last executing test programs: 3.347972004s ago: executing program 0 (id=22756): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x6c, 0x10, 0x403, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x52001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_AF_SPEC={0x2c, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0xfffffffffffffdf5}, @AF_MPLS={0x4}, @AF_INET={0x20, 0x2, 0x0, 0x1, {0x1c, 0x1, 0x0, 0x1, [{0x8, 0x1b, 0x0, 0x0, 0x4}, {0x8, 0xa, 0x0, 0x0, 0x800}, {0x8, 0x1d, 0x0, 0x0, 0xceb}]}}]}, @IFLA_MTU={0x8, 0x4, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x440088c4) 3.087802471s ago: executing program 0 (id=22761): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x0, 0x2e0, 0x428, 0x2e0, 0x2e0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4]}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) 2.797848398s ago: executing program 0 (id=22768): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) gettimeofday(0x0, &(0x7f0000000ac0)) 2.659870972s ago: executing program 0 (id=22772): r0 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21, 0x2}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x58}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0xc, 0x7, 0x7, 'snmp\x00', 'syz1\x00', {0x100}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) 2.567010475s ago: executing program 0 (id=22775): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x130}}, 0x0) 2.383279409s ago: executing program 0 (id=22778): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000a40)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a00100001000009058803"], 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.34695759s ago: executing program 4 (id=22780): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008011}, 0x800) 2.218365303s ago: executing program 4 (id=22783): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x4004) 1.783429864s ago: executing program 4 (id=22788): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x22108c1, &(0x7f00000001c0)=ANY=[@ANYBLOB='iocharset=macromanian,errors=continue,nodiscard,uid=', @ANYRESHEX=0x0, @ANYBLOB=',discard=0x0000000000000004,errors=continue,gid=', @ANYRESHEX=0x0, @ANYBLOB="006572726f72733d636f6e74696e6e75652c3030303030303030303066662c756d61736b3d3078303030303030303030303030303030342c6572726f72733d636f6e74696e75652c6e6f696e74656772697e74792c726573697a652c71756f74612c66736d616769633d3078303030303030303030303030303030382c736d61636b66736465663d7204d30400652c"], 0x1, 0x61a4, &(0x7f000000c4c0)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 1.470112223s ago: executing program 2 (id=22793): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c0000000400000002000084fdf7ffff0a000000020000000000000005000000020000000400000600000000000000010500000020000000006100302e615f5f61"], 0x0, 0x58}, 0x28) 1.339578856s ago: executing program 2 (id=22795): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@nested={0x18, 0xd3, 0x0, 0x0, [@typed={0x35, 0x0, 0x0, 0x0, @u64=0x1f}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 1.056198793s ago: executing program 1 (id=22800): r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001000)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) readv(r0, &(0x7f00000013c0)=[{&(0x7f0000001300)=""/35, 0x23}, {0x0, 0x36}], 0x2) 939.683396ms ago: executing program 2 (id=22801): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000009de00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="17000000680001"], 0xd8}}, 0x0) 917.124797ms ago: executing program 3 (id=22802): r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f00000004c0)="2700000014000704000000000000000011000100f5fe0012020000000000000000000039000500", 0x27) 856.602328ms ago: executing program 1 (id=22803): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040], 0x0, 0x0, 0x0}, 0x50) 799.08654ms ago: executing program 2 (id=22804): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x2000004, &(0x7f0000000280)={[{@uid={'uid', 0x3d, 0xee00}}, {@dmask}, {}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@fmask={'fmask', 0x3d, 0x2}}, {@fmask={'fmask', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@namecase}, {@errors_remount}, {@fmask}, {@namecase}]}, 0x1, 0x153d, &(0x7f0000002c00)="$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") mount$9p_fd(0x0, &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x202c00, 0x0) 745.138791ms ago: executing program 3 (id=22805): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b}, [@call={0x85, 0x0, 0x0, 0x75}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc) 642.462744ms ago: executing program 1 (id=22806): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb342, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x1ff, 0x645c, 0x2, {0x1, @pix={0x6, 0x8, 0x48524742, 0x9, 0x4, 0x7, 0x8, 0x3ff, 0x1, 0x4, 0x0, 0x2}}, 0x4}) 602.143104ms ago: executing program 3 (id=22807): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x484ad, 0x18}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x3c}}, 0x0) 486.820278ms ago: executing program 1 (id=22808): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0xfcfd, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) 433.091859ms ago: executing program 2 (id=22809): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @loopback=0x80ee3600, @remote}}}], 0x20}, 0x10) 366.19586ms ago: executing program 4 (id=22810): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f}, [@call={0x85, 0x0, 0x0, 0x22}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e9900", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 365.661281ms ago: executing program 3 (id=22811): r0 = syz_open_dev$video(&(0x7f0000000000), 0x7fff, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000140)={0x3, @capture={0x0, 0x1, {0x9, 0x6bf}, 0x6, 0x3}}) 314.642922ms ago: executing program 1 (id=22812): mknod$loop(&(0x7f0000000240)='./file0\x00', 0x40, 0x1) mount$cgroup(0x0, &(0x7f0000002300)='./file0\x00', &(0x7f0000002340), 0x10000, &(0x7f0000002380)={[{@name={'name', 0x3d, '.pending_reads\x00'}}]}) 229.374144ms ago: executing program 3 (id=22813): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) 150.562076ms ago: executing program 4 (id=22814): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newtaction={0x98, 0x30, 0x48b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_ctinfo={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_simple={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'nat\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6f8, 0x2, 0x1, 0x6, 0x1ff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x98}}, 0x0) 149.930086ms ago: executing program 1 (id=22815): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 125.839057ms ago: executing program 2 (id=22816): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'lock', ' ', 'mem'}, 0x9) 63.239798ms ago: executing program 3 (id=22817): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x201401b, &(0x7f00000005c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x4, 0x339, &(0x7f0000000140)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 0s ago: executing program 4 (id=22818): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@mpls_newroute={0x1c, 0x18, 0xa01, 0x70bd2d, 0x5, {0x1c, 0x80, 0x14, 0x81, 0xff, 0x3, 0xfd, 0x8, 0x800}}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x8000) kernel console output (not intermixed with test programs): d length. [ 1266.455979][T21507] IPv6: NLM_F_CREATE should be specified when creating new route [ 1266.571117][T21516] netlink: 56 bytes leftover after parsing attributes in process `syz.3.20165'. [ 1266.584194][T21515] netlink: 68 bytes leftover after parsing attributes in process `syz.1.20166'. [ 1266.663195][T21515] netlink: 48 bytes leftover after parsing attributes in process `syz.1.20166'. [ 1266.693758][T21521] dlm: no locking on control device [ 1267.168758][T21537] loop1: detected capacity change from 0 to 4096 [ 1267.258434][T21559] dlm: no locking on control device [ 1267.365657][T21567] overlayfs: unrecognized mount option "\{\" or missing value [ 1267.396421][T21566] openvswitch: netlink: Actions may not be safe on all matching packets [ 1267.629375][T21579] netlink: 160 bytes leftover after parsing attributes in process `syz.3.20186'. [ 1267.892310][T21588] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1268.038152][T21595] loop1: detected capacity change from 0 to 2048 [ 1268.102789][T21595] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1268.161574][ T4836] udevd[4836]: incorrect nilfs2 checksum on /dev/loop1 [ 1268.197373][T21605] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1268.251302][T21595] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=1024, inode=0, rec_len=0, name_len=0 [ 1268.285011][T21613] x_tables: duplicate underflow at hook 4 [ 1268.356307][T21595] Remounting filesystem read-only [ 1268.749224][T21641] netlink: 'syz.4.20204': attribute type 7 has an invalid length. [ 1268.868773][T21645] loop1: detected capacity change from 0 to 1764 [ 1268.976973][T21645] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 1269.311692][T21684] syz.0.20219[21684] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1269.311829][T21684] syz.0.20219[21684] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1269.701103][ T26] audit: type=1107 audit(1050024.345:71): pid=21704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=' [ 1269.701103][ T26] ,' [ 1270.035258][T21728] netlink: 'syz.0.20233': attribute type 3 has an invalid length. [ 1270.072011][T21732] netlink: 'syz.4.20235': attribute type 1 has an invalid length. [ 1270.389330][T21752] netlink: 'syz.2.20241': attribute type 49 has an invalid length. [ 1270.533252][T21761] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1270.868609][ T1495] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1271.183830][T21804] loop2: detected capacity change from 0 to 1764 [ 1271.309952][T21804] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1271.377021][ T1495] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1271.409392][ T1494] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1271.473994][ T1495] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1271.483750][ T1495] usb 1-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1271.517428][ T1495] usb 1-1: config 1 interface 0 has no altsetting 1 [ 1271.539013][T21834] netlink: 28 bytes leftover after parsing attributes in process `syz.4.20270'. [ 1271.713049][ T1494] usb 4-1: Using ep0 maxpacket: 32 [ 1271.734771][ T1495] usb 1-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 1271.754735][ T1495] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.795427][ T1495] usb 1-1: Product: syz [ 1271.806743][ T1495] usb 1-1: Manufacturer: syz [ 1271.833392][ T1495] usb 1-1: SerialNumber: syz [ 1271.895394][ T1494] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1271.918835][ T1495] smsusb:smsusb_probe: board id=8, interface number 0 [ 1272.015114][ T1494] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1272.145911][T21880] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20284'. [ 1272.162353][ T1495] smsusb:smsusb_probe: usb_set_interface failed, rc -71 [ 1272.170214][ T1495] smsusb: probe of 1-1:1.0 failed with error -71 [ 1272.196222][ T1495] usb 1-1: USB disconnect, device number 71 [ 1272.258950][ T1494] usb 4-1: New USB device found, idVendor=fc08, idProduct=0101, bcdDevice= 0.40 [ 1272.268082][ T1494] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.308692][T21892] loop2: detected capacity change from 0 to 64 [ 1272.320365][ T1494] usb 4-1: Product: syz [ 1272.333012][ T1494] usb 4-1: Manufacturer: syz [ 1272.337660][ T1494] usb 4-1: SerialNumber: syz [ 1272.386806][T21802] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1272.738350][T21925] netlink: 'syz.1.20296': attribute type 1 has an invalid length. [ 1272.793115][ T1494] usb 4-1: MIDIStreaming interface descriptor not found [ 1272.814358][T21925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20296'. [ 1272.824286][T21932] netlink: 132 bytes leftover after parsing attributes in process `syz.0.20299'. [ 1272.875847][ T1494] usb 4-1: USB disconnect, device number 71 [ 1273.043818][T21964] loop2: detected capacity change from 0 to 512 [ 1273.156591][ T1495] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1273.197125][T21964] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 1273.232861][ T4354] udevd[4354]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1273.241244][T21964] EXT4-fs (loop2): Remounting filesystem read-only [ 1273.306602][T21987] overlayfs: missing 'lowerdir' [ 1273.309611][T21964] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.20303: invalid indirect mapped block 4278190080 (level 0) [ 1273.382079][T21964] EXT4-fs (loop2): Remounting filesystem read-only [ 1273.410380][T21964] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.20303: invalid indirect mapped block 1 (level 1) [ 1273.467082][T21964] EXT4-fs (loop2): Remounting filesystem read-only [ 1273.477135][ T1495] usb 5-1: Using ep0 maxpacket: 16 [ 1273.495960][T21964] EXT4-fs (loop2): 1 truncate cleaned up [ 1273.505591][T21964] EXT4-fs (loop2): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000009,errors=continue,inode_readahead_blks=0x0000000000000040,errors=remount-ro,barrier=0x0000000000001000,resgid=0x0000000000000000,nolazytime,noquota,auto_da_alloc=0x0000000000000006,data=journal. Quota mode: none. [ 1273.534230][ C1] vkms_vblank_simulate: vblank timer overrun [ 1273.594095][T22006] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1273.635831][T21964] EXT4-fs error (device loop2): ext4_lookup:1850: inode #2: comm syz.2.20303: bad inode number: 1 [ 1273.648421][ T1495] usb 5-1: config index 0 descriptor too short (expected 65, got 36) [ 1273.656943][ T1495] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1273.713653][T21964] EXT4-fs (loop2): Remounting filesystem read-only [ 1273.755953][ T1495] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1273.780224][T22014] netlink: 'syz.0.20319': attribute type 1 has an invalid length. [ 1273.851417][ T1495] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1273.892424][ T1495] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1273.950900][ T1495] usb 5-1: config 0 descriptor?? [ 1274.024496][ T1495] pxrc 5-1:0.0: Could not find endpoint [ 1274.030932][ T1495] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1274.269581][ T1495] usb 5-1: USB disconnect, device number 72 [ 1274.802689][ T4310] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1274.984108][T22025] loop1: detected capacity change from 0 to 32768 [ 1275.069884][ T4310] usb 3-1: Using ep0 maxpacket: 16 [ 1275.241304][ T4310] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1275.255653][T22109] ieee802154 phy0 wpan0: encryption failed: -22 [ 1275.270780][T22025] XFS (loop1): Mounting V5 Filesystem [ 1275.326716][ T4310] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1275.389097][T22025] XFS (loop1): Ending clean mount [ 1275.412121][ T4195] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1275.508541][ T4310] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1275.550975][ T4310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.559169][ T4310] usb 3-1: Product: syz [ 1275.563911][ T4310] usb 3-1: Manufacturer: syz [ 1275.568554][ T4310] usb 3-1: SerialNumber: syz [ 1275.602007][ T4242] XFS (loop1): Unmounting Filesystem [ 1275.689987][ T4195] usb 4-1: Using ep0 maxpacket: 16 [ 1275.899780][ T4310] usb 3-1: USB disconnect, device number 87 [ 1276.043025][ T4195] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1276.058671][ T4195] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.070212][ T4195] usb 4-1: Product: syz [ 1276.074439][ T4195] usb 4-1: Manufacturer: syz [ 1276.103492][ T4195] usb 4-1: SerialNumber: syz [ 1276.122009][ T4195] usb 4-1: config 0 descriptor?? [ 1276.400765][T22173] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1276.412514][T22172] xt_ecn: cannot match TCP bits for non-tcp packets [ 1276.419733][ T4195] speedtch 4-1:0.0: speedtch_bind: data interface not