ago: executing program 4 (id=11422): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={0x24, 0x12, 0xa01, 0x0, 0x0, {0x7}, [@nested={0x10, 0x129, 0x0, 0x1, [@nested={0x4, 0x11a}, @nested={0x8, 0x57, 0x0, 0x1, [@nested={0x4, 0x39}]}]}]}, 0x24}}, 0x0) 482.989219ms ago: executing program 0 (id=11423): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)='3', 0x1}], 0x1) 431.90151ms ago: executing program 3 (id=11424): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8}}, [@filter_kind_options=@f_route={{0x4e}, {0x4}}]}, 0x34}}, 0x0) 380.003771ms ago: executing program 1 (id=11425): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000002840), 0x1, 0x0) writev(r0, &(0x7f0000009640)=[{&(0x7f0000007640)="d5", 0x1}, {0x0, 0x300}], 0x2) 374.699401ms ago: executing program 4 (id=11426): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x4, 0x1, 0xa, 0x9, 0x17, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback={0x0, 0xffff888101827518}, 0x1, 0x80, 0xffffffff, 0x1000a}}) 348.002592ms ago: executing program 2 (id=11427): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x20, 0x3, 0x260, 0x100, 0xa, 0x148, 0x100, 0x10, 0x1f0, 0x2a8, 0x2a8, 0x1f0, 0x2a8, 0x3, 0x0, {[{{@ip={@loopback, @multicast2, 0xffffffff, 0xffffffff, 'pimreg1\x00', 'veth0_to_bond\x00', {0xff}, {0xff}, 0x4, 0x1, 0x50}, 0x0, 0x70, 0xdc, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0x5, 0x18f, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0x0, 0x0, 'pimreg1\x00', 'tunl0\x00', {}, {}, 0x88, 0x2}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth0_vlan\x00', {0x2c, 0x1, 0xfffffff8, 0x0, 0x3, 0x3, 0x101, 0x78, 0x78}, {0x10}}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x2, 0x5}, {0xffffffffffffffff, 0x6, 0x5}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x2bc) 340.108812ms ago: executing program 3 (id=11428): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_usb_connect$uac3(0x3, 0x9e, &(0x7f0000000380)=ANY=[@ANYBLOB="12011001000000403512138240000102030109028c00030108c010080b0004012130070904010000010130000a24"], 0x0) 236.748825ms ago: executing program 1 (id=11429): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newsa={0x154, 0x10, 0x633, 0x0, 0x200000, {{@in=@local, @in6=@empty, 0xffff, 0x3ffc, 0x5e21, 0x8001, 0x0, 0x20}, {@in=@loopback, 0x4d4, 0x32}, @in=@remote, {0x323, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000, 0x7efffffe}, {0x0, 0xfffffffffffffffc, 0x0, 0x20000000000}, {0x7, 0x0, 0x2}, 0x70bd01, 0x3500, 0x2, 0x1, 0x1}, [@algo_crypt={0x48, 0x2, {{'ctr(cast6)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e1e, 0x0, @in=@private=0xa010100}}]}, 0x154}}, 0x24008800) 236.580465ms ago: executing program 2 (id=11430): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x4001, 0x3, 0x238, 0x0, 0x37f, 0x148, 0xe8, 0x148, 0x1a0, 0x240, 0x240, 0x1a0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr=0x64010101, @rand_addr=0x64010101, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x6, 0x2}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x23}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x1000}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x2, 0xffffff19, 'pptp\x00', {0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) 236.107205ms ago: executing program 4 (id=11431): r0 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) fsetxattr$security_ima(r0, &(0x7f0000000080), &(0x7f0000000240)=ANY=[@ANYBLOB="0302"], 0xf, 0x0) 79.857498ms ago: executing program 2 (id=11432): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_buf(r0, 0x29, 0xcb, 0x0, 0x2) 79.728208ms ago: executing program 1 (id=11433): r0 = socket$inet(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(r0, 0x10d, 0x8a, 0xfffffffffffffffe, 0x0) 13.60509ms ago: executing program 1 (id=11434): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x12, 0x3, "91abc12404cf378042f26c43f91f"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x90}}, 0x0) 0s ago: executing program 2 (id=11435): r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101080, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'8255\x00', [0xfffffffc, 0xfffffffc, 0x4, 0x4, 0x0, 0xfffffff7, 0x8001, 0xa22, 0xfffffff8, 0x6, 0x6, 0xc3, 0x5006, 0x1000007, 0x1, 0x10003, 0x800ffc, 0x7fffffff, 0x1ff, 0x3ff, 0x1001010, 0x1ff, 0x8, 0x3, 0x8001, 0x5, 0x3ff, 0x9, 0x404, 0x3, 0xfffd]}) kernel console output (not intermixed with test programs): T23690] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 817.427721][T23690] ext4 filesystem being mounted at /1690/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 817.600766][T23714] loop3: detected capacity change from 0 to 8192 [ 817.652221][T23720] netlink: 380 bytes leftover after parsing attributes in process `syz.2.8921'. [ 817.776777][T23714] loop3: p1 < > p2 p4 < p5 > [ 817.801873][T23714] loop3: partition table partially beyond EOD, truncated [ 817.809118][T23714] loop3: p1 start 134217728 is beyond EOD, truncated [ 817.828542][T23722] loop0: detected capacity change from 0 to 1024 [ 817.848101][T23725] netlink: 288 bytes leftover after parsing attributes in process `syz.2.8923'. [ 817.858288][T23726] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 817.891103][T23714] loop3: p2 size 591360 extends beyond EOD, truncated [ 817.915901][T23722] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 817.939718][T23714] loop3: p5 size 591360 extends beyond EOD, truncated [ 817.954261][T23722] fuse: Bad value for 'fd' [ 818.202076][ T4866] udevd[4866]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 818.202244][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 818.231214][ T4175] udevd[4175]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 818.400500][ T5522] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 818.838930][ T5522] usb 5-1: unable to get BOS descriptor or descriptor too short [ 818.862573][T23787] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 818.877662][T23788] loop3: detected capacity change from 0 to 256 [ 818.924497][ T5522] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 818.938314][ T5522] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 818.959387][ T5522] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 819.180977][ T5522] usb 5-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 819.190121][ T5522] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.227483][ T5522] usb 5-1: Product: syz [ 819.231704][ T5522] usb 5-1: Manufacturer: syz [ 819.273933][ T5522] usb 5-1: SerialNumber: syz [ 819.306019][T23811] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8965'. [ 819.485596][T23820] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8970'. [ 819.672984][ T5522] usb 5-1: 1:1 : no or invalid class specific endpoint descriptor [ 819.680878][ T5522] usb 5-1: 1:1 : sample bitwidth 62 in over sample bytes 0 [ 819.709090][ T5522] usb 5-1: 1:1 : unsupported sample bitwidth 62 in 0 bytes [ 819.727663][ T5522] usb 5-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 819.833102][ T5522] usb 5-1: unit 2 not found! [ 819.837944][ T5522] usb 5-1: unit 0 not found! [ 819.892225][ T5522] usb 5-1: USB disconnect, device number 51 [ 819.937926][T23844] device vti0 entered promiscuous mode [ 820.045011][T23850] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 820.060083][T23850] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 820.081896][T23850] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 820.186616][ T5619] udevd[5619]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 820.264945][T23850] device wlan0 left promiscuous mode [ 820.306753][T23850] device gtp0 left promiscuous mode [ 820.312040][T23858] dlm: plock device version mismatch: kernel (1.2.0), user (1952804395.1769107551.1915428975) [ 820.394836][T23864] loop4: detected capacity change from 0 to 256 [ 820.538053][T23866] __nla_validate_parse: 2 callbacks suppressed [ 820.538071][T23866] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8994'. [ 821.041183][ T5522] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 821.258583][T23911] netlink: 256 bytes leftover after parsing attributes in process `syz.1.9014'. [ 821.329769][ T5522] usb 4-1: Using ep0 maxpacket: 8 [ 821.458169][ T5522] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 821.482512][ T5522] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 821.503318][ T5522] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 821.529118][ T5522] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 173 [ 821.557711][ T5522] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 821.578879][ T5522] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.596327][ T5522] usb 4-1: config 0 descriptor?? [ 821.629877][T23878] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 821.746914][ T4942] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 821.784262][T23937] loop4: detected capacity change from 0 to 1024 [ 821.891216][T23937] hfsplus: trying to free free bnode 0(1) [ 822.110793][ T4942] usb 3-1: not running at top speed; connect to a high speed hub [ 822.123384][T18877] usb 4-1: USB disconnect, device number 56 [ 822.228134][ T4942] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 822.291426][T23967] netlink: 'syz.4.9041': attribute type 4 has an invalid length. [ 822.300520][T23967] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9041'. [ 822.334145][T23967] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 822.440885][T23973] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9045'. [ 822.463219][ T4942] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 822.472405][ T4942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.481188][T23973] netlink: 'syz.1.9045': attribute type 1 has an invalid length. [ 822.489319][ T4942] usb 3-1: Product: syz [ 822.493694][ T4942] usb 3-1: Manufacturer: syz [ 822.503128][T23973] netlink: 92 bytes leftover after parsing attributes in process `syz.1.9045'. [ 822.514498][ T4942] usb 3-1: SerialNumber: syz [ 822.585645][ T4942] keyspan 3-1:1.0: Keyspan 4 port adapter converter detected [ 822.614175][ T4942] keyspan 3-1:1.0: unsupported endpoint type 0 [ 822.627496][T23979] loop1: detected capacity change from 0 to 256 [ 822.658030][ T4942] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 822.674048][ T4942] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 822.683513][ T150] block nbd4: Attempted send on invalid socket [ 822.689775][ T150] blk_update_request: I/O error, dev nbd4, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 822.719623][T23983] VFS: unable to read V7 FS superblock on device nbd4. [ 822.726526][T23983] VFS: could not find a valid V7 on nbd4. [ 822.736366][ T4942] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 822.777975][ T4942] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 822.812865][T23985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 823.018901][ T4942] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 823.031128][T23988] loop4: detected capacity change from 0 to 4096 [ 823.065575][ T5522] usb 3-1: USB disconnect, device number 41 [ 823.094620][ T5522] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 823.155485][ T5522] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 823.216878][ T5522] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 823.260144][ T5522] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 823.299491][ T5522] keyspan 3-1:1.0: device disconnected [ 823.363890][T24005] netlink: 'syz.1.9060': attribute type 8 has an invalid length. [ 823.645305][T24023] netlink: 'syz.4.9070': attribute type 5 has an invalid length. [ 823.657856][ T4942] usb 1-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e [ 823.671009][ T4942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.681638][T24020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9068'. [ 823.712945][ T4942] usb 1-1: Product: syz [ 823.723440][ T4942] usb 1-1: Manufacturer: syz [ 823.737790][ T4942] usb 1-1: SerialNumber: syz [ 823.769456][ T4942] usb 1-1: config 0 descriptor?? [ 823.846767][ T4942] hub 1-1:0.0: bad descriptor, ignoring hub [ 823.858169][ T4942] hub: probe of 1-1:0.0 failed with error -5 [ 823.878442][ T4942] usbsevseg 1-1:0.0: USB 7 Segment device now attached [ 823.933272][T24039] netlink: 'syz.1.9078': attribute type 21 has an invalid length. [ 823.952078][T24039] IPv6: NLM_F_CREATE should be specified when creating new route [ 823.980266][T24039] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9078'. [ 824.092325][T24050] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9083'. [ 824.106425][T24050] netlink: 17 bytes leftover after parsing attributes in process `syz.4.9083'. [ 824.184285][ T4941] usb 1-1: USB disconnect, device number 42 [ 824.201178][ T4941] usbsevseg 1-1:0.0: USB 7 Segment now disconnected [ 824.251201][T24060] xt_TCPMSS: Only works on TCP SYN packets [ 824.318867][T24065] netlink: 'syz.1.9091': attribute type 1 has an invalid length. [ 824.358705][T24067] netlink: 100 bytes leftover after parsing attributes in process `syz.3.9102'. [ 824.367948][T24065] netlink: 'syz.1.9091': attribute type 3 has an invalid length. [ 824.382551][T24065] NCSI netlink: No device for ifindex 2986344450 [ 824.715664][T24092] loop2: detected capacity change from 0 to 512 [ 824.776446][T24092] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 824.805879][T24092] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 824.826592][T24092] EXT4-fs (loop2): orphan cleanup on readonly fs [ 824.839201][T24092] EXT4-fs (loop2): 1 truncate cleaned up [ 824.868834][T24092] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 825.437711][T24141] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (6) [ 825.502169][T24147] xt_l2tp: unknown flags: 17 [ 825.558632][T24149] loop0: detected capacity change from 0 to 1024 [ 825.736104][T24149] hfsplus: trying to free free bnode 0(1) [ 826.005822][ T263] block nbd2: Attempted send on invalid socket [ 826.013126][ T263] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 826.027957][T24168] XFS (nbd2): SB validate failed with error -5. [ 826.279461][ T23] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 826.494790][T24206] x_tables: unsorted underflow at hook 2 [ 826.794289][T24215] nvme nvme0: rdma connection establishment failed (-104) [ 826.802398][T24224] loop2: detected capacity change from 0 to 2048 [ 826.835681][ T23] usb 2-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=d0.db [ 826.844852][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.869505][ T23] usb 2-1: Product: syz [ 826.893321][ T23] usb 2-1: Manufacturer: syz [ 826.908608][ T23] usb 2-1: SerialNumber: syz [ 826.916649][T24224] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 826.946642][ T23] usb 2-1: config 0 descriptor?? [ 827.215133][T24248] netlink: 'syz.3.9178': attribute type 1 has an invalid length. [ 827.248450][T24248] __nla_validate_parse: 4 callbacks suppressed [ 827.248468][T24248] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9178'. [ 827.273811][ T23] usb 2-1: USB disconnect, device number 46 [ 827.407644][T24258] loop2: detected capacity change from 0 to 128 [ 827.414281][T18664] Bluetooth: hci4: command 0x0405 tx timeout [ 827.530516][T24258] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 827.577739][T24258] hpfs: filesystem error: improperly stopped [ 