last executing test programs: 3m23.365481831s ago: executing program 0 (id=3850): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e25, 0x3, @mcast1, 0x4}, 0x1c) 3m23.233182814s ago: executing program 0 (id=3855): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x5, 0x4, 0x8, 0x7, 'syz1\x00', 0xffff}) 3m23.096664838s ago: executing program 0 (id=3859): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000080), 0x1, 0x4e9, &(0x7f0000000200)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) 3m22.69225192s ago: executing program 0 (id=3866): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000000)='.\x02\x00', 0x8c48, &(0x7f0000000240)=ANY=[@ANYBLOB='nojoliet,mode=0x00000000000000e4,dmode=0x0000000000000005,check=relaxed,overriderockperm,utf8,mode=0x0000000000000000,nojoliet,cruft,mode=0xfffffffffffffffb,utf8,session=0x0000000000000043,hide,dmode=0x000000000000001f,uid=', @ANYRESDEC, @ANYBLOB="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"], 0x1, 0x5ae, &(0x7f00000004c0)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) 3m22.285752712s ago: executing program 0 (id=3874): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xf, &(0x7f00000008c0)=@raw=[@generic={0xbf, 0x6, 0x1}, @generic={0xb7, 0x2}, @generic={0x7b, 0xa, 0x2, 0xffc0}, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @call={0x85, 0x0, 0x0, 0x23}, @generic={0xbf, 0x1, 0x6}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m21.767511652s ago: executing program 0 (id=3880): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) 3m21.550856466s ago: executing program 32 (id=3880): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) 3.440152551s ago: executing program 2 (id=7678): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000580)={[{}]}) 2.584970524s ago: executing program 3 (id=7694): setresuid(0x0, 0xee01, 0xee00) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000) 2.421732793s ago: executing program 3 (id=7698): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000640), 0x4) 2.2277078s ago: executing program 3 (id=7702): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f00000009c0)={0x20, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 923.04425ms ago: executing program 5 (id=7727): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="a80100001900010000000000fbdbdf251d01090050000f804c00f8804800738008008400", @ANYRES32=0x0, @ANYBLOB='\b\x00F\x00', @ANYRES32, @ANYBLOB="0c00eef309800400c9801db42ee3a03b5668ab4b3911ae4e379e45fa84e4d167041a2200001a6b767cee2d343f14570044010680400110"], 0x1a8}, 0x1, 0x0, 0x0, 0x11}, 0x0) 880.49895ms ago: executing program 1 (id=7729): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@special}) 802.535679ms ago: executing program 1 (id=7730): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t\x00'/20, @ANYRES32=0x0, @ANYBLOB="04000d800800010002"], 0x24}, 0x1, 0x5502000000000000}, 0x0) 721.868199ms ago: executing program 5 (id=7732): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001780)={0x3c, 0x0, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8847}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x3ff}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc800}, 0x80) 668.995771ms ago: executing program 1 (id=7733): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0x801}]}}}]}, 0x3c}}, 0x0) 616.915353ms ago: executing program 4 (id=7734): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x14, 0x25, 0x1, 0x5, 0x0, {0x5, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 557.260078ms ago: executing program 2 (id=7735): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x3, 0x0, 0x1020}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4, 0xe}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e22}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x40080) 525.942265ms ago: executing program 4 (id=7736): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x7fff, 0x800000000004, @tid=r0}, 0x0) 518.831007ms ago: executing program 5 (id=7737): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x80400, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)={0x3c00, 0x0, 0x1e0, 0x2000, 0x3, 0x80000001, 0x4, 0x2, {0x10, 0x1000}, {0xf, 0x479}, {0x3, 0x7}, {0x1, 0x2, 0x1}, 0x1, 0x80, 0x4, 0x100, 0x1, 0x500, 0x2, 0x100, 0xe, 0x3, 0x1, 0x7, 0x29, 0x100, 0x2}) 428.982088ms ago: executing program 4 (id=7738): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) shutdown(r0, 0x0) 400.513145ms ago: executing program 1 (id=7739): r0 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000006c0)={'wlan0\x00', &(0x7f0000001000)=@ethtool_stats={0x11, 0x2, [0x200, 0x200000000]}}) 389.666447ms ago: executing program 2 (id=7740): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000002c40)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x10, 0x1409, 0x301, 0x70bd27, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 325.541193ms ago: executing program 5 (id=7741): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0x3, 0x6, 0x1f7c, 0x9}, 0x2}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x6bde2}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_TTL={0x5, 0x7, 0x57}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x4) 324.853453ms ago: executing program 3 (id=7742): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0) pread64(r0, &(0x7f00000000c0)=""/208, 0xd0, 0x8d35) 301.874158ms ago: executing program 4 (id=7743): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) 271.222046ms ago: executing program 2 (id=7744): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) 250.341161ms ago: executing program 1 (id=7745): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000980)=@newsa={0xfc, 0x10, 0x1, 0x0, 0xfffffffe, {{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0x42}, 0x0, 0x0, 0x4e21, 0x0, 0x0, 0x0, 0x80, 0x16}, {@in=@broadcast, 0x0, 0x3c}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, {0xfffffffffffffffd, 0x3ffffffe}, {}, 0x0, 0x0, 0xa, 0x3, 0x0, 0x84}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0xa7}}]}, 0xfc}}, 0x0) 204.024292ms ago: executing program 5 (id=7746): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000060900010073797a30000000000900030073797a310000000084000000060a010400000000000000000100000008000b40000000005c0004802c000180090001007866726d000000001c0002800800024000000086050003000000000008000140000000092c00018008000100636d7000200002800c00038005000100ac000000080001400000000908000240000000030900010073797a30"], 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x40050) 192.479824ms ago: executing program 3 (id=7747): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x18, 0x140d, 0x74742e0363e4a2ff, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004c11}, 0x4) 169.06259ms ago: executing program 4 (id=7748): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x3ff}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004815}, 0x0) 139.957167ms ago: executing program 2 (id=7749): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$sequencer(r0, &(0x7f0000000080)=[@l={0x92, 0x5, 0xb0, 0x2, 0x3, 0x9, 0x8}], 0x8) 108.177805ms ago: executing program 1 (id=7750): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x1a, 0x3, "91abc12404cf378042f26c43f91f68d8a90767c0bc71"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x98}}, 0x0) 56.976367ms ago: executing program 3 (id=7751): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x20, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x44044}, 0x40) 56.880357ms ago: executing program 5 (id=7752): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x23, &(0x7f0000000700)=""/40, &(0x7f0000000740)=0x28) 39.025401ms ago: executing program 4 (id=7753): r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x6, 0x46c00) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000001640)={'\x00', 0x4, 0xfd1, 0x7fffffff, 0x0, 0x5}) 0s ago: executing program 2 (id=7754): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x2, @pix_mp={0x6, 0x9, 0x56595559, 0x5, 0xc, [{0x80000001, 0xdc2f}, {0x2, 0x1}, {0xe, 0x1}, {0x407, 0x3}, {0x80, 0xb8e7}, {0x80, 0xd}, {0x0, 0x400}, {0x3, 0x1}], 0x87, 0x97, 0x7, 0x2, 0x5}}) kernel console output (not intermixed with test programs): ] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.747184][ T4285] usb 3-1: config 0 descriptor?? [ 348.759624][T16997] loop3: detected capacity change from 0 to 32768 [ 348.813165][ T4285] gspca_main: spca501-2.14.0 probing 0497:c001 [ 348.879134][T16997] ERROR: (device loop3): duplicateIXtree: [ 348.879134][T16997] [ 348.921742][T16997] ERROR: (device loop3): remounting filesystem as read-only [ 348.941674][ T4753] usb 5-1: USB disconnect, device number 23 [ 349.041041][ T4285] gspca_spca501: reg write: error -71 [ 349.046680][ T4285] spca501 3-1:0.125: Reg write failed for 0x02,0x07,0x05 [ 349.071127][ T4285] spca501: probe of 3-1:0.125 failed with error -22 [ 349.116809][ T4285] usb 3-1: USB disconnect, device number 21 [ 349.302783][T17045] openvswitch: netlink: Actions may not be safe on all matching packets [ 349.797444][T17039] loop5: detected capacity change from 0 to 32768 [ 349.917683][T17039] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.5720 (17039) [ 349.955853][T17076] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5738'. [ 350.032197][T17039] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 350.065898][T17039] BTRFS info (device loop5): using free space tree [ 350.087751][T17039] BTRFS info (device loop5): has skinny extents [ 350.187472][T17094] loop3: detected capacity change from 0 to 128 [ 350.274784][T17094] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 350.353115][T17094] FAT-fs (loop3): Filesystem has been set read-only [ 350.530176][T17039] BTRFS info (device loop5): enabling ssd optimizations [ 350.539927][T17122] xt_TCPMSS: Only works on TCP SYN packets [ 350.788001][T17130] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 351.357554][T17152] 8021q: adding VLAN 0 to HW filter on device bond1 [ 351.489030][T17161] loop5: detected capacity change from 0 to 256 [ 351.917632][T17182] loop5: detected capacity change from 0 to 64 [ 351.976894][T17177] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222022 combination not found [ 352.039464][T17186] loop1: detected capacity change from 0 to 128 [ 352.152230][T17140] loop2: detected capacity change from 0 to 40427 [ 352.244282][T17194] netlink: 'syz.3.5786': attribute type 21 has an invalid length. [ 352.254664][T17194] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5786'. [ 352.265951][T17194] netlink: 'syz.3.5786': attribute type 4 has an invalid length. [ 352.274131][T17194] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5786'. [ 352.458925][T17202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5790'. [ 352.831442][T17140] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 352.838336][T17140] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 352.865245][T17186] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 352.920989][T17186] hpfs: filesystem error: improperly stopped [ 352.927231][T17140] F2FS-fs (loop2): invalid crc value [ 352.932237][T17186] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 352.960877][T17186] hpfs: You really don't want any checks? You are crazy... [ 352.968207][T17186] hpfs: Code page directory magic doesn't match (magic = 7b3184b5) [ 352.993932][T17140] F2FS-fs (loop2): Found nat_bits in checkpoint [ 353.021032][T17186] hpfs: code page support is disabled [ 353.031488][T17186] hpfs: hpfs_map_4sectors(): unaligned read [ 353.062775][T17186] hpfs: hpfs_map_4sectors(): unaligned read [ 353.068916][T17186] hpfs: filesystem error: unable to find root dir [ 353.083008][T17210] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 353.097742][T17210] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 353.280950][T17140] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 353.288144][T17140] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 354.415019][T17228] loop1: detected capacity change from 0 to 32768 [ 354.498016][T17228] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 scanned by syz.1.5802 (17228) [ 354.539358][ T4261] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 354.583113][T17228] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 354.625353][T17228] BTRFS info (device loop1): enabling ssd optimizations [ 354.635334][T17228] BTRFS info (device loop1): not using ssd optimizations [ 354.650845][T17228] BTRFS info (device loop1): turning off barriers [ 354.717373][T17228] BTRFS info (device loop1): use no compression [ 354.744254][T17228] BTRFS info (device loop1): using free space tree [ 354.772531][T17282] loop3: detected capacity change from 0 to 64 [ 354.778840][T17228] BTRFS info (device loop1): has skinny extents [ 354.931077][ T4261] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 354.933958][ T4757] Bluetooth: hci3: command 0x0406 tx timeout [ 354.981510][ T4261] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 355.021328][ T4261] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.225765][T17319] device gtp0 entered promiscuous mode [ 355.456836][ T9818] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 9 /dev/loop1 scanned by udevd (9818) [ 355.588923][ T4261] qmi_wwan: probe of 5-1:1.0 failed with error -22 [ 355.623625][ T4261] usb 5-1: USB disconnect, device number 24 [ 356.571544][T17386] loop4: detected capacity change from 0 to 1024 [ 356.691129][ T4261] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 356.960934][ T4261] usb 6-1: Using ep0 maxpacket: 32 [ 357.079265][T17422] loop4: detected capacity change from 0 to 16 [ 357.101172][ T4261] usb 6-1: config 87 has an invalid interface number: 229 but max is 1 [ 357.116136][T17422] erofs: (device loop4): mounted with root inode @ nid 36. [ 357.121296][ T4261] usb 6-1: config 87 has no interface number 1 [ 357.129681][ T4261] usb 6-1: config 87 interface 229 has no altsetting 0 [ 357.311329][ T4261] usb 6-1: New USB device found, idVendor=0421, idProduct=042f, bcdDevice=1a.7c [ 357.320809][ T4974] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 357.335079][ T4261] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.352559][ T4261] usb 6-1: Product: syz [ 357.356800][ T4261] usb 6-1: Manufacturer: syz [ 357.385297][T17430] loop4: detected capacity change from 0 to 256 [ 357.396585][ T4261] usb 6-1: SerialNumber: syz [ 357.401918][ T4959] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 357.461190][ T4225] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 357.608252][T17434] loop4: detected capacity change from 0 to 512 [ 357.659568][T17434] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.5895: Attempting to read directory block (0) that is past i_size (16) [ 357.681424][ T4959] usb 2-1: Using ep0 maxpacket: 8 [ 357.695572][T17434] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 357.705299][T17434] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x0000000000000080,data_err=ignore,auto_da_alloc,discard,norecovery,grpjquota=.test_dummy_encryption=v1,sysvgroups,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 357.729239][ T4974] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 357.739601][ T4225] usb 4-1: Using ep0 maxpacket: 32 [ 357.747502][ T4974] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 357.758971][ T4261] rndis_wlan: probe of 6-1:87.229 failed with error -22 [ 357.766863][ T4261] rndis_host: probe of 6-1:87.229 failed with error -22 [ 357.774723][ T4261] cdc_acm: probe of 6-1:87.229 failed with error -22 [ 357.788118][ T4261] usb 6-1: USB disconnect, device number 10 [ 357.820558][ T4959] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 357.846507][ T4959] usb 2-1: config 0 interface 0 has no altsetting 0 [ 357.871379][ T4225] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 357.880287][ T4225] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 357.889036][ T4225] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 357.898922][ T4225] usb 4-1: config 1 has no interface number 0 [ 357.905175][ T4225] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 357.915969][ T4225] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 357.929056][ T4225] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 357.938187][ T4225] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.951155][ T4974] usb 3-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 357.969447][ T4974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.979558][ T4974] usb 3-1: Product: syz [ 357.989173][ T4974] usb 3-1: Manufacturer: syz [ 357.993966][ T4974] usb 3-1: SerialNumber: syz [ 358.022141][ T4225] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 358.051470][ T4959] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 358.060840][ T4959] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.069074][ T4959] usb 2-1: Product: syz [ 358.073901][ T4959] usb 2-1: Manufacturer: syz [ 358.078543][ T4959] usb 2-1: SerialNumber: syz [ 358.094737][ T4959] usb 2-1: config 0 descriptor?? [ 358.108656][T17441] xt_CT: You must specify a L4 protocol and not use inversions on it [ 358.150501][ T4959] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 358.232061][ T4225] snd_usb_pod 4-1:1.1: invalid control EP [ 358.237903][ T4225] snd_usb_pod 4-1:1.1: cannot start listening: -22 [ 358.255382][ T4225] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 358.281526][ T4225] snd_usb_pod: probe of 4-1:1.1 failed with error -22 [ 358.322691][ T4974] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 22 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 358.363336][ T4959] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 358.387652][ T4959] snd_usb_toneport: probe of 2-1:0.0 failed with error -22 [ 358.456850][ T4959] usb 4-1: USB disconnect, device number 25 [ 358.520591][T17451] xt_TCPMSS: Only works on TCP SYN packets [ 358.545571][ T1108] usb 3-1: USB disconnect, device number 22 [ 358.563495][ T1108] usblp0: removed [ 358.581243][ T4974] usb 2-1: USB disconnect, device number 16 [ 358.723443][T17459] loop4: detected capacity change from 0 to 512 [ 358.793724][T17459] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_dev=0x000000000000000e,,errors=continue. Quota mode: writeback. [ 359.187707][T17481] netlink: 136 bytes leftover after parsing attributes in process `syz.2.5916'. [ 359.267752][T17481] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5916'. [ 359.299467][T17487] loop5: detected capacity change from 0 to 256 [ 359.308388][T17481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5916'. [ 359.318601][T17481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5916'. [ 359.376247][ T4757] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 359.410613][T17487] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d) [ 359.486092][T17496] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5923'. [ 359.518447][T17500] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 359.628427][T17502] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5926'. [ 359.641063][T17502] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.751236][ T4757] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.782489][ T4757] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 359.830337][ T4757] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 359.870924][ T4757] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 359.900846][ T4757] usb 4-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c [ 359.930982][ T4757] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.941346][ T4757] usb 4-1: config 0 descriptor?? [ 359.960618][T17516] ecryptfs_parse_options: eCryptfs: unrecognized option [ecry/²áº_cipher=aes] [ 359.984432][ T4757] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input21 [ 360.015369][T17514] loop1: detected capacity change from 0 to 4096 [ 360.116576][T17514] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 360.288417][T17516] Could not find key with description: [syz ] [ 360.296709][T17516] process_request_key_err: No key [ 360.308449][T17516] Could not find valid key in user session keyring for sig specified in mount option: [syz ] [ 360.324062][T17516] One or more global auth toks could not properly register; rc = [-2] [ 360.340191][T17516] Error parsing options; rc = [-2] [ 360.384324][ T4757] usb 4-1: USB disconnect, device number 26 [ 360.707439][ T4757] appletouch 4-1:0.0: input: appletouch disconnected [ 360.829364][T17546] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5946'. [ 360.922169][ T4226] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 361.227003][T17575] loop3: detected capacity change from 0 to 256 [ 361.309012][ T4226] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 361.327568][ T4226] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 361.341599][T17575] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d) [ 361.505808][ T4226] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 361.520910][ T4226] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.545405][ T4226] usb 3-1: Product: syz [ 361.551259][ T4226] usb 3-1: Manufacturer: syz [ 361.569997][ T4226] usb 3-1: SerialNumber: syz [ 361.612073][ T4226] usb 3-1: config 0 descriptor?? [ 361.809620][T17600] netlink: 'syz.3.5973': attribute type 6 has an invalid length. [ 361.872405][ T4226] mos7840 3-1:0.0: required endpoints missing [ 361.891119][ T4757] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 361.974520][T17586] loop4: detected capacity change from 0 to 32768 [ 362.006480][T17586] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.5964 (17586) [ 362.089447][ T4226] usb 3-1: USB disconnect, device number 23 [ 362.133676][T17586] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 362.160625][T17586] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 362.192496][T17586] BTRFS info (device loop4): use zstd compression, level 3 [ 362.203538][T17608] loop3: detected capacity change from 0 to 256 [ 362.210031][T17586] BTRFS info (device loop4): using free space tree [ 362.218335][T17586] BTRFS info (device loop4): has skinny extents [ 362.260240][T17586] BTRFS info (device loop4): enabling ssd optimizations [ 362.261815][ T4757] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 362.360951][ T4757] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.393606][ T4757] usb 6-1: config 0 descriptor?? [ 362.454243][ T4757] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 362.650907][ T4974] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 362.704662][T17633] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5981'. [ 362.775734][T17636] loop1: detected capacity change from 0 to 256 [ 362.894477][T17636] FAT-fs (loop1): Directory bread(block 64) failed [ 362.901193][ T4757] gspca_cpia1: usb_control_msg 03, error -71 [ 362.907722][ T4974] usb 4-1: Using ep0 maxpacket: 16 [ 362.921073][ T4757] gspca_cpia1: usb_control_msg 01, error -71 [ 362.927476][ T4757] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 362.941076][T17636] FAT-fs (loop1): Directory bread(block 65) failed [ 362.971213][ T4757] usb 6-1: USB disconnect, device number 11 [ 362.988407][T17636] FAT-fs (loop1): Directory bread(block 66) failed [ 363.020935][T17636] FAT-fs (loop1): Directory bread(block 67) failed [ 363.027696][T17636] FAT-fs (loop1): Directory bread(block 68) failed [ 363.052952][ T4974] usb 4-1: config 0 has an invalid interface number: 154 but max is 0 [ 363.065124][ T4974] usb 4-1: config 0 has no interface number 0 [ 363.080848][T17636] FAT-fs (loop1): Directory bread(block 69) failed [ 363.087531][ T4974] usb 4-1: config 0 interface 154 has no altsetting 0 [ 363.097747][T17636] FAT-fs (loop1): Directory bread(block 70) failed [ 363.124249][T17636] FAT-fs (loop1): Directory bread(block 71) failed [ 363.138729][T17636] FAT-fs (loop1): Directory bread(block 72) failed [ 363.157750][T17636] FAT-fs (loop1): Directory bread(block 73) failed [ 363.285736][ T26] audit: type=1800 audit(1790306131.773:33): pid=17636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5983" name="file1" dev="loop1" ino=1048632 res=0 errno=0 [ 363.318385][ T4974] usb 4-1: New USB device found, idVendor=0f11, idProduct=2000, bcdDevice=c8.70 [ 363.339598][ T4974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.349544][ T4974] usb 4-1: Product: syz [ 363.357210][ T4974] usb 4-1: Manufacturer: syz [ 363.365615][ T4974] usb 4-1: SerialNumber: syz [ 363.377958][ T4974] usb 4-1: config 0 descriptor?? [ 363.464799][T17653] netlink: 'syz.4.5991': attribute type 1 has an invalid length. [ 363.540996][ T4225] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 363.560728][T17657] sctp: [Deprecated]: syz.4.5993 (pid 17657) Use of int in maxseg socket option. [ 363.560728][T17657] Use struct sctp_assoc_value instead [ 363.712813][ T4974] ldusb 4-1:0.154: Interrupt in endpoint not found [ 363.727787][ T4974] usb 4-1: USB disconnect, device number 27 [ 363.868659][T17665] loop4: detected capacity change from 0 to 512 [ 363.900920][ T4225] usb 3-1: config 1 has an invalid interface number: 27 but max is 1 [ 363.920259][ T4225] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 363.931246][ T4225] usb 3-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 363.966663][ T4225] usb 3-1: config 1 has no interface number 2 [ 364.151099][ T4225] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 364.175579][ T4225] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.193954][ T4225] usb 3-1: Product: syz [ 364.198181][ T4225] usb 3-1: Manufacturer: syz [ 364.220829][ T4225] usb 3-1: SerialNumber: syz [ 364.389001][T17665] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 364.503907][T17665] EXT4-fs error (device loop4): ext4_orphan_get:1410: inode #15: comm syz.4.5996: iget: bad i_size value: 360287970189639680 [ 364.524808][ T4225] usb 3-1: selecting invalid altsetting 1 [ 364.530566][ T4225] speedtch 3-1:1.0: speedtch_bind: setting interface to 1 failed (-22)! [ 364.546682][T17665] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.5996: couldn't read orphan inode 15 (err -117) [ 364.577228][ T4225] speedtch 3-1:1.0: usbatm_usb_probe: bind failed: -22! [ 364.588905][T17665] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: none. [ 364.612915][ T4225] speedtch: probe of 3-1:1.0 failed with error -22 [ 364.690646][T17665] EXT4-fs error (device loop4): ext4_empty_dir:3147: inode #12: block 13: comm syz.4.5996: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=12, rec_len=0, size=4096 fake=1 [ 364.712701][ T4227] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 364.721718][ T4225] usb 3-1: selecting invalid altsetting 1 [ 364.727497][ T4225] speedtch 3-1:1.27: speedtch_bind: setting interface to 1 failed (-22)! [ 364.756547][T17665] EXT4-fs warning (device loop4): ext4_empty_dir:3149: inode #12: comm syz.4.5996: directory missing '.' [ 364.769379][ T4225] speedtch 3-1:1.27: usbatm_usb_probe: bind failed: -22! [ 364.781554][ T4225] speedtch: probe of 3-1:1.27 failed with error -22 [ 364.795909][T17682] loop5: detected capacity change from 0 to 256 [ 364.863524][ T4225] usb 3-1: selecting invalid altsetting 1 [ 364.890674][ T4225] speedtch 3-1:1.1: speedtch_bind: setting interface to 1 failed (-22)! [ 364.907033][ T4225] speedtch 3-1:1.1: usbatm_usb_probe: bind failed: -22! [ 364.928409][ T4225] speedtch: probe of 3-1:1.1 failed with error -22 [ 364.950935][ T4227] usb 2-1: Using ep0 maxpacket: 32 [ 364.957597][ T4225] usb 3-1: USB disconnect, device number 24 [ 365.241077][ T4227] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 365.270596][ T4227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.312705][ T4227] usb 2-1: Product: syz [ 365.316982][ T4227] usb 2-1: Manufacturer: syz [ 365.370913][ T4227] usb 2-1: SerialNumber: syz [ 365.385870][ T4227] usb 2-1: config 0 descriptor?? [ 365.478464][T17711] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6015'. [ 365.522721][T17715] autofs4:pid:17715:autofs_fill_super: called with bogus options [ 365.603759][T17718] netlink: 'syz.3.6020': attribute type 4 has an invalid length. [ 365.664339][T17723] loop2: detected capacity change from 0 to 512 [ 365.794095][T17723] EXT4-fs (loop2): 1 truncate cleaned up [ 365.799867][T17723] EXT4-fs (loop2): mounted filesystem without journal. Opts: abort,,errors=continue. Quota mode: none. [ 365.881396][ T4227] airspy 2-1:0.0: usb_control_msg() failed -71 request 0a [ 365.888586][ T4227] airspy 2-1:0.0: Could not detect board [ 365.895206][ T4227] airspy: probe of 2-1:0.0 failed with error -71 [ 365.911786][ T4227] usb 2-1: USB disconnect, device number 17 [ 366.170497][T17737] loop5: detected capacity change from 0 to 4096 [ 366.476718][T12783] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 366.506476][T17761] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6040'. [ 366.520800][T12783] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 366.552838][T17761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6040'. [ 366.631359][T17767] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 367.057767][T17797] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6058'. [ 367.098697][T17797] netlink: 'syz.3.6058': attribute type 3 has an invalid length. [ 367.228248][T17805] loop4: detected capacity change from 0 to 4096 [ 367.307870][T17805] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 367.362999][T17805] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 367.393779][T17805] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 367.469926][T17805] ntfs: volume version 3.1. [ 367.526597][T17828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6073'. [ 367.620135][ T4191] ntfs: (device loop4): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 367.820941][ T4261] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 368.118535][ T4974] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 368.222841][ T4261] usb 2-1: config 1 interface 0 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 368.441573][ T4261] usb 2-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 368.458471][ T4261] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.477353][ T4261] usb 2-1: Product: syz [ 368.491868][ T4261] usb 2-1: Manufacturer: syz [ 368.504561][T17879] loop4: detected capacity change from 0 to 164 [ 368.512350][ T4261] usb 2-1: SerialNumber: syz [ 368.531824][ T4974] usb 4-1: config 0 has an invalid interface number: 83 but max is 0 [ 368.541791][ T4974] usb 4-1: config 0 has no interface number 0 [ 368.548293][ T4974] usb 4-1: config 0 interface 83 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 4 [ 368.623708][ T4974] usb 4-1: config 0 interface 83 altsetting 0 endpoint 0x82 has invalid maxpacket 246, setting to 64 [ 368.833327][ T4974] usb 4-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 368.867588][ T4261] scsi host1: uas [ 368.874670][ T4974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.920864][ T4974] usb 4-1: Product: syz [ 368.925093][ T4974] usb 4-1: Manufacturer: syz [ 368.936362][ T4974] usb 4-1: SerialNumber: syz [ 368.950596][ T4974] usb 4-1: config 0 descriptor?? [ 368.972740][ T144] scsi 1:0:0:0: tag#20 sense submit err -2 uas-tag 1 inflight: s-st a-in a-cmd s-cmd [ 368.983074][ T144] scsi 1:0:0:0: tag#20 CDB: Inquiry 12 00 00 00 24 00 [ 368.990564][T17841] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 369.013184][ T4974] redrat3 4-1:0.83: Couldn't find all endpoints [ 369.061257][ T150] scsi 1:0:0:0: tag#20 sense submit err -2 uas-tag 1 inflight: s-st a-in a-cmd s-cmd [ 369.061698][ T4227] usb 2-1: USB disconnect, device number 18 [ 369.072012][ T150] scsi 1:0:0:0: tag#20 CDB: Inquiry 12 00 00 00 24 00 [ 369.132835][T17906] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6111'. [ 369.155606][T17906] netlink: 356 bytes leftover after