last executing test programs: 2.183638676s ago: executing program 4 (id=4889): syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b3400000000000000000000092403000000000000092405009917211cfd0924030500000004000724050401"], 0x0) prlimit64(0x0, 0x1, 0x0, 0x0) 1.383062976s ago: executing program 1 (id=4912): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000200"], 0xa0}}, 0x4048080) 1.248857469s ago: executing program 1 (id=4917): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000000)=@ethtool_sfeatures}) 1.138990322s ago: executing program 1 (id=4920): socketpair(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_batadv\x00', &(0x7f0000000500)=@ethtool_cmd={0x50, 0x0, 0x2, 0xc21, 0x8, 0x4, 0x3, 0x3a, 0x5, 0x9, 0x3, 0x9, 0xaf44, 0x94, 0x0, 0x2, [0x6, 0x9eb]}}) 1.105395352s ago: executing program 1 (id=4921): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x800, &(0x7f0000000800)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@posixacl}, {@cache_fscache}]}}) 1.005543915s ago: executing program 2 (id=4924): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xa, 0x7, 0x0, @SEQ_CONTROLLER=0xff, 0x1, 0x9, 0x80}) 972.674936ms ago: executing program 2 (id=4925): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x14f, @tick=0x7, 0x0, {}, 0x0, 0x0, 0xc}) 909.476818ms ago: executing program 1 (id=4928): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000240)) 815.79188ms ago: executing program 2 (id=4930): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x10, &(0x7f0000000040)=ANY=[], 0xa, 0x250, &(0x7f0000000580)="$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") symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='.\x02\x00') 814.04302ms ago: executing program 1 (id=4931): syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004038071317400001020301090224000101ff50090904000d010301020009217fff770122b10f0905810300"], 0x0) syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d4ee0620cf106180"], 0x0) 655.887624ms ago: executing program 0 (id=4936): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x7f66, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f00000000c0)={0x3, 0x1, 0x2}) 556.956256ms ago: executing program 0 (id=4937): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x8, 0x1, 0x20, "91fca26aafc5c55557db16d01b967d688f3fb5bb77eb074d6c9e009093c2cc70", 0x641a1938d11b0130}) 516.205767ms ago: executing program 0 (id=4938): r0 = socket(0x1e, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000280)) 484.303378ms ago: executing program 3 (id=4939): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[{0x10, 0x110, 0xe}, {0x18, 0x110, 0x1, '\x00'}, {0x10, 0x119, 0x1}], 0x38}, 0xfc40) 440.263509ms ago: executing program 4 (id=4940): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi4\x00', 0x200, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000040)={0xc000003, 0xf, &(0x7f0000000080)=[0x0, 0x8, 0x5, 0x4, 0x4, 0xffffdffc, 0x809, 0x40000003, 0x42, 0x7, 0xfffffffa, 0x8, 0x6, 0x0, 0x1], 0x1, 0x20000001}) 439.630649ms ago: executing program 2 (id=4941): r0 = syz_open_dev$video4linux(&(0x7f0000000140), 0x4d0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000080)={0x0, 0x3, 0x1006}) 412.05164ms ago: executing program 3 (id=4942): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@mpls_getroute={0x24, 0x1a, 0x1, 0x70bd25, 0x255fdbfb, {0x1c, 0x20, 0x80, 0x8, 0xff, 0x1, 0xff, 0x3, 0xe00}, [@RTA_DST={0x6, 0x1, {0x100, 0x0, 0x1}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c25}, 0x400c020) 394.15088ms ago: executing program 0 (id=4943): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="700000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00018000316f0600300012800b00010067656e65766500002000028008000100010000000500030000000000050003007f00000004002500140003"], 0x70}}, 0x2000000) 329.559782ms ago: executing program 4 (id=4944): r0 = socket(0x10, 0x80002, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newtaction={0x14, 0x13, 0x53b}, 0x14}}, 0x0) 329.434552ms ago: executing program 2 (id=4945): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@multicast1, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x20, 0x89}, {0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x6, 0x0, 0x2dd}}, [@tmpl={0x104, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x0, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x3, 0x0, 0xff}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3, 0x32}, 0x0, @in6=@mcast1, 0x3502}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x3c}, 0x2, @in6=@mcast2, 0x3503, 0x1, 0x3, 0x0, 0x0, 0x7}, {{@in=@rand_addr=0x64010101, 0x0, 0x32}, 0x20, @in6=@mcast1, 0xfffffffd, 0x4}]}]}, 0x1bc}}, 0x40) 282.130883ms ago: executing program 3 (id=4946): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x4f}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 266.763853ms ago: executing program 4 (id=4947): symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) 224.724524ms ago: executing program 2 (id=4948): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1, 0x4711, &(0x7f0000008f40)="$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") creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) 215.242855ms ago: executing program 0 (id=4949): r0 = socket$netlink(0x10, 0x3, 0x10) fgetxattr(r0, &(0x7f0000001a00)=@random={'security.', 'veth0_to_hsr\x00'}, 0x0, 0x0) 168.034546ms ago: executing program 4 (id=4950): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000c40)={0x344, 0x2, 0x4, {{0x500, 0x203, 0x3, 0x0, {0x20, 0x0, 0x200008000}, 0x2810000, 0x0, 0x0, 0x1754a22a, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\xfd\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, '\b\x00', 0x17b, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xd6{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xec\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00\x00g\xa3\x87\t\b\x80\'\x99\xe0\xa5\xa8\x81E\x05\xb2\x8f\xa49\x19I\x9d\x84\xf5\xa0\x99mR]\xc1\xedC\xfai:\b\xdb\xf70\xbb \x16\xf2\xd4\xcf\xaa\xd0\xb8\xe3%\x10\xf7\x7f\x90\x8a\x0f\xb4BZlC\xab\xebz\xf6\x02@@T=4\x9elRjS\xa4\x89\"\x8ddn\x97H\x9at\x9f\x9aKN\xcf?+\x9f\x8b\xabW,\t\xbf\xbf\xee\'\xb6Kie\x93\x19\x9d\xcb\x94\xb7>\x00\x00\x00\x00\x00\x9bT\xb9A\xb4\xf4B\xedE\x03\x1b\xed|\x988F\x8d\xeaS\x81\xf8\xa6\xf0\b\xb4\b\x00\xe3\x82@\x88W\f)\x88?\x04l,\xd1\x83\x16\x16\xfd_\x8b-\x0f\xf5\xb4\xac\x19\xe4\x13knn\x1bJ\x9aLM\xd8$\xf9g\xf6(\x10\xbb\xcb\x132\x9b!I\x1e0s\x93\x83\xfb\xd9\xc3\x9fu\x88\xbb\xd1\x03\xe3t{\xd7\xe5\x1b\xa0\xb0-\xf0\xd3\x1b\xf3\xcc\x06@I\xfc\x1c$\x1f\xcc\x06\xa9\x15t1\xb3\x18\xe9b\xff\xf8M\xc3WzX\xcff\x026_\xa9\x81:\xa4\x96\x8b\x13\x01\x00i\x9c\xab\x0f\x01u\xf6\xb7\xff\x9f/A\xd1~\xe8\x1d\x99[\x88Zgy\xbf\x1f\xe03\x17\xdb5\x00\x00\x00\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g(\xe7\x17\xf2R\x93Z^\xcd\xe6\xf8\x87\xc0\x81\xa3\xe2\xd5\xa1)\x8dy,J7\xef${\xcda,\xac\xdd\x13Q\v\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.2\x19}\xfe\xe8\xa3h\x8b\x90`\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b', 0x0, 0x0, 0xee01}}, 0x344) 163.276336ms ago: executing program 3 (id=4951): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PMTUDISC={0x5}, @IFLA_IPTUN_TOS={0x5}]}}}]}, 0x40}}, 0x0) 77.492198ms ago: executing program 0 (id=4952): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") truncate(&(0x7f0000000900)='./file1\x00', 0x100071f) 71.277678ms ago: executing program 4 (id=4953): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$inet_buf(r0, 0x118, 0x0, 0x0, &(0x7f00000003c0)=0x14) 67.053379ms ago: executing program 3 (id=4954): r0 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0xc0844123, 0x0) 0s ago: executing program 3 (id=4955): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x18, 0x0, 0x0) kernel console output (not intermixed with test programs): op1): Directory bread(block 65) failed [ 169.275591][T10091] FAT-fs (loop1): Directory bread(block 66) failed [ 169.295166][T10091] FAT-fs (loop1): Directory bread(block 67) failed [ 169.308052][T10091] FAT-fs (loop1): Directory bread(block 68) failed [ 169.340104][T10105] ipt_CLUSTERIP: Please specify destination IP [ 169.349038][T10091] FAT-fs (loop1): Directory bread(block 69) failed [ 169.351064][T10107] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2697'. [ 169.365552][T10091] FAT-fs (loop1): Directory bread(block 70) failed [ 169.420648][ T5802] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 169.421458][T10091] FAT-fs (loop1): Directory bread(block 71) failed [ 169.480669][T10107] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2697'. [ 169.506104][T10091] FAT-fs (loop1): Directory bread(block 72) failed [ 169.520625][T10107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2697'. [ 169.530256][T10091] FAT-fs (loop1): Directory bread(block 73) failed [ 169.557306][T10107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2697'. [ 169.845927][ T5802] usb 3-1: unable to get BOS descriptor or descriptor too short [ 169.849086][T10130] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2708'. [ 170.075936][ T5804] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 170.170888][ T5802] usb 3-1: string descriptor 0 read error: -22 [ 170.177182][ T5802] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 170.184399][T10154] loop1: detected capacity change from 0 to 256 [ 170.191511][ T5802] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.239140][T10158] loop3: detected capacity change from 0 to 512 [ 170.283440][T10158] EXT4-fs (loop3): bad geometry: first data block is 0 with a 1k block and cluster size [ 170.290716][ T5803] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 170.470887][ T5802] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 170.477954][ T5804] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 170.501154][ T5804] usb 5-1: too many endpoints for config 2 interface 0 altsetting 78: 39, using maximum allowed: 30 [ 170.514060][ T5804] usb 5-1: config 2 interface 0 altsetting 78 has 0 endpoint descriptors, different from the interface descriptor's value: 39 [ 170.539341][ T5804] usb 5-1: config 2 interface 0 has no altsetting 0 [ 170.662148][ T5803] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 170.673454][T10168] binfmt_misc: register: failed to install interpreter file ./file0 [ 170.691086][ T5802] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 170.698010][ T5801] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 170.710857][ T5804] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 170.726605][ T5804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.748938][ T5802] usb 3-1: USB disconnect, device number 14 [ 170.755311][ T5803] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 170.766156][ T5804] usb 5-1: Product: syz [ 170.771036][ T5804] usb 5-1: Manufacturer: syz [ 170.775636][ T5804] usb 5-1: SerialNumber: syz [ 170.833734][T10174] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 170.848434][ T5804] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 170.858131][ T5804] usb 5-1: selecting invalid altsetting 0 [ 170.864566][ T5803] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 170.883994][ T5804] usb 5-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 170.963676][ T5801] usb 2-1: Using ep0 maxpacket: 8 [ 171.008199][ T5057] udevd[5057]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 171.081188][ T5801] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 171.094183][ T4230] usb 5-1: USB disconnect, device number 13 [ 171.100467][ T5801] usb 2-1: config 0 interface 0 has no altsetting 0 [ 171.108958][ T25] audit: type=1326 audit(171.078:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10183 comm="syz.3.2735" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d01db0d9 code=0x7ffc0000 [ 171.120913][ T5803] usb 1-1: string descriptor 0 read error: -22 [ 171.139043][ T5803] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 171.149324][ T5803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.157607][ T25] audit: type=1326 audit(171.088:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10183 comm="syz.3.2735" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d01db0d9 code=0x7ffc0000 [ 171.157643][ T25] audit: type=1326 audit(171.088:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10183 comm="syz.3.2735" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f31d01db0d9 code=0x7ffc0000 [ 171.157683][ T25] audit: type=1326 audit(171.088:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10183 comm="syz.3.2735" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d01db0d9 code=0x7ffc0000 [ 171.276640][ T5803] adutux 1-1:168.0: interrupt endpoints not found [ 171.338877][T10193] netlink: 'syz.2.2739': attribute type 1 has an invalid length. [ 171.350904][ T5801] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 171.365313][ T5801] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.391724][ T5801] usb 2-1: Product: syz [ 171.395910][ T5801] usb 2-1: Manufacturer: syz [ 171.407813][ T5801] usb 2-1: SerialNumber: syz [ 171.415792][ T5801] usb 2-1: config 0 descriptor?? [ 171.464264][ T5801] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 171.668777][T10213] loop4: detected capacity change from 0 to 128 [ 171.691410][ T5801] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 171.716190][ T5801] snd_usb_toneport: probe of 2-1:0.0 failed with error -22 [ 171.739365][T10217] netlink: 'syz.2.2751': attribute type 1 has an invalid length. [ 171.752982][T10217] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.2751'. [ 171.765743][T10217] netlink: 'syz.2.2751': attribute type 1 has an invalid length. [ 171.776632][ T6812] usb 1-1: USB disconnect, device number 12 [ 171.783445][T10213] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 171.871182][T10224] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2753'. [ 171.903705][ T5801] usb 2-1: USB disconnect, device number 14 [ 172.141215][T10239] netlink: 'syz.4.2761': attribute type 5 has an invalid length. [ 172.176916][T10241] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2762'. [ 172.198379][T10241] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2762'. [ 172.209016][T10241] bond0: (slave bond_slave_0): Releasing backup interface [ 172.225910][T10241] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 172.348928][T10249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2766'. [ 172.370808][ T5803] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 172.770872][ T5803] usb 4-1: unable to get BOS descriptor or descriptor too short [ 172.860811][ T5803] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.885847][ T5803] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 173.027300][T10298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2789'. [ 173.081033][ T5803] usb 4-1: New USB device found, idVendor=041e, idProduct=3f04, bcdDevice= 0.40 [ 173.090114][ T5803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.106777][ T5803] usb 4-1: Product: syz [ 173.111589][ T5803] usb 4-1: Manufacturer: syz [ 173.116197][ T5803] usb 4-1: SerialNumber: syz [ 173.183745][T10307] loop2: detected capacity change from 0 to 256 [ 173.494060][ T5803] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 173.545762][T10334] x_tables: duplicate entry at hook 1 [ 173.547629][T10335] loop0: detected capacity change from 0 to 512 [ 173.565271][ T5803] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 173.596062][ T5803] usb 4-1: USB disconnect, device number 9 [ 173.634552][ T2239] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 173.655829][T10335] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 173.757681][T10335] EXT4-fs error (device loop0): ext4_orphan_get:1432: comm syz.0.2806: bad orphan inode 131083 [ 173.802543][ T5058] udevd[5058]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 173.834384][T10335] EXT4-fs (loop0): mounted filesystem without journal. Opts: noinit_itable,init_itable,grpquota,,errors=continue. Quota mode: writeback. [ 173.867997][T10335] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #2: block 13: comm syz.0.2806: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=2, rec_len=65535, size=1024 fake=1 [ 174.021033][ T2239] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 174.041937][T10360] netlink: 'syz.1.2818': attribute type 1 has an invalid length. [ 174.067771][ T2239] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 174.080998][T10360] netlink: 'syz.1.2818': attribute type 2 has an invalid length. [ 174.110166][ T2239] usb 3-1: config 0 has an invalid descriptor of length 47, skipping remainder of the config [ 174.137680][ T2239] usb 3-1: config 0 has no interfaces? [ 174.160729][ T2239] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 174.198409][ T2239] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.234820][ T2239] usb 3-1: config 0 descriptor?? [ 174.345578][T10383] netlink: 'syz.1.2830': attribute type 5 has an invalid length. [ 174.498615][ T6812] usb 3-1: USB disconnect, device number 15 [ 174.852465][T10407] loop4: detected capacity change from 0 to 64 [ 174.910980][T10407] MINIX-fs: deleted inode referenced: 6 [ 174.917518][T10407] MINIX-fs: deleted inode referenced: 6 [ 175.246784][T10436] mmap: syz.0.2854 (10436): VmData 37478400 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 175.362115][T10442] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 175.786119][T10484] netlink: 'syz.4.2879': attribute type 1 has an invalid length. [ 175.930969][ T5803] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 176.000686][ T4226] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 176.081395][T10492] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 176.131130][T10492] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 176.150911][T10492] overlayfs: missing 'lowerdir' [ 176.234205][T10498] loop4: detected capacity change from 0 to 128 [ 176.241112][ T4226] usb 2-1: Using ep0 maxpacket: 32 [ 176.297215][T10478] loop2: detected capacity change from 0 