last executing test programs: 2.029393432s ago: executing program 4 (id=7472): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_drop_memb(r0, 0x107, 0x2, 0x0, 0x0) 1.815632504s ago: executing program 0 (id=7476): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00030000000000000000000000000000000000000000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8000000000002100000000000000bb050005002b0000000a00000000000000fc01000000020000000200000000000000000000000000000800", @ANYRES16=r0], 0xe0}}, 0x0) 1.775936048s ago: executing program 4 (id=7478): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, 0x0, &(0x7f0000000040)) 1.744747002s ago: executing program 0 (id=7479): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountstats\x00') pread64(r0, &(0x7f00000024c0)=""/239, 0xef, 0x35) 1.654475081s ago: executing program 4 (id=7482): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0xfff9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xdc}}, 0x0) 1.645550852s ago: executing program 0 (id=7483): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x483c9007eeee2994, 0x1000}, 0x20) 1.608912785s ago: executing program 0 (id=7484): setuid(0xee01) socket(0xa, 0x3, 0x87) 1.570046069s ago: executing program 0 (id=7486): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xa, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000700000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x0, 0x10, 0xfffffef3, &(0x7f0000000880)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f00000008c0)=""/8, 0x5562, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.483629418s ago: executing program 4 (id=7488): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) write$sequencer(r0, &(0x7f0000000dc0)=[@t={0x81, 0x3, 0x9, 0xb5}, @e={0xff, 0x1, 0x3, 0x4, @SEQ_NOTEON=@note=0x45, 0xf0, 0x3, 0x1}], 0x10) 1.438888883s ago: executing program 0 (id=7491): syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee000000410902240001fa0000000904000000ff"], 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) 1.428132494s ago: executing program 4 (id=7492): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f00000011c0)=""/159, 0x9f, 0x1c0000000) 1.305154946s ago: executing program 4 (id=7495): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000180)=ANY=[]) 1.046597623s ago: executing program 3 (id=7503): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0x0, 0xb, 0x801, 0x0, 0x0, {0x1}, [@NFTA_COMPAT_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x10) 996.790218ms ago: executing program 3 (id=7505): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000440)={'veth0\x00', &(0x7f00000001c0)=@ethtool_per_queue_op={0x4b, 0xf}}) 909.065547ms ago: executing program 3 (id=7507): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) shutdown(r0, 0x0) 908.582037ms ago: executing program 3 (id=7509): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$DM_TARGET_MSG(r0, 0xc138fd0e, &(0x7f0000000880)={0x4, 0x0, 0x0, 0x170, 0x138, 0x0, 0x0, 0x8200, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, {0x0, @stats_create={'@stats_create ', '0+8', 0x20, '8', ' 1 precise_timestamps'}}}) 861.478842ms ago: executing program 3 (id=7511): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000001080)={0x4, "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"}) 815.408686ms ago: executing program 3 (id=7512): syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x25a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x1000, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) open(&(0x7f0000001bc0)='./file1\x00', 0x86442, 0x10) 300.853879ms ago: executing program 1 (id=7524): r0 = socket(0x40000000015, 0x5, 0x0) getpeername$inet(r0, 0x0, 0x0) 275.403142ms ago: executing program 2 (id=7525): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000002240)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1, 0x37, 0x0) 257.331134ms ago: executing program 1 (id=7526): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000140), 0x4) 174.933282ms ago: executing program 2 (id=7527): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) mount$9p_fd(0x0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000440), 0x1000000, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) 174.819262ms ago: executing program 1 (id=7528): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840, 0x42c04}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x4}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x24) 166.813173ms ago: executing program 2 (id=7529): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f00000000c0)={'wlan0\x00'}) 132.979207ms ago: executing program 2 (id=7530): r0 = socket$can_j1939(0x1d, 0x2, 0x7) accept(r0, 0x0, 0x0) 96.510011ms ago: executing program 2 (id=7531): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8948, &(0x7f00000001c0)={'bond0\x00', @random="d8b30100"}) 65.443543ms ago: executing program 1 (id=7532): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001840), 0x41, 0x0) write$nbd(r0, &(0x7f0000001880)=ANY=[@ANYBLOB="01"], 0x40) 36.997606ms ago: executing program 2 (id=7533): timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000380)=0x0) timer_settime(r0, 0x1, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 503.34µs ago: executing program 1 (id=7534): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x18, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}}, 0x0) 0s ago: executing program 1 (id=7535): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x20, 0xfffe, 0x832}) kernel console output (not intermixed with test programs): 16772] loop2: detected capacity change from 0 to 1024 [ 319.866976][ T4552] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 320.069806][ T7059] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 320.098649][ T7924] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 320.116871][ T7924] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 320.148726][ T7924] usb 4-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 320.184801][ T7924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.226762][ T4552] usb 2-1: not running at top speed; connect to a high speed hub [ 320.326959][ T4552] usb 2-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 320.343978][ T4552] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 320.355937][ T4552] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 320.370632][T16791] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5545'. [ 320.376844][ T4552] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 320.406920][ T4552] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.433487][ T4552] usb 2-1: config 0 descriptor?? [ 320.478733][ T7924] ttusb_dec_send_command: result bulk message failed: error -22 [ 320.500757][ T7924] ttusb-dec: probe of 4-1:1.0 failed with error -22 [ 320.513442][ T7924] usb 4-1: USB disconnect, device number 19 [ 320.564201][T16797] loop0: detected capacity change from 0 to 2048 [ 320.646641][ T7059] usb 5-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.02 [ 320.657203][T16797] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 320.664996][ T7059] usb 5-1: New USB device strings: Mfr=0, Product=232, SerialNumber=255 [ 320.696876][ T7059] usb 5-1: Product: syz [ 320.701444][ T7059] usb 5-1: SerialNumber: syz [ 320.710853][ T4552] usb 2-1: USB disconnect, device number 25 [ 320.744255][ T7059] usb 5-1: config 0 descriptor?? [ 320.762720][T16799] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 321.036783][ T7059] ldusb 5-1:0.0: Interrupt in endpoint not found [ 321.074827][ T7059] usb 5-1: USB disconnect, device number 19 [ 321.207676][T16819] Filesystem uses "unknown" compression. This is not supported [ 321.636331][ T8298] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 321.731567][T16852] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5577'. [ 321.845839][T16823] XFS (loop3): Mounting V5 Filesystem [ 321.959014][ T8298] usb 1-1: not running at top speed; connect to a high speed hub [ 322.024227][T16823] XFS (loop3): Ending clean mount [ 322.047989][ T8298] usb 1-1: config 1 has an invalid descriptor of length 122, skipping remainder of the config [ 322.067424][T16878] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 322.076467][ T8298] usb 1-1: config 1 interface 1 has no altsetting 0 [ 322.092496][ T8298] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 322.129376][ T8298] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.177481][ T4197] XFS (loop3): Unmounting Filesystem [ 322.209042][ T8298] usb 1-1: Found UVC 1.00 device (046d:0825) [ 322.241219][ T8298] usb 1-1: selecting invalid altsetting 0 [ 322.348996][T16894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5595'. [ 322.416522][ T8298] usb 1-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 322.438779][ T8298] uvcvideo 1-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 322.476912][ T8298] uvcvideo 1-1:1.1: Failed to initialize the device (-5). [ 322.484475][ T8298] usb 1-1: selecting invalid altsetting 0 [ 322.529996][ T8298] usb 1-1: selecting invalid altsetting 0 [ 322.535906][ T8298] usbtest: probe of 1-1:1.1 failed with error -22 [ 322.577545][ T8298] usb 1-1: USB disconnect, device number 28 [ 322.829275][T16910] set_capacity_and_notify: 3 callbacks suppressed [ 322.829292][T16910] loop2: detected capacity change from 0 to 2048 [ 322.930653][T16910] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 323.177195][T16922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5609'. [ 323.197697][T16922] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 323.289323][T16900] loop1: detected capacity change from 0 to 40427 [ 323.328552][T16900] F2FS-fs (loop1): build fault injection attr: rate: 14, type: 0x1ffff [ 323.346513][T16900] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0xe4 [ 323.384941][T16900] F2FS-fs (loop1): invalid crc value [ 323.425385][T16900] F2FS-fs (loop1): Found nat_bits in checkpoint [ 323.466489][ T8298] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 323.533857][T16900] F2FS-fs (loop1) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x44e/0xaa0 [ 323.549305][T16908] loop4: detected capacity change from 0 to 32768 [ 323.649312][T16900] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 323.694267][T16951] netlink: 800 bytes leftover after parsing attributes in process `syz.0.5618'. [ 323.702427][T16908] XFS (loop4): Mounting V5 Filesystem [ 323.704503][T16951] netlink: 1301 bytes leftover after parsing attributes in process `syz.0.5618'. [ 323.727992][ T8298] usb 3-1: Using ep0 maxpacket: 32 [ 323.847564][ T8298] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.865749][ T8298] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 323.961538][T16908] XFS (loop4): Ending clean mount [ 324.033830][ T4194] XFS (loop4): Unmounting Filesystem [ 324.046811][ T8298] usb 3-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0 [ 324.066204][ T8298] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.123099][ T8298] usb 3-1: Product: syz [ 324.139302][ T8298] usb 3-1: Manufacturer: syz [ 324.144061][ T8298] usb 3-1: SerialNumber: syz [ 324.179007][ T8298] usb 3-1: config 0 descriptor?? [ 324.237612][ T8298] qmi_wwan 3-1:0.0: bogus CDC Union: master=1, slave=0 [ 324.244776][ T8298] qmi_wwan: probe of 3-1:0.0 failed with error -22 [ 324.473219][ T7540] usb 3-1: USB disconnect, device number 21 [ 324.776052][T16966] loop0: detected capacity change from 0 to 32768 [ 324.815607][T16966] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.5626 (16966) [ 324.886477][T16966] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 324.900864][T16962] loop3: detected capacity change from 0 to 40427 [ 324.923757][T16966] BTRFS info (device loop0): force zlib compression, level 3 [ 324.954899][T16966] BTRFS info (device loop0): allowing degraded mounts [ 324.965972][T16986] x_tables: duplicate entry at hook 3 [ 324.972070][T16966] BTRFS info (device loop0): setting nodatasum [ 325.000617][T16966] BTRFS info (device loop0): allowing degraded mounts [ 325.020702][T16962] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 325.045480][T16966] BTRFS info (device loop0): using free space tree [ 325.055952][T16962] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 325.072918][T16966] BTRFS info (device loop0): has skinny extents [ 325.113818][T16992] netlink: 'syz.1.5637': attribute type 15 has an invalid length. [ 325.147581][T16962] F2FS-fs (loop3): Found nat_bits in checkpoint [ 325.271358][T17014] x_tables: duplicate underflow at hook 3 [ 325.355890][T16962] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 325.395586][T16962] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 325.653821][T17035] x_tables: duplicate entry at hook 3 [ 325.828938][T17043] x_tables: duplicate underflow at hook 3 [ 325.855810][T17042] netlink: 'syz.2.5652': attribute type 15 has an invalid length. [ 325.897352][ T4552] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 326.034908][T17049] loop2: detected capacity change from 0 to 2048 [ 326.106055][T17049] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 326.199301][ T4552] usb 2-1: Using ep0 maxpacket: 32 [ 326.213195][T17057] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 326.224718][T17049] attempt to access beyond end of device [ 326.224718][T17049] loop2: rw=524288, want=33554432, limit=2048 [ 326.255138][T17058] loop0: detected capacity change from 0 to 1024 [ 326.311439][T17049] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 326.338227][ T4552] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.350372][T17049] NILFS error (device loop2): nilfs_bmap_last_key: broken bmap (inode number=16) [ 326.363564][ T4552] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 326.377338][T17049] NILFS (loop2): error -5 truncating bmap (ino=16) [ 326.556569][ T4552] usb 2-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0 [ 326.565714][ T4552] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.588953][T17064] xt_HMARK: spi-set and port-set can't be combined [ 326.597002][ T4552] usb 2-1: Product: syz [ 326.601325][ T4552] usb 2-1: Manufacturer: syz [ 326.618689][ T4552] usb 2-1: SerialNumber: syz [ 326.627143][ T1216] hfsplus: b-tree write err: -5, ino 25 [ 326.632998][ T1216] hfsplus: b-tree write err: -5, ino 4 [ 326.657052][ T4552] usb 2-1: config 0 descriptor?? [ 326.663419][ T1216] hfsplus: b-tree write err: -5, ino 2 [ 326.711488][ T4552] qmi_wwan 2-1:0.0: bogus CDC Union: master=1, slave=0 [ 326.739835][ T4552] qmi_wwan: probe of 2-1:0.0 failed with error -22 [ 326.775671][T17071] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 326.942240][ T4552] usb 2-1: USB disconnect, device number 26 [ 327.027268][T17083] loop0: detected capacity change from 0 to 2048 [ 327.045861][T17086] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5673'. [ 327.140200][T17088] loop3: detected capacity change from 0 to 2048 [ 327.180960][T17091] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 327.200088][T17088] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 327.292681][T17060] loop4: detected capacity change from 0 to 40427 [ 327.323713][T17094] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 327.324737][T17088] attempt to access beyond end of device [ 327.324737][T17088] loop3: rw=524288, want=33554432, limit=2048 [ 327.352354][T17060] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 327.374850][T17060] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 327.462911][T17088] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 327.528636][T17102] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 327.551149][T17060] F2FS-fs (loop4): Found nat_bits in checkpoint [ 327.596820][T17088] NILFS error (device loop3): nilfs_bmap_last_key: broken bmap (inode number=16) [ 327.606015][T17088] NILFS (loop3): error -5 truncating bmap (ino=16) [ 327.646432][T17107] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 327.721174][T17107] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.5679: invalid indirect mapped block 32768 (level 2) [ 327.803978][T17060] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 327.812147][T17107] EXT4-fs (loop1): 1 orphan inode deleted [ 327.837684][T17060] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 327.854418][T17107] EXT4-fs (loop1): 1 truncate cleaned up [ 327.880707][T17107] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 327.949604][T17107] EXT4-fs error (device loop1): empty_inline_dir:1890: inode #12: block 