827.589230][T24258] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 827.610879][T24258] hpfs: You really don't want any checks? You are crazy... [ 827.629891][T24258] hpfs: Code page index out of array [ 827.644238][T24258] hpfs: code page support is disabled [ 827.661128][T24258] hpfs: hpfs_map_4sectors(): unaligned read [ 827.691200][T24258] hpfs: hpfs_map_4sectors(): unaligned read [ 827.712781][T24258] hpfs: filesystem error: unable to find root dir [ 827.780925][T24268] loop3: detected capacity change from 0 to 4096 [ 827.980810][T24268] ntfs3: loop3: ino=5, "/" directory corrupted [ 828.002055][T24268] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 828.065626][T24286] loop4: detected capacity change from 0 to 164 [ 828.179829][T24286] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 828.689281][T24320] netlink: 200 bytes leftover after parsing attributes in process `syz.3.9223'. [ 828.898640][ T4941] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 828.914099][T24290] loop2: detected capacity change from 0 to 32768 [ 828.948539][T24290] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.9196 (24290) [ 829.013667][T24290] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 829.050492][T24290] BTRFS info (device loop2): using free space tree [ 829.057086][T24290] BTRFS info (device loop2): has skinny extents [ 829.088606][T24290] BTRFS info (device loop2): enabling ssd optimizations [ 829.111433][T24338] loop0: detected capacity change from 0 to 2048 [ 829.187351][ T4941] usb 2-1: Using ep0 maxpacket: 16 [ 829.199548][T24338] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=2362, location=2362 [ 829.287003][T24338] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 829.381705][ T4941] usb 2-1: unable to get BOS descriptor or descriptor too short [ 829.390114][T24338] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 829.465675][ T4941] usb 2-1: config 1 interface 0 altsetting 64 bulk endpoint 0x3 has invalid maxpacket 255 [ 829.486912][ T4941] usb 2-1: config 1 interface 0 has no altsetting 0 [ 829.499134][T24338] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 829.649488][T24337] loop4: detected capacity change from 0 to 32768 [ 829.695840][ T26] audit: type=1800 audit(1788477087.308:39): pid=24338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.9219" name=2E02 dev="loop0" ino=1367 res=0 errno=0 [ 829.731783][ T26] audit: type=1800 audit(1788477087.336:40): pid=24337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.9221" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 829.764794][ T4941] usb 2-1: string descriptor 0 read error: -22 [ 829.776674][ T4941] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 829.793180][ T4941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.850456][T24316] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 829.903719][ T4941] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 829.976249][T24371] xt_connbytes: Forcing CT accounting to be enabled [ 830.011264][T24371] set match dimension is over the limit! [ 830.161381][ T4941] usb 2-1: USB disconnect, device number 47 [ 830.203429][T24381] No such timeout policy "syz1" [ 830.288851][ T26] audit: type=1400 audit(1788477087.870:41): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=24386 comm="syz.0.9237" [ 830.837296][T18879] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 830.862517][T24429] loop3: detected capacity change from 0 to 64 [ 831.009974][T24429] hfs: inconsistency in B*Tree (1,0,2,2,3) [ 831.187512][T24451] IPv6: NLM_F_CREATE should be specified when creating new route [ 831.240243][T18879] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 831.268169][T18879] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 831.316425][T18879] usb 5-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 831.362946][T24460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9273'. [ 831.372207][T18879] usb 5-1: config 1 interface 0 has no altsetting 0 [ 831.446311][T24462] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 831.455178][T24467] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9276'. [ 831.571558][T18879] usb 5-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 831.580808][T18879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.601311][T24475] usb usb8: usbfs: process 24475 (syz.3.9279) did not claim interface 0 before use [ 831.624929][T18879] usb 5-1: Product: syz [ 831.629159][T18879] usb 5-1: Manufacturer: syz [ 831.666272][T18879] usb 5-1: SerialNumber: syz [ 831.728424][T18879] usb-storage 5-1:1.0: USB Mass Storage device detected [ 831.761861][T18879] usb-storage 5-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 831.788331][T24491] loop1: detected capacity change from 0 to 64 [ 831.802563][T24490] loop2: detected capacity change from 0 to 256 [ 831.844873][T24490] exfat: Deprecated parameter 'utf8' [ 831.852865][T24493] loop0: detected capacity change from 0 to 512 [ 831.860164][T24490] exfat: Deprecated parameter 'utf8' [ 831.865835][T24490] exfat: Deprecated parameter 'utf8' [ 831.884825][T24491] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 831.892925][T24490] exfat: Deprecated parameter 'namecase' [ 831.952532][T24490] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 831.975651][ T4955] usb 5-1: USB disconnect, device number 52 [ 832.003752][T24493] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fffff00) [ 832.038260][T24493] FAT-fs (loop0): Filesystem has been set read-only [ 832.328703][T24509] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 832.619642][T24520] loop0: detected capacity change from 0 to 4096 [ 832.764164][T24520] ntfs3: loop0: ino=5, "/" directory corrupted [ 832.779336][T24520] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 832.875598][T18880] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 833.025389][T18879] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 833.107508][T24557] netlink: 156 bytes leftover after parsing attributes in process `syz.0.9320'. [ 833.305859][T18880] usb 5-1: unable to get BOS descriptor or descriptor too short [ 833.321690][ T4941] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 833.420950][T18879] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 833.430776][T18879] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 833.440142][T18880] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 833.458912][T18880] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 833.468941][T18879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.645462][T18880] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 833.676941][T18880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.694373][T18880] usb 5-1: Product: syz [ 833.714002][T18880] usb 5-1: Manufacturer: syz [ 833.718672][T18880] usb 5-1: SerialNumber: syz [ 833.752727][ T4941] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 833.782667][ T4941] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 833.793846][T18880] usb 5-1: selecting invalid altsetting 1 [ 833.804355][ T4941] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 833.815970][T18880] usb 5-1: unit 6 not found! [ 833.821498][ T4941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.987603][T18879] qmi_wwan: probe of 2-1:1.0 failed with error -22 [ 834.010254][T18879] usb 2-1: USB disconnect, device number 48 [ 834.117409][T24592] loop0: detected capacity change from 0 to 40427 [ 834.124063][ T4941] usb 3-1: USB disconnect, device number 42 [ 834.141496][T24592] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 834.157690][T24592] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 834.178574][T24592] F2FS-fs (loop0): invalid crc value [ 834.213691][T24592] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 834.244130][T18880] usb 5-1: cannot get ctl value: req = 0x82, wValue = 0x100, wIndex = 0x200, type = 3 [ 834.253744][T18880] usb 5-1: 2:0: cannot get min/max values for control 1 (id 2) [ 834.295982][T24592] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 834.303284][T18880] usb 5-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x200, type = 3 [ 834.313003][T24592] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 834.341181][T18880] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 834.362271][T18880] usb 5-1: USB disconnect, device number 53 [ 834.406033][T24592] fscrypt (loop0, inode 3): Error -61 getting encryption context [ 834.611229][ T5619] udevd[5619]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 834.767605][T24614] loop1: detected capacity change from 0 to 4096 [ 834.824032][T24614] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 834.946763][T24614] ntfs: volume version 3.1. [ 835.083173][T24634] loop0: detected capacity change from 0 to 64 [ 835.201558][T24634] hfs: inconsistency in B*Tree (1,0,2,2,3) [ 835.388461][T24645] netlink: 'syz.4.9361': attribute type 4 has an invalid length. [ 835.445573][T24645] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9361'. [ 835.508195][T24645] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 835.703828][T24656] ipt_CLUSTERIP: unknown mode 3918972798 [ 835.788877][T24671] loop2: detected capacity change from 0 to 64 [ 835.905087][T24671] hfs: inconsistency in B*Tree (1,0,2,2,3) [ 835.926986][T24679] device bridge2 entered promiscuous mode [ 836.141834][T24697] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9385'. [ 836.402952][T24721] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9397'. [ 836.462017][ T26] audit: type=1400 audit(1788477093.641:42): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=24724 comm="syz.0.9399" [ 836.574899][ T4955] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 836.685509][T24738] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9405'. [ 836.715783][T24738] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9405'. [ 836.786561][T24738] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9405'. [ 836.980979][ T4955] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 837.208697][ T4955] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 837.224102][ T4955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.248983][ T4955] usb 5-1: Product: syz [ 837.262578][ T4955] usb 5-1: Manufacturer: syz [ 837.276806][ T4955] usb 5-1: SerialNumber: syz [ 837.298363][ T4955] usb 5-1: config 0 descriptor?? [ 837.326355][T24758] syz.1.9414 uses old SIOCAX25GETINFO [ 837.333940][T24707] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 837.369895][ T4955] port100 5-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 837.597219][T24762] loop2: detected capacity change from 0 to 128 [ 837.608326][ T4955] usb 5-1: USB disconnect, device number 54 [ 837.750251][T24748] loop3: detected capacity change from 0 to 40427 [ 837.905803][T24748] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 837.917521][T24762] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 837.953660][T24748] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 837.974125][T24762] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 837.999504][T24748] F2FS-fs (loop3): invalid crc value [ 838.033012][T24748] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 838.257888][T24748] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 838.291098][T24748] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 838.427541][T24748] fscrypt (loop3, inode 3): Error -61 getting encryption context [ 838.505868][T24786] program syz.2.9427 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 839.182846][T24822] loop1: detected capacity change from 0 to 256 [ 839.292987][T24824] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 839.401162][T24828] loop4: detected capacity change from 0 to 1764 [ 839.648593][T24840] ipt_rpfilter: unknown options [ 839.799559][T24844] device bridge3 entered promiscuous mode [ 839.828983][T24846] loop1: detected capacity change from 0 to 512 [ 839.842996][T24848] loop2: detected capacity change from 0 to 256 [ 840.088081][T24804] ODEBUG: Out of memory. ODEBUG disabled [ 840.347860][T24804] syz.0.9437 (24804): drop_caches: 2 [ 840.406657][T24846] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c018, mo2=0002] [ 840.456007][T24846] EXT4-fs (loop1): orphan cleanup on readonly fs [ 840.477320][T24870] loop4: detected capacity change from 0 to 1024 [ 840.486936][T24846] EXT4-fs warning (device loop1): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 840.556917][T24846] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 840.581626][T24846] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #13: comm syz.1.9457: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 840.620771][T24846] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.9457: couldn't read orphan inode 13 (err -117) [ 840.657662][T24870] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 840.711292][T24846] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000002,noblock_validity,min_batch_time=0x00000000000052ad,grpquota,debug,journal_dev=0x0000000000000001,mb_optimize_scan=0x0000000000000001,inode_readahead_blks=0x0000000000002000,,errors=continue. Quota mode: writeback. [ 840.769898][T24870] EXT4-fs error (device loop4): ext4_xattr_set_entry:1615: inode #2: comm syz.4.9458: corrupted xattr entries [ 841.027975][T24846] EXT4-fs (loop1): Cannot specify journal on remount [ 841.081792][T24900] loop3: detected capacity change from 0 to 1764 [ 841.089771][T24904] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.9481'. [ 841.300406][T24904] syz.0.9481 (24904) used greatest stack depth: 18464 bytes left [ 841.562253][T24923] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9489'. [ 841.658939][T24896] loop2: detected capacity change from 0 to 32768 [ 842.425590][T24964] device bridge1 entered promiscuous mode [ 842.506974][T24910] loop4: detected capacity change from 0 to 40427 [ 842.591828][T24910] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 842.613295][T24910] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 842.660590][T24910] F2FS-fs (loop4): invalid crc value [ 842.721267][T24910] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 842.881748][T24994] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.9523'. [ 842.994761][T24910] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 843.026456][T24910] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 843.126425][T24910] fscrypt (loop4, inode 3): Error -61 getting encryption context [ 843.295640][T25014] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.9528'. [ 843.618412][T25039] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.9536'. [ 843.729005][T25045] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9538'. [ 843.769220][T25045] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9538'. [ 843.778229][T25045] netlink: 1 bytes leftover after parsing attributes in process `syz.0.9538'. [ 843.803819][T25047] loop2: detected capacity change from 0 to 128 [ 843.942535][T25052] xt_ipcomp: unknown flags 12 [ 844.078807][T25058] loop2: detected capacity change from 0 to 256 [ 844.345499][T25075] xt_TPROXY: Can be used only with -p tcp or -p udp [ 844.506570][T25085] kAFS: unable to lookup cell '.,' [ 844.612024][T25091] netlink: 'syz.3.9559': attribute type 16 has an invalid length. [ 844.674303][T25091] netlink: 'syz.3.9559': attribute type 3 has an invalid length. [ 