to 32768 [ 176.310784][ T5803] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 0 [ 176.322884][ T5803] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 64, setting to 0 [ 176.361303][ T4226] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.379378][ T4226] usb 2-1: New USB device found, idVendor=0525, idProduct=2888, bcdDevice=d0.43 [ 176.445713][ T4226] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.463859][ T4226] usb 2-1: config 0 descriptor?? [ 176.481378][T10478] XFS (loop2): Mounting V5 Filesystem [ 176.491343][T10513] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 176.507604][T10513] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 176.591940][ T5803] usb 4-1: string descriptor 0 read error: -22 [ 176.592924][T10478] XFS (loop2): Ending clean mount [ 176.600520][ T5803] usb 4-1: New USB device found, idVendor=1235, idProduct=8002, bcdDevice= 0.40 [ 176.609818][T10478] XFS (loop2): Quotacheck needed: Please wait. [ 176.630481][ T5803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.679431][T10478] XFS (loop2): Quotacheck: Done. [ 176.693439][ T5803] usb 4-1: low speed audio streaming not supported [ 176.698305][T10478] XFS (loop2): Unmounting Filesystem [ 176.706858][ T5803] usb 4-1: low speed audio streaming not supported [ 176.720860][ T4226] cdc_subset: probe of 2-1:0.0 failed with error -22 [ 176.828401][ T2239] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 176.924090][ T4226] usb 2-1: USB disconnect, device number 15 [ 176.928442][T10532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2899'. [ 176.972317][ T6812] usb 4-1: USB disconnect, device number 10 [ 177.090705][ T2239] usb 5-1: Using ep0 maxpacket: 16 [ 177.142205][T10540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2903'. [ 177.231043][ T2239] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.253211][ T2239] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.265844][ T2239] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 177.316501][ T2239] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 177.328940][ T2239] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.354080][ T2239] usb 5-1: config 0 descriptor?? [ 177.423617][ T2239] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input10 [ 177.466750][ T3545] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 177.486703][ T3545] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 177.509485][ T3545] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 177.548994][ T3545] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 177.624188][ T5058] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 177.673884][ T3545] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 177.692612][ T3545] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 177.705037][T10569] netlink: 'syz.1.2917': attribute type 6 has an invalid length. [ 177.718043][T10518] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 177.753176][ T3545] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 177.769894][T10568] loop0: detected capacity change from 0 to 512 [ 177.777401][ T2239] usb 5-1: USB disconnect, device number 14 [ 177.870286][T10574] exfat: Deprecated parameter 'debug' [ 177.883660][T10574] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 177.896304][T10574] exFAT-fs (loop1): unable to read boot sector [ 177.901107][T10568] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #2: comm syz.0.2916: missing EA_INODE flag [ 177.904008][T10574] exFAT-fs (loop1): failed to read boot sector [ 177.920472][T10574] exFAT-fs (loop1): failed to recognize exfat type [ 177.960830][T10568] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.2916: error while reading EA inode 2 err=-117 [ 177.977975][T10568] EXT4-fs (loop0): 1 orphan inode deleted [ 177.983840][T10568] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 178.244992][T10598] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2930'. [ 178.471806][T10615] loop1: detected capacity change from 0 to 256 [ 178.546945][T10615] FAT-fs (loop1): Directory bread(block 64) failed [ 178.565973][T10615] FAT-fs (loop1): Directory bread(block 65) failed [ 178.587549][T10615] FAT-fs (loop1): Directory bread(block 66) failed [ 178.628405][T10615] FAT-fs (loop1): Directory bread(block 67) failed [ 178.660150][T10615] FAT-fs (loop1): Directory bread(block 68) failed [ 178.684069][T10615] FAT-fs (loop1): Directory bread(block 69) failed [ 178.703827][T10633] SET target dimension over the limit! [ 178.708088][T10615] FAT-fs (loop1): Directory bread(block 70) failed [ 178.729624][T10615] FAT-fs (loop1): Directory bread(block 71) failed [ 178.736549][T10636] xt_ecn: cannot match TCP bits for non-tcp packets [ 178.770871][T10615] FAT-fs (loop1): Directory bread(block 72) failed [ 178.790738][T10615] FAT-fs (loop1): Directory bread(block 73) failed [ 178.946368][T10645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2954'. [ 178.961431][T10648] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 178.983585][T10648] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 178.998676][T10645] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2954'. [ 179.002967][T10648] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 179.161088][T10653] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2958'. [ 179.170062][T10653] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2958'. [ 179.339149][T10670] usb usb8: usbfs: process 10670 (syz.4.2964) did not claim interface 0 before use [ 179.377799][T10671] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2967'. [ 179.488759][T10677] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2970'. [ 179.566049][ T5801] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 180.043854][T10724] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 180.101045][ T5801] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 180.147996][ T5801] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.166017][ T5801] usb 1-1: Product: syz [ 180.190755][ T5801] usb 1-1: Manufacturer: syz [ 180.195371][ T5801] usb 1-1: SerialNumber: syz [ 180.242240][ T5801] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 180.270752][T10744] autofs4:pid:10744:validate_dev_ioctl: invalid path supplied for cmd(0xc018937d) [ 180.563666][T10760] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3008'. [ 180.578363][T10761] loop1: detected capacity change from 0 to 1024 [ 180.608441][T10760] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 180.756567][T10749] infiniband syz0: set active [ 180.797417][T10766] loop3: detected capacity change from 0 to 64 [ 180.805991][T10749] infiniband syz0: added bond0 [ 180.810136][T10767] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 180.866552][T10767] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 180.891915][T10749] RDS/IB: syz0: added [ 180.896059][T10749] smc: adding ib device syz0 with port count 1 [ 180.900839][ T5801] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 180.916581][T10749] smc: ib device syz0 port 1 has pnetid [ 180.970211][ T4195] hfs: node 4:3 still has 1 user(s)! [ 181.100526][T10757] loop2: detected capacity change from 0 to 32768 [ 181.173094][T10773] lo speed is unknown, defaulting to 1000 [ 181.375642][ T4226] usb 1-1: USB disconnect, device number 13 [ 181.420833][ T5803] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 181.930781][ T5801] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 181.944464][ T5803] usb 4-1: New USB device found, idVendor=04b4, idProduct=9321, bcdDevice= 0.40 [ 181.958805][ T5801] ath9k_htc: Failed to initialize the device [ 181.982084][ T5803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.006505][ T4226] usb 1-1: ath9k_htc: USB layer deinitialized [ 182.022405][ T5803] usb 4-1: Product: syz [ 182.027628][ T5803] usb 4-1: Manufacturer: syz [ 182.032529][T10795] __nla_validate_parse: 1 callbacks suppressed [ 182.032544][T10795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3024'. [ 182.049456][ T5803] usb 4-1: SerialNumber: syz [ 182.323336][T10811] cgroup: noprefix used incorrectly [ 182.366589][T10806] loop0: detected capacity change from 0 to 8192 [ 182.474390][T10806] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 182.510976][ T5803] usb 4-1: unit 5 not found! [ 182.524173][T10806] REISERFS (device loop0): using ordered data mode [ 182.540827][ T5803] usb 4-1: can't set first interface for hiFace device. [ 182.550098][ T5803] snd-usb-hiface: probe of 4-1:1.1 failed with error -5 [ 182.568550][T10806] reiserfs: using flush barriers [ 182.602081][ T5803] usb 4-1: can't set first interface for hiFace device. [ 182.609061][ T5803] snd-usb-hiface: probe of 4-1:1.2 failed with error -5 [ 182.623277][ T5803] usb 4-1: USB disconnect, device number 11 [ 182.651356][T10806] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 182.680293][T10829] netlink: 'syz.2.3040': attribute type 4 has an invalid length. [ 182.751140][T10806] REISERFS (device loop0): checking transaction log (loop0) [ 182.807236][T10806] REISERFS (device loop0): Using r5 hash to sort names [ 182.831361][T10806] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 182.832459][T10839] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3045'. [ 182.851093][ T5057] udevd[5057]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 183.333132][T10861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3056'. [ 183.456756][T10869] netlink: 'syz.4.3060': attribute type 30 has an invalid length. [ 183.490694][T10869] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3060'. [ 183.520283][T10869] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 183.538061][T10875] netlink: 'syz.0.3063': attribute type 1 has an invalid length. [ 183.556267][T10869] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 183.575074][T10875] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3063'. [ 183.789298][T10845] loop2: detected capacity change from 0 to 32768 [ 183.805899][T10890] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.814590][T10890] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.839490][T10890] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 184.180734][T10910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3081'. [ 184.233544][T10910] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3081'. [ 184.504296][T10934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3093'. [ 184.538332][ T25] audit: type=1107 audit(184.498:23): pid=10936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 184.704390][T10950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3099'. [ 185.210957][T10960] loop2: detected capacity change from 0 to 4096 [ 185.312666][T10960] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 185.540760][ T4226] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 185.852290][ T6802] Bluetooth: hci0: command 0x0406 tx timeout [ 185.867203][ T6802] Bluetooth: hci1: command 0x0406 tx timeout [ 185.887180][ T6802] Bluetooth: hci2: command 0x0406 tx timeout [ 185.887242][ T6802] Bluetooth: hci4: command 0x0406 tx timeout [ 185.902860][ T4226] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.902899][ T4226] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 186.050654][ T6802] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 186.071023][ T4226] usb 1-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 186.071056][ T4226] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.071078][ T4226] usb 1-1: Product: syz [ 186.071094][ T4226] usb 1-1: Manufacturer: syz [ 186.071109][ T4226] usb 1-1: SerialNumber: syz [ 186.206855][T11017] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 186.408089][ T4226] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 186.430214][T11026] netlink: 'syz.4.3137': attribute type 20 has an invalid length. [ 186.437839][ T4226] usb 1-1: USB disconnect, device number 14 [ 186.451165][ T6802] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.471282][ T6802] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 186.474119][T11029] netlink: 'syz.1.3138': attribute type 1 has an invalid length. [ 186.500636][ T6802] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 186.525011][T11029] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3138'. [ 186.540079][ T6802] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 186.559093][ T6802] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 186.568646][ T6802] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.828348][T11036] netlink: 'syz.1.3141': attribute type 10 has an invalid length. [ 186.894240][T11036] openvswitch: netlink: Flow key attr not present in new flow. [ 187.065527][ T6802] usb 3-1: USB disconnect, device number 16 [ 187.166777][T11055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3151'. [ 187.344303][T11065] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.3157'. [ 187.587650][T11081] loop1: detected capacity change from 0 to 64 [ 187.763112][T11091] netlink: 'syz.3.3168': attribute type 1 has an invalid length. [ 187.849128][T11091] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3168'. [ 188.199977][ T25] audit: type=1400 audit(188.168:24): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3AF4F9904E7FDB3635A70D23C73EEAF23A2F503280080CA26230668AD9DCF8B061228F8599D34E45087D21AA56759E1651B3DD467BDEF390C76D pid=11115 comm="syz.0.3181" [ 188.318200][T11126] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 188.415824][T11126] CIFS: Attempting to mount \\::1\share [ 188.462781][T11126] CIFS: VFS: No username specified [ 188.487896][T11134] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3189'. [ 188.535314][T11137] netlink: 'syz.3.3190': attribute type 1 has an invalid length. [ 188.581975][T11137] netlink: 'syz.3.3190': attribute type 2 has an invalid length. [ 188.604261][T11140] netlink: 'syz.0.3193': attribute type 1 has an invalid length. [ 188.729721][T11150] netlink: 'syz.2.3197': attribute type 32 has an invalid length. [ 188.807750][T11155] nft_compat: unsupported protocol 5 [ 188.820088][T11089] loop4: detected capacity change from 0 to 32768 [ 188.997290][T11089] XFS (loop4): Mounting V5 Filesystem [ 189.140020][T11089] XFS (loop4): Ending clean mount [ 189.170922][T11089] XFS (loop4): Quotacheck needed: Please wait. [ 189.293610][T11089] XFS (loop4): Quotacheck: Done. [ 189.294732][T11089] XFS (loop4): Unmounting Filesystem [ 189.629892][T11211] loop0: detected capacity change from 0 to 2048 [ 189.739976][T11211] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 189.802880][T11226] netlink: 'syz.2.3230': attribute type 8 has an invalid length. [ 189.808054][T11211] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 190.240669][ T4226] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 190.480655][ T4226] usb 3-1: Using ep0 maxpacket: 32 [ 190.770947][ T4226] usb 3-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 190.782607][ T4226] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.812818][ T4226] usb 3-1: Product: syz [ 190.816999][ T4226] usb 3-1: Manufacturer: syz [ 190.870607][ T4226] usb 3-1: SerialNumber: syz [ 191.221307][ T2239] libceph: connect (1)127.0.0.1:6789 error -101 [ 191.231147][ T2239] libceph: mon0 (1)127.0.0.1:6789 connect error [ 191.251248][ T2239] libceph: connect (1)127.0.0.1:6789 error -101 [ 191.251846][ T4226] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 191.262538][ T2239] libceph: mon0 (1)127.0.0.1:6789 connect error [ 191.321465][ T4226] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 191.390862][ T4226] usb 3-1: USB disconnect, device number 17 [ 191.473310][T11330] netlink: 'syz.1.3280': attribute type 6 has an invalid length. [ 191.542274][ T6812] libceph: connect (1)127.0.0.1:6789 error -101 [ 191.554063][ T6812] libceph: mon0 (1)127.0.0.1:6789 connect error [ 191.592370][T11338] overlayfs: conflicting options: metacopy=on,redirect_dir=off [ 191.626535][ T5057] udevd[5057]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 191.749076][T11346] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3288'. [ 191.975874][T11306] ceph: No mds server is up or the cluster is laggy [ 192.373985][T11389] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 192.643027][T11412] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3321'. [ 192.710695][T11412] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 192.745401][T11412] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 192.929755][T11436] device gre1 entered promiscuous mode [ 192.962567][T11438] loop3: detected capacity change from 0 to 512 [ 192.992217][T11440] tmpfs: Bad value for 'mpol' [ 193.007003][ T6812] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 193.007207][T11438] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 193.014797][ T6802] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 193.133529][T11438] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,noload,acl,mblk_io_submit,sysvgroups,,errors=continue. Quota mode: writeback. [ 193.306146][ T6802] usb 3-1: Using ep0 maxpacket: 8 [ 193.421147][T11465] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 193.442442][ T6802] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 193.458599][ T6802] usb 3-1: config 179 has no interface number 0 [ 193.474749][ T6802] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 193.500449][ T6802] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 193.530135][ T6802] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 193.556909][ T6802] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 193.576079][ T6802] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 193.589923][ T5801] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 193.592788][ T6802] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 193.612438][ T6802] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.640777][ T6812] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 193.649867][ T6812] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.658475][T11424] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 