parsing attributes in process `syz.4.6111'. [ 369.234744][ T4974] usb 4-1: USB disconnect, device number 28 [ 369.253188][T17912] misc userio: No port type given on /dev/userio [ 369.365042][T17916] nvme_rdma: malformed address passed: 172.20.20.24:0Æý [ 369.564022][T17930] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6122'. [ 369.660640][T17934] netlink: 'syz.4.6126': attribute type 32 has an invalid length. [ 369.690498][T17935] loop2: detected capacity change from 0 to 764 [ 369.776999][ T4227] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 370.038138][T17958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6136'. [ 370.067822][T17962] loop4: detected capacity change from 0 to 8 [ 370.140677][T17956] nvme_tcp: malformed address passed: 127.:.0.1:44%0 [ 370.168685][T17962] SQUASHFS error: xz decompression failed, data probably corrupt [ 370.201618][T17962] SQUASHFS error: Failed to read block 0x108: -5 [ 370.208282][T17962] SQUASHFS error: Unable to read metadata cache entry [106] [ 370.286628][T17962] SQUASHFS error: Unable to read inode 0x11f [ 370.311221][ T4227] usb 6-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 370.338366][ T4227] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.353402][ T4227] usb 6-1: Product: syz [ 370.361770][ T4227] usb 6-1: Manufacturer: syz [ 370.366414][ T4227] usb 6-1: SerialNumber: syz [ 370.422130][ T4227] usb 6-1: config 0 descriptor?? [ 370.451190][ T4756] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 370.481741][ T4227] hub 6-1:0.0: bad descriptor, ignoring hub [ 370.487725][ T4227] hub: probe of 6-1:0.0 failed with error -5 [ 370.504846][ T4227] f81232 6-1:0.0: f81534a converter detected [ 370.713488][ T4227] usb 6-1: f81534a converter now attached to ttyUSB0 [ 370.811162][ T4756] usb 2-1: config 1 has an invalid interface number: 209 but max is 0 [ 370.826267][ T4756] usb 2-1: config 1 has no interface number 0 [ 370.835794][ T4756] usb 2-1: config 1 interface 209 has no altsetting 0 [ 370.848681][ T4756] usb 2-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=3d.41 [ 370.866790][ T4756] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.933825][ T4756] cytherm 2-1:1.209: Cypress thermometer device now attached [ 371.049788][ T4227] usb 6-1: USB disconnect, device number 12 [ 371.075746][ T4227] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 371.089605][ T4227] f81232 6-1:0.0: device disconnected [ 371.186334][ T4227] usb 2-1: USB disconnect, device number 19 [ 371.198538][ T4227] cytherm 2-1:1.209: Cypress thermometer now disconnected [ 371.828248][T18001] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6157'. [ 372.196389][T18029] netlink: 'syz.1.6171': attribute type 1 has an invalid length. [ 372.241130][T18029] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.6171'. [ 372.260593][T18033] netlink: 'syz.2.6173': attribute type 3 has an invalid length. [ 372.281339][T18029] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6171'. [ 372.403615][T18041] netlink: 'syz.4.6177': attribute type 9 has an invalid length. [ 372.527890][T18052] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6181'. [ 372.952830][T18090] netlink: 'syz.2.6201': attribute type 1 has an invalid length. [ 373.043604][T18095] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6205'. [ 373.093633][T18102] loop5: detected capacity change from 0 to 164 [ 373.243448][T18095] team0: Port device team_slave_0 removed [ 373.271787][T18095] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 373.392977][T18116] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6214'. [ 373.422628][T18116] netlink: 'syz.2.6214': attribute type 2 has an invalid length. [ 373.593835][T18132] nft_compat: unsupported protocol 0 [ 373.732710][T18141] ecryptfs_parse_options: eCryptfs: unrecognized option [ecryptf%_sig=syz] [ 373.769641][T18141] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 373.814488][T18141] Error parsing options; rc = [-22] [ 373.975760][T18158] IPv6: sit1: Disabled Multicast RS [ 374.034459][T18164] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6237'. [ 374.367627][T18190] loop1: detected capacity change from 0 to 64 [ 374.385711][T18182] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 374.767407][T18206] nvme_tcp: malformed address passed: ::È!Þò1%9OâO6Iw­ð)áâhOÔ|£F˜¬5¡+ÏûÜÉåœÌǠνՊ:8009 [ 374.826424][T18219] loop2: detected capacity change from 0 to 64 [ 374.867816][T18221] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6265'. [ 375.177457][T18237] usb usb7: usbfs: process 18237 (syz.2.6271) did not claim interface 0 before use [ 375.309264][T18245] netlink: 'syz.2.6277': attribute type 1 has an invalid length. [ 375.331714][ T4974] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 375.473657][T18255] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6282'. [ 375.678770][ T4227] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 375.734066][ T4974] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 375.761595][ T4974] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 375.981754][ T4974] usb 5-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 376.011384][ T4974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.021610][ T4974] usb 5-1: Product: syz [ 376.025858][ T4974] usb 5-1: Manufacturer: syz [ 376.056058][ T4974] usb 5-1: SerialNumber: syz [ 376.096422][ T4227] usb 6-1: config 4 has an invalid interface number: 128 but max is 0 [ 376.135147][ T4227] usb 6-1: config 4 has no interface number 0 [ 376.141376][ T4227] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 376.253664][ T4227] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.331521][ T4227] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 376.340650][ T4227] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.373161][ T4974] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 25 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 376.483050][ T4227] hub 6-1:4.128: USB hub found [ 376.493030][T18257] loop1: detected capacity change from 0 to 32768 [ 376.594829][ T4974] usb 5-1: USB disconnect, device number 25 [ 376.629952][ T4974] usblp0: removed [ 376.676885][T18257] (syz.1.6283,18257,0):ocfs2_verify_heartbeat:827 ERROR: Mismatching o2cb heartbeat modes [ 376.702974][ T4227] hub 6-1:4.128: 27 ports detected [ 376.708268][ T4227] hub 6-1:4.128: Using single TT (err -22) [ 376.774834][T18257] (syz.1.6283,18257,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 376.778938][ T4227] hub 6-1:4.128: insufficient power available to use all downstream ports [ 376.924589][ T4227] hub 6-1:4.128: hub_hub_status failed (err = -71) [ 376.931242][ T4227] hub 6-1:4.128: config failed, can't get hub status (err -71) [ 377.039793][ T4227] usb 6-1: USB disconnect, device number 13 [ 377.059154][T18284] netlink: 'syz.3.6297': attribute type 10 has an invalid length. [ 377.087755][T18284] netlink: 'syz.3.6297': attribute type 10 has an invalid length. [ 377.111259][T18267] loop2: detected capacity change from 0 to 32768 [ 377.321777][T18299] netlink: 'syz.3.6301': attribute type 1 has an invalid length. [ 377.333794][T18299] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.6301'. [ 377.375964][T18267] XFS (loop2): Mounting V5 Filesystem [ 377.900996][T18267] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 378.125518][T18267] XFS (loop2): Starting recovery (logdev: internal) [ 378.252332][T18267] XFS (loop2): Ending recovery (logdev: internal) [ 378.321874][T18267] XFS (loop2): AG 0: Corrupt btree 5 pointer at level 1 index 0. [ 378.357275][T18267] XFS (loop2): Failed to initialize disk quotas. [ 378.442920][T18267] XFS (loop2): AG 0: Corrupt btree 5 pointer at level 1 index 0. [ 378.457529][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.463899][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.595243][ T4190] XFS (loop2): Unmounting Filesystem [ 379.294420][T18334] loop5: detected capacity change from 0 to 32768 [ 379.372571][T18376] CIFS: Attempting to mount \\::1\share [ 379.418927][T18334] XFS (loop5): Mounting V5 Filesystem [ 379.433129][T18376] CIFS: VFS: No username specified [ 379.503398][T18334] XFS (loop5): Ending clean mount [ 379.588574][T18334] XFS (loop5): Quotacheck needed: Please wait. [ 379.800344][T18334] XFS (loop5): Quotacheck: Done. [ 379.964231][T18413] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6351'. [ 379.993933][T12783] XFS (loop5): Unmounting Filesystem [ 380.462329][ T4225] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 380.582203][T18440] netlink: 'syz.4.6367': attribute type 21 has an invalid length. [ 380.590150][T18440] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6367'. [ 380.712234][ T4225] usb 4-1: Using ep0 maxpacket: 16 [ 380.800548][T18448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6370'. [ 381.012547][ T4225] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 381.049382][ T4225] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.084461][ T4225] usb 4-1: Product: syz [ 381.106578][ T4225] usb 4-1: Manufacturer: syz [ 381.113827][ T4225] usb 4-1: SerialNumber: syz [ 381.134473][ T4225] usb 4-1: config 0 descriptor?? [ 381.143423][T18464] device bond4 entered promiscuous mode [ 381.149385][T18464] 8021q: adding VLAN 0 to HW filter on device bond4 [ 381.194133][ T4225] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 381.195928][T18467] netlink: 'syz.4.6378': attribute type 1 has an invalid length. [ 381.270168][T18467] netlink: 228 bytes leftover after parsing attributes in process `syz.4.6378'. [ 381.412571][ T4225] ssu100: probe of 4-1:0.0 failed with error -71 [ 381.439600][ T4225] usb 4-1: USB disconnect, device number 29 [ 381.558374][T18487] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6388'. [ 381.814002][T18497] loop1: detected capacity change from 0 to 512 [ 381.992802][T18497] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.6393: invalid indirect mapped block 4294967295 (level 1) [ 382.165919][T18497] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.6393: invalid indirect mapped block 4294967295 (level 1) [ 382.252766][T18497] EXT4-fs (loop1): 2 truncates cleaned up [ 382.258566][T18497] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000004004,barrier=0x0000000000000005,,errors=continue. Quota mode: writeback. [ 382.642315][ T4225] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 382.714614][T18536] binder: 18533:18536 ioctl 400c620e 200000000e80 returned -22 [ 382.898129][T18543] sctp: [Deprecated]: syz.5.6415 (pid 18543) Use of int in max_burst socket option deprecated. [ 382.898129][T18543] Use struct sctp_assoc_value instead [ 382.915445][ T4225] usb 5-1: Using ep0 maxpacket: 32 [ 383.099299][ T4225] usb 5-1: unable to get BOS descriptor or descriptor too short [ 383.108794][T18549] x_tables: duplicate underflow at hook 4 [ 383.194842][ T4225] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 73, changing to 7 [ 383.262602][T18556] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6421'. [ 383.412552][ T4225] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 383.412590][ T4225] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.412622][ T4225] usb 5-1: Product: syz [ 383.412640][ T4225] usb 5-1: Manufacturer: syz [ 383.412657][ T4225] usb 5-1: SerialNumber: syz [ 383.857829][T18541] loop3: detected capacity change from 0 to 32768 [ 383.929133][ T4225] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 383.958169][T18573] xt_HMARK: spi-set and port-set can't be combined [ 384.000533][T18541] [ 384.000533][T18541] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 384.000533][T18541] [ 384.030595][ T4225] usb 5-1: USB disconnect, device number 26 [ 384.099825][T18541] ERROR: (device loop3): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 384.099825][T18541] [ 384.141469][T18575] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 384.161158][T18575] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 384.182135][T18541] ERROR: (device loop3): remounting filesystem as read-only [ 384.210913][T18541] ERROR: (device loop3): jfs_unlink: [ 384.210913][T18541] [ 384.320954][T11709] ERROR: (device loop3): xtTruncate: XT_GETPAGE: xtree page corrupt [ 384.320954][T11709] [ 384.343206][ T5555] udevd[5555]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 384.553883][T18585] loop2: detected capacity change from 0 to 1024 [ 384.644599][T18593] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6440'. [ 384.672169][T18593] netlink: 'syz.4.6440': attribute type 1 has an invalid length. [ 384.697099][T18585] EXT4-fs (loop2): Ignoring removed bh option [ 384.723177][T18593] netlink: 'syz.4.6440': attribute type 2 has an invalid length. [ 384.749434][T18593] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6440'. [ 384.808689][T18585] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,grpid,abort,debug_want_extra_isize=0x0000000000000008,lazytime,errors=remount-ro,stripe=0x0000000000000007,bh,auto_da_alloc,. Quota mode: none. [ 385.032368][T18585] EXT4-fs error (device loop2): ext4_remount:6062: comm syz.2.6436: Abort forced by user [ 385.086360][T18585] EXT4-fs (loop2): Remounting filesystem read-only [ 385.122147][T18585] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: none. [ 385.136823][T18609] loop1: detected capacity change from 0 to 4096 [ 385.258028][T18609] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nogrpid,usrquota,nombcache,block_validity,. Quota mode: writeback. [ 385.546686][T18609] EXT4-fs error (device loop1): ext4_get_first_dir_block:3619: inode #12: block 80: comm syz.1.6444: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 385.783482][T18609] EXT4-fs (loop1): Remounting filesystem read-only [ 385.810385][T18609] EXT4-fs error (device loop1): ext4_get_first_dir_block:3621: inode #12: comm syz.1.6444: directory missing '..' [ 385.862083][T18609] EXT4-fs (loop1): Remounting filesystem read-only [ 386.052177][ T21] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 386.426162][T18658] netlink: 260 bytes leftover after parsing attributes in process `syz.3.6470'. [ 386.476484][ T21] usb 6-1: config 0 has an invalid interface number: 199 but max is 1 [ 386.495785][ T21] usb 6-1: config 0 has no interface number 1 [ 386.536896][ T21] usb 6-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 386.578755][T18662] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6469'. [ 386.588058][ T21] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 386.672869][T18662] team0: Port device team_slave_0 removed [ 386.698470][T18662] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 386.740553][ T21] usb 6-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 386.770557][ T21] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 386.803533][ T21] usb 6-1: SerialNumber: syz [ 386.828207][ T21] usb 6-1: config 0 descriptor?? [ 387.032315][ T4225] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 387.122691][T18686] netlink: 'syz.1.6482': attribute type 4 has an invalid length. [ 387.131603][ T21] usb 6-1: Found UVC 0.00 device (0002:0000) [ 387.148918][ T21] usb 6-1: No valid video chain found. [ 387.209196][T18690] CIFS: VFS: bad security option: krb5iý [ 387.242311][ T21] usb 6-1: USB disconnect, device number 14 [ 387.591872][T18707] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.6494'. [ 387.617312][T18707] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 387.667076][ T4225] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 387.700251][ T4225] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.714165][T18710] netlink: 84 bytes leftover after parsing attributes in process `syz.4.6495'. [ 387.740141][ T4225] usb 4-1: Product: syz [ 387.756923][ T4225] usb 4-1: Manufacturer: syz [ 387.777308][ T4225] usb 4-1: SerialNumber: syz [ 387.797422][ T4225] usb 4-1: config 0 descriptor?? [ 387.844615][ T4225] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 388.016112][T18726] loop1: detected capacity change from 0 to 512 [ 388.062103][ T4225] gspca_sunplus: reg_r err -71 [ 388.077164][ T4225] usb 4-1: USB disconnect, device number 30 [ 388.109223][T18726] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 388.136220][T18726] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 388.186631][T18726] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 388.202916][T18726] System zones: 1-12 [ 388.204000][T18734] netlink: 'syz.5.6506': attribute type 71 has an invalid length. [ 388.215369][T18726] EXT4-fs (loop1): orphan cleanup on readonly fs [ 388.226856][T18726] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.6503: invalid indirect mapped block 12 (level 1) [ 388.290475][T18726] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.6503: invalid indirect mapped block 2 (level 2) [ 388.392320][T18726] EXT4-fs (loop1): 1 truncate cleaned up [ 388.398030][T18726] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000008000,dioread_nolock,max_batch_time=0x0000000000001000,nolazytime,grpjquota=,errors=continue. Quota mode: none. [ 388.420670][T18744] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 389.095594][T18777] loop5: detected capacity change from 0 to 256 [ 389.187829][T18775] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 389.213802][T18775] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 389.221802][T18777] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d) [ 389.235964][T18775] 8021q: adding VLAN 0 to HW filter on device .