844.693811][T25091] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9559'. [ 844.801661][T25054] loop0: detected capacity change from 0 to 32768 [ 844.853647][T25102] overlayfs: workdir and upperdir must reside under the same mount [ 845.169879][T18877] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 845.292066][T25130] xt_recent: Unsupported userspace flags (000000b1) [ 845.338357][T25132] nfs4: Bad value for 'source' [ 845.376092][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 845.382472][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 845.453469][T18877] usb 5-1: Using ep0 maxpacket: 8 [ 845.591400][T18877] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 845.626880][T18877] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 845.675878][T18877] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 845.875479][T18877] usb 5-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 845.895461][T18877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.929044][T18877] usb 5-1: Product: syz [ 845.936792][T18877] usb 5-1: Manufacturer: syz [ 845.971608][T18877] usb 5-1: SerialNumber: syz [ 846.226243][T25189] loop2: detected capacity change from 0 to 256 [ 846.275694][T25189] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010895, chksum : 0x816c887a, utbl_chksum : 0xe619d30d) [ 846.367246][T18877] usb 5-1: Unsupported UAC3 BADD profile [ 846.400831][T18877] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 846.431408][T18877] usb 5-1: USB disconnect, device number 55 [ 846.442830][T25193] loop3: detected capacity change from 0 to 4096 [ 846.510771][T25193] EXT4-fs (loop3): Test dummy encryption mode enabled [ 846.577708][T25193] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue. Quota mode: writeback. [ 846.720651][ T5619] udevd[5619]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 846.956757][T25201] loop0: detected capacity change from 0 to 32768 [ 847.259460][T25239] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 847.441083][T25249] overlayfs: workdir and upperdir must reside under the same mount [ 847.515669][T25257] program syz.3.9632 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 847.735715][T18879] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 847.889999][T25273] tmpfs: Bad value for 'mpol' [ 847.903207][T25263] loop3: detected capacity change from 0 to 8192 [ 847.977927][T25263] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 847.989131][T25263] REISERFS (device loop3): using journaled data mode [ 847.996202][T25263] reiserfs: using flush barriers [ 848.006891][T25263] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 848.025063][T25263] REISERFS (device loop3): checking transaction log (loop3) [ 848.033717][T25263] REISERFS (device loop3): Using tea hash to sort names [ 848.042198][T25263] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 848.056503][T25263] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 848.078880][T18879] usb 5-1: not running at top speed; connect to a high speed hub [ 848.175107][T18879] usb 5-1: config 88 has an invalid interface number: 11 but max is 0 [ 848.183432][T18879] usb 5-1: config 88 has no interface number 0 [ 848.233788][T18879] usb 5-1: config 88 interface 11 has no altsetting 0 [ 848.441273][T18879] usb 5-1: New USB device found, idVendor=0545, idProduct=800d, bcdDevice= 3.0a [ 848.450407][T18879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.488780][T18879] usb 5-1: Product: syz [ 848.493018][T18879] usb 5-1: Manufacturer: syz [ 848.498401][T18879] usb 5-1: SerialNumber: syz [ 848.578517][T25305] netlink: 'syz.0.9655': attribute type 10 has an invalid length. [ 848.597441][T25305] netlink: 210880 bytes leftover after parsing attributes in process `syz.0.9655'. [ 848.654953][ T4941] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 848.856706][T18879] usb 5-1: USB disconnect, device number 56 [ 848.967506][T25319] xt_CONNSECMARK: invalid mode: 66 [ 849.061474][ T4941] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 849.072272][ T4941] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 849.081238][ T4941] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 849.141765][T25327] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 849.333673][ T4941] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 849.345310][ T4941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.370280][ T4941] usb 2-1: Product: syz [ 849.387677][ T4941] usb 2-1: Manufacturer: syz [ 849.403283][ T4941] usb 2-1: SerialNumber: syz [ 849.483694][ T4941] cdc_ncm 2-1:1.0: skipping garbage [ 849.499381][ T4941] usb 2-1: selecting invalid altsetting 1 [ 849.707110][T25364] sctp: [Deprecated]: syz.0.9685 (pid 25364) Use of int in maxseg socket option. [ 849.707110][T25364] Use struct sctp_assoc_value instead [ 849.800504][T25359] loop3: detected capacity change from 0 to 4096 [ 849.970066][ T4941] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 849.976142][ T4941] cdc_ncm 2-1:1.0: bind() failure [ 850.016705][ T4941] usb 2-1: USB disconnect, device number 49 [ 850.023462][T18664] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 850.070291][T18880] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 850.121114][T25379] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9690'. [ 850.139826][T25379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9690'. [ 850.264959][T25385] loop0: detected capacity change from 0 to 512 [ 850.344339][T18880] usb 3-1: Using ep0 maxpacket: 8 [ 850.353752][T25377] loop3: detected capacity change from 0 to 32768 [ 850.360980][T25385] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 850.392573][T25385] FAT-fs (loop0): Directory bread(block 1056) failed [ 850.400980][T25385] FAT-fs (loop0): Directory bread(block 1057) failed [ 850.407730][T25385] FAT-fs (loop0): Directory bread(block 1058) failed [ 850.415890][T25385] FAT-fs (loop0): Directory bread(block 1059) failed [ 850.422853][T25385] FAT-fs (loop0): Directory bread(block 1060) failed [ 850.430265][T18664] usb 5-1: config 0 has an invalid interface number: 11 but max is 0 [ 850.438385][T18664] usb 5-1: config 0 has no interface number 0 [ 850.458411][T25385] FAT-fs (loop0): Directory bread(block 1061) failed [ 850.466247][T25385] FAT-fs (loop0): Directory bread(block 1062) failed [ 850.474295][T18664] usb 5-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 850.486549][T18880] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 850.497765][T18880] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 850.508991][T25385] FAT-fs (loop0): Directory bread(block 1063) failed [ 850.517510][T18664] usb 5-1: config 0 interface 11 altsetting 253 endpoint 0x87 has invalid maxpacket 65535, setting to 64 [ 850.531463][T18880] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 850.544879][T25385] FAT-fs (loop0): Directory bread(block 1064) failed [ 850.561907][T25385] FAT-fs (loop0): Directory bread(block 1065) failed [ 850.575025][T18664] usb 5-1: config 0 interface 11 has no altsetting 0 [ 850.593004][T18664] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 850.615788][T18664] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.674295][T18664] usb 5-1: config 0 descriptor?? [ 850.697168][T25366] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 850.704266][T25366] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 850.740911][T18664] keyspan 5-1:0.11: Keyspan 2 port adapter converter detected [ 850.761077][T18880] usb 3-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 850.780221][T18664] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 81 [ 850.788683][T18880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.819659][T18880] usb 3-1: Product: syz [ 850.824047][T18664] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 82 [ 850.838387][T18880] usb 3-1: Manufacturer: syz [ 850.843037][T18880] usb 3-1: SerialNumber: syz [ 850.857141][T18664] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 1 [ 850.885323][T18664] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 2 [ 850.919859][T18664] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 85 [ 850.929386][T18664] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 5 [ 850.944607][T18664] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 850.958885][T18664] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 83 [ 850.981350][T18664] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 84 [ 850.991821][T25400] netlink: 'syz.3.9700': attribute type 32 has an invalid length. [ 851.002552][T18664] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 3 [ 851.017799][T18664] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 4 [ 851.028750][T18664] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 86 [ 851.036543][T18664] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 6 [ 851.064001][T18664] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 851.113881][T18664] usb 5-1: USB disconnect, device number 57 [ 851.127296][T18664] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 851.148305][T18664] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 851.159877][T18664] keyspan 5-1:0.11: device disconnected [ 851.227542][T25406] loop3: detected capacity change from 0 to 512 [ 851.238689][ T4955] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 851.263605][T18880] usb 3-1: Unsupported UAC3 BADD profile [ 851.276879][T25406] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 851.289215][T18880] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 851.296701][T25406] ext4 filesystem being mounted at /1754/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 851.327622][T18879] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 851.335334][ T26] audit: type=1800 audit(1788477107.550:43): pid=25406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.9701" name=0AF301 dev="loop3" ino=18 res=0 errno=0 [ 851.365649][T18880] usb 3-1: USB disconnect, device number 43 [ 851.398115][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 851.551547][T25415] xt_ecn: cannot match TCP bits for non-tcp packets [ 851.589476][T25417] netlink: 'syz.3.9705': attribute type 5 has an invalid length. [ 851.648363][T18879] usb 1-1: Using ep0 maxpacket: 16 [ 851.682881][ T4955] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 851.701766][ T4955] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.737067][T25425] 0xfffffffffffffffd-0x000000020000 : "" [ 851.743577][T25425] mtd: partition "" is out of reach -- disabled [ 851.752786][ T4955] usb 2-1: config 0 descriptor?? [ 851.779668][T18879] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 851.810535][T18879] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 851.833461][T25425] ftl_cs: FTL header not found. [ 851.850869][T18879] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 851.871315][T18879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.934531][T18879] usb 1-1: config 0 descriptor?? [ 851.985333][T18879] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 852.201134][ T4946] usb 1-1: USB disconnect, device number 43 [ 852.303157][T25423] loop4: detected capacity change from 0 to 32768 [ 852.343253][ T4955] usb 2-1: Cannot read MAC address [ 852.348784][ T4955] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71 [ 852.363485][ T4955] usb 2-1: USB disconnect, device number 50 [ 852.402046][ T4942] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 852.489795][T25453] netlink: 'syz.2.9722': attribute type 5 has an invalid length. [ 852.618265][T25455] loop4: detected capacity change from 0 to 4096 [ 852.724454][T25455] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 852.867770][ T4942] usb 4-1: config 202 has an invalid interface number: 137 but max is 0 [ 852.876172][ T4942] usb 4-1: config 202 has an invalid descriptor of length 0, skipping remainder of the config [ 852.933275][T25471] loop0: detected capacity change from 0 to 64 [ 852.941577][ T4942] usb 4-1: config 202 has no interface number 0 [ 852.952499][ T4942] usb 4-1: config 202 interface 137 altsetting 11 endpoint 0x5 has invalid wMaxPacketSize 0 [ 852.965306][T25469] loop2: detected capacity change from 0 to 2048 [ 852.972869][ T4942] usb 4-1: config 202 interface 137 altsetting 11 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 853.004854][ T4942] usb 4-1: config 202 interface 137 has no altsetting 0 [ 853.055990][T25469] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 853.241415][ T4942] usb 4-1: New USB device found, idVendor=1608, idProduct=0308, bcdDevice=5b.ac [ 853.250649][ T4942] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.260404][ T4942] usb 4-1: Product: syz [ 853.270735][ T4942] usb 4-1: Manufacturer: syz [ 853.276294][T25483] cifs: Unknown parameter 'no'aN[Gzob,er;%j [ 853.276294][T25483] z,@qJ#"h/.W1ȱnNC"C׈E)8+' [ 853.291175][ T4942] usb 4-1: SerialNumber: syz [ 853.544580][T25501] xt_CT: You must specify a L4 protocol and not use inversions on it [ 853.659185][ T4942] io_ti 4-1:202.137: required endpoints missing [ 853.690470][ T4942] usb 4-1: USB disconnect, device number 57 [ 854.442429][T25556] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9774'. [ 854.530839][T25561] device gre1 entered promiscuous mode [ 854.603694][T25565] netlink: 'syz.3.9778': attribute type 27 has an invalid length. [ 854.643530][T25567] netlink: 'syz.1.9779': attribute type 39 has an invalid length. [ 855.020516][T25595] netlink: 'syz.1.9791': attribute type 6 has an invalid length. [ 855.411504][ T4955] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 855.504622][T25630] netlink: 11 bytes leftover after parsing attributes in process `syz.1.9809'. [ 855.539839][T25630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9809'. [ 855.817998][T25649] netlink: 'syz.3.9818': attribute type 3 has an invalid length. [ 855.882162][ T4955] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 855.900733][ T4955] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 855.957115][T25655] ipt_REJECT: TCP_RESET invalid for non-tcp [ 856.031673][ T4955] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 856.050640][ T4955] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 856.084367][ T4955] usb 5-1: Manufacturer: syz [ 856.099133][ T4955] usb 5-1: config 0 descriptor?? [ 856.161811][ T4955] igorplugusb 5-1:0.0: incorrect number of endpoints [ 856.330899][T18879] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 856.377189][ T4942] usb 5-1: USB disconnect, device number 58 [ 856.737127][T18879] usb 3-1: config 0 has an invalid interface number: 237 but max is 0 [ 856.745392][T18879] usb 3-1: config 0 has no interface number 0 [ 856.775548][T18879] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 856.812195][T18879] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 856.844793][T18879] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 856.877623][T18879] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 856.924718][T25695] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9851'. [ 857.068574][T18879] usb 3-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6 [ 857.077761][T18879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.113271][T18879] usb 3-1: Product: syz [ 857.117497][T18879] usb 3-1: Manufacturer: syz [ 857.169158][T25710] 0xfffffffffffffffd-0x000000020000 : "" [ 857.179203][T18879] usb 3-1: SerialNumber: syz [ 857.185710][T18879] usb 3-1: config 0 descriptor?? [ 857.195998][T25710] mtd: partition "" is out of reach -- disabled [ 857.228564][T25710] ftl_cs: FTL header not found. [ 857.265988][T18879] xpad 3-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 857.325169][T18879] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.237/input/input48 [ 857.609257][T25727] 9pnet: p9_fd_create_tcp (25727): problem connecting socket to 127.0.0.1 [ 857.705011][T18877] usb 3-1: USB disconnect, device number 44 [ 857.718979][T18877] xpad 3-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 857.912432][T25697] loop1: detected capacity change from 0 to 32768 [ 858.076866][T25744] netlink: 'syz.0.9863': attribute type 8 has an invalid length. [ 858.112829][T25744] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.9863'. [ 858.122482][T25747] netlink: 'syz.3.9865': attribute type 11 has an invalid length. [ 858.171279][T25747] netlink: 148 bytes leftover after parsing attributes in process `syz.3.9865'. [ 858.374271][T25765] program syz.0.9874 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 858.622882][T25777] loop3: detected capacity change from 0 to 256 [ 858.716834][T25777] FAT-fs (loop3): Directory bread(block 64) failed [ 858.723432][T25777] FAT-fs (loop3): Directory bread(block 65) failed [ 858.754989][T25784] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9883'. [ 858.787347][T25777] FAT-fs (loop3): Directory bread(block 66) failed [ 858.808695][T25777] FAT-fs (loop3): Directory bread(block 67) failed [ 858.832441][T25777] FAT-fs (loop3): Directory bread(block 68) failed [ 858.839030][T25777] FAT-fs (loop3): Directory bread(block 69) failed [ 858.856292][T25787] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[25788] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[25787] [ 858.912110][T25777] FAT-fs (loop3): Directory bread(block 70) failed [ 858.925224][T25777] FAT-fs (loop3): Directory bread(block 71) failed [ 858.960716][T25777] FAT-fs (loop3): Directory bread(block 72) failed [ 858.967335][T25777] FAT-fs (loop3): Directory bread(block 73) failed [ 859.249402][T25810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9897'. [ 859.411915][T25822] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9901'. [ 859.698265][T18879] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 859.835538][T25803] loop1: detected capacity change from 0 to 32768 [ 859.995597][T25840] netlink: 'syz.1.9911': attribute type 19 has an invalid length. [ 860.006337][T25840] netlink: 5 bytes leftover after parsing attributes in process `syz.1.9911'. [ 860.109628][T18879] usb 3-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 860.135154][ T4942] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 860.166797][T25847] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.9914' sets config #1 [ 860.286517][T18879] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 860.317289][T18879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.341694][T18879] usb 3-1: Product: syz [ 860.356824][T18879] usb 3-1: Manufacturer: syz [ 860.371755][T18879] usb 3-1: SerialNumber: syz [ 860.502742][T25866] netlink: 'syz.0.9924': attribute type 1 has an invalid length. [ 860.575585][T25870] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9926'. [ 860.607427][ T4942] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 860.621046][ T4942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.636626][T25862] loop1: detected capacity change from 0 to 8192 [ 860.649457][ T4942] usb 5-1: config 0 descriptor?? [ 860.723874][T25881] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9931'. [ 860.725093][T18879] usb 3-1: Cannot retrieve CPort count: -71 [ 860.752232][T25862] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 860.760994][T18879] usb 3-1: Cannot retrieve CPort count: -71 [ 860.778272][T25862] REISERFS (device loop1): using ordered data mode [ 860.786749][T18879] es2_ap_driver: probe of 3-1:246.0 failed with error -71 [ 860.807575][T25862] reiserfs: using flush barriers [ 860.817011][T25862] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 860.836156][T18879] usb 3-1: USB disconnect, device number 45 [ 860.842718][T25862] REISERFS (device loop1): checking transaction log (loop1) [ 860.864668][T25862] REISERFS (device loop1): Using r5 hash to sort names [ 860.875198][T25862] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 861.143641][ T4942] ath6kl: Failed to submit usb control message: -71 [ 861.150391][ T4942] ath6kl: unable to send the bmi data to the device: -71 [ 861.181224][ T4942] ath6kl: Unable to send get target info: -71 [ 861.218435][ T4942] ath6kl: Failed to init ath6kl core: -71 [ 861.345970][ T4942] ath6kl_usb: probe of 5-1:0.0 failed with error -71 [ 861.368243][ T4942] usb 5-1: USB disconnect, device number 59 [ 861.511149][T25919] loop1: detected capacity change from 0 to 512 [ 861.594239][T25919] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.9949: bg 0: block 313: padding at end of block bitmap is not set [ 861.616842][T25919] EXT4-fs (loop1): Remounting filesystem read-only [ 861.632054][T25919] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2812: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 861.650124][T25919] EXT4-fs (loop1): 1 truncate cleaned up [ 861.656666][T25919] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,grpquota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,nolazytime,discard,grpjquota=,errors=remount-ro,nobarrier,. Quota mode: writeback. [ 861.689058][T25928] ksmbd: Unknown IPC event: 10, ignore. [ 861.753984][T18664] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 862.034270][T18879] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 862.146598][T18664] usb 4-1: config 0 has an invalid interface number: 237 but max is 0 [ 862.171769][T18664] usb 4-1: config 0 has no interface number 0 [ 862.191331][T18664] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 862.227658][T18664] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 862.253722][T18664] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 862.256421][T25955] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 862.287051][T18664] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 862.306886][T18879] usb 5-1: Using ep0 maxpacket: 32 [ 862.445989][T18879] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 862.465974][T18879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.488536][ T5522] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 862.499405][T18664] usb 4-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6 [ 862.513512][T18879] usb 5-1: config 0 descriptor?? [ 862.519063][T18664] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.528628][T18664] usb 4-1: Product: syz [ 862.533663][T18664] usb 4-1: Manufacturer: syz [ 862.538304][T18664] usb 4-1: SerialNumber: syz [ 862.560686][T18664] usb 4-1: config 0 descriptor?? [ 862.567972][T18879] gspca_main: sq930x-2.14.0 probing 041e:403c [ 862.625728][T18664] xpad 4-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 862.640771][T18664] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.237/input/input49 [ 862.884218][ T5522] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 862.906614][ T5522] usb 2-1: config 0 has no interface number 0 [ 862.991339][T18880] usb 4-1: USB disconnect, device number 58 [ 863.011940][T18880] xpad 4-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 863.023231][T18879] gspca_sq930x: ucbus_write failed -71 [ 863.028781][T18879] sq930x: probe of 5-1:0.0 failed with error -71 [ 863.063051][T18879] usb 5-1: USB disconnect, device number 60 [ 863.076770][ T5522] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 863.085859][ T5522] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.125509][ T5522] usb 2-1: Product: syz [ 863.140721][ T5522] usb 2-1: Manufacturer: syz [ 863.145435][ T5522] usb 2-1: SerialNumber: syz [ 863.157201][ T5522] usb 2-1: config 0 descriptor?? [ 863.451065][ T5522] asix: probe of 2-1:0.251 failed with error -71 [ 863.472514][ T5522] usb 2-1: USB disconnect, device number 51 [ 863.506300][T25994] netlink: 'syz.2.9984': attribute type 1 has an invalid length. [ 863.514233][T25994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9984'. [ 863.569530][T25998] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9985'. [ 863.778757][T26012] loop2: detected capacity change from 0 to 512 [ 863.896695][T26012] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.9991: bg 0: block 313: padding at end of block bitmap is not set [ 863.911337][T26023] netlink: 'syz.4.9997': attribute type 10 has an invalid length. [ 863.919225][T26023] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9997'. [ 863.954535][T26012] EXT4-fs (loop2): Remounting filesystem read-only [ 863.978085][T26012] EXT4-fs (loop2): 1 truncate cleaned up [ 863.983783][T26012] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,grpquota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,nolazytime,discard,grpjquota=,errors=remount-ro,nobarrier,. Quota mode: writeback. [ 864.005141][ C0] vkms_vblank_simulate: vblank timer overrun [ 864.047221][T26023] netlink: 'syz.4.9997': attribute type 10 has an invalid length. [ 864.076436][T26023] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9997'. [ 864.218929][ T26] audit: type=1107 audit(1788477119.580:44): pid=26038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 864.622886][T26069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10019'. [ 864.813884][T26077] TCP: TCP_TX_DELAY enabled [ 865.208570][T26088] openvswitch: netlink: Missing key (keys=48, expected=10000000) [ 865.267345][T26091] loop2: detected capacity change from 0 to 16 [ 865.362287][T26091] erofs: (device loop2): mounted with root inode @ nid 36. [ 865.449361][T26101] openvswitch: netlink: EtherType 0 is less than min 600 [ 865.639777][T26104] block device autoloading is deprecated and will be removed. [ 865.660681][T26110] trusted_key: encrypted_key: master key parameter is missing [ 865.705384][T26113] netlink: 'syz.3.10042': attribute type 28 has an invalid length. [ 865.718747][T26113] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10042'. [ 865.892118][T26121] loop4: detected capacity change from 0 to 256 [ 866.083735][T26130] loop1: detected capacity change from 0 to 1024 [ 866.149924][T26137] netlink: 68 bytes leftover after parsing attributes in process `syz.3.10056'. [ 866.250740][T26130] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 866.268799][T26130] hfsplus: xattr searching failed [ 866.274820][T26146] JFS: discard option not supported on device [ 866.305801][T26146] Mount JFS Failure: -22 [ 866.310102][T26146] jfs_mount failed w/return code = -22 [ 866.388445][T26153] 9pnet: p9_fd_create_tcp (26153): problem connecting socket to 127.0.0.1 [ 866.688058][T26181] netlink: 'syz.0.10076': attribute type 1 has an invalid length. [ 866.705051][T26181] netlink: 128 bytes leftover after parsing attributes in process `syz.0.10076'. [ 866.740620][T26181] NCSI netlink: No device for ifindex 0 [ 866.904135][T26194] loop3: detected capacity change from 0 to 512 [ 866.932385][T26194] EXT4-fs (loop3): Ignoring removed orlov option [ 867.029584][T26194] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,init_itable,sysvgroups,orlov,. Quota mode: writeback. [ 867.089751][T26194] ext4 filesystem being mounted at /1834/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 867.130886][T26218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10090'. [ 867.377843][T26226] loop4: detected capacity change from 0 to 512 [ 867.451966][T26226] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 867.515461][T26226] EXT4-fs (loop4): 1 truncate cleaned up [ 867.521287][T26226] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 867.562965][T26226] EXT4-fs error (device loop4): ext4_lookup:1855: inode #2: comm syz.4.10107: 'file0' linked to parent dir [ 868.198469][T26278] netlink: 'syz.2.10121': attribute type 7 has an invalid length. [ 868.478910][T26300] dlm: dev_write: no op 0 0 [ 868.602290][T26307] loop0: detected capacity change from 0 to 512 [ 868.662959][T26309] IPv6: sit1: Disabled Multicast RS [ 868.691113][T26307] EXT4-fs (loop0): Test dummy encryption mode enabled [ 868.764215][T26307] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.10137: inode has both inline data and extents flags [ 868.788576][T26307] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.10137: couldn't read orphan inode 15 (err -117) [ 868.860708][T26307] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 869.034132][T26341] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 869.246536][T26356] netlink: 'syz.1.10161': attribute type 2 has an invalid length. [ 869.282084][T26360] netlink: 'syz.2.10162': attribute type 21 has an invalid length. [ 869.315098][T26360] netlink: 'syz.2.10162': attribute type 4 has an invalid length. [ 869.343491][T26360] netlink: 144 bytes leftover after parsing attributes in process `syz.2.10162'. [ 869.386935][T26368] netlink: 'syz.4.10167': attribute type 11 has an invalid length. [ 869.476361][T26374] netlink: 'syz.1.10170': attribute type 15 has an invalid length. [ 869.525164][T26380] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10172'. [ 869.547822][T26380] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10172'. [ 869.728113][T26397] netlink: 'syz.0.10180': attribute type 11 has an invalid length. [ 869.862538][T26409] CIFS: Attempting to mount \\127.0.0.1\test [ 869.877061][T26409] CIFS: VFS: Error connecting to socket. Aborting operation. [ 869.885877][T26409] CIFS: VFS: cifs_mount failed w/return code = -111 [ 870.143298][T18880] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 870.410244][T18880] usb 4-1: Using ep0 maxpacket: 32 [ 870.439413][T26440] loop0: detected capacity change from 0 to 2048 [ 870.512774][T26440] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 870.569248][T26446] loop4: detected capacity change from 0 to 512 [ 870.661487][T26446] EXT4-fs (loop4): Ignoring removed orlov option [ 870.709754][T18880] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 870.762031][T18880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.792120][T18880] usb 4-1: Product: syz [ 870.798269][T18880] usb 4-1: Manufacturer: syz [ 870.827186][T18880] usb 4-1: SerialNumber: syz [ 870.834123][T18880] usb 4-1: config 0 descriptor?? [ 870.896969][T26446] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,init_itable,sysvgroups,orlov,. Quota mode: writeback. [ 870.913005][T26446] ext4 filesystem being mounted at /1877/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 871.125065][T26459] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 871.170592][T26459] infiniband syz0: set active [ 871.182565][T26459] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 871.220878][T26459] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 871.242316][T26459] device bridge_slave_0 left promiscuous mode [ 871.249345][T26459] bridge0: port 1(bridge_slave_0) entered disabled state [ 871.286458][T26459] device bridge_slave_1 left promiscuous mode [ 871.299799][T26459] bridge0: port 2(bridge_slave_1) entered disabled state [ 871.329465][T26459] bond0: (slave bond_slave_0): Releasing backup interface [ 871.372599][T18880] airspy 4-1:0.0: usb_control_msg() failed -71 request 0a [ 871.380372][T26459] bond0: (slave bond_slave_1): Releasing backup interface [ 871.391859][T18880] airspy 4-1:0.0: Could not detect board [ 871.402814][T18880] airspy: probe of 4-1:0.0 failed with error -71 [ 871.458275][T18880] usb 4-1: USB disconnect, device number 59 [ 871.510282][T26459] team0: Port device team_slave_0 removed [ 871.517036][T26459] rdma_rxe: ignoring netdev event = 12 for team0 [ 871.540083][T26459] team0: Port device team_slave_1 removed [ 871.555670][T26459] rdma_rxe: ignoring netdev event = 12 for team0 [ 871.588548][T18664] team0 speed is unknown, defaulting to 1000 [ 871.597298][T26461] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component [ 871.628041][ T5061] infiniband syz0: set down [ 871.659597][ T4941] team0 speed is unknown, defaulting to 1000 [ 871.679361][ T4941] team0 speed is unknown, defaulting to 1000 [ 872.097567][ T4942] nvmet: connect request for invalid subsystem n! [ 872.112138][T26487] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "n" [ 872.229894][T26504] MTD: Couldn't look up '': -22 [ 872.247024][T26502] kernel read not supported for file / 7âW)s!Qfsr)rO2:"T+͟v|ղDvc֠6xc: (pid: 26502 comm: syz.4.10232) [ 872.331266][ T26] audit: type=1800 audit(1788477127.184:45): pid=26502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.10232" name=20019C1437B3CFFCC3A25729AB7393A7C721518FF6ECA56673F58772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=98656 res=0 errno=0 [ 872.451734][T26519] loop3: detected capacity change from 0 to 128 [ 872.503201][T26519] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 872.518631][T26519] System zones: 1-3, 19-19, 35-36 [ 872.526370][T26519] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,,errors=continue. Quota mode: none. [ 872.538320][T26519] ext4 filesystem being mounted at /1857/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 873.541783][T26582] nvme_rdma: malformed address passed: 1#-&Q;?s>#Z>U7 h-ؖYFxH:4420 [ 873.852942][ T4941] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 874.031345][T26578] loop3: detected capacity change from 0 to 32768 [ 874.106839][T26611] loop2: detected capacity change from 0 to 1024 [ 874.136524][T26593] loop4: detected capacity change from 0 to 32768 [ 874.173494][T26578] XFS (loop3): Mounting V5 Filesystem [ 874.276189][T26611] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 874.291126][T26611] ext4 filesystem being mounted at /1887/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 874.308783][T26611] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.10285: corrupted xattr block 128 [ 874.325949][ T26] audit: type=1800 audit(1788477129.055:46): pid=26611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.10285" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 874.355320][ T4941] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023 [ 874.368235][ T4941] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 874.416983][T26578] XFS (loop3): Ending clean mount [ 874.489750][ T4941] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 874.545223][ T4941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 874.567818][ T4941] usb 1-1: SerialNumber: syz [ 874.622756][T26589] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 874.678242][ T4996] XFS (loop3): Unmounting Filesystem [ 874.684161][T26632] binder: Bad value for 'max' [ 874.868558][ T4941] cdc_ether: probe of 1-1:1.0 failed with error -71 [ 874.886023][ T4941] usb 1-1: USB disconnect, device number 44 [ 875.017146][T26644] loop2: detected capacity change from 0 to 256 [ 875.064239][T26646] loop1: detected capacity change from 0 to 64 [ 875.515394][T26666] IPv6: NLM_F_CREATE should be specified when creating new route [ 875.608835][T26677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10313'. [ 876.662132][T26750] loop4: detected capacity change from 0 to 1024 [ 876.802925][T26761] loop3: detected capacity change from 0 to 16 [ 876.838421][T26761] erofs: (device loop3): mounted with root inode @ nid 36. [ 877.124035][T26783] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 877.154021][T26787] loop2: detected capacity change from 0 to 16 [ 877.184103][T26783] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 877.211452][T26783] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 877.233869][T26787] erofs: (device loop2): mounted with root inode @ nid 36. [ 877.249383][T26793] loop4: detected capacity change from 0 to 64 [ 877.259232][T26783] device bridge_slave_0 left promiscuous mode [ 877.293059][T26783] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.361534][T26783] device bridge_slave_1 left promiscuous mode [ 877.383577][T26783] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.486785][T26783] bond0: (slave bond_slave_0): Releasing backup interface [ 877.500405][T26802] xt_NFQUEUE: number of total queues is 0 [ 877.562675][T26783] bond0: (slave bond_slave_1): Releasing backup interface [ 877.646245][T26806] loop3: detected capacity change from 0 to 2048 [ 877.654154][T26808] loop1: detected capacity change from 0 to 1024 [ 877.731083][T26783] team0: Port device team_slave_0 removed [ 877.759840][T26806] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 877.780798][T26808] attempt to access beyond end of device [ 877.780798][T26808] loop1: rw=0, want=917506, limit=1024 [ 877.819424][T26806] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 877.854976][T26783] team0: Port device team_slave_1 removed [ 877.872498][T26808] Buffer I/O error on dev loop1, logical block 458752, async page read [ 877.886852][T26783] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 877.892421][T26808] attempt to access beyond end of device [ 877.892421][T26808] loop1: rw=0, want=917506, limit=1024 [ 877.912251][T26783] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 877.945411][T26783] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 877.946034][T26808] Buffer I/O error on dev loop1, logical block 458752, async page read [ 877.974133][T26783] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 878.406978][ T4942] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 878.494788][T26824] loop3: detected capacity change from 0 to 32768 [ 878.582047][T26824] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.10384 (26824) [ 878.625092][T26824] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 878.637029][T26824] BTRFS info (device loop3): use zlib compression, level 3 [ 878.674385][T26824] BTRFS info (device loop3): using free space tree [ 878.707577][T26824] BTRFS info (device loop3): has skinny extents [ 878.942613][T26824] BTRFS info (device loop3): enabling ssd optimizations [ 878.979018][T26884] tmpfs: Bad value for 'mpol' [ 879.091165][ T4942] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 879.118649][ T4942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.134286][ T4942] usb 3-1: Product: syz [ 879.140702][ T4942] usb 3-1: Manufacturer: syz [ 879.147205][ T4942] usb 3-1: SerialNumber: syz [ 879.194743][ T4175] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop3 scanned by udevd (4175) [ 879.636486][ T4940] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 879.742921][T26913] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10419'. [ 879.783871][T26911] xt_CT: No such helper "snmp_trap" [ 879.969575][T26926] loop4: detected capacity change from 0 to 1024 [ 880.019945][T26926] attempt to access beyond end of device [ 880.019945][T26926] loop4: rw=0, want=917506, limit=1024 [ 880.041502][T26926] Buffer I/O error on dev loop4, logical block 458752, async page read [ 880.056093][T26926] attempt to access beyond end of device [ 880.056093][T26926] loop4: rw=0, want=917506, limit=1024 [ 880.097395][T26926] Buffer I/O error on dev loop4, logical block 458752, async page read [ 880.112361][T26933] futex_wake_op: syz.1.10428 tries to shift op by 144; fix this program [ 880.122035][T26933] futex_wake_op: syz.1.10428 tries to shift op by 144; fix this program [ 880.161318][ T4940] usb 1-1: unable to get BOS descriptor or descriptor too short [ 880.203156][ T4952] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 880.258282][ T4940] usb 1-1: config 6 has an invalid interface number: 252 but max is 0 [ 880.278203][ T4940] usb 1-1: config 6 has no interface number 0 [ 880.284362][ T4940] usb 1-1: config 6 interface 252 altsetting 5 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 880.316245][ T4940] usb 1-1: config 6 interface 252 has no altsetting 0 [ 880.513210][ T4940] usb 1-1: New USB device found, idVendor=1199, idProduct=6815, bcdDevice=dd.bf [ 880.522315][ T4940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.564520][ T4940] usb 1-1: Product: syz [ 880.569930][ T4940] usb 1-1: Manufacturer: syz [ 880.598380][ T4940] usb 1-1: SerialNumber: syz [ 880.655140][ T4945] usb 3-1: USB disconnect, device number 46 [ 880.715797][T26969] kAFS: unable to lookup cell '/,' [ 880.787620][T26973] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10445'. [ 880.864994][T26979] netlink: 'syz.4.10448': attribute type 2 has an invalid length. [ 880.879713][T26979] netlink: 'syz.4.10448': attribute type 1 has an invalid length. [ 880.963330][ T4940] sierra 1-1:6.252: Sierra USB modem converter detected [ 880.987706][ T4940] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 881.014768][ T4940] usb 1-1: Sierra USB modem converter now attached to ttyUSB1 [ 881.072176][ T4940] usb 1-1: USB disconnect, device number 45 [ 881.118963][ T4940] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 881.143187][ T4940] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 881.155842][ T4940] sierra 1-1:6.252: device disconnected [ 881.389650][ T4952] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 881.402788][ T4952] ath9k_htc: Failed to initialize the device [ 881.448305][ T4945] usb 3-1: ath9k_htc: USB layer deinitialized [ 881.630133][T27020] device bond1 entered promiscuous mode [ 881.662166][T27020] 8021q: adding VLAN 0 to HW filter on device bond1 [ 881.722855][T27038] loop3: detected capacity change from 0 to 8 [ 881.732255][T27039] netlink: 'syz.4.10476': attribute type 13 has an invalid length. [ 881.835830][T27038] squashfs image failed sanity check [ 882.549255][T27039] rdma_rxe: ignoring netdev event = 10 for team0 [ 882.580087][T27039] infiniband syz0: set down [ 882.585084][T27039] rdma_rxe: ignoring netdev event = 30 for team0 [ 882.704470][T18877] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 882.961265][T18877] usb 1-1: Using ep0 maxpacket: 32 [ 883.132173][T18877] usb 1-1: unable to get BOS descriptor or descriptor too short [ 883.217781][T18877] usb 1-1: config 12 has an invalid interface number: 183 but max is 1 [ 883.226201][T18877] usb 1-1: config 12 has an invalid interface number: 229 but max is 1 [ 883.239777][T18877] usb 1-1: config 12 has no interface number 0 [ 883.246182][T18877] usb 1-1: config 12 has no interface number 1 [ 883.256034][T18877] usb 1-1: config 12 interface 183 has no altsetting 0 [ 883.422490][T27039] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.431897][T18877] usb 1-1: New USB device found, idVendor=1415, idProduct=2000, bcdDevice=2b.98 [ 883.441045][T18877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.442557][T27039] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.450629][T18877] usb 1-1: Product: syz [ 883.462299][T18877] usb 1-1: Manufacturer: syz [ 883.467287][T18877] usb 1-1: SerialNumber: syz [ 883.470723][T27039] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.484168][T27039] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.697597][T18664] team0 speed is unknown, defaulting to 1000 [ 883.788837][ T4940] team0 speed is unknown, defaulting to 1000 [ 883.838792][T18877] usb 1-1: USB disconnect, device number 46 [ 883.850207][T27076] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10495'. [ 883.940577][T27079] loop3: detected capacity change from 0 to 1024 [ 884.038270][T27079] attempt to access beyond end of device [ 884.038270][T27079] loop3: rw=0, want=917506, limit=1024 [ 884.114554][T27079] Buffer I/O error on dev loop3, logical block 458752, async page read [ 884.132999][T27079] attempt to access beyond end of device [ 884.132999][T27079] loop3: rw=0, want=917506, limit=1024 [ 884.185206][T27079] Buffer I/O error on dev loop3, logical block 458752, async page read [ 884.419251][T27108] xt_l2tp: v2 doesn't support IP mode [ 884.665509][T27129] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 884.782533][T27136] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10518'. [ 884.833027][T27136] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10518'. [ 884.870388][T27136] netlink: 80 bytes leftover after parsing attributes in process `syz.1.10518'. [ 884.903459][T27142] IPv6: sit1: Disabled Multicast RS [ 885.331137][T27174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10535'. [ 885.413432][T27174] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10535'. [ 885.449656][T27180] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 885.514449][T27180] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 885.522250][T18880] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 885.544415][T27180] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 885.586045][T27180] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 885.631466][T27180] device bridge_slave_0 left promiscuous mode [ 885.660054][T27180] bridge0: port 1(bridge_slave_0) entered disabled state [ 885.717018][T27180] device bridge_slave_1 left promiscuous mode [ 885.726798][T27180] bridge0: port 2(bridge_slave_1) entered disabled state [ 885.758968][T27180] bond0: (slave bond_slave_0): Releasing backup interface [ 885.794136][T18880] usb 2-1: Using ep0 maxpacket: 16 [ 885.816518][T27180] bond0: (slave bond_slave_1): Releasing backup interface [ 885.922608][T18880] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 885.941819][T27180] team0: Port device team_slave_0 removed [ 885.960389][T18880] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 886.001219][T18880] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 886.045289][T18880] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 886.055697][T18880] usb 2-1: config 0 has no interface number 0 [ 886.056314][T27180] team0: Port device team_slave_1 removed [ 886.070716][T18880] usb 2-1: config 0 interface 125 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 886.086830][T27180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 886.094936][T18880] usb 2-1: config 0 interface 125 has no altsetting 0 [ 886.110521][T27180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 886.119852][T27180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 886.131876][T27180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 886.145335][T27180] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 886.157374][T27203] netlink: 800 bytes leftover after parsing attributes in process `syz.0.10544'. [ 886.187045][T27203] netlink: 1301 bytes leftover after parsing attributes in process `syz.0.10544'. [ 886.286147][T18880] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 886.321353][T18880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.350523][T18880] usb 2-1: Product: syz [ 886.376465][T18880] usb 2-1: Manufacturer: syz [ 886.398053][T18880] usb 