last executing test programs: 2.213382601s ago: executing program 2 (id=18595): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) ustat(0x1, 0x0) 2.079526785s ago: executing program 2 (id=18596): r0 = syz_open_dev$rtc(&(0x7f00000003c0), 0x0, 0x800) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 2.069226776s ago: executing program 2 (id=18597): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x1000, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000040)) 2.026536348s ago: executing program 2 (id=18598): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, 0x0, 0x1e) 1.947558431s ago: executing program 2 (id=18599): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 976.160905ms ago: executing program 4 (id=18616): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x101a02, 0x0) sendfile(r0, r0, 0x0, 0x9) 807.729351ms ago: executing program 4 (id=18622): r0 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, 0xffffffffffffffff, &(0x7f0000000000)=0xc) 710.754124ms ago: executing program 4 (id=18624): syz_mount_image$erofs(&(0x7f0000000100), &(0x7f0000001e40)='./file1\x00', 0x1000c01, &(0x7f0000000080)=ANY=[], 0x1, 0x231, &(0x7f0000000240)="$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") syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 709.680624ms ago: executing program 1 (id=18625): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="ffffffffff2e"], 0x1b) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 681.996935ms ago: executing program 3 (id=18626): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) finit_module(r0, 0x0, 0x0) 583.650379ms ago: executing program 1 (id=18628): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000440)={'dmm32at\x00', [0x2ff, 0xc0000000, 0xfffffffd, 0x400, 0xfff, 0x800005, 0x7, 0x6, 0x8, 0x56, 0xfffffffd, 0x1, 0x1, 0x0, 0x10000b, 0x0, 0x5, 0x6, 0x3, 0x3, 0x89, 0x12, 0x7f, 0x0, 0x5, 0xe66, 0x1, 0x2000008, 0xa6b3, 0x0, 0x5]}) 561.429869ms ago: executing program 3 (id=18629): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}}, 0x20050800) 548.81378ms ago: executing program 0 (id=18630): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000080)) 464.093333ms ago: executing program 0 (id=18631): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x7666, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000300)={{0x9, 0x3, 0x0, 0x63, 'syz1\x00', 0x6}, 0x3, 0x3, 0x5, 0x0, 0x1, 0x0, 'syz0\x00', &(0x7f0000000040)=['%\'!#\x00'], 0x5}) 449.045853ms ago: executing program 3 (id=18632): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x30}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 441.777393ms ago: executing program 1 (id=18633): r0 = syz_open_dev$I2C(&(0x7f0000001940), 0x0, 0x0) ioctl$I2C_PEC(r0, 0x703, 0x832) 365.296836ms ago: executing program 4 (id=18634): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x16, 0x1, 0x2, "df7c0cc512ac4900000000000000002200", 0x52424752}) 364.823176ms ago: executing program 3 (id=18635): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000580)={0x2, 0x0, 0x2, {0xc0020002, 0xe7ffffff, 0x5, 0x54ef}}) 352.526557ms ago: executing program 0 (id=18636): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) 352.254667ms ago: executing program 1 (id=18637): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x15, 0x0, @val=@netkit}, 0x1c) 260.60263ms ago: executing program 3 (id=18638): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838029f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x32}}, @ip_tos_u8={{0x14, 0x29, 0x43}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0xff00) 260.12534ms ago: executing program 4 (id=18639): r0 = syz_open_dev$video(&(0x7f0000000080), 0xa7, 0x120000) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000440)={0x9, @pix={0x8000001, 0x0, 0x31364d4e, 0x3, 0x7fff, 0x0, 0x5c9096da1449b99a, 0x4, 0x1, 0x0, 0x1, 0x1}}) 251.14192ms ago: executing program 0 (id=18640): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, 0x0, 0x0) 186.951053ms ago: executing program 1 (id=18641): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000ff000003bfa30000000000000703000000feffff620af0fff8ffffff71a4f0ff0000000015040200000000001d400200000000004704000001ed000062030000000000001d440000000000007a0a00fe00ffffffdb03000041000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa5b4e377184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7592566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6cb5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 178.982713ms ago: executing program 4 (id=18642): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0), 0x4) 166.842454ms ago: executing program 0 (id=18652): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000400)={0x1, @pix={0x0, 0x0, 0x33424752}}) 166.316554ms ago: executing program 3 (id=18643): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3, 0x51a, &(0x7f0000000700)="$eJzs3UFvI1cdAPD/jONtdjeLXUCoVKJUtChbwdpJQ9sIISgXOFUCyn0JiRNFseModsomqiAV3wAhgcSJExckPgBS1QMfAFWqBBfEAQECIdjCAQnoINtjmnXsJGydOI1/P+mt35uZvP97Y/l5Zvx2JoCp9WREvBgRhYh4JiJK+fI0T3HYS53t3r7/6monJZFlL/81iSRf1q+rU56JiJv5n81GxNe+HPHN5Hjc1v7B1kq9XtvNy9V2Y6fa2j+4s9lY2aht1LaXlhafX35h+bnlhSz3nvpZ7md+8qXPv/7pb/3u7p9vf7vTrM99JIox0I9x6nW92N0XfZ19tHsewSagkPenOOmGAABwJp1j/A9GxCe6x/+lKHSP5gYUJtEyAAAAYFyyLyTx7yQiAwAAAK6sNCLmIkkr+VyAuUjTa/m1gQ/HjbTebLU/td7c217rrIsoRzFd36zXFvK5wuUoJp3yYj7Htl9+dqC8FBGPRsT3S9e75cpqs7424WsfAAAAMC1uDpz//6OUdvOnG/L/BAAAAIDLqzyyAAAAAFwVTvkBAADg6hs8/399Qu0AAAAAzsVXXnqpk7L+86/XXtnf22q+cmet1tqqNPZWK6vN3Z3KRrO50b1nX+O0+urN5s5nYnvvXrVda7Wrrf2Du43m3nb77uYDj8AGAAAALtCjH3/j10lEHH72ejdFfh9AgAf8YdINAMapMOkGABPz8HfxLo61HcDF8ykGklPWm7wDAADvf/MfPf77f//5/64NwNVmrg8ATB9P8YbpVTQDEKZaGhEf6GUfGbXNyN//f3nWKFkW8Wbp6BLXFwEA4GLNdVOSVv53gJ+mlUrErYi0HMVkfbNeW8jPD35VKj7SKS92t0tOnTMMAAAAAAAAAAAAAAAAAAAAAAAAAPRkWRIZAAAAcKVFpH9Kunfzj5gvPT03eH3gWvLPUvwxL/zo5R/cW2m3dxc7y//WfZbXtYho/zBf/uzIx4cBAAAA45YcjlzVO0/PXxcvtFUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATIG377+62k9HlxfOOe5fvhgR5WHxZ2K2+zobxYi48fckZo78XTKmth2+FhGPDYufxDtZlpXzVgzGTyPi+jnHL3d3zej4N8cQH6bZG53x58Vhn780nuy+Dv/8zeTpvRo9/qV55Me649yw8e/WsdoaQ2M8/tbPqiPjvxbx+Mzw8ac//iYj4j91rLZ/ZVl2PMY3vn5wMCp+9uOI+aHfP8kDsartxk61tX9wZ7OxslHbqG0vLS0+v/zC8nPLC9X1zXot/3dojO997OfvnNT/G0Pi//Y3vfH3pP4/ParSAf956979D/WyxWHxbz819Pt3NkbEL+Tpk/n3QGf9fD9/2Msf9cRP33zipP6vjdj/p73/t8/Y/2e++t3fn3FTAOACtPYPtlbq9druCZnZU7dJz1TPZcv8YvZSNOP/zGTf6b1zl6U9D5vpHK2+u6Tfq4ev8NY5NDW7sL1RiPFV2BpLPRMdlgAAgHPw7kH/pFsCAAAAAAAAAAAAAAAAAAAA0+sibm82GPNwMl0FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADjRfwMAAP//UNfe0w==") rmdir(&(0x7f0000000380)='./file0/../file0\x00') 69.865727ms ago: executing program 0 (id=18644): syz_open_dev$vivid(0x0, 0x3, 0x2) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x38, 0xe1, 0xd, 0x8, 0x13d8, 0x1, 0x324c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x22, 0xff, 0x40, 0x4, "", [{{0x9, 0x4, 0x74, 0x3, 0x0, 0x34, 0xa3, 0xf1, 0x63}}]}}]}}, 0x0) 50.941938ms ago: executing program 2 (id=18645): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000002000000085000000230000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 0s ago: executing program 1 (id=18646): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000980)={0x2, 0x3, 0x0, 0x3, 0x11, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_key={0x1, 0x9}, @sadb_address={0x5, 0x6, 0x3c, 0x0, 0x0, @in6={0xa, 0x4e24, 0x8, @mcast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x4c36586787168635}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}, @sadb_key={0x2, 0x8, 0x30, 0x0, "c387bbe622e4"}]}, 0x88}, 0x1, 0x7}, 0x0) kernel console output (not intermixed with test programs): file or directory [ 937.046754][T21452] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.16054'. [ 937.227263][ T1110] usb 4-1: Using ep0 maxpacket: 16 [ 937.399540][T21482] device bond3 entered promiscuous mode [ 937.412417][T21482] 8021q: adding VLAN 0 to HW filter on device bond3 [ 937.521494][T21529] x_tables: unsorted underflow at hook 2 [ 937.574365][ T1110] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 937.584232][ T1110] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.597435][ T1110] usb 4-1: Product: syz [ 937.605968][ T1110] usb 4-1: Manufacturer: syz [ 937.616062][ T1110] usb 4-1: SerialNumber: syz [ 937.631307][ T1110] usb 4-1: config 0 descriptor?? [ 937.794699][T21554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16076'. [ 937.831104][T21558] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 937.892545][T21562] binder: 21561:21562 ioctl c018620c 2000000025c0 returned -22 [ 937.929071][ T1110] speedtch 4-1:0.0: speedtch_bind: data interface not found! [ 937.938983][ T1110] speedtch 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 937.989762][T21564] loop4: detected capacity change from 0 to 2048 [ 938.043194][ T4177] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 938.071316][ T4182] loop4: p3 < > p4 < > [ 938.076168][ T4182] loop4: partition table partially beyond EOD, truncated [ 938.084438][T21576] netlink: 'syz.1.16085': attribute type 1 has an invalid length. [ 938.107717][ T4182] loop4: p3 start 4284289 is beyond EOD, truncated [ 938.116133][T21576] __nla_validate_parse: 1 callbacks suppressed [ 938.116147][T21576] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.16085'. [ 938.141713][T21564] loop4: p3 < > p4 < > [ 938.148196][T21564] loop4: partition table partially beyond EOD, truncated [ 938.158349][T21564] loop4: p3 start 4284289 is beyond EOD, truncated [ 938.164516][ T1110] usb 4-1: USB disconnect, device number 28 [ 938.278415][ T4177] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 938.286732][ T4177] stv0680 3-1:4.0: last error: 0, command = 0x0 [ 938.306012][ T4177] usb 3-1: USB disconnect, device number 50 [ 938.484367][ T8324] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 938.539229][T21620] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16098'. [ 938.782511][T21645] netlink: 72 bytes leftover after parsing attributes in process `syz.1.16108'. [ 938.907156][ T8324] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 938.915458][ T8324] usb 5-1: config 220 descriptor has 1 excess byte, ignoring [ 938.953637][ T8324] usb 5-1: config 220 has no interface number 2 [ 938.981937][ T8324] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 939.033822][ T8324] usb 5-1: config 220 interface 0 has no altsetting 0 [ 939.045684][ T8324] usb 5-1: config 220 interface 76 has no altsetting 0 [ 939.099025][ T8324] usb 5-1: config 220 interface 1 has no altsetting 0 [ 939.302549][ T8324] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 939.338029][ T8324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.366335][T21701] sctp: [Deprecated]: syz.3.16129 (pid 21701) Use of int in maxseg socket option. [ 939.366335][T21701] Use struct sctp_assoc_value instead [ 939.388357][ T8324] usb 5-1: Product: syz [ 939.392564][ T8324] usb 5-1: Manufacturer: syz [ 939.403206][T21700] netlink: 'syz.2.16128': attribute type 21 has an invalid length. [ 939.419075][ T8324] usb 5-1: SerialNumber: syz [ 939.425360][T21700] netlink: 156 bytes leftover after parsing attributes in process `syz.2.16128'. [ 939.444426][ T7794] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 939.709509][ T7794] usb 1-1: Using ep0 maxpacket: 32 [ 939.839387][ T7794] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 939.862028][ T8324] usb 5-1: selecting invalid altsetting 0 [ 939.868400][ T8324] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 939.896314][ T8324] usb 5-1: No valid video chain found. [ 939.986648][T21765] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 940.004562][ T8324] usb 5-1: selecting invalid altsetting 0 [ 940.010431][ T8324] usbtest: probe of 5-1:220.1 failed with error -22 [ 940.023437][ T7794] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 940.043219][ T7794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.061829][ T8324] usb 5-1: USB disconnect, device number 52 [ 940.092139][ T7794] usb 1-1: Product: syz [ 940.096667][ T7794] usb 1-1: Manufacturer: syz [ 940.112811][ T7794] usb 1-1: SerialNumber: syz [ 940.138070][ T7794] usb 1-1: config 0 descriptor?? [ 940.201875][ T7794] usb 1-1: bad CDC descriptors [ 940.207029][ T7794] usb 1-1: unsupported MDLM descriptors [ 940.313044][T21799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16158'. [ 940.464154][ T8324] usb 1-1: USB disconnect, device number 36 [ 940.628638][T21833] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16169'. [ 940.671907][T21833] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16169'. [ 940.706357][T21833] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16169'. [ 940.901200][ T7794] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 941.010454][T21864] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 941.053042][ T4316] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 941.300210][ T7794] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 941.475847][ T4316] usb 3-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 941.497516][ T7794] usb 5-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 941.508405][ T4316] usb 3-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 941.509927][ T7794] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.520186][ T4316] usb 3-1: config 253 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 941.540691][ T7794] usb 5-1: Product: syz [ 941.546515][ T7794] usb 5-1: Manufacturer: syz [ 941.551623][ T7794] usb 5-1: SerialNumber: syz [ 941.565366][ T7794] usb 5-1: config 0 descriptor?? [ 941.588198][ T1110] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 941.607679][ T7794] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 941.621621][ T7794] dvb-usb: bulk message failed: -22 (3/0) [ 941.668112][ T7794] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 941.692611][ T7794] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 941.704865][ T4316] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 941.711957][ T7794] usb 5-1: media controller created [ 941.716609][ T4316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 941.720764][ T7794] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 941.739979][ T4316] usb 3-1: SerialNumber: syz [ 941.786955][ T7794] dvb-usb: bulk message failed: -22 (6/0) [ 941.798327][ T7794] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 941.812816][ T4316] usb-storage 3-1:253.0: USB Mass Storage device detected [ 941.844592][ T4316] usb-storage 3-1:253.0: Quirks match for vid 0525 pid a4a5: 10000 [ 941.868011][ T7794] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input66 [ 941.883232][ T7794] dvb-usb: schedule remote query interval to 150 msecs. [ 941.887318][ T1110] usb 1-1: Using ep0 maxpacket: 32 [ 941.891048][ T7794] dvb-usb: bulk message failed: -22 (3/0) [ 941.931820][ T7794] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 941.959266][ T7794] usb 5-1: USB disconnect, device number 53 [ 942.025372][ T7794] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 942.102763][ T4316] usb 3-1: USB disconnect, device number 51 [ 942.212824][ T1110] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 942.239991][ T1110] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.260042][ T1110] usb 1-1: Product: syz [ 942.266878][ T1110] usb 1-1: Manufacturer: syz [ 942.276357][ T1110] usb 1-1: SerialNumber: syz [ 942.306071][ T1110] usb 1-1: config 0 descriptor?? [ 942.420244][T21988] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16208'. [ 942.438814][T21988] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16208'. [ 942.599702][ T1110] airspy 1-1:0.0: usb_control_msg() failed -71 request 09 [ 942.613713][ T1110] airspy 1-1:0.0: Could not detect board [ 942.624757][ T1110] airspy: probe of 1-1:0.0 failed with error -71 [ 942.644494][ T1110] usb 1-1: USB disconnect, device number 37 [ 942.901011][T22039] netlink: 'syz.3.16222': attribute type 10 has an invalid length. [ 942.947687][T22039] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 942.982008][ T8324] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 943.120435][T22058] loop2: detected capacity change from 0 to 256 [ 943.189264][T22058] exfat: Deprecated parameter 'utf8' [ 943.202409][T22058] exfat: Deprecated parameter 'namecase' [ 943.262540][T22058] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 943.304710][T22080] netlink: 'syz.3.16238': attribute type 3 has an invalid length. [ 943.383100][ T8324] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 943.518953][ T8324] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 943.550769][ T8324] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 943.585645][ T8324] usb 2-1: Manufacturer: syz [ 943.591422][ T8324] usb 2-1: SerialNumber: syz [ 943.905446][ T8324] usbhid 2-1:36.0: couldn't find