` [ 389.255653][T18775] IPv6: ADDRCONF(NETDEV_CHANGE): .`: link becomes ready [ 389.290945][T18775] IPv6: ADDRCONF(NETDEV_CHANGE): .`: link becomes ready [ 389.374083][T18775] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.454971][T18775] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 389.521972][T18780] netlink: 'syz.3.6527': attribute type 2 has an invalid length. [ 389.530312][T18782] device bridge_slave_1 left promiscuous mode [ 389.558911][T18782] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.620883][T18782] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 390.066979][T18765] loop2: detected capacity change from 0 to 32768 [ 390.281393][T18765] XFS (loop2): Mounting V5 Filesystem [ 390.349494][T18822] overlayfs: conflicting options: nfs_export=on,index=off [ 390.474429][T18765] XFS (loop2): Ending clean mount [ 390.552633][T18765] XFS (loop2): Quotacheck needed: Please wait. [ 390.721393][T18765] XFS (loop2): Quotacheck: Done. [ 390.867515][ T4190] XFS (loop2): Unmounting Filesystem [ 391.192605][T18851] comedi: No check for data length of config insn id 7 is implemented [ 391.227925][T18851] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 391.257367][ T4225] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 391.268743][T18851] comedi: Assuming n=15 is correct [ 391.652558][ T4225] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.702655][ T4225] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.857581][T18878] netlink: 'syz.5.6572': attribute type 4 has an invalid length. [ 391.903930][ T4225] usb 4-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 391.932064][ T4225] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 391.958149][ T4225] usb 4-1: Product: syz [ 391.980616][ T4225] usb 4-1: Manufacturer: syz [ 392.063868][ T4225] hub 4-1:1.0: USB hub found [ 392.282360][ T4225] hub 4-1:1.0: config failed, hub has too many ports! (err -19) [ 392.321574][ T4225] usbtouchscreen: probe of 4-1:1.0 failed with error -12 [ 392.438643][T18898] nvme_fabrics: missing parameter 'nqn=%s' [ 392.659023][ T4225] usb 4-1: USB disconnect, device number 31 [ 392.908435][T18923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6593'. [ 392.943749][T18923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6593'. [ 392.945081][T18886] loop1: detected capacity change from 0 to 32768 [ 393.077730][T18886] JBD2: Ignoring recovery information on journal [ 393.132705][T18931] tipc: Can't bind to reserved service type 1 [ 393.300948][T18886] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 393.587504][T18886] syz.1.6575 (18886) used greatest stack depth: 18176 bytes left [ 393.608739][T18960] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (2) [ 393.681622][ T4189] ocfs2: Unmounting device (7,1) on (node local) [ 393.781551][T18970] loop2: detected capacity change from 0 to 1024 [ 393.911450][T18970] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 394.002234][T18970] hfsplus: failed to load root directory [ 394.129696][T18980] netdevsim netdevsim1: Firmware load for './file0/file0/..' refused, path contains '..' component [ 394.732178][T19008] netlink: 'syz.1.6629': attribute type 1 has an invalid length. [ 394.739971][T19008] netlink: 244 bytes leftover after parsing attributes in process `syz.1.6629'. [ 395.047764][T18967] loop4: detected capacity change from 0 to 32768 [ 395.077816][T19022] loop3: detected capacity change from 0 to 512 [ 395.259781][T19022] EXT4-fs error (device loop3): ext4_orphan_get:1410: inode #15: comm syz.3.6634: iget: bad i_size value: 38620345925642 [ 395.309017][T19033] xt_CT: You must specify a L4 protocol and not use inversions on it [ 395.372393][T19022] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.6634: couldn't read orphan inode 15 (err -117) [ 395.393059][T19031] loop1: detected capacity change from 0 to 1024 [ 395.405194][T19035] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6641'. [ 395.435186][T19022] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,grpjquota=,acl,journal_dev=0x0000000000000011,usrjquota=,bsdgroups,,errors=continue. Quota mode: writeback. [ 395.612201][ T4224] hfsplus: b-tree write err: -5, ino 25 [ 395.617990][ T4224] hfsplus: b-tree write err: -5, ino 4 [ 395.642122][ T4224] hfsplus: b-tree write err: -5, ino 2 [ 395.647852][ T4224] hfsplus: b-tree write err: -5, ino 20 [ 395.767679][T19043] nvme_rdma: malformed src address passed: 1270.0.1 [ 395.892100][ T4225] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 396.312389][ T4225] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 396.349584][ T4225] usb 4-1: config 0 has no interface number 0 [ 396.397682][T19066] 8021q: adding VLAN 0 to HW filter on device bond5 [ 396.443927][ T4225] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 44663, setting to 64 [ 396.574216][T19073] loop4: detected capacity change from 0 to 8 [ 396.693172][T19073] squashfs image failed sanity check [ 396.702651][ T4225] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 396.732501][ T4225] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 396.740614][ T4225] usb 4-1: Manufacturer: syz [ 396.791495][ T4225] usb 4-1: SerialNumber: syz [ 396.833392][ T4225] usb 4-1: config 0 descriptor?? [ 396.858805][T19022] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 396.918651][T19090] overlayfs: missing 'lowerdir' [ 397.013923][T19094] loop1: detected capacity change from 0 to 512 [ 397.092341][ T4225] usbtouchscreen 4-1:0.214: Failed to read FW rev: -71 [ 397.103460][ T4225] usbtouchscreen: probe of 4-1:0.214 failed with error -71 [ 397.154008][ T4225] usb 4-1: USB disconnect, device number 32 [ 397.160822][T19094] EXT4-fs (loop1): Ignoring removed oldalloc option [ 397.232972][T19094] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,dioread_lock,oldalloc,block_validity,,errors=continue. Quota mode: writeback. [ 397.874496][T19127] ieee802154 phy0 wpan0: encryption failed: -22 [ 397.939036][T19134] loop5: detected capacity change from 0 to 16 [ 398.033758][T19134] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 398.066238][T19134] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 398.108774][T19134] erofs: DAX unsupported by block device. Turning off DAX. [ 398.127160][T19134] erofs: (device loop5): mounted with root inode @ nid 36. [ 398.346780][T19152] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6696'. [ 398.485618][T19161] netlink: 'syz.2.6699': attribute type 1 has an invalid length. [ 398.516377][T19162] dlm: no locking on control device [ 398.628391][T19167] loop1: detected capacity change from 0 to 1024 [ 399.173291][T19200] loop5: detected capacity change from 0 to 512 [ 399.260417][T19200] EXT4-fs error (device loop5): ext4_orphan_get:1436: comm syz.5.6719: bad orphan inode 13 [ 399.315873][T19200] ext4_test_bit(bit=12, block=4) = 1 [ 399.351551][T19200] is_bad_inode(inode)=0 [ 399.380723][T19200] NEXT_ORPHAN(inode)=0 [ 399.406352][T19200] max_ino=32 [ 399.426213][T19200] i_nlink=1 [ 399.444480][T19200] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 399.518169][T19200] EXT4-fs warning (device loop5): dx_probe:845: inode #2: comm syz.5.6719: Hash code is SIPHASH, but hash not in dirent [ 399.578619][T19200] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.6719: Corrupt directory, running e2fsck is recommended [ 399.629595][T19219] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 399.648423][T19200] EXT4-fs warning (device loop5): dx_probe:845: inode #2: comm syz.5.6719: Hash code is SIPHASH, but hash not in dirent [ 399.686089][T19200] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.6719: Corrupt directory, running e2fsck is recommended [ 399.722162][T19200] EXT4-fs error (device loop5): ext4_find_dest_de:2117: inode #2: block 13: comm syz.5.6719: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=0, rec_len=6, size=1024 fake=0 [ 399.939671][T19227] loop1: detected capacity change from 0 to 1024 [ 400.007328][T19229] loop5: detected capacity change from 0 to 512 [ 400.147430][T19229] EXT4-fs (loop5): mounted filesystem without journal. Opts: auto_da_alloc,grpquota,noinit_itable,,errors=continue. Quota mode: writeback. [ 400.171479][T19227] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 400.283969][T19229] ext4 filesystem being mounted at /510/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 400.309338][T19227] EXT4-fs warning (device loop1): ext4_rmdir:3245: inode #11: comm syz.1.6731: empty directory 'file1' has too many links (111) [ 400.389387][T19245] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6738'. [ 400.478620][T19229] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: comm syz.5.6732: inode #327680: comm syz.5.6732: iget: illegal inode # [ 400.532243][T19229] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.6732: error while reading EA inode 327680 err=-117 [ 400.988238][T19272] loop1: detected capacity change from 0 to 64 [ 401.003067][T19270] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6750'. [ 401.226649][T19285] netlink: 'syz.3.6757': attribute type 30 has an invalid length. [ 401.290787][T19290] loop3: detected capacity change from 0 to 256 [ 401.362127][ T4969] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 401.598596][T19296] netlink: 'syz.1.6763': attribute type 3 has an invalid length. [ 401.638285][T19296] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6763'. [ 401.792471][ T4969] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 401.822369][ T4969] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.877817][ T4969] usb 3-1: config 1 interface 0 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 0 [ 401.946293][ T4969] usb 3-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 402.037814][ T4969] usb 3-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 402.080855][ T4969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.230903][T19317] netlink: 'syz.4.6771': attribute type 2 has an invalid length. [ 402.415182][ T4969] snd-usb-caiaq 3-1:1.0: invalid EPs [ 402.420695][ T4969] usb 3-1: unable to init card! (ret=-22) [ 402.454748][ T4969] snd-usb-caiaq: probe of 3-1:1.0 failed with error -22 [ 402.481455][T19324] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[19326] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[19324] [ 402.544204][ T4225] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 402.630177][ T4969] usb 3-1: USB disconnect, device number 25 [ 402.657360][T19330] vers=1.0 (cifs) not permitted when mounting with smb3 [ 402.657360][T19330] [ 402.719218][T19330] CIFS: VFS: vers=1.0 (cifs) not permitted when mounting with smb3 [ 402.793021][T19336] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 402.963639][ T4225] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 402.982213][ T21] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 402.990394][ T4225] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 403.031274][ T4225] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 403.075810][ T4225] usb 2-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 403.104243][ T4225] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.240261][ T21] usb 6-1: Using ep0 maxpacket: 32 [ 403.291870][T19353] netlink: 'syz.2.6789': attribute type 3 has an invalid length. [ 403.313233][T19353] netlink: 'syz.2.6789': attribute type 1 has an invalid length. [ 403.402667][ T4225] ttusb_dec_send_command: result bulk message failed: error -8 [ 403.411394][ T4225] ttusb-dec: probe of 2-1:1.0 failed with error -8 [ 403.455802][ T4225] usb 2-1: USB disconnect, device number 20 [ 403.552299][ T21] usb 6-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 403.588779][ T21] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.609454][ T21] usb 6-1: Product: syz [ 403.622276][ T4261] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 403.628441][ T21] usb 6-1: Manufacturer: syz [ 403.638455][ T21] usb 6-1: SerialNumber: syz [ 404.012303][ T4261] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 404.052077][ T4261] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 404.082255][ T4261] usb 4-1: config 0 interface 0 has no altsetting 0 [ 404.132038][T19374] usb usb8: usbfs: process 19374 (syz.2.6800) did not claim interface 0 before use [ 404.223353][ T21] usb 6-1: USB disconnect, device number 15 [ 404.314258][ T4261] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 404.330127][T19356] loop4: detected capacity change from 0 to 32768 [ 404.342530][ T4261] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.371217][ T4261] usb 4-1: Product: syz [ 404.387546][ T4261] usb 4-1: Manufacturer: syz [ 404.397161][ T4261] usb 4-1: SerialNumber: syz [ 404.413911][ T4261] usb 4-1: config 0 descriptor?? [ 404.447466][T19356] XFS (loop4): Mounting V5 Filesystem [ 404.515607][ T4656] udevd[4656]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 404.541277][T19356] XFS (loop4): Ending clean mount [ 404.549504][T19356] XFS (loop4): Quotacheck needed: Please wait. [ 404.682990][T19356] XFS (loop4): Quotacheck: Done. [ 404.882172][ T4191] XFS (loop4): Unmounting Filesystem [ 404.895805][ T4261] usb 4-1: USB disconnect, device number 33 [ 405.090217][T19408] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6813'. [ 405.452154][ T4261] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 405.719213][T19432] loop2: detected capacity change from 0 to 16 [ 405.725724][ T4261] usb 2-1: Using ep0 maxpacket: 16 [ 405.757583][T19432] erofs: (device loop2): mounted with root inode @ nid 36. [ 405.800217][T19434] netlink: 'syz.3.6825': attribute type 1 has an invalid length. [ 405.813283][T19432] attempt to access beyond end of device [ 405.813283][T19432] loop2: rw=524288, want=34359738368, limit=16 [ 405.854578][T19434] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.6825'. [ 405.869158][ T4193] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -4065 in[4096, 0] out[9000] [ 405.883260][ T4261] usb 2-1: unable to get BOS descriptor or descriptor too short [ 405.909027][T19432] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 24575 of nid 89 [ 405.972515][ T4756] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 405.973964][T19432] erofs: (device loop2): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 405.989699][ T4261] usb 2-1: config 1 interface 0 altsetting 218 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 