last executing test programs: 2.640908813s ago: executing program 0 (id=9348): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010000ffbe8c5ee17688a2003c000301000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5af9b1c568302ffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) 2.494437256s ago: executing program 0 (id=9351): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0xffffffff, @mcast2}, {0x1b, 0x0, 0x7, @loopback={0xffffffffffffff9d}, 0x86}}}, 0x48) 2.425115218s ago: executing program 0 (id=9354): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000000000000009500a505000000001058cb65"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r0, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 2.299488051s ago: executing program 3 (id=9360): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3200000000c0000000060a010400000000000000000100400008000b400000000098000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000600001800c0001006269747769736500500002800800034000000002080001400000001408000240000000120c00058006000100273c000028000480060001008a9500001c000100ee2f7b0fffe4e4a53c74a652994602d1594f758032c7a83b0900010073797a30"], 0x134}}, 0x0) 2.199562224s ago: executing program 0 (id=9363): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f028, 0x7}) 2.182336054s ago: executing program 3 (id=9365): r0 = syz_open_dev$mtd(&(0x7f00000001c0), 0xa, 0x180) ioctl$MEMERASE64(r0, 0x40104d14, 0x0) 2.084323596s ago: executing program 0 (id=9367): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @private1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.071233947s ago: executing program 3 (id=9369): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)="d8000000180081064e8100000000b904021d0800fd007c05e8fe55a10a000b000140020203600e41b0000500ac0006031100000016001500090002000000035c3b61c1d67f6f94007134cfce1e090000001fb791643a5ee4ce1b14d6d930ede1d9d322fe7c9f8775730d165ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3f09ad809d5e1cace81ed0bffece0b42a9ecbee5dd6e4edef3d939641e0ec0f60cb180000008af26c8b7b55f4d2cb1df0966736a1dfe444c65ac5b348eac7c2ea475327557ba566236ceb0000000000", 0xd8}], 0x1}, 0x24040000) 1.911077351s ago: executing program 0 (id=9373): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b0001000010000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.887209322s ago: executing program 3 (id=9375): r0 = openat$damon_attrs(0xffffffffffffff9c, &(0x7f0000001d00), 0x2101, 0x114) write$damon_attrs(r0, &(0x7f0000001d40)={{' ', 0xc5da}, {' ', 0x9}, {' ', 0xb0}, {' ', 0x1c0000000000}, {' ', 0x3ff}}, 0x69) 1.734835955s ago: executing program 3 (id=9380): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x20) 1.630831558s ago: executing program 3 (id=9383): syz_usb_connect$rtl8150(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf}}]}}, 0x0) syz_usb_connect(0x0, 0x4f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005cdd2e106307151088560000000109023d0001"], 0x0) 1.630240028s ago: executing program 4 (id=9386): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x0, @empty=0x1000000}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)='\b\x00', 0x2}, {&(0x7f0000000100)="6306bc3795f8", 0x6}], 0x2, &(0x7f0000000180)=[@ip_retopts={{0xc}}], 0xc}, 0x0) 1.515642501s ago: executing program 4 (id=9389): r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) pwritev2(r0, 0x0, 0x0, 0x0, 0x9, 0x0) 1.494489872s ago: executing program 4 (id=9390): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200000d1, &(0x7f0000000140), 0x1) 1.461681583s ago: executing program 2 (id=9392): r0 = syz_open_dev$video(&(0x7f0000000300), 0x7, 0x101040) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000100)={0xd, @vbi={0xfffffffc, 0x0, 0x10, 0x4f565559, [0x0, 0x2], [0x100, 0x9], 0x108}}) 1.452628843s ago: executing program 4 (id=9393): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@ipv4_newroute={0x28, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_METRICS={0x4}, @RTA_NH_ID={0x8, 0x1e, 0x3}]}, 0x28}}, 0x0) 1.388150114s ago: executing program 4 (id=9394): r0 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='k\x9a\xf7\xdf`', 0x0) 1.349221425s ago: executing program 2 (id=9395): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, 0x0, &(0x7f00000000c0)) 1.270286088s ago: executing program 4 (id=9396): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x34) syz_usb_connect(0x0, 0x5d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414003824d006"], 0x0) 1.192235649s ago: executing program 2 (id=9397): io_setup(0x10000, &(0x7f0000002400)) io_setup(0x1, &(0x7f0000000b80)) 1.16043048s ago: executing program 1 (id=9398): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c643c, &(0x7f0000000300)={0x0, 0x0, r0}) 993.645604ms ago: executing program 1 (id=9399): r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x28002) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"0400", 0x100, 0x5, 0x4, 0x800, 0x1, "000019b1cf000012b09882ffbf2000", '\x00', "03000006", '\x00', ["8b59b494c1cbd6e4af000700", "ca8cacfffffffff4550400", "000000ff0000000000000020", "0000000000000000001000"]}) 885.791927ms ago: executing program 1 (id=9400): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="160000001f0137f7", 0x8}], 0x1) 793.67204ms ago: executing program 1 (id=9401): mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x0, 0x0, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 735.406921ms ago: executing program 1 (id=9402): r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000001b40)={&(0x7f00000014c0)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000019c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x4, 0xae}]}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x4, [@multicast2]}]}}}], 0x50}, 0x40) 702.074442ms ago: executing program 2 (id=9403): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x1000004, 0x4, 0x3, 0x0, 0x8}) 666.158893ms ago: executing program 1 (id=9404): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000004b00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xf, 0x0, &(0x7f0000000600)="e0b9547ed387dbe9abc89b6f5becb9", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 570.292965ms ago: executing program 2 (id=9405): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f000000ad00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1018056, &(0x7f00000001c0)={[{@discard}, {@discard_size={'discard', 0x3d, 0x4f000000}}, {@grpquota}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@errors_remount}, {@errors_continue}, {@nodiscard}, {@errors_remount}, {@nointegrity}, {@errors_remount}]}, 0x24, 0x6260, &(0x7f0000000340)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) 0s ago: executing program 2 (id=9406): r0 = syz_open_dev$swradio(&(0x7f00000002c0), 0x0, 0x2) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x2) kernel console output (not intermixed with test programs): PAGE_SIZE [ 653.635208][T18907] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,acl,oldalloc,debug_want_extra_isize=0x0000000000000008,nobarrier,dioread_nolock,,errors=continue. Quota mode: writeback. [ 653.720342][T18930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6530'. [ 653.729606][T18930] netlink: 312 bytes leftover after parsing attributes in process `syz.3.6530'. [ 653.790583][T18907] EXT4-fs (loop0): Test dummy encryption mode enabled [ 653.829247][T18907] EXT4-fs (loop0): Ignoring removed oldalloc option [ 653.836673][T18907] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 653.857749][T18934] loop3: detected capacity change from 0 to 4096 [ 653.881872][T18907] EXT4-fs (loop0): re-mounted. Opts: test_dummy_encryption=v1,acl,oldalloc,debug_want_extra_isize=0x0000000000000008,nobarrier,dioread_nolock,. Quota mode: writeback. [ 653.924615][ T1108] gspca_stk1135: reg_w 0x0 err -71 [ 653.934271][ T1108] gspca_stk1135: serial bus timeout: status=0x00 [ 653.952110][ T1108] gspca_stk1135: Sensor write failed [ 653.958004][ T1108] gspca_stk1135: serial bus timeout: status=0x00 [ 653.975247][ T1108] gspca_stk1135: Sensor write failed [ 653.986035][ T1108] gspca_stk1135: serial bus timeout: status=0x00 [ 654.003722][ T1108] gspca_stk1135: Sensor read failed [ 654.009164][ T1108] gspca_stk1135: serial bus timeout: status=0x00 [ 654.026828][ T1108] gspca_stk1135: Sensor read failed [ 654.037626][ T1108] gspca_stk1135: Detected sensor type unknown (0x0) [ 654.047373][ T1108] gspca_stk1135: serial bus timeout: status=0x00 [ 654.063397][ T1108] gspca_stk1135: Sensor read failed [ 654.079382][ T1108] gspca_stk1135: serial bus timeout: status=0x00 [ 654.095611][ T1108] gspca_stk1135: Sensor read failed [ 654.101135][ T1108] gspca_stk1135: serial bus timeout: status=0x00 [ 654.116910][ T1108] gspca_stk1135: Sensor write failed [ 654.127765][ T1108] gspca_stk1135: serial bus timeout: status=0x00 [ 654.145200][ T1108] gspca_stk1135: Sensor write failed [ 654.150814][ T1108] stk1135: probe of 5-1:0.0 failed with error -71 [ 654.189568][ T1108] usb 5-1: USB disconnect, device number 2 [ 654.276104][T18934] EXT4-fs (loop3): Test dummy encryption mode enabled [ 654.362338][T18934] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue. Quota mode: writeback. [ 654.396368][T18938] loop2: detected capacity change from 0 to 32768 [ 654.536687][T18938] ERROR: (device loop2): diAllocAG: error reading iag [ 654.536687][T18938] [ 654.592761][T18938] ialloc: diAlloc returned -5! [ 654.802915][T18966] loop1: detected capacity change from 0 to 512 [ 654.875853][ T4278] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 654.889759][T18966] EXT4-fs (loop1): Ignoring removed oldalloc option [ 654.975056][T18966] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,dioread_lock,oldalloc,block_validity,,errors=continue. Quota mode: writeback. [ 655.217943][ T4278] usb 1-1: Using ep0 maxpacket: 16 [ 655.367725][ T4278] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 655.377923][ T4278] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 655.437712][ T4278] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 655.451183][T18994] loop3: detected capacity change from 0 to 512 [ 655.487544][T18994] EXT4-fs (loop3): Test dummy encryption mode enabled [ 655.497901][ T4278] usb 1-1: config 1 interface 2 has no altsetting 0 [ 655.525651][T18994] EXT4-fs (loop3): Ignoring removed oldalloc option [ 655.549910][T18994] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 655.618199][T18994] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,acl,oldalloc,debug_want_extra_isize=0x0000000000000008,nobarrier,dioread_nolock,,errors=continue. Quota mode: writeback. [ 655.681006][T19005] netlink: 212168 bytes leftover after parsing attributes in process `syz.4.6564'. [ 655.692059][T18994] EXT4-fs (loop3): Test dummy encryption mode enabled [ 655.710171][ T4278] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 655.721640][ T4278] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.729710][ T4278] usb 1-1: Product: syz [ 655.734168][ T4278] usb 1-1: Manufacturer: syz [ 655.738803][ T4278] usb 1-1: SerialNumber: syz [ 655.746506][T18994] EXT4-fs (loop3): Ignoring removed oldalloc option [ 655.773545][T18994] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 655.789225][T18994] EXT4-fs (loop3): re-mounted. Opts: test_dummy_encryption=v1,acl,oldalloc,debug_want_extra_isize=0x0000000000000008,nobarrier,dioread_nolock,. Quota mode: writeback. [ 655.949174][ T1108] kernel write not supported for file /2597/net/rt_acct (pid: 1108 comm: kworker/1:2) [ 656.126923][ T4278] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 656.136398][ T4278] usb 1-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 656.175417][ T4278] usb 1-1: found format II with max.bitrate = 3, frame size=7 [ 656.201811][ T4278] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 656.209717][ T4278] usb 1-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 656.286812][ T4278] usb 1-1: found format II with max.bitrate = 3, frame size=7 [ 656.294904][ T4278] usb 1-1: selecting invalid altsetting 0 [ 656.340526][ T4278] usb 1-1: selecting invalid altsetting 0 [ 656.409471][ T4278] usb 1-1: USB disconnect, device number 14 [ 656.437887][ T1108] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 656.685761][ T4315] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 656.719025][T19057] loop4: detected capacity change from 0 to 64 [ 656.737763][ T4462] udevd[4462]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 656.835299][ T1108] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 656.854984][ T1108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 4 [ 656.886870][ T1108] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 656.925214][ T1108] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 656.956249][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.976691][ T1108] usb 3-1: config 0 descriptor?? [ 657.099930][ T4315] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 657.119568][ T4315] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 657.141891][ T4315] usb 4-1: config 0 has no interface number 0 [ 657.150089][ T4315] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 657.166645][ T4315] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 657.178279][ T4315] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 657.217803][T19079] netlink: 'syz.4.6600': attribute type 27 has an invalid length. [ 657.270312][ T1108] ath6kl: Failed to submit usb control message: -71 [ 657.278321][ T1108] ath6kl: unable to send the bmi data to the device: -71 [ 657.285905][T19079] netlink: 'syz.4.6600': attribute type 3 has an invalid length. [ 657.293389][ T1108] ath6kl: Unable to send get target info: -71 [ 657.324818][ T1108] ath6kl: Failed to init ath6kl core: -71 [ 657.366756][ T4315] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 657.386800][ T4315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.408485][ T4315] usb 4-1: Product: syz [ 657.419305][ T4315] usb 4-1: Manufacturer: syz [ 657.434256][ T4315] usb 4-1: SerialNumber: syz [ 657.450828][ T4315] usb 4-1: config 0 descriptor?? [ 657.470542][ T1108] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 657.497722][ T1108] usb 3-1: USB disconnect, device number 3 [ 657.726806][T19106] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6612'. [ 657.736526][T19106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6612'. [ 657.757307][ T21] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 657.970665][T16556] usb 4-1: USB disconnect, device number 12 [ 658.008507][ T4278] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 658.146907][ T21] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 658.155647][ T21] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 658.167066][ T21] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 658.176467][ T21] usb 1-1: config 1 has no interface number 1 [ 658.182906][ T21] usb 1-1: config 1 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 658.194071][ T21] usb 1-1: config 1 interface 2 has no altsetting 1 [ 658.360569][ T1108] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 658.371619][ T21] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 658.385609][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.395122][ T21] usb 1-1: Product: syz [ 658.399407][ T21] usb 1-1: Manufacturer: syz [ 658.408592][ T21] usb 1-1: SerialNumber: syz [ 658.435536][ T4278] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 658.443627][ T4278] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 658.467352][ T4278] usb 5-1: config 0 has no interface number 0 [ 658.473541][ T4278] usb 5-1: config 0 interface 1 has no altsetting 0 [ 