7: comm syz.1.5679: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=784, size=60 fake=0 [ 328.026569][T17107] EXT4-fs warning (device loop1): empty_inline_dir:1897: bad inline directory (dir #12) - inode 13, rec_len 784, name_len 5inline size 60 [ 328.093103][T17116] set_capacity_and_notify: 1 callbacks suppressed [ 328.093123][T17116] loop2: detected capacity change from 0 to 2048 [ 328.134309][T17119] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 328.153800][T17116] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 328.178691][T17116] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 328.221677][T17116] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 328.244993][T17116] UDF-fs: Scanning with blocksize 512 failed [ 328.280626][T17116] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 328.323146][T17116] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 328.354927][T17116] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 328.375533][T17116] UDF-fs: Scanning with blocksize 1024 failed [ 328.396890][T17116] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 328.413148][T17116] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 328.424420][T17116] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 328.497034][T17116] UDF-fs: Scanning with blocksize 2048 failed [ 328.559790][T17128] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5690'. [ 328.572326][T17116] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 328.591613][T17128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5690'. [ 328.601512][T17129] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5689'. [ 328.617694][T17116] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=384, location=384 [ 328.662738][T17116] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 328.689326][T17116] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 328.715954][T17116] UDF-fs: Scanning with blocksize 4096 failed [ 328.740037][T17116] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 328.803550][T17135] loop0: detected capacity change from 0 to 2048 [ 328.866523][T17135] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 328.953821][T17142] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 328.965173][T17135] attempt to access beyond end of device [ 328.965173][T17135] loop0: rw=524288, want=33554432, limit=2048 [ 329.005066][T17144] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5696'. [ 329.064669][T17135] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 329.115451][T17135] NILFS error (device loop0): nilfs_bmap_last_key: broken bmap (inode number=16) [ 329.142240][T17135] NILFS (loop0): error -5 truncating bmap (ino=16) [ 329.360874][T17164] IPv6: Can't replace route, no match found [ 329.436093][T17131] loop1: detected capacity change from 0 to 32768 [ 329.456966][T17168] program syz.4.5707 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 329.480168][T17131] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.5691 (17131) [ 329.482288][T17171] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5709'. [ 329.533601][T17131] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 329.566495][T17131] BTRFS info (device loop1): force zlib compression, level 3 [ 329.595816][T17131] BTRFS info (device loop1): allowing degraded mounts [ 329.637405][T17131] BTRFS info (device loop1): setting nodatasum [ 329.654296][T17131] BTRFS info (device loop1): allowing degraded mounts [ 329.697653][T17131] BTRFS info (device loop1): using free space tree [ 329.704219][T17131] BTRFS info (device loop1): has skinny extents [ 329.796688][T17189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5718'. [ 329.946057][T17211] netlink: 232 bytes leftover after parsing attributes in process `syz.2.5722'. [ 330.486024][ T7059] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 330.640139][T17249] netlink: 232 bytes leftover after parsing attributes in process `syz.0.5740'. [ 330.897077][ T7059] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 330.917601][ T7059] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 331.106801][ T7059] usb 4-1: New USB device found, idVendor=0710, idProduct=8001, bcdDevice= 1.00 [ 331.126488][ T7059] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.134584][ T7059] usb 4-1: Product: syz [ 331.166272][ T7059] usb 4-1: Manufacturer: syz [ 331.178230][ T7059] usb 4-1: SerialNumber: syz [ 331.238145][ T7059] whiteheat 4-1:1.0: Connect Tech - WhiteHEAT converter detected [ 331.258148][T17277] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5753'. [ 331.446607][ T7059] usb 4-1: Connect Tech - WhiteHEAT: Couldn't send command [-71] [ 331.454484][ T7059] usb 4-1: Connect Tech - WhiteHEAT: Unable to retrieve firmware version, try replugging [ 331.456548][ T8298] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 331.480987][ T7059] usb 4-1: Connect Tech - WhiteHEAT: If the firmware is not running (status led not blinking) [ 331.495700][ T7059] usb 4-1: Connect Tech - WhiteHEAT: please contact support@connecttech.com [ 331.547868][T17297] loop0: detected capacity change from 0 to 36864 [ 331.558523][ T7059] usb 4-1: USB disconnect, device number 20 [ 331.633106][T17297] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 331.684934][T17297] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 331.734556][T17297] EXT4-fs (loop0): Mount option "nouser_xattr" will be removed by 3.5 [ 331.734556][T17297] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 331.734556][T17297] [ 331.754099][ T8298] usb 5-1: Using ep0 maxpacket: 32 [ 331.849790][T17297] EXT4-fs (loop0): mounted filesystem without journal. Opts: mblk_io_submit,jqfmt=vfsv0,nouser_xattr,init_itable,,errors=continue. Quota mode: writeback. [ 331.876481][ T8298] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 331.884656][ T8298] usb 5-1: config 0 has no interface number 0 [ 331.892310][ T8298] usb 5-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 331.919301][ T8298] usb 5-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 332.096630][ T8298] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 332.114787][ T8298] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.123570][ T8298] usb 5-1: Product: syz [ 332.136572][ T8298] usb 5-1: Manufacturer: syz [ 332.141351][ T8298] usb 5-1: SerialNumber: syz [ 332.156062][ T8298] usb 5-1: config 0 descriptor?? [ 332.166512][ T7924] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 332.198196][ T8298] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 332.406661][ T8298] usb 5-1: qt2_setup_urbs - submit read urb failed -90 [ 332.414196][ T8298] quatech2: probe of 5-1:0.51 failed with error -90 [ 332.608062][ T7924] usb 3-1: config index 0 descriptor too short (expected 65152, got 36) [ 332.626410][ T4552] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 332.636722][ T7924] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 332.667654][ T7057] usb 5-1: USB disconnect, device number 20 [ 332.847775][ T7924] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 332.866178][ T7924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.878136][ T7924] usb 3-1: Product: syz [ 332.882357][ T7924] usb 3-1: Manufacturer: syz [ 332.899801][ T7924] usb 3-1: SerialNumber: syz [ 332.957908][ T7924] rtl8150 3-1:1.0: couldn't find required endpoints [ 332.974952][ T7924] rtl8150: probe of 3-1:1.0 failed with error -5 [ 333.006683][ T4552] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 333.024616][ T4552] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 333.194344][ T8298] usb 3-1: USB disconnect, device number 22 [ 333.209276][ T4552] usb 1-1: New USB device found, idVendor=0710, idProduct=8001, bcdDevice= 1.00 [ 333.228819][ T4552] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.260359][ T4552] usb 1-1: Product: syz [ 333.264696][ T4552] usb 1-1: Manufacturer: syz [ 333.280216][ T4552] usb 1-1: SerialNumber: syz [ 333.358717][ T4552] whiteheat 1-1:1.0: Connect Tech - WhiteHEAT converter detected [ 333.576637][ T4552] usb 1-1: Connect Tech - WhiteHEAT: Couldn't send command [-71] [ 333.586774][ T4552] usb 1-1: Connect Tech - WhiteHEAT: Unable to retrieve firmware version, try replugging [ 333.608517][ T4552] usb 1-1: Connect Tech - WhiteHEAT: If the firmware is not running (status led not blinking) [ 333.608854][T17402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5812'. [ 333.629885][ T4552] usb 1-1: Connect Tech - WhiteHEAT: please contact support@connecttech.com [ 333.666729][T17402] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 333.678493][T17402] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 333.684310][ T4552] usb 1-1: USB disconnect, device number 29 [ 333.707776][T17402] device bridge3 entered promiscuous mode [ 333.727235][T17404] loop1: detected capacity change from 0 to 2048 [ 333.768484][T17404] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 333.848940][T17404] UDF-fs: unknown compression code (0) [ 333.856516][ T1109] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 333.923977][T17414] netlink: 766 bytes leftover after parsing attributes in process `syz.2.5820'. [ 334.002609][T17417] tmpfs: Bad value for 'mpol' [ 334.029494][T17418] loop1: detected capacity change from 0 to 256 [ 334.047933][T17420] netlink: 'syz.2.5823': attribute type 3 has an invalid length. [ 334.119956][T17425] loop3: detected capacity change from 0 to 1764 [ 334.216697][ T1109] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 334.254025][ T1109] usb 5-1: config 0 has no interface number 0 [ 334.260948][T17425] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 334.261732][T17430] netlink: 'syz.0.5829': attribute type 32 has an invalid length. [ 334.286421][ T1109] usb 5-1: config 0 interface 41 has no altsetting 0 [ 334.456440][ T1109] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 334.476051][ T1109] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.495196][ T1109] usb 5-1: Product: syz [ 334.500214][ T1109] usb 5-1: Manufacturer: syz [ 334.505006][ T1109] usb 5-1: SerialNumber: syz [ 334.542949][ T1109] usb 5-1: config 0 descriptor?? [ 334.589227][T17446] loop0: detected capacity change from 0 to 64 [ 334.656753][T17450] cifs: Unknown parameter 'h}# [ 334.656753][T17450] [bIT&:"1:ӭ'4,Zz-#F<]%gC [ 334.656753][T17450] SȘȞZ6' [ 334.834181][T17452] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.909894][T17457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5842'. [ 334.948203][T17457] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 334.976423][T17457] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 334.988530][T17457] device bridge5 entered promiscuous mode [ 335.026443][ T1109] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 335.049234][T17452] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.057631][ T1109] CoreChips: probe of 5-1:0.41 failed with error -71 [ 335.096532][ T1109] usb 5-1: USB disconnect, device number 21 [ 335.155430][T17462] netlink: 'syz.2.5843': attribute type 32 has an invalid length. [ 335.227770][T17452] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.242915][T17464] loop2: detected capacity change from 0 to 1764 [ 335.293421][T17464] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 335.331131][T17442] loop3: detected capacity change from 0 to 32768 [ 335.375359][T17452] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.459888][T17442] [ 335.459888][T17442] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 335.459888][T17442] [ 335.590571][ T4197] [ 335.590571][ T4197] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 335.590571][ T4197] [ 335.623501][ T4197] [ 335.623501][ T4197] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 335.623501][ T4197] [ 335.781367][T17484] netlink: 'syz.4.5855': attribute type 12 has an invalid length. [ 335.796673][T17482] loop3: detected capacity change from 0 to 33280 [ 335.840780][ T21] kernel write not supported for file /input/mice (pid: 21 comm: kworker/1:0) [ 335.882096][T17482] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 335.904096][T17482] EXT4-fs (loop3): 1 truncate cleaned up [ 335.911489][T17482] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,noinit_itable,dax=inode,,errors=continue. Quota mode: writeback. [ 335.969045][T17482] EXT4-fs (loop3): re-mounted. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,noinit_itable,dax=inode,. Quota mode: writeback. [ 336.309214][T17502] loop4: detected capacity change from 0 to 33280 [ 336.455536][T17502] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 336.482261][T17509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5866'. [ 336.571559][T17509] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5866'. [ 336.810948][T17520] loop0: detected capacity change from 0 to 256 [ 336.894963][T17520] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 336.965827][T17520] 9pnet: Unknown protocol version 99b9f9aNS9mN39gΙ漹`.bm_LAB$A k=ĂX3 [ 336.965827][T17520] ryA P (6 [ 336.965827][T17520] [ 336.965827][T17520] xp]P$>( % J72MA\pKP>T nn *;*AՠZP= j{:}A^@P?h4  &AӠYn 7p{# [ 336.965827][T17520] w{½pi~ ?_/#WXMx<6< O߅3\Cx>1^ }} D(()+e씝brQ.M)/ [ 336.965827][T17520] RAJT [ 336.965827][T17520] QTPQ*Jũ89rTJQi*Me TQy*O"Ft;AwНt'UjTjPMIզTP]KէԐR#jD15ԜSKjIԖR;jG=uԑ:R'D3u.ԕR7Fݩ;ԓzR%QC}/4 Di0!4pN#hQ4ޠ14x@)iM4Fh͠Y4flKsiͣ"ZBKh)-JeR)V [ 337.127809][T17534] loop1: detected capacity change from 0 to 4096 [ 337.371437][T17551] delete_channel: no stack [ 337.422569][T17554] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 337.433227][T17554] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 337.586559][ T21] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 337.605160][T17568] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5895'. [ 337.717621][T17576] netlink: 'syz.0.5899': attribute type 1 has an invalid length. [ 337.846427][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 337.960156][T17574] ntfs: (device loop1): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 337.971706][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.986853][T17574] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 337.993353][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.003986][T17574] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 338.032664][ T21] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 338.056514][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.075183][T17574] ntfs: volume version 3.1. [ 338.084693][ T21] usb 5-1: config 0 descriptor?? [ 338.127240][ T7057] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 338.138201][ T21] hub 5-1:0.0: USB hub found [ 338.299068][ T667] ntfs: (device loop1): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 338.320910][ T667] ntfs: (device loop1): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 338.351745][ T4187] ntfs: (device loop1): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 338.364138][ T21] hub 5-1:0.0: 10 ports detected [ 338.376835][ T7057] usb 3-1: Using ep0 maxpacket: 16 [ 338.386502][ T21] hub 5-1:0.0: insufficient power available to use all downstream ports [ 338.516521][ T7057] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.531973][ T7057] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 338.545364][ T7057] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 338.554834][ T7057] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.576446][ T21] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 338.584789][ T21] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 338.597223][ T7057] usb 3-1: config 0 descriptor?? [ 338.640711][ T7057] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input16 [ 338.732255][ T21] usbhid 5-1:0.0: can't add hid device: -71 [ 338.739786][T17626] autofs4:pid:17626:autofs_fill_super: called with bogus options [ 338.759054][ T21] usbhid: probe of 5-1:0.0 failed with error -71 [ 338.828302][ T21] usb 5-1: USB disconnect, device number 22 [ 338.886527][T17632] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5927'. [ 338.961142][ T7057] usb 3-1: USB disconnect, device number 23 [ 338.987042][T17638] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5930'. [ 339.122147][T17648] set_capacity_and_notify: 1 callbacks suppressed [ 339.122166][T17648] loop1: detected capacity change from 0 to 16 [ 339.165256][T17648] erofs: (device loop1): mounted with root inode @ nid 36. [ 339.200851][T17652] overlayfs: missing 'lowerdir' [ 339.209978][T17648] erofs: (device loop1): init_inode_xattrs: xattr_isize 12 of