last executing test programs: 3.01576514s ago: executing program 4 (id=7126): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x70bd25, 0x27dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x50afa, 0x70823}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x7b}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x804}, 0x8080) 2.805363445s ago: executing program 4 (id=7130): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) recvmsg(r0, &(0x7f0000001840)={0x0, 0x0, 0x0}, 0x10060) 2.517901912s ago: executing program 4 (id=7133): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 2.260447547s ago: executing program 3 (id=7137): r0 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000140)={0x2, 0x0, 0x2, {0xfffffff3, 0xffffffff, 0xfffffffe, 0x9}}) 2.090110451s ago: executing program 3 (id=7141): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001800010400000000000000000a401400fe0300010000000014000500fe8000000000000000000000000000bb08000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016"], 0x60}}, 0x0) 1.867457666s ago: executing program 3 (id=7145): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.650204242s ago: executing program 3 (id=7149): set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000003000000040122000b"], 0x48) 1.570094414s ago: executing program 1 (id=7150): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000001c0)=0xc796, 0x4) 1.389927218s ago: executing program 0 (id=7151): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x2800) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x1012, 0x1, 0x0, 0xfffffff9, 0x8}) 1.389822768s ago: executing program 2 (id=7152): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r0, 0x89e2, &(0x7f0000000100)) 1.253677721s ago: executing program 1 (id=7153): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mlock(&(0x7f0000ff3000/0xd000)=nil, 0xd000) 1.198532232s ago: executing program 0 (id=7154): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) 1.129968964s ago: executing program 2 (id=7155): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) write$sequencer(r0, &(0x7f0000000080)=[@x={0x94, 0x0, "9c1617ffa09d"}], 0x8) 1.064146555s ago: executing program 1 (id=7156): setns(0xc9, 0x0) socketpair(0x8, 0x100000005, 0x0, &(0x7f0000000000)) 1.029887656s ago: executing program 0 (id=7157): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f2, &(0x7f0000000040)={'team_slave_1\x00', @random="18faff000020"}) 957.949848ms ago: executing program 2 (id=7158): set_mempolicy(0x3, &(0x7f0000000000)=0xb, 0x7) syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5865, 0x0, 0x2, 0x78}, &(0x7f00000006c0), &(0x7f00000001c0), &(0x7f0000000000)) 868.47004ms ago: executing program 1 (id=7159): r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000100)=@profile={'permprofile ', '&\x00'}, 0x2d) 819.669311ms ago: executing program 2 (id=7160): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000880)=ANY=[], 0x2, 0x63e, &(0x7f0000001140)="$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") llistxattr(&(0x7f0000000200)='./file1\x00', 0x0, 0x0) 772.771582ms ago: executing program 4 (id=7161): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x200040a0) 673.968524ms ago: executing program 0 (id=7162): prctl$PR_SET_TIMERSLACK(0x1d, 0x1000) nanosleep(&(0x7f0000000280), 0x0) 568.903947ms ago: executing program 3 (id=7163): r0 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_S_MODULATOR(r0, 0x40445637, &(0x7f0000000300)={0xfffffffc, "6b61dce4c523119c86e66afa8c0c94680978132acf2599a213b095e8cbf9a757", 0x200, 0x100, 0x3, 0x1, 0x2}) 499.815428ms ago: executing program 1 (id=7164): syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0\x00', 0x0, &(0x7f0000000080)={[{@fat=@usefree}, {@utf8no}, {@uni_xlate}, {@uni_xlate}, {@utf8no}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@shortname_mixed}, {@fat=@nfs}, {@fat=@codepage={'codepage', 0x3d, '1251'}}, {@utf8no}]}, 0xfd, 0x2a8, &(0x7f0000000580)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) 455.596109ms ago: executing program 4 (id=7165): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x48a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@grpjquota, 0x22}, {@errors_continue}, {@noload}, {@nombcache}, {@usrjquota, 0x22}, {@errors_continue}, {@grpjquota}, {@barrier}]}, 0x1, 0x455, &(0x7f0000000d80)="$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") mount(0x0, &(0x7f0000000140)='.\x00', 0x0, 0x2390024, &(0x7f0000000000)) 447.17549ms ago: executing program 2 (id=7166): r0 = socket$unix(0x1, 0x1, 0x0) shutdown(r0, 0x0) 424.36808ms ago: executing program 0 (id=7167): r0 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, 0x0) 197.908635ms ago: executing program 0 (id=7168): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x0, &(0x7f0000000100)) 152.123556ms ago: executing program 4 (id=7169): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2d, 0x0, @broadcast}}, 0x80, 0x0}, 0x0) 145.763317ms ago: executing program 3 (id=7170): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x44, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x24, 0x3, "91abc12404cf378042f26c43f91f68d8a90767c0bc71f60877974475de3d78ef"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xa0}}, 0x0) 25.91141ms ago: executing program 1 (id=7171): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f0, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2000, 0x200da5d85240a79d, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x4, 0x14, 0x68, 0x0, 0x80, 0x2b, 0x0, @empty, @empty}}}}) 0s ago: executing program 2 (id=7172): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x1, 0x2, 0x801, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0xd000) kernel console output (not intermixed with test programs): 2 compat=0 ip=0x7fcc17f9e159 code=0x7ffc0000 [ 462.204714][ C0] vkms_vblank_simulate: vblank timer overrun [ 462.301409][ T27] audit: type=1326 audit(1788782650.051:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16488 comm="syz.2.5586" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc17f9e159 code=0x7ffc0000 [ 462.361097][ T27] audit: type=1326 audit(1788782650.051:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16488 comm="syz.2.5586" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fcc17f9e159 code=0x7ffc0000 [ 462.385338][ C0] vkms_vblank_simulate: vblank timer overrun [ 462.523706][ T27] audit: type=1326 audit(1788782650.051:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16488 comm="syz.2.5586" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fcc17f9e159 code=0x7ffc0000 [ 463.101410][ T7297] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 463.158006][T16531] netlink: 'syz.4.5606': attribute type 1 has an invalid length. [ 463.301143][ T7297] usb 3-1: Using ep0 maxpacket: 32 [ 463.309485][ T7297] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 463.369451][ T7297] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 463.423130][ T7297] usb 3-1: string descriptor 0 read error: -22 [ 463.429484][ T7297] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 463.485751][ T7297] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.534010][T16521] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 463.563992][ T7297] usb 3-1: MIDIStreaming interface descriptor not found [ 463.834713][ T7297] usb 3-1: USB disconnect, device number 26 [ 464.496344][T16564] loop1: detected capacity change from 0 to 256 [ 464.900676][T16574] comedi comedi1: Minor 47 could not be opened [ 464.983532][T16576] netlink: 'syz.4.5628': attribute type 13 has an invalid length. [ 464.991787][T16576] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5628'. [ 465.003182][T16576] syz_tun: refused to change device tx_queue_len [ 465.009573][T16576] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 465.445393][T16584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5632'. [ 465.516487][T16566] loop2: detected capacity change from 0 to 32768 [ 465.602082][T16566] (syz.2.5623,16566,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 465.676102][T16566] (syz.2.5623,16566,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 465.749175][T16566] JBD2: Ignoring recovery information on journal [ 465.942440][T16566] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 466.416028][ T4275] ocfs2: Unmounting device (7,2) on (node local) [ 466.595073][T16611] loop3: detected capacity change from 0 to 64 [ 467.058932][T16620] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5648'. [ 467.091089][T16620] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5648'. [ 467.600812][T16605] loop1: detected capacity change from 0 to 32768 [ 467.647693][T16605] [ 467.647693][T16605] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 467.647693][T16605] [ 467.712754][T16605] ialloc: diAlloc returned -5! [ 467.842855][ T4272] [ 467.842855][ T4272] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 467.842855][ T4272] [ 467.871702][ T4272] [ 467.871702][ T4272] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 467.871702][ T4272] [ 468.025176][T16618] loop4: detected capacity change from 0 to 32768 [ 468.682841][T16646] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5661'. [ 468.855216][T16649] CIFS mount error: No usable UNC path provided in device string! [ 468.855216][T16649] [ 468.905064][T16649] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 468.949493][T16651] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5663'. [ 469.194209][T16657] xt_hashlimit: max too large, truncated to 1048576 [ 470.142911][T16689] delete_channel: no stack [ 470.984753][T16676] loop2: detected capacity change from 0 to 32768 [ 471.022280][ T27] audit: type=1326 audit(1788782659.311:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16712 comm="syz.4.5694" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20c699e159 code=0x7ffc0000 [ 471.139981][T16676] XFS (loop2): Mounting V5 Filesystem [ 471.141140][ T27] audit: type=1326 audit(1788782659.311:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16712 comm="syz.4.5694" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7f20c699e159 code=0x7ffc0000 [ 471.345786][ T27] audit: type=1326 audit(1788782659.311:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16712 comm="syz.4.5694" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20c699e159 code=0x7ffc0000 [ 471.413151][T16676] XFS (loop2): Ending clean mount [ 471.441273][T16676] XFS (loop2): Quotacheck needed: Please wait. [ 471.488017][T16731] CIFS: Attempting to mount \\127.0.0.1\share [ 471.502885][ T27] audit: type=1326 audit(1788782659.311:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16712 comm="syz.4.5694" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20c699e159 code=0x7ffc0000 [ 471.551292][T16676] XFS (loop2): Quotacheck: Done. [ 471.639132][T16731] CIFS: VFS: Error connecting to socket. Aborting operation. [ 471.662505][T16731] CIFS: VFS: cifs_mount failed w/return code = -113 [ 471.783210][ T4275] XFS (loop2): Unmounting Filesystem [ 471.916223][T16745] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5706'. [ 472.171038][ T4322] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 472.202017][T16752] tmpfs: Bad value for 'mpol' [ 472.393328][ T4322] usb 1-1: config index 0 descriptor too short (expected 64998, got 72) [ 472.415490][ T4322] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 472.459988][ T4322] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.488003][ T4322] usb 1-1: Product: syz [ 472.504969][ T4322] usb 1-1: Manufacturer: syz [ 472.524285][ T4322] usb 1-1: SerialNumber: syz [ 472.580571][ T4322] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 473.056095][T12981] usb 1-1: USB disconnect, device number 27 [ 473.267819][T16778] netlink: 'syz.3.5722': attribute type 6 has an invalid length. [ 473.396440][T16784] loop2: detected capacity change from 0 to 8 [ 473.422861][T16785] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.5724'. [ 473.541014][ T4325] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 473.672124][ T4322] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 473.679200][ T4322] ath9k_htc: Failed to initialize the device [ 473.721342][ T7297] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 473.730945][ T4325] usb 2-1: Using ep0 maxpacket: 32 [ 473.749238][T12981] usb 1-1: ath9k_htc: USB layer deinitialized [ 473.758777][ T4325] usb 2-1: config 0 interface 0 has no altsetting 0 [ 473.785201][ T4325] usb 2-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 473.809297][ T4325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.852131][ T4325] usb 2-1: config 0 descriptor?? [ 473.876425][ T4325] usb 2-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 473.912954][ T4325] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 473.952868][ T7297] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 473.971300][ T7297] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 473.984600][ T4325] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 474.011967][ T4325] usb 2-1: media controller created [ 474.021297][ T7297] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 474.044094][ T7297] usb 5-1: config 1 has no interface number 0 [ 474.050266][ T7297] usb 5-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 474.084441][ T4325] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 474.099382][ T7297] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 474.131099][ T26] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 474.144723][ T7297] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 474.156652][ T7297] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.166054][ T4325] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 474.174823][ T7297] usb 5-1: Product: syz [ 474.181434][ T4325] error writing reg: 0xff, val: 0x00 [ 474.184907][ T7297] usb 5-1: Manufacturer: syz [ 474.214610][ T7297] usb 5-1: SerialNumber: syz [ 474.234852][ T4325] dvb_usb_mxl111sf: probe of 2-1:0.0 failed with error -22 [ 474.321015][ T26] usb 4-1: Using ep0 maxpacket: 8 [ 474.328141][ T26] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 474.350618][ T26] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 474.370395][ T26] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 474.391038][ T26] usb 4-1: Product: syz [ 474.395291][ T26] usb 4-1: Manufacturer: syz [ 474.430743][ T26] usb 4-1: SerialNumber: syz [ 474.489385][ T27] audit: type=1326 audit(1788782662.771:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16808 comm="syz.0.5734" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc000f9e159 code=0x7ffc0000 [ 474.559785][ T4325] usb 2-1: USB disconnect, device number 23 [ 474.598580][ T27] audit: type=1326 audit(1788782662.781:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16808 comm="syz.0.5734" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7fc000f9e159 code=0x7ffc0000 [ 474.655796][ T27] audit: type=1326 audit(1788782662.781:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16808 comm="syz.0.5734" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc000f9e159 code=0x7ffc0000 [ 474.668651][ T7297] usb 5-1: USB disconnect, device number 31 [ 474.692887][ T26] usb 4-1: Handspring Visor / Palm OS: No valid connect info available [ 474.701354][ T27] audit: type=1326 audit(1788782662.781:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16808 