406.025837][ T4261] usb 2-1: config 1 interface 0 has no altsetting 0 [ 406.103380][T19432] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 20479 of nid 89 [ 406.165900][T19432] erofs: (device loop2): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 406.198237][T19432] attempt to access beyond end of device [ 406.198237][T19432] loop2: rw=524288, want=56, limit=16 [ 406.252805][ T4756] usb 5-1: Using ep0 maxpacket: 32 [ 406.272333][ T4261] usb 2-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.40 [ 406.293311][ T4261] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.301366][ T4261] usb 2-1: Product: syz [ 406.319401][T19432] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -4065 in[4096, 0] out[8192] [ 406.374703][T19446] i2c i2c-0: Invalid block write size 253 [ 406.388256][ T4261] usb 2-1: Manufacturer: syz [ 406.411911][ T4261] usb 2-1: SerialNumber: syz [ 406.451708][ T26] audit: type=1800 audit(1790830716.933:34): pid=19432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6824" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 406.486603][ T4756] usb 5-1: unable to get BOS descriptor or descriptor too short [ 406.556500][T19448] loop3: detected capacity change from 0 to 256 [ 406.590020][ T26] audit: type=1400 audit(1790830717.063:35): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="#(%#{//(@\)//&@},['%%&\#*" pid=19449 comm="syz.5.6833" [ 406.620894][ T4756] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 406.652452][T19448] exFAT-fs (loop3): bogus sectors bits per cluster : 41 [ 406.652452][T19448] [ 406.654012][ T4756] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 406.682109][T19448] exFAT-fs (loop3): failed to read boot sector [ 406.694653][T19448] exFAT-fs (loop3): failed to recognize exfat type [ 406.716787][T19452] loop5: detected capacity change from 0 to 64 [ 406.722456][T19410] udc-core: couldn't find an available UDC or it's busy [ 406.740142][ T4756] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 406.742970][T19410] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 406.772399][ T4756] usb 5-1: config 128 has no interface number 0 [ 406.778727][ T4756] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0xA has invalid maxpacket 7224, setting to 1024 [ 406.810463][ T4756] usb 5-1: config 128 interface 127 altsetting 14 bulk endpoint 0xA has invalid maxpacket 1024 [ 406.845322][ T4261] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input26 [ 406.852200][ T4756] usb 5-1: config 128 interface 127 has no altsetting 0 [ 406.942567][ T3541] bcm5974 2-1:1.0: could not read from device [ 407.017414][ T4261] usb 2-1: USB disconnect, device number 21 [ 407.024069][ T4756] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 407.043657][ T3541] bcm5974 2-1:1.0: could not read from device [ 407.064479][ T4756] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.092248][ T4756] usb 5-1: Product: syz [ 407.102926][ T4756] usb 5-1: Manufacturer: syz [ 407.114495][T19457] loop3: detected capacity change from 0 to 164 [ 407.118182][ T4756] usb 5-1: SerialNumber: syz [ 407.150282][T19460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6838'. [ 407.165311][T19460] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6838'. [ 407.182416][T19426] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 407.294547][T19457] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 407.324366][T19462] cifs: Unknown parameter 'h}#úä [ 407.324366][T19462] Ü[—Íñ¦bšÿÿÿITäŒ&¬æ:ÅèÙ"‚Õëï1:ºÃÃÓ­'Ä4,Zz-#FÇ<æõ]%gCžÊ [ 407.324366][T19462] SÃȘØÈžZ§6ŸÂ' [ 407.513327][T19473] loop2: detected capacity change from 0 to 128 [ 407.592827][T19476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6846'. [ 407.692131][ T4756] usb 5-1: USB disconnect, device number 27 [ 407.840909][T19491] rdma_rxe: rxe creation allowed on top of a real device only [ 407.849128][ T4225] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 408.018735][T19500] loop4: detected capacity change from 0 to 64 [ 408.049135][T19493] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 408.120280][T19500] minix_free_block (loop4:21): bit already cleared [ 408.259363][ T4225] usb 3-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 408.286099][ T4225] usb 3-1: config 220 has an invalid interface number: 218 but max is 183 [ 408.311524][ T4225] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 408.330126][T19508] syz.1.6863: vmalloc error: size 70368744177852, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 408.357367][ T4225] usb 3-1: config 220 has no interface number 0 [ 408.370589][ T4225] usb 3-1: too many endpoints for config 220 interface 218 altsetting 195: 181, using maximum allowed: 30 [ 408.391192][T19508] CPU: 0 PID: 19508 Comm: syz.1.6863 Not tainted syzkaller #0 [ 408.398728][T19508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 408.409046][T19508] Call Trace: [ 408.412447][T19508] [ 408.415471][T19508] dump_stack_lvl+0x188/0x250 [ 408.420291][T19508] ? rcu_lock_release+0x5/0x20 [ 408.425199][T19508] ? show_regs_print_info+0x20/0x20 [ 408.430443][T19508] ? load_image+0x410/0x410 [ 408.434997][T19508] warn_alloc+0x245/0x320 [ 408.439411][T19508] ? zone_watermark_ok_safe+0x250/0x250 [ 408.444990][T19508] ? __mutex_lock_common+0x435/0x2400 [ 408.450547][T19508] ? tomoyo_path_number_perm+0x5f7/0x6b0 [ 408.456421][T19508] __vmalloc_node_range+0x2b1/0x8b0 [ 408.461672][T19508] ? dvb_dvr_do_ioctl+0x12a/0x220 [ 408.466841][T19508] vmalloc+0x75/0x80 [ 408.470779][T19508] ? dvb_dvr_do_ioctl+0x12a/0x220 [ 408.475845][T19508] dvb_dvr_do_ioctl+0x12a/0x220 [ 408.480739][T19508] dvb_usercopy+0x191/0x2b0 [ 408.485284][T19508] ? dvb_dvr_release+0x3d0/0x3d0 [ 408.490355][T19508] ? dvb_generic_ioctl+0xb0/0xb0 [ 408.495349][T19508] ? dvb_dvr_poll+0x230/0x230 [ 408.500101][T19508] dvb_dvr_ioctl+0x25/0x30 [ 408.504560][T19508] __se_sys_ioctl+0xfa/0x170 [ 408.509246][T19508] do_syscall_64+0x4c/0xa0 [ 408.513719][T19508] ? clear_bhb_loop+0x30/0x80 [ 408.518492][T19508] ? clear_bhb_loop+0x30/0x80 [ 408.523215][T19508] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 408.529188][T19508] RIP: 0033:0x7fe3379fc159 [ 408.533690][T19508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.553382][T19508] RSP: 002b:00007fe335c54028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 408.561838][T19508] RAX: ffffffffffffffda RBX: 00007fe337c83fa0 RCX: 00007fe3379fc159 [ 408.569859][T19508] RDX: 00004000000000bc RSI: 0000000000006f2d RDI: 0000000000000003 [ 408.577908][T19508] RBP: 00007fe337a9306b R08: 0000000000000000 R09: 0000000000000000 [ 408.585920][T19508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 408.593931][T19508] R13: 00007fe337c84038 R14: 00007fe337c83fa0 R15: 00007ffcfc689798 [ 408.602054][T19508] [ 408.617247][ T4225] usb 3-1: config 220 interface 218 altsetting 195 has 0 endpoint descriptors, different from the interface descriptor's value: 181 [ 408.653888][ T5555] udevd[5555]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 408.686101][ T4225] usb 3-1: config 220 interface 218 has no altsetting 0 [ 408.740355][ T4225] usb 3-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 408.788288][ T4225] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.030904][T19525] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 409.050401][T19508] Mem-Info: [ 409.054444][T19508] active_anon:331 inactive_anon:7451 isolated_anon:0 [ 409.054444][T19508] active_file:13235 inactive_file:45257 isolated_file:0 [ 409.054444][T19508] unevictable:768 dirty:424 writeback:0 [ 409.054444][T19508] slab_reclaimable:21271 slab_unreclaimable:101793 [ 409.054444][T19508] mapped:30597 shmem:1662 pagetables:784 bounce:0 [ 409.054444][T19508] kernel_misc_reclaimable:0 [ 409.054444][T19508] free:1351193 free_pcp:11776 free_cma:0 [ 409.110975][T19525] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 409.138299][T19525] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 409.146046][T19508] Node 0 active_anon:1292kB inactive_anon:29292kB active_file:52740kB inactive_file:181028kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122488kB dirty:1696kB writeback:0kB shmem:4568kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11812kB pagetables:3236kB all_unreclaimable? no [ 409.192252][ T4225] usb 3-1: string descriptor 0 read error: -71 [ 409.205410][ T4225] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 409.229402][T19525] device hsr0 left promiscuous mode [ 409.242132][ T4225] gspca_sn9c2028: read1 error -71 [ 409.250822][T19508] Node 1 active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 409.280535][ T4261] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 409.288445][ T4225] gspca_sn9c2028: read1 error -71 [ 409.297123][T19525] device geneve2 left promiscuous mode [ 409.312271][ T4225] gspca_sn9c2028: read1 error -71 [ 409.317797][ T4225] sn9c2028: probe of 3-1:220.218 failed with error -71 [ 409.324112][T19525] device ip6erspan0 left promiscuous mode [ 409.337946][ T4225] usb 3-1: USB disconnect, device number 26 [ 409.348048][T19508] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 409.385733][T19525] device gtp0 left promiscuous mode [ 409.414344][T19525] device veth5 left promiscuous mode [ 409.428426][T19508] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 409.467650][T19508] Node 0 DMA32 free:1473944kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1292kB inactive_anon:29292kB active_file:52740kB inactive_file:181028kB unevictable:1536kB writepending:1696kB present:3129332kB managed:2606508kB mlocked:0kB bounce:0kB free_pcp:40572kB local_pcp:19276kB free_cma:0kB [ 409.572238][ T4261] usb 4-1: Using ep0 maxpacket: 32 [ 409.582273][T19508] lowmem_reserve[]: 0 0 0 0 0 [ 409.587071][T19508] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 409.647212][T19508] lowmem_reserve[]: 0 0 0 0 0 [ 409.682036][T19508] Node 1 Normal free:3915948kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:5756kB local_pcp:0kB free_cma:0kB [ 409.722907][ T4261] usb 4-1: config 2 has an invalid interface number: 222 but max is 0 [ 409.731311][ T4261] usb 4-1: config 2 has no interface number 0 [ 409.767324][ T4261] usb 4-1: config 2 interface 222 has no altsetting 0 [ 409.818892][T19508] lowmem_reserve[]: 0 0 0 0 0 [ 409.835256][T19508] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 409.899529][T19508] Node 0 DMA32: 1218*4kB (UME) 762*8kB (UME) 516*16kB (UME) 606*32kB (UME) 402*64kB (UME) 135*128kB (UME) 47*256kB (UM) 14*512kB (UME) 5*1024kB (UME) 2*2048kB (U) 333*4096kB (UM) = 1474008kB [ 409.952264][ T4261] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=af.17 [ 409.968521][ T4261] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.987039][T19508] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 410.009081][ T4261] usb 4-1: Product: syz [ 410.018816][ T4261] usb 4-1: Manufacturer: syz [ 410.033109][T19508] Node 1 Normal: 57*4kB (UME) 43*8kB (UE) 25*16kB (UME) 153*32kB (UE) 51*64kB (UME) 14*128kB (UME) 4*256kB (UE) 9*512kB (UE) 2*1024kB (UE) 3*2048kB (M) 950*4096kB (M) = 3915948kB [ 410.052046][ T4261] usb 4-1: SerialNumber: syz [ 410.088726][T19508] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 410.112368][T19508] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 410.132795][T19508] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 410.164155][T19508] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 410.182064][T19508] 60094 total pagecache pages [ 410.192649][T19508] 7 pages in swap cache [ 410.202154][ T21] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 410.202814][T19508] Swap cache stats: add 275, delete 268, find 42/77 [ 410.236891][T19508] Free swap = 124216kB [ 410.241132][T19508] Total swap = 124996kB [ 410.255841][T19508] 2097051 pages RAM [ 410.259830][T19508] 0 pages HighMem/MovableOnly [ 410.269968][T19508] 411501 pages reserved [ 410.280099][T19508] 0 pages cma reserved [ 410.344867][ T4756] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 410.390656][ T4261] usb 4-1: USB disconnect, device number 34 [ 410.459107][ T21] usb 5-1: Using ep0 maxpacket: 8 [ 410.582376][ T21] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.604978][ T21] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.612227][T19552] netlink: 100 bytes leftover after parsing attributes in process `syz.1.6882'. [ 410.632365][ T21] usb 5-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 410.662454][ T21] usb 5-1: config 0 interface 0 has no altsetting 0 [ 410.678784][ T21] usb 5-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 3.00 [ 410.708302][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.750695][ T4756] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 410.773818][ T21] usb 5-1: config 0 descriptor?? [ 410.779451][ T4756] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 410.834842][T19546] loop2: detected capacity change from 0 to 40427 [ 410.835287][ T21] usbhid 5-1:0.0: can't add hid device: -22 [ 410.863215][ T21] usbhid: probe of 5-1:0.0 failed with error -22 [ 410.899074][T19546] F2FS-fs (loop2): invalid crc value [ 410.933220][ T4756] usb 6-1: New USB device found, idVendor=0af0, idProduct=6711, bcdDevice= 0.00 [ 410.968285][ T4756] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 410.994933][ T4756] usb 6-1: Product: syz [ 411.000957][T19546] F2FS-fs (loop2): Found nat_bits in checkpoint [ 411.009342][ T4756] usb 6-1: Manufacturer: syz [ 411.028631][T19559] netlink: 'syz.1.6884': attribute type 2 has an invalid length. [ 411.065470][T19559] netlink: 244 bytes leftover after parsing attributes in process `syz.1.6884'. [ 411.084459][ T4757] usb 5-1: USB disconnect, device number 28 [ 411.238986][T19546] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 411.336270][ T4261] usb 6-1: USB disconnect, device number 16 [ 411.369867][T19546] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 411.554501][ T4756] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 411.672656][ T4190] attempt to access beyond end of device [ 411.672656][ T4190] loop2: rw=2049, want=45104, limit=40427 [ 411.702466][T19578] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.6891'. [ 411.711802][T19578] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 411.745208][T19577] loop4: detected capacity change from 0 to 2048 [ 411.853237][T19580] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 411.882304][T19577] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=80, inode=15, rec_len=3096, name_len=5 [ 411.992657][T19577] Remounting filesystem read-only [ 412.019866][ T4756] usb 2-1: unable to get BOS descriptor or descriptor too short [ 412.081050][ T4756] usb 2-1: not running at top speed; connect to a high speed hub [ 412.185900][ T4756] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 412.458234][ T4756] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 412.493578][ T4756] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.502065][ T4756] usb 2-1: Product: syz [ 412.539059][ T4756] usb 2-1: Manufacturer: syz [ 412.549496][T19599] nvme nvme0: rdma connection establishment failed (-104) [ 412.582427][ T4756] usb 2-1: SerialNumber: syz [ 412.909448][T19620] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 412.932245][ T4227] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 413.132303][ T4756] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 413.155701][ T4756] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 413.278462][ T4756] usb 2-1: USB disconnect, device number 22 [ 413.382391][ T4227] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 16630, setting to 1024 [ 413.585063][T19395] udevd[19395]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 413.643021][ T4227] usb 5-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01 [ 413.702030][ T4227] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.710125][ T4227] usb 5-1: Product: syz [ 413.771703][ T4227] usb 5-1: Manufacturer: syz [ 413.786666][ T4227] usb 5-1: SerialNumber: syz [ 413.864080][ T4227] ums-onetouch 5-1:1.0: USB Mass Storage device detected [ 413.914538][ T4227] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/input/input27 [ 413.997087][ T4227] scsi host1: usb-storage 5-1:1.0 [ 414.012276][ T4225] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 414.047567][T19628] loop3: detected capacity change from 0 to 32768 [ 414.100145][ T4261] usb 5-1: USB disconnect, device number 29 [ 414.122604][ C1] input input27: can't resubmit intr, dummy_hcd.4-1/input0, retval -19 [ 414.143029][T19628] XFS: ikeep mount option is deprecated. [ 414.265612][T19628] XFS (loop3): Mounting V5 Filesystem [ 414.282147][ T4225] usb 6-1: Using ep0 maxpacket: 8 [ 414.436166][T19628] XFS (loop3): Ending clean mount [ 414.462421][ T4225] usb 6-1: unable to get BOS descriptor or descriptor too short [ 414.473399][T19628] XFS (loop3): Quotacheck needed: Please wait. [ 414.548677][ T4225] usb 6-1: config 239 has an invalid interface number: 142 but max is 0 [ 414.557336][ T4225] usb 6-1: config 239 has no interface number 0 [ 414.596900][ T4225] usb 6-1: config 239 interface 142 has no altsetting 0 [ 414.685157][T19628] XFS (loop3): Quotacheck: Done. [ 414.786236][T11709] XFS (loop3): Unmounting Filesystem [ 414.912396][ T4225] usb 6-1: string descriptor 0 read error: -22 [ 414.918827][ T4225] usb 6-1: New USB device found, idVendor=04e6, idProduct=000a, bcdDevice= 2.00 [ 414.955621][ T4225] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.015723][ T4225] usb-storage 6-1:239.142: USB Mass Storage device detected [ 415.065526][ T4225] usb-storage 6-1:239.142: This device (04e6,000a,0200 S 56 P 01) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller) [ 415.065526][ T4225] Please send a copy of this message to and [ 415.252375][ T4227] usb 6-1: USB disconnect, device number 17 [ 415.538943][T19732] netlink: 'syz.2.6959': attribute type 3 has an invalid length. [ 415.868949][T19748] xt_connbytes: Forcing CT accounting to be enabled [ 416.092121][ T4225] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 416.358365][T19765] loop5: detected capacity change from 0 to 4096 [ 416.365257][ T4261] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 416.426023][T19765] ntfs: (device loop5): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 416.547504][T19765] ntfs: volume version 3.1. [ 416.588537][T19773] loop2: detected capacity change from 0 to 2048 [ 416.622507][ T4261] usb 4-1: Using ep0 maxpacket: 8 [ 416.672322][ T4225] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 416.692816][ T4225] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.711057][T19776] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 416.741734][ T4225] usb 5-1: Product: syz [ 416.762179][ T4261] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 416.781018][T19773] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=80, inode=15, rec_len=3096, name_len=5 [ 416.796866][ T4261] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 416.812039][ T4225] usb 5-1: Manufacturer: syz [ 416.816712][ T4225] usb 5-1: SerialNumber: syz [ 416.823883][ T4261] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 416.836919][ T4225] r8152-cfgselector 5-1: config 0 descriptor?? [ 416.844266][ T4261] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 416.856926][ T4261] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 416.867936][T19773] Remounting filesystem read-only [ 416.933326][ T4261] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 416.981599][ T4261] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 416.995588][ T4261] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.080627][ T4261] usbtmc 4-1:16.0: bulk endpoints not found [ 417.312063][ T4261] usb 4-1: USB disconnect, device number 35 [ 417.342231][ T4225] r8152-cfgselector 5-1: Unknown version 0x0000 [ 417.349060][ T4225] r8152-cfgselector 5-1: bad CDC descriptors [ 417.402186][ T4225] r8152-cfgselector 5-1: Unknown version 0x0000 [ 417.433074][ T4225] r8152-cfgselector 5-1: USB disconnect, device number 30 [ 417.532660][T19800] xt_hl: Unknown Hop Limit match mode: 4 [ 417.552207][ T4227] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 417.809687][ T4227] usb 2-1: Using ep0 maxpacket: 8 [ 417.947085][ T4227] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 417.966824][ T4227] usb 2-1: config 0 has no interface number 0 [ 417.993175][ T4227] usb 2-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 418.042029][ T4227] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 418.102045][ T4227] usb 2-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x9A, skipping [ 418.142041][ T4227] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 418.372405][ T4227] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 418.401910][ T4227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.434503][ T4227] usb 2-1: Product: syz [ 418.438733][ T4227] usb 2-1: Manufacturer: syz [ 418.472044][ T4227] usb 2-1: SerialNumber: syz [ 418.498899][ T4227] usb 2-1: config 0 descriptor?? [ 418.528546][ T4756] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 418.585236][ T4227] iowarrior 2-1:0.186: no interrupt-in endpoint found [ 418.708747][T19854] smb3: Bad value for 'uid' [ 418.791648][ T4756] usb 6-1: Using ep0 maxpacket: 16 [ 418.904926][T19863] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 418.922354][ T4756] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 418.950927][ T4756] usb 6-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 418.990536][ T4756] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.177654][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 419.337050][ T4227] usb 6-1: USB disconnect, device number 18 [ 419.406068][T19876] loop4: detected capacity change from 0 to 256 [ 419.790442][T19887] usb usb8: usbfs: process 19887 (syz.3.7024) did not claim interface 0 before use [ 419.978024][T19896] loop5: detected capacity change from 0 to 512 [ 420.030330][T19898] program syz.3.7029 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 420.121017][T19903] loop4: detected capacity change from 0 to 764 [ 420.143463][T19896] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #2: block 8: comm syz.5.7028: lblock 0 mapped to illegal pblock 8 (length 1) [ 420.190863][T19896] EXT4-fs (loop5): Remounting filesystem read-only [ 420.218570][T19903] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 420.235561][T19896] EXT4-fs warning (device loop5): dx_probe:823: inode #2: lblock 0: comm syz.5.7028: error -117 reading directory block [ 420.327553][T19896] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -117 [ 420.337470][ T4225] usb 2-1: USB disconnect, device number 23 [ 420.356387][T19896] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #2: block 8: comm syz.5.7028: lblock 0 mapped to illegal pblock 8 (length 1) [ 420.453487][T19896] EXT4-fs (loop5): Remounting filesystem read-only [ 420.460184][T19896] EXT4-fs warning (device loop5): dx_probe:823: inode #2: lblock 0: comm syz.5.7028: error -117 reading directory block [ 420.532293][T19896] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 420.549101][T19896] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_lock,init_itable,noinit_itable,discard,resuid=0x0000000000000000,grpjquota=.mb_optimize_scan=0x0000000000000000,errors=remount-ro,jqfmt=vfsv1,usrquota,usrjquota=.,resgid=0x0000000000000000,nolazytime,,. Quota mode: writeback. [ 420.576976][ C0] vkms_vblank_simulate: vblank timer overrun [ 420.681583][T19925] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 420.832356][T19904] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set [ 420.939650][T19904] EXT4-fs (loop5): Remounting filesystem read-only [ 421.059012][ T150] block nbd3: Attempted send on invalid socket [ 421.067354][ T150] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 421.091135][T19937] hpfs: hpfs_map_sector(): read error [ 421.193377][T19942] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7044'. [ 421.232144][T19942] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7044'. [ 421.302955][T19915] loop2: detected capacity change from 0 to 32768 [ 421.359887][T19944] loop3: detected capacity change from 0 to 8192 [ 421.461240][ T26] audit: type=1800 audit(1790830731.943:36): pid=19915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7036" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 421.494464][T19953] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 421.534379][T19944] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 421.559189][T19957] loop4: detected capacity change from 0 to 128 [ 421.654176][T19944] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 421.701361][T19944] FAT-fs (loop3): Filesystem has been set read-only [ 421.759935][T19963] loop1: detected capacity change from 0 to 1024 [ 421.873903][T19963] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 422.053509][T19963] Quota error (device loop1): find_block_dqentry: Quota for id 0 referenced but not present [ 422.147758][T19963] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 422.202168][T19963] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.7059: Failed to acquire dquot type 0 [ 422.269593][T19963] EXT4-fs (loop1): 1 truncate cleaned up [ 422.282078][T19963] EXT4-fs (loop1): mounted filesystem without journal. Opts: mblk_io_submit,init_itable,noauto_da_alloc,quota,errors=continue,init_itable,,errors=continue. Quota mode: writeback. [ 422.372395][T19988] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7069'. [ 422.448130][T19963] Quota error (device loop1): find_block_dqentry: Quota for id 0 referenced but not present [ 422.492103][T19963] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 422.552234][T19963] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.7059: Failed to acquire dquot type 0 [ 422.984155][T20024] netlink: 'syz.3.7088': attribute type 11 has an invalid length. [ 423.374189][T20050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7100'. [ 423.537756][T20057] device vlan0 entered promiscuous mode [ 423.572355][T20057] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 423.649907][T20061] loop1: detected capacity change from 0 to 1024 [ 424.852386][ T4974] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 425.252383][ T4974] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 425.281428][ T4974] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 425.297774][T20138] loop1: detected capacity change from 0 to 64 [ 425.332045][ T4974] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 425.366219][T20138] hfs: keylen 40 too large [ 425.376808][ T4974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.431608][ T4974] usb 3-1: config 0 descriptor?? [ 425.530042][T20148] netlink: 'syz.3.7148': attribute type 3 has an invalid length. [ 425.557385][T20148] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7148'. [ 425.952324][ T4974] Bluetooth: Can't get version to change to load ram patch err [ 425.960307][ T4974] Bluetooth: Loading patch file failed [ 425.980352][ T4974] ath3k: probe of 3-1:0.0 failed with error -71 [ 426.029271][ T4974] usb 3-1: USB disconnect, device number 27 [ 426.262845][T20168] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7156'. [ 426.697173][T20175] xt_CT: No such helper "syz1" [ 427.559293][T20228] netlink: 'syz.1.7179': attribute type 10 has an invalid length. [ 427.602847][T20228] team0: Device hsr_slave_0 failed to register rx_handler [ 427.890667][T20245] xt_CONNSECMARK: invalid mode: 0 [ 427.898612][T20246] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7188'. [ 427.932187][T20246] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7188'. [ 428.284488][T20267] netlink: 'syz.2.7196': attribute type 10 has an invalid length. [ 428.404310][T20267] team0: Device hsr_slave_0 failed to register rx_handler [ 428.489138][T20274] loop4: detected capacity change from 0 to 512 [ 428.582839][T20274] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 428.635595][T20274] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 428.715644][T20274] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 428.852772][T20274] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 428.861072][T20274] System zones: 0-2, 18-18, 34-35 [ 428.933499][T20274] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 428.969576][T20274] EXT4-fs error (device loop4): ext4_find_dest_de:2117: inode #2: block 3: comm syz.4.7201: bad entry in directory: inode out of bounds - offset=24, inode=134217739, rec_len=20, size=2048 fake=0 [ 429.144170][T20301] loop3: detected capacity change from 0 to 512 [ 429.187045][T20305] erofs: (device loop1): mounted with root inode @ nid 36. [ 429.226951][T20305] attempt to access beyond end of device [ 429.226951][T20305] loop1: rw=524288, want=32, limit=16 [ 429.240433][T20301] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 429.262235][T20305] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -23 in[46, 4050] out[4096] [ 429.312163][ T4225] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 429.320869][ T26] audit: type=1800 audit(1790830739.803:37): pid=20305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.7214" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 429.360380][T20301] EXT4-fs (loop3): mounted filesystem without journal. Opts: mblk_io_submit,acl,,errors=continue. Quota mode: writeback. [ 429.459054][T20301] ext4 filesystem being mounted at /736/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 429.593193][T20301] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.7213: corrupted xattr block 33 [ 429.659168][T20301] fscrypt (loop3, inode 15): Error -117 getting encryption context [ 429.822386][ T4225] usb 3-1: unable to get BOS descriptor or descriptor too short [ 429.849669][T20319] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 429.962293][ T4225] usb 3-1: config 13 has an invalid interface number: 50 but max is 3 [ 429.977252][ T4225] usb 3-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 430.008312][ T4225] usb 3-1: config 13 has 1 interface, different from the descriptor's value: 4 [ 430.027166][ T4225] usb 3-1: config 13 has no interface number 0 [ 430.057036][ T4225] usb 3-1: config 13 interface 50 altsetting 4 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 430.110274][ T4225] usb 3-1: config 13 interface 50 altsetting 4 endpoint 0x4 has invalid maxpacket 42147, setting to 1024 [ 430.132142][ T4225] usb 3-1: config 13 interface 50 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 430.169898][T20330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7226'. [ 430.184641][ T4225] usb 3-1: config 13 interface 50 has no altsetting 0 [ 430.372582][ T4225] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=a9.e8 [ 430.381688][ T4225] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.443202][ T4225] usb 3-1: Product: syz [ 430.447433][ T4225] usb 3-1: Manufacturer: syz [ 430.483885][ T4225] usb 3-1: SerialNumber: syz [ 430.532972][T20297] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 430.656693][T20350] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 430.837729][T20358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7240'. [ 430.957320][ T4225] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 430.982237][ T144] usb 3-1: Failed to submit usb control message: -71 [ 431.002109][ T144] usb 3-1: unable to send the bmi data to the device: -71 [ 431.029666][ T4225] usb 3-1: USB disconnect, device number 28 [ 431.078082][ T144] usb 3-1: unable to get target info from device [ 431.152144][ T144] usb 3-1: could not get target info (-71) [ 431.159003][ T144] usb 3-1: could not probe fw (-71) [ 431.172238][T20372] netlink: 'syz.1.7245': attribute type 1 has an invalid length. [ 431.516618][T20385] loop2: detected capacity change from 0 to 2048 [ 431.571305][T20395] loop3: detected capacity change from 0 to 256 [ 431.621768][T20385] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 431.646658][T20395] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 431.764161][T20395] exFAT-fs (loop3): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 431.764182][T20403] netlink: 'syz.4.7260': attribute type 13 has an invalid length. [ 431.801827][T20400] loop1: detected capacity change from 0 to 4096 [ 431.831111][T20395] exFAT-fs (loop3): Filesystem has been set read-only [ 431.931349][T20400] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 432.355936][T20432] netlink: 260 bytes leftover after parsing attributes in process `syz.2.7273'. [ 432.489345][T20427] loop3: detected capacity change from 0 to 4096 [ 432.500700][T20436] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7276'. [ 432.530459][T20436] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7276'. [ 432.593338][T20427] ntfs: (device loop3): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 432.643953][T20427] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. deltaxcn = 0x1f, max_cluster = 0x0 [ 432.658726][T20445] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7280'. [ 432.695858][T20445] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7280'. [ 432.712060][T20427] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 432.746139][T20445] netlink: 'syz.2.7280': attribute type 6 has an invalid length. [ 432.763141][T20427] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 432.823085][T20450] loop1: detected capacity change from 0 to 1024 [ 432.839346][T20427] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 432.896984][T20427] ntfs: volume version 3.1. [ 433.005025][T20450] hfsplus: cannot replace xattr [ 433.029128][T20462] loop2: detected capacity change from 0 to 64 [ 433.176174][T20468] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7292'. [ 433.212529][ T4227] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 433.230596][T20462] MINIX-fs: bad superblock or unable to read bitmaps [ 433.382493][T20476] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 433.606550][ T4227] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 433.671591][T20489] netlink: 204 bytes leftover after parsing attributes in process `syz.2.7302'. [ 433.764184][T20495] loop3: detected capacity change from 0 to 128 [ 433.773072][ T4227] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 433.795114][ T4227] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 433.822037][ T4227] usb 5-1: Product: syz [ 433.832388][ T4227] usb 5-1: Manufacturer: syz [ 433.883195][ T4227] rndis_host 5-1:1.0: skipping garbage [ 433.888871][ T4227] rndis_host: probe of 5-1:1.0 failed with error -22 [ 433.900740][T20495] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 433.923901][T20495] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 434.062176][T20499] loop1: detected capacity change from 0 to 4096 [ 434.113626][ T4227] usb 5-1: USB disconnect, device number 31 [ 434.228374][T20499] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 434.657348][T20523] wg2 speed is unknown, defaulting to 1000 [ 434.667801][T20532] loop2: detected capacity change from 0 to 128 [ 434.727656][T20532] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 434.823936][T20532] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 434.882221][ T4225] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 435.181925][T20523] lo speed is unknown, defaulting to 1000 [ 435.282388][T20561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7334'. [ 435.298325][T20561] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7334'. [ 435.312371][ T4225] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 435.343524][ T4225] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 435.392194][ T4974] usb 3-1: new low-speed USB device number 29 using dummy_hcd [ 435.555956][ T4225] usb 4-1: New USB device found, idVendor=05c6, idProduct=9211, bcdDevice= 0.00 [ 435.638208][ T4225] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.687281][ T4225] usb 4-1: Product: syz [ 435.691541][ T4225] usb 4-1: Manufacturer: syz [ 435.701490][T20576] loop5: detected capacity change from 0 to 1024 [ 435.753046][ T4225] usb 4-1: SerialNumber: syz [ 435.823921][ T4225] qcserial 4-1:1.0: Qualcomm USB modem converter detected [ 435.872212][ T4974] usb 3-1: unable to get BOS descriptor or descriptor too short [ 435.882488][T20576] hfsplus: cannot replace xattr [ 435.962325][ T4974] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 436.003543][ T4974] usb 3-1: config 1 interface 0 has no altsetting 0 [ 436.323440][ T4261] usb 4-1: USB disconnect, device number 36 [ 436.332269][ T4974] usb 3-1: string descriptor 0 read error: -22 [ 436.338617][ T4974] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 436.350343][ T4261] qcserial 4-1:1.0: device disconnected [ 436.364923][ T4974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.373583][ T4225] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 436.538954][T20598] netlink: 'syz.1.7350': attribute type 13 has an invalid length. [ 436.729197][ T4974] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 436.889252][ T5555] udevd[5555]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 436.977746][ T4969] usb 3-1: USB disconnect, device number 29 [ 437.016602][ T4225] usb 6-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 437.035831][ T4225] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.066712][ T4225] usb 6-1: Product: syz [ 437.071539][ T4225] usb 6-1: Manufacturer: syz [ 437.092389][ T4225] usb 6-1: SerialNumber: syz [ 437.179530][ T4225] ums-karma 6-1:1.0: USB Mass Storage device detected [ 437.192394][T20615] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7357'. [ 437.242928][ T4225] ums-karma 6-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 437.242928][ T4225] Please send a copy of this message to and [ 437.756302][ T4225] ums-karma: probe of 6-1:1.0 failed with error -5 [ 437.795061][ T4225] usb 6-1: USB disconnect, device number 19 [ 438.122977][T20651] comedi comedi0: comedi_parport: a I/O base address must be specified [ 438.822209][T20629] loop2: detected capacity change from 0 to 32768 [ 438.903758][T20686] __nla_validate_parse: 1 callbacks suppressed [ 438.903812][T20686] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7392'. [ 438.994771][T20692] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7395'. [ 439.307835][T20707] loop3: detected capacity change from 0 to 64 [ 439.308415][T20708] netlink: 'syz.5.7403': attribute type 3 has an invalid length. [ 439.618809][T20721] netlink: 'syz.1.7411': attribute type 1 has an invalid length. [ 439.618836][T20721] netlink: 228 bytes leftover after parsing attributes in process `syz.1.7411'. [ 439.907675][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.914057][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.004733][T20737] x_tables: unsorted entry at hook 4 [ 440.382404][T20761] loop3: detected capacity change from 0 to 1024 [ 440.595476][T20775] loop2: detected capacity change from 0 to 4096 [ 440.628853][T20761] EXT4-fs (loop3): mounted filesystem without journal. Opts: lazytime,,errors=continue. Quota mode: none. [ 440.692313][T20775] EXT4-fs (loop2): Ignoring removed bh option [ 440.843172][T20775] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,bsdgroups,acl,bh,usrquota,,errors=continue. Quota mode: writeback. [ 441.071465][T20775] EXT4-fs error (device loop2): ext4_empty_dir:3156: inode #12: block 80: comm syz.2.7435: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 441.180774][T20800] netlink: 'syz.5.7446': attribute type 4 has an invalid length. [ 441.191495][T20775] EXT4-fs warning (device loop2): ext4_empty_dir:3158: inode #12: comm syz.2.7435: directory missing '..' [ 441.241078][T20803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7448'. [ 441.389578][ T4225] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 441.641198][T20813] loop5: detected capacity change from 0 to 4096 [ 441.672261][ T4225] usb 4-1: Using ep0 maxpacket: 32 [ 441.700312][T20821] xt_hashlimit: size too large, truncated to 1048576 [ 441.755441][T20821] xt_hashlimit: max too large, truncated to 1048576 [ 441.781864][T20813] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 441.813818][ T4225] usb 4-1: config 5 has an invalid interface number: 130 but max is 0 [ 441.831263][T20821] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old? [ 441.854717][ T4225] usb 4-1: config 5 has no interface number 0 [ 441.900596][T20813] ntfs3: loop5: Failed to load $Extend. [ 441.911674][ T4225] usb 4-1: config 5 interface 130 has no altsetting 0 [ 442.122251][ T4225] usb 4-1: New USB device found, idVendor=0711, idProduct=0200, bcdDevice=8b.61 [ 442.171404][ T4225] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.230350][ T4225] usb 4-1: Product: syz [ 442.258097][ T4225] usb 4-1: Manufacturer: syz [ 442.286440][ T4225] usb 4-1: SerialNumber: syz [ 442.347198][T20833] loop5: detected capacity change from 0 to 16 [ 442.418900][T20833] erofs: (device loop5): mounted with root inode @ nid 36. [ 442.655855][T20841] netlink: 'syz.1.7467': attribute type 3 has an invalid length. [ 442.673470][ T4225] mct_u232 4-1:5.130: MCT U232 converter detected [ 442.681360][ T4225] mct_u232 ttyUSB0: expected endpoint missing [ 442.695622][T20843] overlayfs: conflicting options: userxattr,redirect_dir=follow [ 442.753790][ T4225] usb 4-1: USB disconnect, device number 37 [ 442.760807][ T4225] mct_u232 4-1:5.130: device disconnected [ 443.603563][ T4227] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 443.921197][T20847] loop4: detected capacity change from 0 to 32768 [ 444.021568][T20847] ERROR: (device loop4): dtSearch: stack overrun! [ 444.021568][T20847] [ 444.061528][ T4227] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 444.085154][T20847] ERROR: (device loop4): remounting filesystem as read-only [ 444.104755][T20847] btstack dump: [ 444.112701][T20847] bn = 0, index = 4 [ 444.132310][T20847] bn = 0, index = 4 [ 444.147033][T20847] bn = 0, index = 4 [ 444.162098][T20847] bn = 0, index = 4 [ 444.189117][T20847] bn = 0, index = 4 [ 444.248910][T20847] bn = 0, index = 4 [ 444.255604][ T4227] usb 6-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 444.282065][T20847] bn = 0, index = 4 [ 444.290365][ T4227] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.312052][T20847] bn = 0, index = 0 [ 444.315938][T20847] jfs_lookup: dtSearch returned -5 [ 444.351568][ T4227] usb 6-1: Product: syz [ 444.361649][ T4227] usb 6-1: Manufacturer: syz [ 444.393977][ T4227] usb 6-1: SerialNumber: syz [ 444.434048][ T4227] usb 6-1: config 0 descriptor?? [ 444.501382][ T4227] powermate: probe of 6-1:0.0 failed with error -5 [ 444.767532][ T1108] usb 6-1: USB disconnect, device number 20 [ 444.844811][T20914] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7502'. [ 445.059235][T20886] loop1: detected capacity change from 0 to 32768 [ 445.126365][T20925] loop3: detected capacity change from 0 to 512 [ 445.152597][T20886] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop1 scanned by syz.1.7488 (20886) [ 445.182270][ T4225] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 445.240907][T20886] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 445.251449][T20925] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback. [ 445.275716][T20925] ext4 filesystem being mounted at /786/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 445.322030][T20886] BTRFS info (device loop1): using free space tree [ 445.328591][T20886] BTRFS info (device loop1): has skinny extents [ 445.462047][ T4225] usb 5-1: Using ep0 maxpacket: 8 [ 445.557383][T20949] loop5: detected capacity change from 0 to 128 [ 445.604662][ T4225] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 445.636229][ T4225] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 445.701230][ T4225] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 445.766836][ T4225] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 445.832490][T20886] BTRFS info (device loop1): enabling ssd optimizations [ 445.839872][ T4225] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 445.901047][ T4225] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 445.959445][ T4225] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.023261][ T4225] usb 5-1: config 0 descriptor?? [ 446.305104][ T4225] usb 5-1: USB disconnect, device number 32 [ 446.487258][T20983] loop2: detected capacity change from 0 to 64 [ 446.856058][T20989] loop5: detected capacity change from 0 to 256 [ 446.996836][T20977] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 447.149603][T20989] FAT-fs (loop5): Directory bread(block 64) failed [ 447.172059][T20989] FAT-fs (loop5): Directory bread(block 65) failed [ 447.178883][T20989] FAT-fs (loop5): Directory bread(block 66) failed [ 447.232116][T20989] FAT-fs (loop5): Directory bread(block 67) failed [ 447.238984][T20989] FAT-fs (loop5): Directory bread(block 68) failed [ 447.289348][T20989] FAT-fs (loop5): Directory bread(block 69) failed [ 447.322260][T20989] FAT-fs (loop5): Directory bread(block 70) failed [ 447.328853][T20989] FAT-fs (loop5): Directory bread(block 71) failed [ 447.349317][T21005] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (8) [ 447.362207][T20989] FAT-fs (loop5): Directory bread(block 72) failed [ 447.412067][T20989] FAT-fs (loop5): Directory bread(block 73) failed [ 447.692509][ T4753] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 448.102371][ T4753] usb 5-1: config 0 has an invalid interface number: 176 but max is 0 [ 448.131208][ T4753] usb 5-1: config 0 has no interface number 0 [ 448.151351][ T4753] usb 5-1: config 0 interface 176 altsetting 0 endpoint 0x4 has invalid maxpacket 59391, setting to 64 [ 448.202179][ T4753] usb 5-1: config 0 interface 176 altsetting 0 endpoint 0x82 has invalid maxpacket 65535, setting to 64 [ 448.228434][T21047] netlink: 'syz.3.7557': attribute type 10 has an invalid length. [ 448.287731][T21047] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.332313][T21047] device bridge_slave_1 left promiscuous mode [ 448.372391][T21047] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.424230][T21047] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 448.469936][ T4753] usb 5-1: New USB device found, idVendor=0499, idProduct=1039, bcdDevice= c.76 [ 448.488196][ T4753] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.568483][ T4753] usb 5-1: Product: syz [ 448.588677][ T4753] usb 5-1: Manufacturer: syz [ 448.612004][ T4753] usb 5-1: SerialNumber: syz [ 448.629344][ T4753] usb 5-1: config 0 descriptor?? [ 448.692533][T21007] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 448.699637][T21007] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 448.845148][T21074] No such timeout policy "syz1" [ 449.047695][ T4753] usb 5-1: USB disconnect, device number 33 [ 449.160192][T21090] netlink: 'syz.5.7579': attribute type 1 has an invalid length. [ 449.171829][T21083] loop2: detected capacity change from 0 to 4096 [ 449.188555][T21090] netlink: 212908 bytes leftover after parsing attributes in process `syz.5.7579'. [ 449.192239][T21091] netlink: 'syz.1.7577': attribute type 10 has an invalid length. [ 449.235650][T21091] device bridge_slave_1 left promiscuous mode [ 449.249925][T21091] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.298402][T21091] .