nid 46 is not supported yet [ 339.407096][T17669] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5946'. [ 339.418850][T17666] libceph: resolve '0' (ret=-3): failed [ 339.446338][T17669] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5946'. [ 339.510813][T17674] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.519870][T17674] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.586751][T17670] loop3: detected capacity change from 0 to 8192 [ 339.685680][T17670] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 339.726490][T17670] REISERFS (device loop3): using ordered data mode [ 339.733203][T17670] reiserfs: using flush barriers [ 339.750518][T17670] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 339.768741][T17670] REISERFS (device loop3): checking transaction log (loop3) [ 339.999174][T17670] REISERFS (device loop3): Using tea hash to sort names [ 340.010321][T17670] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 340.160248][T17713] (unnamed net_device) (uninitialized): ARP validating cannot be used with MII monitoring [ 340.177614][T17715] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 340.391379][T17728] loop2: detected capacity change from 0 to 256 [ 340.574387][T17739] device sit0 entered promiscuous mode [ 340.612973][T17739] netlink: 'syz.4.5978': attribute type 1 has an invalid length. [ 340.633099][T17739] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5978'. [ 340.662963][T17743] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5981'. [ 340.748692][T17747] ieee802154 phy0 wpan0: encryption failed: -90 [ 340.797310][T17750] comedi comedi4: bad chanlist[0]=0x00000899 chan=2201 range length=2 [ 340.886408][ T7057] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 341.059447][T17764] netlink: 'syz.2.5990': attribute type 2 has an invalid length. [ 341.175910][T17735] loop3: detected capacity change from 0 to 32768 [ 341.186390][ T7057] usb 2-1: Using ep0 maxpacket: 8 [ 341.266590][T17735] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 341.304595][T17735] JBD2: Ignoring recovery information on journal [ 341.317976][ T7057] usb 2-1: config 119 has an invalid descriptor of length 0, skipping remainder of the config [ 341.330210][ T7057] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 341.346355][ T7057] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.398965][ T7057] gspca_main: spca501-2.14.0 probing 0000:0000 [ 341.456386][ T21] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 341.514003][T17756] loop0: detected capacity change from 0 to 32768 [ 341.534625][T17735] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 341.664604][T17756] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.5986 (17756) [ 341.723969][T17756] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 341.755763][T17756] BTRFS info (device loop0): setting nodatasum [ 341.762473][T17756] BTRFS info (device loop0): force zlib compression, level 3 [ 341.784767][T17756] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 341.798360][T17756] BTRFS info (device loop0): use lzo compression, level 0 [ 341.814772][ T4197] ocfs2: Unmounting device (7,3) on (node local) [ 341.816136][T17756] BTRFS info (device loop0): turning on flush-on-commit [ 341.827959][ T7057] gspca_spca501: reg write: error -71 [ 341.833794][ T7057] spca501 2-1:119.0: Reg write failed for 0x02,0xa048,0x00 [ 341.847201][ T21] usb 3-1: config 12 has an invalid interface number: 248 but max is 1 [ 341.855604][ T7057] spca501: probe of 2-1:119.0 failed with error -22 [ 341.873967][ T7057] usb 2-1: USB disconnect, device number 27 [ 341.886484][T17756] BTRFS info (device loop0): enabling auto defrag [ 341.893236][T17756] BTRFS info (device loop0): max_inline at 4096 [ 341.913455][ T21] usb 3-1: config 12 has an invalid interface number: 39 but max is 1 [ 341.927496][ T21] usb 3-1: config 12 has no interface number 0 [ 341.933846][ T21] usb 3-1: config 12 has no interface number 1 [ 341.946364][T17756] BTRFS info (device loop0): using free space tree [ 341.957974][T17756] BTRFS info (device loop0): has skinny extents [ 341.972717][ T21] usb 3-1: config 12 interface 248 has no altsetting 0 [ 341.988569][ T21] usb 3-1: config 12 interface 39 has no altsetting 0 [ 342.146603][ T21] usb 3-1: New USB device found, idVendor=0602, idProduct=1001, bcdDevice=16.aa [ 342.155731][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.205137][ T21] usb 3-1: Product: syz [ 342.243463][ T21] usb 3-1: Manufacturer: syz [ 342.256456][ T21] usb 3-1: SerialNumber: syz [ 342.293578][T17756] BTRFS info (device loop0): enabling ssd optimizations [ 342.330268][T17756] BTRFS info (device loop0): resizing devid 73709551615 [ 342.356542][T17756] BTRFS info (device loop0): resizer unable to find device 73709551615 [ 342.657660][ T21] usb 3-1: USB disconnect, device number 24 [ 343.194553][ T1093] block nbd2: Attempted send on invalid socket [ 343.200882][ T1093] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 343.349631][T17877] loop1: detected capacity change from 0 to 256 [ 343.615243][T17896] loop3: detected capacity change from 0 to 2048 [ 343.761493][T17896] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 344.516325][ T21] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 344.560582][T17922] loop3: detected capacity change from 0 to 32768 [ 344.592184][T17926] loop2: detected capacity change from 0 to 32768 [ 344.718076][T17922] XFS (loop3): Mounting V5 Filesystem [ 344.725783][T17926] JBD2: Ignoring recovery information on journal [ 344.880192][T17922] XFS (loop3): Ending clean mount [ 344.886569][ T21] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 344.906269][ T21] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 344.926760][T17926] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 344.980607][T10678] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_bnobt block 0x4 [ 345.011018][T10678] XFS (loop3): Unmount and run xfs_repair [ 345.029284][T10678] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 345.055174][T10678] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 345.086540][T10678] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 345.107606][ T21] usb 5-1: New USB device found, idVendor=0a12, idProduct=0001, bcdDevice= 0.00 [ 345.116574][T10678] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 345.116722][T10678] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 345.116741][T10678] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 345.116758][T10678] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 345.149006][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.183868][ T21] usb 5-1: Product: syz [ 345.198446][ T21] usb 5-1: Manufacturer: syz [ 345.203209][ T21] usb 5-1: SerialNumber: syz [ 345.244878][T10678] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 345.255658][T10678] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 345.271584][T17946] loop1: detected capacity change from 0 to 32768 [ 345.273438][T17922] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x4 len 4 error 74 [ 345.332381][ T4199] ocfs2: Unmounting device (7,2) on (node local) [ 345.363618][T17922] XFS (loop3): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1540/0x1b30 (fs/xfs/libxfs/xfs_defer.c:504). Shutting down filesystem. [ 345.472989][T17946] XFS (loop1): Mounting V5 Filesystem [ 345.488163][T17922] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 345.556748][ C0] Bluetooth: hci5: corrupted ACL packet [ 345.637557][T17946] XFS (loop1): Ending clean mount [ 345.643521][ T4197] XFS (loop3): Unmounting Filesystem [ 345.678708][ T4187] XFS (loop1): Unmounting Filesystem [ 345.779749][ T7544] usb 5-1: USB disconnect, device number 23 [ 346.014516][T17990] netlink: 212400 bytes leftover after parsing attributes in process `syz.0.6084'. [ 346.144345][T17994] loop0: detected capacity change from 0 to 33280 [ 346.236087][T17994] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nouid32,minixdf,,errors=continue. Quota mode: writeback. [ 346.471966][T18014] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6092'. [ 346.494486][T18014] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6092'. [ 346.532266][T18001] loop4: detected capacity change from 0 to 8192 [ 346.620358][T18020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6096'. [ 346.685534][T18001] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 346.719607][T18022] loop1: detected capacity change from 0 to 36864 [ 346.746957][T18001] REISERFS (device loop4): using ordered data mode [ 346.753588][T18001] reiserfs: using flush barriers [ 346.773683][T18022] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 346.842865][T18022] EXT4-fs error (device loop1): ext4_get_first_dir_block:3619: inode #12: block 80: comm syz.1.6095: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 346.868790][T18022] EXT4-fs error (device loop1): ext4_get_first_dir_block:3621: inode #12: comm syz.1.6095: directory missing '..' [ 346.896560][T18001] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 346.965052][T18036] netlink: 260 bytes leftover after parsing attributes in process `syz.2.6101'. [ 346.975356][T18001] REISERFS (device loop4): checking transaction log (loop4) [ 347.012414][T18001] REISERFS (device loop4): Using r5 hash to sort names [ 347.063856][T18001] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 347.282186][T18052] program syz.2.6109 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 347.366907][ T7546] Bluetooth: hci5: command 0x1001 tx timeout [ 347.583478][T18072] loop2: detected capacity change from 0 to 1024 [ 347.713292][T18081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6122'. [ 347.728714][T18072] hfsplus: xattr search failed [ 347.941378][T18091] deleting an unspecified loop device is not supported. [ 348.036751][T18099] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 348.044053][T18099] IPv6: NLM_F_CREATE should be set when creating new route [ 348.133910][T18104] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6133'. [ 348.345090][T18107] loop0: detected capacity change from 0 to 4096 [ 348.468385][T18121] usb usb8: usbfs: process 18121 (syz.2.6141) did not claim interface 0 before use [ 348.496338][T18107] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 348.616646][T10678] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 349.106479][T10678] usb 4-1: config 1 interface 0 altsetting 32 endpoint 0x2 has invalid maxpacket 16895, setting to 64 [ 349.137164][T10678] usb 4-1: config 1 interface 0 altsetting 32 endpoint 0x83 has invalid wMaxPacketSize 0 [ 349.175129][T10678] usb 4-1: config 1 interface 0 has no altsetting 0 [ 349.190573][T10678] usb 4-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.00 [ 349.216127][T10678] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.499534][ T21] usb 4-1: USB disconnect, device number 21 [ 349.579561][T18194] lo: Caught tx_queue_len zero misconfig [ 349.736835][T18206] loop0: detected capacity change from 0 to 256 [ 349.751322][T18204] IPVS: set_ctl: invalid protocol: 12 255.255.255.255:52768 [ 350.131294][T18224] delete_channel: no stack [ 350.230115][T18229] loop2: detected capacity change from 0 to 256 [ 350.272550][T18229] exfat: Deprecated parameter 'utf8' [ 350.284986][T18234] netlink: 'syz.0.6198': attribute type 1 has an invalid length. [ 350.306410][T18229] exfat: Deprecated parameter 'utf8' [ 350.341600][T18238] xt_CT: You must specify a L4 protocol and not use inversions on it [ 350.361176][T18229] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 350.419145][T18240] netlink: 'syz.3.6201': attribute type 28 has an invalid length. [ 350.445395][T18240] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6201'. [ 350.913418][T18272] loop2: detected capacity change from 0 to 256 [ 350.929650][T18270] loop3: detected capacity change from 0 to 4096 [ 350.955217][T18264] loop0: detected capacity change from 0 to 4096 [ 351.028179][T18270] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 351.066261][T18264] ntfs: (device loop0): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 351.074087][T18272] FAT-fs (loop2): Directory bread(block 64) failed [ 351.093800][T18264] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 351.110988][T18264] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 351.135830][T18272] FAT-fs (loop2): Directory bread(block 65) failed [ 351.163090][T18270] ntfs3: loop3: Failed to load $Extend. [ 351.173358][T18272] FAT-fs (loop2): Directory bread(block 66) failed [ 351.187531][T18264] ntfs: volume version 3.1. [ 351.220683][T18272] FAT-fs (loop2): Directory bread(block 67) failed [ 351.258694][T18272] FAT-fs (loop2): Directory bread(block 68) failed [ 351.265500][T18272] FAT-fs (loop2): Directory bread(block 69) failed [ 351.306486][T18272] FAT-fs (loop2): Directory bread(block 70) failed [ 351.317479][T18232] loop1: detected capacity change from 0 to 40427 [ 351.326617][T18272] FAT-fs (loop2): Directory bread(block 71) failed [ 351.333266][T18272] FAT-fs (loop2): Directory bread(block 72) failed [ 351.358717][T18232] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 351.375025][ T155] ntfs: (device loop0): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 351.391525][T18272] FAT-fs (loop2): Directory bread(block 73) failed [ 351.399990][ T155] ntfs: (device loop0): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 351.414861][T18232] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 351.466971][ T4192] ntfs: (device loop0): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 351.492920][T18232] F2FS-fs (loop1): invalid crc value [ 351.568289][T18232] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 351.619014][T18232] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 351.809641][T18232] F2FS-fs (loop1): recover fsync data on readonly fs [ 351.861385][T18289] ieee802154 phy0 wpan0: encryption failed: -90 [ 351.865024][T18232] F2FS-fs (loop1): Try to recover 1th superblock, ret: -30 [ 351.896396][T18232] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 351.932383][T18293] libceph: resolve '0' (ret=-3): failed [ 351.941397][T18291] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6225'. [ 351.977249][T18283] loop3: detected capacity change from 0 to 8192 [ 351.987405][T18295] ebt_among: dst integrity fail: 101 [ 352.075149][T18283] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 352.126462][T18283] REISERFS (device loop3): using ordered data mode [ 352.133037][T18283] reiserfs: using flush barriers [ 352.139861][T18283] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 352.156940][T18283] REISERFS (device loop3): checking transaction log (loop3) [ 352.166912][T18283] REISERFS (device loop3): Using r5 hash to sort names [ 352.174221][T18283] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 352.333822][T18305] openvswitch: netlink: Actions may not be safe on all matching packets [ 352.353757][T18307] loop4: detected capacity change from 0 to 256 [ 352.391701][T18309] device sit0 entered promiscuous mode [ 352.432214][T18307] exfat: Deprecated parameter 'utf8' [ 352.468017][T18307] exfat: Deprecated parameter 'utf8' [ 352.470232][T18309] netlink: 'syz.0.6235': attribute type 1 has an invalid length. [ 352.514470][T18307] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 352.522319][T18311] ebt_limit: overflow, try lower: 4278190080/255 [ 352.553730][T18309] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6235'. [ 352.733697][T18317] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6237'. [ 353.043919][T18347] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.076786][T18347] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 353.176414][ T21] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 353.300567][T18369] loop2: detected capacity change from 0 to 256 [ 353.351008][T18369] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 353.414732][T18369] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 353.473325][T18366] loop4: detected capacity change from 0 to 8192 [ 353.536504][ T21] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 353.548811][ T21] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 353.638902][T18366] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 353.679607][T18366] REISERFS (device loop4): using ordered data mode [ 353.716544][ T21] usb 1-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 353.731038][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.739663][ T21] usb 1-1: Product: syz [ 353.744058][ T21] usb 1-1: Manufacturer: syz [ 353.748835][ T21] usb 1-1: SerialNumber: syz [ 353.757122][T18366] reiserfs: using flush barriers [ 353.769191][T18366] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 353.798541][ T21] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 353.827034][ T21] ums-sddr09 1-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 353.827034][ T21] Please send a copy of this message to and [ 353.881737][T18366] REISERFS (device loop4): checking transaction log (loop4) [ 354.064531][T18394] Trying to free block not in datazone [ 354.102713][ T21] ums-sddr09: probe of 1-1:1.0 failed with error -22 [ 354.149853][ T21] usb 1-1: USB disconnect, device number 30 [ 354.237066][T18366] REISERFS (device loop4): Using tea hash to sort names [ 354.252500][T18366] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 354.748518][T18426] set_capacity_and_notify: 1 callbacks suppressed [ 354.748536][T18426] loop2: detected capacity change from 0 to 16 [ 354.802077][T18426] erofs: (device loop2): mounted with root inode @ nid 36. [ 355.019994][T18443] echo interval is out of bounds [ 355.019994][T18443] [ 355.055949][T18450] netlink: 22 bytes leftover after parsing attributes in process `syz.1.6303'. [ 355.065796][T18443] CIFS: VFS: echo interval is out of bounds [ 355.078468][T18450] netlink: 22 bytes leftover after parsing attributes in process `syz.1.6303'. [ 355.106004][T18450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6303'. [ 355.127403][T18447] loop0: detected capacity change from 0 to 36864 [ 355.196985][T18447] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 355.261321][T18463] netlink: 212400 bytes leftover after parsing attributes in process `syz.1.6318'. [ 355.416697][ T4196] Bluetooth: hci5: CSR: Local version failed (-110) [ 355.513103][T18471] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.575946][T18479] netlink: 'syz.1.6317': attribute type 9 has an invalid length. [ 355.585081][T18479] netlink: 'syz.1.6317': attribute type 6 has an invalid length. [ 355.625449][T18483] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6319'. [ 355.710209][T18487] loop4: detected capacity change from 0 to 128 [ 355.751726][T18487] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 355.782280][T18471] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.796022][T18487] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 355.831838][T18491] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 355.955686][T18471] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.012326][T18471] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.174636][T18512] loop1: detected capacity change from 0 to 256 [ 356.260628][T18516] netlink: 11 bytes leftover after parsing attributes in process `syz.4.6334'. [ 356.272269][T18512] FAT-fs (loop1): Directory bread(block 64) failed [ 356.293779][T18512] FAT-fs (loop1): Directory bread(block 65) failed [ 356.311070][T18512] FAT-fs (loop1): Directory bread(block 66) failed [ 356.326470][T18512] FAT-fs (loop1): Directory bread(block 67) failed [ 356.346415][T18512] FAT-fs (loop1): Directory bread(block 68) failed [ 356.353152][T18512] FAT-fs (loop1): Directory bread(block 69) failed [ 356.387641][T18512] FAT-fs (loop1): Directory bread(block 70) failed [ 356.414794][T18512] FAT-fs (loop1): Directory bread(block 71) failed [ 356.424971][T18512] FAT-fs (loop1): Directory bread(block 72) failed [ 356.453161][T18512] FAT-fs (loop1): Directory bread(block 73) failed [ 356.719470][T18550] openvswitch: netlink: Duplicate or invalid key (type 0). [ 356.751842][T18550] openvswitch: netlink: Actions may not be safe on all matching packets [ 356.827870][T18556] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 356.846175][T18556] overlayfs: missing 'lowerdir' [ 356.982530][ T26] audit: type=1400 audit(356.938:18): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=18567 comm="syz.3.6360" [ 357.107337][T18579] Sensor A: ================= START STATUS ================= [ 357.115111][T18579] Sensor A: Test Pattern: 75% Colorbar [ 357.142568][T18579] Sensor A: Show Information: All [ 357.155880][T18582] device gtp0 entered promiscuous mode [ 357.166724][T18579] Sensor A: Vertical Flip: false [ 357.171999][T18579] Sensor A: Horizontal Flip: false [ 357.192214][T18579] Sensor A: Brightness: 128 [ 357.200155][T18586] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 357.206905][T18579] Sensor A: Contrast: 15 [ 357.221032][T18579] Sensor A: Hue: 0 [ 357.226600][T18586] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 357.253457][T18579] Sensor A: Saturation: 128 [ 357.267356][T18579] Sensor A: ================== END STATUS ================== [ 357.275272][T18586] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 357.401614][T18601] netlink: 'syz.1.6375': attribute type 1 has an invalid length. [ 357.525190][T18610] netlink: 'syz.4.6380': attribute type 1 has an invalid length. [ 357.558554][T18610] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6380'. [ 357.582452][T18610] block nbd0: not configured, cannot reconfigure [ 357.669414][T18621] netlink: 'syz.4.6385': attribute type 13 has an invalid length. [ 357.682489][T10678] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 357.694623][T18621] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6385'. [ 357.708643][T18621] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 357.724886][T18623] loop1: detected capacity change from 0 to 128 [ 357.926561][ T21] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 358.073911][T18642] netlink: 'syz.1.6397': attribute type 10 has an invalid length. [ 358.147807][T18642] device veth0_vlan left promiscuous mode [ 358.177756][T18642] device veth0_vlan entered promiscuous mode [ 358.190501][T18642] team0: Device veth0_vlan failed to register rx_handler [ 358.238395][ T4258] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 358.287495][T10678] usb 4-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00 [ 358.315418][T10678] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.326666][ T21] usb 3-1: unable to get BOS descriptor or descriptor too short [ 358.334403][T10678] usb 4-1: Product: syz [ 358.334429][T10678] usb 4-1: Manufacturer: syz [ 358.334449][T10678] usb 4-1: SerialNumber: syz [ 358.402359][T18647] loop1: detected capacity change from 0 to 4096 [ 358.410041][T18649] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 358.426857][ T21] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 358.445646][ T21] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 358.516414][ T4258] usb 5-1: Using ep0 maxpacket: 16 [ 358.566716][T18647] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 358.627145][T10678] kalmia 4-1:1.0 (unnamed net_device) (uninitialized): Did not send all of init packet. Bytes sent: 0 [ 358.656852][ T4258] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.668360][T10678] kalmia 4-1:1.0 (unnamed net_device) (uninitialized): Error receiving init result. Status -71 [ 358.681182][T10678] kalmia: probe of 4-1:1.0 failed with error -71 [ 358.688605][ T4258] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 358.706515][ T21] usb 3-1: string descriptor 0 read error: -22 [ 358.712956][ T21] usb 3-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 358.722241][ T4258] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 358.722299][ T4258] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.760603][T10678] usb 4-1: USB disconnect, device number 22 [ 358.767608][ T4258] usb 5-1: config 0 descriptor?? [ 358.804394][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.819755][ T4258] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input18 [ 358.899679][ T21] usb 3-1: MIDIStreaming interface descriptor not found [ 359.139165][ T21] usb 3-1: USB disconnect, device number 25 [ 359.158367][ T4258] usb 5-1: USB disconnect, device number 24 [ 359.177062][T18671] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6409'. [ 359.186785][ T3545] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 359.350033][T18676] loop0: detected capacity change from 0 to 33792 [ 359.418609][T18676] EXT4-fs error (device loop0): ext4_map_blocks:741: inode #3: block 1: comm syz.0.6411: lblock 1 mapped to illegal pblock 1 (length 1) [ 359.445618][T18685] netlink: 'syz.3.6415': attribute type 1 has an invalid length. [ 359.453637][T18686] Cannot find add_set index 3 as target [ 359.468824][T18676] Quota error (device loop0): write_blk: dquota write failed [ 359.505328][T18676] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 359.527035][T18676] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.6411: Failed to acquire dquot type 0 [ 359.575612][T18691] loop1: detected capacity change from 0 to 1024 [ 359.578596][T18676] EXT4-fs error (device loop0): ext4_free_blocks:6231: comm syz.0.6411: Freeing blocks not in datazone - block = 0, count = 4096 [ 359.637417][T18676] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.6411: Invalid inode bitmap blk 0 in block_group 0 [ 359.661054][ T9] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 359.754841][ T9] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 359.763719][T18676] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 359.783008][ T9] EXT4-fs error (device loop0): ext4_release_dquot:6272: comm kworker/u4:0: Failed to release dquot type 0 [ 359.837376][T18676] EXT4-fs (loop0): 1 orphan inode deleted [ 359.843176][T18676] EXT4-fs (loop0): mounted filesystem without journal. Opts: ; ,errors=continue. Quota mode: writeback. [ 359.902158][T18676] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback. [ 360.020314][T18709] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6426'. [ 360.030299][T18709] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6426'. [ 360.036390][ T4258] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 360.089831][T18709] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 360.091676][T18705] loop1: detected capacity change from 0 to 36864 [ 360.165790][T18705] EXT4-fs (loop1): Test dummy encryption mode enabled [ 360.187573][T18705] EXT4-fs (loop1): inline encryption not supported [ 360.212173][T18705] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 360.260934][T18705] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier=0x0000000000000003,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,auto_da_alloc,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback. [ 360.486551][ T4258] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 360.505194][ T4258] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 360.642416][T18740] netlink: 'syz.3.6441': attribute type 1 has an invalid length. [ 360.653620][T18740] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.6441'. [ 360.706560][ T4258] usb 3-1: New USB device found, idVendor=0a12, idProduct=0001, bcdDevice= 0.00 [ 360.715783][ T4258] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.753220][ T4258] usb 3-1: Product: syz [ 360.763713][ T4258] usb 3-1: Manufacturer: syz [ 360.779450][T18751] CIFS: Attempting to mount \\::1\share [ 360.786067][ T4258] usb 3-1: SerialNumber: syz [ 360.802730][T18751] CIFS: VFS: No username specified [ 361.301835][ T21] usb 3-1: USB disconnect, device number 26 [ 361.411798][T18799] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6469'. [ 361.435740][T18799] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6469'. [ 361.745145][T18783] loop4: detected capacity change from 0 to 32768 [ 361.784705][T18783] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.6461 (18783) [ 361.797654][T18821] netlink: 'syz.0.6481': attribute type 3 has an invalid length. [ 361.846151][T18783] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 361.855252][T18783] BTRFS info (device loop4): setting nodatasum [ 361.910917][T18828] loop2: detected capacity change from 0 to 33280 [ 361.925786][T18783] BTRFS info (device loop4): force zlib compression, level 3 [ 361.954453][T18783] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 361.968458][T18783] BTRFS info (device loop4): use lzo compression, level 0 [ 361.988857][T18783] BTRFS info (device loop4): turning on flush-on-commit [ 362.045716][T18834] loop0: detected capacity change from 0 to 256 [ 362.051650][T18783] BTRFS info (device loop4): enabling auto defrag [ 362.063614][T18828] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 362.081046][T18783] BTRFS info (device loop4): max_inline at 4096 [ 362.097192][T18828] EXT4-fs (loop2): orphan cleanup on readonly fs [ 362.105535][T18783] BTRFS info (device loop4): using free space tree [ 362.124309][T18828] EXT4-fs error (device loop2): ext4_xattr_inode_update_ref:984: inode #11: comm syz.2.6484: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 362.142277][T18783] BTRFS info (device loop4): has skinny extents [ 362.166131][T18828] EXT4-fs (loop2): Remounting filesystem read-only [ 362.206442][T18828] EXT4-fs warning (device loop2): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.2.6484: ea_inode dec ref err=-117 [ 362.219777][T18828] EXT4-fs (loop2): 1 orphan inode deleted [ 362.225736][T18828] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000ff,errors=remount-ro,nouid32,resgid=0x0000000000000000,nomblk_io_submit,init_itable=0x0000000000000004,data_err=ignore,jqfmt=vfsv0,. Quota mode: none. [ 362.288857][T18834] FAT-fs (loop0): Directory bread(block 64) failed [ 362.325713][T18834] FAT-fs (loop0): Directory bread(block 65) failed [ 362.356447][T18834] FAT-fs (loop0): Directory bread(block 66) failed [ 362.363042][T18834] FAT-fs (loop0): Directory bread(block 67) failed [ 362.370010][T18834] FAT-fs (loop0): Directory bread(block 68) failed [ 362.376673][T18834] FAT-fs (loop0): Directory bread(block 69) failed [ 362.383599][T18834] FAT-fs (loop0): Directory bread(block 70) failed [ 362.390407][T18834] FAT-fs (loop0): Directory bread(block 71) failed [ 362.400744][T18834] FAT-fs (loop0): Directory bread(block 72) failed [ 362.408208][T18834] FAT-fs (loop0): Directory bread(block 73) failed [ 362.502036][T18783] BTRFS info (device loop4): enabling ssd optimizations [ 362.570890][T18783] BTRFS info (device loop4): resizing devid 73709551615 [ 362.594005][T18783] BTRFS info (device loop4): resizer unable to find device 73709551615 [ 362.900438][T18830] loop1: detected capacity change from 0 to 32768 [ 363.039599][ T7546] Bluetooth: hci5: command 0x1001 tx timeout [ 363.060894][T18830] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 363.096059][T18866] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.116655][T18866] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.184156][T18830] JBD2: Ignoring recovery information on journal [ 363.232395][T18830] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 363.290109][T18873] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6494'. [ 363.433361][T18866] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.466359][T18866] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.499728][ T4187] ocfs2: Unmounting device (7,1) on (node local) [ 363.557918][T18883] loop0: detected capacity change from 0 to 33792 [ 363.655362][T18866] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.703255][T18866] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.723199][T18883] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 363.866109][T18883] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,nobarrier,norecovery,errors=remount-ro,grpid,. Quota mode: writeback. [ 363.900039][T18883] EXT4-fs (loop0): ext4_remount: Checksum for group 0 failed (62631!