comm="syz.0.5734" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc000f9e159 code=0x7ffc0000 [ 474.731370][ T26] usb 4-1: Handspring Visor / Palm OS: port 2, is for unknown use [ 474.739325][ T26] usb 4-1: Handspring Visor / Palm OS: port 11, is for unknown use [ 474.750566][ T26] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 474.894070][ T26] usb 4-1: palm_os_3_probe - error -71 getting bytes available request [ 474.926405][ T26] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 474.981574][ T26] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 475.004095][ T26] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 475.028856][ T26] usb 4-1: USB disconnect, device number 29 [ 475.057854][ T26] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 475.114059][ T26] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 475.135668][ T26] visor 4-1:1.0: device disconnected [ 475.566169][T16833] CIFS: Attempting to mount \\127.0.0.1\share [ 475.689504][T16839] loop2: detected capacity change from 0 to 64 [ 476.357355][T16833] CIFS: VFS: Error connecting to socket. Aborting operation. [ 476.403296][T16833] CIFS: VFS: cifs_mount failed w/return code = -4 [ 476.471037][ T4325] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 476.662858][ T4325] usb 5-1: Using ep0 maxpacket: 32 [ 476.671330][ T4325] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 476.738596][ T4325] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 476.783889][ T4325] usb 5-1: string descriptor 0 read error: -22 [ 476.790205][ T4325] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 476.860118][ T4325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.885565][T16853] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 476.920255][ T4325] usb 5-1: MIDIStreaming interface descriptor not found [ 477.235188][T12981] usb 5-1: USB disconnect, device number 32 [ 477.243913][T16881] loop1: detected capacity change from 0 to 16 [ 477.271244][ T7297] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 477.315539][T16883] device vti0 entered promiscuous mode [ 477.329224][T16881] erofs: (device loop1): mounted with root inode @ nid 36. [ 477.377570][T16881] erofs: (device loop1): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 86 [ 477.434753][T16881] erofs: (device loop1): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 86 [ 477.465535][ T7297] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 477.485086][ T7297] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.523930][ T7297] usb 3-1: Product: syz [ 477.541786][ T7297] usb 3-1: Manufacturer: syz [ 477.568032][ T7297] usb 3-1: SerialNumber: syz [ 477.584522][ T7297] usb 3-1: config 0 descriptor?? [ 477.592592][ T7297] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 477.736501][T16889] ieee802154 phy0 wpan0: encryption failed: -22 [ 478.019604][ T7297] usb 3-1: USB disconnect, device number 27 [ 478.286147][T12981] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 478.501698][T12981] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 478.533198][T16910] device vti0 entered promiscuous mode [ 478.554590][T12981] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 478.594808][T12981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.635993][T12981] usb 5-1: Product: syz [ 478.656271][T12981] usb 5-1: Manufacturer: syz [ 478.680924][T12981] usb 5-1: SerialNumber: syz [ 478.804448][T16914] xt_cgroup: path and classid specified [ 478.942987][T12981] snd-usb-6fire 5-1:1.0: invalid firmware version in device: 00 00 00 00. please reconnect to power. if this failure still happens, check your firmware installation. [ 479.003968][T12981] snd-usb-6fire: probe of 5-1:1.0 failed with error -22 [ 479.227959][ T7297] usb 5-1: USB disconnect, device number 33 [ 479.411114][T12981] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 479.621038][T12981] usb 2-1: Using ep0 maxpacket: 32 [ 479.628108][T12981] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 479.654995][T12981] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 479.700982][T12981] usb 2-1: config 0 has no interface number 0 [ 479.708363][T12981] usb 2-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 479.726368][T16939] Unsupported ieee802154 address type: 0 [ 479.793907][T12981] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 479.821541][T12981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.871410][T12981] usb 2-1: Product: syz [ 479.881208][T12981] usb 2-1: Manufacturer: syz [ 479.885853][T12981] usb 2-1: SerialNumber: syz [ 479.924621][T12981] usb 2-1: config 0 descriptor?? [ 479.966547][T12981] radio-si470x 2-1:0.35: could not find interrupt in endpoint [ 480.005685][T12981] radio-si470x: probe of 2-1:0.35 failed with error -5 [ 480.145064][T12981] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 480.162726][T12981] usbhid 2-1:0.35: couldn't find an input interrupt endpoint [ 480.181323][T16949] CIFS: VFS: Malformed UNC in devname [ 480.278608][T16953] loop4: detected capacity change from 0 to 512 [ 480.329823][T16953] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 480.356476][T12981] usb 2-1: USB disconnect, device number 24 [ 480.415895][T16953] EXT4-fs (loop4): orphan cleanup on readonly fs [ 480.433617][T16953] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 480.492898][T16953] EXT4-fs (loop4): Remounting filesystem read-only [ 480.499742][T16953] Quota error (device loop4): write_blk: dquota write failed [ 480.512006][T16960] xt_CONNSECMARK: invalid mode: 66 [ 480.585977][T16953] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 480.631665][T16953] Quota error (device loop4): write_blk: dquota write failed [ 480.644612][T16953] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 480.677346][T16953] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.5806: Failed to acquire dquot type 1 [ 480.783608][T16953] EXT4-fs (loop4): Remounting filesystem read-only [ 480.802227][T16953] EXT4-fs (loop4): 1 truncate cleaned up [ 480.838724][T16953] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 480.935116][T16953] EXT4-fs: Cannot specify journal on remount [ 481.166909][ T8112] EXT4-fs (loop4): unmounting filesystem. [ 481.352553][T16972] loop3: detected capacity change from 0 to 4096 [ 481.401314][T16972] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 481.480678][T16972] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 481.602864][T16972] ntfs3: loop3: no free space to extend mft [ 481.750704][T16986] ieee802154 phy0 wpan0: encryption failed: -22 [ 482.266015][T16998] netlink: 'syz.0.5827': attribute type 1 has an invalid length. [ 482.332438][T16998] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5827'. [ 482.459491][T17001] netlink: 'syz.1.5828': attribute type 29 has an invalid length. [ 482.480971][T17001] netlink: 'syz.1.5828': attribute type 3 has an invalid length. [ 482.488774][T17001] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5828'. [ 482.536109][T17006] ceph: Unknown parameter 'port' [ 482.781164][ T26] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 482.991219][ T26] usb 5-1: Using ep0 maxpacket: 16 [ 483.003387][ T26] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 483.060930][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 483.120934][ T26] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 483.192489][ T26] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 483.240947][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.267496][ T26] usb 5-1: Product: syz [ 483.292620][ T26] usb 5-1: Manufacturer: syz [ 483.297333][ T26] usb 5-1: SerialNumber: syz [ 483.361102][ T26] usb 5-1: config 0 descriptor?? [ 483.367311][T17004] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 483.395387][ T26] mceusb 5-1:0.0: mceusb_dev_probe: device setup failed! [ 483.425224][ T26] mceusb: probe of 5-1:0.0 failed with error -12 [ 483.622554][ T22] usb 5-1: USB disconnect, device number 34 [ 483.672639][ T27] audit: type=1326 audit(1788782671.961:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17027 comm="syz.1.5844" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9b39e159 code=0x7ffc0000 [ 483.696782][ C1] vkms_vblank_simulate: vblank timer overrun [ 483.773894][ T27] audit: type=1326 audit(1788782671.961:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17027 comm="syz.1.5844" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f5c9b39e159 code=0x7ffc0000 [ 483.798058][ C1] vkms_vblank_simulate: vblank timer overrun [ 483.907005][ T27] audit: type=1326 audit(1788782671.961:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17027 comm="syz.1.5844" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9b39e159 code=0x7ffc0000 [ 483.931864][ C1] vkms_vblank_simulate: vblank timer overrun [ 483.945515][T17034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5846'. [ 484.048244][ T27] audit: type=1326 audit(1788782671.961:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17027 comm="syz.1.5844" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9b39e159 code=0x7ffc0000 [ 484.122018][T17010] loop3: detected capacity change from 0 to 32768 [ 484.292615][T17010] XFS (loop3): Mounting V5 Filesystem [ 484.367095][T17051] ieee802154 phy0 wpan0: encryption failed: -22 [ 484.491062][T12981] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 484.509647][T17054] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5861'. [ 484.521402][T17010] XFS (loop3): Ending clean mount [ 484.601059][T17010] XFS (loop3): Quotacheck needed: Please wait. [ 484.701238][T12981] usb 2-1: Using ep0 maxpacket: 32 [ 484.713879][T12981] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 484.755546][T12981] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 484.815707][T12981] usb 2-1: string descriptor 0 read error: -22 [ 484.832192][T12981] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 484.880947][T12981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.916477][T17010] XFS (loop3): Quotacheck: Done. [ 484.956885][T17044] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 484.975122][T17065] netlink: 'syz.2.5855': attribute type 1 has an invalid length. [ 484.983784][T12981] usb 2-1: MIDIStreaming interface descriptor not found [ 485.035382][T17065] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5855'. [ 485.123968][ T4274] XFS (loop3): Unmounting Filesystem [ 485.323606][T12981] usb 2-1: USB disconnect, device number 25 [ 485.793944][ T7297] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 486.043064][ T7297] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 486.078658][ T7297] usb 3-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 486.110976][ T7297] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.155208][ T7297] usb 3-1: config 0 descriptor?? [ 486.174152][ T7297] smsusb:smsusb_probe: board id=8, interface number 0 [ 486.226489][ T7297] smsusb:smsusb_probe: Device initialized with return code -19 [ 486.569985][ T7297] usb 3-1: USB disconnect, device number 28 [ 486.877851][T17079] loop4: detected capacity change from 0 to 32768 [ 486.979158][T17079] jfs_strtoUCS: char2uni returned -22. [ 487.009188][T17079] charset = cp932, char = 0xfc [ 487.083182][ T26] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 487.294516][ T26] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 487.317523][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.350945][ T26] usb 4-1: Product: syz [ 487.355172][ T26] usb 4-1: Manufacturer: syz [ 487.390005][ T26] usb 4-1: SerialNumber: syz [ 487.656743][ T26] usb 4-1: unit 5 not found! [ 487.671804][ T26] usb 4-1: unit 102 not found! [ 487.732265][ T26] usb 4-1: USB disconnect, device number 30 [ 487.762668][ T27] audit: type=1326 audit(1788782676.051:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17121 comm="syz.2.5885" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc17f9e159 code=0x7ffc0000 [ 487.867764][ T27] audit: type=1326 audit(1788782676.091:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17121 comm="syz.2.5885" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc17f9e159 code=0x7ffc0000 [ 487.973350][ T27] audit: type=1326 audit(1788782676.091:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17121 comm="syz.2.5885" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7fcc17f9e159 code=0x7ffc0000 [ 488.090992][ T27] audit: type=1326 audit(1788782676.091:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17121 comm="syz.2.5885" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc17f9e159 code=0x7ffc0000 [ 488.217639][ T27] audit: type=1326 audit(1788782676.091:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17121 comm="syz.2.5885" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc17f9e159 code=0x7ffc0000 [ 488.453852][T17137] CIFS: VFS: bad security option: kr!qÌ [ 488.651555][T17142] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5895'. [ 488.687714][T17142] netlink: 'syz.0.5895': attribute type 1 has an invalid length. [ 488.736030][T17142] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5895'. [ 488.811157][T12981] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 489.011389][ T26] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 489.030351][T17150] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 489.053608][T12981] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 489.071002][T12981] usb 5-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 489.088135][T12981] usb 5-1: Product: syz [ 489.094659][T12981] usb 5-1: Manufacturer: syz [ 489.099315][T12981] usb 5-1: SerialNumber: syz [ 489.123644][T12981] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 489.223425][ T26] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 489.235027][T17157] cgroup: subsys name conflicts with all [ 489.257456][ T26] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 489.318502][ T26] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 489.342345][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.360987][ T26] usb 4-1: Product: syz [ 489.365221][ T26] usb 4-1: Manufacturer: syz [ 489.369839][ T26] usb 4-1: SerialNumber: syz [ 489.433087][ T26] cdc_ncm 4-1:1.0: skipping garbage [ 489.460931][ T26] cdc_ncm 4-1:1.0: NCM or ECM functional descriptors missing [ 489.468412][ T26] cdc_ncm 4-1:1.0: bind() failure [ 489.514655][ T26] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 489.534198][ T26] cdc_ncm 4-1:1.1: bind() failure [ 489.553099][T12981] vp7045: USB control message 'in' went wrong. [ 489.572759][T12981] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 489.641033][T12981] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 489.684299][ T22] usb 4-1: USB disconnect, device number 31 [ 489.696396][T12981] usb 5-1: USB disconnect, device number 35 [ 489.856070][T17169] device bridge2 entered promiscuous mode [ 490.307287][T17185] loop4: detected capacity change from 0 to 128 [ 490.700364][T17193] loop1: detected capacity change from 0 to 16 [ 490.751252][T17193] erofs: (device loop1): erofs_read_superblock: dirblkbits 1 isn't supported [ 490.885752][T12981] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 491.069546][T17206] xt_CT: You must specify a L4 protocol and not use inversions on it [ 491.082168][T12981] usb 1-1: Using ep0 maxpacket: 8 [ 491.100291][T12981] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 