an input interrupt endpoint [ 943.950972][ T8324] usb 2-1: USB disconnect, device number 44 [ 944.109219][ T1110] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 944.120720][T22105] loop3: detected capacity change from 0 to 32768 [ 944.201550][T22165] usb usb9: usbfs: process 22165 (syz.2.16265) did not claim interface 8 before use [ 944.252485][T22105] XFS (loop3): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 944.331314][T22105] XFS (loop3): ro->rw transition prohibited on norecovery mount [ 944.383613][ T4188] XFS (loop3): Unmounting Filesystem [ 944.416160][ T1110] usb 5-1: Using ep0 maxpacket: 16 [ 944.575595][ T1110] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 944.697301][T22198] bridge11: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 944.824837][ T1110] usb 5-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 944.852972][ T1110] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.864018][T22212] __nla_validate_parse: 4 callbacks suppressed [ 944.864033][T22212] netlink: 120 bytes leftover after parsing attributes in process `syz.2.16279'. [ 944.899757][ T1110] usb 5-1: Product: syz [ 944.905340][T22215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16280'. [ 944.911844][ T1110] usb 5-1: Manufacturer: syz [ 944.920257][ T1110] usb 5-1: SerialNumber: syz [ 944.936664][ T1110] usb 5-1: config 0 descriptor?? [ 945.090728][T22230] netlink: 'syz.3.16268': attribute type 1 has an invalid length. [ 945.230541][T12542] usb 5-1: USB disconnect, device number 54 [ 945.340999][T22253] IPv6: ADDRCONF(NETDEV_CHANGE): rose0: link becomes ready [ 945.366047][T22259] netlink: 'syz.0.16294': attribute type 8 has an invalid length. [ 945.784102][T22300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16308'. [ 945.832476][T22300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16308'. [ 946.151631][T22333] loop3: detected capacity change from 0 to 512 [ 946.375111][T22333] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpjquota=,,errors=continue. Quota mode: writeback. [ 946.415056][T22333] ext4 filesystem being mounted at /3124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 946.448827][T22367] loop2: detected capacity change from 0 to 512 [ 946.490761][T22370] netlink: 132 bytes leftover after parsing attributes in process `syz.1.16335'. [ 946.557740][T22367] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 946.557740][T22367] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 946.557740][T22367] [ 946.575055][T22377] SET target dimension over the limit! [ 946.668134][T22367] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouser_xattr,grpquota,,errors=continue. Quota mode: writeback. [ 946.704740][T22367] ext4 filesystem being mounted at /3302/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 946.753995][ T7794] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 946.798103][T22397] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16344'. [ 946.838310][T22397] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 947.035248][ T7794] usb 5-1: Using ep0 maxpacket: 8 [ 947.053631][T22412] 8021q: adding VLAN 0 to HW filter on device bond4 [ 947.165612][ T7794] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 947.191305][ T7794] usb 5-1: config 179 has no interface number 0 [ 947.212119][ T7794] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 947.232106][ T7794] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 947.250699][ T8324] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 947.256717][T22402] loop2: detected capacity change from 0 to 32768 [ 947.267173][ T7794] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 947.289979][ T7794] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 947.303955][T22402] JBD2: Ignoring recovery information on journal [ 947.304502][ T7794] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 947.324396][ T7794] usb 5-1: config 179 interface 65 has no altsetting 0 [ 947.331650][ T7794] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 947.347223][ T7794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.372060][T22402] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 947.441474][ T7794] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input67 [ 947.534095][ T8324] usb 4-1: Using ep0 maxpacket: 16 [ 947.561181][ T4191] ocfs2: Unmounting device (7,2) on (node local) [ 947.686132][T12542] usb 5-1: USB disconnect, device number 55 [ 947.693770][T12542] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 947.696557][ T7794] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 947.812601][T22503] netlink: 104 bytes leftover after parsing attributes in process `syz.2.16363'. [ 947.822749][T22503] netlink: 104 bytes leftover after parsing attributes in process `syz.2.16363'. [ 947.832715][T22503] netlink: 104 bytes leftover after parsing attributes in process `syz.2.16363'. [ 947.837458][ T8324] usb 4-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 947.851650][ T8324] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.860669][ T8324] usb 4-1: Product: syz [ 947.865699][ T8324] usb 4-1: Manufacturer: syz [ 947.871164][ T8324] usb 4-1: SerialNumber: syz [ 947.878302][ T8324] usb 4-1: config 0 descriptor?? [ 947.978135][ T4177] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 947.989162][ T7794] usb 2-1: Using ep0 maxpacket: 32 [ 948.119124][ T7794] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 948.157191][ T263] block nbd2: Attempted send on invalid socket [ 948.164047][ T263] blk_update_request: I/O error, dev nbd2, sector 8388608 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 948.184840][ T8324] usb-storage 4-1:0.0: USB Mass Storage device detected [ 948.200525][ T150] block nbd2: Attempted send on invalid socket [ 948.207206][ T150] blk_update_request: I/O error, dev nbd2, sector 8388608 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 948.219462][ T150] Buffer I/O error on dev nbd2p4, logical block 1048560, async page read [ 948.254934][ T8324] usb-storage 4-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 948.263297][ T8324] usb-storage 4-1:0.0: This device (054c,002e,0500 S 04 P 89) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 948.263297][ T8324] Please send a copy of this message to and [ 948.289731][ T4177] usb 1-1: Using ep0 maxpacket: 8 [ 948.303654][ T7794] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 948.320155][ T7794] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.331672][ T7794] usb 2-1: Product: syz [ 948.346646][ T8324] usb 4-1: USB disconnect, device number 29 [ 948.359365][ T7794] usb 2-1: Manufacturer: syz [ 948.364009][ T7794] usb 2-1: SerialNumber: syz [ 948.400314][ T4363] udevd[4363]: inotify_add_watch(7, /dev/nbd2p4, 10) failed: No such file or directory [ 948.427333][ T4177] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 948.438683][ T7794] usb 2-1: config 0 descriptor?? [ 948.455843][T22452] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 948.477531][ T7794] hub 2-1:0.0: bad descriptor, ignoring hub [ 948.483479][ T7794] hub: probe of 2-1:0.0 failed with error -5 [ 948.504803][ T7794] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input68 [ 948.617726][ T4177] usb 1-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 948.629232][ T4177] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.639293][ T4177] usb 1-1: Product: syz [ 948.643503][ T4177] usb 1-1: Manufacturer: syz [ 948.648117][ T4177] usb 1-1: SerialNumber: syz [ 948.675764][ T4177] usb 1-1: config 0 descriptor?? [ 948.726857][ T4177] usb 1-1: bad CDC descriptors [ 948.733045][ T4177] usb 1-1: unsupported MDLM descriptors [ 948.763684][ T4177] cdc_acm 1-1:0.0: Zero length descriptor references [ 948.772666][T12542] usb 2-1: USB disconnect, device number 45 [ 948.789481][ T4177] cdc_acm: probe of 1-1:0.0 failed with error -22 [ 948.812674][ T7797] usb 5-1: new low-speed USB device number 56 using dummy_hcd [ 948.869782][T22607] netlink: 96 bytes leftover after parsing attributes in process `syz.2.16380'. [ 948.999414][ T1110] usb 1-1: USB disconnect, device number 38 [ 949.158986][T22642] loop3: detected capacity change from 0 to 1024 [ 949.219638][T22642] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 949.242915][T22642] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 949.254561][T22642] EXT4-fs error (device loop3): ext4_get_journal_inode:5187: inode #5: comm syz.3.16391: unexpected bad inode w/o EXT4_IGET_BAD [ 949.257251][ T7797] usb 5-1: unable to get BOS descriptor or descriptor too short [ 949.282702][T22642] EXT4-fs (loop3): no journal found [ 949.287974][T22642] EXT4-fs (loop3): can't get journal size [ 949.295448][T22642] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x0000000000000005,abort,,errors=continue. Quota mode: writeback. [ 949.393621][ T7797] usb 5-1: config 172 has an invalid interface number: 190 but max is 1 [ 949.407043][ T7797] usb 5-1: config 172 has an invalid descriptor of length 0, skipping remainder of the config [ 949.438617][ T7797] usb 5-1: config 172 has no interface number 1 [ 949.461255][ T7797] usb 5-1: config 172 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 949.473927][T12542] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 949.494158][ T7797] usb 5-1: config 172 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 949.777454][T12542] usb 3-1: Using ep0 maxpacket: 32 [ 949.777533][ T7797] usb 5-1: string descriptor 0 read error: -22 [ 949.797919][ T7797] usb 5-1: New USB device found, idVendor=04cb, idProduct=0127, bcdDevice=3a.be [ 949.818555][ T7797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.819122][T22691] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 949.887605][ T7797] gspca_main: finepix-2.14.0 probing 04cb:0127 [ 949.918419][T12542] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 949.927527][T12542] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.022037][T12542] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 950.129323][ T7797] usb 5-1: USB disconnect, device number 56 [ 950.394201][T22750] netlink: 36 bytes leftover after parsing attributes in process `syz.0.16425'. [ 950.426103][T22750] netlink: 32 bytes leftover after parsing attributes in process `syz.0.16425'. [ 950.503668][T12542] gspca_nw80x: reg_r err -71 [ 950.510086][T12542] nw80x: probe of 3-1:3.0 failed with error -71 [ 950.531225][T12542] usb 3-1: USB disconnect, device number 52 [ 950.861097][ T1110] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 951.153655][ T1110] usb 1-1: Using ep0 maxpacket: 8 [ 951.283947][T12542] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 951.305560][ T1110] usb 1-1: config 0 has an invalid interface number: 122 but max is 0 [ 951.314028][T22835] netlink: 132 bytes leftover after parsing attributes in process `syz.1.16453'. [ 951.325419][ T1110] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 951.352428][ T1110] usb 1-1: config 0 has no interface number 0 [ 951.380593][ T1110] usb 1-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 951.403101][ T1110] usb 1-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 951.413046][ T1110] usb 1-1: config 0 interface 122 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 951.478599][ T1110] usb 1-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 951.510920][ T1110] usb 1-1: config 0 interface 122 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 8 [ 951.711699][ T1110] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 951.722095][ T1110] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.730875][ T1110] usb 1-1: Product: syz [ 951.735052][ T1110] usb 1-1: Manufacturer: syz [ 951.740069][ T1110] usb 1-1: SerialNumber: syz [ 951.755151][T22830] loop4: detected capacity change from 0 to 32768 [ 951.765294][ T1110] usb 1-1: config 0 descriptor?? [ 951.771648][T12542] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 951.784684][T12542] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.804347][T22765] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 951.816879][T12542] usb 4-1: config 0 descriptor?? [ 951.848793][ T23] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 951.870482][T12542] cp210x 4-1:0.0: cp210x converter detected [ 951.887857][T22830] XFS (loop4): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 951.947283][T22830] XFS (loop4): ro->rw transition prohibited on norecovery mount [ 952.055146][T22765] udc-core: couldn't find an available UDC or it's busy [ 952.069335][T22765] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 952.118230][T12542] usb 4-1: cp210x converter now attached to ttyUSB0 [ 952.137520][ T1110] usb 1-1: NFC: intf ffff888060a6e000 id ffffffff8cb61620 [ 952.145432][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 952.151319][ T4203] XFS (loop4): Unmounting Filesystem [ 952.233015][T22897] usb usb8: usbfs: process 22897 (syz.2.16468) did not claim interface 0 before use [ 952.271316][ T1110] nfcmrvl 1-1:0.122: NFC: registered with nci successfully [ 952.283332][ T1110] usb 1-1: USB disconnect, device number 39 [ 952.291334][ T1110] usb 1-1: NFC: intf ffff888060a6e000 [ 952.335186][ T23] usb 2-1: config 0 has no interfaces? [ 952.515303][ T2283] usb 4-1: USB disconnect, device number 30 [ 952.536850][ T2283] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 952.546023][ T2283] cp210x 4-1:0.0: device disconnected [ 952.563608][ T23] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 952.583715][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.608589][ T23] usb 2-1: Product: syz [ 952.612805][ T23] usb 2-1: Manufacturer: syz [ 952.629001][ T23] usb 2-1: SerialNumber: syz [ 952.653815][ T23] r8152-cfgselector 2-1: config 0 descriptor?? [ 952.964113][ T23] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 953.035557][T22970] netlink: 'syz.3.16487': attribute type 1 has an invalid length. [ 953.197718][ T23] usb 2-1: USB disconnect, device number 46 [ 953.326049][T23006] netlink: 'syz.4.16498': attribute type 1 has an invalid length. [ 953.604804][T23040] loop4: detected capacity change from 0 to 256 [ 953.884041][T23069] binder: 23067:23069 ioctl c018620c 0 returned -14 [ 953.941437][T23076] netlink: 'syz.3.16521': attribute type 4 has an invalid length. [ 953.995067][T23079] netlink: 'syz.0.16524': attribute type 1 has an invalid length. [ 954.003209][T23076] netlink: 'syz.3.16521': attribute type 3 has an invalid length. [ 954.033009][T23079] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.16524'. [ 954.069734][T23076] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16521'. [ 954.236994][T23098] IPVS: Unknown mcast interface: bridge0 [ 954.366094][T23113] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 954.411497][T23113] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 954.492947][T23127] No such timeout policy "syz1" [ 954.761500][T23157] loop3: detected capacity change from 0 to 256 [ 954.845589][T23165] loop4: detected capacity change from 0 to 512 [ 954.860877][T23157] FAT-fs (loop3): Directory bread(block 64) failed [ 954.868384][T23157] FAT-fs (loop3): Directory bread(block 65) failed [ 954.883725][T23157] FAT-fs (loop3): Directory bread(block 66) failed [ 954.890527][T23157] FAT-fs (loop3): Directory bread(block 67) failed [ 954.903086][T23157] FAT-fs (loop3): Directory bread(block 68) failed [ 954.903659][ T7797] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 954.926700][T23157] FAT-fs (loop3): Directory bread(block 69) failed [ 954.934363][T23157] FAT-fs (loop3): Directory bread(block 70) failed [ 954.943510][T23157] FAT-fs (loop3): Directory bread(block 71) failed [ 954.955394][T23157] FAT-fs (loop3): Directory bread(block 72) failed [ 954.962602][T23157] FAT-fs (loop3): Directory bread(block 73) failed [ 955.010608][T23165] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000002,max_dir_size_kb=0x0000000000000007,nodelalloc,noquota,grpid,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 955.044727][T23165] ext4 filesystem being mounted at /3231/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 955.129963][T23165] fs-verity (loop4, inode 15): Unrecognized descriptor size: 0 bytes [ 955.136670][T23178] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16557'. [ 955.185431][T23178] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16557'. [ 955.269841][ T7797] usb 3-1: Using ep0 maxpacket: 8 [ 955.402178][ T7797] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 955.412342][ T7797] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 955.456241][ T7797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.501002][ T7797] usb 3-1: config 0 descriptor?? [ 955.544828][ T7797] usb 3-1: selecting invalid altsetting 1 [ 955.550600][ T7797] usb 3-1: Can not set alternate setting to 1, error: -22 [ 955.573047][T23216] netlink: 'syz.4.16570': attribute type 1 has an invalid length. [ 955.583438][T23220] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16572'. [ 955.602950][T23216] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.16570'. [ 955.607048][ T7797] synaptics_usb: probe of 3-1:0.0 failed with error -22 [ 955.844406][ T7797] usb 3-1: USB disconnect, device number 53 [ 955.986090][T23260] netlink: 7 bytes leftover after parsing attributes in process `syz.0.16585'. [ 956.048614][T23265] netlink: zone id is out of range [ 956.366429][T23260] netlink: 7 bytes leftover after parsing attributes in process `syz.0.16585'. [ 956.768789][T23313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16602'. [ 956.777994][T23309] IPv6: NLM_F_CREATE should be specified when creating new route [ 957.775573][ T8324] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 957.889525][T23419] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 957.899260][ T2283] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 957.928105][T23419] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 957.939660][T23424] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16643'. [ 957.948773][T23424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16643'. [ 957.959845][T23419] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 957.978085][T23424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16643'. [ 957.992369][T23419] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 958.018876][T23419] device geneve4 entered promiscuous mode [ 958.041089][ T8324] usb 4-1: Using ep0 maxpacket: 8 [ 958.090550][T23419] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 958.100787][T23419] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 958.110077][T23419] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 958.133798][T23419] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 958.225669][ T8324] usb 4-1: unable to get BOS descriptor or descriptor too short [ 958.339148][ T8324] usb 4-1: config 86 has an invalid interface number: 78 but max is 0 [ 958.350102][ T2283] usb 1-1: config 0 has an invalid interface number: 83 but max is 0 [ 958.352315][ T8324] usb 4-1: config 86 has no interface number 0 [ 958.358319][ T2283] usb 1-1: config 0 has no interface number 0 [ 958.358364][ T2283] usb 1-1: config 0 interface 83 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 4 [ 958.371012][ T8324] usb 4-1: config 86 interface 78 altsetting 128 bulk endpoint 0x88 has invalid maxpacket 1024 [ 958.403889][ T8324] usb 4-1: config 86 interface 78 altsetting 128 bulk endpoint 0x5 has invalid maxpacket 1023 [ 958.414597][ T8324] usb 4-1: config 86 interface 78 has no altsetting 0 [ 958.446839][ T2283] usb 1-1: config 0 interface 83 altsetting 0 endpoint 0x82 has invalid maxpacket 246, setting to 64 [ 958.553080][T23459] netlink: 256 bytes leftover after parsing attributes in process `syz.4.16653'. [ 958.610210][ T8324] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0121, bcdDevice=a4.7d [ 958.620638][ T8324] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.652621][ T8324] usb 4-1: Product: syz [ 958.663249][ T8324] usb 4-1: Manufacturer: syz [ 958.664591][ T2283] usb 1-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 958.670325][ T8324] usb 4-1: SerialNumber: syz [ 958.695445][ T2283] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.704539][ T2283] usb 1-1: Product: syz [ 958.707897][T23394] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 958.709034][T23472] netlink: 288 bytes leftover after parsing attributes in process `syz.4.16657'. [ 958.725433][ T2283] usb 1-1: Manufacturer: syz [ 958.730408][ T2283] usb 1-1: SerialNumber: syz [ 958.730546][T23394] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 958.740513][ T2283] usb 1-1: config 0 descriptor?? [ 958.742504][ T7797] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 958.769542][T23399] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 958.796168][ T2283] redrat3 1-1:0.83: Couldn't find all endpoints [ 958.802606][ T23] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 959.015994][ T7797] usb 3-1: Using ep0 maxpacket: 32 [ 959.033494][ T4177] usb 1-1: USB disconnect, device number 40 [ 959.098077][ T8324] kvaser_usb 4-1:86.78: Cannot get software info, error -71 [ 959.113221][ T8324] kvaser_usb: probe of 4-1:86.78 failed with error -71 [ 959.118664][T23515] PKCS8: Unsupported PKCS#8 version [ 959.127608][ T8324] usb 4-1: USB disconnect, device number 31 [ 959.163198][ T7797] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 959.269696][T23531] xt_recent: Unsupported userspace flags (000000b1) [ 959.303865][ T23] usb 2-1: unable to get BOS descriptor or descriptor too short [ 959.347186][ T7797] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 959.362914][ T7797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.372508][ T7797] usb 3-1: Product: syz [ 959.377015][ T7797] usb 3-1: Manufacturer: syz [ 959.390131][ T7797] usb 3-1: SerialNumber: syz [ 959.398354][ T7797] usb 3-1: config 0 descriptor?? [ 959.401391][ T23] usb 2-1: config 189 has an invalid interface number: 127 but max is 0 [ 959.411803][ T23] usb 2-1: config 189 has no interface number 0 [ 959.420159][ T23] usb 2-1: config 189 interface 127 has no altsetting 0 [ 959.423193][T23446] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 959.451031][ T7797] hub 3-1:0.0: bad descriptor, ignoring hub [ 959.457985][ T7797] hub: probe of 3-1:0.0 failed with error -5 [ 959.470541][T23541] loop4: detected capacity change from 0 to 4096 [ 959.473578][ T7797] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input70 [ 959.500716][T23541] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 959.639790][ T23] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 959.648378][T23550] netlink: 'syz.0.16679': attribute type 1 has an invalid length. [ 959.659953][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.691075][ T23] usb 2-1: Product: syz [ 959.703704][T23553] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 959.714789][ T23] usb 2-1: Manufacturer: syz [ 959.737250][ T7797] lo speed is unknown, defaulting to 1000 [ 959.776075][ T23] usb 2-1: SerialNumber: syz [ 959.837976][ T8324] usb 3-1: USB disconnect, device number 54 [ 959.845576][ C0] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 959.903454][T23573] netlink: 14 bytes leftover after parsing attributes in process `syz.4.16684'. [ 960.002641][T23593] loop3: detected capacity change from 0 to 512 [ 960.066009][T23593] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.16688: bg 0: block 4: invalid block bitmap [ 960.085743][T23593] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 960.105693][T23593] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.16688: invalid indirect mapped block 1 (level 1) [ 960.110738][ T23] usbserial_generic 2-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 960.142483][T23593] EXT4-fs (loop3): 1 truncate cleaned up [ 960.152177][T23593] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 960.166846][ T23] usbserial_generic 2-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 960.225813][ T23] usbserial_generic 2-1:189.127: device has no bulk endpoints [ 960.233944][ T23] safe_serial 2-1:189.127: safe_serial converter detected [ 960.249470][ T23] safe_serial: probe of 2-1:189.127 failed with error -22 [ 960.273215][ T23] usb 2-1: USB disconnect, device number 47 [ 960.444995][T23633] netlink: 'syz.2.16698': attribute type 1 has an invalid length. [ 960.478682][T23633] netlink: 'syz.2.16698': attribute type 2 has an invalid length. [ 960.492736][T23637] loop4: detected capacity change from 0 to 512 [ 960.554006][T23640] device ip6gretap8 entered promiscuous mode [ 960.579936][T23637] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000003,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 960.642099][T23637] ext4 filesystem being mounted at /3286/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 960.939899][T23631] loop3: detected capacity change from 0 to 40427 [ 960.982590][T23666] loop4: detected capacity change from 0 to 1764 [ 961.069762][T23631] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 961.093585][T23666] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 961.105461][T23631] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 961.181355][T23631] F2FS-fs (loop3): invalid crc value [ 961.221292][T23631] F2FS-fs (loop3): Found nat_bits in checkpoint [ 961.254511][ T8324] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 961.384717][T23631] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 961.391800][T23631] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 961.438471][T23709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16719'. [ 961.518105][T23709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16719'. [ 961.531014][T23631] attempt to access beyond end of device [ 961.531014][T23631] loop3: rw=2049, want=45104, limit=40427 [ 961.818311][ T8324] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 961.827698][ T8324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.847809][ T8324] usb 2-1: Product: syz [ 961.860648][ T8324] usb 2-1: Manufacturer: syz [ 961.904723][ T8324] usb 2-1: SerialNumber: syz [ 961.919253][ T8324] usb 2-1: config 0 descriptor?? [ 961.969335][T23749] netlink: 36 bytes leftover after parsing attributes in process `syz.0.16735'. [ 961.982136][ T8324] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 962.128161][T23761] netlink: 'syz.2.16739': attribute type 1 has an invalid length. [ 962.148272][T23761] netlink: 'syz.2.16739': attribute type 2 has an invalid length. [ 962.349132][T23779] netlink: 'syz.4.16746': attribute type 3 has an invalid length. [ 962.457727][ T8324] gspca_sunplus: reg_w_riv err -71 [ 962.462994][ T8324] sunplus: probe of 2-1:0.0 failed with error -71 [ 962.468356][T23789] netlink: 256 bytes leftover after parsing attributes in process `syz.4.16748'. [ 962.493573][ T8324] usb 2-1: USB disconnect, device number 48 [ 962.589979][T23800] comedi comedi0: comedi_config --init_data is deprecated [ 962.685907][T23807] netlink: 10 bytes leftover after parsing attributes in process `syz.3.16751'. [ 962.771727][ T7797] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 963.102364][T23846] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16765'. [ 963.163066][ T7797] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 963.182217][ T7797] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 963.203568][ T7797] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 963.223194][ T7797] usb 3-1: config 220 has no interface number 2 [ 963.231310][ T7797] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 963.267970][ T7797] usb 3-1: config 220 interface 0 has no altsetting 0 [ 963.279143][ T7797] usb 3-1: config 220 interface 76 has no altsetting 0 [ 963.299678][ T7797] usb 3-1: config 220 interface 1 has no altsetting 0 [ 963.312208][T23863] netlink: 56 bytes leftover after parsing attributes in process `syz.0.16771'. [ 963.461452][T23875] loop4: detected capacity change from 0 to 2048 [ 963.476446][ T7797] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 963.497917][ T7797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.515693][ T7797] usb 3-1: Product: syz [ 963.533574][ T7797] usb 3-1: Manufacturer: syz [ 963.538504][ T7797] usb 3-1: SerialNumber: syz [ 963.942587][ T7797] usb 3-1: selecting invalid altsetting 0 [ 963.949030][ T7797] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 963.989894][ T7797] usb 3-1: No valid video chain found. [ 964.138517][ T7797] usb 3-1: selecting invalid altsetting 0 [ 964.144622][ T7797] usbtest: probe of 3-1:220.1 failed with error -22 [ 964.162763][ T7797] usb 3-1: USB disconnect, device number 55 [ 964.251414][T23939] loop3: detected capacity change from 0 to 4096 [ 964.362740][T23939] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 964.408753][T23939] EXT4-fs (loop3): inline encryption not supported [ 964.415398][T23939] EXT4-fs (loop3): Test dummy encryption mode enabled [ 964.485041][T23939] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 964.513833][T23939] System zones: 0-5 [ 964.525409][T23985] netlink: 32 bytes leftover after parsing attributes in process `syz.0.16812'. [ 964.534976][T23985] tc_dump_action: action bad kind [ 964.550705][T23939] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,inlinecrypt,errors=remount-ro,test_dummy_encryption=v1,norecovery,delalloc,nogrpid,minixdf,. Quota mode: writeback. [ 964.594076][T23983] netlink: 132 bytes leftover after parsing attributes in process `syz.4.16813'. [ 964.995742][T24018] netlink: 68 bytes leftover after parsing attributes in process `syz.2.16826'. [ 965.326441][T24057] program syz.0.16839 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 965.589671][ T23] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 965.608409][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 965.608423][ T26] audit: type=1400 audit(1785243948.849:60): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=24079 comm="syz.1.16848" [ 965.698117][T24091] tmpfs: Bad value for 'mpol' [ 966.088353][ T23] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 966.120323][ T23] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 966.153049][ T23] usb 5-1: config 0 has an invalid descriptor of length 191, skipping remainder of the config [ 966.163366][ T23] usb 5-1: config 0 has no interface number 0 [ 966.435161][ T23] usb 5-1: New USB device found, idVendor=006d, idProduct=0800, bcdDevice= b.28 [ 966.455332][ T23] usb 5-1: New USB device strings: Mfr=1, Product=26, SerialNumber=3 [ 966.475901][ T23] usb 5-1: Product: syz [ 966.488596][ T23] usb 5-1: Manufacturer: syz [ 966.504017][ T23] usb 5-1: SerialNumber: syz [ 966.531438][ T23] usb 5-1: config 0 descriptor?? [ 966.610083][ T23] usb 5-1: Found UVC 0.00 device syz (006d:0800) [ 966.616481][ T23] usb 5-1: No valid video chain found. [ 966.717265][T24190] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 966.876052][ T8324] usb 5-1: USB disconnect, device number 57 [ 967.338492][T24250] __nla_validate_parse: 2 callbacks suppressed [ 967.338511][T24250] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.16906'. [ 967.536598][T24270] netlink: 'syz.4.16915': attribute type 3 has an invalid length. [ 967.588527][T24270] netlink: 132 bytes leftover after parsing attributes in process `syz.4.16915'. [ 967.679260][ T26] audit: type=1400 audit(1785243950.759:61): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A21D01A0B978D2F2F262D2A83D1 pid=24280 comm="syz.0.16919" [ 967.782076][T24287] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16922'. [ 967.902884][T24299] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16924'. [ 967.933211][T24299] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 968.508099][T24352] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16944'. [ 968.624479][T24361] devtmpfs: Unknown parameter 'debug' [ 968.800739][T24382] loop2: detected capacity change from 0 to 512 [ 968.853532][T24385] netlink: 'syz.3.16955': attribute type 2 has an invalid length. [ 968.872440][T24385] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.16955'. [ 968.893250][T24382] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 2: comm syz.2.16954: invalid block [ 968.921073][T24382] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.16954: invalid indirect mapped block 10 (level 1) [ 968.946553][ T23] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 968.969138][T24382] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.16954: invalid indirect mapped block 8 (level 1) [ 969.001045][T24382] EXT4-fs (loop2): 1 truncate cleaned up [ 969.007549][T24382] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 969.175631][T24406] nfs4: Bad value for 'source' [ 969.213935][T24408] netlink: 'syz.3.16962': attribute type 4 has an invalid length. [ 969.235118][T24408] netlink: 17 bytes leftover after parsing attributes in process `syz.3.16962'. [ 969.244681][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 969.369913][T24423] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 969.377134][T24427] xt_hashlimit: max too large, truncated to 1048576 [ 969.467430][T24435] netlink: 36 bytes leftover after parsing attributes in process `syz.2.16971'. [ 969.599814][ T23] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 969.615229][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.638519][ T23] usb 5-1: Product: syz [ 969.653364][ T23] usb 5-1: Manufacturer: syz [ 969.666053][ T23] usb 5-1: SerialNumber: syz [ 969.691542][ T23] usb 5-1: config 0 descriptor?? [ 969.819669][T24474] netlink: 68 bytes leftover after parsing attributes in process `syz.0.16988'. [ 969.918446][T24486] netlink: 'syz.3.16992': attribute type 1 has an invalid length. [ 969.981219][ T23] speedtch 5-1:0.0: speedtch_bind: data interface not found! [ 969.988681][ T23] speedtch 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 970.016207][T24492] device bridge0 entered promiscuous mode [ 970.095674][ T1110] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 970.172867][T24507] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16998'. [ 970.195624][ T23] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 970.205597][ T7797] usb 5-1: USB disconnect, device number 58 [ 970.397915][ T1110] usb 3-1: Using ep0 maxpacket: 8 [ 970.401490][ T8324] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 970.477552][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 970.618444][ T1110] usb 3-1: unable to get BOS descriptor or descriptor too short [ 970.650926][ T23] usb 1-1: config 6 has an invalid interface number: 2 but max is 0 [ 970.659193][ T23] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 970.669379][ T23] usb 1-1: config 6 has no interface number 0 [ 970.675683][ T23] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 970.685460][ T23] usb 1-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 970.715987][ T1110] usb 3-1: config 127 has an invalid interface number: 189 but max is 0 [ 970.724501][ T1110] usb 3-1: config 127 has no interface number 0 [ 970.730916][ T1110] usb 3-1: config 127 interface 189 has no altsetting 0 [ 970.796752][ T8324] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 970.808864][ T8324] usb 4-1: config 0 has no interface number 0 [ 970.867716][ T23] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 970.877537][T24540] [U]  [ 970.878438][ T23] usb 1-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 970.907965][ T23] usb 1-1: Product: syz [ 970.912798][ T1110] usb 3-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=7c.4e [ 970.932485][ T1110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.941347][ T23] usb 1-1: Manufacturer: syz [ 970.946940][ T23] usb 1-1: SerialNumber: syz [ 970.954315][ T1110] usb 3-1: Product: syz [ 970.963251][ T1110] usb 3-1: Manufacturer: syz [ 970.973458][ T1110] usb 3-1: SerialNumber: syz [ 970.989361][ T8324] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 971.009439][ T23] hso 1-1:6.2: Failed to find INT IN ep [ 971.010856][ T8324] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.039200][ T8324] usb 4-1: Product: syz [ 971.065515][ T8324] usb 4-1: Manufacturer: syz [ 971.084033][ T8324] usb 4-1: SerialNumber: syz [ 971.105148][ T8324] usb 4-1: config 0 descriptor?? [ 971.152956][T24561] netlink: 'syz.4.17013': attribute type 10 has an invalid length. [ 971.164250][T24561] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 971.271640][ T7797] usb 1-1: USB disconnect, device number 41 [ 971.364561][T24584] CIFS: bad ip= option (.RHe'ˠ/1C~1WexEAeSb{~R) [ 971.385549][ T1110] usb 3-1: USB disconnect, device number 56 [ 971.398796][ T8324] asix: probe of 4-1:0.251 failed with error -71 [ 971.416373][ T8324] usb 4-1: USB disconnect, device number 32 [ 972.014471][T24648] netlink: 'syz.3.17034': attribute type 8 has an invalid length. [ 972.108981][T24662] loop2: detected capacity change from 0 to 16 [ 972.157936][T24662] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 972.265444][T24673] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 972.744240][T24724] device syz_tun entered promiscuous mode [ 973.341501][T24780] netlink: 'syz.1.17085': attribute type 21 has an invalid length. [ 973.349936][T24780] IPv6: NLM_F_CREATE should be specified when creating new route [ 973.357903][T24780] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 973.365200][T24780] IPv6: NLM_F_CREATE should be set when creating new route [ 973.372504][T24780] IPv6: NLM_F_CREATE should be set when creating new route [ 973.379827][T24780] IPv6: NLM_F_CREATE should be set when creating new route [ 973.403586][ T23] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 973.571762][T24797] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 973.724514][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 973.752720][ T8324] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 973.880779][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 973.912960][ T23] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 974.022425][ T8324] usb 1-1: Using ep0 maxpacket: 8 [ 974.151641][ T23] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 974.152663][ T8324] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 974.173200][ T23] usb 4-1: New USB device strings: Mfr=229, Product=129, SerialNumber=131 [ 974.203977][ T8324] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 974.224199][ T23] usb 4-1: Product: syz [ 974.241377][ T23] usb 4-1: Manufacturer: syz [ 974.245680][ T8324] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 974.252354][ T23] usb 4-1: SerialNumber: syz [ 974.338480][ T23] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input72 [ 974.444336][ T8324] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 974.467947][ T8324] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.504858][ T8324] usb 1-1: Product: syz [ 974.517244][ T8324] usb 1-1: Manufacturer: syz [ 974.534998][ T8324] usb 1-1: SerialNumber: syz [ 974.593013][ T4177] usb 4-1: USB disconnect, device number 33 [ 974.614993][ T4177] appletouch 4-1:1.0: input: appletouch disconnected [ 974.646773][T24885] openvswitch: netlink: Actions may not be safe on all matching packets [ 974.991659][ T8324] usb 1-1: USB disconnect, device number 42 [ 975.112431][T24959] loop2: detected capacity change from 0 to 8 [ 975.116312][ T23] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 975.212420][T24971] netlink: 'syz.4.17138': attribute type 21 has an invalid length. [ 975.235179][T24971] __nla_validate_parse: 3 callbacks suppressed [ 975.235195][T24971] netlink: 128 bytes leftover after parsing attributes in process `syz.4.17138'. [ 975.278801][T24971] netlink: 'syz.4.17138': attribute type 5 has an invalid length. [ 975.287069][ T4344] udevd[4344]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 975.303984][T24971] netlink: 3 bytes leftover after parsing attributes in process `syz.4.17138'. [ 975.446689][T24999] loop3: detected capacity change from 0 to 64 [ 975.453772][T24997] netlink: 1244 bytes leftover after parsing attributes in process `syz.4.17145'. [ 975.522354][T24999] hfs: inconsistency in B*Tree (1,0,2,2,3) [ 975.647829][ T23] usb 2-1: unable to get BOS descriptor or descriptor too short [ 975.657855][ T2283] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 975.744932][ T23] usb 2-1: not running at top speed; connect to a high speed hub [ 975.853195][ T23] usb 2-1: config 0 has an invalid interface number: 135 but max is 0 [ 975.861413][ T23] usb 2-1: config 0 has no interface number 0 [ 975.889860][ T23] usb 2-1: config 0 interface 135 altsetting 4 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 975.918334][ T23] usb 2-1: config 0 interface 135 has no altsetting 0 [ 976.086847][ T2283] usb 3-1: not running at top speed; connect to a high speed hub [ 976.149956][ T23] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=67.ce [ 976.177781][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.194360][ T23] usb 2-1: Product: syz [ 976.199146][ T23] usb 2-1: Manufacturer: syz [ 976.209654][ T2283] usb 3-1: config 88 has an invalid interface number: 11 but max is 0 [ 976.218469][ T2283] usb 3-1: config 88 has no interface number 0 [ 976.228817][ T23] usb 2-1: SerialNumber: syz [ 976.233665][ T2283] usb 3-1: config 88 interface 11 has no altsetting 0 [ 976.242704][ T23] usb 2-1: config 0 descriptor?? [ 976.273215][T25074] loop3: detected capacity change from 0 to 8 [ 976.279893][T24904] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 976.343106][T25080] x_tables: ip6_tables: SNAT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING [ 976.392906][T25084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17176'. [ 976.476061][ T2283] usb 3-1: New USB device found, idVendor=0545, idProduct=800d, bcdDevice= 3.0a [ 976.505061][ T2283] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.536620][ T2283] usb 3-1: Product: syz [ 976.551867][ T2283] usb 3-1: Manufacturer: syz [ 976.556569][ T2283] usb 3-1: SerialNumber: syz [ 976.602533][ T23] iguanair: probe of 2-1:0.135 failed with error -12 [ 976.625048][ T23] usb 2-1: USB disconnect, device number 49 [ 976.634303][T25107] ipt_CLUSTERIP: no config found for 127.0.0.1, need 'new' [ 976.664834][T25112] loop4: detected capacity change from 0 to 128 [ 976.715563][T25112] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2 [ 976.782657][T25124] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.17186'. [ 976.793165][T25124] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 976.882163][T25136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17188'. [ 976.946953][ T2283] usb 3-1: USB disconnect, device number 57 [ 977.062155][T25152] netlink: 'syz.4.17195': attribute type 2 has an invalid length. [ 977.082783][T25155] netlink: 16 bytes leftover after parsing attributes in process `syz.0.17194'. [ 977.135579][T25155] netlink: 60 bytes leftover after parsing attributes in process `syz.0.17194'. [ 977.347227][T25173] lo speed is unknown, defaulting to 1000 [ 977.448029][T25188] netlink: 'syz.0.17207': attribute type 1 has an invalid length. [ 977.455957][T25188] netlink: 'syz.0.17207': attribute type 1 has an invalid length. [ 977.510707][T25192] netlink: 'syz.4.17209': attribute type 13 has an invalid length. [ 977.579042][T25201] loop2: detected capacity change from 0 to 16 [ 977.631892][T25201] erofs: (device loop2): mounted with root inode @ nid 36. [ 977.712444][T25201] erofs: (device loop2): erofs_read_inode: bogus i_mode (4355) @ nid 46 [ 977.824674][T25173] lo speed is unknown, defaulting to 1000 [ 978.210280][T25273] loop4: detected capacity change from 0 to 256 [ 978.366220][T25273] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 978.403734][T25273] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 978.424019][T25273] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0x05c65c57, utbl_chksum : 0xe619d30d) [ 978.916021][T25268] loop2: detected capacity change from 0 to 40427 [ 979.033435][T25319] netlink: 'syz.1.17247': attribute type 21 has an invalid length. [ 979.042961][T25324] program syz.3.17248 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 979.068822][T25268] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 979.091360][T25268] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 979.123956][T25319] netlink: 'syz.1.17247': attribute type 6 has an invalid length. [ 979.165129][T25268] F2FS-fs (loop2): invalid crc value [ 979.170328][T25319] netlink: 132 bytes leftover after parsing attributes in process `syz.1.17247'. [ 979.222714][T25268] F2FS-fs (loop2): Found nat_bits in checkpoint [ 979.448868][T25268] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 979.458802][T25268] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 979.570673][T25361] netlink: 144 bytes leftover after parsing attributes in process `syz.4.17261'. [ 979.895440][ T23] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 979.934370][ T3059] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 979.981723][ T3059] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 980.207631][ T2283] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 980.215555][ T1110] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 980.317191][T25404] ip6t_srh: unknown srh match flags 4001 [ 980.375476][ T23] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 980.394589][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.426819][T25409] comedi comedi0: Minor 2147483647 is invalid! [ 980.434881][ T23] usb 2-1: config 0 descriptor?? [ 980.556680][ T2283] usb 1-1: Using ep0 maxpacket: 8 [ 980.609040][T25421] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 980.639189][T25424] netlink: 'syz.2.17280': attribute type 32 has an invalid length. [ 980.654255][ T1110] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 980.662411][ T1110] usb 5-1: config 0 has no interface number 0 [ 980.694307][ T1110] usb 5-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 980.719409][ T2283] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 980.729580][ T2283] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 980.753987][ T1110] usb 5-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 980.780216][ T2283] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.802125][ T1110] usb 5-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64 [ 980.805936][T25430] __nla_validate_parse: 2 callbacks suppressed [ 980.805952][T25430] netlink: 32 bytes leftover after parsing attributes in process `syz.2.17282'. [ 980.820918][ T2283] usb 1-1: config 0 descriptor?? [ 980.843971][ T1110] usb 5-1: config 0 interface 2 has no altsetting 0 [ 980.901953][ T2283] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 980.971330][ T23] ath6kl: Failed to submit usb control message: -71 [ 980.978158][ T23] ath6kl: unable to send the bmi data to the device: -71 [ 980.990115][ T23] ath6kl: Unable to send get target info: -71 [ 981.008925][ T23] ath6kl: Failed to init ath6kl core: -71 [ 981.072608][ T23] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 981.086734][ T1110] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f7.3f [ 981.118235][ T1110] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.129240][ T23] usb 2-1: USB disconnect, device number 50 [ 981.143586][ T1110] usb 5-1: Product: syz [ 981.147826][ T1110] usb 5-1: Manufacturer: syz [ 981.195874][ T1110] usb 5-1: SerialNumber: syz [ 981.202778][ T1110] usb 5-1: config 0 descriptor?? [ 981.250429][T25389] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 981.257551][T25389] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 981.358859][ T2283] gspca_vc032x: reg_w err -71 [ 981.364351][ T2283] vc032x: probe of 1-1:0.0 failed with error -71 [ 981.382951][ T2283] usb 1-1: USB disconnect, device number 43 [ 981.696690][T25510] loop3: detected capacity change from 0 to 16 [ 981.754568][T25510] erofs: (device loop3): mounted with root inode @ nid 36. [ 981.774318][ T1110] usb 5-1: USB disconnect, device number 59 [ 981.810722][T25510] erofs: (device loop3): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 981.846450][T25510] erofs: (device loop3): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 981.869838][T25510] erofs: (device loop3): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 981.896107][T25510] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 981.905031][ T26] audit: type=1800 audit(1785243963.890:62): pid=25510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.17302" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 981.924855][ C0] vkms_vblank_simulate: vblank timer overrun [ 982.377842][T25582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17320'. [ 982.539982][T25603] netlink: 'syz.2.17329': attribute type 11 has an invalid length. [ 982.580252][T25603] netlink: 'syz.2.17329': attribute type 5 has an invalid length. [ 982.634688][T25610] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17331'. [ 982.676209][T25610] netlink: 17 bytes leftover after parsing attributes in process `syz.0.17331'. [ 982.716296][ T26] audit: type=1326 audit(1785243964.637:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25611 comm="syz.4.17332" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faade6e2e99 code=0x0 [ 983.312375][T25683] netlink: 'syz.4.17359': attribute type 3 has an invalid length. [ 983.365330][T25689] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 983.656245][ T2283] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 983.752179][T25728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17375'. [ 983.840413][ T4177] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 983.862260][T25734] i2c i2c-0: DVB: adapter 0 frontend 0 symbol rate 6 out of range (1000000..45000000) [ 984.100510][ T4177] usb 5-1: Using ep0 maxpacket: 32 [ 984.154853][ T2283] usb 4-1: unable to get BOS descriptor or descriptor too short [ 984.230572][ T4177] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 984.250015][ T4177] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 984.252232][ T2283] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 984.271903][ T4177] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 984.301173][ T2283] usb 4-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 984.316909][ T4177] usb 5-1: config 1 has no interface number 0 [ 984.341042][ T4177] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 984.350275][ T2283] usb 4-1: config 1 interface 0 has no altsetting 1 [ 984.378003][ T4177] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 984.414539][ T4177] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 984.430669][T25784] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.17396'. [ 984.453057][ T4177] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.525544][ T4177] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 984.556071][ T2283] usb 4-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 984.577093][ T2283] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.632825][ T2283] usb 4-1: Product: syz [ 984.637194][ T2283] usb 4-1: Manufacturer: syz [ 984.641897][ T2283] usb 4-1: SerialNumber: syz [ 984.720265][ T2283] smsusb:smsusb_probe: board id=8, interface number 0 [ 984.762257][ T4177] snd_usb_pod 5-1:1.1: invalid control EP [ 984.768034][ T4177] snd_usb_pod 5-1:1.1: cannot start listening: -22 [ 984.788835][ T4177] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 984.821536][ T4177] snd_usb_pod: probe of 5-1:1.1 failed with error -22 [ 984.946016][ T2283] smsusb:smsusb_probe: usb_set_interface failed, rc -71 [ 984.958773][ T2283] smsusb: probe of 4-1:1.0 failed with error -71 [ 985.005058][ T4177] usb 5-1: USB disconnect, device number 60 [ 985.011399][ T2283] usb 4-1: USB disconnect, device number 34 [ 985.152076][T25846] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17412'. [ 985.514034][T25879] netlink: 96 bytes leftover after parsing attributes in process `syz.2.17424'. [ 985.564199][T25882] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 985.666177][ T2283] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 985.680667][T25890] loop2: detected capacity change from 0 to 512 [ 985.768605][T25890] EXT4-fs (loop2): Test dummy encryption mode enabled [ 985.787768][T25890] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.17428: inode has both inline data and extents flags [ 985.806058][T25890] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.17428: couldn't read orphan inode 15 (err -117) [ 985.824915][T25890] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 985.997056][ T2283] usb 2-1: Using ep0 maxpacket: 8 [ 986.170824][ T2283] usb 2-1: unable to get BOS descriptor or descriptor too short [ 986.257796][ T2283] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 986.299899][ T2283] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 986.320853][ T2283] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 986.331310][ T2283] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 986.361523][ T2283] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 986.372028][ T2283] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 986.374913][T25952] delete_channel: no stack [ 986.382999][ T2283] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 986.401782][T25958] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17450'. [ 986.424664][ T2283] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 986.557726][T25967] device bond4 entered promiscuous mode [ 986.571822][T25967] 8021q: adding VLAN 0 to HW filter on device bond4 [ 986.610991][T16386] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 986.647509][ T26] audit: type=1326 audit(1785243968.254:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26009 comm="syz.0.17457" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f33a0fc2e99 code=0x0 [ 986.677805][ T2283] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 986.709881][ T2283] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.740361][ T2283] usb 2-1: Product: syz [ 986.750982][ T2283] usb 2-1: Manufacturer: syz [ 986.756453][ T2283] usb 2-1: SerialNumber: syz [ 986.778166][ T2283] usb 2-1: config 0 descriptor?? [ 986.781956][T26023] loop4: detected capacity change from 0 to 512 [ 986.800326][T25867] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 986.859128][T26023] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 986.869606][ T2283] snd-usb-audio: probe of 2-1:0.0 failed with error -12 [ 986.911632][T26023] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #17: comm syz.4.17461: inode has both inline data and extents flags [ 986.929749][T26023] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.17461: couldn't read orphan inode 17 (err -117) [ 986.949522][T26023] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 986.999086][ T4364] udevd[4364]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 987.026276][T26050] loop2: detected capacity change from 0 to 4096 [ 987.036017][T26023] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.17461: bg 0: block 65: padding at end of block bitmap is not set [ 987.038242][ T8324] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 987.080860][T26023] Quota error (device loop4): write_blk: dquota write failed [ 987.091787][T16386] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 987.092250][T26023] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 987.112427][T16386] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 987.122536][ T2283] usb 2-1: USB disconnect, device number 51 [ 987.141640][T26050] ntfs: (device loop2): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 987.142571][T26023] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.17461: Failed to acquire dquot type 0 [ 987.200212][T16386] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 987.207147][T26050] ntfs: volume version 3.1. [ 987.210702][T16386] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 987.237895][T16386] usb 4-1: SerialNumber: syz [ 987.289339][T16386] usb 4-1: 0:2 : does not exist [ 987.536110][T16386] usb 4-1: USB disconnect, device number 35 [ 987.652728][T26107] loop4: detected capacity change from 0 to 128 [ 987.672031][T26107] affs: No valid root block on device loop4 [ 987.698601][ T4177] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 987.711819][ T8324] usb 1-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e [ 987.726738][ T8324] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.736444][ T8324] usb 1-1: Product: syz [ 987.741393][ T8324] usb 1-1: Manufacturer: syz [ 987.760948][ T8324] usb 1-1: SerialNumber: syz [ 987.769443][ T8324] usb 1-1: config 0 descriptor?? [ 987.774857][T26114] netlink: 'syz.1.17475': attribute type 3 has an invalid length. [ 987.818653][ T8324] hub 1-1:0.0: bad descriptor, ignoring hub [ 987.825072][ T8324] hub: probe of 1-1:0.0 failed with error -5 [ 987.892522][ T8324] usbsevseg 1-1:0.0: USB 7 Segment device now attached [ 987.935571][T26124] netlink: 'syz.4.17478': attribute type 5 has an invalid length. [ 987.975519][ T4177] usb 3-1: Using ep0 maxpacket: 32 [ 988.121220][ T4177] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 988.137740][ T4177] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 59391, setting to 1024 [ 988.219208][ T8324] usb 1-1: USB disconnect, device number 44 [ 988.250993][ T8324] usbsevseg 1-1:0.0: USB 7 Segment now disconnected [ 988.349129][ T4177] usb 3-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 988.375383][ T4177] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.384066][T26169] netlink: 'syz.1.17491': attribute type 1 has an invalid length. [ 988.403205][ T4177] usb 3-1: Product: syz [ 988.423098][ T4177] usb 3-1: Manufacturer: syz [ 988.445038][ T4177] usb 3-1: SerialNumber: syz [ 988.476133][ T4177] usb 3-1: config 0 descriptor?? [ 988.511746][T26076] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 988.671419][T26195] syz.1.17500 (26195): /proc/26195/oom_adj is deprecated, please use /proc/26195/oom_score_adj instead. [ 988.748700][T26204] netlink: 'syz.3.17502': attribute type 1 has an invalid length. [ 988.771752][ T4177] usbtouchscreen: probe of 3-1:0.0 failed with error -71 [ 988.801435][ T4177] usb 3-1: USB disconnect, device number 58 [ 988.847738][T26204] netlink: 224 bytes leftover after parsing attributes in process `syz.3.17502'. [ 988.858213][ T8324] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 989.007641][T26262] ipt_REJECT: ECHOREPLY no longer supported. [ 989.118572][ T8324] usb 5-1: Using ep0 maxpacket: 16 [ 989.248641][ T8324] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 989.274691][ T8324] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 989.284417][ T4177] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 989.378760][ T8324] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 989.400359][ T8324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 989.420853][T26295] netlink: 92 bytes leftover after parsing attributes in process `syz.1.17523'. [ 989.437295][T26295] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17523'. [ 989.448754][ T8324] usb 5-1: SerialNumber: syz [ 989.466170][T26295] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17523'. [ 989.477511][T26295] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17523'. [ 989.532641][ T8324] usb 5-1: 0:2 : does not exist [ 989.551881][ T4177] usb 1-1: Using ep0 maxpacket: 32 [ 989.682072][ T4177] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 989.706572][T26305] xt_CT: No such helper "snmp_trap" [ 989.728087][ T4177] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 989.788470][ T8324] usb 5-1: USB disconnect, device number 61 [ 989.963876][ T4177] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 989.996191][ T4177] usb 1-1: New USB device strings: Mfr=229, Product=129, SerialNumber=131 [ 990.032387][ T4177] usb 1-1: Product: syz [ 990.036738][ T4177] usb 1-1: Manufacturer: syz [ 990.067455][ T4177] usb 1-1: SerialNumber: syz [ 990.139711][ T4177] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input75 [ 990.515294][T26399] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 990.522657][T26399] IPv6: NLM_F_CREATE should be set when creating new route [ 990.530389][T26399] IPv6: NLM_F_CREATE should be set when creating new route [ 990.574976][ T4177] usb 1-1: USB disconnect, device number 45 [ 990.623072][T26408] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17555'. [ 990.649888][ T4177] appletouch 1-1:1.0: input: appletouch disconnected [ 990.755892][T26425] netdevsim netdevsim1: Firmware load for '..' refused, path contains '..' component [ 991.353220][T26472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17577'. [ 991.737577][T26505] openvswitch: netlink: Key 2 has unexpected len 2 expected 4 [ 992.277907][T26550] Unsupported ieee802154 address type: 0 [ 992.373958][T26559] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 992.391805][T26566] device batadv_slave_0 entered promiscuous mode [ 992.445052][T26566] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 992.476045][T26571] netlink: 40 bytes leftover after parsing attributes in process `syz.1.17614'. [ 992.574926][T26579] ALSA: mixer_oss: invalid OSS volume 'u' [ 992.781745][T26600] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19971 - 0 [ 992.790759][T26600] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19971 - 0 [ 992.841649][T26600] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19971 - 0 [ 992.846987][T26611] netlink: 'syz.1.17628': attribute type 32 has an invalid length. [ 992.867793][T26600] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19971 - 0 [ 992.929808][T26618] netlink: 40 bytes leftover after parsing attributes in process `syz.2.17630'. [ 993.074967][T26632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17635'. [ 993.301772][T26651] netlink: 140 bytes leftover after parsing attributes in process `syz.0.17642'. [ 993.320417][T26651] netlink: 10 bytes leftover after parsing attributes in process `syz.0.17642'. [ 993.488735][T26651] bond0: (slave bond_slave_0): Releasing backup interface [ 993.619308][T26651] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 993.682662][T26676] netlink: 209772 bytes leftover after parsing attributes in process `syz.1.17652'. [ 993.710101][T26674] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17650'. [ 993.714886][T26676] openvswitch: netlink: Message has 80 unknown bytes. [ 993.816357][T26687] 9pnet: p9_fd_create_tcp (26687): problem connecting socket to 127.0.0.1 [ 994.022040][T26702] netlink: 'syz.2.17659': attribute type 3 has an invalid length. [ 994.152353][T26713] Invalid ELF header magic: != ELF [ 994.168350][T26718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17665'. [ 994.282811][T26728] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17669'. [ 994.514949][T26754] netlink: 'syz.0.17682': attribute type 1 has an invalid length. [ 994.533663][T26756] device bridge3 entered promiscuous mode [ 994.642090][T26771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 994.884778][T26799] siw: device registration error -23 [ 994.997106][T26807] libceph: resolve ' [ 994.997106][T26807] -&fYǝa2i [ 994.997106][T26807] .?&*&' (ret=-3): failed [ 995.488565][T26865] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 995.577668][ T4177] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 995.613693][T26880] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.17724'. [ 995.788299][T16386] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 995.848795][ T4177] usb 5-1: Using ep0 maxpacket: 8 [ 995.978766][ T4177] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 996.173902][ T4177] usb 5-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice= 5.f6 [ 996.183140][ T4177] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.206242][ T4177] usb 5-1: Product: syz [ 996.210743][ T4177] usb 5-1: Manufacturer: syz [ 996.215373][ T4177] usb 5-1: SerialNumber: syz [ 996.215423][T26935] sp0: Synchronizing with TNC [ 996.226434][T16386] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 996.242500][T16386] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 996.257781][T16386] usb 2-1: config 220 has no interface number 2 [ 996.262117][ T4177] usb 5-1: config 0 descriptor?? [ 996.272394][T16386] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 996.292070][T16386] usb 2-1: config 220 interface 0 has no altsetting 0 [ 996.300348][T16386] usb 2-1: config 220 interface 76 has no altsetting 0 [ 996.314048][T16386] usb 2-1: config 220 interface 1 has no altsetting 0 [ 996.316574][ T4177] gspca_main: t613-2.14.0 probing 17a1:0128 [ 996.486651][ T2283] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 996.499240][T16386] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 996.508315][T16386] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.517874][T16386] usb 2-1: Product: syz [ 996.529951][T16386] usb 2-1: Manufacturer: syz [ 996.538498][T16386] usb 2-1: SerialNumber: syz [ 996.578416][ T4177] gspca_t613: unknown sensor 0000 [ 996.584102][ T4177] t613: probe of 5-1:0.0 failed with error -22 [ 996.593403][ T4177] usb 5-1: USB disconnect, device number 62 [ 996.650636][ T8324] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 996.857805][T26982] loop2: detected capacity change from 0 to 32768 [ 996.932447][ T8324] usb 1-1: Using ep0 maxpacket: 16 [ 996.944960][T26982] XFS (loop2): Mounting V5 Filesystem [ 996.954560][T16386] usb 2-1: selecting invalid altsetting 0 [ 996.961222][T16386] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 996.970049][T16386] usb 2-1: No valid video chain found. [ 997.006472][T26982] XFS (loop2): Ending clean mount [ 997.033064][T16386] usb 2-1: selecting invalid altsetting 0 [ 997.050053][T16386] usbtest: probe of 2-1:220.1 failed with error -22 [ 997.050756][ T4191] XFS (loop2): Unmounting Filesystem [ 997.073578][T16386] usb 2-1: USB disconnect, device number 52 [ 997.160165][ T2283] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 997.179030][ T2283] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.187559][ T2283] usb 4-1: Product: syz [ 997.192004][ T2283] usb 4-1: Manufacturer: syz [ 997.200801][ T2283] usb 4-1: SerialNumber: syz [ 997.248804][ T8324] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 997.258646][ T8324] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.266942][ T8324] usb 1-1: Product: syz [ 997.271597][ T8324] usb 1-1: Manufacturer: syz [ 997.276252][ T8324] usb 1-1: SerialNumber: syz [ 997.287874][ T2283] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 997.288130][ T8324] usb 1-1: config 0 descriptor?? [ 997.356785][ T8324] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 997.474581][ T4177] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 997.582786][ T8324] usb 1-1: clie_3_5_startup: get config number bad return length: 0 [ 997.604602][ T8324] visor: probe of 1-1:0.0 failed with error -5 [ 997.638321][T27031] netlink: 'syz.1.17760': attribute type 1 has an invalid length. [ 997.641219][T27032] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 997.682571][T27032] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 997.695799][T27032] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 997.711345][T27032] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 997.729741][T27032] device geneve4 entered promiscuous mode [ 997.756199][ T4177] usb 5-1: Using ep0 maxpacket: 32 [ 997.849824][ T8324] usb 1-1: USB disconnect, device number 46 [ 997.886188][ T4177] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 997.908127][ T4177] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 997.947916][T27055] __nla_validate_parse: 2 callbacks suppressed [ 997.947933][T27055] netlink: 132 bytes leftover after parsing attributes in process `syz.2.17767'. [ 998.027479][ T2283] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 998.113753][ T4177] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 998.122839][ T4177] usb 5-1: New USB device strings: Mfr=229, Product=129, SerialNumber=131 [ 998.154702][ T4177] usb 5-1: Product: syz [ 998.159355][ T4177] usb 5-1: Manufacturer: syz [ 998.164008][ T4177] usb 5-1: SerialNumber: syz [ 998.239149][ T4177] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input77 [ 998.298463][T16386] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 998.341294][T16386] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 998.361901][ T23] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 998.403268][T27098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17780'. [ 998.427065][T27098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17780'. [ 998.480740][ T23] usb 4-1: USB disconnect, device number 36 [ 998.543383][T16386] usb 5-1: USB disconnect, device number 63 [ 998.582505][T16386] appletouch 5-1:1.0: input: appletouch disconnected [ 998.861653][T27150] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17797'. [ 999.208414][ T2283] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 999.215442][ T2283] ath9k_htc: Failed to initialize the device [ 999.236967][T27182] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.17810'. [ 999.255515][ T23] usb 4-1: ath9k_htc: USB layer deinitialized [ 999.275734][T27185] xt_socket: unknown flags 0xc [ 999.316684][T27197] tc_dump_action: action bad kind [ 999.393029][ T1110] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 999.468490][ T1110] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 999.732238][T27252] netlink: 'syz.2.17831': attribute type 3 has an invalid length. [ 999.753443][T27252] netlink: 224 bytes leftover after parsing attributes in process `syz.2.17831'. [ 999.905078][T27266] tc_dump_action: action bad kind [ 1000.335513][T27315] netlink: 'syz.0.17854': attribute type 21 has an invalid length. [ 1000.345554][T27313] loop3: detected capacity change from 0 to 512 [ 1000.362233][T27315] netlink: 100 bytes leftover after parsing attributes in process `syz.0.17854'. [ 1000.398537][T27313] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 1000.425917][T27313] EXT4-fs (loop3): Ignoring removed nobh option [ 1000.432260][T27313] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 1000.494808][T27313] EXT4-fs (loop3): Ignoring removed bh option [ 1000.509123][ T1110] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 1000.549466][T27313] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 1000.605249][T27313] EXT4-fs (loop3): 1 orphan inode deleted [ 1000.624668][T27313] EXT4-fs (loop3): mounted filesystem without journal. Opts: nomblk_io_submit,nobh,prjquota,bsdgroups,nodiscard,sysvgroups,jqfmt=vfsold,nomblk_io_submit,discard,bh,nodelalloc,noinit_itable,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 1000.867444][T27365] autofs4:pid:27365:autofs_fill_super: called with bogus options [ 1000.877529][ T4177] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1000.927506][ T1110] usb 2-1: not running at top speed; connect to a high speed hub [ 1000.946492][T27373] netlink: 'syz.3.17874': attribute type 1 has an invalid length. [ 1000.962780][T27373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17874'. [ 1001.029113][ T1110] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 1001.148211][ T4177] usb 5-1: Using ep0 maxpacket: 16 [ 1001.161123][T27397] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 1001.172130][T27397] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 1001.249733][ T1110] usb 2-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=60.1b [ 1001.278497][ T4177] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1001.285108][ T1110] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.297925][ T1110] usb 2-1: Product: syz [ 1001.305930][ T4177] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1001.308698][ T2283] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1001.337356][ T4177] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1001.338431][ T1110] usb 2-1: Manufacturer: syz [ 1001.363145][T27414] netlink: 'syz.0.17891': attribute type 8 has an invalid length. [ 1001.365985][ T1110] usb 2-1: SerialNumber: syz [ 1001.371604][ T4177] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 30768, setting to 1024 [ 1001.412536][ T4177] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1001.435219][ T4177] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1001.474797][T27423] netlink: 'syz.0.17894': attribute type 1 has an invalid length. [ 1001.549840][ T4177] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1001.563991][ T4177] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1001.592691][ T4177] usb 5-1: SerialNumber: syz [ 1001.625518][T27337] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1001.632649][T27337] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1001.734219][ T1110] usb 2-1: USB disconnect, device number 53 [ 1001.834288][ T2283] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1001.845032][ T2283] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1001.905707][T27337] udc-core: couldn't find an available UDC or it's busy [ 1001.925764][T27337] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1001.961281][ T2283] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1001.970449][ T2283] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1001.980695][ T2283] usb 3-1: SerialNumber: syz [ 1001.985954][ T8324] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1001.997712][ T4177] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 1002.012666][ T4177] usb 5-1: USB disconnect, device number 64 [ 1002.172355][T27501] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17913'. [ 1002.186500][T27501] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17913'. [ 1002.317550][T27509] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1002.400493][ T8324] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1002.419512][ T8324] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.435749][ T8324] usb 1-1: config 0 descriptor?? [ 1002.440275][ T2283] usb 3-1: 0:2 : does not exist [ 1002.476197][ T2283] usb 3-1: USB disconnect, device number 59 [ 1002.482542][ T8324] cp210x 1-1:0.0: cp210x converter detected [ 1002.743264][ T4363] udevd[4363]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1002.849823][ C1] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1002.960570][ T8324] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1002.989446][ T8324] usb 1-1: USB disconnect, device number 47 [ 1003.044407][ T8324] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1003.089173][ T8324] cp210x 1-1:0.0: device disconnected [ 1003.223153][T27612] i2c i2c-0: Invalid block write size 253 [ 1003.293206][T27619] netlink: 'syz.4.17945': attribute type 1 has an invalid length. [ 1003.313370][T27619] netlink: 'syz.4.17945': attribute type 1 has an invalid length. [ 1003.327836][T27619] netlink: 'syz.4.17945': attribute type 2 has an invalid length. [ 1003.354271][T27624] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1003.361802][T27624] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1003.504799][T27624] vhci_hcd vhci_hcd.0: Device attached [ 1003.701690][T27656] __nla_validate_parse: 1 callbacks suppressed [ 1003.701707][T27656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17958'. [ 1003.734659][ T2283] vhci_hcd: vhci_device speed not set [ 1003.809162][T27656] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1003.829378][ T2283] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 1003.831507][T27669] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1004.112034][T27626] vhci_hcd: connection reset by peer [ 1004.128664][ T7929] vhci_hcd: stop threads [ 1004.132962][ T7929] vhci_hcd: release socket [ 1004.175943][ T7929] vhci_hcd: disconnect device [ 1004.421247][ T8324] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 1004.822545][ T8324] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 1004.841663][ T8324] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1004.887295][ T8324] usb 3-1: config 0 has no interface number 0 [ 1005.074820][ T8324] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1005.076833][T27769] delete_channel: no stack [ 1005.095014][ T8324] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.146760][ T8324] usb 3-1: Product: syz [ 1005.175950][ T8324] usb 3-1: Manufacturer: syz [ 1005.193912][ T8324] usb 3-1: SerialNumber: syz [ 1005.219739][ T8324] usb 3-1: config 0 descriptor?? [ 1005.234401][T27784] netlink: 'syz.3.18003': attribute type 8 has an invalid length. [ 1005.278191][ T8324] hub 3-1:0.31: bad descriptor, ignoring hub [ 1005.284279][ T8324] hub: probe of 3-1:0.31 failed with error -5 [ 1005.314076][ T8324] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 1005.320502][ T8324] uvcvideo 3-1:0.31: Entity type for entity Output 6 was not initialized! [ 1005.362307][ T8324] usb 3-1: Failed to create links for entity 6 [ 1005.384184][ T8324] usb 3-1: Failed to register entities (-22). [ 1005.420227][T27799] netlink: 24 bytes leftover after parsing attributes in process `syz.4.18008'. [ 1005.638789][ T8324] usb 3-1: USB disconnect, device number 60 [ 1005.727516][T27813] loop4: detected capacity change from 0 to 8192 [ 1005.772935][T27813] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 1005.788013][T27813] REISERFS (device loop4): using ordered data mode [ 1005.794940][T27813] reiserfs: using flush barriers [ 1005.812081][T27813] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1005.830366][T27813] REISERFS (device loop4): checking transaction log (loop4) [ 1005.844760][T27813] REISERFS (device loop4): Using r5 hash to sort names [ 1005.856427][T27813] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 1005.873649][ T4177] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1005.883587][T27813] REISERFS warning (device loop4): reiserfs-15100 reiserfs_get_unused_objectid: no more object ids [ 1006.133730][ T4177] usb 2-1: Using ep0 maxpacket: 16 [ 1006.263707][ T4177] usb 2-1: config 1 has an invalid interface number: 19 but max is 0 [ 1006.282125][ T4177] usb 2-1: config 1 has no interface number 0 [ 1006.294160][ T4177] usb 2-1: config 1 interface 19 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1006.327927][ T4177] usb 2-1: config 1 interface 19 has no altsetting 0 [ 1006.512950][ T4177] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 7.c9 [ 1006.522314][ T4177] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.564079][ T4177] usb 2-1: Product: syz [ 1006.568394][ T4177] usb 2-1: Manufacturer: syz [ 1006.573115][ T4177] usb 2-1: SerialNumber: syz [ 1006.592467][T27870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18034'. [ 1006.625241][T27870] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 1006.660672][ T4177] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1006.921258][ T23] usb 2-1: USB disconnect, device number 54 [ 1006.927606][ T7929] usb 2-1: Failed to submit usb control message: -71 [ 1006.935445][ T7929] usb 2-1: unable to send the bmi data to the device: -71 [ 1006.936083][T27917] device wireguard0 entered promiscuous mode [ 1006.954762][ T7929] usb 2-1: unable to get target info from device [ 1006.962925][ T7929] usb 2-1: could not get target info (-71) [ 1006.969183][ T7929] usb 2-1: could not probe fw (-71) [ 1007.188935][T27961] 9p: Unknown access argument [ 1007.225424][T27968] loop2: detected capacity change from 0 to 512 [ 1007.324227][T27968] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #3: comm syz.2.18051: corrupted inode contents [ 1007.347602][T27968] EXT4-fs error (device loop2): ext4_dirty_inode:6077: inode #3: comm syz.2.18051: mark_inode_dirty error [ 1007.423816][T27968] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #3: comm syz.2.18051: corrupted inode contents [ 1007.455425][T27968] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #3: comm syz.2.18051: mark_inode_dirty error [ 1007.531448][T27968] Quota error (device loop2): write_blk: dquota write failed [ 1007.545824][T27968] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1007.582067][T28004] kAFS: unable to lookup cell '' [ 1007.592277][T27968] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.18051: Failed to acquire dquot type 0 [ 1007.663196][T27968] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #16: comm syz.2.18051: corrupted inode contents [ 1007.730267][T27968] EXT4-fs error (device loop2): ext4_dirty_inode:6077: inode #16: comm syz.2.18051: mark_inode_dirty error [ 1007.800977][T27968] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #16: comm syz.2.18051: corrupted inode contents [ 1007.857638][T27968] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #16: comm syz.2.18051: mark_inode_dirty error [ 1007.902668][T27968] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #16: comm syz.2.18051: corrupted inode contents [ 1007.941357][T27968] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 1007.941647][T27968] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #16: comm syz.2.18051: corrupted inode contents [ 1007.941915][T27968] EXT4-fs error (device loop2): ext4_truncate:4286: inode #16: comm syz.2.18051: mark_inode_dirty error [ 1007.942183][T27968] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 1007.946345][T27968] EXT4-fs (loop2): 1 truncate cleaned up [ 1007.946371][T27968] EXT4-fs (loop2): mounted filesystem without journal. Opts: resuid=0x0000000000000000,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 1008.016475][T28039] kAFS: unparsable volume name [ 1008.072166][T28043] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18079'. [ 1008.465077][T28074] netlink: 207496 bytes leftover after parsing attributes in process `syz.2.18089'. [ 1008.577537][T28082] netlink: 16 bytes leftover after parsing attributes in process `syz.0.18094'. [ 1008.613251][T28082] netlink: 16 bytes leftover after parsing attributes in process `syz.0.18094'. [ 1008.649425][T28082] netlink: 7 bytes leftover after parsing attributes in process `syz.0.18094'. [ 1008.752615][T28095] binder: 28094:28095 unknown command 1074553619 [ 1008.777330][T28095] binder: 28094:28095 ioctl c0306201 200000000000 returned -22 [ 1008.929858][ T5110] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1009.084512][T28124] netlink: 'syz.4.18110': attribute type 1 has an invalid length. [ 1009.224113][ T5110] usb 3-1: Using ep0 maxpacket: 16 [ 1009.284659][T28152] loop4: detected capacity change from 0 to 512 [ 1009.357688][T28155] loop3: detected capacity change from 0 to 4096 [ 1009.376876][T28152] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 1009.393340][T28152] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 1009.404311][T28152] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 1009.426605][T28155] ntfs3: loop3: ino=3, Correct links count -> 2. [ 1009.439286][ T2283] vhci_hcd: vhci_device speed not set [ 1009.445089][T28152] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1009.452036][T28155] ntfs3: loop3: Failed to load $Volume. [ 1009.453297][ T7797] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 1009.461484][T28152] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e01c, mo2=0000] [ 1009.476699][T28152] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1009.485381][T28152] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.18117: bg 0: block 34: padding at end of block bitmap is not set [ 1009.515774][T28152] Quota error (device loop4): write_blk: dquota write failed [ 1009.523229][T28152] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 1009.551410][T28152] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.18117: Failed to acquire dquot type 1 [ 1009.563752][ T5110] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1009.573594][T28152] EXT4-fs (loop4): 1 truncate cleaned up [ 1009.604788][T28166] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 1009.612773][ T5110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.620789][ T5110] usb 3-1: Product: syz [ 1009.655835][ T5110] usb 3-1: Manufacturer: syz [ 