=20869) [ 363.979027][T18866] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.006420][T18866] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.540772][T18887] loop4: detected capacity change from 0 to 32768 [ 364.612705][T18887] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.6502 (18887) [ 364.644814][T18937] loop3: detected capacity change from 0 to 33280 [ 364.676393][T18887] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 364.685331][T18887] BTRFS info (device loop4): setting nodatasum [ 364.713902][T18937] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 364.750941][T18887] BTRFS info (device loop4): force zlib compression, level 3 [ 364.770845][T18937] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 364.786442][T18887] BTRFS info (device loop4): turning on flush-on-commit [ 364.793740][T18937] System zones: 0-2, 18-18, 34-34 [ 364.807600][T18887] BTRFS info (device loop4): use no compression [ 364.813995][T18887] BTRFS info (device loop4): max_inline at 0 [ 364.821373][T18937] EXT4-fs error (device loop3): ext4_orphan_get:1436: comm syz.3.6524: bad orphan inode 15 [ 364.834144][T18941] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 364.897154][T18937] ext4_test_bit(bit=14, block=18) = 1 [ 364.902601][T18937] is_bad_inode(inode)=0 [ 364.914890][T18887] BTRFS info (device loop4): using free space tree [ 364.938892][T18887] BTRFS info (device loop4): has skinny extents [ 364.952156][T18937] NEXT_ORPHAN(inode)=2264924160 [ 364.979852][T18937] max_ino=32 [ 364.993192][T18937] i_nlink=0 [ 365.004706][T18937] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #15: comm syz.3.6524: corrupted inode contents [ 365.019763][T18937] EXT4-fs error (device loop3): ext4_dirty_inode:6087: inode #15: comm syz.3.6524: mark_inode_dirty error [ 365.057079][T18937] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #15: comm syz.3.6524: corrupted inode contents [ 365.097442][T18937] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2957: inode #15: comm syz.3.6524: mark_inode_dirty error [ 365.136796][T18937] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2960: inode #15: comm syz.3.6524: mark inode dirty (error -117) [ 365.176810][T18937] EXT4-fs warning (device loop3): ext4_evict_inode:304: xattr delete (err -117) [ 365.226970][T18937] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 365.272447][T18887] BTRFS info (device loop4): enabling ssd optimizations [ 365.656442][T10678] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 365.926415][T10678] usb 2-1: Using ep0 maxpacket: 16 [ 366.036727][T10678] usb 2-1: config index 0 descriptor too short (expected 3090, got 18) [ 366.045055][T10678] usb 2-1: config 0 has no interfaces? [ 366.260725][T10678] usb 2-1: New USB device found, idVendor=0130, idProduct=0130, bcdDevice=8f.37 [ 366.276987][T10678] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.297029][T19015] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6541'. [ 366.297639][T10678] usb 2-1: Product: syz [ 366.318133][T10678] usb 2-1: Manufacturer: syz [ 366.322958][T10678] usb 2-1: SerialNumber: syz [ 366.333137][T19015] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6541'. [ 366.357750][T10678] usb 2-1: config 0 descriptor?? [ 366.376665][T18998] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 366.556070][T19030] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6556'. [ 366.756612][T18998] usb 4-1: config 36 interface 0 altsetting 0 has an invalid endpoint with address 0x31, skipping [ 366.827726][T10678] usb 2-1: USB disconnect, device number 28 [ 366.906691][T18998] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 366.915986][T19054] netlink: 'syz.4.6569': attribute type 1 has an invalid length. [ 366.936346][T18998] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 366.944808][T18998] usb 4-1: Manufacturer: syz [ 366.970459][T18998] usb 4-1: SerialNumber: syz [ 367.132634][T19070] loop0: detected capacity change from 0 to 256 [ 367.308540][T18998] usbhid 4-1:36.0: couldn't find an input interrupt endpoint [ 367.319473][T19082] loop4: detected capacity change from 0 to 164 [ 367.347187][T18998] usb 4-1: USB disconnect, device number 23 [ 367.665932][T19100] netlink: 'syz.1.6592': attribute type 1 has an invalid length. [ 367.778011][T19106] netlink: 'syz.1.6595': attribute type 6 has an invalid length. [ 367.816378][T19106] netlink: 168 bytes leftover after parsing attributes in process `syz.1.6595'. [ 367.919489][T19116] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6599'. [ 367.936286][T10678] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 368.079451][T19127] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 368.228131][T19092] loop0: detected capacity change from 0 to 32768 [ 368.339739][T19092] XFS (loop0): Mounting V5 Filesystem [ 368.356558][T10678] usb 5-1: config 2 has an invalid interface number: 184 but max is 0 [ 368.366294][T10678] usb 5-1: config 2 has no interface number 0 [ 368.372437][T10678] usb 5-1: config 2 interface 184 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 16 [ 368.383447][T10678] usb 5-1: config 2 interface 184 has no altsetting 0 [ 368.428432][T19092] XFS (loop0): Ending clean mount [ 368.483839][ T4192] XFS (loop0): Unmounting Filesystem [ 368.576335][T10678] usb 5-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=ca.78 [ 368.590770][T10678] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.601379][T10678] usb 5-1: Product: syz [ 368.605634][T10678] usb 5-1: Manufacturer: syz [ 368.610553][T10678] usb 5-1: SerialNumber: syz [ 368.622246][ C1] vkms_vblank_simulate: vblank timer overrun [ 368.639907][T19098] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 368.922767][T19163] CIFS: Attempting to mount \\127.0.0.1\share [ 368.950740][T19163] CIFS: VFS: No username specified [ 368.956709][T10678] usbtouchscreen: probe of 5-1:2.184 failed with error -71 [ 368.972838][T10678] usb 5-1: USB disconnect, device number 25 [ 368.991436][T19167] netlink: 'syz.0.6619': attribute type 3 has an invalid length. [ 369.021440][T19167] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6619'. [ 369.094751][T19175] netlink: 120 bytes leftover after parsing attributes in process `syz.0.6623'. [ 369.114974][T19175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6623'. [ 369.134135][T19175] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6623'. [ 369.153913][T19175] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6623'. [ 369.307443][T19189] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.6630'. [ 369.497271][T19203] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 369.548869][T19207] netlink: 844 bytes leftover after parsing attributes in process `syz.3.6640'. [ 369.684586][T19214] loop1: detected capacity change from 0 to 4096 [ 369.730192][T19223] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6647'. [ 369.770709][T19214] NILFS (loop1): invalid segment: Checksum error in segment payload [ 369.796345][T19214] NILFS (loop1): trying rollback from an earlier position [ 369.828946][T19214] NILFS (loop1): recovery complete [ 369.847084][T19228] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 369.926508][ T8298] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 369.960336][T19234] loop3: detected capacity change from 0 to 256 [ 370.059612][T19234] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010895, chksum : 0x816c887a, utbl_chksum : 0xe619d30d) [ 370.298875][T19251] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6660'. [ 370.317000][T19251] netlink: 88 bytes leftover after parsing attributes in process `syz.0.6660'. [ 370.336407][ T8298] usb 5-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 370.346002][ T8298] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.482426][T19267] loop0: detected capacity change from 0 to 64 [ 370.849192][ T8298] pn533_usb 5-1:1.0: NFC: Couldn't poweron the reader (error -71) [ 370.857897][ T8298] pn533_usb: probe of 5-1:1.0 failed with error -71 [ 370.872587][T19286] loop0: detected capacity change from 0 to 33280 [ 370.882550][ T8298] usb 5-1: USB disconnect, device number 26 [ 370.917498][T19286] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 370.956172][T19286] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:163: inode #15: comm syz.0.6677: inline data xattr refers to an external xattr inode [ 370.972883][T19286] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.6677: couldn't read orphan inode 15 (err -117) [ 370.995029][T19286] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 371.076904][T19294] netlink: 'syz.0.6680': attribute type 13 has an invalid length. [ 371.421846][ T4196] Bluetooth: hci5: CSR: Local version failed (-110) [ 371.599155][T19326] netlink: 'syz.3.6695': attribute type 2 has an invalid length. [ 371.885236][T19308] loop2: detected capacity change from 0 to 32768 [ 371.931585][T19308] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.6687 (19308) [ 371.986461][T19308] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 372.026355][T19308] BTRFS info (device loop2): setting nodatasum [ 372.051365][T19308] BTRFS info (device loop2): force zlib compression, level 3 [ 372.096280][T19308] BTRFS info (device loop2): turning on flush-on-commit [ 372.103429][T19308] BTRFS info (device loop2): use no compression [ 372.131246][T19343] loop1: detected capacity change from 0 to 512 [ 372.154241][T19308] BTRFS info (device loop2): max_inline at 0 [ 372.185439][T19308] BTRFS info (device loop2): using free space tree [ 372.219042][T19308] BTRFS info (device loop2): has skinny extents [ 372.586370][T19308] BTRFS info (device loop2): enabling ssd optimizations [ 372.806519][T19397] netlink: 'syz.3.6714': attribute type 1 has an invalid length. [ 372.924751][T19408] usb usb9: usbfs: process 19408 (syz.4.6719) did not claim interface 0 before use [ 373.167371][ T7] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 373.461533][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 373.616589][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.643042][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.916293][ T7] usb 2-1: New USB device found, idVendor=046d, idProduct=c11c, bcdDevice= 0.40 [ 373.925398][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.950225][ T7] usb 2-1: config 0 descriptor?? [ 373.987657][ T7] hub 2-1:0.0: USB hub found [ 374.078621][T19476] loop0: detected capacity change from 0 to 64 [ 374.105474][T19478] loop2: detected capacity change from 0 to 256 [ 374.209051][ T7] hub 2-1:0.0: 1 port detected [ 374.252619][T19478] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011bf5, chksum : 0x8604b368, utbl_chksum : 0xe619d30d) [ 374.269021][T19478] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 374.295083][T19487] netlink: 'syz.0.6751': attribute type 10 has an invalid length. [ 374.320350][T19488] blk_update_request: I/O error, dev loop3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 374.417351][ T7] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 374.430105][ T7] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 374.757191][ T7] usb 2-1: USB disconnect, device number 29 [ 374.929725][T19517] device bond3 entered promiscuous mode [ 374.935732][T19517] 8021q: adding VLAN 0 to HW filter on device bond3 [ 375.102232][T19529] __nla_validate_parse: 7 callbacks suppressed [ 375.102252][T19529] netlink: 220 bytes leftover after parsing attributes in process `syz.4.6773'. [ 375.120123][T19530] jffs2: Bad value for 'compr' [ 375.242191][T19537] loop1: detected capacity change from 0 to 33280 [ 375.306880][T19515] loop3: detected capacity change from 0 to 32768 [ 375.341551][T19537] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 375.365600][T19546] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6780'. [ 375.374765][T19546] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6780'. [ 375.398135][T19537] EXT4-fs (loop1): orphan cleanup on readonly fs [ 375.418490][T19537] EXT4-fs warning (device loop1): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 375.438706][T19537] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 375.462517][T19537] EXT4-fs error (device loop1): __ext4_iget:4919: inode #16: block 127754: comm syz.1.6777: invalid block [ 375.492559][T19515] XFS (loop3): Mounting V5 Filesystem [ 375.576030][T19537] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.6777: couldn't read orphan inode 16 (err -117) [ 375.596536][T19515] XFS (loop3): Ending clean mount [ 375.672524][T19537] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 376.358211][ T4197] XFS (loop3): Unmounting Filesystem [ 376.721007][ T26] audit: type=1400 audit(376.678:19): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457C51CCA93031D371D06D2E59E880583300E11E8 pid=19589 comm="syz.4.6800" [ 377.049195][T19614] loop4: detected capacity change from 0 to 164 [ 377.274860][T19628] ecryptfs_parse_options: eCryptfs: unrecognized option [ecryptfs_k_jN[sig=syz] [ 377.323059][T19628] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 377.332726][T19632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6819'. [ 377.346842][T19628] Error parsing options; rc = [-22] [ 377.750957][T19665] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 377.896117][T19675] loop3: detected capacity change from 0 to 64 [ 377.915689][T19622] loop0: detected capacity change from 0 to 32768 [ 378.006865][T19675] Bad inode number on dev loop3: 2 is out of range [ 378.033817][T19622] JBD2: Ignoring recovery information on journal [ 378.195146][T19622] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 378.385540][ T4192] ocfs2: Unmounting device (7,0) on (node local) [ 378.449206][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.455602][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.524769][T19709] loop1: detected capacity change from 0 to 8 [ 378.894684][T19725] xt_CT: You must specify a L4 protocol and not use inversions on it [ 379.274390][T19695] loop2: detected capacity change from 0 to 40427 [ 379.321174][T19695] F2FS-fs (loop2): invalid crc value [ 379.358151][T19695] F2FS-fs (loop2): Found nat_bits in checkpoint [ 379.403945][T19752] loop3: detected capacity change from 0 to 8 [ 379.461341][ T7] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 379.529178][T19756] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 379.555109][T19695] F2FS-fs (loop2): recover fsync data on readonly fs [ 379.587528][T19695] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 379.726829][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 379.813385][T19734] loop4: detected capacity change from 0 to 32768 [ 379.866620][T19767] loop3: detected capacity change from 0 to 2048 [ 379.883679][ T7] usb 1-1: config 0 has an invalid interface number: 98 but max is 0 [ 379.895997][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.906378][ T7] usb 1-1: config 0 has no interface number 0 [ 379.912534][ T7] usb 1-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 379.919709][ C1] vkms_vblank_simulate: vblank timer overrun [ 379.958527][T19734] [ 379.958527][T19734] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 379.958527][T19734] [ 379.969434][ T7] usb 1-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 379.980251][T19767] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 380.016293][ T7] usb 1-1: config 0 interface 98 has no altsetting 0 [ 380.027728][T19734] [ 380.027728][T19734] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 380.027728][T19734] [ 380.086516][T19734] [ 380.086516][T19734] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 380.086516][T19734] [ 380.256711][ T7] usb 1-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 380.287214][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.307571][ T7] usb 1-1: Product: syz [ 380.311799][ T7] usb 1-1: Manufacturer: syz [ 380.335173][ T7] usb 1-1: SerialNumber: syz [ 380.367507][ T7] usb 1-1: config 0 descriptor?? [ 380.396786][T19743] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 380.406683][T19743] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 380.476485][T19788] netlink: 'syz.4.6894': attribute type 1 has an invalid length. [ 380.529690][T19790] bond0: (slave bond_slave_1): Releasing backup interface [ 380.577317][T19794] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5) [ 380.644006][T19743] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 380.668164][T19743] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 380.917196][ T7] asix 1-1:0.98 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 380.941709][ T7] asix: probe of 1-1:0.98 failed with error -71 [ 380.963042][ T7] usb 1-1: USB disconnect, device number 31 [ 381.087308][T19823] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6911'. [ 381.268388][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 381.295981][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 381.316468][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 381.324114][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 381.365356][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 381.385979][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 381.413471][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 381.426321][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 381.433808][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 