658.488750][ T4278] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 658.497827][ T4278] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.529549][ T4278] usb 5-1: config 0 descriptor?? [ 658.667151][T19132] netlink: 'syz.3.6626': attribute type 21 has an invalid length. [ 658.745534][ T1108] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 658.759478][ T1108] usb 2-1: config 0 has no interface number 0 [ 658.765845][ T1108] usb 2-1: config 0 interface 255 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 658.782193][ T1108] usb 2-1: config 0 interface 255 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 658.799157][ T21] usb 1-1: 2:2 : no or invalid class specific endpoint descriptor [ 658.816768][T16556] usb 5-1: USB disconnect, device number 3 [ 658.909639][ T21] usb 1-1: USB disconnect, device number 15 [ 658.959629][ T1108] usb 2-1: New USB device found, idVendor=10cf, idProduct=8065, bcdDevice=91.79 [ 658.968726][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.980721][ T1108] usb 2-1: Product: syz [ 658.985079][ T1108] usb 2-1: Manufacturer: syz [ 658.990012][ T1108] usb 2-1: SerialNumber: syz [ 659.000883][ T4462] udevd[4462]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 659.024947][ T1108] usb 2-1: config 0 descriptor?? [ 659.072425][ T1108] vmk80xx 2-1:0.255: driver 'vmk80xx' failed to auto-configure device. [ 659.086709][ T1108] vmk80xx: probe of 2-1:0.255 failed with error -22 [ 659.318314][ T21] usb 2-1: USB disconnect, device number 13 [ 659.572164][T19156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6635'. [ 659.579620][T19154] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 659.756252][T19166] netlink: 'syz.0.6642': attribute type 29 has an invalid length. [ 659.795598][T19166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6642'. [ 659.813899][T19168] Cannot find add_set index 0 as target [ 659.840512][T19166] netlink: 'syz.0.6642': attribute type 29 has an invalid length. [ 659.879351][T19166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6642'. [ 660.383132][ T1108] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 660.648534][ T1108] usb 4-1: Using ep0 maxpacket: 8 [ 660.776543][ T1108] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 660.834216][ T1108] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 660.855060][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.904923][ T1108] usb 4-1: config 0 descriptor?? [ 660.970889][ T1108] usb 4-1: selecting invalid altsetting 1 [ 660.976682][ T1108] usb 4-1: Can not set alternate setting to 1, error: -22 [ 661.001558][ T1108] synaptics_usb: probe of 4-1:0.0 failed with error -22 [ 661.094994][T19198] loop4: detected capacity change from 0 to 32768 [ 661.182256][ T26] audit: type=1400 audit(2000000144.328:39): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A21D01A0B978D2F2F262D2A83D1 pid=19235 comm="syz.1.6677" [ 661.202898][T19198] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 661.242363][ T4278] usb 4-1: USB disconnect, device number 13 [ 661.260075][T19198] JBD2: Ignoring recovery information on journal [ 661.350602][T19198] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 661.374355][T19246] loop1: detected capacity change from 0 to 512 [ 661.442694][T19248] SET target dimension over the limit! [ 661.513038][T19253] nftables ruleset with unbound chain [ 661.530792][T19246] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 661.552085][ T4245] ocfs2: Unmounting device (7,4) on (node local) [ 661.613075][T19246] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.6679: bad orphan inode 131083 [ 661.626745][T19246] EXT4-fs (loop1): mounted filesystem without journal. Opts: noinit_itable,init_itable,grpquota,,errors=continue. Quota mode: writeback. [ 661.665177][T19259] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6687'. [ 661.691088][T19246] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #2: block 13: comm syz.1.6679: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=2, rec_len=65535, size=1024 fake=1 [ 662.264176][T19289] device veth1_virt_wifi entered promiscuous mode [ 662.650913][T19260] loop0: detected capacity change from 0 to 32768 [ 662.664772][T19310] loop4: detected capacity change from 0 to 4096 [ 662.687328][T19314] loop2: detected capacity change from 0 to 1024 [ 662.738353][T19310] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 662.748233][T19314] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 662.765810][T19260] ERROR: (device loop0): diAllocAG: error reading iag [ 662.765810][T19260] [ 662.772519][T19310] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 662.790611][T19260] ialloc: diAlloc returned -5! [ 662.796679][T19314] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 662.817568][T19310] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 662.817568][T19310] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 662.817568][T19310] [ 662.841002][T19314] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 662.888196][T19310] EXT4-fs (loop4): mounted filesystem without journal. Opts: mblk_io_submit,jqfmt=vfsv0,nouser_xattr,init_itable,,errors=continue. Quota mode: writeback. [ 662.926690][T19314] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 662.935027][T19314] System zones: 0-1, 3-36 [ 662.968385][T16556] Bluetooth: hci0: command 0x0401 tx timeout [ 662.994040][T19314] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsold,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noquota,,errors=continue. Quota mode: writeback. [ 663.022085][T19322] loop3: detected capacity change from 0 to 64 [ 663.248315][T19322] hfs: inconsistency in B*Tree (1,0,2,2,3) [ 663.548354][T19343] loop3: detected capacity change from 0 to 1024 [ 663.595908][T19343] hfsplus: invalid file type 0177777 for inode 2 [ 663.622222][T19343] hfsplus: failed to load root directory [ 663.735520][T19357] netlink: 'syz.0.6734': attribute type 13 has an invalid length. [ 663.799431][T19361] netlink: 'syz.2.6733': attribute type 1 has an invalid length. [ 663.892841][T19368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6739'. [ 664.068722][T16556] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 664.326523][T16556] usb 4-1: Using ep0 maxpacket: 16 [ 664.474886][T16556] usb 4-1: config 0 has an invalid descriptor of length 141, skipping remainder of the config [ 664.504166][T16556] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 33216, setting to 1024 [ 664.559891][T16556] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 664.592080][T16556] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 664.742424][T16556] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 664.773529][T16556] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 664.782424][T16556] usb 4-1: Manufacturer: syz [ 664.806268][T16556] usb 4-1: config 0 descriptor?? [ 664.860003][T19343] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 665.070362][T19432] ieee802154 phy0 wpan0: encryption failed: -22 [ 665.122222][ T4278] usb 4-1: USB disconnect, device number 14 [ 665.152460][T19436] netlink: 'syz.0.6782': attribute type 1 has an invalid length. [ 665.187903][T19436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6782'. [ 665.347704][T19446] netlink: 'syz.1.6775': attribute type 10 has an invalid length. [ 665.472542][T19452] sctp: [Deprecated]: syz.0.6778 (pid 19452) Use of int in max_burst socket option. [ 665.472542][T19452] Use struct sctp_assoc_value instead [ 665.707110][T19465] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6786'. [ 666.118153][T19491] device gtp0 entered promiscuous mode [ 666.580216][T19521] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 666.654168][T19527] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6814'. [ 667.132844][T19553] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 667.596086][T16556] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 667.716306][ T4278] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 667.747815][T19585] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 668.055877][T16556] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 668.079233][T16556] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 668.098484][T16556] usb 2-1: config 1 interface 0 has no altsetting 0 [ 668.446008][T16556] usb 2-1: string descriptor 0 read error: -22 [ 668.458744][T16556] usb 2-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 668.487560][T19631] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 668.505853][T16556] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 668.566496][T16556] usb 2-1: 0:2 : does not exist [ 668.587903][T16556] usb-storage 2-1:1.1: USB Mass Storage device detected [ 668.617932][T19607] loop2: detected capacity change from 0 to 40427 [ 668.710291][T19607] F2FS-fs (loop2): Found nat_bits in checkpoint [ 668.812753][T19607] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 668.827530][T19607] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 669.022582][T19648] netlink: 'syz.3.6872': attribute type 1 has an invalid length. [ 669.060947][T19648] netlink: 'syz.3.6872': attribute type 2 has an invalid length. [ 669.069125][T16556] us122l: couldn't allocate write buffer [ 669.081359][T16556] snd-usb-us122l: probe of 2-1:1.1 failed with error -22 [ 669.114267][T16556] usb 2-1: USB disconnect, device number 14 [ 669.367441][T19660] SET target dimension over the limit! [ 669.602602][T19675] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 669.746152][ T21] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 669.826357][T19687] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6891'. [ 669.838178][T19687] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6891'. [ 669.856864][T19687] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6891'. [ 669.870380][T19689] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6893'. [ 669.882035][ T1108] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 669.895517][T16556] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 670.107747][T19705] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6900'. [ 670.140692][ T1108] usb 3-1: Using ep0 maxpacket: 16 [ 670.316245][ T21] usb 1-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 670.337797][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.360243][ T21] usb 1-1: Product: syz [ 670.364477][ T21] usb 1-1: Manufacturer: syz [ 670.375851][T16556] usb 4-1: unable to get BOS descriptor or descriptor too short [ 670.386396][ T21] usb 1-1: SerialNumber: syz [ 670.404017][ T21] usb 1-1: config 0 descriptor?? [ 670.450560][ T1108] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 670.450990][T16556] usb 4-1: not running at top speed; connect to a high speed hub [ 670.460109][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.490853][T19065] Bluetooth: hci5: urb ffff8881445a4c00 submission failed (2) [ 670.552305][T19706] loop4: detected capacity change from 0 to 32768 [ 670.562391][ T1108] usb 3-1: Product: syz [ 670.571868][ T1108] usb 3-1: Manufacturer: syz [ 670.585748][ T1108] usb 3-1: SerialNumber: syz [ 670.595311][ T1108] usb 3-1: config 0 descriptor?? [ 670.600625][T16556] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 670.600652][T16556] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 670.600727][T16556] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 670.647876][T19706] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.6901 (19706) [ 670.681036][T19706] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 670.707291][T19706] BTRFS info (device loop4): using free space tree [ 670.716897][T19706] BTRFS info (device loop4): has skinny extents [ 670.729237][ T4278] usb 1-1: USB disconnect, device number 16 [ 670.868074][T16556] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 670.877181][T16556] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.899742][ T1108] speedtch 3-1:0.0: speedtch_bind: data interface not found! [ 670.918517][ T1108] speedtch 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 670.926471][T19706] BTRFS info (device loop4): enabling ssd optimizations [ 670.969547][T16556] usb 4-1: Product: syz [ 670.981976][T16556] usb 4-1: Manufacturer: syz [ 670.989950][T16556] usb 4-1: SerialNumber: syz [ 671.038488][T19706] BTRFS warning (device loop4): can't clear the compat:1 feature bit while mounted [ 671.165211][ T1108] usb 3-1: USB disconnect, device number 4 [ 671.236281][ T4886] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop4 scanned by udevd (4886) [ 671.487249][T19752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6914'. [ 671.592479][T16556] usb 4-1: USB disconnect, device number 15 [ 671.894502][ T4454] udevd[4454]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 672.538975][T19800] device gtp0 entered promiscuous mode [ 672.689239][T16553] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 672.948803][T19816] loop1: detected capacity change from 0 to 1024 [ 673.052560][T19816] EXT4-fs error (device loop1): ext4_map_blocks:741: inode #3: block 1: comm syz.1.6948: lblock 1 mapped to illegal pblock 1 (length 1) [ 673.108230][T19816] Quota error (device loop1): write_blk: dquota write failed [ 673.116413][T19816] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 673.126796][T19816] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.6948: Failed to acquire dquot type 0 [ 673.166047][T16553] usb 4-1: unable to get BOS descriptor or descriptor too short [ 673.177393][T19816] EXT4-fs error (device loop1): ext4_free_blocks:6231: comm syz.1.6948: Freeing blocks not in datazone - block = 0, count = 4096 [ 673.200246][T19816] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.6948: Invalid inode bitmap blk 0 in block_group 0 [ 673.211695][ T4764] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 673.223692][T19816] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 673.256837][ T4764] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 673.267506][T19816] EXT4-fs (loop1): 1 orphan inode deleted [ 673.272901][ T4764] EXT4-fs error (device loop1): ext4_release_dquot:6272: comm kworker/u4:7: Failed to release dquot type 0 [ 673.285312][T16553] usb 4-1: config 114 has an invalid interface number: 216 but max is 0 [ 673.292581][T19816] EXT4-fs (loop1): mounted filesystem without journal. Opts: €; noinit_itable,discard,data_err=ignore,max_batch_time=0x0000000000000006,journal_dev=0x0000000000000006,nolazytime,nobarrier,,errors=continue. Quota mode: writeback. [ 673.304785][T16553] usb 4-1: config 114 has no interface number 0 [ 673.337151][T16553] usb 4-1: config 114 interface 216 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 673.347739][T16553] usb 4-1: config 114 interface 216 has no altsetting 0 [ 673.525268][T19846] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6959'. [ 673.572398][T16553] usb 4-1: New USB device found, idVendor=2040, idProduct=7500, bcdDevice=d8.83 [ 673.581499][T16553] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.631510][T16553] usb 4-1: Product: syz [ 673.635746][T16553] usb 4-1: Manufacturer: syz [ 673.655753][T16553] usb 4-1: SerialNumber: syz [ 673.677300][T19853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6962'. [ 673.690231][T19795] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 673.711195][T19853] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6962'. [ 673.876945][T19860] loop1: detected capacity change from 0 to 256 [ 673.893722][T19862] Cannot find add_set index 2 as target [ 673.969682][T19860] exfat: Deprecated parameter 'utf8' [ 673.985035][T19860] exfat: Deprecated parameter 'utf8' [ 674.000284][T19860] exfat: Deprecated parameter 