491.153328][T12981] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 491.188071][ T27] audit: type=1326 audit(1788782679.471:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17207 comm="syz.2.5927" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc17f9e159 code=0x7ffc0000 [ 491.193007][T12981] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 491.287849][T17202] xt_CT: No such helper "pptp" [ 491.296513][T12981] usb 1-1: Product: syz [ 491.300849][T12981] usb 1-1: Manufacturer: syz [ 491.324235][ T27] audit: type=1326 audit(1788782679.521:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17207 comm="syz.2.5927" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7fcc17f9e159 code=0x7ffc0000 [ 491.353432][T12981] usb 1-1: SerialNumber: syz [ 491.394986][ T27] audit: type=1326 audit(1788782679.521:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17207 comm="syz.2.5927" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc17f9e159 code=0x7ffc0000 [ 491.533353][ T27] audit: type=1326 audit(1788782679.521:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17207 comm="syz.2.5927" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc17f9e159 code=0x7ffc0000 [ 491.557648][ C0] vkms_vblank_simulate: vblank timer overrun [ 491.586319][T12981] usb 1-1: Handspring Visor / Palm OS: No valid connect info available [ 491.601303][T12981] usb 1-1: Handspring Visor / Palm OS: port 2, is for unknown use [ 491.609213][T12981] usb 1-1: Handspring Visor / Palm OS: port 11, is for unknown use [ 491.626509][T12981] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 491.656732][T17218] loop4: detected capacity change from 0 to 64 [ 491.791870][T12981] usb 1-1: palm_os_3_probe - error -71 getting bytes available request [ 491.810453][T12981] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 491.839476][T12981] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 491.908552][T12981] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 491.968883][T12981] usb 1-1: USB disconnect, device number 28 [ 492.024628][T12981] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 492.084132][T12981] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 492.115294][T12981] visor 1-1:1.0: device disconnected [ 492.370476][T17233] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5937'. [ 492.703911][T17244] netlink: 'syz.4.5946': attribute type 29 has an invalid length. [ 492.750990][T17244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5946'. [ 492.795770][T17244] netlink: 'syz.4.5946': attribute type 29 has an invalid length. [ 492.840933][T17244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5946'. [ 493.849767][T17281] x_tables: duplicate entry at hook 1 [ 494.435108][ T8465] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 494.445897][T17300] netlink: 'syz.3.5973': attribute type 21 has an invalid length. [ 494.454431][T17300] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5973'. [ 494.466118][T17300] netlink: 'syz.3.5973': attribute type 4 has an invalid length. [ 494.491682][T17300] netlink: 'syz.3.5973': attribute type 5 has an invalid length. [ 494.521079][T17300] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5973'. [ 494.656243][ T8465] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 494.680957][ T8465] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.698260][T17306] netlink: 'syz.2.5975': attribute type 7 has an invalid length. [ 494.711014][ T8465] usb 5-1: Product: syz [ 494.729535][ T8465] usb 5-1: Manufacturer: syz [ 494.750948][ T8465] usb 5-1: SerialNumber: syz [ 495.006988][ T8465] usb 5-1: unit 5 not found! [ 495.019435][T17313] loop2: detected capacity change from 0 to 512 [ 495.021679][ T8465] usb 5-1: unit 102 not found! [ 495.111030][ T8465] usb 5-1: USB disconnect, device number 36 [ 495.148358][T17313] EXT4-fs error (device loop2): mb_free_blocks:1839: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 495.238773][T17313] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #11: comm syz.2.5979: corrupted inode contents [ 495.301133][T17313] EXT4-fs error (device loop2): ext4_dirty_inode:6156: inode #11: comm syz.2.5979: mark_inode_dirty error [ 495.356633][T17313] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.5979: invalid indirect mapped block 1 (level 1) [ 495.369111][ T4529] udevd[4529]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 495.461448][T17313] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #11: comm syz.2.5979: corrupted inode contents [ 495.511469][T17313] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 495.554722][T17313] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #11: comm syz.2.5979: corrupted inode contents [ 495.611264][T17313] EXT4-fs error (device loop2): ext4_truncate:4325: inode #11: comm syz.2.5979: mark_inode_dirty error [ 495.686424][T17313] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 495.748163][T17313] EXT4-fs (loop2): 1 truncate cleaned up [ 495.760403][T17313] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 495.848674][T17325] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 495.856007][T17325] IPv6: NLM_F_CREATE should be set when creating new route [ 495.874996][T17313] EXT4-fs error (device loop2): ext4_lookup:1858: inode #12: comm syz.2.5979: iget: bogus i_mode (3355) [ 495.907001][T17329] syz.4.5984: attempt to access beyond end of device [ 495.907001][T17329] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 495.931069][T17328] IPVS: length: 15 != 8 [ 496.164421][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 496.661121][ T4325] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 496.874382][ T4325] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 496.882982][T12981] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 496.920948][ T4325] usb 4-1: config 8 has no interface number 0 [ 496.931270][ T4325] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 496.981584][ T4325] usb 4-1: config 8 interface 177 has no altsetting 0 [ 497.009098][ T4325] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 497.029434][ T4325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.072934][T17341] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 497.095398][T12981] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 497.132510][T12981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.170971][T12981] usb 3-1: Product: syz [ 497.190557][T12981] usb 3-1: Manufacturer: syz [ 497.210592][T12981] usb 3-1: SerialNumber: syz [ 497.299629][ T4325] usb 4-1: string descriptor 0 read error: -71 [ 497.321514][ C0] ir_toy 4-1:8.177: out urb status: -71 [ 497.348842][T17368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6004'. [ 497.459942][T12981] usb 3-1: unit 5 not found! [ 497.475482][T12981] usb 3-1: unit 102 not found! [ 497.568485][T12981] usb 3-1: USB disconnect, device number 29 [ 497.755806][ T27] audit: type=1326 audit(1788782686.041:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17375 comm="syz.0.6008" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc000f9e159 code=0x0 [ 497.831165][ T4325] ir_toy 4-1:8.177: could not write reset command: -110 [ 497.841576][ T4325] ir_toy: probe of 4-1:8.177 failed with error -110 [ 497.842608][ T4529] udevd[4529]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 497.864365][ T4325] usb 4-1: USB disconnect, device number 32 [ 497.978173][T17382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6011'. [ 498.031063][T17382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6011'. [ 498.111610][T17382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6011'. [ 498.140383][T17382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6011'. [ 498.211450][T17382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6011'. [ 498.253853][T17382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6011'. [ 498.289926][T17388] loop3: detected capacity change from 0 to 64 [ 498.299726][T17382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6011'. [ 498.356856][T17382] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 498.400648][T17382] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 498.419195][T17382] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 498.909823][T17405] binder: BC_ACQUIRE_RESULT not supported [ 498.948604][T17405] binder: 17404:17405 ioctl c0306201 200000000000 returned -22 [ 499.244112][T17412] loop2: detected capacity change from 0 to 2048 [ 499.367999][T17412] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 499.510797][T17421] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 499.786414][T17427] __nla_validate_parse: 79 callbacks suppressed [ 499.786447][T17427] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6032'. [ 499.958603][T17433] loop1: detected capacity change from 0 to 512 [ 500.171181][T17433] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 500.202617][T17433] ext4 filesystem being mounted at /1249/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 500.422649][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 501.351135][ T4325] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 501.521247][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.527673][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.564981][ T4325] usb 4-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 501.591795][ T4325] usb 4-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 501.609155][ T4325] usb 4-1: Product: syz [ 501.620936][ T4325] usb 4-1: Manufacturer: syz [ 501.635807][ T4325] usb 4-1: SerialNumber: syz [ 501.670141][ T4325] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 501.796235][ T22] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 501.857211][T17456] loop1: detected capacity change from 0 to 32768 [ 501.874898][ T8465] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 501.894279][T17456] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.6046 (17456) [ 501.939009][T17456] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 501.955243][T17456] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 501.966253][T17456] BTRFS info (device loop1): turning off barriers [ 501.974510][T17456] BTRFS info (device loop1): enabling auto defrag [ 501.984515][T17456] BTRFS info (device loop1): force zlib compression, level 3 [ 501.995916][ T22] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 502.007354][T17456] BTRFS info (device loop1): enabling ssd optimizations [ 502.015880][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.024188][T17456] BTRFS info (device loop1): using spread ssd allocation scheme [ 502.041517][T17456] BTRFS info (device loop1): using free space tree [ 502.055887][ T22] usb 1-1: Product: syz [ 502.067709][ T22] usb 1-1: Manufacturer: syz [ 502.074040][ T8465] usb 5-1: not running at top speed; connect to a high speed hub [ 502.074886][ T4325] vp7045: USB control message 'in' went wrong. [ 502.094432][ T22] usb 1-1: SerialNumber: syz [ 502.098608][ T4325] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 502.120795][ T8465] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 502.130429][ T4325] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 502.160164][ T4325] usb 4-1: USB disconnect, device number 33 [ 502.160532][ T8465] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.205741][ T8465] usb 5-1: Product: syz [ 502.210086][ T8465] usb 5-1: Manufacturer: syz [ 502.220183][ T8465] usb 5-1: SerialNumber: syz [ 502.249074][ T8465] keyspan 5-1:1.0: Keyspan 4 port adapter converter detected [ 502.287373][ T8465] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 502.319406][ T8465] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 502.341747][ T8465] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 502.372596][ T8465] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 502.390594][ T22] usb 1-1: unit 5 not found! [ 502.400427][ T22] usb 1-1: unit 102 not found! [ 502.457779][ T22] usb 1-1: USB disconnect, device number 29 [ 502.701425][ T4272] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 502.753284][ T5381] udevd[5381]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 502.797577][ T22] usb 5-1: USB disconnect, device number 37 [ 502.854431][ T22] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 502.924629][ T22] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 502.966893][ T22] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 503.022188][ T22] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 503.080713][ T22] keyspan 5-1:1.0: device disconnected [ 503.609950][T17516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6067'. [ 503.660446][T17516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6067'. [ 503.740213][T17516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6067'. [ 503.800095][T17516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6067'. [ 503.847448][T17516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6067'. [ 503.912306][T17516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6067'. [ 503.954133][T17516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6067'. [ 503.989537][T17516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6067'. [ 504.029715][T17516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6067'. [ 504.067351][T17516] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 504.109482][T17516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 504.135269][T17516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 504.238786][T17526] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 504.272453][T17526] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 504.672302][T17518] loop3: detected capacity change from 0 to 32768 [ 504.762204][T17518] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.6066 (17518) [ 504.899002][T17518] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 504.948482][T17518] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 505.020072][T17518] BTRFS info (device loop3): using free space tree [ 505.441189][T17518] BTRFS info (device loop3): enabling ssd optimizations [ 505.692001][ T4274] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 505.731252][ T4325] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 505.941842][ T4325] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 505.980987][ T4325] usb 2-1: config 220 has an invalid descriptor of length 255, skipping remainder of the config [ 506.032217][ T4325] usb 2-1: config 220 has no interface number 2 [ 506.079296][ T4325] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 506.138874][ T4325] usb 2-1: config 220 interface 0 has no altsetting 0 [ 506.176531][ T4325] usb 2-1: config 220 interface 76 has no altsetting 0 [ 506.212189][ T4325] usb 2-1: config 220 interface 1 has no altsetting 0 [ 506.270504][ T4325] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 506.320010][ T4325] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.353422][ T4325] usb 2-1: Product: syz [ 506.357678][ T4325] usb 2-1: Manufacturer: syz [ 506.396490][ T4325] usb 2-1: SerialNumber: syz [ 506.408073][T17590] loop4: detected capacity change from 0 to 8 [ 506.561129][T17594] __nla_validate_parse: 72 callbacks suppressed [ 506.561150][T17594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6084'. [ 506.641428][ T4325] usb 2-1: selecting invalid altsetting 