193.672223][ T6812] usb 1-1: Product: syz [ 193.676562][T11479] netlink: 'syz.1.3353': attribute type 1 has an invalid length. [ 193.695540][ T6812] usb 1-1: Manufacturer: syz [ 193.700158][ T6812] usb 1-1: SerialNumber: syz [ 193.725951][ T6812] usb 1-1: config 0 descriptor?? [ 193.782862][ T6812] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 193.840745][ T5801] usb 5-1: Using ep0 maxpacket: 32 [ 193.870515][T11489] loop1: detected capacity change from 0 to 1024 [ 193.916761][T11489] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 193.953798][T11489] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 193.975742][T11489] EXT4-fs (loop1): orphan cleanup on readonly fs [ 193.987344][T11489] EXT4-fs error (device loop1): ext4_free_blocks:6231: comm syz.1.3358: Freeing blocks not in datazone - block = 0, count = 4096 [ 193.996268][T11496] netlink: 'syz.3.3361': attribute type 3 has an invalid length. [ 194.001271][ T6812] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 194.018957][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.019053][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.027164][T11496] netlink: 'syz.3.3361': attribute type 3 has an invalid length. [ 194.033686][ T6812] sq905c 1-1:0.0: Get version command failed [ 194.047440][T11489] EXT4-fs (loop1): Remounting filesystem read-only [ 194.052535][ T6812] sq905c: probe of 1-1:0.0 failed with error -71 [ 194.055451][ T6812] usb 1-1: USB disconnect, device number 15 [ 194.087850][T11489] EXT4-fs (loop1): 1 orphan inode deleted [ 194.104948][T11489] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,barrier=0x0000000000000000,barrier=0x0000000000000009,init_itable=0x0000000000007ab4,jqfmt=vfsv0,. Quota mode: writeback. [ 194.112369][ T6802] usb 3-1: USB disconnect, device number 18 [ 194.130650][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 194.138956][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 194.141720][ T5801] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 194.178316][T11489] EXT4-fs error (device loop1): ext4_search_dir:1549: inode #2: block 16: comm syz.1.3358: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 194.225338][ T5801] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.248935][ T5801] usb 5-1: Product: syz [ 194.255023][ T5801] usb 5-1: Manufacturer: syz [ 194.259646][ T5801] usb 5-1: SerialNumber: syz [ 194.275093][ T5801] usb 5-1: config 0 descriptor?? [ 194.458179][T11512] device sit0 entered promiscuous mode [ 194.482105][T11512] netlink: 'syz.3.3368': attribute type 1 has an invalid length. [ 194.495895][T11512] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3368'. [ 194.776128][ T5801] airspy 5-1:0.0: usb_control_msg() failed -71 request 0a [ 194.783599][ T5801] airspy 5-1:0.0: Could not detect board [ 194.789281][ T5801] airspy: probe of 5-1:0.0 failed with error -71 [ 194.805179][T11531] netlink: 'syz.2.3379': attribute type 21 has an invalid length. [ 194.815653][ T5801] usb 5-1: USB disconnect, device number 15 [ 194.824373][T11531] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3379'. [ 194.840879][ T6802] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 194.858095][T11531] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3379'. [ 195.205288][T11559] loop0: detected capacity change from 0 to 512 [ 195.232875][T11553] loop3: detected capacity change from 0 to 4096 [ 195.279486][T11559] EXT4-fs (loop0): Test dummy encryption mode enabled [ 195.311282][T11559] EXT4-fs (loop0): Ignoring removed oldalloc option [ 195.344775][T11559] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 195.377827][T11553] ntfs: volume version 3.1. [ 195.400956][ T6802] usb 2-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=d0.db [ 195.410038][ T6802] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.443272][T11559] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,acl,oldalloc,debug_want_extra_isize=0x0000000000000008,nobarrier,dioread_nolock,,errors=continue. Quota mode: writeback. [ 195.507825][T11559] EXT4-fs (loop0): Test dummy encryption mode enabled [ 195.514992][T11559] EXT4-fs (loop0): Ignoring removed oldalloc option [ 195.521760][T11559] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 195.521862][ T6802] usb 2-1: Product: syz [ 195.540246][T11559] EXT4-fs (loop0): re-mounted. Opts: test_dummy_encryption=v1,acl,oldalloc,debug_want_extra_isize=0x0000000000000008,nobarrier,dioread_nolock,. Quota mode: writeback. [ 195.603071][ T6802] usb 2-1: Manufacturer: syz [ 195.607719][ T6802] usb 2-1: SerialNumber: syz [ 195.646449][T11574] netlink: 'syz.4.3398': attribute type 21 has an invalid length. [ 195.654044][ T6802] usb 2-1: config 0 descriptor?? [ 195.668049][ T144] ntfs: (device loop3): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 195.696024][T11574] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3398'. [ 195.736387][T11574] netlink: 'syz.4.3398': attribute type 4 has an invalid length. [ 195.745450][T11574] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3398'. [ 195.979206][ T4226] usb 2-1: USB disconnect, device number 16 [ 196.098892][T11598] loop4: detected capacity change from 0 to 4096 [ 196.167152][T11598] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 197.133041][T11619] loop4: detected capacity change from 0 to 32768 [ 197.154282][T11661] kAFS: No cell specified [ 197.184417][T11619] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.3420 (11619) [ 197.275339][T11619] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 197.314108][T11619] BTRFS info (device loop4): using free space tree [ 197.342599][T11619] BTRFS info (device loop4): has skinny extents [ 197.455679][T11634] loop0: detected capacity change from 0 to 32768 [ 197.596961][T11634] __jfs_setxattr: xattr_size = 2175, new_size = 15199 [ 197.628379][T11619] BTRFS info (device loop4): enabling ssd optimizations [ 197.723033][T11619] BTRFS warning (device loop4): can't clear the compat:1 feature bit while mounted [ 197.976056][T11712] loop1: detected capacity change from 0 to 1024 [ 198.366615][T11711] loop3: detected capacity change from 0 to 8192 [ 198.436550][T11711] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 198.450939][T11711] REISERFS (device loop3): using ordered data mode [ 198.478557][T11711] reiserfs: using flush barriers [ 198.549429][T11727] CacheFiles: Empty directory specified [ 198.567198][T11711] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 198.685487][T11711] REISERFS (device loop3): checking transaction log (loop3) [ 198.729681][T11733] tmpfs: Bad value for 'mpol' [ 198.747719][T11735] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3467'. [ 198.780826][T11735] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3467'. [ 198.905185][T11739] i2c i2c-0: Invalid block write size 253 [ 198.942628][T11741] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3470'. [ 198.998515][T11711] REISERFS (device loop3): Using tea hash to sort names [ 199.007114][T11711] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 199.297133][T11757] loop0: detected capacity change from 0 to 24 [ 199.399113][T11761] 9pnet: Insufficient options for proto=fd [ 199.825083][ T6802] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 199.942053][T11785] ERROR: device name not specified. [ 200.090744][ T6802] usb 1-1: Using ep0 maxpacket: 8 [ 200.141058][ T4226] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 200.183629][T11797] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3497'. [ 200.266141][ T6802] usb 1-1: unable to get BOS descriptor or descriptor too short [ 200.348854][T11802] loop3: detected capacity change from 0 to 4096 [ 200.364394][ T6802] usb 1-1: config 86 has an invalid interface number: 78 but max is 0 [ 200.376014][T11802] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 200.386105][ T6802] usb 1-1: config 86 has no interface number 0 [ 200.401366][ T4226] usb 2-1: Using ep0 maxpacket: 16 [ 200.407582][ T6802] usb 1-1: config 86 interface 78 altsetting 128 bulk endpoint 0x88 has invalid maxpacket 1024 [ 200.436243][T11807] netlink: 160 bytes leftover after parsing attributes in process `syz.4.3503'. [ 200.451363][ T6802] usb 1-1: config 86 interface 78 altsetting 128 bulk endpoint 0x5 has invalid maxpacket 1023 [ 200.560857][ T4226] usb 2-1: unable to get BOS descriptor or descriptor too short [ 200.607322][ T6802] usb 1-1: config 86 interface 78 has no altsetting 0 [ 200.626106][T11802] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 200.634287][T11667] syz.2.3444 (11667): drop_caches: 3 [ 200.659067][ T4226] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 200.683001][ T4226] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.712259][ T4226] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 200.810811][ T6802] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0121, bcdDevice=a4.7d [ 200.840412][ T6802] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.874077][T11817] netlink: 212168 bytes leftover after parsing attributes in process `syz.4.3508'. [ 200.891157][ T4226] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 200.898427][ T6802] usb 1-1: Product: syz [ 200.909610][ T4226] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.917900][ T6802] usb 1-1: Manufacturer: syz [ 200.918013][ T4226] usb 2-1: Product: syz [ 200.927170][ T4226] usb 2-1: Manufacturer: syz [ 200.938768][ T4226] usb 2-1: SerialNumber: syz [ 200.949848][ T6802] usb 1-1: SerialNumber: syz [ 201.010967][T11765] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 201.018697][T11765] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 201.120692][T11817] syz.4.3508 (11817) used greatest stack depth: 18640 bytes left [ 201.244716][ T4226] snd-ua101 2-1:1.1: invalid bNumEndpoints [ 201.252445][T11835] loop2: detected capacity change from 0 to 4096 [ 201.262195][ T4226] snd-ua101 2-1:1.0: invalid num_altsetting [ 201.286836][ T4226] usb 2-1: USB disconnect, device number 17 [ 201.298643][ T5057] udevd[5057]: setting owner of /dev/bus/usb/002/017 to uid=0, gid=0 failed: No such file or directory [ 201.381128][ T6802] kvaser_usb 1-1:86.78: Cannot get software info, error -71 [ 201.388460][ T6802] kvaser_usb: probe of 1-1:86.78 failed with error -71 [ 201.394436][T11845] xt_hashlimit: overflow, rate too high: 0 [ 201.410414][T11835] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 201.432492][T11835] ntfs3: loop2: Failed to load $Extend. [ 201.447802][ T6802] usb 1-1: USB disconnect, device number 16 [ 201.498993][ T25] audit: type=1800 audit(201.468:25): pid=11835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3517" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 201.740503][T11861] loop4: detected capacity change from 0 to 512 [ 201.804954][T11861] EXT4-fs (loop4): Ignoring removed orlov option [ 201.840773][T11861] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 201.863603][T11861] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 201.884791][T11861] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.3530: attempt to clear invalid blocks 2 len 1 [ 202.037295][T11876] delete_channel: no stack [ 202.050846][T11861] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 202.077778][T11865] loop2: detected capacity change from 0 to 32768 [ 202.091193][ T6802] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 202.097528][T11879] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3538'. [ 202.146120][T11861] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.3530: invalid indirect mapped block 1819239214 (level 0) [ 202.184164][T11861] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.3530: invalid indirect mapped block 1819239214 (level 1) [ 202.258609][T11865] XFS (loop2): Mounting V5 Filesystem [ 202.265471][T11861] EXT4-fs (loop4): 1 truncate cleaned up [ 202.271850][T11861] EXT4-fs (loop4): mounted filesystem without journal. Opts: orlov,init_itable=0x0000000000000003,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 202.290099][ C1] vkms_vblank_simulate: vblank timer overrun [ 202.350776][ T6802] usb 2-1: Using ep0 maxpacket: 16 [ 202.392752][T11898] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 202.396802][T11865] XFS (loop2): Ending clean mount [ 202.463692][T11865] XFS (loop2): Quotacheck needed: Please wait. [ 202.509268][ T6802] usb 2-1: config 0 has no interfaces? [ 202.531991][T11865] XFS (loop2): Quotacheck: Done. [ 202.567228][T11905] device bond1 entered promiscuous mode [ 202.574499][T11905] 8021q: adding VLAN 0 to HW filter on device bond1 [ 202.741008][ T6802] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 202.760289][ T6802] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.771161][ T6802] usb 2-1: Product: syz [ 202.775368][ T6802] usb 2-1: Manufacturer: syz [ 202.796127][ T6802] usb 2-1: SerialNumber: syz [ 202.802298][ T4194] XFS (loop2): Unmounting Filesystem [ 202.815066][ T6802] r8152-cfgselector 2-1: config 0 descriptor?? [ 202.982962][T11935] x_tables: unsorted entry at hook 4 [ 203.131327][ T6802] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 203.357389][ T5801] usb 2-1: USB disconnect, device number 18 [ 203.404354][T11957] loop0: detected capacity change from 0 to 256 [ 203.476696][T11957] exfat: Deprecated parameter 'namecase' [ 203.503625][T11967] bond0: Error: Cannot enslave bond to itself. [ 203.529548][T11957] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0x9eb8f943, utbl_chksum : 0xe619d30d) [ 203.722525][ T6802] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 203.850225][T11989] loop4: detected capacity change from 0 to 256 [ 203.917383][T11994] loop1: detected capacity change from 0 to 256 [ 203.924503][T11995] netlink: 'syz.3.3587': attribute type 29 has an invalid length. [ 203.934530][T11995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3587'. [ 203.954236][T11989] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 203.970344][T11989] FAT-fs (loop4): Filesystem has been set read-only [ 203.973498][T11995] netlink: 'syz.3.3587': attribute type 29 has an invalid length. [ 203.977403][ T6802] usb 3-1: Using ep0 maxpacket: 32 [ 204.038252][T11995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3587'. [ 204.091140][T11994] FAT-fs (loop1): Directory bread(block 64) failed [ 204.097703][T11994] FAT-fs (loop1): Directory bread(block 65) failed [ 204.138842][T11994] FAT-fs (loop1): Directory bread(block 66) failed [ 204.151047][T11994] FAT-fs (loop1): Directory bread(block 67) failed [ 204.157736][T11994] FAT-fs (loop1): Directory bread(block 68) failed [ 204.182497][ T6802] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 204.202874][T11994] FAT-fs (loop1): Directory bread(block 69) failed [ 204.209553][T11994] FAT-fs (loop1): Directory bread(block 70) failed [ 204.226462][T11994] FAT-fs (loop1): Directory bread(block 71) failed [ 204.249031][T11994] FAT-fs (loop1): Directory bread(block 72) failed [ 204.281718][T11994] FAT-fs (loop1): Directory bread(block 73) failed [ 204.406292][T12011] SET target dimension over the limit! [ 204.414528][ T6802] usb 3-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=ed.3b [ 204.437286][ T6802] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.470376][ T6802] usb 3-1: Product: syz [ 204.496145][ T6802] usb 3-1: Manufacturer: syz [ 204.526081][ T6802] usb 3-1: SerialNumber: syz [ 204.692611][T12031] loop3: detected capacity change from 0 to 64 [ 204.857142][ T6802] usb 3-1: USB disconnect, device number 19 [ 204.868012][T12040] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 204.989778][T12043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3612'. [ 205.348222][T12069] loop0: detected capacity change from 0 to 512 [ 205.427774][T12069] EXT4-fs (loop0): Ignoring removed orlov option [ 205.464612][T12069] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 205.484082][T12073] (unnamed net_device) (uninitialized): up delay (8) is not a multiple of miimon (100), value rounded to 0 ms [ 205.523880][T12073] (unnamed net_device) (uninitialized): peer notification delay (23) is not a multiple of miimon (100), value rounded to 0 ms [ 205.538090][T12069] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 205.554971][T12073] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-tlb(5) [ 205.570711][T12069] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.3624: attempt to clear invalid blocks 2 len 1 [ 205.643701][T12079] libceph: resolve '0' (ret=-3): failed [ 205.701062][T12069] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 205.702682][T12084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3631'. [ 205.774624][T12087] tmpfs: Bad value for 'mpol' [ 205.828336][T12069] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.3624: invalid indirect mapped block 1819239214 (level 0) [ 205.901842][T12069] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.3624: invalid indirect mapped block 1819239214 (level 1) [ 205.947059][T12069] EXT4-fs (loop0): 1 truncate cleaned up [ 205.980737][T12069] EXT4-fs (loop0): mounted filesystem without journal. Opts: orlov,init_itable=0x0000000000000003,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 206.007466][T12097] ip6t_srh: unknown srh invflags 4000 [ 206.023851][T12100] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3638'. [ 206.293998][T12117] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3648'. [ 206.323092][T12117] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3648'. [ 206.323113][T12117] netlink: 'syz.4.3648': attribute type 6 has an invalid length. [ 206.455682][T12127] loop3: detected capacity change from 0 to 512 [ 206.535107][T12127] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 206.589139][T12127] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.3654: bg 0: block 4: invalid block bitmap [ 206.631009][T12127] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 206.693352][T12127] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.3654: invalid indirect mapped block 1 (level 1) [ 206.722085][T12142] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3659'. [ 206.783974][T12127] EXT4-fs (loop3): 1 truncate cleaned up [ 206.822296][T12127] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 206.840715][T12142] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 206.916653][T12119] loop1: detected capacity change from 0 to 32768 [ 207.059546][T12119] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.3649 (12119) [ 207.115307][T12119] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 207.142226][T12119] BTRFS info (device loop1): using free space tree [ 207.145945][T12166] netlink: 'syz.4.3670': attribute type 1 has an invalid length. [ 207.159999][T12119] BTRFS info (device loop1): has skinny extents [ 207.215819][T12175] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3673'. [ 207.229138][T12166] netlink: 'syz.4.3670': attribute type 2 has an invalid length. [ 207.257833][T12184] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 207.509496][T12119] BTRFS info (device loop1): enabling ssd optimizations [ 207.576442][T12119] BTRFS warning (device loop1): can't clear the compat:1 feature bit while mounted [ 207.880685][ T6802] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 208.198061][T12246] netlink: 'syz.0.3698': attribute type 10 has an invalid length. [ 208.226002][T12246] netlink: 'syz.0.3698': attribute type 10 has an invalid length. [ 208.306716][ T6802] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.353174][ T6802] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 4 [ 208.376245][ T6802] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 208.408208][T12261] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 208.430963][ T6802] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 208.456172][T12261] overlayfs: conflicting options: userxattr,metacopy=on [ 208.457755][ T6802] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.496781][ T6802] usb 3-1: config 0 descriptor?? [ 208.620685][ T5801] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 208.795109][ T6802] ath6kl: Failed to submit usb control message: -71 [ 208.804171][ T6802] ath6kl: unable to send the bmi data to the device: -71 [ 208.804234][T12285] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3714'. [ 208.827778][ T6802] ath6kl: Unable to send get target info: -71 [ 208.877460][ T5801] usb 4-1: Using ep0 maxpacket: 16 [ 208.882822][ T6802] ath6kl: Failed to init ath6kl core: -71 [ 208.923549][ T6802] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 208.970900][ T6802] usb 3-1: USB disconnect, device number 20 [ 209.000922][ T5801] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 209.023946][ T5801] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.050050][ T5801] usb 4-1: config 0 has no interface number 0 [ 209.220934][ T5801] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 209.250190][ T5801] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.277707][ T5801] usb 4-1: Product: syz [ 209.286444][ T5801] usb 4-1: Manufacturer: syz [ 209.291122][ T5801] usb 4-1: SerialNumber: syz [ 209.312380][ T5801] usb 4-1: config 0 descriptor?? [ 209.549731][T12293] loop1: detected capacity change from 0 to 32768 [ 209.590949][ T5801] usb 4-1: Found UVC 0.00 device syz (046d:08d3) [ 209.597343][ T5801] usb 4-1: No valid video chain found. [ 209.740772][T12330] loop0: detected capacity change from 0 to 2048 [ 209.849814][ T5801] usb 4-1: USB disconnect, device number 12 [ 209.898687][T12330] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,errors=remount-ro,resgid=0x0000000000000000,barrier,quota,delalloc,. Quota mode: writeback. [ 209.916795][ C0] vkms_vblank_simulate: vblank timer overrun [ 209.990724][ T6804] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 210.114836][T12330] EXT4-fs error (device loop0): ext4_xattr_block_find:1857: inode #15: comm syz.0.3733: corrupted xattr block 128 [ 210.149412][T12330] EXT4-fs (loop0): Remounting filesystem read-only [ 210.267334][ T6804] usb 5-1: Using ep0 maxpacket: 32 [ 210.412849][ T6804] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 210.437397][ T6804] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.479769][ T6804] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 210.680783][ T6804] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 210.715280][ T6804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.783197][ T6804] usb 5-1: Product: syz [ 210.808892][ T6804] usb 5-1: Manufacturer: syz [ 210.824038][ T6804] usb 5-1: SerialNumber: syz [ 211.052576][T12398] loop3: detected capacity change from 0 to 64 [ 211.142094][ T6804] usb 5-1: USB disconnect, device number 16 [ 211.164459][T12398] hfs: inconsistency in B*Tree (1,0,2,2,3) [ 211.180715][ T6802] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 211.470866][ T6802] usb 2-1: Using ep0 maxpacket: 32 [ 211.732098][T12432] x_tables: duplicate entry at hook 3 [ 211.800882][ T6802] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 211.823044][ T6802] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.890664][ T6802] usb 2-1: Product: syz [ 211.895031][ T6802] usb 2-1: Manufacturer: syz [ 211.905191][ T6802] usb 2-1: SerialNumber: syz [ 211.919957][ T6802] usb 2-1: config 0 descriptor?? [ 212.217850][ T6802] airspy 2-1:0.0: usb_control_msg() failed -71 request 09 [ 212.227113][ T6802] airspy 2-1:0.0: Could not detect board [ 212.240729][ T6802] airspy: probe of 2-1:0.0 failed with error -71 [ 212.267628][ T6802] usb 2-1: USB disconnect, device number 19 [ 212.487308][T12435] loop4: detected capacity change from 0 to 32768 [ 212.554395][T12435] ERROR: (device loop4): diAllocAG: error reading iag [ 212.554395][T12435] [ 212.574914][T12435] ialloc: diAlloc returned -5! [ 212.775963][ T5801] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 213.184859][ T5801] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.224459][ T5801] usb 3-1: config 0 interface 0 has no altsetting 0 [ 213.450791][ T5801] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 213.460084][ T5801] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.552275][ T5801] usb 3-1: Product: syz [ 213.583711][ T5801] usb 3-1: Manufacturer: syz [ 213.591524][ T5801] usb 3-1: SerialNumber: syz [ 213.613560][ T5801] usb 3-1: config 0 descriptor?? [ 213.618814][T12507] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3814'. [ 213.631083][T12508] netlink: 'syz.4.3815': attribute type 6 has an invalid length. [ 213.682680][ T5801] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 213.745551][ T5801] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 213.821615][ T5801] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 213.856355][ T5801] usb 3-1: media controller created [ 213.866823][T12507] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3814'. [ 213.919246][ T5801] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 214.084414][T12464] syz.0.3793 (12464): drop_caches: 3 [ 214.104000][ T5801] DVB: Unable to find symbol tda10046_attach() [ 214.117560][ T5801] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 214.134316][ T5801] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 214.180913][ T5801] dvb_usb_m920x: probe of 3-1:0.0 failed with error -71 [ 214.199378][T12529] loop4: detected capacity change from 0 to 512 [ 214.216703][ T5801] usb 3-1: USB disconnect, device number 21 [ 214.428931][T12529] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.3822: iget: bad i_size value: 38620345925642 [ 214.450487][T12529] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.3822: couldn't read orphan inode 15 (err -117) [ 214.471456][T12529] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 214.599288][T12545] mmap: syz.1.3827 (12545) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 214.680796][ T4226] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 215.045316][T12567] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3837'. [ 215.062458][ T4226] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.082944][ T4226] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 215.121065][ T4226] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 215.144627][ T4226] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 215.186013][ T4226] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.224651][ T4226] usb 1-1: config 0 descriptor?? [ 215.241505][T12576] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3842'. [ 215.256395][T12538] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 215.290922][T12576] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3842'. [ 215.338328][T12576] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3842'. [ 215.425456][T12576] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3842'. [ 215.437575][T12581] CIFS mount error: No usable UNC path provided in device string! [ 215.437575][T12581] [ 215.465879][T12576] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3842'. [ 215.481015][T12581] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 215.550315][ T4226] usb 1-1: USB disconnect, device number 17 [ 215.919636][T12555] syz.3.3833 (12555): drop_caches: 3 [ 216.337102][T12585] loop4: detected capacity change from 0 to 40427 [ 216.390731][T12585] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 216.399559][T12585] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 216.420675][ T5804] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 216.422846][T12627] trusted_key: encrypted_key: keyword 'newU_5' not recognized [ 216.455147][T12629] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3869'. [ 216.464743][T12585] F2FS-fs (loop4): invalid crc value [ 216.494953][T12585] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 216.558458][T12632] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 216.690700][ T5804] usb 2-1: Using ep0 maxpacket: 8 [ 216.720730][T12585] F2FS-fs (loop4): recover fsync data on readonly fs [ 216.746310][T12585] F2FS-fs (loop4): Try to recover 1th superblock, ret: -30 [ 216.773802][T12585] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 216.991001][ T5804] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 217.000163][ T5804] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 217.040427][ T5804] usb 2-1: Product: syz [ 217.045372][ T5804] usb 2-1: Manufacturer: syz [ 217.049989][ T5804] usb 2-1: SerialNumber: syz [ 217.067069][ T5804] usb 2-1: config 0 descriptor?? [ 217.099864][T12659] loop3: detected capacity change from 0 to 256 [ 217.112116][ T5804] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 217.152752][T12659] exfat: Deprecated parameter 'utf8' [ 217.183194][T12659] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d) [ 217.434821][T12670] netlink: 'syz.2.3887': attribute type 1 has an invalid length. [ 217.466906][T12670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3887'. [ 217.565678][ T5804] gspca_zc3xx: reg_r err -71 [ 217.570956][ T5804] gspca_zc3xx: probe of 2-1:0.0 failed with error -71 [ 217.609740][ T5804] usb 2-1: USB disconnect, device number 20 [ 217.653115][ T25] audit: type=1326 audit(217.628:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12681 comm="syz.3.3890" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d01db0d9 code=0x7ffc0000 [ 217.720918][ T25] audit: type=1326 audit(217.628:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12681 comm="syz.3.3890" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d01db0d9 code=0x7ffc0000 [ 217.847526][ T25] audit: type=1326 audit(217.658:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12681 comm="syz.3.3890" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f31d01db0d9 code=0x7ffc0000 [ 217.899911][T12698] ax25_connect(): syz.4.3902 uses autobind, please contact jreuter@yaina.de [ 217.965733][T12697] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 217.980736][ T25] audit: type=1326 audit(217.658:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12681 comm="syz.3.3890" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d01db0d9 code=0x7ffc0000 [ 217.994951][T12701] loop2: detected capacity change from 0 to 2048 [ 218.093554][T12707] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 218.103061][ T25] audit: type=1326 audit(217.658:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12681 comm="syz.3.3890" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d01db0d9 code=0x7ffc0000 [ 218.127701][T12694] lo speed is unknown, defaulting to 1000 [ 218.340970][ T6798] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 218.517343][T12733] loop3: detected capacity change from 0 to 1024 [ 218.569598][T12733] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 218.800927][ T6798] usb 5-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 218.828399][ T6798] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 218.867914][ T6798] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 219.064478][ T6798] usb 5-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 219.090817][ T6798] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.120976][ T6798] usb 5-1: Product: syz [ 219.130337][ T6798] usb 5-1: Manufacturer: syz [ 219.159845][ T6798] usb 5-1: SerialNumber: syz [ 219.193855][ T6798] usb 5-1: config 0 descriptor?? [ 219.362795][T12787] netlink: 'syz.0.3940': attribute type 32 has an invalid length. [ 219.481087][ T6798] usb 5-1: Found UVC 34.00 device syz (8086:0b5b) [ 219.497774][ T6798] usb 5-1: No valid video chain found. [ 219.528449][ T6798] usb 5-1: USB disconnect, device number 17 [ 219.656118][T12801] delete_channel: no stack [ 219.938140][ T25] audit: type=1326 audit(219.908:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12811 comm="syz.1.3952" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbbddf060d9 code=0x0 [ 220.164999][T12830] loop3: detected capacity change from 0 to 1024 [ 220.208235][T12833] kAFS: unable to lookup cell '' [ 220.214888][T12830] EXT4-fs (loop3): inline encryption not supported [ 220.270211][T12830] Quota error (device loop3): find_tree_dqentry: Getting block too big (64 >= 6) [ 220.357213][T12830] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 220.427468][T12830] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.3961: Failed to acquire dquot type 0 [ 220.480493][T12830] EXT4-fs error (device loop3): mb_free_blocks:1889: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 220.545603][T12830] EXT4-fs (loop3): 1 truncate cleaned up [ 220.580113][T12830] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,inlinecrypt,,errors=continue. Quota mode: writeback. [ 220.747724][T12830] Quota error (device loop3): find_tree_dqentry: Getting block too big (64 >= 6) [ 220.841298][T12830] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 220.916348][T12830] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.3961: Failed to acquire dquot type 0 [ 221.216428][T12893] __nla_validate_parse: 5 callbacks suppressed [ 221.216446][T12893] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3989'. [ 221.270814][T12893] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3989'. [ 221.322064][T12893] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3989'. [ 221.393032][T12904] loop0: detected capacity change from 0 to 512 [ 221.527968][T12910] loop1: detected capacity change from 0 to 8 [ 221.600724][ T2303] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 221.685810][T12910] cramfs: empty filesystem [ 221.829797][T12921] netlink: 'syz.3.4000': attribute type 5 has an invalid length. [ 221.840719][ T2303] usb 5-1: Using ep0 maxpacket: 32 [ 221.868801][T12921] device ip6erspan0 entered promiscuous mode [ 221.980913][ T2303] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.019839][ T2303] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 222.080712][ T2303] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 222.123834][ T6802] kernel write not supported for file /1625/net/rt_acct (pid: 6802 comm: kworker/1:12) [ 222.206094][T12933] loop3: detected capacity change from 0 to 4096 [ 222.268504][T12942] netlink: 'syz.2.4009': attribute type 4 has an invalid length. [ 222.299552][T12946] loop1: detected capacity change from 0 to 256 [ 222.331031][ T2303] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 222.340108][ T2303] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 222.368747][ T2303] usb 5-1: Product: syz [ 222.411009][ T2303] usb 5-1: Manufacturer: syz [ 222.444027][ T2303] usb 5-1: SerialNumber: syz [ 222.476738][ T2303] usb 5-1: config 0 descriptor?? [ 222.552909][ T2303] usb 5-1: no audio or video endpoints found [ 222.608170][T12953] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4014'. [ 222.834844][ T5803] usb 5-1: USB disconnect, device number 18 [ 222.917057][T12973] netlink: 'syz.0.4021': attribute type 13 has an invalid length. [ 223.523701][T12988] loop1: detected capacity change from 0 to 8192 [ 223.574619][T12988] loop1: p1 < > p2 p4 < p5 > [ 223.579634][T12988] loop1: partition table partially beyond EOD, truncated [ 223.607633][T13016] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4038'. [ 223.634066][T12988] loop1: p1 start 134217728 is beyond EOD, truncated [ 223.652301][T13016] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4038'. [ 223.690649][T12988] loop1: p2 size 591360 extends beyond EOD, truncated [ 223.748084][T12988] loop1: p5 size 591360 extends beyond EOD, truncated [ 223.913839][T13032] netlink: 'syz.0.4045': attribute type 5 has an invalid length. [ 223.922055][T13031] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4046'. [ 223.976239][T13031] openvswitch: netlink: Key 29 has unexpected len 3064 expected 0 [ 224.233898][ T5057] udevd[5057]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 224.273279][ T5058] udevd[5058]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 224.286122][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 224.529582][T13057] nvme_fabrics: missing parameter 'transport=%s' [ 224.617307][T13070] netlink: 'syz.2.4064': attribute type 1 has an invalid