found! [ 1276.427193][ T4195] speedtch 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1276.636079][ T4195] usb 4-1: USB disconnect, device number 72 [ 1276.965309][T22214] netlink: 'syz.1.20381': attribute type 2 has an invalid length. [ 1277.406592][T22250] loop2: detected capacity change from 0 to 256 [ 1277.507508][T22250] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1277.538016][T22250] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 1277.612847][T22250] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0x05c65c57, utbl_chksum : 0xe619d30d) [ 1277.721152][ T4195] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1278.003193][T22299] MTD: Couldn't look up './bus': -15 [ 1278.021377][ T4195] usb 5-1: Using ep0 maxpacket: 8 [ 1278.173324][ T4195] usb 5-1: config 0 has an invalid interface number: 122 but max is 0 [ 1278.205684][ T4195] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1278.265529][ T4195] usb 5-1: config 0 has no interface number 0 [ 1278.293101][ T4195] usb 5-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1278.330236][ T4195] usb 5-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 1278.396396][T22312] xt_CT: No such helper "pptp" [ 1278.423219][ T4195] usb 5-1: config 0 interface 122 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1278.461272][ T4195] usb 5-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 1278.520111][ T4195] usb 5-1: config 0 interface 122 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 8 [ 1278.811923][ T4195] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 1278.840427][ T4195] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1278.861857][ T4195] usb 5-1: Product: syz [ 1278.889804][ T4195] usb 5-1: Manufacturer: syz [ 1278.905428][ T4195] usb 5-1: SerialNumber: syz [ 1278.923868][ T4195] usb 5-1: config 0 descriptor?? [ 1278.972497][T22258] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1279.129854][T22370] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1279.217801][T16770] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1279.261483][ T4195] usb 5-1: NFC: intf ffff88801be01000 id ffffffff8cb63280 [ 1279.329413][ T4195] nfcmrvl 5-1:0.122: NFC: registered with nci successfully [ 1279.443078][ T4195] usb 5-1: USB disconnect, device number 73 [ 1279.483345][ T4195] usb 5-1: NFC: intf ffff88801be01000 [ 1279.575498][T22404] netlink: 209772 bytes leftover after parsing attributes in process `syz.3.20444'. [ 1279.599290][T22408] openvswitch: netlink: Actions may not be safe on all matching packets [ 1279.624577][T22404] openvswitch: netlink: Message has 80 unknown bytes. [ 1279.735768][T22414] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20447'. [ 1279.774027][T16770] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1279.797440][T16770] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.817363][T22417] netlink: 236 bytes leftover after parsing attributes in process `syz.0.20448'. [ 1279.838384][T16770] usb 2-1: Product: syz [ 1279.842632][T16770] usb 2-1: Manufacturer: syz [ 1279.847283][T16770] usb 2-1: SerialNumber: syz [ 1279.893565][T16770] usb 2-1: config 0 descriptor?? [ 1279.958047][T16770] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1280.069787][T22433] netlink: 24 bytes leftover after parsing attributes in process `syz.3.20453'. [ 1280.412125][T16770] usb 2-1: USB disconnect, device number 66 [ 1280.714587][ T8095] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1280.971300][ T8095] usb 1-1: Using ep0 maxpacket: 8 [ 1281.099647][ T8095] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 1281.162955][ T8095] usb 1-1: config 179 has no interface number 0 [ 1281.170324][ T8095] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1281.214376][ T8095] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1281.233720][ T8095] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1281.245406][ T8095] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1281.258938][ T8095] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1281.309460][ T8095] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1281.354130][ T8095] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1281.420388][T22471] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1281.722174][T22571] netlink: 'syz.1.20494': attribute type 9 has an invalid length. [ 1281.913481][ T4195] usb 1-1: USB disconnect, device number 72 [ 1281.933201][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1282.433256][T22634] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2880) [ 1282.443657][T22634] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 1282.467794][ T7266] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1282.746028][ T7266] usb 5-1: Using ep0 maxpacket: 32 [ 1282.895857][ T7266] usb 5-1: config 155 has an invalid interface number: 1 but max is 0 [ 1282.904112][ T7266] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1282.980877][ T7266] usb 5-1: config 155 has 2 interfaces, different from the descriptor's value: 1 [ 1282.990128][ T7266] usb 5-1: config 155 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8 [ 1283.088549][ T7266] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1283.264853][T22706] (unnamed net_device) (uninitialized): ARP validating cannot be used with MII monitoring [ 1283.286423][T22696] loop2: detected capacity change from 0 to 4096 [ 1283.344765][ T7266] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1283.373671][ T7266] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.392960][ T7266] usb 5-1: Product: syz [ 1283.397193][ T7266] usb 5-1: Manufacturer: syz [ 1283.404595][T22696] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 1283.418244][ T7266] usb 5-1: SerialNumber: syz [ 1283.463858][T22609] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1283.506690][ T7266] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1283.514467][ T7266] imon 5-1:155.0: unable to initialize intf0, err -19 [ 1283.579541][ T7266] imon:imon_probe: failed to initialize context! [ 1283.618492][ T7266] imon 5-1:155.0: unable to register, err -19 [ 1283.674412][ T7266] imon 5-1:155.1: inconsistent driver matching [ 1283.707255][ T7266] imon 5-1:155.1: unable to register, err -22 [ 1283.731866][ T7266] imon: probe of 5-1:155.1 failed with error -22 [ 1283.789903][ T7266] usb 5-1: USB disconnect, device number 74 [ 1283.871182][T22742] program syz.0.20549 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1284.402869][ T8095] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 1284.787935][ T8095] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1285.013064][ T8095] usb 2-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 1285.022176][ T8095] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.060112][ T8095] usb 2-1: Product: syz [ 1285.064327][ T8095] usb 2-1: Manufacturer: syz [ 1285.104961][T22839] netlink: 100 bytes leftover after parsing attributes in process `syz.4.20583'. [ 1285.108605][ T8095] usb 2-1: SerialNumber: syz [ 1285.168753][T22839] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20583'. [ 1285.185059][ T8095] usb 2-1: config 0 descriptor?? [ 1285.234706][ T8095] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 1285.302024][ T8095] dvb-usb: bulk message failed: -22 (3/0) [ 1285.333194][T22853] sg_write: data in/out 4194304/65042 bytes for SCSI command 0x0-- guessing data in; [ 1285.333194][T22853] program syz.4.20588 not setting count and/or reply_len properly [ 1285.353025][ T8095] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1285.418845][ T8095] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 1285.449732][ T8095] usb 2-1: media controller created [ 1285.463552][ T8095] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1285.516631][ T8095] dvb-usb: bulk message failed: -22 (6/0) [ 1285.558314][ T8095] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 1285.644599][ T8095] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input93 [ 1285.716177][ T8095] dvb-usb: schedule remote query interval to 150 msecs. [ 1285.730622][T22882] cgroup: Unknown subsys name 'noxattr' [ 1285.750477][ T8095] dvb-usb: bulk message failed: -22 (3/0) [ 1285.781829][ T8095] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 1285.914766][ T8095] usb 2-1: USB disconnect, device number 67 [ 1285.974420][ T8095] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 1286.053080][T22913] loop2: detected capacity change from 0 to 256 [ 1286.092686][T22913] exfat: Deprecated parameter 'utf8' [ 1286.098055][T22913] exfat: Deprecated parameter 'namecase' [ 1286.132912][T22913] exfat: Deprecated parameter 'namecase' [ 1286.163883][T22913] exfat: Deprecated parameter 'utf8' [ 1286.201495][T22913] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 1286.338159][ T7266] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 1286.375461][T22945] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20613'. [ 1286.533846][T22959] netlink: 'syz.4.20619': attribute type 1 has an invalid length. [ 1286.763806][T22984] loop2: detected capacity change from 0 to 512 [ 1286.778963][ T7266] usb 4-1: config index 0 descriptor too short (expected 539, got 27) [ 1286.799792][ T7266] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 65, changing to 4 [ 1286.812138][ T7266] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 11113, setting to 1023 [ 1286.876897][T22984] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 1286.936679][T22984] FAT-fs (loop2): Filesystem has been set read-only [ 1287.034413][ T7266] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1287.064789][ T7266] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1287.094483][ T7266] usb 4-1: Product: syz [ 1287.116072][ T7266] usb 4-1: Manufacturer: syz [ 1287.121094][ T4195] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 1287.133374][ T7266] usb 4-1: SerialNumber: syz [ 1287.153625][ T7266] usb 4-1: config 0 descriptor?? [ 1287.215093][ T7266] hub 4-1:0.0: bad descriptor, ignoring hub [ 1287.221069][ T7266] hub: probe of 4-1:0.0 failed with error -5 [ 1287.313884][ T7266] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input94 [ 1287.364570][ T7266] usbtouchscreen 4-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -22 [ 1287.451928][ T7266] usbtouchscreen: probe of 4-1:0.0 failed with error -22 [ 1287.544526][ T7266] usb 4-1: USB disconnect, device number 73 [ 1287.608161][ T4195] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1287.669937][T23046] netlink: 104 bytes leftover after parsing attributes in process `syz.1.20640'. [ 1287.679796][ T4195] usb 5-1: not running at top speed; connect to a high speed hub [ 1287.701271][T23046] netlink: 104 bytes leftover after parsing attributes in process `syz.1.20640'. [ 1287.719567][T23046] netlink: 81 bytes leftover after parsing attributes in process `syz.1.20640'. [ 1287.792397][ T4195] usb 5-1: config 8 has an invalid interface number: 43 but max is 1 [ 1287.803647][ T26] audit: type=1400 audit(1050041.276:72): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=23049 comm="syz.2.20642" [ 1287.830069][ T4195] usb 5-1: config 8 has an invalid interface number: 35 but max is 1 [ 1287.865115][ T4195] usb 5-1: config 8 has no interface number 0 [ 1287.888141][ T4195] usb 5-1: config 8 has no interface number 1 [ 1287.902346][ T4195] usb 5-1: config 8 interface 43 altsetting 17 has an invalid endpoint with address 0xE5, skipping [ 1287.913841][ T4195] usb 5-1: config 8 interface 43 has no altsetting 0 [ 1287.921162][ T4195] usb 5-1: config 8 interface 35 has no altsetting 0 [ 1287.950052][T23058] loop1: detected capacity change from 0 to 164 [ 1287.996950][T23058] rock: directory entry would overflow storage [ 1288.003192][T23058] rock: sig=0x66, size=4, remaining=3 [ 1288.069792][T23058] rock: directory entry would overflow storage [ 1288.080748][ T7266] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1288.099229][T23058] rock: sig=0x66, size=4, remaining=3 [ 1288.123565][ T4195] usb 5-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 1288.133035][T23058] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1288.143570][ T4195] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.176938][ T4195] usb 5-1: Product: syz [ 1288.181165][ T4195] usb 5-1: Manufacturer: syz [ 1288.185817][ T4195] usb 5-1: SerialNumber: syz [ 1288.364487][T23071] loop1: detected capacity change from 0 to 2048 [ 1288.371348][ T7266] usb 1-1: Using ep0 maxpacket: 8 [ 1288.418120][T23071] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1288.530984][ T7266] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1288.563103][ T7266] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1288.605607][ T4195] ums-alauda 5-1:8.43: USB Mass Storage device detected [ 1288.769767][ T4195] hub 5-1:8.35: Invalid hub with more than one config or interface [ 1288.789001][ T4195] hub: probe of 5-1:8.35 failed with error -22 [ 1288.806707][ T4195] ums-alauda 5-1:8.35: USB Mass Storage device detected [ 1288.815850][T23057] loop2: detected capacity change from 0 to 32768 [ 1288.831148][ T7266] usb 1-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1288.848637][T23057] gfs2: fsid=loop2: Trying to join cluster "lock_nolock", "loop2" [ 1288.850853][ T7266] usb 1-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 1288.882347][T23057] gfs2: fsid=loop2: Now mounting FS (format 1801)... [ 1288.889776][ T7266] usb 1-1: Product: syz [ 1288.897402][ T7266] usb 1-1: Manufacturer: syz [ 1288.917855][ T4195] usb 5-1: USB disconnect, device number 75 [ 1288.932244][ T7266] usb 1-1: SerialNumber: syz [ 1288.944658][T23057] gfs2: fsid=loop2.0: journal 0 mapped with 10 extents in 0ms [ 1288.952513][T16772] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1288.976207][ T7266] usb 1-1: config 0 descriptor?? [ 1288.993834][ T8095] gfs2: fsid=loop2.0: jid=0, already locked for use [ 1289.001089][ T8095] gfs2: fsid=loop2.0: jid=0: Looking at journal... [ 1289.049618][ T8095] gfs2: fsid=loop2.0: jid=0: Journal head lookup took 45ms [ 1289.070134][ T7266] imon_raw 1-1:0.0: IR endpoint missing [ 1289.088024][ T8095] gfs2: fsid=loop2.0: jid=0: Done [ 1289.108647][T23057] gfs2: fsid=loop2.0: first mount done, others may mount [ 1289.227363][T16772] usb 2-1: Using ep0 maxpacket: 16 [ 1289.332369][T23122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20654'. [ 1289.345489][ T4195] usb 1-1: USB disconnect, device number 73 [ 1289.523644][T16772] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1289.565970][T16772] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.593639][T16772] usb 2-1: Product: syz [ 1289.597852][T16772] usb 2-1: Manufacturer: syz [ 1289.625246][T16772] usb 2-1: SerialNumber: syz [ 1289.670701][T16772] usb 2-1: config 0 descriptor?? [ 1289.941041][T23155] netlink: 24 bytes leftover after parsing attributes in process `syz.2.20664'. [ 1289.962059][T16772] speedtch 2-1:0.0: speedtch_bind: data interface not found! [ 1289.970678][T16772] speedtch 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1290.096651][T23165] netlink: 256 bytes leftover after parsing attributes in process `syz.2.20668'. [ 1290.231598][T16772] usb 2-1: USB disconnect, device number 68 [ 1291.081915][T23218] netlink: 372 bytes leftover after parsing attributes in process `syz.0.20686'. [ 1291.081941][T23218] netlink: 'syz.0.20686': attribute type 3 has an invalid length. [ 1291.081957][T23218] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20686'. [ 1291.093982][T23221] x_tables: duplicate entry at hook 3 [ 1291.256061][T23228] device bridge_slave_1 left promiscuous mode [ 1291.256214][T23228] bridge0: port 2(bridge_slave_1) entered disabled state [ 1291.260962][T23228] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1291.683685][T23256] netlink: 'syz.4.20698': attribute type 13 has an invalid length. [ 1292.025389][ T8095] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1292.237144][T23300] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20713'. [ 1292.246817][T23301] netlink: 10 bytes leftover after parsing attributes in process `syz.1.20712'. [ 1292.271109][T23300] netlink: 'syz.3.20713': attribute