0 [ 506.651773][T17594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6084'. [ 506.684335][ T4325] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 506.722116][T17594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6084'. [ 506.740939][ T4325] usb 2-1: No valid video chain found. [ 506.763046][T17594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6084'. [ 506.799150][T17594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6084'. [ 506.811332][ T4325] usb 2-1: selecting invalid altsetting 0 [ 506.817125][ T4325] usbtest: probe of 2-1:220.1 failed with error -22 [ 506.853343][T17594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6084'. [ 506.886027][ T4325] usb 2-1: USB disconnect, device number 26 [ 506.896515][T17598] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6093'. [ 506.921517][T17594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6084'. [ 506.966065][T17594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6084'. [ 507.041662][T17594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6084'. [ 507.080263][T17594] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 507.133734][T17594] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 507.260081][T17594] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl2: link becomes ready [ 507.980215][T17620] netlink: 'syz.4.6106': attribute type 1 has an invalid length. [ 508.091178][T17624] device vlan0 entered promiscuous mode [ 508.416618][T17637] loop3: detected capacity change from 0 to 164 [ 508.512632][T17637] Symlink component flag not implemented [ 508.518459][T17637] Symlink component flag not implemented (7) [ 509.840964][ T4322] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 510.020738][T17674] xt_TCPMSS: Only works on TCP SYN packets [ 510.051007][ T4322] usb 4-1: Using ep0 maxpacket: 8 [ 510.055605][T17642] loop1: detected capacity change from 0 to 32768 [ 510.063564][ T4322] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 510.119530][ T4322] usb 4-1: config 0 has an invalid interface number: 149 but max is -1 [ 510.166531][T17642] XFS (loop1): Mounting V5 Filesystem [ 510.172060][ T4322] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 510.172092][ T4322] usb 4-1: config 0 has no interface number 0 [ 510.172120][ T4322] usb 4-1: too many endpoints for config 0 interface 149 altsetting 215: 148, using maximum allowed: 30 [ 510.172162][ T4322] usb 4-1: config 0 interface 149 altsetting 215 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 510.384464][T17642] XFS (loop1): Ending clean mount [ 510.393951][ T4322] usb 4-1: config 0 interface 149 altsetting 215 endpoint 0x84 has invalid wMaxPacketSize 0 [ 510.456258][T17642] XFS (loop1): Quotacheck needed: Please wait. [ 510.490930][ T4322] usb 4-1: config 0 interface 149 altsetting 215 has 1 endpoint descriptor, different from the interface descriptor's value: 148 [ 510.568450][ T4322] usb 4-1: config 0 interface 149 has no altsetting 0 [ 510.581029][T17642] XFS (loop1): Quotacheck: Done. [ 510.610500][ T4322] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 510.676380][ T4322] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.702314][ T4322] usb 4-1: Product: syz [ 510.731942][ T4322] usb 4-1: Manufacturer: syz [ 510.736618][ T4322] usb 4-1: SerialNumber: syz [ 510.813019][ T4322] usb 4-1: config 0 descriptor?? [ 510.820099][ T4322] hub 4-1:0.149: bad descriptor, ignoring hub [ 510.880420][ T4322] hub: probe of 4-1:0.149 failed with error -5 [ 510.899541][ T4322] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.149/input/input25 [ 511.123618][ T4272] XFS (loop1): Unmounting Filesystem [ 511.137293][ T4322] usb 4-1: USB disconnect, device number 34 [ 511.837271][T17712] loop2: detected capacity change from 0 to 512 [ 511.945156][T17712] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806c018, mo2=0102] [ 511.961101][T17712] System zones: 1-12 [ 511.984984][T17712] EXT4-fs (loop2): orphan cleanup on readonly fs [ 512.041802][T17712] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 512.132231][T17712] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 512.248157][T17712] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.6148: attempt to clear invalid blocks 2 len 1 [ 512.349180][T17712] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.6148: invalid indirect mapped block 1819239214 (level 0) [ 512.412257][T17712] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.6148: invalid indirect mapped block 1819239214 (level 1) [ 512.476464][T17712] EXT4-fs (loop2): 1 truncate cleaned up [ 512.487159][T17712] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 512.601916][T17712] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 512.691938][T17712] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806c018, mo2=0102] [ 512.780968][T17712] EXT4-fs error (device loop2): __ext4_remount:6650: comm syz.2.6148: Abort forced by user [ 512.857924][T17712] EXT4-fs (loop2): Remounting filesystem read-only [ 512.881089][T17712] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 513.037949][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 513.181319][T17742] netlink: 'syz.3.6162': attribute type 3 has an invalid length. [ 513.297824][T17748] device ip6gre3 entered promiscuous mode [ 513.845086][T17764] __nla_validate_parse: 80 callbacks suppressed [ 513.845107][T17764] netlink: 12296 bytes leftover after parsing attributes in process `syz.1.6170'. [ 513.922418][T17764] netlink: 164 bytes leftover after parsing attributes in process `syz.1.6170'. [ 515.171097][T17808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6193'. [ 515.538272][T17818] comedi comedi1: fl512: a I/O base address must be specified [ 515.781102][ T955] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 515.954526][T17802] loop2: detected capacity change from 0 to 32768 [ 515.958756][T17826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6202'. [ 516.004565][ T955] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 516.017146][ T955] usb 2-1: config 0 has no interface number 0 [ 516.038353][ T955] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 516.043725][T17802] read_mapping_page failed! [ 516.063975][ T955] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 516.098818][ T955] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 516.118957][ T955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.131033][T17802] ERROR: (device loop2): txCommit: [ 516.131033][T17802] [ 516.190933][ T955] usb 2-1: Product: syz [ 516.195256][ T955] usb 2-1: Manufacturer: syz [ 516.218337][T17832] loop4: detected capacity change from 0 to 512 [ 516.226366][ T955] usb 2-1: SerialNumber: syz [ 516.235684][ T955] usb 2-1: config 0 descriptor?? [ 516.251746][T17816] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 516.282109][ T955] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 516.315366][ T955] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 516.378052][T17832] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806c018, mo2=0102] [ 516.389743][ T9871] read_mapping_page failed! [ 516.401473][ T9871] ERROR: (device loop2): txCommit: [ 516.401473][ T9871] [ 516.441366][T17832] System zones: 1-12 [ 516.446316][T17832] EXT4-fs (loop4): orphan cleanup on readonly fs [ 516.521486][ T9871] jfs_write_inode: jfs_commit_inode failed! [ 516.571053][T17832] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 516.641471][T17832] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 516.745332][T12981] usb 2-1: USB disconnect, device number 27 [ 516.773517][T12981] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 516.790437][T17832] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.6204: attempt to clear invalid blocks 2 len 1 [ 516.812825][T12981] cyberjack 2-1:0.69: device disconnected [ 516.833960][T17832] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.6204: invalid indirect mapped block 1819239214 (level 0) [ 516.929263][T17832] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.6204: invalid indirect mapped block 1819239214 (level 1) [ 516.971569][T17832] EXT4-fs (loop4): 1 truncate cleaned up [ 516.987649][T17832] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 517.070299][T17832] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 517.157462][T17832] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806c018, mo2=0102] [ 517.184602][T17832] EXT4-fs error (device loop4): __ext4_remount:6650: comm syz.4.6204: Abort forced by user [ 517.248397][T17832] EXT4-fs (loop4): Remounting filesystem read-only [ 517.265538][T17832] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 517.433440][ T8112] EXT4-fs (loop4): unmounting filesystem. [ 517.610211][T17856] binder: 17854:17856 unknown command 0 [ 517.643244][T17856] binder: 17854:17856 ioctl c0306201 2000000001c0 returned -22 [ 518.123558][T17873] xt_CT: You must specify a L4 protocol and not use inversions on it [ 518.401635][T17883] vers=2.0 not permitted when mounting with smb3 [ 518.401635][T17883] [ 518.438494][T17883] CIFS: VFS: vers=2.0 not permitted when mounting with smb3 [ 518.805708][T17898] CacheFiles: Empty tag specified [ 519.671222][T17921] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 519.999973][T17896] loop3: detected capacity change from 0 to 32768 [ 520.083602][T17896] XFS (loop3): Mounting V5 Filesystem [ 520.275929][T17896] XFS (loop3): Ending clean mount [ 520.296753][T17896] XFS (loop3): Quotacheck needed: Please wait. [ 520.440124][T17896] XFS (loop3): Quotacheck: Done. [ 520.708111][T17927] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 520.734417][ T4274] XFS (loop3): Unmounting Filesystem [ 521.092070][T17971] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6265'. [ 521.340241][T17977] device tunl0 left promiscuous mode [ 521.432617][T17977] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 521.455079][T17977] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 521.490495][T17977] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 521.876588][ T27] audit: type=1326 audit(521.839:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17996 comm="syz.0.6277" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc000f9e159 code=0x0 [ 521.916219][T12981] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 522.017008][ T4322] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 522.125725][T12981] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 522.141223][T12981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.162593][T12981] usb 5-1: config 0 descriptor?? [ 522.177161][T12981] cp210x 5-1:0.0: cp210x converter detected [ 522.221313][ T4322] usb 2-1: Using ep0 maxpacket: 32 [ 522.230039][ T4322] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 522.256732][ T4322] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 522.285204][ T4322] usb 2-1: config 0 interface 0 has no altsetting 0 [ 522.316975][ T4322] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 522.374981][ T4322] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.414004][ T4322] usb 2-1: Product: syz [ 522.441085][ T4322] usb 2-1: Manufacturer: syz [ 522.447333][ T4322] usb 2-1: SerialNumber: syz [ 522.471663][ T4325] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 522.486870][ T4322] usb 2-1: config 0 descriptor?? [ 522.576007][T18019] loop3: detected capacity change from 0 to 16 [ 522.577993][T12981] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 522.600233][T12981] cp210x 5-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 522.602115][T18019] erofs: (device loop3): mounted with root inode @ nid 36. [ 522.622141][T12981] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 522.640383][T12981] usb 5-1: cp210x converter now attached to ttyUSB0 [ 522.650506][T12981] usb 5-1: USB disconnect, device number 38 [ 522.672076][T12981] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 522.712964][ T4325] usb 1-1: config 160 has an invalid interface number: 200 but max is 0 [ 522.726951][T12981] cp210x 5-1:0.0: device disconnected [ 522.736196][ T4325] usb 1-1: config 160 has no interface number 0 [ 522.758754][ T4325] usb 1-1: config 160 interface 200 has no altsetting 0 [ 522.774382][ T4325] usb 1-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 522.808970][ T4325] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.843140][ T4325] usb 1-1: Product: syz [ 522.847465][ T4325] usb 1-1: Manufacturer: syz [ 522.883968][ T4325] usb 1-1: SerialNumber: syz [ 522.931695][ T4322] gs_usb 2-1:0.0: Couldn't get device config: (err=-71) [ 522.938801][ T4322] gs_usb: probe of 2-1:0.0 failed with error -71 [ 522.970240][ T4322] usb 2-1: USB disconnect, device number 28 [ 523.116540][ T4325] usb 1-1: MIDIStreaming interface descriptor not found [ 523.192090][ T4325] usb 1-1: USB disconnect, device number 30 [ 523.297419][ T8465] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 523.482813][ T8465] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 523.511073][ T8465] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 523.548718][ T8465] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 523.587908][ T8465] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 523.612861][T18041] netlink: 5 bytes leftover after parsing attributes in process `syz.1.6298'. [ 523.632267][ T8465] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.681573][ T8465] usb 3-1: invalid MIDI out EP 0 [ 523.763493][ T8465] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 523.908133][ T4266] udevd[4266]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 523.913749][ T8465] usb 3-1: USB disconnect, device number 30 [ 525.090515][T18077] loop4: detected capacity change from 0 to 2048 [ 525.222019][T18077] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 525.436335][T18083] loop1: detected capacity change from 0 to 4096 [ 525.483358][ T8112] EXT4-fs (loop4): unmounting filesystem. [ 525.643324][T18097] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 525.680902][T18101] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 526.290961][ T4322] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 526.491427][ T4322] usb 2-1: Using ep0 maxpacket: 32 [ 526.498853][ T4322] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 526.540752][ T4322] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 526.583041][ T4322] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 526.621021][ T4322] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.652017][ T4322] usb 2-1: config 0 descriptor?? [ 526.675255][ T4322] hub 2-1:0.0: USB hub found [ 526.867343][T18140] bond0: (slave macvtap0): Error: Device is in use and cannot be enslaved [ 526.884115][ T4322] hub 2-1:0.0: config failed, can't read hub descriptor (err -90) [ 526.910073][T18142] loop3: detected capacity change from 0 to 16 [ 526.938273][T18142] erofs: (device loop3): mounted with root inode @ nid 36. [ 527.108418][ T4322] usbhid 2-1:0.0: can't add hid device: -71 [ 527.132697][ T4322] usbhid: probe of 2-1:0.0 failed with error -71 [ 527.211654][ T4322] usb 2-1: USB disconnect, device number 29 [ 527.292704][T18152] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 527.308101][T18152] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 527.335838][T18152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 527.353764][T18152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 527.379817][T18152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 527.398193][T18152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 527.464940][T18152] device hsr0 left promiscuous mode [ 527.475731][T18152] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 527.519409][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 527.542817][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 527.574246][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 527.671256][ T4288] Bluetooth: hci0: command 0x080f tx timeout [ 527.784238][T18164] Scaler: ================= START STATUS ================= [ 527.830909][T18164] Scaler: ================== END STATUS ================== [ 528.399210][T18191] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 528.606831][T18187] xt_CT: No such helper "syz0" [ 528.872942][ T27] audit: type=1326 audit(528.839:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18205 comm="syz.1.6377" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9b39e159 code=0x7ffc0000 [ 528.942353][ T27] audit: type=1326 audit(528.839:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18205 comm="syz.1.6377" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9b39e159 code=0x7ffc0000 [ 529.021454][ T27] audit: type=1326 audit(528.879:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18205 comm="syz.1.6377" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f5c9b39e159 code=0x7ffc0000 [ 529.112294][ T27] audit: type=1326 audit(528.879:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18205 comm="syz.1.6377" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9b39e159 code=0x7ffc0000 [ 529.164611][ T27] audit: type=1326 audit(528.879:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18205 comm="syz.1.6377" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9b39e159 code=0x7ffc0000 [ 529.611424][T18234] tmpfs: Bad value for 'mpol' [ 529.806536][T18239] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 529.862157][T18239] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 529.931117][T18239] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 530.386441][T18252] loop3: detected capacity change from 0 to 8192 [ 530.452081][T18252] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 530.536650][T18252] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 530.546643][T18252] REISERFS (device loop3): using ordered data mode [ 530.551710][T18265] 9pnet: Found fid 0 not clunked [ 530.554973][T18252] reiserfs: using flush barriers [ 530.582106][T18252] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 530.619287][T18252] REISERFS (device loop3): checking transaction log (loop3) [ 530.661884][T18252] REISERFS (device loop3): Using r5 hash to sort names [ 530.674709][T18252] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 531.118963][T18281] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 531.183226][T18281] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 531.253255][T18281] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 531.301304][T18281] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 531.314622][T18289] Lens A: ================= START STATUS ================= [ 531.324534][T18281] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 531.344924][T18289] Lens A: Focus, Absolute: 0 [ 531.350299][T18289] Lens A: ================== END STATUS ================== [ 531.366558][T18281] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 531.395498][T18281] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 531.441160][T18281] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 531.461297][T18281] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 531.499405][T18281] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 531.531695][T18281] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 531.561993][T18281] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 531.602034][T18281] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 531.632498][T18281] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 531.690721][T18281] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 531.708899][T18281] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 531.738345][T18281] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 532.036502][T18309] netlink: 'syz.3.6428': attribute type 21 has an invalid length. [ 532.325850][T18320] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 532.361707][T18320] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 533.005738][T18344] cgroup: No subsys list or none specified [ 533.841622][T18374] MPI: mpi too large (107144 bits) [ 533.850233][T18376] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6461'. [ 533.859766][T18376] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6461'. [ 534.418666][T18398] loop1: detected capacity change from 0 to 512 [ 534.536441][T18398] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.6472: bg 0: block 5: invalid block bitmap [ 534.631228][T18398] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 534.687490][T18398] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.6472: invalid indirect mapped block 3 (level 2) [ 534.712718][T18398] EXT4-fs (loop1): 1 orphan inode deleted [ 534.722187][T18398] EXT4-fs (loop1): 1 truncate cleaned up [ 534.739178][T18398] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 535.023293][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 535.228807][T18412] syz.1.6476: attempt to access beyond end of device [ 535.228807][T18412] loop1: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 535.301290][T18412] gfs2: error 10 reading superblock [ 535.314382][T18415] syz.2.6479 (18415): drop_caches: 0 [ 535.411609][T18418] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[8112] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[18418] [ 535.601034][ T4322] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 535.701629][T18422] nvme nvme0: rdma connection establishment failed (-104) [ 535.813277][ T4322] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 535.855638][ T4322] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 535.864758][T18429] XFS (nbd4): no-recovery mounts must be read-only. [ 535.914777][ T4322] usb 1-1: config 0 has no interface number 0 [ 535.934374][ T4322] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 535.955943][ T4322] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 535.972108][ T4322] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 535.994133][ T4322] usb 1-1: config 0 interface 52 has no altsetting 0 [ 536.016755][ T4322] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 536.047928][ T4322] usb 1-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 536.069831][ T4322] usb 1-1: Product: syz [ 536.078822][ T4322] usb 1-1: SerialNumber: syz [ 536.112760][ T4322] usb 1-1: config 0 descriptor?? [ 536.345419][ T4322] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 536.369239][ T4322] synaptics_usb: probe of 1-1:0.52 failed with error -5 [ 536.451058][ T4379] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 536.580332][ T4322] usb 1-1: USB disconnect, device number 31 [ 536.643526][ T4379] usb 5-1: Using ep0 maxpacket: 16 [ 536.658665][ T4379] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 536.677464][T18427] comedi comedi1: reset error (fatal) [ 536.711903][ T4379] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 536.741060][ T4379] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.749132][ T4379] usb 5-1: Product: syz [ 536.779544][ T4379] usb 5-1: Manufacturer: syz [ 536.786348][ T4379] usb 5-1: SerialNumber: syz [ 536.793764][ T4379] r8152-cfgselector 5-1: config 0 descriptor?? [ 537.010033][ T4379] usbip-host 5-1: 5-1 is not in match_busid table... skip! [ 537.038858][ T4300] usb 5-1: config 0 descriptor?? [ 537.201152][ T4322] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 537.238933][ T4300] usb 5-1: can't set config #0, error -71 [ 537.239437][ T4379] usb 5-1: USB disconnect, device number 39 [ 537.279304][T18461] netlink: 'syz.0.6502': attribute type 6 has an invalid length. [ 537.401340][ T4322] usb 4-1: Using ep0 maxpacket: 32 [ 537.410110][ T4322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 52, changing to 7 [ 537.440967][T12981] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 537.459571][ T4322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 9272, setting to 1024 [ 537.493673][ T4322] usb 4-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 537.521211][ T4322] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.532811][ T4322] usb 4-1: Product: syz [ 537.537072][ T4322] usb 4-1: Manufacturer: syz [ 537.543322][ T4322] usb 4-1: SerialNumber: syz [ 537.568454][ T4322] usb 4-1: config 0 descriptor?? [ 537.633072][T12981] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 537.647451][T12981] usb 2-1: config 0 has no interface number 0 [ 537.661088][T12981] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 537.694403][T12981] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 537.711466][T12981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.731134][T12981] usb 2-1: Product: syz [ 537.741191][T12981] usb 2-1: Manufacturer: syz [ 537.745919][T12981] usb 2-1: SerialNumber: syz [ 537.763526][T12981] usb 2-1: config 0 descriptor?? [ 537.797853][ T4322] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input28 [ 537.811792][T12981] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 538.012978][ T4322] usb 4-1: USB disconnect, device number 35 [ 538.121037][T18481] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 538.272562][ T4325] usb 2-1: USB disconnect, device number 30 [ 538.293701][ T4325] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 538.578101][T18497] loop4: detected capacity change from 0 to 2048 [ 538.692167][T18499] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 538.937355][T18507] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 538.992062][T18511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6527'. [ 539.289876][T18521] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6531'. [ 539.359652][T18521] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6531'. [ 539.381026][T18527] XFS (nbd3): no-recovery mounts must be read-only. [ 539.461023][ T955] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 539.662196][ T955] usb 1-1: not running at top speed; connect to a high speed hub [ 539.691695][ T955] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 539.733572][ T955] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 539.806080][ T955] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 539.835830][ T955] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.884256][ T955] gspca_main: spca501-2.14.0 probing 0000:0000 [ 540.057880][T18548] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6545'. [ 540.286874][ T955] gspca_spca501: reg write: error -71 [ 540.292992][ T955] spca501 1-1:1.0: Reg write failed for 0x02,0xa048,0x00 [ 540.300116][ T955] spca501: probe of 1-1:1.0 failed with error -22 [ 540.341638][ T955] usb 1-1: Found UVC 1.00 device (0000:0000) [ 540.379366][ T955] usb 1-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 540.424836][ T955] uvcvideo 1-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 540.445497][ T955] uvcvideo 1-1:1.1: Failed to initialize the device (-5). [ 540.470633][ T955] usb 1-1: USB disconnect, device number 32 [ 540.721396][T18570] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 540.771330][ T6213] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 541.575714][T18600] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6569'. [ 541.696440][T18606] syz.4.6572: attempt to access beyond end of device [ 541.696440][T18606] loop4: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 541.717168][T18607] ax25_connect(): syz.3.6573 uses autobind, please contact jreuter@yaina.de [ 541.761865][T18606] gfs2: error 10 reading superblock [ 542.262551][T18627] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6583'. [ 542.309985][T18629] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6584'. [ 542.336143][T18629] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6584'. [ 542.357452][T18629] device vlan0 entered promiscuous mode [ 542.869092][T18645] loop2: detected capacity change from 0 to 2048 [ 542.937458][T18645] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 542.992244][T18651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6595'. [ 543.438141][T18665] jffs2: notice: (18665) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 543.941056][ T4325] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 544.107905][T18690] xt_hashlimit: size too large, truncated to 1048576 [ 544.142813][ T4325] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 544.160348][ T4325] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 544.204947][ T4325] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 544.237880][ T4325] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 544.251903][ T4325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.308730][ T4325] usb 5-1: invalid MIDI out EP 0 [ 544.382788][ T4325] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 544.441032][ T4322] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 544.448027][ T5381] udevd[5381]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 544.570981][ T4325] usb 5-1: USB disconnect, device number 40 [ 544.635271][ T4322] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 544.655663][ T4322] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.680635][ T4322] usb 3-1: Product: syz [ 544.691889][T18703] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 544.696076][ T4322] usb 3-1: Manufacturer: syz [ 544.725376][ T4322] usb 3-1: SerialNumber: syz [ 544.782578][ T4322] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 544.997544][ C0] usb 3-1: ath9k_htc: invalid pkt_len (ffef) [ 545.008390][ T27] audit: type=1326 audit(544.969:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18709 comm="syz.1.6623" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9b39e159 code=0x7ffc0000 [ 545.070698][ T27] audit: type=1326 audit(545.009:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18709 comm="syz.1.6623" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f5c9b39e159 code=0x7ffc0000 [ 545.203697][ T27] audit: type=1326 audit(545.009:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18709 comm="syz.1.6623" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9b39e159 code=0x7ffc0000 [ 545.216054][ T4325] usb 3-1: USB disconnect, device number 31 [ 545.447839][T18718] loop3: detected capacity change from 0 to 2048 [ 545.561667][ T955] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 545.782763][ T955] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 545.821937][ T955] usb 2-1: config 0 has no interface number 0 [ 545.828122][ T955] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 545.831274][ T4322] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 545.886932][ T955] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 545.891606][ T4322] ath9k_htc: Failed to initialize the device [ 545.903309][T18728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6632'. [ 545.923719][ T955] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 545.931466][ T4325] usb 3-1: ath9k_htc: USB layer deinitialized [ 545.981065][ T955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.993672][ T955] usb 2-1: Product: syz [ 545.997904][ T955] usb 2-1: Manufacturer: syz [ 546.020551][ T955] usb 2-1: SerialNumber: syz [ 546.052843][ T955] usb 2-1: config 0 descriptor?? [ 546.071814][T18714] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 546.102637][ T955] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 546.142282][ T955] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 546.534517][ T8465] usb 2-1: USB disconnect, device number 31 [ 546.567251][ T8465] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 546.617551][ T8465] cyberjack 2-1:0.69: device disconnected [ 547.032204][T18756] netlink: 'syz.4.6645': attribute type 10 has an invalid length. [ 547.170975][ T8465] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 547.363269][ T8465] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 547.388686][ T8465] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 547.418713][ T8465] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 547.463197][ T8465] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.484186][T18752] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 547.884288][ T8465] usb 3-1: USB disconnect, device number 32 [ 548.338537][T18782] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6658'. [ 548.503892][T18786] netlink: 'syz.1.6661': attribute type 2 has an invalid length. [ 548.581183][T18786] netlink: 'syz.1.6661': attribute type 8 has an invalid length. [ 548.588991][T18786] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6661'. [ 548.669770][T18792] loop4: detected capacity change from 0 to 2048 [ 548.788079][T18795] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 548.799376][T18792] syz.4.6664: attempt to access beyond end of device [ 548.799376][T18792] loop4: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048 [ 549.767360][T18832] loop2: detected capacity change from 0 to 128 [ 549.912288][T18832] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 550.137964][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 550.251133][ T955] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 550.443025][ T955] usb 5-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 550.483135][ T955] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.516256][ T955] usb 5-1: config 0 descriptor?? [ 550.541623][ T955] pwc: Creative Labs Webcam 5 detected. [ 550.757972][ T27] audit: type=1326 audit(550.719:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18864 comm="syz.3.6699" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369cd9e159 code=0x7ffc0000 [ 550.851129][ T27] audit: type=1326 audit(550.759:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18864 comm="syz.3.6699" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369cd9e159 code=0x7ffc0000 [ 550.931283][ T27] audit: type=1326 audit(550.759:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18864 comm="syz.3.6699" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369cd9e159 code=0x7ffc0000 [ 550.945647][ T955] pwc: send_video_command error -71 [ 550.981591][ T955] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 550.989233][ T955] Philips webcam: probe of 5-1:0.0 failed with error -71 [ 551.044253][ T955] usb 5-1: USB disconnect, device number 41 [ 551.050474][ T27] audit: type=1326 audit(550.759:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18864 comm="syz.3.6699" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f369cd9e159 code=0x7ffc0000 [ 551.201689][ T27] audit: type=1326 audit(550.759:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18864 comm="syz.3.6699" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369cd9e159 code=0x7ffc0000 [ 551.201803][T18879] IPv6: NLM_F_CREATE should be specified when creating new route [ 551.279621][ T27] audit: type=1326 audit(550.759:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18864 comm="syz.3.6699" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369cd9e159 code=0x7ffc0000 [ 551.380940][ T27] audit: type=1326 audit(550.769:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18864 comm="syz.3.6699" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f369cd9e159 code=0x7ffc0000 [ 551.496610][ T27] audit: type=1326 audit(550.769:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18864 comm="syz.3.6699" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f369cd9e159 code=0x7ffc0000 [ 551.811131][ T955] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 552.025051][ T955] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 552.057535][ T955] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 552.093488][ T955] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 552.148868][ T955] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 552.169413][ T955] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.231218][ T955] usb 4-1: invalid MIDI out EP 0 [ 552.313862][ T955] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 552.342787][ T5378] udevd[5378]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 552.410924][ T4325] usb 1-1: new low-speed USB device number 33 using dummy_hcd [ 552.470312][ T8465] usb 4-1: USB disconnect, device number 36 [ 552.603594][ T4325] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 552.636859][ T4325] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 552.656414][ T4325] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 552.698224][ T4325] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 552.719633][ T4325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.752414][T18909] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 552.772691][ T4325] hub 1-1:1.0: bad descriptor, ignoring hub [ 552.778676][ T4325] hub: probe of 1-1:1.0 failed with error -5 [ 552.799906][ T4325] cdc_wdm 1-1:1.0: skipping garbage [ 552.812213][ T4325] cdc_wdm 1-1:1.0: skipping garbage [ 552.817671][ T4325] cdc_wdm 1-1:1.0: skipping garbage [ 552.858517][ T4325] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 552.879555][ T4325] cdc_wdm 1-1:1.0: Unknown control protocol [ 553.161385][ T8465] usb 1-1: USB disconnect, device number 33 [ 553.204642][T18936] loop4: detected capacity change from 0 to 1024 [ 553.467342][T18922] loop1: detected capacity change from 0 to 32768 [ 553.604578][T18922] XFS (loop1): Mounting V5 Filesystem [ 553.657951][T18948] loop4: detected capacity change from 0 to 4096 [ 553.729540][T18948] EXT4-fs (loop4): Test dummy encryption mode enabled [ 553.750357][T18922] XFS (loop1): Ending clean mount [ 553.824498][T18948] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 553.851916][ T4272] XFS (loop1): Unmounting Filesystem [ 554.111515][ T8112] EXT4-fs (loop4): unmounting filesystem. [ 554.759710][T18987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6754'. [ 554.803661][T18985] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6744'. [ 554.825911][T18990] UBIFS error (pid: 18990): cannot open "ubi0/file0", error -22 [ 554.861260][T18985] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6744'. [ 555.053511][T18998] netlink: 'syz.4.6760': attribute type 30 has an invalid length. [ 555.060017][T18997] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6759'. [ 555.083770][T18998] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6760'. [ 555.139582][T18998] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 555.199748][T18998] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 556.649799][T19060] loop2: detected capacity change from 0 to 512 [ 556.682086][T19060] EXT4-fs: Ignoring removed nomblk_io_submit option [ 556.705214][T19062] kAFS: Can only specify source 'none' with -o dyn [ 556.752891][T19060] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 556.776021][T19060] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 556.800166][T19060] EXT4-fs (loop2): 1 truncate cleaned up [ 556.806338][T19060] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 556.874640][T19060] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #2: block 4: comm syz.2.6789: lblock 0 mapped to illegal pblock 4 (length 1) [ 556.918198][T19060] EXT4-fs (loop2): Remounting filesystem read-only [ 557.050964][ T8465] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 557.091925][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 557.264453][T19080] loop2: detected capacity change from 0 to 164 [ 557.273362][ T8465] usb 1-1: unable to get BOS descriptor or descriptor too short [ 557.292329][ T8465] usb 1-1: not running at top speed; connect to a high speed hub [ 557.321751][ T8465] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 557.330945][T19080] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 557.353290][ T8465] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 35, changing to 4 [ 557.370539][T19086] loop3: detected capacity change from 0 to 1024 [ 557.403524][ T8465] usb 1-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 557.431463][ T8465] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.468569][ T8465] usb 1-1: Product: syz [ 557.480028][ T8465] usb 1-1: Manufacturer: syz [ 557.516115][ T8465] usb 1-1: SerialNumber: syz [ 557.757330][ T8465] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 557.794490][ T8465] usb 1-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 557.808465][ T8465] usb 1-1: 2:1 : invalid channels 0 [ 557.850767][ T8465] usb 1-1: USB disconnect, device number 34 [ 558.115694][T19106] netlink: 'syz.3.6810': attribute type 1 has an invalid length. [ 558.374300][T19116] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6816'. [ 558.689430][T19126] sock: sock_timestamping_bind_phc: sock not bind to device [ 559.340930][ T4379] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 559.504421][T19151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6833'. [ 559.532906][ T4379] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 559.544813][ T4379] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 559.571004][ T4379] usb 5-1: config 220 has no interface number 2 [ 559.591029][ T4379] usb 5-1: config 220 interface 1 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 56 [ 559.620970][ T4379] usb 5-1: config 220 interface 1 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 559.666770][ T4379] usb 5-1: config 220 interface 1 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 559.703910][T19124] loop3: detected capacity change from 0 to 40427 [ 559.731146][ T4379] usb 5-1: config 220 interface 0 has no altsetting 0 [ 559.738004][ T4379] usb 5-1: config 220 interface 76 has no altsetting 0 [ 559.785458][T19124] F2FS-fs (loop3): invalid crc value [ 559.811186][ T4379] usb 5-1: config 220 interface 1 has no altsetting 0 [ 559.831537][T19124] F2FS-fs (loop3): Found nat_bits in checkpoint [ 559.853261][ T4379] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 559.901116][ T4379] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.934339][ T4379] usb 5-1: Product: syz [ 559.938584][ T4379] usb 5-1: Manufacturer: syz [ 559.981608][ T4379] usb 5-1: SerialNumber: syz [ 560.023759][T19162] netlink: 'syz.1.6837': attribute type 27 has an invalid length. [ 560.048604][T19124] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 560.101581][T19124] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 560.228537][ T4379] usb 5-1: selecting invalid altsetting 0 [ 560.243402][ T4379] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 560.281411][ T4379] usb 5-1: No valid video chain found. [ 560.308569][T19164] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 560.362706][ T4379] usb 5-1: selecting invalid altsetting 0 [ 560.388838][ T4379] usbtest: probe of 5-1:220.1 failed with error -22 [ 560.420426][ T4379] usb 5-1: USB disconnect, device number 42 [ 560.732316][T19178] nvme_fabrics: no handler found for transport fc-ôraddrR+ê0x333:pn-0x0444444444444444+host_traddr?nn-0x1111111111111111ð7—Ïxé¶:pn-0x22r222. [ 560.796679][ T27] audit: type=1326 audit(560.759:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19179 comm="syz.2.6845" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc17f9e159 code=0x7ffc0000 [ 560.871569][ T27] audit: type=1326 audit(560.759:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19179 comm="syz.2.6845" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc17f9e159 code=0x7ffc0000 [ 560.908563][ T27] audit: type=1326 audit(560.809:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19179 comm="syz.2.6845" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc17f9e159 code=0x7ffc0000 [ 561.041001][ T27] audit: type=1326 audit(560.809:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19179 comm="syz.2.6845" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc17f9e159 code=0x7ffc0000 [ 561.150171][ T27] audit: type=1326 audit(560.809:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19179 comm="syz.2.6845" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fcc17f9e159 code=0x7ffc0000 [ 561.277785][ T27] audit: type=1326 audit(560.809:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19179 comm="syz.2.6845" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc17f9e159 code=0x7ffc0000 [ 561.352639][ T27] audit: type=1326 audit(560.809:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19179 comm="syz.2.6845" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc17f9e159 code=0x7ffc0000 [ 561.439260][ T27] audit: type=1326 audit(560.829:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19179 comm="syz.2.6845" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fcc17f9e159 code=0x7ffc0000 [ 561.537878][ T27] audit: type=1326 audit(560.829:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19179 comm="syz.2.6845" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fcc17f9e159 code=0x7ffc0000 [ 561.594997][T19206] netlink: 'syz.1.6856': attribute type 21 has an invalid length. [ 561.680975][ T4379] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 561.894046][ T4379] usb 5-1: unable to get BOS descriptor or descriptor too short [ 561.912569][ T4379] usb 5-1: not running at top speed; connect to a high speed hub [ 561.922154][ T4379] usb 5-1: config 0 has an invalid interface number: 102 but max is 0 [ 561.951050][T19213] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 561.966103][ T4379] usb 5-1: config 0 has no interface number 0 [ 561.994036][ T4379] usb 5-1: New USB device found, idVendor=0bda, idProduct=0139, bcdDevice=45.70 [ 562.020206][T19218] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6861'. [ 562.021090][ T4379] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.059532][T19218] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6861'. [ 562.091267][ T4379] usb 5-1: Product: syz [ 562.095509][ T4379] usb 5-1: Manufacturer: syz [ 562.100144][ T4379] usb 5-1: SerialNumber: syz [ 562.147073][ T4379] usb 5-1: config 0 descriptor?? [ 562.154971][T19221] netlink: 'syz.2.6863': attribute type 1 has an invalid length. [ 562.379736][ T4379] rtsx_usb: probe of 5-1:0.102 failed with error -22 [ 562.411180][ T4379] usb 5-1: USB disconnect, device number 43 [ 562.540449][T19230] loop3: detected capacity change from 0 to 164 [ 562.619983][T19230] ISOFS: Bad logical zone size 2051 [ 562.661810][T19230] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 