length. [ 224.670775][T13070] netlink: 232 bytes leftover after parsing attributes in process `syz.2.4064'. [ 224.727433][ T25] audit: type=1800 audit(224.698:32): pid=13056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.0.4057" name="/" dev="tmpfs" ino=1103 res=0 errno=0 [ 224.852607][T13084] x_tables: unsorted underflow at hook 3 [ 225.035008][T13092] device bond3 entered promiscuous mode [ 225.049570][T13092] 8021q: adding VLAN 0 to HW filter on device bond3 [ 225.146417][T13103] netlink: 'syz.3.4078': attribute type 3 has an invalid length. [ 225.180756][ T2303] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 225.467955][T13122] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4087'. [ 225.541888][T13122] netlink: 'syz.4.4087': attribute type 1 has an invalid length. [ 225.564920][ T2303] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 225.586933][ T2303] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 225.593795][T13132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4092'. [ 225.690879][T13136] loop4: detected capacity change from 0 to 736 [ 225.850959][ T2303] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 225.873639][ T2303] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.901981][ T2303] usb 2-1: Product: syz [ 225.916670][ T2303] usb 2-1: Manufacturer: syz [ 225.933123][T13158] loop2: detected capacity change from 0 to 64 [ 225.939460][ T2303] usb 2-1: SerialNumber: syz [ 225.953805][ T2303] usb 2-1: config 0 descriptor?? [ 225.985550][T13088] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 226.006380][T13088] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 226.163542][T13173] loop4: detected capacity change from 0 to 512 [ 226.280862][ T2303] dm9601: probe of 2-1:0.0 failed with error -71 [ 226.296559][ T2303] usb 2-1: USB disconnect, device number 21 [ 226.310431][T13186] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4117'. [ 226.323606][T13186] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4117'. [ 226.324040][T13173] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 226.472587][T13173] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #15: comm syz.4.4111: corrupted xattr block 33 [ 226.540219][ T6804] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 226.960952][ T6804] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.999646][ T6804] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 227.059321][ T6804] usb 1-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 227.099744][ T6804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.281373][T13240] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4140'. [ 227.427169][T13251] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4142'. [ 227.436671][ T6804] ttusb_dec_send_command: result bulk message failed: error -22 [ 227.470948][ T6804] ttusb-dec: probe of 1-1:1.0 failed with error -22 [ 227.495263][ T6804] usb 1-1: USB disconnect, device number 18 [ 227.622108][T13262] netlink: 209772 bytes leftover after parsing attributes in process `syz.2.4148'. [ 227.670980][T13262] openvswitch: netlink: Message has 80 unknown bytes. [ 227.774655][T13273] device wlan0 entered promiscuous mode [ 228.105478][T13296] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4163'. [ 228.136066][T13299] loop4: detected capacity change from 0 to 128 [ 228.593375][T13340] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 229.061312][T13380] device syz_tun entered promiscuous mode [ 229.116929][T13380] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 229.281813][T13392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4203'. [ 229.630905][T13430] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 229.745993][T13435] loop2: detected capacity change from 0 to 4096 [ 229.822201][ T5801] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 229.849462][T13435] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 229.882644][T13449] netlink: 'syz.4.4226': attribute type 46 has an invalid length. [ 229.900662][T13435] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 229.921217][T13449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4226'. [ 229.995235][T13435] ntfs: volume version 3.1. [ 230.066068][ T5801] usb 1-1: Using ep0 maxpacket: 16 [ 230.090833][ T5803] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 230.178745][T13466] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4231'. [ 230.191000][ T5801] usb 1-1: config 1 has an invalid interface number: 22 but max is 0 [ 230.199149][ T5801] usb 1-1: config 1 has no interface number 0 [ 230.241525][ T5801] usb 1-1: config 1 interface 22 has no altsetting 0 [ 230.279268][T13466] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4231'. [ 230.330778][T13466] netlink: 'syz.3.4231': attribute type 5 has an invalid length. [ 230.430985][ T5801] usb 1-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=f3.70 [ 230.474837][ T5801] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.483394][ T5803] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.501455][ T5803] usb 2-1: config 0 interface 0 has no altsetting 0 [ 230.520684][ T5801] usb 1-1: Product: syz [ 230.524885][ T5801] usb 1-1: Manufacturer: syz [ 230.559412][ T5801] usb 1-1: SerialNumber: syz [ 230.700909][ T5803] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 230.717907][ T5803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.740654][ T5803] usb 2-1: Product: syz [ 230.744857][ T5803] usb 2-1: Manufacturer: syz [ 230.759930][ T5803] usb 2-1: SerialNumber: syz [ 230.786198][ T5803] usb 2-1: config 0 descriptor?? [ 230.842613][ T5803] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 230.883704][ T5803] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 230.894948][ T5801] gspca_main: touptek-2.14.0 probing 0547:6801 [ 230.899662][T13503] bond0: Error: CAN devices cannot be enslaved [ 230.929706][ T5801] usb 1-1: USB disconnect, device number 19 [ 230.961110][ T5803] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 231.004257][ T5803] usb 2-1: media controller created [ 231.044117][T13510] autofs4:pid:13510:autofs_fill_super: called with bogus options [ 231.086439][ T5803] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 231.123518][T13518] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 231.227688][ T5803] DVB: Unable to find symbol tda10046_attach() [ 231.235182][ T5803] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 231.286611][ T5803] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 231.323745][ T5803] dvb_usb_m920x: probe of 2-1:0.0 failed with error -71 [ 231.361705][ T5803] usb 2-1: USB disconnect, device number 22 [ 231.600961][T13546] netlink: 'syz.2.4260': attribute type 30 has an invalid length. [ 231.941305][ T2303] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 232.166298][T13591] xt_hashlimit: invalid rate [ 232.230825][ T2303] usb 4-1: Using ep0 maxpacket: 16 [ 232.411553][ T2303] usb 4-1: unable to get BOS descriptor or descriptor too short [ 232.452875][T13612] CacheFiles: No cache directory specified [ 232.530877][ T2303] usb 4-1: config 1 interface 0 altsetting 64 bulk endpoint 0x3 has invalid maxpacket 255 [ 232.560664][ T2303] usb 4-1: config 1 interface 0 has no altsetting 0 [ 232.722213][T13632] netlink: 'syz.2.4295': attribute type 1 has an invalid length. [ 232.780943][T13635] tmpfs: Bad value for 'mpol' [ 232.876575][ T2303] usb 4-1: string descriptor 0 read error: -22 [ 232.888873][ T2303] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 232.922742][ T2303] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.951719][T13645] __nla_validate_parse: 2 callbacks suppressed [ 232.951736][T13645] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4300'. [ 232.997887][T13645] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4300'. [ 233.010860][T13550] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 233.021825][ T2303] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 233.192526][T13665] netlink: 11 bytes leftover after parsing attributes in process `syz.0.4309'. [ 233.287258][ T5803] usb 4-1: USB disconnect, device number 13 [ 233.315035][T13675] binfmt_misc: register: failed to install interpreter file ./file1 [ 233.549532][T13691] xt_CT: You must specify a L4 protocol and not use inversions on it [ 233.843458][T13712] [U]  [ 233.905394][T13719] ceph: No source [ 233.916299][ T2303] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 233.987084][T13722] netlink: 'syz.1.4338': attribute type 3 has an invalid length. [ 234.200686][ T2303] usb 3-1: Using ep0 maxpacket: 32 [ 234.255232][T13745] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4348'. [ 234.376321][ T2303] usb 3-1: config 1 has an invalid interface number: 216 but max is 0 [ 234.388861][ T2303] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.412337][T13755] netlink: 'syz.3.4354': attribute type 10 has an invalid length. [ 234.429828][ T2303] usb 3-1: config 1 has no interface number 0 [ 234.442633][ T2303] usb 3-1: config 1 interface 216 has no altsetting 0 [ 234.450005][T13755] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.457439][T13755] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.478388][T13760] 9p: Unknown access argument [ 234.536278][T13755] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.543440][T13755] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.550883][T13755] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.557974][T13755] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.579359][T13766] openvswitch: netlink: Actions may not be safe on all matching packets [ 234.584518][T13755] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 234.651041][ T2303] usb 3-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=17.ee [ 234.660118][ T2303] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.701480][ T2303] usb 3-1: Product: syz [ 234.705682][ T2303] usb 3-1: Manufacturer: syz [ 234.720381][ T2303] usb 3-1: SerialNumber: syz [ 234.796269][T13777] device geneve2 entered promiscuous mode [ 234.813781][ T5803] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 234.913755][T13787] netlink: 'syz.1.4369': attribute type 2 has an invalid length. [ 234.919861][T13788] netlink: 'syz.4.4370': attribute type 3 has an invalid length. [ 234.922929][T13785] loop3: detected capacity change from 0 to 64 [ 234.941997][T13787] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4369'. [ 235.070795][ T5803] usb 1-1: Using ep0 maxpacket: 16 [ 235.098052][ T2303] usb 3-1: USB disconnect, device number 22 [ 235.190906][ T5803] usb 1-1: config 0 has no interfaces? [ 235.334881][T13808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4380'. [ 235.351172][ T5803] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 235.367529][T13810] loop4: detected capacity change from 0 to 64 [ 235.377769][ T5803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.403920][ T5803] usb 1-1: Product: syz [ 235.418113][ T5803] usb 1-1: Manufacturer: syz [ 235.435298][ T5803] usb 1-1: SerialNumber: syz [ 235.450321][T13816] netlink: 'syz.1.4384': attribute type 10 has an invalid length. [ 235.455552][ T5803] r8152-cfgselector 1-1: config 0 descriptor?? [ 235.476618][T13810] Bad inode number on dev loop4: 6 is out of range [ 235.489712][T13816] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 235.541369][T13816] infiniband syz1: set active [ 235.554140][T13816] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 235.602027][ T2303] lo speed is unknown, defaulting to 1000 [ 235.764542][ T5803] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 235.955419][T13846] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 235.987449][ T2303] usb 1-1: USB disconnect, device number 20 [ 236.160198][T13863] loop4: detected capacity change from 0 to 512 [ 236.267407][T13871] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4411'. [ 236.315486][T13863] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 236.348724][T13871] device bond_slave_1 entered promiscuous mode [ 236.624607][T13893] loop0: detected capacity change from 0 to 512 [ 236.724505][T13893] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 236.737308][T13901] program syz.4.4419 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 236.772193][T13902] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4420'. [ 236.796279][T13893] EXT4-fs (loop0): invalid journal inode [ 236.840800][T13893] EXT4-fs (loop0): can't get journal size [ 236.974080][T13893] EXT4-fs (loop0): 1 truncate cleaned up [ 237.014039][T13893] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,sysvgroups,sysvgroups,lazytime,,errors=continue. Quota mode: none. [ 237.054512][T13869] loop1: detected capacity change from 0 to 32768 [ 237.173030][T13893] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #2: block 13: comm syz.0.4418: bad entry in directory: directory entry overrun - offset=76, inode=16, rec_len=1040, size=1024 fake=0 [ 237.516782][T13934] loop4: detected capacity change from 0 to 1024 [ 237.581790][T13936] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 237.732336][T13946] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4438'. [ 237.933999][T13958] loop4: detected capacity change from 0 to 256 [ 237.992013][T13958] exfat: Deprecated parameter 'namecase' [ 238.022090][T13958] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 238.040666][ T2303] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 238.160740][ T6804] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 238.312434][ T2303] usb 4-1: Using ep0 maxpacket: 16 [ 238.440926][ T2303] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 238.469104][ T2303] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 238.509358][ T2303] usb 4-1: config 0 interface 0 has no altsetting 0 [ 238.531105][ T6804] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 238.540994][ T5803] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 238.547329][ T6804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.569473][ T6804] usb 1-1: config 0 descriptor?? [ 238.611845][ T6804] cp210x 1-1:0.0: cp210x converter detected [ 238.671060][ T2303] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 238.688932][ T2303] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.698454][ T2303] usb 4-1: Product: syz [ 238.702893][ T2303] usb 4-1: Manufacturer: syz [ 238.708631][ T2303] usb 4-1: SerialNumber: syz [ 238.730319][ T2303] usb 4-1: config 0 descriptor?? [ 238.850136][ T6804] usb 1-1: cp210x converter now attached to ttyUSB0 [ 238.922784][ T6802] usb 5-1: new low-speed USB device number 19 using dummy_hcd [ 238.940818][ T5803] usb 3-1: unable to get BOS descriptor or descriptor too short [ 238.991062][ T5803] usb 3-1: not running at top speed; connect to a high speed hub [ 239.010813][T14026] futex_wake_op: syz.1.4472 tries to shift op by 144; fix this program [ 239.032369][ T2303] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 239.039921][ T2303] imon 4-1:0.0: unable to initialize intf0, err -90 [ 239.055737][ T5801] usb 1-1: USB disconnect, device number 21 [ 239.060345][ T2303] imon:imon_probe: failed to initialize context! [ 239.070931][ T5803] usb 3-1: config 5 has an invalid interface number: 29 but max is 0 [ 239.074598][ T2303] imon 4-1:0.0: unable to register, err -19 [ 239.083786][ T5801] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 239.093086][ T5803] usb 3-1: config 5 has no interface number 0 [ 239.097754][ T2303] usb 4-1: USB disconnect, device number 14 [ 239.099183][ T5803] usb 3-1: config 5 interface 29 has no altsetting 0 [ 239.141068][ T5801] cp210x 1-1:0.0: device disconnected [ 239.250976][ T5803] usb 3-1: New USB device found, idVendor=04e2, idProduct=1410, bcdDevice=78.22 [ 239.262525][ T5803] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.271080][ T5803] usb 3-1: Product: syz [ 239.275342][ T5803] usb 3-1: Manufacturer: syz [ 239.279935][ T5803] usb 3-1: SerialNumber: syz [ 239.500883][ T6802] usb 5-1: unable to get BOS descriptor or descriptor too short [ 239.580948][ T5803] usb 3-1: USB disconnect, device number 23 [ 239.595972][T14046] loop1: detected capacity change from 0 to 1024 [ 239.615044][T14046] EXT4-fs (loop1): #clusters per group too big: 24576 [ 239.630843][ T6802] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 239.650942][ T6802] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 239.715729][T14050] loop3: detected capacity change from 0 to 256 [ 239.766615][T14050] exfat: Deprecated parameter 'namecase' [ 239.821981][T14050] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 239.900795][T14060] netlink: 'syz.1.4488': attribute type 10 has an invalid length. [ 239.955343][T14060] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.962898][T14060] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.971435][T14064] tmpfs: Bad value for 'mpol' [ 239.981070][ T6802] usb 5-1: string descriptor 0 read error: -22 [ 239.989326][ T6802] usb 5-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 239.991403][T14060] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.005517][T14060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.011281][ T6802] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.012957][T14060] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.027845][T14060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.056000][T14068] ieee802154 phy0 wpan0: encryption failed: -22 [ 240.142785][T14060] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 240.590042][ T6802] usb 5-1: USB disconnect, device number 19 [ 240.595015][T14098] libceph: resolve '. [ 240.595015][T14098] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 240.595015][T14098] ' (ret=-3): failed [ 240.745784][T14112] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4513'. [ 240.770116][T14116] xt_TPROXY: Can be used only with -p tcp or -p udp [ 240.874530][T14122] (unnamed net_device) (uninitialized): (slave dummy0): Device is not bonding slave [ 240.910729][T14122] (unnamed net_device) (uninitialized): option