type 1 has an invalid length. [ 1292.283436][ T8095] usb 3-1: Using ep0 maxpacket: 16 [ 1292.331571][T23307] siw: device registration error -23 [ 1292.581562][ T8095] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1292.604447][ T8095] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.643328][ T8095] usb 3-1: Product: syz [ 1292.690216][ T8095] usb 3-1: Manufacturer: syz [ 1292.695069][ T8095] usb 3-1: SerialNumber: syz [ 1292.740219][ T8095] usb 3-1: config 0 descriptor?? [ 1292.900734][T23338] netlink: 'syz.4.20726': attribute type 15 has an invalid length. [ 1292.946814][T23343] netlink: 184 bytes leftover after parsing attributes in process `syz.1.20729'. [ 1292.956708][T23338] netlink: 25 bytes leftover after parsing attributes in process `syz.4.20726'. [ 1293.041859][ T8095] speedtch 3-1:0.0: speedtch_bind: data interface not found! [ 1293.049298][ T8095] speedtch 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1293.308698][T16772] usb 3-1: USB disconnect, device number 88 [ 1293.838080][ T4195] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1294.141945][ T4195] usb 4-1: Using ep0 maxpacket: 32 [ 1294.292308][ T4195] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1294.311943][ T4195] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1294.367155][ T4195] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1294.580503][ T4195] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 1294.614707][ T4195] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1294.655007][ T4195] usb 4-1: Product: syz [ 1294.675823][ T4195] usb 4-1: Manufacturer: syz [ 1294.691814][ T4195] usb 4-1: SerialNumber: syz [ 1294.998511][ T4195] usb 4-1: USB disconnect, device number 74 [ 1295.125853][ T1495] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1295.228228][T23502] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1295.542787][ T1495] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1295.576205][ T1495] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1295.785595][T23572] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1295.795712][T23572] overlayfs: missing 'lowerdir' [ 1295.801077][ T4195] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1295.830703][ T1495] usb 2-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40 [ 1295.852775][ T1495] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1295.860810][ T1495] usb 2-1: Product: syz [ 1295.876216][ T1495] usb 2-1: Manufacturer: syz [ 1295.908626][ T1495] usb 2-1: SerialNumber: syz [ 1296.216479][ T4195] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1296.251242][ T1495] usb 2-1: unit 5 not found! [ 1296.272301][ T4195] usb 3-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=9e.06 [ 1296.315278][ T4195] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1296.355847][ T1495] usb 2-1: USB disconnect, device number 69 [ 1296.388944][ T4195] usb 3-1: config 0 descriptor?? [ 1296.477971][ T4195] gspca_main: kinect-2.14.0 probing 045e:02bf [ 1296.494018][T23630] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20808'. [ 1296.689629][ T1495] usb 3-1: USB disconnect, device number 89 [ 1296.866946][T23666] netlink: 'syz.1.20817': attribute type 10 has an invalid length. [ 1296.907781][T23666] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.20817'. [ 1296.932335][ T4195] usb 4-1: new low-speed USB device number 75 using dummy_hcd [ 1297.102824][T23678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20822'. [ 1297.145395][T23678] netlink: 16 bytes leftover after parsing attributes in process `syz.1.20822'. [ 1297.392175][ T4195] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1297.499134][ T4195] usb 4-1: config 35 has an invalid interface number: 223 but max is 0 [ 1297.514608][ T4195] usb 4-1: config 35 has no interface number 0 [ 1297.552711][ T26] audit: type=1326 audit(1050050.405:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23701 comm="syz.0.20832" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fef2b0bb019 code=0x0 [ 1297.579476][ T4195] usb 4-1: config 35 interface 223 has no altsetting 0 [ 1297.626488][T23709] xt_time: unknown flags 0x4 [ 1297.894620][ T4195] usb 4-1: string descriptor 0 read error: -22 [ 1297.900961][ T4195] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0108, bcdDevice=86.42 [ 1297.953349][ T4195] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.030825][T23747] netlink: 140 bytes leftover after parsing attributes in process `syz.2.20848'. [ 1298.034936][ T4195] usb_ehset_test: probe of 4-1:35.223 failed with error -32 [ 1298.106471][T23747] netlink: 140 bytes leftover after parsing attributes in process `syz.2.20848'. [ 1298.156322][ T7266] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 1298.272825][ T1495] usb 4-1: USB disconnect, device number 75 [ 1298.482564][ T4195] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1298.610878][ T7266] usb 5-1: config 0 has an invalid interface number: 37 but max is 1 [ 1298.640092][ T7266] usb 5-1: config 0 has an invalid interface number: 255 but max is 1 [ 1298.670421][ T7266] usb 5-1: config 0 has no interface number 0 [ 1298.678470][ T7266] usb 5-1: config 0 has no interface number 1 [ 1298.685308][ T7266] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1298.704332][ T7266] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1298.728177][ T7266] usb 5-1: config 0 interface 255 has no altsetting 0 [ 1298.832746][T23817] netlink: 132 bytes leftover after parsing attributes in process `syz.2.20868'. [ 1298.900993][T23822] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 1298.935226][T23822] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 1298.947917][ T7266] usb 5-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 1298.963761][ T4195] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1298.971941][ T7266] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.002196][ T7266] usb 5-1: Product: syz [ 1299.010547][ T7266] usb 5-1: Manufacturer: syz [ 1299.024449][ T7266] usb 5-1: SerialNumber: syz [ 1299.040013][ T7266] usb 5-1: config 0 descriptor?? [ 1299.062086][T23838] xt_hashlimit: invalid rate [ 1299.085238][ T4195] usb 1-1: config 6 has an invalid interface number: 252 but max is 0 [ 1299.118484][ T4195] usb 1-1: config 6 has no interface number 0 [ 1299.132964][ T7266] usb 5-1: selecting invalid altsetting 0 [ 1299.174649][ T4195] usb 1-1: config 6 interface 252 altsetting 5 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 1299.186591][ T7266] usb 5-1: Could not set interface, error -22 [ 1299.234180][ T4195] usb 1-1: config 6 interface 252 has no altsetting 0 [ 1299.366321][T16772] usb 5-1: USB disconnect, device number 76 [ 1299.423395][ T4195] usb 1-1: New USB device found, idVendor=1199, idProduct=6815, bcdDevice=dd.bf [ 1299.442661][ T4195] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.477861][T23895] loop1: detected capacity change from 0 to 512 [ 1299.495177][ T4195] usb 1-1: Product: syz [ 1299.504096][ T4195] usb 1-1: Manufacturer: syz [ 1299.510483][ T4195] usb 1-1: SerialNumber: syz [ 1299.573094][T23895] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1299.594440][T23895] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1299.625814][T23907] IPv6: Can't replace route, no match found [ 1299.653167][T23895] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,inode_readahead_blks=0x0000000000000100,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000. Quota mode: writeback. [ 1299.828881][T23922] netlink: 'syz.2.20887': attribute type 21 has an invalid length. [ 1299.846488][T23922] netlink: 132 bytes leftover after parsing attributes in process `syz.2.20887'. [ 1299.895949][ T4195] sierra 1-1:6.252: Sierra USB modem converter detected [ 1299.927774][ T4195] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 1299.953398][ T4195] usb 1-1: Sierra USB modem converter now attached to ttyUSB1 [ 1299.993503][ T4195] usb 1-1: USB disconnect, device number 74 [ 1300.030620][ T4195] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1300.086204][ T4195] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 1300.106190][ T4195] sierra 1-1:6.252: device disconnected [ 1300.214448][ T1495] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1300.297572][T23975] autofs4:pid:23975:validate_dev_ioctl: path string terminator missing for cmd(0xc0189374) [ 1300.342865][ T7266] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1300.492277][ T1495] usb 4-1: Using ep0 maxpacket: 8 [ 1300.620843][ T7266] usb 5-1: Using ep0 maxpacket: 32 [ 1300.642468][ T1495] usb 4-1: config 3 has an invalid interface number: 45 but max is 0 [ 1300.661294][ T1495] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1300.674887][ T1495] usb 4-1: config 3 has no interface number 0 [ 1300.681886][ T1495] usb 4-1: config 3 interface 45 altsetting 2 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1300.694659][ T1495] usb 4-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1300.708498][ T1495] usb 4-1: config 3 interface 45 has no altsetting 0 [ 1300.748966][ T7266] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 1300.770425][ T7266] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1300.789245][ T7266] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1300.799730][ T7266] usb 5-1: config 1 has no interface number 0 [ 1300.806580][ T7266] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1300.827106][ T7266] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1300.867627][ T7266] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1300.892068][ T7266] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1300.900843][ T1495] usb 4-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 1300.923251][ T1495] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.947757][ T1495] usb 4-1: Product: syz [ 1300.955066][ T1495] usb 4-1: Manufacturer: syz [ 1300.965713][ T1495] usb 4-1: SerialNumber: syz [ 1300.989152][ T7266] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 1301.092059][T24028] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1301.219982][ T7266] snd_usb_pod 5-1:1.1: invalid control EP [ 1301.225779][ T7266] snd_usb_pod 5-1:1.1: cannot start listening: -22 [ 1301.254363][ T7266] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 1301.279678][ T7266] snd_usb_pod: probe of 5-1:1.1 failed with error -22 [ 1301.444540][T16772] usb 5-1: USB disconnect, device number 77 [ 1301.522802][ T1495] usb 4-1: USB disconnect, device number 76 [ 1301.590202][T24076] netlink: zone id is out of range [ 1301.697848][T24082] bad cache= option: nonw [ 1301.697848][T24082] [ 1301.729227][T24082] CIFS: VFS: bad cache= option: nonw [ 1301.800439][ T4836] udevd[4836]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1301.818786][T24090] /dev/nullb0: Can't open blockdev [ 1302.035584][T24107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20935'. [ 1302.181681][T16772] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1302.192484][ T1495] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1302.333716][T24125] netlink: zone id is out of range [ 1302.448639][T16772] usb 2-1: Using ep0 maxpacket: 8 [ 1302.470027][ T1495] usb 3-1: Using ep0 maxpacket: 16 [ 1302.622100][ T1495] usb 3-1: config 0 has no interfaces? [ 1302.630316][T16772] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1302.716335][T16772] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 174, changing to 7 [ 1302.812502][ T1495] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1302.827767][ T1495] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1302.861420][ T1495] usb 3-1: Product: syz [ 1302.867153][ T1495] usb 3-1: Manufacturer: syz [ 1302.876286][ T1495] usb 3-1: SerialNumber: syz [ 1302.919548][ T1495] r8152-cfgselector 3-1: config 0 descriptor?? [ 1302.929964][T16772] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0078, bcdDevice= 0.40 [ 1302.939068][T16772] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1302.993773][T16772] usb 2-1: Product: syz [ 1302.998147][T16772] usb 2-1: Manufacturer: syz [ 1303.002765][T16772] usb 2-1: SerialNumber: syz [ 1303.031334][T24165] tmpfs: Bad value for 'mpol' [ 1303.178189][T24172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20959'. [ 1303.208118][ T1495] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 1303.410985][T16772] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1303.432427][T16772] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1303.456159][ T1495] usb 3-1: USB disconnect, device number 90 [ 1303.459288][T16772] usb 2-1: unit 254 not found! [ 1303.530145][T16772] usb 2-1: USB disconnect, device number 70 [ 1303.825749][ T4836] udevd[4836]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1304.220252][T24244] ipt_ECN: cannot use operation on non-tcp rule [ 1304.254601][T24247] netlink: 'syz.1.20977': attribute type 3 has an invalid length. [ 1304.542561][T24265] device bond6 entered promiscuous mode [ 1304.638236][T24265] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1304.677921][T24307] netlink: 'syz.1.20987': attribute type 2 has an invalid length. [ 1304.779473][T24307] netlink: 'syz.1.20987': attribute type 1 has an invalid length. [ 1305.702931][T24371] loop1: detected capacity change from 0 to 512 [ 1305.848970][T24371] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1305.916904][T24371] Quota error (device loop1): find_block_dqentry: Quota for id 0 referenced but not present [ 1305.928153][T24371] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 1305.937980][T24371] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.21012: Failed to acquire dquot type 1 [ 1306.526328][T24419] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1306.944493][T24356] loop2: detected capacity change from 0 to 32768 [ 1308.048546][T24535] overlayfs: missing 'lowerdir' [ 1308.188069][T24543] IPv6: NLM_F_CREATE should be specified when creating new route [ 1308.618880][ T26] audit: type=1326 audit(1050060.751:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24564 comm="syz.1.21080" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8633146019 code=0x0 [ 1308.735129][T24573] netlink: 2 bytes leftover after parsing attributes in process `syz.0.21083'. [ 1308.787759][T24579] netlink: 96 bytes leftover after parsing attributes in process `syz.3.21084'. [ 1308.840410][T24579] netlink: 96 bytes leftover after parsing attributes in process `syz.3.21084'. [ 1308.863234][ T8095] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1308.895297][T24583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21086'. [ 1308.951198][T24587] netlink: 28 bytes leftover after parsing attributes in process `syz.1.21089'. [ 1309.108942][T24597] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1309.120244][ T8095] usb 5-1: Using ep0 maxpacket: 16 [ 1309.248085][ T8095] usb 5-1: New USB device found, idVendor=0471, idProduct=0307, bcdDevice=61.a4 [ 1309.290013][ T8095] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1309.334213][ T8095] usb 5-1: config 0 descriptor?? [ 1309.354026][T24538] loop2: detected capacity change from 0 to 32768 [ 1309.378960][ T8095] pwc: Philips PCVC675K (Vesta) USB webcam detected. [ 1309.552583][T24538] XFS (loop2): Mounting V5 Filesystem [ 1309.600703][ T8095] pwc: send_video_command error -71 [ 1309.606120][ T8095] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1309.622446][ T8095] Philips webcam: probe of 5-1:0.0 failed with error -71 [ 1309.645445][ T8095] usb 5-1: USB disconnect, device number 78 [ 1309.717376][T24538] XFS (loop2): Ending clean mount [ 1309.893176][ T4234] XFS (loop2): Unmounting Filesystem [ 1310.309418][T24679] netlink: 'syz.4.21117': attribute type 8 has an invalid length. [ 1310.973181][T24724] netlink: 196 bytes leftover after parsing attributes in process `syz.1.21132'. [ 1311.004826][T24724] netlink: 196 bytes leftover after parsing attributes in process `syz.1.21132'. [ 1311.024876][ T8095] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 1311.062938][T24724] netlink: 19 bytes leftover after parsing attributes in process `syz.1.21132'. [ 1311.109523][T24732] tmpfs: Bad value for 'mpol' [ 1311.249759][T24739] usb usb8: usbfs: process 24739 (syz.1.21137) did not claim interface 0 before use [ 1311.429156][ T8095] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1311.449215][ T8095] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1311.462380][ T8095] usb 1-1: config 0 descriptor?? [ 1311.505662][ T8095] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1311.642314][T24721] loop2: detected capacity change from 0 to 32768 [ 1311.701071][T24721] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.21109 (24721) [ 1311.767728][T24721] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1311.781294][T24721] BTRFS info (device loop2): using free space tree [ 1311.790858][T24721] BTRFS info (device loop2): has skinny extents [ 1311.965830][ T8095] gp8psk: usb in 128 operation failed. [ 1311.985730][ T8095] gp8psk: usb in 137 operation failed. [ 1311.991287][ T8095] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1312.017533][ T8095] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1312.047291][ T8095] usb 1-1: USB disconnect, device number 75 [ 1312.075397][T24721] BTRFS info (device loop2): enabling ssd optimizations [ 1312.114771][T24807] netlink: 24 bytes leftover after parsing attributes in process `syz.3.21152'. [ 1312.124525][T24807] netlink: 24 bytes leftover after parsing attributes in process `syz.3.21152'. [ 1312.669576][T24836] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1312.842354][T24844] damon: kdamond (24844) starts [ 1313.071058][T24865] binfmt_misc: register: failed to install interpreter file ./file2 [ 1313.482551][T24896] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1313.636450][T24907] openvswitch: netlink: Flow key attribute not present in set flow. [ 1314.130103][T24940] ieee802154 phy0 wpan0: encryption failed: -90 [ 1314.283107][T16772] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1314.678953][T16772] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1314.700974][T16772] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1314.749497][T16772] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1314.771957][T16772] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1314.823213][T16772] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1314.833440][T16772] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1314.851644][T16772] usb 1-1: config 0 descriptor?? [ 1314.901970][T16772] hdpvr 1-1:0.0: Could not find bulk-in endpoint [ 1314.925872][T16772] hdpvr: probe of 1-1:0.0 failed with error -12 [ 1314.938001][T24998] __nla_validate_parse: 5 callbacks suppressed [ 1314.938018][T24998] netlink: 72 bytes leftover after parsing attributes in process `syz.3.21221'. [ 1314.940730][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1315.146924][T16772] usb 1-1: USB disconnect, device number 76 [ 1315.356267][T25031] netlink: 32 bytes leftover after parsing attributes in process `syz.1.21230'. [ 1315.384319][T25031] netlink: 32 bytes leftover after parsing attributes in process `syz.1.21230'. [ 1315.436740][T25031] netlink: 20 bytes leftover after parsing attributes in process `syz.1.21230'. [ 1315.763717][T25056] loop2: detected capacity change from 0 to 64 [ 1315.808473][T25061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21240'. [ 1315.848394][T25056] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 1316.267780][T25100] device wlan0 entered promiscuous mode [ 1316.341683][T25107] netlink: 'syz.1.21255': attribute type 1 has an invalid length. [ 1316.395677][T25107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21255'. [ 1316.660972][T25119] xt_TCPMSS: Only works on TCP SYN packets [ 1316.950925][T25138] netlink: 24 bytes leftover after parsing attributes in process `syz.4.21270'. [ 1317.362048][T16770] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1317.481414][T25172] device ip6gre2 entered promiscuous mode [ 1317.501383][T16772] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1317.717882][T25189] netlink: 32 bytes leftover after parsing attributes in process `syz.2.21286'. [ 1317.749438][T25189] netlink: 32 bytes leftover after parsing attributes in process `syz.2.21286'. [ 1317.768503][T16770] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1317.778781][T16772] usb 2-1: Using ep0 maxpacket: 16 [ 1317.784492][T16770] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1317.913397][T16772] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1317.913444][T16772] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1317.913478][T16772] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1317.913506][T16772] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 30768, setting to 1024 [ 1317.913537][T16772] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1317.913564][T16772] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1317.995824][T16772] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1317.995858][T16772] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1317.995880][T16772] usb 2-1: SerialNumber: syz [ 1318.003586][T16770] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1318.003629][T16770] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.003649][T16770] usb 1-1: Product: syz [ 1318.003665][T16770] usb 1-1: Manufacturer: syz [ 1318.003680][T16770] usb 1-1: SerialNumber: syz [ 1318.006742][T16770] usb 1-1: config 0 descriptor?? [ 1318.017598][T25209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21293'. [ 1318.025412][T25154] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1318.025505][T25154] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1318.048548][T16770] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1318.050611][T16770] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1318.068012][T16770] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1318.068055][T16770] usb 1-1: media controller created [ 1318.097026][T25219] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1318.118695][T16770] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1318.253530][T16770] DVB: Unable to find symbol tda10046_attach() [ 1318.253548][T16770] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1318.253562][T16770] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1318.278996][T25154] udc-core: couldn't find an available UDC or it's busy [ 1318.422600][T16770] dvb_usb_m920x: probe of 1-1:0.0 failed with error -71 [ 1318.446793][T16770] usb 1-1: USB disconnect, device number 77 [ 1318.462562][T25154] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1318.559458][ T1495] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1318.567851][T16772] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 1318.602265][T16772] usb 2-1: USB disconnect, device number 71 [ 1318.858598][ T1495] usb 4-1: Using ep0 maxpacket: 16 [ 1318.887798][T25271] gfs2: Unexpected value for 'barrier' [ 1319.008700][ T1495] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1319.040528][ T1495] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1319.243948][ T1495] usb 4-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=82.8f [ 1319.264005][ T1495] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1319.297294][ T1495] usb 4-1: Product: syz [ 1319.301552][ T1495] usb 4-1: Manufacturer: syz [ 1319.306172][ T1495] usb 4-1: SerialNumber: syz [ 1319.339864][ T1495] usb 4-1: config 0 descriptor?? [ 1319.394912][ T1495] kobil_sct 4-1:0.0: KOBIL USB smart card terminal converter detected [ 1319.403475][T25300] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 1319.421572][ T1495] usb 4-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1319.521560][ T1494] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1319.597814][T25277] loop2: detected capacity change from 0 to 32768 [ 1319.633183][ T1495] usb 4-1: USB disconnect, device number 77 [ 1319.655442][T25277] [ 1319.655442][T25277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1319.655442][T25277] [ 1319.678028][ T1495] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1319.708022][ T1495] kobil_sct 4-1:0.0: device disconnected [ 1319.768748][ T1483] [ 1319.768748][ T1483] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1319.768748][ T1483] [ 1319.818150][ T1483] [ 1319.818150][ T1483] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1319.818150][ T1483] [ 1319.843226][ T4234] [ 1319.843226][ T4234] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1319.843226][ T4234] [ 1319.873206][ T277] [ 1319.873206][ T277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1319.873206][ T277] [ 1319.926317][ T4234] [ 1319.926317][ T4234] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1319.926317][ T4234] [ 1319.960843][ T1494] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1320.017027][ T1494] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1320.049000][ T1494] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1320.077361][ T1494] usb 5-1: config 1 has no interface number 1 [ 1320.083791][ T1494] usb 5-1: config 1 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1320.116962][ T1494] usb 5-1: config 1 interface 2 has no altsetting 1 [ 1320.344954][ T1494] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1320.375798][ T1494] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1320.408153][ T1494] usb 5-1: Product: syz [ 1320.431586][ T1494] usb 5-1: Manufacturer: syz [ 1320.436583][ T1494] usb 5-1: SerialNumber: syz [ 1320.691859][T16770] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1320.900773][ T1494] usb 5-1: 2:2 : no or invalid class specific endpoint descriptor [ 1320.926511][T25394] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1320.975398][T16770] usb 3-1: Using ep0 maxpacket: 16 [ 1321.108314][T16770] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1321.128631][ T1494] usb 5-1: USB disconnect, device number 79 [ 1321.139457][T16770] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1321.186112][T16770] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 1321.214760][T16770] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1321.240321][ T4354] udevd[4354]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1321.335144][T16770] usb 3-1: config 0 descriptor?? [ 1321.384462][T16770] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1321.598958][T16770] usb 3-1: USB disconnect, device number 91 [ 1322.169687][T25484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21368'. [ 1322.857755][T25534] netlink: 48 bytes leftover after parsing attributes in process `syz.0.21386'. [ 1323.583320][T25587] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1323.875217][T25614] netlink: 64 bytes leftover after parsing attributes in process `syz.3.21413'. [ 1324.076040][T25630] xt_ecn: cannot match TCP bits for non-tcp packets [ 1324.237234][T25640] netlink: 20 bytes leftover after parsing attributes in process `syz.2.21424'. [ 1324.449927][T25655] openvswitch: netlink: Actions may not be safe on all matching packets [ 1324.713137][T25656] loop2: detected capacity change from 0 to 8192 [ 1324.902993][T25656] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 1324.918338][T25656] REISERFS (device loop2): using ordered data mode [ 1324.934289][T25656] reiserfs: using flush barriers [ 1324.941689][T25656] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1325.023762][T25656] REISERFS (device loop2): checking transaction log (loop2) [ 1325.103781][T25656] REISERFS (device loop2): Using r5 hash to sort names [ 1325.142351][T25702] netlink: 32 bytes leftover after parsing attributes in process `syz.1.21447'. [ 1325.315774][ T7266] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1325.528826][ T26] audit: type=1107 audit(1050076.559:75): pid=25732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1325.734460][T25743] ip6t_srh: unknown srh match flags 4000 [ 1325.764913][ T7266] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1325.785978][ T7266] usb 4-1: config 2 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 1325.947383][ T7266] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1325.971271][ T7266] usb 4-1: config 2 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 1326.203539][ T7266] usb 4-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 1326.213933][T25769] netlink: 'syz.4.21469': attribute type 46 has an invalid length. [ 1326.220087][ T7266] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.247469][ T7266] usb 4-1: Product: syz [ 1326.256952][ T7266] usb 4-1: Manufacturer: syz [ 1326.265105][T25769] netlink: 36 bytes leftover after parsing attributes in process `syz.4.21469'. [ 1326.268280][ T7266] usb 4-1: SerialNumber: syz [ 1326.376935][ T7266] ti_usb_3410_5052 4-1:2.0: TI USB 5052 2 port adapter converter detected [ 1326.406553][ T7266] ti_usb_3410_5052 4-1:2.0: missing endpoints [ 1326.617708][T25789] device bond2 entered promiscuous mode [ 1326.635534][T25789] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1326.672325][ T1494] usb 4-1: USB disconnect, device number 78 [ 1327.380687][T25877] netlink: 12 bytes leftover after parsing attributes in process `syz.4.21493'. [ 1327.752344][T25909] netlink: 'syz.4.21504': attribute type 32 has an invalid length. [ 1328.459173][ T7266] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1328.736824][ T7266] usb 4-1: Using ep0 maxpacket: 8 [ 1328.876379][ T7266] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1328.918471][ T7266] usb 4-1: New USB device found, idVendor=05a9, idProduct=2630, bcdDevice=55.12 [ 1328.956934][ T7266] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1328.969054][T25984] loop1: detected capacity change from 0 to 2048 [ 1328.990574][ T7266] usb 4-1: config 0 descriptor?? [ 1329.075584][T25984] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1329.089674][ T7266] usb 4-1: Found UVC 0.00 device (05a9:2630) [ 1329.112409][ T7266] usb 4-1: No valid video chain found. [ 1329.281486][ T7266] usb 4-1: USB disconnect, device number 79 [ 1329.558402][T26051] CIFS: VFS: Unable to allocate memory for devname [ 1330.125525][T26109] xt_bpf: check failed: parse error [ 1330.293548][T26133] xt_hashlimit: overflow, try lower: 3/0 [ 1330.402357][T26139] netlink: 24 bytes leftover after parsing attributes in process `syz.2.21576'. [ 1330.677356][T26162] netlink: 'syz.3.21584': attribute type 1 has an invalid length. [ 1330.736044][T26162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21584'. [ 1330.800854][T26173] netlink: 'syz.0.21588': attribute type 5 has an invalid length. [ 1330.923434][T26185] CIFS mount error: No usable UNC path provided in device string! [ 1330.923434][T26185] [ 1330.937472][T26188] netlink: 28 bytes leftover after parsing attributes in process `syz.1.21593'. [ 1330.965513][T26185] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1330.977970][T26188] netlink: 28 bytes leftover after parsing attributes in process `syz.1.21593'. [ 1331.003410][T26188] netlink: 36 bytes leftover after parsing attributes in process `syz.1.21593'. [ 1331.142438][ T1495] usb 5-1: new full-speed USB device number 80 using dummy_hcd [ 1331.537920][ T7266] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1331.602407][ T1495] usb 5-1: config 0 has an invalid interface number: 147 but max is 0 [ 1331.610677][ T1495] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1331.696703][ T1495] usb 5-1: config 0 has no interface number 0 [ 1331.739918][ T1495] usb 5-1: config 0 interface 147 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 1331.805806][ T1495] usb 5-1: config 0 interface 147 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1331.848383][ T1495] usb 5-1: config 0 interface 147 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1331.976509][ T7266] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1332.014314][ T7266] usb 2-1: config 2 has 1 interface, different from the descriptor's value: 3 [ 1332.115657][ T1495] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.03 [ 1332.135632][ T1495] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1332.185874][ T1495] usb 5-1: Product: syz [ 1332.208149][ T1495] usb 5-1: Manufacturer: syz [ 1332.242097][ T1495] usb 5-1: SerialNumber: syz [ 1332.254139][ T7266] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=bd.95 [ 1332.263265][ T7266] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1332.274149][ T1495] usb 5-1: config 0 descriptor?? [ 1332.318060][ T7266] usb 2-1: Product: syz [ 1332.322308][ T7266] usb 2-1: Manufacturer: syz [ 1332.326931][ T7266] usb 2-1: SerialNumber: syz [ 1332.332499][T26176] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1332.397518][ T1495] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1332.612988][ T1111] usb 5-1: USB disconnect, device number 80 [ 1332.639686][ T4255] usb 5-1: Failed to submit usb control message: -71 [ 1332.647412][ T4255] usb 5-1: unable to send the bmi data to the device: -71 [ 1332.682413][ T4255] usb 5-1: unable to get target info from device [ 1332.688856][ T4255] usb 5-1: could not get target info (-71) [ 1332.727766][ T4255] usb 5-1: could not probe fw (-71) [ 1332.738198][ T7266] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1332.756740][ T7266] dvb_usb_af9015: probe of 2-1:2.0 failed with error -22 [ 1332.822211][ T1495] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1332.830052][ T7266] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1332.841936][ T7266] dvb_usb_af9035: probe of 2-1:2.0 failed with error -22 [ 1332.872197][ T7266] usb 2-1: USB disconnect, device number 72 [ 1333.002414][ T1494] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1333.120071][ T1495] usb 1-1: Using ep0 maxpacket: 32 [ 1333.280555][ T1495] usb 1-1: config 1 has an invalid interface number: 216 but max is 0 [ 1333.288926][ T7] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1333.296771][ T1494] usb 3-1: Using ep0 maxpacket: 16 [ 1333.319088][ T1495] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1333.367191][ T1495] usb 1-1: config 1 has no interface number 0 [ 1333.406074][ T1495] usb 1-1: config 1 interface 216 has no altsetting 0 [ 1333.451630][ T1494] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 1333.492396][ T1494] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1333.590736][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 1333.636336][ T1495] usb 1-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=17.ee [ 1333.656417][ T1495] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.684903][ T1495] usb 1-1: Product: syz [ 1333.697253][ T1495] usb 1-1: Manufacturer: syz [ 1333.706494][ T1495] usb 1-1: SerialNumber: syz [ 1333.722391][T26294] loop1: detected capacity change from 0 to 4096 [ 1333.729685][ T7266] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1333.737567][ T1494] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 1333.747066][ T7] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 1333.766130][ T7] usb 4-1: config 0 has no interface number 0 [ 1333.777619][ T1494] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.788993][ T1494] usb 3-1: Product: syz [ 1333.798484][ T1494] usb 3-1: Manufacturer: syz [ 1333.808270][ T1494] usb 3-1: SerialNumber: syz [ 1333.830407][ T1494] usb 3-1: config 0 descriptor?? [ 1333.895880][ T1494] hub 3-1:0.0: bad descriptor, ignoring hub [ 1333.912831][ T1494] hub: probe of 3-1:0.0 failed with error -5 [ 1333.993141][ T7] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1334.013613][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1334.058730][ T7] usb 4-1: Product: syz [ 1334.070671][ T1494] snd-usb-audio: probe of 3-1:0.0 failed with error -12 [ 1334.090811][ T7] usb 4-1: Manufacturer: syz [ 1334.120154][ T1495] usb 1-1: USB disconnect, device number 78 [ 1334.146481][ T7266] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1334.157891][ T7] usb 4-1: SerialNumber: syz [ 1334.165505][ T7266] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1334.190452][ T4465] udevd[4465]: setting owner of /dev/bus/usb/001/078 to uid=0, gid=0 failed: No such file or directory [ 1334.204572][ T7] usb 4-1: config 0 descriptor?? [ 1334.220478][ T4837] udevd[4837]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1334.265431][ T7] hub 4-1:0.132: bad descriptor, ignoring hub [ 1334.274699][ T1494] usb 3-1: USB disconnect, device number 92 [ 1334.280811][ T7] hub: probe of 4-1:0.132 failed with error -5 [ 1334.311506][ T7] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input97 [ 1334.381940][ T7266] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1334.408684][ T7266] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1334.421280][ T7266] usb 5-1: Product: syz [ 1334.426110][ T7266] usb 5-1: Manufacturer: syz [ 1334.430889][ T7266] usb 5-1: SerialNumber: syz [ 1334.510987][ T7266] cdc_ncm 5-1:1.0: skipping garbage [ 1334.526492][ T7266] cdc_ncm 5-1:1.0: NCM or ECM functional descriptors missing [ 1334.553732][ T7266] cdc_ncm 5-1:1.0: bind() failure [ 1334.579589][ T7266] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1334.603530][ T7266] cdc_ncm 5-1:1.1: bind() failure [ 1334.769424][T16770] usb 5-1: USB disconnect, device number 81 [ 1335.034561][ T7266] usb 4-1: USB disconnect, device number 80 [ 1335.175998][T26380] IPv6: sit4: Disabled Multicast RS [ 1335.449121][T26396] netlink: 'syz.2.21640': attribute type 3 has an invalid length. [ 1335.537749][T26396] netlink: 232 bytes leftover after parsing attributes in process `syz.2.21640'. [ 1335.563378][T26406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21644'. [ 1335.676186][T26410] loop1: detected capacity change from 0 to 1024 [ 1335.741041][T26410] EXT4-fs (loop1): Ignoring removed bh option [ 1335.818345][T26410] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 2: comm syz.1.21645: lblock 2 mapped to illegal pblock 2 (length 1) [ 1335.840949][T26410] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 1335.901688][T26410] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 48: comm syz.1.21645: lblock 0 mapped to illegal pblock 48 (length 1) [ 1335.964678][T26410] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 1335.989557][T26410] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.21645: Failed to acquire dquot type 0 [ 1336.101118][T26410] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 1336.150098][T26410] EXT4-fs error (device loop1): ext4_evict_inode:284: inode #11: comm syz.1.21645: mark_inode_dirty error [ 1336.226448][T26410] EXT4-fs warning (device loop1): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 1336.280672][T26410] EXT4-fs (loop1): 1 orphan inode deleted [ 1336.299984][T26410] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,noblock_validity,bh,nodiscard,nouid32,barrier,,errors=continue. Quota mode: none. [ 1336.322976][ T1483] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 1336.379630][ T1483] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 1336.428432][T26460] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1336.461024][ T1483] EXT4-fs error (device loop1): ext4_release_dquot:6272: comm kworker/u4:3: Failed to release dquot type 0 [ 1336.483800][T26466] xt_CONNSECMARK: invalid mode: 66 [ 1336.509720][T26460] overlayfs: bad mount option "redirect_dir=nofollow\" [ 1336.562219][ T4255] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 1336.619167][ T4255] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 1336.649872][T26469] netlink: 7 bytes leftover after parsing attributes in process `syz.0.21668'. [ 1336.666029][ T4255] EXT4-fs error (device loop1): ext4_release_dquot:6272: comm kworker/u4:4: Failed to release dquot type 0 [ 1336.702485][T26469] netlink: 7 bytes leftover after parsing attributes in process `syz.0.21668'. [ 1336.727257][ T4242] EXT4-fs error (device loop1): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1336.788550][ T4242] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 1336.804854][ T4242] EXT4-fs error (device loop1): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 1337.000190][T26500] netlink: 'syz.2.21675': attribute type 12 has an invalid length. [ 1337.095704][T26500] netlink: 197276 bytes leftover after parsing attributes in process `syz.2.21675'. [ 1337.257244][ T7266] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1337.535127][ T7266] usb 4-1: Using ep0 maxpacket: 16 [ 1337.663869][ T7266] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 1337.674087][ T7266] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1337.702028][ T7266] usb 4-1: config 0 has no interface number 0 [ 1337.909648][ T7266] usb 4-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 1337.929613][ T7266] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.960430][ T7266] usb 4-1: Product: syz [ 1337.973407][ T7266] usb 4-1: Manufacturer: syz [ 1337.996129][ T7266] usb 4-1: SerialNumber: syz [ 1338.024115][ T7266] usb 4-1: config 0 descriptor?? [ 1338.337285][ T7266] usb 4-1: Found UVC 0.00 device syz (046c:14e8) [ 1338.343743][ T7266] usb 4-1: No valid video chain found. [ 1338.358292][T16770] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1338.604389][ T7266] usb 4-1: USB disconnect, device number 81 [ 1338.620348][T16770] usb 5-1: Using ep0 maxpacket: 8 [ 1338.763813][T26640] netlink: 'syz.0.21723': attribute type 6 has an invalid length. [ 1338.800141][T16770] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1338.835556][T16772] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1338.852929][T26646] netlink: 80 bytes leftover after parsing attributes in process `syz.0.21724'. [ 1338.874980][T26646] netlink: 80 bytes leftover after parsing attributes in process `syz.0.21724'. [ 1338.912166][T16770] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1338.935644][T16770] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1338.956329][T16770] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1338.977903][T16770] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1338.999658][T16770] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1339.009682][T16770] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1339.020118][T16770] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1339.030194][T16770] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1339.085388][ T7] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1339.203129][T16770] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1339.212356][T16770] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1339.249727][T16770] usb 5-1: Product: syz [ 1339.253947][T16770] usb 5-1: Manufacturer: syz [ 1339.261019][T16770] usb 5-1: SerialNumber: syz [ 1339.267227][T16772] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1339.284209][T16770] usb 5-1: config 0 descriptor?? [ 1339.310329][T26584] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1339.352759][T16772] usb 2-1: config 114 has an invalid interface number: 127 but max is 0 [ 1339.362383][T16772] usb 2-1: config 114 has no interface number 0 [ 1339.380927][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 1339.392272][T16772] usb 2-1: config 114 interface 127 altsetting 232 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1339.412652][T16770] snd-usb-audio: probe of 5-1:0.0 failed with error -12 [ 1339.433158][T16772] usb 2-1: config 114 interface 127 has no altsetting 0 [ 1339.502675][ T4354] udevd[4354]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1339.566788][ T7] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1339.597848][ T1495] usb 5-1: USB disconnect, device number 82 [ 1339.604043][ T7266] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1339.610012][T16772] usb 2-1: New USB device found, idVendor=2001, idProduct=3a05, bcdDevice=c2.02 [ 1339.628387][T16772] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1339.650000][T16772] usb 2-1: Product: syz [ 1339.654522][T16772] usb 2-1: Manufacturer: syz [ 1339.659147][T16772] usb 2-1: SerialNumber: syz [ 1339.673923][ T7] usb 3-1: config 6 has an invalid interface number: 14 but max is 0 [ 1339.691364][ T7] usb 3-1: config 6 has no interface number 0 [ 1339.698265][ T7] usb 3-1: config 6 interface 14 has no altsetting 0 [ 1339.849957][ T264] block nbd0: Attempted send on invalid socket [ 1339.856401][ T264] blk_update_request: I/O error, dev nbd0, sector 8388608 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1339.876553][ T264] block nbd0: Attempted send on invalid socket [ 1339.878769][ T7] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10ae, bcdDevice=6e.c2 [ 1339.882795][ T264] blk_update_request: I/O error, dev nbd0, sector 8388608 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1339.903735][ T264] Buffer I/O error on dev nbd0p4, logical block 1048560, async page read [ 1339.919210][ T7266] usb 4-1: Using ep0 maxpacket: 8 [ 1339.962768][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1339.979694][ T7] usb 3-1: Product: syz [ 1339.989435][ T7] usb 3-1: Manufacturer: syz [ 1339.996645][ T7] usb 3-1: SerialNumber: syz [ 1340.014401][ T4470] udevd[4470]: inotify_add_watch(7, /dev/nbd0p4, 10) failed: No such file or directory [ 1340.026613][T16772] usb 2-1: Could not find all expected endpoints [ 1340.048641][T16772] usb 2-1: USB disconnect, device number 73 [ 1340.069027][ T7266] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1340.089207][ T7266] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1340.098859][ T7266] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1340.117427][T26715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21736'. [ 1340.131264][T26715] netlink: 312 bytes leftover after parsing attributes in process `syz.0.21736'. [ 1340.392922][ T7266] usb 4-1: string descriptor 0 read error: -22 [ 1340.406498][ T7] usb 3-1: USB disconnect, device number 93 [ 1340.415186][ T7266] usb 4-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 1340.452786][ T7266] usb 4-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 1340.542288][ T7266] usb 4-1: 0:2 : does not exist [ 1340.588126][ T7266] usb-storage 4-1:1.1: USB Mass Storage device detected [ 1340.748647][T26772] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.21750'. [ 1341.026762][T26801] libceph: resolve '0' (ret=-3): failed [ 1341.032956][ T7266] us122l: couldn't allocate write buffer [ 1341.039590][ T7266] snd-usb-us122l: probe of 4-1:1.1 failed with error -22 [ 1341.074017][ T7266] usb 4-1: USB disconnect, device number 82 [ 1341.256993][T26822] netlink: 'syz.1.21762': attribute type 1 has an invalid length. [ 1341.305217][T26822] netlink: 224 bytes leftover after parsing attributes in process `syz.1.21762'. [ 1341.415108][T26834] netlink: 44 bytes leftover after parsing attributes in process `syz.4.21767'. [ 1341.668980][T26856] tmpfs: Bad value for 'mpol' [ 1341.694530][T26857] xt_l2tp: v2 doesn't support IP mode [ 1341.761417][T26860] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1341.924246][T26876] CIFS mount error: No usable UNC path provided in device string! [ 1341.924246][T26876] [ 1341.972361][T26876] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1342.118398][T26891] xt_ecn: cannot match TCP bits for non-tcp packets [ 1342.702798][T26935] __nla_validate_parse: 1 callbacks suppressed [ 1342.702817][T26935] netlink: 16 bytes leftover after parsing attributes in process `syz.3.21801'. [ 1342.766159][T26940] netlink: 28 bytes leftover after parsing attributes in process `syz.4.21803'. [ 1342.786436][T26940] netlink: 28 bytes leftover after parsing attributes in process `syz.4.21803'. [ 1342.820821][T26940] netlink: 80 bytes leftover after parsing attributes in process `syz.4.21803'. [ 1342.985362][T26960] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21810'. [ 1343.222556][ T1495] usb 4-1: new full-speed USB device number 83 using dummy_hcd [ 1343.324289][T26980] loop2: detected capacity change from 0 to 4096 [ 1343.389470][ T7266] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1343.392535][T26988] netlink: 'syz.1.21820': attribute type 1 has an invalid length. [ 1343.420831][T26980] ntfs: (device loop2): is_boot_sector_ntfs(): Invalid end of sector marker. [ 1343.463282][T26980] ntfs: (device loop2): check_mft_mirror(): Incomplete multi sector transfer detected in mft mirror record 10. [ 1343.496914][T26980] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 1343.553504][T26980] ntfs: (device