'namecase' [ 674.031928][T19860] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 674.080036][T19866] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6969'. [ 674.195636][T19850] loop4: detected capacity change from 0 to 32768 [ 674.230664][T16553] pvrusb2: Hardware description: WinTV HVR-1950 Model 750xx [ 674.243773][T16553] usb 4-1: selecting invalid altsetting 0 [ 674.254821][ T2424] pvrusb2: Invalid read control endpoint [ 674.276125][T16553] usb 4-1: USB disconnect, device number 16 [ 674.280372][ T2424] usb 4-1: Direct firmware load for v4l-pvrusb2-73xxx-01.fw failed with error -2 [ 674.293505][ T2424] usb 4-1: Falling back to sysfs fallback for: v4l-pvrusb2-73xxx-01.fw [ 674.368204][T19850] XFS (loop4): Mounting V5 Filesystem [ 674.466638][T19850] XFS (loop4): Ending clean mount [ 674.497317][T19850] XFS (loop4): EXPERIMENTAL online scrub feature in use. Use at your own risk! [ 674.540873][ T4245] XFS (loop4): Unmounting Filesystem [ 674.932857][T19894] xt_socket: unknown flags 0xc [ 674.954041][T19898] syz.1.6980 uses obsolete (PF_INET,SOCK_PACKET) [ 675.229136][ T21] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 675.251189][T19908] netlink: 'syz.1.6987': attribute type 13 has an invalid length. [ 675.619018][ T21] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 675.619069][ T21] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 675.619098][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.659253][ T21] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 675.721488][T16556] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 675.999003][T16556] usb 1-1: Using ep0 maxpacket: 32 [ 676.128856][T16556] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 676.157137][T16556] usb 1-1: config 0 has no interface number 0 [ 676.367239][T16556] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 676.381621][T16556] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.390510][T16556] usb 1-1: Product: syz [ 676.398196][T16556] usb 1-1: Manufacturer: syz [ 676.402918][T16556] usb 1-1: SerialNumber: syz [ 676.410352][T16556] usb 1-1: config 0 descriptor?? [ 676.464135][T16556] smsc95xx v2.0.0 [ 676.574875][T19985] loop1: detected capacity change from 0 to 4096 [ 676.603228][T19985] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 676.622196][T19985] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 676.643519][T19985] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 676.670551][T19985] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 676.690551][T19985] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 676.705559][T19985] ntfs: volume version 3.1. [ 676.715169][T16556] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 676.732500][T19985] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 676.761171][T16556] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 676.769424][T19985] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 676.801180][T16556] usb 1-1: USB disconnect, device number 17 [ 676.865165][ T21] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 677.089413][ T21] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 677.097648][ T21] stv0680 3-1:4.0: last error: 0, command = 0x0 [ 677.138622][ T21] usb 3-1: USB disconnect, device number 5 [ 677.161199][T19997] misc userio: No port type given on /dev/userio [ 677.245871][T20001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 677.409737][T20014] xt_TCPMSS: Only works on TCP SYN packets [ 677.833273][T20036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7057'. [ 677.997927][ T6188] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 678.132638][T20057] device geneve2 entered promiscuous mode [ 678.140712][T20059] CIFS mount error: No usable UNC path provided in device string! [ 678.140712][T20059] [ 678.141464][T20056] loop0: detected capacity change from 0 to 1024 [ 678.207240][T20059] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 678.241717][T20056] EXT4-fs error (device loop0): ext4_map_blocks:741: inode #3: block 1: comm syz.0.7056: lblock 1 mapped to illegal pblock 1 (length 1) [ 678.254685][ T6188] usb 3-1: Using ep0 maxpacket: 16 [ 678.267045][T20056] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.7056: Failed to acquire dquot type 0 [ 678.279287][T20056] EXT4-fs error (device loop0): ext4_free_blocks:6231: comm syz.0.7056: Freeing blocks not in datazone - block = 0, count = 4096 [ 678.298686][T20056] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.7056: Invalid inode bitmap blk 0 in block_group 0 [ 678.333380][ T3099] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 678.355631][T20065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 678.360330][T20056] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 678.380053][ T3099] EXT4-fs error (device loop0): ext4_release_dquot:6272: comm kworker/u4:4: Failed to release dquot type 0 [ 678.392137][T20056] EXT4-fs (loop0): 1 orphan inode deleted [ 678.393944][ T6188] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 678.410198][T20056] EXT4-fs (loop0): mounted filesystem without journal. Opts: €; noinit_itable,discard,data_err=ignore,max_batch_time=0x0000000000000006,journal_dev=0x0000000000000006,nolazytime,nobarrier,,errors=continue. Quota mode: writeback. [ 678.415045][ T6188] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 678.476325][ T6188] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 678.507027][ T6188] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 30768, setting to 1024 [ 678.519128][ T6188] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 678.529378][ T6188] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 678.650729][ T6188] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 678.659831][ T6188] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 678.679181][ T6188] usb 3-1: SerialNumber: syz [ 678.704076][T20032] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 678.714495][T20032] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 678.739408][T20069] netlink: 134744 bytes leftover after parsing attributes in process `syz.0.7063'. [ 678.803717][T20063] loop4: detected capacity change from 0 to 32768 [ 678.968203][T20032] udc-core: couldn't find an available UDC or it's busy [ 678.998341][T20032] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 679.093285][ T6188] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 679.131189][ T6188] usb 3-1: USB disconnect, device number 6 [ 679.812408][T20108] netlink: 830 bytes leftover after parsing attributes in process `syz.0.7083'. [ 679.963274][T20118] loop4: detected capacity change from 0 to 8 [ 680.691608][T20163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7109'. [ 680.873485][T20174] block nbd0: NBD_DISCONNECT [ 681.058967][ T264] block nbd1: Attempted send on invalid socket [ 681.065228][ T264] blk_update_request: I/O error, dev nbd1, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 681.077399][ T264] gfs2: error 10 reading superblock [ 681.381254][T20208] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7131'. [ 681.436730][T20212] xt_hashlimit: invalid rate [ 681.476274][T20216] netlink: 136 bytes leftover after parsing attributes in process `syz.1.7135'. [ 681.502115][T20216] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7135'. [ 681.540115][T20216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7135'. [ 681.549978][T16556] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 681.582264][T20216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7135'. [ 681.650865][T20222] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 681.727568][T20225] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4233] was attempted by ""[20225] [ 681.869243][T20231] loop3: detected capacity change from 0 to 512 [ 681.975078][T16556] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 681.989874][T16556] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 682.011246][T20231] EXT4-fs (loop3): Test dummy encryption mode enabled [ 682.034689][T20231] EXT4-fs (loop3): Test dummy encryption mode enabled [ 682.048078][T16556] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 682.059420][T20231] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 682.098104][T16556] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 682.165920][T20231] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,dioread_nolock,jqfmt=vfsv1,nojournal_checksum,minixdf,barrier=0x0000000000000a18,errors=remount-ro,lazytime,test_dummy_encryption,min_batch_time=0x0000000000000004,nogrpid. Quota mode: none. [ 682.271957][T20246] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7149'. [ 682.328098][T16556] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 682.343028][T16556] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.352289][T20231] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #2: comm syz.3.7142: Directory hole found for htree leaf block 0 [ 682.379149][T20246] netlink: 'syz.4.7149': attribute type 6 has an invalid length. [ 682.403224][T16556] usb 1-1: Product: syz [ 682.413841][T20231] EXT4-fs (loop3): Remounting filesystem read-only [ 682.421327][T16556] usb 1-1: Manufacturer: syz [ 682.432152][T16556] usb 1-1: SerialNumber: syz [ 682.458208][T16556] usb 1-1: config 0 descriptor?? [ 682.510783][T16556] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 682.806430][T16556] ums-isd200: probe of 1-1:0.0 failed with error -22 [ 682.881394][T20273] loop4: detected capacity change from 0 to 4096 [ 682.898947][T20273] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 682.962020][ T6188] usb 1-1: USB disconnect, device number 18 [ 683.203495][T20291] __nla_validate_parse: 2 callbacks suppressed [ 683.203515][T20291] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7170'. [ 683.310191][T20290] loop1: detected capacity change from 0 to 4096 [ 683.650092][T20310] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7179'. [ 683.835015][ T1108] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 684.190416][T20336] loop2: detected capacity change from 0 to 4096 [ 684.226089][T20336] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 684.284244][ T1108] usb 5-1: unable to get BOS descriptor or descriptor too short [ 684.369906][ T1108] usb 5-1: config 0 has an invalid interface number: 86 but max is 0 [ 684.378085][ T1108] usb 5-1: config 0 has no interface number 0 [ 684.412303][ T1108] usb 5-1: config 0 interface 86 altsetting 4 bulk endpoint 0xE has invalid maxpacket 8 [ 684.422148][ T1108] usb 5-1: config 0 interface 86 altsetting 4 bulk endpoint 0xC has invalid maxpacket 32 [ 684.449609][ T1108] usb 5-1: config 0 interface 86 has no altsetting 0 [ 684.659820][ T1108] usb 5-1: New USB device found, idVendor=0586, idProduct=1000, bcdDevice=aa.5e [ 684.690293][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.711625][ T1108] usb 5-1: Product: syz [ 684.715891][ T1108] usb 5-1: Manufacturer: syz [ 684.723544][T20369] raw_sendmsg: syz.3.7208 forgot to set AF_INET. Fix it! [ 684.742152][ T1108] usb 5-1: SerialNumber: syz [ 684.778461][ T1108] usb 5-1: config 0 descriptor?? [ 684.797681][T20304] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 684.804768][T20304] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 685.042101][T20389] loop2: detected capacity change from 0 to 164 [ 685.073187][T20392] fuse: Invalid rootmode [ 685.078366][T20393] xt_CT: You must specify a L4 protocol and not use inversions on it [ 685.158268][T20395] loop0: detected capacity change from 0 to 1024 [ 685.180417][ T1108] omninet 5-1:0.86: ZyXEL - omni.net usb converter detected [ 685.203639][T20389] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 685.217639][T20397] loop1: detected capacity change from 0 to 1024 [ 685.221725][ T1108] usb 5-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 685.266987][ T1108] usb 5-1: USB disconnect, device number 4 [ 685.327536][T20397] hfsplus: failed to load root directory [ 685.333773][ T1108] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 685.353575][ T1108] omninet 5-1:0.86: device disconnected [ 685.389670][ T3099] hfsplus: b-tree write err: -5, ino 25 [ 685.404619][ T3099] hfsplus: b-tree write err: -5, ino 4 [ 685.413231][ T3099] hfsplus: b-tree write err: -5, ino 2 [ 685.751985][T20426] loop4: detected capacity change from 0 to 256 [ 686.051590][T20431] loop0: detected capacity change from 0 to 4096 [ 686.265946][T20454] netlink: 'syz.1.7249': attribute type 32 has an invalid length. [ 687.390169][T20497] netlink: 'syz.2.7271': attribute type 21 has an invalid length. [ 687.426432][T20497] netlink: 144 bytes leftover after parsing attributes in process `syz.2.7271'. [ 687.447055][T20503] device syz_tun entered promiscuous mode [ 687.522904][T20503] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 688.288430][T20545] loop4: detected capacity change from 0 to 1764 [ 688.690960][T20567] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 688.788231][T20573] overlayfs: empty lowerdir [ 688.816585][T20575] netlink: 'syz.1.7308': attribute type 49 has an invalid length. [ 688.884042][T20579] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 688.935238][T20582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7312'. [ 688.955248][T20582] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7312'. [ 689.048278][T20589] autofs4:pid:20589:autofs_fill_super: called with bogus options [ 689.209424][T20598] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7319'. [ 689.303228][T20605] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7324'. [ 689.669944][T20630] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7335'. [ 690.006566][T20656] loop1: detected capacity change from 0 to 1024 [ 690.299460][T20676] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7356'. [ 690.562940][T20692] netlink: 1052 bytes leftover after parsing attributes in process `syz.0.7362'. [ 690.625961][T20694] loop1: detected capacity change from 0 to 1764 [ 691.109963][T20730] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 691.125496][T20727] usb usb8: usbfs: process 20727 (syz.2.7380) did not claim interface 0 before use [ 691.235892][T20738] IPv6: Can't replace route, no match found [ 691.356262][T20744] device syz_tun entered promiscuous mode [ 691.366233][T20748] affs: No valid root block on device nbd0 [ 691.436836][T20744] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 691.488810][T20754] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7393'. [ 691.631265][T20758] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 525060 out of range (51000000..2150000000) [ 691.825038][T20772] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 692.143647][T20786] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 692.184416][ T13] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 692.296634][T20753] loop3: detected capacity change from 0 to 32768 [ 692.393351][T20753] ERROR: (device loop3): diNewExt: no free extents [ 692.393351][T20753] [ 692.420570][T20753] ialloc: diAlloc returned -5! [ 692.547967][ T1108] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 692.592706][T20811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 692.804707][ T13] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 692.813817][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.872842][ T13] usb 3-1: Product: syz [ 692.877060][ T13] usb 3-1: Manufacturer: syz [ 692.894670][ T13] usb 3-1: SerialNumber: syz [ 692.924877][ T13] usb 3-1: config 0 descriptor?? [ 692.954233][T20828] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7428'. [ 692.964621][T20829] xt_bpf: check failed: parse error [ 692.977679][ T13] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 692.995345][ T1108] usb 5-1: unable to get BOS descriptor or descriptor too short [ 693.003610][T20828] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7428'. [ 693.069983][T20835] netlink: 'syz.0.7432': attribute type 10 has an invalid length. [ 693.082846][ T1108] usb 5-1: config 6 has an invalid interface number: 252 but max is 0 [ 693.095290][ T1108] usb 5-1: config 6 has no interface number 0 [ 693.101434][ T1108] usb 5-1: config 6 interface 252 altsetting 5 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 693.128916][ T1108] usb 5-1: config 6 interface 252 has no altsetting 0 [ 693.208793][T20835] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 693.211060][ T13] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 693.230348][ T13] sq905c 3-1:0.0: Get version command failed [ 693.259187][ T13] sq905c: probe of 3-1:0.0 failed with error -71 [ 693.301281][ T13] usb 3-1: USB disconnect, device number 7 [ 693.310854][ T1108] usb 5-1: New USB device found, idVendor=1199, idProduct=6815, bcdDevice=dd.bf [ 693.335589][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.365849][ T1108] usb 5-1: Product: syz [ 693.381576][ T1108] usb 5-1: Manufacturer: syz [ 693.391805][ T1108] usb 5-1: SerialNumber: syz [ 693.746479][ T1108] sierra 5-1:6.252: Sierra USB modem converter detected [ 693.805378][ T1108] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 693.845860][ T1108] usb 5-1: Sierra USB modem converter now attached to ttyUSB1 [ 693.891122][ T1108] usb 5-1: USB disconnect, device number 5 [ 693.966968][ T1108] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 693.992638][ T1108] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 693.993060][ T1108] sierra 5-1:6.252: device disconnected [ 694.230527][T20895] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 694.335836][T20905] __nla_validate_parse: 1 callbacks suppressed [ 694.335853][T20905] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7467'. [ 694.358518][T20905] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7467'. [ 694.383789][T20905] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7467'. [ 694.410747][T20905] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7467'. [ 694.460993][T20905] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7467'. [ 694.492593][T20905] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7467'. [ 694.520450][T20905] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7467'. [ 694.572423][T20905] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7467'. [ 694.620986][T20905] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7467'. [ 694.645489][T20905] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7467'. [ 694.683271][T20905] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 694.714890][T20905] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 694.744737][T20905] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 694.789600][T20905] device veth1_virt_wifi left promiscuous mode [ 694.799161][T20905] device vlan0 left promiscuous mode [ 695.352154][T20959] SET target dimension over the limit! [ 695.624535][T20973] loop0: detected capacity change from 0 to 256 [ 696.313758][T21005] netlink: zone id is out of range [ 696.383402][T20971] loop3: detected capacity change from 0 to 32768 [ 697.195446][T21064] blk_update_request: I/O error, dev loop2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 697.325272][T21077] netlink: 'syz.3.7548': attribute type 10 has an invalid length. [ 697.423059][T21077] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 697.434363][T21082] loop1: detected capacity change from 0 to 256 [ 697.474892][T21082] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x190b464b, utbl_chksum : 0xe619d30d) [ 697.603802][T21082] exFAT-fs (loop1): error, broken FAT chain. [ 697.615989][T21082] exFAT-fs (loop1): Filesystem has been set read-only [ 697.640410][T21082] exFAT-fs (loop1): error, failed to bmap (inode : ffff8880726494e0 iblock : 0, err : -5) [ 697.756661][T21102] ntfs3: nbd0: try to read out of volume at offset 0x0 [ 697.934199][T21116] loop3: detected capacity change from 0 to 256 [ 698.268291][T21132] loop3: detected capacity change from 0 to 4096 [ 698.388106][T21132] ntfs3: loop3: Failed to load $Extend. [ 698.413081][T21146] loop2: detected capacity change from 0 to 2048 [ 698.492506][T21149] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 698.508317][T21150] tmpfs: Bad value for 'mpol' [ 698.584917][T21146] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=80, inode=15, rec_len=1498, name_len=5 [ 698.614929][T21146] Remounting filesystem read-only [ 698.761794][T21157] loop1: detected capacity change from 0 to 256 [ 698.781953][T21158] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 698.782182][T21158] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 698.837227][T21157] FAT-fs (loop1): Directory bread(block 64) failed [ 698.837272][T21157] FAT-fs (loop1): Directory bread(block 65) failed [ 698.837356][T21157] FAT-fs (loop1): Directory bread(block 66) failed [ 698.837394][T21157] FAT-fs (loop1): Directory bread(block 67) failed [ 698.837490][T21157] FAT-fs (loop1): Directory bread(block 68) failed [ 698.837526][T21157] FAT-fs (loop1): Directory bread(block 69) failed [ 698.837603][T21157] FAT-fs (loop1): Directory bread(block 70) failed [ 698.837639][T21157] FAT-fs (loop1): Directory bread(block 71) failed [ 698.837711][T21157] FAT-fs (loop1): Directory bread(block 72) failed [ 698.837745][T21157] FAT-fs (loop1): Directory bread(block 73) failed [ 699.329262][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 699.329370][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 699.852955][T21200] __nla_validate_parse: 150 callbacks suppressed [ 699.852976][T21200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7611'. [ 700.005989][T21212] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7616'. [ 700.231034][T21226] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7623'. [ 700.298726][T21228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7625'. [ 700.330937][T21226] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7623'. [ 700.339976][T21226] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7623'. [ 700.489388][T21238] netlink: 256 bytes leftover after parsing attributes in process `syz.1.7630'. [ 700.510780][T21226] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7623'. [ 700.527734][T21238] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 700.567749][T21226] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7623'. [ 700.599309][T21226] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7623'. [ 700.660641][T21226] device syz_tun left promiscuous mode [ 700.691795][T21226] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 700.850285][T21253] xt_l2tp: v2 sid > 0xffff: 262144 [ 701.087438][T21270] netlink: 'syz.0.7646': attribute type 13 has an invalid length. [ 701.442167][T21292] netlink: 'syz.1.7657': attribute type 2 has an invalid length. [ 701.468298][T21284] loop4: detected capacity change from 0 to 4096 [ 701.474900][T21292] netlink: 'syz.1.7657': attribute type 1 has an invalid length. [ 701.536909][T21284] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 701.579534][T21284] ntfs3: loop4: Failed to load $MFT. [ 702.387998][T21284] loop4: detected capacity change from 0 to 32768 [ 702.473119][T21284] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 702.491120][T21284] BTRFS info (device loop4): using free space tree [ 702.497808][T21284] BTRFS info (device loop4): has skinny extents [ 702.779015][T21284] BTRFS info (device loop4): enabling ssd optimizations [ 702.853620][ T5666] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 702.935897][ T6188] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 702.958908][T16557] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 703.139240][ T5666] usb 2-1: Using ep0 maxpacket: 32 [ 703.203881][T21380] device bond3 entered promiscuous mode [ 703.212388][T21380] 8021q: adding VLAN 0 to HW filter on device bond3 [ 703.306565][ T5666] usb 2-1: config 2 has an invalid interface number: 88 but max is 0 [ 703.316418][ T5666] usb 2-1: config 2 has no interface number 0 [ 703.322775][ T5666] usb 2-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 703.324722][ T6188] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 703.357396][ T5666] usb 2-1: config 2 interface 88 has no altsetting 0 [ 703.411934][T21389] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2880) [ 703.422923][T21389] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 703.506217][ T6188] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 703.517633][ T6188] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.525684][ T6188] usb 3-1: Product: syz [ 703.538102][T16557] usb 1-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.02 [ 703.540420][ T6188] usb 3-1: Manufacturer: syz [ 703.558374][ T6188] usb 3-1: SerialNumber: syz [ 703.560693][T16557] usb 1-1: New USB device strings: Mfr=0, Product=232, SerialNumber=255 [ 703.578030][ T6188] usb 3-1: config 0 descriptor?? [ 703.581572][ T5666] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 703.597971][ T5666] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.606443][T16557] usb 1-1: Product: syz [ 703.619909][T16557] usb 1-1: SerialNumber: syz [ 703.625331][ T6188] CoreChips: probe of 3-1:0.0 failed with error -22 [ 703.625510][ T5666] usb 2-1: Product: syz [ 703.642846][T16557] usb 1-1: config 0 descriptor?? [ 703.648404][ T5666] usb 2-1: Manufacturer: syz [ 703.664562][ T5666] usb 2-1: SerialNumber: syz [ 703.666435][T21397] loop4: detected capacity change from 0 to 256 [ 703.698912][T21352] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 703.941998][T21352] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 703.949560][T16557] ldusb 1-1:0.0: Interrupt in endpoint not found [ 703.974400][T16557] usb 1-1: USB disconnect, device number 19 [ 704.014063][T21401] loop4: detected capacity change from 0 to 16 [ 704.034184][T21401] erofs: (device loop4): mounted with root inode @ nid 36. [ 704.211490][ T5666] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 704.236390][ T5666] asix: probe of 2-1:2.88 failed with error -71 [ 704.256747][ T5666] usb 2-1: USB disconnect, device number 15 [ 704.715694][T21443] netlink: 'syz.4.7720': attribute type 2 has an invalid length. [ 704.723486][T21443] netlink: 'syz.4.7720': attribute type 1 has an invalid length. [ 704.928501][T21457] loop4: detected capacity change from 0 to 256 [ 705.035208][T21457] FAT-fs (loop4): Directory bread(block 64) failed [ 705.041904][T21457] FAT-fs (loop4): Directory bread(block 65) failed [ 705.098716][T21457] FAT-fs (loop4): Directory bread(block 66) failed [ 705.098759][T21457] FAT-fs (loop4): Directory bread(block 67) failed [ 705.098916][T21457] FAT-fs (loop4): Directory bread(block 68) failed [ 705.098954][T21457] FAT-fs (loop4): Directory bread(block 69) failed [ 705.099027][T21457] FAT-fs (loop4): Directory bread(block 70) failed [ 705.099061][T21457] FAT-fs (loop4): Directory bread(block 71) failed [ 705.099141][T21457] FAT-fs (loop4): Directory bread(block 72) failed [ 705.099175][T21457] FAT-fs (loop4): Directory bread(block 73) failed [ 705.554882][T21484] __nla_validate_parse: 31 callbacks suppressed [ 705.554903][T21484] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7738'. [ 705.614136][T21484] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7738'. [ 705.623654][T21484] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7738'. [ 705.656898][T21484] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7738'. [ 705.663646][T21487] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.7742' sets config #0 [ 705.667286][T21484] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7738'. [ 705.715555][T21484] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7738'. [ 705.757394][T21484] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7738'. [ 705.788056][T21484] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7738'. [ 705.868381][T21484] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7738'. [ 705.878008][T21484] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7738'. [ 705.887452][ T6188] usb 3-1: USB disconnect, device number 8 [ 705.955358][T21484] device syz_tun left promiscuous mode [ 705.961785][T21484] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 705.985827][T21503] netlink: 'syz.2.7750': attribute type 1 has an invalid length. [ 706.092132][T21484] device bond1 left promiscuous mode [ 706.124417][T21484] device bridge1 left promiscuous mode [ 706.145474][T21484] device gtp0 left promiscuous mode [ 706.231905][ T4315] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 706.285907][T21513] loop2: detected capacity change from 0 to 2048 [ 706.331111][T21517] autofs4:pid:21517:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.768), cmd(0xc0189375) [ 706.346436][T21517] autofs4:pid:21517:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 706.383659][T21513] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 706.499163][ T4315] usb 2-1: Using ep0 maxpacket: 32 [ 706.531220][ T6192] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 706.634241][ T4315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 706.660457][ T4315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 706.702833][ T4315] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 706.724369][ T4315] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.748403][ T4315] usb 2-1: config 0 descriptor?? [ 706.794088][ T4315] hub 2-1:0.0: USB hub found [ 706.928392][ T6192] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 706.958268][ T6192] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 706.997384][ T6192] usb 5-1: config 0 has no interface number 0 [ 706.997632][T21546] netlink: 'syz.3.7771': attribute type 5 has an invalid length. [ 707.022923][ T21] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 707.034104][ T4315] hub 2-1:0.0: 3 ports detected [ 707.060121][T21546] device ip6erspan0 entered promiscuous mode [ 707.189230][ T6192] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 707.200232][ T6192] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.208373][ T6192] usb 5-1: Product: syz [ 707.212564][ T6192] usb 5-1: Manufacturer: syz [ 707.217524][ T6192] usb 5-1: SerialNumber: syz [ 707.233818][ T6192] usb 5-1: config 0 descriptor?? [ 707.269447][ T4315] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 707.276525][ T4315] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 707.285112][ T6192] hub 5-1:0.31: bad descriptor, ignoring hub [ 707.291407][ T21] usb 1-1: Using ep0 maxpacket: 8 [ 707.300928][ T6192] hub: probe of 5-1:0.31 failed with error -5 [ 707.308629][ T6192] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 707.355473][ T6192] uvcvideo 5-1:0.31: Entity type for entity Output 6 was not initialized! [ 707.382276][ T6192] usb 5-1: Failed to create links for entity 6 [ 707.393050][ T6192] usb 5-1: Failed to register entities (-22). [ 707.419508][ T21] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 707.445500][ T21] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 707.455568][ T4315] usbhid 2-1:0.0: can't add hid device: -71 [ 707.461630][ T4315] usbhid: probe of 2-1:0.0 failed with error -71 [ 707.496027][ T21] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 707.515515][ T4315] usb 2-1: USB disconnect, device number 16 [ 707.545645][ T21] usb 1-1: config 0 interface 0 has no altsetting 0 [ 707.552412][ T21] usb 