active_slave: invalid value (dummy0) [ 241.035026][T14132] loop1: detected capacity change from 0 to 1024 [ 241.065804][T14128] loop0: detected capacity change from 0 to 4096 [ 241.098130][T14128] ntfs: (device loop0): is_boot_sector_ntfs(): Invalid end of sector marker. [ 241.103569][T14138] loop2: detected capacity change from 0 to 512 [ 241.122005][T14128] ntfs: (device loop0): check_mft_mirror(): Incomplete multi sector transfer detected in mft mirror record 10. [ 241.151217][T14132] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 241.157858][T14128] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 241.177987][T14132] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 241.193773][T14132] EXT4-fs (loop1): orphan cleanup on readonly fs [ 241.201679][T14128] ntfs: (device loop0): ntfs_read_locked_inode(): $STANDARD_INFORMATION attribute is missing. [ 241.206001][T14132] EXT4-fs error (device loop1): ext4_read_inode_bitmap:168: comm syz.1.4523: Inode bitmap for bg 0 marked uninitialized [ 241.221918][T14128] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 241.235125][T14138] EXT4-fs (loop2): inline encryption not supported [ 241.239161][T14128] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 241.263118][T14138] EXT4-fs (loop2): Ignoring removed bh option [ 241.269263][T14138] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 241.307650][T14132] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,,errors=continue. Quota mode: writeback. [ 241.346285][T14128] ntfs: volume version 3.1. [ 241.439732][T14128] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 241.448185][T14138] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 241.477042][T14138] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.4526: bg 0: block 248: padding at end of block bitmap is not set [ 241.481120][T14128] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x18 as bad. Run chkdsk. [ 241.501532][T14152] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4530'. [ 241.504798][T14128] ntfs: (device loop0): load_and_init_quota(): Failed to load $Quota. [ 241.522208][T14128] ntfs: (device loop0): load_system_files(): Failed to load $Quota. Will not be able to remount read-write. Run chkdsk. [ 241.604834][T14138] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.4526: Failed to acquire dquot type 1 [ 241.632674][T14138] EXT4-fs (loop2): 1 truncate cleaned up [ 241.638360][T14138] EXT4-fs (loop2): mounted filesystem without journal. Opts: inlinecrypt,nombcache,bh,,errors=continue. Quota mode: writeback. [ 241.766501][T14166] rdma_rxe: ignoring netdev event = 30 for lo [ 241.809154][T14166] infiniband syz1: set active [ 241.889399][T14166] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 241.976550][T14166] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 241.997842][T14166] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 242.136125][ T6802] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 242.145125][T14166] device netdevsim0 left promiscuous mode [ 242.166763][T14166] device bridge1 left promiscuous mode [ 242.176942][ T4226] lo speed is unknown, defaulting to 1000 [ 242.183134][T14184] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4545'. [ 242.303209][T14195] netlink: 'syz.1.4548': attribute type 1 has an invalid length. [ 242.328927][T14195] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4548'. [ 242.542515][ T6802] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.564324][ T6802] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 242.594174][ T6802] usb 4-1: config 1 interface 0 has no altsetting 0 [ 242.612265][T14217] loop4: detected capacity change from 0 to 256 [ 242.688328][T14217] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 242.727525][T14229] loop0: detected capacity change from 0 to 512 [ 242.736864][T14228] device xfrm0 entered promiscuous mode [ 242.752712][T14217] 9pnet: Unknown protocol version 99b9f9aNS9mN39gΙ漹`.bm_LAB$A k=ĂX3 [ 242.752712][T14217] ryA P (6 [ 242.752712][T14217] [ 242.752712][T14217] xp]P$>( % J72MA\pKP>T nn *;*AՠZP= j{:}A^@P?h4  &AӠYn 7p{# [ 242.752712][T14217] w{½pi~ ?_/#WXMx<6< O߅3\Cx>1^ }} D(()+e씝brQ.M)/ [ 242.752712][T14217] RAJT [ 242.752712][T14217] QTPQ*Jũ89rTJQi*Me TQy*O"Ft;AwНt'UjTjPMIզTP]KէԐR#jD15ԜSKjIԖR;jG=uԑ:R'D3u.ԕR7Fݩ;ԓzR%QC}/4 Di0!4pN#hQ4ޠ14x@)iM4Fh͠Y4flKsiͣ"ZBKh)-JeR)V [ 242.838236][ C1] vkms_vblank_simulate: vblank timer overrun [ 242.913060][T14229] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.4566: inode has both inline data and extents flags [ 242.950313][T14242] loop1: detected capacity change from 0 to 512 [ 242.958436][ T6802] usb 4-1: string descriptor 0 read error: -22 [ 242.965117][ T6802] usb 4-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 242.975077][ T6802] usb 4-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 242.988147][T14229] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.4566: couldn't read orphan inode 15 (err -117) [ 243.004309][T14244] netlink: 'syz.2.4574': attribute type 10 has an invalid length. [ 243.009987][T14229] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 243.053613][ T6802] usb 4-1: 0:2 : does not exist [ 243.073363][T14242] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 243.095214][T14244] team0: Device hsr_slave_0 failed to register rx_handler [ 243.099212][ T6802] usb-storage 4-1:1.1: USB Mass Storage device detected [ 243.109532][T14242] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01d, mo2=0102] [ 243.148654][T14242] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 243.190240][T14242] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 243.199805][T14242] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,abort,bsdgroups,noblock_validity,nolazytime,noblock_validity,jqfmt=vfsv0,barrier=0x000000000000d95a,jqfmt=vfsold,,errors=continue. Quota mode: none. [ 243.239810][T14242] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.4573: dx entry: limit 65535 != root limit 120 [ 243.276343][T14242] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.4573: Corrupt directory, running e2fsck is recommended [ 243.372502][T14257] openvswitch: netlink: Flow actions attr not present in new flow. [ 243.439211][T14259] binder: 14258:14259 unknown command 1074553619 [ 243.444569][T14261] netlink: 288 bytes leftover after parsing attributes in process `syz.2.4582'. [ 243.489856][T14259] binder: 14258:14259 ioctl c0306201 200000000000 returned -22 [ 243.540856][ T6802] us122l: couldn't allocate write buffer [ 243.546845][ T6802] snd-usb-us122l: probe of 4-1:1.1 failed with error -22 [ 243.596195][ T6802] usb 4-1: USB disconnect, device number 15 [ 243.753029][T14277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4589'. [ 243.755882][T14280] loop1: detected capacity change from 0 to 256 [ 243.823947][T14285] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4593'. [ 243.839103][T14285] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 243.892693][ T5057] udevd[5057]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 244.158703][T14309] vivid-001: ================= START STATUS ================= [ 244.200682][T14309] vivid-001: Enable Output Cropping: true [ 244.218080][T14309] vivid-001: Enable Output Composing: true [ 244.246247][T14309] vivid-001: Enable Output Scaler: true [ 244.266619][T14309] vivid-001: Tx RGB Quantization Range: Automatic [ 244.277896][T14309] vivid-001: Transmit Mode: HDMI [ 244.326368][T14309] vivid-001: Display Present: true inactive [ 244.360703][T14309] vivid-001: Hotplug Present: 0x00000001 [ 244.370695][ T5803] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 244.411426][T14309] vivid-001: RxSense Present: 0x00000001 [ 244.456063][T14309] vivid-001: EDID Present: 0x00000001 [ 244.489895][T14309] vivid-001: ================== END STATUS ================== [ 244.640649][ T5803] usb 3-1: Using ep0 maxpacket: 16 [ 244.765995][ T5803] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 244.766033][ T5803] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.766123][ T5803] usb 3-1: config 1 has no interface number 0 [ 244.766154][ T5803] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 244.766180][ T5803] usb 3-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 244.766207][ T5803] usb 3-1: config 1 interface 105 has no altsetting 0 [ 244.780332][T14353] netlink: set zone limit has 8 unknown bytes [ 244.830902][ T6802] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 244.936326][ T5803] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 244.936357][ T5803] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 244.936379][ T5803] usb 3-1: Product: syz [ 244.936393][ T5803] usb 3-1: Manufacturer: syz [ 244.936408][ T5803] usb 3-1: SerialNumber: syz [ 244.956535][T14303] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 245.168737][T14382] netlink: 'syz.1.4633': attribute type 10 has an invalid length. [ 245.188348][ C0] sd 0:0:1:0: tag#3649 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 245.198422][ C0] sd 0:0:1:0: tag#3649 CDB: Mode Sense(10) [ 245.204319][ C0] sd 0:0:1:0: tag#3649 CDB[00]: 5a 88 f4 74 3a 27 ba 79 f3 26 e7 a4 89 c9 13 2e [ 245.213392][ C0] sd 0:0:1:0: tag#3649 CDB[10]: bd 0d 92 db 40 a2 20 7d 0f ed a1 f0 60 0c 33 30 [ 245.222505][ C0] sd 0:0:1:0: tag#3649 CDB[20]: 8b 52 18 [ 245.234706][ T5803] aqc111: probe of 3-1:1.105 failed with error -22 [ 245.235617][ T2303] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 245.249315][T14382] team0: Device hsr_slave_0 failed to register rx_handler [ 245.269170][ T6802] usb 1-1: config 0 interface 0 has no altsetting 0 [ 245.282320][ T6802] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 245.292662][ T6802] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.312452][ T6802] usb 1-1: config 0 descriptor?? [ 245.358408][T14386] loop4: detected capacity change from 0 to 4096 [ 245.445189][ T5803] usb 3-1: USB disconnect, device number 24 [ 245.580824][ T6802] (null): keene_cmd_main failed (-71) [ 245.610899][ T6802] video4linux radio48: keene_cmd_main failed (-71) [ 245.618139][ T6802] radio-keene 1-1:0.0: V4L2 device registered as radio48 [ 245.647778][ T6802] usb 1-1: USB disconnect, device number 22 [ 245.740801][ T2303] usb 4-1: unable to get BOS descriptor or descriptor too short [ 245.793799][T14386] loop4: detected capacity change from 0 to 32768 [ 245.850880][ T2303] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 245.861373][ T2303] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 245.878636][T14386] XFS (loop4): Mounting V5 Filesystem [ 245.946824][T14386] XFS (loop4): Ending clean mount [ 246.017450][T14404] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.4647'. [ 246.029917][ T4196] XFS (loop4): Unmounting Filesystem [ 246.150736][ T2303] usb 4-1: string descriptor 0 read error: -22 [ 246.162674][ T2303] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 246.200046][ T2303] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.273264][ T2303] usb 4-1: selecting invalid altsetting 1 [ 246.290142][ T2303] usb 4-1: unit 3 not found! [ 246.369077][T14422] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4646'. [ 246.420703][ T5801] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 246.488313][ T2303] usb 4-1: cannot request logical cluster ID: 0 (err: -5) [ 246.519307][ T2303] usb 4-1: invalid MIXER UNIT descriptor 6 [ 246.547025][T14431] netlink: 'syz.2.4651': attribute type 12 has an invalid length. [ 246.595511][ T2303] snd-usb-audio: probe of 4-1:1.0 failed with error -5 [ 246.671226][ T5801] usb 2-1: Using ep0 maxpacket: 8 [ 246.697201][ T4226] usb 4-1: USB disconnect, device number 16 [ 246.719179][T14441] loop0: detected capacity change from 0 to 64 [ 246.790946][ T5801] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.801080][T14447] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 246.822603][ T5801] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 246.841099][ T5801] usb 2-1: config 1 interface 0 has no altsetting 0 [ 246.891726][T14451] kernel read not supported for file / 7âW)s!QfsrX%)rO2:"T+͟v|ղDvc֠6xc: (pid: 14451 comm: syz.4.4660) [ 246.919779][ T25] kauditd_printk_skb: 2 callbacks suppressed [ 246.919792][ T25] audit: type=1400 audit(246.888:33): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=":+%%:" pid=14452 comm="syz.0.4661" [ 246.944479][ T5057] udevd[5057]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 247.021098][ T25] audit: type=1800 audit(246.898:34): pid=14451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4660" name=C020019C1437B3CFFCC3A25729AB7393A7C721518FF6ECA56673F58772A05825D4E0D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=64750 res=0 errno=0 [ 247.100935][ T5801] usb 2-1: string descriptor 0 read error: -22 [ 247.113874][ T5801] usb 2-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 247.131240][ T5801] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 247.170651][T14463] loop4: detected capacity change from 0 to 4096 [ 247.193435][ T5801] usb 2-1: 0:2 : does not exist [ 247.212623][ T5801] usb-storage 2-1:1.1: USB Mass Storage device detected [ 247.221638][T14463] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 247.266579][T14463] ntfs: (device loop4): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 247.310336][T14463] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 247.364721][T14463] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 247.384673][ C0] vkms_vblank_simulate: vblank timer overrun [ 247.390004][T14457] loop0: detected capacity change from 0 to 32768 [ 247.391638][T14463] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 247.417423][T14463] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 247.438071][T14463] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 247.447142][T14463] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 247.447700][T14457] XFS: ikeep mount option is deprecated. [ 247.467305][ C0] vkms_vblank_simulate: vblank timer overrun [ 247.476527][T14463] ntfs: volume version 3.1. [ 247.555697][T14457] XFS (loop0): Mounting V5 Filesystem [ 247.580675][ T5803] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 247.662410][ T5801] us122l: couldn't allocate write buffer [ 247.668370][ T5801] snd-usb-us122l: probe of 2-1:1.1 failed with error -22 [ 247.691332][ T5801] usb 2-1: USB disconnect, device number 23 [ 247.710832][T14479] loop2: detected capacity change from 0 to 16 [ 247.726354][T14481] ip6t_srh: unknown srh match flags 4000 [ 247.733730][T14457] XFS (loop0): Ending clean mount [ 247.742845][T14479] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 247.749992][T14457] XFS (loop0): Quotacheck needed: Please wait. [ 247.819845][T14457] XFS (loop0): Quotacheck: Done. [ 247.889733][T14487] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 247.922281][ T5057] udevd[5057]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 247.940800][ T5803] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 247.973491][ T4187] XFS (loop0): Unmounting Filesystem [ 248.120967][ T5803] usb 4-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 248.130062][ T5803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.161268][ T5803] usb 4-1: Product: syz [ 248.165479][ T5803] usb 4-1: Manufacturer: syz [ 248.170116][ T5803] usb 4-1: SerialNumber: syz [ 248.211766][ T5803] usb 4-1: config 0 descriptor?? [ 248.258019][ T5803] powermate: probe of 4-1:0.0 failed with error -5 [ 248.353289][T14508] netlink: 192 bytes leftover after parsing attributes in process `syz.2.4685'. [ 248.388413][T14508] netlink: 192 bytes leftover after parsing attributes in process `syz.2.4685'. [ 248.430836][T14508] netlink: 192 bytes leftover after parsing attributes in process `syz.2.4685'. [ 248.446850][T14508] netlink: 192 bytes leftover after parsing attributes in process `syz.2.4685'. [ 248.493313][ T6802] usb 4-1: USB disconnect, device number 17 [ 248.521463][T14508] netlink: 192 bytes leftover after parsing attributes in process `syz.2.4685'. [ 248.553497][T14508] netlink: 192 bytes leftover after parsing attributes in process `syz.2.4685'. [ 248.568304][T14508] netlink: 192 bytes leftover after parsing attributes in process `syz.2.4685'. [ 248.588640][T14508] netlink: 192 bytes leftover after parsing attributes in process `syz.2.4685'. [ 248.726010][T14528] trusted_key: encrypted_key: insufficient parameters specified [ 248.759462][T14523] XFS (nullb0): Invalid superblock magic number [ 248.832338][T14535] loop0: detected capacity change from 0 to 4096 [ 248.876685][T14535] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 249.229623][T14552] ip6t_srh: unknown srh invflags 4000 [ 249.343814][T14561] device sit0 left promiscuous mode [ 249.355584][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 249.358962][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 249.359346][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 249.500047][T14561] device wlan0 left promiscuous mode [ 249.526585][T14561] device bond1 left promiscuous mode [ 249.564468][T14561] device ip6erspan0 left promiscuous mode [ 249.574870][T14561] device geneve2 left promiscuous mode [ 249.707869][T14581] loop0: detected capacity change from 0 to 128 [ 249.855975][T14581] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 250.049173][T14608] netlink: 'syz.3.4730': attribute type 21 has an invalid length. [ 250.220142][T14614] xt_cgroup: path and classid specified [ 250.471767][T14637] netlink: 'syz.3.4743': attribute type 4 has an invalid length. [ 250.503385][T14637] wlan1: mtu less than device minimum [ 250.860283][T14670] loop2: detected capacity change from 0 to 256 [ 250.947660][T14674] loop4: detected capacity change from 0 to 2048 [ 250.961228][T14670] exfat: Deprecated parameter 'utf8' [ 250.972316][T14670] exfat: Deprecated parameter 'namecase' [ 250.990829][T14670] exfat: Deprecated parameter 'namecase' [ 250.996507][T14670] exfat: Deprecated parameter 'utf8' [ 251.030677][T14674] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 