last executing test programs: 3.17113904s ago: executing program 2 (id=3755): r0 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000280)}, {&(0x7f0000000340)="be177dbe6dc1fe2b2a0e8c6743f448687e14f1d7ebeff7cffd42ea22c8a2ac263d3788aa034dc019349e1be5cf505a9b501fbab07396bab3afec71f9767193f0b5309295e6d61804000000c55c5a2958d8800a3c2b81faff89887512fde0509148e68ab9788a6a6f8513e442607a7154e11fa396094eb9cc404b6b408c2c38b1ad77e8f41cbe776bf9a3e6961f39350c4a0c157f4dd8ed04ed53312ab6db19962fdc0d0f8cf23aff69951ac76e2deb4f3e8cd737a4f232eb5554096503", 0xbd}, {&(0x7f0000000400)="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", 0xeef}], 0x3}}, {{&(0x7f0000001400)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000001800)=[{&(0x7f0000001440)="85ac6755b3764d9d8071a63907858eec8443bec7adaaea2c917ac41790a95d62511755a808b50539fb719daae0341b7d172229c58deb7f2d95c793aee3365bd04cc81c838294ad5237c74cd19b3ea8431a190ea1caf0524e623f56791d2d55bf1a24c7c7b42198afd133af01bbbd167d04159bceb80648e2e740f1d58b762d50ed842933815a8f167dc01363284d8f27e69a83509fd9f1dd0cdeca61ffdb9524f408d698154fbb2ff5381369933e1815ed1703e58405478629df43", 0xbb}, {&(0x7f0000001540)="2aba9e4cc9b55274aa3a5dbd35f30d62249f7226e2ffa535df463037a323c732a94981bd91b9d134d79106da4929ddf57f26696b8911da0e8126ca4c7a6f10192c1ef6dc0191c8a10b6526df22206120b8767c1a1ec3be23fe90f3e3c0092aca4116e03096593f7964ac3c077036e624ff82f8348afba525", 0x78}, {0x0, 0x1200}, {&(0x7f0000002980)="c61fc952e32af9d06ed135ef945ba121afc7dcbb95e00a15a1aebe2c9d63854ab7d8f30b55ce072b49867372e0c57347c9f93f5d57bbf8ab12ae426441b805834fd2c17e1de7d5e36d8fc36254b673a7ca8be8800bfd25196e325a8beb921abd1654c40b52cd19a01844", 0x6a}, {&(0x7f0000001700)="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", 0xfd}], 0x5}}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000002a00)="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", 0x124}, {&(0x7f0000001600)="523e5c257d7b2c6942e6c08d24f20636032091fa40e659895af96b5a89dc630d162db8611a76f943239fd2282d602b1fca5a765637a86ef0b43b079375f37032f0c575ab2a6369cacc8d14c82b828262ba1c94d0381bd7ee459a1f60045c5f5ca37781bab5699ffa79b12e2be821530a36813788fcd89d2158299248ca7a843c3dee117c45cbd3e5f5552dc70ac2cbbd84e7671466e7de8c53c0b13316f3f7480fe0e1bee9", 0xa5}], 0x2}}], 0x3, 0x40) 3.033703243s ago: executing program 2 (id=3761): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0xa2ec8b013dc0bd73, &(0x7f0000002580)=[{&(0x7f0000000180)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x5}]}, 0x14}], 0x1}, 0x0) 2.887912657s ago: executing program 2 (id=3766): r0 = syz_open_dev$video4linux(&(0x7f0000000540), 0x10000fc3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f00000000c0)={0x0, 0x0, 0x1014, 0x2220, 0xfffffffd, 0x4000c251, 0x7f, 0x1}) 2.78387797s ago: executing program 2 (id=3768): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001581c2908570b28d4b9486602030109021b00010001000b0904c8020103010203090504"], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) 1.092438632s ago: executing program 4 (id=3809): r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) 1.005876065s ago: executing program 4 (id=3812): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1fffffff, 0x40800) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000240)={0x0}) 977.345135ms ago: executing program 0 (id=3813): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x130}}, 0x0) 944.347756ms ago: executing program 3 (id=3814): syz_mount_image$vfat(&(0x7f0000000a40), &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4408, &(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYBLOB="59ea3bbb4a63075eadb168303225796a3ccf252e77bcce35df5afcf376ff75bd00252a5202a5e65cc3db4824d7131646cc019e89b482425e3c5087450bd1517908a621b812693abae2500f5dbace8bdc25a44bf936c8e80eb84bdbe829d476dc6e8b50f4c240e31ec1343bde4ef4e766d8bec08a96e7de7dc4f07810a87515611ff0cdf1f5b58f0390f6e61c69a911420e91d043e2c4dbf88bcf4b663be91eca1e917f87d1c9d3564a", @ANYRESOCT=0x0], 0x3, 0x303, &(0x7f0000000500)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) 868.928688ms ago: executing program 4 (id=3816): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x10, 0x1405, 0x621, 0x70bd26}, 0x10}}, 0x40000) 739.794901ms ago: executing program 0 (id=3818): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getlink={0x28, 0x12, 0x1, 0x70bd25, 0x0, {0x7}, [@IFLA_EXT_MASK={0x8, 0x2e}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 739.605932ms ago: executing program 4 (id=3819): r0 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001900)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x10}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) 709.650382ms ago: executing program 3 (id=3820): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) write$char_usb(r0, 0x0, 0x0) 665.134073ms ago: executing program 0 (id=3821): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x64, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x4ad}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000000}, 0x24008850) 606.255275ms ago: executing program 2 (id=3822): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmmsg(r0, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0}, 0xd21}], 0x1, 0x40000023, 0x0) 591.953505ms ago: executing program 1 (id=3823): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ftruncate(r0, 0x4) 524.179597ms ago: executing program 4 (id=3824): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) fchmod(r0, 0x4) 524.052537ms ago: executing program 3 (id=3825): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1f, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000039000000850000000400000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) 523.703957ms ago: executing program 0 (id=3826): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001700)={0x14, 0x0, 0xb, 0x5, 0x0, 0x0, {0x7, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x24040800) 453.251988ms ago: executing program 2 (id=3827): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000380)={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0}) 428.014099ms ago: executing program 1 (id=3828): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x0, 0x3}}]}}}]}, 0x40}}, 0x0) 418.459519ms ago: executing program 4 (id=3829): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 393.69865ms ago: executing program 3 (id=3830): r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000480)={0x0, r0, r0}, 0x0, 0x0, 0x0) 348.411642ms ago: executing program 0 (id=3831): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb, 0x1, "1fbabdae000000"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd0}}, 0x0) 318.452172ms ago: executing program 1 (id=3832): timer_create(0x8, &(0x7f00000026c0)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000002700)=0x0) timer_settime(r0, 0x0, &(0x7f0000000400)={{0x77359400}}, &(0x7f00000000c0)) 307.308443ms ago: executing program 3 (id=3833): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/reserved_size', 0x28042, 0xb) write$P9_RXATTRCREATE(r0, &(0x7f0000000000)={0x7, 0x21, 0x1}, 0x7) 259.062853ms ago: executing program 0 (id=3834): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 251.679544ms ago: executing program 1 (id=3835): r0 = socket(0x25, 0x5, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) 171.163586ms ago: executing program 3 (id=3836): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000c00, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,discard=0x000000000000aff9,iocharset=none,iocharset=cp437,iocharset=iso8859-7,nodiscard,errors=continue,iocharset=iso8859-13,uid=', @ANYRESHEX=0xee01, @ANYBLOB='\x00\x00'], 0x21, 0x61e2, &(0x7f00000063c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 145.740796ms ago: executing program 1 (id=3837): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) 0s ago: executing program 1 (id=3838): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890c, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @loopback}, @l2={0x1f, 0x4cb0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x5, 0x1}, @nl=@unspec, 0x0, 0x0, 0x0, 0x0, 0x3}) kernel console output (not intermixed with test programs): 7806][ T7572] netlink: zone id is out of range [ 130.545923][ T7603] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 130.704975][ T7608] loop3: detected capacity change from 0 to 512 [ 130.716375][ T7612] device vti0 entered promiscuous mode [ 130.749795][ T7608] EXT4-fs (loop3): bad geometry: first data block is 0 with a 1k block and cluster size [ 131.043283][ T7566] loop1: detected capacity change from 0 to 32768 [ 131.139007][ T7634] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1566'. [ 131.158933][ T7566] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1532 (7566) [ 131.171618][ T7636] loop3: detected capacity change from 0 to 256 [ 131.190514][ T7627] loop2: detected capacity change from 0 to 4096 [ 131.209029][ T7638] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check. [ 131.234097][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.288807][ T7566] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 131.305018][ T7627] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 131.325640][ T7627] ntfs3: loop2: Failed to load $MFT. [ 131.333847][ T7566] BTRFS info (device loop1): using free space tree [ 131.340414][ T7566] BTRFS info (device loop1): has skinny extents [ 131.823956][ T7566] BTRFS info (device loop1): enabling ssd optimizations [ 132.005935][ T7684] netlink: 'syz.0.1582': attribute type 9 has an invalid length. [ 132.038242][ T7685] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1581'. [ 132.507086][ T7627] loop2: detected capacity change from 0 to 32768 [ 132.559571][ T7627] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.1562 (7627) [ 132.754251][ T4901] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by udevd (4901) [ 132.812758][ T7703] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1589'. [ 132.853778][ T7703] openvswitch: netlink: Missing key (keys=40, expected=80) [ 132.860075][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.867347][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.082077][ T7721] tipc: Can't bind to reserved service type 1 [ 134.086300][ T7773] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1618'. [ 134.123700][ T7773] netlink: 'syz.1.1618': attribute type 1 has an invalid length. [ 134.146662][ T7698] loop2: detected capacity change from 0 to 32768 [ 134.249531][ T7698] XFS (loop2): Mounting V5 Filesystem [ 134.286844][ T7788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1624'. [ 134.296489][ T7788] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1624'. [ 134.365485][ T7698] XFS (loop2): Ending clean mount [ 134.410408][ T7698] XFS (loop2): Quotacheck needed: Please wait. [ 134.423674][ T1346] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 134.564194][ T7698] XFS (loop2): Quotacheck: Done. [ 134.570497][ T7698] XFS (loop2): Unmounting Filesystem [ 134.663641][ T1346] usb 4-1: Using ep0 maxpacket: 16 [ 134.783790][ T1346] usb 4-1: New USB device found, idVendor=0471, idProduct=0307, bcdDevice=61.a4 [ 134.795432][ T1346] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.820363][ T1346] usb 4-1: config 0 descriptor?? [ 134.871086][ T1346] pwc: Philips PCVC675K (Vesta) USB webcam detected. [ 135.073690][ T1346] pwc: send_video_command error -71 [ 135.079772][ T1346] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 135.113639][ T1346] Philips webcam: probe of 4-1:0.0 failed with error -71 [ 135.143827][ T1346] usb 4-1: USB disconnect, device number 7 [ 135.256365][ T7837] netlink: 'syz.1.1647': attribute type 10 has an invalid length. [ 135.279300][ T7837] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1647'. [ 135.290761][ T7837] device team0 entered promiscuous mode [ 135.296680][ T7837] device team_slave_0 entered promiscuous mode [ 135.312778][ T7837] device team_slave_1 entered promiscuous mode [ 135.321504][ T7837] bridge0: port 3(team0) entered blocking state [ 135.328910][ T7837] bridge0: port 3(team0) entered disabled state [ 135.338817][ T7837] bridge0: port 3(team0) entered blocking state [ 135.345328][ T7837] bridge0: port 3(team0) entered forwarding state [ 135.473338][ T7843] netlink: 'syz.1.1650': attribute type 9 has an invalid length. [ 135.481360][ T4234] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 135.730984][ T4234] usb 5-1: Using ep0 maxpacket: 8 [ 135.853851][ T4234] usb 5-1: config 243 has an invalid interface number: 78 but max is 0 [ 135.866736][ T4234] usb 5-1: config 243 has no interface number 0 [ 135.866774][ T4234] usb 5-1: config 243 interface 78 has no altsetting 0 [ 136.023959][ T4234] usb 5-1: New USB device found, idVendor=2639, idProduct=0011, bcdDevice=69.b0 [ 136.033135][ T4234] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.067515][ T4234] usb 5-1: Product: syz [ 136.073230][ T4234] usb 5-1: Manufacturer: syz [ 136.082896][ T4234] usb 5-1: SerialNumber: syz [ 136.109992][ T7713] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 136.283912][ T23] Bluetooth: hci0: command 0x0c1a tx timeout [ 136.373651][ T1346] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 136.427021][ T4234] usb 5-1: USB disconnect, device number 10 [ 136.508406][ T7907] loop3: detected capacity change from 0 to 8 [ 136.563830][ T7907] cramfs: empty filesystem [ 136.613888][ T1346] usb 2-1: Using ep0 maxpacket: 32 [ 136.643355][ T7914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1685'. [ 136.734353][ T1346] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 136.742764][ T1346] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 136.798148][ T1346] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 136.823718][ T1346] usb 2-1: config 1 has no interface number 0 [ 136.829905][ T1346] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 136.850632][ T1346] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 136.889735][ T1346] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 136.925194][ T1346] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.928556][ T7927] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1691'. [ 136.953695][ T7928] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1692'. [ 136.987195][ T1346] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 137.163445][ T7940] loop0: detected capacity change from 0 to 256 [ 137.214218][ T1346] snd_usb_pod 2-1:1.1: endpoint not available, using fallback values [ 137.232785][ T1346] snd_usb_pod 2-1:1.1: invalid control EP [ 137.251039][ T1346] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 137.284068][ T1346] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 137.317004][ T1346] snd_usb_pod: probe of 2-1:1.1 failed with error -22 [ 137.413879][ T7955] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1705'. [ 137.482895][ T1346] usb 2-1: USB disconnect, device number 7 [ 137.682520][ T7971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1713'. [ 137.868344][ T4228] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 138.087811][ T7994] loop1: detected capacity change from 0 to 512 [ 138.108808][ T7995] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.113645][ T4228] usb 4-1: Using ep0 maxpacket: 32 [ 138.119302][ T7713] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 138.138797][ T7994] EXT4-fs (loop1): Ignoring removed nobh option [ 138.165977][ T7994] EXT4-fs (loop1): Test dummy encryption mode enabled [ 138.182084][ T7994] EXT4-fs (loop1): orphan cleanup on readonly fs [ 138.196483][ T7994] EXT4-fs error (device loop1): ext4_xattr_inode_update_ref:984: inode #11: comm syz.1.1725: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 138.224862][ T7994] EXT4-fs (loop1): Remounting filesystem read-only [ 138.232399][ T7994] EXT4-fs warning (device loop1): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.1.1725: ea_inode dec ref err=-117 [ 138.252500][ T7994] EXT4-fs (loop1): 1 orphan inode deleted [ 138.258829][ T7994] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,errors=remount-ro,jqfmt=vfsold,nobh,resgid=0x0000000000000000,test_dummy_encryption,stripe=0x0000000000000009,. Quota mode: none. [ 138.297531][ T4228] usb 4-1: unable to get BOS descriptor or