381.478785][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 381.495105][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 381.513057][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 381.536261][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 381.559599][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 381.577464][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 381.606309][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 381.619762][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 381.636306][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 381.652076][T19864] netlink: 'syz.2.6933': attribute type 1 has an invalid length. [ 381.661062][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 381.675941][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 381.694200][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 381.711142][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 381.745444][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 381.773607][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 381.786298][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 381.802764][T19867] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6932'. [ 381.822460][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 381.850026][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 381.867798][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 381.891425][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 381.915767][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 381.932351][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 381.945703][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 381.963779][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 381.991622][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 382.015822][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 382.033829][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 382.074404][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 382.094695][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 382.112351][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 382.124834][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 382.140351][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 382.172778][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 382.189792][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 382.215477][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 382.243973][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 382.259027][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 382.289181][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 382.321352][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 382.332099][T19899] netlink: 'syz.2.6948': attribute type 21 has an invalid length. [ 382.340427][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 382.348479][T19899] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6948'. [ 382.358711][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 382.366504][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 382.374299][T19899] netlink: 'syz.2.6948': attribute type 5 has an invalid length. [ 382.382854][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 382.390963][T19899] netlink: 'syz.2.6948': attribute type 6 has an invalid length. [ 382.391892][T19902] loop0: detected capacity change from 0 to 33280 [ 382.401576][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 382.413744][T19899] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6948'. [ 382.433785][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 382.442028][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 382.464013][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 382.494051][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 382.529677][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 382.539202][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 382.550052][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 382.558263][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 382.565833][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 382.573938][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 382.581751][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 382.589931][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 382.597736][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 382.605699][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 382.614069][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 382.622020][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 382.629824][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 382.637989][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 382.645550][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 382.653729][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 382.661571][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 382.669485][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 382.677283][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 382.684973][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 382.694242][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 382.702758][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 382.711970][T19902] EXT4-fs (loop0): 1 orphan inode deleted [ 382.731340][T19869] loop4: detected capacity change from 0 to 32768 [ 382.738590][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 382.746033][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 382.746732][T19902] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 382.791805][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 382.802180][T19902] EXT4-fs warning (device loop0): verify_group_input:165: Last group not full [ 382.810150][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 382.852608][ T7] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.03 Device [syz1] on syz1 [ 382.947176][T19869] JBD2: Ignoring recovery information on journal [ 383.058062][T19869] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 383.076686][T19915] fido_id[19915]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 383.172744][ T4194] ocfs2: Unmounting device (7,4) on (node local) [ 383.298028][T19934] loop3: detected capacity change from 0 to 33792 [ 383.421140][ T21] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 383.529142][T19934] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 383.609536][T19934] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 383.662002][T19934] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 383.666445][ T21] usb 3-1: Using ep0 maxpacket: 32 [ 383.731358][T19934] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 383.826576][ T21] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.846828][ T21] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 383.954465][T19958] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6972'. [ 384.031351][ T21] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 384.051537][ T21] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 384.072379][ T21] usb 3-1: Product: syz [ 384.106640][ T21] usb 3-1: Manufacturer: syz [ 384.177643][ T21] hub 3-1:4.0: USB hub found [ 384.383194][T19992] bond0: (slave bond_slave_1): Releasing backup interface [ 384.396458][ T21] hub 3-1:4.0: 2 ports detected [ 384.616646][ T21] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 384.623204][ T21] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 384.707117][ T21] usb 3-1: USB disconnect, device number 27 [ 384.739656][T20016] loop0: detected capacity change from 0 to 2048 [ 384.786283][T20016] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 384.968776][T20033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7009'. [ 385.249283][T20053] netlink: 'syz.0.7020': attribute type 30 has an invalid length. [ 385.404657][T20065] loop2: detected capacity change from 0 to 33280 [ 385.495420][T20065] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 385.554548][T20072] loop4: detected capacity change from 0 to 1024 [ 385.605649][T20037] loop3: detected capacity change from 0 to 32768 [ 385.708300][T20037] XFS (loop3): Mounting V5 Filesystem [ 385.786736][T20037] XFS (loop3): Ending clean mount [ 385.796162][T20037] XFS (loop3): Quotacheck needed: Please wait. [ 386.080690][T20037] XFS (loop3): Quotacheck: Done. [ 386.130199][T20104] xt_TCPMSS: Only works on TCP SYN packets [ 386.251156][ T7536] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 386.273351][ T4197] XFS (loop3): Unmounting Filesystem [ 386.536677][ T7548] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 386.616612][ T7536] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 386.636665][ T7536] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 386.678566][T20136] loop1: detected capacity change from 0 to 1024 [ 386.706546][ T4296] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 386.806541][ T7536] usb 1-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00 [ 386.826313][ T7536] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.834582][ T7536] usb 1-1: Product: syz [ 386.849709][ T7536] usb 1-1: Manufacturer: syz [ 386.854384][ T7536] usb 1-1: SerialNumber: syz [ 386.908171][ T7548] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 386.927533][ T7536] kalmia 1-1:1.0 (unnamed net_device) (uninitialized): Error sending init packet. Status -90 [ 386.960433][ T7548] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 386.973987][ T7536] kalmia: probe of 1-1:1.0 failed with error -90 [ 386.994487][ T7548] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 387.014890][ T7548] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 387.024982][ T7548] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 387.035328][ T7548] usb 3-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 387.045062][ T7548] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.087654][ T4296] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 387.103107][T20114] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 387.116516][T20114] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 387.123877][T20114] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 387.136058][ T4296] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 387.162925][ T4296] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 387.176068][ T4296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.186044][ T7548] mos7720 3-1:1.0: Moschip 2 port adapter converter detected [ 387.197784][ T21] usb 1-1: USB disconnect, device number 32 [ 387.398946][ T7548] usb 3-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 387.453890][ T7548] usb 3-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 387.499921][ T4296] usb 5-1: USB disconnect, device number 27 [ 387.625848][ T7548] usb 3-1: USB disconnect, device number 28 [ 387.636292][ C1] usb 3-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 387.659997][ T7548] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 387.697079][ T7548] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 387.717256][ T7548] mos7720 3-1:1.0: device disconnected [ 387.824492][T20153] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 387.855450][T20153] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 387.874293][T20138] syz.3.7046 (20138): drop_caches: 2 [ 387.886373][T20153] overlayfs: missing 'lowerdir' [ 388.050156][T20165] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7069'. [ 388.186397][T20174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7073'. [ 388.218992][T20172] netlink: 'syz.1.7075': attribute type 1 has an invalid length. [ 388.293373][T20157] loop0: detected capacity change from 0 to 32768 [ 388.309937][T20180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7077'. [ 388.318636][T20181] netlink: zone id is out of range [ 388.406978][T20157] ERROR: (device loop0): dbAlloc: the hint is outside the map [ 388.406978][T20157] [ 388.448976][T20157] ERROR: (device loop0): remounting filesystem as read-only [ 388.477715][T20188] netlink: 'syz.1.7082': attribute type 23 has an invalid length. [ 388.508372][T20190] loop4: detected capacity change from 0 to 34816 [ 388.518024][T20193] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7081'. [ 388.573876][T20193] netlink: 80 bytes leftover after parsing attributes in process `syz.3.7081'. [ 388.590430][T20190] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 388.635485][T20193] netlink: 80 bytes leftover after parsing attributes in process `syz.3.7081'. [ 388.746796][T20193] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7081'. [ 388.818863][T20202] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 388.915367][T20208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7088'. [ 389.069694][T20219] loop2: detected capacity change from 0 to 256 [ 389.498262][T20255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7113'. [ 389.537975][T20260] Flash size not aligned to erasesize, reducing to 124KiB [ 389.548304][T20261] bad cache= option: nonw [ 389.548304][T20261] [ 389.555344][T20261] CIFS: VFS: bad cache= option: nonw [ 389.570031][T20260] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000528: 0x2f00 instead [ 389.603479][T20260] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000052c: 0x2f76 instead [ 389.629505][T20260] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000530: 0x2364 instead [ 389.658678][T20260] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001668: 0xc000 instead [ 389.686431][T20260] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001680: 0xe400 instead [ 389.744827][T20260] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 389.764771][T20260] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 31 [ 389.893958][T20283] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7126'. [ 389.979564][T20288] loop1: detected capacity change from 0 to 256 [ 390.106047][T20296] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 390.236429][ T7548] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 390.304839][T20308] netlink: 'syz.3.7138': attribute type 1 has an invalid length. [ 390.476347][ T7548] usb 3-1: Using ep0 maxpacket: 16 [ 390.505346][T20314] netlink: 'syz.3.7141': attribute type 6 has an invalid length. [ 390.586435][ T4296] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 390.618173][T20302] loop1: detected capacity change from 0 to 32768 [ 390.628937][T20316] ieee802154 phy0 wpan0: encryption failed: -22 [ 390.636641][ T7548] usb 3-1: unable to get BOS descriptor or descriptor too short [ 390.716675][ T7548] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 50, changing to 7 [ 390.739000][T20304] loop0: detected capacity change from 0 to 32768 [ 390.768937][ T7548] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 390.812407][T20304] XFS (loop0): Mounting V5 Filesystem [ 390.818781][T20302] XFS (loop1): Mounting V5 Filesystem [ 390.826602][ T4296] usb 5-1: Using ep0 maxpacket: 16 [ 390.889901][T20302] XFS (loop1): Ending clean mount [ 390.948353][ T4296] usb 5-1: config 9 has an invalid interface number: 168 but max is 0 [ 390.958352][ T4296] usb 5-1: config 9 has no interface number 0 [ 390.966474][ T7548] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fb0, bcdDevice= 0.40 [ 390.985629][ T7548] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.994352][ T7548] usb 3-1: Product: syz [ 390.999202][ T7548] usb 3-1: Manufacturer: syz [ 391.003933][ T7548] usb 3-1: SerialNumber: syz [ 391.012254][T20304] XFS (loop0): Ending clean mount [ 391.034482][T20304] XFS (loop0): Quotacheck needed: Please wait. [ 391.116537][ T4296] usb 5-1: New USB device found, idVendor=04e7, idProduct=0020, bcdDevice=67.22 [ 391.129458][ T4187] XFS (loop1): Unmounting Filesystem [ 391.142885][ T4296] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.154545][T20304] XFS (loop0): Quotacheck: Done. [ 391.182438][ T4296] usb 5-1: Product: syz [ 391.197233][ T4296] usb 5-1: Manufacturer: syz [ 391.201994][ T4296] usb 5-1: SerialNumber: syz [ 391.243583][ T4192] XFS (loop0): Unmounting Filesystem [ 391.454960][ T7548] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 391.604217][ T4296] usb 5-1: USB disconnect, device number 28 [ 391.674751][ T7548] usb 3-1: USB disconnect, device number 29 [ 391.987058][T11180] udevd[11180]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 392.119004][T20373] netlink: 'syz.3.7162': attribute type 1 has an invalid length. [ 392.188547][T20376] loop1: detected capacity change from 0 to 33792 [ 392.293996][T20376] EXT4-fs (loop1): mounted filesystem without journal. Opts: lazytime,,errors=continue. Quota mode: none. [ 392.596339][ T4296] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 392.658295][T20410] loop2: detected capacity change from 0 to 2048 [ 392.712406][T20410] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 392.725735][T20410] UDF-fs: Scanning with blocksize 512 failed [ 392.756281][T20410] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 392.766431][ T7548] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 392.778989][T20418] loop4: detected capacity change from 0 to 1024 [ 392.800103][T20410] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 392.920789][T20422] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 392.986656][ T4296] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 393.006574][ T7548] usb 4-1: Using ep0 maxpacket: 8 [ 393.017408][ T4296] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 393.054224][T20426] loop4: detected capacity change from 0 to 33280 [ 393.079164][T20429] loop1: detected capacity change from 0 to 128 [ 393.120586][T20426] EXT4-fs error (device loop4): ext4_orphan_get:1410: inode #15: comm syz.4.7186: inode has both inline data and extents flags [ 393.127132][ T7548] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 393.146455][ T7548] usb 4-1: config 0 interface 0 has no altsetting 0 [ 393.186492][ T4296] usb 1-1: New USB device found, idVendor=05c6, idProduct=9211, bcdDevice= 0.00 [ 393.200263][ T4296] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.209311][ T4296] usb 1-1: Product: syz [ 393.213653][ T4296] usb 1-1: Manufacturer: syz [ 393.219416][ T4296] usb 1-1: SerialNumber: syz [ 393.225540][T20426] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.7186: couldn't read orphan inode 15 (err -117) [ 393.239831][T20426] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 393.278325][ T4296] qcserial 1-1:1.0: Qualcomm USB modem converter detected [ 393.316558][ T7548] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 393.325941][ T7548] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.363637][ T7548] usb 4-1: Product: syz [ 393.368392][ T7548] usb 4-1: Manufacturer: syz [ 393.373121][ T7548] usb 4-1: SerialNumber: syz [ 393.387923][ T7548] usb 4-1: config 0 descriptor?? [ 393.431075][ T7548] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 393.577636][ T7057] usb 1-1: USB disconnect, device number 33 [ 393.588275][ T7057] qcserial 1-1:1.0: device disconnected [ 393.638689][ T7548] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 393.670268][ T7548] snd_usb_toneport: probe of 4-1:0.0 failed with error -22 [ 393.687297][T20451] loop4: detected capacity change from 0 to 128 [ 393.727304][T20451] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 393.775139][T20451] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 393.853711][ T7548] usb 4-1: USB disconnect, device number 24 [ 393.860266][T20455] loop2: detected capacity change from 0 to 2048 [ 394.026324][T20463] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 394.369652][T20474] EXT4-fs (loop4): mounted filesystem without journal. Opts: abort,block_validity,grpid,,errors=continue. Quota mode: writeback. [ 395.401284][T20522] __nla_validate_parse: 5 callbacks suppressed [ 395.401304][T20522] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7233'. [ 395.508098][T20526] netlink: 6 bytes leftover after parsing attributes in process `syz.3.7235'. [ 395.516810][ T4296] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 395.876604][ T4296] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 395.891361][T20550] set_capacity_and_notify: 1 callbacks suppressed [ 395.891380][T20550] loop3: detected capacity change from 0 to 512 [ 395.903591][ T4296] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 395.936306][ T4296] usb 5-1: New USB device found, idVendor=15a4, idProduct=9035, bcdDevice= 2.00 [ 395.956278][ T4296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.166386][T10678] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 396.266694][ T4296] usb 5-1: dvb_usb_v2: 2nd usb_bulk_msg() failed=-22 [ 396.274261][ T4296] dvb_usb_af9035: probe of 5-1:1.0 failed with error -22 [ 396.501436][ T4296] usb 5-1: USB disconnect, device number 29 [ 396.681039][T10678] usb 3-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 396.700687][T10678] usb 3-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 396.739906][T10678] usb 3-1: Product: syz [ 396.766049][T10678] usb 3-1: config 0 descriptor?? [ 396.836403][T10678] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 396.844673][T10678] usb 3-1: Detected FT232H [ 396.946488][T20554] syz.0.7250 (20554): drop_caches: 2 [ 397.054315][T10678] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 397.095847][T20576] binder: 20575:20576 ioctl c018620b 0 returned -14 [ 397.107205][T10678] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 397.136959][T10678] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 397.167456][T10678] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 397.215790][T10678] usb 3-1: USB disconnect, device number 30 [ 397.252453][T20588] loop0: detected capacity change from 0 to 8 [ 397.257680][T10678] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 397.298874][T20591] xt_CT: You must specify a L4 protocol and not use inversions on it [ 397.309998][T10678] ftdi_sio 3-1:0.0: device disconnected [ 397.726596][ T7057] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 398.004355][ T7057] usb 5-1: Using ep0 maxpacket: 16 [ 398.205430][ T7057] usb 5-1: unable to get BOS descriptor or descriptor too short [ 398.325592][ T7057] usb 5-1: config 1 interface 0 altsetting 218 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 398.356328][ T7057] usb 5-1: config 1 interface 0 has no altsetting 0 [ 398.506856][ T7] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 398.546851][ T7057] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.40 [ 398.566840][ T7057] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.585271][ T7057] usb 5-1: Product: syz [ 398.596250][ T7057] usb 5-1: Manufacturer: syz [ 398.611180][ T7057] usb 5-1: SerialNumber: syz [ 398.628891][T20657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7300'. [ 398.863009][T20598] udc-core: couldn't find an available UDC or it's busy [ 398.873635][T20598] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 398.890575][T20644] loop0: detected capacity change from 0 to 32768 [ 398.971205][T20672] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 398.988422][ T7057] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input21 [ 399.036714][ T3545] bcm5974 5-1:1.0: could not read from device [ 399.056894][ T7057] usb 5-1: USB disconnect, device number 30 [ 399.063320][ T3545] bcm5974 5-1:1.0: could not read from device [ 399.089218][ T7] usb 4-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 399.116290][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.133258][ T7] usb 4-1: Product: syz [ 399.143332][T20675] loop2: detected capacity change from 0 to 33280 [ 399.150098][ T7] usb 4-1: Manufacturer: syz [ 399.155170][ T7] usb 4-1: SerialNumber: syz [ 399.191840][ T7] usb 4-1: config 0 descriptor?? [ 399.203626][T20675] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 399.255609][T20678] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 399.264567][T20678] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 399.288599][ T7] usb 4-1: selecting invalid altsetting 1 [ 399.300271][ T7] technisat-usb2: could not set alternate setting to 0 [ 399.308416][T20675] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.7310: invalid indirect mapped block 32768 (level 2) [ 399.479777][T20675] EXT4-fs (loop2): 1 orphan inode deleted [ 399.485675][T20675] EXT4-fs (loop2): 1 truncate cleaned up [ 399.516599][T20675] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 399.527365][ T7] technisat-usb2: firmware version: 0.0 [ 399.527399][ T7] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 399.695511][T20675] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 399.722495][T20693] loop1: detected capacity change from 0 to 64 [ 399.779683][ T7] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 399.823585][T20693] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 399.846724][ T7] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) error while loading driver (-19) [ 399.905283][ T7] usb 4-1: USB disconnect, device number 25 [ 400.277321][T20719] netlink: 'syz.0.7328': attribute type 2 has an invalid length. [ 400.468550][T20735] loop0: detected capacity change from 0 to 256 [ 400.571475][T20735] exfat: Deprecated parameter 'utf8' [ 400.601703][T20735] exfat: Deprecated parameter 'utf8' [ 400.607422][ T4296] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 400.654722][T20735] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 400.673792][T20741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7340'. [ 400.813568][T20747] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.7342'. [ 400.843690][T20747] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 400.876267][ T4296] usb 2-1: Using ep0 maxpacket: 16 [ 400.995019][T20755] x_tables: ip_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 400.996896][ T4296] usb 2-1: config 4 has an invalid interface number: 134 but max is 0 [ 401.036310][ T4296] usb 2-1: config 4 has no interface number 0 [ 401.042626][ T4296] usb 2-1: config 4 interface 134 has no altsetting 0 [ 401.226670][ T4296] usb 2-1: New USB device found, idVendor=2001, idProduct=4001, bcdDevice=76.24 [ 401.266455][ T4296] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.274666][ T4296] usb 2-1: Product: syz [ 401.297148][ T4296] usb 2-1: Manufacturer: syz [ 401.301892][ T4296] usb 2-1: SerialNumber: syz [ 401.656833][ T4296] pegasus 2-1:4.134: Missing or invalid endpoints [ 401.675214][ T4296] usb 2-1: USB disconnect, device number 30 [ 401.818662][T20800] loop2: detected capacity change from 0 to 64 [ 402.106450][ T21] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 402.114421][ T7548] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 402.361055][ T7548] usb 4-1: Using ep0 maxpacket: 8 [ 402.486595][ T21] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 402.497032][ T7548] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 402.505164][ T7548] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 402.534358][ T21] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 402.544859][ T7548] usb 4-1: config 0 has no interface number 0 [ 402.560023][ T21] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 402.573826][ T7548] usb 4-1: config 0 interface 52 has no altsetting 0 [ 402.581108][ T21] usb 1-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 402.590639][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.656620][ T7548] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 402.670836][T20848] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7393'. [ 402.678353][ T7548] usb 4-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 402.696269][ T7548] usb 4-1: Manufacturer: syz [ 402.717026][ T7548] usb 4-1: config 0 descriptor?? [ 402.771950][T20852] netlink: 'syz.2.7395': attribute type 10 has an invalid length. [ 402.781309][ T7548] hub 4-1:0.52: bad descriptor, ignoring hub [ 402.790312][ T7548] hub: probe of 4-1:0.52 failed with error -5 [ 402.812501][T20852] team0: Device hsr_slave_1 failed to register rx_handler [ 402.866638][ T21] ttusb_dec_send_command: result bulk message failed: error -8 [ 402.877727][ T21] ttusb-dec: probe of 1-1:1.0 failed with error -8 [ 402.899504][ T21] usb 1-1: USB disconnect, device number 34 [ 402.954534][T20854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7396'. [ 403.122599][T20840] loop4: detected capacity change from 0 to 32768 [ 403.208049][T20840] JBD2: Ignoring recovery information on journal [ 403.236434][T20865] ieee802154 phy0 wpan0: encryption failed: -90 [ 403.316677][ T21] usb 4-1: USB disconnect, device number 26 [ 403.356681][T20840] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 403.380973][T20872] netlink: 'syz.1.7404': attribute type 32 has an invalid length. [ 403.494237][ T4194] ocfs2: Unmounting device (7,4) on (node local) [ 403.851813][T20906] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7421'. [ 404.069488][T20926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7429'. [ 404.165690][T20923] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 404.240926][T20936] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 404.292339][T20942] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7438'. [ 404.325896][T20942] openvswitch: netlink: Missing key (keys=40, expected=100) [ 404.463914][T20956] loop3: detected capacity change from 0 to 1024 [ 404.569236][T20964] netlink: 'syz.0.7448': attribute type 17 has an invalid length. [ 404.718394][T20973] netlink: 3529 bytes leftover after parsing attributes in process `syz.0.7454'. [ 404.754401][T20973] netlink: 52477 bytes leftover after parsing attributes in process `syz.0.7454'. [ 404.788979][T20973] netlink: 71676 bytes leftover after parsing attributes in process `syz.0.7454'. [ 404.936302][T20989] loop2: detected capacity change from 0 to 256 [ 404.943725][T20983] nvme_fabrics: missing parameter 'host_traddr=%s' [ 404.950765][ T4296] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 405.019470][T20996] loop4: detected capacity change from 0 to 8 [ 405.077057][T20996] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 405.125799][T15363] udevd[15363]: incorrect cramfs checksum on /dev/loop4 [ 405.137692][T20996] cramfs: Error -3 while decompressing! [ 405.164125][T20996] cramfs: ffffffff97275ea8(26)->ffff888049e47000(4096) [ 405.197142][T20996] cramfs: Error -3 while decompressing! [ 405.206367][ T4296] usb 2-1: Using ep0 maxpacket: 32 [ 405.212636][T20996] cramfs: ffffffff97275ea8(26)->ffff888049e47000(4096) [ 405.226558][ T26] audit: type=1800 audit(405.188:20): pid=20996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.7464" name="file2" dev="loop4" ino=348 res=0 errno=0 [ 405.342219][ T4296] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.356875][T21011] loop2: detected capacity change from 0 to 256 [ 405.384239][ T4296] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.518675][ T4296] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 405.548468][ T4296] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 405.564159][ T4296] usb 2-1: Product: syz [ 405.596820][ T4296] usb 2-1: Manufacturer: syz [ 405.657817][ T4296] hub 2-1:4.0: USB hub found [ 405.845519][T21046] netlink: 'syz.3.7489': attribute type 13 has an invalid length. [ 405.874654][T21048] loop2: detected capacity change from 0 to 164 [ 405.881846][ T4296] hub 2-1:4.0: 7 ports detected [ 405.906383][ T4296] hub 2-1:4.0: insufficient power available to use all downstream ports [ 406.086538][ T4296] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 406.096086][ T4296] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 406.147473][ T4296] usb 2-1: USB disconnect, device number 31 [ 406.168855][T21067] device bridge_slave_1 left promiscuous mode [ 406.175253][T21067] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.198678][T21067] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 406.266471][ T7548] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 406.296446][ T21] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 406.362288][T21081] openvswitch: netlink: Actions may not be safe on all matching packets [ 406.452992][T21089] loop2: detected capacity change from 0 to 256 [ 406.536500][ T21] usb 5-1: Using ep0 maxpacket: 8 [ 406.556687][ T7548] usb 1-1: too many configurations: 65, using maximum allowed: 8 [ 406.646501][ T7548] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 406.657505][ T21] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 406.665814][ T21] usb 5-1: config 179 has no interface number 0 [ 406.681965][ T21] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 406.703293][ T21] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 406.723895][ T21] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 406.735905][ T21] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 406.756632][ T21] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 406.774739][ T7548] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 406.788285][ T21] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 406.806488][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.823424][T21105] netlink: 'syz.2.7518': attribute type 2 has an invalid length. [ 406.832660][T21105] netlink: 'syz.2.7518': attribute type 8 has an invalid length. [ 406.845539][T21105] __nla_validate_parse: 1 callbacks suppressed [ 406.845556][T21105] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7518'. [ 406.861968][T21058] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 406.870023][ T7548] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 406.956817][ T7548] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 406.976424][ T4296] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 406.996755][T21113] netlink: 'syz.1.7522': attribute type 49 has an invalid length. [ 407.046690][ T7548] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 407.136671][ T7548] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 407.226614][ T7548] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 407.237071][ T4296] usb 4-1: Using ep0 maxpacket: 16 [ 407.269160][T21133] dlm: dev_write: no op 0 0 [ 407.323146][ T7057] usb 5-1: USB disconnect, device number 31 [ 407.326378][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 407.337428][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 407.347453][ C1] ================================================================== [ 407.356290][ C1] BUG: KASAN: use-after-free in do_raw_spin_lock+0x283/0x2f0 [ 407.363719][ C1] Read of size 4 at addr ffff8880778b705c by task syz-executor/4187 [ 407.371735][ C1] [ 407.374129][ C1] CPU: 1 PID: 4187 Comm: syz-executor Not tainted syzkaller #0 [ 407.381712][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 407.391924][ C1] Call Trace: [ 407.395246][ C1] [ 407.398207][ C1] dump_stack_lvl+0x188/0x250 [ 407.402940][ C1] ? show_regs_print_info+0x20/0x20 [ 407.408194][ C1] ? load_image+0x410/0x410 [ 407.412741][ C1] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 407.418251][ C1] print_address_description+0x60/0x2d0 [ 407.424021][ C1] ? do_raw_spin_lock+0x283/0x2f0 [ 407.429084][ C1] kasan_report+0xdf/0x130 [ 407.433637][ C1] ? do_raw_spin_lock+0x283/0x2f0 [ 407.438706][ C1] do_raw_spin_lock+0x283/0x2f0 [ 407.443609][ C1] ? read_lock_is_recursive+0x10/0x10 [ 407.449030][ C1] ? __rwlock_init+0x140/0x140 [ 407.453842][ C1] _raw_spin_lock_irqsave+0xbc/0x100 [ 407.459181][ C1] ? _raw_spin_lock+0x40/0x40 [ 407.463906][ C1] ? kcov_remote_stop+0x490/0x530 [ 407.468995][ C1] __wake_up+0xf4/0x180 [ 407.473200][ C1] ? remove_wait_queue+0x120/0x120 [ 407.478394][ C1] __usb_hcd_giveback_urb+0x394/0x520 [ 407.483825][ C1] dummy_timer+0xa44/0x3570 [ 407.488395][ C1] ? mark_lock+0x94/0x320 [ 407.492788][ C1] ? dummy_free_streams+0x520/0x520 [ 407.498031][ C1] ? dummy_free_streams+0x520/0x520 [ 407.503368][ C1] call_timer_fn+0x17b/0x540 [ 407.507984][ C1] ? dummy_free_streams+0x520/0x520 [ 407.513245][ C1] ? __run_timers+0x810/0x810 [ 407.517957][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 407.523187][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 407.528431][ C1] ? dummy_free_streams+0x520/0x520 [ 407.533676][ C1] __run_timers+0x56c/0x810 [ 407.538248][ C1] ? detach_timer+0x2b0/0x2b0 [ 407.542967][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 407.548995][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 407.553892][ C1] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 407.560192][ C1] run_timer_softirq+0x63/0xf0 [ 407.564994][ C1] handle_softirqs+0x336/0x830 [ 407.569803][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 407.574698][ C1] ? do_softirq+0x210/0x210 [ 407.579243][ C1] ? hrtimer_interrupt+0x6a2/0x8b0 [ 407.584436][ C1] __irq_exit_rcu+0x13b/0x230 [ 407.589151][ C1] ? irq_exit_rcu+0x20/0x20 [ 407.593710][ C1] irq_exit_rcu+0x5/0x20 [ 407.597992][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 407.603668][ C1] [ 407.606631][ C1] [ 407.609794][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 407.615916][ C1] RIP: 0010:call_rcu+0x697/0x900 [ 407.621020][ C1] Code: f7 84 24 a0 00 00 00 00 02 00 00 43 c6 44 25 04 f8 75 4f f7 44 24 58 00 02 00 00 74 01 fb 48 c7 84 24 80 00 00 00 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 08 00 00 00 00 65 48 8b 04 [ 407.640726][ C1] RSP: 0018:ffffc900022d7d40 EFLAGS: 00000206 [ 407.646842][ C1] RAX: dd000bd70bacee00 RBX: ffff88807802cf00 RCX: dd000bd70bacee00 [ 407.654845][ C1] RDX: dffffc0000000000 RSI: ffffffff8a2b2b60 RDI: ffffffff8a7a5100 [ 407.662854][ C1] RBP: ffffc900022d7e78 R08: ffffffff8e6d322f R09: 1ffffffff1cda645 [ 407.670833][ C1] R10: dffffc0000000000 R11: fffffbfff1cda646 R12: dffffc0000000000 [ 407.678916][ C1] R13: 1ffff9200045afb8 R14: ffff8880b8f3b2d0 R15: 0000000000000053 [ 407.686953][ C1] ? slab_free_freelist_hook+0xec/0x170 [ 407.692552][ C1] ? rcu_force_quiescent_state+0x220/0x220 [ 407.698406][ C1] ? __fput+0x63c/0x8c0 [ 407.702604][ C1] task_work_run+0x125/0x1a0 [ 407.707240][ C1] exit_to_user_mode_loop+0x10f/0x130 [ 407.712946][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 407.718525][ C1] syscall_exit_to_user_mode+0x16/0x40 [ 407.723995][ C1] do_syscall_64+0x58/0xa0 [ 407.728465][ C1] ? clear_bhb_loop+0x30/0x80 [ 407.733180][ C1] ? clear_bhb_loop+0x30/0x80 [ 407.737893][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 407.743820][ C1] RIP: 0033:0x7fc58de42d0e [ 407.748274][ C1] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 407.767946][ C1] RSP: 002b:00007ffe424c44e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 407.776395][ C1] RAX: 0000000000000000 RBX: 000055555a920500 RCX: 00007fc58de42d0e [ 407.784414][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 407.792419][ C1] RBP: 00007ffe424c458c R08: 0000000000000000 R09: 0000000000000000 [ 407.800426][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000607 [ 407.808441][ C1] R13: 00000000000927c0 R14: 00000000000636e9 R15: 00007ffe424c45e0 [ 407.816454][ C1] [ 407.819483][ C1] [ 407.821813][ C1] Allocated by task 21: [ 407.825988][ C1] __kasan_kmalloc+0xaf/0xe0 [ 407.830596][ C1] xpad_probe+0x408/0x1980 [ 407.835054][ C1] usb_probe_interface+0x5be/0xae0 [ 407.840209][ C1] really_probe+0x276/0xc70 [ 407.844750][ C1] __driver_probe_device+0x1f5/0x390 [ 407.850071][ C1] driver_probe_device+0x4f/0x420 [ 407.855153][ C1] __device_attach_driver+0x2b0/0x500 [ 407.860556][ C1] bus_for_each_drv+0x184/0x210 [ 407.865412][ C1] __device_attach+0x2a7/0x480 [ 407.870219][ C1] bus_probe_device+0xba/0x1d0 [ 407.874997][ C1] device_add+0xbcf/0x1050 [ 407.879427][ C1] usb_set_configuration+0x1ad8/0x2140 [ 407.884929][ C1] usb_generic_driver_probe+0x89/0x150 [ 407.890423][ C1] usb_probe_device+0x126/0x250 [ 407.895311][ C1] really_probe+0x276/0xc70 [ 407.899852][ C1] __driver_probe_device+0x1f5/0x390 [ 407.905346][ C1] driver_probe_device+0x4f/0x420 [ 407.910393][ C1] __device_attach_driver+0x2b0/0x500 [ 407.915785][ C1] bus_for_each_drv+0x184/0x210 [ 407.920695][ C1] __device_attach+0x2a7/0x480 [ 407.925477][ C1] bus_probe_device+0xba/0x1d0 [ 407.930348][ C1] device_add+0xbcf/0x1050 [ 407.934822][ C1] usb_new_device+0x9f6/0x15d0 [ 407.939635][ C1] hub_event+0x2b8d/0x5260 [ 407.944102][ C1] process_one_work+0x867/0xff0 [ 407.948996][ C1] worker_thread+0xad7/0x12a0 [ 407.953725][ C1] kthread+0x42e/0x520 [ 407.957841][ C1] ret_from_fork+0x1f/0x30 [ 407.962388][ C1] [ 407.964743][ C1] Freed by task 7057: [ 407.968772][ C1] kasan_set_track+0x4b/0x70 [ 407.973377][ C1] kasan_set_free_info+0x1f/0x40 [ 407.978336][ C1] ____kasan_slab_free+0xd5/0x110 [ 407.983425][ C1] slab_free_freelist_hook+0xec/0x170 [ 407.988845][ C1] kfree+0xef/0x2a0 [ 407.992702][ C1] xpad_disconnect+0x31f/0x440 [ 407.997510][ C1] usb_unbind_interface+0x203/0x870 [ 408.002770][ C1] device_release_driver_internal+0x487/0x710 [ 408.008909][ C1] bus_remove_device+0x2dd/0x400 [ 408.013895][ C1] device_del+0x63f/0xa80 [ 408.018274][ C1] usb_disable_device+0x3e7/0x8a0 [ 408.023341][ C1] usb_disconnect+0x33c/0x8a0 [ 408.028040][ C1] hub_event+0x1d64/0x5260 [ 408.032503][ C1] process_one_work+0x867/0xff0 [ 408.037403][ C1] worker_thread+0xad7/0x12a0 [ 408.042136][ C1] kthread+0x42e/0x520 [ 408.046253][ C1] ret_from_fork+0x1f/0x30 [ 408.050723][ C1] [ 408.053077][ C1] Last potentially related work creation: [ 408.058825][ C1] kasan_save_stack+0x35/0x60 [ 408.063552][ C1] kasan_record_aux_stack+0xb8/0x100 [ 408.068903][ C1] call_rcu+0x189/0x900 [ 408.073108][ C1] process_one_work+0x867/0xff0 [ 408.078010][ C1] worker_thread+0xad7/0x12a0 [ 408.082736][ C1] kthread+0x42e/0x520 [ 408.086869][ C1] ret_from_fork+0x1f/0x30 [ 408.091335][ C1] [ 408.093690][ C1] The buggy address belongs to the object at ffff8880778b7000 [ 408.093690][ C1] which belongs to the cache kmalloc-1k of size 1024 [ 408.107783][ C1] The buggy address is located 92 bytes inside of [ 408.107783][ C1] 1024-byte region [ffff8880778b7000, ffff8880778b7400) [ 408.121108][ C1] The buggy address belongs to the page: [ 408.126797][ C1] page:ffffea0001de2c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880778b2800 pfn:0x778b0 [ 408.138296][ C1] head:ffffea0001de2c00 order:3 compound_mapcount:0 compound_pincount:0 [ 408.146696][ C1] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 408.154824][ C1] raw: 00fff00000010200 ffffea0001f00008 ffffea0001806e08 ffff888017841dc0 [ 408.163465][ C1] raw: ffff8880778b2800 0000000000100006 00000001ffffffff 0000000000000000 [ 408.172106][ C1] page dumped because: kasan: bad access detected [ 408.178564][ C1] page_owner tracks the page as allocated [ 408.184329][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4197, ts 71695215370, free_ts 71558253866 [ 408.203482][ C1] get_page_from_freelist+0x24f6/0x2670 [ 408.209106][ C1] __alloc_pages+0x1ee/0x480 [ 408.213883][ C1] new_slab+0xc0/0x4b0 [ 408.218003][ C1] ___slab_alloc+0x807/0xdd0 [ 408.222645][ C1] __kmalloc_node_track_caller+0x13d/0x3a0 [ 408.228532][ C1] __alloc_skb+0x22c/0x750 [ 408.233005][ C1] rtmsg_fib+0xd7/0x440 [ 408.237210][ C1] fib_table_insert+0xd24/0x1b80 [ 408.242198][ C1] fib_magic+0x2ca/0x3b0 [ 408.246494][ C1] fib_add_ifaddr+0x3e2/0x5c0 [ 408.251225][ C1] fib_netdev_event+0x35c/0x480 [ 408.256170][ C1] raw_notifier_call_chain+0xcb/0x160 [ 408.261595][ C1] __dev_notify_flags+0x194/0x300 [ 408.266675][ C1] dev_change_flags+0xda/0x1a0 [ 408.271499][ C1] do_setlink+0xca4/0x29d0 [ 408.275962][ C1] rtnl_newlink+0x15bb/0x1920 [ 408.280695][ C1] page last free stack trace: [ 408.285406][ C1] free_unref_page_prepare+0x637/0x6c0 [ 408.290914][ C1] free_unref_page+0x8f/0x2a0 [ 408.295670][ C1] __unfreeze_partials+0x188/0x1e0 [ 408.300831][ C1] put_cpu_partial+0x12d/0x190 [ 408.305750][ C1] qlist_free_all+0x35/0x90 [ 408.310318][ C1] kasan_quarantine_reduce+0x150/0x160 [ 408.315808][ C1] __kasan_slab_alloc+0x2f/0xc0 [ 408.320671][ C1] slab_post_alloc_hook+0x4c/0x380 [ 408.325796][ C1] kmem_cache_alloc+0x15d/0x280 [ 408.330684][ C1] prepare_kernel_cred+0x27/0x6c0 [ 408.335749][ C1] call_usermodehelper_exec_async+0xcb/0x350 [ 408.341768][ C1] ret_from_fork+0x1f/0x30 [ 408.346219][ C1] [ 408.348567][ C1] Memory state around the buggy address: [ 408.354222][ C1] ffff8880778b6f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 408.362307][ C1] ffff8880778b6f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 408.370389][ C1] >ffff8880778b7000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 408.378503][ C1] ^ [ 408.385467][ C1] ffff8880778b7080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 408.393571][ C1] ffff8880778b7100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 408.401664][ C1] ================================================================== [ 408.409773][ C1] Disabling lock debugging due to kernel taint [ 408.415943][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 408.423178][ C1] CPU: 1 PID: 4187 Comm: syz-executor Tainted: G B syzkaller #0 [ 408.432140][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 408.442221][ C1] Call Trace: [ 408.445517][ C1] [ 408.448400][ C1] dump_stack_lvl+0x188/0x250 [ 408.453222][ C1] ? show_regs_print_info+0x20/0x20 [ 408.458436][ C1] ? load_image+0x410/0x410 [ 408.462955][ C1] panic+0x2f8/0x850 [ 408.466858][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 408.471386][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 408.477299][ C1] ? _raw_spin_unlock+0x40/0x40 [ 408.482187][ C1] ? do_raw_spin_lock+0x283/0x2f0 [ 408.487249][ C1] check_panic_on_warn+0x80/0xa0 [ 408.492217][ C1] ? do_raw_spin_lock+0x283/0x2f0 [ 408.497241][ C1] end_report+0x6d/0xf0 [ 408.501401][ C1] kasan_report+0x102/0x130 [ 408.505929][ C1] ? do_raw_spin_lock+0x283/0x2f0 [ 408.511063][ C1] do_raw_spin_lock+0x283/0x2f0 [ 408.516026][ C1] ? read_lock_is_recursive+0x10/0x10 [ 408.521433][ C1] ? __rwlock_init+0x140/0x140 [ 408.526223][ C1] _raw_spin_lock_irqsave+0xbc/0x100 [ 408.531549][ C1] ? _raw_spin_lock+0x40/0x40 [ 408.536268][ C1] ? kcov_remote_stop+0x490/0x530 [ 408.541316][ C1] __wake_up+0xf4/0x180 [ 408.545486][ C1] ? remove_wait_queue+0x120/0x120 [ 408.550614][ C1] __usb_hcd_giveback_urb+0x394/0x520 [ 408.555995][ C1] dummy_timer+0xa44/0x3570 [ 408.560516][ C1] ? mark_lock+0x94/0x320 [ 408.564882][ C1] ? dummy_free_streams+0x520/0x520 [ 408.570094][ C1] ? dummy_free_streams+0x520/0x520 [ 408.575373][ C1] call_timer_fn+0x17b/0x540 [ 408.580015][ C1] ? dummy_free_streams+0x520/0x520 [ 408.585281][ C1] ? __run_timers+0x810/0x810 [ 408.590051][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 408.595279][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 408.600606][ C1] ? dummy_free_streams+0x520/0x520 [ 408.605829][ C1] __run_timers+0x56c/0x810 [ 408.610379][ C1] ? detach_timer+0x2b0/0x2b0 [ 408.615076][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 408.621107][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 408.626001][ C1] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 408.632289][ C1] run_timer_softirq+0x63/0xf0 [ 408.637102][ C1] handle_softirqs+0x336/0x830 [ 408.641883][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 408.646757][ C1] ? do_softirq+0x210/0x210 [ 408.651289][ C1] ? hrtimer_interrupt+0x6a2/0x8b0 [ 408.656427][ C1] __irq_exit_rcu+0x13b/0x230 [ 408.661116][ C1] ? irq_exit_rcu+0x20/0x20 [ 408.665638][ C1] irq_exit_rcu+0x5/0x20 [ 408.669897][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 408.675580][ C1] [ 408.678532][ C1] [ 408.681502][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 408.687531][ C1] RIP: 0010:call_rcu+0x697/0x900 [ 408.692485][ C1] Code: f7 84 24 a0 00 00 00 00 02 00 00 43 c6 44 25 04 f8 75 4f f7 44 24 58 00 02 00 00 74 01 fb 48 c7 84 24 80 00 00 00 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 08 00 00 00 00 65 48 8b 04 [ 408.712111][ C1] RSP: 0018:ffffc900022d7d40 EFLAGS: 00000206 [ 408.718296][ C1] RAX: dd000bd70bacee00 RBX: ffff88807802cf00 RCX: dd000bd70bacee00 [ 408.726305][ C1] RDX: dffffc0000000000 RSI: ffffffff8a2b2b60 RDI: ffffffff8a7a5100 [ 408.734324][ C1] RBP: ffffc900022d7e78 R08: ffffffff8e6d322f R09: 1ffffffff1cda645 [ 408.742344][ C1] R10: dffffc0000000000 R11: fffffbfff1cda646 R12: dffffc0000000000 [ 408.750342][ C1] R13: 1ffff9200045afb8 R14: ffff8880b8f3b2d0 R15: 0000000000000053 [ 408.758351][ C1] ? slab_free_freelist_hook+0xec/0x170 [ 408.763935][ C1] ? rcu_force_quiescent_state+0x220/0x220 [ 408.769843][ C1] ? __fput+0x63c/0x8c0 [ 408.774025][ C1] task_work_run+0x125/0x1a0 [ 408.778663][ C1] exit_to_user_mode_loop+0x10f/0x130 [ 408.784090][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 408.789811][ C1] syscall_exit_to_user_mode+0x16/0x40 [ 408.795288][ C1] do_syscall_64+0x58/0xa0 [ 408.799747][ C1] ? clear_bhb_loop+0x30/0x80 [ 408.804465][ C1] ? clear_bhb_loop+0x30/0x80 [ 408.809229][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 408.815167][ C1] RIP: 0033:0x7fc58de42d0e [ 408.819619][ C1] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 408.839361][ C1] RSP: 002b:00007ffe424c44e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 408.847795][ C1] RAX: 0000000000000000 RBX: 000055555a920500 RCX: 00007fc58de42d0e [ 408.855786][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 408.863792][ C1] RBP: 00007ffe424c458c R08: 0000000000000000 R09: 0000000000000000 [ 408.871773][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000607 [ 408.879769][ C1] R13: 00000000000927c0 R14: 00000000000636e9 R15: 00007ffe424c45e0 [ 408.887801][ C1] [ 408.891507][ C1] Kernel Offset: disabled [ 408.895886][ C1] Rebooting in 86400 seconds..