1009.660479][ T5110] usb 3-1: SerialNumber: syz [ 1009.684898][T28152] EXT4-fs (loop4): mounted filesystem without journal. Opts: resgid=0x0000000000000000,mb_optimize_scan=0x0000000000000001,acl,noblock_validity,,errors=continue. Quota mode: writeback. [ 1009.724426][ T5110] r8152-cfgselector 3-1: config 0 descriptor?? [ 1009.795554][T28176] xt_TCPMSS: Only works on TCP SYN packets [ 1009.922188][ T7797] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1009.970534][ T7797] usb 1-1: not running at top speed; connect to a high speed hub [ 1010.033204][T28203] netlink: 48 bytes leftover after parsing attributes in process `syz.3.18132'. [ 1010.078802][ T7797] usb 1-1: config 8 has an invalid interface number: 43 but max is 1 [ 1010.109559][ T7797] usb 1-1: config 8 has an invalid interface number: 35 but max is 1 [ 1010.131409][ T7797] usb 1-1: config 8 has no interface number 0 [ 1010.164136][ T7797] usb 1-1: config 8 has no interface number 1 [ 1010.182965][ T7797] usb 1-1: config 8 interface 43 altsetting 17 has an invalid endpoint with address 0xE5, skipping [ 1010.209488][ T7797] usb 1-1: config 8 interface 43 has no altsetting 0 [ 1010.218525][ T7797] usb 1-1: config 8 interface 35 has no altsetting 0 [ 1010.273686][ T5110] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1010.280119][ T5110] r8152-cfgselector 3-1: bad CDC descriptors [ 1010.349690][ T5110] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1010.367507][ T5110] r8152-cfgselector 3-1: USB disconnect, device number 61 [ 1010.436397][ T7797] usb 1-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 1010.463213][ T7797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.493382][ T7797] usb 1-1: Product: syz [ 1010.504323][ T7797] usb 1-1: Manufacturer: syz [ 1010.509150][ T7797] usb 1-1: SerialNumber: syz [ 1010.892126][ T7797] ums-alauda 1-1:8.43: USB Mass Storage device detected [ 1010.967422][T28294] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18161'. [ 1011.000151][ T7797] hub 1-1:8.35: Invalid hub with more than one config or interface [ 1011.017245][ T7797] hub: probe of 1-1:8.35 failed with error -22 [ 1011.041608][ T7797] ums-alauda 1-1:8.35: USB Mass Storage device detected [ 1011.066335][T28305] bad cache= option: nonw [ 1011.066335][T28305] [ 1011.136114][ T7797] usb 1-1: USB disconnect, device number 48 [ 1011.140889][T28305] CIFS: VFS: bad cache= option: nonw [ 1011.245212][T28325] netlink: 60 bytes leftover after parsing attributes in process `syz.4.18167'. [ 1011.655478][T28363] loop3: detected capacity change from 0 to 2048 [ 1011.683050][ T5110] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1011.782495][T28363] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1011.964565][ C1] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1012.127115][ T5110] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1012.154768][ T5110] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1012.187807][ T5110] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1012.207088][ T5110] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1012.227103][ T5110] usb 2-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c [ 1012.255717][ T5110] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.274556][ T5110] usb 2-1: config 0 descriptor?? [ 1012.294197][T28430] netlink: 'syz.4.18204': attribute type 1 has an invalid length. [ 1012.302830][T28430] netlink: 224 bytes leftover after parsing attributes in process `syz.4.18204'. [ 1012.314031][T28430] netlink: 9 bytes leftover after parsing attributes in process `syz.4.18204'. [ 1012.335222][ T5110] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input79 [ 1012.406258][T28444] netlink: 'syz.2.18206': attribute type 28 has an invalid length. [ 1012.462956][ T7797] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1012.475534][T28444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18206'. [ 1012.579375][ T5110] usb 2-1: USB disconnect, device number 55 [ 1012.601373][ T5110] appletouch 2-1:0.0: input: appletouch disconnected [ 1012.739831][T28479] netlink: 256 bytes leftover after parsing attributes in process `syz.4.18215'. [ 1012.916506][ T7797] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1013.016008][ T7797] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1013.026924][ T7797] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1013.064101][T28507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18224'. [ 1013.200506][ T7797] usb 1-1: New USB device found, idVendor=041e, idProduct=3f04, bcdDevice= 0.40 [ 1013.220613][ T7797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.221506][ T5110] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1013.235405][ T7797] usb 1-1: Product: syz [ 1013.242499][ T7797] usb 1-1: Manufacturer: syz [ 1013.261670][ T7797] usb 1-1: SerialNumber: syz [ 1013.404040][T28483] loop2: detected capacity change from 0 to 32768 [ 1013.502873][T28483] XFS (loop2): Mounting V5 Filesystem [ 1013.581433][T28483] XFS (loop2): Ending clean mount [ 1013.642796][ T4191] XFS (loop2): Unmounting Filesystem [ 1013.677188][ T7797] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 1013.767868][ T5110] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1013.780847][ T7797] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 1013.786695][ T5110] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1013.820037][ T5110] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1013.837726][ T7797] usb 1-1: USB disconnect, device number 49 [ 1013.843618][ T4352] udevd[4352]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1013.864133][T28569] netlink: 'syz.3.18239': attribute type 21 has an invalid length. [ 1013.892098][ T5110] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1013.902519][T28569] netlink: 'syz.3.18239': attribute type 1 has an invalid length. [ 1013.920992][T28569] netlink: 144 bytes leftover after parsing attributes in process `syz.3.18239'. [ 1013.995620][T28579] bond0: ARP monitoring cannot be used with MII monitoring [ 1014.132125][ T4177] Bluetooth: hci4: command 0x0405 tx timeout [ 1014.153751][ T5110] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1014.163210][ T5110] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.222239][ T5110] usb 5-1: Product: syz [ 1014.226452][ T5110] usb 5-1: Manufacturer: syz [ 1014.294407][ T5110] usb 5-1: SerialNumber: syz [ 1014.301283][ T5110] usb 5-1: config 0 descriptor?? [ 1014.383322][T28605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18249'. [ 1014.619778][ T5110] adutux 5-1:0.0: Could not retrieve serial number [ 1014.626450][ T5110] adutux: probe of 5-1:0.0 failed with error -5 [ 1014.936889][T28659] device vlan0 entered promiscuous mode [ 1014.953010][ T5110] usb 5-1: USB disconnect, device number 65 [ 1015.095715][T28680] netlink: 'syz.3.18274': attribute type 3 has an invalid length. [ 1015.267412][T28697] netlink: 'syz.1.18280': attribute type 7 has an invalid length. [ 1015.294202][ T26] audit: type=1400 audit(965.587:65): apparmor="DENIED" operation="change_onexec" info="label not found" error=-22 profile="unconfined" name="&" pid=28698 comm="syz.3.18281" [ 1015.305431][T28697] netlink: 'syz.1.18280': attribute type 8 has an invalid length. [ 1015.359352][ T2283] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1015.551446][T28719] __nla_validate_parse: 2 callbacks suppressed [ 1015.551463][T28719] netlink: 32 bytes leftover after parsing attributes in process `syz.0.18289'. [ 1015.578297][T28719] netlink: 32 bytes leftover after parsing attributes in process `syz.0.18289'. [ 1015.611749][T28719] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18289'. [ 1015.620477][T28725] xt_TCPMSS: Only works on TCP SYN packets [ 1015.670953][ T2283] usb 3-1: Using ep0 maxpacket: 8 [ 1015.812332][ T2283] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1015.830891][ T2283] usb 3-1: config 179 has no interface number 0 [ 1015.863903][ T2283] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1015.892331][ T2283] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1015.924932][ T2283] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1015.977341][ T2283] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1016.017585][ T2283] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1016.082578][ T2283] usb 3-1: config 179 interface 65 has no altsetting 0 [ 1016.100543][ T2283] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1016.126130][ T2283] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.153621][T28776] netlink: 'syz.0.18309': attribute type 1 has an invalid length. [ 1016.181805][T28776] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.18309'. [ 1016.206596][ T2283] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input80 [ 1016.211906][T28776] netlink: 'syz.0.18309': attribute type 1 has an invalid length. [ 1016.282099][T28794] overlayfs: unrecognized mount option "smackfsfloor=\{" or missing value [ 1016.432027][ T4177] usb 3-1: USB disconnect, device number 62 [ 1016.450387][ T4177] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1016.863081][ T7797] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1016.939491][T28865] loop4: detected capacity change from 0 to 1764 [ 1016.942357][T28868] netlink: 'syz.3.18336': attribute type 3 has an invalid length. [ 1017.139621][ T7797] usb 1-1: Using ep0 maxpacket: 16 [ 1017.276150][ T7797] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1017.307444][T28896] netlink: 32 bytes leftover after parsing attributes in process `syz.3.18344'. [ 1017.470156][ T7797] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 1017.512485][ T7797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.539929][ T7797] usb 1-1: Product: syz [ 1017.570131][T28921] SET target dimension over the limit! [ 1017.575733][ T7797] usb 1-1: Manufacturer: syz [ 1017.610752][ T7797] usb 1-1: SerialNumber: syz [ 1017.625076][ T7797] usb 1-1: config 0 descriptor?? [ 1017.719867][ T7797] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 1017.762786][ T7797] usb 1-1: Detected FT232BM [ 1017.980548][T28978] netlink: 'syz.1.18366': attribute type 3 has an invalid length. [ 1018.018676][T28978] netlink: 'syz.1.18366': attribute type 1 has an invalid length. [ 1018.163662][ T7797] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1018.172009][ T7797] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1018.219529][ T7797] usb 1-1: USB disconnect, device number 50 [ 1018.305577][ T7797] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1018.331730][ T7797] ftdi_sio 1-1:0.0: device disconnected [ 1018.443829][T29034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18382'. [ 1018.543005][ T2283] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1018.616745][T29049] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 1018.835513][ T2283] usb 3-1: Using ep0 maxpacket: 8 [ 1018.988426][ T2283] usb 3-1: config 243 has an invalid interface number: 78 but max is 0 [ 1019.030584][ T2283] usb 3-1: config 243 has no interface number 0 [ 1019.040506][ T2283] usb 3-1: config 243 interface 78 has no altsetting 0 [ 1019.247655][ T2283] usb 3-1: New USB device found, idVendor=2639, idProduct=0011, bcdDevice=69.b0 [ 1019.279193][ T2283] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.298453][ T2283] usb 3-1: Product: syz [ 1019.323381][ T2283] usb 3-1: Manufacturer: syz [ 1019.350008][ T2283] usb 3-1: SerialNumber: syz [ 1019.526719][T29125] loop3: detected capacity change from 0 to 8192 [ 1019.549461][T29142] netlink: 'syz.4.18421': attribute type 1 has an invalid length. [ 1019.578535][T29142] netlink: 224 bytes leftover after parsing attributes in process `syz.4.18421'. [ 1019.610896][T29142] nbd: couldn't find a device at index 1024 [ 1019.623878][T29125] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 1019.701361][T29125] REISERFS (device loop3): using ordered data mode [ 1019.709967][T29161] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1019.736871][ T2283] usb 3-1: USB disconnect, device number 63 [ 1019.746476][T29125] reiserfs: using flush barriers [ 1019.821753][T29125] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1019.867828][T29125] REISERFS (device loop3): checking transaction log (loop3) [ 1019.884593][T29176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18432'. [ 1019.898128][T29174] i2c i2c-0: DVB: adapter 0 frontend 0 symbol rate 4278256132 out of range (1000000..45000000) [ 1019.995283][T29176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18432'. [ 1020.100482][T29125] REISERFS (device loop3): Using tea hash to sort names [ 1020.119326][T29125] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 1020.141314][T29194] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18439'. [ 1020.320556][T29206] sock: sock_timestamping_bind_phc: sock not bind to device [ 1020.822351][T29257] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 1021.018478][T29279] tmpfs: Bad value for 'mpol' [ 1021.024673][T29276] IPv6: sit2: Disabled Multicast RS [ 1021.209985][T29302] damon: invalid nr_regions. min (30786325577728) > max (1023) [ 1021.259812][T29312] usb usb9: usbfs: process 29312 (syz.4.18482) did not claim interface 0 before use [ 1021.448039][T29322] __nla_validate_parse: 2 callbacks suppressed [ 1021.448058][T29322] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18486'. [ 1021.588281][T29336] netlink: 'syz.2.18491': attribute type 32 has an invalid length. [ 1021.975614][T29384] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 1022.029487][T29384] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 1022.073086][T29396] x_tables: unsorted underflow at hook 3 [ 1022.236920][T29446] vivid-008: ================= START STATUS ================= [ 1022.279134][T29446] vivid-008: Generate PTS: true [ 1022.304473][T29446] vivid-008: Generate SCR: true [ 1022.312716][T29446] tpg source WxH: 640x360 (Y'CbCr) [ 1022.341969][T29450] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18523'. [ 1022.407427][T29446] tpg field: 1 [ 1022.418384][T29450] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18523'. [ 1022.421868][T29446] tpg crop: 640x360@0x0 [ 1022.453669][T29446] tpg compose: 640x360@0x0 [ 1022.459054][T29455] netlink: 'syz.0.18524': attribute type 1 has an invalid length. [ 1022.480139][T29446] tpg colorspace: 8 [ 1022.506061][T29446] tpg transfer function: 0/0 [ 1022.528795][T29446] tpg Y'CbCr encoding: 0/0 [ 1022.539792][T29446] tpg quantization: 0/0 [ 1022.561340][T29446] tpg RGB range: 0/2 [ 1022.585777][T29446] vivid-008: ================== END STATUS ================== [ 1022.806876][T29493] netlink: 16 bytes leftover after parsing attributes in process `syz.4.18538'. [ 1022.823984][T29493] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1023.227514][T29539] netlink: 'syz.1.18555': attribute type 2 has an invalid length. [ 1023.357009][T29548] openvswitch: netlink: Actions may not be safe on all matching packets [ 1023.559582][T29577] loop2: detected capacity change from 0 to 64 [ 1023.651062][T29577] MINIX-fs: bad superblock [ 1023.983503][ T23] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 1023.983895][T29622] netlink: 'syz.4.18583': attribute type 21 has an invalid length. [ 1023.997634][T29613] loop2: detected capacity change from 0 to 8192 [ 1024.032660][T29622] netlink: 'syz.4.18583': attribute type 4 has an invalid length. [ 1024.041132][T29622] netlink: 144 bytes leftover after parsing attributes in process `syz.4.18583'. [ 1024.045916][T29613] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 1024.060346][T29613] REISERFS (device loop2): using ordered data mode [ 1024.067013][T29613] reiserfs: using flush barriers [ 1024.074527][T29613] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1024.102946][T29613] REISERFS (device loop2): checking transaction log (loop2) [ 1024.139094][T29629] loop4: detected capacity change from 0 to 128 [ 1024.181887][ T2283] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1024.258131][T29613] REISERFS (device loop2): Using tea hash to sort names [ 1024.265725][T29613] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 1024.287417][ T4177] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1024.358505][T29636] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1024.384777][T29636] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1024.424742][T29636] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 1024.505581][ T23] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1024.513349][ T2283] usb 2-1: Using ep0 maxpacket: 16 [ 1024.547050][ T4177] usb 1-1: Using ep0 maxpacket: 32 [ 1024.558353][ T23] usb 4-1: not running at top speed; connect to a high speed hub [ 1024.650138][ T2283] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1024.672753][ T2283] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1024.677237][ T4177] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1024.688081][ T23] usb 4-1: config 5 has an invalid interface number: 246 but max is 0 [ 1024.712368][ T23] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1024.712395][ T23] usb 4-1: config 5 has no interface number 0 [ 1024.712432][ T23] usb 4-1: config 5 interface 246 altsetting 4 endpoint 0x3 has invalid maxpacket 255, setting to 64 [ 1024.712458][ T23] usb 4-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1024.712495][ T23] usb 4-1: config 5 interface 246 has no altsetting 0 [ 1024.712594][ T2283] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1024.712631][ T2283] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1024.712653][ T2283] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.714842][ T2283] usb 2-1: config 0 descriptor?? [ 1024.756314][ T2283] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input82 [ 1024.875474][ T4177] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1024.875506][ T4177] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.875525][ T4177] usb 1-1: Product: syz [ 1024.875539][ T4177] usb 1-1: Manufacturer: syz [ 1024.875554][ T4177] usb 1-1: SerialNumber: syz [ 1024.878758][ T4177] usb 1-1: config 0 descriptor?? [ 1024.911711][ T23] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 1024.911742][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.911761][ T23] usb 4-1: Product: syz [ 1024.911775][ T23] usb 4-1: Manufacturer: syz [ 1024.911787][ T23] usb 4-1: SerialNumber: syz [ 1024.921396][ T4177] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1025.034361][T16386] usb 2-1: USB disconnect, device number 56 [ 1025.302616][ T23] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1025.316520][ T4193] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1025.342388][ T23] usb 4-1: USB disconnect, device number 37 [ 1025.351609][ T144] usb 4-1: Failed to submit usb control message: -71 [ 1025.365192][T29707] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1025.377227][ T144] usb 4-1: unable to send the bmi data to the device: -71 [ 1025.393456][ T144] usb 4-1: unable to get target info from device [ 1025.400125][ T144] usb 4-1: could not get target info (-71) [ 1025.406570][ T144] usb 4-1: could not probe fw (-71) [ 1025.457468][ T4177] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 1025.467344][ T4177] gspca_pac7302: probe of 1-1:0.0 failed with error -71 [ 1025.489280][ T4177] usb 1-1: USB disconnect, device number 51 [ 1025.682256][T29769] loop4: detected capacity change from 0 to 136 [ 1025.714477][T29769] Attempt to read inode for relocated directory [ 1025.717496][ T4193] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1025.760869][ T4193] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.773499][ T4193] usb 3-1: config 0 descriptor?? [ 1025.849534][ T4193] cp210x 3-1:0.0: cp210x converter detected [ 1026.260159][T29820] loop4: detected capacity change from 0 to 16 [ 1026.287748][T29820] erofs: (device loop4): mounted with root inode @ nid 36. [ 1026.324491][ T4193] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 1026.357088][ T4193] cp210x 3-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 1026.384386][ T4193] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 1026.397236][T29820] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress 1929 in[58, 4038] out[2639] [ 1026.412296][ T4193] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1026.442868][T29838] comedi comedi1: dmm32at: I/O port conflict (0x2ff,16) [ 1026.452650][ T4193] usb 3-1: USB disconnect, device number 64 [ 1026.480086][ T4193] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1026.486978][T29820] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 1026.509558][ T4193] cp210x 3-1:0.0: device disconnected [ 1026.567151][T29856] snd_dummy snd_dummy.0: control 3:0:99:syz1:6 is already present [ 1026.821895][T29882] sctp: [Deprecated]: syz.4.18642 (pid 29882) Use of int in maxseg socket option. [ 1026.821895][T29882] Use struct sctp_assoc_value instead [ 1026.858098][T29887] loop3: detected capacity change from 0 to 512 [ 1026.989328][T29887] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 1027.015079][T29887] [ 1027.017437][T29887] ====================================================== [ 1027.024461][T29887] WARNING: possible circular locking dependency detected [ 1027.031495][T29887] syzkaller #0 Not tainted [ 1027.035912][T29887] ------------------------------------------------------ [ 1027.042938][T29887] syz.3.18643/29887 is trying to acquire lock: [ 1027.049179][T29887] ffff888074397ae8 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x5a/0x410 [ 1027.058242][T29887] [ 1027.058242][T29887] but task is already holding lock: [ 1027.065608][T29887] ffff8880741f5c30 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_truncate+0x994/0x1190 [ 1027.075120][T29887] [ 1027.075120][T29887] which lock already depends on the new lock. [ 1027.075120][T29887] [ 1027.085520][T29887] [ 1027.085520][T29887] the existing dependency chain (in reverse order) is: [ 1027.094528][T29887] [ 1027.094528][T29887] -> #2 (&ei->i_data_sem/2){++++}-{3:3}: [ 1027.102359][T29887] down_write+0x38/0x60 [ 1027.107090][T29887] ext4_map_blocks+0x8c4/0x1a50 [ 1027.112447][T29887] ext4_getblk+0x176/0x670 [ 1027.117375][T29887] ext4_bread+0x26/0x180 [ 1027.122258][T29887] ext4_quota_write+0x237/0x580 [ 1027.127696][T29887] do_insert_tree+0x1193/0x19c0 [ 1027.133054][T29887] do_insert_tree+0x5c4/0x19c0 [ 1027.138328][T29887] do_insert_tree+0x5c4/0x19c0 [ 1027.143620][T29887] do_insert_tree+0x5c4/0x19c0 [ 1027.148896][T29887] qtree_write_dquot+0x354/0x4a0 [ 1027.154375][T29887] v2_write_dquot+0x108/0x190 [ 1027.159640][T29887] dquot_acquire+0x2d5/0x520 [ 1027.164764][T29887] ext4_acquire_dquot+0x2e3/0x4a0 [ 1027.170314][T29887] dqget+0x713/0xbb0 [ 1027.174747][T29887] __dquot_initialize+0x3a9/0xd00 [ 1027.180333][T29887] ext4_process_orphan+0x4c/0x2e0 [ 1027.185962][T29887] ext4_orphan_cleanup+0xad8/0x1320 [ 1027.191699][T29887] ext4_fill_super+0x8c65/0x93f0 [ 1027.197159][T29887] mount_bdev+0x28a/0x3c0 [ 1027.202123][T29887] legacy_get_tree+0xe6/0x180 [ 1027.207635][T29887] vfs_get_tree+0x88/0x270 [ 1027.212601][T29887] do_new_mount+0x247/0xa40 [ 1027.217626][T29887] __se_sys_mount+0x2e3/0x3d0 [ 1027.222852][T29887] do_syscall_64+0x4c/0xa0 [ 1027.227784][T29887] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1027.234348][T29887] [ 1027.234348][T29887] -> #1 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 1027.234643][ T4177] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 1027.242440][T29887] down_read+0x44/0x2e0 [ 1027.242471][T29887] v2_read_dquot+0x4a/0x110 [ 1027.242488][T29887] dquot_acquire+0x152/0x520 [ 1027.265523][T29887] ext4_acquire_dquot+0x2e3/0x4a0 [ 1027.271159][T29887] dqget+0x713/0xbb0 [ 1027.275580][T29887] __dquot_initialize+0x3a9/0xd00 [ 1027.281113][T29887] ext4_process_orphan+0x4c/0x2e0 [ 1027.286676][T29887] ext4_orphan_cleanup+0xad8/0x1320 [ 1027.292386][T29887] ext4_fill_super+0x8c65/0x93f0 [ 1027.297928][T29887] mount_bdev+0x28a/0x3c0 [ 1027.302804][T29887] legacy_get_tree+0xe6/0x180 [ 1027.307999][T29887] vfs_get_tree+0x88/0x270 [ 1027.312928][T29887] do_new_mount+0x247/0xa40 [ 1027.318238][T29887] __se_sys_mount+0x2e3/0x3d0 [ 1027.323508][T29887] do_syscall_64+0x4c/0xa0 [ 1027.328526][T29887] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1027.335029][T29887] [ 1027.335029][T29887] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 1027.342853][T29887] __lock_acquire+0x2c66/0x7b50 [ 1027.348250][T29887] lock_acquire+0x19e/0x400 [ 1027.353283][T29887] __mutex_lock_common+0x1e5/0x2400 [ 1027.359002][T29887] mutex_lock_nested+0x17/0x20 [ 1027.364274][T29887] dquot_commit+0x5a/0x410 [ 1027.369204][T29887] ext4_write_dquot+0x1f0/0x360 [ 1027.374570][T29887] mark_all_dquot_dirty+0xf9/0x400 [ 1027.380372][T29887] __dquot_free_space+0x7c3/0xb80 [ 1027.386061][T29887] ext4_free_blocks+0x1b1b/0x24c0 [ 1027.391784][T29887] ext4_ext_remove_space+0x2106/0x41a0 [ 1027.397797][T29887] ext4_ext_truncate+0x182/0x230 [ 1027.403281][T29887] ext4_truncate+0xa41/0x1190 [ 1027.408618][T29887] ext4_process_orphan+0x1a9/0x2e0 [ 1027.414252][T29887] ext4_orphan_cleanup+0xad8/0x1320 [ 1027.419978][T29887] ext4_fill_super+0x8c65/0x93f0 [ 1027.425455][T29887] mount_bdev+0x28a/0x3c0 [ 1027.430306][T29887] legacy_get_tree+0xe6/0x180 [ 1027.435660][T29887] vfs_get_tree+0x88/0x270 [ 1027.440598][T29887] do_new_mount+0x247/0xa40 [ 1027.445652][T29887] __se_sys_mount+0x2e3/0x3d0 [ 1027.450867][T29887] do_syscall_64+0x4c/0xa0 [ 1027.456401][T29887] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1027.462840][T29887] [ 1027.462840][T29887] other info that might help us debug this: [ 1027.462840][T29887] [ 1027.473087][T29887] Chain exists of: [ 1027.473087][T29887] &dquot->dq_lock --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2 [ 1027.473087][T29887] [ 1027.490010][T29887] Possible unsafe locking scenario: [ 1027.490010][T29887] [ 1027.497565][T29887] CPU0 CPU1 [ 1027.502925][T29887] ---- ---- [ 1027.508375][T29887] lock(&ei->i_data_sem/2); [ 1027.512989][T29887] lock(&s->s_dquot.dqio_sem); [ 1027.520345][T29887] lock(&ei->i_data_sem/2); [ 1027.527470][T29887] lock(&dquot->dq_lock); [ 1027.531882][T29887] [ 1027.531882][T29887] *** DEADLOCK *** [ 1027.531882][T29887] [ 1027.540004][T29887] 4 locks held by syz.3.18643/29887: [ 1027.545268][T29887] #0: ffff8880632fe0e0 (&type->s_umount_key#28/1){+.+.}-{3:3}, at: alloc_super+0x200/0x970 [ 1027.555352][T29887] #1: ffff8880741f5da8 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: ext4_process_orphan+0x165/0x2e0 [ 1027.566348][T29887] #2: ffff8880741f5c30 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_truncate+0x994/0x1190 [ 1027.576090][T29887] #3: ffffffff8c441798 (dquot_srcu){....}-{0:0}, at: rcu_lock_acquire+0x5/0x30 [ 1027.585133][T29887] [ 1027.585133][T29887] stack backtrace: [ 1027.591005][T29887] CPU: 1 PID: 29887 Comm: syz.3.18643 Not tainted syzkaller #0 [ 1027.598537][T29887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1027.608592][T29887] Call Trace: [ 1027.612092][T29887] [ 1027.615037][T29887] dump_stack_lvl+0x188/0x250 [ 1027.619750][T29887] ? load_image+0x410/0x410 [ 1027.624601][T29887] ? show_regs_print_info+0x20/0x20 [ 1027.629813][T29887] ? print_circular_bug+0x12b/0x1a0 [ 1027.635099][T29887] check_noncircular+0x296/0x330 [ 1027.635910][ T4177] usb 1-1: config 34 has an invalid interface number: 116 but max is 0 [ 1027.640299][T29887] ? add_chain_block+0x9b0/0x9b0 [ 1027.640327][T29887] ? lockdep_lock+0xf1/0x1f0 [ 1027.640347][T29887] ? mark_lock+0x94/0x320 [ 1027.652564][ T4177] usb 1-1: config 34 has no interface number 0 [ 1027.654253][T29887] ? _find_first_zero_bit+0xd1/0xf0 [ 1027.663295][ T4177] usb 1-1: config 34 interface 116 has no altsetting 0 [ 1027.669674][T29887] __lock_acquire+0x2c66/0x7b50 [ 1027.669710][T29887] ? __lock_acquire+0x7b50/0x7b50 [ 1027.669730][T29887] ? verify_lock_unused+0x140/0x140 [ 1027.669746][T29887] ? check_path+0x21/0x40 [ 1027.669758][T29887] ? check_noncircular+0x189/0x330 [ 1027.669772][T29887] ? add_chain_block+0x9b0/0x9b0 [ 1027.669784][T29887] ? lockdep_lock+0xf1/0x1f0 [ 1027.669801][T29887] lock_acquire+0x19e/0x400 [ 1027.669817][T29887] ? dquot_commit+0x5a/0x410 [ 1027.669838][T29887] ? __might_sleep+0xf0/0xf0 [ 1027.734029][T29887] ? read_lock_is_recursive+0x10/0x10 [ 1027.739968][T29887] __mutex_lock_common+0x1e5/0x2400 [ 1027.745525][T29887] ? dquot_commit+0x5a/0x410 [ 1027.750383][T29887] ? dquot_commit+0x5a/0x410 [ 1027.755984][T29887] ? __might_sleep+0xf0/0xf0 [ 1027.760662][T29887] ? mutex_lock_io_nested+0x60/0x60 [ 1027.765916][T29887] mutex_lock_nested+0x17/0x20 [ 1027.770682][T29887] dquot_commit+0x5a/0x410 [ 1027.775624][T29887] ext4_write_dquot+0x1f0/0x360 [ 1027.780736][T29887] mark_all_dquot_dirty+0xf9/0x400 [ 1027.785939][T29887] __dquot_free_space+0x7c3/0xb80 [ 1027.791053][T29887] ext4_free_blocks+0x1b1b/0x24c0 [ 1027.796513][T29887] ? ext4_mb_discard_preallocations_should_retry+0x690/0x690 [ 1027.803953][T29887] ? __ext4_journal_ensure_credits+0x2c/0x450 [ 1027.810036][T29887] ? ext4_inode_journal_mode+0x189/0x460 [ 1027.815758][T29887] ? ext4_ext_remove_space+0x2001/0x41a0 [ 1027.826095][T29887] ext4_ext_remove_space+0x2106/0x41a0 [ 1027.832064][T29887] ? ext4_ext_index_trans_blocks+0xf0/0xf0 [ 1027.838357][T29887] ? ext4_es_remove_extent+0x29f/0x430 [ 1027.841753][ T4177] usb 1-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=32.4c [ 1027.843931][T29887] ext4_ext_truncate+0x182/0x230 [ 1027.843963][T29887] ext4_truncate+0xa41/0x1190 [ 1027.843983][T29887] ? __ext4_mark_inode_dirty+0x6c0/0x6c0 [ 1027.856649][ T4177] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.858550][T29887] ext4_process_orphan+0x1a9/0x2e0 [ 1027.866368][ T4177] usb 1-1: Product: syz [ 1027.871555][T29887] ext4_orphan_cleanup+0xad8/0x1320 [ 1027.871591][T29887] ? ext4_orphan_del+0xc90/0xc90 [ 1027.871608][T29887] ? errseq_check_and_advance+0x62/0x120 [ 1027.886258][ T4177] usb 1-1: Manufacturer: syz [ 1027.888200][T29887] ext4_fill_super+0x8c65/0x93f0 [ 1027.888235][T29887] ? format_decode+0x8b1/0x1330 [ 1027.888263][T29887] ? ext4_mount+0x40/0x40 [ 1027.892682][ T4177] usb 1-1: SerialNumber: syz [ 1027.898192][T29887] ? set_blocksize+0x1f1/0x360 [ 1027.898227][T29887] ? sb_set_blocksize+0xa5/0xe0 [ 1027.898243][T29887] mount_bdev+0x28a/0x3c0 [ 1027.898259][T29887] ? ext4_mount+0x40/0x40 [ 1027.898276][T29887] legacy_get_tree+0xe6/0x180 [ 1027.898292][T29887] ? ext4_errno_to_code+0x160/0x160 [ 1027.898307][T29887] vfs_get_tree+0x88/0x270 [ 1027.898324][T29887] do_new_mount+0x247/0xa40 [ 1027.898344][T29887] __se_sys_mount+0x2e3/0x3d0 [ 1027.898362][T29887] ? __x64_sys_mount+0xc0/0xc0 [ 1027.979220][T29887] ? lockdep_hardirqs_on+0x94/0x140 [ 1027.984419][T29887] ? __x64_sys_mount+0x1c/0xc0 [ 1027.989211][T29887] do_syscall_64+0x4c/0xa0 [ 1027.993627][T29887] ? clear_bhb_loop+0x30/0x80 [ 1027.998327][T29887] ? clear_bhb_loop+0x30/0x80 [ 1028.003018][T29887] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1028.009021][T29887] RIP: 0033:0x7f6d753cd10a [ 1028.013433][T29887] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1028.033207][T29887] RSP: 002b:00007f6d73623e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1028.041778][T29887] RAX: ffffffffffffffda RBX: 00007f6d73623ee0 RCX: 00007f6d753cd10a [ 1028.049955][T29887] RDX: 0000200000000100 RSI: 0000200000000080 RDI: 00007f6d73623ea0 [ 1028.058061][T29887] RBP: 0000200000000100 R08: 00007f6d73623ee0 R09: 0000000003000010 [ 1028.066032][T29887] R10: 0000000003000010 R11: 0000000000000246 R12: 0000200000000080 [ 1028.074031][T29887] R13: 00007f6d73623ea0 R14: 000000000000051a R15: 0000200000000000 [ 1028.082105][T29887] [ 1028.087776][T29887] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #16: comm syz.3.18643: corrupted inode contents [ 1028.102800][T29887] EXT4-fs error (device loop3): ext4_dirty_inode:6077: inode #16: comm syz.3.18643: mark_inode_dirty error [ 1028.116529][T29887] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #16: comm syz.3.18643: corrupted inode contents [ 1028.134732][T29887] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #16: comm syz.3.18643: mark_inode_dirty error [ 1028.146842][T29887] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #16: comm syz.3.18643: corrupted inode contents [ 1028.159402][T29887] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #16: comm syz.3.18643: mark_inode_dirty error [ 1028.171579][T29887] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #16: comm syz.3.18643: corrupted inode contents [ 1028.184815][T29887] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 1028.193782][T29887] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #16: comm syz.3.18643: corrupted inode contents [ 1028.206550][T29887] EXT4-fs error (device loop3): ext4_truncate:4286: inode #16: comm syz.3.18643: mark_inode_dirty error [ 1028.218184][T29887] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 1028.228519][T29887] EXT4-fs (loop3): 1 truncate cleaned up [ 1028.235127][T29887] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1028.275162][ T4177] comedi comedi5: could not set alternate setting 3 in high speed [ 1028.282525][T29887] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz.3.18643: directory missing '.' [ 1028.283478][ T4177] usbdux 1-1:34.116: driver 'usbdux' failed to auto-configure device. [ 1028.305780][ T4177] usbdux: probe of 1-1:34.116 failed with error -71 [ 1028.317409][ T4177] usb 1-1: USB disconnect, device number 52 [ 1028.600338][ C1] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!