loop2): ntfs_read_locked_inode(): $STANDARD_INFORMATION attribute is missing. [ 1343.618911][T26980] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1343.682429][ T7266] usb 1-1: Using ep0 maxpacket: 8 [ 1343.686367][T26980] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1343.688413][ T1495] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1343.764270][T26980] ntfs: volume version 3.1. [ 1343.782812][ T1495] usb 4-1: not running at top speed; connect to a high speed hub [ 1343.793959][T26980] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 1343.814252][T26980] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x18 as bad. Run chkdsk. [ 1343.852398][T27004] loop1: detected capacity change from 0 to 2048 [ 1343.860199][ T7266] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1343.862476][T26980] ntfs: (device loop2): load_and_init_quota(): Failed to load $Quota. [ 1343.885510][ T7266] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1343.906892][ T1495] usb 4-1: config 1 has too many interfaces: 35, using maximum allowed: 32 [ 1343.913673][T26980] ntfs: (device loop2): load_system_files(): Failed to load $Quota. Will not be able to remount read-write. Run chkdsk. [ 1343.915529][ T1495] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1343.940778][ T7266] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1343.967572][T27004] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1343.981686][ T1495] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 35 [ 1343.993673][ T7266] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1344.014083][ T1495] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1344.028680][ T7266] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1344.060233][T27011] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1344.089115][ T7266] usb 1-1: config 0 descriptor?? [ 1344.110633][T27004] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 1344.140299][T27004] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1344.201420][T27004] Remounting filesystem read-only [ 1344.239496][T27004] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 1344.261865][T27004] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1344.281582][T27004] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 1344.292359][ T1495] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1344.301459][ T1495] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.321092][T27004] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1344.342611][ T1495] usb 4-1: Product: syz [ 1344.353396][ T1495] usb 4-1: Manufacturer: syz [ 1344.368746][T27004] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 1344.378806][T27023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21829'. [ 1344.379480][ T1495] usb 4-1: SerialNumber: syz [ 1344.409235][T27004] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1344.437696][ T7266] usb 1-1: USB disconnect, device number 79 [ 1344.465617][T27004] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 1344.478088][ T1495] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 1344.486629][ T1495] cdc_ncm 4-1:1.0: bind() failure [ 1344.511673][T27004] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1344.569803][T27004] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 1344.590933][T27004] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1344.610973][T27004] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 1344.632084][T27004] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1344.642474][T27004] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 1344.656258][T27004] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1344.671572][T27004] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 1344.687718][T27004] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1344.761495][ T7266] usb 4-1: USB disconnect, device number 83 [ 1344.774812][T27004] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 1344.820616][T27004] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1344.845669][T27004] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 1344.857031][T27004] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1344.876374][T27004] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 1344.887364][T27004] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1344.912135][T27004] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 1344.931273][T27004] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1344.942040][T27004] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 1344.960323][T27004] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1344.971876][T27004] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 1345.000320][T27004] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1345.034032][T27004] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 1345.064940][T27004] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1345.155348][T27065] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21839'. [ 1345.178091][T27065] netlink: 'syz.0.21839': attribute type 1 has an invalid length. [ 1345.219356][T27065] netlink: 92 bytes leftover after parsing attributes in process `syz.0.21839'. [ 1345.477802][T27072] loop1: detected capacity change from 0 to 8192 [ 1345.544725][T16772] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1345.657983][T27072] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 1345.678412][T27072] REISERFS (device loop1): using ordered data mode [ 1345.687196][T27100] xt_socket: unknown flags 0x50 [ 1345.721647][T27072] reiserfs: using flush barriers [ 1345.759631][T27072] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1345.788894][T27072] REISERFS (device loop1): checking transaction log (loop1) [ 1345.812963][T27072] REISERFS (device loop1): Using r5 hash to sort names [ 1345.844816][T27072] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1346.130518][T16772] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1346.139616][T16772] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1346.184201][T16772] usb 5-1: Product: syz [ 1346.188421][T16772] usb 5-1: Manufacturer: syz [ 1346.193036][T16772] usb 5-1: SerialNumber: syz [ 1346.212601][T27135] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1346.220210][T27135] IPv6: NLM_F_CREATE should be set when creating new route [ 1346.227513][T27135] IPv6: NLM_F_CREATE should be set when creating new route [ 1346.281190][T16772] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1346.782013][T27179] bond0: (slave bond_slave_1): Releasing backup interface [ 1346.985894][T16772] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1347.089050][T27199] netlink: 108 bytes leftover after parsing attributes in process `syz.1.21887'. [ 1347.357344][T27224] bond0: (slave bond_slave_1): Releasing backup interface [ 1347.423597][T27228] loop1: detected capacity change from 0 to 1024 [ 1347.437699][T16770] usb 5-1: USB disconnect, device number 83 [ 1347.707157][T27248] netlink: 'syz.3.21905': attribute type 10 has an invalid length. [ 1347.739331][T27248] team0: Device hsr_slave_0 failed to register rx_handler [ 1348.118901][T16772] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1348.126475][T16772] ath9k_htc: Failed to initialize the device [ 1348.155703][T16770] usb 5-1: ath9k_htc: USB layer deinitialized [ 1348.201900][T27280] netlink: 'syz.3.21914': attribute type 1 has an invalid length. [ 1348.961351][T27344] netlink: 16 bytes leftover after parsing attributes in process `syz.2.21936'. [ 1349.178742][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 1349.178758][ T26] audit: type=1107 audit(1050098.690:77): pid=27355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1349.251511][T27329] lo speed is unknown, defaulting to 1000 [ 1349.493119][T27378] sctp: [Deprecated]: syz.4.21949 (pid 27378) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1349.493119][T27378] Use struct sctp_sack_info instead [ 1349.519617][ T7266] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1349.654982][T27392] loop1: detected capacity change from 0 to 512 [ 1349.718841][T27329] lo speed is unknown, defaulting to 1000 [ 1349.796090][T27392] FAT-fs (loop1): error, clusters badly computed (1 != 0) [ 1349.825256][T27392] FAT-fs (loop1): Filesystem has been set read-only [ 1349.947285][ T7266] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 1349.966587][ T7266] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1350.139561][ T7266] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1350.162030][ T7266] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1350.170093][ T7266] usb 4-1: Manufacturer: syz [ 1350.208450][ T7266] usb 4-1: config 0 descriptor?? [ 1350.269549][ T7266] igorplugusb 4-1:0.0: incorrect number of endpoints [ 1350.528915][ T1494] usb 4-1: USB disconnect, device number 84 [ 1350.583981][ T1111] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1350.773043][T27475] netlink: 'syz.4.21973': attribute type 2 has an invalid length. [ 1350.802224][T16770] usb 3-1: new full-speed USB device number 94 using dummy_hcd [ 1350.816130][T27475] netlink: 'syz.4.21973': attribute type 8 has an invalid length. [ 1350.838971][T27475] netlink: 132 bytes leftover after parsing attributes in process `syz.4.21973'. [ 1351.016421][ T1111] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1351.035765][ T1111] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1351.046430][ T1111] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1351.056689][ T1111] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1351.090738][ T1111] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1351.132447][ T1111] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1351.156628][ T1111] usb 2-1: config 0 descriptor?? [ 1351.198105][T16770] usb 3-1: config 0 has an invalid interface number: 11 but max is 0 [ 1351.206266][T16770] usb 3-1: config 0 has no interface number 0 [ 1351.251228][T16770] usb 3-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 1351.304553][T16770] usb 3-1: config 0 interface 11 altsetting 253 endpoint 0x87 has invalid maxpacket 65535, setting to 64 [ 1351.335925][T16770] usb 3-1: config 0 interface 11 has no altsetting 0 [ 1351.358809][T16770] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1351.411805][T16770] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1351.433518][T16770] usb 3-1: config 0 descriptor?? [ 1351.454604][T27461] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1351.461891][T27461] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1351.470101][ T1111] hdpvr 2-1:0.0: firmware version 0xd dated ­";W|۱adTUK> }1vN`Y# [ 1351.520529][T16770] keyspan 3-1:0.11: Keyspan 2 port adapter converter detected [ 1351.576215][T27517] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1351.595143][T27517] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1351.598357][T16770] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 81 [ 1351.603546][T27517] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 1351.643078][T16770] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 82 [ 1351.680667][T27517] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1351.700287][T16770] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 1 [ 1351.712087][ T1111] hdpvr 2-1:0.0: device init failed [ 1351.717393][ T1111] hdpvr: probe of 2-1:0.0 failed with error -12 [ 1351.742230][T16770] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 2 [ 1351.745955][T27517] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1351.789969][T16770] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 85 [ 1351.805784][T16770] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 5 [ 1351.815474][ T1111] usb 2-1: USB disconnect, device number 74 [ 1351.883889][T16770] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1351.894655][T27534] openvswitch: netlink: Actions may not be safe on all matching packets [ 1351.926522][T16770] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 83 [ 1351.963457][T16770] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 84 [ 1351.982691][T16770] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 3 [ 1352.001623][T16770] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 4 [ 1352.020384][T16770] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 86 [ 1352.059661][T16770] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 6 [ 1352.087895][T27543] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1352.107660][T16770] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1352.157742][T16770] usb 3-1: USB disconnect, device number 94 [ 1352.221884][T16770] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1352.276808][T16770] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1352.320552][T16770] keyspan 3-1:0.11: device disconnected [ 1352.502740][T27590] ip6t_srh: unknown srh invflags 4000 [ 1352.632131][T27598] netlink: 'syz.3.22004': attribute type 6 has an invalid length. [ 1352.883828][T27618] loop2: detected capacity change from 0 to 64 [ 1353.016084][T27622] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1353.100071][T27618] Trying to free block not in datazone [ 1353.131085][T27628] netlink: 132 bytes leftover after parsing attributes in process `syz.0.22015'. [ 1353.186380][T27618] Trying to free block not in datazone [ 1353.228993][T16770] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1353.485562][T16770] usb 2-1: Using ep0 maxpacket: 8 [ 1353.614010][T16770] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1353.632096][T16770] usb 2-1: config 179 has no interface number 0 [ 1353.681028][T16770] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1353.698078][T16770] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1353.741509][T27667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22029'. [ 1353.761456][T16770] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1353.827587][T16770] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1353.870221][T16770] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1353.924002][T16770] usb 2-1: config 179 interface 65 has no altsetting 0 [ 1353.945167][T16770] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1353.973309][T16770] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1354.100258][T16770] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input98 [ 1354.384305][T16770] usb 2-1: USB disconnect, device number 75 [ 1354.444066][T16770] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1354.678563][T27735] program syz.3.22048 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1354.921930][T27748] netlink: 'syz.4.22052': attribute type 1 has an invalid length. [ 1354.936383][T27749] (unnamed net_device) (uninitialized): ARP validating cannot be used with MII monitoring [ 1355.729916][T27804] netlink: 68 bytes leftover after parsing attributes in process `syz.2.22075'. [ 1355.771863][T27804] netlink: 96 bytes leftover after parsing attributes in process `syz.2.22075'. [ 1355.804292][T27804] tc_dump_action: action bad kind [ 1356.079211][T27822] [U]  [ 1356.416406][ T1494] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 1356.547726][T27858] netlink: 244 bytes leftover after parsing attributes in process `syz.3.22092'. [ 1356.857050][T27884] program syz.2.22100 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1356.881310][ T1494] usb 2-1: config index 0 descriptor too short (expected 2075, got 27) [ 1356.890049][T27884] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1356.910702][ T1494] usb 2-1: config 0 has an invalid interface number: 200 but max is 0 [ 1356.928444][ T1494] usb 2-1: config 0 has no interface number 0 [ 1356.960155][ T1494] usb 2-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid maxpacket 12408, setting to 64 [ 1356.983316][T27889] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1357.013326][ T1494] usb 2-1: config 0 interface 200 has no altsetting 0 [ 1357.208363][ T1111] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1357.230056][ T1494] usb 2-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 1357.259825][ T1494] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.294618][ T1494] usb 2-1: Product: syz [ 1357.298864][ T1494] usb 2-1: Manufacturer: syz [ 1357.345178][ T1494] usb 2-1: SerialNumber: syz [ 1357.362093][ T1494] usb 2-1: config 0 descriptor?? [ 1357.379996][T27911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22108'. [ 1357.434336][T27915] netlink: 'syz.0.22110': attribute type 1 has an invalid length. [ 1357.473063][T27915] netlink: 224 bytes leftover after parsing attributes in process `syz.0.22110'. [ 1357.698286][ T1111] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1357.775660][ T1494] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.200/input/input99 [ 1357.804663][ T1111] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1357.833818][ T1111] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1357.843919][ T1494] usb 2-1: USB disconnect, device number 76 [ 1358.072226][ T1111] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1358.101776][ T1111] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1358.120982][ T1111] usb 4-1: Product: syz [ 1358.131756][ T1111] usb 4-1: Manufacturer: syz [ 1358.140306][T27961] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 1358.152829][ T1111] usb 4-1: SerialNumber: syz [ 1358.218642][ T1111] usb 4-1: selecting invalid altsetting 1 [ 1358.249563][ T1111] usb 4-1: unit 6 not found! [ 1358.445495][T27986] loop2: detected capacity change from 0 to 128 [ 1358.522411][T27986] FAT-fs (loop2): FAT read failed (blocknr 2080) [ 1358.681245][ T1111] usb 4-1: cannot get ctl value: req = 0x82, wValue = 0x100, wIndex = 0x200, type = 3 [ 1358.704019][ T1111] usb 4-1: 2:0: cannot get min/max values for control 1 (id 2) [ 1358.757806][ T1111] usb 4-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x200, type = 3 [ 1358.773462][T28005] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 1358.833151][T28005] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 1358.876917][T28017] netlink: 'syz.1.22137': attribute type 1 has an invalid length. [ 1358.885792][ T1111] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 1358.938913][ T1111] usb 4-1: USB disconnect, device number 85 [ 1359.118920][T28033] rdma_rxe: ignoring netdev event = 9 for bond0 [ 1359.257184][T28044] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22145'. [ 1359.268435][ T4470] udevd[4470]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1359.365558][ T1494] usb 3-1: new full-speed USB device number 95 using dummy_hcd [ 1359.810194][ T1494] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 1359.824571][ T1494] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1359.854818][ T1494] usb 3-1: config 0 has no interface number 0 [ 1359.932239][ T1111] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1360.071140][ T1494] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1360.086470][ T1494] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.102907][ T1494] usb 3-1: Product: syz [ 1360.103287][T16770] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1360.115539][ T1494] usb 3-1: Manufacturer: syz [ 1360.131085][ T1494] usb 3-1: SerialNumber: syz [ 1360.160334][ T1494] usb 3-1: config 0 descriptor?? [ 1360.221503][ T1494] hub 3-1:0.31: bad descriptor, ignoring hub [ 1360.231295][ T1494] hub: probe of 3-1:0.31 failed with error -5 [ 1360.253323][ T1494] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 1360.259829][ T1494] uvcvideo 3-1:0.31: Entity type for entity Output 6 was not initialized! [ 1360.269229][ T1111] usb 1-1: Using ep0 maxpacket: 8 [ 1360.281197][T28112] netlink: 'syz.3.22168': attribute type 29 has an invalid length. [ 1360.294985][T28112] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1360.307037][T28112] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1360.315816][T28112] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1360.324595][T28112] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1360.333779][ T1494] usb 3-1: Failed to create links for entity 6 [ 1360.340614][ T1494] usb 3-1: Failed to register entities (-22). [ 1360.430572][ T1111] usb 1-1: config 0 has an invalid interface number: 4 but max is 0 [ 1360.460381][ T1111] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1360.485166][ T1111] usb 1-1: config 0 has no interface number 0 [ 1360.496483][ T1111] usb 1-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 1360.505770][ T1111] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1360.510118][T16770] usb 5-1: config 220 has an invalid interface number: 142 but max is 0 [ 1360.521238][ T1111] usb 1-1: config 0 descriptor?? [ 1360.532782][T16770] usb 5-1: config 220 has no interface number 0 [ 1360.539353][T16770] usb 5-1: config 220 interface 142 has no altsetting 0 [ 1360.574643][ T1111] hub 1-1:0.4: bad descriptor, ignoring hub [ 1360.580607][ T1111] hub: probe of 1-1:0.4 failed with error -5 [ 1360.602764][ T1111] sierra 1-1:0.4: Sierra USB modem converter detected [ 1360.642857][ T26] audit: type=1326 audit(1050109.410:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28130 comm="syz.3.22173" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f13dd5f4019 code=0x0 [ 1360.669820][ T1494] usb 3-1: USB disconnect, device number 95 [ 1360.725341][T16770] usb 5-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=ab.0e [ 1360.739561][T16770] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.748667][T16770] usb 5-1: Product: syz [ 1360.757669][T16770] usb 5-1: Manufacturer: syz [ 1360.768478][T16770] usb 5-1: SerialNumber: syz [ 1360.810904][ T1111] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 1360.883017][ T1111] usb 1-1: USB disconnect, device number 80 [ 1360.900039][ T1111] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1360.912291][T28151] netlink: 36 bytes leftover after parsing attributes in process `syz.3.22176'. [ 1360.933233][ T1111] sierra 1-1:0.4: device disconnected [ 1360.939407][T28151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22176'. [ 1361.092870][T28169] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1361.131052][T16770] ttusb_dec_send_command: command bulk message failed: error -22 [ 1361.158362][T16770] ttusb-dec: probe of 5-1:220.142 failed with error -22 [ 1361.188804][T28177] netlink: 'syz.3.22182': attribute type 21 has an invalid length. [ 1361.208438][T28177] IPv6: NLM_F_CREATE should be specified when creating new route [ 1361.225156][T16770] usb 5-1: USB disconnect, device number 84 [ 1361.246087][T28181] netlink: 132 bytes leftover after parsing attributes in process `syz.1.22183'. [ 1361.542271][T28207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22191'. [ 1361.573362][T28207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22191'. [ 1361.913023][T28236] loop2: detected capacity change from 0 to 512 [ 1362.033872][T28236] EXT4-fs (loop2): Ignoring removed orlov option [ 1362.170250][T28236] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,orlov,,errors=continue. Quota mode: writeback. [ 1362.350290][T28236] EXT4-fs error (device loop2): ext4_get_first_dir_block:3597: inode #12: comm syz.2.22201: Directory block failed checksum [ 1362.590706][T28289] ip_tables: iptables: counters copy to user failed while replacing table [ 1362.870856][T28314] netlink: 'syz.4.22230': attribute type 3 has an invalid length. [ 1363.040973][T28324] netlink: 12 bytes leftover after parsing attributes in process `syz.3.22234'. [ 1363.179259][T28334] nft_compat: unsupported protocol 0 [ 1363.983856][ T1111] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1364.272461][ T1111] usb 5-1: Using ep0 maxpacket: 8 [ 1364.293974][ T1494] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1364.354146][T28433] loop2: detected capacity change from 0 to 128 [ 1364.383252][T28436] netlink: 24 bytes leftover after parsing attributes in process `syz.1.22273'. [ 1364.422188][ T1111] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1364.445257][ T1111] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1364.473346][ T1111] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1364.519964][ T1111] usb 5-1: config 0 descriptor?? [ 1364.563559][ T1111] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1364.743111][ T1494] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1364.763802][ T1494] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1364.785566][T16770] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1364.810735][ T1494] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1364.842565][ T1494] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1364.858211][ T1494] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1364.901091][ T1494] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1364.936034][ T1494] usb 4-1: config 0 descriptor?? [ 1365.020769][ T1111] gspca_vc032x: reg_w err -71 [ 1365.025715][ T1111] vc032x: probe of 5-1:0.0 failed with error -71 [ 1365.059826][ T1111] usb 5-1: USB disconnect, device number 85 [ 1365.178287][T16770] usb 3-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 1365.198378][T16770] usb 3-1: config 220 has an invalid interface number: 218 but max is 183 [ 1365.213380][ T1494] hdpvr 4-1:0.0: firmware version 0x0 dated [ 1365.217854][T16770] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 1365.219433][ T1494] hdpvr 4-1:0.0: untested firmware, the driver might not work. [ 1365.239781][T16770] usb 3-1: config 220 has no interface number 0 [ 1365.261415][T16770] usb 3-1: too many endpoints for config 220 interface 218 altsetting 195: 181, using maximum allowed: 30 [ 1365.296393][T16770] usb 3-1: config 220 interface 218 altsetting 195 has 0 endpoint descriptors, different from the interface descriptor's value: 181 [ 1365.332270][T16770] usb 3-1: config 220 interface 218 has no altsetting 0 [ 1365.355289][T16770] usb 3-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 1365.376889][T16770] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1365.446297][T28511] netlink: 36 bytes leftover after parsing attributes in process `syz.0.22296'. [ 1365.464427][T28511] netlink: 84 bytes leftover after parsing attributes in process `syz.0.22296'. [ 1365.491200][ T1494] hdpvr 4-1:0.0: device init failed [ 1365.496584][ T1494] hdpvr: probe of 4-1:0.0 failed with error -12 [ 1365.534221][ T1494] usb 4-1: USB disconnect, device number 86 [ 1365.699365][T16770] usb 3-1: string descriptor 0 read error: -71 [ 1365.712288][T16770] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 1365.749845][T16770] gspca_sn9c2028: read1 error -71 [ 1365.769308][T16770] gspca_sn9c2028: read1 error -71 [ 1365.790599][T16770] gspca_sn9c2028: read1 error -71 [ 1365.795764][T16770] sn9c2028: probe of 3-1:220.218 failed with error -71 [ 1365.846250][T16770] usb 3-1: USB disconnect, device number 96 [ 1365.959631][T28556] misc userio: No port type given on /dev/userio [ 1366.613577][T28605] dlm: no local IP address has been set [ 1366.643044][T28605] dlm: cannot start dlm midcomms -107 [ 1368.111356][T28720] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.22368'. [ 1368.186856][T28720] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1368.757353][T28759] loop2: detected capacity change from 0 to 64 [ 1368.764222][T28691] loop1: detected capacity change from 0 to 32768 [ 1369.147539][ T1494] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1369.252747][T28790] xt_l2tp: unknown flags: 17 [ 1369.401174][T28803] netlink: 134744 bytes leftover after parsing attributes in process `syz.2.22398'. [ 1369.446761][ T1494] usb 4-1: Using ep0 maxpacket: 16 [ 1369.596700][ T1494] usb 4-1: config 0 has no interfaces? [ 1369.767619][ T1494] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1369.791039][ T1494] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1369.853101][ T1494] usb 4-1: Product: syz [ 1369.857330][ T1494] usb 4-1: Manufacturer: syz [ 1369.916896][ T1494] usb 4-1: SerialNumber: syz [ 1369.933293][ T1494] r8152-cfgselector 4-1: config 0 descriptor?? [ 1369.970529][T28832] netlink: 72 bytes leftover after parsing attributes in process `syz.0.22408'. [ 1370.259764][ T1494] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 1370.483682][ T1494] usb 4-1: USB disconnect, device number 87 [ 1370.812151][T28900] netlink: 'syz.1.22429': attribute type 3 has an invalid length. [ 1371.345006][T28938] loop1: detected capacity change from 0 to 4096 [ 1371.450513][T28956] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (8) [ 1371.508383][T28938] ntfs: volume version 3.1. [ 1371.666143][T28966] overlayfs: conflicting options: metacopy=on,redirect_dir=off [ 1371.922709][T28984] openvswitch: netlink: Actions may not be safe on all matching packets [ 1371.978966][T28985] mip6: mip6_rthdr_init_state: spi is not 0: 655360 [ 1372.281938][T29008] usb usb7: usbfs: interface 0 claimed by hub while 'syz.0.22469' sets config #-1 [ 1372.563712][T29031] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.22478'. [ 1372.607175][T29031] openvswitch: netlink: Key 29 has unexpected len 3064 expected 0 [ 1373.399770][T29022] loop1: detected capacity change from 0 to 32768 [ 1373.523189][T29093] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1373.538862][T29022] JBD2: Ignoring recovery information on journal [ 1373.684390][T29022] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1373.832220][T29022] (syz.1.22474,29022,0):ocfs2_find_entry:1075 ERROR: status = -117 [ 1373.863238][T29115] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1373.939176][T29022] (syz.1.22474,29022,1):ocfs2_find_entry:1075 ERROR: status = -117 [ 1373.963545][T29022] (syz.1.22474,29022,1):ocfs2_symlink:2065 ERROR: status = -117 [ 1374.228870][ T4242] ocfs2: Unmounting device (7,1) on (node local) [ 1374.303320][T29145] netlink: 48 bytes leftover after parsing attributes in process `syz.4.22520'. [ 1374.651687][T29168] netlink: 12 bytes leftover after parsing attributes in process `syz.4.22527'. [ 1375.070079][ T8095] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1375.326545][ T8095] usb 2-1: Using ep0 maxpacket: 16 [ 1375.454867][ T8095] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1375.485278][ T8095] usb 2-1: config 1 has an invalid descriptor of length 15, skipping remainder of the config [ 1375.529800][T29231] netlink: 'syz.0.22550': attribute type 8 has an invalid length. [ 1375.539530][ T8095] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1375.579126][ T8095] usb 2-1: config 1 has no interface number 1 [ 1375.592108][ T8095] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1375.616093][ T8095] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x89 has an invalid bInterval 201, changing to 7 [ 1375.807805][ T8095] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1375.833643][ T8095] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1375.888486][ T8095] usb 2-1: Product: syz [ 1375.910009][ T8095] usb 2-1: Manufacturer: syz [ 1375.921413][ T8095] usb 2-1: SerialNumber: syz [ 1376.285122][T29270] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1376.292473][ T8095] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 1376.360974][ T8095] usb 2-1: found format II with max.bitrate = 0, frame size=0 [ 1376.417141][ T8095] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1376.532873][ T8095] usb 2-1: USB disconnect, device number 77 [ 1377.208552][ T1111] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1377.515184][ T1111] usb 4-1: Using ep0 maxpacket: 32 [ 1377.662526][ T1111] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1377.710441][ T1111] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1377.913823][ T1111] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=21.11 [ 1377.934940][ T1111] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1377.943060][ T1111] usb 4-1: Product: syz [ 1377.969184][ T1111] usb 4-1: Manufacturer: syz [ 1377.973881][ T1111] usb 4-1: SerialNumber: syz [ 1378.018885][ T1111] usb 4-1: config 0 descriptor?? [ 1378.207135][T29474] device bond4 entered promiscuous mode [ 1378.214201][T29474] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1378.346111][ T1111] usb 4-1: USB disconnect, device number 88 [ 1378.566404][T29512] loop1: detected capacity change from 0 to 8192 [ 1378.717589][T29512] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 1378.760365][T29512] REISERFS (device loop1): using ordered data mode [ 1378.796845][T29512] reiserfs: using flush barriers [ 1378.811691][ T1495] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1378.828728][T29548] netlink: 192 bytes leftover after parsing attributes in process `syz.0.22619'. [ 1378.854380][T29512] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1378.902724][T29548] netlink: 192 bytes leftover after parsing attributes in process `syz.0.22619'. [ 1378.926770][T29512] REISERFS (device loop1): checking transaction log (loop1) [ 1378.943609][T29548] netlink: 192 bytes leftover after parsing attributes in process `syz.0.22619'. [ 1378.958931][T29512] REISERFS (device loop1): Using r5 hash to sort names [ 1378.970777][T29548] netlink: 192 bytes leftover after parsing attributes in process `syz.0.22619'. [ 1378.987655][T29512] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1378.999670][T29548] netlink: 192 bytes leftover after parsing attributes in process `syz.0.22619'. [ 1379.065462][T29548] netlink: 192 bytes leftover after parsing attributes in process `syz.0.22619'. [ 1379.089675][ T1495] usb 3-1: Using ep0 maxpacket: 32 [ 1379.143032][T29548] netlink: 192 bytes leftover after parsing attributes in process `syz.0.22619'. [ 1379.197891][T29548] netlink: 192 bytes leftover after parsing attributes in process `syz.0.22619'. [ 1379.239881][ T1495] usb 3-1: config 9 has an invalid interface number: 79 but max is 1 [ 1379.248124][ T1495] usb 3-1: config 9 has no interface number 1 [ 1379.301199][ T1495] usb 3-1: config 9 interface 0 has no altsetting 0 [ 1379.533684][ T1495] usb 3-1: New USB device found, idVendor=1199, idProduct=9001, bcdDevice=bb.c9 [ 1379.557901][ T1495] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1379.592056][ T1495] usb 3-1: Product: syz [ 1379.612375][ T1495] usb 3-1: Manufacturer: syz [ 1379.645403][ T1495] usb 3-1: SerialNumber: syz [ 1379.983453][T29613] loop1: detected capacity change from 0 to 2048 [ 1380.069367][ T1495] hub 3-1:9.0: Invalid hub with more than one config or interface [ 1380.083331][ T1495] hub: probe of 3-1:9.0 failed with error -22 [ 1380.102391][T29613] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1380.169816][ T1495] hub 3-1:9.79: Invalid hub with more than one config or interface [ 1380.177782][ T1495] hub: probe of 3-1:9.79 failed with error -22 [ 1380.211474][T29613] Invalid option length (0) for dns_resolver key [ 1380.234307][ T1495] usb 3-1: unknown number of interfaces: 2 [ 1380.286919][ T1495] usb 3-1: USB disconnect, device number 97 [ 1381.001064][T29699] netlink: 'syz.1.22662': attribute type 32 has an invalid length. [ 1381.050048][T29666] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 1381.089380][T29666] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 1381.164404][T29717] Cannot find del_set index 4 as target [ 1381.439703][T29737] __nla_validate_parse: 19 callbacks suppressed [ 1381.439723][T29737] netlink: 32 bytes leftover after parsing attributes in process `syz.1.22672'. [ 1381.603116][T29743] netlink: 224 bytes leftover after parsing attributes in process `syz.0.22674'. [ 1382.323076][T29786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22690'. [ 1382.586520][T29786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22690'. [ 1383.108269][T29873] loop1: detected capacity change from 0 to 2048 [ 1383.256802][T29882] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1383.317815][T29873] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12 [ 1383.402918][T29873] Remounting filesystem read-only [ 1383.756383][T29901] loop1: detected capacity change from 0 to 16 [ 1383.845480][T29901] erofs: (device loop1): mounted with root inode @ nid 36. [ 1383.892724][T29901] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1384.008148][T29901] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 1384.052273][T29923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1384.133357][T29929] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.22721'. [ 1384.188043][T29932] loop2: detected capacity change from 0 to 24 [ 1384.222197][T29932] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1384.266894][T29932] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1384.447795][T29948] netlink: 128 bytes leftover after parsing attributes in process `syz.0.22727'. [ 1384.521091][T29948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22727'. [ 1384.550994][T29953] netlink: 16 bytes leftover after parsing attributes in process `syz.4.22729'. [ 1384.570134][T29955] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.22731'. [ 1384.615769][T29953] netlink: 132 bytes leftover after parsing attributes in process `syz.4.22729'. [ 1384.669750][T29955] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1384.691910][T29955] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1385.015327][T29980] dlm: no locking on control device [ 1385.691647][T30031] netlink: 'syz.1.22757': attribute type 1 has an invalid length. [ 1385.731263][T30033] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard1: link becomes ready [ 1385.851886][T30043] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1385.897308][T30045] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1386.229090][T30069] netlink: 'syz.4.22770': attribute type 10 has an invalid length. [ 1386.254374][T30072] comedi comedi4: bad chanlist[0]=0x000000ff chan=255 range length=2 [ 1386.283151][T30069] device hsr0 entered promiscuous mode [ 1386.327789][T30069] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1386.394378][T30069] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1386.417893][T30084] netlink: 'syz.0.22775': attribute type 1 has an invalid length. [ 1386.430275][T30069] bond0: (slave hsr0): Error -95 calling set_mac_address [ 1386.911038][T30104] loop1: detected capacity change from 0 to 4096 [ 1386.925905][ T1495] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1387.019085][T30104] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1387.364393][ T1495] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 1387.372646][ T1495] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1387.412092][T30135] netlink: 'syz.1.22792': attribute type 1 has an invalid length. [ 1387.443774][ T1495] usb 1-1: config 0 has no interface number 0 [ 1387.470926][ T1495] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1387.492833][T30135] __nla_validate_parse: 3 callbacks suppressed [ 1387.492850][T30135] netlink: 244 bytes leftover after parsing attributes in process `syz.1.22792'. [ 1387.530267][ T1495] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1387.567187][ T1495] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1387.768247][T30145] device veth1_vlan left promiscuous mode [ 1387.846255][ T1495] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1387.865417][ T1495] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1387.918775][ T1495] usb 1-1: Product: syz [ 1387.937753][ T1495] usb 1-1: Manufacturer: syz [ 1387.970159][ T1495] usb 1-1: SerialNumber: syz [ 1387.985457][ T1495] usb 1-1: config 0 descriptor?? [ 1388.202724][T30184] loop2: detected capacity change from 0 to 256 [ 1388.273768][T30184] exfat: Deprecated parameter 'namecase' [ 1388.309279][T30184] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0x9eb8f943, utbl_chksum : 0xe619d30d) [ 1388.421427][T30197] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1388.527287][ T8095] usb 1-1: USB disconnect, device number 81 [ 1388.693517][T30219] cgroup: No subsys list or none specified [ 1388.882668][T30232] [ 1388.885043][T30232] ====================================================== [ 1388.892091][T30232] WARNING: possible circular locking dependency detected [ 1388.899201][T30232] syzkaller #0 Not tainted [ 1388.903636][T30232] ------------------------------------------------------ [ 1388.910708][T30232] syz.1.22815/30232 is trying to acquire lock: [ 1388.916880][T30232] ffff8880233f9028 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 1388.928047][T30232] [ 1388.928047][T30232] but task is already holding lock: [ 1388.935436][T30232] ffffffff8d6d5ea8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1ae/0x560 [ 1388.945197][T30232] [ 1388.945197][T30232] which lock already depends on the new lock. [ 1388.945197][T30232] [ 1388.955662][T30232] [ 1388.955662][T30232] the existing dependency chain (in reverse order) is: [ 1388.964860][T30232] [ 1388.964860][T30232] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 1388.972918][T30232] __mutex_lock_common+0x1e5/0x2400 [ 1388.978766][T30232] mutex_lock_nested+0x17/0x20 [ 1388.984080][T30232] rfkill_register+0x2f/0x970 [ 1388.989344][T30232] hci_register_dev+0x459/0x980 [ 1388.995182][T30232] vhci_create_device+0x32e/0x5c0 [ 1389.000850][T30232] vhci_write+0x389/0x440 [ 1389.005732][T30232] vfs_write+0x748/0xd70 [ 1389.010519][T30232] ksys_write+0x153/0x260 [ 1389.015399][T30232] do_syscall_64+0x4c/0xa0 [ 1389.020368][T30232] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1389.026811][T30232] [ 1389.026811][T30232] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 1389.034696][T30232] __mutex_lock_common+0x1e5/0x2400 [ 1389.040451][T30232] mutex_lock_nested+0x17/0x20 [ 1389.045778][T30232] vhci_send_frame+0x88/0x100 [ 1389.051018][T30232] hci_send_frame+0x1a9/0x2e0 [ 1389.056278][T30232] hci_tx_work+0x9b5/0x16d0 [ 1389.061325][T30232] process_one_work+0x867/0xff0 [ 1389.066801][T30232] worker_thread+0xad7/0x12a0 [ 1389.072035][T30232] kthread+0x42e/0x520 [ 1389.076655][T30232] ret_from_fork+0x1f/0x30 [ 1389.081667][T30232] [ 1389.081667][T30232] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 1389.090942][T30232] __flush_work+0x116/0x210 [ 1389.095994][T30232] hci_dev_do_open+0xc77/0x12a0 [ 1389.101399][T30232] hci_power_on+0x1a7/0x5f0 [ 1389.106454][T30232] process_one_work+0x867/0xff0 [ 1389.111859][T30232] worker_thread+0xad7/0x12a0 [ 1389.117094][T30232] kthread+0x42e/0x520 [ 1389.121719][T30232] ret_from_fork+0x1f/0x30 [ 1389.126692][T30232] [ 1389.126692][T30232] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 1389.134378][T30232] __mutex_lock_common+0x1e5/0x2400 [ 1389.140132][T30232] mutex_lock_nested+0x17/0x20 [ 1389.145446][T30232] bg_scan_update+0x44/0x3b0 [ 1389.150714][T30232] process_one_work+0x867/0xff0 [ 1389.156111][T30232] worker_thread+0xad7/0x12a0 [ 1389.161336][T30232] kthread+0x42e/0x520 [ 1389.165946][T30232] ret_from_fork+0x1f/0x30 [ 1389.170922][T30232] [ 1389.170922][T30232] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 1389.180766][T30232] __lock_acquire+0x2c66/0x7b50 [ 1389.186207][T30232] lock_acquire+0x19e/0x400 [ 1389.191279][T30232] __flush_work+0x116/0x210 [ 1389.196341][T30232] __cancel_work_timer+0x3f4/0x560 [ 1389.202016][T30232] hci_request_cancel_all+0xcc/0x300 [ 1389.207863][T30232] hci_dev_do_close+0x4e/0x1020 [ 1389.213284][T30232] hci_rfkill_set_block+0x101/0x180 [ 1389.219039][T30232] rfkill_set_block+0x1c1/0x3c0 [ 1389.224447][T30232] rfkill_fop_write+0x453/0x560 [ 1389.229859][T30232] vfs_write+0x304/0xd70 [ 1389.234695][T30232] ksys_write+0x153/0x260 [ 1389.239586][T30232] do_syscall_64+0x4c/0xa0 [ 1389.244564][T30232] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1389.251005][T30232] [ 1389.251005][T30232] other info that might help us debug this: [ 1389.251005][T30232] [ 1389.261251][T30232] Chain exists of: [ 1389.261251][T30232] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 1389.261251][T30232] [ 1389.277012][T30232] Possible unsafe locking scenario: [ 1389.277012][T30232] [ 1389.284483][T30232] CPU0 CPU1 [ 1389.289876][T30232] ---- ---- [ 1389.295273][T30232] lock(rfkill_global_mutex); [ 1389.300076][T30232] lock(&data->open_mutex); [ 1389.307217][T30232] lock(rfkill_global_mutex); [ 1389.314541][T30232] lock((work_completion)(&hdev->bg_scan_update)); [ 1389.321211][T30232] [ 1389.321211][T30232] *** DEADLOCK *** [ 1389.321211][T30232] [ 1389.329380][T30232] 1 lock held by syz.1.22815/30232: [ 1389.334640][T30232] #0: ffffffff8d6d5ea8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1ae/0x560 [ 1389.344774][T30232] [ 1389.344774][T30232] stack backtrace: [ 1389.350699][T30232] CPU: 1 PID: 30232 Comm: syz.1.22815 Not tainted syzkaller #0 [ 1389.358271][T30232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1389.368384][T30232] Call Trace: [ 1389.371693][T30232] [ 1389.374639][T30232] dump_stack_lvl+0x188/0x250 [ 1389.379347][T30232] ? load_image+0x410/0x410 [ 1389.383880][T30232] ? show_regs_print_info+0x20/0x20 [ 1389.389142][T30232] ? print_circular_bug+0x12b/0x1a0 [ 1389.394379][T30232] check_noncircular+0x296/0x330 [ 1389.399380][T30232] ? add_chain_block+0x9b0/0x9b0 [ 1389.404346][T30232] ? lockdep_lock+0xf1/0x1f0 [ 1389.408968][T30232] ? __lock_acquire+0x1305/0x7b50 [ 1389.414024][T30232] ? mark_lock+0x94/0x320 [ 1389.418374][T30232] ? _find_first_zero_bit+0xd1/0xf0 [ 1389.423606][T30232] __lock_acquire+0x2c66/0x7b50 [ 1389.428527][T30232] ? verify_lock_unused+0x140/0x140 [ 1389.433759][T30232] ? verify_lock_unused+0x140/0x140 [ 1389.439007][T30232] lock_acquire+0x19e/0x400 [ 1389.443556][T30232] ? __flush_work+0xfa/0x210 [ 1389.448173][T30232] ? __lock_acquire+0x7b50/0x7b50 [ 1389.453248][T30232] ? read_lock_is_recursive+0x10/0x10 [ 1389.458658][T30232] ? start_flush_work+0x784/0x830 [ 1389.463713][T30232] __flush_work+0x116/0x210 [ 1389.468257][T30232] ? __flush_work+0xfa/0x210 [ 1389.472902][T30232] ? flush_work+0x20/0x20 [ 1389.477263][T30232] ? try_to_grab_pending+0xfb/0x820 [ 1389.482497][T30232] ? mark_lock+0x94/0x320 [ 1389.486853][T30232] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1389.493371][T30232] ? lock_chain_count+0x20/0x20 [ 1389.498255][T30232] ? mark_lock+0x94/0x320 [ 1389.502618][T30232] ? __cancel_work_timer+0x36a/0x560 [ 1389.507945][T30232] __cancel_work_timer+0x3f4/0x560 [ 1389.513094][T30232] ? cancel_work_sync+0x20/0x20 [ 1389.517985][T30232] ? __cancel_work+0x1f9/0x2e0 [ 1389.522775][T30232] ? lockdep_hardirqs_on+0x94/0x140 [ 1389.528004][T30232] ? __cancel_work+0x27b/0x2e0 [ 1389.532795][T30232] ? cancel_work+0x20/0x20 [ 1389.537242][T30232] hci_request_cancel_all+0xcc/0x300 [ 1389.542563][T30232] hci_dev_do_close+0x4e/0x1020 [ 1389.547449][T30232] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1389.553371][T30232] ? _raw_spin_unlock+0x40/0x40 [ 1389.558254][T30232] hci_rfkill_set_block+0x101/0x180 [ 1389.563476][T30232] ? rcu_lock_release+0x20/0x20 [ 1389.568350][T30232] rfkill_set_block+0x1c1/0x3c0 [ 1389.573234][T30232] rfkill_fop_write+0x453/0x560 [ 1389.578123][T30232] ? rfkill_fop_read+0x560/0x560 [ 1389.583085][T30232] ? common_file_perm+0x100/0x1c0 [ 1389.588213][T30232] ? fsnotify_perm+0x5d/0x560 [ 1389.592959][T30232] ? security_file_permission+0x75/0xa0 [ 1389.598535][T30232] ? rfkill_fop_read+0x560/0x560 [ 1389.603688][T30232] vfs_write+0x304/0xd70 [ 1389.607958][T30232] ? file_end_write+0x250/0x250 [ 1389.612848][T30232] ? __fget_files+0x402/0x470 [ 1389.617584][T30232] ? __fdget_pos+0x1e2/0x370 [ 1389.622210][T30232] ? ksys_write+0x70/0x260 [ 1389.626668][T30232] ksys_write+0x153/0x260 [ 1389.631067][T30232] ? __ia32_sys_read+0x80/0x80 [ 1389.635853][T30232] ? lockdep_hardirqs_on+0x94/0x140 [ 1389.641074][T30232] do_syscall_64+0x4c/0xa0 [ 1389.645510][T30232] ? clear_bhb_loop+0x30/0x80 [ 1389.650212][T30232] ? clear_bhb_loop+0x30/0x80 [ 1389.654917][T30232] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1389.660835][T30232] RIP: 0033:0x7f8633146019 [ 1389.665284][T30232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1389.684912][T30232] RSP: 002b:00007f863139e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1389.693369][T30232] RAX: ffffffffffffffda RBX: 00007f86333cdfa0 RCX: 00007f8633146019 [ 1389.701389][T30232] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 1389.709378][T30232] RBP: 00007f86331dd00c R08: 0000000000000000 R09: 0000000000000000 [ 1389.717372][T30232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1389.725376][T30232] R13: 00007f86333ce038 R14: 00007f86333cdfa0 R15: 00007ffc53c31a28 [ 1389.733382][T30232]