`: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 449.376206][T21083] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 449.388734][T19395] udevd[19395]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.176/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 449.431332][T21097] netlink: 'syz.3.7582': attribute type 5 has an invalid length. [ 449.460779][T21083] ntfs3: loop2: Failed to load $Extend. [ 449.801213][T21113] loop4: detected capacity change from 0 to 1764 [ 449.854565][T21117] netlink: 'syz.5.7593': attribute type 10 has an invalid length. [ 449.889969][T21121] xt_l2tp: wrong L2TP version: 0 [ 449.977367][T21117] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.041166][T21130] loop2: detected capacity change from 0 to 16 [ 450.052827][T21117] device bridge_slave_1 left promiscuous mode [ 450.059131][T21117] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.086891][T21117] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 450.149739][T21130] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 450.187761][T21130] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 450.238851][T21130] erofs: DAX unsupported by block device. Turning off DAX. [ 450.272150][T21130] erofs: (device loop2): mounted with root inode @ nid 36. [ 450.303679][ T4193] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -41 in[46, 0] out[9000] [ 450.350676][T21130] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -41 in[46, 4050] out[9000] [ 450.376834][ T26] audit: type=1800 audit(1790830760.863:38): pid=21130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.7598" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 450.634276][T21146] xt_CT: No such helper "pptp" [ 450.640583][T21155] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 450.709080][T21158] loop1: detected capacity change from 0 to 512 [ 450.867150][T21165] loop5: detected capacity change from 0 to 2048 [ 450.892519][T21169] vivid-001: ================= START STATUS ================= [ 450.914929][T21169] vivid-001: Enable Output Cropping: true [ 450.939445][T21169] vivid-001: Enable Output Composing: true [ 450.952775][T21169] vivid-001: Enable Output Scaler: true [ 450.968297][T21169] vivid-001: Tx RGB Quantization Range: Automatic [ 450.980744][T21176] netlink: 'syz.2.7619': attribute type 2 has an invalid length. [ 450.982761][T21169] vivid-001: Transmit Mode: HDMI [ 450.989066][ T4974] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 451.008620][T21169] vivid-001: Display Present: true inactive [ 451.015603][T21158] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 451.065547][T21169] vivid-001: Hotplug Present: 0x00000001 [ 451.071488][T21158] ext4 filesystem being mounted at /1513/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 451.096260][T21169] vivid-001: RxSense Present: 0x00000001 [ 451.102674][T21169] vivid-001: EDID Present: 0x00000001 [ 451.108819][T21169] vivid-001: ================== END STATUS ================== [ 451.249074][T21158] EXT4-fs error (device loop1): ext4_get_first_dir_block:3599: inode #12: comm syz.1.7611: Directory hole found for htree leaf block 0 [ 451.309052][T21158] EXT4-fs (loop1): Remounting filesystem read-only [ 451.394527][ T4225] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 451.422527][ T4974] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 451.625186][ T4974] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 451.644789][ T4974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 451.666562][T21196] loop4: detected capacity change from 0 to 2048 [ 451.675200][ T4974] usb 4-1: Product: syz [ 451.685358][ T4974] usb 4-1: Manufacturer: syz [ 451.690053][ T4974] usb 4-1: SerialNumber: syz [ 451.713512][ T4974] usb 4-1: config 0 descriptor?? [ 451.764898][ T4974] usb 4-1: no audio or video endpoints found [ 451.796146][T21196] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,jqfmt=vfsv1,errors=remount-ro,nodiscard,. Quota mode: writeback. [ 451.852374][ T4225] usb 3-1: unable to get BOS descriptor or descriptor too short [ 451.977796][ T4225] usb 3-1: config 1 has an invalid interface number: 97 but max is 1 [ 451.994521][T21212] netlink: 'syz.5.7636': attribute type 21 has an invalid length. [ 452.014412][ T4225] usb 3-1: config 1 has no interface number 1 [ 452.042136][T21212] netlink: 128 bytes leftover after parsing attributes in process `syz.5.7636'. [ 452.052741][ T4225] usb 3-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 452.066395][T21212] netlink: 'syz.5.7636': attribute type 5 has an invalid length. [ 452.092177][T21212] netlink: 'syz.5.7636': attribute type 6 has an invalid length. [ 452.105139][ T4225] usb 3-1: too many endpoints for config 1 interface 97 altsetting 97: 97, using maximum allowed: 30 [ 452.122160][T21212] netlink: 3 bytes leftover after parsing attributes in process `syz.5.7636'. [ 452.157254][ T4225] usb 3-1: config 1 interface 97 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 452.211420][ T4225] usb 3-1: config 1 interface 0 has no altsetting 0 [ 452.245676][ T4225] usb 3-1: config 1 interface 97 has no altsetting 0 [ 452.284614][ T4969] usb 4-1: USB disconnect, device number 38 [ 452.362641][T21224] netlink: 'syz.1.7642': attribute type 26 has an invalid length. [ 452.426853][ T4225] usb 3-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 452.442630][ T4225] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.451927][T21228] loop5: detected capacity change from 0 to 512 [ 452.471207][ T4225] usb 3-1: Product: syz [ 452.481298][ T4225] usb 3-1: Manufacturer: syz [ 452.487490][ T4225] usb 3-1: SerialNumber: syz [ 452.539779][T21231] loop4: detected capacity change from 0 to 1024 [ 452.728957][T21241] x_tables: ip_tables: osf match: only valid for protocol 6 [ 452.779210][T21231] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 452.811430][ T4225] smsusb:smsusb_probe: board id=8, interface number 0 [ 452.900417][T21231] ext4 filesystem being mounted at /1639/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 452.914040][ T4225] smsusb:smsusb_probe: board id=8, interface number 97 [ 452.976184][T21231] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #15: comm syz.4.7645: corrupted xattr block 128 [ 452.994882][ T4225] usb 3-1: USB disconnect, device number 30 [ 453.080123][ T26] audit: type=1800 audit(1790830763.563:39): pid=21231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7645" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 453.148751][T21247] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7652'. [ 453.485202][T21254] loop4: detected capacity change from 0 to 1024 [ 453.637972][T21254] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 453.670212][T21254] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 453.707857][T21254] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback. [ 453.904995][T21266] usb usb8: usbfs: process 21266 (syz.5.7661) did not claim interface 5 before use [ 453.962247][ T4969] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 454.352338][ T4969] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 454.580261][ T4969] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 454.605525][ T4969] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.642100][ T4969] usb 4-1: Product: syz [ 454.651086][T21284] loop4: detected capacity change from 0 to 256 [ 454.668122][ T4969] usb 4-1: Manufacturer: syz [ 454.685235][ T4969] usb 4-1: SerialNumber: syz [ 454.741312][T21284] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d) [ 454.942504][T21298] SET target dimension over the limit! [ 454.992272][ T4969] snd-usb-6fire 4-1:1.0: unknown device firmware state received from device: [ 455.012730][ T4969] eb aa 00 00 00 00 00 00 [ 455.021604][ T4969] snd-usb-6fire: probe of 4-1:1.0 failed with error -5 [ 455.031243][T21302] validate_nla: 1 callbacks suppressed [ 455.031329][T21302] netlink: 'syz.5.7679': attribute type 1 has an invalid length. [ 455.082155][T21302] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7679'. [ 455.213492][ T4225] usb 4-1: USB disconnect, device number 39 [ 455.224746][T21312] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7684'. [ 455.342088][ T4969] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 455.467303][T21319] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 455.485338][T21321] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 455.527763][T21321] overlayfs: conflicting options: userxattr,metacopy=on [ 455.882191][ T26] audit: type=1400 audit(1790830766.373:40): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457C51CCA93031D371D06D2E59E880583300E11E8 pid=21331 comm="syz.1.7695" [ 455.942550][ T4969] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 455.972579][ T4969] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.001891][ T4969] usb 3-1: Product: syz [ 456.032362][ T4969] usb 3-1: Manufacturer: syz [ 456.037028][ T4969] usb 3-1: SerialNumber: syz [ 456.516771][ T4959] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 456.582661][T21367] printk: syz.5.7711 (21367): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 456.668970][T21371] netlink: 'syz.4.7713': attribute type 25 has an invalid length. [ 456.702212][T21371] netlink: 'syz.4.7713': attribute type 3 has an invalid length. [ 456.720557][T21371] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7713'. [ 456.772394][T21373] IPv6: sit1: Disabled Multicast RS [ 456.789042][ T4969] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 456.798270][ T4959] usb 4-1: Using ep0 maxpacket: 32 [ 456.927907][T21379] netlink: 160 bytes leftover after parsing attributes in process `syz.1.7716'. [ 456.942149][ T4959] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 456.965546][ T4959] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.013446][ T4959] usb 4-1: config 0 descriptor?? [ 457.034938][T21379] netlink: 160 bytes leftover after parsing attributes in process `syz.1.7716'. [ 457.070997][ T4959] gspca_main: sq930x-2.14.0 probing 041e:403c [ 457.085951][T21379] netlink: 160 bytes leftover after parsing attributes in process `syz.1.7716'. [ 457.249935][T21391] netlink: 'syz.1.7722': attribute type 3 has an invalid length. [ 457.274955][ T4974] usb 3-1: USB disconnect, device number 31 [ 457.502422][ T4959] gspca_sq930x: ucbus_write failed -71 [ 457.508055][ T4959] sq930x: probe of 4-1:0.0 failed with error -71 [ 457.512380][T21401] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7727'. [ 457.538620][ T4959] usb 4-1: USB disconnect, device number 40 [ 457.812233][T21414] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (2049) [ 457.902202][ T4969] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 457.913562][ T4969] ath9k_htc: Failed to initialize the device [ 457.953826][ T4974] usb 3-1: ath9k_htc: USB layer deinitialized [ 458.324971][ T4974] ------------[ cut here ]------------ [ 458.331180][ T4974] WARNING: CPU: 0 PID: 4974 at net/netfilter/nft_set_pipapo.c:2355 nft_pipapo_destroy+0x8b0/0x960 [ 458.392952][ T4974] Modules linked in: [ 458.396923][ T4974] CPU: 0 PID: 4974 Comm: kworker/0:17 Not tainted syzkaller #0 [ 458.431428][T21454] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 458.451620][ T4974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 458.491579][ T4974] Workqueue: events nf_tables_trans_destroy_work [ 458.519659][ T4974] RIP: 0010:nft_pipapo_destroy+0x8b0/0x960 [ 458.541427][ T4974] Code: 24 80 3c 18 00 74 08 4c 89 f7 e8 fb 3b 81 f9 49 c7 06 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 a0 07 3c f9 <0f> 0b e9 ad f7 ff ff 48 c7 c1 f0 20 8b 8d 80 e1 07 80 c1 03 38 c1 [ 458.565700][ T4974] RSP: 0018:ffffc900034dfa68 EFLAGS: 00010293 [ 458.579053][ T4974] RAX: ffffffff883d0d00 RBX: ffff88801efa60f0 RCX: ffff88802c140000 [ 458.587779][ T4974] RDX: 0000000000000000 RSI: ffff88801efa6000 RDI: ffff88806219e328 [ 458.596792][ T4974] RBP: ffffc900034dfc30 R08: ffff88802c140000 R09: 0000000000000008 [ 458.605347][ T4974] R10: 0000000000000018 R11: 0000000000000000 R12: ffff88801efa60c0 [ 458.613880][ T4974] R13: dffffc0000000000 R14: ffff88801efa6110 R15: dffffc0000000000 [ 458.623196][ T4974] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 458.643935][ T4974] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 458.657433][ T4974] CR2: 00007f9ca63102f8 CR3: 000000002296a000 CR4: 00000000003506f0 [ 458.674878][ T4974] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 458.700993][ T4974] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 458.733337][ T4974] Call Trace: [ 458.736787][ T4974] [ 458.739842][ T4974] nft_set_destroy+0x488/0xa30 [ 458.768173][ T4974] ? kfree+0xef/0x2a0 [ 458.785718][ T4974] ? nf_tables_chain_destroy+0x47c/0x530 [ 458.810531][ T4974] nf_tables_trans_destroy_work+0xc5d/0xf00 [ 458.827756][ T4974] ? nft_object_dump+0x1e0/0x1e0 [ 458.836847][ T4974] ? _raw_spin_unlock_irq+0x1f/0x40 [ 458.846327][ T4974] process_one_work+0x867/0xff0 [ 458.851419][ T4974] ? worker_detach_from_pool+0x240/0x240 [ 458.861117][ T4974] ? lockdep_hardirqs_off+0x70/0x100 [ 458.870970][ T4974] ? _raw_spin_lock_irq+0xb7/0xf0 [ 458.880110][ T4974] ? _raw_spin_lock_irqsave+0x100/0x100 [ 458.886551][ T4974] ? wq_worker_running+0x97/0x170 [ 458.891725][ T4974] worker_thread+0xad7/0x12a0 [ 458.897062][ T4974] kthread+0x42e/0x520 [ 458.901330][ T4974] ? rcu_lock_release+0x20/0x20 [ 458.906680][ T4974] ? kthread_blkcg+0xd0/0xd0 [ 458.911450][ T4974] ret_from_fork+0x1f/0x30 [ 458.916395][ T4974] [ 458.919543][ T4974] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 458.926937][ T4974] CPU: 0 PID: 4974 Comm: kworker/0:17 Not tainted syzkaller #0 [ 458.934595][ T4974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 458.944678][ T4974] Workqueue: events nf_tables_trans_destroy_work [ 458.951054][ T4974] Call Trace: [ 458.954365][ T4974] [ 458.957331][ T4974] dump_stack_lvl+0x188/0x250 [ 458.962071][ T4974] ? show_regs_print_info+0x20/0x20 [ 458.967299][ T4974] ? load_image+0x410/0x410 [ 458.971840][ T4974] panic+0x2f8/0x850 [ 458.975827][ T4974] ? bpf_jit_dump+0xd0/0xd0 [ 458.980377][ T4974] ? ret_from_fork+0x1f/0x30 [ 458.985028][ T4974] ? nft_pipapo_destroy+0x8b0/0x960 [ 458.990269][ T4974] __warn+0x248/0x2b0 [ 458.994289][ T4974] ? nft_pipapo_destroy+0x8b0/0x960 [ 458.999525][ T4974] report_bug+0x1b9/0x2e0 [ 459.004038][ T4974] handle_bug+0x3a/0x70 [ 459.008314][ T4974] exc_invalid_op+0x16/0x40 [ 459.012941][ T4974] asm_exc_invalid_op+0x16/0x20 [ 459.017840][ T4974] RIP: 0010:nft_pipapo_destroy+0x8b0/0x960 [ 459.023689][ T4974] Code: 24 80 3c 18 00 74 08 4c 89 f7 e8 fb 3b 81 f9 49 c7 06 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 a0 07 3c f9 <0f> 0b e9 ad f7 ff ff 48 c7 c1 f0 20 8b 8d 80 e1 07 80 c1 03 38 c1 [ 459.043334][ T4974] RSP: 0018:ffffc900034dfa68 EFLAGS: 00010293 [ 459.049528][ T4974] RAX: ffffffff883d0d00 RBX: ffff88801efa60f0 RCX: ffff88802c140000 [ 459.057619][ T4974] RDX: 0000000000000000 RSI: ffff88801efa6000 RDI: ffff88806219e328 [ 459.065632][ T4974] RBP: ffffc900034dfc30 R08: ffff88802c140000 R09: 0000000000000008 [ 459.073673][ T4974] R10: 0000000000000018 R11: 0000000000000000 R12: ffff88801efa60c0 [ 459.081674][ T4974] R13: dffffc0000000000 R14: ffff88801efa6110 R15: dffffc0000000000 [ 459.089721][ T4974] ? nft_pipapo_destroy+0x8b0/0x960 [ 459.094974][ T4974] ? nft_pipapo_destroy+0x8b0/0x960 [ 459.100223][ T4974] nft_set_destroy+0x488/0xa30 [ 459.105105][ T4974] ? kfree+0xef/0x2a0 [ 459.109130][ T4974] ? nf_tables_chain_destroy+0x47c/0x530 [ 459.114797][ T4974] nf_tables_trans_destroy_work+0xc5d/0xf00 [ 459.120757][ T4974] ? nft_object_dump+0x1e0/0x1e0 [ 459.125759][ T4974] ? _raw_spin_unlock_irq+0x1f/0x40 [ 459.130995][ T4974] process_one_work+0x867/0xff0 [ 459.135941][ T4974] ? worker_detach_from_pool+0x240/0x240 [ 459.141633][ T4974] ? lockdep_hardirqs_off+0x70/0x100 [ 459.146957][ T4974] ? _raw_spin_lock_irq+0xb7/0xf0 [ 459.152103][ T4974] ? _raw_spin_lock_irqsave+0x100/0x100 [ 459.157678][ T4974] ? wq_worker_running+0x97/0x170 [ 459.162732][ T4974] worker_thread+0xad7/0x12a0 [ 459.167470][ T4974] kthread+0x42e/0x520 [ 459.171573][ T4974] ? rcu_lock_release+0x20/0x20 [ 459.176458][ T4974] ? kthread_blkcg+0xd0/0xd0 [ 459.181101][ T4974] ret_from_fork+0x1f/0x30 [ 459.185579][ T4974] [ 459.188936][ T4974] Kernel Offset: disabled [ 459.193768][ T4974] Rebooting in 86400 seconds..