1-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 3.00 [ 707.561636][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.574343][ T6192] usb 5-1: USB disconnect, device number 6 [ 707.607702][ T21] usb 1-1: config 0 descriptor?? [ 707.667112][ T21] usbhid 1-1:0.0: can't add hid device: -22 [ 707.673166][ T21] usbhid: probe of 1-1:0.0 failed with error -22 [ 707.904498][T16557] usb 1-1: USB disconnect, device number 20 [ 708.161759][T21594] loop1: detected capacity change from 0 to 16 [ 708.253797][T21594] erofs: (device loop1): mounted with root inode @ nid 36. [ 708.281359][T21594] erofs: (device loop1): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 86 [ 708.328866][T21600] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 708.353481][T21594] erofs: (device loop1): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 86 [ 708.377217][T21600] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 708.465891][T21606] loop2: detected capacity change from 0 to 64 [ 708.622145][T21616] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 708.707903][T21623] loop0: detected capacity change from 0 to 64 [ 708.824894][T21623] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 709.260246][T21653] xt_l2tp: unknown flags: 17 [ 709.326024][T21657] loop0: detected capacity change from 0 to 512 [ 709.394841][T21657] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 709.420926][T21663] loop2: detected capacity change from 0 to 136 [ 709.470454][T21663] Attempt to read inode for relocated directory [ 709.494020][T21657] EXT4-fs error (device loop0): ext4_orphan_get:1432: comm syz.0.7825: bad orphan inode 15 [ 709.538239][T21657] ext4_test_bit(bit=14, block=18) = 1 [ 709.543679][T21657] is_bad_inode(inode)=0 [ 709.604978][T21663] attempt to access beyond end of device [ 709.604978][T21663] loop2: rw=524288, want=335544432, limit=136 [ 709.636309][T21657] NEXT_ORPHAN(inode)=1023 [ 709.655507][T21657] max_ino=32 [ 709.658992][T21657] i_nlink=0 [ 709.671239][T21663] attempt to access beyond end of device [ 709.671239][T21663] loop2: rw=0, want=335544432, limit=136 [ 709.693535][T21657] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 709.750245][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 709.750262][ T26] audit: type=1800 audit(2000000445.751:40): pid=21663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.7828" name="file1" dev="loop2" ino=1487 res=0 errno=0 [ 709.803369][T21657] ext2 filesystem being mounted at /1640/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 709.871833][T21657] EXT4-fs error (device loop0): ext4_search_dir:1549: inode #2: block 3: comm syz.0.7825: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=458767, rec_len=0, size=4096 fake=0 [ 709.906840][T21627] loop1: detected capacity change from 0 to 32768 [ 711.010255][T21737] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 711.102035][T21742] netlink: 'syz.1.7866': attribute type 3 has an invalid length. [ 711.117635][T16557] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 711.190031][T21744] netlink: 'syz.3.7867': attribute type 1 has an invalid length. [ 711.448964][T16557] usb 3-1: Using ep0 maxpacket: 16 [ 711.479674][T21756] loop1: detected capacity change from 0 to 8192 [ 711.486391][ T5666] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 711.527654][T21756] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 711.566839][T21756] REISERFS (device loop1): using ordered data mode [ 711.573393][T21756] reiserfs: using flush barriers [ 711.579764][T21756] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 711.596502][T21756] REISERFS (device loop1): checking transaction log (loop1) [ 711.599138][T16557] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 711.608430][T21756] REISERFS (device loop1): Using r5 hash to sort names [ 711.621308][T21756] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 711.655895][T16557] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 711.665169][ T4281] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 711.876934][T16557] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 711.892469][T16557] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.901286][ T5666] usb 5-1: config 0 has an invalid interface number: 37 but max is 1 [ 711.922714][ T5666] usb 5-1: config 0 has an invalid interface number: 255 but max is 1 [ 711.933114][T16557] usb 3-1: Product: syz [ 711.947597][ T5666] usb 5-1: config 0 has no interface number 0 [ 711.956228][T16557] usb 3-1: Manufacturer: syz [ 711.960864][T16557] usb 3-1: SerialNumber: syz [ 711.976658][ T5666] usb 5-1: config 0 has no interface number 1 [ 711.995750][ T5666] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 712.026978][ T4281] usb 1-1: not running at top speed; connect to a high speed hub [ 712.035090][ T5666] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 712.073350][ T5666] usb 5-1: config 0 interface 255 has no altsetting 0 [ 712.144228][ T4281] usb 1-1: config 88 has an invalid interface number: 11 but max is 0 [ 712.152483][ T4281] usb 1-1: config 88 has no interface number 0 [ 712.158990][ T4281] usb 1-1: config 88 interface 11 has no altsetting 0 [ 712.261496][ T5666] usb 5-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 712.273896][ T5666] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.281924][ T5666] usb 5-1: Product: syz [ 712.287074][ T5666] usb 5-1: Manufacturer: syz [ 712.291737][ T5666] usb 5-1: SerialNumber: syz [ 712.298541][ T5666] usb 5-1: config 0 descriptor?? [ 712.340882][ T5666] usb 5-1: selecting invalid altsetting 0 [ 712.346709][ T5666] usb 5-1: Could not set interface, error -22 [ 712.368412][ T4281] usb 1-1: New USB device found, idVendor=0545, idProduct=800d, bcdDevice= 3.0a [ 712.377529][ T4281] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.387663][ T4281] usb 1-1: Product: syz [ 712.392009][ T4281] usb 1-1: Manufacturer: syz [ 712.397040][ T4281] usb 1-1: SerialNumber: syz [ 712.539761][T16557] usb 3-1: 0:2 : does not exist [ 712.569454][T16557] usb 3-1: USB disconnect, device number 9 [ 712.585118][ T5666] usb 5-1: USB disconnect, device number 7 [ 712.606137][ T4582] udevd[4582]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 712.760487][ T4281] usb 1-1: USB disconnect, device number 21 [ 713.430354][T21810] __nla_validate_parse: 167 callbacks suppressed [ 713.430372][T21810] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7899'. [ 713.446922][T21811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7900'. [ 713.486516][T21810] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 713.596390][T21815] device wlan0 entered promiscuous mode [ 713.709818][ T5666] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 713.727409][T21823] netlink: 'syz.4.7907': attribute type 1 has an invalid length. [ 713.735213][T21823] netlink: 244 bytes leftover after parsing attributes in process `syz.4.7907'. [ 713.982574][ T5666] usb 2-1: Using ep0 maxpacket: 32 [ 714.031275][T21843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7916'. [ 714.066089][T21847] No such timeout policy "syz1" [ 714.075202][T21843] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7916'. [ 714.114933][ T5666] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 714.158469][ T5666] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 714.260574][T21855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7922'. [ 714.318316][ T5666] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 714.350440][ T5666] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 714.364674][ T5666] usb 2-1: Product: syz [ 714.378498][ T5666] usb 2-1: Manufacturer: syz [ 714.387252][T21863] device wlan0 entered promiscuous mode [ 714.508796][ T5666] hub 2-1:4.0: USB hub found [ 714.745961][ T5666] hub 2-1:4.0: config failed, hub has too many ports! (err -19) [ 715.055893][ T4281] kernel write not supported for file /3120/timerslack_ns (pid: 4281 comm: kworker/0:9) [ 715.095060][ T5666] usb 2-1: USB disconnect, device number 17 [ 715.177321][T21912] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7952'. [ 715.498801][T21934] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7960'. [ 715.582083][T21934] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 715.595125][T21938] xt_TCPMSS: Only works on TCP SYN packets [ 715.609790][T21934] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 715.968399][T21955] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7972'. [ 716.025278][T21960] netlink: 'syz.1.7974': attribute type 6 has an invalid length. [ 716.316910][T21975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7981'. [ 716.872033][T22000] device geneve2 entered promiscuous mode [ 717.046265][T22013] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 717.295665][T21970] loop0: detected capacity change from 0 to 32768 [ 717.605691][T21970] XFS (loop0): Mounting V5 Filesystem [ 717.743569][T21970] XFS (loop0): Ending clean mount [ 717.786158][T21970] XFS (loop0): Quotacheck needed: Please wait. [ 717.899055][T21970] XFS (loop0): Quotacheck: Done. [ 718.073578][ T4232] XFS (loop0): Unmounting Filesystem [ 718.349342][T22024] loop4: detected capacity change from 0 to 32768 [ 718.422815][T22024] (syz.4.8005,22024,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 718.458527][T22024] (syz.4.8005,22024,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 718.495215][ T6192] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 718.512892][T22024] (syz.4.8005,22024,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0x8514aa1d. Applying ECC. [ 718.599090][T22024] JBD2: Ignoring recovery information on journal [ 718.761259][ T6192] usb 2-1: Using ep0 maxpacket: 16 [ 718.784116][T22024] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 718.892889][ T6192] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 718.915726][ T6192] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 718.941082][ T6192] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 718.964615][ T6192] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 719.002344][ T6192] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 719.032308][T22024] (syz.4.8005,22024,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x6db03cd7, computed 0xe423803c. Applying ECC. [ 719.033593][ T6192] usb 2-1: config 1 interface 0 has no altsetting 0 [ 719.085839][T22024] (syz.4.8005,22024,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x6db03cd7, computed 0xa5e8ec9c [ 719.106999][ T6192] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 719.124764][ T6192] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.134187][T22024] (syz.4.8005,22024,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 719.188725][T22024] (syz.4.8005,22024,1):ocfs2_quota_read:201 ERROR: status = -5 [ 719.190183][ T6192] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 719.190394][T22024] Quota error (device loop4): find_tree_dqentry: Can't read quota tree block 1 [ 719.190495][T22024] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 719.190522][T22024] (syz.4.8005,22024,1):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 719.191923][T22024] (syz.4.8005,22024,1):ocfs2_mknod:314 ERROR: status = -5 [ 719.192142][T22024] (syz.4.8005,22024,1):ocfs2_mknod:502 ERROR: status = -5 [ 719.192278][T22024] (syz.4.8005,22024,1):ocfs2_create:676 ERROR: status = -5 [ 719.422576][ T4245] ocfs2: Unmounting device (7,4) on (node local) [ 719.431738][ T6192] scsi host1: usb-storage 2-1:1.0 [ 719.583171][T22124] __nla_validate_parse: 1 callbacks suppressed [ 719.583189][T22124] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8048'. [ 719.604017][T22124] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8048'. [ 719.650269][ T5666] usb 2-1: USB disconnect, device number 18 [ 719.848627][T22134] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.8052'. [ 719.892733][T22134] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 720.086638][T22149] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8060'. [ 720.227422][T22157] loop2: detected capacity change from 0 to 256 [ 720.281025][T22157] exfat: Deprecated parameter 'utf8' [ 720.317980][T22157] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d) [ 720.530011][T22177] kAFS: unable to lookup cell '.,' [ 720.813956][ T6188] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 721.026124][T22206] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component [ 721.093981][ T6188] usb 5-1: Using ep0 maxpacket: 8 [ 721.263112][ T6188] usb 5-1: unable to get BOS descriptor or descriptor too short [ 721.348596][ T6188] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 174, changing to 7 [ 721.424186][T22233] xt_ecn: cannot match TCP bits for non-tcp packets [ 721.545394][ T6188] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0078, bcdDevice= 0.40 [ 721.571592][ T6188] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.601614][ T6188] usb 5-1: Product: syz [ 721.621189][ T6188] usb 5-1: Manufacturer: syz [ 721.647198][ T6188] usb 5-1: SerialNumber: syz [ 721.712782][T22253] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8111'. [ 721.831229][T22263] autofs4:pid:22263:validate_dev_ioctl: invalid path supplied for cmd(0xc018937d) [ 721.852379][T22264] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 721.907415][T22264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 721.949472][T22264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 722.060188][T22273] netlink: 256 bytes leftover after parsing attributes in process `syz.3.8120'. [ 722.069849][ T6188] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 722.079069][T22264] device vlan0 left promiscuous mode [ 722.102460][T22264] device gtp0 left promiscuous mode [ 722.107732][ T6188] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 722.132213][ T6188] usb 5-1: unit 254 not found! [ 722.199564][ T6188] usb 5-1: USB disconnect, device number 8 [ 722.459575][ T6192] nvmet: connect request for invalid subsystem n! [ 722.466844][T22285] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "n" [ 722.505575][ T4886] udevd[4886]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 722.550956][T22298] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 722.977201][T22322] loop0: detected capacity change from 0 to 512 [ 723.066544][T22322] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 723.103165][T22324] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 723.104940][T22322] ext4 filesystem being mounted at /1703/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 723.270755][T22332] loop2: detected capacity change from 0 to 1024 [ 723.354500][T22322] EXT4-fs error (device loop0): ext4_xattr_block_get:543: inode #15: comm syz.0.8143: corrupted xattr block 13 [ 723.426888][ T26] audit: type=1800 audit(2000000458.556:41): pid=22322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8143" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 723.709552][T22328] loop1: detected capacity change from 0 to 32768 [ 723.791144][T22328] XFS: noikeep mount option is deprecated. [ 723.944844][T22328] XFS (loop1): Mounting V5 Filesystem [ 724.137107][T22328] XFS (loop1): Ending clean mount [ 724.209646][T22328] XFS (loop1): Quotacheck needed: Please wait. [ 724.331353][T22328] XFS (loop1): Quotacheck: Done. [ 724.378468][T22393] device netdevsim0 entered promiscuous mode [ 724.484031][ T4230] XFS (loop1): Unmounting Filesystem [ 724.825424][T22405] loop0: detected capacity change from 0 to 4096 [ 724.865158][T22411] ieee802154 phy0 wpan0: encryption failed: -22 [ 724.890114][T22405] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 724.917183][T22413] loop2: detected capacity