562.702740][T19234] loop2: detected capacity change from 0 to 8 [ 562.824687][T19234] SQUASHFS error: zlib decompression failed, data probably corrupt [ 562.853267][T19234] SQUASHFS error: Failed to read block 0x9b: -5 [ 562.859656][T19234] SQUASHFS error: Unable to read metadata cache entry [99] [ 562.907051][T19234] SQUASHFS error: Unable to read inode 0x104 [ 562.943314][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.949804][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.491231][ T4322] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 563.671963][ T7297] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 563.702482][ T4322] usb 2-1: Using ep0 maxpacket: 16 [ 563.709509][ T4322] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 563.742751][ T4322] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 563.775129][ T4322] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 563.801080][ T4322] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.819445][ T4322] usb 2-1: Product: syz [ 563.824272][ T4322] usb 2-1: Manufacturer: syz [ 563.828924][ T4322] usb 2-1: SerialNumber: syz [ 563.831103][ T955] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 563.844875][ T4322] r8152-cfgselector 2-1: config 0 descriptor?? [ 563.893257][ T7297] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 563.913732][ T7297] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 563.961866][ T7297] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 564.000885][ T7297] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 564.022081][ T7297] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 564.041081][ T7297] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.043127][ T955] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 564.072791][ T955] usb 3-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 564.073399][ T4322] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 564.086348][ T955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.098766][ T7297] usb 4-1: config 0 descriptor?? [ 564.120676][ T11] usb 2-1: config 0 descriptor?? [ 564.156892][ T955] usb 3-1: Product: syz [ 564.168043][ T955] usb 3-1: Manufacturer: syz [ 564.173054][ T955] usb 3-1: SerialNumber: syz [ 564.199144][ T955] usb 3-1: config 0 descriptor?? [ 564.225834][ T955] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 564.262767][T19283] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6893'. [ 564.306260][ T11] usb 2-1: can't set config #0, error -71 [ 564.306610][ T4322] usb 2-1: USB disconnect, device number 32 [ 564.324862][ T7297] hdpvr 4-1:0.0: firmware version 0x8 dated [ 564.477024][T19287] cgroup: noprefix used incorrectly [ 564.491022][ T8225] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 564.542135][ T7297] hdpvr 4-1:0.0: device init failed [ 564.547463][ T7297] hdpvr: probe of 4-1:0.0 failed with error -12 [ 564.569604][ T7297] usb 4-1: USB disconnect, device number 37 [ 564.632157][ T955] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 564.639060][ T955] gspca_pac7302: probe of 3-1:0.0 failed with error -71 [ 564.659816][ T955] usb 3-1: USB disconnect, device number 33 [ 564.683527][ T8225] usb 1-1: config 0 has an invalid interface number: 120 but max is 0 [ 564.701210][ T8225] usb 1-1: config 0 has no interface number 0 [ 564.707625][ T8225] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 564.729998][ T8225] usb 1-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 564.759821][ T8225] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.783644][ T8225] usb 1-1: config 0 descriptor?? [ 564.799452][ T8225] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.120/input/input30 [ 564.995905][ T7297] usb 1-1: USB disconnect, device number 35 [ 565.066740][T19295] loop1: detected capacity change from 0 to 4096 [ 565.107260][T19295] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 565.148659][T19295] ntfs: volume version 3.1. [ 565.454560][T19307] netlink: 292 bytes leftover after parsing attributes in process `syz.4.6905'. [ 566.636412][T19299] loop3: detected capacity change from 0 to 40427 [ 566.681426][T19299] F2FS-fs (loop3): Fix alignment : internally, start(4096) end(16896) block(12288) [ 566.721600][T19299] F2FS-fs (loop3): invalid crc value [ 566.732973][T19299] F2FS-fs (loop3): Found nat_bits in checkpoint [ 566.882817][T19299] F2FS-fs (loop3): recover fsync data on readonly fs [ 566.907608][T19299] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 566.951136][T19299] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 566.962040][T19299] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 567.071578][T19299] F2FS-fs (loop3): Try to recover all the superblocks, ret: 0 [ 567.816593][T19382] block nbd4: NBD_DISCONNECT [ 568.861376][ T7297] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 569.057188][ T7297] usb 5-1: Using ep0 maxpacket: 8 [ 569.064309][ T7297] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 569.070968][ T955] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 569.097591][ T7297] usb 5-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 569.122546][ T7297] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.149702][ T7297] usb 5-1: Product: syz [ 569.161172][ T7297] usb 5-1: Manufacturer: syz [ 569.165882][ T7297] usb 5-1: SerialNumber: syz [ 569.185517][ T7297] usb 5-1: config 0 descriptor?? [ 569.199932][ T7297] cdc_ether 5-1:0.0: skipping garbage [ 569.241282][ T7297] cdc_ether 5-1:0.0: skipping garbage [ 569.255132][T19432] loop2: detected capacity change from 0 to 256 [ 569.262322][ T7297] cdc_ether 5-1:0.0: invalid descriptor buffer length [ 569.269282][ T7297] usb 5-1: bad CDC descriptors [ 569.281056][ T955] usb 4-1: Using ep0 maxpacket: 32 [ 569.288784][ T955] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 569.311470][ T7297] usb 5-1: unsupported MDLM descriptors [ 569.317505][ T7297] cdc_acm 5-1:0.0: skipping garbage [ 569.336110][ T7297] cdc_acm 5-1:0.0: skipping garbage [ 569.355109][ T7297] cdc_acm 5-1:0.0: invalid descriptor buffer length [ 569.361048][ T955] usb 4-1: config 0 has no interface number 0 [ 569.398416][ T955] usb 4-1: config 0 interface 196 has no altsetting 0 [ 569.404166][ T4325] usb 5-1: USB disconnect, device number 44 [ 569.424212][ T955] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 569.463578][ T955] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 569.492649][ T955] usb 4-1: Product: syz [ 569.502770][ T955] usb 4-1: Manufacturer: syz [ 569.512794][ T955] usb 4-1: SerialNumber: syz [ 569.553774][ T955] usb 4-1: config 0 descriptor?? [ 569.764101][ T955] ipheth 4-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 569.788578][ T955] ipheth: probe of 4-1:0.196 failed with error -71 [ 569.831326][ T955] usb 4-1: USB disconnect, device number 38 [ 569.861055][ T7297] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 570.062798][ T7297] usb 3-1: config 0 has an invalid interface number: 3 but max is 0 [ 570.091025][ T7297] usb 3-1: config 0 has no interface number 0 [ 570.123052][ T7297] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 570.162759][ T7297] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.194353][ T7297] usb 3-1: config 0 descriptor?? [ 570.215093][ T7297] ums-realtek 3-1:0.3: USB Mass Storage device detected [ 570.279826][T19457] loop1: detected capacity change from 0 to 2048 [ 570.407130][ T4325] usb 3-1: USB disconnect, device number 34 [ 570.426806][T19461] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 570.445401][T19457] syz.1.6973: attempt to access beyond end of device [ 570.445401][T19457] loop1: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048 [ 570.941082][ T4325] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 571.030948][ T8225] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 571.103826][ T27] audit: type=1326 audit(571.069:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19479 comm="syz.2.6986" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc17f9e159 code=0x7ffc0000 [ 571.137519][ T4325] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 571.164802][ T4325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.189262][ T27] audit: type=1326 audit(571.069:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19479 comm="syz.2.6986" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc17f9e159 code=0x7ffc0000 [ 571.190956][ T4325] usb 5-1: Product: syz [ 571.236553][ T27] audit: type=1326 audit(571.099:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19479 comm="syz.2.6986" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc17f9e159 code=0x7ffc0000 [ 571.257930][ T4325] usb 5-1: Manufacturer: syz [ 571.273951][ T4325] usb 5-1: SerialNumber: syz [ 571.284357][ T8225] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 571.293751][ T4325] usb 5-1: config 0 descriptor?? [ 571.298701][ T8225] usb 2-1: config 0 has no interface number 0 [ 571.298740][ T8225] usb 2-1: config 0 interface 41 has no altsetting 0 [ 571.301167][ T8225] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 571.318236][ T4325] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 571.338275][ T27] audit: type=1326 audit(571.099:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19479 comm="syz.2.6986" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7fcc17f9e159 code=0x7ffc0000 [ 571.371906][ T8225] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.390170][ T8225] usb 2-1: Product: syz [ 571.395488][ T8225] usb 2-1: Manufacturer: syz [ 571.400227][ T8225] usb 2-1: SerialNumber: syz [ 571.420964][ T27] audit: type=1326 audit(571.099:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19479 comm="syz.2.6986" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc17f9e159 code=0x7ffc0000 [ 571.440618][ T8225] usb 2-1: config 0 descriptor?? [ 571.491870][T19488] loop2: detected capacity change from 0 to 4096 [ 571.495642][ T27] audit: type=1326 audit(571.099:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19479 comm="syz.2.6986" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc17f9e159 code=0x7ffc0000 [ 571.516416][T19488] ntfs: (device loop2): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 571.521769][ C0] vkms_vblank_simulate: vblank timer overrun [ 571.540222][ T27] audit: type=1326 audit(571.099:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19479 comm="syz.2.6986" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc17f9e159 code=0x7ffc0000 [ 571.564129][ T7297] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 571.579878][ T27] audit: type=1326 audit(571.099:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19479 comm="syz.2.6986" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fcc17f9e159 code=0x7ffc0000 [ 571.603412][ C0] vkms_vblank_simulate: vblank timer overrun [ 571.612381][ T27] audit: type=1326 audit(571.099:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19479 comm="syz.2.6986" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fcc17f9e159 code=0x7ffc0000 [ 571.635966][ C0] vkms_vblank_simulate: vblank timer overrun [ 571.659535][T19488] ntfs: volume version 3.1. [ 571.727579][ T4325] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 571.748499][ T4325] sq905c 5-1:0.0: Reading version command failed [ 571.775577][ T4325] sq905c: probe of 5-1:0.0 failed with error -71 [ 571.804410][ T4325] usb 5-1: USB disconnect, device number 45 [ 571.823026][ T7297] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 571.861753][ T7297] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 571.871956][T19493] loop3: detected capacity change from 0 to 2048 [ 571.881873][ T8225] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 571.893553][ T7297] usb 1-1: config 220 has no interface number 2 [ 571.899970][ T7297] usb 1-1: config 220 interface 1 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 56 [ 571.910514][ T8225] CoreChips: probe of 2-1:0.41 failed with error -71 [ 571.913604][ T8225] usb 2-1: USB disconnect, device number 33 [ 571.954433][ T7297] usb 1-1: config 220 interface 1 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 571.964851][ T7297] usb 1-1: config 220 interface 1 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 571.994399][ T7297] usb 1-1: config 220 interface 0 has no altsetting 0 [ 572.000216][T19493] syz.3.6992: attempt to access beyond end of device [ 572.000216][T19493] loop3: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048 [ 572.007803][ T7297] usb 1-1: config 220 interface 76 has no altsetting 0 [ 572.017162][T19495] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 572.023318][ T7297] usb 1-1: config 220 interface 1 has no altsetting 0 [ 572.052845][ T7297] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 572.080188][ T7297] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.120990][ T7297] usb 1-1: Product: syz [ 572.130933][ T7297] usb 1-1: Manufacturer: syz [ 572.145889][ T7297] usb 1-1: SerialNumber: syz [ 572.384660][ T7297] usb 1-1: selecting invalid altsetting 0 [ 572.411637][ T7297] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 572.418099][ T7297] usb 1-1: No valid video chain found. [ 572.468626][ T7297] usb 1-1: selecting invalid altsetting 0 [ 572.484511][ T7297] usbtest: probe of 1-1:220.1 failed with error -22 [ 572.524206][ T7297] usb 1-1: USB disconnect, device number 36 [ 572.903757][T19518] loop3: detected capacity change from 0 to 128 [ 572.938061][T19518] EXT4-fs (loop3): Test dummy encryption mode enabled [ 573.021437][T19518] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 573.089677][T19525] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7006'. [ 573.152654][T19526] loop2: detected capacity change from 0 to 2048 [ 573.240002][T19528] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 573.268968][T19526] syz.2.7005: attempt to access beyond end of device [ 573.268968][T19526] loop2: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048 [ 573.321365][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 573.763365][T19545] netlink: 'syz.3.7016': attribute type 11 has an invalid length. [ 574.215080][T12981] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 574.241079][ T7297] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 574.414407][T12981] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 574.439338][T12981] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 574.452139][ T7297] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 574.480981][ T7297] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 574.492754][T12981] usb 2-1: config 220 has no interface number 2 [ 574.499537][T12981] usb 2-1: config 220 interface 1 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 56 [ 574.524678][ T7297] usb 4-1: config 0 has no interface number 0 [ 574.532775][ T7297] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 574.571136][T12981] usb 2-1: config 220 interface 1 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 574.585127][ T7297] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 574.619264][T12981] usb 2-1: config 220 interface 1 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 574.645623][ T7297] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 574.669296][T12981] usb 2-1: config 220 interface 0 has no altsetting 0 [ 574.681005][ T7297] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.699457][T12981] usb 