2-1: SerialNumber: syz [ 886.420561][T18880] usb 2-1: config 0 descriptor?? [ 886.711343][T18880] usb 2-1: USB disconnect, device number 52 [ 887.065695][T27282] netlink: 'syz.3.10578': attribute type 13 has an invalid length. [ 887.493869][ T4945] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 887.921731][ T4945] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 887.935192][ T4945] usb 3-1: config 0 has no interface number 0 [ 887.941432][ T4945] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 887.970348][ T4945] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 888.147615][ T4944] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 888.189374][ T4945] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 888.198465][ T4945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.207730][ T4945] usb 3-1: Product: syz [ 888.212228][ T4945] usb 3-1: Manufacturer: syz [ 888.216881][ T4945] usb 3-1: SerialNumber: syz [ 888.236774][ T4945] usb 3-1: config 0 descriptor?? [ 888.274518][T27284] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 888.299984][ T4945] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 888.322206][ T4945] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 888.423988][ T4944] usb 5-1: Using ep0 maxpacket: 8 [ 888.531317][ C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 888.552415][ T4944] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 888.560968][ T4944] usb 5-1: config 179 has no interface number 0 [ 888.572768][ T4944] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 888.588815][ T4944] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 888.600515][ T4944] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 888.617081][ T4944] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 888.632190][ T4944] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 888.646843][ T4944] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 888.660703][ T4944] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.676889][T27282] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.686351][T27282] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.695505][T27282] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.702846][T27314] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 888.705246][T27282] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.744097][ T4944] usb 3-1: USB disconnect, device number 47 [ 888.763669][ T4944] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 888.782057][ T4944] cyberjack 3-1:0.69: device disconnected [ 888.976646][T27302] netlink: 'syz.1.10587': attribute type 5 has an invalid length. [ 889.103090][T27321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10598'. [ 889.112973][T27321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10598'. [ 889.160055][T27324] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 889.166414][ T4945] usb 5-1: USB disconnect, device number 61 [ 889.168650][T27324] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 889.173392][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 889.173432][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 889.214661][T27324] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 889.242003][T27324] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 889.258400][T27324] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 889.291976][T27324] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 890.013781][T27367] netlink: 'syz.3.10620': attribute type 27 has an invalid length. [ 890.573915][T27400] ieee802154 phy0 wpan0: encryption failed: -22 [ 890.697823][T27359] loop1: detected capacity change from 0 to 32768 [ 890.781082][T27409] loop3: detected capacity change from 0 to 8 [ 890.830825][T27359] XFS (loop1): Mounting V5 Filesystem [ 890.932022][T27394] loop2: detected capacity change from 0 to 32768 [ 890.991512][T27359] XFS (loop1): Ending clean mount [ 891.053843][ T4979] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 891.115993][ T4991] XFS (loop1): Unmounting Filesystem [ 891.379661][ T4979] usb 1-1: Using ep0 maxpacket: 16 [ 891.503008][T27434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10649'. [ 891.620698][ T4979] usb 1-1: config 0 has no interfaces? [ 891.673125][T27439] xt_bpf: check failed: parse error [ 891.774811][T27442] netlink: 'syz.3.10652': attribute type 1 has an invalid length. [ 891.823955][ T4979] usb 1-1: New USB device found, idVendor=0499, idProduct=1051, bcdDevice= 0.40 [ 891.833076][ T4979] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.861671][ T4979] usb 1-1: Product: syz [ 891.865948][ T4979] usb 1-1: Manufacturer: syz [ 891.902158][ T4979] usb 1-1: SerialNumber: syz [ 891.926945][ T4979] usb 1-1: config 0 descriptor?? [ 891.963764][T27455] CIFS mount error: No usable UNC path provided in device string! [ 891.963764][T27455] [ 892.049174][T27455] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 892.233974][T18877] usb 1-1: USB disconnect, device number 47 [ 892.387626][T27477] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 892.395305][T27475] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10669'. [ 892.417789][T27475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10669'. [ 892.550500][T18664] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 892.622419][T27490] PKCS8: Unsupported PKCS#8 version [ 892.793050][T27500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10682'. [ 892.946183][T18664] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 892.980481][T18664] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 893.085177][T18664] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 893.115337][T18664] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 893.127638][T18664] usb 3-1: SerialNumber: syz [ 893.139240][T27520] loop0: detected capacity change from 0 to 512 [ 893.222939][T27520] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 893.238185][T27520] ext4 filesystem being mounted at /2073/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 893.261285][T27520] EXT4-fs error (device loop0): ext4_get_first_dir_block:3597: inode #12: comm syz.0.10691: Directory block failed checksum [ 893.394612][T27533] x_tables: unsorted entry at hook 2 [ 893.451267][T18664] usb 3-1: 0:2 : does not exist [ 893.456231][T18664] usb 3-1: unit 5: unexpected type 0x03 [ 893.513176][T18664] usb 3-1: USB disconnect, device number 48 [ 893.632460][T27549] device veth1_to_team entered promiscuous mode [ 893.660474][T27548] device veth1_to_team left promiscuous mode [ 893.808090][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 894.554726][T27565] xt_CT: No such helper "pptp" [ 894.870434][T18877] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 895.059604][T27596] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 895.099069][T27596] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 895.106719][T27596] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 895.115686][T27596] device bridge_slave_0 left promiscuous mode [ 895.123146][T27596] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.134758][T27596] device bridge_slave_1 left promiscuous mode [ 895.138278][T18877] usb 3-1: Using ep0 maxpacket: 32 [ 895.159739][T27596] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.181710][T18880] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 895.195680][T27596] bond0: (slave bond_slave_0): Releasing backup interface [ 895.231936][T27596] bond0: (slave bond_slave_1): Releasing backup interface [ 895.310077][T18877] usb 3-1: unable to get BOS descriptor or descriptor too short [ 895.317824][T27596] team0: Port device team_slave_0 removed [ 895.353524][T27596] team0: Port device team_slave_1 removed [ 895.366158][T27596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 895.374485][T27596] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 895.383097][T27596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 895.391151][T27596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 895.405113][T18877] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 895.423155][T18877] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 895.444542][T18877] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 895.458464][T18877] usb 3-1: config 128 has no interface number 0 [ 895.480019][T18877] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 895.502328][T18877] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 895.532526][T18877] usb 3-1: config 128 interface 127 has no altsetting 0 [ 895.576541][T18880] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 16630, setting to 1024 [ 895.692792][T27620] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10740'. [ 895.715144][T18877] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 895.735140][T18877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.747218][T18880] usb 5-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01 [ 895.771997][T18880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.789788][T18877] usb 3-1: Product: syz [ 895.800783][T18877] usb 3-1: Manufacturer: syz [ 895.805501][T18880] usb 5-1: Product: syz [ 895.809689][T18880] usb 5-1: Manufacturer: syz [ 895.821342][T18877] usb 3-1: SerialNumber: syz [ 895.831330][T18880] usb 5-1: SerialNumber: syz [ 895.853377][T27626] netlink: 'syz.3.10743': attribute type 20 has an invalid length. [ 895.892035][T18880] ums-onetouch 5-1:1.0: USB Mass Storage device detected [ 895.946814][T18880] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/input/input51 [ 896.008352][T27641] usb usb8: usbfs: process 27641 (syz.3.10748) did not claim interface 0 before use [ 896.012987][T18880] scsi host1: usb-storage 5-1:1.0 [ 896.139652][T18880] usb 5-1: USB disconnect, device number 62 [ 896.145817][ C1] input input51: can't resubmit intr, dummy_hcd.4-1/input0, retval -19 [ 896.291286][T18877] usb 3-1: USB disconnect, device number 49 [ 896.521669][T27668] loop0: detected capacity change from 0 to 4096 [ 896.538946][ T5619] udevd[5619]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 896.576457][T27668] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 896.589703][T27668] ntfs3: loop0: Failed to load $MFT. [ 896.802450][T27680] sctp: [Deprecated]: syz.4.10768 (pid 27680) Use of int in max_burst socket option deprecated. [ 896.802450][T27680] Use struct sctp_assoc_value instead [ 896.934169][T27686] loop3: detected capacity change from 0 to 64 [ 897.131046][T27696] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10775'. [ 897.380602][T27668] loop0: detected capacity change from 0 to 32768 [ 897.515364][ T4944] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 897.992356][ T4944] usb 2-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 898.017656][ T4944] usb 2-1: config 1 interface 1 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 898.224693][T27761] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10810'. [ 898.250649][ T4944] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 3.00 [ 898.272700][ T4944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 898.289361][ T4944] usb 2-1: Product: syz [ 898.297271][ T4944] usb 2-1: Manufacturer: syz [ 898.404150][ T4944] pl2303 2-1:1.0: required endpoints missing [ 898.425794][ T4944] pl2303 2-1:1.1: pl2303 converter detected [ 898.518827][T27781] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10818'. [ 898.554334][T27781] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10818'. [ 898.577896][T27781] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10818'. [ 898.596662][T27787] netlink: 'syz.0.10821': attribute type 8 has an invalid length. [ 898.596840][ T4944] usb 2-1: pl2303 converter now attached to ttyUSB0 [ 898.735105][T18877] usb 2-1: USB disconnect, device number 53 [ 898.757299][T18877] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 898.779383][T18877] pl2303 2-1:1.1: device disconnected [ 898.983249][T27797] loop0: detected capacity change from 0 to 32768 [ 900.237796][T27849] loop1: detected capacity change from 0 to 4096 [ 900.287972][T27858] loop0: detected capacity change from 0 to 1024 [ 900.341201][T27849] ntfs: (device loop1): parse_options(): NLS character set is]9-5 not found. Using previous one cp866. [ 900.357401][T27858] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 900.400768][T27849] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 900.472256][T27849] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 900.485980][T27849] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 900.497630][T27849] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 900.508628][T27858] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 900.512100][T27849] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 900.545678][T27849] ntfs: volume version 3.1. [ 900.553035][T27849] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 900.565452][T27849] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 900.613330][T27849] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 900.641267][T27849] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 900.709287][T27877] mip6: mip6_rthdr_init_state: spi is not 0: 655360 [ 901.210553][ T4944] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 901.637921][ T4944] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 901.652194][ T4944] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 901.662705][ T4944] usb 5-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 901.693757][ T4944] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.733944][ T4940] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 901.810030][ T4944] opticon 5-1:1.0: opticon converter detected [ 901.824619][ T4944] usb 5-1: opticon converter now attached to ttyUSB0 [ 902.059438][T18664] usb 5-1: USB disconnect, device number 63 [ 902.074177][T18664] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 902.105623][T18664] opticon 5-1:1.0: device disconnected [ 902.161647][ T4940] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 902.188529][ T4940] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 902.220562][ T4940] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 902.375975][T27980] CIFS: Invalid mount helper version specified [ 902.471780][ T4940] usb 4-1: New USB device found, idVendor=0582, idProduct=0145, bcdDevice= 0.40 [ 902.480909][ T4940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.514509][ T4940] usb 4-1: Product: syz [ 902.518725][ T4940] usb 4-1: Manufacturer: syz [ 902.534257][ T4940] usb 4-1: SerialNumber: syz [ 902.596249][T27930] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 902.767201][T28005] nft_compat: unsupported protocol 5 [ 903.038245][ T4940] usb 4-1: MIDIStreaming interface descriptor not found [ 903.111299][ T4940] usb 4-1: USB disconnect, device number 60 [ 903.134282][ T4979] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 903.312615][T28046] loop2: detected capacity change from 0 to 1024 [ 903.422902][ T4979] usb 1-1: Using ep0 maxpacket: 8 [ 903.456804][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 903.580105][ T4979] usb 1-1: config 3 has an invalid interface number: 45 but max is 0 [ 903.612287][ T4979] usb 1-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 903.641950][ T4979] usb 1-1: config 3 has no interface number 0 [ 903.651981][ T4979] usb 1-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 903.665496][ T4979] usb 1-1: config 3 interface 45 has no altsetting 0 [ 903.760201][T28066] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10954'. [ 903.812377][T28066] device dummy1 entered promiscuous mode [ 903.848857][T28064] loop2: detected capacity change from 0 to 4096 [ 903.861472][ T4979] usb 1-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 903.893622][ T4979] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.901797][ T4979] usb 1-1: Product: syz [ 903.939617][ T4979] usb 1-1: Manufacturer: syz [ 903.944273][ T4979] usb 1-1: SerialNumber: syz [ 903.953697][T28064] ntfs: volume version 3.1. [ 904.319899][T28097] netlink: 80 bytes leftover after parsing attributes in process `syz.4.10969'. [ 904.516712][ T4979] usb 1-1: USB disconnect, device number 48 [ 904.567042][ T4940] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 904.772890][ T4866] udevd[4866]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 904.994593][ T4940] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 905.030724][ T4940] usb 2-1: config 0 interface 0 altsetting 91 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 905.058322][ T4940] usb 2-1: config 0 interface 0 altsetting 91 endpoint 0x81 has invalid wMaxPacketSize 0 [ 905.069263][ T4940] usb 2-1: config 0 interface 0 altsetting 91 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 905.083084][ T4940] usb 2-1: config 0 interface 0 has no altsetting 0 [ 905.107059][T28148] loop2: detected capacity change from 0 to 128 [ 905.129596][T28151] netlink: 56 bytes leftover after parsing attributes in process `syz.3.10995'. [ 905.176305][ T4940] usb 2-1: New USB device found, idVendor=0404, idProduct=c294, bcdDevice= 0.00 [ 905.192550][ T4940] usb 2-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 905.201261][ T4940] usb 2-1: Manufacturer: syz [ 905.207895][ T4940] usb 2-1: config 0 descriptor?? [ 905.227440][T28148] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 905.251479][T18877] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 905.277556][T28148] FAT-fs (loop2): bogus number of FAT sectors [ 905.325634][T28148] FAT-fs (loop2): Can't find a valid FAT filesystem [ 905.441938][T28148] NILFS (loop2): device size too small [ 905.518259][T18877] usb 1-1: Using ep0 maxpacket: 8 [ 905.540545][ T4940] usb 2-1: USB disconnect, device number 54 [ 905.554551][T28177] loop3: detected capacity change from 0 to 1024 [ 905.567610][T28179] loop4: detected capacity change from 0 to 64 [ 905.646919][T18877] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 905.675965][T18877] usb 1-1: config 0 has no interface number 0 [ 905.682656][T18877] usb 1-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 905.696806][T18877] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 905.708266][T18877] usb 1-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x9A, skipping [ 905.759583][T18877] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 906.010069][T18664] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 906.017793][T18877] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 906.027104][T18877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.035257][T18877] usb 1-1: Product: syz [ 906.039462][T18877] usb 1-1: Manufacturer: syz [ 906.044128][T18877] usb 1-1: SerialNumber: syz [ 906.052592][T18877] usb 1-1: config 0 descriptor?? [ 906.109385][T18877] iowarrior 1-1:0.186: no interrupt-in endpoint found [ 906.143001][T28193] netlink: 'syz.1.11010': attribute type 13 has an invalid length. [ 906.394991][T18664] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 906.405262][T18664] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 906.587493][T18664] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 906.604868][T18664] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.613597][T18664] usb 3-1: Product: syz [ 906.617918][T18664] usb 3-1: Manufacturer: syz [ 906.623086][T18664] usb 3-1: SerialNumber: syz [ 906.812042][ T4946] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 907.186204][T18664] usb 3-1: cannot find UAC_HEADER [ 907.211067][T18664] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 907.222194][T18664] usb 3-1: USB disconnect, device number 50 [ 907.231013][ T4946] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 907.268982][ T4946] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 907.286780][ T4946] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 907.455416][T28193] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.464859][T28193] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.465071][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 907.473753][T28193] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.473784][T28193] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.528310][ T4946] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 907.537411][ T4946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.550301][ T4946] usb 4-1: Product: syz [ 907.554507][ T4946] usb 4-1: Manufacturer: syz [ 907.559125][ T4946] usb 4-1: SerialNumber: syz [ 907.576705][ T4946] usb 4-1: config 0 descriptor?? [ 907.655194][ T4946] mcba_usb 4-1:0.0: Can't find endpoints [ 907.875380][ T4946] usb 4-1: USB disconnect, device number 61 [ 908.033820][T28217] loop2: detected capacity change from 0 to 4096 [ 908.089563][T28228] netlink: zone id is out of range [ 908.101449][T28217] __ntfs_error: 26 callbacks suppressed [ 908.101468][T28217] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 908.122109][T28229] loop4: detected capacity change from 0 to 64 [ 908.156252][T28217] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 908.181046][T28217] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 908.212927][ T4946] usb 1-1: USB disconnect, device number 49 [ 908.234439][T28217] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 908.277491][T28217] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 908.316927][T28217] ntfs: volume version 3.1. [ 908.338379][T28217] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 908.358579][T28238] loop0: detected capacity change from 0 to 16 [ 908.390634][T28239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11036'. [ 908.400883][T28217] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 908.425380][T28217] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 908.438836][T28238] erofs: (device loop0): mounted with root inode @ nid 36. [ 908.451522][T28217] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 908.500928][T28217] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 908.818988][T28263] loop2: detected capacity change from 0 to 1764 [ 908.924528][T28271] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11051'. [ 908.954724][T28271] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11051'. [ 909.552878][T18879] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 909.695539][T28322] netlink: 'syz.2.11076': attribute type 16 has an invalid length. [ 909.704347][T28322] netlink: 'syz.2.11076': attribute type 17 has an invalid length. [ 909.726093][T28322] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.801502][T28328] comedi comedi0: Minor 3 could not be opened [ 909.830569][T18879] usb 2-1: Using ep0 maxpacket: 16 [ 909.837538][ T4946] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 909.943398][T28333] loop0: detected capacity change from 0 to 1024 [ 909.956267][T18879] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 910.007299][T18879] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 910.055759][T28333] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 2: comm syz.0.11081: lblock 2 mapped to illegal pblock 2 (length 1) [ 910.077472][T28333] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 48: comm syz.0.11081: lblock 0 mapped to illegal pblock 48 (length 1) [ 910.097875][T28333] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.11081: Failed to acquire dquot type 0 [ 910.109691][T28333] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 910.119856][T28333] EXT4-fs error (device loop0): ext4_evict_inode:284: inode #11: comm syz.0.11081: mark_inode_dirty error [ 910.131822][T28333] EXT4-fs warning (device loop0): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 910.142855][T28333] EXT4-fs (loop0): 1 orphan inode deleted [ 910.148821][T28333] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 910.171542][T13892] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 910.196258][T13892] EXT4-fs error (device loop0): ext4_release_dquot:6272: comm kworker/u4:2: Failed to release dquot type 0 [ 910.228398][T28333] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm syz.0.11081: Invalid inode table block 1 in block_group 0 [ 910.254790][T18879] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 910.264264][T18879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.273466][T18879] usb 2-1: Product: syz [ 910.276750][T28333] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 910.277870][T18879] usb 2-1: Manufacturer: syz [ 910.292033][T18879] usb 2-1: SerialNumber: syz [ 910.298563][T28333] EXT4-fs error (device loop0): ext4_quota_off:6542: inode #3: comm syz.0.11081: mark_inode_dirty error [ 910.350507][ T4946] usb 4-1: unable to get BOS descriptor or descriptor too short [ 910.393437][ T4947] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 910.424634][T28354] xt_NFQUEUE: number of total queues is 0 [ 910.444595][ T4946] usb 4-1: config 12 has an invalid interface number: 99 but max is 0 [ 910.461413][ T4946] usb 4-1: config 12 has no interface number 0 [ 910.483489][ T4946] usb 4-1: config 12 interface 99 altsetting 14 endpoint 0xD has invalid maxpacket 552, setting to 64 [ 910.502450][ T4946] usb 4-1: config 12 interface 99 has no altsetting 0 [ 910.649995][T18879] usb 2-1: 0:2 : does not exist [ 910.671186][T18879] usb 2-1: USB disconnect, device number 55 [ 910.681966][ T4947] usb 5-1: Using ep0 maxpacket: 8 [ 910.687207][ T4946] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=a4.d6 [ 910.696691][ T4946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.705087][ T4946] usb 4-1: Product: syz [ 910.709524][ T4946] usb 4-1: Manufacturer: syz [ 910.714497][ T4946] usb 4-1: SerialNumber: syz [ 910.746880][T28366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11096'. [ 910.831709][ T4947] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 910.841889][ T4947] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 910.948392][T28380] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 910.958691][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 911.059663][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 911.066070][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 911.114358][ T4947] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 911.148344][ T4946] usb 4-1: no audio or video endpoints found [ 911.155432][ T4947] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 911.181821][ T4946] usb 4-1: USB disconnect, device number 62 [ 911.202619][ T4947] usb 5-1: Product: syz [ 911.210390][ T4947] usb 5-1: Manufacturer: syz [ 911.240803][ T4947] usb 5-1: SerialNumber: syz [ 911.261973][ T4947] usb 5-1: config 0 descriptor?? [ 911.314408][ T4947] imon_raw 5-1:0.0: IR endpoint missing [ 911.532986][T18664] usb 5-1: USB disconnect, device number 64 [ 911.648138][T28424] dlm: dev_write: no op 0 74000000000000 [ 911.985398][T28450] loop1: detected capacity change from 0 to 256 [ 912.042630][T28452] nft_compat: unsupported protocol 0 [ 912.100922][T28456] loop0: detected capacity change from 0 to 764 [ 912.173539][T28462] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 912.188245][T28456] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 912.238252][T28462] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 912.499680][T28488] openvswitch: netlink: Actions may not be safe on all matching packets [ 912.556710][T28492] loop2: detected capacity change from 0 to 64 [ 912.593528][T28496] --map-set only usable from mangle table [ 912.608420][T28494] tmpfs: Bad value for 'mpol' [ 912.899645][T28523] tmpfs: Bad value for 'mpol' [ 913.023127][T18664] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 913.065776][T18879] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 913.157589][T28532] Too few erase blocks (0) [ 913.343766][T18879] usb 2-1: Using ep0 maxpacket: 8 [ 913.461620][T18664] usb 4-1: unable to get BOS descriptor or descriptor too short [ 913.472228][T18879] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 913.480350][T18879] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 913.505521][T18879] usb 2-1: config 0 has no interface number 0 [ 913.568374][T18664] usb 4-1: config 8 has an invalid interface number: 92 but max is 0 [ 913.576588][ T5526] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 913.587319][T18664] usb 4-1: config 8 has no interface number 0 [ 913.600730][T18664] usb 4-1: config 8 interface 92 altsetting 65 endpoint 0x6 has invalid wMaxPacketSize 0 [ 913.622282][T18664] usb 4-1: config 8 interface 92 has no altsetting 0 [ 913.686038][T18879] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 913.698717][T18879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.730650][T18879] usb 2-1: Product: syz [ 913.740558][T18879] usb 2-1: Manufacturer: syz [ 913.745273][T18879] usb 2-1: SerialNumber: syz [ 913.762229][T18879] usb 2-1: config 0 descriptor?? [ 913.769395][T28541] comedi comedi3: No hardware detected at I/O base 0x3c4 [ 913.889027][T18664] usb 4-1: string descriptor 0 read error: -22 [ 913.896515][T18664] usb 4-1: New USB device found, idVendor=1b3d, idProduct=0181, bcdDevice= b.f6 [ 913.907916][T18664] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.918370][T28546] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 913.925636][T28546] IPv6: NLM_F_CREATE should be set when creating new route [ 913.932964][T28546] IPv6: NLM_F_CREATE should be set when creating new route [ 913.968583][ T5526] usb 3-1: config 0 has an invalid interface number: 6 but max is 0 [ 913.986568][T18664] ftdi_sio 4-1:8.92: FTDI USB Serial Device converter detected [ 914.001814][ T5526] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 914.015060][T18664] usb 4-1: Detected FT232H [ 914.020230][T18664] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 6 [ 914.038587][ T5526] usb 3-1: config 0 has no interface number 0 [ 914.046060][ T5526] usb 3-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 914.057940][ T5526] usb 3-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 914.071418][T18879] usb 2-1: USB disconnect, device number 56 [ 914.161612][T28552] Cannot find map_set index 135 as target [ 914.209964][T18664] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 914.231158][T18664] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 914.238298][ T5526] usb 3-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 914.248707][ T5526] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.257417][ T5526] usb 3-1: Product: syz [ 914.261728][ T5526] usb 3-1: Manufacturer: syz [ 914.266708][T18664] ftdi_sio 4-1:8.92: GPIO initialisation failed: -71 [ 914.274309][ T5526] usb 3-1: SerialNumber: syz [ 914.281108][T18664] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 914.292062][ T5526] usb 3-1: config 0 descriptor?? [ 914.316775][T18664] usb 4-1: USB disconnect, device number 63 [ 914.333651][T28538] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 914.352745][T28538] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 914.372224][T18664] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 914.386628][T18664] ftdi_sio 4-1:8.92: device disconnected [ 914.399489][ T5526] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 914.618271][ T4947] usb 3-1: USB disconnect, device number 51 [ 914.669613][T28574] netlink: 'syz.1.11197': attribute type 21 has an invalid length. [ 914.679390][T28574] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11197'. [ 914.864013][T28588] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 915.047405][T28603] netlink: 'syz.0.11208': attribute type 13 has an invalid length. [ 915.385857][ C1] sd 0:0:1:0: tag#4551 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 915.395831][ C1] sd 0:0:1:0: tag#4551 CDB: Mode Sense(10) [ 915.401721][ C1] sd 0:0:1:0: tag#4551 CDB[00]: 5a 88 f4 74 3a 27 ba 79 f3 26 e7 a4 89 c9 13 2e [ 915.410810][ C1] sd 0:0:1:0: tag#4551 CDB[10]: bd 0d 92 db 40 a2 20 7d 0f ed a1 f0 60 0c 33 30 [ 915.419941][ C1] sd 0:0:1:0: tag#4551 CDB[20]: 8b 52 18 [ 915.444441][T28625] loop4: detected capacity change from 0 to 764 [ 915.500358][T28625] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 915.821270][T28644] Too few erase blocks (0) [ 916.219912][ T4946] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 916.486768][ T4946] usb 5-1: Using ep0 maxpacket: 16 [ 916.636695][ T4946] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 916.645620][ T4946] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 916.656109][ T4946] usb 5-1: config 1 has no interface number 0 [ 916.662276][ T4946] usb 5-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 916.675397][ T4946] usb 5-1: config 1 interface 105 has no altsetting 0 [ 916.757613][T28603] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.767002][T28603] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.790795][T28603] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.799950][T28603] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.880354][ T4946] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 916.901333][ T4946] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 916.934781][ T4946] usb 5-1: Product: syz [ 916.955393][ T4946] usb 5-1: Manufacturer: syz [ 916.980822][ T4946] usb 5-1: SerialNumber: syz [ 917.226642][T28667] netlink: 76 bytes leftover after parsing attributes in process `syz.2.11242'. [ 917.248110][T28667] netlink: 72 bytes leftover after parsing attributes in process `syz.2.11242'. [ 917.269811][T28667] netlink: 'syz.2.11242': attribute type 3 has an invalid length. [ 917.303927][T28667] netlink: 11 bytes leftover after parsing attributes in process `syz.2.11242'. [ 917.313741][ T4946] aqc111: probe of 5-1:1.105 failed with error -22 [ 917.320959][T28672] Too few erase blocks (0) [ 917.453551][T28681] netlink: 'syz.1.11248': attribute type 3 has an invalid length. [ 917.483652][T28681] netlink: 3 bytes leftover after parsing attributes in process `syz.1.11248'. [ 917.530138][ T5524] usb 5-1: USB disconnect, device number 65 [ 917.573855][T28688] netlink: 'syz.3.11253': attribute type 1 has an invalid length. [ 917.585848][T28687] netlink: 'syz.2.11251': attribute type 13 has an invalid length. [ 917.656882][T28694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11256'. [ 917.679611][T28694] netlink: 2 bytes leftover after parsing attributes in process `syz.0.11256'. [ 918.663757][T28687] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.672764][T28687] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.681981][T28687] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.690931][T28687] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.914555][T28700] openvswitch: netlink: Missing key (keys=40, expected=100) [ 918.942925][T28703] Too few erase blocks (0) [ 918.959711][T28704] loop2: detected capacity change from 0 to 764 [ 919.009845][T28708] netlink: 'syz.0.11262': attribute type 10 has an invalid length. [ 919.017793][T28708] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11262'. [ 919.124332][T28716] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 919.127949][T28708] device bond0 entered promiscuous mode [ 919.164415][T28716] exFAT-fs (nullb0): invalid boot record signature [ 919.171347][T28716] exFAT-fs (nullb0): failed to read boot sector [ 919.177841][T28716] exFAT-fs (nullb0): failed to recognize exfat type [ 919.189699][T28708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 919.205207][T28708] bridge0: port 1(bond0) entered blocking state [ 919.212330][T28708] bridge0: port 1(bond0) entered disabled state [ 919.497875][T28742] netlink: 'syz.2.11280': attribute type 2 has an invalid length. [ 919.525908][T28744] netlink: 236 bytes leftover after parsing attributes in process `syz.1.11281'. [ 919.541088][T28735] block device autoloading is deprecated and will be removed. [ 919.699615][T28756] netlink: 'syz.0.11286': attribute type 10 has an invalid length. [ 919.737145][T28756] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.11286'. [ 919.846467][T28767] netlink: 'syz.2.11292': attribute type 5 has an invalid length. [ 919.971225][T28767] device  entered promiscuous mode [ 920.018891][T28776] netlink: 56 bytes leftover after parsing attributes in process `syz.0.11297'. [ 920.818103][T28828] ipt_REJECT: TCP_RESET invalid for non-tcp [ 920.895801][T28832] loop1: detected capacity change from 0 to 512 [ 921.004117][T28832] EXT4-fs (loop1): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 921.016352][T28832] ext4 filesystem being mounted at /2151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 921.140211][T28853] netlink: 'syz.4.11332': attribute type 16 has an invalid length. [ 921.143444][T28855] ieee802154 phy0 wpan0: encryption failed: -90 [ 921.194875][T28853] netlink: 'syz.4.11332': attribute type 3 has an invalid length. [ 921.344486][ T4947] kernel write not supported for file /4325/net/rt_acct (pid: 4947 comm: kworker/0:14) [ 921.783879][T28895] SET target dimension over the limit! [ 921.794238][T28894] loop4: detected capacity change from 0 to 1024 [ 921.833749][T28897] device bond1 entered promiscuous mode [ 921.839731][T28897] 8021q: adding VLAN 0 to HW filter on device bond1 [ 922.088094][T28906] device xfrm0 entered promiscuous mode [ 922.204567][T28912] futex_wake_op: syz.0.11362 tries to shift op by 144; fix this program [ 922.238609][T28912] futex_wake_op: syz.0.11362 tries to shift op by 144; fix this program [ 922.296416][T28914] loop4: detected capacity change from 0 to 2048 [ 922.386230][T28914] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=18881, location=18881 [ 922.458536][T28914] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 922.612101][T28926] netlink: 'syz.0.11371': attribute type 13 has an invalid length. [ 922.620475][T28925] __nla_validate_parse: 4 callbacks suppressed [ 922.620493][T28925] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11369'. [ 922.883767][T28932] loop2: detected capacity change from 0 to 4096 [ 923.049055][T28932] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 923.753882][T28962] netlink: 144 bytes leftover after parsing attributes in process `syz.1.11387'. [ 923.804828][T28964] netlink: 64 bytes leftover after parsing attributes in process `syz.2.11388'. [ 923.825917][T28964] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11388'. [ 923.878619][T28966] netlink: 'syz.1.11389': attribute type 10 has an invalid length. [ 923.894513][T28966] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11389'. [ 923.903917][T28966] device bond0 entered promiscuous mode [ 923.912044][T28966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 923.936304][T28966] bridge0: port 1(bond0) entered blocking state [ 923.961353][T28966] bridge0: port 1(bond0) entered disabled state [ 924.494907][T28994] loop0: detected capacity change from 0 to 1024 [ 924.509322][T28996] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11403'. [ 924.531029][T28996] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11403'. [ 924.558181][T28996] device xfrm0 entered promiscuous mode [ 924.563924][T28996] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11403'. [ 924.808123][T28852] syz.3.11335 (28852): drop_caches: 3 [ 924.939225][T28970] loop2: detected capacity change from 0 to 32768 [ 925.133974][T29029] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11420'. [ 925.160857][T29026] loop1: detected capacity change from 0 to 1024 [ 925.194255][T29029] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11420'. [ 925.220529][T29029] device xfrm0 entered promiscuous mode [ 925.544709][T29048] netlink: 'syz.1.11429': attribute type 32 has an invalid length. [ 925.744871][ T4946] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 925.780006][T29060] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 925.794222][T29060] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 925.804911][ T4947] ------------[ cut here ]------------ [ 925.806533][T29060] comedi comedi0: 8255: I/O port conflict (0x4,4) [ 925.822856][ T4947] WARNING: CPU: 0 PID: 4947 at net/netfilter/nft_set_pipapo.c:2355 nft_pipapo_destroy+0x8b0/0x960 [ 925.823820][T29060] comedi comedi0: 8255: I/O port conflict (0x4,4) [ 925.855552][ T4947] Modules linked in: [ 925.859639][ T4947] CPU: 0 PID: 4947 Comm: kworker/0:14 Not tainted syzkaller #0 [ 925.883820][ T4947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 925.915874][ T4947] Workqueue: events nf_tables_trans_destroy_work [ 925.922383][ T4947] RIP: 0010:nft_pipapo_destroy+0x8b0/0x960 [ 925.939843][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 925.939858][ T26] audit: type=1800 audit(1788477177.331:52): pid=29051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.4.11431" name="/" dev="tmpfs" ino=1831 res=0 errno=0 [ 925.980101][ T4947] Code: 24 80 3c 18 00 74 08 4c 89 f7 e8 6b ed 81 f9 49 c7 06 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b0 c4 3c f9 <0f> 0b e9 ad f7 ff ff 48 c7 c1 f0 10 8b 8d 80 e1 07 80 c1 03 38 c1 [ 926.017591][ T4947] RSP: 0018:ffffc9000347fa68 EFLAGS: 00010293 [ 926.044398][ T4947] RAX: ffffffff883c4af0 RBX: ffff888059b3bcf0 RCX: ffff8880772d1dc0 [ 926.052455][ T4947] RDX: 0000000000000000 RSI: ffff888059b3bc00 RDI: ffff88807465f128 [ 926.083299][ T4947] RBP: ffffc9000347fc30 R08: ffff8880772d1dc0 R09: 0000000000000008 [ 926.095016][ T4947] R10: 0000000000000018 R11: 0000000000000000 R12: ffff888059b3bcc0 [ 926.118973][ T4947] R13: dffffc0000000000 R14: ffff888059b3bd10 R15: dffffc0000000000 [ 926.126994][ T4947] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 926.136074][ T4947] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 926.145508][ T4947] CR2: 0000001b34c20ff8 CR3: 0000000059267000 CR4: 00000000003506f0 [ 926.159437][ T4947] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 926.167629][ T4947] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 926.175988][ T4947] Call Trace: [ 926.179392][ T4947] [ 926.182405][ T4947] ? __lock_acquire+0x7b50/0x7b50 [ 926.187605][ T4947] ? do_raw_spin_lock+0x128/0x2f0 [ 926.192758][ T4947] nft_set_destroy+0x488/0xa30 [ 926.197812][ T4946] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 926.215206][ T4947] ? do_raw_spin_unlock+0x11d/0x230 [ 926.220482][ T4947] nf_tables_trans_destroy_work+0xc5d/0xf00 [ 926.226513][ T4946] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 926.235385][ T4946] usb 4-1: config 1 has no interface number 0 [ 926.247257][ T4947] ? __lock_acquire+0x7b50/0x7b50 [ 926.252350][ T4947] ? nft_object_dump+0x1e0/0x1e0 [ 926.257384][ T4947] ? _raw_spin_unlock_irq+0x1f/0x40 [ 926.268709][ T4947] process_one_work+0x867/0xff0 [ 926.273818][ T4947] ? worker_detach_from_pool+0x240/0x240 [ 926.290059][ T4947] ? lockdep_hardirqs_off+0x70/0x100 [ 926.295400][ T4947] ? _raw_spin_lock_irq+0xb7/0xf0 [ 926.300473][ T4947] ? _raw_spin_lock_irqsave+0x100/0x100 [ 926.311395][ T4947] ? wq_worker_running+0x97/0x170 [ 926.316552][ T4947] worker_thread+0xad7/0x12a0 [ 926.321270][ T4947] kthread+0x42e/0x520 [ 926.329683][ T4947] ? rcu_lock_release+0x20/0x20 [ 926.334691][ T4947] ? kthread_blkcg+0xd0/0xd0 [ 926.339327][ T4947] ret_from_fork+0x1f/0x30 [ 926.346037][ T4947] [ 926.349132][ T4947] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 926.356428][ T4947] CPU: 0 PID: 4947 Comm: kworker/0:14 Not tainted syzkaller #0 [ 926.364006][ T4947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 926.374077][ T4947] Workqueue: events nf_tables_trans_destroy_work [ 926.380444][ T4947] Call Trace: [ 926.383741][ T4947] [ 926.386689][ T4947] dump_stack_lvl+0x188/0x250 [ 926.391400][ T4947] ? show_regs_print_info+0x20/0x20 [ 926.396672][ T4947] ? load_image+0x410/0x410 [ 926.401216][ T4947] panic+0x2f8/0x850 [ 926.405157][ T4947] ? bpf_jit_dump+0xd0/0xd0 [ 926.409718][ T4947] ? ret_from_fork+0x1f/0x30 [ 926.414339][ T4947] ? nft_pipapo_destroy+0x8b0/0x960 [ 926.419571][ T4947] __warn+0x248/0x2b0 [ 926.423611][ T4947] ? nft_pipapo_destroy+0x8b0/0x960 [ 926.428850][ T4947] report_bug+0x1b9/0x2e0 [ 926.433221][ T4947] handle_bug+0x3a/0x70 [ 926.437404][ T4947] exc_invalid_op+0x16/0x40 [ 926.441937][ T4947] asm_exc_invalid_op+0x16/0x20 [ 926.446819][ T4947] RIP: 0010:nft_pipapo_destroy+0x8b0/0x960 [ 926.452683][ T4947] Code: 24 80 3c 18 00 74 08 4c 89 f7 e8 6b ed 81 f9 49 c7 06 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b0 c4 3c f9 <0f> 0b e9 ad f7 ff ff 48 c7 c1 f0 10 8b 8d 80 e1 07 80 c1 03 38 c1 [ 926.472313][ T4947] RSP: 0018:ffffc9000347fa68 EFLAGS: 00010293 [ 926.478433][ T4947] RAX: ffffffff883c4af0 RBX: ffff888059b3bcf0 RCX: ffff8880772d1dc0 [ 926.486435][ T4947] RDX: 0000000000000000 RSI: ffff888059b3bc00 RDI: ffff88807465f128 [ 926.494441][ T4947] RBP: ffffc9000347fc30 R08: ffff8880772d1dc0 R09: 0000000000000008 [ 926.502447][ T4947] R10: 0000000000000018 R11: 0000000000000000 R12: ffff888059b3bcc0 [ 926.510437][ T4947] R13: dffffc0000000000 R14: ffff888059b3bd10 R15: dffffc0000000000 [ 926.518449][ T4947] ? nft_pipapo_destroy+0x8b0/0x960 [ 926.523697][ T4947] ? nft_pipapo_destroy+0x8b0/0x960 [ 926.528941][ T4947] ? __lock_acquire+0x7b50/0x7b50 [ 926.533987][ T4947] ? do_raw_spin_lock+0x128/0x2f0 [ 926.534297][T29037] syz.0.11423 (29037): drop_caches: 3 [ 926.539037][ T4947] nft_set_destroy+0x488/0xa30 [ 926.539117][ T4947] ? do_raw_spin_unlock+0x11d/0x230 [ 926.539145][ T4947] nf_tables_trans_destroy_work+0xc5d/0xf00 [ 926.560418][ T4947] ? __lock_acquire+0x7b50/0x7b50 [ 926.565479][ T4947] ? nft_object_dump+0x1e0/0x1e0 [ 926.570452][ T4947] ? _raw_spin_unlock_irq+0x1f/0x40 [ 926.575678][ T4947] process_one_work+0x867/0xff0 [ 926.580564][ T4947] ? worker_detach_from_pool+0x240/0x240 [ 926.586227][ T4947] ? lockdep_hardirqs_off+0x70/0x100 [ 926.591545][ T4947] ? _raw_spin_lock_irq+0xb7/0xf0 [ 926.596593][ T4947] ? _raw_spin_lock_irqsave+0x100/0x100 [ 926.602214][ T4947] ? wq_worker_running+0x97/0x170 [ 926.607263][ T4947] worker_thread+0xad7/0x12a0 [ 926.611997][ T4947] kthread+0x42e/0x520 [ 926.616083][ T4947] ? rcu_lock_release+0x20/0x20 [ 926.620965][ T4947] ? kthread_blkcg+0xd0/0xd0 [ 926.625600][ T4947] ret_from_fork+0x1f/0x30 [ 926.630074][ T4947] [ 926.633220][ T4947] Kernel Offset: disabled [ 926.637981][ T4947] Rebooting in 86400 seconds..