change from 0 to 128 [ 724.967566][T22403] loop4: detected capacity change from 0 to 8192 [ 724.988044][T22405] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 725.026372][T22413] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 725.034707][T22418] netlink: 'syz.3.8186': attribute type 3 has an invalid length. [ 725.059209][T22403] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 725.069573][T22403] REISERFS (device loop4): using ordered data mode [ 725.076212][T22403] reiserfs: using flush barriers [ 725.197112][T22403] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 725.261608][T22403] REISERFS (device loop4): checking transaction log (loop4) [ 725.333533][T22403] REISERFS (device loop4): Using r5 hash to sort names [ 725.380390][T22403] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 725.391997][T22429] netlink: 'syz.0.8191': attribute type 1 has an invalid length. [ 726.051575][T22464] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8208'. [ 726.123622][T22467] netlink: 'syz.0.8209': attribute type 3 has an invalid length. [ 726.490682][ T6188] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 726.572961][T22498] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 726.762443][ T6188] usb 2-1: Using ep0 maxpacket: 8 [ 726.888844][ T6188] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 726.903684][ T6188] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 726.932293][ T6188] usb 2-1: config 0 has no interface number 0 [ 726.945134][ T6188] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 727.047999][ T6188] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 727.070842][ T6188] usb 2-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 727.096745][ T6188] usb 2-1: Product: syz [ 727.116263][ T6188] usb 2-1: config 0 descriptor?? [ 727.126652][T22527] device syz_tun entered promiscuous mode [ 727.435110][ T6192] usb 2-1: USB disconnect, device number 19 [ 727.625713][T22559] netlink: 'syz.0.8254': attribute type 1 has an invalid length. [ 727.882015][ T5666] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 728.169131][ T5666] usb 5-1: Using ep0 maxpacket: 8 [ 728.214862][T22591] qrtr: Invalid version 44 [ 728.335892][ T5666] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 728.394306][T22601] netlink: 'syz.0.8273': attribute type 1 has an invalid length. [ 728.573107][T22609] Cannot find map_set index 135 as target [ 728.579508][ T5666] usb 5-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 728.604435][ T5666] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.634719][ T5666] usb 5-1: Product: syz [ 728.643993][ T5666] usb 5-1: Manufacturer: syz [ 728.664460][ T5666] usb 5-1: SerialNumber: syz [ 728.682342][ T4281] Bluetooth: hci0: command 0x0c20 tx timeout [ 728.689415][ T5666] usb 5-1: config 0 descriptor?? [ 728.768789][ T5666] usb 5-1: bad CDC descriptors [ 728.784224][ T5666] usb 5-1: unsupported MDLM descriptors [ 728.805914][ T5666] cdc_acm 5-1:0.0: Zero length descriptor references [ 728.830621][T22628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8286'. [ 728.841678][ T5666] cdc_acm: probe of 5-1:0.0 failed with error -22 [ 729.025181][ T5666] usb 5-1: USB disconnect, device number 9 [ 730.433548][T22736] SET target dimension over the limit! [ 730.681335][ T21] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 730.837276][T22760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8348'. [ 730.970068][ T21] usb 2-1: Using ep0 maxpacket: 32 [ 731.141165][ T21] usb 2-1: unable to get BOS descriptor or descriptor too short [ 731.248274][ T21] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 731.440758][ T21] usb 2-1: New USB device found, idVendor=fc08, idProduct=0101, bcdDevice= 0.40 [ 731.440793][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.440815][ T21] usb 2-1: Product: syz [ 731.440832][ T21] usb 2-1: Manufacturer: syz [ 731.440848][ T21] usb 2-1: SerialNumber: syz [ 731.461977][T22733] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 731.506342][T22793] netlink: 'syz.0.8364': attribute type 10 has an invalid length. [ 731.560650][T22793] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 731.868198][ T21] usb 2-1: MIDIStreaming interface descriptor not found [ 731.930787][ T21] usb 2-1: USB disconnect, device number 20 [ 732.255348][T13847] udevd[13847]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 732.351776][T22837] loop4: detected capacity change from 0 to 256 [ 733.032349][T22897] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8415'. [ 733.127638][T22906] x_tables: duplicate underflow at hook 4 [ 733.207849][T22904] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 733.315766][ T4281] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 733.356847][T22919] netlink: 'syz.3.8426': attribute type 1 has an invalid length. [ 733.391716][T22919] netlink: 200 bytes leftover after parsing attributes in process `syz.3.8426'. [ 733.703487][T22940] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.8435'. [ 733.792684][ T4281] usb 2-1: unable to get BOS descriptor or descriptor too short [ 733.803421][T22943] netlink: 830 bytes leftover after parsing attributes in process `syz.2.8436'. [ 733.814057][T22943] device bond_slave_0 entered promiscuous mode [ 733.820874][T22943] device bond_slave_1 entered promiscuous mode [ 733.910278][ T4281] usb 2-1: config 114 has an invalid interface number: 127 but max is 0 [ 733.930821][T22935] loop0: detected capacity change from 0 to 8192 [ 733.937336][ T4281] usb 2-1: config 114 has no interface number 0 [ 733.982061][ T4281] usb 2-1: config 114 interface 127 altsetting 232 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 734.024313][T22935] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 734.047749][ T4281] usb 2-1: config 114 interface 127 has no altsetting 0 [ 734.183951][T22935] ntfs3: Cannot use different iocharset when remounting! [ 734.278365][ T4281] usb 2-1: New USB device found, idVendor=2001, idProduct=3a05, bcdDevice=c2.02 [ 734.298435][ T4281] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.362749][ T4281] usb 2-1: Product: syz [ 734.380978][ T4281] usb 2-1: Manufacturer: syz [ 734.385651][ T4281] usb 2-1: SerialNumber: syz [ 734.475084][T22964] netlink: 'syz.2.8447': attribute type 2 has an invalid length. [ 734.509713][T22964] netlink: 'syz.2.8447': attribute type 1 has an invalid length. [ 734.787092][ T4281] usb 2-1: Could not find all expected endpoints [ 734.837821][ T4281] usb 2-1: USB disconnect, device number 21 [ 734.988171][T22990] netlink: 'syz.2.8459': attribute type 1 has an invalid length. [ 735.028080][T22992] netlink: get zone limit has 4 unknown bytes [ 735.028894][T22990] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8459'. [ 735.064434][T22990] netlink: 'syz.2.8459': attribute type 1 has an invalid length. [ 735.522184][T23014] device wireguard0 entered promiscuous mode [ 735.860068][T23037] bad cache= option: nonw [ 735.860068][T23037] [ 735.892447][T23037] CIFS: VFS: bad cache= option: nonw [ 736.142406][T23046] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8487'. [ 736.376469][T23029] loop4: detected capacity change from 0 to 32768 [ 736.496340][T23029] XFS (loop4): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 736.811816][ T4245] XFS (loop4): Unmounting Filesystem [ 736.838175][T23078] futex_wake_op: syz.2.8500 tries to shift op by 144; fix this program [ 736.859296][T23078] futex_wake_op: syz.2.8500 tries to shift op by 144; fix this program [ 737.063011][T23086] dlm: plock device version mismatch: kernel (1.2.0), user (1952804395.1769107551.1915428975) [ 737.188907][T23091] openvswitch: netlink: Actions may not be safe on all matching packets [ 738.053865][T23150] netlink: zone id is out of range [ 738.060229][T23153] tc_dump_action: action bad kind [ 738.075789][T23155] x_tables: duplicate underflow at hook 2 [ 738.082052][T23150] netlink: zone id is out of range [ 738.100579][T23150] netlink: zone id is out of range [ 738.116780][T23150] netlink: zone id is out of range [ 738.138299][T23150] netlink: zone id is out of range [ 738.164991][T23150] netlink: zone id is out of range [ 738.185123][T23150] netlink: zone id is out of range [ 738.196083][T23150] netlink: zone id is out of range [ 738.323261][T23167] ceph: No source [ 738.403525][T23175] overlayfs: missing 'lowerdir' [ 738.593816][T23191] netlink: 'syz.1.8554': attribute type 1 has an invalid length. [ 738.631700][T23194] loop2: detected capacity change from 0 to 512 [ 738.736537][T23206] kernel read not supported for file /À œ7³ÏüâW)«s“§Ç!Qöì¥fsõ‡r X%ÔàÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 23206 comm: syz.1.8560) [ 738.761516][ T26] audit: type=1800 audit(722.371:42): pid=23206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.8560" name=C020019C1437B3CFFCC3A25729AB7393A7C721518FF6ECA56673F58772A05825D4E0D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=87658 res=0 errno=0 [ 738.793458][T23194] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 738.827908][ T4281] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 739.105590][ T4281] usb 5-1: Using ep0 maxpacket: 32 [ 739.239916][ T4281] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 739.271934][ T4281] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 739.304344][ T4281] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 739.581574][T23258] netlink: 'syz.3.8585': attribute type 11 has an invalid length. [ 739.608269][ T4281] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 739.617389][ T4281] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 739.670003][ T4281] usb 5-1: Product: syz [ 739.680800][ T4281] usb 5-1: Manufacturer: syz [ 739.718544][ T4281] usb 5-1: SerialNumber: syz [ 739.748816][ T4281] usb 5-1: config 0 descriptor?? [ 739.796843][ T4281] usb 5-1: no audio or video endpoints found [ 739.918379][T23273] netlink: 3620 bytes leftover after parsing attributes in process `syz.1.8593'. [ 739.961433][T23273] netlink: 92 bytes leftover after parsing attributes in process `syz.1.8593'. [ 740.004699][T23273] netlink: 92 bytes leftover after parsing attributes in process `syz.1.8593'. [ 740.072535][ T4281] usb 5-1: USB disconnect, device number 10 [ 740.444785][T23301] program syz.1.8607 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 740.582834][T23309] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8611'. [ 740.630210][T23309] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8611'. [ 740.701756][T23313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8613'. [ 740.796138][T23313] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 740.948386][T23310] loop1: detected capacity change from 0 to 8192 [ 740.991016][T23331] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8622'. [ 741.012957][T23310] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 741.099634][T23310] ntfs3: Cannot use different iocharset when remounting! [ 741.243702][ T4315] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 741.629096][ T4315] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 741.661182][ T4315] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 741.746277][ T4315] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 741.755367][ T4315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 741.779220][ T4315] usb 3-1: SerialNumber: syz [ 741.915099][T23376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8644'. [ 741.949622][T23376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8644'. [ 741.971404][T23376] net_ratelimit: 1024 callbacks suppressed [ 741.971421][T23376] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 742.122873][ T4315] usb 3-1: 0:2 : does not exist [ 742.163992][ T4315] usb 3-1: USB disconnect, device number 10 [ 742.252453][T23348] loop0: detected capacity change from 0 to 40427 [ 742.331768][T23348] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 742.360457][T23348] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 742.412740][T23348] F2FS-fs (loop0): invalid crc value [ 742.442140][ T4582] udevd[4582]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 742.471449][T23348] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 742.501470][T23405] netlink: 209820 bytes leftover after parsing attributes in process `syz.4.8658'. [ 742.697689][ T21] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 742.783828][T23348] F2FS-fs (loop0): recover fsync data on readonly fs [ 742.814048][T23348] F2FS-fs (loop0): Try to recover 1th superblock, ret: -30 [ 742.836504][T23348] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 742.954267][ T21] usb 2-1: Using ep0 maxpacket: 8 [ 743.082682][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 743.108146][ T2424] pvrusb2: request_firmware fatal error with code=-110 [ 743.146547][ T21] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 743.168509][ T2424] pvrusb2: Failure uploading firmware1 [ 743.199972][ T2424] pvrusb2: Device initialization was not successful. [ 743.221432][ T2424] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 743.255886][ T2424] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 743.282880][T16553] pvrusb2: Device being rendered inoperable [ 743.349828][ T21] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 743.369935][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.409265][ T21] usb 2-1: Product: syz [ 743.416686][ T21] usb 2-1: Manufacturer: syz [ 743.421355][ T21] usb 2-1: SerialNumber: syz [ 743.445269][ T21] usb 2-1: config 0 descriptor?? [ 743.483804][ T5666] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 743.666593][T23455] xt_ecn: cannot match TCP bits for non-tcp packets [ 743.788106][ T5666] usb 3-1: Using ep0 maxpacket: 8 [ 743.938186][ T5666] usb 3-1: config 5 has an invalid interface number: 234 but max is 0 [ 743.946451][ T5666] usb 3-1: config 5 has no interface number 0 [ 743.954195][ T21] usb 2-1: USB disconnect, device number 22 [ 743.983060][ T5666] usb 3-1: config 5 interface 234 has no altsetting 0 [ 744.194605][ T5666] usb 3-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=79.2e [ 744.222892][ T5666] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.233378][ T5666] usb 3-1: Product: syz [ 744.247598][ T5666] usb 3-1: Manufacturer: syz [ 744.263532][ T5666] usb 3-1: SerialNumber: syz [ 744.644516][ T5666] ipw 3-1:5.234: IPWireless converter converter detected [ 744.667603][ T5666] usb 3-1: USB disconnect, device number 11 [ 744.682364][ T5666] ipw 3-1:5.234: device disconnected [ 744.707484][T16553] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 745.194067][T16553] usb 1-1: config 0 has an invalid interface number: 13 but max is 0 [ 745.211382][T16553] usb 1-1: config 0 has no interface number 0 [ 745.242036][T16553] usb 1-1: too many endpoints for config 0 interface 13 altsetting 233: 211, using maximum allowed: 30 [ 745.284624][T16553] usb 1-1: config 0 interface 13 altsetting 233 has 0 endpoint descriptors, different from the interface descriptor's value: 211 [ 745.333443][T16553] usb 1-1: config 0 interface 13 has no altsetting 0 [ 745.342803][T23548] loop4: detected capacity change from 0 to 8 [ 745.357264][T23544] autofs4:pid:23544:autofs_fill_super: called with bogus options [ 745.530770][T16553] usb 1-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice= 2.23 [ 745.550779][T16553] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.589491][T16553] usb 1-1: Product: syz [ 745.593735][T16553] usb 1-1: Manufacturer: syz [ 745.609393][T16553] usb 1-1: SerialNumber: syz [ 745.647044][T16553] usb 1-1: config 0 descriptor?? [ 745.669724][ T5666] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 