2-1: config 220 interface 76 has no altsetting 0 [ 574.706777][ T7297] usb 4-1: Product: syz [ 574.720947][T12981] usb 2-1: config 220 interface 1 has no altsetting 0 [ 574.727982][ T7297] usb 4-1: Manufacturer: syz [ 574.733430][ T7297] usb 4-1: SerialNumber: syz [ 574.741971][T12981] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 574.767587][T12981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.781567][ T7297] usb 4-1: config 0 descriptor?? [ 574.798301][T12981] usb 2-1: Product: syz [ 574.808453][T12981] usb 2-1: Manufacturer: syz [ 574.818602][T12981] usb 2-1: SerialNumber: syz [ 575.002499][T19555] loop4: detected capacity change from 0 to 40427 [ 575.012806][T19555] F2FS-fs (loop4): invalid crc value [ 575.081868][T12981] usb 2-1: selecting invalid altsetting 0 [ 575.098977][T19555] F2FS-fs (loop4): Found nat_bits in checkpoint [ 575.110106][T12981] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 575.140453][T12981] usb 2-1: No valid video chain found. [ 575.185047][T12981] usb 2-1: selecting invalid altsetting 0 [ 575.195454][ T7297] usbtouchscreen: probe of 4-1:0.117 failed with error -71 [ 575.222409][ T7297] usb 4-1: USB disconnect, device number 39 [ 575.231364][T12981] usbtest: probe of 2-1:220.1 failed with error -22 [ 575.261635][T12981] usb 2-1: USB disconnect, device number 34 [ 575.310741][T19555] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 575.417430][T19583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7033'. [ 575.417601][T19555] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 575.831312][T12981] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 576.032789][T12981] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 576.063133][T12981] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 576.087462][T12981] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 576.118050][T12981] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 576.128142][ T7297] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 576.160957][T12981] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 576.190479][T12981] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.233112][T12981] usb 1-1: config 0 descriptor?? [ 576.346144][ T7297] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 576.387784][ T7297] usb 5-1: config 0 interface 0 has no altsetting 0 [ 576.408317][ T7297] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 576.421188][T19611] netlink: 'syz.3.7047': attribute type 2 has an invalid length. [ 576.428290][ T7297] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 576.441026][T19611] netlink: 119 bytes leftover after parsing attributes in process `syz.3.7047'. [ 576.451792][T12981] hdpvr 1-1:0.0: firmware version 0x8 dated [ 576.466003][ T7297] usb 5-1: Product: syz [ 576.480464][ T7297] usb 5-1: Manufacturer: syz [ 576.486849][ T7297] usb 5-1: SerialNumber: syz [ 576.510098][ T7297] usb 5-1: config 0 descriptor?? [ 576.529766][ T7297] usb 5-1: selecting invalid altsetting 0 [ 576.660743][T12981] hdpvr 1-1:0.0: device init failed [ 576.679591][T12981] hdpvr: probe of 1-1:0.0 failed with error -12 [ 576.709747][T12981] usb 1-1: USB disconnect, device number 37 [ 576.900647][ T4325] usb 5-1: USB disconnect, device number 46 [ 577.121187][T19629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7056'. [ 577.160966][T19629] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7056'. [ 577.210241][T19633] device veth3 entered promiscuous mode [ 578.681684][T19648] loop1: detected capacity change from 0 to 32768 [ 578.802509][T19648] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 578.942883][T19648] (syz.1.7064,19648,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 578.970970][T19648] (syz.1.7064,19648,1):ocfs2_search_chain:1783 ERROR: status = -12 [ 578.990996][T19648] (syz.1.7064,19648,1):ocfs2_search_chain:1893 ERROR: status = -12 [ 579.033347][T19648] (syz.1.7064,19648,1):ocfs2_claim_suballoc_bits:1972 ERROR: status = -12 [ 579.081214][T19648] (syz.1.7064,19648,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -12 [ 579.120434][T19648] (syz.1.7064,19648,1):ocfs2_claim_new_inode:2248 ERROR: status = -12 [ 579.160971][T19648] (syz.1.7064,19648,1):ocfs2_claim_new_inode:2263 ERROR: status = -12 [ 579.181234][T19648] (syz.1.7064,19648,1):ocfs2_mknod_locked:639 ERROR: status = -12 [ 579.189242][T19648] (syz.1.7064,19648,1):ocfs2_mknod:385 ERROR: status = -12 [ 579.215157][T19654] loop4: detected capacity change from 0 to 32768 [ 579.231292][T19648] (syz.1.7064,19648,0):ocfs2_mknod:502 ERROR: status = -12 [ 579.394086][ T4272] ocfs2: Unmounting device (7,1) on (node local) [ 579.415077][T19654] XFS (loop4): Mounting V5 Filesystem [ 579.471486][T19693] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 4294915582 out of range (51000000..2150000000) [ 579.515547][T19654] XFS (loop4): Ending clean mount [ 579.812541][ T8112] XFS (loop4): Unmounting Filesystem [ 580.916378][T19734] misc userio: Invalid payload size [ 581.200917][ T8225] usb 5-1: new low-speed USB device number 47 using dummy_hcd [ 581.402980][ T8225] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 581.423607][ T8225] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 581.459511][ T8225] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 581.490936][ T8225] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 581.533707][ T8225] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.572569][T19736] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 581.591716][ T8225] hub 5-1:1.0: bad descriptor, ignoring hub [ 581.597714][ T8225] hub: probe of 5-1:1.0 failed with error -5 [ 581.617694][T19755] loop3: detected capacity change from 0 to 2048 [ 581.624844][ T8225] cdc_wdm 5-1:1.0: skipping garbage [ 581.634486][ T8225] cdc_wdm 5-1:1.0: skipping garbage [ 581.644620][ T8225] cdc_wdm 5-1:1.0: skipping garbage [ 581.671219][ T8225] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 581.675221][T19755] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 581.687592][ T8225] cdc_wdm 5-1:1.0: Unknown control protocol [ 581.726164][T19755] NILFS (loop3): mounting unchecked fs [ 581.777147][T19755] NILFS (loop3): recovery complete [ 581.804025][T19764] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 581.855571][T12981] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 581.941118][ T4325] usb 5-1: USB disconnect, device number 47 [ 582.093092][T12981] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 582.120985][T12981] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 12336, setting to 64 [ 582.150970][T12981] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 582.182720][T19771] loop3: detected capacity change from 0 to 2048 [ 582.201000][T12981] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.226890][T19771] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 582.240380][T12981] usb 1-1: config 0 descriptor?? [ 582.245638][ T4325] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 582.447470][ T4325] usb 3-1: Using ep0 maxpacket: 16 [ 582.455307][ T4325] usb 3-1: config 0 has too many interfaces: 66, using maximum allowed: 32 [ 582.490473][T12981] ath6kl: Failed to submit usb control message: -71 [ 582.501030][T12981] ath6kl: unable to send the bmi data to the device: -71 [ 582.519210][ T4325] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 66 [ 582.538631][T12981] ath6kl: Unable to send get target info: -71 [ 582.556344][ T4325] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 582.571171][T12981] ath6kl: Failed to init ath6kl core: -71 [ 582.605712][ T4325] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.620903][ T4325] usb 3-1: Product: syz [ 582.631112][ T4325] usb 3-1: Manufacturer: syz [ 582.638196][ T4325] usb 3-1: SerialNumber: syz [ 582.661604][ T4325] r8152-cfgselector 3-1: config 0 descriptor?? [ 582.712058][T12981] ath6kl_usb: probe of 1-1:0.0 failed with error -71 [ 582.729287][T12981] usb 1-1: USB disconnect, device number 38 [ 582.904218][ T4325] r8152-cfgselector 3-1: Unknown version 0x0000 [ 582.933044][ T4325] r8152-cfgselector 3-1: USB disconnect, device number 35 [ 583.430128][T12981] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 583.613456][T12981] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 583.631162][T12981] usb 5-1: config 0 has no interface number 0 [ 583.657726][T12981] usb 5-1: config 0 interface 41 has no altsetting 0 [ 583.705970][T12981] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 583.741341][T12981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.779995][T12981] usb 5-1: Product: syz [ 583.799544][T12981] usb 5-1: Manufacturer: syz [ 583.811180][T12981] usb 5-1: SerialNumber: syz [ 583.828075][T12981] usb 5-1: config 0 descriptor?? [ 584.210691][T19834] sock: sock_timestamping_bind_phc: sock not bind to device [ 584.284108][T12981] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 584.314499][T12981] CoreChips: probe of 5-1:0.41 failed with error -71 [ 584.345075][T12981] usb 5-1: USB disconnect, device number 48 [ 584.922724][ T27] audit: type=1400 audit(584.889:255): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=19851 comm="syz.1.7159" [ 584.996892][T19854] loop2: detected capacity change from 0 to 1024 [ 585.285518][T19862] loop1: detected capacity change from 0 to 256 [ 585.347567][T19865] loop4: detected capacity change from 0 to 512 [ 585.408289][T19865] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 585.438343][T19865] EXT4-fs (loop4): 1 truncate cleaned up [ 585.444455][T19865] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 585.464491][T19865] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 585.503294][ T8112] EXT4-fs (loop4): unmounting filesystem. [ 585.673383][ T4325] ------------[ cut here ]------------ [ 585.679689][ T4325] WARNING: CPU: 0 PID: 4325 at net/netfilter/nft_set_pipapo.c:2384 nft_pipapo_destroy+0x87d/0x8e0 [ 585.690541][ T4325] Modules linked in: [ 585.694588][ T4325] CPU: 0 PID: 4325 Comm: kworker/0:9 Not tainted syzkaller #0 [ 585.702406][ T4325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 585.712564][ T4325] Workqueue: events nf_tables_trans_destroy_work [ 585.719132][ T4325] RIP: 0010:nft_pipapo_destroy+0x87d/0x8e0 [ 585.725149][ T4325] Code: 24 80 3c 18 00 74 08 4c 89 f7 e8 ee 50 48 f9 49 c7 06 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 13 13 f7 f8 <0f> 0b e9 e0 f7 ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c ea f9 [ 585.745000][ T4325] RSP: 0018:ffffc90004847a68 EFLAGS: 00010293 [ 585.751248][ T4325] RAX: ffffffff888b2e7d RBX: ffff88807ff368f0 RCX: ffff888026a58000 [ 585.759260][ T4325] RDX: 0000000000000000 RSI: ffff88807ff36800 RDI: ffff888026f9ed28 [ 585.767382][ T4325] RBP: ffffc90004847c30 R08: ffff888026a58000 R09: 0000000000000008 [ 585.775433][ T4325] R10: 0000000000000018 R11: 0000000000000000 R12: ffff88807ff368c0 [ 585.783484][ T4325] R13: dffffc0000000000 R14: ffff88807ff36910 R15: dffffc0000000000 [ 585.791526][ T4325] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 585.800504][ T4325] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 585.807187][ T4325] CR2: 0000200000000200 CR3: 0000000047cf9000 CR4: 00000000003506f0 [ 585.815257][ T4325] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 585.823315][ T4325] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 585.831356][ T4325] Call Trace: [ 585.834742][ T4325] [ 585.837765][ T4325] nft_set_destroy+0x489/0xa30 [ 585.842660][ T4325] ? __kmem_cache_free+0xb6/0x200 [ 585.847801][ T4325] nf_tables_trans_destroy_work+0xc5d/0xf00 [ 585.853810][ T4325] ? nft_object_dump+0x1e0/0x1e0 [ 585.858822][ T4325] ? _raw_spin_unlock_irq+0x1f/0x40 [ 585.864215][ T4325] ? process_one_work+0x7b4/0x1160 [ 585.869429][ T4325] process_one_work+0x8ab/0x1160 [ 585.874470][ T4325] ? worker_detach_from_pool+0x240/0x240 [ 585.880157][ T4325] ? _raw_spin_lock_irq+0xb7/0xf0 [ 585.885290][ T4325] ? _raw_spin_lock_irqsave+0x100/0x100 [ 585.891009][ T4325] ? wq_worker_running+0x97/0x190 [ 585.896155][ T4325] worker_thread+0xaf5/0x12a0 [ 585.901302][ T4325] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 585.907365][ T4325] kthread+0x29d/0x330 [ 585.911581][ T4325] ? worker_clr_flags+0x1a0/0x1a0 [ 585.916646][ T4325] ? kthread_blkcg+0xd0/0xd0 [ 585.921326][ T4325] ret_from_fork+0x1f/0x30 [ 585.925821][ T4325] [ 585.928874][ T4325] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 585.936187][ T4325] CPU: 0 PID: 4325 Comm: kworker/0:9 Not tainted syzkaller #0 [ 585.943683][ T4325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 585.953777][ T4325] Workqueue: events nf_tables_trans_destroy_work [ 585.960157][ T4325] Call Trace: [ 585.963459][ T4325] [ 585.966416][ T4325] dump_stack_lvl+0x188/0x24e [ 585.971200][ T4325] ? memcpy+0x3c/0x60 [ 585.975269][ T4325] ? show_regs_print_info+0x12/0x12 [ 585.980509][ T4325] ? load_image+0x410/0x410 [ 585.985083][ T4325] panic+0x2d3/0x710 [ 585.989020][ T4325] ? bpf_jit_dump+0xd0/0xd0 [ 585.993571][ T4325] ? ret_from_fork+0x1f/0x30 [ 585.998204][ T4325] __warn+0x2f8/0x4f0 [ 586.002225][ T4325] ? nft_pipapo_destroy+0x87d/0x8e0 [ 586.007469][ T4325] ? nft_pipapo_destroy+0x87d/0x8e0 [ 586.012708][ T4325] report_bug+0x2ba/0x4f0 [ 586.017137][ T4325] ? nft_pipapo_destroy+0x87d/0x8e0 [ 586.022386][ T4325] handle_bug+0x3a/0x70 [ 586.026582][ T4325] exc_invalid_op+0x16/0x40 [ 586.031129][ T4325] asm_exc_invalid_op+0x16/0x20 [ 586.036017][ T4325] RIP: 0010:nft_pipapo_destroy+0x87d/0x8e0 [ 586.041865][ T4325] Code: 24 80 3c 18 00 74 08 4c 89 f7 e8 ee 50 48 f9 49 c7 06 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 13 13 f7 f8 <0f> 0b e9 e0 f7 ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c ea f9 [ 586.061734][ T4325] RSP: 0018:ffffc90004847a68 EFLAGS: 00010293 [ 586.067931][ T4325] RAX: ffffffff888b2e7d RBX: ffff88807ff368f0 RCX: ffff888026a58000 [ 586.075956][ T4325] RDX: 0000000000000000 RSI: ffff88807ff36800 RDI: ffff888026f9ed28 [ 586.083967][ T4325] RBP: ffffc90004847c30 R08: ffff888026a58000 R09: 0000000000000008 [ 586.091976][ T4325] R10: 0000000000000018 R11: 0000000000000000 R12: ffff88807ff368c0 [ 586.099987][ T4325] R13: dffffc0000000000 R14: ffff88807ff36910 R15: dffffc0000000000 [ 586.108010][ T4325] ? nft_pipapo_destroy+0x87d/0x8e0 [ 586.113270][ T4325] ? nft_pipapo_destroy+0x87d/0x8e0 [ 586.118532][ T4325] nft_set_destroy+0x489/0xa30 [ 586.123342][ T4325] ? __kmem_cache_free+0xb6/0x200 [ 586.128415][ T4325] nf_tables_trans_destroy_work+0xc5d/0xf00 [ 586.134372][ T4325] ? nft_object_dump+0x1e0/0x1e0 [ 586.139441][ T4325] ? _raw_spin_unlock_irq+0x1f/0x40 [ 586.144691][ T4325] ? process_one_work+0x7b4/0x1160 [ 586.149842][ T4325] process_one_work+0x8ab/0x1160 [ 586.154837][ T4325] ? worker_detach_from_pool+0x240/0x240 [ 586.160522][ T4325] ? _raw_spin_lock_irq+0xb7/0xf0 [ 586.165585][ T4325] ? _raw_spin_lock_irqsave+0x100/0x100 [ 586.171186][ T4325] ? wq_worker_running+0x97/0x190 [ 586.176250][ T4325] worker_thread+0xaf5/0x12a0 [ 586.180986][ T4325] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 586.186938][ T4325] kthread+0x29d/0x330 [ 586.191037][ T4325] ? worker_clr_flags+0x1a0/0x1a0 [ 586.196096][ T4325] ? kthread_blkcg+0xd0/0xd0 [ 586.200731][ T4325] ret_from_fork+0x1f/0x30 [ 586.205221][ T4325] [ 586.208394][ T4325] Kernel Offset: disabled [ 586.212893][ T4325] Rebooting in 86400 seconds..