descriptor too short [ 138.385304][ T4228] usb 4-1: config index 0 descriptor too short (expected 321, got 65) [ 138.397021][ T4228] usb 4-1: config 48 has an invalid interface descriptor of length 2, skipping [ 138.413048][ T4228] usb 4-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 138.424002][ T4228] usb 4-1: config 48 has 0 interfaces, different from the descriptor's value: 3 [ 138.514006][ T26] audit: type=1107 audit(1785899754.894:7): pid=8001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 138.593771][ T4228] usb 4-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice= 0.40 [ 138.627295][ T4228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.655965][ T4228] usb 4-1: Product: syz [ 138.660229][ T4228] usb 4-1: Manufacturer: syz [ 138.687687][ T4228] usb 4-1: SerialNumber: syz [ 138.733894][ T7713] usb 5-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 138.759771][ T7713] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.780013][ T7713] usb 5-1: Product: syz [ 138.809036][ T7713] usb 5-1: Manufacturer: syz [ 138.819163][ T7713] usb 5-1: SerialNumber: syz [ 138.835261][ T8018] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1736'. [ 138.874880][ T7713] ums-karma 5-1:1.0: USB Mass Storage device detected [ 138.906169][ T7713] ums-karma 5-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 138.906169][ T7713] Please send a copy of this message to and [ 138.985110][ T4228] usb 4-1: USB disconnect, device number 8 [ 139.219877][ T8036] netlink: 'syz.1.1743': attribute type 1 has an invalid length. [ 139.236249][ T8036] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1743'. [ 139.263625][ T8036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1743'. [ 139.360139][ T7713] ums-karma: probe of 5-1:1.0 failed with error -5 [ 139.375488][ T7713] usb 5-1: USB disconnect, device number 11 [ 139.411718][ T8020] loop0: detected capacity change from 0 to 32768 [ 139.494769][ T8020] XFS (loop0): Mounting V5 Filesystem [ 139.643802][ T8034] loop2: detected capacity change from 0 to 32768 [ 139.657331][ T8034] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.1744 (8034) [ 139.735022][ T8020] XFS (loop0): Ending clean mount [ 139.754490][ T8020] XFS (loop0): Quotacheck needed: Please wait. [ 139.772467][ T8034] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 139.851548][ T8034] BTRFS info (device loop2): turning off barriers [ 139.876836][ T8020] XFS (loop0): Quotacheck: Done. [ 139.881606][ T8034] BTRFS info (device loop2): force zlib compression, level 3 [ 139.891969][ T8020] XFS (loop0): Unmounting Filesystem [ 139.935574][ T8034] BTRFS info (device loop2): enabling ssd optimizations [ 140.011009][ T8034] BTRFS info (device loop2): using spread ssd allocation scheme [ 140.045423][ T8034] BTRFS info (device loop2): using free space tree [ 140.073728][ T8034] BTRFS info (device loop2): has skinny extents [ 140.496153][ T8097] netlink: 'syz.4.1761': attribute type 5 has an invalid length. [ 140.496181][ T8097] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.1761'. [ 140.508546][ T8034] BTRFS info (device loop2): not using ssd optimizations [ 140.508655][ T8034] BTRFS info (device loop2): not using spread ssd allocation scheme [ 140.508715][ T8034] BTRFS info (device loop2): enabling ssd optimizations [ 140.508731][ T8034] BTRFS info (device loop2): using spread ssd allocation scheme [ 140.811013][ T4901] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 9 /dev/loop2 scanned by udevd (4901) [ 141.474411][ T8131] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 141.811118][ T8144] Cannot find set identified by id 0 to match [ 141.818666][ T4281] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 141.887209][ T8146] loop0: detected capacity change from 0 to 1764 [ 141.925053][ T8149] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1786'. [ 141.959131][ T8146] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 141.967776][ T8153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1787'. [ 142.058876][ T8153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1787'. [ 142.082912][ T8153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1787'. [ 142.132431][ T8153] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 142.166380][ T8157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1790'. [ 142.183455][ T8163] loop0: detected capacity change from 0 to 764 [ 142.269169][ T8163] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 142.297629][ T8169] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 142.686355][ T4228] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 142.744071][ T1346] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 142.813778][ T13] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 142.943652][ T4228] usb 2-1: Using ep0 maxpacket: 32 [ 142.993599][ T1346] usb 5-1: Using ep0 maxpacket: 16 [ 143.063807][ T4228] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.153643][ T1346] usb 5-1: unable to get BOS descriptor or descriptor too short [ 143.223951][ T13] usb 3-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 143.233776][ T1346] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.245683][ T4228] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 143.251419][ T13] usb 3-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.263570][ T4228] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.272854][ T4228] usb 2-1: Product: syz [ 143.293760][ T13] usb 3-1: config 1 interface 0 has no altsetting 0 [ 143.305528][ T1346] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 143.329657][ T4228] usb 2-1: Manufacturer: syz [ 143.329682][ T4228] usb 2-1: SerialNumber: syz [ 143.330525][ T1346] usb 5-1: config 1 interface 1 has no altsetting 0 [ 143.352797][ T4228] usb 2-1: config 0 descriptor?? [ 143.429237][ T8231] xt_connbytes: Forcing CT accounting to be enabled [ 143.454964][ T4228] cdc_ether 2-1:0.0: skipping garbage [ 143.460464][ T4228] cdc_ether 2-1:0.0: skipping garbage [ 143.473793][ T4228] usb 2-1: bad CDC descriptors [ 143.479027][ T4228] usb 2-1: unsupported MDLM descriptors [ 143.493844][ T13] usb 3-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice= 0.40 [ 143.497251][ T1346] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 143.528184][ T1346] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.532012][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.543628][ T1346] usb 5-1: Product: syz [ 143.555232][ T13] usb 3-1: Product: syz [ 143.559482][ T13] usb 3-1: Manufacturer: syz [ 143.560414][ T1346] usb 5-1: Manufacturer: syz [ 143.564656][ T13] usb 3-1: SerialNumber: syz [ 143.583607][ T1346] usb 5-1: SerialNumber: syz [ 143.674293][ T4234] usb 2-1: USB disconnect, device number 8 [ 143.866649][ T1346] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 143.900215][ T1346] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 143.955207][ T13] vmk80xx 3-1:1.0: driver 'vmk80xx' failed to auto-configure device. [ 144.005422][ T13] usb 3-1: USB disconnect, device number 11 [ 144.019087][ T8249] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 144.116468][ T1346] usb 5-1: USB disconnect, device number 12 [ 144.385731][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 144.395564][ T8265] comedi comedi4: bad chanlist[0]=0x00200000 chan=0 range length=2 [ 144.413880][ T8264] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1843'. [ 144.674086][ T8275] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1848'. [ 144.803669][ T1108] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 144.831135][ T8281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1852'. [ 145.160497][ T8299] netlink: 'syz.4.1861': attribute type 79 has an invalid length. [ 145.169785][ T1108] usb 2-1: config 0 has an invalid interface number: 3 but max is 2 [ 145.188159][ T1108] usb 2-1: config 0 has an invalid interface number: 176 but max is 2 [ 145.205690][ T1108] usb 2-1: config 0 has no interface number 1 [ 145.223634][ T1108] usb 2-1: config 0 has no interface number 2 [ 145.242379][ T1108] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 145.290611][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.337334][ T1108] usb 2-1: config 0 descriptor?? [ 145.503285][ T8317] netlink: 'syz.4.1870': attribute type 3 has an invalid length. [ 145.613913][ T1108] qcserial 2-1:0.3: Qualcomm USB modem converter detected [ 145.641822][ T8320] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1871'. [ 145.662175][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 145.723561][ T8320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1871'. [ 145.740874][ T8273] loop3: detected capacity change from 0 to 32768 [ 145.818464][ T1108] usb 2-1: USB disconnect, device number 9 [ 145.827381][ T1108] qcserial 2-1:0.3: device disconnected [ 145.858898][ T8273] XFS (loop3): Mounting V5 Filesystem [ 145.997525][ T8340] loop0: detected capacity change from 0 to 64 [ 146.032915][ T8273] XFS (loop3): Ending clean mount [ 146.049325][ T8273] XFS (loop3): Quotacheck needed: Please wait. [ 146.167746][ T8273] XFS (loop3): Quotacheck: Done. [ 146.178263][ T8273] XFS (loop3): Unmounting Filesystem [ 146.316948][ T8355] tc_dump_action: action bad kind [ 146.438982][ T8361] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 146.551197][ T26] audit: type=1400 audit(1785899762.934:8): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=8366 comm="syz.4.1892" [ 146.573646][ T1108] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 146.823643][ T1108] usb 3-1: Using ep0 maxpacket: 8 [ 146.884737][ T8381] device geneve2 entered promiscuous mode [ 146.983884][ T1108] usb 3-1: unable to get BOS descriptor or descriptor too short [ 147.001709][ T8387] loop1: detected capacity change from 0 to 16 [ 147.012310][ T8386] loop0: detected capacity change from 0 to 256 [ 147.071436][ T1108] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.097028][ T1108] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 147.119559][ T8386] FAT-fs (loop0): Directory bread(block 64) failed [ 147.126479][ T8386] FAT-fs (loop0): Directory bread(block 65) failed [ 147.137748][ T8387] erofs: (device loop1): mounted with root inode @ nid 36. [ 147.149678][ T8387] process 'syz.1.1901' launched './file0' with NULL argv: empty string added [ 147.162342][ T8386] FAT-fs (loop0): Directory bread(block 66) failed [ 147.171437][ T8386] FAT-fs (loop0): Directory bread(block 67) failed [ 147.194616][ T8387] attempt to access beyond end of device [ 147.194616][ T8387] loop1: rw=0, want=15300821032, limit=16 [ 147.216987][ T8386] FAT-fs (loop0): Directory bread(block 68) failed [ 147.240116][ T8386] FAT-fs (loop0): Directory bread(block 69) failed [ 147.248569][ T8387] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 147.257305][ T8386] FAT-fs (loop0): Directory bread(block 70) failed [ 147.267699][ T8386] FAT-fs (loop0): Directory bread(block 71) failed [ 147.291445][ T8386] FAT-fs (loop0): Directory bread(block 72) failed [ 147.303943][ T1108] usb 3-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 147.320612][ T8386] FAT-fs (loop0): Directory bread(block 73) failed [ 147.327688][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.343664][ T1108] usb 3-1: Product: syz [ 147.348485][ T1108] usb 3-1: Manufacturer: syz [ 147.353109][ T1108] usb 3-1: SerialNumber: syz [ 147.564305][ T144] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 147.754142][ T1108] usb 3-1: 0:1 : does not exist [ 147.765807][ T1108] usb 3-1: unit 0 not found! [ 147.770460][ T1108] usb 3-1: unit 5 not found! [ 147.795613][ T1108] usb 3-1: Focusrite Scarlett Gen 2/3 Mixer Driver disabled; use options snd_usb_audio vid=0x1235 pid=0x8214 device_setup=1 to enable and report any issues to g@b4.vu [ 147.910187][ T1108] usb 3-1: USB disconnect, device number 12 [ 148.074396][ T8391] loop3: detected capacity change from 0 to 32768 [ 148.155332][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 148.481416][ T8445] loop2: detected capacity change from 0 to 736 [ 148.493552][ T8433] loop3: detected capacity change from 0 to 4096 [ 148.556927][ T8433] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 148.703236][ T8445] rock: directory entry would overflow storage [ 148.744437][ T8445] rock: sig=0x3b10, size=4, remaining=3 [ 148.951699][ T8469] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 148.959821][ T8469] IPv6: NLM_F_CREATE should be set when creating new route [ 148.967310][ T8469] IPv6: NLM_F_CREATE should be set when creating new route [ 149.001443][ T8472] loop3: detected capacity change from 0 to 1764 [ 149.033912][ T8475] loop2: detected capacity change from 0 to 1024 [ 149.056715][ T8477] __nla_validate_parse: 2 callbacks suppressed [ 149.056735][ T8477] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1946'. [ 149.095500][ T8475] hfsplus: wrong filesystem version [ 149.140828][ T8477] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1946'. [ 149.173706][ T8477] tc_dump_action: action bad kind [ 149.344837][ T8483] loop1: detected capacity change from 0 to 4096 [ 149.389528][ T8483] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 149.786061][ T8521] delete_channel: no stack [ 150.062146][ T8541] xt_recent: Unsupported userspace flags (000000b1) [ 150.183836][ T13] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 150.301344][ T8557] xt_l2tp: invalid flags combination: c [ 150.443783][ T13] usb 1-1: Using ep0 maxpacket: 32 [ 150.564019][ T13] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.608874][ T13] usb 1-1: New USB device found, idVendor=0525, idProduct=2888, bcdDevice=d0.43 [ 150.663583][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.708882][ T8574] loop1: detected capacity change from 0 to 512 [ 150.735271][ T13] usb 1-1: config 0 descriptor?? [ 150.871673][ T8574] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c018, mo2=0002] [ 150.885274][ T8574] EXT4-fs (loop1): orphan cleanup on readonly fs [ 151.011776][ T8574] EXT4-fs warning (device loop1): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 151.034124][ T13] cdc_subset: probe of 1-1:0.0 failed with error -22 [ 151.071228][ T8574] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 151.081283][ T8574] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #13: comm syz.1.1993: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 151.149481][ T8574] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.1993: couldn't read orphan inode 13 (err -117) [ 151.213755][ T8574] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000002,noblock_validity,min_batch_time=0x00000000000052ad,grpquota,debug,journal_dev=0x0000000000000001,mb_optimize_scan=0x0000000000000001,inode_readahead_blks=0x0000000000002000,,errors=continue. Quota mode: writeback. [ 151.250783][ T13] usb 1-1: USB disconnect, device number 9 [ 151.311367][ T8599] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2005'. [ 151.370198][ T8574] EXT4-fs (loop1): Cannot specify journal on remount [ 151.518534][ T8605] overlayfs: conflicting options: userxattr,redirect_dir=follow [ 151.932985][ T8589] loop4: detected capacity change from 0 to 32768 [ 152.104874][ T8589] (syz.4.1999,8589,1):ocfs2_verify_heartbeat:827 ERROR: Mismatching o2cb heartbeat modes [ 152.137209][ T8642] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 152.151433][ T8589] (syz.4.1999,8589,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 152.193862][ T8642] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 152.446229][ T8656] openvswitch: netlink: Flow actions attr not present in new flow. [ 152.631565][ T8662] loop2: detected capacity change from 0 to 2048 [ 152.753157][ T8673] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 152.766504][ T8662] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=80, inode=15, rec_len=1498, name_len=5 [ 152.815257][ T8662] Remounting filesystem read-only [ 152.979860][ T8687] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2045'. [ 153.064891][ T1108] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 153.073710][ T1111] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 153.185250][ T8699] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2053'. [ 153.245648][ T8699] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 153.279996][ T8699] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 153.303606][ T1108] usb 1-1: Using ep0 maxpacket: 8 [ 153.344090][ T4240] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 153.433858][ T1108] usb 1-1: config 2 has an invalid interface number: 111 but max is 0 [ 153.442096][ T1108] usb 1-1: config 2 has no interface number 0 [ 153.470069][ T1108] usb 1-1: too many endpoints for config 2 interface 111 altsetting 55: 172, using maximum allowed: 30 [ 153.483900][ T1111] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.497592][ T1108] usb 1-1: config 2 interface 111 altsetting 55 has 0 endpoint descriptors, different from the interface descriptor's value: 172 [ 153.529191][ T1111] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 153.557801][ T1111] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 153.575254][ T1108] usb 1-1: config 2 interface 111 has no altsetting 0 [ 153.599304][ T1108] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 153.640233][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.663250][ T8718] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 153.803879][ T1111] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 153.822227][ T1111] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.856127][ T1111] usb 5-1: Product: syz [ 153.879650][ T1111] usb 5-1: Manufacturer: syz [ 153.903706][ T1111] usb 5-1: SerialNumber: syz [ 153.910736][ T8730] loop2: detected capacity change from 0 to 256 [ 153.933723][ T1108] usb 1-1: string descriptor 0 read error: -71 [ 153.951566][ T1108] usb 1-1: USB disconnect, device number 10 [ 154.002924][ T8730] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 154.171036][ T8744] loop3: detected capacity change from 0 to 64 [ 154.257677][ T1111] usb 5-1: 0:2 : does not exist [ 154.312202][ T4240] attempt to access beyond end of device [ 154.312202][ T4240] loop3: rw=1, want=16777218, limit=64 [ 154.354020][ T1111] usb 5-1: USB disconnect, device number 13 [ 154.363805][ T4240] Buffer I/O error on dev loop3, logical block 8388608, lost async page write [ 154.685638][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 154.789752][ T8768] netlink: 'syz.3.2087': attribute type 29 has an invalid length. [ 154.807059][ T8770] xt_hashlimit: size too large, truncated to 1048576 [ 154.941534][ T8777] xt_CT: You must specify a L4 protocol and not use inversions on it [ 155.254050][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 155.281703][ T8796] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2101'. [ 155.615011][ T8814] netlink: 'syz.1.2110': attribute type 32 has an invalid length. [ 155.627185][ T8817] loop3: detected capacity change from 0 to 164 [ 155.639295][ T8805] batman_adv: batadv0: Removing interface: virt_wifi0 [ 155.724709][ T8817] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 155.932905][ T8827] loop4: detected capacity change from 0 to 64 [ 156.063608][ T1346] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 156.073649][ T13] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 156.117881][ T8801] loop2: detected capacity change from 0 to 32768 [ 156.136263][ T26] audit: type=1400 audit(1785899772.524:9): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3AF4F9904E7FDB3635A70D23C73EEAF23A2F503280080CA26230668AD9DCF8B061228F8599D34E45087D21AA56759E1651B3DD467BDEF390C76D pid=8832 comm="syz.4.2119" [ 156.262337][ T8801] XFS (loop2): Mounting V5 Filesystem [ 156.303935][ T1346] usb 1-1: Using ep0 maxpacket: 16 [ 156.333725][ T13] usb 2-1: Using ep0 maxpacket: 8 [ 156.340410][ T8801] XFS (loop2): Ending clean mount [ 156.401626][ T4192] XFS (loop2): Unmounting Filesystem [ 156.424091][ T1346] usb 1-1: config 1 has an invalid interface number: 22 but max is 0 [ 156.433742][ T1346] usb 1-1: config 1 has no interface number 0 [ 156.439949][ T1346] usb 1-1: config 1 interface 22 has no altsetting 0 [ 156.487232][ T13] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 156.489510][ T1108] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 156.495760][ T13] usb 2-1: config 179 has no interface number 0 [ 156.495807][ T13] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 156.523028][ T13] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 156.535292][ T13] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 156.547548][ T13] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 156.560153][ T13] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 156.574085][ T13] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 156.583626][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.623931][ T1346] usb 1-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=f3.70 [ 156.632057][ T8820] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 156.644046][ T1346] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.652210][ T1346] usb 1-1: Product: syz [ 156.657376][ T1346] usb 1-1: Manufacturer: syz [ 156.668731][ T1346] usb 1-1: SerialNumber: syz [ 156.715118][ T8857] netlink: 'syz.4.2128': attribute type 46 has an invalid length. [ 156.753632][ T1108] usb 4-1: Using ep0 maxpacket: 32 [ 156.913938][ T1108] usb 4-1: unable to get BOS descriptor or descriptor too short [ 156.974939][ T8867] netlink: 22 bytes leftover after parsing attributes in process `syz.4.2132'. [ 157.003919][ T1108] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 157.023365][ T1346] gspca_main: touptek-2.14.0 probing 0547:6801 [ 157.032807][ T1108] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 157.077030][ T1346] usb 1-1: USB disconnect, device number 11 [ 157.083302][ T1108] usb 4-1: config 14 has no interface number 0 [ 157.101106][ T1108] usb 4-1: config 14 has no interface number 1 [ 157.116048][ T13] usb 2-1: USB disconnect, device number 10 [ 157.122172][ T1108] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 157.123086][ T8873] tc_dump_action: action bad kind [ 157.133710][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 157.133864][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 157.161081][ T1108] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 157.181271][ T1108] usb 4-1: config 14 interface 57 has no altsetting 0 [ 157.189028][ T1108] usb 4-1: config 14 interface 228 has no altsetting 0 [ 157.373878][ T1108] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 157.383219][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.401266][ T1108] usb 4-1: Product: syz [ 157.406402][ T1108] usb 4-1: Manufacturer: syz [ 157.411389][ T1108] usb 4-1: SerialNumber: syz [ 157.545589][ T8893] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2143'. [ 157.575046][ T8893] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2143'. [ 157.584658][ T8893] netlink: 'syz.0.2143': attribute type 3 has an invalid length. [ 157.599721][ T8893] netlink: 'syz.0.2143': attribute type 2 has an invalid length. [ 157.653580][ T8893] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2143'. [ 157.668243][ T8899] sg_write: data in/out 4194304/65042 bytes for SCSI command 0x0-- guessing data in; [ 157.668243][ T8899] program syz.2.2147 not setting count and/or reply_len properly [ 157.794646][ T1108] legousbtower 4-1:14.57: interrupt endpoints not found [ 157.844766][ T1108] legousbtower 4-1:14.228: interrupt endpoints not found [ 157.873875][ T8911] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 157.902188][ T8911] CIFS mount error: No usable UNC path provided in device string! [ 157.902188][ T8911] [ 157.921202][ T1108] usb 4-1: USB disconnect, device number 9 [ 157.937812][ T8911] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 158.203757][ T1346] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 158.299933][ T8932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2162'. [ 158.453702][ T1346] usb 1-1: Using ep0 maxpacket: 16 [ 158.575205][ T1346] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 158.605487][ T1346] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.641684][ T1346] usb 1-1: config 0 descriptor?? [ 158.699841][ T1346] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 158.905974][ T8968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2180'. [ 158.913757][ T1346] gspca_sonixj: reg_w1 err -71 [ 158.920463][ T1346] sonixj: probe of 1-1:0.0 failed with error -71 [ 158.921880][ T8967] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 158.958728][ T1346] usb 1-1: USB disconnect, device number 12 [ 159.037241][ T8971] netlink: 'syz.1.2182': attribute type 12 has an invalid length. [ 159.083963][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 159.091507][ T8974] kernel read not supported for file / 7âW)s!QfsrX%)rO2:"T+͟v|ղDvc֠6xc: (pid: 8974 comm: syz.3.2184) [ 159.144368][ T26] audit: type=1800 audit(1785899775.534:10): pid=8974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2184" name=C020019C1437B3CFFCC3A25729AB7393A7C721518FF6ECA56673F58772A05825D4E0D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=48222 res=0 errno=0 [ 159.285164][ T8980] loop3: detected capacity change from 0 to 8 [ 159.657301][ T8998] netlink: 207496 bytes leftover after parsing attributes in process `syz.1.2197'. [ 159.774476][ T9003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2199'. [ 159.779175][ T8972] loop4: detected capacity change from 0 to 32768 [ 159.827075][ T9008] loop1: detected capacity change from 0 to 64 [ 159.885702][ T8972] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.2183 (8972) [ 159.896664][ T8972] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 159.896791][ T8972] BTRFS info (device loop4): using free space tree [ 159.896808][ T8972] BTRFS info (device loop4): has skinny extents [ 160.320481][ T8972] BTRFS info (device loop4): enabling ssd optimizations [ 160.958266][ T9028] loop3: detected capacity change from 0 to 32768 [ 160.984562][ T9087] syz.0.2225 uses obsolete (PF_INET,SOCK_PACKET) [ 161.049841][ T9028] ea_get: extended attribute size too large: 2617245744 > INT_MAX [ 161.280724][ T9104] loop0: detected capacity change from 0 to 1024 [ 161.319472][ T9108] netlink: 'syz.4.2236': attribute type 3 has an invalid length. [ 161.398936][ T9112] nfs: Unexpected value for 'lock' [ 161.407252][ T9104] EXT4-fs (loop0): Ignoring removed bh option [ 161.501785][ T9104] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 2: comm syz.0.2233: lblock 2 mapped to illegal pblock 2 (length 1) [ 161.620312][ T9104] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 161.666653][ T9104] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 48: comm syz.0.2233: lblock 0 mapped to illegal pblock 48 (length 1) [ 161.695917][ T9128] loop3: detected capacity change from 0 to 512 [ 161.735853][ T9104] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 161.797331][ T9104] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.2233: Failed to acquire dquot type 0 [ 161.809718][ T9133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2246'. [ 161.852912][ T9133] openvswitch: netlink: Actions may not be safe on all matching packets [ 161.867445][ T9104] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 161.888464][ T9128] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000003,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 161.954914][ T9128] ext4 filesystem being mounted at /468/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.967034][ T9104] EXT4-fs error (device loop0): ext4_evict_inode:284: inode #11: comm syz.0.2233: mark_inode_dirty error [ 161.986140][ T9104] EXT4-fs warning (device loop0): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 161.996662][ T9104] EXT4-fs (loop0): 1 orphan inode deleted [ 162.002439][ T9104] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,noblock_validity,bh,nodiscard,nouid32,barrier,,errors=continue. Quota mode: none. [ 162.020204][ T145] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 162.135494][ T145] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 162.183302][ T145] EXT4-fs error (device loop0): ext4_release_dquot:6272: comm kworker/u4:2: Failed to release dquot type 0 [ 162.318701][ T4230] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 162.374892][ T4230] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 162.393618][ T4230] EXT4-fs error (device loop0): ext4_release_dquot:6272: comm kworker/u4:4: Failed to release dquot type 0 [ 162.421832][ T9142] loop4: detected capacity change from 0 to 4096 [ 162.439113][ T9151] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 162.461030][ T4185] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 162.511607][ T4185] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 162.524390][ T9083] Bluetooth: hci0: command 0x0401 tx timeout [ 162.592434][ T9142] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 162.639229][ T4185] EXT4-fs error (device loop0): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 162.802960][ T4193] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 162.973742][ T9083] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 163.243733][ T9083] usb 2-1: Using ep0 maxpacket: 32 [ 163.305613][ T9189] xt_HMARK: proto mask must be zero with L3 mode [ 163.373794][ T9083] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.476384][ T9201] loop3: detected capacity change from 0 to 256 [ 163.554772][ T9083] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 163.590168][ T9083] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.636433][ T9083] usb 2-1: Product: syz [ 163.640666][ T9083] usb 2-1: Manufacturer: syz [ 163.676053][ T9083] usb 2-1: SerialNumber: syz [ 163.696708][ T9083] usb 2-1: config 0 descriptor?? [ 163.745299][ T9083] quatech2 2-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 163.963915][ T9083] usb 2-1: qt2_setup_urbs - submit read urb failed -8 [ 163.974107][ T9083] quatech2: probe of 2-1:0.0 failed with error -8 [ 164.195784][ T9083] usb 2-1: USB disconnect, device number 11 [ 164.538787][ T9069] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 164.797190][ T9069] usb 5-1: Using ep0 maxpacket: 16 [ 164.843775][ T7708] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 164.860010][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 164.951450][ T9244] loop0: detected capacity change from 0 to 32768 [ 165.011454][ T9244] [ 165.011454][ T9244] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 165.011454][ T9244] [ 165.052156][ T9244] ialloc: diAlloc returned -5! [ 165.073838][ T9069] usb 5-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 165.099850][ T9069] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.133752][ T9069] usb 5-1: Product: syz [ 165.153776][ T9069] usb 5-1: Manufacturer: syz [ 165.158658][ T9069] usb 5-1: SerialNumber: syz [ 165.214600][ T9069] usb 5-1: config 0 descriptor?? [ 165.222589][ T4185] [ 165.222589][ T4185] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 165.222589][ T4185] [ 165.253656][ T4185] [ 165.253656][ T4185] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 165.253656][ T4185] [ 165.255843][ T9069] gspca_main: spca508-2.14.0 probing 041e:4018 [ 165.383385][ T9287] x_tables: duplicate entry at hook 1 [ 165.522413][ T9295] netlink: 'syz.2.2322': attribute type 10 has an invalid length. [ 165.538501][ T9297] Cannot find del_set index 4 as target [ 165.602889][ T9295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.663038][ T9295] team0: Port device bond0 added [ 165.691331][ T9299] netlink: 25 bytes leftover after parsing attributes in process `syz.1.2325'. [ 165.693932][ T9069] gspca_spca508: reg_read err -71 [ 165.743782][ T9069] gspca_spca508: reg_read err -71 [ 165.763736][ T9069] gspca_spca508: reg_read err -71 [ 165.789110][ T9069] gspca_spca508: reg_read err -71 [ 165.825232][ T9069] gspca_spca508: reg write: error -71 [ 165.838694][ T9069] spca508: probe of 5-1:0.0 failed with error -71 [ 165.870335][ T9309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2329'. [ 165.870498][ T9069] usb 5-1: USB disconnect, device number 14 [ 166.213942][ T9325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2338'. [ 166.246091][ T9082] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 166.573118][ T9345] binder: 9344:9345 ioctl c018620c 0 returned -14 [ 166.657517][ T9351] netlink: 766 bytes leftover after parsing attributes in process `syz.4.2351'. [ 166.673920][ T9082] usb 1-1: unable to get BOS descriptor or descriptor too short [ 166.723771][ T9082] usb 1-1: not running at top speed; connect to a high speed hub [ 166.753687][ T9083] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 166.771748][ T9349] loop3: detected capacity change from 0 to 4096 [ 166.823906][ T9082] usb 1-1: config 5 has an invalid interface number: 246 but max is 0 [ 166.839747][ T9082] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 166.865368][ T9082] usb 1-1: config 5 has no interface number 0 [ 166.872581][ T9082] usb 1-1: config 5 interface 246 altsetting 4 endpoint 0x3 has invalid maxpacket 255, setting to 64 [ 166.887416][ T9082] usb 1-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 166.956794][ T9361] SET target dimension over the limit! [ 166.965961][ T9349] ntfs: volume version 3.1. [ 166.970478][ T9082] usb 1-1: config 5 interface 246 has no altsetting 0 [ 167.003862][ T9083] usb 3-1: Using ep0 maxpacket: 16 [ 167.133815][ T9083] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 167.144490][ T9082] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 167.174069][ T9083] usb 3-1: config 0 has no interface number 0 [ 167.180246][ T9083] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 167.200981][ T9082] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.211126][ T9082] usb 1-1: Product: syz [ 167.215922][ T9082] usb 1-1: Manufacturer: syz [ 167.220784][ T9082] usb 1-1: SerialNumber: syz [ 167.252810][ T145] ntfs: (device loop3): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 167.281337][ T9375] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2364'. [ 167.367992][ T9377] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2365'. [ 167.378075][ T9083] usb 3-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 167.403896][ T9083] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.432627][ T9083] usb 3-1: Product: syz [ 167.437826][ T9377] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2365'. [ 167.450516][ T9083] usb 3-1: Manufacturer: syz [ 167.463628][ T9083] usb 3-1: SerialNumber: syz [ 167.468454][ T9377] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2365'. [ 167.479737][ T9083] usb 3-1: config 0 descriptor?? [ 167.535440][ T9083] cypress_m8 3-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 167.615162][ T9082] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 167.633760][ T145] usb 1-1: Failed to submit usb control message: -71 [ 167.641198][ T145] usb 1-1: unable to send the bmi data to the device: -71 [ 167.673875][ T9082] usb 1-1: USB disconnect, device number 13 [ 167.683345][ T145] usb 1-1: unable to get target info from device [ 167.690353][ T145] usb 1-1: could not get target info (-71) [ 167.701373][ T145] usb 1-1: could not probe fw (-71) [ 167.764899][ T9083] usb 3-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0 [ 167.812947][ T9083] usb 3-1: USB disconnect, device number 13 [ 167.838889][ T9083] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0 [ 167.848700][ T9400] syz.1.2373: vmalloc error: size 70368744177852, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 167.867789][ T9083] cypress_m8 3-1:0.35: device disconnected [ 167.909320][ T9400] CPU: 0 PID: 9400 Comm: syz.1.2373 Not tainted syzkaller #0 [ 167.917649][ T9400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 167.928828][ T9400] Call Trace: [ 167.932151][ T9400] [ 167.935123][ T9400] dump_stack_lvl+0x188/0x250 [ 167.940115][ T9400] ? rcu_lock_release+0x5/0x20 [ 167.944947][ T9400] ? show_regs_print_info+0x20/0x20 [ 167.950455][ T9400] ? load_image+0x410/0x410 [ 167.955144][ T9400] warn_alloc+0x245/0x320 [ 167.959724][ T9400] ? zone_watermark_ok_safe+0x250/0x250 [ 167.965745][ T9400] ? __mutex_lock_common+0x435/0x2400 [ 167.971348][ T9400] ? tomoyo_path_number_perm+0x5f7/0x6b0 [ 167.977025][ T9400] __vmalloc_node_range+0x2b1/0x8b0 [ 167.982275][ T9400] ? dvb_dvr_do_ioctl+0x12a/0x220 [ 167.987347][ T9400] vmalloc+0x75/0x80 [ 167.991278][ T9400] ? dvb_dvr_do_ioctl+0x12a/0x220 [ 167.996429][ T9400] dvb_dvr_do_ioctl+0x12a/0x220 [ 168.001334][ T9400] dvb_usercopy+0x191/0x2b0 [ 168.005877][ T9400] ? dvb_dvr_release+0x3d0/0x3d0 [ 168.010850][ T9400] ? dvb_generic_ioctl+0xb0/0xb0 [ 168.015927][ T9400] ? dvb_dvr_poll+0x230/0x230 [ 168.020648][ T9400] dvb_dvr_ioctl+0x25/0x30 [ 168.025706][ T9400] __se_sys_ioctl+0xfa/0x170 [ 168.030346][ T9400] do_syscall_64+0x4c/0xa0 [ 168.034888][ T9400] ? clear_bhb_loop+0x30/0x80 [ 168.039619][ T9400] ? clear_bhb_loop+0x30/0x80 [ 168.044346][ T9400] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 168.050827][ T9400] RIP: 0033:0x7f9daf189019 [ 168.055299][ T9400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.075123][ T9400] RSP: 002b:00007f9dad3e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 168.083692][ T9400] RAX: ffffffffffffffda RBX: 00007f9daf410fa0 RCX: 00007f9daf189019 [ 168.091705][ T9400] RDX: 00004000000000bc RSI: 0000000000006f2d RDI: 0000000000000003 [ 168.100096][ T9400] RBP: 00007f9daf22000c R08: 0000000000000000 R09: 0000000000000000 [ 168.108110][ T9400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.116121][ T9400] R13: 00007f9daf411038 R14: 00007f9daf410fa0 R15: 00007ffd17fe3bd8 [ 168.124157][ T9400] [ 168.127248][ C0] vkms_vblank_simulate: vblank timer overrun [ 168.159918][ T9400] Mem-Info: [ 168.166570][ T9400] active_anon:320 inactive_anon:6200 isolated_anon:0 [ 168.166570][ T9400] active_file:4736 inactive_file:36248 isolated_file:0 [ 168.166570][ T9400] unevictable:768 dirty:446 writeback:0 [ 168.166570][ T9400] slab_reclaimable:16391 slab_unreclaimable:99934 [ 168.166570][ T9400] mapped:30242 shmem:1634 pagetables:656 bounce:0 [ 168.166570][ T9400] kernel_misc_reclaimable:0 [ 168.166570][ T9400] free:1391877 free_pcp:8617 free_cma:0 [ 168.209984][ C0] vkms_vblank_simulate: vblank timer overrun [ 168.230927][ T9400] Node 0 active_anon:1248kB inactive_anon:24488kB active_file:18744kB inactive_file:144992kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120968kB dirty:1780kB writeback:0kB shmem:4456kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11088kB pagetables:2724kB all_unreclaimable? no [ 168.262562][ C0] vkms_vblank_simulate: vblank timer overrun [ 168.303672][ T9400] Node 1 active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 168.332905][ C0] vkms_vblank_simulate: vblank timer overrun [ 168.413284][ T9400] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 168.457249][ T9400] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 168.485726][ T9400] Node 0 DMA32 free:1633932kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1248kB inactive_anon:24488kB active_file:18744kB inactive_file:144992kB unevictable:1536kB writepending:1780kB present:3129332kB managed:2606516kB mlocked:0kB bounce:0kB free_pcp:30380kB local_pcp:11184kB free_cma:0kB [ 168.703689][ T9441] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2394'. [ 168.766849][ T9438] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2393'. [ 168.789822][ T9438] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2393'. [ 168.810092][ T9400] lowmem_reserve[]: 0 0 0 0 0 [ 168.837825][ T9400] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 168.964309][ T9400] lowmem_reserve[]: 0 0 0 0 0 [ 168.970044][ T9400] Node 1 Normal free:3918236kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:4980kB local_pcp:4980kB free_cma:0kB [ 169.163957][ T9400] lowmem_reserve[]: 0 0 0 0 0 [ 169.169181][ T9400] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 169.215285][ T9400] Node 0 DMA32: 1897*4kB (UME) 877*8kB (UME) 250*16kB (UME) 306*32kB (UME) 121*64kB (UME) 33*128kB (UME) 16*256kB (UE) 4*512kB (E) 4*1024kB (UE) 1*2048kB (E) 386*4096kB (UM) = 1633708kB [ 169.324246][ T9400] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 169.341571][ T9467] loop0: detected capacity change from 0 to 256 [ 169.386682][ T9400] Node 1 Normal: 117*4kB (UME) 37*8kB (UME) 30*16kB (UME) 172*32kB (UME) 67*64kB (UME) 19*128kB (UE) 9*256kB (UME) 4*512kB (U) 1*1024kB (E) 2*2048kB (ME) 951*4096kB (M) = 3918236kB [ 169.420942][ T9400] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 169.439173][ T9400] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 169.495999][ T9400] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 169.539542][ T9400] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 169.576906][ T9400] 42634 total pagecache pages [ 169.582251][ T9400] 0 pages in swap cache [ 169.610460][ T9400] Swap cache stats: add 240, delete 240, find 64/124 [ 169.665252][ T9400] Free swap = 124728kB [ 169.669480][ T9400] Total swap = 124996kB [ 169.704227][ T9400] 2097051 pages RAM [ 169.708104][ T9400] 0 pages HighMem/MovableOnly [ 169.712944][ T9400] 411499 pages reserved [ 169.748204][ T9400] 0 pages cma reserved [ 169.891649][ T9498] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2421'. [ 169.943703][ T9498] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2421'. [ 169.982365][ T9498] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2421'. [ 170.363809][ T4227] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 170.570305][ T9534] loop2: detected capacity change from 0 to 4096 [ 170.590076][ T9552] tmpfs: Bad value for 'mpol' [ 170.604166][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 170.675529][ T9534] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 170.793737][ T4227] usb 4-1: unable to get BOS descriptor or descriptor too short [ 170.827876][ T9564] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 170.903954][ T4227] usb 4-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.930577][ T4227] usb 4-1: config 1 interface 0 has no altsetting 0 [ 171.144107][ T4227] usb 4-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40 [ 171.153837][ T4227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.163440][ T4227] usb 4-1: Product: syz [ 171.190454][ T4227] usb 4-1: Manufacturer: syz [ 171.213696][ T9081] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 171.233001][ T4227] usb 4-1: SerialNumber: syz [ 171.467847][ T9581] loop1: detected capacity change from 0 to 4096 [ 171.570466][ T9581] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 171.573684][ T9081] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.743572][ T4227] usbhid 4-1:1.0: can't add hid device: -71 [ 171.760224][ T4227] usbhid: probe of 4-1:1.0 failed with error -71 [ 171.773826][ T9081] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 171.783927][ T7708] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 171.798917][ T9081] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.806212][ T4227] usb 4-1: USB disconnect, device number 10 [ 171.853203][ T9081] usb 5-1: Product: syz [ 171.869362][ T9081] usb 5-1: Manufacturer: syz [ 171.908097][ T9081] usb 5-1: SerialNumber: syz [ 171.933022][ T9081] usb 5-1: config 0 descriptor?? [ 171.975507][ T9603] loop1: detected capacity change from 0 to 4096 [ 171.985835][ T9081] ims_pcu 5-1:0.0: Missing CDC union descriptor [ 172.002492][ T9081] ims_pcu: probe of 5-1:0.0 failed with error -22 [ 172.073975][ T7708] usb 3-1: Using ep0 maxpacket: 32 [ 172.138171][ T9603] ntfs: volume version 3.1. [ 172.203929][ T7708] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.270893][ T9571] loop4: detected capacity change from 0 to 24 [ 172.292038][ T9619] No source specified [ 172.366882][ T9] ntfs: (device loop1): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 172.392155][ T13] usb 5-1: USB disconnect, device number 15 [ 172.414639][ T7708] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 172.429838][ T7708] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.438602][ T7708] usb 3-1: Product: syz [ 172.443078][ T7708] usb 3-1: Manufacturer: syz [ 172.449895][ T7708] usb 3-1: SerialNumber: syz [ 172.494896][ T7708] usb 3-1: config 0 descriptor?? [ 172.535502][ T7708] usb 3-1: bad CDC descriptors [ 172.553874][ T4227] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 172.569119][ T7708] usb 3-1: unsupported MDLM descriptors [ 172.744246][ T9635] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 172.789642][ T13] usb 3-1: USB disconnect, device number 14 [ 172.819015][ T9635] exFAT-fs (nullb0): invalid boot record signature [ 172.828564][ T9635] exFAT-fs (nullb0): failed to read boot sector [ 172.837531][ T9635] exFAT-fs (nullb0): failed to recognize exfat type [ 172.863659][ T4227] usb 4-1: Using ep0 maxpacket: 16 [ 172.887867][ T9639] nfs4: Bad value for 'source' [ 172.998812][ T4227] usb 4-1: config 1 has an invalid interface number: 19 but max is 0 [ 173.007486][ T9645] print_req_error: 2 callbacks suppressed [ 173.007503][ T9645] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 173.021163][ T4227] usb 4-1: config 1 has no interface number 0 [ 173.052685][ T9645] FAT-fs (loop3): unable to read boot sector [ 173.083976][ T4227] usb 4-1: config 1 interface 19 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.123530][ T4227] usb 4-1: config 1 interface 19 has no altsetting 0 [ 173.303912][ T4227] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 7.c9 [ 173.313045][ T4227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.332015][ T26] audit: type=1800 audit(1785899789.704:11): pid=9648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.0.2491" name="/" dev="tmpfs" ino=1078 res=0 errno=0 [ 173.353530][ T4227] usb 4-1: Product: syz [ 173.353556][ T4227] usb 4-1: Manufacturer: syz [ 173.353572][ T4227] usb 4-1: SerialNumber: syz [ 173.433003][ T9662] netlink: 'syz.2.2496': attribute type 1 has an invalid length. [ 173.481655][ T9664] __nla_validate_parse: 21 callbacks suppressed [ 173.481677][ T9664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2495'. [ 173.504820][ T4227] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 173.621524][ T4227] usb 4-1: USB disconnect, device number 11 [ 173.633790][ T9] usb 4-1: Failed to submit usb control message: -71 [ 173.651648][ T9] usb 4-1: unable to send the bmi data to the device: -71 [ 173.654856][ T9655] loop4: detected capacity change from 0 to 32768 [ 173.677372][ T9671] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2498'. [ 173.693621][ T9] usb 4-1: unable to get target info from device [ 173.704317][ T9] usb 4-1: could not get target info (-71) [ 173.713951][ T9] usb 4-1: could not probe fw (-71) [ 173.780021][ T9655] jfs_strtoUCS: char2uni returned -22. [ 173.828979][ T9655] charset = cp864, char = 0x9f [ 174.120409][ T9691] loop2: detected capacity change from 0 to 1024 [ 174.305548][ T9691] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 174.360578][ T9691] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 174.455276][ T7708] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 174.503034][ T144] hfsplus: b-tree write err: -5, ino 25 [ 174.534040][ T144] hfsplus: b-tree write err: -5, ino 4 [ 174.551106][ T144] hfsplus: b-tree write err: -5, ino 2 [ 174.644107][ T9714] netdevsim netdevsim3: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 175.197626][ T9697] loop1: detected capacity change from 0 to 32768 [ 175.288655][ T9697] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 scanned by syz.1.2511 (9697) [ 175.353824][ T9697] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 175.383240][ T9697] BTRFS info (device loop1): enabling ssd optimizations [ 175.409542][ T9697] BTRFS info (device loop1): not using ssd optimizations [ 175.455227][ T9697] BTRFS info (device loop1): turning off barriers [ 175.473071][ T9697] BTRFS info (device loop1): use no compression [ 175.491160][ T9697] BTRFS info (device loop1): using free space tree [ 175.503682][ T9069] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 175.528447][ T9697] BTRFS info (device loop1): has skinny extents [ 175.666570][ T9780] x_tables: duplicate entry at hook 2 [ 175.883842][ T9069] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.933648][ T9069] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 176.019199][ T9069] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 176.068195][ T9806] loop3: detected capacity change from 0 to 256 [ 176.080860][ T9069] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 176.122996][ T9069] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 176.160762][ T9069] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.182594][ T9069] usb 3-1: config 0 descriptor?? [ 176.225131][ T9806] FAT-fs (loop3): Directory bread(block 64) failed [ 176.252374][ T9806] FAT-fs (loop3): Directory bread(block 65) failed [ 176.283702][ T9806] FAT-fs (loop3): Directory bread(block 66) failed [ 176.285076][ T9069] hdpvr 3-1:0.0: Could not find bulk-in endpoint [ 176.292826][ T9806] FAT-fs (loop3): Directory bread(block 67) failed [ 176.331796][ T9069] hdpvr: probe of 3-1:0.0 failed with error -12 [ 176.342085][ T9806] FAT-fs (loop3): Directory bread(block 68) failed [ 176.344816][ T9813] loop4: detected capacity change from 0 to 256 [ 176.357190][ T9806] FAT-fs (loop3): Directory bread(block 69) failed [ 176.364408][ T144] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 176.382184][ T9806] FAT-fs (loop3): Directory bread(block 70) failed [ 176.395958][ T9806] FAT-fs (loop3): Directory bread(block 71) failed [ 176.404950][ T9806] FAT-fs (loop3): Directory bread(block 72) failed [ 176.411610][ T9806] FAT-fs (loop3): Directory bread(block 73) failed [ 176.588266][ T7708] usb 3-1: USB disconnect, device number 15 [ 177.068889][ T9796] loop0: detected capacity change from 0 to 32768 [ 177.190204][ T9796] ERROR: (device loop0): dbAllocAG: Corrupt dmapctl page [ 177.190204][ T9796] [ 177.228476][ T9796] ERROR: (device loop0): remounting filesystem as read-only [ 177.580294][ T9859] ipt_CLUSTERIP: bad local_nodes[1] 0 [ 177.758021][ T9866] loop3: detected capacity change from 0 to 1764 [ 178.223847][ T9914] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2610'. [ 178.529500][ T9936] delete_channel: no stack [ 178.823293][ T9951] xt_CT: No such helper "pptp" [ 178.848790][ T9961] loop3: detected capacity change from 0 to 764 [ 178.925394][ T4227] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 179.390048][ T9983] loop2: detected capacity change from 0 to 256 [ 179.515307][ T9983] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 179.570652][ T264] block nbd3: Attempted send on invalid socket [ 179.573032][ T9995] loop0: detected capacity change from 0 to 164 [ 179.577625][ T264] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 179.577978][ T9988] XFS (nbd3): SB validate failed with error -5. [ 179.623100][ T9983] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 179.657465][T10000] loop1: detected capacity change from 0 to 164 [ 179.794777][T10000] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 180.573645][ T9065] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 180.583203][ T9072] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 180.768192][T10050] netlink: 'syz.1.2672': attribute type 5 has an invalid length. [ 180.835016][ T9072] usb 1-1: Using ep0 maxpacket: 16 [ 180.953811][ T9072] usb 1-1: config 0 has no interfaces? [ 181.003687][ T9070] Bluetooth: hci0: command 0x0406 tx timeout [ 181.009809][ T9070] Bluetooth: hci1: command 0x0406 tx timeout [ 181.032612][ T9070] Bluetooth: hci2: command 0x0406 tx timeout [ 181.042762][ T9070] Bluetooth: hci3: command 0x0406 tx timeout [ 181.058765][ T9070] Bluetooth: hci4: command 0x0406 tx timeout [ 181.113823][ T9072] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 181.133426][ T9065] usb 3-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 181.142884][ T9065] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.161894][ T9072] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.183651][ T9065] usb 3-1: Product: syz [ 181.187917][ T9065] usb 3-1: Manufacturer: syz [ 181.192902][ T9065] usb 3-1: SerialNumber: syz [ 181.198305][ T9072] usb 1-1: Product: syz [ 181.202507][ T9072] usb 1-1: Manufacturer: syz [ 181.223106][ T9072] usb 1-1: SerialNumber: syz [ 181.246909][ T9065] usb 3-1: config 0 descriptor?? [ 181.256195][ T9072] r8152-cfgselector 1-1: config 0 descriptor?? [ 181.313427][ T9065] usb 3-1: selecting invalid altsetting 3 [ 181.353876][ T9065] comedi comedi5: could not set alternate setting 3 in high speed [ 181.361766][ T9065] usbdux 3-1:0.0: driver 'usbdux' failed to auto-configure device. [ 181.406790][ T9065] usbdux: probe of 3-1:0.0 failed with error -22 [ 181.415335][ T4230] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 181.521092][ T9072] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 181.540602][T10022] udc-core: couldn't find an available UDC or it's busy [ 181.542573][ T145] usb 1-1: config 0 descriptor?? [ 181.574028][T10022] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 181.599445][ T4227] usb 3-1: USB disconnect, device number 16 [ 181.620097][T10098] netlink: 'syz.1.2696': attribute type 3 has an invalid length. [ 181.653613][T10098] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.2696'. [ 181.725188][ T9072] usb 1-1: USB disconnect, device number 14 [ 181.733772][ T145] usb 1-1: can't set config #0, error -71 [ 181.798677][T10109] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2702'. [ 182.092111][T10123] befs: (loop1): No write support. Marking filesystem read-only [ 182.132922][T10123] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 182.185487][T10123] befs: (loop1): unable to read superblock [ 182.535996][T10154] netlink: 'syz.4.2724': attribute type 1 has an invalid length. [ 182.707020][ T264] block nbd1: Attempted send on invalid socket [ 182.713323][ T264] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 182.735792][T10167] hpfs: hpfs_map_sector(): read error [ 183.252052][T10213] tmpfs: Bad value for 'mpol' [ 183.492943][T10224] netlink: 'syz.4.2759': attribute type 1 has an invalid length. [ 183.643743][ T9072] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 183.663860][ T7708] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 183.992661][T10214] loop0: detected capacity change from 0 to 32768 [ 184.005208][ T9072] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 184.023936][ T9072] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.054804][ T9072] usb 3-1: config 0 has no interface number 0 [ 184.060965][ T9072] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 184.071798][T10214] [ 184.071798][T10214] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 184.071798][T10214] [ 184.072657][ T9072] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 184.093756][ T9072] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 184.103687][ T7708] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 184.239521][ T4230] [ 184.239521][ T4230] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 184.239521][ T4230] [ 184.270848][ T4230] [ 184.270848][ T4230] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 184.270848][ T4230] [ 184.283882][ T9072] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 184.292787][ T4185] [ 184.292787][ T4185] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 184.292787][ T4185] [ 184.313593][ T9072] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.321025][ T277] [ 184.321025][ T277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 184.321025][ T277] [ 184.333157][ T7708] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 184.341294][ T9072] usb 3-1: Product: syz [ 184.346956][ T9072] usb 3-1: Manufacturer: syz [ 184.351312][ T7708] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.351571][ T9072] usb 3-1: SerialNumber: syz [ 184.370052][ T4185] [ 184.370052][ T4185] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 184.370052][ T4185] [ 184.394861][ T7708] usb 2-1: Product: syz [ 184.399096][ T7708] usb 2-1: Manufacturer: syz [ 184.410705][ T9072] usb 3-1: config 0 descriptor?? [ 184.423891][ T7708] usb 2-1: SerialNumber: syz [ 184.437065][ T7708] usb 2-1: config 0 descriptor?? [ 184.505595][ T7708] powermate: probe of 2-1:0.0 failed with error -5 [ 184.573726][ T4227] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 184.710144][ T13] usb 2-1: USB disconnect, device number 12 [ 184.809678][T10275] ipt_ECN: cannot use operation on non-tcp rule [ 184.877641][T10279] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2784'. [ 184.901226][ T7708] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 184.929485][ T9072] usb 3-1: USB disconnect, device number 17 [ 185.126654][T10281] loop0: detected capacity change from 0 to 32768 [ 185.134041][ T4227] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=30.00 [ 185.143143][ T4227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.151985][ T4227] usb 4-1: Product: syz [ 185.156265][ T4227] usb 4-1: Manufacturer: syz [ 185.160883][ T4227] usb 4-1: SerialNumber: syz [ 185.179531][T10281] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.2785 (10281) [ 185.199435][T10281] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 185.209552][T10281] BTRFS info (device loop0): using free space tree [ 185.219425][T10281] BTRFS info (device loop0): has skinny extents [ 185.303962][ T7708] usb 5-1: config 8 has an invalid interface number: 80 but max is 0 [ 185.322307][ T7708] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 185.342717][ T7708] usb 5-1: config 8 has no interface number 0 [ 185.348989][ T7708] usb 5-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0xE7, skipping [ 185.369943][ T7708] usb 5-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 185.401370][ T7708] usb 5-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 185.417659][ T7708] usb 5-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 185.451378][ T7708] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 185.470185][T10281] BTRFS info (device loop0): enabling ssd optimizations [ 185.471943][ T7708] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.544417][ T7708] usb 5-1: NFC: intf ffff88802aa90000 id ffffffff8cb63280 [ 185.708739][T10307] loop2: detected capacity change from 0 to 512 [ 185.816280][T10307] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.2788: bg 0: block 5: invalid block bitmap [ 185.827423][ T9072] usb 5-1: USB disconnect, device number 16 [ 185.838532][T10307] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 185.863572][T10307] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.2788: invalid indirect mapped block 3 (level 2) [ 185.883974][T10307] EXT4-fs (loop2): 1 orphan inode deleted [ 185.889898][T10307] EXT4-fs (loop2): 1 truncate cleaned up [ 185.903558][T10307] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,,errors=continue. Quota mode: writeback. [ 186.024239][T10312] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2791'. [ 186.445094][ T4227] r8152-cfgselector 4-1: Unknown version 0x0000 [ 186.513838][ T4227] r8152-cfgselector 4-1: Unknown version 0x0000 [ 186.543675][ T4227] r8153_ecm: probe of 4-1:1.0 failed with error -71 [ 186.600273][ T4227] r8152-cfgselector 4-1: Unknown version 0x0000 [ 186.633691][ T4227] r8152-cfgselector 4-1: Unknown version 0x0000 [ 186.651285][ T4227] r8152-cfgselector 4-1: USB disconnect, device number 12 [ 186.833622][T10319] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 187.022594][T10353] loop0: detected capacity change from 0 to 4096 [ 187.056017][T10359] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 187.090647][T10353] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 187.103982][T10353] EXT4-fs (loop0): Test dummy encryption mode enabled [ 187.164766][T10353] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000000000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 187.210617][T10319] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.224129][T10319] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 187.235628][T10319] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 187.249034][ T145] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 187.259155][T10319] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 187.283589][T10319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.304346][T10319] usb 3-1: config 0 descriptor?? [ 187.324195][T10334] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 187.454412][T10376] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2817'. [ 187.495507][T10376] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2817'. [ 187.631732][T10386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2824'. [ 187.653999][ T9070] usb 3-1: USB disconnect, device number 18 [ 187.914217][T10404] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2833'. [ 187.941657][T10404] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2833'. [ 187.987075][T10404] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2833'. [ 188.034271][T10404] netlink: 'syz.4.2833': attribute type 8 has an invalid length. [ 188.213089][T10421] loop0: detected capacity change from 0 to 256 [ 188.251821][T10425] xt_hashlimit: max too large, truncated to 1048576 [ 188.259313][T10425] xt_hashlimit: overflow, try lower: 137438953472/8 [ 188.385772][T10435] netlink: 'syz.1.2848': attribute type 12 has an invalid length. [ 188.524193][ T4190] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 188.565128][ T4281] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 188.762270][T10465] netlink: 'syz.1.2862': attribute type 1 has an invalid length. [ 188.782158][T10465] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.2862'. [ 188.795330][T10465] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2862'. [ 188.933830][ T4190] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 188.996105][T10481] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 189.087522][T10489] netlink: 9412 bytes leftover after parsing attributes in process `syz.4.2873'. [ 189.223679][ T4190] usb 1-1: Using ep0 maxpacket: 32 [ 189.308770][T10499] loop4: detected capacity change from 0 to 8 [ 189.353557][ T9070] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 189.396157][T10501] netlink: 'syz.2.2881': attribute type 5 has an invalid length. [ 189.405070][ T4190] usb 1-1: unable to get BOS descriptor or descriptor too short [ 189.479169][T10499] SQUASHFS error: Unable to read inode 0xa7 [ 189.514921][ T4190] usb 1-1: config 3 has an invalid interface number: 223 but max is 1 [ 189.523172][ T4190] usb 1-1: config 3 has an invalid interface number: 25 but max is 1 [ 189.575620][ T4190] usb 1-1: config 3 has an invalid interface number: 223 but max is 1 [ 189.603763][ T4190] usb 1-1: config 3 has no interface number 0 [ 189.621990][ T4190] usb 1-1: config 3 has no interface number 1 [ 189.628224][ T4190] usb 1-1: config 3 interface 25 altsetting 6 has an invalid endpoint with address 0x80, skipping [ 189.644896][ T4190] usb 1-1: too many endpoints for config 3 interface 223 altsetting 155: 82, using maximum allowed: 30 [ 189.671451][T10512] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2888'. [ 189.678530][ T4190] usb 1-1: config 3 interface 223 altsetting 155 has 0 endpoint descriptors, different from the interface descriptor's value: 82 [ 189.701496][ T4190] usb 1-1: config 3 interface 223 has no altsetting 1 [ 189.722013][ T4190] usb 1-1: config 3 interface 25 has no altsetting 0 [ 189.743747][ T9070] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 189.752263][ T9070] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 189.799617][ T9070] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 189.838918][ T9070] usb 4-1: config 220 has no interface number 2 [ 189.858147][ T9070] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 189.899410][ T9070] usb 4-1: config 220 interface 0 has no altsetting 0 [ 189.913864][ T4190] usb 1-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=2a.c0 [ 189.922743][ T9070] usb 4-1: config 220 interface 76 has no altsetting 0 [ 189.930844][ T9070] usb 4-1: config 220 interface 1 has no altsetting 0 [ 189.936915][ T4190] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.976901][ T4190] usb 1-1: Product: syz [ 189.981744][ T4190] usb 1-1: Manufacturer: syz [ 189.997238][ T4190] usb 1-1: SerialNumber: syz [ 190.103893][ T9070] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 190.115056][ T9070] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.134676][ T9070] usb 4-1: Product: syz [ 190.138901][ T9070] usb 4-1: Manufacturer: syz [ 190.158991][ T9070] usb 4-1: SerialNumber: syz [ 190.381584][ T4190] usb 1-1: USB disconnect, device number 15 [ 190.534050][ T9070] usb 4-1: selecting invalid altsetting 0 [ 190.540282][ T9070] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 190.557270][ T9070] usb 4-1: No valid video chain found. [ 190.644842][ T9070] usb 4-1: selecting invalid altsetting 0 [ 190.650700][ T9070] usbtest: probe of 4-1:220.1 failed with error -22 [ 190.677793][ T9070] usb 4-1: USB disconnect, device number 13 [ 190.813651][ T7708] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 190.889645][T10546] loop2: detected capacity change from 0 to 32768 [ 190.978583][T10546] JBD2: Ignoring recovery information on journal [ 191.053756][T10546] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 191.083695][ T7708] usb 5-1: Using ep0 maxpacket: 32 [ 191.213693][ T7708] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 255, changing to 11 [ 191.247199][ T4192] ocfs2: Unmounting device (7,2) on (node local) [ 191.254480][ T7708] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 59391, setting to 1024 [ 191.391434][T10588] lo speed is unknown, defaulting to 1000 [ 191.503854][ T7708] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 191.509830][T10594] loop0: detected capacity change from 0 to 1024 [ 191.512963][ T7708] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.512989][ T7708] usb 5-1: Product: syz [ 191.513006][ T7708] usb 5-1: Manufacturer: syz [ 191.582320][ T7708] usb 5-1: SerialNumber: syz [ 191.597180][ T7708] usb 5-1: config 0 descriptor?? [ 191.613910][T10554] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 191.626547][T10594] EXT4-fs (loop0): Ignoring removed bh option [ 191.646777][ T7708] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input13 [ 191.705811][T10594] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,dioread_lock,barrier=0x0000000000000404,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,i_version,bh,init_itable,. Quota mode: none. [ 191.736179][T10596] loop2: detected capacity change from 0 to 4096 [ 191.781064][T10596] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 191.903202][ T7708] usb 5-1: USB disconnect, device number 17 [ 191.912443][T10596] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 191.998643][T10610] openvswitch: netlink: Message has 8 unknown bytes. [ 192.063126][T10610] openvswitch: netlink: Actions may not be safe on all matching packets [ 192.673708][T10319] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 193.024025][ T144] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 193.036380][T10319] usb 2-1: config 4 has an invalid interface number: 128 but max is 0 [ 193.067746][T10319] usb 2-1: config 4 has no interface number 0 [ 193.087791][T10319] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 193.131493][T10319] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.190623][T10678] netlink: 'syz.0.2966': attribute type 21 has an invalid length. [ 193.193685][T10319] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 193.210747][T10678] IPv6: NLM_F_CREATE should be specified when creating new route [ 193.238108][T10319] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.300925][T10674] loop2: detected capacity change from 0 to 4096 [ 193.304730][T10319] hub 2-1:4.128: USB hub found [ 193.435984][T10690] loop0: detected capacity change from 0 to 1024 [ 193.523704][T10319] hub 2-1:4.128: 27 ports detected [ 193.529068][T10319] hub 2-1:4.128: Using single TT (err -22) [ 193.559536][T10319] hub 2-1:4.128: insufficient power available to use all downstream ports [ 193.644226][T10690] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 193.668940][T10690] hfsplus: xattr searching failed [ 193.684523][T10690] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 193.715785][T10690] hfsplus: xattr searching failed [ 193.753691][T10319] hub 2-1:4.128: hub_hub_status failed (err = -71) [ 193.760270][T10319] hub 2-1:4.128: config failed, can't get hub status (err -71) [ 193.810704][ T145] hfsplus: b-tree write err: -5, ino 25 [ 193.832837][ T145] hfsplus: b-tree write err: -5, ino 4 [ 193.856193][ T145] hfsplus: b-tree write err: -5, ino 2 [ 193.865049][T10319] usb 2-1: USB disconnect, device number 13 [ 193.893850][ T145] hfsplus: b-tree write err: -5, ino 20 [ 194.020387][T10710] netlink: 'syz.3.2983': attribute type 21 has an invalid length. [ 194.063869][T10710] __nla_validate_parse: 2 callbacks suppressed [ 194.063887][T10710] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2983'. [ 194.117448][T10716] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2984'. [ 194.138331][T10710] netlink: 'syz.3.2983': attribute type 4 has an invalid length. [ 194.153178][T10716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2984'. [ 194.156485][T10710] netlink: 'syz.3.2983': attribute type 3 has an invalid length. [ 194.203744][T10710] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2983'. [ 194.292259][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.298628][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.306645][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 194.306836][ T4227] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 194.440934][T10724] loop4: detected capacity change from 0 to 4096 [ 194.449174][T10722] loop0: detected capacity change from 0 to 4096 [ 194.568548][T10724] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 194.586462][T10722] ntfs3: loop0: Failed to load $Extend. [ 194.610963][T10724] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 194.833051][T10743] netlink: 'syz.3.2998': attribute type 1 has an invalid length. [ 195.070624][T10759] IPv6: NLM_F_REPLACE set, but no existing node found! [ 195.101357][T10757] netlink: 288 bytes leftover after parsing attributes in process `syz.3.3006'. [ 195.354034][T10777] sctp: [Deprecated]: syz.3.3015 (pid 10777) Use of int in maxseg socket option. [ 195.354034][T10777] Use struct sctp_assoc_value instead [ 195.572103][T10793] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0 [ 195.693408][T10802] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3024'. [ 195.742527][T10802] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3024'. [ 195.772834][T10802] netlink: 'syz.4.3024': attribute type 5 has an invalid length. [ 195.811279][T10802] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3024'. [ 195.820661][T10807] netlink: 'syz.0.3029': attribute type 49 has an invalid length. [ 195.851948][T10809] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3030'. [ 196.221148][T10832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3042'. [ 196.439179][T10847] xt_hashlimit: size too large, truncated to 1048576 [ 196.602147][T10858] netlink: 'syz.4.3055': attribute type 25 has an invalid length. [ 196.644944][T10858] netlink: 'syz.4.3055': attribute type 3 has an invalid length. [ 196.720797][T10862] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 196.910308][T10870] netlink: 'syz.1.3061': attribute type 1 has an invalid length. [ 197.742472][T10918] loop2: detected capacity change from 0 to 1024 [ 197.906950][T10918] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #3: block 1: comm syz.2.3085: lblock 1 mapped to illegal pblock 1 (length 1) [ 197.990042][T10918] Quota error (device loop2): write_blk: dquota write failed [ 198.041321][T10918] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 198.091849][T10918] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.3085: Failed to acquire dquot type 0 [ 198.124673][T10918] EXT4-fs error (device loop2): ext4_free_blocks:6231: comm syz.2.3085: Freeing blocks not in datazone - block = 0, count = 4096 [ 198.195581][T10918] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.3085: Invalid inode bitmap blk 0 in block_group 0 [ 198.221782][T10918] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 198.230749][T10943] validate_nla: 1 callbacks suppressed [ 198.230743][ T156] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 198.230765][T10943] netlink: 'syz.1.3097': attribute type 29 has an invalid length. [ 198.236829][T10918] EXT4-fs (loop2): 1 orphan inode deleted [ 198.322184][ T156] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 198.352615][T10918] EXT4-fs (loop2): mounted filesystem without journal. Opts: ; noinit_itable,discard,data_err=ignore,max_batch_time=0x0000000000000006,journal_dev=0x0000000000000006,nolazytime,nobarrier,,errors=continue. Quota mode: writeback. [ 198.393973][ T156] EXT4-fs error (device loop2): ext4_release_dquot:6272: comm kworker/u4:3: Failed to release dquot type 0 [ 198.775180][ T144] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 198.970634][T10992] loop4: detected capacity change from 0 to 512 [ 199.113313][T10992] EXT4-fs (loop4): Ignoring removed bh option [ 199.121914][T10992] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 199.121914][T10992] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 199.121914][T10992] [ 199.203414][T10992] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2759: inode #11: comm syz.4.3119: corrupted xattr block 95 [ 199.305694][T10992] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2809: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 199.316132][T11010] loop1: detected capacity change from 0 to 1024 [ 199.343580][ T7708] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 199.345096][T10992] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.3119: bg 0: block 7: invalid block bitmap [ 199.432027][T11010] EXT4-fs (loop1): Ignoring removed oldalloc option [ 199.468920][T11010] EXT4-fs (loop1): Ignoring removed bh option [ 199.480723][T10992] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 199.517182][T10992] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2925: inode #11: comm syz.4.3119: corrupted xattr block 95 [ 199.560593][T11010] EXT4-fs (loop1): mounted filesystem without journal. Opts: auto_da_alloc,nodioread_nolock,noquota,oldalloc,errors=remount-ro,nodioread_nolock,bh,. Quota mode: none. [ 199.591461][T11010] ext4 filesystem being mounted at /623/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.613666][ T7708] usb 1-1: Using ep0 maxpacket: 8 [ 199.639324][T10992] EXT4-fs warning (device loop4): ext4_evict_inode:304: xattr delete (err -117) [ 199.692991][T10992] EXT4-fs (loop4): 1 orphan inode deleted [ 199.699151][T10992] EXT4-fs (loop4): mounted filesystem without journal. Opts: bh,noacl,,errors=continue. Quota mode: none. [ 199.720303][T10992] EXT4-fs error (device loop4): __ext4_iget:4919: inode #12: block 2: comm syz.4.3119: invalid block [ 199.755784][ T7708] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 199.763013][T11010] EXT4-fs error (device loop1): ext4_get_first_dir_block:3619: inode #12: comm syz.1.3128: directory missing '..' [ 199.772586][ T7708] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.836234][ T7708] usb 1-1: config 0 has no interface number 0 [ 199.851889][T11010] EXT4-fs (loop1): Remounting filesystem read-only [ 199.852474][ T7708] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 199.889990][ T7708] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 199.901863][ T7708] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 199.954592][ T7708] usb 1-1: config 0 interface 52 has no altsetting 0 [ 200.046923][T11033] vxcan1 speed is unknown, defaulting to 1000 [ 200.075223][ T144] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 200.109889][ T7708] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 200.121256][T11033] vxcan1 speed is unknown, defaulting to 1000 [ 200.148217][ T7708] usb 1-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 200.164439][T11033] vxcan1 speed is unknown, defaulting to 1000 [ 200.185062][ T7708] usb 1-1: Product: syz [ 200.189308][ T7708] usb 1-1: SerialNumber: syz [ 200.260900][ T7708] usb 1-1: config 0 descriptor?? [ 200.334011][T11047] device geneve2 entered promiscuous mode [ 200.544786][ T7708] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 200.563619][T11033] infiniband syz2: set active [ 200.568552][T11033] infiniband syz2: added vxcan1 [ 200.590856][ T7708] synaptics_usb: probe of 1-1:0.52 failed with error -5 [ 200.616401][ T7708] vxcan1 speed is unknown, defaulting to 1000 [ 200.672582][T11033] RDS/IB: syz2: added [ 200.682706][T11033] smc: adding ib device syz2 with port count 1 [ 200.691490][T11033] smc: ib device syz2 port 1 has pnetid [ 200.698013][ T9070] vxcan1 speed is unknown, defaulting to 1000 [ 200.705803][T11033] vxcan1 speed is unknown, defaulting to 1000 [ 200.796711][ T9070] usb 1-1: USB disconnect, device number 16 [ 200.964418][T11079] __nla_validate_parse: 3 callbacks suppressed [ 200.964434][T11079] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3161'. [ 200.991516][T11080] netlink: 'syz.1.3160': attribute type 1 has an invalid length. [ 201.011331][T11079] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3161'. [ 201.023378][T11079] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3161'. [ 201.035674][T11080] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3160'. [ 201.188179][T11033] vxcan1 speed is unknown, defaulting to 1000 [ 201.286356][T11093] device ip6gretap3 entered promiscuous mode [ 201.656261][T11111] netlink: 'syz.1.3176': attribute type 21 has an invalid length. [ 201.693824][T11111] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3176'. [ 201.713887][T11115] netlink: 136 bytes leftover after parsing attributes in process `syz.3.3179'. [ 201.740527][T11033] vxcan1 speed is unknown, defaulting to 1000 [ 201.749082][T11115] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3179'. [ 201.791040][T11115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3179'. [ 201.827199][T11115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3179'. [ 202.063627][ T1111] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 202.074008][T11033] vxcan1 speed is unknown, defaulting to 1000 [ 202.332295][T11144] netlink: 'syz.1.3193': attribute type 13 has an invalid length. [ 202.381205][T11144] rdma_rxe: ignoring netdev event = 9 for lo [ 202.461400][T11033] vxcan1 speed is unknown, defaulting to 1000 [ 202.468063][ T1111] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 202.481002][ T1111] usb 1-1: config 0 has no interface number 0 [ 202.673755][ T1111] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 202.682859][ T1111] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.703529][ T1111] usb 1-1: Product: syz [ 202.707893][ T1111] usb 1-1: Manufacturer: syz [ 202.712552][ T1111] usb 1-1: SerialNumber: syz [ 202.739495][ T1111] usb 1-1: config 0 descriptor?? [ 202.790378][T11164] mip6: mip6_destopt_init_state: spi is not 0: 1114112 [ 203.003928][ T1111] asix: probe of 1-1:0.251 failed with error -71 [ 203.058556][ T1111] usb 1-1: USB disconnect, device number 17 [ 203.095675][T11184] netlink: 'syz.3.3213': attribute type 3 has an invalid length. [ 203.104609][ T7708] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 203.241882][T11189] netlink: 'syz.3.3216': attribute type 1 has an invalid length. [ 203.275352][T11189] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3216'. [ 203.316733][T11189] NCSI netlink: No device for ifindex 0 [ 203.373561][ T7708] usb 5-1: Using ep0 maxpacket: 8 [ 203.703965][ T7708] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 203.713108][ T7708] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.775350][ T7708] usb 5-1: Product: syz [ 203.779590][ T7708] usb 5-1: Manufacturer: syz [ 203.815176][ T7708] usb 5-1: SerialNumber: syz [ 203.844765][ T7708] usb 5-1: config 0 descriptor?? [ 203.876190][T11225] netlink: 'syz.1.3233': attribute type 10 has an invalid length. [ 203.895450][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 203.970028][T11225] device vxcan1 entered promiscuous mode [ 203.979132][T11225] team0: Device vxcan1 is of different type [ 204.123752][ T7708] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 204.343710][ T7708] usb write operation failed. (-71) [ 204.373977][ T7708] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 204.389905][ T7708] dvbdev: DVB: registering new adapter (Terratec H7) [ 204.428261][ T7708] usb 