251.042261][T14684] __nla_validate_parse: 71 callbacks suppressed [ 251.042276][T14684] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4766'. [ 251.066173][T14670] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 251.097205][T14684] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4766'. [ 251.100001][T14685] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 251.545879][T14672] loop3: detected capacity change from 0 to 32768 [ 251.670838][ T5801] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 251.687167][T14672] (syz.3.4760,14672,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 251.751527][T14672] (syz.3.4760,14672,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 251.799597][T14672] (syz.3.4760,14672,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0x8514aa1d. Applying ECC. [ 251.927601][T14719] loop2: detected capacity change from 0 to 2048 [ 251.945982][T14672] JBD2: Ignoring recovery information on journal [ 251.990249][T14719] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 252.041441][T14672] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 252.135840][T14732] loop0: detected capacity change from 0 to 64 [ 252.210777][ T5801] usb 5-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 252.228924][ T5801] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.255334][ T5801] usb 5-1: Product: syz [ 252.259704][ T5801] usb 5-1: Manufacturer: syz [ 252.277058][T14672] (syz.3.4760,14672,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x6db03cd7, computed 0xe423803c. Applying ECC. [ 252.279996][ T5801] usb 5-1: SerialNumber: syz [ 252.315946][ T5801] usb 5-1: config 0 descriptor?? [ 252.322397][T14672] (syz.3.4760,14672,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x6db03cd7, computed 0xa5e8ec9c [ 252.343080][T14672] (syz.3.4760,14672,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 252.354698][T14672] (syz.3.4760,14672,0):ocfs2_quota_read:201 ERROR: status = -5 [ 252.362898][T14672] __quota_error: 11 callbacks suppressed [ 252.362912][T14672] Quota error (device loop3): find_tree_dqentry: Can't read quota tree block 1 [ 252.381843][ T5801] hub 5-1:0.0: bad descriptor, ignoring hub [ 252.394505][ T5801] hub: probe of 5-1:0.0 failed with error -5 [ 252.417227][ T5801] f81232 5-1:0.0: f81534a converter detected [ 252.447529][T14672] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 252.515946][T14672] (syz.3.4760,14672,0):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 252.536831][T14744] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4793'. [ 252.559802][T14672] (syz.3.4760,14672,0):ocfs2_mknod:314 ERROR: status = -5 [ 252.563766][T14744] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4793'. [ 252.596421][T14672] (syz.3.4760,14672,1):ocfs2_mknod:502 ERROR: status = -5 [ 252.611795][ T5801] usb 5-1: f81534a converter now attached to ttyUSB0 [ 252.612098][T14672] (syz.3.4760,14672,1):ocfs2_create:676 ERROR: status = -5 [ 252.833548][ T4195] ocfs2: Unmounting device (7,3) on (node local) [ 252.874904][T14761] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4800'. [ 252.895500][T14761] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 252.940859][ T5801] usb 5-1: USB disconnect, device number 20 [ 252.958984][ T5801] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 253.000409][ T5801] f81232 5-1:0.0: device disconnected [ 253.084718][T14770] xt_limit: Overflow, try lower: 2147483649/3300 [ 253.156765][T14775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4808'. [ 253.385734][T14793] loop0: detected capacity change from 0 to 1764 [ 253.429509][T14797] loop4: detected capacity change from 0 to 256 [ 253.512324][T14797] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011bf5, chksum : 0x5eaa6302, utbl_chksum : 0xe619d30d) [ 253.560973][T14797] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 253.658062][T14814] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4824'. [ 253.700201][T14814] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4824'. [ 253.840393][T14826] loop4: detected capacity change from 0 to 1024 [ 254.018029][T14826] EXT4-fs error (device loop4): ext4_map_blocks:741: inode #3: block 3: comm syz.4.4827: lblock 3 mapped to illegal pblock 3 (length 1) [ 254.077933][T14826] Quota error (device loop4): write_blk: dquota write failed [ 254.143485][T14826] Quota error (device loop4): find_free_dqentry: Can't write quota data block 3 [ 254.177256][T14826] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 254.247086][T14826] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.4827: Failed to acquire dquot type 0 [ 254.314936][T14826] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 3: comm syz.4.4827: lblock 3 mapped to illegal pblock 3 (length 1) [ 254.320887][ T5801] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 254.409951][T14826] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 254.439776][T14826] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.4827: Failed to acquire dquot type 0 [ 254.477687][T14826] EXT4-fs error (device loop4): ext4_free_blocks:6231: comm syz.4.4827: Freeing blocks not in datazone - block = 0, count = 4096 [ 254.563217][T14826] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 3: comm syz.4.4827: lblock 3 mapped to illegal pblock 3 (length 1) [ 254.571724][ T4226] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 254.600265][T14861] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 254.618006][ T5801] usb 4-1: Using ep0 maxpacket: 16 [ 254.626904][T14826] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 254.665190][T14826] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.4827: Failed to acquire dquot type 0 [ 254.689625][T14872] netlink: 'syz.0.4853': attribute type 8 has an invalid length. [ 254.706528][T14826] EXT4-fs (loop4): 1 orphan inode deleted [ 254.717430][T14872] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.4853'. [ 254.727813][T14826] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 254.756680][ T5801] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 254.779540][ T5801] usb 4-1: config 1 has an invalid descriptor of length 15, skipping remainder of the config [ 254.816947][ T5801] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 254.859477][ T5801] usb 4-1: config 1 has no interface number 1 [ 254.859712][T14826] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 3: comm syz.4.4827: lblock 3 mapped to illegal pblock 3 (length 1) [ 254.881234][ T5801] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 254.907319][T14826] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 254.940708][ T5801] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x89 has an invalid bInterval 201, changing to 7 [ 254.960703][T14826] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.4827: Failed to acquire dquot type 0 [ 255.145303][ T5801] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 255.156594][ T5801] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.183129][ T5801] usb 4-1: Product: syz [ 255.193243][ T5801] usb 4-1: Manufacturer: syz [ 255.220905][ T5801] usb 4-1: SerialNumber: syz [ 255.452144][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.458502][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.493521][T14921] netlink: 'syz.0.4876': attribute type 3 has an invalid length. [ 255.550888][ T5801] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 255.565309][ T5801] usb 4-1: found format II with max.bitrate = 0, frame size=0 [ 255.590738][ T5801] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 255.635183][T14930] netlink: 'syz.1.4881': attribute type 32 has an invalid length. [ 255.638592][ T5801] usb 4-1: USB disconnect, device number 18 [ 255.976533][ T5057] udevd[5057]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 256.150326][T14966] program syz.1.4898 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 256.161900][ T6798] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 256.163926][T14968] loop3: detected capacity change from 0 to 64 [ 256.263538][T14970] program syz.1.4901 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 256.279816][T14972] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4900'. [ 256.359979][ T25] audit: type=1400 audit(256.328:35): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=14975 comm="syz.3.4902" [ 256.486552][T14982] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4906'. [ 256.550721][ T6798] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 256.570752][ T6798] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 256.670972][ T6798] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 256.683631][ T6798] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 256.696156][ T6798] usb 5-1: SerialNumber: syz [ 256.773339][ T6798] usb 5-1: 0:2 : does not exist [ 256.976679][ T2303] usb 5-1: USB disconnect, device number 21 [ 257.136560][T15025] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4926'. [ 257.224137][T15031] loop2: detected capacity change from 0 to 64 [ 257.310898][T15031] attempt to access beyond end of device [ 257.310898][T15031] loop2: rw=0, want=3586, limit=64 [ 257.333837][T15041] netlink: 'syz.3.4935': attribute type 4 has an invalid length. [ 257.349971][T15031] Buffer I/O error on dev loop2, logical block 1792, async page read [ 257.360521][T15041] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4935'. [ 257.369083][T15031] attempt to access beyond end of device [ 257.369083][T15031] loop2: rw=0, want=113154, limit=64 [ 257.422560][T15041] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 257.428036][T15031] Buffer I/O error on dev loop2, logical block 56576, async page read [ 257.550667][ T6798] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 257.636873][T15053] netlink: 'syz.3.4942': attribute type 1 has an invalid length. [ 257.665495][T15056] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4943'. [ 257.914014][T15075] loop0: detected capacity change from 0 to 256 [ 257.978039][T15075] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 257.980868][ T6798] usb 2-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 258.024324][ T1197] BUG: MAX_LOCK_DEPTH too low! [ 258.029123][ T1197] turning off the locking correctness validator. [ 258.035441][ T1197] depth: 48 max: 48! [ 258.039427][ T1197] 48 locks held by kworker/u4:3/1197: [ 258.044792][ T1197] #0: ffff888024042938 ((wq_completion)wg-kex-wg0#7){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 258.045410][ T6798] usb 2-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.055594][ T1197] #1: ffffc90004a27d00 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 258.055646][ T1197] #2: ffff888020e826f8 (&peer->endpoint_lock){++-.}-{2:2}, at: wg_socket_send_skb_to_peer+0x50/0x1c0 [ 258.085300][T15075] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779264) [ 258.089009][ T1197] #3: ffffffff8c31efc0 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 258.089061][ T1197] #4: [ 258.098324][ T6798] usb 2-1: config 1 interface 0 has no altsetting 0 [ 258.106442][ T1197] ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 258.106491][ T1197] #5: ffffffff8c31ef60 (rcu_read_lock [ 258.118066][T15075] FAT-fs (loop0): Filesystem has been set read-only [ 258.124638][ T1197] ){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 258.124673][ T1197] #6: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 258.152088][ T1197] #7: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 258.161404][ T1197] #8: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 258.170723][ T1197] #9: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 258.180047][ T1197] #10: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 258.189735][ T1197] #11: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 258.199152][ T1197] #12: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 258.208562][ T1197] #13: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 258.217974][ T1197] #14: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 258.227383][ T1197] #15: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 258.236796][ T1197] #16: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 258.246203][ T1197] #17: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 258.255614][ T1197] #18: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 258.265026][ T1197] #19: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 258.274435][ T1197] #20: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 258.283848][ T1197] #21: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 258.291925][T15069] loop2: detected capacity change from 0 to 32768 [ 258.293253][ T1197] #22: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 258.309038][ T1197] #23: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 258.318449][ T1197] #24: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 258.327846][ T1197] #25: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 258.337234][ T1197] #26: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 258.346614][ T1197] #27: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 258.355995][ T1197] #28: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 258.365371][ T1197] #29: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 258.374745][ T1197] #30: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 258.384641][ T1197] #31: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 258.394017][ T1197] #32: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 258.403392][ T1197] #33: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 258.412764][ T1197] #34: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 258.422140][ T1197] #35: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 258.431539][ T1197] #36: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 258.440921][ T1197] #37: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 258.450295][ T1197] #38: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 258.459676][ T1197] #39: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 258.469139][ T1197] #40: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 258.478512][ T1197] #41: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 258.487885][ T1197] #42: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 258.497261][ T1197] #43: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 258.506645][ T1197] #44: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 258.516023][ T1197] #45: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 258.525395][ T1197] #46: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 258.534770][ T1197] #47: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 258.544146][ T1197] INFO: lockdep is turned off. [ 258.548885][ T1197] CPU: 0 PID: 1197 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 258.556408][ T1197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 258.566449][ T1197] Workqueue: wg-kex-wg0 wg_packet_handshake_send_worker [ 258.573381][ T1197] Call Trace: [ 258.576643][ T1197] [ 258.579563][ T1197] dump_stack_lvl+0x188/0x250 [ 258.584241][ T1197] ? show_regs_print_info+0x20/0x20 [ 258.589422][ T1197] ? load_image+0x410/0x410 [ 258.593914][ T1197] __lock_acquire+0x1247/0x7b50 [ 258.598749][ T1197] ? rpl_output+0x31f/0x730 [ 258.603241][ T1197] ? lwtunnel_output+0x27e/0x440 [ 258.608160][ T1197] ? kfree+0xef/0x2a0 [ 258.612122][ T1197] ? verify_lock_unused+0x140/0x140 [ 258.617307][ T1197] ? stack_trace_save+0xa6/0xf0 [ 258.622141][ T1197] ? stack_trace_snprint+0xe0/0xe0 [ 258.627234][ T1197] ? stack_trace_save+0xf0/0xf0 [ 258.632066][ T1197] ? mark_lock+0x94/0x320 [ 258.636378][ T1197] ? __lock_acquire+0x1305/0x7b50 [ 258.641383][ T1197] ? rpl_output+0x178/0x730 [ 258.645868][ T1197] lock_acquire+0x19e/0x400 [ 258.650353][ T1197] ? rcu_lock_acquire+0x9/0x30 [ 258.655102][ T1197] ? rpl_output+0x31f/0x730 [ 258.659585][ T1197] ? lwtunnel_output+0x27e/0x440 [ 258.664506][ T1197] ? rpl_output+0x31f/0x730 [ 258.668994][ T1197] ? lwtunnel_output+0x27e/0x440 [ 258.673915][ T1197] ? read_lock_is_recursive+0x10/0x10 [ 258.679269][ T1197] ? verify_lock_unused+0x140/0x140 [ 258.684455][ T1197] ? mark_lock+0x94/0x320 [ 258.688774][ T1197] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 258.694741][ T1197] ? rpl_output+0x31f/0x730 [ 258.699231][ T1197] ? lwtunnel_output+0x27e/0x440 [ 258.704150][ T1197] ? rpl_output+0x31f/0x730 [ 258.708637][ T1197] rcu_lock_acquire+0x2a/0x30 [ 258.713300][ T1197] ? rcu_lock_acquire+0x9/0x30 [ 258.718046][ T1197] ip6_dst_check+0xe2/0x7a0 [ 258.722532][ T1197] ? skb_header_pointer+0x120/0x120 [ 258.727717][ T1197] dst_cache_per_cpu_get+0x1a3/0x310 [ 258.732987][ T1197] rpl_output+0x165/0x730 [ 258.737307][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 258.741794][ T1197] ? rpl_destroy_state+0x20/0x20 [ 258.746716][ T1197] ? read_lock_is_recursive+0x10/0x10 [ 258.752070][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 258.756559][ T1197] ? rpl_destroy_state+0x20/0x20 [ 258.761480][ T1197] lwtunnel_output+0x27e/0x440 [ 258.766229][ T1197] rpl_output+0x31f/0x730 [ 258.770544][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 258.775035][ T1197] ? rpl_destroy_state+0x20/0x20 [ 258.779965][ T1197] ? read_lock_is_recursive+0x10/0x10 [ 258.785326][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 258.789815][ T1197] ? rpl_destroy_state+0x20/0x20 [ 258.794737][ T1197] lwtunnel_output+0x27e/0x440 [ 258.799507][ T1197] rpl_output+0x31f/0x730 [ 258.803821][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 258.808305][ T1197] ? rpl_destroy_state+0x20/0x20 [ 258.813225][ T1197] ? read_lock_is_recursive+0x10/0x10 [ 258.818583][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 258.823069][ T1197] ? rpl_destroy_state+0x20/0x20 [ 258.828002][ T1197] lwtunnel_output+0x27e/0x440 [ 258.832754][ T1197] rpl_output+0x31f/0x730 [ 258.837076][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 258.841561][ T1197] ? rpl_destroy_state+0x20/0x20 [ 258.846483][ T1197] ? read_lock_is_recursive+0x10/0x10 [ 258.851841][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 258.856327][ T1197] ? rpl_destroy_state+0x20/0x20 [ 258.861243][ T1197] lwtunnel_output+0x27e/0x440 [ 258.865995][ T1197] rpl_output+0x31f/0x730 [ 258.870312][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 258.874798][ T1197] ? rpl_destroy_state+0x20/0x20 [ 258.879722][ T1197] ? read_lock_is_recursive+0x10/0x10 [ 258.885079][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 258.889570][ T1197] ? rpl_destroy_state+0x20/0x20 [ 258.894490][ T1197] lwtunnel_output+0x27e/0x440 [ 258.899239][ T1197] rpl_output+0x31f/0x730 [ 258.903555][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 258.908039][ T1197] ? rpl_destroy_state+0x20/0x20 [ 258.912958][ T1197] ? read_lock_is_recursive+0x10/0x10 [ 258.918313][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 258.922812][ T1197] ? rpl_destroy_state+0x20/0x20 [ 258.927754][ T1197] lwtunnel_output+0x27e/0x440 [ 258.932548][ T1197] rpl_output+0x31f/0x730 [ 258.936890][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 258.941390][ T1197] ? rpl_destroy_state+0x20/0x20 [ 258.946336][ T1197] ? read_lock_is_recursive+0x10/0x10 [ 258.951798][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 258.956295][ T1197] ? rpl_destroy_state+0x20/0x20 [ 258.961228][ T1197] lwtunnel_output+0x27e/0x440 [ 258.966012][ T1197] rpl_output+0x31f/0x730 [ 258.970333][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 258.974823][ T1197] ? rpl_destroy_state+0x20/0x20 [ 258.979743][ T1197] ? read_lock_is_recursive+0x10/0x10 [ 258.985104][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 258.989595][ T1197] ? rpl_destroy_state+0x20/0x20 [ 258.994515][ T1197] lwtunnel_output+0x27e/0x440 [ 258.999264][ T1197] rpl_output+0x31f/0x730 [ 259.003578][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 259.008067][ T1197] ? rpl_destroy_state+0x20/0x20 [ 259.012985][ T1197] ? read_lock_is_recursive+0x10/0x10 [ 259.018350][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 259.022838][ T1197] ? rpl_destroy_state+0x20/0x20 [ 259.027756][ T1197] lwtunnel_output+0x27e/0x440 [ 259.032504][ T1197] rpl_output+0x31f/0x730 [ 259.036818][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 259.041302][ T1197] ? rpl_destroy_state+0x20/0x20 [ 259.046224][ T1197] ? read_lock_is_recursive+0x10/0x10 [ 259.051582][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 259.056069][ T1197] ? rpl_destroy_state+0x20/0x20 [ 259.060993][ T1197] lwtunnel_output+0x27e/0x440 [ 259.065741][ T1197] rpl_output+0x31f/0x730 [ 259.070068][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 259.074553][ T1197] ? rpl_destroy_state+0x20/0x20 [ 259.079474][ T1197] ? read_lock_is_recursive+0x10/0x10 [ 259.084831][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 259.089335][ T1197] ? rpl_destroy_state+0x20/0x20 [ 259.094272][ T1197] lwtunnel_output+0x27e/0x440 [ 259.099038][ T1197] rpl_output+0x31f/0x730 [ 259.103355][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 259.107843][ T1197] ? rpl_destroy_state+0x20/0x20 [ 259.112768][ T1197] ? read_lock_is_recursive+0x10/0x10 [ 259.118129][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 259.122614][ T1197] ? rpl_destroy_state+0x20/0x20 [ 259.127538][ T1197] lwtunnel_output+0x27e/0x440 [ 259.132290][ T1197] rpl_output+0x31f/0x730 [ 259.136607][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 259.141092][ T1197] ? rpl_destroy_state+0x20/0x20 [ 259.146022][ T1197] ? read_lock_is_recursive+0x10/0x10 [ 259.151400][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 259.155895][ T1197] ? rpl_destroy_state+0x20/0x20 [ 259.160822][ T1197] lwtunnel_output+0x27e/0x440 [ 259.165578][ T1197] rpl_output+0x31f/0x730 [ 259.169892][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 259.174379][ T1197] ? rpl_destroy_state+0x20/0x20 [ 259.179439][ T1197] ? read_lock_is_recursive+0x10/0x10 [ 259.184815][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 259.189326][ T1197] ? rpl_destroy_state+0x20/0x20 [ 259.194253][ T1197] lwtunnel_output+0x27e/0x440 [ 259.199009][ T1197] rpl_output+0x31f/0x730 [ 259.203328][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 259.207831][ T1197] ? rpl_destroy_state+0x20/0x20 [ 259.212769][ T1197] ? read_lock_is_recursive+0x10/0x10 [ 259.218146][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 259.222647][ T1197] ? rpl_destroy_state+0x20/0x20 [ 259.227566][ T1197] lwtunnel_output+0x27e/0x440 [ 259.232319][ T1197] rpl_output+0x31f/0x730 [ 259.236638][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 259.241127][ T1197] ? rpl_destroy_state+0x20/0x20 [ 259.246046][ T1197] ? read_lock_is_recursive+0x10/0x10 [ 259.251405][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 259.255890][ T1197] ? rpl_destroy_state+0x20/0x20 [ 259.260808][ T1197] lwtunnel_output+0x27e/0x440 [ 259.265564][ T1197] rpl_output+0x31f/0x730 [ 259.269882][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 259.274366][ T1197] ? rpl_destroy_state+0x20/0x20 [ 259.279287][ T1197] ? read_lock_is_recursive+0x10/0x10 [ 259.284644][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 259.289135][ T1197] ? rpl_destroy_state+0x20/0x20 [ 259.294053][ T1197] lwtunnel_output+0x27e/0x440 [ 259.298806][ T1197] rpl_output+0x31f/0x730 [ 259.303126][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 259.307614][ T1197] ? rpl_destroy_state+0x20/0x20 [ 259.312534][ T1197] ? read_lock_is_recursive+0x10/0x10 [ 259.317890][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 259.322379][ T1197] ? rpl_destroy_state+0x20/0x20 [ 259.327297][ T1197] lwtunnel_output+0x27e/0x440 [ 259.332047][ T1197] rpl_output+0x31f/0x730 [ 259.336367][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 259.340851][ T1197] ? rpl_destroy_state+0x20/0x20 [ 259.345774][ T1197] ? read_lock_is_recursive+0x10/0x10 [ 259.351163][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 259.355651][ T1197] ? rpl_destroy_state+0x20/0x20 [ 259.360570][ T1197] lwtunnel_output+0x27e/0x440 [ 259.365323][ T1197] rpl_output+0x31f/0x730 [ 259.369635][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 259.374120][ T1197] ? rpl_destroy_state+0x20/0x20 [ 259.379047][ T1197] ? read_lock_is_recursive+0x10/0x10 [ 259.384406][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 259.388895][ T1197] ? rpl_destroy_state+0x20/0x20 [ 259.393814][ T1197] lwtunnel_output+0x27e/0x440 [ 259.398565][ T1197] rpl_output+0x31f/0x730 [ 259.402880][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 259.407363][ T1197] ? rpl_destroy_state+0x20/0x20 [ 259.412283][ T1197] ? read_lock_is_recursive+0x10/0x10 [ 259.417642][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 259.422128][ T1197] ? rpl_destroy_state+0x20/0x20 [ 259.427050][ T1197] lwtunnel_output+0x27e/0x440 [ 259.431805][ T1197] rpl_output+0x31f/0x730 [ 259.436119][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 259.440618][ T1197] ? rpl_destroy_state+0x20/0x20 [ 259.445562][ T1197] ? read_lock_is_recursive+0x10/0x10 [ 259.450919][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 259.455410][ T1197] ? rpl_destroy_state+0x20/0x20 [ 259.460329][ T1197] lwtunnel_output+0x27e/0x440 [ 259.465086][ T1197] rpl_output+0x31f/0x730 [ 259.469412][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 259.473894][ T1197] ? rpl_destroy_state+0x20/0x20 [ 259.478812][ T1197] ? read_lock_is_recursive+0x10/0x10 [ 259.485687][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 259.490201][ T1197] ? rpl_destroy_state+0x20/0x20 [ 259.495127][ T1197] lwtunnel_output+0x27e/0x440 [ 259.499885][ T1197] rpl_output+0x31f/0x730 [ 259.504203][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 259.508691][ T1197] ? rpl_destroy_state+0x20/0x20 [ 259.513615][ T1197] ? read_lock_is_recursive+0x10/0x10 [ 259.518977][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 259.523466][ T1197] ? rpl_destroy_state+0x20/0x20 [ 259.528390][ T1197] lwtunnel_output+0x27e/0x440 [ 259.533148][ T1197] rpl_output+0x31f/0x730 [ 259.537474][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 259.541963][ T1197] ? rpl_destroy_state+0x20/0x20 [ 259.546882][ T1197] ? read_lock_is_recursive+0x10/0x10 [ 259.552254][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 259.556748][ T1197] ? rpl_destroy_state+0x20/0x20 [ 259.561669][ T1197] lwtunnel_output+0x27e/0x440 [ 259.566428][ T1197] rpl_output+0x31f/0x730 [ 259.570744][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 259.575229][ T1197] ? rpl_destroy_state+0x20/0x20 [ 259.580167][ T1197] ? read_lock_is_recursive+0x10/0x10 [ 259.585524][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 259.590011][ T1197] ? rpl_destroy_state+0x20/0x20 [ 259.595014][ T1197] lwtunnel_output+0x27e/0x440 [ 259.599762][ T1197] rpl_output+0x31f/0x730 [ 259.604075][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 259.608569][ T1197] ? rpl_destroy_state+0x20/0x20 [ 259.613489][ T1197] ? read_lock_is_recursive+0x10/0x10 [ 259.618851][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 259.623337][ T1197] ? rpl_destroy_state+0x20/0x20 [ 259.628254][ T1197] lwtunnel_output+0x27e/0x440 [ 259.633007][ T1197] rpl_output+0x31f/0x730 [ 259.637323][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 259.641809][ T1197] ? rpl_destroy_state+0x20/0x20 [ 259.646728][ T1197] ? read_lock_is_recursive+0x10/0x10 [ 259.652089][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 259.656577][ T1197] ? rpl_destroy_state+0x20/0x20 [ 259.661495][ T1197] lwtunnel_output+0x27e/0x440 [ 259.666248][ T1197] rpl_output+0x31f/0x730 [ 259.670570][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 259.675055][ T1197] ? rpl_destroy_state+0x20/0x20 [ 259.679973][ T1197] ? read_lock_is_recursive+0x10/0x10 [ 259.685333][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 259.689819][ T1197] ? rpl_destroy_state+0x20/0x20 [ 259.694736][ T1197] lwtunnel_output+0x27e/0x440 [ 259.699486][ T1197] rpl_output+0x31f/0x730 [ 259.703800][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 259.708285][ T1197] ? rpl_destroy_state+0x20/0x20 [ 259.713204][ T1197] ? read_lock_is_recursive+0x10/0x10 [ 259.718563][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 259.723054][ T1197] ? rpl_destroy_state+0x20/0x20 [ 259.727974][ T1197] lwtunnel_output+0x27e/0x440 [ 259.732721][ T1197] rpl_output+0x31f/0x730 [ 259.737034][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 259.741518][ T1197] ? rpl_destroy_state+0x20/0x20 [ 259.746439][ T1197] ? read_lock_is_recursive+0x10/0x10 [ 259.751805][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 259.756293][ T1197] ? rpl_destroy_state+0x20/0x20 [ 259.761213][ T1197] lwtunnel_output+0x27e/0x440 [ 259.765968][ T1197] rpl_output+0x31f/0x730 [ 259.770285][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 259.774767][ T1197] ? rpl_destroy_state+0x20/0x20 [ 259.779687][ T1197] ? read_lock_is_recursive+0x10/0x10 [ 259.785045][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 259.789967][ T1197] ? rpl_destroy_state+0x20/0x20 [ 259.794885][ T1197] lwtunnel_output+0x27e/0x440 [ 259.799633][ T1197] rpl_output+0x31f/0x730 [ 259.803947][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 259.808434][ T1197] ? rpl_destroy_state+0x20/0x20 [ 259.813351][ T1197] ? read_lock_is_recursive+0x10/0x10 [ 259.818708][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 259.823193][ T1197] ? rpl_destroy_state+0x20/0x20 [ 259.828112][ T1197] lwtunnel_output+0x27e/0x440 [ 259.832858][ T1197] rpl_output+0x31f/0x730 [ 259.837174][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 259.841657][ T1197] ? rpl_destroy_state+0x20/0x20 [ 259.846576][ T1197] ? read_lock_is_recursive+0x10/0x10 [ 259.851931][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 259.856417][ T1197] ? rpl_destroy_state+0x20/0x20 [ 259.861335][ T1197] lwtunnel_output+0x27e/0x440 [ 259.866088][ T1197] rpl_output+0x31f/0x730 [ 259.870404][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 259.874888][ T1197] ? rpl_destroy_state+0x20/0x20 [ 259.879805][ T1197] ? read_lock_is_recursive+0x10/0x10 [ 259.885162][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 259.889648][ T1197] ? rpl_destroy_state+0x20/0x20 [ 259.894563][ T1197] lwtunnel_output+0x27e/0x440 [ 259.899309][ T1197] rpl_output+0x31f/0x730 [ 259.903621][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 259.908110][ T1197] ? rpl_destroy_state+0x20/0x20 [ 259.913030][ T1197] ? read_lock_is_recursive+0x10/0x10 [ 259.918385][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 259.922873][ T1197] ? rpl_destroy_state+0x20/0x20 [ 259.927789][ T1197] lwtunnel_output+0x27e/0x440 [ 259.932538][ T1197] rpl_output+0x31f/0x730 [ 259.936878][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 259.941363][ T1197] ? rpl_destroy_state+0x20/0x20 [ 259.946281][ T1197] ? read_lock_is_recursive+0x10/0x10 [ 259.951638][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 259.956130][ T1197] ? rpl_destroy_state+0x20/0x20 [ 259.961047][ T1197] lwtunnel_output+0x27e/0x440 [ 259.965794][ T1197] rpl_output+0x31f/0x730 [ 259.970109][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 259.974591][ T1197] ? rpl_destroy_state+0x20/0x20 [ 259.979516][ T1197] ? read_lock_is_recursive+0x10/0x10 [ 259.984876][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 259.989367][ T1197] ? rpl_destroy_state+0x20/0x20 [ 259.994287][ T1197] lwtunnel_output+0x27e/0x440 [ 259.999037][ T1197] rpl_output+0x31f/0x730 [ 260.003353][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 260.007838][ T1197] ? rpl_destroy_state+0x20/0x20 [ 260.012757][ T1197] ? read_lock_is_recursive+0x10/0x10 [ 260.018113][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 260.022599][ T1197] ? rpl_destroy_state+0x20/0x20 [ 260.027518][ T1197] lwtunnel_output+0x27e/0x440 [ 260.032264][ T1197] rpl_output+0x31f/0x730 [ 260.036575][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 260.041060][ T1197] ? rpl_destroy_state+0x20/0x20 [ 260.045981][ T1197] ? read_lock_is_recursive+0x10/0x10 [ 260.051335][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 260.055825][ T1197] ? rpl_destroy_state+0x20/0x20 [ 260.060767][ T1197] lwtunnel_output+0x27e/0x440 [ 260.065519][ T1197] rpl_output+0x31f/0x730 [ 260.069834][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 260.074321][ T1197] ? rpl_destroy_state+0x20/0x20 [ 260.079248][ T1197] ? read_lock_is_recursive+0x10/0x10 [ 260.084607][ T1197] ? rpl_do_srh+0x9c1/0xe50 [ 260.089094][ T1197] ? rpl_destroy_state+0x20/0x20 [ 260.094014][ T1197] lwtunnel_output+0x27e/0x440 [ 260.098762][ T1197] rpl_output+0x31f/0x730 [ 260.103086][ T1197] ? rpl_destroy_state+0x20/0x20 [ 260.108022][ T1197] ? pskb_expand_head+0x363/0x1100 [ 260.113135][ T1197] ? read_lock_is_recursive+0x10/0x10 [ 260.118499][ T1197] ? rpl_destroy_state+0x20/0x20 [ 260.123418][ T1197] lwtunnel_output+0x27e/0x440 [ 260.128170][ T1197] rpl_output+0x31f/0x730 [ 260.132491][ T1197] ? rpl_destroy_state+0x20/0x20 [ 260.137411][ T1197] ? __ip6_local_out+0x80b/0x850 [ 260.142331][ T1197] ? __ip6_local_out+0x850/0x850 [ 260.147250][ T1197] ? rpl_destroy_state+0x20/0x20 [ 260.152169][ T1197] lwtunnel_output+0x27e/0x440 [ 260.157096][ T1197] udp_tunnel6_xmit_skb+0x4b7/0x8b0 [ 260.162284][ T1197] send6+0x5a0/0x8d0 [ 260.166170][ T1197] ? send4+0xd70/0xd70 [ 260.170221][ T1197] ? __local_bh_disable_ip+0x111/0x1a0 [ 260.175668][ T1197] wg_socket_send_skb_to_peer+0x10d/0x1c0 [ 260.181372][ T1197] wg_packet_handshake_send_worker+0x203/0x360 [ 260.187508][ T1197] ? wg_prev_queue_dequeue+0x1e0/0x1e0 [ 260.192954][ T1197] ? _raw_spin_unlock_irq+0x1f/0x40 [ 260.198225][ T1197] process_one_work+0x867/0xff0 [ 260.203067][ T1197] ? worker_detach_from_pool+0x240/0x240 [ 260.208682][ T1197] ? lockdep_hardirqs_off+0x70/0x100 [ 260.213950][ T1197] ? _raw_spin_lock_irq+0xb7/0xf0 [ 260.219438][ T1197] ? _raw_spin_lock_irqsave+0x100/0x100 [ 260.224985][ T1197] ? wq_worker_running+0x97/0x170 [ 260.229998][ T1197] worker_thread+0xad7/0x12a0 [ 260.234667][ T1197] kthread+0x42e/0x520 [ 260.238718][ T1197] ? rcu_lock_release+0x20/0x20 [ 260.243548][ T1197] ? kthread_blkcg+0xd0/0xd0 [ 260.248123][ T1197] ret_from_fork+0x1f/0x30 [ 260.252530][ T1197] [ 260.303236][T15069] (syz.2.4948,15069,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 260.331229][T15069] (syz.2.4948,15069,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 260.357035][T15069] (syz.2.4948,15069,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0x8514aa1d. Applying ECC. [ 260.370871][ T6798] usb 2-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice= 0.40 [ 260.376370][T15069] JBD2: Ignoring recovery information on journal [ 260.380241][ T6798] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.394719][ T6798] usb 2-1: Product: syz [ 260.407118][T15069] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 260.421598][ T6798] usb 2-1: can't set config #1, error -71 [ 260.454402][ T6798] usb 2-1: USB disconnect, device number 24 [ 260.460389][T15069] (syz.2.4948,15069,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x6db03cd7, computed 0xe423803c. Applying ECC. [ 260.473900][T15069] (syz.2.4948,15069,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x6db03cd7, computed 0xa5e8ec9c [ 260.486797][T15069] (syz.2.4948,15069,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 260.496263][T15069] (syz.2.4948,15069,1):ocfs2_quota_read:201 ERROR: status = -5 [ 260.504123][T15069] Quota error (device loop2): find_tree_dqentry: Can't read quota tree block 1 [ 260.513129][T15069] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 260.522590][T15069] (syz.2.4948,15069,1):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 260.530425][T15069] (syz.2.4948,15069,1):ocfs2_mknod:314 ERROR: status = -5 [ 260.538433][T15069] (syz.2.4948,15069,1):ocfs2_mknod:502 ERROR: status = -5 [ 260.545584][T15069] (syz.2.4948,15069,1):ocfs2_create:676 ERROR: status = -5 [ 260.565760][ T4194] ocfs2: Unmounting device (7,2) on (node local)