745.714358][T16553] ftdi_sio 1-1:0.13: FTDI USB Serial Device converter detected [ 745.735361][T16553] usb 1-1: Detected FT8U232AM [ 745.756844][T16553] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 745.868830][T23574] netlink: 'syz.1.8742': attribute type 5 has an invalid length. [ 745.971297][ T6192] usb 1-1: USB disconnect, device number 22 [ 746.002442][ T6192] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 746.033560][ T6192] ftdi_sio 1-1:0.13: device disconnected [ 746.111609][ T5666] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 746.134252][ T5666] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 746.289939][ T5666] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 746.309876][ T5666] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 746.309917][ T5666] usb 4-1: SerialNumber: syz [ 746.360378][ T5666] usb 4-1: 0:2 : does not exist [ 746.382929][T23600] loop4: detected capacity change from 0 to 256 [ 746.440147][T23600] exfat: Deprecated parameter 'namecase' [ 746.490926][T23600] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 746.601760][T16553] usb 4-1: USB disconnect, device number 17 [ 746.627542][T23613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8761'. [ 746.692863][T23616] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8764'. [ 746.748261][T23616] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8764'. [ 746.772904][T23622] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8766'. [ 746.809033][T23622] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8766'. [ 746.872625][T23628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8769'. [ 746.901176][T23628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8769'. [ 747.223078][T23649] IPv6: sit1: Disabled Multicast RS [ 748.477558][T23711] netlink: 144 bytes leftover after parsing attributes in process `syz.4.8808'. [ 748.513583][T23713] netlink: 'syz.2.8810': attribute type 1 has an invalid length. [ 748.538426][T23713] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8810'. [ 748.680013][T23711] team0: Port device team_slave_0 removed [ 748.701637][T23711] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 748.821446][T23725] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8816'. [ 749.327474][T23748] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 749.462814][T23758] xt_l2tp: wrong L2TP version: 0 [ 749.558190][T23760] block device autoloading is deprecated and will be removed. [ 749.558795][T23764] device geneve2 entered promiscuous mode [ 750.498031][T23770] loop2: detected capacity change from 0 to 40427 [ 750.618978][T23770] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 750.647115][T23770] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 750.709458][T23770] F2FS-fs (loop2): invalid crc value [ 750.787222][T23770] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 751.074865][T23770] F2FS-fs (loop2): recover fsync data on readonly fs [ 751.106533][T23770] F2FS-fs (loop2): Try to recover 1th superblock, ret: -30 [ 751.159426][T23770] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 751.548396][T23863] netlink: 'syz.1.8884': attribute type 21 has an invalid length. [ 751.578215][T23863] netlink: 'syz.1.8884': attribute type 6 has an invalid length. [ 751.741977][ T21] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 752.127500][ T21] usb 4-1: config 0 has an invalid interface number: 11 but max is 0 [ 752.139483][ T21] usb 4-1: config 0 has no interface number 0 [ 752.149523][ T21] usb 4-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 752.165371][ T21] usb 4-1: config 0 interface 11 altsetting 253 endpoint 0x87 has invalid maxpacket 65535, setting to 64 [ 752.178339][ T21] usb 4-1: config 0 interface 11 has no altsetting 0 [ 752.192862][ T21] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 752.205880][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.218873][ T21] usb 4-1: config 0 descriptor?? [ 752.245541][T23859] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 752.258642][T23859] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 752.289202][ T21] keyspan 4-1:0.11: Keyspan 2 port adapter converter detected [ 752.304733][ T21] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 81 [ 752.312739][ T21] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 82 [ 752.326064][ T21] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 1 [ 752.333947][ T21] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 2 [ 752.347743][ T21] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 85 [ 752.368484][ T21] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 5 [ 752.377799][ T21] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 752.424429][T23877] __nla_validate_parse: 7 callbacks suppressed [ 752.424448][T23877] netlink: 209820 bytes leftover after parsing attributes in process `syz.4.8891'. [ 752.469595][ T21] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 83 [ 752.477522][ T21] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 84 [ 752.549730][ T21] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 3 [ 752.570805][ T21] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 4 [ 752.601756][ T21] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 86 [ 752.634542][ T21] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 6 [ 752.683421][ T21] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 752.720584][ T21] usb 4-1: USB disconnect, device number 18 [ 752.775875][ T21] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 752.819274][ T21] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 752.838772][ T21] keyspan 4-1:0.11: device disconnected [ 752.933698][T23901] netlink: 144 bytes leftover after parsing attributes in process `syz.0.8901'. [ 753.001635][T23904] loop2: detected capacity change from 0 to 2048 [ 753.095577][T23904] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 753.116844][T23901] team0: Port device team_slave_0 removed [ 753.126726][T23901] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 753.181957][T23909] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 753.426070][T23918] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8910'. [ 753.435339][T23918] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8910'. [ 753.598163][T23931] netlink: 'syz.4.8916': attribute type 1 has an invalid length. [ 753.670434][T23931] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.8916'. [ 753.989768][T23959] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8929'. [ 754.181935][T23970] program syz.2.8936 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 754.474505][T23987] loop4: detected capacity change from 0 to 2048 [ 754.529208][T23987] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 754.593229][T23995] netlink: 'syz.0.8947': attribute type 1 has an invalid length. [ 754.625067][T23995] netlink: 212908 bytes leftover after parsing attributes in process `syz.0.8947'. [ 754.804481][T24006] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 754.882566][T24009] xt_CT: You must specify a L4 protocol and not use inversions on it [ 754.955634][ T5666] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 754.989804][T23997] loop1: detected capacity change from 0 to 8192 [ 755.094688][T23997] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 755.162898][T23997] REISERFS (device loop1): using ordered data mode [ 755.169458][T23997] reiserfs: using flush barriers [ 755.266405][T23997] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 755.375806][T23997] REISERFS (device loop1): checking transaction log (loop1) [ 755.399037][ T5666] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 755.418230][T24037] xt_hashlimit: size too large, truncated to 1048576 [ 755.429050][ T5666] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 755.452316][T23997] REISERFS (device loop1): Using r5 hash to sort names [ 755.459654][T23997] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 755.633415][ T5666] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 755.652868][ T5666] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.687552][ T5666] usb 4-1: Product: syz [ 755.707952][ T5666] usb 4-1: Manufacturer: syz [ 755.712611][ T5666] usb 4-1: SerialNumber: syz [ 755.739042][T24051] netlink: 766 bytes leftover after parsing attributes in process `syz.0.8975'. [ 755.839669][T24056] loop4: detected capacity change from 0 to 512 [ 755.855065][T24057] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8978'. [ 755.880910][T24057] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 755.899240][T24059] loop0: detected capacity change from 0 to 1024 [ 755.984044][T24056] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000003,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 756.285619][ T5666] usb 4-1: cannot find UAC_HEADER [ 756.365035][ T5666] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 756.407435][ T5666] usb 4-1: USB disconnect, device number 19 [ 756.529702][T24090] SET target dimension over the limit! [ 756.583721][T24092] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8994'. [ 756.655732][ T4886] udevd[4886]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 756.925918][T24108] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 757.441900][T24122] netlink: 'syz.3.9009': attribute type 11 has an invalid length. [ 757.678739][T24106] loop0: detected capacity change from 0 to 40427 [ 757.775688][T24106] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 757.800812][T24106] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 757.852833][T24106] F2FS-fs (loop0): invalid crc value [ 757.948757][T24106] F2FS-fs (loop0): Found nat_bits in checkpoint [ 758.205545][T24106] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 758.229114][T24106] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 758.323876][T24106] attempt to access beyond end of device [ 758.323876][T24106] loop0: rw=2049, want=45104, limit=40427 [ 758.451203][ T4232] attempt to access beyond end of device [ 758.451203][ T4232] loop0: rw=2049, want=45112, limit=40427 [ 758.458622][T24153] infiniband syz0: set active [ 758.468237][ T4278] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 758.493762][T24153] infiniband syz0: added bond0 [ 758.621824][T24153] RDS/IB: syz0: added [ 758.638390][T24153] smc: adding ib device syz0 with port count 1 [ 758.644887][T24153] smc: ib device syz0 port 1 has pnetid [ 758.765571][ T4278] usb 3-1: Using ep0 maxpacket: 32 [ 758.820488][T24156] loop1: detected capacity change from 0 to 32768 [ 758.889404][T24179] __nla_validate_parse: 3 callbacks suppressed [ 758.889421][T24179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9035'. [ 758.947451][ T4278] usb 3-1: config 5 has an invalid interface number: 130 but max is 0 [ 758.964461][ T4278] usb 3-1: config 5 has no interface number 0 [ 758.991052][ T4278] usb 3-1: config 5 interface 130 has no altsetting 0 [ 759.011108][ T4456] udevd[4456]: incorrect btrfs checksum on /dev/loop1 [ 759.230607][ T4278] usb 3-1: New USB device found, idVendor=0711, idProduct=0200, bcdDevice=8b.61 [ 759.268093][ T4278] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.276192][ T4278] usb 3-1: Product: syz [ 759.276750][T24187] netlink: 'syz.1.9039': attribute type 32 has an invalid length. [ 759.310673][ T4278] usb 3-1: Manufacturer: syz [ 759.315361][ T4278] usb 3-1: SerialNumber: syz [ 759.760271][ T4278] mct_u232 3-1:5.130: MCT U232 converter detected [ 759.771155][ T4278] mct_u232 ttyUSB0: expected endpoint missing [ 759.796419][ T4278] usb 3-1: USB disconnect, device number 12 [ 759.832080][ T4278] mct_u232 3-1:5.130: device disconnected [ 759.904597][T24217] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9053'. [ 760.051388][T24223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9057'. [ 760.080244][T24223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9057'. [ 760.664628][T24259] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9072'. [ 760.900481][T24274] usb usb8: check_ctrlrecip: process 24274 (syz.2.9080) requesting ep 01 but needs 81 [ 761.016527][T24274] usb usb8: usbfs: process 24274 (syz.2.9080) did not claim interface 0 before use [ 761.047517][T24281] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 761.054594][T24281] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 761.115819][T24281] vhci_hcd vhci_hcd.0: Device attached [ 761.158448][T24290] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9086'. [ 761.320857][ T21] vhci_hcd: vhci_device speed not set [ 761.416841][ T21] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 761.700824][T24326] loop4: detected capacity change from 0 to 2048 [ 761.712463][T24283] vhci_hcd: connection reset by peer [ 761.725333][ T9] vhci_hcd: stop threads [ 761.733328][ T9] vhci_hcd: release socket [ 761.779198][ T9] vhci_hcd: disconnect device [ 761.787091][T24326] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 761.802479][T24334] netlink: 'syz.0.9106': attribute type 8 has an invalid length. [ 761.844231][T24336] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 761.893142][T24336] exFAT-fs (nullb0): invalid boot record signature [ 761.934033][T24336] exFAT-fs (nullb0): failed to read boot sector [ 761.979923][T24336] exFAT-fs (nullb0): failed to recognize exfat type [ 762.241363][T24356] netlink: 'syz.4.9116': attribute type 2 has an invalid length. [ 762.272091][T24356] netlink: 'syz.4.9116': attribute type 8 has an invalid length. [ 762.297869][T24356] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9116'. [ 762.507394][T16553] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 762.684061][T24388] netlink: 'syz.0.9128': attribute type 1 has an invalid length. [ 762.745005][T24388] netlink: 228 bytes leftover after parsing attributes in process `syz.0.9128'. [ 762.885722][ T4281] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 762.958248][T16553] usb 3-1: config 0 has an invalid interface number: 168 but max is 0 [ 762.967455][T16553] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 762.979539][T16553] usb 3-1: config 0 has no interface number 0 [ 762.989947][T16553] usb 3-1: config 0 interface 168 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 763.010312][T16553] usb 3-1: config 0 interface 168 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 763.042143][T16553] usb 3-1: config 0 interface 168 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 763.087156][T16553] usb 3-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=48.98 [ 763.103429][T16553] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.131846][T16553] usb 3-1: config 0 descriptor?? [ 763.194020][T16553] HFC-S_USB: probe of 3-1:0.168 failed with error -5 [ 763.309323][ T4281] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 763.318425][ T4281] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.364813][ T4281] usb 5-1: config 0 descriptor?? [ 763.413331][ T4281] cp210x 5-1:0.0: cp210x converter detected [ 763.443024][T16553] usb 3-1: USB disconnect, device number 13 [ 763.485780][T24431] xt_hashlimit: size too large, truncated to 1048576 [ 763.498972][T24431] xt_hashlimit: invalid interval [ 763.746336][T24444] netlink: 'syz.0.9155': attribute type 8 has an invalid length. [ 763.849998][T24450] loop1: detected capacity change from 0 to 1024 [ 763.875622][ T4281] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 763.909536][ T4281] cp210x 5-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 763.931300][ T4281] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 763.971272][ T4281] usb 5-1: cp210x converter now attached to ttyUSB0 [ 764.010703][ T4281] usb 5-1: USB disconnect, device number 11 [ 764.055820][ T4281] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 764.088206][ T4281] cp210x 5-1:0.0: device disconnected [ 764.256102][T24468] netlink: 'syz.2.9167': attribute type 1 has an invalid length. [ 764.791525][T24505] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9186'. [ 764.837902][ T6192] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 764.889983][T24511] program syz.1.9188 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 765.002166][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 765.047296][T24517] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 765.192714][T24527] xt_TPROXY: Can be used only with -p tcp or -p udp [ 765.233503][ T6192] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 765.259467][ T6192] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.288905][ T6192] usb 4-1: config 0 descriptor?? [ 765.607678][ T6192] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 765.627186][ T6192] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 765.672551][ T6192] [drm:udl_init] *ERROR* Selecting channel failed [ 765.733539][ T6192] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 765.763010][ T6192] [drm] Initialized udl on minor 2 [ 765.791965][ T6192] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 765.817409][T24568] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check. [ 765.837743][ T6192] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 765.879398][ T6192] usb 4-1: USB disconnect, device number 20 [ 765.905433][ T1108] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 765.944072][ T1108] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 765.960988][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 766.001659][ T1108] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 766.226554][T24592] rdma_rxe: rxe_register_device failed with error -23 [ 766.254791][T24592] rdma_rxe: failed to add bond0 [ 766.323858][ T1108] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 766.429567][T24606] netlink: 220 bytes leftover after parsing attributes in process `syz.0.9235'. [ 766.697363][T24626] rdma_rxe: rxe_register_device failed with error -23 [ 766.719498][ T1108] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 766.741091][T24626] rdma_rxe: failed to add bond0 [ 766.746107][ T1108] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 766.765978][ T1108] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 766.830427][T24620] loop4: detected capacity change from 0 to 8192 [ 766.889711][ T21] vhci_hcd: vhci_device speed not set [ 766.908358][ T4582] loop4: p1 p2 < > p3 [ 766.921727][ T4582] loop4: partition table partially beyond EOD, truncated [ 766.972751][ T4582] loop4: p1 size 1342439424 extends beyond EOD, truncated [ 766.986807][ T1108] usb 3-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 766.996340][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.009224][ T4582] loop4: p2 start 4059840512 is beyond EOD, truncated [ 767.048492][ T4582] loop4: p3 start 67108864 is beyond EOD, truncated [ 767.056558][ T1108] usb 3-1: Product: syz [ 767.072071][ T1108] usb 3-1: Manufacturer: syz [ 767.087614][ T1108] usb 3-1: SerialNumber: syz [ 767.098206][T24639] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9251'. [ 767.115770][T24620] loop4: p1 p2 < > p3 [ 767.119970][T24620] loop4: partition table partially beyond EOD, truncated [ 767.128940][ T1108] usb 3-1: config 0 descriptor?? [ 767.150481][T24620] loop4: p1 size 1342439424 extends beyond EOD, truncated [ 767.183246][T24620] loop4: p2 start 4059840512 is beyond EOD, truncated [ 767.211180][ T4281] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 767.232343][T24620] loop4: p3 start 67108864 is beyond EOD, truncated [ 767.414780][ T6192] usb 3-1: USB disconnect, device number 14 [ 767.488228][T24652] Zero length message leads to an empty skb [ 767.501558][T24655] rdma_rxe: rxe_register_device failed with error -23 [ 767.535466][T24655] rdma_rxe: failed to add bond0 [ 767.672426][ T4281] usb 5-1: config 1 has an invalid descriptor of length 190, skipping remainder of the config [ 767.718240][ T4281] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 116, changing to 10 [ 767.750693][ T4281] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 51186, setting to 1024 [ 767.970301][ T4281] usb 5-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 767.986798][ T4281] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.016954][ T4281] usb 5-1: Product: syz [ 768.021184][ T4281] usb 5-1: Manufacturer: syz [ 768.073375][ T4281] usb 5-1: SerialNumber: syz [ 768.130823][T24633] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 768.294845][T24693] netlink: 100 bytes leftover after parsing attributes in process `syz.2.9273'. [ 768.355133][T24693] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9273'. [ 768.537033][ T4278] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 768.547432][ T4281] snd-usb-audio: probe of 5-1:1.0 failed with error -71 [ 768.576835][ T4281] usb 5-1: USB disconnect, device number 12 [ 768.711262][T24711] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9279'. [ 768.839599][ T4278] usb 1-1: Using ep0 maxpacket: 16 [ 768.996780][ T4278] usb 1-1: config 0 has no interfaces? [ 769.184927][ T4278] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 769.222117][ T4278] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.269974][ T4278] usb 1-1: Product: syz [ 769.287817][ T4278] usb 1-1: Manufacturer: syz [ 769.302140][ T4278] usb 1-1: SerialNumber: syz [ 769.345050][ T4278] r8152-cfgselector 1-1: config 0 descriptor?? [ 769.425711][ T4886] udevd[4886]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 769.497219][T24761] loop1: detected capacity change from 0 to 512 [ 769.591036][T24761] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 769.619007][ T4886] udevd[4886]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 769.663723][T24761] EXT4-fs error (device loop1): __ext4_iget:4919: inode #11: block 1: comm syz.1.9299: invalid block [ 769.691032][T24761] EXT4-fs (loop1): Remounting filesystem read-only [ 769.691733][ T4278] r8152-cfgselector 1-1: Unknown version 0x0000 [ 769.698108][T24761] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.9299: couldn't read orphan inode 11 (err -117) [ 769.765359][T24761] EXT4-fs (loop1): Remounting filesystem read-only [ 769.830081][T24761] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,max_dir_size_kb=0x00000000010001ff,noblock_validity,max_dir_size_kb=0x0000000000000009,nodioread_nolock,jqfmt=vfsold,. Quota mode: none. [ 769.925483][ T1108] r8152-cfgselector 1-1: USB disconnect, device number 23 [ 770.127220][T24791] netlink: 'syz.3.9311': attribute type 21 has an invalid length. [ 770.149311][T24791] IPv6: NLM_F_CREATE should be specified when creating new route [ 770.215597][T24791] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9311'. [ 770.452131][T24800] loop1: detected capacity change from 0 to 4096 [ 770.487272][T24811] comedi comedi2: board detection failed [ 771.211553][T24857] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 771.601073][T24886] netlink: 5 bytes leftover after parsing attributes in process `syz.4.9346'. [ 771.630384][T24886] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 771.672112][T24886] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 771.681665][T24889] misc userio: The device must be registered before sending interrupts [ 771.709065][T24886] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 771.818254][T24899] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9353'. [ 771.935685][T24908] netlink: 'syz.4.9358': attribute type 3 has an invalid length. [ 772.172922][T24928] netlink: 'syz.0.9367': attribute type 5 has an invalid length. [ 772.213161][T24930] netlink: 'syz.3.9369': attribute type 11 has an invalid length. [ 772.225314][T24930] netlink: 'syz.3.9369': attribute type 5 has an invalid length. [ 772.346103][T24937] damon: invalid nr_regions. min (30786325577728) > max (1023) [ 772.421625][T24945] trusted_key: encrypted_key: insufficient parameters specified [ 772.674155][ T5666] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 772.903044][ T1108] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 772.973535][ T5666] usb 1-1: Using ep0 maxpacket: 32 [ 773.123415][ T5666] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 773.176567][ T1108] usb 4-1: Using ep0 maxpacket: 16 [ 773.219434][ T4281] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 773.304989][ T1108] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 773.348633][ T1108] usb 4-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 773.357524][ T5666] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 773.357754][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.376448][ T5666] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.398606][ T5666] usb 1-1: Product: syz [ 773.417510][ T5666] usb 1-1: Manufacturer: syz [ 773.428012][ T5666] usb 1-1: SerialNumber: syz [ 773.446532][ T5666] usb 1-1: config 0 descriptor?? [ 773.509702][ T5666] quatech2 1-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 773.518547][ T4281] usb 5-1: Using ep0 maxpacket: 32 [ 773.655904][ T4582] udevd[4582]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 773.679205][ T4281] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 773.697850][ T1108] usb 4-1: USB disconnect, device number 21 [ 773.732727][ T5666] usb 1-1: qt2_setup_urbs - submit read urb failed -8 [ 773.743254][ T5666] quatech2: probe of 1-1:0.0 failed with error -8 [ 773.914335][ T4281] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 773.931189][ T4281] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.946206][ T4281] usb 5-1: Product: syz [ 773.957040][ T4281] usb 5-1: Manufacturer: syz [ 773.961677][ T4281] usb 5-1: SerialNumber: syz [ 773.979641][ T5666] usb 1-1: USB disconnect, device number 24 [ 773.987718][ T4281] usb 5-1: config 0 descriptor?? [ 774.044126][ T4281] cdc_ether 5-1:0.0: skipping garbage [ 774.053187][ T4281] cdc_ether 5-1:0.0: skipping garbage [ 774.058602][ T4281] usb 5-1: bad CDC descriptors [ 774.074905][ T4281] usb 5-1: unsupported MDLM descriptors [ 774.127034][T25002] loop2: detected capacity change from 0 to 32768 [ 774.201734][ T4261] general protection fault, probably for non-canonical address 0xdffffc00000000bb: 0000 [#1] PREEMPT SMP KASAN [ 774.213511][ T4261] KASAN: null-ptr-deref in range [0x00000000000005d8-0x00000000000005df] [ 774.221949][ T4261] CPU: 0 PID: 4261 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 774.229661][ T4261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 774.239747][ T4261] Workqueue: writeback wb_workfn (flush-7:2) [ 774.245847][ T4261] RIP: 0010:bio_associate_blkg_from_css+0x128/0x9d0 [ 774.252544][ T4261] Code: ff df 41 80 3c 04 00 74 08 4c 89 ff e8 a1 7b e7 fd bb d8 05 00 00 49 03 1f 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 df e8 7a 7b e7 fd 41 be 90 00 00 00 4c 03 [ 774.272174][ T4261] RSP: 0018:ffffc9000416f258 EFLAGS: 00010206 [ 774.278286][ T4261] RAX: 00000000000000bb RBX: 00000000000005d8 RCX: dffffc0000000000 [ 774.286291][ T4261] RDX: 0000000000000000 RSI: ffffffff9649ce20 RDI: ffff88805b67fa00 [ 774.294286][ T4261] RBP: ffffffff9649cf30 R08: dffffc0000000000 R09: 1ffffffff203dc18 [ 774.302319][ T4261] R10: dffffc0000000000 R11: fffffbfff203dc19 R12: 1ffff1100b6cff41 [ 774.310332][ T4261] R13: 1ffff1100b6cff41 R14: dffffc0000000000 R15: ffff88805b67fa08 [ 774.318334][ T4261] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 774.327290][ T4261] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 774.333895][ T4261] CR2: 000055557a032a38 CR3: 000000001fb94000 CR4: 00000000003506f0 [ 774.341893][ T4261] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 774.349878][ T4261] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 774.357870][ T4261] Call Trace: [ 774.361164][ T4261] [ 774.364111][ T4261] bio_associate_blkg+0x23a/0x340 [ 774.369164][ T4261] lbmStartIO+0x20b/0x4d0 [ 774.373519][ T4261] lbmWrite+0x361/0x480 [ 774.377701][ T4261] jfs_flush_journal+0x537/0xe80 [ 774.382670][ T4261] ? lmLogShutdown+0x850/0x850 [ 774.387528][ T4261] ? __lock_acquire+0x7b50/0x7b50 [ 774.392577][ T4261] ? do_raw_spin_lock+0x128/0x2f0 [ 774.397626][ T4261] ? __rwlock_init+0x140/0x140 [ 774.402417][ T4261] jfs_write_inode+0x12b/0x220 [ 774.407210][ T4261] __writeback_single_inode+0x6c4/0xda0 [ 774.412786][ T4261] writeback_sb_inodes+0xaaa/0x1750 [ 774.418024][ T4261] ? queue_io+0x530/0x530 [ 774.422379][ T4261] ? move_expired_inodes+0x722/0x770 [ 774.427691][ T4261] ? rcu_is_watching+0x11/0xa0 [ 774.432543][ T4261] ? queue_io+0x3ba/0x530 [ 774.436898][ T4261] wb_writeback+0x44a/0xbc0 [ 774.441433][ T4261] ? rcu_lock_release+0x20/0x20 [ 774.446308][ T4261] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 774.452310][ T4261] ? __lock_acquire+0x7b50/0x7b50 [ 774.457357][ T4261] ? _raw_spin_unlock_irq+0x1f/0x40 [ 774.462582][ T4261] wb_workfn+0x43a/0xf20 [ 774.466850][ T4261] ? inode_wait_for_writeback+0x220/0x220 [ 774.472604][ T4261] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 774.478617][ T4261] ? __lock_acquire+0x7b50/0x7b50 [ 774.483680][ T4261] ? read_lock_is_recursive+0x10/0x10 [ 774.489087][ T4261] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 774.495003][ T4261] ? _raw_spin_unlock+0x40/0x40 [ 774.499877][ T4261] ? _raw_spin_unlock_irq+0x1f/0x40 [ 774.505095][ T4261] process_one_work+0x867/0xff0 [ 774.510096][ T4261] ? worker_detach_from_pool+0x240/0x240 [ 774.515767][ T4261] ? lockdep_hardirqs_off+0x70/0x100 [ 774.521093][ T4261] ? _raw_spin_lock_irq+0xb7/0xf0 [ 774.526152][ T4261] ? _raw_spin_lock_irqsave+0x100/0x100 [ 774.531724][ T4261] ? wq_worker_running+0x97/0x170 [ 774.536781][ T4261] worker_thread+0xad7/0x12a0 [ 774.541485][ T4261] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 774.547408][ T4261] kthread+0x42e/0x520 [ 774.551528][ T4261] ? rcu_lock_release+0x20/0x20 [ 774.556407][ T4261] ? kthread_blkcg+0xd0/0xd0 [ 774.561040][ T4261] ret_from_fork+0x1f/0x30 [ 774.565531][ T4261] [ 774.568579][ T4261] Modules linked in: [ 774.589012][ T4281] usb 5-1: USB disconnect, device number 13 [ 774.624667][ T4261] ---[ end trace 4c8db1bc010e662b ]--- [ 774.630188][ T4261] RIP: 0010:bio_associate_blkg_from_css+0x128/0x9d0 [ 774.637175][ T4261] Code: ff df 41 80 3c 04 00 74 08 4c 89 ff e8 a1 7b e7 fd bb d8 05 00 00 49 03 1f 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 df e8 7a 7b e7 fd 41 be 90 00 00 00 4c 03 [ 774.659210][ T4261] RSP: 0018:ffffc9000416f258 EFLAGS: 00010206 [ 774.666909][ T4261] RAX: 00000000000000bb RBX: 00000000000005d8 RCX: dffffc0000000000 [ 774.677247][ T4261] RDX: 0000000000000000 RSI: ffffffff9649ce20 RDI: ffff88805b67fa00 [ 774.686587][ T4261] RBP: ffffffff9649cf30 R08: dffffc0000000000 R09: 1ffffffff203dc18 [ 774.695255][ T4261] R10: dffffc0000000000 R11: fffffbfff203dc19 R12: 1ffff1100b6cff41 [ 774.703313][ T4261] R13: 1ffff1100b6cff41 R14: dffffc0000000000 R15: ffff88805b67fa08 [ 774.711341][ T4261] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 774.720542][ T4261] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 774.727178][ T4261] CR2: 0000001b2d422ff8 CR3: 0000000062e16000 CR4: 00000000003506f0 [ 774.735227][ T4261] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 774.743313][ T4261] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 774.751383][ T4261] Kernel panic - not syncing: Fatal exception [ 774.757666][ T4261] Kernel Offset: disabled [ 774.762003][ T4261] Rebooting in 86400 seconds..