5-1: media controller created [ 204.483601][ T7708] usb read operation failed. (-71) [ 204.503636][ T7708] usb write operation failed. (-71) [ 204.522708][ T7708] dvb_usb_az6007: probe of 5-1:0.0 failed with error -5 [ 204.584818][ T7708] usb 5-1: USB disconnect, device number 18 [ 204.721230][T11259] x_tables: duplicate underflow at hook 4 [ 205.172033][T11279] loop4: detected capacity change from 0 to 1024 [ 205.244232][ T144] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 205.347107][T11279] EXT4-fs (loop4): Ignoring removed bh option [ 205.353381][T11279] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 205.353381][T11279] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 205.353381][T11279] [ 205.530797][T11279] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,noload,barrier=0x0000000000000804,nolazytime,abort,lazytime,grpquota,stripe=0x0000000000000005,bh,init_itable,nouser_xattr,,errors=continue. Quota mode: writeback. [ 206.109722][T11332] __nla_validate_parse: 4 callbacks suppressed [ 206.109738][T11332] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3285'. [ 206.194816][ T4190] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 206.453842][ T4190] usb 4-1: Using ep0 maxpacket: 16 [ 206.593917][ T4190] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 52, changing to 7 [ 206.612658][ T4190] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 9272, setting to 1024 [ 206.624113][T11354] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3296'. [ 206.766151][T11364] 0xfffffffffffffffd-0x000000020000 : "" [ 206.772501][T11364] mtd: partition "" is out of reach -- disabled [ 206.808494][T11364] ftl_cs: FTL header not found. [ 206.820313][ T7708] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 206.843978][ T4190] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 206.865048][T11369] tipc: Trying to set illegal importance in message [ 206.870085][ T4190] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.906488][ T4190] usb 4-1: Product: syz [ 206.917006][ T4190] usb 4-1: Manufacturer: syz [ 206.945397][ T4190] usb 4-1: SerialNumber: syz [ 206.964741][ T4190] usb 4-1: config 0 descriptor?? [ 207.061037][ T4190] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 207.123832][ T7708] usb 5-1: Using ep0 maxpacket: 16 [ 207.229141][ T4190] usb 4-1: USB disconnect, device number 14 [ 207.235958][ T145] usb 4-1: Failed to submit usb control message: -71 [ 207.243261][ T145] usb 4-1: unable to send the bmi data to the device: -71 [ 207.263852][ T7708] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 207.285155][ T145] usb 4-1: unable to get target info from device [ 207.303822][ T145] usb 4-1: could not get target info (-71) [ 207.310667][ T145] usb 4-1: could not probe fw (-71) [ 207.418638][ T26] audit: type=1107 audit(1785899823.804:12): pid=11393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=' [ 207.418638][ T26] ,' [ 207.483776][ T7708] usb 5-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 207.499669][ T7708] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.528527][ T7708] usb 5-1: Product: syz [ 207.533100][ T7708] usb 5-1: Manufacturer: syz [ 207.548807][ T7708] usb 5-1: SerialNumber: syz [ 207.569179][T11400] i2c i2c-0: Invalid block write size 253 [ 207.589681][ T7708] usb 5-1: config 0 descriptor?? [ 207.665231][ T7708] qcserial 5-1:0.0: Qualcomm USB modem converter detected [ 207.696350][ T7708] usb 5-1: Qualcomm USB modem converter now attached to ttyUSB0 [ 207.856837][T11409] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3321'. [ 207.901799][ T7708] usb 5-1: USB disconnect, device number 19 [ 207.939771][ T7708] qcserial ttyUSB0: Qualcomm USB modem converter now disconnected from ttyUSB0 [ 207.940016][T11409] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3321'. [ 207.970929][ T7708] qcserial 5-1:0.0: device disconnected [ 207.992271][T11387] loop1: detected capacity change from 0 to 32768 [ 208.028312][T11409] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3321'. [ 208.040978][T11409] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3321'. [ 208.072851][T11387] XFS (loop1): Mounting V5 Filesystem [ 208.192303][T11387] XFS (loop1): Ending clean mount [ 208.230847][T11387] XFS (loop1): EXPERIMENTAL online scrub feature in use. Use at your own risk! [ 208.256303][T11432] loop3: detected capacity change from 0 to 256 [ 208.280425][ T4189] XFS (loop1): Unmounting Filesystem [ 208.325670][ T4190] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 208.343813][ T4227] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 208.633804][ T4227] usb 1-1: Using ep0 maxpacket: 8 [ 208.773857][ T4190] usb 3-1: unable to get BOS descriptor or descriptor too short [ 208.781863][ T4227] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 208.812717][ T4227] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 208.843248][ T4227] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 208.869735][ T4227] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 208.882169][ T4227] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 208.892525][ T4227] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 208.901999][ T4190] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 208.912205][ T4227] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.920404][ T4190] usb 3-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 208.936071][ T4227] usb 1-1: config 0 descriptor?? [ 208.941177][ T4190] usb 3-1: config 1 interface 0 has no altsetting 1 [ 208.989681][ T4197] Bluetooth: hci5: urb ffff8880252a4a00 submission failed (90) [ 209.005838][ T145] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 209.069742][T11458] netlink: 'syz.1.3342': attribute type 9 has an invalid length. [ 209.134189][ T4190] usb 3-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 209.148496][ T4190] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.156865][T11458] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3342'. [ 209.193778][ T4190] usb 3-1: Product: syz [ 209.198004][ T4190] usb 3-1: Manufacturer: syz [ 209.229083][ T4190] usb 3-1: SerialNumber: syz [ 209.250439][ T4227] usb 1-1: USB disconnect, device number 18 [ 209.310593][ T4190] smsusb:smsusb_probe: board id=8, interface number 0 [ 209.503868][ T4190] smsusb:smsusb_probe: usb_set_interface failed, rc -71 [ 209.510931][ T4190] smsusb: probe of 3-1:1.0 failed with error -71 [ 209.545770][ T4190] usb 3-1: USB disconnect, device number 19 [ 209.853647][ T4227] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 209.935185][T11496] netlink: 'syz.0.3360': attribute type 30 has an invalid length. [ 209.992516][T11470] loop4: detected capacity change from 0 to 32768 [ 210.109587][T11470] diRead: diIAGRead returned -5 [ 210.116511][ T4227] usb 2-1: Using ep0 maxpacket: 32 [ 210.171149][T11470] jfs_lookup: iget failed on inum 1048352 [ 210.233808][ T4227] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 210.258716][ T4227] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 210.284595][ T4227] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 210.313562][ T4227] usb 2-1: config 1 has no interface number 0 [ 210.340116][ T4227] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 210.360591][ T4227] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 210.403570][ T4227] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 210.453319][ T4227] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.536693][ T4227] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 210.553935][T11517] netlink: 'syz.3.3371': attribute type 1 has an invalid length. [ 210.656087][T11524] No such timeout policy "syz0" [ 210.738293][T11528] xt_l2tp: wrong L2TP version: 0 [ 210.754488][ T4227] snd_usb_pod 2-1:1.1: invalid control EP [ 210.760410][ T4227] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 210.793642][ T4227] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 210.821804][ T4227] snd_usb_pod: probe of 2-1:1.1 failed with error -22 [ 210.929108][ T144] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 210.996287][T11535] loop4: detected capacity change from 0 to 2048 [ 211.014587][T11539] xt_addrtype: ipv6 does not support BROADCAST matching [ 211.024636][ T9066] usb 2-1: USB disconnect, device number 14 [ 211.131170][T11549] openvswitch: netlink: Missing valid actions attribute. [ 211.164365][T11549] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.540715][T11575] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 211.588886][T11580] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 211.907316][T11600] netlink: 'syz.4.3410': attribute type 3 has an invalid length. [ 212.123838][T11617] loop3: detected capacity change from 0 to 8 [ 212.177464][T11610] loop4: detected capacity change from 0 to 2048 [ 212.195989][T11617] squashfs: Bad value for 'errors' [ 212.200343][T11622] xt_CT: You must specify a L4 protocol and not use inversions on it [ 212.277927][T11610] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 212.439818][T11636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3428'. [ 212.468884][T11636] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3428'. [ 212.863709][ T4227] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 212.913586][T11670] netlink: 'syz.3.3445': attribute type 1 has an invalid length. [ 213.133564][ T4227] usb 3-1: Using ep0 maxpacket: 32 [ 213.256473][T11691] comedi comedi3: aio_aio12_8: I/O port conflict (0x7,32) [ 213.355942][T11696] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3458'. [ 213.433742][ T4227] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 213.474095][ T4227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.484002][ T4227] usb 3-1: Product: syz [ 213.488270][ T4227] usb 3-1: Manufacturer: syz [ 213.509681][ T4227] usb 3-1: SerialNumber: syz [ 213.541990][ T4227] usb 3-1: config 0 descriptor?? [ 213.625813][ T4227] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 214.073652][ T4227] gspca_topro: reg_w err -71 [ 214.119035][ T4227] gspca_topro: Sensor soi763a [ 214.163770][ T4227] usb 3-1: USB disconnect, device number 20 [ 214.213051][T11722] netlink: 'syz.0.3471': attribute type 1 has an invalid length. [ 214.330485][T11729] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3474'. [ 214.333741][T11722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3471'. [ 214.359317][T11729] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3474'. [ 214.376470][T11682] loop3: detected capacity change from 0 to 32768 [ 214.539434][T11682] ERROR: (device loop3): dbFindCtl: Corrupt dmapctl page [ 214.539434][T11682] [ 214.557937][T11682] ERROR: (device loop3): remounting filesystem as read-only [ 214.587521][T11682] ialloc: diAlloc returned -5! [ 214.795596][ T156] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 214.876177][T11753] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3487'. [ 215.243560][T10318] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 215.284151][T11778] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3498'. [ 215.342952][T11778] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3498'. [ 215.393611][T11778] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3498'. [ 215.490801][T11790] netlink: zone id is out of range [ 215.581996][T11796] netlink: 'syz.4.3505': attribute type 1 has an invalid length. [ 215.613768][T10318] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 215.632709][T11796] netlink: 'syz.4.3505': attribute type 1 has an invalid length. [ 215.661469][T10318] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 215.853815][T10318] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 215.893604][T10318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.901843][T10318] usb 3-1: Product: syz [ 215.946957][T10318] usb 3-1: Manufacturer: syz [ 215.951621][T10318] usb 3-1: SerialNumber: syz [ 216.295789][T10318] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 216.310015][T10318] usb 3-1: USB disconnect, device number 21 [ 216.433690][ T4227] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 216.436052][T11845] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 216.684557][ T4230] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 217.012553][ T4227] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.10 [ 217.033571][ T4227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.041648][ T4227] usb 4-1: Product: syz [ 217.074072][ T4227] usb 4-1: Manufacturer: syz [ 217.079045][ T4227] usb 4-1: SerialNumber: syz [ 217.097694][T11879] loop1: detected capacity change from 0 to 1024 [ 217.134668][T11879] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 217.237803][T11879] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 217.258407][T11879] EXT4-fs (loop1): orphan cleanup on readonly fs [ 217.265470][T11879] EXT4-fs error (device loop1): ext4_free_blocks:6231: comm syz.1.3548: Freeing blocks not in datazone - block = 0, count = 4096 [ 217.280894][T11879] EXT4-fs (loop1): Remounting filesystem read-only [ 217.287673][T11879] EXT4-fs (loop1): 1 orphan inode deleted [ 217.293874][T11879] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,barrier=0x0000000000000000,barrier=0x0000000000000009,init_itable=0x0000000000007ab4,jqfmt=vfsv0,. Quota mode: writeback. [ 217.345067][T11879] EXT4-fs error (device loop1): ext4_search_dir:1549: inode #2: block 16: comm syz.1.3548: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 217.467655][ T4227] go7007: probe of 4-1:6.0 failed with error -12 [ 217.473607][ T9070] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 217.534292][ T4227] usb 4-1: USB disconnect, device number 15 [ 217.843908][ T9070] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.852897][T11914] netlink: 'syz.2.3566': attribute type 1 has an invalid length. [ 217.865883][ T9070] usb 5-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=9e.06 [ 217.884182][T11916] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 217.884848][ T9070] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.930463][ T9070] usb 5-1: config 0 descriptor?? [ 217.976688][ T9070] gspca_main: kinect-2.14.0 probing 045e:02bf [ 218.047711][T11926] CIFS: bad ip= option (::.) [ 218.253815][ T4227] usb 5-1: USB disconnect, device number 20 [ 218.313657][ T4190] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 218.879654][T11960] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3586'. [ 218.900984][ T4190] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 218.921577][ T4190] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.953948][ T4190] usb 2-1: Product: syz [ 218.958184][ T4190] usb 2-1: Manufacturer: syz [ 218.962808][ T4190] usb 2-1: SerialNumber: syz [ 219.012850][ T4190] usb 2-1: config 0 descriptor?? [ 219.125840][ T4190] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 219.560785][ T4227] usb 2-1: USB disconnect, device number 15 [ 219.611751][T11997] netlink: 'syz.3.3603': attribute type 2 has an invalid length. [ 219.633934][T11997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3603'. [ 219.874835][T12015] netlink: 'syz.3.3613': attribute type 3 has an invalid length. [ 219.889001][ T4281] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 219.996224][T12020] rdma_rxe: rxe_register_device failed with error -23 [ 220.034812][T12020] rdma_rxe: failed to add vxcan1 [ 220.134449][T12023] loop3: detected capacity change from 0 to 1024 [ 220.441469][T12044] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3628'. [ 220.501699][ T26] audit: type=1400 audit(1785899836.884:13): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=12046 comm="syz.1.3631" [ 220.532391][T12051] loop3: detected capacity change from 0 to 64 [ 220.775762][T12063] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3639'. [ 221.127611][T12088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3649'. [ 221.213565][ T9066] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 221.341319][T12083] loop2: detected capacity change from 0 to 8192 [ 221.410312][T12083] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 221.447252][T12083] REISERFS (device loop2): using ordered data mode [ 221.454226][ T9066] usb 2-1: Using ep0 maxpacket: 8 [ 221.515185][T12083] reiserfs: using flush barriers [ 221.528499][T12112] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 221.565813][T12083] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 221.613766][ T9066] usb 2-1: unable to get BOS descriptor or descriptor too short [ 221.613961][T12083] REISERFS (device loop2): checking transaction log (loop2) [ 221.662475][T12120] dlm: plock device version mismatch: kernel (1.2.0), user (1.32.0) [ 221.707622][ T9066] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 174, changing to 7 [ 221.893827][ T9066] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0078, bcdDevice= 0.40 [ 221.914984][ T9066] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.923030][ T9066] usb 2-1: Product: syz [ 221.929845][T12083] REISERFS (device loop2): Using tea hash to sort names [ 221.959629][T12083] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 221.973550][ T9066] usb 2-1: Manufacturer: syz [ 221.978208][ T9066] usb 2-1: SerialNumber: syz [ 222.373836][ T9066] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 222.408948][ T9066] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 222.443860][ T9066] usb 2-1: unit 254 not found! [ 222.450675][ T4230] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 222.498743][ T9066] usb 2-1: USB disconnect, device number 16 [ 222.708265][T12160] 8021q: adding VLAN 0 to HW filter on device bond2 [ 222.796027][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 223.109013][T12175] loop4: detected capacity change from 0 to 4096 [ 223.234314][T12175] ntfs3: loop4: ino=3, Correct links count -> 2. [ 223.499773][T12198] delete_channel: no stack [ 223.523882][T12202] netlink: 'syz.4.3706': attribute type 1 has an invalid length. [ 223.668152][T12208] netlink: 'syz.3.3707': attribute type 1 has an invalid length. [ 223.682735][T12211] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3708'. [ 223.812912][T12211] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3708'. [ 223.835467][T12218] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3712'. [ 223.848777][T12211] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3708'. [ 223.871039][T12214] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3711'. [ 224.164140][T12236] loop2: detected capacity change from 0 to 64 [ 224.226586][T12236] hfs: inconsistency in B*Tree (1,0,2,2,3) [ 224.649992][T12261] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3734'. [ 224.827348][T12267] loop4: detected capacity change from 0 to 256 [ 224.953155][T12267] FAT-fs (loop4): Directory bread(block 64) failed [ 224.987856][T12267] FAT-fs (loop4): Directory bread(block 65) failed [ 225.023861][T12267] FAT-fs (loop4): Directory bread(block 66) failed [ 225.047771][T12267] FAT-fs (loop4): Directory bread(block 67) failed [ 225.069220][T12267] FAT-fs (loop4): Directory bread(block 68) failed [ 225.092320][T12267] FAT-fs (loop4): Directory bread(block 69) failed [ 225.116908][T12267] FAT-fs (loop4): Directory bread(block 70) failed [ 225.137900][T12267] FAT-fs (loop4): Directory bread(block 71) failed [ 225.169357][T12267] FAT-fs (loop4): Directory bread(block 72) failed [ 225.217704][T12267] FAT-fs (loop4): Directory bread(block 73) failed [ 225.372993][T12287] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3747'. [ 225.435954][T12289] CIFS: iocharset name too long [ 225.440376][T12287] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3747'. [ 225.473798][T12287] netlink: 'syz.2.3747': attribute type 3 has an invalid length. [ 225.512289][T12287] netlink: 11 bytes leftover after parsing attributes in process `syz.2.3747'. [ 225.655848][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 226.124495][T10318] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 226.383282][T12351] device macsec0 entered promiscuous mode [ 226.423927][ T4190] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 226.523877][T12357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3779'. [ 226.543262][T10318] usb 2-1: unable to get BOS descriptor or descriptor too short [ 226.670850][T10318] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.710925][T10318] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 226.723702][ T4190] usb 3-1: Using ep0 maxpacket: 8 [ 226.731548][T12367] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3785'. [ 226.760142][T10318] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 191 [ 226.873742][ T4190] usb 3-1: config 0 has an invalid interface number: 200 but max is 0 [ 226.882458][ T4190] usb 3-1: config 0 has no interface number 0 [ 226.921219][ T4190] usb 3-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 226.944013][T10318] usb 2-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 226.946587][ T4190] usb 3-1: config 0 interface 200 has no altsetting 0 [ 226.960379][T10318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.983757][T12380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3791'. [ 226.985949][T10318] usb 2-1: Product: syz [ 227.012876][T12380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3791'. [ 227.021377][T10318] usb 2-1: Manufacturer: syz [ 227.028551][T10318] usb 2-1: SerialNumber: syz [ 227.070988][T10318] usb 2-1: config 0 descriptor?? [ 227.104241][T12314] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 227.111385][T12314] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 227.163814][ C1] usb 2-1: NFC: Urb failure (status -71) [ 227.163826][ T4190] usb 3-1: New USB device found, idVendor=0b57, idProduct=d428, bcdDevice=48.b9 [ 227.163860][ T4190] usb 3-1: New USB device strings: Mfr=102, Product=2, SerialNumber=3 [ 227.163880][ T4190] usb 3-1: Product: syz [ 227.163893][ T4190] usb 3-1: Manufacturer: syz [ 227.183519][ C1] usb 2-1: NFC: Urb failure (status -71) [ 227.208531][T10318] usb 2-1: NFC: Unable to get FW version [ 227.215458][T10318] pn533_usb: probe of 2-1:0.0 failed with error -71 [ 227.222008][ T4190] usb 3-1: SerialNumber: syz [ 227.263231][ T4190] usb 3-1: config 0 descriptor?? [ 227.403119][ T7708] usb 2-1: USB disconnect, device number 17 [ 227.529339][T12337] udc-core: couldn't find an available UDC or it's busy [ 227.543733][T12337] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 227.564565][ T156] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 227.635991][ T4190] usbhid 3-1:0.200: couldn't find an input interrupt endpoint [ 227.682531][ T4190] usb 3-1: USB disconnect, device number 22 [ 227.918196][T12427] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3813'. [ 227.968306][T12427] netlink: 'syz.0.3813': attribute type 1 has an invalid length. [ 227.977412][T12429] loop3: detected capacity change from 0 to 256 [ 228.503340][T12461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.703683][T10318] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 228.822014][T12469] [ 228.824415][T12469] ====================================================== [ 228.831450][T12469] WARNING: possible circular locking dependency detected [ 228.838576][T12469] syzkaller #0 Not tainted [ 228.843024][T12469] ------------------------------------------------------ [ 228.850710][T12469] syz.0.3834/12469 is trying to acquire lock: [ 228.856798][T12469] ffff8880795f5028 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 228.867894][T12469] [ 228.867894][T12469] but task is already holding lock: [ 228.876392][T12469] ffffffff8d6d5ea8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1ae/0x560 [ 228.886082][T12469] [ 228.886082][T12469] which lock already depends on the new lock. [ 228.886082][T12469] [ 228.896507][T12469] [ 228.896507][T12469] the existing dependency chain (in reverse order) is: [ 228.905543][T12469] [ 228.905543][T12469] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 228.913583][T12469] __mutex_lock_common+0x1e5/0x2400 [ 228.919346][T12469] mutex_lock_nested+0x17/0x20 [ 228.924839][T12469] rfkill_register+0x2f/0x970 [ 228.930073][T12469] hci_register_dev+0x459/0x980 [ 228.935493][T12469] vhci_create_device+0x32e/0x5c0 [ 228.941076][T12469] vhci_write+0x389/0x440 [ 228.945957][T12469] vfs_write+0x748/0xd70 [ 228.950770][T12469] ksys_write+0x153/0x260 [ 228.955648][T12469] do_syscall_64+0x4c/0xa0 [ 228.960612][T12469] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 228.967167][T12469] [ 228.967167][T12469] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 228.975020][T12469] __mutex_lock_common+0x1e5/0x2400 [ 228.980950][T12469] mutex_lock_nested+0x17/0x20 [ 228.986278][T12469] vhci_send_frame+0x88/0x100 [ 228.991516][T12469] hci_send_frame+0x1a9/0x2e0 [ 228.996924][T12469] hci_tx_work+0x9b5/0x16d0 [ 229.002017][T12469] process_one_work+0x867/0xff0 [ 229.007420][T12469] worker_thread+0xad7/0x12a0 [ 229.012638][T12469] kthread+0x42e/0x520 [ 229.017333][T12469] ret_from_fork+0x1f/0x30 [ 229.022370][T12469] [ 229.022370][T12469] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 229.031808][T12469] __flush_work+0x116/0x210 [ 229.036881][T12469] hci_dev_do_open+0xc77/0x12a0 [ 229.042286][T12469] hci_power_on+0x1a7/0x5f0 [ 229.047363][T12469] process_one_work+0x867/0xff0 [ 229.052764][T12469] worker_thread+0xad7/0x12a0 [ 229.057994][T12469] kthread+0x42e/0x520 [ 229.061307][T12476] loop3: detected capacity change from 0 to 32768 [ 229.062620][T12469] ret_from_fork+0x1f/0x30 [ 229.062646][T12469] [ 229.062646][T12469] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 229.082257][T12469] __mutex_lock_common+0x1e5/0x2400 [ 229.088025][T12469] mutex_lock_nested+0x17/0x20 [ 229.093353][T12469] bg_scan_update+0x44/0x3b0 [ 229.098502][T12469] process_one_work+0x867/0xff0 [ 229.103909][T12469] worker_thread+0xad7/0x12a0 [ 229.109134][T12469] kthread+0x42e/0x520 [ 229.113777][T12469] ret_from_fork+0x1f/0x30 [ 229.118746][T12469] [ 229.118746][T12469] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 229.128594][T12469] __lock_acquire+0x2c66/0x7b50 [ 229.134059][T12469] lock_acquire+0x19e/0x400 [ 229.139123][T12469] __flush_work+0x116/0x210 [ 229.144182][T12469] __cancel_work_timer+0x3f4/0x560 [ 229.150293][T12469] hci_request_cancel_all+0xcc/0x300 [ 229.156153][T12469] hci_dev_do_close+0x4e/0x1020 [ 229.162252][T12469] hci_rfkill_set_block+0x101/0x180 [ 229.168796][T12469] rfkill_set_block+0x1c1/0x3c0 [ 229.174407][T12469] rfkill_fop_write+0x453/0x560 [ 229.180309][T12469] vfs_write+0x304/0xd70 [ 229.185891][T12469] ksys_write+0x153/0x260 [ 229.190935][T12469] do_syscall_64+0x4c/0xa0 [ 229.196237][T12469] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 229.202783][T12469] [ 229.202783][T12469] other info that might help us debug this: [ 229.202783][T12469] [ 229.214931][T12469] Chain exists of: [ 229.214931][T12469] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 229.214931][T12469] [ 229.231012][T12469] Possible unsafe locking scenario: [ 229.231012][T12469] [ 229.238577][T12469] CPU0 CPU1 [ 229.244229][T12469] ---- ---- [ 229.250055][T12469] lock(rfkill_global_mutex); [ 229.255159][T12469] lock(&data->open_mutex); [ 229.262929][T12469] lock(rfkill_global_mutex); [ 229.272479][T12469] lock((work_completion)(&hdev->bg_scan_update)); [ 229.279384][T12469] [ 229.279384][T12469] *** DEADLOCK *** [ 229.279384][T12469] [ 229.288626][T12469] 1 lock held by syz.0.3834/12469: [ 229.293762][T12469] #0: ffffffff8d6d5ea8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1ae/0x560 [ 229.303904][T12469] [ 229.303904][T12469] stack backtrace: [ 229.309827][T12469] CPU: 1 PID: 12469 Comm: syz.0.3834 Not tainted syzkaller #0 [ 229.317326][T12469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 229.327753][T12469] Call Trace: [ 229.331069][T12469] [ 229.334037][T12469] dump_stack_lvl+0x188/0x250 [ 229.338960][T12469] ? load_image+0x410/0x410 [ 229.343520][T12469] ? show_regs_print_info+0x20/0x20 [ 229.350706][T12469] ? print_circular_bug+0x12b/0x1a0 [ 229.356303][T12469] check_noncircular+0x296/0x330 [ 229.361384][T12469] ? look_up_lock_class+0x71/0x110 [ 229.366986][T12469] ? add_chain_block+0x9b0/0x9b0 [ 229.372604][T12469] ? lockdep_lock+0xf1/0x1f0 [ 229.377240][T12469] ? __lock_acquire+0x1305/0x7b50 [ 229.382392][T12469] ? mark_lock+0x94/0x320 [ 229.386769][T12469] ? _find_first_zero_bit+0xd1/0xf0 [ 229.392027][T12469] __lock_acquire+0x2c66/0x7b50 [ 229.396929][T12469] ? verify_lock_unused+0x140/0x140 [ 229.402261][T12469] ? verify_lock_unused+0x140/0x140 [ 229.407513][T12469] lock_acquire+0x19e/0x400 [ 229.413183][T12469] ? __flush_work+0xfa/0x210 [ 229.417838][T12469] ? __lock_acquire+0x7b50/0x7b50 [ 229.422901][T12469] ? read_lock_is_recursive+0x10/0x10 [ 229.428317][T12469] ? start_flush_work+0x784/0x830 [ 229.433374][T12469] ? __lock_acquire+0x13dc/0x7b50 [ 229.438440][T12469] __flush_work+0x116/0x210 [ 229.442978][T12469] ? __flush_work+0xfa/0x210 [ 229.447605][T12469] ? flush_work+0x20/0x20 [ 229.452141][T12469] ? try_to_grab_pending+0xfb/0x820 [ 229.457414][T12469] ? mark_lock+0x94/0x320 [ 229.461779][T12469] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 229.467890][T12469] ? lock_chain_count+0x20/0x20 [ 229.472777][T12469] ? mark_lock+0x94/0x320 [ 229.477152][T12469] ? __cancel_work_timer+0x36a/0x560 [ 229.482473][T12469] __cancel_work_timer+0x3f4/0x560 [ 229.487833][T12469] ? cancel_work_sync+0x20/0x20 [ 229.492737][T12469] ? __cancel_work+0x1f9/0x2e0 [ 229.498252][T12469] ? lockdep_hardirqs_on+0x94/0x140 [ 229.503605][T12469] ? __cancel_work+0x27b/0x2e0 [ 229.508415][T12469] ? cancel_work+0x20/0x20 [ 229.513130][T12469] hci_request_cancel_all+0xcc/0x300 [ 229.518536][T12469] hci_dev_do_close+0x4e/0x1020 [ 229.523420][T12469] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 229.529346][T12469] ? _raw_spin_unlock+0x40/0x40 [ 229.534232][T12469] hci_rfkill_set_block+0x101/0x180 [ 229.539463][T12469] ? rcu_lock_release+0x20/0x20 [ 229.544619][T12469] rfkill_set_block+0x1c1/0x3c0 [ 229.549504][T12469] rfkill_fop_write+0x453/0x560 [ 229.554409][T12469] ? rfkill_fop_read+0x560/0x560 [ 229.559477][T12469] ? common_file_perm+0x100/0x1c0 [ 229.565057][T12469] ? fsnotify_perm+0x5d/0x560 [ 229.569911][T12469] ? security_file_permission+0x75/0xa0 [ 229.576686][T12469] ? rfkill_fop_read+0x560/0x560 [ 229.581929][T12469] vfs_write+0x304/0xd70 [ 229.586836][T12469] ? file_end_write+0x250/0x250 [ 229.592353][T12469] ? __fget_files+0x402/0x470 [ 229.597075][T12469] ? __fdget_pos+0x1e2/0x370 [ 229.601697][T12469] ? ksys_write+0x70/0x260 [ 229.606150][T12469] ksys_write+0x153/0x260 [ 229.610522][T12469] ? __ia32_sys_read+0x80/0x80 [ 229.615341][T12469] ? lockdep_hardirqs_on+0x94/0x140 [ 229.620666][T12469] do_syscall_64+0x4c/0xa0 [ 229.625123][T12469] ? clear_bhb_loop+0x30/0x80 [ 229.629828][T12469] ? clear_bhb_loop+0x30/0x80 [ 229.634538][T12469] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 229.641579][T12469] RIP: 0033:0x7f60f4197019 [ 229.646035][T12469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.667912][T12469] RSP: 002b:00007f60f23ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 229.676833][T12469] RAX: ffffffffffffffda RBX: 00007f60f441efa0 RCX: 00007f60f4197019 [ 229.684849][T12469] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 229.692941][T12469] RBP: 00007f60f422e00c R08: 0000000000000000 R09: 0000000000000000 [ 229.700942][T12469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 229.708954][T12469] R13: 00007f60f441f038 R14: 00007f60f441efa0 R15: 00007ffff8605938 [ 229.717002][T12469] [ 229.833529][T10318] usb 3-1: Using ep0 maxpacket: 8 [ 229.953604][T10318] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 230.113958][T10318] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 230.123066][T10318] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 230.142896][T10318] usb 3-1: Product: syz [ 230.147263][T10318] usb 3-1: Manufacturer: syz [ 230.152127][T10318] usb 3-1: SerialNumber: syz [ 230.413629][T10318] usb 3-1: Invalid connection information received from device [ 230.621070][T10318] usb 3-1: USB disconnect, device number 23 [ 231.404173][ T156] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 233.334038][ T144] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 237.164038][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 238.443893][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration