last executing test programs: 2.692442121s ago: executing program 0 (id=3930): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xe, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xffef, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.265605102s ago: executing program 0 (id=3940): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x28, 0x0, 0x7, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40045}, 0x4) 2.148707368s ago: executing program 0 (id=3943): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001114010026bd7000fddbdf25080003000400000008004a0002000000080021"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x80) 2.024372335s ago: executing program 0 (id=3945): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@bridge_delneigh={0x2c, 0x1e, 0x1, 0x70bd2a, 0x4, {0x2}, [@NDA_DST_IPV4={0x8, 0x1, @multicast1}, @NDA_VNI={0x8, 0x7, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc040}, 0x20000080) 1.976072858s ago: executing program 0 (id=3948): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x110, 0x2, 0x800000}}], 0x30}, 0x4) 1.829933925s ago: executing program 0 (id=3952): write(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$midi(0x5, 0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100100000020e809620040000102030109022c0001018190be09040000020103200409058d0320027ffef8042501000905870200000e0425010000"], 0x0) 1.211286167s ago: executing program 2 (id=3972): r0 = syz_open_dev$evdev(&(0x7f0000000980), 0x1, 0x60200) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000340)=""/199) 1.102037833s ago: executing program 2 (id=3975): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001840)=ANY=[@ANYBLOB="180000001114010542b67000fbdbdf0408003600"], 0x18}, 0x1, 0x0, 0x0, 0x200040c5}, 0x2000804c) 889.236394ms ago: executing program 3 (id=3981): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x50bd28, 0x800000, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3900}, [@RTA_IP_PROTO={0x5, 0x1b, 0x6}]}, 0x24}}, 0xea5bc50b6199d77e) 875.707294ms ago: executing program 2 (id=3983): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000080)={0x2c, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0xc, 0x2b, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @fd}]}]}, 0x2c}], 0x1}, 0x0) 774.48784ms ago: executing program 3 (id=3986): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_GRE_FWMARK={0x8, 0x14, 0xb}, @IFLA_GRE_TOS={0x5, 0x9, 0xf}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004840}, 0x0) 661.031066ms ago: executing program 2 (id=3988): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) 659.635666ms ago: executing program 1 (id=3989): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000280)={0x6a, 0x6, 0x8, 0xb, 0xb}) 585.72639ms ago: executing program 3 (id=3990): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='attr/current\x00') write$P9_RSTAT(r0, 0x0, 0x3b) 581.50621ms ago: executing program 4 (id=3991): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000220000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000700000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xcc0, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860186dd", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 500.381284ms ago: executing program 1 (id=3992): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x20800, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 465.964085ms ago: executing program 3 (id=3993): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@ipv4_delroute={0x24, 0x19, 0x1, 0x70bd2f, 0x25dfdbf9, {0x2, 0x20, 0x14, 0x0, 0xff, 0x2, 0xff, 0x2, 0x1800}, [@RTA_TABLE={0x8, 0xf, 0x7ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x44051}, 0x1000) 424.086608ms ago: executing program 1 (id=3994): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002f00)="89000000120081ae08060cdc030ec0007f03e3f70000000000e272f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800020004000000bdad446b9bbc7ace5b0dd385dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000009157a270", 0x89}], 0x1}, 0x0) 392.06232ms ago: executing program 4 (id=3995): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f0000000440)='GPL\x00', 0x8, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2285f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$ITER_CREATE(0xb, &(0x7f0000000400), 0x42) 354.082552ms ago: executing program 1 (id=3996): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000180)="cd91c0", 0x0}, 0x20) 272.165086ms ago: executing program 4 (id=3997): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_USERDATA={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}}, 0x0) 272.022995ms ago: executing program 3 (id=3998): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x0, 0x38, 0x20f}) 246.791917ms ago: executing program 1 (id=3999): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e0, 0x0, 0x2a0, 0xb0, 0x148, 0x0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@broadcast, @rand_addr=0x64010102, 0x0, 0x0, 'geneve1\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x8001, @ipv4=@local, 0x4e23}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x6]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) 227.264868ms ago: executing program 4 (id=4000): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000001f40)=""/4089, 0x1a, 0xff9, 0x1}, 0x28) 151.590542ms ago: executing program 2 (id=4001): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x3) 151.031463ms ago: executing program 1 (id=4002): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, 0x0) 142.395382ms ago: executing program 4 (id=4003): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x58, 0x10, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x14318}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x2c}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) 122.673544ms ago: executing program 3 (id=4004): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000200000010ac053002400001020301090224000101030000090400040103010206"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) 9.592569ms ago: executing program 4 (id=4005): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv(r0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000001ac0)=""/14, 0xe}], 0x2) 0s ago: executing program 2 (id=4006): r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='source', &(0x7f00000000c0)='%(/:', 0x0) kernel console output (not intermixed with test programs): 6.230935][ T9438] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 116.264085][ T9438] FAT-fs (loop2): Filesystem has been set read-only [ 116.297607][ T7] usb 1-1: unable to get BOS descriptor or descriptor too short [ 116.413310][ T7] usb 1-1: config 1 has an invalid interface number: 206 but max is 0 [ 116.433842][ T7] usb 1-1: config 1 has no interface number 0 [ 116.477494][ T9472] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.486323][ T9472] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.525627][ T9472] device bridge0 entered promiscuous mode [ 116.563170][ T9472] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 116.625886][ T9484] (unnamed net_device) (uninitialized): ARP validating cannot be used with MII monitoring [ 116.647794][ T7] usb 1-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=3b.0a [ 116.657347][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.665362][ T7] usb 1-1: Product: syz [ 116.697281][ T7] usb 1-1: Manufacturer: syz [ 116.701926][ T7] usb 1-1: SerialNumber: syz [ 116.727554][ T4232] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 116.867329][ T4261] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 116.935002][ T9514] CIFS: iocharset name too long [ 116.979353][ T4232] usb 2-1: Using ep0 maxpacket: 32 [ 117.099566][ T7] usb 1-1: USB disconnect, device number 10 [ 117.113522][ T9533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1684'. [ 117.123455][ T9533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1684'. [ 117.133495][ T9533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1684'. [ 117.137683][ T4232] usb 2-1: unable to get BOS descriptor or descriptor too short [ 117.144440][ T9533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1684'. [ 117.160476][ T9533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1684'. [ 117.173150][ T9533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1684'. [ 117.182761][ T9533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1684'. [ 117.193622][ T9533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1684'. [ 117.203318][ T9533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1684'. [ 117.212739][ T9533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1684'. [ 117.222905][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 117.227481][ T4232] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 117.232560][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 117.244949][ T4232] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 117.246353][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 117.257163][ T4229] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 117.277552][ T4261] usb 4-1: config 0 has an invalid interface number: 83 but max is 0 [ 117.278703][ T4232] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 117.289147][ T4261] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.307585][ T4261] usb 4-1: config 0 has no interface number 0 [ 117.308803][ T4232] usb 2-1: config 128 has no interface number 0 [ 117.316766][ T4261] usb 4-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 117.321001][ T4232] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 117.341216][ T4232] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 117.344288][ T4261] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.366996][ T4261] usb 4-1: config 0 descriptor?? [ 117.382711][ T4232] usb 2-1: config 128 interface 127 has no altsetting 0 [ 117.419513][ T4261] ttusbir 4-1:0.83: cannot find expected altsetting [ 117.533469][ T9554] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 117.545628][ T9554] overlayfs: missing 'lowerdir' [ 117.547658][ T4232] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 117.568109][ T4232] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.576341][ T4232] usb 2-1: Product: syz [ 117.588213][ T4232] usb 2-1: Manufacturer: syz [ 117.592853][ T4232] usb 2-1: SerialNumber: syz [ 117.643525][ T21] usb 4-1: USB disconnect, device number 8 [ 117.797578][ T4229] usb 5-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 117.819843][ T4229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.832490][ T4229] usb 5-1: Product: syz [ 117.836700][ T4229] usb 5-1: Manufacturer: syz [ 117.858800][ T4229] usb 5-1: SerialNumber: syz [ 117.875047][ T4229] usb 5-1: config 0 descriptor?? [ 118.087964][ T4232] usb 2-1: USB disconnect, device number 10 [ 118.177513][ T4229] peak_usb 5-1:0.0: PEAK-System PCAN-USB FD v67 fw v57.0.0 (1 channels) [ 118.307184][ T26] audit: type=1107 audit(1776788559.541:6): pid=9641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 118.318805][ T4173] udevd[4173]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 118.387573][ T4229] peak_usb 5-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 118.395869][ T4229] peak_usb 5-1:0.0: unable to tell PCAN-USB FD driver is loaded (err -71) [ 118.450751][ T9654] netlink: 'syz.1.1716': attribute type 1 has an invalid length. [ 118.559158][ T4229] peak_usb: probe of 5-1:0.0 failed with error -71 [ 118.598251][ T9668] netlink: 'syz.1.1719': attribute type 1 has an invalid length. [ 118.606365][ T4229] usb 5-1: USB disconnect, device number 13 [ 118.766241][ T9691] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 118.940592][ T9714] loop0: detected capacity change from 0 to 256 [ 119.040790][ T9725] loop3: detected capacity change from 0 to 512 [ 119.109219][ T9725] EXT4-fs (loop3): Test dummy encryption mode enabled [ 119.116797][ T9714] FAT-fs (loop0): Directory bread(block 64) failed [ 119.138887][ T9714] FAT-fs (loop0): Directory bread(block 65) failed [ 119.144637][ T9725] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 119.145524][ T9714] FAT-fs (loop0): Directory bread(block 66) failed [ 119.176568][ T9714] FAT-fs (loop0): Directory bread(block 67) failed [ 119.186225][ T9714] FAT-fs (loop0): Directory bread(block 68) failed [ 119.194294][ T9725] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 119.211241][ T9725] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=continue,delalloc,prjquota,usrquota,min_batch_time=0x000000000000001a,usrjquota=min_batch_time=0x00000000fffffffc,nodiscard,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 119.215848][ T9746] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 119.276650][ T9714] FAT-fs (loop0): Directory bread(block 69) failed [ 119.300757][ T9714] FAT-fs (loop0): Directory bread(block 70) failed [ 119.330140][ T9714] FAT-fs (loop0): Directory bread(block 71) failed [ 119.346276][ T9714] FAT-fs (loop0): Directory bread(block 72) failed [ 119.384009][ T9714] FAT-fs (loop0): Directory bread(block 73) failed [ 119.551453][ T26] audit: type=1800 audit(1776788560.791:7): pid=9714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1734" name="file1" dev="loop0" ino=1048602 res=0 errno=0 [ 119.584731][ T9780] sctp: [Deprecated]: syz.2.1753 (pid 9780) Use of int in maxseg socket option. [ 119.584731][ T9780] Use struct sctp_assoc_value instead [ 119.813773][ T9810] damon: min_nr_regions (0) must be at least 3 [ 120.101387][ T9846] [U]  [ 120.287314][ T4229] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 120.337502][ T21] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 120.527315][ T4229] usb 3-1: Using ep0 maxpacket: 16 [ 120.604234][ T9892] kAFS: No cell specified [ 120.658699][ T4229] usb 3-1: config 253 has an invalid interface number: 184 but max is 0 [ 120.667822][ T21] usb 2-1: not running at top speed; connect to a high speed hub [ 120.683149][ T4229] usb 3-1: config 253 has no interface number 0 [ 120.700398][ T4229] usb 3-1: config 253 interface 184 has no altsetting 0 [ 120.747718][ T21] usb 2-1: config 11 has an invalid interface number: 95 but max is 0 [ 120.765688][ T21] usb 2-1: config 11 has no interface number 0 [ 120.772410][ T21] usb 2-1: config 11 interface 95 altsetting 64 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 120.783659][ T21] usb 2-1: config 11 interface 95 altsetting 64 endpoint 0x82 has invalid maxpacket 10727, setting to 64 [ 120.795973][ T21] usb 2-1: config 11 interface 95 has no altsetting 0 [ 120.868230][ T4229] usb 3-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 120.887980][ T4229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.903532][ T4229] usb 3-1: Product: syz [ 120.922554][ T21] usb 2-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=b1.4d [ 120.932763][ T4229] usb 3-1: Manufacturer: syz [ 120.937767][ T21] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 120.956533][ T4229] usb 3-1: SerialNumber: syz [ 120.967798][ T21] usb 2-1: Manufacturer: syz [ 121.007629][ T9845] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 121.019603][ T4229] go7007: probe of 3-1:253.184 failed with error -12 [ 121.044638][ T9845] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 121.167757][ T9930] loop4: detected capacity change from 0 to 4096 [ 121.223819][ T4233] usb 3-1: USB disconnect, device number 9 [ 121.367692][ T21] usbtouchscreen: probe of 2-1:11.95 failed with error -71 [ 121.386809][ T21] usb 2-1: USB disconnect, device number 11 [ 121.455193][ T9979] netlink: 'syz.4.1808': attribute type 10 has an invalid length. [ 121.497934][ T4172] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 121.826332][T10015] netlink: 'syz.2.1823': attribute type 10 has an invalid length. [ 121.919344][T10015] team0: Device wg1 is of different type [ 121.928397][ T4172] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.123572][ T4172] usb 1-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 122.142556][ T4172] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.166339][ T4172] usb 1-1: Product: syz [ 122.184980][ T4172] usb 1-1: Manufacturer: syz [ 122.201818][ T4172] usb 1-1: SerialNumber: syz [ 122.239773][ T4172] usb 1-1: config 0 descriptor?? [ 122.276043][ T26] audit: type=1400 audit(1776788563.511:8): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name=3A3A0AE10CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A552C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=10047 comm="syz.2.1833" [ 122.319166][ T4172] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 122.345168][ T4172] dvb-usb: bulk message failed: -22 (3/0) [ 122.383155][T10060] loop2: detected capacity change from 0 to 64 [ 122.392572][ T4172] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 122.440409][ T4172] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 122.457505][ T4172] usb 1-1: media controller created [ 122.469472][ T4172] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 122.497841][ T4172] dvb-usb: bulk message failed: -22 (6/0) [ 122.511010][ T4172] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 122.578596][ T4172] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input11 [ 122.611265][ T4172] dvb-usb: schedule remote query interval to 150 msecs. [ 122.645871][ T4172] dvb-usb: bulk message failed: -22 (3/0) [ 122.697612][ T4172] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 122.732143][ T4172] usb 1-1: USB disconnect, device number 11 [ 122.806687][ T4172] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 122.923202][T10113] __nla_validate_parse: 70 callbacks suppressed [ 122.923221][T10113] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1847'. [ 122.952928][T10113] bridge_slave_1: default FDB implementation only supports local addresses [ 123.117394][T10127] netdevsim netdevsim4: Firmware load for './file0/file0/..' refused, path contains '..' component [ 123.166987][T10119] loop1: detected capacity change from 0 to 4096 [ 123.242768][T10141] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1856'. [ 123.370479][T10152] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1860'. [ 123.384641][T10154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1861'. [ 123.420612][T10152] openvswitch: netlink: Missing key (keys=40, expected=100) [ 123.473789][T10154] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1861'. [ 123.636768][ T150] block nbd0: Attempted send on invalid socket [ 123.643232][ T150] blk_update_request: I/O error, dev nbd0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.657967][T10175] VFS: unable to read V7 FS superblock on device nbd0. [ 123.667918][T10163] loop1: detected capacity change from 0 to 4096 [ 123.675449][T10163] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 123.715833][T10175] VFS: could not find a valid V7 on nbd0. [ 123.774503][T10163] ntfs: volume version 3.1. [ 123.830996][T10163] ntfs: (device loop1): ntfs_mark_quotas_out_of_date(): Quota defaults entry version 0x5 is not supported. [ 123.911747][T10163] ntfs: (device loop1): load_system_files(): Failed to mark quotas out of date. Mounting read-only. Run chkdsk. [ 123.985119][T10198] loop2: detected capacity change from 0 to 4096 [ 124.093548][T10220] loop0: detected capacity change from 0 to 256 [ 124.228181][T10220] FAT-fs (loop0): Directory bread(block 64) failed [ 124.249741][T10220] FAT-fs (loop0): Directory bread(block 65) failed [ 124.297592][T10220] FAT-fs (loop0): Directory bread(block 66) failed [ 124.304531][T10220] FAT-fs (loop0): Directory bread(block 67) failed [ 124.336751][T10220] FAT-fs (loop0): Directory bread(block 68) failed [ 124.357461][T10220] FAT-fs (loop0): Directory bread(block 69) failed [ 124.364124][T10220] FAT-fs (loop0): Directory bread(block 70) failed [ 124.413655][T10220] FAT-fs (loop0): Directory bread(block 71) failed [ 124.446195][T10220] FAT-fs (loop0): Directory bread(block 72) failed [ 124.473350][T10220] FAT-fs (loop0): Directory bread(block 73) failed [ 125.062579][T10309] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1912'. [ 125.120892][T10313] xt_TCPMSS: Only works on TCP SYN packets [ 125.132714][T10309] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1912'. [ 125.177405][ T4232] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 125.213536][T10323] loop1: detected capacity change from 0 to 256 [ 125.242270][T10327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1918'. [ 125.252690][T10327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1918'. [ 125.252876][T10323] exfat: Deprecated parameter 'utf8' [ 125.262904][T10327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1918'. [ 125.292598][T10327] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 125.303259][T10327] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 125.305871][T10323] exfat: Deprecated parameter 'namecase' [ 125.312909][T10327] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 125.328020][ T4233] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 125.344513][T10330] loop4: detected capacity change from 0 to 2048 [ 125.375922][T10323] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 125.417479][ T4232] usb 1-1: Using ep0 maxpacket: 32 [ 125.434175][T10330] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.587458][ T4233] usb 3-1: Using ep0 maxpacket: 8 [ 125.697592][ T4232] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 125.709864][ T4233] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 125.727021][ T4233] usb 3-1: config 0 has no interface number 0 [ 125.736690][ T4232] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.748952][ T4233] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 125.766933][ T4232] usb 1-1: Product: syz [ 125.771816][ T4232] usb 1-1: Manufacturer: syz [ 125.776487][ T4232] usb 1-1: SerialNumber: syz [ 125.781492][ T4233] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.808179][ T4233] usb 3-1: config 0 descriptor?? [ 125.817331][ T4232] usb 1-1: config 0 descriptor?? [ 125.865018][T10366] ipt_CLUSTERIP: unknown mode 3918972798 [ 125.967442][ T21] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 125.977345][T10383] Zero length message leads to an empty skb [ 125.989650][T10384] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 126.000926][T10384] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 126.008930][T10384] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 126.066995][ T1107] usb 3-1: USB disconnect, device number 10 [ 126.136463][T10395] loop4: detected capacity change from 0 to 256 [ 126.231179][ T21] usb 2-1: Using ep0 maxpacket: 32 [ 126.245305][T10395] FAT-fs (loop4): Directory bread(block 64) failed [ 126.275751][T10395] FAT-fs (loop4): Directory bread(block 65) failed [ 126.297527][ T4232] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 126.307022][T10395] FAT-fs (loop4): Directory bread(block 66) failed [ 126.319174][ T4232] peak_usb 1-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 126.323110][T10411] befs: Unrecognized mount option "f2fs" or missing value [ 126.340967][T10395] FAT-fs (loop4): Directory bread(block 67) failed [ 126.349750][ T21] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 126.351972][T10395] FAT-fs (loop4): Directory bread(block 68) failed [ 126.358611][ T21] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.375375][ T21] usb 2-1: config 0 has no interface number 0 [ 126.381907][T10395] FAT-fs (loop4): Directory bread(block 69) failed [ 126.385558][ T21] usb 2-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 126.389735][T10395] FAT-fs (loop4): Directory bread(block 70) failed [ 126.412165][T10395] FAT-fs (loop4): Directory bread(block 71) failed [ 126.419976][T10395] FAT-fs (loop4): Directory bread(block 72) failed [ 126.426837][T10395] FAT-fs (loop4): Directory bread(block 73) failed [ 126.457689][ T4232] peak_usb: probe of 1-1:0.0 failed with error -71 [ 126.476220][ T4232] usb 1-1: USB disconnect, device number 12 [ 126.525447][T10426] loop3: detected capacity change from 0 to 256 [ 126.567526][ T21] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 126.594351][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.623990][ T21] usb 2-1: Product: syz [ 126.646030][ T21] usb 2-1: Manufacturer: syz [ 126.659262][ T21] usb 2-1: SerialNumber: syz [ 126.728309][ T21] usb 2-1: config 0 descriptor?? [ 126.769463][ T21] radio-si470x 2-1:0.35: could not find interrupt in endpoint [ 126.806828][ T21] radio-si470x: probe of 2-1:0.35 failed with error -5 [ 126.883728][T10458] usb usb7: usbfs: process 10458 (syz.4.1950) did not claim interface 0 before use [ 126.977418][ T21] radio-raremono 2-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 127.187496][ T21] radio-raremono 2-1:0.35: raremono_cmd_main failed (-71) [ 127.216419][ T21] radio-raremono 2-1:0.35: V4L2 device registered as radio48 [ 127.274787][ T21] usb 2-1: USB disconnect, device number 12 [ 127.291600][ T21] radio-raremono 2-1:0.35: Thanko's Raremono disconnected [ 127.321416][T10504] dlm: dev_write: no op 0 74000000000000 [ 127.492532][T10529] netlink: 'syz.0.1970': attribute type 3 has an invalid length. [ 127.681881][T10540] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 127.716750][T10545] loop2: detected capacity change from 0 to 16 [ 127.734405][T10540] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 127.755490][T10547] loop4: detected capacity change from 0 to 512 [ 127.811958][T10545] erofs: (device loop2): mounted with root inode @ nid 36. [ 127.837341][T10547] EXT4-fs (loop4): inline encryption not supported [ 127.895429][T10547] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 127.954329][T10547] System zones: 0-2, 18-18, 34-35 [ 128.087115][T10547] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,inlinecrypt,bsdgroups,debug,,errors=continue. Quota mode: writeback. [ 128.191128][T10547] ext4 filesystem being mounted at /341/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 128.336424][T10604] loop1: detected capacity change from 0 to 64 [ 128.397810][T10611] loop3: detected capacity change from 0 to 1024 [ 128.444844][T10604] MINIX-fs: mounting file system with errors, running fsck is recommended [ 128.530889][T10604] attempt to access beyond end of device [ 128.530889][T10604] loop1: rw=0, want=8194, limit=64 [ 128.567727][T10604] Buffer I/O error on dev loop1, logical block 4096, async page read [ 128.590897][T10631] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 128.601930][T10604] attempt to access beyond end of device [ 128.601930][T10604] loop1: rw=0, want=8194, limit=64 [ 128.627333][T10631] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 128.645997][T10604] Buffer I/O error on dev loop1, logical block 4096, async page read [ 128.672802][ T26] audit: type=1800 audit(1776788569.911:9): pid=10604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1990" name="file2" dev="loop1" ino=6 res=0 errno=0 [ 128.809635][T10655] xt_l2tp: invalid flags combination: 0 [ 129.071636][T10685] loop2: detected capacity change from 0 to 512 [ 129.154145][T10685] EXT4-fs (loop2): Ignoring removed nobh option [ 129.177782][T10685] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 129.202114][T10685] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 129.212325][T10700] __nla_validate_parse: 178 callbacks suppressed [ 129.212347][T10700] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2021'. [ 129.274983][T10685] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 129.299747][T10685] EXT4-fs (loop2): 1 truncate cleaned up [ 129.306767][T10685] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nobh,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,max_batch_time=0x0000000000000007,dioread_lock,. Quota mode: none. [ 129.328939][ C0] vkms_vblank_simulate: vblank timer overrun [ 129.590959][T10736] netlink: 'syz.2.2029': attribute type 9 has an invalid length. [ 129.614167][T10728] delete_channel: no stack [ 129.634601][T10736] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.2029'. [ 129.715004][T10746] loop1: detected capacity change from 0 to 1024 [ 129.803494][T10757] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.281818][T10775] loop1: detected capacity change from 0 to 8192 [ 130.364495][T10775] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 130.375618][T10775] REISERFS (device loop1): using ordered data mode [ 130.383581][T10775] reiserfs: using flush barriers [ 130.407424][T10775] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 130.448189][T10775] REISERFS (device loop1): checking transaction log (loop1) [ 130.480704][T10808] netlink: 'syz.0.2058': attribute type 10 has an invalid length. [ 130.603614][T10808] team0: Device wg1 is of different type [ 130.789691][T10829] netlink: 'syz.4.2064': attribute type 10 has an invalid length. [ 130.837013][T10775] REISERFS (device loop1): Using tea hash to sort names [ 130.881874][T10775] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 130.903783][T10829] team0: Port device macvlan1 added [ 131.007618][T10842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2067'. [ 131.043960][T10842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2067'. [ 131.098949][T10842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2067'. [ 131.178140][T10842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2067'. [ 131.212862][T10842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2067'. [ 131.224830][T10842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2067'. [ 131.236401][T10842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2067'. [ 131.280048][T10842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2067'. [ 131.313894][T10842] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 131.436953][T10842] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 131.461618][T10842] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 131.543948][T10866] netlink: 'syz.3.2078': attribute type 10 has an invalid length. [ 131.616060][T10866] team0: Device wg1 is of different type [ 132.013084][T10902] libceph: resolve '0.0' (ret=-3): failed [ 132.236607][T10920] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 132.287867][T10920] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 132.299098][T10920] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 132.353882][T10881] loop4: detected capacity change from 0 to 32768 [ 132.760120][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.766519][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.950300][T10982] siw: device registration error -23 [ 133.070537][T10996] comedi comedi0: pcl726: I/O port conflict (0x9,16) [ 133.128294][T11004] netlink: 'syz.1.2123': attribute type 13 has an invalid length. [ 133.394448][T11036] xt_connbytes: Forcing CT accounting to be enabled [ 133.821278][T11085] siw: device registration error -23 [ 133.865240][T11094] binder: 11093:11094 ioctl c0306201 2000000001c0 returned -14 [ 134.086812][T11123] SET target dimension over the limit! [ 134.229929][T11141] netlink: 'syz.1.2170': attribute type 10 has an invalid length. [ 134.294164][T11141] team0: Port device macvlan1 added [ 134.502355][T11174] syz.4.2184 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 134.606406][T11182] __nla_validate_parse: 156 callbacks suppressed [ 134.606427][T11182] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2186'. [ 134.668485][T11188] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2187'. [ 134.855528][T11209] netlink: 'syz.0.2191': attribute type 10 has an invalid length. [ 134.927443][T11209] team0: Port device macvlan1 added [ 134.949462][T11215] loop4: detected capacity change from 0 to 512 [ 135.090826][T11171] loop3: detected capacity change from 0 to 32768 [ 135.182626][T11171] (syz.3.2183,11171,0):ocfs2_check_set_options:1220 ERROR: ACL support requested but extended attributes feature is not enabled [ 135.185609][T11235] loop0: detected capacity change from 0 to 256 [ 135.228899][T11171] (syz.3.2183,11171,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 135.273918][T11235] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d) [ 135.515516][T11269] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.2218'. [ 135.538336][T11271] loop0: detected capacity change from 0 to 1024 [ 135.551817][T11273] netlink: 'syz.2.2208': attribute type 10 has an invalid length. [ 135.582431][T11277] Unknown options in mask b7f2 [ 135.618829][T11171] blk_update_request: I/O error, dev loop3, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 135.621837][T11273] team0: Port device macvlan1 added [ 135.690754][T11171] qnx4: unable to read the superblock [ 135.690779][ T154] hfsplus: b-tree write err: -5, ino 25 [ 135.704853][ T154] hfsplus: b-tree write err: -5, ino 4 [ 135.720147][ T154] hfsplus: b-tree write err: -5, ino 2 [ 135.747520][T11285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2213'. [ 135.859593][T11299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2212'. [ 136.132863][T11324] loop2: detected capacity change from 0 to 512 [ 136.159839][T11327] netlink: 'syz.3.2227': attribute type 10 has an invalid length. [ 136.170063][T11314] loop0: detected capacity change from 0 to 4096 [ 136.213944][T11314] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 136.256832][T11324] EXT4-fs (loop2): inline encryption not supported [ 136.283969][T11314] ntfs: volume version 3.1. [ 136.326245][T11324] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 136.352640][T11325] loop4: detected capacity change from 0 to 4096 [ 136.370607][T11324] System zones: 0-2, 18-18, 34-35 [ 136.390271][T11327] team0: Port device macvlan1 added [ 136.397742][T11324] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,inlinecrypt,bsdgroups,debug,,errors=continue. Quota mode: writeback. [ 136.527881][T11324] ext4 filesystem being mounted at /438/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 136.614618][T11344] loop3: detected capacity change from 0 to 1024 [ 137.062679][T11367] netlink: 'syz.4.2241': attribute type 10 has an invalid length. [ 137.191243][T11371] loop3: detected capacity change from 0 to 64 [ 137.372834][ T26] audit: type=1326 audit(1776788578.611:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11382 comm="syz.2.2243" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd5b9266819 code=0x0 [ 137.404861][T11371] MINIX-fs: mounting file system with errors, running fsck is recommended [ 137.487074][T11371] attempt to access beyond end of device [ 137.487074][T11371] loop3: rw=0, want=8194, limit=64 [ 137.536435][ T26] audit: type=1326 audit(1776788578.681:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11382 comm="syz.2.2243" exe="/root/syz-executor" sig=31 arch=c000003e syscall=436 compat=0 ip=0x7fd5b9266819 code=0x0 [ 137.560820][T11371] Buffer I/O error on dev loop3, logical block 4096, async page read [ 137.611859][T11371] attempt to access beyond end of device [ 137.611859][T11371] loop3: rw=0, want=8194, limit=64 [ 137.679101][T11371] Buffer I/O error on dev loop3, logical block 4096, async page read [ 137.748228][ T26] audit: type=1800 audit(1776788578.991:12): pid=11371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2237" name="file2" dev="loop3" ino=6 res=0 errno=0 [ 137.821151][T11359] syz.1.2234 (11359): drop_caches: 2 [ 138.319577][T11438] netlink: 'syz.1.2262': attribute type 1 has an invalid length. [ 138.368134][T11438] netlink: 'syz.1.2262': attribute type 2 has an invalid length. [ 138.517179][T11456] loop1: detected capacity change from 0 to 512 [ 138.633569][T11456] EXT4-fs (loop1): inline encryption not supported [ 138.673586][T11456] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 138.687953][T11456] System zones: 0-2, 18-18, 34-35 [ 138.768786][T11456] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,inlinecrypt,bsdgroups,debug,,errors=continue. Quota mode: writeback. [ 138.819146][T11456] ext4 filesystem being mounted at /435/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 138.969317][T11489] loop3: detected capacity change from 0 to 64 [ 139.105017][T11496] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2283'. [ 139.153269][T11496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2283'. [ 139.179803][T11496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2283'. [ 139.457584][T11527] netlink: 'syz.4.2291': attribute type 21 has an invalid length. [ 139.525966][T11527] netlink: 'syz.4.2291': attribute type 1 has an invalid length. [ 139.552439][T11536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2294'. [ 140.040008][T11579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2310'. [ 140.139593][T11585] netlink: 'syz.0.2311': attribute type 1 has an invalid length. [ 140.173640][T11591] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2314'. [ 140.564638][T11622] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2323'. [ 140.606949][T11622] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2323'. [ 140.616683][T11622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2323'. [ 140.640063][T11622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2323'. [ 140.684119][ T4261] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 140.957477][ T4261] usb 1-1: Using ep0 maxpacket: 8 [ 141.009940][T11649] loop3: detected capacity change from 0 to 4096 [ 141.070391][T11649] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 141.082289][T11664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2339'. [ 141.100911][ T4261] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 141.111593][T11664] netlink: 540 bytes leftover after parsing attributes in process `syz.1.2339'. [ 141.131158][T11649] ntfs: (device loop3): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 141.143462][T11649] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 141.190599][T11649] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 141.229448][T11649] ntfs: volume version 3.1. [ 141.313894][ T4261] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 141.330367][ T4261] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 141.368882][ T4261] usb 1-1: Product: syz [ 141.377510][ T4261] usb 1-1: Manufacturer: syz [ 141.398619][ T4261] usb 1-1: SerialNumber: syz [ 141.412946][ T4193] ntfs: (device loop3): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 141.653299][ T4261] usb 1-1: Invalid connection information received from device [ 141.769042][T11667] loop2: detected capacity change from 0 to 32768 [ 141.855486][T11667] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.2338 (11667) [ 141.860410][ T21] usb 1-1: USB disconnect, device number 13 [ 142.009847][T11667] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 142.055952][T11667] BTRFS info (device loop2): using free space tree [ 142.100020][T11667] BTRFS info (device loop2): has skinny extents [ 142.409391][T11771] netlink: 'syz.1.2365': attribute type 17 has an invalid length. [ 142.425405][T11667] BTRFS info (device loop2): enabling ssd optimizations [ 142.557965][T11771] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2365'. [ 142.630767][T11771] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 142.786948][T11796] loop3: detected capacity change from 0 to 4096 [ 142.822454][T11796] ntfs: (device loop3): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 142.975461][T11796] ntfs: volume version 3.1. [ 143.063888][T11822] xt_HMARK: proto mask must be zero with L3 mode [ 143.543296][T11868] loop1: detected capacity change from 0 to 64 [ 143.579245][T11867] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 143.705855][T11868] attempt to access beyond end of device [ 143.705855][T11868] loop1: rw=0, want=268435470, limit=64 [ 143.730625][T11878] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 143.747641][T11868] Buffer I/O error on dev loop1, logical block 134217734, async page read [ 143.752806][T11863] loop0: detected capacity change from 0 to 8192 [ 143.779453][T11868] attempt to access beyond end of device [ 143.779453][T11868] loop1: rw=0, want=268435470, limit=64 [ 143.827537][T11868] Buffer I/O error on dev loop1, logical block 134217734, async page read [ 143.886301][T11863] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 143.925758][T11863] REISERFS (device loop0): using ordered data mode [ 143.932721][T11863] reiserfs: using flush barriers [ 143.964379][T11863] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 144.010329][T11863] REISERFS (device loop0): checking transaction log (loop0) [ 144.114180][T11863] REISERFS (device loop0): Using r5 hash to sort names [ 144.147125][T11863] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 144.178156][T11910] loop4: detected capacity change from 0 to 2048 [ 144.199646][T11863] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 144.219969][T11923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2405'. [ 144.244835][T11910] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 144.789754][T11973] netlink: 'syz.4.2421': attribute type 21 has an invalid length. [ 144.838853][T11976] IPv6: Can't replace route, no match found [ 144.990326][T11989] loop0: detected capacity change from 0 to 256 [ 145.192815][T12010] __nla_validate_parse: 1 callbacks suppressed [ 145.192833][T12010] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2435'. [ 145.349208][T12029] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2438'. [ 145.397823][T12029] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2438'. [ 145.559051][T12050] netlink: 'syz.4.2447': attribute type 2 has an invalid length. [ 145.604192][T12050] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2447'. [ 145.655595][T12065] netlink: 'syz.2.2451': attribute type 1 has an invalid length. [ 145.758798][T12078] loop4: detected capacity change from 0 to 64 [ 145.832565][T12091] netlink: 'syz.1.2459': attribute type 1 has an invalid length. [ 145.884388][ T26] audit: type=1800 audit(1776788587.121:13): pid=12078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2454" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 146.090439][T12117] ipt_rpfilter: unknown options [ 146.161838][T12121] netlink: 'syz.0.2469': attribute type 3 has an invalid length. [ 146.239280][T12124] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (8) [ 146.274986][T12121] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2469'. [ 146.404574][ T26] audit: type=1400 audit(1776788587.641:14): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3AF4F9904E7FDB3635A70D23C73EEAF23A2F503280080CA26230668AD9DCF8B061228F8599D34E45087D21AA56759E1651B3DD467BDEF390C76D pid=12135 comm="syz.1.2474" [ 146.552155][T12149] tipc: Can't bind to reserved service type 1 [ 146.590370][T12153] 9pnet: p9_fd_create_unix (12153): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 146.619372][ C0] vkms_vblank_simulate: vblank timer overrun [ 146.891727][T12183] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2489'. [ 146.974416][T12192] [U]  [ 147.138204][T12209] netlink: 'syz.0.2498': attribute type 13 has an invalid length. [ 147.167294][ T21] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 147.190796][T12213] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2500'. [ 147.284104][ T26] audit: type=1400 audit(1776788588.521:15): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457C51CCA93031D371D06D2E59E880583300E11E8 pid=12221 comm="syz.1.2504" [ 147.361481][ T26] audit: type=1107 audit(1776788588.601:16): pid=12225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='P' [ 147.427516][ T21] usb 3-1: Using ep0 maxpacket: 16 [ 147.507391][T12239] comedi comedi0: dt2814: I/O port conflict (0x3,2) [ 147.547548][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 147.654853][T12250] IPv6: Can't replace route, no match found [ 147.732384][ T21] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 147.752904][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.797527][ T21] usb 3-1: Product: syz [ 147.801972][ T21] usb 3-1: Manufacturer: syz [ 147.806580][ T21] usb 3-1: SerialNumber: syz [ 147.836802][ T21] usb 3-1: config 0 descriptor?? [ 147.915859][T12230] syz.3.2505 (12230): drop_caches: 2 [ 147.940302][ T21] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 147.993497][T12267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2517'. [ 148.137929][ T13] usb 3-1: USB disconnect, device number 11 [ 148.147558][ T9002] usb 3-1: Failed to submit usb control message: -71 [ 148.154840][ T9002] usb 3-1: unable to send the bmi data to the device: -71 [ 148.198236][ T9002] usb 3-1: unable to get target info from device [ 148.204713][ T9002] usb 3-1: could not get target info (-71) [ 148.226918][T12233] loop4: detected capacity change from 0 to 32768 [ 148.238103][ T9002] usb 3-1: could not probe fw (-71) [ 148.358017][T12308] delete_channel: no stack [ 148.455270][T12233] XFS (loop4): Mounting V5 Filesystem [ 148.564791][T12233] XFS (loop4): Ending clean mount [ 148.663580][T12233] XFS (loop4): Quotacheck needed: Please wait. [ 148.777448][ T1107] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 148.778477][T12350] loop0: detected capacity change from 0 to 8 [ 148.799005][T12233] XFS (loop4): Quotacheck: Done. [ 148.903519][ T4195] XFS (loop4): Unmounting Filesystem [ 149.131879][T12371] netlink: 'syz.2.2543': attribute type 5 has an invalid length. [ 149.142555][ T1107] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 149.145199][T12374] mmap: syz.0.2544 (12374): VmData 175874048 exceed data ulimit 6. Update limits or use boot option ignore_rlimit_data. [ 149.154985][ T1107] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 149.196046][ T1107] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 149.317793][ T1107] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 149.332454][ T1107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 149.360957][ T1107] usb 4-1: SerialNumber: syz [ 149.415559][T12396] loop2: detected capacity change from 0 to 128 [ 149.545747][T12396] attempt to access beyond end of device [ 149.545747][T12396] loop2: rw=0, want=25676, limit=128 [ 149.568253][T12396] Buffer I/O error on dev loop2, logical block 12837, async page read [ 149.590059][T12396] attempt to access beyond end of device [ 149.590059][T12396] loop2: rw=0, want=25676, limit=128 [ 149.612321][T12396] Buffer I/O error on dev loop2, logical block 12837, async page read [ 149.658865][ T1107] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 149.665106][ T1107] usbtest: probe of 4-1:1.0 failed with error -22 [ 149.690621][ T1107] usb 4-1: USB disconnect, device number 9 [ 149.721796][ T4232] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 149.751927][T12421] loop4: detected capacity change from 0 to 2048 [ 149.787952][T12430] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2559'. [ 149.869474][T12421] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 149.872623][T12440] loop1: detected capacity change from 0 to 64 [ 149.900435][T12421] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 149.920046][T12421] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 149.947371][T12444] loop2: detected capacity change from 0 to 4096 [ 150.007573][ T4232] usb 1-1: Using ep0 maxpacket: 8 [ 150.089506][T12444] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 150.127939][ T4232] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 150.173980][ T4232] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 150.238400][ T4232] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 150.282332][T12466] loop1: detected capacity change from 0 to 512 [ 150.289560][ T4232] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 150.313586][ T4232] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 150.326214][ T4232] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 150.365105][ T4232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.395670][T12474] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2572'. [ 150.408502][ T4232] usb 1-1: config 0 descriptor?? [ 150.427926][T12400] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 150.466428][T12474] openvswitch: netlink: Missing key (keys=40, expected=80) [ 150.484433][T12466] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 150.537493][T12466] ext4 filesystem being mounted at /512/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.919541][ T4232] usb 1-1: USB disconnect, device number 14 [ 150.957378][T12532] xt_TCPMSS: Only works on TCP SYN packets [ 151.304382][T12563] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2597'. [ 151.391193][T12563] batman_adv: Cannot find parent device [ 151.508745][T12570] xt_CT: No such helper "snmp_trap" [ 151.592987][T12586] netlink: 'syz.0.2603': attribute type 8 has an invalid length. [ 151.791880][T12605] netlink: 'syz.3.2609': attribute type 3 has an invalid length. [ 152.224886][T12642] loop4: detected capacity change from 0 to 1024 [ 152.535435][T12664] openvswitch: netlink: Message has 8 unknown bytes. [ 152.558304][T12664] openvswitch: netlink: Actions may not be safe on all matching packets [ 152.779274][T12679] loop2: detected capacity change from 0 to 512 [ 152.896995][T12603] syz.0.2608 (12603): drop_caches: 2 [ 152.904695][ T9002] hfsplus: b-tree write err: -5, ino 25 [ 152.925285][ T9002] hfsplus: b-tree write err: -5, ino 4 [ 152.948896][T12679] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 152.997452][ T9002] hfsplus: b-tree write err: -5, ino 2 [ 152.998746][T12679] ext4 filesystem being mounted at /487/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 153.110943][T12679] EXT4-fs error (device loop2): ext4_validate_block_bitmap:420: comm syz.2.2634: bg 0: bad block bitmap checksum [ 153.186871][T12679] Quota error (device loop2): write_blk: dquota write failed [ 153.197662][T12679] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 153.227746][T12679] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.2634: Failed to acquire dquot type 1 [ 153.338537][ T4172] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 153.607366][ T4172] usb 2-1: Using ep0 maxpacket: 32 [ 153.794511][ T4172] usb 2-1: unable to get BOS descriptor or descriptor too short [ 154.061117][ T4172] usb 2-1: New USB device found, idVendor=0b05, idProduct=17a0, bcdDevice= 0.40 [ 154.080777][ T4172] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.122766][ T4172] usb 2-1: Product: syz [ 154.140279][ T4172] usb 2-1: Manufacturer: syz [ 154.145049][ T4172] usb 2-1: SerialNumber: syz [ 154.303504][T12829] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.2680'. [ 154.558676][ T4172] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 154.574233][T12798] loop3: detected capacity change from 0 to 32768 [ 154.594640][T12798] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.2671 (12798) [ 154.607697][ T4172] usb 2-1: 2:1 : no UAC_FORMAT_TYPE desc [ 154.632901][T12857] netlink: 'syz.0.2686': attribute type 3 has an invalid length. [ 154.667628][ T4229] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 154.675399][ T4172] usb 2-1: USB disconnect, device number 13 [ 154.685139][T12857] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.2686'. [ 154.706426][T12798] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 154.717198][T12798] BTRFS info (device loop3): using free space tree [ 154.744989][T12798] BTRFS info (device loop3): has skinny extents [ 154.959401][ T6155] udevd[6155]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 155.063611][T12919] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2694'. [ 155.086753][T12798] BTRFS info (device loop3): enabling ssd optimizations [ 155.217399][ T4229] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 155.226478][ T4229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.248567][ T4229] usb 3-1: Product: syz [ 155.252779][ T4229] usb 3-1: Manufacturer: syz [ 155.267283][ T4229] usb 3-1: SerialNumber: syz [ 155.329182][ T4229] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 155.834091][T12957] syz.4.2703 (12957): drop_caches: 2 [ 156.044714][T12977] device geneve1 entered promiscuous mode [ 156.117421][ T1107] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 156.147734][T12990] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 156.215292][T12996] device vlan0 entered promiscuous mode [ 156.353265][T13008] netlink: 'syz.3.2719': attribute type 2 has an invalid length. [ 156.393810][T13008] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2719'. [ 156.526422][ T4261] usb 3-1: USB disconnect, device number 12 [ 157.157360][ T1107] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 157.165344][ T1107] ath9k_htc: Failed to initialize the device [ 157.206319][ T4261] usb 3-1: ath9k_htc: USB layer deinitialized [ 157.283345][T13110] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2751'. [ 157.311436][T13095] loop4: detected capacity change from 0 to 4096 [ 157.406636][T13122] netdevsim netdevsim3: Firmware load for '..' refused, path contains '..' component [ 157.440923][T13095] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 157.466125][T13095] ntfs3: loop4: mft corrupted [ 157.482317][T13095] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 157.523472][T13095] ntfs3: loop4: Failed to load $BadClus. [ 157.807499][T13159] loop1: detected capacity change from 0 to 2048 [ 157.868319][T13159] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 158.106521][T13198] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2780'. [ 158.143966][T13203] loop2: detected capacity change from 0 to 256 [ 158.233240][T13203] FAT-fs (loop2): Directory bread(block 64) failed [ 158.244823][T13203] FAT-fs (loop2): Directory bread(block 65) failed [ 158.252084][T13203] FAT-fs (loop2): Directory bread(block 66) failed [ 158.264392][T13203] FAT-fs (loop2): Directory bread(block 67) failed [ 158.273703][T13203] FAT-fs (loop2): Directory bread(block 68) failed [ 158.297322][T13203] FAT-fs (loop2): Directory bread(block 69) failed [ 158.303956][T13203] FAT-fs (loop2): Directory bread(block 70) failed [ 158.344808][T13203] FAT-fs (loop2): Directory bread(block 71) failed [ 158.399416][T13203] FAT-fs (loop2): Directory bread(block 72) failed [ 158.423264][T13203] FAT-fs (loop2): Directory bread(block 73) failed [ 158.520258][T13225] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.2787'. [ 158.587994][T13229] syz.2.2785 (13229): drop_caches: 2 [ 158.784530][T13253] device vlan0 entered promiscuous mode [ 158.930262][T13270] netlink: 'syz.1.2799': attribute type 1 has an invalid length. [ 159.062141][T13288] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2806'. [ 159.291447][ T4261] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 159.348454][T13308] device vlan0 entered promiscuous mode [ 159.592686][T13322] xt_CT: No such helper "snmp" [ 159.627586][T13330] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2819'. [ 159.633499][T13278] loop3: detected capacity change from 0 to 32768 [ 159.713471][T13278] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.2802 (13278) [ 159.726361][ T4261] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 159.755740][ T4261] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 159.777548][T13278] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 159.807027][T13278] BTRFS info (device loop3): using free space tree [ 159.832485][T13278] BTRFS info (device loop3): has skinny extents [ 159.947593][ T4261] usb 3-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 159.956706][ T4261] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.978242][T13370] loop0: detected capacity change from 0 to 256 [ 160.002341][ T4261] usb 3-1: Product: syz [ 160.035380][ T4261] usb 3-1: Manufacturer: syz [ 160.042544][T13370] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf3da6b1f, utbl_chksum : 0xe619d30d) [ 160.082668][ T4261] usb 3-1: SerialNumber: syz [ 160.087562][T13278] BTRFS info (device loop3): enabling ssd optimizations [ 160.105198][ T4261] usb 3-1: config 0 descriptor?? [ 160.149316][ T4261] powermate: probe of 3-1:0.0 failed with error -5 [ 160.270496][T13339] loop1: detected capacity change from 0 to 32768 [ 160.363069][ T4261] usb 3-1: USB disconnect, device number 13 [ 160.390829][T13401] loop0: detected capacity change from 0 to 256 [ 160.443977][T13339] XFS (loop1): Mounting V5 Filesystem [ 160.536499][T13401] FAT-fs (loop0): Directory bread(block 64) failed [ 160.610168][T13401] FAT-fs (loop0): Directory bread(block 65) failed [ 160.616891][T13401] FAT-fs (loop0): Directory bread(block 66) failed [ 160.648655][T13401] FAT-fs (loop0): Directory bread(block 67) failed [ 160.697497][T13401] FAT-fs (loop0): Directory bread(block 68) failed [ 160.704068][T13401] FAT-fs (loop0): Directory bread(block 69) failed [ 160.788069][T13401] FAT-fs (loop0): Directory bread(block 70) failed [ 160.797062][T13401] FAT-fs (loop0): Directory bread(block 71) failed [ 160.813603][T13401] FAT-fs (loop0): Directory bread(block 72) failed [ 160.815415][ T4173] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop3 scanned by udevd (4173) [ 160.846042][T13401] FAT-fs (loop0): Directory bread(block 73) failed [ 160.862868][T13426] exfat: Deprecated parameter 'debug' [ 160.869086][T13339] XFS (loop1): Ending clean mount [ 160.879778][T13426] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.904806][T13426] exFAT-fs (loop4): unable to read boot sector [ 160.925404][T13426] exFAT-fs (loop4): failed to read boot sector [ 160.952759][T13426] exFAT-fs (loop4): failed to recognize exfat type [ 160.965707][ T26] audit: type=1800 audit(1776788602.201:17): pid=13401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2833" name="file1" dev="loop0" ino=1048613 res=0 errno=0 [ 161.056360][ T4183] XFS (loop1): Unmounting Filesystem [ 161.296792][T13460] xt_connbytes: Forcing CT accounting to be enabled [ 161.711716][T13498] netlink: 'syz.3.2858': attribute type 2 has an invalid length. [ 161.747384][T13498] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2858'. [ 161.805010][T13507] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2861'. [ 161.843000][T13507] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 162.087775][T13525] loop2: detected capacity change from 0 to 1024 [ 162.183528][T13525] hfsplus: Filesystem is marked locked, mounting read-only. [ 162.220464][T13525] hfsplus: filesystem is marked locked, leaving read-only. [ 162.249716][T13555] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 162.507864][ T1107] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 162.546966][T13595] loop3: detected capacity change from 0 to 24 [ 162.593807][T13595] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 162.634096][T13595] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 162.752208][ T1107] usb 5-1: Using ep0 maxpacket: 8 [ 162.877561][ T1107] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 162.908752][ T1107] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 162.930252][ T1107] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 162.961453][ T1107] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 162.977129][ T1107] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 162.999856][ T1107] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 163.015252][ T1107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.041521][ T1107] usb 5-1: config 0 descriptor?? [ 163.067836][T13552] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 163.109667][T13640] netlink: 'syz.3.2902': attribute type 1 has an invalid length. [ 163.180917][T11826] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 163.267798][T13657] netlink: 'syz.3.2906': attribute type 8 has an invalid length. [ 163.276020][T13657] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.2906'. [ 163.587450][T11826] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 163.609763][ T4232] usb 5-1: USB disconnect, device number 14 [ 163.612984][T11826] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.636471][T11826] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 163.682702][T11826] usb 2-1: config 1 has no interface number 1 [ 163.697690][T11826] usb 2-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 163.744749][T11826] usb 2-1: config 1 interface 105 has no altsetting 0 [ 163.880495][T13666] loop2: detected capacity change from 0 to 32768 [ 163.947695][T11826] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 163.963946][T11826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.993438][T13666] XFS (loop2): Mounting V5 Filesystem [ 163.999010][T11826] usb 2-1: Product: syz [ 164.004163][T11826] usb 2-1: Manufacturer: syz [ 164.029255][T11826] usb 2-1: SerialNumber: syz [ 164.058897][T13666] XFS (loop2): Ending clean mount [ 164.085989][T13666] XFS (loop2): Quotacheck needed: Please wait. [ 164.200783][T13666] XFS (loop2): Quotacheck: Done. [ 164.255188][ T4184] XFS (loop2): Unmounting Filesystem [ 164.347544][T11826] aqc111: probe of 2-1:1.105 failed with error -22 [ 164.377644][T11825] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 164.627038][T11826] usb 2-1: USB disconnect, device number 14 [ 164.661398][T13746] netlink: 'syz.4.2928': attribute type 3 has an invalid length. [ 164.893686][T13768] device bridge2 entered promiscuous mode [ 164.947567][T11825] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 164.969545][T11825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.000926][T11825] usb 4-1: Product: syz [ 165.005135][T11825] usb 4-1: Manufacturer: syz [ 165.037356][T11825] usb 4-1: SerialNumber: syz [ 165.108310][T11825] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 165.135653][T13776] loop0: detected capacity change from 0 to 4096 [ 165.158466][T13797] device netdevsim0 entered promiscuous mode [ 165.165906][T13797] batman_adv: batadv0: Removing interface: netdevsim0 [ 165.179245][T13797] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 165.199806][T13776] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 165.230301][T13776] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 165.230827][T13796] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 165.279041][T13776] ntfs: volume version 0.0. [ 165.787578][T11826] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 165.868458][ T4229] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 166.016968][T13896] loop4: detected capacity change from 0 to 64 [ 166.089847][T13896] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 166.109637][T13896] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 166.194397][T11828] usb 4-1: USB disconnect, device number 10 [ 166.237498][ T4229] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.437864][ T4229] usb 1-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 166.446979][ T4229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.459507][ T4229] usb 1-1: Product: syz [ 166.463712][ T4229] usb 1-1: Manufacturer: syz [ 166.477309][ T4229] usb 1-1: SerialNumber: syz [ 166.487197][ T4229] usb 1-1: config 0 descriptor?? [ 166.607339][T11825] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 166.635815][T13959] loop4: detected capacity change from 0 to 1024 [ 166.671751][T13959] hfsplus: Filesystem is marked locked, mounting read-only. [ 166.700240][T13959] hfsplus: filesystem is marked locked, leaving read-only. [ 166.757688][ T4229] cdc_subset: probe of 1-1:0.0 failed with error -22 [ 166.798763][T13972] device netdevsim0 entered promiscuous mode [ 166.857390][T11826] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 166.864526][T11826] ath9k_htc: Failed to initialize the device [ 166.900312][T11825] usb 2-1: Using ep0 maxpacket: 16 [ 166.908304][T11828] usb 4-1: ath9k_htc: USB layer deinitialized [ 166.974784][ T13] usb 1-1: USB disconnect, device number 15 [ 167.047691][T11825] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.074156][T11825] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 167.277689][T11825] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 167.294048][T11825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.312515][T11825] usb 2-1: Product: syz [ 167.316727][T11825] usb 2-1: Manufacturer: syz [ 167.331155][T11825] usb 2-1: SerialNumber: syz [ 167.694236][T11825] usb 2-1: 0:2 : does not exist [ 167.747509][T11825] usb 2-1: USB disconnect, device number 15 [ 167.937454][ T13] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 167.945270][T14080] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3012'. [ 168.033003][ T6155] udevd[6155]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 168.207470][ T21] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 168.207569][ T13] usb 4-1: Using ep0 maxpacket: 8 [ 168.407745][ T13] usb 4-1: unable to get BOS descriptor or descriptor too short [ 168.525590][ T13] usb 4-1: config 4 has an invalid interface number: 177 but max is 1 [ 168.542028][ T13] usb 4-1: config 4 has no interface number 1 [ 168.556992][ T13] usb 4-1: config 4 interface 177 has no altsetting 0 [ 168.563985][ T13] usb 4-1: config 4 interface 0 has no altsetting 0 [ 168.649873][T14144] netlink: 'syz.1.3032': attribute type 1 has an invalid length. [ 168.741939][ T21] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 168.767316][ T13] usb 4-1: New USB device found, idVendor=413c, idProduct=81cc, bcdDevice=b7.34 [ 168.772291][ T21] usb 1-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 168.776424][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.776445][ T13] usb 4-1: Product: syz [ 168.776460][ T13] usb 4-1: Manufacturer: syz [ 168.776473][ T13] usb 4-1: SerialNumber: syz [ 168.813053][T14161] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3037'. [ 168.822979][T14161] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3037'. [ 168.832642][ T21] usb 1-1: Product: syz [ 168.837809][ T21] usb 1-1: Manufacturer: syz [ 168.842521][ T21] usb 1-1: SerialNumber: syz [ 168.909388][ T21] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 168.931879][T14172] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3040'. [ 168.956510][T14172] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3040'. [ 169.077405][T11826] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 169.117518][ T21] vp7045: USB control message 'out' went wrong. [ 169.123969][ T21] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 169.141148][T14192] netlink: 'syz.2.3046': attribute type 6 has an invalid length. [ 169.156179][ T21] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 169.165880][T14192] netlink: 'syz.2.3046': attribute type 7 has an invalid length. [ 169.194899][T14192] netlink: 'syz.2.3046': attribute type 8 has an invalid length. [ 169.194921][ T21] usb 1-1: USB disconnect, device number 16 [ 169.208328][ T13] usb 4-1: selecting invalid altsetting 0 [ 169.224559][ T13] usb 4-1: Could not set interface, error -22 [ 169.234901][T14199] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 169.256459][ T13] usb 4-1: USB disconnect, device number 11 [ 169.357700][T11826] usb 2-1: Using ep0 maxpacket: 32 [ 169.507488][T11826] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.687495][T11826] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 169.694672][T14220] netlink: 'syz.2.3052': attribute type 1 has an invalid length. [ 169.696824][T11826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.733974][T11826] usb 2-1: Product: syz [ 169.744101][T11826] usb 2-1: Manufacturer: syz [ 169.765160][T11826] usb 2-1: SerialNumber: syz [ 169.784025][T11826] usb 2-1: config 0 descriptor?? [ 169.841110][T11826] usb 2-1: bad CDC descriptors [ 169.846353][T11826] usb 2-1: unsupported MDLM descriptors [ 170.055954][T11825] usb 2-1: USB disconnect, device number 16 [ 170.806319][T14322] loop1: detected capacity change from 0 to 256 [ 170.908649][T14322] FAT-fs (loop1): Directory bread(block 64) failed [ 170.940094][T14322] FAT-fs (loop1): Directory bread(block 65) failed [ 170.946690][T14322] FAT-fs (loop1): Directory bread(block 66) failed [ 170.960738][T14322] FAT-fs (loop1): Directory bread(block 67) failed [ 170.976869][T14322] FAT-fs (loop1): Directory bread(block 68) failed [ 171.008180][T14322] FAT-fs (loop1): Directory bread(block 69) failed [ 171.026053][T14322] FAT-fs (loop1): Directory bread(block 70) failed [ 171.052828][T14322] FAT-fs (loop1): Directory bread(block 71) failed [ 171.092386][T14322] FAT-fs (loop1): Directory bread(block 72) failed [ 171.106916][T14337] device ip6gre1 entered promiscuous mode [ 171.124981][T14322] FAT-fs (loop1): Directory bread(block 73) failed [ 171.399709][ T1107] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 171.452789][T14370] loop1: detected capacity change from 0 to 1024 [ 171.667577][T11825] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 171.687352][ T1107] usb 3-1: Using ep0 maxpacket: 8 [ 171.907478][T11825] usb 1-1: Using ep0 maxpacket: 32 [ 171.908029][ T4233] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 172.017579][ T1107] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 172.027723][T11825] usb 1-1: config 0 has an invalid interface number: 83 but max is 0 [ 172.036138][ T1107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.043534][T11825] usb 1-1: config 0 has no interface number 0 [ 172.053948][T11825] usb 1-1: config 0 interface 83 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 172.065180][ T1107] usb 3-1: Product: syz [ 172.065214][ T1107] usb 3-1: Manufacturer: syz [ 172.065229][ T1107] usb 3-1: SerialNumber: syz [ 172.078733][ T1107] usb 3-1: config 0 descriptor?? [ 172.112154][T11825] usb 1-1: config 0 interface 83 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 172.126206][T11825] usb 1-1: config 0 interface 83 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 172.132596][T14406] loop4: detected capacity change from 0 to 32768 [ 172.165436][T14426] SET target dimension over the limit! [ 172.231953][T14431] dlm: no locking on control device [ 172.297491][T11825] usb 1-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 172.310046][T14436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3118'. [ 172.314433][T11825] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.331064][T11825] usb 1-1: Product: syz [ 172.337564][T11825] usb 1-1: Manufacturer: syz [ 172.342202][T11825] usb 1-1: SerialNumber: syz [ 172.358324][ T1107] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 172.388193][T11825] usb 1-1: config 0 descriptor?? [ 172.415019][T14443] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 172.429169][T11825] redrat3 1-1:0.83: Couldn't find all endpoints [ 172.435357][T14443] overlayfs: conflicting options: userxattr,metacopy=on [ 172.491066][T14450] loop4: detected capacity change from 0 to 8 [ 172.519931][ T4233] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 172.540889][ T4233] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.560096][ T4233] usb 4-1: Product: syz [ 172.567558][ T1107] usb write operation failed. (-71) [ 172.585619][ T4233] usb 4-1: Manufacturer: syz [ 172.593536][ T1107] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 172.614242][ T4233] usb 4-1: SerialNumber: syz [ 172.632323][ T1107] dvbdev: DVB: registering new adapter (Terratec H7) [ 172.633610][T11825] usb 1-1: USB disconnect, device number 17 [ 172.654445][ T1107] usb 3-1: media controller created [ 172.679605][ T4233] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 172.688506][ T1107] usb read operation failed. (-71) [ 172.707624][ T1107] usb write operation failed. (-71) [ 172.725801][ T1107] dvb_usb_az6007: probe of 3-1:0.0 failed with error -5 [ 172.776602][ T1107] usb 3-1: USB disconnect, device number 14 [ 172.964833][T14510] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3131'. [ 173.065923][T14518] netlink: 292 bytes leftover after parsing attributes in process `syz.1.3134'. [ 173.110136][T14522] loop4: detected capacity change from 0 to 64 [ 173.297621][ T4233] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 173.581719][T14568] tmpfs: Bad value for 'mpol' [ 173.661826][T14579] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3154'. [ 173.820474][ T4229] usb 4-1: USB disconnect, device number 12 [ 174.007446][ T23] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 174.332538][T14650] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3175'. [ 174.399272][ T23] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 174.410976][ T23] usb 2-1: config 0 has no interface number 0 [ 174.432999][ T23] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 174.459064][ T23] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 174.475707][ T23] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 174.487922][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.505139][ T23] usb 2-1: config 0 descriptor?? [ 174.561545][ T23] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 174.597355][ T4233] usb 4-1: Service connection timeout for: 256 [ 174.610314][ T4233] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 174.635901][T14672] loop4: detected capacity change from 0 to 16 [ 174.646897][ T4233] ath9k_htc: Failed to initialize the device [ 174.677042][ T4229] usb 4-1: ath9k_htc: USB layer deinitialized [ 174.707593][T14672] erofs: (device loop4): mounted with root inode @ nid 36. [ 174.733061][T14672] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 174.769582][T14672] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 174.793026][T14636] loop0: detected capacity change from 0 to 32768 [ 174.795116][T14586] iowarrior 2-1:0.1: Error -90 while submitting URB [ 174.824846][T14607] usb 2-1: USB disconnect, device number 17 [ 174.844158][T14691] loop2: detected capacity change from 0 to 128 [ 174.914805][T14691] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 174.945048][T14691] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 175.012152][T14636] XFS (loop0): Mounting V5 Filesystem [ 175.100309][T14636] XFS (loop0): Ending clean mount [ 175.107447][ T4229] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 175.224099][ T4188] XFS (loop0): Unmounting Filesystem [ 175.578222][ T4229] usb 4-1: Using ep0 maxpacket: 8 [ 175.707536][ T4229] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 175.730479][ T4229] usb 4-1: config 0 has no interface number 0 [ 175.761629][T14756] loop1: detected capacity change from 0 to 1764 [ 175.818687][T11825] Bluetooth: hci1: command 0x0406 tx timeout [ 175.824793][T11825] Bluetooth: hci0: command 0x0406 tx timeout [ 175.866118][T11825] Bluetooth: hci2: command 0x0406 tx timeout [ 175.887744][T11825] Bluetooth: hci3: command 0x0406 tx timeout [ 175.937723][ T4229] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 175.964154][ T4229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.993546][ T4229] usb 4-1: Product: syz [ 176.008456][ T4229] usb 4-1: Manufacturer: syz [ 176.013283][ T4229] usb 4-1: SerialNumber: syz [ 176.078436][ T4229] usb 4-1: config 0 descriptor?? [ 176.275518][T14807] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3212'. [ 176.347855][ T4229] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 176.354664][ T4229] usb 4-1: No valid video chain found. [ 176.558135][T11825] usb 4-1: USB disconnect, device number 13 [ 176.758902][T14791] loop2: detected capacity change from 0 to 32768 [ 176.802141][ T13] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 176.829235][T14791] [ 176.829235][T14791] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 176.829235][T14791] [ 176.849321][T14847] loop0: detected capacity change from 0 to 4096 [ 176.878362][T14791] jfs_lookup: dtSearch returned -5 [ 176.915692][ T4184] [ 176.915692][ T4184] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 176.915692][ T4184] [ 176.935130][ T4184] [ 176.935130][ T4184] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 176.935130][ T4184] [ 176.956874][T14847] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 177.023040][T14863] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3229'. [ 177.064618][T14847] ntfs3: loop0: failed to convert "c46c" to macroman [ 177.067320][ T13] usb 5-1: Using ep0 maxpacket: 16 [ 177.072391][T14863] netlink: 'syz.1.3229': attribute type 1 has an invalid length. [ 177.197541][ T13] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.225302][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 255, changing to 11 [ 177.267596][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 57872, setting to 1024 [ 177.326992][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 177.377141][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 177.427316][ T13] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 177.477414][ T13] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 177.514378][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.524105][T14876] loop1: detected capacity change from 0 to 4096 [ 177.543019][ T13] usb 5-1: config 0 descriptor?? [ 177.700521][T14914] qrtr: Invalid version 0 [ 177.747356][ T13] rc_core: IR keymap rc-hauppauge not found [ 177.753350][ T13] Registered IR keymap rc-empty [ 177.787527][ T13] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 177.837538][ T13] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 177.887531][ T13] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 177.934744][ T13] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input14 [ 177.950179][T14919] loop0: detected capacity change from 0 to 4096 [ 178.009579][ T13] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 178.027310][ C0] mceusb 5-1:0.0: Error: urb status = -75 [ 178.043855][ T13] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 178.100563][ T13] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 178.157745][ T13] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 178.198077][ T13] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 178.227509][ T13] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 178.288012][ T13] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 178.327412][ T13] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 178.364647][T14971] loop2: detected capacity change from 0 to 1024 [ 178.377459][ T13] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 178.407368][ T13] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 178.445128][ T13] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 178.500579][ T13] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 178.510330][T14992] loop0: detected capacity change from 0 to 2048 [ 178.531692][ T1228] hfsplus: b-tree write err: -5, ino 25 [ 178.541479][ T1228] hfsplus: b-tree write err: -5, ino 4 [ 178.548631][ T13] usb 5-1: USB disconnect, device number 15 [ 178.556466][T14992] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 178.576237][ T1228] hfsplus: b-tree write err: -5, ino 2 [ 178.637375][ T4233] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 178.830018][ T26] audit: type=1400 audit(1776788620.061:18): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=15025 comm="syz.1.3272" [ 179.067636][ T4233] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.095063][ T4233] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 179.146045][T15052] loop0: detected capacity change from 0 to 1764 [ 179.228187][T15052] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 179.307781][ T4233] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 179.317072][ T4233] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.356324][ T4233] usb 4-1: Product: syz [ 179.363911][ T4233] usb 4-1: Manufacturer: syz [ 179.374023][ T4233] usb 4-1: SerialNumber: syz [ 179.459416][T15081] ceph: No source [ 179.467404][T11826] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 179.602329][T15095] netlink: 'syz.2.3292': attribute type 1 has an invalid length. [ 179.877478][T11826] usb 5-1: unable to get BOS descriptor or descriptor too short [ 179.907540][ T4233] usb 4-1: 0:2 : does not exist [ 179.957622][T11826] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 185, changing to 7 [ 179.988242][ T4233] usb 4-1: USB disconnect, device number 14 [ 180.097880][T15154] openvswitch: netlink: Missing key (keys=40, expected=100) [ 180.147563][ T4232] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 180.217727][T11826] usb 5-1: string descriptor 0 read error: -22 [ 180.224187][T11826] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 180.239602][ T4173] udevd[4173]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 180.242006][T11826] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.330206][T11826] usb 5-1: selecting invalid altsetting 1 [ 180.336357][T11826] usb 5-1: unit 3 not found! [ 180.417412][ T4232] usb 1-1: Using ep0 maxpacket: 8 [ 180.507749][ T4233] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 180.537511][T11826] usb 5-1: unit 84 not found! [ 180.542272][T11826] usb 5-1: unit 89 not found! [ 180.548006][ T4232] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.561269][T11826] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 180.581525][T11826] usb 5-1: selecting invalid altsetting 1 [ 180.583304][ T4232] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 180.596876][T15186] loop3: detected capacity change from 0 to 4096 [ 180.609147][T11826] usb 5-1: unit 3 not found! [ 180.629993][T15186] ntfs3: loop3: ino=3, Correct links count -> 2. [ 180.642965][ T4232] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.664044][ T4232] usb 1-1: config 0 interface 0 has no altsetting 0 [ 180.694821][T15186] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 180.767408][T11826] usb 5-1: cannot request logical cluster ID: 35217 (err: -71) [ 180.779413][T11826] usb 5-1: invalid MIXER UNIT descriptor 6 [ 180.801614][T11826] snd-usb-audio: probe of 5-1:1.1 failed with error -71 [ 180.828457][T11826] usb 5-1: selecting invalid altsetting 1 [ 180.843404][ T4232] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 180.849213][T11826] usb 5-1: unit 3 not found! [ 180.863479][ T4232] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.885720][ T4232] usb 1-1: Product: syz [ 180.897291][ T4232] usb 1-1: Manufacturer: syz [ 180.897430][T11826] usb 5-1: cannot request logical cluster ID: 35217 (err: -71) [ 180.902007][ T4232] usb 1-1: SerialNumber: syz [ 180.915472][ T4233] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 180.919623][T15207] loop2: detected capacity change from 0 to 4096 [ 180.938799][ T4232] usb 1-1: config 0 descriptor?? [ 180.948949][T11826] usb 5-1: invalid MIXER UNIT descriptor 6 [ 180.980245][ T4232] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 181.008630][T11826] snd-usb-audio: probe of 5-1:1.2 failed with error -71 [ 181.073562][T11826] usb 5-1: USB disconnect, device number 16 [ 181.131160][ T4173] udevd[4173]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 181.147384][ T4233] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 181.157833][ T4233] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 181.168792][ T4233] usb 2-1: Product: syz [ 181.173125][ T4233] usb 2-1: Manufacturer: syz [ 181.193711][ T4233] usb 2-1: SerialNumber: syz [ 181.200455][ T4232] snd_usb_toneport 1-1:0.0: cannot get proper max packet size [ 181.210396][ T4232] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 181.223138][ T4233] usb 2-1: config 0 descriptor?? [ 181.239761][ T4232] snd_usb_toneport: probe of 1-1:0.0 failed with error -22 [ 181.261900][T15166] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 181.517489][ T4233] usb 1-1: USB disconnect, device number 18 [ 181.560736][T11826] usb 2-1: USB disconnect, device number 18 [ 181.562623][T15252] loop4: detected capacity change from 0 to 1024 [ 181.622636][T15252] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 181.726944][T15270] netlink: 'syz.2.3327': attribute type 1 has an invalid length. [ 182.114061][T15299] tmpfs: Bad value for 'mpol' [ 182.373408][T15319] netlink: 'syz.2.3344': attribute type 32 has an invalid length. [ 182.589834][T15342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3351'. [ 182.659612][T15342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3351'. [ 182.705189][T15348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.771000][T15356] loop0: detected capacity change from 0 to 256 [ 182.782191][T15243] loop3: detected capacity change from 0 to 32768 [ 182.807422][T11826] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 182.946319][T15356] FAT-fs (loop0): Directory bread(block 64) failed [ 182.987427][T15356] FAT-fs (loop0): Directory bread(block 65) failed [ 182.999391][T15243] XFS (loop3): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 183.027457][T15243] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 183.031656][T15356] FAT-fs (loop0): Directory bread(block 66) failed [ 183.069370][T15356] FAT-fs (loop0): Directory bread(block 67) failed [ 183.076163][T15356] FAT-fs (loop0): Directory bread(block 68) failed [ 183.083382][T15356] FAT-fs (loop0): Directory bread(block 69) failed [ 183.091757][T15356] FAT-fs (loop0): Directory bread(block 70) failed [ 183.098899][T15356] FAT-fs (loop0): Directory bread(block 71) failed [ 183.099286][T15243] XFS (loop3): DAX and reflink cannot be used together! [ 183.106067][T15356] FAT-fs (loop0): Directory bread(block 72) failed [ 183.121121][T15356] FAT-fs (loop0): Directory bread(block 73) failed [ 183.167603][T11826] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 183.207388][T11826] usb 2-1: config 0 has no interface number 0 [ 183.213546][T11826] usb 2-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 183.296506][T11826] usb 2-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 183.352372][T11826] usb 2-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64 [ 183.399252][T11826] usb 2-1: config 0 interface 2 has no altsetting 0 [ 183.589739][T11826] usb 2-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 183.617529][T11826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.641264][T15410] netlink: 'syz.0.3370': attribute type 3 has an invalid length. [ 183.656263][T11826] usb 2-1: Product: syz [ 183.684565][T11826] usb 2-1: Manufacturer: syz [ 183.707612][T11826] usb 2-1: SerialNumber: syz [ 183.764713][T11826] usb 2-1: config 0 descriptor?? [ 183.802068][T15335] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 183.818016][T15335] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 183.937422][ T4232] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 184.217525][ T4232] usb 5-1: Using ep0 maxpacket: 32 [ 184.297503][T14607] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 184.337654][ T4232] usb 5-1: config 15 has an invalid interface number: 78 but max is 1 [ 184.346970][ T4232] usb 5-1: config 15 has an invalid interface number: 2 but max is 1 [ 184.347624][T11826] usb 2-1: USB disconnect, device number 19 [ 184.363782][ T4232] usb 5-1: config 15 has no interface number 0 [ 184.371237][ T4232] usb 5-1: config 15 has no interface number 1 [ 184.391314][ T4232] usb 5-1: config 15 interface 78 has no altsetting 0 [ 184.409783][ T4232] usb 5-1: config 15 interface 2 has no altsetting 0 [ 184.597808][ T4232] usb 5-1: New USB device found, idVendor=413c, idProduct=81cf, bcdDevice=d4.09 [ 184.617589][ T4232] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.625902][ T4232] usb 5-1: Product: syz [ 184.657004][ T4232] usb 5-1: Manufacturer: syz [ 184.676258][ T4232] usb 5-1: SerialNumber: syz [ 184.717791][T14607] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.764245][T14607] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 184.774598][T14607] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 184.795108][T14607] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.831755][T14607] usb 1-1: config 0 descriptor?? [ 185.053019][ T4232] usb 5-1: selecting invalid altsetting 0 [ 185.069884][ T4232] usb 5-1: Could not set interface, error -22 [ 185.097130][ T4232] usb 5-1: USB disconnect, device number 17 [ 185.103604][T14607] Bluetooth: Can't get state to change to load ram patch err [ 185.117286][T14607] Bluetooth: Loading patch file failed [ 185.129075][T14607] ath3k: probe of 1-1:0.0 failed with error -71 [ 185.146789][T14607] usb 1-1: USB disconnect, device number 19 [ 185.156959][T15543] netlink: 'syz.3.3399': attribute type 11 has an invalid length. [ 185.416216][T15569] IPv6: NLM_F_CREATE should be specified when creating new route [ 185.434466][T15569] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 185.441764][T15569] IPv6: NLM_F_CREATE should be set when creating new route [ 185.449085][T15569] IPv6: NLM_F_CREATE should be set when creating new route [ 185.456317][T15569] IPv6: NLM_F_CREATE should be set when creating new route [ 185.484048][T15572] binder: Bad value for 'max' [ 185.665895][T15584] JFS: discard option not supported on device [ 185.755473][T15593] loop4: detected capacity change from 0 to 2048 [ 185.827689][T15584] Mount JFS Failure: -22 [ 185.847361][T15584] jfs_mount failed w/return code = -22 [ 185.930343][T15613] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3423'. [ 186.052090][T15631] loop0: detected capacity change from 0 to 256 [ 186.114105][T15638] usb usb8: check_ctrlrecip: process 15638 (syz.3.3430) requesting ep 01 but needs 81 [ 186.150112][T15631] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 186.166547][T15631] FAT-fs (loop0): Filesystem has been set read-only [ 186.204071][T15638] usb usb8: usbfs: process 15638 (syz.3.3430) did not claim interface 0 before use [ 186.420239][T15667] loop3: detected capacity change from 0 to 512 [ 186.433834][T15647] loop1: detected capacity change from 0 to 4096 [ 186.478767][T15667] EXT4-fs (loop3): Ignoring removed bh option [ 186.485006][T15667] EXT4-fs (loop3): inline encryption not supported [ 186.504306][T15667] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 186.528547][T15647] ntfs3: loop1: ino=3, Correct links count -> 2. [ 186.605595][T15667] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 186.683690][T15697] SET target dimension over the limit! [ 186.735380][T15647] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 186.807663][T15667] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.3438: bg 0: block 248: padding at end of block bitmap is not set [ 187.023072][T15667] Quota error (device loop3): write_blk: dquota write failed [ 187.067443][T15667] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 187.121605][T15667] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.3438: Failed to acquire dquot type 1 [ 187.247566][T15667] EXT4-fs (loop3): 1 truncate cleaned up [ 187.258422][T15723] netlink: 'syz.2.3456': attribute type 1 has an invalid length. [ 187.278870][T15723] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3456'. [ 187.298659][T15667] EXT4-fs (loop3): mounted filesystem without journal. Opts: bh,inlinecrypt,nombcache,,errors=continue. Quota mode: writeback. [ 187.436899][ T4226] Quota error (device loop3): remove_tree: Getting block too big (0 >= 6) [ 187.467541][ T4226] EXT4-fs error (device loop3): ext4_release_dquot:6272: comm kworker/u4:4: Failed to release dquot type 1 [ 187.470709][T15677] loop4: detected capacity change from 0 to 32768 [ 187.628411][T15677] [ 187.628411][T15677] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 187.628411][T15677] [ 187.667786][T15677] jfs_lookup: dtSearch returned -5 [ 187.683687][T15744] loop0: detected capacity change from 0 to 4096 [ 187.705048][ T4195] [ 187.705048][ T4195] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 187.705048][ T4195] [ 187.744412][ T4195] [ 187.744412][ T4195] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 187.744412][ T4195] [ 187.778015][T15744] ntfs3: loop0: ino=3, Correct links count -> 2. [ 187.813277][T15764] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3468'. [ 187.847538][T11826] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 187.888949][T15744] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 187.932974][T15771] loop3: detected capacity change from 0 to 16 [ 187.991310][T15771] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 188.024605][T15771] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 188.051059][T15771] erofs: (device loop3): check_layout_compatibility: unidentified incompatible feature 8, please upgrade kernel version [ 188.162705][T15789] tmpfs: Bad value for 'mpol' [ 188.237547][T11826] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.279833][T11826] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 188.487633][T11826] usb 2-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 188.531084][T11826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.572396][T11826] usb 2-1: Product: syz [ 188.582531][T11826] usb 2-1: Manufacturer: syz [ 188.587187][T11826] usb 2-1: SerialNumber: syz [ 188.946118][T15869] netlink: 'syz.2.3499': attribute type 5 has an invalid length. [ 188.948477][T15871] (syz.3.3500,15871,1):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 188.987507][T11826] usb 2-1: 0:1 : does not exist [ 188.995968][T11826] usb 2-1: unit 0 not found! [ 189.009577][T15871] (syz.3.3500,15871,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 189.031504][T15869] device  entered promiscuous mode [ 189.073816][T15877] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3502'. [ 189.102249][T11826] usb 2-1: USB disconnect, device number 20 [ 189.355191][T15462] udevd[15462]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 189.500992][T15934] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 189.537486][T14607] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 189.791363][T15960] netlink: 'syz.0.3527': attribute type 4 has an invalid length. [ 189.918380][T15970] SET target dimension over the limit! [ 189.927768][T14607] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 189.947202][T14607] usb 4-1: config 8 has no interface number 0 [ 189.954094][T15963] loop2: detected capacity change from 0 to 4096 [ 189.968180][T14607] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 189.989731][T14607] usb 4-1: config 8 interface 177 has no altsetting 0 [ 189.999889][T15963] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 190.026624][T14607] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 190.055432][T14607] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.070765][T15984] overlayfs: empty lowerdir [ 190.117625][T15905] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 190.131924][T15963] ntfs3: loop2: Failed to load $Extend. [ 190.311270][T15999] tc_dump_action: action bad kind [ 190.388235][T14607] usb 4-1: string descriptor 0 read error: -71 [ 190.427341][ C1] ir_toy 4-1:8.177: out urb status: -71 [ 190.496098][T16020] cgroup: Name too long [ 190.563829][T16026] x_tables: unsorted entry at hook 1 [ 190.697422][T11825] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 190.911946][T16060] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3556'. [ 190.920802][T14607] ir_toy 4-1:8.177: could not write reset command: -110 [ 190.947452][ C1] ir_toy 4-1:8.177: failed to resubmit urb: -1 [ 190.957446][T14607] ir_toy: probe of 4-1:8.177 failed with error -110 [ 190.986969][T14607] usb 4-1: USB disconnect, device number 15 [ 191.057393][T11825] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 191.096710][T11825] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.115362][T11825] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 191.140046][T11825] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.186127][T11825] usb 3-1: config 0 descriptor?? [ 191.229153][T11825] hub 3-1:0.0: USB hub found [ 191.390504][T16118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3575'. [ 191.447640][T11825] hub 3-1:0.0: 1 port detected [ 191.667556][T11825] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 191.674068][T11825] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 191.694867][T16151] loop1: detected capacity change from 0 to 64 [ 191.755713][T16158] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3587'. [ 191.837569][T11825] usbhid 3-1:0.0: can't add hid device: -71 [ 191.843621][T11825] usbhid: probe of 3-1:0.0 failed with error -71 [ 191.849063][T16151] attempt to access beyond end of device [ 191.849063][T16151] loop1: rw=0, want=268435470, limit=64 [ 191.926659][T16151] Buffer I/O error on dev loop1, logical block 134217734, async page read [ 191.928215][T11825] usb 3-1: USB disconnect, device number 15 [ 191.975216][T16151] Trying to free block not in datazone [ 191.978171][T16177] loop3: detected capacity change from 0 to 256 [ 191.988350][T16175] loop4: detected capacity change from 0 to 256 [ 192.100139][T16175] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 192.115948][T16177] FAT-fs (loop3): Directory bread(block 64) failed [ 192.136791][T16175] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 192.145116][T16177] FAT-fs (loop3): Directory bread(block 65) failed [ 192.154441][T16198] netlink: 'syz.0.3598': attribute type 13 has an invalid length. [ 192.178815][T16177] FAT-fs (loop3): Directory bread(block 66) failed [ 192.187197][T16177] FAT-fs (loop3): Directory bread(block 67) failed [ 192.204648][T16177] FAT-fs (loop3): Directory bread(block 68) failed [ 192.321291][T16177] FAT-fs (loop3): Directory bread(block 69) failed [ 192.386068][T16177] FAT-fs (loop3): Directory bread(block 70) failed [ 192.428175][T16177] FAT-fs (loop3): Directory bread(block 71) failed [ 192.442434][T16177] FAT-fs (loop3): Directory bread(block 72) failed [ 192.451921][T16198] gretap0: refused to change device tx_queue_len [ 192.490876][T16198] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 192.504124][T16177] FAT-fs (loop3): Directory bread(block 73) failed [ 193.131701][T16247] loop0: detected capacity change from 0 to 4096 [ 193.179929][T16273] netlink: 'syz.3.3622': attribute type 5 has an invalid length. [ 193.191449][T16247] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 193.290711][T16273] device  entered promiscuous mode [ 193.367348][T16247] ntfs: (device loop0): parse_options(): NLS character set macgre˙ not found. Using previous one utf8. [ 193.397656][T16247] ntfs: (device loop0): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 193.444579][T16293] netlink: 'syz.1.3627': attribute type 1 has an invalid length. [ 193.456921][T16247] ntfs: (device loop0): read_ntfs_boot_sector(): Hot-fix: Recovery of primary boot sector failed: Read-only mount. [ 193.494304][T16247] ntfs: (device loop0): read_ntfs_boot_sector(): Using backup boot sector. [ 193.510766][T16293] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3627'. [ 193.533763][T16247] ntfs: volume version 3.1. [ 193.566147][T16290] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3626'. [ 193.805957][T16306] loop3: detected capacity change from 0 to 4096 [ 193.886531][T16306] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 193.938161][T16306] ntfs3: loop3: Failed to load $MFT. [ 193.980846][T16328] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3640'. [ 194.011248][T16334] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3641'. [ 194.213413][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.219915][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.297343][T11825] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 194.358276][T16354] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3647'. [ 194.389048][T16354] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.599785][T16376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3655'. [ 194.683996][T16306] loop3: detected capacity change from 0 to 32768 [ 194.699034][T11825] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 194.714129][T16306] XFS: attr2 mount option is deprecated. [ 194.723300][T11825] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.757038][T16306] XFS (loop3): invalid logbufsize: 14336 [not 16k,32k,64k,128k or 256k] [ 194.777697][T11825] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 194.837789][T11825] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.919209][T11825] hub 1-1:4.0: USB hub found [ 195.099092][T16419] netlink: 11 bytes leftover after parsing attributes in process `syz.3.3667'. [ 195.137638][T11825] hub 1-1:4.0: 4 ports detected [ 195.142575][T11825] usb 1-1: selecting invalid altsetting 1 [ 195.147640][T16421] tmpfs: Bad value for 'uid' [ 195.167922][T11825] hub 1-1:4.0: Using single TT (err -22) [ 195.207492][T11825] hub 1-1:4.0: insufficient power available to use all downstream ports [ 195.315834][T16436] comedi comedi0: adq12b: a I/O base address must be specified [ 195.338656][T11826] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 195.348556][T11825] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 195.355109][T11825] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 195.418245][T11825] usb 1-1: USB disconnect, device number 20 [ 195.503367][T16459] loop2: detected capacity change from 0 to 64 [ 195.577725][T11826] usb 2-1: Using ep0 maxpacket: 16 [ 195.605889][T16469] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3683'. [ 195.697595][T11826] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.721124][T11826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 255, changing to 11 [ 195.762354][T16482] netlink: 'syz.3.3687': attribute type 21 has an invalid length. [ 195.771685][T11826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 57872, setting to 1024 [ 195.791552][T16482] netlink: 'syz.3.3687': attribute type 1 has an invalid length. [ 195.802494][T11826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 195.817449][T16482] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3687'. [ 195.833717][T11826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 195.842605][T16490] loop4: detected capacity change from 0 to 512 [ 195.880473][T11826] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 195.886913][T16490] EXT4-fs (loop4): Ignoring removed orlov option [ 195.916399][T11826] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 195.939970][T11826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.955287][T16495] xt_TPROXY: Can be used only with -p tcp or -p udp [ 195.959178][T11826] usb 2-1: config 0 descriptor?? [ 195.963236][T16490] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 196.086146][T16490] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 196.105181][T16490] EXT4-fs error (device loop4): ext4_orphan_get:1432: comm syz.4.3690: bad orphan inode 4 [ 196.109690][T16511] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3693'. [ 196.120635][T16490] EXT4-fs (loop4): 1 orphan inode deleted [ 196.126138][T11826] rc_core: IR keymap rc-hauppauge not found [ 196.131812][T16490] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,jqfmt=vfsv1,noload,data_err=ignore,usrjquota="max_dir_size_kb=0x0000000000000002,max_dir_size_kb=0x0000000000000008,max_dir_size_kb=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 196.147351][T11826] Registered IR keymap rc-empty [ 196.207202][T11826] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 196.232979][T16490] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #2: block 4: comm syz.4.3690: lblock 0 mapped to illegal pblock 4 (length 1) [ 196.283811][T11826] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 196.287112][T16519] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 196.318136][T11826] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 196.339213][T11826] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input17 [ 196.375080][T11826] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 196.387303][ C0] mceusb 2-1:0.0: Error: urb status = -75 [ 196.387374][ T23] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 196.437509][T11826] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 196.487323][T11826] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 196.540407][T11826] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 196.567501][T11826] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 196.607477][T11826] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 196.644261][T11826] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 196.667428][T11826] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 196.697637][T11826] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 196.727366][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 196.767326][T11826] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 196.798565][T11826] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 196.798589][T11826] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 196.818335][T11826] usb 2-1: USB disconnect, device number 21 [ 196.867521][ T23] usb 3-1: config 0 has no interfaces? [ 197.058157][ T23] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 197.058196][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.058218][ T23] usb 3-1: Product: syz [ 197.058233][ T23] usb 3-1: Manufacturer: syz [ 197.058247][ T23] usb 3-1: SerialNumber: syz [ 197.060450][ T23] r8152-cfgselector 3-1: config 0 descriptor?? [ 197.328064][ T23] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 197.531421][T14607] usb 3-1: USB disconnect, device number 16 [ 198.027670][T11826] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 198.307391][T11826] usb 4-1: Using ep0 maxpacket: 16 [ 198.427633][T11826] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.456045][T11826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 255, changing to 11 [ 198.514377][T11826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 57872, setting to 1024 [ 198.546627][T11826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 198.591982][T11826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 198.635631][T11826] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 198.660962][T11826] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 198.703927][T11826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.745960][T11826] usb 4-1: config 0 descriptor?? [ 198.936687][T16789] __nla_validate_parse: 3 callbacks suppressed [ 198.936703][T16789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3758'. [ 198.957324][T11826] rc_core: IR keymap rc-hauppauge not found [ 198.963360][T11826] Registered IR keymap rc-empty [ 198.978257][T11826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 199.017563][T11826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 199.047450][T11825] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 199.058192][T11826] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 199.118670][T11826] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input18 [ 199.134266][T11826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 199.147337][ C0] mceusb 4-1:0.0: Error: urb status = -75 [ 199.177338][T11826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 199.217401][T11826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 199.247373][T11826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 199.287373][T11826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 199.297448][T11825] usb 1-1: Using ep0 maxpacket: 32 [ 199.326102][T11826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 199.347583][T11826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 199.377609][T11826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 199.407398][T11826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 199.417702][T11825] usb 1-1: config 2 has an invalid interface number: 105 but max is 0 [ 199.417730][T11825] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 199.417750][T11825] usb 1-1: config 2 has no interface number 0 [ 199.417774][T11825] usb 1-1: too many endpoints for config 2 interface 105 altsetting 118: 101, using maximum allowed: 30 [ 199.417806][T11825] usb 1-1: config 2 interface 105 altsetting 118 has 0 endpoint descriptors, different from the interface descriptor's value: 101 [ 199.417834][T11825] usb 1-1: config 2 interface 105 has no altsetting 0 [ 199.437517][T11826] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 199.468758][T11826] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 199.468786][T11826] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 199.473376][T11826] usb 4-1: USB disconnect, device number 16 [ 199.587907][T11825] usb 1-1: New USB device found, idVendor=22b8, idProduct=2d97, bcdDevice=51.64 [ 199.587942][T11825] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.587962][T11825] usb 1-1: Product: syz [ 199.587977][T11825] usb 1-1: Manufacturer: syz [ 199.587993][T11825] usb 1-1: SerialNumber: syz [ 199.844143][T14607] usb 1-1: USB disconnect, device number 21 [ 199.959433][T16881] xt_CT: You must specify a L4 protocol and not use inversions on it [ 200.116659][T16886] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 200.154941][T16886] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 200.162387][ C1] vkms_vblank_simulate: vblank timer overrun [ 200.191968][T16886] vhci_hcd vhci_hcd.0: Device attached [ 200.246990][T16898] libceph: resolve 'c' (ret=-3): failed [ 200.407446][ T23] vhci_hcd: vhci_device speed not set [ 200.421224][T16911] overlayfs: unrecognized mount option "fsname=\(([\," or missing value [ 200.429695][T16914] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3788'. [ 200.487381][ T23] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 200.604283][T16930] loop3: detected capacity change from 0 to 512 [ 200.717385][T16890] vhci_hcd: connection reset by peer [ 200.764201][ T4256] vhci_hcd: stop threads [ 200.782226][ T4256] vhci_hcd: release socket [ 200.824147][ T4256] vhci_hcd: disconnect device [ 201.143361][T16974] netlink: 'syz.0.3809': attribute type 5 has an invalid length. [ 201.189873][T16982] tmpfs: Bad value for 'mpol' [ 201.579897][T17028] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3824'. [ 201.603991][T17028] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3824'. [ 201.604267][T17028] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3824'. [ 201.604844][T17028] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3824'. [ 201.610194][T17028] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3824'. [ 201.610707][T17028] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3824'. [ 201.611073][T17028] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3824'. [ 201.611576][T17028] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3824'. [ 201.657964][T17032] set match dimension is over the limit! [ 201.852648][T17053] loop3: detected capacity change from 0 to 1024 [ 201.888612][T17059] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 201.970639][T11826] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 202.009557][T17053] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 202.126433][T17053] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,norecovery,resgid=0x0000000000000000,nojournal_checksum,grpjquota=,noauto_da_alloc,errors=remount-ro,delalloc,auto_da_alloc=0x0000000000000007,grpid,barrier=0x0000000000000007,max_batch_time=0x0000000000000005. Quota mode: none. [ 202.155293][ C1] vkms_vblank_simulate: vblank timer overrun [ 202.312990][T17053] EXT4-fs error (device loop3): ext4_append:79: inode #2: comm syz.3.3833: Logical block already allocated [ 202.367705][T11826] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 202.375873][T11826] usb 2-1: config 0 has no interface number 0 [ 202.415176][T17053] EXT4-fs (loop3): Remounting filesystem read-only [ 202.427676][T11826] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 202.479566][T11826] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 202.633339][T17105] netlink: 'syz.2.3850': attribute type 6 has an invalid length. [ 202.687545][T11826] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 202.704274][T11826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.707404][T17113] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 202.733582][T11826] usb 2-1: Product: syz [ 202.748499][T11826] usb 2-1: Manufacturer: syz [ 202.757885][T11826] usb 2-1: SerialNumber: syz [ 202.788312][T11826] usb 2-1: config 0 descriptor?? [ 202.817630][T17037] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 202.858654][T11826] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 202.911063][T11826] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 202.916725][T17127] overlayfs: workdir and upperdir must be separate subtrees [ 203.207400][ T4232] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 203.299478][T14607] usb 2-1: USB disconnect, device number 22 [ 203.343889][T14607] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 203.402433][T14607] cyberjack 2-1:0.69: device disconnected [ 203.409793][T17166] loop3: detected capacity change from 0 to 4096 [ 203.524534][T17166] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 203.667540][ T4232] usb 1-1: unable to get BOS descriptor or descriptor too short [ 203.777622][ T4232] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.849055][ T4232] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 203.874572][ T4232] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x81 has an invalid bInterval 37, changing to 7 [ 204.088192][ T4232] usb 1-1: New USB device found, idVendor=0582, idProduct=8782, bcdDevice= 0.54 [ 204.111994][ T4232] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.153291][ T4232] usb 1-1: Product: syz [ 204.176133][ T4232] usb 1-1: Manufacturer: syz [ 204.201353][ T4232] usb 1-1: SerialNumber: syz [ 204.206324][T17235] QAT: failed to copy from user cfg_data. [ 204.242710][T17239] xt_CT: You must specify a L4 protocol and not use inversions on it [ 204.266109][T17242] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 204.380491][T17250] netlink: 'syz.4.3891': attribute type 1 has an invalid length. [ 204.407040][T17242] CIFS mount error: No usable UNC path provided in device string! [ 204.407040][T17242] [ 204.428779][T17242] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 204.547715][ T4233] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 204.608421][T17266] device bond2 entered promiscuous mode [ 204.657496][ T4232] usb 1-1: Can't get UAC3 power state for id 11 [ 204.676371][T17266] 8021q: adding VLAN 0 to HW filter on device bond2 [ 204.705772][T17264] __nla_validate_parse: 12 callbacks suppressed [ 204.705791][T17264] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3894'. [ 204.749485][ T4232] usb 1-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x500, type = 4 [ 204.776361][ T4232] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 204.835063][ T4233] usb 2-1: Using ep0 maxpacket: 8 [ 204.852612][T17313] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3898'. [ 204.893339][T17313] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3898'. [ 204.927624][ T4232] usb 1-1: USB disconnect, device number 22 [ 205.147647][ T4233] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 205.177112][ T4233] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 205.206833][T17356] ieee802154 phy0 wpan0: encryption failed: -22 [ 205.207907][ T4233] usb 2-1: Product: syz [ 205.250969][ T4233] usb 2-1: Manufacturer: syz [ 205.256230][ T4233] usb 2-1: SerialNumber: syz [ 205.302810][ T4233] usb 2-1: config 0 descriptor?? [ 205.330229][T17368] loop4: detected capacity change from 0 to 1024 [ 205.364896][T17368] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 205.382541][T17368] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 205.392398][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 205.419997][ T4233] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 205.422849][T17368] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 205.444872][T17376] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (2) [ 205.454348][T17368] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 205.522129][T17368] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,sysvgroups,nomblk_io_submit,bsddf,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,errors=continue,,errors=continue. Quota mode: writeback. [ 205.617387][T11826] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 205.657499][ T23] vhci_hcd: vhci_device speed not set [ 205.807472][ T4233] gspca_zc3xx: reg_r err -71 [ 205.812283][ T4233] gspca_zc3xx: probe of 2-1:0.0 failed with error -71 [ 205.844127][ T4233] usb 2-1: USB disconnect, device number 23 [ 205.969344][T17418] libceph: secret too big 289 [ 205.993750][T11826] usb 4-1: config 240 has an invalid interface number: 145 but max is 0 [ 206.014168][T11826] usb 4-1: config 240 has no interface number 0 [ 206.032832][T11826] usb 4-1: config 240 interface 145 has no altsetting 0 [ 206.061108][T17421] loop0: detected capacity change from 0 to 2048 [ 206.105772][T17421] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 206.116014][T17429] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3927'. [ 206.217555][T11826] usb 4-1: New USB device found, idVendor=0cde, idProduct=0012, bcdDevice=6d.c2 [ 206.242710][T11826] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.264792][T17436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3928'. [ 206.273977][T11826] usb 4-1: Product: syz [ 206.283742][T11826] usb 4-1: Manufacturer: syz [ 206.288522][T11826] usb 4-1: SerialNumber: syz [ 206.380894][T17443] netlink: 'syz.1.3932': attribute type 3 has an invalid length. [ 206.414945][T17443] netlink: 'syz.1.3932': attribute type 3 has an invalid length. [ 206.577907][T11826] usb 4-1: Could not find all expected endpoints [ 206.629136][T11826] usb 4-1: USB disconnect, device number 17 [ 207.222038][T17553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3954'. [ 207.547331][ T23] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 207.563351][T17584] ieee802154 phy0 wpan0: encryption failed: -22 [ 207.640684][T17596] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 207.837616][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 207.921424][T17616] netlink: 'syz.4.3976': attribute type 3 has an invalid length. [ 207.977502][ T23] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 207.999249][ T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 127, changing to 10 [ 208.027762][ T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 208.069581][ T23] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 0 [ 208.308139][ T23] usb 1-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 208.328565][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.377117][ T23] usb 1-1: Product: syz [ 208.387787][ T23] usb 1-1: Manufacturer: syz [ 208.400525][ T23] usb 1-1: SerialNumber: syz [ 208.456185][T17654] sp0: Synchronizing with TNC [ 208.835390][T17714] device xfrm0 entered promiscuous mode [ 208.876359][ T23] ------------[ cut here ]------------ [ 208.904686][ T23] ODEBUG: free active (active state 0) object type: timer_list hint: snd_usbmidi_error_timer+0x0/0x660 [ 208.942792][ T23] WARNING: CPU: 1 PID: 23 at lib/debugobjects.c:521 debug_check_no_obj_freed+0x43c/0x530 [ 208.957717][ C0] ================================================================== [ 208.967276][ C0] BUG: KASAN: use-after-free in snd_usbmidi_error_timer+0x5fe/0x660 [ 208.975619][ C0] Read of size 1 at addr ffff888062a6a143 by task kworker/u4:0/9 [ 208.983709][ C0] [ 208.984155][ T23] Modules linked in: [ 208.986057][ C0] CPU: 0 PID: 9 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 208.991191][ T23] CPU: 1 PID: 23 Comm: kworker/1:1 Not tainted syzkaller #0 [ 208.997606][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 208.997628][ C0] Workqueue: bat_events batadv_nc_worker [ 208.997664][ C0] Call Trace: [ 208.997673][ C0] [ 208.997682][ C0] dump_stack_lvl+0x188/0x250 [ 208.997704][ C0] ? show_regs_print_info+0x20/0x20 [ 208.997723][ C0] ? load_image+0x400/0x400 [ 208.997737][ C0] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 208.997760][ C0] print_address_description+0x60/0x2d0 [ 208.997777][ C0] ? snd_usbmidi_error_timer+0x5fe/0x660 [ 208.997793][ C0] kasan_report+0xdf/0x130 [ 208.997812][ C0] ? snd_usbmidi_error_timer+0x5fe/0x660 [ 208.997831][ C0] snd_usbmidi_error_timer+0x5fe/0x660 [ 208.997849][ C0] ? __snd_usbmidi_create+0x3040/0x3040 [ 208.997865][ C0] call_timer_fn+0x17b/0x540 [ 208.997884][ C0] ? __snd_usbmidi_create+0x3040/0x3040 [ 209.005864][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 209.015640][ C0] ? __run_timers+0x800/0x800 [ 209.015680][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 209.015698][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 209.015716][ C0] ? __snd_usbmidi_create+0x3040/0x3040 [ 209.015736][ C0] __run_timers+0x53e/0x800 [ 209.049248][ T23] Workqueue: usb_hub_wq hub_event [ 209.054430][ C0] ? detach_timer+0x2b0/0x2b0 [ 209.054462][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 209.060313][ T23] [ 209.064777][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 209.064808][ C0] ? ktime_get_real_ts64+0x440/0x440 [ 209.064831][ C0] run_timer_softirq+0x63/0xf0 [ 209.076989][ T23] RIP: 0010:debug_check_no_obj_freed+0x43c/0x530 [ 209.081776][ C0] handle_softirqs+0x339/0x830 [ 209.081805][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 209.081826][ C0] ? do_softirq+0x210/0x210 [ 209.081850][ C0] __irq_exit_rcu+0x13b/0x230 [ 209.081867][ C0] ? irq_exit_rcu+0x20/0x20 [ 209.081893][ C0] irq_exit_rcu+0x5/0x20 [ 209.087693][ T23] Code: ef e8 d8 d1 d5 fd 4c 8b 45 00 48 c7 c7 60 07 7a 8a 48 c7 c6 20 04 7a 8a 48 c7 c2 c0 08 7a 8a 8b 0c 24 4d 89 e9 e8 b4 67 c9 05 <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 65 a2 a1 [ 209.092112][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 209.092145][ C0] [ 209.092153][ C0] [ 209.102975][ T23] RSP: 0018:ffffc90000ddea18 EFLAGS: 00010246 [ 209.107040][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 209.107069][ C0] RIP: 0010:lock_release+0x10c/0x8a0 [ 209.112948][ T23] [ 209.117605][ C0] Code: 65 8b 05 57 e5 a4 7e 85 c0 0f 85 aa 04 00 00 65 48 8b 1d c7 db a4 7e 4c 8d b3 ec 0a 00 00 4c 89 f0 48 c1 e8 03 42 0f b6 04 28 <84> c0 0f 85 47 05 00 00 41 83 3e 00 0f 85 7d 04 00 00 48 89 5c 24 [ 209.117625][ C0] RSP: 0018:ffffc90000ce7ac0 EFLAGS: 00000a03 [ 209.117643][ C0] RAX: 0000000000000000 RBX: ffff88813fe90000 RCX: 1eed685fc78c3b00 [ 209.117656][ C0] RDX: 0000000000000000 RSI: ffffffff8a79fe20 RDI: ffffffff8a79fde0 [ 209.117668][ C0] RBP: ffffc90000ce7bd0 R08: ffffffff8d89f06f R09: 1ffffffff1b13e0d [ 209.117680][ C0] R10: dffffc0000000000 R11: fffffbfff1b13e0e R12: 1ffff9200019cf64 [ 209.117692][ C0] R13: dffffc0000000000 R14: ffff88813fe90aec R15: ffff88814777d410 [ 209.117723][ C0] ? rcu_lock_release+0x5/0x20 [ 209.117747][ C0] ? read_lock_is_recursive+0x10/0x10 [ 209.117770][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 209.117789][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 209.117816][ C0] batadv_nc_worker+0x25b/0x5c0 [ 209.117842][ C0] process_one_work+0x85f/0x1010 [ 209.117876][ C0] ? worker_detach_from_pool+0x240/0x240 [ 209.117893][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 209.117917][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 209.117934][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 209.117951][ C0] ? wq_worker_running+0x97/0x170 [ 209.117970][ C0] worker_thread+0xaa6/0x1290 [ 209.118009][ C0] kthread+0x436/0x520 [ 209.128515][ T23] RAX: 7c188e405a580500 RBX: ffffffff964a5b78 RCX: 0000000000100000 [ 209.133296][ C0] ? rcu_lock_release+0x20/0x20 [ 209.133322][ C0] ? kthread_blkcg+0xd0/0xd0 [ 209.133341][ C0] ret_from_fork+0x1f/0x30 [ 209.133373][ C0] [ 209.139022][ T23] RDX: ffffc900147d9000 RSI: 000000000004e5a7 RDI: 000000000004e5a8 [ 209.144312][ C0] [ 209.144319][ C0] Allocated by task 23: [ 209.144329][ C0] __kasan_kmalloc+0xb5/0xf0 [ 209.144351][ C0] snd_usbmidi_in_endpoint_create+0x7e/0xa20 [ 209.146794][ T23] RBP: ffffffff8a2ca8e0 R08: ffff8880b9133d7f R09: 1ffff110172267af [ 209.151505][ C0] __snd_usbmidi_create+0x1791/0x3040 [ 209.151524][ C0] usb_audio_probe+0xb97/0x1d90 [ 209.151547][ C0] usb_probe_interface+0x5c5/0xb20 [ 209.151565][ C0] really_probe+0x284/0xc80 [ 209.151580][ C0] __driver_probe_device+0x18c/0x330 [ 209.151595][ C0] driver_probe_device+0x4f/0x420 [ 209.158542][ T23] R10: dffffc0000000000 R11: ffffed10172267b0 R12: ffff888020e84400 [ 209.161962][ C0] __device_attach_driver+0x2b0/0x500 [ 209.161987][ C0] bus_for_each_drv+0x184/0x210 [ 209.162005][ C0] __device_attach+0x2a8/0x480 [ 209.169806][ T23] R13: ffffffff87d09170 R14: ffff888020e84000 R15: ffff888020e84040 [ 209.173251][ C0] bus_probe_device+0xbc/0x1e0 [ 209.173283][ C0] device_add+0xa00/0xfb0 [ 209.173298][ C0] usb_set_configuration+0x1991/0x1fd0 [ 209.178639][ T23] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 209.182640][ C0] usb_generic_driver_probe+0x89/0x150 [ 209.182663][ C0] usb_probe_device+0x139/0x270 [ 209.182678][ C0] really_probe+0x284/0xc80 [ 209.182693][ C0] __driver_probe_device+0x18c/0x330 [ 209.182708][ C0] driver_probe_device+0x4f/0x420 [ 209.182724][ C0] __device_attach_driver+0x2b0/0x500 [ 209.188266][ T23] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 209.191910][ C0] bus_for_each_drv+0x184/0x210 [ 209.191939][ C0] __device_attach+0x2a8/0x480 [ 209.191953][ C0] bus_probe_device+0xbc/0x1e0 [ 209.196447][ T23] CR2: 00007fd5b92b3f00 CR3: 00000000255db000 CR4: 00000000003506e0 [ 209.216759][ C0] device_add+0xa00/0xfb0 [ 209.216792][ C0] usb_new_device+0xd65/0x1660 [ 209.216809][ C0] hub_event+0x2e4a/0x55e0 [ 209.216822][ C0] process_one_work+0x85f/0x1010 [ 209.216838][ C0] worker_thread+0xaa6/0x1290 [ 209.216852][ C0] kthread+0x436/0x520 [ 209.216866][ C0] ret_from_fork+0x1f/0x30 [ 209.216883][ C0] [ 209.216888][ C0] Freed by task 23: [ 209.216898][ C0] kasan_set_track+0x4b/0x70 [ 209.216914][ C0] kasan_set_free_info+0x1f/0x40 [ 209.216930][ C0] ____kasan_slab_free+0xd5/0x110 [ 209.239833][ T23] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 209.242168][ C0] slab_free_freelist_hook+0xea/0x170 [ 209.242194][ C0] kfree+0xef/0x2a0 [ 209.242209][ C0] snd_usbmidi_rawmidi_free+0xaa/0x150 [ 209.269966][ T23] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 209.270483][ C0] snd_rawmidi_free+0x3b7/0x3e0 [ 209.276956][ T23] Call Trace: [ 209.285298][ C0] snd_rawmidi_dev_free+0x34/0x40 [ 209.285319][ C0] __snd_device_free+0x1cd/0x2e0 [ 209.285335][ C0] snd_device_free_all+0xcb/0x180 [ 209.285348][ C0] release_card_device+0x6d/0x1f0 [ 209.285366][ C0] device_release+0x92/0x1c0 [ 209.285383][ C0] kobject_put+0x21d/0x460 [ 209.285397][ C0] snd_card_free+0x14b/0x1e0 [ 209.285412][ C0] usb_audio_probe+0x18bd/0x1d90 [ 209.285428][ C0] usb_probe_interface+0x5c5/0xb20 [ 209.285444][ C0] really_probe+0x284/0xc80 [ 209.285457][ C0] __driver_probe_device+0x18c/0x330 [ 209.285471][ C0] driver_probe_device+0x4f/0x420 [ 209.285487][ C0] __device_attach_driver+0x2b0/0x500 [ 209.285501][ C0] bus_for_each_drv+0x184/0x210 [ 209.285516][ C0] __device_attach+0x2a8/0x480 [ 209.285528][ C0] bus_probe_device+0xbc/0x1e0 [ 209.285542][ C0] device_add+0xa00/0xfb0 [ 209.285556][ C0] usb_set_configuration+0x1991/0x1fd0 [ 209.307789][ T23] [ 209.310131][ C0] usb_generic_driver_probe+0x89/0x150 [ 209.310175][ C0] usb_probe_device+0x139/0x270 [ 209.318995][ T23] slab_free_freelist_hook+0x8b/0x170 [ 209.323811][ C0] really_probe+0x284/0xc80 [ 209.323833][ C0] __driver_probe_device+0x18c/0x330 [ 209.323849][ C0] driver_probe_device+0x4f/0x420 [ 209.354669][ T23] ? snd_rawmidi_free+0x3b7/0x3e0 [ 209.356172][ C0] __device_attach_driver+0x2b0/0x500 [ 209.356194][ C0] bus_for_each_drv+0x184/0x210 [ 209.361917][ T23] kfree+0xef/0x2a0 [ 209.366658][ C0] __device_attach+0x2a8/0x480 [ 209.366677][ C0] bus_probe_device+0xbc/0x1e0 [ 209.366693][ C0] device_add+0xa00/0xfb0 [ 209.366708][ C0] usb_new_device+0xd65/0x1660 [ 209.366725][ C0] hub_event+0x2e4a/0x55e0 [ 209.373122][ T23] ? ch345_broken_sysex_input+0x490/0x490 [ 209.377445][ C0] process_one_work+0x85f/0x1010 [ 209.377468][ C0] worker_thread+0xaa6/0x1290 [ 209.377483][ C0] kthread+0x436/0x520 [ 209.377501][ C0] ret_from_fork+0x1f/0x30 [ 209.377522][ C0] [ 209.377528][ C0] The buggy address belongs to the object at ffff888062a6a000 [ 209.377528][ C0] which belongs to the cache kmalloc-512 of size 512 [ 209.377542][ C0] The buggy address is located 323 bytes inside of [ 209.377542][ C0] 512-byte region [ffff888062a6a000, ffff888062a6a200) [ 209.377559][ C0] The buggy address belongs to the page: [ 209.377577][ C0] page:ffffea00018a9a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888062a6a800 pfn:0x62a68 [ 209.377597][ C0] head:ffffea00018a9a00 order:2 compound_mapcount:0 compound_pincount:0 [ 209.377613][ C0] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 209.377643][ C0] raw: 00fff00000010200 ffffea0001833908 ffffea000091da08 ffff888016c41c80 [ 209.377659][ C0] raw: ffff888062a6a800 000000000010000d 00000001ffffffff 0000000000000000 [ 209.377668][ C0] page dumped because: kasan: bad access detected [ 209.377681][ C0] page_owner tracks the page as allocated [ 209.377688][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4183, ts 50943584589, free_ts 50943544129 [ 209.377713][ C0] get_page_from_freelist+0x1bbd/0x1ca0 [ 209.377733][ C0] __alloc_pages+0x1ee/0x480 [ 209.377747][ C0] new_slab+0xc0/0x4b0 [ 209.377762][ C0] ___slab_alloc+0x80a/0xdd0 [ 209.387104][ T23] snd_rawmidi_free+0x3b7/0x3e0 [ 209.394567][ C0] kmem_cache_alloc_trace+0x1a5/0x2a0 [ 209.394596][ C0] __ipv6_dev_mc_inc+0x3fa/0xa90 [ 209.394612][ C0] ipv6_add_dev+0xcd8/0x1190 [ 209.394626][ C0] addrconf_notify+0x66f/0xf00 [ 209.394642][ C0] raw_notifier_call_chain+0xcb/0x160 [ 209.394658][ C0] register_netdevice+0x12a6/0x1710 [ 209.394676][ C0] hsr_dev_finalize+0x5f6/0x870 [ 209.400412][ T23] snd_rawmidi_dev_free+0x34/0x40 [ 209.404289][ C0] hsr_newlink+0x637/0x6f0 [ 209.404312][ C0] rtnl_newlink+0x1359/0x1a50 [ 209.404330][ C0] rtnetlink_rcv_msg+0x844/0xf30 [ 209.409639][ T23] __snd_device_free+0x1cd/0x2e0 [ 209.412134][ C0] netlink_rcv_skb+0x1f5/0x440 [ 209.412156][ C0] netlink_unicast+0x774/0x920 [ 209.412171][ C0] page last free stack trace: [ 209.412178][ C0] free_unref_page_prepare+0x637/0x6c0 [ 209.412198][ C0] free_unref_page+0x8f/0x2a0 [ 209.421009][ T23] snd_device_free_all+0xcb/0x180 [ 209.422496][ C0] stack_depot_save+0x418/0x440 [ 209.422519][ C0] __kasan_slab_alloc+0xb3/0xd0 [ 209.422542][ C0] slab_post_alloc_hook+0x4c/0x380 [ 209.426796][ T23] ? snd_mixer_oss_ioctl1+0x1640/0x1640 [ 209.431274][ C0] kmem_cache_alloc+0x100/0x290 [ 209.431291][ C0] __debug_object_init+0x8fe/0xc80 [ 209.431305][ C0] __ipv6_dev_mc_inc+0x417/0xa90 [ 209.431326][ C0] ipv6_add_dev+0xcc9/0x1190 [ 209.431342][ C0] addrconf_notify+0x66f/0xf00 [ 209.431357][ C0] raw_notifier_call_chain+0xcb/0x160 [ 209.431374][ C0] register_netdevice+0x12a6/0x1710 [ 209.431391][ C0] hsr_dev_finalize+0x5f6/0x870 [ 209.431408][ C0] hsr_newlink+0x637/0x6f0 [ 209.431422][ C0] rtnl_newlink+0x1359/0x1a50 [ 209.431438][ C0] rtnetlink_rcv_msg+0x844/0xf30 [ 209.431455][ C0] [ 209.431459][ C0] Memory state around the buggy address: [ 209.431469][ C0] ffff888062a6a000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 209.431480][ C0] ffff888062a6a080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 209.431491][ C0] >ffff888062a6a100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 209.431500][ C0] ^ [ 209.431510][ C0] ffff888062a6a180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 209.431519][ C0] ffff888062a6a200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 209.431527][ C0] ================================================================== [ 209.431533][ C0] Disabling lock debugging due to kernel taint [ 209.431638][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 209.439780][ T23] release_card_device+0x6d/0x1f0 [ 209.445758][ C0] CPU: 0 PID: 9 Comm: kworker/u4:0 Tainted: G B syzkaller #0 [ 209.445783][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 209.445793][ C0] Workqueue: bat_events batadv_nc_worker [ 209.445816][ C0] Call Trace: [ 209.445825][ C0] [ 209.445832][ C0] dump_stack_lvl+0x188/0x250 [ 209.473546][ T23] ? snd_power_wait+0x80/0x80 [ 209.476614][ C0] ? show_regs_print_info+0x20/0x20 [ 209.476644][ C0] ? load_image+0x400/0x400 [ 209.488339][ T23] device_release+0x92/0x1c0 [ 209.493600][ C0] panic+0x2e5/0x810 [ 209.493627][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 209.499477][ T23] kobject_put+0x21d/0x460 [ 209.503724][ C0] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 209.503749][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 209.512649][ T23] snd_card_free+0x14b/0x1e0 [ 209.516891][ C0] ? _raw_spin_unlock+0x40/0x40 [ 209.516922][ C0] ? snd_usbmidi_error_timer+0x5fe/0x660 [ 209.516939][ C0] check_panic_on_warn+0x80/0xa0 [ 209.521733][ T23] ? snd_card_free_on_error+0x220/0x220 [ 209.526712][ C0] ? snd_usbmidi_error_timer+0x5fe/0x660 [ 209.526734][ C0] end_report+0x6d/0xf0 [ 209.526750][ C0] kasan_report+0x102/0x130 [ 209.537635][ T23] ? try_to_register_card+0x2c9/0x350 [ 209.542607][ C0] ? snd_usbmidi_error_timer+0x5fe/0x660 [ 209.548292][ T23] ? usb_match_one_id+0x649/0x970 [ 209.552633][ C0] snd_usbmidi_error_timer+0x5fe/0x660 [ 209.552659][ C0] ? __snd_usbmidi_create+0x3040/0x3040 [ 209.558419][ T23] ? snd_usb_create_quirk+0x59/0x100 [ 209.563060][ C0] call_timer_fn+0x17b/0x540 [ 209.563092][ C0] ? __snd_usbmidi_create+0x3040/0x3040 [ 209.563108][ C0] ? __run_timers+0x800/0x800 [ 209.563128][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 209.569123][ T23] usb_audio_probe+0x18bd/0x1d90 [ 209.575367][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 209.575400][ C0] ? __snd_usbmidi_create+0x3040/0x3040 [ 209.575419][ C0] __run_timers+0x53e/0x800 [ 209.580811][ T23] ? snd_usb_autosuspend+0x1b0/0x1b0 [ 209.585552][ C0] ? detach_timer+0x2b0/0x2b0 [ 209.585582][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 209.592008][ T23] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 209.598637][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 209.598663][ C0] ? ktime_get_real_ts64+0x440/0x440 [ 209.598678][ C0] run_timer_softirq+0x63/0xf0 [ 209.598697][ C0] handle_softirqs+0x339/0x830 [ 209.598716][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 209.603622][ T23] ? pm_runtime_enable+0x1b8/0x300 [ 209.607788][ C0] ? do_softirq+0x210/0x210 [ 209.607813][ C0] __irq_exit_rcu+0x13b/0x230 [ 209.607831][ C0] ? irq_exit_rcu+0x20/0x20 [ 209.612590][ T23] usb_probe_interface+0x5c5/0xb20 [ 209.617136][ C0] irq_exit_rcu+0x5/0x20 [ 209.617154][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 209.622120][ T23] ? usb_register_driver+0x3d0/0x3d0 [ 209.625862][ C0] [ 209.625869][ C0] [ 209.625876][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 209.631032][ T23] really_probe+0x284/0xc80 [ 209.632841][ C0] RIP: 0010:lock_release+0x10c/0x8a0 [ 209.632867][ C0] Code: 65 8b 05 57 e5 a4 7e 85 c0 0f 85 aa 04 00 00 65 48 8b 1d c7 db a4 7e 4c 8d b3 ec 0a 00 00 4c 89 f0 48 c1 e8 03 42 0f b6 04 28 <84> c0 0f 85 47 05 00 00 41 83 3e 00 0f 85 7d 04 00 00 48 89 5c 24 [ 209.632882][ C0] RSP: 0018:ffffc90000ce7ac0 EFLAGS: 00000a03 [ 209.636827][ T23] __driver_probe_device+0x18c/0x330 [ 209.641278][ C0] [ 209.641288][ C0] RAX: 0000000000000000 RBX: ffff88813fe90000 RCX: 1eed685fc78c3b00 [ 209.641303][ C0] RDX: 0000000000000000 RSI: ffffffff8a79fe20 RDI: ffffffff8a79fde0 [ 209.641313][ C0] RBP: ffffc90000ce7bd0 R08: ffffffff8d89f06f R09: 1ffffffff1b13e0d [ 209.641323][ C0] R10: dffffc0000000000 R11: fffffbfff1b13e0e R12: 1ffff9200019cf64 [ 209.641333][ C0] R13: dffffc0000000000 R14: ffff88813fe90aec R15: ffff88814777d410 [ 209.641354][ C0] ? rcu_lock_release+0x5/0x20 [ 209.641376][ C0] ? read_lock_is_recursive+0x10/0x10 [ 209.641395][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 209.641412][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 209.641434][ C0] batadv_nc_worker+0x25b/0x5c0 [ 209.641451][ C0] process_one_work+0x85f/0x1010 [ 209.641476][ C0] ? worker_detach_from_pool+0x240/0x240 [ 209.641492][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 209.641513][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 209.641531][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 209.641549][ C0] ? wq_worker_running+0x97/0x170 [ 209.641566][ C0] worker_thread+0xaa6/0x1290 [ 209.641591][ C0] kthread+0x436/0x520 [ 209.641604][ C0] ? rcu_lock_release+0x20/0x20 [ 209.648621][ T23] driver_probe_device+0x4f/0x420 [ 209.651859][ C0] ? kthread_blkcg+0xd0/0xd0 [ 209.651888][ C0] ret_from_fork+0x1f/0x30 [ 209.660504][ T23] __device_attach_driver+0x2b0/0x500 [ 209.665318][ C0] [ 209.665708][ C0] Kernel Offset: disabled [ 210.746673][ C0] Rebooting in 86400 seconds..